last executing test programs:
11.735976792s ago: executing program 3 (id=61):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
listmount$auto(0x0, 0x0, 0xf4240, 0x1)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa7)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x20000800)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd70"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x23af690fef30229, 0x9)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000380)="dcbb5fd7054bed139fb7f9fb1dca8fe1d88f65ee057c0e6faac40d106e4f0d52edf6e31c48e8d983ae3431fa707225c2c387e1a200b38759ba8e9187200e6d044ef46a534de751b1436f20ed7071b254509700aa726ea003a1b7b9ce2313756dc84bc4556ddac694c4553d72ed13a885176712c9cff968f74bd1d14ff734ad08e60cf7e7a7dd07d2b6ca9cb21ddaae68d2969afcf6c734f6ee1c63b1c93abf32264f9ec022b64c903276298739ee8ae7ac1fe14534ad54004f39ea1b99964702554c1494e1742baeae527cf3007d50fc92e924f73b6288e5d9fd071d2fba76b2fabd3faf5229f4c3168226346e3087026d3d2c8aed398d4988971e05ff0ab9f5f2328e7f51d5061584b44581a4c83e413718d3a82f87daf87d1d5a2c32fbaa58f095fbf34ccc603b632155c27289cb5598049a7c9160dfe8a01d5a1983408082941eb39db2a09c5a34dc876dfa58a589687aa0cf6be7b5b084a8f753758332896ec3adad7a79b751908ee2b3d25131f44185a0ed8d20e9b6b8a1ed11402b02e544b67caf3177eda039e64aaf295eca7953c165fa73afca96d7750663711101c6e14e44817c6ad4b1474132dd441ca5c9d7776c871ffacbd96910496cad70")
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
10.091283577s ago: executing program 3 (id=67):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pivot_root$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x9, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9})
9.020118075s ago: executing program 0 (id=72):
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x801, 0x100)
socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy7\x00', 0x2, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x7fffe000)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
7.809314716s ago: executing program 0 (id=74):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x7, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0x0, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000001, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x4d)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
r5 = gettid()
process_vm_writev$auto(r5, 0x0, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff)
io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r4, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)="3100001000000000002c", 0xa)
mmap$auto(0x2, 0x7, 0x4000000000e0, 0x4000eb1, r1, 0x400)
6.960500638s ago: executing program 1 (id=76):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = socket(0x2, 0x801, 0x106)
getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/nr5/queues/rx-0/rps_flow_cnt\x00', 0x182b02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
6.680180115s ago: executing program 3 (id=77):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
mmap$auto(0x101, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x180803, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x1e9482, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x50)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x5}, 0xa)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/video30/dev_debug\x00', 0x129102, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
mmap$auto(0x5, 0x40009, 0xe2, 0xffffffffffff8010, 0xffffffffffffffff, 0xb)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x200000, 0x0)
open(0x0, 0x161342, 0x0)
6.424396149s ago: executing program 2 (id=78):
prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)='\x00', 0x9)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x802}, 0x6f4)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
socket(0xa, 0x5, 0x84) (async)
r1 = socket(0xa, 0x5, 0x84)
move_pages$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) (async)
move_pages$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0xfffffe36)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/9, 0x9)
6.231153096s ago: executing program 1 (id=79):
close_range$auto(0x2, 0x8, 0x0)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
rseq$auto(0x0, 0x6, 0x3, 0xff)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3b, 0xfffffffffffffffd, 0x0, 0x68f, 0xfffffffffffff286)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x3, 0x4000c, 0x7, 0x9b72, r0, 0x7)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
r2 = socket(0x15, 0xa, 0x5)
ioperm$auto(0x3, 0x8001, 0x2000000000000149)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20040084)
kexec_load$auto(0x4ebc5f79, 0x3, &(0x7f0000000140)={@buf=&(0x7f0000000440)="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", 0x5, 0x8000, 0x3004}, 0x4)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(r2, &(0x7f00000002c0)={{&(0x7f0000000180)="2ddae4f57a2b9219c7f86630d5e9919af71c6eae2f756141915659e10e08dfaab8b3f57f2c2ba0afd75f3dcfdcd08db6a707acadd5e3ac953b6ec9728532a0e473a3482f32da2e7058026a5af86b7ae3a0775aff5c87ef71c770fe371c1e516a25b7398e7910442a35deb00b91d06fce19a365ead7eb1e38ba4a0a2176769ac934ddd7c20eebf5360276fa5c8e381793d0f9158b47b95a5924ead774fa694aa4a630dcca6328b5c413a9b56d21fe10469f694eac90231e6a6e25133b60f69e1f5f4b5ce0fe6d50bc7a2c881cde3e82a2ae", 0x6, &(0x7f0000000100)={&(0x7f00000000c0)="532574e0f3f9ee785656b3b090", 0xd}, 0x5, &(0x7f0000000280)="67f9ac592c43d3afb7e6444340cb3b964785403763509baf94585c9de6527d5448e0e305f6fb0f", 0x32b9, 0x5}, 0x8}, 0x80000001, 0x5)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x401e, 0x5, 0x0, 0x0)
mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, &(0x7f0000000300)=0xcf)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
5.743320122s ago: executing program 0 (id=80):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0xffffffffffffffff, 0x809, 0xfffffffffffffffe, 0x40eb2, r0, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x5, 0x84) (async)
r1 = socket(0xa, 0x5, 0x84)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
getsockopt$auto(r1, 0x84, 0x1d, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4001, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)=""/65, 0x41)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) (async)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
read$auto(r5, 0x0, 0xb5) (async)
read$auto(r5, 0x0, 0xb5)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x18, 0x0, 0x1b, 0x70bd25, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
5.284076703s ago: executing program 3 (id=81):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
write$auto(r0, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
5.283781205s ago: executing program 2 (id=82):
r0 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000000)=0xff)
mmap$auto(0x6, 0xe983, 0xfffffffffffffff9, 0xeb1, r0, 0x607f8b95)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
setgroups$auto(0xe32, 0x0)
prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
5.140334202s ago: executing program 1 (id=83):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0)
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
socket(0x3, 0x2, 0x9)
prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080))
lseek$auto(0x3, 0x0, 0x1)
munmap$auto(0x8000, 0xffffffff)
pread64$auto(r1, 0x0, 0x7, 0x2000008001)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0)
4.902049266s ago: executing program 3 (id=84):
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x8220009, 0xffffffffffffffff, 0x12, r0, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x183440, 0x0)
r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r1, 0x5509, 0x0)
unshare$auto(0x40000080)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x44044)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket(0x28, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x202000d, 0x3, 0xeb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_rr_get_interval$auto(r2, 0x0)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
3.616752141s ago: executing program 1 (id=85):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x1)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84d4310}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r1, 0x57, r0)
ioctl$auto_MEMLOCK(r1, 0x40084d05, &(0x7f00000000c0)={0x6, 0x80000000})
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(0x0, 0x9, 0x1)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x382c02, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
3.319720248s ago: executing program 2 (id=86):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0x80000db, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15) (async)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x14200, 0x4)
fchdir$auto(r3)
mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) (async)
prctl$auto_PR_SET_VMA_ANON_NAME(0x3, 0x0, 0x0, 0x101, 0x3) (async)
bpf$auto(0x80000000, &(0x7f00000001c0)=@raw_tracepoint={0xd, r1, 0x0, 0xfffffffffffffff8}, 0x6f3) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0)
r4 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) (async)
mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
2.982104437s ago: executing program 0 (id=87):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
listmount$auto(0x0, 0x0, 0xf4240, 0x1)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa7)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x20000800)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd70"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x23af690fef30229, 0x9)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000380)="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")
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
2.891753492s ago: executing program 3 (id=88):
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/midi2\x00', 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)=ANY=[@ANYBLOB='r\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7008fcdbdf250600000014000180090002006e6673640000000004000100"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0xd91, 0x0, 0x3, 0x8000000000000011, r0, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket(0x1f, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x800, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1ac}}, 0x24048871)
recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r3, 0x0)
2.327954939s ago: executing program 1 (id=89):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x7, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0x0, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000001, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x4d)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
r5 = gettid()
process_vm_writev$auto(r5, 0x0, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff)
io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r4, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)="3100001000000000002c", 0xa)
mmap$auto(0x2, 0x7, 0x4000000000e0, 0x4000eb1, r1, 0x400)
1.616047302s ago: executing program 2 (id=90):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]})
mmap$auto(0x0, 0x1, 0x37eb, 0x48eb2, 0x4, 0x300000000000)
socket(0x2, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
ioctl$auto(r2, 0x5393, r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x5, 0xe)
1.21691476s ago: executing program 2 (id=91):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = pipe$auto(0x0) (async)
write$auto(0x3, 0x0, 0x200ffd8)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async)
socket(0xf, 0x3, 0x2) (async)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0xdec, 0x5, 0xa5, 0x7}, 0x5, 0x5b, 0xfffffffffffffffc, 0x682, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x63f, 0x0, &(0x7f00000001c0)="029fb61e8bf880faf81027e520b3adf48399973e055347f4030b39b57fb334db07a4e318ff4cee953d8a6fbb06562f05e3d21a98d583886f5bd191686fe750fb841c2ad3bc5d0563e8ba264b5f72133bb785edf7a827d0fc1e17f7ffc9944120f0e23b84d430d8ef4bf218eda0bddbcf8142813a76e32bf9feb08d3b2da03604757efab39be26480528bc0e7500e32542ac7fdab5315efdd4fe5502f0347faa7809a952f0a1b8a17abea4a4b4a31489541616765ec5f2ae5bd2bb358b167baea3bdb966ae73fc3067fbe225b2c7a", &(0x7f0000000380)="799e926014af5f06f0a25425ba9f4c71d658b1e59c9476e8a2ba22ab9f44f4e83e217feefafe5d44d72cb9e978e6310e621698cd35eec4872652a53f9c7198bc7ab411cc52ae463eed01592f60ab9c874185fddb4cc1c419e7a97b2681be55f679d15e698465ea676f62e5722f5827774650694e5247d5e7e7fc56f2b392a01f3ca44699e78c6b457d30712cd67ae6a5458776ccdc81d262fbf074af47305887f250c061e5f071c5c186eb0cfa13088b88f2601c2c0de534f9ca70c9cd3b92f69284f11a92e7711b35080ee6cd7639eb1fe7f3f621038e"})
ioctl$auto(0xffffffffffffffff, 0xc0045401, 0xffffffffffffffff)
638.151365ms ago: executing program 0 (id=92):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
write$auto(r0, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
127.531536ms ago: executing program 2 (id=93):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0)
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
socket(0x3, 0x2, 0x9)
prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080))
lseek$auto(0x3, 0x0, 0x1)
munmap$auto(0x8000, 0xffffffff)
pread64$auto(r1, 0x0, 0x7, 0x2000008001)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0)
126.955992ms ago: executing program 1 (id=94):
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid()
rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0)
sendfile$auto(r1, r1, 0x0, 0x200)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]})
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4)
sendmsg$auto_SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r7, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00')
0s ago: executing program 0 (id=95):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pivot_root$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x9, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9})
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts.
[ 87.039977][ T5836] cgroup: Unknown subsys name 'net'
[ 87.152107][ T5836] cgroup: Unknown subsys name 'cpuset'
[ 87.161010][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 88.832339][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.965588][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.975003][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.984820][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 91.004495][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.006138][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 91.015996][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.020020][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 91.033377][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 91.041152][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 91.045287][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.048669][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 91.063508][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 91.064544][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 91.071604][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 91.081019][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 91.093413][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 91.101901][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 91.115416][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 91.123449][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 91.131276][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 91.637856][ T5847] chnl_net:caif_netlink_parms(): no params data found
[ 91.803406][ T5848] chnl_net:caif_netlink_parms(): no params data found
[ 91.880053][ T5846] chnl_net:caif_netlink_parms(): no params data found
[ 91.928012][ T5845] chnl_net:caif_netlink_parms(): no params data found
[ 91.990591][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.998586][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.006666][ T5847] bridge_slave_0: entered allmulticast mode
[ 92.017815][ T5847] bridge_slave_0: entered promiscuous mode
[ 92.028156][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.038200][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.045887][ T5847] bridge_slave_1: entered allmulticast mode
[ 92.053536][ T5847] bridge_slave_1: entered promiscuous mode
[ 92.192137][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.200254][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.208153][ T5848] bridge_slave_0: entered allmulticast mode
[ 92.215523][ T5848] bridge_slave_0: entered promiscuous mode
[ 92.226113][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.238683][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.292232][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.299693][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.306926][ T5848] bridge_slave_1: entered allmulticast mode
[ 92.314242][ T5848] bridge_slave_1: entered promiscuous mode
[ 92.345933][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.353050][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.360619][ T5845] bridge_slave_0: entered allmulticast mode
[ 92.368596][ T5845] bridge_slave_0: entered promiscuous mode
[ 92.413984][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.421407][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.428672][ T5845] bridge_slave_1: entered allmulticast mode
[ 92.436525][ T5845] bridge_slave_1: entered promiscuous mode
[ 92.458677][ T5847] team0: Port device team_slave_0 added
[ 92.468086][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.475412][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.482582][ T5846] bridge_slave_0: entered allmulticast mode
[ 92.490539][ T5846] bridge_slave_0: entered promiscuous mode
[ 92.513059][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.524644][ T5847] team0: Port device team_slave_1 added
[ 92.530763][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.538278][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.545510][ T5846] bridge_slave_1: entered allmulticast mode
[ 92.552853][ T5846] bridge_slave_1: entered promiscuous mode
[ 92.576218][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.615717][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.665446][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.677082][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.700499][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.707610][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.733729][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.749308][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.774127][ T5848] team0: Port device team_slave_0 added
[ 92.780759][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.788073][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.814611][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.859227][ T5848] team0: Port device team_slave_1 added
[ 92.898928][ T5846] team0: Port device team_slave_0 added
[ 92.907584][ T5845] team0: Port device team_slave_0 added
[ 92.928948][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.936055][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.962484][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.975710][ T5846] team0: Port device team_slave_1 added
[ 92.982205][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.989225][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.015517][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.028946][ T5845] team0: Port device team_slave_1 added
[ 93.091887][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.099298][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.126982][ T5860] Bluetooth: hci2: command tx timeout
[ 93.128525][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.158118][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.165136][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.191412][ T5860] Bluetooth: hci0: command tx timeout
[ 93.197332][ T5860] Bluetooth: hci3: command tx timeout
[ 93.199594][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.202977][ T5860] Bluetooth: hci1: command tx timeout
[ 93.239986][ T5847] hsr_slave_0: entered promiscuous mode
[ 93.246972][ T5847] hsr_slave_1: entered promiscuous mode
[ 93.259788][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.267042][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.293116][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.305688][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.312697][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.338730][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.457453][ T5848] hsr_slave_0: entered promiscuous mode
[ 93.463912][ T5848] hsr_slave_1: entered promiscuous mode
[ 93.470579][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 93.478470][ T5848] Cannot create hsr debugfs directory
[ 93.509151][ T5845] hsr_slave_0: entered promiscuous mode
[ 93.516023][ T5845] hsr_slave_1: entered promiscuous mode
[ 93.522165][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 93.530704][ T5845] Cannot create hsr debugfs directory
[ 93.562190][ T5846] hsr_slave_0: entered promiscuous mode
[ 93.569001][ T5846] hsr_slave_1: entered promiscuous mode
[ 93.575339][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 93.582930][ T5846] Cannot create hsr debugfs directory
[ 94.000622][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 94.013454][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 94.053074][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 94.074760][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 94.126004][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 94.140988][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 94.168358][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 94.194781][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 94.254115][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.265579][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.280053][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.290802][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.403015][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 94.414218][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 94.428375][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 94.440732][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 94.569425][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.624112][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.648587][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.662101][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.669345][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.691568][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.698850][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.739120][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.774097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.781274][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.804144][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.816538][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.839531][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.846706][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.908230][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.933455][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.953040][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.960250][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.022229][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.029414][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.041986][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.049218][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.106051][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.113304][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.187074][ T5860] Bluetooth: hci2: command tx timeout
[ 95.264735][ T5860] Bluetooth: hci1: command tx timeout
[ 95.266023][ T5851] Bluetooth: hci3: command tx timeout
[ 95.270201][ T5860] Bluetooth: hci0: command tx timeout
[ 95.362421][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.446749][ T5847] veth0_vlan: entered promiscuous mode
[ 95.467161][ T5847] veth1_vlan: entered promiscuous mode
[ 95.570011][ T5847] veth0_macvtap: entered promiscuous mode
[ 95.621412][ T5847] veth1_macvtap: entered promiscuous mode
[ 95.689014][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.712912][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.752256][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.762872][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.773427][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.782636][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.840156][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.864001][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.961841][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.024059][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.028088][ T5845] veth0_vlan: entered promiscuous mode
[ 96.037624][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.073030][ T5848] veth0_vlan: entered promiscuous mode
[ 96.095640][ T5848] veth1_vlan: entered promiscuous mode
[ 96.107126][ T5845] veth1_vlan: entered promiscuous mode
[ 96.121203][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.132977][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.195104][ T5848] veth0_macvtap: entered promiscuous mode
[ 96.227863][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.229976][ T5848] veth1_macvtap: entered promiscuous mode
[ 96.269823][ T5845] veth0_macvtap: entered promiscuous mode
[ 96.284151][ T5846] veth0_vlan: entered promiscuous mode
[ 96.329232][ T5845] veth1_macvtap: entered promiscuous mode
[ 96.349954][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.368239][ T5846] veth1_vlan: entered promiscuous mode
[ 96.380647][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.409160][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.420816][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.430703][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.441134][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.450752][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.459131][ T5940] process 'syz.2.3' launched '/dev/fd/9' with NULL argv: empty string added
[ 96.478946][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.512042][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.521251][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.530155][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.539814][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.580271][ T5846] veth0_macvtap: entered promiscuous mode
[ 96.611265][ T5846] veth1_macvtap: entered promiscuous mode
[ 96.679500][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.721080][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.761707][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.770685][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.780040][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.793838][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.871939][ T24] cfg80211: failed to load regulatory.db
[ 96.887039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.909672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.946997][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.964841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.047183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.066026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.101287][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.117117][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.203078][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.232480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.265549][ T5860] Bluetooth: hci2: command tx timeout
[ 97.344787][ T5860] Bluetooth: hci3: command tx timeout
[ 97.344957][ T5851] Bluetooth: hci1: command tx timeout
[ 97.354925][ T5860] Bluetooth: hci0: command tx timeout
[ 97.643167][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.685200][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.850136][ T5962] FAULT_INJECTION: forcing a failure.
[ 97.850136][ T5962] name failslab, interval 1, probability 0, space 0, times 1
[ 97.884497][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.0.7 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full)
[ 97.884543][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 97.884563][ T5962] Call Trace:
[ 97.884573][ T5962]
[ 97.884590][ T5962] dump_stack_lvl+0x16c/0x1f0
[ 97.884648][ T5962] should_fail_ex+0x512/0x640
[ 97.884705][ T5962] ? __kmalloc_cache_noprof+0x57/0x3e0
[ 97.884776][ T5962] should_failslab+0xc2/0x120
[ 97.884808][ T5962] __kmalloc_cache_noprof+0x6a/0x3e0
[ 97.884852][ T5962] ? snd_pcm_hw_param_first+0x30d/0x6f0
[ 97.884883][ T5962] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0
[ 97.884917][ T5962] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[ 97.884960][ T5962] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[ 97.885004][ T5962] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[ 97.885041][ T5962] ? __asan_memset+0x23/0x50
[ 97.885082][ T5962] ? calc_src_frames.isra.0+0x187/0x1d0
[ 97.885128][ T5962] snd_pcm_oss_change_params_locked+0x13f9/0x3a30
[ 97.885185][ T5962] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 97.885255][ T5962] snd_pcm_oss_get_active_substream+0x168/0x1d0
[ 97.885318][ T5962] snd_pcm_oss_ioctl+0x21e9/0x37a0
[ 97.885359][ T5962] ? hook_file_ioctl_common+0x145/0x410
[ 97.885398][ T5962] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 97.885441][ T5962] ? __fget_files+0x20e/0x3c0
[ 97.885495][ T5962] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 97.885534][ T5962] __x64_sys_ioctl+0x18e/0x210
[ 97.885577][ T5962] do_syscall_64+0xcd/0x490
[ 97.885633][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.885667][ T5962] RIP: 0033:0x7f0528b8e929
[ 97.885695][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 97.885734][ T5962] RSP: 002b:00007f05269d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 97.885766][ T5962] RAX: ffffffffffffffda RBX: 00007f0528db6080 RCX: 00007f0528b8e929
[ 97.885788][ T5962] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a
[ 97.885809][ T5962] RBP: 00007f0528c10b39 R08: 0000000000000000 R09: 0000000000000000
[ 97.885829][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.885849][ T5962] R13: 0000000000000000 R14: 00007f0528db6080 R15: 00007ffe5a4ddaa8
[ 97.885892][ T5962]
[ 98.604219][ T9] smpboot: CPU 1 is now offline
[ 99.346642][ T5860] Bluetooth: hci2: command tx timeout
[ 99.383696][ T5986] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[ 99.430514][ T5860] Bluetooth: hci3: command tx timeout
[ 99.436054][ T5851] Bluetooth: hci0: command tx timeout
[ 99.441450][ T5851] Bluetooth: hci1: command tx timeout
[ 100.040353][ T6001] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET)
[ 101.119017][ T6025] random: crng reseeded on system resumption
[ 106.017760][ T6105] capability: warning: `syz.1.27' uses 32-bit capabilities (legacy support in use)
[ 107.041711][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'.
[ 107.095721][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[ 109.540455][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'.
[ 109.601193][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[ 110.107115][ T6174] random: crng reseeded on system resumption
[ 110.643477][ T6178] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input5
[ 112.351123][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'.
[ 112.417426][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[ 113.163406][ T6220] mmap: syz.1.53 (6220) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 113.708796][ T6215] vhci_hcd: invalid port number 23
[ 113.792546][ T6215] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[ 114.159075][ T6244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 114.367933][ T6246] Zero length message leads to an empty skb
[ 116.180004][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.61'.
[ 116.266279][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'.
[ 117.266008][ T6302] syz.2.69(6302): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 118.374035][ T6315] bridge0: port 3(vlan1) entered blocking state
[ 118.441181][ T6315] bridge0: port 3(vlan1) entered disabled state
[ 118.502196][ T6315] vlan1: entered allmulticast mode
[ 118.559403][ T6315] veth0_vlan: entered allmulticast mode
[ 118.623423][ T6315] vlan1: entered promiscuous mode
[ 118.682155][ T6315] bridge0: port 3(vlan1) entered blocking state
[ 118.688692][ T6315] bridge0: port 3(vlan1) entered forwarding state
[ 119.341722][ T6329] __vm_enough_memory: pid: 6329, comm: syz.2.75, bytes: 4398046511104 not enough memory for the allocation
[ 123.701563][ T6390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[ 124.409746][ T6391] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[ 125.274642][ T6395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'.
[ 125.378781][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[ 127.342678][ T6432]
[ 127.345077][ T6432] ======================================================
[ 127.352095][ T6432] WARNING: possible circular locking dependency detected
[ 127.359123][ T6432] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted
[ 127.366234][ T6432] ------------------------------------------------------
[ 127.373250][ T6432] syz.1.94/6432 is trying to acquire lock:
[ 127.379056][ T6432] ffff8881427467b0 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310
[ 127.388933][ T6432]
[ 127.388933][ T6432] but task is already holding lock:
[ 127.396298][ T6432] ffff888142746278 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 127.407646][ T6432]
[ 127.407646][ T6432] which lock already depends on the new lock.
[ 127.407646][ T6432]
[ 127.418047][ T6432]
[ 127.418047][ T6432] the existing dependency chain (in reverse order) is:
[ 127.427063][ T6432]
[ 127.427063][ T6432] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}:
[ 127.435692][ T6432] blk_alloc_queue+0x619/0x760
[ 127.441005][ T6432] blk_mq_alloc_queue+0x175/0x290
[ 127.446563][ T6432] __blk_mq_alloc_disk+0x29/0x120
[ 127.452128][ T6432] nbd_dev_add+0x4a0/0xbc0
[ 127.457082][ T6432] nbd_init+0x181/0x320
[ 127.461764][ T6432] do_one_initcall+0x120/0x6e0
[ 127.467048][ T6432] kernel_init_freeable+0x5c2/0x900
[ 127.472780][ T6432] kernel_init+0x1c/0x2b0
[ 127.477637][ T6432] ret_from_fork+0x5d7/0x6f0
[ 127.482756][ T6432] ret_from_fork_asm+0x1a/0x30
[ 127.488047][ T6432]
[ 127.488047][ T6432] -> #2 (fs_reclaim){+.+.}-{0:0}:
[ 127.495266][ T6432] fs_reclaim_acquire+0x102/0x150
[ 127.500818][ T6432] prepare_alloc_pages+0x162/0x610
[ 127.506466][ T6432] __alloc_frozen_pages_noprof+0x18b/0x23f0
[ 127.512903][ T6432] __alloc_pages_noprof+0xb/0x1b0
[ 127.518473][ T6432] pcpu_populate_chunk+0x110/0xb00
[ 127.524122][ T6432] pcpu_alloc_noprof+0x86a/0x1470
[ 127.529679][ T6432] xt_percpu_counter_alloc+0x13e/0x1b0
[ 127.535662][ T6432] find_check_entry.constprop.0+0xbf/0xa20
[ 127.541996][ T6432] translate_table+0xd0b/0x17b0
[ 127.547371][ T6432] ip6t_register_table+0x102/0x430
[ 127.553014][ T6432] ip6table_security_table_init+0x40/0x60
[ 127.559281][ T6432] xt_find_table_lock+0x2e4/0x520
[ 127.564840][ T6432] xt_request_find_table_lock+0x28/0xf0
[ 127.570917][ T6432] get_info+0x190/0x620
[ 127.575601][ T6432] do_ip6t_get_ctl+0x169/0xa50
[ 127.580912][ T6432] nf_getsockopt+0x79/0xe0
[ 127.585867][ T6432] ipv6_getsockopt+0x1f7/0x280
[ 127.591164][ T6432] tcp_getsockopt+0xa1/0x100
[ 127.596296][ T6432] do_sock_getsockopt+0x3ff/0x800
[ 127.601862][ T6432] __sys_getsockopt+0x123/0x1b0
[ 127.607288][ T6432] __x64_sys_getsockopt+0xbd/0x160
[ 127.612940][ T6432] do_syscall_64+0xcd/0x490
[ 127.617981][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.624403][ T6432]
[ 127.624403][ T6432] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}:
[ 127.632154][ T6432] __mutex_lock+0x199/0xb90
[ 127.637200][ T6432] pcpu_alloc_noprof+0xb4c/0x1470
[ 127.642765][ T6432] sbitmap_init_node+0x2fd/0x770
[ 127.648234][ T6432] sbitmap_queue_init_node+0x41/0x560
[ 127.654135][ T6432] blk_mq_init_tags+0x12d/0x2b0
[ 127.659523][ T6432] blk_mq_alloc_map_and_rqs+0x237/0xf60
[ 127.665612][ T6432] blk_mq_init_sched+0x30c/0x610
[ 127.671075][ T6432] elevator_switch+0x1e1/0x7f0
[ 127.676363][ T6432] elevator_change+0x2ac/0x400
[ 127.681653][ T6432] elevator_set_default+0x292/0x320
[ 127.687381][ T6432] blk_register_queue+0x393/0x4f0
[ 127.692929][ T6432] __add_disk+0x74a/0xf00
[ 127.697792][ T6432] add_disk_fwnode+0x13f/0x5d0
[ 127.703089][ T6432] nbd_dev_add+0x791/0xbc0
[ 127.708039][ T6432] nbd_init+0x181/0x320
[ 127.712723][ T6432] do_one_initcall+0x120/0x6e0
[ 127.718009][ T6432] kernel_init_freeable+0x5c2/0x900
[ 127.723756][ T6432] kernel_init+0x1c/0x2b0
[ 127.728616][ T6432] ret_from_fork+0x5d7/0x6f0
[ 127.733744][ T6432] ret_from_fork_asm+0x1a/0x30
[ 127.739034][ T6432]
[ 127.739034][ T6432] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 127.746875][ T6432] __lock_acquire+0x126f/0x1c90
[ 127.752276][ T6432] lock_acquire+0x179/0x350
[ 127.757305][ T6432] __mutex_lock+0x199/0xb90
[ 127.762340][ T6432] queue_requests_store+0x1c7/0x310
[ 127.768068][ T6432] queue_attr_store+0x276/0x320
[ 127.773466][ T6432] sysfs_kf_write+0xef/0x150
[ 127.778583][ T6432] kernfs_fop_write_iter+0x354/0x510
[ 127.784398][ T6432] iter_file_splice_write+0x91f/0x1150
[ 127.790407][ T6432] direct_splice_actor+0x192/0x6c0
[ 127.796054][ T6432] splice_direct_to_actor+0x342/0xa30
[ 127.801954][ T6432] do_splice_direct+0x174/0x240
[ 127.807330][ T6432] do_sendfile+0xb06/0xe50
[ 127.812275][ T6432] __x64_sys_sendfile64+0x1d8/0x220
[ 127.817994][ T6432] do_syscall_64+0xcd/0x490
[ 127.823028][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.829444][ T6432]
[ 127.829444][ T6432] other info that might help us debug this:
[ 127.829444][ T6432]
[ 127.839681][ T6432] Chain exists of:
[ 127.839681][ T6432] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59
[ 127.839681][ T6432]
[ 127.853432][ T6432] Possible unsafe locking scenario:
[ 127.853432][ T6432]
[ 127.860877][ T6432] CPU0 CPU1
[ 127.866247][ T6432] ---- ----
[ 127.871608][ T6432] lock(&q->q_usage_counter(io)#59);
[ 127.876986][ T6432] lock(fs_reclaim);
[ 127.883486][ T6432] lock(&q->q_usage_counter(io)#59);
[ 127.891385][ T6432] lock(&q->elevator_lock);
[ 127.895978][ T6432]
[ 127.895978][ T6432] *** DEADLOCK ***
[ 127.895978][ T6432]
[ 127.904114][ T6432] 5 locks held by syz.1.94/6432:
[ 127.909049][ T6432] #0: ffff888036f5c428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30
[ 127.919099][ T6432] #1: ffff888060ed4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[ 127.928873][ T6432] #2: ffff888142338008 (kn->active#81){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[ 127.938921][ T6432] #3: ffff888142746278 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 127.950616][ T6432] #4: ffff8881427462b0 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 127.962575][ T6432]
[ 127.962575][ T6432] stack backtrace:
[ 127.968464][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.1.94 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full)
[ 127.968493][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 127.968507][ T6432] Call Trace:
[ 127.968516][ T6432]
[ 127.968524][ T6432] dump_stack_lvl+0x116/0x1f0
[ 127.968560][ T6432] print_circular_bug+0x275/0x350
[ 127.968592][ T6432] check_noncircular+0x14c/0x170
[ 127.968626][ T6432] __lock_acquire+0x126f/0x1c90
[ 127.968661][ T6432] ? __lock_acquire+0xb8a/0x1c90
[ 127.968694][ T6432] lock_acquire+0x179/0x350
[ 127.968725][ T6432] ? queue_requests_store+0x1c7/0x310
[ 127.968763][ T6432] ? __pfx___might_resched+0x10/0x10
[ 127.968790][ T6432] ? do_raw_spin_lock+0x12c/0x2b0
[ 127.968828][ T6432] __mutex_lock+0x199/0xb90
[ 127.968862][ T6432] ? queue_requests_store+0x1c7/0x310
[ 127.968906][ T6432] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 127.968938][ T6432] ? queue_requests_store+0x1c7/0x310
[ 127.968974][ T6432] ? lockdep_hardirqs_on+0x7c/0x110
[ 127.969008][ T6432] ? __pfx___mutex_lock+0x10/0x10
[ 127.969046][ T6432] ? __pfx_autoremove_wake_function+0x10/0x10
[ 127.969080][ T6432] ? queue_requests_store+0x1c7/0x310
[ 127.969117][ T6432] queue_requests_store+0x1c7/0x310
[ 127.969155][ T6432] ? __pfx_queue_requests_store+0x10/0x10
[ 127.969195][ T6432] ? __mutex_trylock_common+0xe9/0x250
[ 127.969230][ T6432] ? __pfx_queue_requests_store+0x10/0x10
[ 127.969268][ T6432] queue_attr_store+0x276/0x320
[ 127.969304][ T6432] ? __pfx_queue_attr_store+0x10/0x10
[ 127.969339][ T6432] ? __lock_acquire+0x622/0x1c90
[ 127.969377][ T6432] ? find_held_lock+0x2b/0x80
[ 127.969400][ T6432] ? sysfs_file_kobj+0xe4/0x290
[ 127.969429][ T6432] ? __pfx_queue_attr_store+0x10/0x10
[ 127.969464][ T6432] sysfs_kf_write+0xef/0x150
[ 127.969505][ T6432] kernfs_fop_write_iter+0x354/0x510
[ 127.969528][ T6432] ? __pfx_sysfs_kf_write+0x10/0x10
[ 127.969567][ T6432] iter_file_splice_write+0x91f/0x1150
[ 127.969604][ T6432] ? __pfx_iter_file_splice_write+0x10/0x10
[ 127.969635][ T6432] ? __pfx_copy_splice_read+0x10/0x10
[ 127.969668][ T6432] ? __pfx_iter_file_splice_write+0x10/0x10
[ 127.969697][ T6432] direct_splice_actor+0x192/0x6c0
[ 127.969727][ T6432] splice_direct_to_actor+0x342/0xa30
[ 127.969754][ T6432] ? __pfx_direct_splice_actor+0x10/0x10
[ 127.969784][ T6432] ? __pfx_splice_direct_to_actor+0x10/0x10
[ 127.969815][ T6432] do_splice_direct+0x174/0x240
[ 127.969842][ T6432] ? __pfx_do_splice_direct+0x10/0x10
[ 127.969869][ T6432] ? __pfx_direct_file_splice_eof+0x10/0x10
[ 127.969902][ T6432] ? rw_verify_area+0xcf/0x680
[ 127.969929][ T6432] do_sendfile+0xb06/0xe50
[ 127.969959][ T6432] ? __pfx_do_sendfile+0x10/0x10
[ 127.969987][ T6432] ? __pfx___might_resched+0x10/0x10
[ 127.970011][ T6432] ? __x64_sys_futex+0x1e0/0x4c0
[ 127.970037][ T6432] ? __x64_sys_futex+0x1e9/0x4c0
[ 127.970064][ T6432] __x64_sys_sendfile64+0x1d8/0x220
[ 127.970084][ T6432] ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 127.970108][ T6432] do_syscall_64+0xcd/0x490
[ 127.970141][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.970162][ T6432] RIP: 0033:0x7f9ad498e929
[ 127.970179][ T6432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 127.970207][ T6432] RSP: 002b:00007f9ad58a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 127.970226][ T6432] RAX: ffffffffffffffda RBX: 00007f9ad4bb6080 RCX: 00007f9ad498e929
[ 127.970240][ T6432] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[ 127.970252][ T6432] RBP: 00007f9ad4a10b39 R08: 0000000000000000 R09: 0000000000000000
[ 127.970265][ T6432] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000
[ 127.970277][ T6432] R13: 0000000000000000 R14: 00007f9ad4bb6080 R15: 00007ffd96ab5618
[ 127.970297][ T6432]