last executing test programs: 12.678311683s ago: executing program 1 (id=6): mmap$auto(0x0, 0x400008, 0x10000000000000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000080)=0x1, &(0x7f0000000140)=0x7a28, 0x4b1d) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x8000000000000001, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022abd0100"/22, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6002", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000008000800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c007c0002000000000000000400908079d31828245d1d00a100e6809a9ee0a2123a8fa92a4224c5e320835bc1df4b86308f1eb106b640770860908a7ee198191bec22d0e1fe7b49b4428100781fc9231baa218eb9dff6587e85758d2557000000008216c1a1a193109a24a6cbf4ca980e8cd518672d8170bfc296672040c805d2805a666b090000006637bada153ac529599e829086c0d426fe1187195bc35fd30700a5007d2b00000800d8000a01010008003f004176f527531d8fde", @ANYRES32=r0, @ANYBLOB="0000000800b6006401010178679f385b78dc0f0041002f6465762f6164737031000034dbb4a18fb580bda46a26cb741baeb66648b73e16593e6280ab1f493bdceced1b1cb8e704a055f6ba30c848e10359186bdac20f914fc3e87ed1e9d944940d1af2861a7aa210570710731e24a2b60c000004000a8008000100050000000800090000000000"], 0x260}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) connect$auto(0x3, 0x0, 0x55) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) 10.799441588s ago: executing program 2 (id=9): mmap$auto(0x0, 0x400008, 0x10000000000000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000080)=0x1, &(0x7f0000000140)=0x7a28, 0x4b1d) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x8000000000000001, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022abd0100"/22, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000008000800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c007c0002000000000000000400908079d31828245d1d00a100e6809a9ee0a2123a8fa92a4224c5e320835bc1df4b86308f1eb106b640770860908a7ee198191bec22d0e1fe7b49b4428100781fc9231baa218eb9dff6587e85758d2557000000008216c1a1a193109a24a6cbf4ca980e8cd518672d8170bfc296672040c805d2805a666b090000006637bada153ac529599e829086c0d426fe1187195bc35fd30700a5007d2b00000800d8000a01010008003f004176f527531d8fde", @ANYRES32=r0, @ANYBLOB="0000000800b6006401010178679f385b78dc0f0041002f6465762f6164737031000034dbb4a18fb580bda46a26cb741baeb66648b73e16593e6280ab1f493bdceced1b1cb8e704a055f6ba30c848e10359186bdac20f914fc3e87ed1e9d944940d1af2861a7aa210570710731e24a2b60c000004000a8008000100050000000800090000000000"], 0x260}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) connect$auto(0x3, 0x0, 0x55) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) 10.572809515s ago: executing program 1 (id=10): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r0, r0, 0x0) socket(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbdf000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x0, 0x1, 0x0, 0x1e) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) ioctl$auto(0xffffffffffffffff, 0x5523, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) 8.584963341s ago: executing program 1 (id=13): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x68342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44805}, 0xa800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(r2, 0x0, 0x8000000000000000) write$auto(0x1, 0x0, 0x80000000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r4, 0x0, 0x20000001) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000180)=@prog_bind_map={0xffffffffffffffff, r0, 0x7ff}, 0x7ff) sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) 8.472367555s ago: executing program 2 (id=14): mmap$auto(0x0, 0x400008, 0x10000000000000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000080)=0x1, &(0x7f0000000140)=0x7a28, 0x4b1d) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x8000000000000001, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022abd0100"/22, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6002", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000008000800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c007c0002000000000000000400908079d31828245d1d00a100e6809a9ee0a2123a8fa92a4224c5e320835bc1df4b86308f1eb106b640770860908a7ee198191bec22d0e1fe7b49b4428100781fc9231baa218eb9dff6587e85758d2557000000008216c1a1a193109a24a6cbf4ca980e8cd518672d8170bfc296672040c805d2805a666b090000006637bada153ac529599e829086c0d426fe1187195bc35fd30700a5007d2b00000800d8000a01010008003f004176f527531d8fde", @ANYRES32=r0, @ANYBLOB="0000000800b6006401010178679f385b78dc0f0041002f6465762f6164737031000034dbb4a18fb580bda46a26cb741baeb66648b73e16593e6280ab1f493bdceced1b1cb8e704a055f6ba30c848e10359186bdac20f914fc3e87ed1e9d944940d1af2861a7aa210570710731e24a2b60c000004000a8008000100050000000800090000000000"], 0x260}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) connect$auto(0x3, 0x0, 0x55) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) 8.172270678s ago: executing program 0 (id=15): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x9) mmap$auto(0x3, 0x5, 0x20000000001, 0x12, r0, 0xaf) r1 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x7) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r6 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638b2b712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r6, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) sendfile$auto(0x1, r5, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 7.202040761s ago: executing program 0 (id=16): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x1, 0xe984, 0xdf, 0xeb1, 0x401, 0x7ffe) mmap$auto(0x0, 0x0, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0xf762f3440ffd3260, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x5, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x8, 0x4, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = epoll_create$auto(0x4) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044850}, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r2, 0x0, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) 6.130772245s ago: executing program 2 (id=17): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) ioctl$auto(r0, 0x64d0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x19, 0x92b4, 0xffffffffffffffff, 0x1fb8200000000, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f00000000c0)=';') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x7fff, 0xfffffffffffffffa, 0x8001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x7, 0x4, 0x9, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0x221c2, 0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x40049409, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5) 6.054853895s ago: executing program 3 (id=18): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime$auto(0x8000, &(0x7f0000000200)={0x8000, 0x0, 0x1, 0xfffffffffffffff7, 0x3, 0xe6, 0x7ff, 0x0, 0xc, 0x10, 0x81, {0x10001, 0xfffffffeffffffff}, 0x9, 0x1, 0x40, 0xfffffff5, 0x0, 0x8000000000000001, 0x3, 0x6, 0x58, 0x2, 0x7}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000007c0)=""/153, 0x99) r3 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) getdents64$auto(r4, 0x0, 0x1) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) 5.150607066s ago: executing program 0 (id=19): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf25010000000000000099cd2dff1100000004001d005b97b1f618796a9555a55b4b9096bb6288e3f419af0bbc1a26c362e87968ea47f6047884eea8bb638c8cea684b8cee8373caa4e53d8b8de31916b6dc2306e66802fd9886"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f2e030f6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_settime$auto(0x0, 0x5, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) read$auto(r1, 0x0, 0x20) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x9, 0x3ff, 0x5, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x401, 0x0, 0xe65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x98) syz_clone3(&(0x7f00000004c0)={0x82800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x3, 0x4000000000df, 0xa7c, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) 4.555963486s ago: executing program 2 (id=20): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0xffffffffffffffff, 0x8, 0x2) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_resume\x00', 0x8d40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/203, 0xcb) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(&(0x7f0000000280)='pimreg\x00', &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 4.46389361s ago: executing program 3 (id=21): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x9, 0xfffdfbfffffffbfa, 0x1, 0x1, 0x6, 0x0, 0x10000000000004, 0x7fffffff, 0x2, {0xfffffffe, 0x9}, 0x1, 0x1, 0xfffffffffffff88c, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffbfff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4e083, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty25\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb2, 0x6, 0x300000000000) madvise$auto(0x3, 0x9, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x19, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptye6\x00', 0x480, 0x0) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYBLOB="0500"/20], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x10) remap_file_pages$auto(0x80006a27, 0x1000, 0x0, 0x100000003, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='N\x00\xcaN\x99V\x04C\xae?k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) memfd_secret$auto(0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket(0x1a, 0x5, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.279310485s ago: executing program 1 (id=22): writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x2, 0x0, 0x0, 0x3, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, 0x0, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x100, 0x7, 0x803fc7, 0xeb1, r1, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) unshare$auto(0x40000080) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) read$auto(r0, 0x0, 0x7) read$auto(r2, 0x0, 0x5) 3.605895361s ago: executing program 3 (id=23): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) writev$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) close_range$auto(r0, r1, 0x10001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x3) listen$auto(r1, 0x7) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 3.309732654s ago: executing program 2 (id=24): ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)="924b63998fc8789b9c765ad23a5a1da5b70cec9931f72d112722a0987dc8a2a1153be79ae881074b7b1379a2c73c2f1d5cebbea94c8514afece2a76cbdf85e23221fa99dc6527513c7eb7efd9c9df3126c2981dc9760e01b1fcfdcc92ee41e5fd1af19a06f1162f2dbcd23bc7b99d03ea8e6ac83ebc6069f2a0916164462ce6b882be70bb368ba29b2704f494882f0a44770b0c8dbef38ff749aaaeaac38d741", 0x3, &(0x7f0000000140)="7d237a6597e744b5a2e26a1b2af6bd72ed36cabaa8c451bf33fd5ab0eb967e2f9e2f8cfd16a2da9a85733396e594468adab802db02c3d24e4a27f9ab63b692048b7bfb9687da4c6a73b029e32e6b5c158f1b7297a566f7594087cd092f743f72d21b9fbedc65be", 0x1, &(0x7f00000001c0)="a358775642a6c3743d92fe761203e986f1578e3a3a9b99907505d9fca43b43063e10c35ff244da89de305e76c6464f12de1a72fd87f52d81600bdc07389315fba5401f008b5488c412c20db640758ba080016dcab6061059a07e19da42743ae3e256e44b383364c83aadafb2175c6b", &(0x7f00000000c0)=0x3}) setsockopt$auto_SO_REUSEPORT(r0, 0x1ff, 0xf, &(0x7f0000000280)='\xcb\x00', 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, r0, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2.973421041s ago: executing program 0 (id=25): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) unshare$auto(0x40000083) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="230027bd7000fcdbdf2508ffe9000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x2, 0x200004, 0x1, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.832498293s ago: executing program 3 (id=26): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) ioctl$auto_TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000a40)=0x1dcc00) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/152, 0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={"8e0f2dd2e20776f1cbaa02683de4a86964ed91d560e768330b0be99c938bba2a", 0x7f, 0x2, 0xe00000, 0xf4, 0x31d, 0x0}) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r4, 0x1274, 0x38) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"096eb19f8335eb75eee805bdd65e06b89e6b5b44f6b2ab93cee5b649e602b67a", 0x3, 0xfffffffa, 0x6, 0x3080, 0x2, r3}) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0497bb8f", @ANYRES16=0x0, @ANYBLOB="000102000000fedbdf25050000000500060006000000140008006970766c616e300000000000000000000c000f00070000000000000008000a000c000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$auto_TIPC_NL_NODE_GET(r1, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4050000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\b\x00<\x00', @ANYRES32=r5, @ANYBLOB="b20000000c004b0002000000000000000000"], 0x5f4}, 0x1, 0x0, 0x0, 0x804}, 0x48) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r6, 0x4090ae82, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) r10 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYRES32=r7, @ANYRES16=r9, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100", @ANYRES32=r10, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB="3a2d9a1b3942e698f120396e6d9ef99a782be297f6757efb19479dba5fa6fcb11bb03a73cec84a8482c431569c97"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048050) r11 = set_tid_address$auto(&(0x7f00000001c0)=0x1) msgctl$auto_MSG_STAT(0xc, 0xb, &(0x7f0000000200)={{0x13b, r10, 0xee01, 0x7, 0xc, 0xc, 0x6}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x0, 0x7, 0x6, 0x6b9a, 0x100000001, 0x5, 0x2, 0x9, @raw=0x80, @inferred=r11}) keyctl$auto(0x2, r10, 0xffffffffffffffff, r12, 0x200000000000a) mmap$auto(0x0, 0x400008, 0x3, 0x9b74, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x85, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.506750659s ago: executing program 3 (id=27): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) write$auto(r2, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r4, 0x802c550a, 0x1) write$auto_console_fops_tty_io(r3, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=@test={r1, 0x1d00000, 0xfffffffa, 0x435, 0x7, 0x2, 0xf685, 0x3, 0x9f4, 0x8000, 0x2, 0x3f, 0x0, 0x78d7, 0x3}, 0x8) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x55, 0x19, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @fd=r4}, @generic="2f90ec08038a5140", @typed={0xd, 0x2, 0x0, 0x0, @str='/dev/fb0\x00'}, @typed={0x8, 0xf3, 0x0, 0x0, @fd=r6}, @nested={0x8, 0x138, 0x0, 0x1, [@nested={0x4, 0xb1}]}, @generic="613ee4d2e4c6f9b8912b4417cdb11311d0aecf2d1fa8d5ff5a", @typed={0x8, 0x95, 0x0, 0x0, @fd=r2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x200440c0}, 0x801) setsockopt$auto(r2, 0xfffffff9, 0xf, &(0x7f0000000340)='/dev/bus/usb/009/001\x00', 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.350507462s ago: executing program 1 (id=28): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) close_range$auto(0x2, 0x8, 0x0) creat$auto(0x0, 0x1000) creat$auto(0x0, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xccf82, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) writev$auto(0xffffffffffffffff, 0x0, 0x4) r1 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x34000}, 0x1, 0x0, 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r1, 0x0, 0x40) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x8809899, &(0x7f00000000c0)=0x80000f19d) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x5ce, "b9ece5fd5e3c1269b4c363f9bbf5d57fecf752befbdbf372b1fe090e09dbb5b4b222f134205a8fefb45884e90f1a0df87ef240645b5deb5bd99fee484680e046c145e20a46582d1ee804f02f1882c3f0bf1677e306a97e7041383f2961afb4f40cd8d37e524f4b497499a7c4fbbc678f34517fc01589c30cf60bce8d0fad294f7e1c77f6ba7e57479dac7f72c81e94da7ed832c5d264a7fdf8079cbd3b4ec7b390da7f6ad966a038c5dff2985636c15c66a29c6c261c83c8642b9185ef"}, 0x8000, 0x0, 0x7) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) sched_setaffinity$auto(0x0, 0x80000000, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2, 0x1, 0x0) 1.320835663s ago: executing program 3 (id=29): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r2 = socket(0x2, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x3, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) 703.150803ms ago: executing program 1 (id=30): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r0, &(0x7f0000000300)={0x0, 0x1}, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x4, 0x8, 0x1, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x1142, 0x1ffe}, 0x4, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$auto_SO_DEBUG(r3, 0xfffffffc, 0x1, &(0x7f0000000040)='/dev/cpu/0/cpuid\x00', 0x9) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000480)={[0x1fc, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x8, 0x9, 0x9, 0x2, 0x7]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) 591.847487ms ago: executing program 0 (id=31): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) ioctl$auto_FIONCLEX(r1, 0x5450, 0x18d7) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000001, 0x400, 0x9}]}) r6 = pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x725381, 0x0) setns(r6, 0x4000000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x9) 377.880004ms ago: executing program 2 (id=32): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigpending$auto(0x0, 0x8) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) syz_clone3(&(0x7f0000000340)={0x305000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 0 (id=33): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop14/queue/scheduler\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0xffffffffffffffff) prctl$auto(0x845, 0x5, r1, 0x3, 0x0) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/rcutree/parameters/qlowmark\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x8, 0x3c5e, 0x66) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 97.095587][ T9] cfg80211: failed to load regulatory.db [ 97.876967][ T5816] cgroup: Unknown subsys name 'net' [ 98.000910][ T5816] cgroup: Unknown subsys name 'cpuset' [ 98.010286][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.884323][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.160459][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.171092][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.179209][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.187612][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.190304][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.195663][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.216516][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.233535][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.241784][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.251810][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.258967][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.259003][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.274414][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.274436][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.283395][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.297478][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.304900][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.313460][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.321055][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.334760][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.698239][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 102.948429][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.956728][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.964277][ T5825] bridge_slave_0: entered allmulticast mode [ 102.973373][ T5825] bridge_slave_0: entered promiscuous mode [ 102.989239][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.996763][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.004578][ T5825] bridge_slave_1: entered allmulticast mode [ 103.014357][ T5825] bridge_slave_1: entered promiscuous mode [ 103.140814][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 103.173269][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.240601][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.256796][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 103.392939][ T5825] team0: Port device team_slave_0 added [ 103.437240][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 103.452127][ T5825] team0: Port device team_slave_1 added [ 103.590875][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.599007][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.606440][ T5827] bridge_slave_0: entered allmulticast mode [ 103.613782][ T5827] bridge_slave_0: entered promiscuous mode [ 103.621685][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.629282][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.636575][ T5826] bridge_slave_0: entered allmulticast mode [ 103.643933][ T5826] bridge_slave_0: entered promiscuous mode [ 103.657172][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.664127][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.690702][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.710956][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.718220][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.725432][ T5827] bridge_slave_1: entered allmulticast mode [ 103.732855][ T5827] bridge_slave_1: entered promiscuous mode [ 103.754794][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.762162][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.769780][ T5826] bridge_slave_1: entered allmulticast mode [ 103.777252][ T5826] bridge_slave_1: entered promiscuous mode [ 103.784399][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.791918][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.817993][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.882645][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.895711][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.922674][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.992644][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.017803][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.024945][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.032335][ T5828] bridge_slave_0: entered allmulticast mode [ 104.039940][ T5828] bridge_slave_0: entered promiscuous mode [ 104.052138][ T5827] team0: Port device team_slave_0 added [ 104.103488][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.112719][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.120529][ T5828] bridge_slave_1: entered allmulticast mode [ 104.130471][ T5828] bridge_slave_1: entered promiscuous mode [ 104.153478][ T5827] team0: Port device team_slave_1 added [ 104.166046][ T5825] hsr_slave_0: entered promiscuous mode [ 104.172629][ T5825] hsr_slave_1: entered promiscuous mode [ 104.182805][ T5826] team0: Port device team_slave_0 added [ 104.192545][ T5826] team0: Port device team_slave_1 added [ 104.247219][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.286593][ T5830] Bluetooth: hci0: command tx timeout [ 104.312770][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.337860][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.344861][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.365678][ T5830] Bluetooth: hci3: command tx timeout [ 104.371102][ T5837] Bluetooth: hci1: command tx timeout [ 104.376631][ T5830] Bluetooth: hci2: command tx timeout [ 104.388341][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.414617][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.421820][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.448031][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.474518][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.481732][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.507853][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.535199][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.542437][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.568514][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.582826][ T5828] team0: Port device team_slave_0 added [ 104.593269][ T5828] team0: Port device team_slave_1 added [ 104.715173][ T5827] hsr_slave_0: entered promiscuous mode [ 104.721687][ T5827] hsr_slave_1: entered promiscuous mode [ 104.728389][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.736219][ T5827] Cannot create hsr debugfs directory [ 104.742593][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.749660][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.776140][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.825001][ T5826] hsr_slave_0: entered promiscuous mode [ 104.831778][ T5826] hsr_slave_1: entered promiscuous mode [ 104.838181][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.849617][ T5826] Cannot create hsr debugfs directory [ 104.856047][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.863024][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.889366][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.118476][ T5828] hsr_slave_0: entered promiscuous mode [ 105.124979][ T5828] hsr_slave_1: entered promiscuous mode [ 105.131709][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.139440][ T5828] Cannot create hsr debugfs directory [ 105.361024][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.390103][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.419514][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.449744][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.534458][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.546733][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.576068][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.602190][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.670350][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.691285][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.704522][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.720314][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.856975][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.870763][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.896064][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.910998][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.980661][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.039709][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.065452][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.100005][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.107321][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.126433][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.176413][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.184982][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.192195][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.204681][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.211843][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.232476][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.239764][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.289939][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.325953][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.333133][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.367094][ T5830] Bluetooth: hci0: command tx timeout [ 106.399413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.406632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.445589][ T5830] Bluetooth: hci2: command tx timeout [ 106.445629][ T5837] Bluetooth: hci1: command tx timeout [ 106.451028][ T5830] Bluetooth: hci3: command tx timeout [ 106.502802][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.534576][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.553340][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.648620][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.672227][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.679446][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.712957][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.720189][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.828562][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.139659][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.252448][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.289708][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.359642][ T5827] veth0_vlan: entered promiscuous mode [ 107.399612][ T5827] veth1_vlan: entered promiscuous mode [ 107.453054][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.475884][ T5825] veth0_vlan: entered promiscuous mode [ 107.490788][ T5826] veth0_vlan: entered promiscuous mode [ 107.519284][ T5826] veth1_vlan: entered promiscuous mode [ 107.544329][ T5825] veth1_vlan: entered promiscuous mode [ 107.560940][ T5827] veth0_macvtap: entered promiscuous mode [ 107.598087][ T5827] veth1_macvtap: entered promiscuous mode [ 107.660238][ T5828] veth0_vlan: entered promiscuous mode [ 107.672054][ T5825] veth0_macvtap: entered promiscuous mode [ 107.683886][ T5826] veth0_macvtap: entered promiscuous mode [ 107.696711][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.711556][ T5828] veth1_vlan: entered promiscuous mode [ 107.729436][ T5825] veth1_macvtap: entered promiscuous mode [ 107.742771][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.762167][ T5826] veth1_macvtap: entered promiscuous mode [ 107.773789][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.783925][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.793844][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.803252][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.839964][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.878043][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.897908][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.918598][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.937676][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.947732][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.958687][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.972552][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.991627][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.000627][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.009624][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.018456][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.031142][ T5828] veth0_macvtap: entered promiscuous mode [ 108.086608][ T5828] veth1_macvtap: entered promiscuous mode [ 108.131193][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.163304][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.211096][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.247210][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.260760][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.271286][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.325277][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.334125][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.343373][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.353003][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.365053][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.386328][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.426624][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.448093][ T5830] Bluetooth: hci0: command tx timeout [ 108.475548][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.483431][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.500720][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.512015][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.526414][ T5830] Bluetooth: hci3: command tx timeout [ 108.526880][ T5837] Bluetooth: hci1: command tx timeout [ 108.531870][ T5830] Bluetooth: hci2: command tx timeout [ 108.618505][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.634130][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.750569][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.787435][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.825627][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.983854][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.027614][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.985611][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 110.159479][ T5912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.165864][ T5910] syz.3.5 (5910) used greatest stack depth: 19656 bytes left [ 110.183340][ T5922] bond0: (slave bond_slave_0): Releasing backup interface [ 110.186013][ T5912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.232822][ T5912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.289973][ T5901] mmap: syz.0.1 (5901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.317286][ T5912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.335639][ T5912] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.346109][ T5922] Zero length message leads to an empty skb [ 110.372598][ T5912] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.426942][ T5912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.432993][ T5912] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.606155][ T5830] Bluetooth: hci3: command tx timeout [ 110.764774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.774858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.857912][ T5912] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.938585][ T5912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.957309][ T5912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.066411][ T5912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.462716][ T5931] Invalid ELF header magic: != ELF [ 111.730358][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.366426][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.445925][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.532683][ T5939] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 112.811807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.821454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.830194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.915427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 112.945818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.005863][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.515911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.565975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.605694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.671980][ T5948] process 'syz.3.11' launched '/dev/fd/3' with NULL argv: empty string added [ 113.805473][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.220495][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.308510][ T5958] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 114.445465][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.525519][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.085503][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.708934][ T5977] random: crng reseeded on system resumption [ 115.887723][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.525437][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.605481][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.167082][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.260894][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 122.081982][ T6067] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 122.122220][ T6067] CIFS mount error: No usable UNC path provided in device string! [ 122.122220][ T6067] [ 122.165094][ T6067] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 122.788188][ T6072] [ 122.790554][ T6072] ====================================================== [ 122.797570][ T6072] WARNING: possible circular locking dependency detected [ 122.804599][ T6072] 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 Not tainted [ 122.811705][ T6072] ------------------------------------------------------ [ 122.818719][ T6072] syz.0.33/6072 is trying to acquire lock: [ 122.824522][ T6072] ffff888025922cd8 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 122.834132][ T6072] [ 122.834132][ T6072] but task is already holding lock: [ 122.841497][ T6072] ffff8880259227a8 (&q->q_usage_counter(io)#31){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 122.852770][ T6072] [ 122.852770][ T6072] which lock already depends on the new lock. [ 122.852770][ T6072] [ 122.863172][ T6072] [ 122.863172][ T6072] the existing dependency chain (in reverse order) is: [ 122.872184][ T6072] [ 122.872184][ T6072] -> #2 (&q->q_usage_counter(io)#31){++++}-{0:0}: [ 122.880810][ T6072] blk_alloc_queue+0x619/0x760 [ 122.886117][ T6072] blk_mq_alloc_queue+0x179/0x290 [ 122.891684][ T6072] __blk_mq_alloc_disk+0x29/0x120 [ 122.897245][ T6072] loop_add+0x496/0xb70 [ 122.901935][ T6072] loop_init+0x164/0x270 [ 122.906717][ T6072] do_one_initcall+0x120/0x6e0 [ 122.912018][ T6072] kernel_init_freeable+0x5c2/0x900 [ 122.917762][ T6072] kernel_init+0x1c/0x2b0 [ 122.922627][ T6072] ret_from_fork+0x48/0x80 [ 122.927567][ T6072] ret_from_fork_asm+0x1a/0x30 [ 122.932867][ T6072] [ 122.932867][ T6072] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 122.940093][ T6072] fs_reclaim_acquire+0x102/0x150 [ 122.945659][ T6072] kmem_cache_alloc_noprof+0x53/0x3b0 [ 122.951577][ T6072] __kernfs_new_node+0xd2/0x8a0 [ 122.956983][ T6072] kernfs_new_node+0x13c/0x1e0 [ 122.962292][ T6072] kernfs_create_dir_ns+0x4c/0x1a0 [ 122.967941][ T6072] sysfs_create_dir_ns+0x13a/0x2b0 [ 122.973596][ T6072] kobject_add_internal+0x2c4/0x9b0 [ 122.979327][ T6072] kobject_add+0x16e/0x240 [ 122.984286][ T6072] elv_register_queue+0xd3/0x2a0 [ 122.989786][ T6072] blk_register_queue+0x3c4/0x560 [ 122.995342][ T6072] add_disk_fwnode+0x911/0x13a0 [ 123.000734][ T6072] nbd_dev_add+0x78e/0xbb0 [ 123.005680][ T6072] nbd_init+0x181/0x320 [ 123.010384][ T6072] do_one_initcall+0x120/0x6e0 [ 123.015696][ T6072] kernel_init_freeable+0x5c2/0x900 [ 123.021445][ T6072] kernel_init+0x1c/0x2b0 [ 123.026312][ T6072] ret_from_fork+0x48/0x80 [ 123.031281][ T6072] ret_from_fork_asm+0x1a/0x30 [ 123.036587][ T6072] [ 123.036587][ T6072] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 123.044418][ T6072] __lock_acquire+0x1173/0x1ba0 [ 123.049803][ T6072] lock_acquire+0x179/0x350 [ 123.054849][ T6072] __mutex_lock+0x199/0xb90 [ 123.059900][ T6072] elv_iosched_store+0x201/0x5f0 [ 123.065385][ T6072] queue_attr_store+0x273/0x310 [ 123.070760][ T6072] sysfs_kf_write+0xf2/0x150 [ 123.075891][ T6072] kernfs_fop_write_iter+0x351/0x510 [ 123.081713][ T6072] vfs_write+0x5ba/0x1180 [ 123.086585][ T6072] ksys_write+0x12a/0x240 [ 123.091439][ T6072] do_syscall_64+0xcd/0x230 [ 123.096488][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.102909][ T6072] [ 123.102909][ T6072] other info that might help us debug this: [ 123.102909][ T6072] [ 123.113141][ T6072] Chain exists of: [ 123.113141][ T6072] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#31 [ 123.113141][ T6072] [ 123.126905][ T6072] Possible unsafe locking scenario: [ 123.126905][ T6072] [ 123.134354][ T6072] CPU0 CPU1 [ 123.139714][ T6072] ---- ---- [ 123.145073][ T6072] lock(&q->q_usage_counter(io)#31); [ 123.150477][ T6072] lock(fs_reclaim); [ 123.156990][ T6072] lock(&q->q_usage_counter(io)#31); [ 123.164898][ T6072] lock(&q->elevator_lock); [ 123.169497][ T6072] [ 123.169497][ T6072] *** DEADLOCK *** [ 123.169497][ T6072] [ 123.177636][ T6072] 6 locks held by syz.0.33/6072: [ 123.182569][ T6072] #0: ffff8880345287f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 123.191653][ T6072] #1: ffff88802484c420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 123.200669][ T6072] #2: ffff88805e917088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 123.210458][ T6072] #3: ffff8880259d1968 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 123.220502][ T6072] #4: ffff8880259227a8 (&q->q_usage_counter(io)#31){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 123.232203][ T6072] #5: ffff8880259227e0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 123.244178][ T6072] [ 123.244178][ T6072] stack backtrace: [ 123.250085][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.0.33 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 123.250117][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.250137][ T6072] Call Trace: [ 123.250146][ T6072] [ 123.250158][ T6072] dump_stack_lvl+0x116/0x1f0 [ 123.250203][ T6072] print_circular_bug+0x275/0x350 [ 123.250236][ T6072] check_noncircular+0x14c/0x170 [ 123.250270][ T6072] __lock_acquire+0x1173/0x1ba0 [ 123.250308][ T6072] lock_acquire+0x179/0x350 [ 123.250339][ T6072] ? elv_iosched_store+0x201/0x5f0 [ 123.250373][ T6072] ? __pfx___might_resched+0x10/0x10 [ 123.250401][ T6072] ? do_raw_spin_lock+0x12c/0x2b0 [ 123.250441][ T6072] __mutex_lock+0x199/0xb90 [ 123.250477][ T6072] ? elv_iosched_store+0x201/0x5f0 [ 123.250510][ T6072] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.250544][ T6072] ? elv_iosched_store+0x201/0x5f0 [ 123.250575][ T6072] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.250611][ T6072] ? __pfx___mutex_lock+0x10/0x10 [ 123.250652][ T6072] ? __pfx_autoremove_wake_function+0x10/0x10 [ 123.250686][ T6072] ? elv_iosched_store+0x201/0x5f0 [ 123.250717][ T6072] elv_iosched_store+0x201/0x5f0 [ 123.250750][ T6072] ? __pfx_elv_iosched_store+0x10/0x10 [ 123.250784][ T6072] ? __mutex_trylock_common+0xe9/0x250 [ 123.250818][ T6072] ? __pfx_elv_iosched_store+0x10/0x10 [ 123.250851][ T6072] queue_attr_store+0x273/0x310 [ 123.250874][ T6072] ? __pfx_queue_attr_store+0x10/0x10 [ 123.250908][ T6072] ? find_held_lock+0x2b/0x80 [ 123.250932][ T6072] ? sysfs_file_kobj+0xe4/0x290 [ 123.250969][ T6072] ? __pfx_queue_attr_store+0x10/0x10 [ 123.250991][ T6072] sysfs_kf_write+0xf2/0x150 [ 123.251027][ T6072] kernfs_fop_write_iter+0x351/0x510 [ 123.251070][ T6072] ? __pfx_sysfs_kf_write+0x10/0x10 [ 123.251106][ T6072] vfs_write+0x5ba/0x1180 [ 123.251128][ T6072] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 123.251160][ T6072] ? __pfx___mutex_lock+0x10/0x10 [ 123.251196][ T6072] ? __pfx_vfs_write+0x10/0x10 [ 123.251227][ T6072] ksys_write+0x12a/0x240 [ 123.251249][ T6072] ? __pfx_ksys_write+0x10/0x10 [ 123.251271][ T6072] ? rcu_is_watching+0x12/0xc0 [ 123.251295][ T6072] do_syscall_64+0xcd/0x230 [ 123.251331][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.251355][ T6072] RIP: 0033:0x7ff8b818e969 [ 123.251377][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.251403][ T6072] RSP: 002b:00007ff8b907b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.251424][ T6072] RAX: ffffffffffffffda RBX: 00007ff8b83b5fa0 RCX: 00007ff8b818e969 [ 123.251440][ T6072] RDX: 0000000000000001 RSI: 0000200000003900 RDI: 0000000000000003 [ 123.251454][ T6072] RBP: 00007ff8b8210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 123.251468][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.251482][ T6072] R13: 0000000000000000 R14: 00007ff8b83b5fa0 R15: 00007ffee5c02388 [ 123.251504][ T6072]