last executing test programs: 15.088939666s ago: executing program 2 (id=5): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x3a3242, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) sendto$auto(0x4, 0x0, 0x8000, 0x0, 0x0, 0x80) write$auto(r0, 0x0, 0x8) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC0D0c\x00', 0x0, 0x0) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x8000002) 12.972214071s ago: executing program 2 (id=9): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mlockall$auto(0x7) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) symlinkat$auto(&(0x7f0000000080)='./file0\x00', r3, 0x0) fsopen$auto(0x0, 0x1) 11.984332439s ago: executing program 3 (id=10): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x3a, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mlockall$auto(0x7) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = socket(0x2, 0x2, 0x0) getsockopt$auto(r3, 0x0, 0x17, 0xfffffffffffffffc, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0xf72, 0x0) socket(0x2a, 0x2, 0x1) 10.721373727s ago: executing program 3 (id=12): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x5, 0x2, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, 0x0, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) mq_timedsend$auto(r2, 0x0, 0x2000, 0x2, 0x0) 10.040962467s ago: executing program 2 (id=13): r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) ioctl$auto_FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000040)="e973b1f7e86cbd3323f6b343528760daf560711bc05f5688bc55465f9c661c") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0x3, 0x95f4da0a, 0x7f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2000000000, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 9.747611127s ago: executing program 0 (id=14): keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x4000002020009, 0x2, 0x7fff, 0xfffffffffffffffa, 0x8001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r2 = prctl$auto(0x16, 0x800000000000012, 0x0, 0x9, 0x10000) r3 = ioctl$auto_TUNGETVNETBE2(r2, 0x800454df, &(0x7f0000000040)=0x2) ioctl$auto_PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000000c0)=0x2070bb26) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0x337, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x80000000000003, 0x10, r1, 0x5) prctl$auto(0x2000001a, 0x1, 0x0, 0xd, 0x32) msgget$auto(0x0, 0x5) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x9978, 0x66) msgsnd$auto(0x0, &(0x7f0000000600)={0x7fc}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 9.193236129s ago: executing program 1 (id=15): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x3, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x6}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0x3, 0x80000, 0x6) prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x509b01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000180)='\xe6\xd4\x040\xca\xdf\xf1\xb0io1\x00\xcf\xaeLu1S\x1c\\QM0D\x12\x85\xb6FH\x1eB\x96\xfd\xd9\xa5Uj k\xc5\xbb\x18\x16\xef\xd4\x00h\xa6Y9\x06\xe7;\x1cB\xd5z\x03\'g{\xe3\xa6\xaf\xcaQ\xa7u\xbd\xc37@\x1e\xa7vMf\v\x11\xc0\xbf\x1f\x1f\xd4\xdd\xeaN\xd15QS\xcd\xb3)\x8d\xe7\xc8@#\x8c)\x8c\xc6X\x0fx1{\x83\x81\x90f\xc3\xe6Z\xe8\xa91f\xcd:\x01\xc5\xb2\x9f\x84}4\x86^A\x9e\xfc\xa5\n\xde#p\x84>f\x1a\xee\xc2\xc3\xed/n\t\x98\xcfV\x06E\xc3_a\xf7\xac\xc8\b\x80\xf1F\x16\x8f\xfb{\xbc\x11\xc3\x92\xbd\xc3\x1c\x12KG= \xcatf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 7.856090428s ago: executing program 1 (id=17): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x101306, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(r0, 0x0, 0x4040f6) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/226, 0xe2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00'}) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) 7.603861079s ago: executing program 3 (id=18): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}, {0x4, 0x3, 0x9, 0x8, 0x10000, 0x5, 0x2}]}) prctl$auto(0x35, 0x8, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/hugepages/hugepages-2048kB/nr_hugepages\x00', 0x2402, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f00000002c0)={0x3}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) madvise$auto(0x0, 0x3, 0x3) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003740)='/dev/sequencer2\x00', 0x88241, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_fd=r2, 0xd}, 0xa3) sendto$auto(r2, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x2, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffff7, 0x8003) 7.438407966s ago: executing program 2 (id=19): mmap$auto(0x0, 0x2000c, 0xfffffffffffffff8, 0x20eb5, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getrusage$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) stat$auto(0x0, &(0x7f0000000380)={0x5, 0x81, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x3ff, 0x401, 0x5f53, 0x80000000, 0xaa}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev$auto(r0, &(0x7f00000003c0)={0x0, 0x8}, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mlockall$auto(0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x7c0) mmap$auto(0x0, 0x9, 0x5, 0x8000000008013, 0x3, 0x100000000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) set_mempolicy$auto(0x26, &(0x7f0000000080)=0x3ff, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x23, 0x3, 0xfffffffc) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) 6.138844285s ago: executing program 3 (id=20): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0}) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x29, 0x1, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 5.946670627s ago: executing program 1 (id=21): socket(0x11, 0x80003, 0x300) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) 5.844046197s ago: executing program 0 (id=22): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, 0x0, 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0) 5.166120937s ago: executing program 2 (id=23): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x567300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) setresuid$auto(0x0, 0x0, 0xee00) setresuid$auto(0xffffffffffffffff, 0xffffffff, 0x0) mmap$auto(0x0, 0x402000a, 0xdf, 0x10000000000eb1, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) open(0x0, 0x6041, 0x0) 4.201760539s ago: executing program 0 (id=24): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r2, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc1205531, r3) sysfs$auto(0x5, 0x100000074e, 0x8000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) semget$auto(0x0, 0x13c, 0x1ff) 3.38520587s ago: executing program 1 (id=25): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop15\x00', 0x6ea02, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x1000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x4400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) r2 = eventfd$auto(0x95f2) read$auto(r1, &(0x7f0000002440)='&\x00', 0x9) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) read$auto_trace_options_fops_trace(r3, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) timer_delete$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/freezer.state\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdb, 0x9b72, 0x7, 0x28000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r5, 0x929, 0x70bd2c, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0xd08, 0x70bd25, 0x25dfdbfd, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IFINDEX={0x8, 0x2, r8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b67, 0x38) landlock_add_rule$auto(0xffffffffffffffff, 0x2, &(0x7f0000000840)="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", 0xffffffff) 3.03705092s ago: executing program 3 (id=26): socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) clone3$auto(&(0x7f00000000c0)={0x9, 0x2, 0x5, 0x5, 0x7542, 0xa3c2, 0x3ff, 0x4, 0x8, 0x10000, 0x4}, 0x10001) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x94) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) 2.859043283s ago: executing program 1 (id=27): r0 = fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) mincore$auto(0x7, 0xc, &(0x7f0000000000)='/dev/ptyd1\x00') close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x8e}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x180}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @random="b059f9498c50"}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'syz_tun\x00'}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @multicast}, @BATADV_ATTR_ACTIVE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4) 2.280269617s ago: executing program 2 (id=28): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04) 1.471848058s ago: executing program 0 (id=29): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x146, 0x0) mmap$auto(0x2, 0x400008, 0x8, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x6, 0x101, 0x1, 0xfffffffffffffff1, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x7, 0x3, 0x5, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) r0 = pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x1, 0x20009, 0x4001100000df, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0xe0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x58) 671.907225ms ago: executing program 1 (id=30): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, 0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r4, 0x5609, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(r3, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 286.416412ms ago: executing program 0 (id=31): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x2, 0x40000f, 0xdf, 0x115, 0x2, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) 0s ago: executing program 3 (id=32): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) write$auto(r1, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 102.768043][ T24] cfg80211: failed to load regulatory.db [ 106.112842][ T5824] cgroup: Unknown subsys name 'net' [ 106.245956][ T5824] cgroup: Unknown subsys name 'cpuset' [ 106.257676][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 108.361014][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.823218][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.832830][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.845728][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.851757][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.854411][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.865881][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.871894][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.877384][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.885393][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.891879][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.906069][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.915192][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.918838][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.928465][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.947086][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.967228][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.985911][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.027208][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.036952][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.046896][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.794303][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 111.883676][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 111.899416][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 112.007603][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 112.191494][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.199619][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.210552][ T5840] bridge_slave_0: entered allmulticast mode [ 112.218878][ T5840] bridge_slave_0: entered promiscuous mode [ 112.282010][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.289940][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.298889][ T5840] bridge_slave_1: entered allmulticast mode [ 112.306985][ T5840] bridge_slave_1: entered promiscuous mode [ 112.332763][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.340679][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.348121][ T5835] bridge_slave_0: entered allmulticast mode [ 112.357033][ T5835] bridge_slave_0: entered promiscuous mode [ 112.436731][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.456197][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.467457][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.476349][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.486835][ T5835] bridge_slave_1: entered allmulticast mode [ 112.495406][ T5835] bridge_slave_1: entered promiscuous mode [ 112.502727][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.510989][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.518854][ T5843] bridge_slave_0: entered allmulticast mode [ 112.527009][ T5843] bridge_slave_0: entered promiscuous mode [ 112.539078][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.547467][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.557089][ T5843] bridge_slave_1: entered allmulticast mode [ 112.566690][ T5843] bridge_slave_1: entered promiscuous mode [ 112.576121][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.583593][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.591445][ T5834] bridge_slave_0: entered allmulticast mode [ 112.601265][ T5834] bridge_slave_0: entered promiscuous mode [ 112.666100][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.674188][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.682447][ T5834] bridge_slave_1: entered allmulticast mode [ 112.691252][ T5834] bridge_slave_1: entered promiscuous mode [ 112.754085][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.799130][ T5840] team0: Port device team_slave_0 added [ 112.809697][ T5840] team0: Port device team_slave_1 added [ 112.819715][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.836829][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.901624][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.949905][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.964609][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.024153][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.033479][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.063547][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.081353][ T5843] team0: Port device team_slave_0 added [ 113.088203][ T51] Bluetooth: hci1: command tx timeout [ 113.097571][ T5845] Bluetooth: hci2: command tx timeout [ 113.103378][ T5844] Bluetooth: hci0: command tx timeout [ 113.110179][ T51] Bluetooth: hci3: command tx timeout [ 113.123276][ T5835] team0: Port device team_slave_0 added [ 113.131093][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.138747][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.166505][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.180996][ T5843] team0: Port device team_slave_1 added [ 113.210329][ T5835] team0: Port device team_slave_1 added [ 113.281618][ T5834] team0: Port device team_slave_0 added [ 113.313984][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.322659][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.349694][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.380546][ T5834] team0: Port device team_slave_1 added [ 113.417602][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.425189][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.452996][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.470366][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.477933][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.505220][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.559680][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.566804][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.594500][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.629055][ T5840] hsr_slave_0: entered promiscuous mode [ 113.636213][ T5840] hsr_slave_1: entered promiscuous mode [ 113.674645][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.681849][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.708479][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.748193][ T5835] hsr_slave_0: entered promiscuous mode [ 113.755599][ T5835] hsr_slave_1: entered promiscuous mode [ 113.762448][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.770586][ T5835] Cannot create hsr debugfs directory [ 113.779115][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.787798][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.815081][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.903845][ T5843] hsr_slave_0: entered promiscuous mode [ 113.912427][ T5843] hsr_slave_1: entered promiscuous mode [ 113.919488][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.928111][ T5843] Cannot create hsr debugfs directory [ 114.127679][ T5834] hsr_slave_0: entered promiscuous mode [ 114.140702][ T5834] hsr_slave_1: entered promiscuous mode [ 114.148539][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.156764][ T5834] Cannot create hsr debugfs directory [ 114.641091][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.660181][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.678061][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.702776][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.776661][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.797659][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.834618][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.872894][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.940276][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.962432][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.987936][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.002529][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.166121][ T5845] Bluetooth: hci2: command tx timeout [ 115.168626][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.171639][ T5845] Bluetooth: hci0: command tx timeout [ 115.184638][ T5844] Bluetooth: hci1: command tx timeout [ 115.191874][ T51] Bluetooth: hci3: command tx timeout [ 115.205382][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.227760][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.247430][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.293754][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.360682][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.394666][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.430563][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.461212][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.468653][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.488101][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.495538][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.530389][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.537834][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.553439][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.560852][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.758012][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.768961][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.802679][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.862344][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.914589][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.952224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.959729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.022219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.029709][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.115506][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.223184][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.230574][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.280400][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.287785][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.423621][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.501506][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.737408][ T5840] veth0_vlan: entered promiscuous mode [ 116.796353][ T5843] veth0_vlan: entered promiscuous mode [ 116.833005][ T5840] veth1_vlan: entered promiscuous mode [ 116.917795][ T5843] veth1_vlan: entered promiscuous mode [ 117.042259][ T5840] veth0_macvtap: entered promiscuous mode [ 117.056168][ T5840] veth1_macvtap: entered promiscuous mode [ 117.096005][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.104122][ T5843] veth0_macvtap: entered promiscuous mode [ 117.126114][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.143991][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.163547][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.178907][ T5843] veth1_macvtap: entered promiscuous mode [ 117.239924][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.246618][ T5845] Bluetooth: hci0: command tx timeout [ 117.254629][ T51] Bluetooth: hci3: command tx timeout [ 117.259318][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.262917][ T5844] Bluetooth: hci1: command tx timeout [ 117.273075][ T5838] Bluetooth: hci2: command tx timeout [ 117.277079][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.291502][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.317055][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.366396][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.379094][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.390140][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.399854][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.410030][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.483525][ T5835] veth0_vlan: entered promiscuous mode [ 117.572051][ T5835] veth1_vlan: entered promiscuous mode [ 117.650021][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.668634][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.690467][ T5834] veth0_vlan: entered promiscuous mode [ 117.758655][ T5835] veth0_macvtap: entered promiscuous mode [ 117.787735][ T5835] veth1_macvtap: entered promiscuous mode [ 117.795084][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.812930][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.846618][ T5834] veth1_vlan: entered promiscuous mode [ 117.881792][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.899653][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.916059][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.924170][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.967069][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.017364][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.059749][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.062230][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.090437][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.106499][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.116568][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.139412][ T5834] veth0_macvtap: entered promiscuous mode [ 118.202140][ T5834] veth1_macvtap: entered promiscuous mode [ 118.401310][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.522796][ T5929] Zero length message leads to an empty skb [ 118.554492][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.681850][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.719855][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.761838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.778674][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.819181][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.862959][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.178030][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.198234][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.325854][ T51] Bluetooth: hci3: command tx timeout [ 119.331797][ T51] Bluetooth: hci2: command tx timeout [ 119.337432][ T5838] Bluetooth: hci0: command tx timeout [ 119.343136][ T5838] Bluetooth: hci1: command tx timeout [ 119.511909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.624108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.635001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.115401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.192881][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.238316][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.336182][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.379329][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.411004][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.925048][ T5947] sp0: Synchronizing with TNC [ 121.561431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.715201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.723742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.734208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 121.745270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.767045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 127.858374][ T6017] capability: warning: `syz.1.17' uses 32-bit capabilities (legacy support in use) [ 132.150329][ T6066] Invalid ELF header magic: != ELF [ 134.316383][ T6092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.363826][ T6092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.429394][ T6092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.510714][ T6092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.519798][ T6092] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.570991][ T6092] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.652936][ T6092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.663802][ T6092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.696279][ T6092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.714913][ T6092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.722418][ T6092] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.746103][ T6092] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.345407][ T6101] [ 135.347924][ T6101] ====================================================== [ 135.356037][ T6101] WARNING: possible circular locking dependency detected [ 135.363909][ T6101] 6.15.0-syzkaller-13473-gc0c9379f235d #0 Not tainted [ 135.371730][ T6101] ------------------------------------------------------ [ 135.379251][ T6101] syz.1.30/6101 is trying to acquire lock: [ 135.385381][ T6101] ffffffff8e52f4c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 135.395043][ T6101] [ 135.395043][ T6101] but task is already holding lock: [ 135.402445][ T6101] ffff888025f9a7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 135.413784][ T6101] [ 135.413784][ T6101] which lock already depends on the new lock. [ 135.413784][ T6101] [ 135.425035][ T6101] [ 135.425035][ T6101] the existing dependency chain (in reverse order) is: [ 135.434373][ T6101] [ 135.434373][ T6101] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 135.443441][ T6101] blk_alloc_queue+0x619/0x760 [ 135.448922][ T6101] blk_mq_alloc_queue+0x175/0x290 [ 135.455713][ T6101] __blk_mq_alloc_disk+0x29/0x120 [ 135.461512][ T6101] loop_add+0x49e/0xb70 [ 135.466421][ T6101] loop_init+0x164/0x270 [ 135.471301][ T6101] do_one_initcall+0x120/0x6e0 [ 135.477581][ T6101] kernel_init_freeable+0x5c2/0x900 [ 135.483942][ T6101] kernel_init+0x1c/0x2b0 [ 135.488940][ T6101] ret_from_fork+0x5d7/0x6f0 [ 135.494149][ T6101] ret_from_fork_asm+0x1a/0x30 [ 135.499509][ T6101] [ 135.499509][ T6101] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 135.507158][ T6101] fs_reclaim_acquire+0x102/0x150 [ 135.513152][ T6101] prepare_alloc_pages+0x162/0x610 [ 135.519335][ T6101] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 135.526429][ T6101] __alloc_pages_noprof+0xb/0x1b0 [ 135.532153][ T6101] pcpu_populate_chunk+0x110/0xb00 [ 135.538072][ T6101] pcpu_alloc_noprof+0x86a/0x1470 [ 135.550137][ T6101] xt_percpu_counter_alloc+0x13e/0x1b0 [ 135.556800][ T6101] find_check_entry.constprop.0+0xbc/0x9b0 [ 135.563460][ T6101] translate_table+0xc98/0x1720 [ 135.568989][ T6101] ipt_register_table+0x102/0x430 [ 135.574875][ T6101] iptable_nat_table_init+0x4b/0x250 [ 135.580759][ T6101] xt_find_table_lock+0x2e4/0x520 [ 135.586417][ T6101] xt_request_find_table_lock+0x28/0xf0 [ 135.592671][ T6101] get_info+0x190/0x610 [ 135.597557][ T6101] do_ipt_get_ctl+0x169/0xa10 [ 135.602812][ T6101] nf_getsockopt+0x79/0xe0 [ 135.608015][ T6101] ip_getsockopt+0x18c/0x1e0 [ 135.613823][ T6101] tcp_getsockopt+0x9e/0x100 [ 135.619292][ T6101] do_sock_getsockopt+0x3ff/0x800 [ 135.625014][ T6101] __sys_getsockopt+0x123/0x1b0 [ 135.630520][ T6101] __x64_sys_getsockopt+0xbd/0x160 [ 135.636233][ T6101] do_syscall_64+0xcd/0x490 [ 135.641324][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.648178][ T6101] [ 135.648178][ T6101] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 135.656002][ T6101] __lock_acquire+0x126f/0x1c90 [ 135.661751][ T6101] lock_acquire+0x179/0x350 [ 135.666926][ T6101] __mutex_lock+0x199/0xb90 [ 135.672087][ T6101] pcpu_alloc_noprof+0xb4c/0x1470 [ 135.677872][ T6101] blk_stat_alloc_callback+0xc8/0x280 [ 135.683914][ T6101] wbt_init+0xac/0x540 [ 135.688574][ T6101] queue_wb_lat_store+0x354/0x3d0 [ 135.694178][ T6101] queue_attr_store+0x279/0x320 [ 135.700082][ T6101] sysfs_kf_write+0xef/0x150 [ 135.705385][ T6101] kernfs_fop_write_iter+0x354/0x510 [ 135.711447][ T6101] vfs_write+0x6c4/0x1150 [ 135.716448][ T6101] ksys_write+0x12a/0x250 [ 135.721355][ T6101] do_syscall_64+0xcd/0x490 [ 135.726522][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.733057][ T6101] [ 135.733057][ T6101] other info that might help us debug this: [ 135.733057][ T6101] [ 135.743423][ T6101] Chain exists of: [ 135.743423][ T6101] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 135.743423][ T6101] [ 135.757422][ T6101] Possible unsafe locking scenario: [ 135.757422][ T6101] [ 135.765096][ T6101] CPU0 CPU1 [ 135.770525][ T6101] ---- ---- [ 135.776037][ T6101] lock(&q->q_usage_counter(io)#18); [ 135.781698][ T6101] lock(fs_reclaim); [ 135.788337][ T6101] lock(&q->q_usage_counter(io)#18); [ 135.796663][ T6101] lock(pcpu_alloc_mutex); [ 135.801399][ T6101] [ 135.801399][ T6101] *** DEADLOCK *** [ 135.801399][ T6101] [ 135.809924][ T6101] 6 locks held by syz.1.30/6101: [ 135.814893][ T6101] #0: ffff888033d36b78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 135.824428][ T6101] #1: ffff8880361d6428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 135.833485][ T6101] #2: ffff88805b12d888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 135.844036][ T6101] #3: ffff888025e6ef08 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 135.854915][ T6101] #4: ffff888025f9a7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 135.866819][ T6101] #5: ffff888025f9a800 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 135.879184][ T6101] [ 135.879184][ T6101] stack backtrace: [ 135.885309][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.30 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 135.885342][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.885362][ T6101] Call Trace: [ 135.885373][ T6101] [ 135.885386][ T6101] dump_stack_lvl+0x116/0x1f0 [ 135.885438][ T6101] print_circular_bug+0x275/0x350 [ 135.885478][ T6101] check_noncircular+0x14c/0x170 [ 135.885514][ T6101] __lock_acquire+0x126f/0x1c90 [ 135.885552][ T6101] lock_acquire+0x179/0x350 [ 135.885585][ T6101] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 135.885622][ T6101] ? __pfx___might_resched+0x10/0x10 [ 135.885648][ T6101] ? ksys_write+0x12a/0x250 [ 135.885686][ T6101] ? do_syscall_64+0xcd/0x490 [ 135.885709][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.885737][ T6101] __mutex_lock+0x199/0xb90 [ 135.885760][ T6101] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 135.885797][ T6101] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 135.885833][ T6101] ? __pfx___mutex_lock+0x10/0x10 [ 135.885867][ T6101] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 135.885901][ T6101] pcpu_alloc_noprof+0xb4c/0x1470 [ 135.885942][ T6101] ? __pfx_wbt_data_dir+0x10/0x10 [ 135.885983][ T6101] ? __pfx_wb_timer_fn+0x10/0x10 [ 135.886008][ T6101] blk_stat_alloc_callback+0xc8/0x280 [ 135.886035][ T6101] ? kasan_save_track+0x14/0x30 [ 135.886075][ T6101] wbt_init+0xac/0x540 [ 135.886103][ T6101] queue_wb_lat_store+0x354/0x3d0 [ 135.886127][ T6101] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 135.886171][ T6101] ? __mutex_trylock_common+0xe9/0x250 [ 135.886213][ T6101] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 135.886254][ T6101] queue_attr_store+0x279/0x320 [ 135.886278][ T6101] ? __pfx_queue_attr_store+0x10/0x10 [ 135.886300][ T6101] ? __lock_acquire+0x622/0x1c90 [ 135.886343][ T6101] ? find_held_lock+0x2b/0x80 [ 135.886366][ T6101] ? sysfs_file_kobj+0xe4/0x290 [ 135.886400][ T6101] ? __pfx_queue_attr_store+0x10/0x10 [ 135.886425][ T6101] sysfs_kf_write+0xef/0x150 [ 135.886456][ T6101] kernfs_fop_write_iter+0x354/0x510 [ 135.886483][ T6101] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.886515][ T6101] vfs_write+0x6c4/0x1150 [ 135.886552][ T6101] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 135.886580][ T6101] ? __pfx___mutex_lock+0x10/0x10 [ 135.886603][ T6101] ? __pfx_vfs_write+0x10/0x10 [ 135.886649][ T6101] ksys_write+0x12a/0x250 [ 135.886685][ T6101] ? __pfx_ksys_write+0x10/0x10 [ 135.886726][ T6101] do_syscall_64+0xcd/0x490 [ 135.886751][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.886776][ T6101] RIP: 0033:0x7f4181b8e929 [ 135.886804][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.886828][ T6101] RSP: 002b:00007f41829d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.886851][ T6101] RAX: ffffffffffffffda RBX: 00007f4181db6080 RCX: 00007f4181b8e929 [ 135.886868][ T6101] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000004 [ 135.886884][ T6101] RBP: 00007f4181c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.886899][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.886918][ T6101] R13: 0000000000000000 R14: 00007f4181db6080 R15: 00007ffd54e3f7c8 [ 135.886942][ T6101] [ 136.413883][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.535199][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.685709][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.765225][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.444885][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.605052][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.764897][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.844853][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.527601][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.685053][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.844980][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.925143][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.727598][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.734571][ T1304] ieee802154 phy1 wpan1: encryption failed: -22