last executing test programs: 5.926846068s ago: executing program 3 (id=81): mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0xd, 0x3}, 0x6f3) (async) pipe$auto(0x0) (async) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) (async) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x4, 0x0) (async) r3 = socket(0x2, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) shutdown$auto(0x200000003, 0x2) (async) recvmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x7, &(0x7f0000000080)={0x0, 0x4009}, 0x9, 0x0, 0x80000001, 0x4}, 0x4}, 0x9, 0x3, 0x0) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) memfd_create$auto(0x0, 0x9) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) (async) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) 5.771404836s ago: executing program 0 (id=83): pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r2, 0x0, 0x0) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000080)=""/209, 0xd1) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) membarrier$auto(0x2, 0x0, 0x9) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x1000, 0x6) r4 = socket(0x2, 0x801, 0x100) r5 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) r6 = open_by_handle_at$auto(r5, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(r4, r6, 0x0, 0xffff) 5.558694877s ago: executing program 1 (id=84): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3d, 0x1, 0x0, 0x1, 0x4) (async) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x180000a3d9) mmap$auto(0x55f, 0x2020009, 0x7, 0x200000000000ebe, r1, 0x8000) (async) close_range$auto(r1, r0, 0x410040) socket(0xb, 0x4, 0x106) (async) socket(0x2, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) (async) unshare$auto(0x4) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x22, 0x2, 0x2) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x200000000008, 0x568c12f2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001980), 0xffffffffffffffff) (async) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x84) socket(0xf, 0x2, 0x40008) timerfd_create$auto(0x8, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) readv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4}, 0xffffffffffffffff) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000000)={0x2, 0x7f}) (async) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$auto(0x3, 0x40085400, 0x5) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/bridge0\x00', 0x1c94c2, 0x0) pread64$auto(r5, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0x100000004, 0x100) (async) socket(0x2b, 0x1, 0x1) (async) mmap$auto(0x8, 0x2020005, 0xce, 0x16, 0xfffffffffffffffa, 0x8000) 5.272552949s ago: executing program 2 (id=85): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x6a0c0, 0x0) write$auto(r1, &(0x7f0000001040)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010527bd7000fbdbdf2502"], 0x34}, 0x1, 0x0, 0x0, 0x4068811}, 0x80) ppoll$auto(&(0x7f0000001100)={r3, 0xb44b, 0x5}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000010000000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="0800040073090000"], 0x68}}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 5.24079183s ago: executing program 1 (id=86): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x5, 0xfffffffffffffffd, 0x948b, 0x8, 0x15f4da0a, 0x3, 0xffffffff80000001, 0x62, 0x40000080000001, 0x7, 0xfffffffffffffff9, 0x8100000009, 0x2, 0x40]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000003240)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010025bd5000fddbdf250100000008000780000000000c0002000600000000210000"], 0x28}, 0x1, 0x100000000000000, 0x0, 0x4}, 0x8c0) mmap$auto(0x6, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) bpf$auto(0x0, 0x0, 0x6f3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x163340, 0x2a) socket(0x14, 0x5, 0x1) ioctl$auto(0x3, 0x5411, 0x10000000000402) ioctl$auto_BLKIOMIN(r2, 0x1278, 0x0) 5.07562448s ago: executing program 3 (id=88): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7f, 0x1, 0x9, 0x5, 0x21, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x5, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x0, 0x8000004, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x9, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x2000000000000000]}, 0x1ff, 0x7d) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x100042, 0x0) write$auto(r1, 0x0, 0x10001) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r2, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000200)=0xfff) ioctl$auto_BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000380)={0x6, 0x82, "452d583bfb37d0c372a4b53acd3667fa", 0xd, 0x2, 0x7, 0x2, 0x800, 0x2, 0x1, "503a571193245f01b4d30ee093c5796e", "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"}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$auto_SO_PASSCRED(r0, 0x9, 0x10, &(0x7f0000000000)='/dev/dvb/adapter0/demux0\x00', &(0x7f0000000040)=0x7af24260) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ptyw7\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r4 = socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r5, 0x4, r4}, 0x10) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x3) 4.762781261s ago: executing program 0 (id=89): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x0, 0x0) r1 = prctl$auto(0x3e, 0x3, 0x0, 0x8, 0x80000000000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1f, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x1, 0x62, 0x20000000008, 0x7, 0x3, 0xb, 0x100, 0x9]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) setitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000040)={{0x2, 0x400}, {0x400290, 0x10001}}, &(0x7f0000000080)={{0x1000000100000001}, {0x40000000003, 0x8}}) socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x20000002, 0xf8, r0, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x0, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000200), 0x50d183, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe5e7) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xffffffffffffffff, 0x8000) timer_create$auto(0x1, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r4, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x80a00, 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS2(r5, 0xc0406619, &(0x7f0000000280)={{0x8}, 0x6}) madvise$auto(0x0, 0x4, 0x15) socket(0x9, 0x4, 0xfffffe01) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/cable#0\x00', 0x121c00, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) 4.460655115s ago: executing program 3 (id=90): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/add_remote_port\x00', 0x801, 0x0) write$auto(r0, &(0x7f0000000180)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x04\x95_\x13\xa2\xdf\x10\xb9\xa6\xaa\xa7\x1bq\v\xc7\xb3\xab+?\xa4b\xbf\x11\x81bR\xa5A\xbb\x06;\x1e\f\xa6\xf1\x8a\xfe\xfeq\xec[.\x9b\xf8 ]\xf4\xb5xu\x86\x9c\xbc\x0e\xca\xf8I\x93\xe4&|\xec\xc6\x9d\x93\vz\"\xe4D\x1c\xfb0\x1aq@\xe0S^\xb0 t\xbc\x963VP\x90\xb1\x01\xaa\xdd\vY\xc2Aa\xf4y\xfd\xd1\x18\xa6\xff\x87\fx_\xd2f\xa0: \xbff/cBi`e \xc9\xc2\xe8s\xac\"w\xda\xf8\xbc\x9fei\xec\xff\x1e', 0x81) getsockopt$auto_SO_PRIORITY(r0, 0x4, 0xc, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x4) 4.081825678s ago: executing program 1 (id=91): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf25030000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) inotify_init1$auto(0x0) syz_clone3(0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000002100)=""/15, 0xf) bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.619822428s ago: executing program 2 (id=92): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0280, 0x0) socket(0x1a, 0x1, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002cfd7000ffdbdf25ff07000010e0947f16454a83"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008050) close_range$auto(0x2, 0x8, 0x0) 3.296558175s ago: executing program 0 (id=93): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x10001, 0x0) mmap$auto(0x0, 0x0, 0x4000000000df, 0x40eb2, r0, 0x5) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/dummy_hcd.5/usb6/serial\x00', 0x80000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0xa0800, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210026bd701cfadbdf25010000000400088014000200776730000000000000000000000000001e3cfc031afd932aaf8c4ca2d3396c25ab3af74414cf4c4853db7d3a3eee7f43deb2fc5bad02a098dfc4d025954ed8b5f1c5b0cc48eba370a9cf14a6bc3c5bb233209d26d562a7131b81c821d5c63572ab93c537487c61c14a54f634d67e07b7b5e851e610dcc42de472ee1c052496616edaea459e427e9c0142a29c343ccdb0b6a498a59c2437e19549945c7e0934476320e6f8ca4601a4d5683f86c45339e8d80d42e7c87fe37226d5003015f77744e8e5b8b09f28de2a79070722"], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_TIOCMGET2(r1, 0x5415, &(0x7f0000000040)) read$auto(r2, 0x0, 0x2) 2.976733087s ago: executing program 3 (id=94): readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)="33e10c4d53ca69cea95b7273766be5ccd6d94c4d5cbbf9a32f9388fb699305a8e641e918756b1666437da73dcea02939b45edc7cdf85e90fa3d59cf441f2702b1658e7e4fba90eb2efb70abacccc1b476566690c179926bb0b50b314b485683547c8ecfd2eb92f08b5f49055e7c0acfc3b2c0a08d66e3c1d640f0962296ab1ffbcc59b50", 0x9}, 0x3121) socket(0x9, 0x80000, 0xfffffffe) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x2, 0xee01, 0x8080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x2, 0x2100000, 0x4, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x4, 0x0, 0x2}) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0xf, 0x800000009, 0x10001, 0x1, 0x5, 0x300, 0xe6ae}, 0x6f3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x7ff, 0x41, &(0x7f0000000080)='/dev/sequencer\x00', 0x9) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x3, 0x3, r0, 0x2, 0x8000000000000001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x309b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) swapon$auto(0x0, 0x8000004) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.373979147s ago: executing program 1 (id=95): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x82e, 0x1, 0x9, 0x5, 0x21, 0x400940, 0x1ffde, 0x3, 0x3, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x5, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x931, 0x4, 0x8, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x4, 0x0, 0x20, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x5, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.208087684s ago: executing program 2 (id=96): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (rerun: 32) mmap$auto(0x0, 0x2020007, 0x2, 0xebd, 0xfffffffffffffffa, 0x400000000008000) (async) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffffff) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram3\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) (async) timer_getoverrun$auto(0x8) (async, rerun: 64) write$auto(0x1, 0x0, 0x80000000) (async, rerun: 64) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x6, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x80000000000001, 0x52}, 0x400) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000580)='\x10u\x8f\xe8XD\xb5\x8f\xf3\xe0T{\x05u\a\xa8\xd6\xda\x85dmn\x04\x02\x87\xcb\"\xbb\x16\x93\xcbo\xbak\x15L\xcaJ\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h4\"\x00\x00\x00\x00\x00\x00\x00\x01\xdf\r\xe1uv\xa5)^}t0/+\xecq\x01\x00\x00\x00\x00\x00\x00\x00\xc56\x991/@\xb3}\x9c\x8a\a\xa8\x1cd<~R\xb1\xdf6\xb4b\xf1qW\xdfO|\xa6?\x8b&U}A\xebQ~\xb9\x9e+\xbdB\x0f\xcd\xa3\xcf\n\x1b', 0x1) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010023e67302b36aff29bd704035"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1f, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080)) (async, rerun: 64) lseek$auto(0x3, 0x0, 0x1) (async, rerun: 64) munmap$auto(0x5, 0x8) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x4000000000000007, 0x8) write$auto(0x1, 0x0, 0x80000000) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) ioctl$auto_TUNSETSNDBUF(r0, 0x400454d4, 0x0) 2.123891313s ago: executing program 3 (id=97): pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r2, 0x0, 0x0) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000080)=""/209, 0xd1) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) membarrier$auto(0x2, 0x0, 0x9) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x1000, 0x6) r4 = socket(0x2, 0x801, 0x100) r5 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) r6 = open_by_handle_at$auto(r5, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(r4, r6, 0x0, 0xffff) 1.880390178s ago: executing program 0 (id=98): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r1) sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x2, 0x84) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b4d, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) writev$auto(r0, &(0x7f0000000080)={0x0, 0x2}, 0x4) 1.740922573s ago: executing program 1 (id=99): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x891, 0xb4, 0x81, 0x8, 0x8, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x10001, 0x40, 0x8, 0x1000f, 0x6, 0x10, [0x6, 0x2, 0xffff, 0x3, 0x7, 0x200000003, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x7, 0x8000, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x1, 0x7, 0x55ac, 0x4, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6]}, 0x4, 0xf) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000d40)=""/16, 0x10) poll$auto(0x0, 0x3, 0x8) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x60883, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) ioctl$auto(r0, 0x4000ae41, 0xffffffffffffffff) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) msgget$auto(0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) open(0x0, 0x0, 0xb5d1af1605322df2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0880, 0x0) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x480000, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 1.097543518s ago: executing program 2 (id=100): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) acct$auto(&(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_\xf6\r\x00\x00default_nu_gp/lu_gp_id\x1f\xd7\xba(-\xc4*e\xff\xad\xbae\xd9.\xff\x19\x9fx\xa4f\xb7U9\xae7\xf6n\x17f\xe9nt\a\x1aD\xdeo\vT\x8b\xb2D1\xd1\xf7#\xe2\xb5\'U}W\xbb\xa6\x9d\xaeD\xb2\xa8t\xff\xa3\xa5\x93p\xb3\xee~\xd3\xaca\"\x956#\xf6\xc2\x92p\x83\x8fT\xaa\xeby\x89\a\x81\x97A\x98&\x86\x11$\xf94\xb4\xaf\xc9\x81Qb\x14F.E\xde\xd6\x10\x8b\xa7\vve|\xe9\xa3d\x13\xd8J\xfc\xeap\xba\xe7VMk\xe9\x9c\xdf\xbf\xc2\xa05\x9f\xdcI\xa2/\xc1W\xf9\xfc\x86n\x8e\x9a:\x92\xb4d\x8d\t\x859\n\x8f\xab\xed\xfd\x81\xad\xc1\xc2\x0f_Ic') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r0, &(0x7f0000000200)='7\x02r\xa7DU1\xd1r\xec\x01\x00\x00\x00\xa7\x91\xd6|/7\x8c\xec\xd2\x05{!\x9d>K\xd5\xd1\xb1=hy\x02m\xa1\x04\x1f\xac\xb12\xa02r\xc4\x05\xbf\xd2\xf6S\xfc\xf2\x98\xf6\x19\x16\xc5o\xa2\x04\xff\x04\xe1\x13P\x96\xd7Q\xf0I\xb5\x95\xb5\xaa\xcb\xafN=,\x05\x0e\x96\xa9`\xd7\x8fu*\tj\x1a\xd2p\xca\x8af\xdb3dm\x8e\x98\x15r\xf4\xa7\x04\xa1,\xc7\x86O\x1a\xf7\x877l\x97YZ\xbd\x02?E(\x10\xa0\x8c\xa5\xcf\x1e\xfdRL\xf7\xf6\xa8\x05O\x94\x94\xf6\xef\xd0\x97\x18A\xdau\xc7\x96\x9c\xb0a \xefUXc\xe6\fkwj\v\xe8\x9a\xe6\xc6\"\x1c%\a\x1erd\xa0\xdb@\x8c\x90\xb0\x1ay=}\x98\xa3\xd9\xde\n\xc2\x83f\x98\x1d\xbfp\x15\xc1\x96\xf0u\xc3\x12\x1c\xbb?\xda\r\xb2\r\x18}\xf5\x98\xc40mh\xfa\aY\xbevz\xd6\xfd.\xec\xe1 \xad\xccH\xb2L\xc0\xc4\x0fT\x95=\x11,', 0xd) 1.00687549s ago: executing program 0 (id=101): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(r0, &(0x7f0000000340)={&(0x7f0000000380), 0x8000}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x29, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89a3, 0x24) (async) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 989.414068ms ago: executing program 3 (id=102): unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x5, 0x6, 0xffffffff, 0x2}, 0x30, 0x0, 0x6) madvise$auto(0x5, 0x7fffffffffffffff, 0xa77) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x12, 0x4, 0x440a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) io_setup$auto(0x80002, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="20002abd7000fedcdf25010000000d000280055140d023e39b5a933e949a3ae6e421486b139cfc549d2c023a5139cca0b945b14436de99229dba6dc3e33db0d907fa3c196becbd49464d23bd9773a6cbc93748a7cfe94461145276ca90ebb14873788d1eff95dbc4f3a36f1fc3ec2e053f4ba5e39ba1ffac07d987d8f7992c5eb555c2b9e85350c204947657e1"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8041) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) socket(0x10, 0x2, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r3, 0x1, &(0x7f00000000c0)) mmap$auto(0x0, 0x2, 0xdd, 0xeb4, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x22000, 0x0) 812.63803ms ago: executing program 2 (id=103): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) fcntl$auto(0x3, 0x1, 0x0) prctl$auto(0xfffffffa, 0x6, 0x0, 0x5, 0x4) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003ac0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_destroy$auto(0x0) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0x3, 0xb00) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) kill$auto(0x0, 0x12) write$auto(0x3, 0x0, 0x7fffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/interval\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000040}, 0x24040045) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001680)=""/59, 0x3b) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) 697.602804ms ago: executing program 2 (id=104): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0280, 0x0) socket(0x1a, 0x1, 0x2000000) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cfd7000ffdbdf25ff07000010e0947f16454a83"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008050) close_range$auto(0x2, 0x8, 0x0) 8.822861ms ago: executing program 0 (id=105): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0xffffffffffffffff, r3, 0x2abc) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x111801, 0xc8) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x2, 0x1, 0x0) listen$auto(r4, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) socket(0x1d, 0x2, 0x3) 0s ago: executing program 1 (id=106): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) fanotify_init$auto(0x2000009, 0xfffffffe) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) socket(0x2, 0x3, 0xa) socket(0x2, 0x801, 0x106) socketpair$auto(0x5, 0xfffffffe, 0x8000000000000000, 0x0) socket(0x15, 0x4, 0x100) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0xc) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) waitid$auto(0x9e0, r0, &(0x7f0000000100)={@siginfo_0_0={0x8, 0x6, 0x40, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000040)="4c57d56ee2950d5fa30a08c94f2e55a25d25603f80a5fa8568e743f6767ef94d9f790b6b0285d0d4b6f0dddd52e14fe708c507cc404e2dc1fd8ff55cc3bd54868e72d13325b8359e05a15777359c19843921bae2afff310f9b52dc322ea507d1677047ce15d2aeebe07ab38048c50a1f59ca22da22ae9f68766d7acbf858c5b5a0b5496da03cea29b5d4558a012b140872ec36a036bffac86680c434533b3e6a702d"}}}, 0x0, &(0x7f0000000180)={{0x7, 0x80}, {0x3, 0x101}, 0x8, 0x8, 0x4, 0x4, 0x8000000000000000, 0x10001, 0xffffffffffffff00, 0xec6, 0x1, 0x0, 0xfff, 0x7, 0x3, 0x7fffffff}) prctl$auto(0x3e, 0x8001, r1, 0x7c0, 0x0) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 345.309591][ T5877] cgroup: Unknown subsys name 'net' [ 345.463321][ T5877] cgroup: Unknown subsys name 'cpuset' [ 345.474102][ T5877] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 347.345272][ T5877] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 349.685638][ T5897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.694839][ T5897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.703482][ T5905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.729105][ T5905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.742383][ T5904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.749085][ T5905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.751403][ T5904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.766232][ T5901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.766825][ T5906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.775017][ T5901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.789028][ T5901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.797396][ T5901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.798892][ T5897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.806734][ T5901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.815340][ T5897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.820913][ T5901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.828011][ T5897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.834767][ T5901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.844725][ T5897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.850824][ T5901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.502046][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 350.636554][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 350.665352][ T5888] chnl_net:caif_netlink_parms(): no params data found [ 350.787120][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 350.844712][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.852440][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.860557][ T5889] bridge_slave_0: entered allmulticast mode [ 350.868245][ T5889] bridge_slave_0: entered promiscuous mode [ 350.912498][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.919758][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.926979][ T5889] bridge_slave_1: entered allmulticast mode [ 350.934996][ T5889] bridge_slave_1: entered promiscuous mode [ 351.044929][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.073339][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.080764][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.087985][ T5890] bridge_slave_0: entered allmulticast mode [ 351.096865][ T5890] bridge_slave_0: entered promiscuous mode [ 351.123789][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.149794][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.156965][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.167088][ T5888] bridge_slave_0: entered allmulticast mode [ 351.174867][ T5888] bridge_slave_0: entered promiscuous mode [ 351.182923][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.190766][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.198022][ T5890] bridge_slave_1: entered allmulticast mode [ 351.205842][ T5890] bridge_slave_1: entered promiscuous mode [ 351.257555][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.264895][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.272457][ T5888] bridge_slave_1: entered allmulticast mode [ 351.280174][ T5888] bridge_slave_1: entered promiscuous mode [ 351.318322][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.325823][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.333800][ T5887] bridge_slave_0: entered allmulticast mode [ 351.342019][ T5887] bridge_slave_0: entered promiscuous mode [ 351.353131][ T5889] team0: Port device team_slave_0 added [ 351.381171][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.391246][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.399381][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.406974][ T5887] bridge_slave_1: entered allmulticast mode [ 351.415188][ T5887] bridge_slave_1: entered promiscuous mode [ 351.427375][ T5889] team0: Port device team_slave_1 added [ 351.439343][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.452836][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.465333][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.601946][ T5890] team0: Port device team_slave_0 added [ 351.614370][ T5888] team0: Port device team_slave_0 added [ 351.624458][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.638157][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.649266][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.656299][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.687507][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.702012][ T5890] team0: Port device team_slave_1 added [ 351.724786][ T5888] team0: Port device team_slave_1 added [ 351.746386][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.753636][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.780584][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.843118][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.850358][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.876956][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.908352][ T5887] team0: Port device team_slave_0 added [ 351.918082][ T5887] team0: Port device team_slave_1 added [ 351.920129][ T5901] Bluetooth: hci3: command tx timeout [ 351.924841][ T5894] Bluetooth: hci1: command tx timeout [ 351.930018][ T5901] Bluetooth: hci0: command tx timeout [ 351.934827][ T5169] Bluetooth: hci2: command tx timeout [ 351.950364][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.957406][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.983685][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.995724][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.003282][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.029591][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.080492][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.087616][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.114296][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.140977][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.148169][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.175898][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.189674][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.196701][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.223315][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.305248][ T5889] hsr_slave_0: entered promiscuous mode [ 352.313826][ T5889] hsr_slave_1: entered promiscuous mode [ 352.363841][ T5890] hsr_slave_0: entered promiscuous mode [ 352.371107][ T5890] hsr_slave_1: entered promiscuous mode [ 352.377949][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.385879][ T5890] Cannot create hsr debugfs directory [ 352.426443][ T5887] hsr_slave_0: entered promiscuous mode [ 352.433970][ T5887] hsr_slave_1: entered promiscuous mode [ 352.441917][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.450212][ T5887] Cannot create hsr debugfs directory [ 352.487149][ T5888] hsr_slave_0: entered promiscuous mode [ 352.494386][ T5888] hsr_slave_1: entered promiscuous mode [ 352.501459][ T5888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.509593][ T5888] Cannot create hsr debugfs directory [ 353.061199][ T5890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.080773][ T5890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.093914][ T5890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.106408][ T5890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.196549][ T5887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.207987][ T5887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.232844][ T5887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.255228][ T5887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.354536][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.397679][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.413504][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.443164][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.514696][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.545984][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.574413][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.587370][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.662767][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.717398][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.753014][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.760487][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.772671][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.780012][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.902660][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.923485][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.974801][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.008586][ T5894] Bluetooth: hci1: command tx timeout [ 354.014106][ T5894] Bluetooth: hci0: command tx timeout [ 354.020039][ T5169] Bluetooth: hci2: command tx timeout [ 354.020127][ T5901] Bluetooth: hci3: command tx timeout [ 354.037037][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.044363][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.057261][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.064565][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.092982][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.151756][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.214939][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.222398][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.264533][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.271793][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.332376][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.393590][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.400891][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.461119][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.468384][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.550160][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.697612][ T5890] veth0_vlan: entered promiscuous mode [ 354.716593][ T5890] veth1_vlan: entered promiscuous mode [ 354.892506][ T5890] veth0_macvtap: entered promiscuous mode [ 354.918395][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.941768][ T5890] veth1_macvtap: entered promiscuous mode [ 355.070723][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.100723][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.133990][ T5888] veth0_vlan: entered promiscuous mode [ 355.155519][ T5890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.166652][ T5890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.177524][ T5890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.186898][ T5890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.253481][ T5888] veth1_vlan: entered promiscuous mode [ 355.283248][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.351125][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.379251][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.387353][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.461168][ T5888] veth0_macvtap: entered promiscuous mode [ 355.474361][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.483343][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.488189][ T5888] veth1_macvtap: entered promiscuous mode [ 355.581398][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.605812][ T5887] veth0_vlan: entered promiscuous mode [ 355.624068][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.654357][ T5888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.657443][ T5890] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 355.663733][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.690513][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.699835][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.715087][ T5889] veth0_vlan: entered promiscuous mode [ 355.740087][ T5887] veth1_vlan: entered promiscuous mode [ 355.813756][ T5889] veth1_vlan: entered promiscuous mode [ 355.915605][ T5887] veth0_macvtap: entered promiscuous mode [ 355.975589][ T5887] veth1_macvtap: entered promiscuous mode [ 356.041105][ T5889] veth0_macvtap: entered promiscuous mode [ 356.079619][ T51] Bluetooth: hci0: command tx timeout [ 356.082497][ T5894] Bluetooth: hci2: command tx timeout [ 356.085110][ T51] Bluetooth: hci1: command tx timeout [ 356.095167][ T5889] veth1_macvtap: entered promiscuous mode [ 356.096622][ T5901] Bluetooth: hci3: command tx timeout [ 356.111174][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.133409][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.164348][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.210009][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.255669][ T5915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.257916][ T5887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.275358][ T5887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.285526][ T5887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.295187][ T5887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.299150][ T5915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.317921][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.387638][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.447915][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.459685][ T5889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.470732][ T5889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.479755][ T5889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.740099][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.756559][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.909213][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.972326][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.089871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 357.104639][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.113283][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.249722][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.249747][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.158821][ T51] Bluetooth: hci1: command tx timeout [ 358.160556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.166617][ T51] Bluetooth: hci2: command tx timeout [ 358.179348][ T5901] Bluetooth: hci3: command tx timeout [ 358.182489][ T5894] Bluetooth: hci0: command tx timeout [ 358.658874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.668247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.677548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.686537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.695462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.815453][ T6004] can: request_module (can-proto-0) failed. [ 358.827141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.901878][ T6023] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 358.912228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.026580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 359.663764][ T6006] random: crng reseeded on system resumption [ 359.787858][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 360.171138][ T5894] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 361.629604][ T6048] tipc: Can't bind to reserved service type 1 [ 362.236897][ T6053] Invalid ELF header magic: != ELF [ 362.489205][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 362.710106][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 363.552396][ T6066] netlink: set zone limit has 8 unknown bytes [ 363.958870][ T6077] bond0: option all_slaves_active: invalid value () [ 364.685830][ T6090] FAULT_INJECTION: forcing a failure. [ 364.685830][ T6090] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 364.706097][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.3.23 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 364.706152][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.706176][ T6090] Call Trace: [ 364.706187][ T6090] [ 364.706203][ T6090] dump_stack_lvl+0x16c/0x1f0 [ 364.706264][ T6090] should_fail_ex+0x512/0x640 [ 364.706319][ T6090] should_fail_alloc_page+0xe7/0x130 [ 364.706354][ T6090] prepare_alloc_pages+0x3c2/0x610 [ 364.706394][ T6090] ? rcu_is_watching+0x12/0xc0 [ 364.706434][ T6090] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 364.706488][ T6090] ? __lock_acquire+0xb8a/0x1c90 [ 364.706552][ T6090] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.706604][ T6090] ? do_raw_spin_lock+0x12c/0x2b0 [ 364.706657][ T6090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.706710][ T6090] ? find_held_lock+0x2b/0x80 [ 364.706758][ T6090] ? __lock_acquire+0xb8a/0x1c90 [ 364.706803][ T6090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.706857][ T6090] ? policy_nodemask+0xea/0x4e0 [ 364.706892][ T6090] alloc_pages_mpol+0x1fb/0x550 [ 364.706926][ T6090] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 364.706971][ T6090] folio_alloc_mpol_noprof+0x36/0x2f0 [ 364.707012][ T6090] shmem_alloc_folio+0x135/0x160 [ 364.707055][ T6090] shmem_alloc_and_add_folio+0x499/0xc20 [ 364.707114][ T6090] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 364.707175][ T6090] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 364.707232][ T6090] shmem_get_folio_gfp+0x67f/0x1600 [ 364.707291][ T6090] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 364.707345][ T6090] ? filemap_map_pages+0xf6f/0x1680 [ 364.707402][ T6090] shmem_fault+0x1fe/0xa30 [ 364.707453][ T6090] ? __pfx_shmem_fault+0x10/0x10 [ 364.707510][ T6090] ? __pfx_filemap_map_pages+0x10/0x10 [ 364.707574][ T6090] __do_fault+0x10d/0x490 [ 364.707631][ T6090] __handle_mm_fault+0x3c2a/0x5490 [ 364.707689][ T6090] ? __pfx___handle_mm_fault+0x10/0x10 [ 364.707730][ T6090] ? __pfx_mt_find+0x10/0x10 [ 364.707785][ T6090] ? find_vma+0xbf/0x140 [ 364.707818][ T6090] ? __pfx_find_vma+0x10/0x10 [ 364.707857][ T6090] handle_mm_fault+0x589/0xd10 [ 364.707904][ T6090] ? __pkru_allows_pkey+0x51/0xb0 [ 364.707951][ T6090] do_user_addr_fault+0x7a6/0x1370 [ 364.708001][ T6090] ? rcu_is_watching+0x12/0xc0 [ 364.708041][ T6090] exc_page_fault+0x5c/0xb0 [ 364.708088][ T6090] asm_exc_page_fault+0x26/0x30 [ 364.708127][ T6090] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 364.708166][ T6090] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 364.708202][ T6090] RSP: 0018:ffffc9000b237558 EFLAGS: 00050202 [ 364.708229][ T6090] RAX: 0000000000000001 RBX: 0000000000000d50 RCX: 0000000000000a54 [ 364.708247][ T6090] RDX: ffffed100dbd7dc9 RSI: 0000000000006000 RDI: ffff88806debe3f4 [ 364.708266][ T6090] RBP: 0000000000005d04 R08: 0000000000000001 R09: ffffed100dbd7dc8 [ 364.708285][ T6090] R10: ffff88806debee47 R11: 0000000000000000 R12: ffffc9000b237c58 [ 364.708304][ T6090] R13: 0000000000006a54 R14: ffff88806debe0f8 R15: 00007ffffffff000 [ 364.708346][ T6090] _copy_from_iter+0x383/0x16f0 [ 364.708400][ T6090] ? __build_skb_around+0x278/0x3b0 [ 364.708447][ T6090] ? __alloc_skb+0x200/0x380 [ 364.708489][ T6090] ? __pfx__copy_from_iter+0x10/0x10 [ 364.708535][ T6090] ? __pfx___alloc_skb+0x10/0x10 [ 364.708584][ T6090] ? __lock_acquire+0xb8a/0x1c90 [ 364.708627][ T6090] ? __asan_memset+0x23/0x50 [ 364.708666][ T6090] ? skb_put+0x138/0x1b0 [ 364.708698][ T6090] tipc_msg_build+0x7e9/0x1150 [ 364.708734][ T6090] ? __pfx_tipc_msg_build+0x10/0x10 [ 364.708770][ T6090] ? mark_held_locks+0x49/0x80 [ 364.708800][ T6090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 364.708836][ T6090] tipc_send_group_bcast+0x7cc/0xa50 [ 364.708913][ T6090] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 364.708956][ T6090] ? __pfx_woken_wake_function+0x10/0x10 [ 364.709001][ T6090] __tipc_sendmsg+0x4ab/0x19a0 [ 364.709029][ T6090] ? __lock_acquire+0x622/0x1c90 [ 364.709063][ T6090] ? __pfx___tipc_sendmsg+0x10/0x10 [ 364.709096][ T6090] ? __pfx___might_resched+0x10/0x10 [ 364.709144][ T6090] ? __local_bh_enable_ip+0xa4/0x120 [ 364.709176][ T6090] tipc_sendmsg+0x4f/0x70 [ 364.709202][ T6090] sock_write_iter+0x4ff/0x5b0 [ 364.709229][ T6090] ? __pfx_sock_write_iter+0x10/0x10 [ 364.709265][ T6090] ? bpf_lsm_file_permission+0x9/0x10 [ 364.709290][ T6090] ? security_file_permission+0x71/0x210 [ 364.709322][ T6090] ? rw_verify_area+0xcf/0x680 [ 364.709354][ T6090] vfs_write+0x6c4/0x1150 [ 364.709389][ T6090] ? __pfx_sock_write_iter+0x10/0x10 [ 364.709417][ T6090] ? __pfx_vfs_write+0x10/0x10 [ 364.709448][ T6090] ? find_held_lock+0x2b/0x80 [ 364.709490][ T6090] ksys_write+0x1f8/0x250 [ 364.709523][ T6090] ? __pfx_ksys_write+0x10/0x10 [ 364.709567][ T6090] do_syscall_64+0xcd/0x490 [ 364.709606][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.709629][ T6090] RIP: 0033:0x7fe583d8e929 [ 364.709648][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.709670][ T6090] RSP: 002b:00007fe584c65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.709691][ T6090] RAX: ffffffffffffffda RBX: 00007fe583fb5fa0 RCX: 00007fe583d8e929 [ 364.709705][ T6090] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 364.709719][ T6090] RBP: 00007fe584c65090 R08: 0000000000000000 R09: 0000000000000000 [ 364.709732][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.709745][ T6090] R13: 0000000000000000 R14: 00007fe583fb5fa0 R15: 00007ffed4cd4758 [ 364.709774][ T6090] [ 366.046300][ T6098] random: crng reseeded on system resumption [ 366.056832][ T6098] FAULT_INJECTION: forcing a failure. [ 366.056832][ T6098] name failslab, interval 1, probability 0, space 0, times 1 [ 366.117190][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.0.25 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 366.117242][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.117269][ T6098] Call Trace: [ 366.117280][ T6098] [ 366.117293][ T6098] dump_stack_lvl+0x16c/0x1f0 [ 366.117356][ T6098] should_fail_ex+0x512/0x640 [ 366.117404][ T6098] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 366.117455][ T6098] should_failslab+0xc2/0x120 [ 366.117488][ T6098] __kmalloc_cache_noprof+0x6a/0x3e0 [ 366.117531][ T6098] ? blocking_notifier_call_chain_robust+0xf6/0x160 [ 366.117580][ T6098] ? create_basic_memory_bitmaps+0x9d/0x320 [ 366.117628][ T6098] create_basic_memory_bitmaps+0x9d/0x320 [ 366.117675][ T6098] snapshot_open+0x235/0x2b0 [ 366.117721][ T6098] ? __pfx_snapshot_open+0x10/0x10 [ 366.117765][ T6098] misc_open+0x35d/0x420 [ 366.117808][ T6098] ? __pfx_misc_open+0x10/0x10 [ 366.117850][ T6098] chrdev_open+0x234/0x6a0 [ 366.117902][ T6098] ? __pfx_apparmor_file_open+0x10/0x10 [ 366.117945][ T6098] ? __pfx_chrdev_open+0x10/0x10 [ 366.118009][ T6098] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 366.118064][ T6098] do_dentry_open+0x741/0x1c10 [ 366.118117][ T6098] ? __pfx_chrdev_open+0x10/0x10 [ 366.118179][ T6098] vfs_open+0x82/0x3f0 [ 366.118227][ T6098] path_openat+0x1de4/0x2cb0 [ 366.118293][ T6098] ? __pfx_path_openat+0x10/0x10 [ 366.118346][ T6098] ? __lock_acquire+0xb8a/0x1c90 [ 366.118399][ T6098] do_filp_open+0x20b/0x470 [ 366.118447][ T6098] ? __pfx_do_filp_open+0x10/0x10 [ 366.118523][ T6098] ? alloc_fd+0x471/0x7d0 [ 366.118579][ T6098] do_sys_openat2+0x11b/0x1d0 [ 366.118613][ T6098] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.118670][ T6098] __x64_sys_openat+0x174/0x210 [ 366.118710][ T6098] ? __pfx___x64_sys_openat+0x10/0x10 [ 366.118768][ T6098] do_syscall_64+0xcd/0x490 [ 366.118824][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.118857][ T6098] RIP: 0033:0x7f845758e929 [ 366.118883][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.118914][ T6098] RSP: 002b:00007f845847e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.118947][ T6098] RAX: ffffffffffffffda RBX: 00007f84577b5fa0 RCX: 00007f845758e929 [ 366.118978][ T6098] RDX: 0000000000080201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 366.118999][ T6098] RBP: 00007f8457610b39 R08: 0000000000000000 R09: 0000000000000000 [ 366.119017][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.119036][ T6098] R13: 0000000000000000 R14: 00007f84577b5fa0 R15: 00007ffd1ccd5af8 [ 366.119079][ T6098] [ 368.278876][ T6126] can: request_module (can-proto-0) failed. [ 368.502433][ T6133] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 369.221206][ T6137] random: crng reseeded on system resumption [ 371.320931][ T5894] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 371.329208][ T5894] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 371.539479][ T6177] FAULT_INJECTION: forcing a failure. [ 371.539479][ T6177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.592082][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.1.39 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 371.592127][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.592144][ T6177] Call Trace: [ 371.592155][ T6177] [ 371.592167][ T6177] dump_stack_lvl+0x16c/0x1f0 [ 371.592216][ T6177] should_fail_ex+0x512/0x640 [ 371.592265][ T6177] should_fail_alloc_page+0xe7/0x130 [ 371.592297][ T6177] prepare_alloc_pages+0x3c2/0x610 [ 371.592337][ T6177] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 371.592390][ T6177] ? mas_next_slot+0x12d3/0x21b0 [ 371.592469][ T6177] ? __up_read+0x1f8/0x750 [ 371.592522][ T6177] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.592570][ T6177] ? mas_find+0x2f6/0x530 [ 371.592614][ T6177] ? validate_mm+0x40a/0x570 [ 371.592658][ T6177] ? __pfx_validate_mm+0x10/0x10 [ 371.592708][ T6177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.592762][ T6177] ? policy_nodemask+0xea/0x4e0 [ 371.592798][ T6177] alloc_pages_mpol+0x1fb/0x550 [ 371.592832][ T6177] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 371.592877][ T6177] alloc_pages_noprof+0x131/0x390 [ 371.592911][ T6177] __pud_alloc+0x3b/0x750 [ 371.592952][ T6177] alloc_new_pud+0x267/0x320 [ 371.593004][ T6177] move_page_tables+0x6b6/0x4070 [ 371.593063][ T6177] ? __pfx_copy_vma+0x10/0x10 [ 371.593111][ T6177] ? finish_task_switch.isra.0+0x21c/0xc10 [ 371.593155][ T6177] ? __pfx_move_page_tables+0x10/0x10 [ 371.593205][ T6177] ? register_lock_class+0x41/0x4c0 [ 371.593284][ T6177] copy_vma_and_data+0x216/0x750 [ 371.593340][ T6177] ? __pfx_copy_vma_and_data+0x10/0x10 [ 371.593400][ T6177] ? __vma_enter_locked+0x163/0x3f0 [ 371.593455][ T6177] ? find_held_lock+0x2b/0x80 [ 371.593486][ T6177] ? move_vma+0x536/0x1740 [ 371.593537][ T6177] move_vma+0x548/0x1740 [ 371.593586][ T6177] ? __pfx_move_vma+0x10/0x10 [ 371.593626][ T6177] ? mm_get_unmapped_area+0x95/0xe0 [ 371.593660][ T6177] ? shmem_get_unmapped_area+0x170/0xa00 [ 371.593702][ T6177] ? cap_mmap_addr+0x4b/0x120 [ 371.593739][ T6177] ? bpf_lsm_mmap_addr+0x9/0x10 [ 371.593774][ T6177] ? security_mmap_addr+0x6c/0x1e0 [ 371.593817][ T6177] ? __get_unmapped_area+0x267/0x440 [ 371.593860][ T6177] ? vrm_set_new_addr+0x208/0x290 [ 371.593914][ T6177] __do_sys_mremap+0xe07/0x1590 [ 371.593970][ T6177] ? __pfx___do_sys_mremap+0x10/0x10 [ 371.594031][ T6177] ? __fget_files+0x204/0x3c0 [ 371.594084][ T6177] ? __x64_sys_futex+0x1e0/0x4c0 [ 371.594152][ T6177] do_syscall_64+0xcd/0x490 [ 371.594204][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.594237][ T6177] RIP: 0033:0x7fac6a58e929 [ 371.594263][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.594294][ T6177] RSP: 002b:00007fac6b319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 371.594325][ T6177] RAX: ffffffffffffffda RBX: 00007fac6a7b6240 RCX: 00007fac6a58e929 [ 371.594346][ T6177] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 371.594364][ T6177] RBP: 00007fac6a610b39 R08: 00007effffffb000 R09: 0000000000000000 [ 371.594384][ T6177] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 371.594402][ T6177] R13: 0000000000000000 R14: 00007fac6a7b6240 R15: 00007ffe5e8495c8 [ 371.594447][ T6177] [ 374.371393][ T6198] FAULT_INJECTION: forcing a failure. [ 374.371393][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 374.421684][ T6198] CPU: 0 UID: 0 PID: 6198 Comm: syz.1.46 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 374.421733][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.421752][ T6198] Call Trace: [ 374.421763][ T6198] [ 374.421777][ T6198] dump_stack_lvl+0x16c/0x1f0 [ 374.421835][ T6198] should_fail_ex+0x512/0x640 [ 374.421887][ T6198] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 374.421953][ T6198] should_failslab+0xc2/0x120 [ 374.421987][ T6198] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 374.422044][ T6198] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.422091][ T6198] ? xfrm4_net_init+0x9e/0x1c0 [ 374.422134][ T6198] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 374.422181][ T6198] ? __pfx_xfrm4_net_init+0x10/0x10 [ 374.422225][ T6198] kmemdup_noprof+0x29/0x60 [ 374.422300][ T6198] xfrm4_net_init+0x9e/0x1c0 [ 374.422348][ T6198] ? __pfx_xfrm4_net_init+0x10/0x10 [ 374.422402][ T6198] ops_init+0x1e2/0x5f0 [ 374.422466][ T6198] setup_net+0x1ff/0x510 [ 374.422520][ T6198] ? lockdep_init_map_type+0x5c/0x280 [ 374.422572][ T6198] ? __pfx_setup_net+0x10/0x10 [ 374.422631][ T6198] ? debug_mutex_init+0x37/0x70 [ 374.422673][ T6198] copy_net_ns+0x2a6/0x5f0 [ 374.422714][ T6198] create_new_namespaces+0x3ea/0xa90 [ 374.422766][ T6198] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 374.422812][ T6198] ksys_unshare+0x45b/0xa40 [ 374.422863][ T6198] ? __pfx_ksys_unshare+0x10/0x10 [ 374.422914][ T6198] ? xfd_validate_state+0x61/0x180 [ 374.422977][ T6198] __x64_sys_unshare+0x31/0x40 [ 374.423025][ T6198] do_syscall_64+0xcd/0x490 [ 374.423084][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.423120][ T6198] RIP: 0033:0x7fac6a58e929 [ 374.423147][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.423181][ T6198] RSP: 002b:00007fac6b37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 374.423214][ T6198] RAX: ffffffffffffffda RBX: 00007fac6a7b5fa0 RCX: 00007fac6a58e929 [ 374.423237][ T6198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 374.423257][ T6198] RBP: 00007fac6a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.423277][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.423297][ T6198] R13: 0000000000000000 R14: 00007fac6a7b5fa0 R15: 00007ffe5e8495c8 [ 374.423342][ T6198] [ 376.686506][ T6230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 377.440991][ T6232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 377.484924][ T6225] FAULT_INJECTION: forcing a failure. [ 377.484924][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 377.510789][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.1.52 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 377.510838][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.510852][ T6225] Call Trace: [ 377.510860][ T6225] [ 377.510869][ T6225] dump_stack_lvl+0x16c/0x1f0 [ 377.510909][ T6225] should_fail_ex+0x512/0x640 [ 377.510944][ T6225] ? __kmalloc_noprof+0xbf/0x510 [ 377.510982][ T6225] ? __register_sysctl_table+0xb3/0x1900 [ 377.511021][ T6225] should_failslab+0xc2/0x120 [ 377.511044][ T6225] __kmalloc_noprof+0xd2/0x510 [ 377.511086][ T6225] __register_sysctl_table+0xb3/0x1900 [ 377.511125][ T6225] ? is_module_address+0x5f/0xf0 [ 377.511165][ T6225] ? __pfx___register_sysctl_table+0x10/0x10 [ 377.511203][ T6225] ? is_module_address+0x69/0xf0 [ 377.511237][ T6225] ? register_net_sysctl_sz+0x228/0x3e0 [ 377.511262][ T6225] ? __asan_memcpy+0x3c/0x60 [ 377.511296][ T6225] xfrm4_net_init+0xf0/0x1c0 [ 377.511328][ T6225] ? __pfx_xfrm4_net_init+0x10/0x10 [ 377.511357][ T6225] ops_init+0x1e2/0x5f0 [ 377.511399][ T6225] setup_net+0x1ff/0x510 [ 377.511435][ T6225] ? lockdep_init_map_type+0x5c/0x280 [ 377.511470][ T6225] ? __pfx_setup_net+0x10/0x10 [ 377.511510][ T6225] ? debug_mutex_init+0x37/0x70 [ 377.511537][ T6225] copy_net_ns+0x2a6/0x5f0 [ 377.511564][ T6225] create_new_namespaces+0x3ea/0xa90 [ 377.511598][ T6225] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 377.511629][ T6225] ksys_unshare+0x45b/0xa40 [ 377.511663][ T6225] ? __pfx_ksys_unshare+0x10/0x10 [ 377.511697][ T6225] ? xfd_validate_state+0x61/0x180 [ 377.511739][ T6225] __x64_sys_unshare+0x31/0x40 [ 377.511772][ T6225] do_syscall_64+0xcd/0x490 [ 377.511817][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.511842][ T6225] RIP: 0033:0x7fac6a58e929 [ 377.511861][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.511883][ T6225] RSP: 002b:00007fac6b37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.511905][ T6225] RAX: ffffffffffffffda RBX: 00007fac6a7b5fa0 RCX: 00007fac6a58e929 [ 377.511920][ T6225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.511934][ T6225] RBP: 00007fac6a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 377.511948][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.511962][ T6225] R13: 0000000000000000 R14: 00007fac6a7b5fa0 R15: 00007ffe5e8495c8 [ 377.511991][ T6225] [ 378.739160][ T5894] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 378.840847][ T6243] Zero length message leads to an empty skb [ 379.373954][ T6257] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 380.654051][ T6271] misc userio: Invalid payload size [ 383.002736][ T6278] random: crng reseeded on system resumption [ 383.100467][ T6298] netlink: 314 bytes leftover after parsing attributes in process `syz.2.67'. [ 383.692327][ T6302] process 'syz.1.68' launched '' with NULL argv: empty string added [ 385.583960][ T6339] netlink: 186 bytes leftover after parsing attributes in process `syz.3.74'. [ 385.848766][ T6339] random: crng reseeded on system resumption [ 387.027854][ T6342] bond0: option all_slaves_active: invalid value () [ 387.676766][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 387.860835][ T6365] hub 8-0:1.0: USB hub found [ 387.894815][ T6365] hub 8-0:1.0: 1 port detected [ 389.205290][ T6400] nvme_fcloop: unknown parameter or missing value '7' [ 389.231067][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.249018][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.292305][ T6401] ALSA: mixer_oss: invalid OSS volume '0' [ 390.298103][ T6401] ALSA: mixer_oss: invalid OSS volume '' [ 391.092295][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 391.157216][ T6430] bond0: (slave bond_slave_0): Releasing backup interface [ 391.393579][ T6433] ======================================================= [ 391.393579][ T6433] WARNING: The mand mount option has been deprecated and [ 391.393579][ T6433] and is ignored by this kernel. Remove the mand [ 391.393579][ T6433] option from the mount to silence this warning. [ 391.393579][ T6433] ======================================================= syzkaller syzkaller login: [ 393.271181][ T6464] program syz.3.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.660848][ T6479] [ 393.663269][ T6479] ====================================================== [ 393.670436][ T6479] WARNING: possible circular locking dependency detected [ 393.677493][ T6479] 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 Not tainted [ 393.684648][ T6479] ------------------------------------------------------ [ 393.691704][ T6479] syz.0.105/6479 is trying to acquire lock: [ 393.697632][ T6479] ffff888142bcca58 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 393.707563][ T6479] [ 393.707563][ T6479] but task is already holding lock: [ 393.715063][ T6479] ffff888142bcc520 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 393.726380][ T6479] [ 393.726380][ T6479] which lock already depends on the new lock. [ 393.726380][ T6479] [ 393.736819][ T6479] [ 393.736819][ T6479] the existing dependency chain (in reverse order) is: [ 393.745865][ T6479] [ 393.745865][ T6479] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 393.754534][ T6479] blk_alloc_queue+0x619/0x760 [ 393.759867][ T6479] blk_mq_alloc_queue+0x175/0x290 [ 393.765470][ T6479] __blk_mq_alloc_disk+0x29/0x120 [ 393.771067][ T6479] nbd_dev_add+0x4a0/0xbc0 [ 393.776061][ T6479] nbd_init+0x181/0x320 [ 393.780794][ T6479] do_one_initcall+0x120/0x6e0 [ 393.786140][ T6479] kernel_init_freeable+0x5c2/0x900 [ 393.791953][ T6479] kernel_init+0x1c/0x2b0 [ 393.796853][ T6479] ret_from_fork+0x5d7/0x6f0 [ 393.802025][ T6479] ret_from_fork_asm+0x1a/0x30 [ 393.807384][ T6479] [ 393.807384][ T6479] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 393.814657][ T6479] fs_reclaim_acquire+0x102/0x150 [ 393.820258][ T6479] prepare_alloc_pages+0x162/0x610 [ 393.825967][ T6479] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 393.832441][ T6479] __alloc_pages_noprof+0xb/0x1b0 [ 393.838041][ T6479] pcpu_populate_chunk+0x110/0xb00 [ 393.843808][ T6479] pcpu_alloc_noprof+0x86a/0x1470 [ 393.849422][ T6479] xt_percpu_counter_alloc+0x13e/0x1b0 [ 393.855462][ T6479] find_check_entry.constprop.0+0xbf/0xa20 [ 393.861850][ T6479] translate_table+0xd0b/0x17b0 [ 393.867276][ T6479] ip6t_register_table+0x102/0x430 [ 393.872967][ T6479] ip6table_filter_table_init+0x75/0xa0 [ 393.879135][ T6479] xt_find_table_lock+0x2e1/0x520 [ 393.884754][ T6479] xt_request_find_table_lock+0x28/0xf0 [ 393.890869][ T6479] get_info+0x190/0x620 [ 393.895587][ T6479] do_ip6t_get_ctl+0x169/0xa50 [ 393.900917][ T6479] nf_getsockopt+0x7c/0xe0 [ 393.905893][ T6479] ipv6_getsockopt+0x1f7/0x280 [ 393.911227][ T6479] tcp_getsockopt+0x9e/0x100 [ 393.916396][ T6479] do_sock_getsockopt+0x3fc/0x800 [ 393.921984][ T6479] __sys_getsockopt+0x123/0x1b0 [ 393.927410][ T6479] __x64_sys_getsockopt+0xbd/0x160 [ 393.933121][ T6479] do_syscall_64+0xcd/0x490 [ 393.938203][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.944684][ T6479] [ 393.944684][ T6479] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 393.952473][ T6479] __mutex_lock+0x199/0xb90 [ 393.957560][ T6479] pcpu_alloc_noprof+0xb4c/0x1470 [ 393.963158][ T6479] sbitmap_init_node+0x2fd/0x770 [ 393.968655][ T6479] sbitmap_queue_init_node+0x41/0x560 [ 393.974707][ T6479] blk_mq_init_tags+0x12d/0x2b0 [ 393.980132][ T6479] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 393.986257][ T6479] blk_mq_init_sched+0x30c/0x610 [ 393.991756][ T6479] elevator_switch+0x1e1/0x7f0 [ 393.997083][ T6479] elevator_change+0x2ac/0x400 [ 394.002410][ T6479] elevator_set_default+0x292/0x320 [ 394.008174][ T6479] blk_register_queue+0x393/0x4f0 [ 394.013754][ T6479] __add_disk+0x74a/0xf00 [ 394.018647][ T6479] add_disk_fwnode+0x13f/0x5d0 [ 394.023979][ T6479] nbd_dev_add+0x791/0xbc0 [ 394.028964][ T6479] nbd_init+0x181/0x320 [ 394.033779][ T6479] do_one_initcall+0x120/0x6e0 [ 394.039104][ T6479] kernel_init_freeable+0x5c2/0x900 [ 394.044871][ T6479] kernel_init+0x1c/0x2b0 [ 394.049760][ T6479] ret_from_fork+0x5d7/0x6f0 [ 394.054922][ T6479] ret_from_fork_asm+0x1a/0x30 [ 394.060254][ T6479] [ 394.060254][ T6479] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 394.068134][ T6479] __lock_acquire+0x126f/0x1c90 [ 394.073575][ T6479] lock_acquire+0x179/0x350 [ 394.078689][ T6479] __mutex_lock+0x199/0xb90 [ 394.083776][ T6479] queue_requests_store+0x1c7/0x310 [ 394.089566][ T6479] queue_attr_store+0x276/0x320 [ 394.094994][ T6479] sysfs_kf_write+0xef/0x150 [ 394.100153][ T6479] kernfs_fop_write_iter+0x354/0x510 [ 394.106015][ T6479] iter_file_splice_write+0x91f/0x1150 [ 394.112080][ T6479] direct_splice_actor+0x192/0x6c0 [ 394.117762][ T6479] splice_direct_to_actor+0x342/0xa30 [ 394.123697][ T6479] do_splice_direct+0x174/0x240 [ 394.129117][ T6479] do_sendfile+0xb06/0xe50 [ 394.134112][ T6479] __x64_sys_sendfile64+0x1d8/0x220 [ 394.139875][ T6479] do_syscall_64+0xcd/0x490 [ 394.144974][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.151429][ T6479] [ 394.151429][ T6479] other info that might help us debug this: [ 394.151429][ T6479] [ 394.161686][ T6479] Chain exists of: [ 394.161686][ T6479] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 394.161686][ T6479] [ 394.175496][ T6479] Possible unsafe locking scenario: [ 394.175496][ T6479] [ 394.182970][ T6479] CPU0 CPU1 [ 394.188377][ T6479] ---- ---- [ 394.193765][ T6479] lock(&q->q_usage_counter(io)#59); [ 394.199192][ T6479] lock(fs_reclaim); [ 394.205774][ T6479] lock(&q->q_usage_counter(io)#59); [ 394.213720][ T6479] lock(&q->elevator_lock); [ 394.218406][ T6479] [ 394.218406][ T6479] *** DEADLOCK *** [ 394.218406][ T6479] [ 394.226702][ T6479] 5 locks held by syz.0.105/6479: [ 394.231775][ T6479] #0: ffff888036a44428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 394.242043][ T6479] #1: ffff88807b3b5888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 394.251856][ T6479] #2: ffff888140552698 (kn->active#88){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 394.261948][ T6479] #3: ffff888142bcc520 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 394.273694][ T6479] #4: ffff888142bcc558 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 394.285706][ T6479] [ 394.285706][ T6479] stack backtrace: [ 394.291626][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.0.105 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 394.291661][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.291678][ T6479] Call Trace: [ 394.291688][ T6479] [ 394.291699][ T6479] dump_stack_lvl+0x116/0x1f0 [ 394.291743][ T6479] print_circular_bug+0x275/0x350 [ 394.291784][ T6479] check_noncircular+0x14c/0x170 [ 394.291825][ T6479] __lock_acquire+0x126f/0x1c90 [ 394.291866][ T6479] ? __lock_acquire+0xb8a/0x1c90 [ 394.291906][ T6479] lock_acquire+0x179/0x350 [ 394.291943][ T6479] ? queue_requests_store+0x1c7/0x310 [ 394.291991][ T6479] ? __pfx___might_resched+0x10/0x10 [ 394.292022][ T6479] ? do_raw_spin_lock+0x12c/0x2b0 [ 394.292068][ T6479] __mutex_lock+0x199/0xb90 [ 394.292110][ T6479] ? queue_requests_store+0x1c7/0x310 [ 394.292156][ T6479] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 394.292194][ T6479] ? queue_requests_store+0x1c7/0x310 [ 394.292244][ T6479] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.292284][ T6479] ? __pfx___mutex_lock+0x10/0x10 [ 394.292330][ T6479] ? __pfx_autoremove_wake_function+0x10/0x10 [ 394.292371][ T6479] ? queue_requests_store+0x1c7/0x310 [ 394.292416][ T6479] queue_requests_store+0x1c7/0x310 [ 394.292462][ T6479] ? __pfx_queue_requests_store+0x10/0x10 [ 394.292511][ T6479] ? __mutex_trylock_common+0xe9/0x250 [ 394.292552][ T6479] ? __pfx_queue_requests_store+0x10/0x10 [ 394.292598][ T6479] queue_attr_store+0x276/0x320 [ 394.292641][ T6479] ? __pfx_queue_attr_store+0x10/0x10 [ 394.292683][ T6479] ? __lock_acquire+0x622/0x1c90 [ 394.292729][ T6479] ? find_held_lock+0x2b/0x80 [ 394.292758][ T6479] ? sysfs_file_kobj+0xe4/0x290 [ 394.292794][ T6479] ? __pfx_queue_attr_store+0x10/0x10 [ 394.292837][ T6479] sysfs_kf_write+0xef/0x150 [ 394.292870][ T6479] kernfs_fop_write_iter+0x354/0x510 [ 394.292899][ T6479] ? __pfx_sysfs_kf_write+0x10/0x10 [ 394.292933][ T6479] iter_file_splice_write+0x91f/0x1150 [ 394.292982][ T6479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 394.293024][ T6479] ? __pfx_copy_splice_read+0x10/0x10 [ 394.293068][ T6479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 394.293108][ T6479] direct_splice_actor+0x192/0x6c0 [ 394.293146][ T6479] splice_direct_to_actor+0x342/0xa30 [ 394.293183][ T6479] ? __pfx_direct_splice_actor+0x10/0x10 [ 394.293230][ T6479] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 394.293272][ T6479] do_splice_direct+0x174/0x240 [ 394.293307][ T6479] ? __pfx_do_splice_direct+0x10/0x10 [ 394.293344][ T6479] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 394.293381][ T6479] ? rw_verify_area+0xcf/0x680 [ 394.293418][ T6479] do_sendfile+0xb06/0xe50 [ 394.293459][ T6479] ? __pfx_do_sendfile+0x10/0x10 [ 394.293496][ T6479] ? handle_mm_fault+0x2ab/0xd10 [ 394.293535][ T6479] ? __x64_sys_futex+0x1e0/0x4c0 [ 394.293570][ T6479] ? __x64_sys_futex+0x1e9/0x4c0 [ 394.293605][ T6479] __x64_sys_sendfile64+0x1d8/0x220 [ 394.293632][ T6479] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 394.293665][ T6479] do_syscall_64+0xcd/0x490 [ 394.293709][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.293743][ T6479] RIP: 0033:0x7f845758e929 [ 394.293765][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.293792][ T6479] RSP: 002b:00007f845847e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.293817][ T6479] RAX: ffffffffffffffda RBX: 00007f84577b5fa0 RCX: 00007f845758e929 [ 394.293835][ T6479] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 394.293852][ T6479] RBP: 00007f8457610b39 R08: 0000000000000000 R09: 0000000000000000 [ 394.293868][ T6479] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 394.293885][ T6479] R13: 0000000000000000 R14: 00007f84577b5fa0 R15: 00007ffd1ccd5af8 [ 394.293911][ T6479] [ 394.871077][ T6482] can: request_module (can-proto-3) failed.