last executing test programs: 10.149671036s ago: executing program 0 (id=1): writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x1, 0x3f01550f) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/248, 0xf8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xa}, 0x3) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xd0008}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x80000000}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x2}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0x5e, 0x0, "c378a8dfb4465f7d2b90e7016061816d9f42391131d4620f3770bf93a3500ba1d06f08242d98816f4a8ade88780907167882bad7afad4dbef1660e7598a35811c492339e7e02514932a4ddfd264457777805c7bbd3188a792df4"}, @NET_DM_ATTR_UNSPEC={0x63, 0x0, "353a743227dac637f194648001e09a5111d57b180d2e2f2f1c4d8b8c6f18795f1bac1e071ddb1ad1cac268dfa7d263fc3f9a2fb72d8710d0c50d1656e0c916d78d2e02ae06d869bb5c329cc420743acd911e5c8d49b6e2d0a71d4abd945cb5"}]}, 0xec}, 0x1, 0x0, 0x0, 0x24040895}, 0x20008880) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 10.003161776s ago: executing program 1 (id=5): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x20, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x302) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) msgget$auto(0xc, 0x77d9) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r2) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x202000c, 0x9, 0xeb1, r5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) 8.515189944s ago: executing program 0 (id=6): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xf0ee66fb4bcf069c, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9489, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@nested={0x77, 0x104, 0x0, 0x1, [@generic="2b41f0a940972a697d969291346305a558d61b0532ca4c45884e6ecc08f28cdd6d21fe6f91f57247eeacd9873d6628ce49e4a0d7eb79136ef67b6a", @nested={0x4, 0x49}, @nested={0x4, 0x48}, @typed={0x4, 0x126}, @typed={0x8, 0xdf, 0x0, 0x0, @pid}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@mcast1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 8.368808295s ago: executing program 1 (id=7): signalfd$auto(0xffffffffffffffff, &(0x7f0000000140)={0x3}, 0xf96) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) futimesat$auto(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10001, 0x6}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0x9, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x62, 0x8002001f, 0x79d, 0x6d3e, 0xc, 0x6, 0x9]}, 0x0) sysfs$auto(0xffffffff, 0xd, 0x0) getsockopt$auto(0xffffffffffffffff, 0x40000000029, 0x20, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) 7.157458207s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x11) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r0) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c020800914d4d7ff5d12d116f354288b2dc962da11cbe50d2486a1c8c07948904c5334ee6265c92457ed9ba79ad96ae1589c7469bbaaac8ede4d995a734644f1214e1994eee909ca7fbff96c6801fa929b22027b32a7494570880865827aaa28a12c9fd177b", @ANYRES16=r2, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0xac590e70c91a13bf}, 0x4000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(r1, r0, 0x443) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) semctl$auto(0xc00, 0x1, 0xffffffe7, 0xa2) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_RINGS_RX_PUSH={0x5}]}, 0x34}}, 0x80000) r4 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f00000000c0), 0x171700, 0x0) read$auto(r4, &(0x7f0000000040)='!\xe4-/}\\h\xd7:-@[}.\x00', 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r5, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, r1, 0x8000) socket(0x2, 0x801, 0x106) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x2, 0x83, 0x1, &(0x7f0000000100)=0x7) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x401, 0xe000000000000, 0x3fed798b, 0x15, r5, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x40200, 0x118) 6.842035737s ago: executing program 1 (id=10): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0x6, 0x0, 0x9, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) migrate_pages$auto(0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x38e90acd, 0xeb1, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x100040eb1, 0xffffffffffffffff, 0x300000000002) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x20000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400000000, 0x3, 0x18, 0xffffffffffffffff, 0x8005) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) symlink$auto(0x0, &(0x7f0000000000)='\'--[[\x14+\\\x00') prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x0, 0x3, 0x0, 0x6, 0x3) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) 6.646026135s ago: executing program 3 (id=11): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xebd, r4, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) 6.052480849s ago: executing program 0 (id=12): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x10001, 0x400002, 0x400000040eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0xc400, 0xea) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x35b2f44e, 0x948b, 0x3, 0x15f4da07, 0x3, 0x2, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0xffff, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) statmount$auto(&(0x7f0000000140)={0x9, @inferred=r2, 0x2, 0x3ff, 0x7f}, 0x0, 0x40, 0x36) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0x27, 0x5, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x68d80, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) 6.050223041s ago: executing program 2 (id=13): r0 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x62) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x7fffffff) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x4, 0xffffffffffffffff) 4.655614665s ago: executing program 2 (id=14): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x400d, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/bInterfaceSubClass\x00', 0x90080, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0x10000000d, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x147602, 0x0) mmap$auto(0x2000000000000000, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.507581772s ago: executing program 3 (id=15): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.189773191s ago: executing program 1 (id=16): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x567) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r2) sendmsg$auto_NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0080000", @ANYRES16=r4, @ANYBLOB="20002cbd7000ffdbdf2513000000080001000300000005000c000100000005000b000500000005000b000500000008001d00ff0100009b001f0039e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c00050010006a000000"], 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x1c002000, 0x0, 0x15, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000080)={0x9687, 0xf4240}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r5 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r5, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x15, 0x5, 0x0) setsockopt$auto(r6, 0x114, 0x8, 0x0, 0x4) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.928106068s ago: executing program 0 (id=17): mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0xfffffffffffffffc) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000000c0)=""/45, 0x2d) keyctl$auto(0x3, 0x1, 0x0, 0x3, 0x3ff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x5, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x2001, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = io_uring_setup$auto(0x6, &(0x7f0000000180)={0x9, 0x7, 0x10, 0x1cb0e90d, 0x8001, 0x80, r1, [0x7, 0x9, 0x9], {0x98a6686, 0x0, 0x80000400, 0x6, 0x1, 0x2, 0x6, 0x101, 0x2}, {0x3, 0xa, 0x676, 0xa, 0x5, 0x1000, 0x1, 0x3, 0x2}}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x302, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = waitid$auto(0x42, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x2, 0x7d2, 0xd5ae, @_sigfault={&(0x7f00000000c0)="4ba6a403b94fd1f75aa81163a7af0e349a8b2abe5e6c7fbf7c5082a67f38520dbdc7692997aa45e63b6b16e806371967f4d563fcf251b4a49080e02c5463c66752df", @_addr_lsb=0x8}}}, 0x2, &(0x7f00000002c0)={{0x0, 0xffffffffffffffff}, {0x4e, 0x7}, 0x7f, 0x9, 0x6, 0x3fffffff80000000, 0x800, 0x7, 0x7, 0x7, 0x9, 0x3, 0x10001, 0x9577, 0x6, 0x9}) r6 = geteuid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000001200)={0x1, 0x8000000000000001, 0xfffffffffffffb52, 0x3ff, r6, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x6, 0x8000000000000000, 0x5, 0x7f, 0x100000001}) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000380)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r5, r6}}}, 0x0) setreuid$auto(0x3, 0x7) setreuid$auto(0x3, 0x7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000", @ANYRESOCT=r2, @ANYBLOB="01002dbd7000fce34ae501000000"], 0x14}, 0x1, 0x68, 0x0, 0x4008001}, 0x0) 3.488567395s ago: executing program 0 (id=18): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.042751302s ago: executing program 1 (id=19): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) r1 = getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r1, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48045, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) madvise$auto(0x0, 0x200007, 0x19) pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x73) 3.000630553s ago: executing program 3 (id=20): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020008, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.524177198s ago: executing program 2 (id=21): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) epoll_create$auto(0x8) socket(0xa, 0x1, 0x84) mq_open$auto(&(0x7f00000003c0)='\\*)A\x00\xbdj@l\xfe\xdf\xaa\xebN\x10\xd9\x83\xa4<\'7\x12f\n\xc8\xda;\xc8Iv\f\xd1\xc3\xd5~\xf5?0k\xd0\xbeTH\xed\x89\x11\xe9 Z\x00P(\x92N\xf33Kx\vQ\xf2yI\xd8Mp\x86\x9aRCB\xd2\xc0\x83j\x04\xe1r\x94\x19N\xc9\x8a\x11\x06\xf2\xdb\xb2\"\\\xd03V\xcbL\x88\xf8\x05\x00\x00\x00Cz\xab}\r\x8ac\xfb5\xae\xd6t\xa0v3\x97\xd8\xf4\x1a\xc40j\x9b\xe1\x99l\xae\x91&\x91\xc7\x98A\xc4\x94\xd4)j\b\xf4J@s\xff\xe6\xa3\xd3\xf6\x12\xd0yf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0000024", @ANYRES16=r5, @ANYBLOB="20002cbd7000ffdbdf2513000000080001000300000005000c000100000005000b000500000005000b000500000008001d00ff0100009b001f0039e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c00050010006a000000"], 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.164149036s ago: executing program 2 (id=23): pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto_F_SETOWN_EX(r1, 0xf, 0x25) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioperm$auto(0x800, 0x6, 0xf) capget$auto(&(0x7f0000000080)={0xdcd9}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) io_setup$auto(0x2, 0x0) mlockall$auto(0x7) setsockopt$auto(0xffffffffffffffff, 0x1ff, 0x4, &(0x7f0000000000)='@#&]*:{\x00', 0xd) socket(0x23, 0x80805, 0x0) io_setup$auto(0x5, &(0x7f0000000240)=0x2) r4 = userfaultfd$auto(0x3) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x11, 0x3, 0x2) getsockopt$auto(r5, 0x107, 0xf, 0x0, 0x0) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x10000000009, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r4) 911.779105ms ago: executing program 1 (id=24): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0xf000) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 909.604861ms ago: executing program 0 (id=25): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3c, 0x4, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000080)='[\x00\xccE\xfeS<\xe5\x9e\x14\xdf\xf1\"\xf8\x00\x00\x00\x00\x00\x00\x00\xad\x92\x8f\xe9\x98\xecVQ\x9a\xde\xf1l\xff\xb6\xd1p\x11\x7f\x16y\x9a\x11/s{L\x97\xf3\x9ai\xca\xe4\xa1\xe1\xd5\xcdp\x9c\xe9\f\xe0\xfc\xb2^\xa0]\xb2\xb5%\x19\x9d\xc5\x88\xd3?\xbf\xb2D\xdf\xf6\xa7\"Jt\xd1\xa9\x94\xb2\xb0\x03\xadkW\x02\xe8&\\\x1c\xee^1p\xf2o\xefXEYR\xc3\xf4\xbf\x80C\xc2?\x9e\xe1\x11{}\x8b\xfbf', 0x80) io_uring_setup$auto(0x101, 0x0) close_range$auto(r0, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2a, 0x5, 0x1) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r4, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x4, 0x15f4da06, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC, @ANYRES64=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r5, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/video30/dev_debug\x00', 0x129102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 751.040752ms ago: executing program 2 (id=26): statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x6, 0x5, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x50a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\x01\x00\x00\a\x00\x00', 0x81) close_range$auto(r0, r0, 0x255) landlock_create_ruleset$auto(&(0x7f0000000080)={0x6, 0x800000000000400, 0x7}, 0x5, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4ce90000", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2502000000080003000400000008000200ec02000008000100ffff0000080002000000000008000300ffffffff080002000600000008000200ff010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r3, @ANYBLOB="000108000000ffdbdf25060000006801018056000100f80e39539ee2008983f1973ff1d0b3f7b3796fbb20e14e93cb3417dca9c4e79f026be071e6ed85b2c52b3624256769519524cc8bb79c8c4cf892e9171c0a3bb39d8fcf41c5c2a7603e6f444a2e4072bf1052000008000200485352008800010032972493f9b53f6f781e811272ef1a54af0ce2125b63c5ccf8e82897cdec9f132574eedc4b8c20909d212cb40ef3238bfc2326d5246d1bac74348f4df9b285c2f69bfdd992de44209f195b7a9ecc6342fe4892063e9d855f55e3f5c6ea77602e87a4a69498b14ae9483bd3fb3c457d254790f50d9529dd74133c7122168ddd70115de6117a000100774439d393c756f922e211d8abe8b142d5f6bcd4fcce43aacc7931bfd7e8db552580ddb6ae3e770ab3d721c2d34fae95cbdfd47f98f1abebab5a6d24ae5ad3b8e053ffce768f7d4db4ed1cee0da3e55935429086b8e0eacd1469b4341e35064a1e6d53242d9fb505ac5453e10d5f532f707e27d78453a4130000a7c6c879668df7e37e54f079ea4351953dcc8e76c0f3185710ac3975e5865d17eac5d073c2b959e50eeeadcc3b9a7059be9c48ccd5"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100"], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) msgctl$auto(0xfff, 0x2, &(0x7f0000000300)={{0x2, 0xee00, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x7ff}, &(0x7f00000001c0)=0x7c, &(0x7f00000002c0)=0x4e, 0x7fff, 0x4, 0xd4, 0x9, 0x8, 0x3, 0x2, 0x6, @inferred, @raw=0x8001}) keyctl$auto(0x1001d, 0xffffffffffffffff, 0x5, r7, 0x9) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(0x3, 0x0, 0x4) 231.417766ms ago: executing program 2 (id=27): r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "39e45b3e4d2afe1af83a289da30fe9b18d144d6af02d6b7c5509585772fa94ff1ed7c62a859c260a2ba3bb9b6b31cdd3393e0beb10ce06b3e9ef34f6534a23f92a4df31e84b147d645ff98b9077c1b879049f1e48ec62de4ebd49be1af982db5669fada483cc9fe84f39556be2f6a76ec2a2f933148ffb49257960cef83476c9d1828b1aa5e88badab7ce62b1467e59297da9c05661d1c"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) syz_clone(0x4252400, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x5006, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r6, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x2a, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200000008000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x8, 0x0, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 3 (id=28): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01fa2cbd7000fcdbdf2502000000080003000600"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 80.642270][ T5836] cgroup: Unknown subsys name 'net' [ 80.768035][ T5836] cgroup: Unknown subsys name 'cpuset' [ 80.776628][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.190733][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.230002][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.238131][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.246859][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.255868][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.263903][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.264360][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.271564][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.289269][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.295185][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.305102][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.312541][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.312945][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.330299][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.337644][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.345897][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.355819][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.363315][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.370726][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.373282][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.387873][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.947815][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 84.984535][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 85.021333][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.148058][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 85.268769][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.276888][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.284434][ T5845] bridge_slave_0: entered allmulticast mode [ 85.292324][ T5845] bridge_slave_0: entered promiscuous mode [ 85.316057][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.323213][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.330890][ T5847] bridge_slave_0: entered allmulticast mode [ 85.338095][ T5847] bridge_slave_0: entered promiscuous mode [ 85.346908][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.354057][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.361370][ T5847] bridge_slave_1: entered allmulticast mode [ 85.369995][ T5847] bridge_slave_1: entered promiscuous mode [ 85.390383][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.397687][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.405149][ T5845] bridge_slave_1: entered allmulticast mode [ 85.412894][ T5845] bridge_slave_1: entered promiscuous mode [ 85.435525][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.442676][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.451914][ T5846] bridge_slave_0: entered allmulticast mode [ 85.459050][ T5846] bridge_slave_0: entered promiscuous mode [ 85.501506][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.508848][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.516677][ T5846] bridge_slave_1: entered allmulticast mode [ 85.523660][ T5846] bridge_slave_1: entered promiscuous mode [ 85.555682][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.562846][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.570450][ T5848] bridge_slave_0: entered allmulticast mode [ 85.578031][ T5848] bridge_slave_0: entered promiscuous mode [ 85.589858][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.623363][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.635861][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.643059][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.650514][ T5848] bridge_slave_1: entered allmulticast mode [ 85.658305][ T5848] bridge_slave_1: entered promiscuous mode [ 85.680460][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.692283][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.705950][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.718062][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.799965][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.812471][ T5847] team0: Port device team_slave_0 added [ 85.838497][ T5845] team0: Port device team_slave_0 added [ 85.847336][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.872331][ T5847] team0: Port device team_slave_1 added [ 85.892788][ T5846] team0: Port device team_slave_0 added [ 85.901818][ T5846] team0: Port device team_slave_1 added [ 85.909670][ T5845] team0: Port device team_slave_1 added [ 85.975827][ T5848] team0: Port device team_slave_0 added [ 85.982685][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.989735][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.015785][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.029040][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.036075][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.062026][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.083408][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.090768][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.116890][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.129462][ T5848] team0: Port device team_slave_1 added [ 86.144975][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.151957][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.177967][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.191157][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.198282][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.224642][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.236370][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.243321][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.269448][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.343943][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.351222][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.377232][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.389951][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.397065][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.423368][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.427522][ T5858] Bluetooth: hci0: command tx timeout [ 86.434017][ T51] Bluetooth: hci1: command tx timeout [ 86.440494][ T5858] Bluetooth: hci2: command tx timeout [ 86.482101][ T5847] hsr_slave_0: entered promiscuous mode [ 86.489153][ T5847] hsr_slave_1: entered promiscuous mode [ 86.504516][ T5858] Bluetooth: hci3: command tx timeout [ 86.519765][ T5846] hsr_slave_0: entered promiscuous mode [ 86.526667][ T5846] hsr_slave_1: entered promiscuous mode [ 86.532709][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.540795][ T5846] Cannot create hsr debugfs directory [ 86.565229][ T5845] hsr_slave_0: entered promiscuous mode [ 86.572274][ T5845] hsr_slave_1: entered promiscuous mode [ 86.578709][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.586322][ T5845] Cannot create hsr debugfs directory [ 86.679477][ T5848] hsr_slave_0: entered promiscuous mode [ 86.686926][ T5848] hsr_slave_1: entered promiscuous mode [ 86.692912][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.701633][ T5848] Cannot create hsr debugfs directory [ 87.219369][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.236762][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.248728][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.269139][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.323072][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.343696][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.369678][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.394956][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.476248][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.490836][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.519972][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.552178][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.594673][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.639434][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.650469][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.662032][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.684135][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.697289][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.719910][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.727244][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.793926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.801143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.883514][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.941937][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.963758][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.970915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.028027][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.035315][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.122125][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.140383][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.219408][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.260867][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.290528][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.297735][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.321550][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.328761][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.399308][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.406524][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.419325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.426719][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.507051][ T5858] Bluetooth: hci2: command tx timeout [ 88.512496][ T5858] Bluetooth: hci1: command tx timeout [ 88.519978][ T51] Bluetooth: hci0: command tx timeout [ 88.566542][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.588846][ T5858] Bluetooth: hci3: command tx timeout [ 88.738388][ T5846] veth0_vlan: entered promiscuous mode [ 88.750996][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.773457][ T5846] veth1_vlan: entered promiscuous mode [ 88.868915][ T5846] veth0_macvtap: entered promiscuous mode [ 88.900174][ T5846] veth1_macvtap: entered promiscuous mode [ 88.919578][ T5845] veth0_vlan: entered promiscuous mode [ 88.976033][ T5845] veth1_vlan: entered promiscuous mode [ 88.994022][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.029628][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.053495][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.073701][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.085691][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.094894][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.103610][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.155043][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.197708][ T5845] veth0_macvtap: entered promiscuous mode [ 89.238315][ T5847] veth0_vlan: entered promiscuous mode [ 89.252222][ T5845] veth1_macvtap: entered promiscuous mode [ 89.290982][ T5847] veth1_vlan: entered promiscuous mode [ 89.338733][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.350420][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.368367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.387694][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.410336][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.419923][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.430358][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.440090][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.490061][ T5848] veth0_vlan: entered promiscuous mode [ 89.498865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.532780][ T5847] veth0_macvtap: entered promiscuous mode [ 89.567218][ T5847] veth1_macvtap: entered promiscuous mode [ 89.587400][ T5848] veth1_vlan: entered promiscuous mode [ 89.625028][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.641165][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.653203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.669294][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.687617][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.746548][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.746968][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.763630][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.775437][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.783552][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.801561][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.856999][ T5848] veth0_macvtap: entered promiscuous mode [ 89.882215][ T5848] veth1_macvtap: entered promiscuous mode [ 89.946974][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.003158][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.037850][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.058561][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.074288][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094363][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163470][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.172552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.412612][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.493599][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.584780][ T5858] Bluetooth: hci2: command tx timeout [ 90.584800][ T51] Bluetooth: hci1: command tx timeout [ 90.584834][ T51] Bluetooth: hci0: command tx timeout [ 90.664651][ T51] Bluetooth: hci3: command tx timeout [ 90.771096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.779653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.797451][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.051389][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.094766][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.587235][ T5958] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.647956][ T5958] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.677055][ T5958] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.832449][ T5962] netlink: 302 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.968001][ T10] cfg80211: failed to load regulatory.db [ 92.077540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.087054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.147388][ T5975] syz.1.7 (5975): drop_caches: 0 [ 92.179451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.188000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.196831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.205354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.330251][ T5978] ovs_ÿþ: entered promiscuous mode [ 92.464992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.674031][ T51] Bluetooth: hci0: command tx timeout [ 92.683895][ T51] Bluetooth: hci2: command tx timeout [ 92.690100][ T51] Bluetooth: hci1: command tx timeout [ 92.771334][ T51] Bluetooth: hci3: command tx timeout [ 93.307102][ T30] audit: type=1800 audit(1752168646.528:2): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="dbroot" dev="configfs" ino=7442 res=0 errno=0 [ 93.332771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.344912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.785688][ T5990] process 'syz.1.10' launched './file0' with NULL argv: empty string added [ 94.250115][ T5991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 95.073511][ T5997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 95.846630][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.241883][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 97.416743][ T6052] Zero length message leads to an empty skb [ 98.346835][ T6051] FAULT_INJECTION: forcing a failure. [ 98.346835][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 98.362071][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.1.19 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 98.362098][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.362111][ T6051] Call Trace: [ 98.362116][ T6051] [ 98.362125][ T6051] dump_stack_lvl+0x16c/0x1f0 [ 98.362154][ T6051] should_fail_ex+0x512/0x640 [ 98.362175][ T6051] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 98.362197][ T6051] should_failslab+0xc2/0x120 [ 98.362211][ T6051] __kmalloc_cache_noprof+0x6a/0x3e0 [ 98.362231][ T6051] ? madvise_collapse+0x1cb/0xb20 [ 98.362256][ T6051] madvise_collapse+0x1cb/0xb20 [ 98.362272][ T6051] ? __schedule+0x1181/0x5de0 [ 98.362298][ T6051] ? __pfx_madvise_collapse+0x10/0x10 [ 98.362316][ T6051] ? mtree_range_walk+0x718/0xc00 [ 98.362333][ T6051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.362364][ T6051] madvise_vma_behavior+0x118d/0x2420 [ 98.362379][ T6051] ? mas_prev_setup.constprop.0+0x81/0x830 [ 98.362401][ T6051] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 98.362416][ T6051] ? __pfx_mas_prev+0x10/0x10 [ 98.362441][ T6051] ? find_vma_prev+0xda/0x160 [ 98.362458][ T6051] ? __pfx_find_vma_prev+0x10/0x10 [ 98.362478][ T6051] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.362507][ T6051] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 98.362522][ T6051] madvise_walk_vmas+0x1ce/0x2c0 [ 98.362538][ T6051] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 98.362558][ T6051] madvise_do_behavior+0x15d/0x3f0 [ 98.362576][ T6051] ? __pfx_madvise_do_behavior+0x10/0x10 [ 98.362610][ T6051] do_madvise+0x161/0x230 [ 98.362626][ T6051] ? __pfx_do_madvise+0x10/0x10 [ 98.362655][ T6051] ? xfd_validate_state+0x61/0x180 [ 98.362682][ T6051] __x64_sys_madvise+0xa9/0x110 [ 98.362698][ T6051] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.362721][ T6051] do_syscall_64+0xcd/0x490 [ 98.362750][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.362764][ T6051] RIP: 0033:0x7f775338e929 [ 98.362779][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.362792][ T6051] RSP: 002b:00007f7754246038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 98.362806][ T6051] RAX: ffffffffffffffda RBX: 00007f77535b5fa0 RCX: 00007f775338e929 [ 98.362815][ T6051] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 98.362824][ T6051] RBP: 00007f7753410b39 R08: 0000000000000000 R09: 0000000000000000 [ 98.362832][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.362840][ T6051] R13: 0000000000000000 R14: 00007f77535b5fa0 R15: 00007ffd14a1dee8 [ 98.362859][ T6051] [ 99.438322][ T6087] FAULT_INJECTION: forcing a failure. [ 99.438322][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 99.482237][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.2.26 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 99.482261][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.482270][ T6087] Call Trace: [ 99.482275][ T6087] [ 99.482282][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 99.482309][ T6087] should_fail_ex+0x512/0x640 [ 99.482329][ T6087] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 99.482353][ T6087] should_failslab+0xc2/0x120 [ 99.482366][ T6087] __kmalloc_cache_noprof+0x6a/0x3e0 [ 99.482385][ T6087] ? resv_map_alloc+0x46/0x400 [ 99.482401][ T6087] resv_map_alloc+0x46/0x400 [ 99.482415][ T6087] hugetlbfs_get_inode+0x33f/0x730 [ 99.482433][ T6087] hugetlb_file_setup+0x15b/0x620 [ 99.482450][ T6087] ksys_mmap_pgoff+0x189/0x5c0 [ 99.482469][ T6087] __x64_sys_mmap+0x125/0x190 [ 99.482491][ T6087] do_syscall_64+0xcd/0x490 [ 99.482514][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.482528][ T6087] RIP: 0033:0x7f5bc1f8e929 [ 99.482541][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.482554][ T6087] RSP: 002b:00007f5bc2de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 99.482567][ T6087] RAX: ffffffffffffffda RBX: 00007f5bc21b5fa0 RCX: 00007f5bc1f8e929 [ 99.482576][ T6087] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 99.482584][ T6087] RBP: 00007f5bc2010b39 R08: 0000000000000602 R09: 0000300000000000 [ 99.482593][ T6087] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 99.482600][ T6087] R13: 0000000000000000 R14: 00007f5bc21b5fa0 R15: 00007fff4d6cf7c8 [ 99.482618][ T6087] [ 99.955507][ T6095] can: request_module (can-proto-3) failed. [ 100.237919][ T6107] [ 100.240310][ T6107] ====================================================== [ 100.247344][ T6107] WARNING: possible circular locking dependency detected [ 100.254381][ T6107] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted [ 100.261509][ T6107] ------------------------------------------------------ [ 100.268545][ T6107] syz.3.28/6107 is trying to acquire lock: [ 100.274358][ T6107] ffff888140532d00 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 100.284211][ T6107] [ 100.284211][ T6107] but task is already holding lock: [ 100.291599][ T6107] ffff8881405327c8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 100.302893][ T6107] [ 100.302893][ T6107] which lock already depends on the new lock. [ 100.302893][ T6107] [ 100.313313][ T6107] [ 100.313313][ T6107] the existing dependency chain (in reverse order) is: [ 100.322338][ T6107] [ 100.322338][ T6107] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 100.330982][ T6107] blk_alloc_queue+0x619/0x760 [ 100.336293][ T6107] blk_mq_alloc_queue+0x175/0x290 [ 100.341853][ T6107] __blk_mq_alloc_disk+0x29/0x120 [ 100.347414][ T6107] nbd_dev_add+0x4a0/0xbc0 [ 100.352365][ T6107] nbd_init+0x181/0x320 [ 100.357048][ T6107] do_one_initcall+0x120/0x6e0 [ 100.362338][ T6107] kernel_init_freeable+0x5c2/0x900 [ 100.368070][ T6107] kernel_init+0x1c/0x2b0 [ 100.372925][ T6107] ret_from_fork+0x5d7/0x6f0 [ 100.378054][ T6107] ret_from_fork_asm+0x1a/0x30 [ 100.383348][ T6107] [ 100.383348][ T6107] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 100.390573][ T6107] fs_reclaim_acquire+0x102/0x150 [ 100.396128][ T6107] prepare_alloc_pages+0x162/0x610 [ 100.401770][ T6107] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 100.408199][ T6107] __alloc_pages_noprof+0xb/0x1b0 [ 100.413757][ T6107] pcpu_populate_chunk+0x110/0xb00 [ 100.419402][ T6107] pcpu_alloc_noprof+0x86a/0x1470 [ 100.424960][ T6107] xt_percpu_counter_alloc+0x13e/0x1b0 [ 100.430954][ T6107] find_check_entry.constprop.0+0xbf/0xa20 [ 100.437305][ T6107] translate_table+0xd0b/0x17b0 [ 100.442770][ T6107] ip6t_register_table+0x102/0x430 [ 100.448423][ T6107] ip6table_raw_table_init+0x63/0x90 [ 100.454236][ T6107] xt_find_table_lock+0x2e4/0x520 [ 100.459791][ T6107] xt_request_find_table_lock+0x28/0xf0 [ 100.465865][ T6107] get_info+0x190/0x620 [ 100.470545][ T6107] do_ip6t_get_ctl+0x169/0xa50 [ 100.475839][ T6107] nf_getsockopt+0x79/0xe0 [ 100.480780][ T6107] ipv6_getsockopt+0x1f7/0x280 [ 100.486070][ T6107] tcp_getsockopt+0xa1/0x100 [ 100.491193][ T6107] do_sock_getsockopt+0x3ff/0x800 [ 100.496828][ T6107] __sys_getsockopt+0x123/0x1b0 [ 100.502211][ T6107] __x64_sys_getsockopt+0xbd/0x160 [ 100.507855][ T6107] do_syscall_64+0xcd/0x490 [ 100.512893][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.519309][ T6107] [ 100.519309][ T6107] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 100.527142][ T6107] __mutex_lock+0x199/0xb90 [ 100.532177][ T6107] pcpu_alloc_noprof+0xb4c/0x1470 [ 100.537743][ T6107] sbitmap_init_node+0x2fd/0x770 [ 100.543207][ T6107] sbitmap_queue_init_node+0x41/0x560 [ 100.549102][ T6107] blk_mq_init_tags+0x12d/0x2b0 [ 100.554488][ T6107] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 100.560563][ T6107] blk_mq_init_sched+0x30c/0x610 [ 100.566026][ T6107] elevator_switch+0x1e1/0x7f0 [ 100.571316][ T6107] elevator_change+0x2ac/0x400 [ 100.576604][ T6107] elevator_set_default+0x292/0x320 [ 100.582327][ T6107] blk_register_queue+0x393/0x4f0 [ 100.587876][ T6107] __add_disk+0x74a/0xf00 [ 100.592737][ T6107] add_disk_fwnode+0x13f/0x5d0 [ 100.598031][ T6107] nbd_dev_add+0x791/0xbc0 [ 100.602980][ T6107] nbd_init+0x181/0x320 [ 100.607669][ T6107] do_one_initcall+0x120/0x6e0 [ 100.612961][ T6107] kernel_init_freeable+0x5c2/0x900 [ 100.618693][ T6107] kernel_init+0x1c/0x2b0 [ 100.623550][ T6107] ret_from_fork+0x5d7/0x6f0 [ 100.628677][ T6107] ret_from_fork_asm+0x1a/0x30 [ 100.633968][ T6107] [ 100.633968][ T6107] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 100.641808][ T6107] __lock_acquire+0x126f/0x1c90 [ 100.647192][ T6107] lock_acquire+0x179/0x350 [ 100.652224][ T6107] __mutex_lock+0x199/0xb90 [ 100.657265][ T6107] queue_requests_store+0x1c7/0x310 [ 100.663003][ T6107] queue_attr_store+0x276/0x320 [ 100.668397][ T6107] sysfs_kf_write+0xef/0x150 [ 100.673511][ T6107] kernfs_fop_write_iter+0x354/0x510 [ 100.679332][ T6107] iter_file_splice_write+0x91f/0x1150 [ 100.685357][ T6107] direct_splice_actor+0x192/0x6c0 [ 100.691008][ T6107] splice_direct_to_actor+0x342/0xa30 [ 100.696912][ T6107] do_splice_direct+0x174/0x240 [ 100.702288][ T6107] do_sendfile+0xb06/0xe50 [ 100.707234][ T6107] __x64_sys_sendfile64+0x1d8/0x220 [ 100.712983][ T6107] do_syscall_64+0xcd/0x490 [ 100.718020][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.724438][ T6107] [ 100.724438][ T6107] other info that might help us debug this: [ 100.724438][ T6107] [ 100.734744][ T6107] Chain exists of: [ 100.734744][ T6107] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 100.734744][ T6107] [ 100.748495][ T6107] Possible unsafe locking scenario: [ 100.748495][ T6107] [ 100.755935][ T6107] CPU0 CPU1 [ 100.761293][ T6107] ---- ---- [ 100.766657][ T6107] lock(&q->q_usage_counter(io)#59); [ 100.772044][ T6107] lock(fs_reclaim); [ 100.778546][ T6107] lock(&q->q_usage_counter(io)#59); [ 100.786452][ T6107] lock(&q->elevator_lock); [ 100.791047][ T6107] [ 100.791047][ T6107] *** DEADLOCK *** [ 100.791047][ T6107] [ 100.799186][ T6107] 5 locks held by syz.3.28/6107: [ 100.804125][ T6107] #0: ffff888034602428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 100.814172][ T6107] #1: ffff888035055888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 100.823938][ T6107] #2: ffff888027226698 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 100.833985][ T6107] #3: ffff8881405327c8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 100.845682][ T6107] #4: ffff888140532800 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 100.857631][ T6107] [ 100.857631][ T6107] stack backtrace: [ 100.863515][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.3.28 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 100.863544][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.863557][ T6107] Call Trace: [ 100.863565][ T6107] [ 100.863574][ T6107] dump_stack_lvl+0x116/0x1f0 [ 100.863607][ T6107] print_circular_bug+0x275/0x350 [ 100.863638][ T6107] check_noncircular+0x14c/0x170 [ 100.863670][ T6107] __lock_acquire+0x126f/0x1c90 [ 100.863702][ T6107] ? __lock_acquire+0xb8a/0x1c90 [ 100.863731][ T6107] lock_acquire+0x179/0x350 [ 100.863759][ T6107] ? queue_requests_store+0x1c7/0x310 [ 100.863795][ T6107] ? __pfx___might_resched+0x10/0x10 [ 100.863819][ T6107] ? do_raw_spin_lock+0x12c/0x2b0 [ 100.863853][ T6107] __mutex_lock+0x199/0xb90 [ 100.863884][ T6107] ? queue_requests_store+0x1c7/0x310 [ 100.863919][ T6107] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.863947][ T6107] ? queue_requests_store+0x1c7/0x310 [ 100.863984][ T6107] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.864014][ T6107] ? __pfx___mutex_lock+0x10/0x10 [ 100.864048][ T6107] ? __pfx_autoremove_wake_function+0x10/0x10 [ 100.864079][ T6107] ? queue_requests_store+0x1c7/0x310 [ 100.864112][ T6107] queue_requests_store+0x1c7/0x310 [ 100.864146][ T6107] ? __pfx_queue_requests_store+0x10/0x10 [ 100.864182][ T6107] ? __mutex_trylock_common+0xe9/0x250 [ 100.864213][ T6107] ? __pfx_queue_requests_store+0x10/0x10 [ 100.864247][ T6107] queue_attr_store+0x276/0x320 [ 100.864279][ T6107] ? __pfx_queue_attr_store+0x10/0x10 [ 100.864310][ T6107] ? __lock_acquire+0x622/0x1c90 [ 100.864345][ T6107] ? find_held_lock+0x2b/0x80 [ 100.864367][ T6107] ? sysfs_file_kobj+0xe4/0x290 [ 100.864393][ T6107] ? __pfx_queue_attr_store+0x10/0x10 [ 100.864425][ T6107] sysfs_kf_write+0xef/0x150 [ 100.864450][ T6107] kernfs_fop_write_iter+0x354/0x510 [ 100.864473][ T6107] ? __pfx_sysfs_kf_write+0x10/0x10 [ 100.864499][ T6107] iter_file_splice_write+0x91f/0x1150 [ 100.864537][ T6107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 100.864568][ T6107] ? __pfx_copy_splice_read+0x10/0x10 [ 100.864602][ T6107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 100.864631][ T6107] direct_splice_actor+0x192/0x6c0 [ 100.864660][ T6107] splice_direct_to_actor+0x342/0xa30 [ 100.864689][ T6107] ? __pfx_direct_splice_actor+0x10/0x10 [ 100.864719][ T6107] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 100.864750][ T6107] do_splice_direct+0x174/0x240 [ 100.864777][ T6107] ? __pfx_do_splice_direct+0x10/0x10 [ 100.864805][ T6107] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 100.864834][ T6107] ? rw_verify_area+0xcf/0x680 [ 100.864862][ T6107] do_sendfile+0xb06/0xe50 [ 100.864892][ T6107] ? __pfx_do_sendfile+0x10/0x10 [ 100.864920][ T6107] ? handle_mm_fault+0x2ab/0xd10 [ 100.864949][ T6107] ? __x64_sys_futex+0x1e0/0x4c0 [ 100.864980][ T6107] ? __x64_sys_futex+0x1e9/0x4c0 [ 100.865007][ T6107] __x64_sys_sendfile64+0x1d8/0x220 [ 100.865029][ T6107] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 100.865055][ T6107] do_syscall_64+0xcd/0x490 [ 100.865087][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.865109][ T6107] RIP: 0033:0x7fbb9d38e929 [ 100.865127][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.865148][ T6107] RSP: 002b:00007fbb9e1ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 100.865169][ T6107] RAX: ffffffffffffffda RBX: 00007fbb9d5b5fa0 RCX: 00007fbb9d38e929 [ 100.865184][ T6107] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 100.865197][ T6107] RBP: 00007fbb9d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 100.865211][ T6107] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 100.865225][ T6107] R13: 0000000000000000 R14: 00007fbb9d5b5fa0 R15: 00007fff0fde7a68 [ 100.865245][ T6107]