last executing test programs: 7.592067854s ago: executing program 0 (id=6): read$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x5, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x6, 0x1, 0x6) setresuid$auto(0x8, 0x0, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002ca4706b67dbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004814) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x9, 0x400008, 0x40000000000000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xd71, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) fanotify_mark$auto(0x0, 0x9, 0x10000008, 0x4, 0x0) 7.52779875s ago: executing program 2 (id=7): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001800)='/dev/nbd13\x00', 0x14d500, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)="b7e723fef91a0de52ad5142b968e6f725550c383dee725711c439203ecb2710c91ea486356ecb772b06268acfd5acf7175367087f0236ce3d42e1753341b75d40ca7e920ac775f44a7a6016d824585dc87f82573dd30c3899708d70c19ce665aca7bf446fe62f3aca4ed77b8da8a71b56579ed27cc8fdc9d9a6496a53983224554ce") close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x4000001f, 0x400, 0x9}]}) 7.256266411s ago: executing program 1 (id=2): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f2, 0x24) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000048ecc8f77e31a2c0f6b4ccfb56eccaea57198c9e661b64dd2da05f0f6cb6ce505f3cf112fd809893bdba5f92a3d263e160773545d055", @ANYRES16=r3, @ANYBLOB="210026bd7000fedbdf25010000001400020077673000000000000000000000000000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 7.108920697s ago: executing program 3 (id=4): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0xfffffffffffffffd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x400c4d09, 0xffffffffffffffff) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) mmap$auto(0x0, 0x100000000008, 0x5, 0xefbb, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40242, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/usb13-port5/uevent\x00', 0x1002, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) 6.837821027s ago: executing program 2 (id=8): socket(0x2, 0x1, 0x106) r0 = fcntl$auto(0x3, 0x4, 0xa553) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002ac0)=""/64, 0x40) ioctl$auto_BTRFS_IOC_DEVICES_READY(r0, 0x90009427, &(0x7f0000000280)={@raw=0x7, "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"}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xfff, 0x1, 0x10000eb2, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x200000000002d57, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) socket(0x18, 0x1, 0x5) io_uring_setup$auto(0x1, 0x0) uname$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) 6.799319294s ago: executing program 0 (id=9): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(r2, r0, 0xffeffff8) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x100) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) socketpair$auto(0x8, 0x7, 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r4, 0x8926, 0x0) 5.944320116s ago: executing program 3 (id=10): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xe0800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCEXCL2(r0, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x100000000, 0x948b, 0x3, 0x95f4da0a, 0x10004, 0x3, 0x62, 0x80000001, 0x7, 0x6d41, 0x9, 0x5, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x8000, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000001265", 0x6) mmap$auto(0x0, 0x9, 0xfff, 0xeb2, 0x401, 0x20000000008000) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x800000009d, 0x1, [0x0]}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x88202, 0x0) ioctl$auto(0x3, 0x8008743f, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 5.058880566s ago: executing program 0 (id=11): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x6}, 0x92) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='?\xe3\xdc%\xda\n\x1d\xb2\xabdev', 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) 4.893557773s ago: executing program 3 (id=12): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)="cbeec0", 0x3) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x400000e, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x0, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffbfffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, r2, 0x300000000000) r5 = socket(0x27, 0x5, 0xfffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000200)=r5, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="0500a5b234316dcc27bddbdf251000", @ANYRES8=r8, @ANYRES8=r5], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r9, 0x0, 0x8, 0xffff) sendfile$auto(r1, r1, 0x0, 0x1000200) 4.183101179s ago: executing program 1 (id=13): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x22, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x401, 0x9ec0000000000000) 3.726632965s ago: executing program 2 (id=14): mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) unshare$auto(0xfffffffffffffffd) mmap$auto(0x7, 0x825, 0x6, 0x18, 0xffffffffffffffff, 0xa000) ioctl$auto(0xffffffffffffffff, 0x400c4d09, 0xffffffffffffffff) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x319) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x7) socket(0xa, 0x2, 0x3a) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 3.673496969s ago: executing program 0 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x10001) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x4044820) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000000c0)={0xffffffffffffffff, 0x1}) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x5, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80010000}, &(0x7f0000000100)={0x9}, 0x8) mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x26, 0xa, 0x300) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/async_depth\x00', 0x40800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/4096, 0x1000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) 3.222128579s ago: executing program 2 (id=16): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x30, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 2.851264176s ago: executing program 1 (id=17): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x22, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x401, 0x9ec0000000000000) 2.518735011s ago: executing program 2 (id=18): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) getsockopt$auto(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x6, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000005300)='/dev/mtd0\x00', 0x101000, 0x0) ioctl$auto_MEMWRITEOOB(r1, 0xc0104d03, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi7\x00', 0x0, 0x0) poll$auto(0x0, 0x6, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x542, 0x0) fcntl$auto(0xffffffffffffffff, 0x8, 0x1) madvise$auto(0x0, 0x200007, 0x19) 2.210070741s ago: executing program 3 (id=19): mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x121241, 0x154) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.735993846s ago: executing program 0 (id=20): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) getsockopt$auto(r1, 0x29, 0x18, 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 1.731675501s ago: executing program 3 (id=21): setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0xffffffa8, @inferred=r0, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) socket(0x18, 0x1, 0x5) io_uring_setup$auto(0x1, 0x0) uname$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) 1.014994215s ago: executing program 0 (id=23): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x20000006, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0xb, 0x0) timer_create$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/xrun_debug\x00', 0x141102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x104c, 0x100000000, 0x4, 0x7fffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) mmap$auto(0x400000000000, 0xc2, 0xdf, 0x1000000000009b72, r0, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0x80000000, r2) write$auto(r1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb3/statistics/tx_aborted_errors\x00', 0x640080, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) 946.395528ms ago: executing program 2 (id=24): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400006, 0x1, 0x4, 0x1, 0x8, 0xa00000, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000003, 0x80, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, [0x1ff, 0xa271, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeae, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9b5, 0x0, 0x0, 0x40000000, 0x47ad]}, 0x1fc, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x5, 0x8) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0xffffffff) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xb, 0x800, 0x0) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0xf4, 0x0, &(0x7f00000002c0)=0x7, 0xc0040000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mlockall$auto(0x7) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8001, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x368e, 0x20000002, {0x100000010, 0x200}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x6, 0x80, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'caif0\x00'}) socket(0x10, 0x2, 0xf) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) write$auto(0x3, 0x0, 0x4) 214.775155ms ago: executing program 1 (id=25): sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x5, 0x0) getdents$auto(r2, &(0x7f00000004c0)={0x100, 0xa, 0x4}, 0x62d4) 0s ago: executing program 3 (id=26): r0 = fcntl$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) r2 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r2) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000) epoll_pwait$auto(r2, &(0x7f0000000080)={0x2, 0x3}, 0xfffffffe, 0x9, &(0x7f00000000c0)={0x8}, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptya4/power/runtime_status\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000004dcec2c5276d470cdc0db014837ee035f797c6053d372892773d2844cbfb31df3bdde06041876a8e8cb9d7749c7b563058e695e2ff198ba31aff0607a442c6e56d6924aa044b2e7058dc6e6216abf5675d12051c87da9a892c79656dbe36e7bba133ec3e148e32", @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xad642, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x8, 0x8) fcntl$auto_F_RDLCK(r0, 0x9, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 99.344420][ T5822] cgroup: Unknown subsys name 'net' [ 99.442399][ T5822] cgroup: Unknown subsys name 'cpuset' [ 99.452229][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.333175][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.250428][ T24] cfg80211: failed to load regulatory.db [ 103.693260][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.709807][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.720743][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.729152][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.733463][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.737958][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.744670][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.752322][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.759312][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.767836][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.772847][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.781550][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.793988][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.802401][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.809948][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.820058][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.828731][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.836787][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.845626][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.853691][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.456638][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 104.571705][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.753973][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.761606][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.769558][ T5840] bridge_slave_0: entered allmulticast mode [ 104.778151][ T5840] bridge_slave_0: entered promiscuous mode [ 104.789868][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 104.809599][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 104.822361][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.830315][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.838003][ T5840] bridge_slave_1: entered allmulticast mode [ 104.846082][ T5840] bridge_slave_1: entered promiscuous mode [ 104.980229][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.987461][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.996913][ T5835] bridge_slave_0: entered allmulticast mode [ 105.004899][ T5835] bridge_slave_0: entered promiscuous mode [ 105.022844][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.039733][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.047397][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.055120][ T5835] bridge_slave_1: entered allmulticast mode [ 105.063165][ T5835] bridge_slave_1: entered promiscuous mode [ 105.079370][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.194326][ T5840] team0: Port device team_slave_0 added [ 105.205105][ T5840] team0: Port device team_slave_1 added [ 105.225823][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.233115][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.241038][ T5833] bridge_slave_0: entered allmulticast mode [ 105.248700][ T5833] bridge_slave_0: entered promiscuous mode [ 105.261105][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.300861][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.308244][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.315469][ T5833] bridge_slave_1: entered allmulticast mode [ 105.323239][ T5833] bridge_slave_1: entered promiscuous mode [ 105.348688][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.374107][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.381765][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.389335][ T5843] bridge_slave_0: entered allmulticast mode [ 105.397008][ T5843] bridge_slave_0: entered promiscuous mode [ 105.420407][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.427427][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.453595][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.497485][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.504990][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.512611][ T5843] bridge_slave_1: entered allmulticast mode [ 105.520842][ T5843] bridge_slave_1: entered promiscuous mode [ 105.559060][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.566077][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.592537][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.606907][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.628506][ T5835] team0: Port device team_slave_0 added [ 105.638420][ T5835] team0: Port device team_slave_1 added [ 105.648328][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.668370][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.709366][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.783172][ T5843] team0: Port device team_slave_0 added [ 105.792592][ T5833] team0: Port device team_slave_0 added [ 105.799937][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.806949][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.833943][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.848529][ T5838] Bluetooth: hci2: command tx timeout [ 105.884994][ T5843] team0: Port device team_slave_1 added [ 105.893458][ T5833] team0: Port device team_slave_1 added [ 105.916143][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.923176][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.949413][ T51] Bluetooth: hci0: command tx timeout [ 105.949422][ T5839] Bluetooth: hci3: command tx timeout [ 105.950541][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.955698][ T5838] Bluetooth: hci1: command tx timeout [ 105.987439][ T5840] hsr_slave_0: entered promiscuous mode [ 105.994641][ T5840] hsr_slave_1: entered promiscuous mode [ 106.033332][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.040378][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.066844][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.081668][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.088769][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.114891][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.141204][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.148428][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.175455][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.189147][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.196129][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.222626][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.340668][ T5835] hsr_slave_0: entered promiscuous mode [ 106.347150][ T5835] hsr_slave_1: entered promiscuous mode [ 106.354324][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.362228][ T5835] Cannot create hsr debugfs directory [ 106.455013][ T5843] hsr_slave_0: entered promiscuous mode [ 106.462455][ T5843] hsr_slave_1: entered promiscuous mode [ 106.469110][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.476740][ T5843] Cannot create hsr debugfs directory [ 106.510810][ T5833] hsr_slave_0: entered promiscuous mode [ 106.517325][ T5833] hsr_slave_1: entered promiscuous mode [ 106.523841][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.531848][ T5833] Cannot create hsr debugfs directory [ 106.974788][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.004380][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.026267][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.047059][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.091145][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.114951][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.133294][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.156423][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.226587][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.241160][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.253636][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.301960][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.388549][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.402017][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.438538][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.462708][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.541992][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.601463][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.619236][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.672509][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.679812][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.706204][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.722576][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.729752][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.745625][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.752853][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.794106][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.801330][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.824945][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.913796][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.929446][ T5838] Bluetooth: hci2: command tx timeout [ 107.940313][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.971512][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.008499][ T5838] Bluetooth: hci3: command tx timeout [ 108.014133][ T5838] Bluetooth: hci1: command tx timeout [ 108.015183][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.022535][ T51] Bluetooth: hci0: command tx timeout [ 108.043196][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.050416][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.063311][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.070526][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.084596][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.091771][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.121580][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.128776][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.603332][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.755184][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.792096][ T5835] veth0_vlan: entered promiscuous mode [ 108.865232][ T5835] veth1_vlan: entered promiscuous mode [ 108.912429][ T5840] veth0_vlan: entered promiscuous mode [ 108.975662][ T5840] veth1_vlan: entered promiscuous mode [ 109.001370][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.012473][ T5835] veth0_macvtap: entered promiscuous mode [ 109.025074][ T5835] veth1_macvtap: entered promiscuous mode [ 109.081800][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.111924][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.155711][ T5840] veth0_macvtap: entered promiscuous mode [ 109.171182][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.186817][ T5843] veth0_vlan: entered promiscuous mode [ 109.199141][ T5840] veth1_macvtap: entered promiscuous mode [ 109.234445][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.244733][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.255424][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.265886][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.294695][ T5833] veth0_vlan: entered promiscuous mode [ 109.303378][ T5843] veth1_vlan: entered promiscuous mode [ 109.343328][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.356966][ T5833] veth1_vlan: entered promiscuous mode [ 109.392707][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.443791][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.453588][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463465][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.472272][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.530211][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.547487][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.569714][ T5833] veth0_macvtap: entered promiscuous mode [ 109.614044][ T5843] veth0_macvtap: entered promiscuous mode [ 109.638456][ T5833] veth1_macvtap: entered promiscuous mode [ 109.646946][ T5843] veth1_macvtap: entered promiscuous mode [ 109.675099][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.698495][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.730971][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.769696][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.799501][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809882][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.810725][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.837393][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.846305][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.864835][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.886751][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.908169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.924825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.965582][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.984932][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.995519][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.008778][ T5838] Bluetooth: hci2: command tx timeout [ 110.013256][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.055133][ T5897] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.088637][ T5838] Bluetooth: hci1: command tx timeout [ 110.094185][ T51] Bluetooth: hci0: command tx timeout [ 110.094203][ T5839] Bluetooth: hci3: command tx timeout [ 110.118463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.147309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.314062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.343424][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.375977][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.387892][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.586151][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.608022][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.685407][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.714766][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.915926][ T5910] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.090521][ T5839] Bluetooth: hci2: command tx timeout [ 112.169193][ T5839] Bluetooth: hci1: command tx timeout [ 112.171855][ T5838] Bluetooth: hci0: command tx timeout [ 112.176687][ T5839] Bluetooth: hci3: command tx timeout [ 112.448504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.457204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.457559][ T5933] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 112.653248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.708418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.790100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.339343][ T5941] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 114.201376][ T5943] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 115.288071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.308132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.494244][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.718325][ T5972] Zero length message leads to an empty skb [ 117.410847][ T5991] futex_wake_op: syz.2.24 tries to shift op by 64; fix this program [ 117.548196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.101309][ T5995] [ 118.103699][ T5995] ====================================================== [ 118.110731][ T5995] WARNING: possible circular locking dependency detected [ 118.117795][ T5995] 6.15.0-syzkaller-12141-gec7714e49479 #0 Not tainted [ 118.124596][ T5995] ------------------------------------------------------ [ 118.131626][ T5995] syz.0.23/5995 is trying to acquire lock: [ 118.137439][ T5995] ffffffff8e52f4c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 118.147068][ T5995] [ 118.147068][ T5995] but task is already holding lock: [ 118.154445][ T5995] ffff888142b827c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.165814][ T5995] [ 118.165814][ T5995] which lock already depends on the new lock. [ 118.165814][ T5995] [ 118.176227][ T5995] [ 118.176227][ T5995] the existing dependency chain (in reverse order) is: [ 118.185259][ T5995] [ 118.185259][ T5995] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 118.193896][ T5995] blk_alloc_queue+0x619/0x760 [ 118.199213][ T5995] blk_mq_alloc_queue+0x175/0x290 [ 118.204792][ T5995] __blk_mq_alloc_disk+0x29/0x120 [ 118.210375][ T5995] loop_add+0x49e/0xb70 [ 118.215084][ T5995] loop_init+0x164/0x270 [ 118.219866][ T5995] do_one_initcall+0x120/0x6e0 [ 118.225167][ T5995] kernel_init_freeable+0x5c2/0x900 [ 118.230910][ T5995] kernel_init+0x1c/0x2b0 [ 118.235819][ T5995] ret_from_fork+0x5d7/0x6f0 [ 118.240959][ T5995] ret_from_fork_asm+0x1a/0x30 [ 118.246263][ T5995] [ 118.246263][ T5995] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 118.253508][ T5995] fs_reclaim_acquire+0x102/0x150 [ 118.259081][ T5995] prepare_alloc_pages+0x162/0x610 [ 118.264733][ T5995] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 118.271189][ T5995] __alloc_pages_noprof+0xb/0x1b0 [ 118.276763][ T5995] pcpu_populate_chunk+0x110/0xb00 [ 118.282429][ T5995] pcpu_alloc_noprof+0x86a/0x1470 [ 118.288012][ T5995] xt_percpu_counter_alloc+0x13e/0x1b0 [ 118.294016][ T5995] find_check_entry.constprop.0+0xbf/0xa20 [ 118.300368][ T5995] translate_table+0xd0b/0x17b0 [ 118.305776][ T5995] ip6t_register_table+0x102/0x430 [ 118.311525][ T5995] ip6table_mangle_table_init+0x40/0x60 [ 118.317704][ T5995] xt_find_table_lock+0x2e1/0x520 [ 118.323275][ T5995] xt_request_find_table_lock+0x28/0xf0 [ 118.329367][ T5995] get_info+0x190/0x620 [ 118.334158][ T5995] do_ip6t_get_ctl+0x169/0xa50 [ 118.339495][ T5995] nf_getsockopt+0x7c/0xe0 [ 118.344462][ T5995] ipv6_getsockopt+0x1f7/0x280 [ 118.349773][ T5995] tcp_getsockopt+0x9e/0x100 [ 118.354921][ T5995] do_sock_getsockopt+0x3fc/0x800 [ 118.360486][ T5995] __sys_getsockopt+0x123/0x1b0 [ 118.365904][ T5995] __x64_sys_getsockopt+0xbd/0x160 [ 118.371568][ T5995] do_syscall_64+0xcd/0x490 [ 118.376621][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.383052][ T5995] [ 118.383052][ T5995] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 118.390813][ T5995] __lock_acquire+0x126f/0x1c90 [ 118.396209][ T5995] lock_acquire+0x179/0x350 [ 118.401261][ T5995] __mutex_lock+0x199/0xb90 [ 118.406313][ T5995] pcpu_alloc_noprof+0xb4c/0x1470 [ 118.411891][ T5995] blk_stat_alloc_callback+0xc8/0x280 [ 118.417805][ T5995] wbt_init+0xac/0x540 [ 118.422413][ T5995] queue_wb_lat_store+0x354/0x3d0 [ 118.427978][ T5995] queue_attr_store+0x279/0x320 [ 118.433367][ T5995] sysfs_kf_write+0xef/0x150 [ 118.438503][ T5995] kernfs_fop_write_iter+0x354/0x510 [ 118.444346][ T5995] vfs_write+0x6c4/0x1150 [ 118.449244][ T5995] ksys_write+0x12a/0x250 [ 118.454128][ T5995] do_syscall_64+0xcd/0x490 [ 118.459186][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.465635][ T5995] [ 118.465635][ T5995] other info that might help us debug this: [ 118.465635][ T5995] [ 118.475873][ T5995] Chain exists of: [ 118.475873][ T5995] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 118.475873][ T5995] [ 118.489558][ T5995] Possible unsafe locking scenario: [ 118.489558][ T5995] [ 118.497048][ T5995] CPU0 CPU1 [ 118.502423][ T5995] ---- ---- [ 118.507795][ T5995] lock(&q->q_usage_counter(io)#18); [ 118.513190][ T5995] lock(fs_reclaim); [ 118.519713][ T5995] lock(&q->q_usage_counter(io)#18); [ 118.527655][ T5995] lock(pcpu_alloc_mutex); [ 118.532174][ T5995] [ 118.532174][ T5995] *** DEADLOCK *** [ 118.532174][ T5995] [ 118.540322][ T5995] 6 locks held by syz.0.23/5995: [ 118.545334][ T5995] #0: ffff88803629ad38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 118.554446][ T5995] #1: ffff888036546428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 118.563470][ T5995] #2: ffff888145391c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 118.573622][ T5995] #3: ffff8880260a2698 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 118.583774][ T5995] #4: ffff888142b827c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.595502][ T5995] #5: ffff888142b82800 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.607501][ T5995] [ 118.607501][ T5995] stack backtrace: [ 118.613689][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.0.23 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 118.613720][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.613740][ T5995] Call Trace: [ 118.613752][ T5995] [ 118.613764][ T5995] dump_stack_lvl+0x116/0x1f0 [ 118.613804][ T5995] print_circular_bug+0x275/0x350 [ 118.613836][ T5995] check_noncircular+0x14c/0x170 [ 118.613869][ T5995] __lock_acquire+0x126f/0x1c90 [ 118.613905][ T5995] lock_acquire+0x179/0x350 [ 118.613934][ T5995] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 118.613970][ T5995] ? __pfx___might_resched+0x10/0x10 [ 118.613994][ T5995] ? ksys_write+0x12a/0x250 [ 118.614028][ T5995] ? do_syscall_64+0xcd/0x490 [ 118.614061][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.614086][ T5995] __mutex_lock+0x199/0xb90 [ 118.614119][ T5995] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 118.614153][ T5995] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 118.614186][ T5995] ? __pfx___mutex_lock+0x10/0x10 [ 118.614227][ T5995] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 118.614259][ T5995] pcpu_alloc_noprof+0xb4c/0x1470 [ 118.614298][ T5995] ? __pfx_wbt_data_dir+0x10/0x10 [ 118.614334][ T5995] ? __pfx_wb_timer_fn+0x10/0x10 [ 118.614357][ T5995] blk_stat_alloc_callback+0xc8/0x280 [ 118.614382][ T5995] ? kasan_save_track+0x14/0x30 [ 118.614419][ T5995] wbt_init+0xac/0x540 [ 118.614444][ T5995] queue_wb_lat_store+0x354/0x3d0 [ 118.614466][ T5995] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 118.614506][ T5995] ? __mutex_trylock_common+0xe9/0x250 [ 118.614545][ T5995] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 118.614583][ T5995] queue_attr_store+0x279/0x320 [ 118.614605][ T5995] ? __pfx_queue_attr_store+0x10/0x10 [ 118.614625][ T5995] ? __lock_acquire+0x622/0x1c90 [ 118.614662][ T5995] ? find_held_lock+0x2b/0x80 [ 118.614684][ T5995] ? sysfs_file_kobj+0xe4/0x290 [ 118.614714][ T5995] ? __pfx_queue_attr_store+0x10/0x10 [ 118.614735][ T5995] sysfs_kf_write+0xef/0x150 [ 118.614764][ T5995] kernfs_fop_write_iter+0x354/0x510 [ 118.614788][ T5995] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.614818][ T5995] vfs_write+0x6c4/0x1150 [ 118.614852][ T5995] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 118.614878][ T5995] ? __pfx___mutex_lock+0x10/0x10 [ 118.614911][ T5995] ? __pfx_vfs_write+0x10/0x10 [ 118.614953][ T5995] ksys_write+0x12a/0x250 [ 118.614986][ T5995] ? __pfx_ksys_write+0x10/0x10 [ 118.615024][ T5995] do_syscall_64+0xcd/0x490 [ 118.615058][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.615082][ T5995] RIP: 0033:0x7f169db8e929 [ 118.615105][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.615127][ T5995] RSP: 002b:00007f169e9e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.615148][ T5995] RAX: ffffffffffffffda RBX: 00007f169ddb6160 RCX: 00007f169db8e929 [ 118.615163][ T5995] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000003 [ 118.615177][ T5995] RBP: 00007f169dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.615191][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.615205][ T5995] R13: 0000000000000000 R14: 00007f169ddb6160 R15: 00007ffddce4caa8 [ 118.615227][ T5995] [ 119.014183][ T6002] netlink: 342 bytes leftover after parsing attributes in process `syz.3.26'.