last executing test programs: 4.944726596s ago: executing program 1 (id=60): r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x7fffffff, 0x3, &(0x7f0000001440)='nl80211\x00', 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xe}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x7ff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa9a59da6f72f812e}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x50df82, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mlock$auto(0x36a, 0x80008) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.440925022s ago: executing program 0 (id=61): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x3f00, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 4.333093854s ago: executing program 2 (id=62): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x1, 0xeb1, r0, 0xfffffffffffffffb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r1, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x42800, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)="ff") syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x1) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x129240, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ffffffffffffffe, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}}, 0x3, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe66, 0x6) mmap$auto(0x0, 0x6, 0x20004000000000df, 0xeb1, r4, 0x8000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r5, 0x80dc5521, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x100110d, 0xffff, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x8}, 0x6, 0x0, 0x4, @inferred, @integer64={0x6, 0x4, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) 4.285360299s ago: executing program 3 (id=63): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14080000", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x0, 0x5, 0x6, 0x15, r0, 0x300000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r1 = socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000280)="f2ab8f1609f263143b1765755da7196e9a94a01380438356100e4932d0bce9e5149b7f3cd0367f14580963fc6b6d0122ffdeb1ef5ebda333b717cae8b9d4d9fef5bdb8d785b7065df6ac") writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 3.945318251s ago: executing program 0 (id=64): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521, 0x0) socket(0xa, 0x801, 0x84) writev$auto(0xffffffffffffffff, 0x0, 0x61b3) write$auto(0xffffffffffffffff, 0x0, 0x2) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x6}, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) socketpair$auto(0xfff, 0xe, 0x7, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r2, 0x3b8c, r0) 3.483112407s ago: executing program 3 (id=65): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000001140)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x8000000000000000, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0xb, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "5cde27d22b6954bdbb7cf615d0373b7c7bc646d596ecc89527157b0fa70d213d226ec500ee033873d2d6914ddb263dd69471883d9a6e255e1c47b3b7319cc531e94ba28d0a0c75f3a9ece3ca36f0998f1e881b6c37c2820f79a236066be361fc9f70b993f7eeeaa8c4f99b14f3dfcda545b681494619d241e07141770e0f3c345a8d38d0cba788646d675fb24823bb81eeb639d391e13cbf37ec6c41b76b3acf9a687d31f28abcc84b579ab8820a5ae3e20e0c6d4adf5308988f8fb341546b9f"}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/total_time_ms\x00', 0x22400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/4091, 0xffb) r3 = getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r5, 0x0, 0x40002) getdents64$auto(r5, 0x0, 0x400) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001100), r5) sendfile$auto(r4, r4, 0x0, 0x5) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.14021384s ago: executing program 1 (id=66): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x2000000000000, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 3.004738374s ago: executing program 3 (id=67): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x640002, 0x130) open(0x0, 0x40000, 0x31) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, 0x0, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) listen$auto(0x3, 0x83) 2.886545741s ago: executing program 0 (id=68): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x1090c1, 0x0) r0 = clone$auto(0x7, 0x9, &(0x7f0000000000)=0x80000000, &(0x7f0000000040)=0xb, 0x4) clone3$auto(0x0, 0x9) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000000)=""/65, 0x41) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000ef7bdff8d7405ad5cd407629ed98", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf256b00000015000d018223d208b7dd3463a3a936688073d724bb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r8 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x800, 0x0) read$auto(r8, 0x0, 0x1) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r9, r10, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fb7d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r5, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) ioctl$auto_HPET_DPI(0xffffffffffffffff, 0x6805, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", '\x00', "04622c3aac2504ff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799443a9576c948fc3fb995daec2f1fc9170a7000000004f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f09a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d61597d52c380a5c79e1dfa060cdb00680f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) r11 = socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) ioctl$auto_BLKTRACESETUP32(r11, 0xc0401273, &(0x7f0000000100)={"8c537e83c215b5d938c6494d6ddd500401beee535d24c8a6910745fc3afedc6f", 0xdc, 0x9, 0x12ee40ca, 0x3, 0x6, r0}) tkill$auto(r12, 0x7) 2.743989017s ago: executing program 1 (id=69): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) 2.723037285s ago: executing program 2 (id=70): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x7, &(0x7f0000000040)='/dev/nullb0\x00', &(0x7f0000000080)="7905128af3bf3a52c7f3fd729f27f9d768b8e91c2713aa16b2c87b7bfdfa6e1f3b649aafc630c8ec0f2b081856f78bab65dd47ab034de01e10096b1d99f2cf0310a166dc28403921ff39ebea3ac0a156b00b4e6e9da2bc4ad09a6f98155641016433dcdd3c935ae4285fd071a5a0f1b024dd1d8e687565fe96e2b1879f4529ba6ed575956c83e4c9192ee0aaf4b2e2e6be4eaf73a334f971d3c2e523e37390df6b026d877797a7b68b76e116b473fde091a8be98993ee1072fd2a4b890daec628ae6", 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2002, 0x0) sendfile$auto(r2, r2, 0x0, 0x80000000003) mmap$auto(0x4000000000000003, 0x8000, 0x3, 0x13, r1, 0x7ffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x8, 0x7fffffffffffffff, 0x1) 2.291148821s ago: executing program 3 (id=71): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x3, 0x40000c, 0x3aec000000, 0x9b78, 0x2, 0x7ffd) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) 2.267633088s ago: executing program 2 (id=72): openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2da580, 0x0) r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) mmap$auto(0x7, 0x400008, 0xa, 0x9b70, r0, 0x100000008000) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r1, 0x10e, 0xb, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) setresuid$auto(0x2, 0x7, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) socket(0x2, 0x3, 0xa) read$auto(r3, 0x0, 0x20) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r4, &(0x7f0000000680)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x5) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) write$auto(0xffffffffffffffff, 0x0, 0x81) 1.827394862s ago: executing program 0 (id=73): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) pipe$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/ip6gre0/base_reachable_time_ms\x00', 0x82082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x1000000028000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socketpair$auto(0x1, 0x2, 0x3, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) 1.234730549s ago: executing program 1 (id=74): mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x80040, 0x80, 0x14}, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x6) socket(0x26, 0x80805, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop3/events\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/194, 0xc2) sysfs$auto(0x2, 0x10000000000002c, 0x0) socket(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd2$auto(0xcd2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x4000000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 1.181665445s ago: executing program 2 (id=75): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0x2, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x100017d) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 943.370683ms ago: executing program 0 (id=76): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x3f00000000000000, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 783.405464ms ago: executing program 2 (id=77): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x3000000000000, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 602.240268ms ago: executing program 1 (id=78): write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0xaf, 0x3, 0x0, 0x1, [@generic="76db3f1b08c42c2d1f7881fd797842d0198851a5323769623aa6a9ad8625784e5b2e1440f4cbd4df95aae395474214f9d8e8830cd3e7461e4232ec5eaca49862c6052701b7e1453289e01ce6e430196cec703b551d90041eb00a5b9ef3da74583d460aa6db3d894e69ba0a6dca6fcf4218c84f072403f2abe77c94804f34230196bdafb7ea59c3b828af3433d79fdc76d62ceec48c9fc1f7ff8a60732967c6cc3f1fcfc9a17e131fdf0b51"]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x3e4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS={0x3b9, 0x11, 0x0, 0x1, [@nested={0x18, 0xd8, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0x10b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x4}]}, @nested={0x8b, 0xd5, 0x0, 0x1, [@nested={0x4, 0x12}, @generic="cefc7d36b83c71dda113ebcaaa6f543345926be7b86cb349bdde6048b1f33933aa5766508c755080cfeb4a068a8ca2a0f65fc28e5b2480b5dad329f5dc8ac57fcfade1a5070dbcbfbbce9bb3a25bf8c5ada77f8913eb637680f4826fa3075cd3021ea9e51d36f20bf3e8289438042330b32bfc823015d6c22f55047f9a03cc0dde73f0"]}, @nested={0x27, 0x150, 0x0, 0x1, [@generic="d0769b12d51375b3056d150c6f1e1f594f06c31bb8a8645d63551cb4796c06834f23aa"]}, @generic="3e62145a607a0ce2925d1990e10aa8cb996be24bc3f17877d44e5219c2cc9c9f17ac7d330a5173f36086ae48612c802900a1daeccc9803981ef76c0f37ce085eab902ff97b0768bd447da57b90", @typed={0xd, 0x11e, 0x0, 0x0, @str='!\\,*^$./\x00'}, @nested={0x2c, 0x84, 0x0, 0x1, [@generic="c76d836144a2789ecfc64ff0c814e9972b2f1ff22e8d8887717f9f4de99ebd37f8c76d57684aaac7"]}, @generic="0902364cfbc3e490bc69d43f1ef96b8157cd5208c362be2c91f28a103ed80c407e03f6ab4f7c1430a63bc8edd4fc1ae963db2091f98a2ee115e2d0665e32ccc41f63db6b0bfd3cfa129c9fbf79821f7c1968a93b7fd47f4653fc597b4447c50ab96e0335be28368c5c089f054860899a2b24c3f791f942535487eddffdf8fee2d0a61a22a28d1f4df86cf34b5b7c2cedbf977b0c7bce434573af9f41572e7f5923ba6dcca204f50f59c35beb444c6f974daf8c825e642812c5b62b929a02ce3fc2941173e48772af13f2d4239ff4edd56a848e3eca7b1d13d670d314f18d18ba6aa74ed8103649593565fed114167b6298b794a866d72e9f", @nested={0x166, 0xf7, 0x0, 0x1, [@generic="63ae26c31c9367a63fbe38a0dd2bb45a9d9c873934108b541f45a8850d214e2d15971e863ee26bc5b3051a62d2c04db0d750578ad1f0610964a1765812ae1083a01b0d75915895d752d5023a28982181845029342e060584c854b18643adcd93a6bdafe9560882525dfbdf4a921898e2f3c37ac720a09fc188998e5c55374ff43a92a4cf56c8088d5bf409681c0129f620e5be45c8b155cf48680ff598f342e69eb6f308ee623ffddea46b89dfd4309dff2abc95d61a018ef55727973289c62760d0b07eebde6156423e", @nested={0x4, 0xbf}, @generic="1bd5c47ae0ba6e6d1dad36378b55e1dece7ea5218794c1d2659356b6b1da7fbed84cffa9375dd0dac08d0d4d1aa8fa4743d4af9650eae114e475284fc3ceb9748c2a376b642363e5a496ac7d6189b193f83a65ce32a335e8bbb176dbc0feddb23214a4cd2e4b6aeb7dcfc97fe4125861e1a9b18b14164aa6d8f0f784581f59370c5eff7afa442bce6e7d4834baf097db45a3c2bf"]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x6}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x143242, 0x164) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 419.635611ms ago: executing program 3 (id=79): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0xe4, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 154.170757ms ago: executing program 2 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2503000000040007800c0002000500000003000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8880) 128.674653ms ago: executing program 1 (id=81): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002cbd7000fbdbdf256c000000080005001e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') fchdir$auto(r4) rename$auto(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00') ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r6 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) read$auto_tracing_total_entries_fops_trace(r6, 0x0, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x9, 0xfffffffffffffbff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0) read$auto(r7, &(0x7f0000000100)='\xcb%)\x00', 0x7) splice$auto(r7, &(0x7f0000000040)=0x7, r5, &(0x7f0000000080)=0x7, 0x26c4, 0x895) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/queues/tx-5/xps_rxqs\x00', 0xc2480, 0x0) write$auto(r8, &(0x7f0000000040)='7\x0e\xff\xff\x04|R[\x12;\x02\xe8 k', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) userfaultfd$auto(0x6) 126.906174ms ago: executing program 0 (id=82): close_range$auto(0x2, 0x8, 0x0) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x3a59}) 0s ago: executing program 3 (id=83): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) setfsgid$auto(0xee01) setfsgid$auto(0xee01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0xa, 0x5, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) bind$auto(r0, 0x0, 0x6f) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)={0x0, 0xc7, {0xfffffffb, 0x7, 0x5, 0x0, 0x0, 0x1, 0x101, 0x7, 0x2}}) socket(0x2, 0x801, 0x106) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0xfffffffe}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x7ff, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x1, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x8, 0x1, 0x3, 0x3, 0x5, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x100, 0x8001, 0x0, 0x1, 0x7, 0x9, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 100.277329][ T5818] cgroup: Unknown subsys name 'net' [ 100.425295][ T5818] cgroup: Unknown subsys name 'cpuset' [ 100.435204][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.288005][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.473589][ T796] cfg80211: failed to load regulatory.db [ 104.445791][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.454136][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.459263][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.462641][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.472546][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.485599][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.489794][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.492997][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.500925][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.514161][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.522584][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.523234][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.538123][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.543336][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.547302][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.556588][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.564190][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.572603][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.579542][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.594126][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.202927][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 105.264902][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 105.361374][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 105.382523][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 105.522781][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.530639][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.538361][ T5834] bridge_slave_0: entered allmulticast mode [ 105.546152][ T5834] bridge_slave_0: entered promiscuous mode [ 105.582879][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.590218][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.597840][ T5834] bridge_slave_1: entered allmulticast mode [ 105.605467][ T5834] bridge_slave_1: entered promiscuous mode [ 105.669361][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.677004][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.684959][ T5833] bridge_slave_0: entered allmulticast mode [ 105.692690][ T5833] bridge_slave_0: entered promiscuous mode [ 105.735251][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.742983][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.750208][ T5833] bridge_slave_1: entered allmulticast mode [ 105.758217][ T5833] bridge_slave_1: entered promiscuous mode [ 105.794718][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.827569][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.834979][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.842279][ T5835] bridge_slave_0: entered allmulticast mode [ 105.849901][ T5835] bridge_slave_0: entered promiscuous mode [ 105.860345][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.881377][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.889373][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.897095][ T5836] bridge_slave_0: entered allmulticast mode [ 105.904606][ T5836] bridge_slave_0: entered promiscuous mode [ 105.912581][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.919917][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.927487][ T5835] bridge_slave_1: entered allmulticast mode [ 105.935297][ T5835] bridge_slave_1: entered promiscuous mode [ 105.958156][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.967895][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.975265][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.982847][ T5836] bridge_slave_1: entered allmulticast mode [ 105.990233][ T5836] bridge_slave_1: entered promiscuous mode [ 106.023226][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.059513][ T5834] team0: Port device team_slave_0 added [ 106.092153][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.103862][ T5834] team0: Port device team_slave_1 added [ 106.128876][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.141145][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.167514][ T5833] team0: Port device team_slave_0 added [ 106.176362][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.213559][ T5833] team0: Port device team_slave_1 added [ 106.220535][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.228161][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.254760][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.301778][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.308841][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.335444][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.360462][ T5835] team0: Port device team_slave_0 added [ 106.389444][ T5836] team0: Port device team_slave_0 added [ 106.398101][ T5835] team0: Port device team_slave_1 added [ 106.409673][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.417189][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.443705][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.456809][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.464196][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.491115][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.504324][ T5836] team0: Port device team_slave_1 added [ 106.580827][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.587946][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.614878][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.632183][ T5845] Bluetooth: hci1: command tx timeout [ 106.632187][ T5839] Bluetooth: hci0: command tx timeout [ 106.643805][ T53] Bluetooth: hci2: command tx timeout [ 106.649657][ T5846] Bluetooth: hci3: command tx timeout [ 106.656608][ T5834] hsr_slave_0: entered promiscuous mode [ 106.663523][ T5834] hsr_slave_1: entered promiscuous mode [ 106.670815][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.678447][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.704775][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.728458][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.735734][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.762286][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.776222][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.783273][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.810155][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.857309][ T5833] hsr_slave_0: entered promiscuous mode [ 106.864170][ T5833] hsr_slave_1: entered promiscuous mode [ 106.870444][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 106.876501][ T5833] Cannot create hsr debugfs directory [ 107.004884][ T5835] hsr_slave_0: entered promiscuous mode [ 107.012091][ T5835] hsr_slave_1: entered promiscuous mode [ 107.018517][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 107.024446][ T5835] Cannot create hsr debugfs directory [ 107.044152][ T5836] hsr_slave_0: entered promiscuous mode [ 107.051131][ T5836] hsr_slave_1: entered promiscuous mode [ 107.057449][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 107.063634][ T5836] Cannot create hsr debugfs directory [ 107.523657][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.541348][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.554459][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.576330][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.651330][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.669391][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.696133][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.710107][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.784030][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.799679][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.823840][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.849435][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.943671][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.975758][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.995441][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.010019][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.046674][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.119753][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.155189][ T656] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.162887][ T656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.196804][ T656] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.204176][ T656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.242876][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.283962][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.323845][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.352543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.359935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.373531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.380778][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.408486][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.453048][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.460186][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.478229][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.524695][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.533016][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.607339][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.649023][ T656] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.656323][ T656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.708570][ T656] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.716126][ T656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.723426][ T53] Bluetooth: hci2: command tx timeout [ 108.729011][ T53] Bluetooth: hci1: command tx timeout [ 108.730683][ T5839] Bluetooth: hci0: command tx timeout [ 108.735337][ T5846] Bluetooth: hci3: command tx timeout [ 108.956962][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.103136][ T5834] veth0_vlan: entered promiscuous mode [ 109.146380][ T5834] veth1_vlan: entered promiscuous mode [ 109.237423][ T5834] veth0_macvtap: entered promiscuous mode [ 109.276361][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.286065][ T5834] veth1_macvtap: entered promiscuous mode [ 109.339198][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.363004][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.386549][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.426264][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.440445][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.458574][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.474541][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.552576][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.589893][ T5835] veth0_vlan: entered promiscuous mode [ 109.639579][ T5833] veth0_vlan: entered promiscuous mode [ 109.649737][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.668255][ T5833] veth1_vlan: entered promiscuous mode [ 109.674902][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.678553][ T5835] veth1_vlan: entered promiscuous mode [ 109.743023][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.753816][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.824997][ T5833] veth0_macvtap: entered promiscuous mode [ 109.842398][ T5836] veth0_vlan: entered promiscuous mode [ 109.848241][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.860043][ T5833] veth1_macvtap: entered promiscuous mode [ 109.894276][ T5836] veth1_vlan: entered promiscuous mode [ 109.904328][ T5835] veth0_macvtap: entered promiscuous mode [ 109.938523][ T5835] veth1_macvtap: entered promiscuous mode [ 109.972299][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.994124][ T5922] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.017143][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.049063][ T344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.065288][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.087201][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.106158][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.114813][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.133910][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.154790][ T5836] veth0_macvtap: entered promiscuous mode [ 110.179108][ T656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.189385][ T656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.263484][ T656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.275801][ T656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.289370][ T5836] veth1_macvtap: entered promiscuous mode [ 110.427918][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.454191][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.491162][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.499271][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.546851][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.589546][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.610059][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.630644][ T656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.650564][ T656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.661825][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.733845][ T656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.752998][ T656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.791351][ T5846] Bluetooth: hci3: command tx timeout [ 110.791391][ T5845] Bluetooth: hci2: command tx timeout [ 110.796903][ T53] Bluetooth: hci1: command tx timeout [ 110.803602][ T5839] Bluetooth: hci0: command tx timeout [ 110.843431][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.886957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.970236][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.019551][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.190794][ T656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.202362][ T656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.221813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.230423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.321195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.541715][ T5933] block nbd0: not configured, cannot reconfigure [ 111.751672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.861583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.876533][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.934920][ T5845] block nbd0: Receive control failed (result -107) [ 112.271329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.476741][ T5845] block nbd1: Receive control failed (result -107) [ 112.558439][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 112.761691][ T5845] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 112.761731][ T5845] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 112.773845][ T5960] program syz.3.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.776963][ T5845] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 112.868683][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 112.872238][ T5839] Bluetooth: hci0: command tx timeout [ 112.881041][ T5846] Bluetooth: hci3: command tx timeout [ 112.883003][ T5845] Bluetooth: hci2: command tx timeout [ 112.888500][ T53] Bluetooth: hci1: command tx timeout [ 112.948490][ T5955] futex_wake_op: syz.0.11 tries to shift op by -1; fix this program [ 112.982226][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 113.148100][ T5951] syz.3.9 (5951) used greatest stack depth: 19688 bytes left [ 113.424368][ T5846] block nbd2: Receive control failed (result -107) [ 113.822666][ T5846] block nbd3: Receive control failed (result -107) [ 114.183367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.312725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.573895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 116.008819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 116.053042][ T6017] mmap: syz.2.26 (6017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.024695][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 117.087558][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 117.595095][ T5846] block nbd4: Receive control failed (result -107) [ 118.232721][ T6042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.751393][ T6045] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 119.201018][ T30] audit: type=1800 audit(1765717195.440:2): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.33" name="discovery_nqn" dev="configfs" ino=8151 res=0 errno=0 [ 120.043561][ T6069] netlink: 330 bytes leftover after parsing attributes in process `syz.1.34'. [ 120.102128][ T6068] vcan0: tx drop: invalid da for name 0x000000000000003f [ 120.156319][ T6072] nbd: couldn't find a device at index 35644 [ 120.506450][ T6047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 121.164034][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 122.156686][ T6083] Zero length message leads to an empty skb [ 122.172411][ T6076] netlink: 330 bytes leftover after parsing attributes in process `syz.2.36'. [ 124.037720][ T6120] hub 1-0:1.0: USB hub found [ 124.088373][ T6120] hub 1-0:1.0: 1 port detected [ 124.192298][ T6121] hub 1-0:1.0: USB hub found [ 124.214602][ T6121] hub 1-0:1.0: 1 port detected [ 124.573128][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 124.591833][ T6125] ipvlan0: entered promiscuous mode [ 124.597127][ T6125] ipvlan0: entered allmulticast mode [ 124.687109][ T6125] veth0_vlan: entered allmulticast mode [ 125.853328][ T796] Process accounting resumed [ 126.778354][ T6140] netlink: 330 bytes leftover after parsing attributes in process `syz.1.45'. [ 126.788448][ T6140] ›: renamed from bond_slave_0 (while UP) [ 127.235731][ T6118] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.028189][ T5846] block nbd5: Receive control failed (result -107) [ 129.544348][ T30] audit: type=1804 audit(1765717205.820:3): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.55" name="/newroot/18/file0" dev="tmpfs" ino=110 res=1 errno=0 [ 129.589580][ T6175] FAULT_INJECTION: forcing a failure. [ 129.589580][ T6175] name failslab, interval 1, probability 0, space 0, times 1 [ 129.603204][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.2.54 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.603256][ T6175] Tainted: [L]=SOFTLOCKUP [ 129.603274][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.603302][ T6175] Call Trace: [ 129.603313][ T6175] [ 129.603325][ T6175] dump_stack_lvl+0x16c/0x1f0 [ 129.603383][ T6175] should_fail_ex+0x512/0x640 [ 129.603419][ T6175] ? kmem_cache_alloc_noprof+0x62/0x770 [ 129.603466][ T6175] should_failslab+0xc2/0x120 [ 129.603519][ T6175] kmem_cache_alloc_noprof+0x83/0x770 [ 129.603566][ T6175] ? acpi_ut_create_generic_state+0x61/0xc0 [ 129.603616][ T6175] ? acpi_ut_create_generic_state+0x61/0xc0 [ 129.603654][ T6175] acpi_ut_create_generic_state+0x61/0xc0 [ 129.603691][ T6175] acpi_ds_scope_stack_push+0x70/0x790 [ 129.603738][ T6175] acpi_ds_init_aml_walk+0x2d8/0x680 [ 129.603784][ T6175] acpi_ds_call_control_method+0x3a2/0xab0 [ 129.603849][ T6175] acpi_ps_parse_aml+0xab3/0x1170 [ 129.603904][ T6175] acpi_ps_execute_method+0x5c4/0xe90 [ 129.603958][ T6175] acpi_ns_evaluate+0x98c/0x16d0 [ 129.604016][ T6175] acpi_evaluate_object+0x4ca/0xdf0 [ 129.604053][ T6175] ? ksys_read+0x12a/0x250 [ 129.604108][ T6175] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 129.604148][ T6175] ? __pfx___might_resched+0x10/0x10 [ 129.604201][ T6175] acpi_evaluate_integer+0xdd/0x230 [ 129.604251][ T6175] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 129.604321][ T6175] ? __pfx_status_show+0x10/0x10 [ 129.604354][ T6175] status_show+0xa0/0x120 [ 129.604386][ T6175] ? __pfx_status_show+0x10/0x10 [ 129.604431][ T6175] dev_attr_show+0x56/0xe0 [ 129.604482][ T6175] ? __pfx_dev_attr_show+0x10/0x10 [ 129.604523][ T6175] sysfs_kf_seq_show+0x216/0x3e0 [ 129.604566][ T6175] seq_read_iter+0x50e/0x12d0 [ 129.604630][ T6175] kernfs_fop_read_iter+0x46c/0x610 [ 129.604685][ T6175] ? rw_verify_area+0xcf/0x6c0 [ 129.604732][ T6175] vfs_read+0x8bf/0xcf0 [ 129.604787][ T6175] ? __pfx_vfs_read+0x10/0x10 [ 129.604869][ T6175] ksys_read+0x12a/0x250 [ 129.604929][ T6175] ? __pfx_ksys_read+0x10/0x10 [ 129.604990][ T6175] do_syscall_64+0xcd/0xf80 [ 129.605047][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.605082][ T6175] RIP: 0033:0x7f102858f7c9 [ 129.605116][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.605148][ T6175] RSP: 002b:00007f102944f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.605179][ T6175] RAX: ffffffffffffffda RBX: 00007f10287e5fa0 RCX: 00007f102858f7c9 [ 129.605200][ T6175] RDX: 0000000000000076 RSI: 0000200000000140 RDI: 0000000000000005 [ 129.605220][ T6175] RBP: 00007f1028613f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.605239][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.605259][ T6175] R13: 00007f10287e6038 R14: 00007f10287e5fa0 R15: 00007ffe7d6d9ee8 [ 129.605303][ T6175] [ 129.605416][ T6175] ACPI Error: ffff88807e80c000 walk still has a scope list (20250807/dswstate-694) [ 130.017001][ T6175] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 131.153598][ T6190] futex_wake_op: syz.0.57 tries to shift op by -2048; fix this program [ 131.305729][ T6190] futex_wake_op: syz.0.57 tries to shift op by -2048; fix this program [ 131.364424][ T6204] 0x000000000001-0x000000020000 : "" [ 131.634721][ T6204] ftl_cs: FTL header corrupt! [ 132.067695][ T30] audit: type=1800 audit(1765717208.340:4): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="dbroot" dev="configfs" ino=9816 res=0 errno=0 [ 132.605278][ T5846] block nbd6: Receive control failed (result -107) [ 132.628534][ T6217] Invalid ELF header magic: != ELF [ 133.502066][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 133.775536][ T5846] block nbd7: Receive control failed (result -107) [ 135.688944][ T6270] netlink: 25 bytes leftover after parsing attributes in process `syz.2.75'. [ 135.719007][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 135.786253][ T6270] netlink: 198 bytes leftover after parsing attributes in process `syz.2.75'. [ 136.113264][ T5846] block nbd8: Receive control failed (result -107) [ 136.270321][ T5846] block nbd9: Receive control failed (result -107) [ 136.434261][ T5846] block nbd10: Receive control failed (result -107) [ 136.781980][ T6294] nbd0: detected capacity change from 0 to 25165824 [ 136.808048][ T5822] [ 136.810447][ T5822] ====================================================== [ 136.817584][ T5822] WARNING: possible circular locking dependency detected [ 136.824643][ T5822] syzkaller #0 Tainted: G L [ 136.831014][ T5822] ------------------------------------------------------ [ 136.838254][ T5822] udevd/5822 is trying to acquire lock: [ 136.843842][ T5822] ffff8880780f3870 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x423/0x12d0 [ 136.853190][ T5822] [ 136.853190][ T5822] but task is already holding lock: [ 136.860579][ T5822] ffff8880263a0180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 136.870430][ T5822] [ 136.870430][ T5822] which lock already depends on the new lock. [ 136.870430][ T5822] [ 136.880900][ T5822] [ 136.880900][ T5822] the existing dependency chain (in reverse order) is: [ 136.890036][ T5822] [ 136.890036][ T5822] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 136.897378][ T5822] __mutex_lock+0x1aa/0x1ca0 [ 136.902629][ T5822] nbd_queue_rq+0xbd/0x12d0 [ 136.907686][ T5822] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 136.913787][ T5822] __blk_mq_sched_dispatch_requests+0xcbd/0x15f0 [ 136.921229][ T5822] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 136.928243][ T5822] blk_mq_run_hw_queue+0x239/0x670 [ 136.934653][ T5822] blk_mq_dispatch_list+0x514/0x1300 [ 136.940665][ T5822] blk_mq_flush_plug_list+0x130/0x600 [ 136.946861][ T5822] __blk_flush_plug+0x2c4/0x4b0 [ 136.952347][ T5822] __submit_bio+0x542/0x690 [ 136.957487][ T5822] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 136.963788][ T5822] submit_bio_noacct+0x5bd/0x1f40 [ 136.969466][ T5822] block_read_full_folio+0x4db/0x850 [ 136.975314][ T5822] filemap_read_folio+0xc8/0x2a0 [ 136.980811][ T5822] do_read_cache_folio+0x266/0x5c0 [ 136.986560][ T5822] read_part_sector+0xd4/0x370 [ 136.992060][ T5822] adfspart_check_ICS+0x93/0x940 [ 136.997649][ T5822] bdev_disk_changed+0x723/0x1520 [ 137.003533][ T5822] blkdev_get_whole+0x187/0x290 [ 137.009125][ T5822] bdev_open+0x2c7/0xe40 [ 137.014032][ T5822] blkdev_open+0x34e/0x4f0 [ 137.019089][ T5822] do_dentry_open+0x748/0x1590 [ 137.024509][ T5822] vfs_open+0x82/0x3f0 [ 137.029240][ T5822] path_openat+0x2078/0x3140 [ 137.034499][ T5822] do_filp_open+0x20b/0x470 [ 137.039707][ T5822] do_sys_openat2+0x121/0x290 [ 137.045023][ T5822] __x64_sys_openat+0x174/0x210 [ 137.050516][ T5822] do_syscall_64+0xcd/0xf80 [ 137.055586][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.062028][ T5822] [ 137.062028][ T5822] -> #5 (set->srcu){.+.+}-{0:0}: [ 137.069443][ T5822] __synchronize_srcu+0xa2/0x250 [ 137.074945][ T5822] blk_mq_quiesce_queue+0x149/0x1b0 [ 137.080803][ T5822] elevator_switch+0x17d/0x7f0 [ 137.086218][ T5822] elevator_change+0x38b/0x570 [ 137.091933][ T5822] elevator_set_default+0x2d2/0x390 [ 137.097874][ T5822] blk_register_queue+0x384/0x4e0 [ 137.103487][ T5822] __add_disk+0x74a/0xf00 [ 137.108665][ T5822] add_disk_fwnode+0x13f/0x5d0 [ 137.114326][ T5822] nbd_dev_add+0x783/0xbb0 [ 137.119310][ T5822] nbd_init+0x181/0x320 [ 137.124024][ T5822] do_one_initcall+0x123/0x680 [ 137.129360][ T5822] kernel_init_freeable+0x5c8/0x920 [ 137.135173][ T5822] kernel_init+0x1c/0x2b0 [ 137.140113][ T5822] ret_from_fork+0x983/0xb10 [ 137.145445][ T5822] ret_from_fork_asm+0x1a/0x30 [ 137.150988][ T5822] [ 137.150988][ T5822] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 137.158843][ T5822] __mutex_lock+0x1aa/0x1ca0 [ 137.163993][ T5822] elevator_change+0x1ed/0x570 [ 137.169475][ T5822] elv_iosched_store+0x3e8/0x4a0 [ 137.175008][ T5822] queue_attr_store+0x26b/0x310 [ 137.180611][ T5822] sysfs_kf_write+0xf2/0x150 [ 137.185850][ T5822] kernfs_fop_write_iter+0x3af/0x570 [ 137.191806][ T5822] iter_file_splice_write+0xa24/0x12b0 [ 137.197828][ T5822] direct_splice_actor+0x192/0x6c0 [ 137.203600][ T5822] splice_direct_to_actor+0x345/0xa30 [ 137.209544][ T5822] do_splice_direct+0x174/0x240 [ 137.215241][ T5822] do_sendfile+0xb06/0xe50 [ 137.220226][ T5822] __x64_sys_sendfile64+0x1d8/0x220 [ 137.225984][ T5822] do_syscall_64+0xcd/0xf80 [ 137.231445][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.238082][ T5822] [ 137.238082][ T5822] -> #3 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 137.246753][ T5822] blk_alloc_queue+0x610/0x750 [ 137.252247][ T5822] blk_mq_alloc_queue+0x172/0x280 [ 137.258004][ T5822] __blk_mq_alloc_disk+0x29/0x120 [ 137.263681][ T5822] null_add_dev+0xf2e/0x1eb0 [ 137.268917][ T5822] null_init+0x2c9/0x610 [ 137.273735][ T5822] do_one_initcall+0x123/0x680 [ 137.279077][ T5822] kernel_init_freeable+0x5c8/0x920 [ 137.285076][ T5822] kernel_init+0x1c/0x2b0 [ 137.290047][ T5822] ret_from_fork+0x983/0xb10 [ 137.295226][ T5822] ret_from_fork_asm+0x1a/0x30 [ 137.300825][ T5822] [ 137.300825][ T5822] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 137.308257][ T5822] fs_reclaim_acquire+0x102/0x150 [ 137.313864][ T5822] kmem_cache_alloc_node_noprof+0x5e/0x800 [ 137.320400][ T5822] __alloc_skb+0x156/0x410 [ 137.325463][ T5822] tcp_stream_alloc_skb+0x34/0x670 [ 137.331411][ T5822] tcp_sendmsg_locked+0x12de/0x42a0 [ 137.337545][ T5822] tcp_sendmsg+0x2e/0x50 [ 137.342735][ T5822] inet_sendmsg+0xb9/0x140 [ 137.347712][ T5822] sock_write_iter+0x509/0x610 [ 137.353065][ T5822] vfs_write+0x7d3/0x11d0 [ 137.357967][ T5822] ksys_write+0x1f8/0x250 [ 137.362894][ T5822] do_syscall_64+0xcd/0xf80 [ 137.368034][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.374492][ T5822] [ 137.374492][ T5822] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 137.382210][ T5822] lock_sock_nested+0x41/0xf0 [ 137.387453][ T5822] inet_shutdown+0x67/0x440 [ 137.392519][ T5822] nbd_mark_nsock_dead+0xae/0x5d0 [ 137.398093][ T5822] recv_work+0x66b/0xa70 [ 137.402946][ T5822] process_one_work+0x9ba/0x1b20 [ 137.408611][ T5822] worker_thread+0x6c8/0xf10 [ 137.413774][ T5822] kthread+0x3c5/0x780 [ 137.418485][ T5822] ret_from_fork+0x983/0xb10 [ 137.423669][ T5822] ret_from_fork_asm+0x1a/0x30 [ 137.429005][ T5822] [ 137.429005][ T5822] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 137.436955][ T5822] __lock_acquire+0x1669/0x2890 [ 137.442359][ T5822] lock_acquire+0x179/0x330 [ 137.447498][ T5822] __mutex_lock+0x1aa/0x1ca0 [ 137.452669][ T5822] nbd_queue_rq+0x423/0x12d0 [ 137.457832][ T5822] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 137.464245][ T5822] __blk_mq_sched_dispatch_requests+0xcbd/0x15f0 [ 137.471308][ T5822] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 137.477842][ T5822] blk_mq_run_hw_queue+0x239/0x670 [ 137.483549][ T5822] blk_mq_dispatch_list+0x514/0x1300 [ 137.489398][ T5822] blk_mq_flush_plug_list+0x130/0x600 [ 137.495332][ T5822] __blk_flush_plug+0x2c4/0x4b0 [ 137.500788][ T5822] __submit_bio+0x542/0x690 [ 137.505853][ T5822] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 137.512041][ T5822] submit_bio_noacct+0x5bd/0x1f40 [ 137.517638][ T5822] block_read_full_folio+0x4db/0x850 [ 137.523483][ T5822] filemap_read_folio+0xc8/0x2a0 [ 137.528982][ T5822] do_read_cache_folio+0x266/0x5c0 [ 137.534652][ T5822] read_part_sector+0xd4/0x370 [ 137.540054][ T5822] adfspart_check_ICS+0x93/0x940 [ 137.546150][ T5822] bdev_disk_changed+0x723/0x1520 [ 137.551809][ T5822] blkdev_get_whole+0x187/0x290 [ 137.557237][ T5822] bdev_open+0x2c7/0xe40 [ 137.562383][ T5822] blkdev_open+0x34e/0x4f0 [ 137.567702][ T5822] do_dentry_open+0x748/0x1590 [ 137.573024][ T5822] vfs_open+0x82/0x3f0 [ 137.577636][ T5822] path_openat+0x2078/0x3140 [ 137.583060][ T5822] do_filp_open+0x20b/0x470 [ 137.588134][ T5822] do_sys_openat2+0x121/0x290 [ 137.593629][ T5822] __x64_sys_openat+0x174/0x210 [ 137.599039][ T5822] do_syscall_64+0xcd/0xf80 [ 137.604115][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.610560][ T5822] [ 137.610560][ T5822] other info that might help us debug this: [ 137.610560][ T5822] [ 137.620990][ T5822] Chain exists of: [ 137.620990][ T5822] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 137.620990][ T5822] [ 137.633566][ T5822] Possible unsafe locking scenario: [ 137.633566][ T5822] [ 137.641119][ T5822] CPU0 CPU1 [ 137.646591][ T5822] ---- ---- [ 137.652435][ T5822] lock(&cmd->lock); [ 137.657074][ T5822] lock(set->srcu); [ 137.663731][ T5822] lock(&cmd->lock); [ 137.670370][ T5822] lock(&nsock->tx_lock); [ 137.675081][ T5822] [ 137.675081][ T5822] *** DEADLOCK *** [ 137.675081][ T5822] [ 137.683446][ T5822] 3 locks held by udevd/5822: [ 137.688148][ T5822] #0: ffff888026307358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 137.698406][ T5822] #1: ffff8881427bc318 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 137.708145][ T5822] #2: ffff8880263a0180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 137.717532][ T5822] [ 137.717532][ T5822] stack backtrace: [ 137.723621][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 137.723662][ T5822] Tainted: [L]=SOFTLOCKUP [ 137.723671][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.723687][ T5822] Call Trace: [ 137.723695][ T5822] [ 137.723705][ T5822] dump_stack_lvl+0x116/0x1f0 [ 137.723749][ T5822] print_circular_bug+0x275/0x340 [ 137.723794][ T5822] check_noncircular+0x146/0x160 [ 137.723841][ T5822] __lock_acquire+0x1669/0x2890 [ 137.723872][ T5822] lock_acquire+0x179/0x330 [ 137.723901][ T5822] ? nbd_queue_rq+0x423/0x12d0 [ 137.723937][ T5822] ? __pfx___might_resched+0x10/0x10 [ 137.723978][ T5822] __mutex_lock+0x1aa/0x1ca0 [ 137.724025][ T5822] ? nbd_queue_rq+0x423/0x12d0 [ 137.724059][ T5822] ? nbd_queue_rq+0x423/0x12d0 [ 137.724095][ T5822] ? __pfx___mutex_lock+0x10/0x10 [ 137.724136][ T5822] ? __lock_acquire+0x436/0x2890 [ 137.724164][ T5822] ? __bfs+0x148/0x290 [ 137.724204][ T5822] ? nbd_queue_rq+0x423/0x12d0 [ 137.724236][ T5822] nbd_queue_rq+0x423/0x12d0 [ 137.724269][ T5822] ? __bfs+0x148/0x290 [ 137.724309][ T5822] ? __pfx_nbd_queue_rq+0x10/0x10 [ 137.724347][ T5822] ? lockdep_unlock+0x64/0xd0 [ 137.724380][ T5822] ? __lock_acquire+0x12c2/0x2890 [ 137.724406][ T5822] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 137.724441][ T5822] ? sbitmap_find_bit+0x440/0x6f0 [ 137.724486][ T5822] ? sbitmap_get+0x1e5/0x360 [ 137.724522][ T5822] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 137.724558][ T5822] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 137.724593][ T5822] __blk_mq_sched_dispatch_requests+0xcbd/0x15f0 [ 137.724629][ T5822] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 137.724670][ T5822] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 137.724701][ T5822] blk_mq_run_hw_queue+0x239/0x670 [ 137.724728][ T5822] ? blk_mq_run_hw_queue+0x22b/0x670 [ 137.724755][ T5822] blk_mq_dispatch_list+0x514/0x1300 [ 137.724792][ T5822] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 137.724827][ T5822] ? __pfx_update_io_ticks+0x10/0x10 [ 137.724858][ T5822] blk_mq_flush_plug_list+0x130/0x600 [ 137.724891][ T5822] ? trace_block_plug+0x17f/0x1e0 [ 137.724936][ T5822] ? blk_add_rq_to_plug+0x30a/0x540 [ 137.724970][ T5822] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 137.725008][ T5822] ? blk_mq_submit_bio+0x9e7/0x2c50 [ 137.725044][ T5822] __blk_flush_plug+0x2c4/0x4b0 [ 137.725073][ T5822] ? do_dentry_open+0x748/0x1590 [ 137.725114][ T5822] ? __pfx___blk_flush_plug+0x10/0x10 [ 137.725149][ T5822] __submit_bio+0x542/0x690 [ 137.725178][ T5822] ? __pfx___submit_bio+0x10/0x10 [ 137.725212][ T5822] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 137.725245][ T5822] ? bio_associate_blkg+0x137/0x2a0 [ 137.725276][ T5822] ? submit_bio_noacct_nocheck+0x53d/0xbe0 [ 137.725307][ T5822] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 137.725340][ T5822] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 137.725374][ T5822] ? __pfx___might_resched+0x10/0x10 [ 137.725414][ T5822] submit_bio_noacct+0x5bd/0x1f40 [ 137.725447][ T5822] block_read_full_folio+0x4db/0x850 [ 137.725480][ T5822] ? __pfx_blkdev_get_block+0x10/0x10 [ 137.725514][ T5822] ? __pfx_blkdev_read_folio+0x10/0x10 [ 137.725545][ T5822] filemap_read_folio+0xc8/0x2a0 [ 137.725574][ T5822] ? __pfx_filemap_read_folio+0x10/0x10 [ 137.725608][ T5822] do_read_cache_folio+0x266/0x5c0 [ 137.725639][ T5822] ? __pfx_blkdev_read_folio+0x10/0x10 [ 137.725672][ T5822] read_part_sector+0xd4/0x370 [ 137.725700][ T5822] adfspart_check_ICS+0x93/0x940 [ 137.725728][ T5822] ? snprintf+0xc7/0x100 [ 137.725783][ T5822] ? __pfx_snprintf+0x10/0x10 [ 137.725819][ T5822] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 137.725851][ T5822] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 137.725880][ T5822] bdev_disk_changed+0x723/0x1520 [ 137.725917][ T5822] ? __pfx_bdev_disk_changed+0x10/0x10 [ 137.725949][ T5822] blkdev_get_whole+0x187/0x290 [ 137.725976][ T5822] bdev_open+0x2c7/0xe40 [ 137.726007][ T5822] blkdev_open+0x34e/0x4f0 [ 137.726040][ T5822] do_dentry_open+0x748/0x1590 [ 137.726079][ T5822] ? __pfx_blkdev_open+0x10/0x10 [ 137.726115][ T5822] vfs_open+0x82/0x3f0 [ 137.726145][ T5822] path_openat+0x2078/0x3140 [ 137.726192][ T5822] ? __pfx_path_openat+0x10/0x10 [ 137.726238][ T5822] do_filp_open+0x20b/0x470 [ 137.726279][ T5822] ? __pfx_do_filp_open+0x10/0x10 [ 137.726331][ T5822] ? alloc_fd+0x471/0x7d0 [ 137.726374][ T5822] do_sys_openat2+0x121/0x290 [ 137.726403][ T5822] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.726433][ T5822] ? __sys_recvmsg+0x189/0x220 [ 137.726468][ T5822] ? __pfx___sys_recvmsg+0x10/0x10 [ 137.726505][ T5822] __x64_sys_openat+0x174/0x210 [ 137.726535][ T5822] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.726572][ T5822] do_syscall_64+0xcd/0xf80 [ 137.726613][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.726640][ T5822] RIP: 0033:0x7fe837aa7407 [ 137.726661][ T5822] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 137.726687][ T5822] RSP: 002b:00007ffd21030080 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 137.726712][ T5822] RAX: ffffffffffffffda RBX: 00007fe83818a880 RCX: 00007fe837aa7407 [ 137.726730][ T5822] RDX: 00000000000a0800 RSI: 00005595b4b17d70 RDI: ffffffffffffff9c [ 137.726747][ T5822] RBP: 00005595b4af1910 R08: 0000000000000000 R09: 0000000000000000 [ 137.726763][ T5822] R10: 0000000000000000 R11: 0000000000000202 R12: 00005595b4b05ba0 [ 137.726779][ T5822] R13: 00005595b4b09410 R14: 0000000000000000 R15: 00005595b4b05ba0 [ 137.726804][ T5822] [ 138.298231][ T5822] block nbd0: Dead connection, failed to find a fallback [ 138.305543][ T5822] block nbd0: shutting down sockets [ 138.312606][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.322404][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.339069][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.349052][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.357911][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.369055][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.378173][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.387951][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.398469][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.408710][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.417250][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.427211][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.436860][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.447359][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.455626][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.466454][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.474768][ T5822] ldm_validate_partition_table(): Disk read failed. [ 138.481808][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.491494][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.499444][ T5822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.509290][ T5822] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.517440][ T5822] Dev nbd0: unable to read RDB block 0 [ 138.523269][ T5822] nbd0: unable to read partition table [ 138.534499][ T5822] ldm_validate_partition_table(): Disk read failed. [ 138.542737][ T5822] Dev nbd0: unable to read RDB block 0 [ 138.548693][ T5822] nbd0: unable to read partition table [ 143.433491][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.442318][ T1302] ieee802154 phy1 wpan1: encryption failed: -22