last executing test programs: 21.484107072s ago: executing program 2 (id=56): socket$nl_generic(0x10, 0x3, 0x10) getegid() write$auto(0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000c, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x1, 0x948b, 0x2000000000005, 0x15f4da0a, 0x6, 0x5, 0x7, 0x8000001f, 0x800000000000007, 0x3, 0xfffffffffffffffc, 0x2, 0x3]}, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x34204, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8, 0x0) 16.452333s ago: executing program 2 (id=66): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r4, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x20008811) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readahead$auto(0xffffffffffffffff, 0xcc7f, 0x6) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x48000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 11.753276661s ago: executing program 3 (id=74): socket$nl_generic(0x10, 0x3, 0x10) getegid() write$auto(0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000c, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x34204, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8, 0x0) 10.604591162s ago: executing program 0 (id=76): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) fanotify_init$auto(0x5, 0x2000000000002) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000140), 0x9}, 0x1) (async) mmap$auto(0x0, 0x2, 0x2, 0x40eb3, r0, 0x300000000000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen_full\x00', 0x204001, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/7:3/max_ratio_fine\x00', 0x14b582, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) (rerun: 32) sendfile$auto(r3, r2, 0x0, 0x7) (async) writev$auto(r1, &(0x7f0000000100)={0x0, 0x407114}, 0x8) 10.25675586s ago: executing program 0 (id=77): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0xa402, 0x0) pread64$auto(r0, 0x0, 0x8, 0x26c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ppoll$auto(&(0x7f0000000240)={r2, 0x5, 0x2}, 0x68, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) read$auto(0x3, 0x0, 0x7fffffff) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() r5 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x4060c2, 0x0) writev$auto(r5, &(0x7f00000002c0)={&(0x7f0000000280)="53916c09f9e63925833848d6aee47e33af806e88abac4c7200b91c3d1c9d37dff343a7f25ac75467d209a1d6d122", 0x5}, 0xffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r6 = geteuid() msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000440)={{0x7, r6, 0xee01, 0x10001, 0x10000, 0x7, 0x2}, &(0x7f0000000340)=0xd1, &(0x7f0000000380)=0x80, 0x3ff, 0xfffffffffffffffc, 0x10000000000002b, 0x200, 0x3, 0x47, 0x8, 0x7, @raw=0x6, @inferred=r1}) statx$auto(r4, &(0x7f0000000180)='./file0\x00', 0x4c35, 0x1, &(0x7f0000002500)={0xc, 0x9, 0xfffffffffffffff8, 0x2, 0xffffffffffffffff, 0xee01, 0x800, 0x23c, 0x7, 0x5, 0x1000000000003, 0x8000000d65, {0x7, 0x7}, {0x3, 0xcc0}, {0x7, 0x8}, {0xa89f, 0xfffffffc}, 0x3, 0x43f, 0x6, 0x9, 0xc, 0x8, 0x1, 0x9882, 0x1ff, 0x7, 0x20001, 0x0, [0xc231, 0xed75, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4, 0xb, 0x7fffffffffffffff, 0x20008, 0x8001]}) write$auto(0x3, 0x0, 0xffd8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd13/sched/batching\x00', 0x0, 0x0) futex$auto(&(0x7f0000000080)=0xfffffff7, 0x7ff, 0x8, &(0x7f00000000c0)={0x4, 0xe}, 0x0, 0xffffffff) 9.27755488s ago: executing program 3 (id=79): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4014080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x9, 0xffffffffffffffff, 0xffffffff}, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x36a3, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x0, {0x100000000, 0x10000}, 0x7, 0x1, 0xfffffffffffffffa, 0x4, 0x0, 0x8, 0x1001, 0xdfffffffffff628e, 0x9, 0x6, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x129001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci5/rfkill30/type\x00', 0x40100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x20008000) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r4 = socket(0x10, 0x80002, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES16=0x0, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0x7fff) openat2$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)={0x2, 0x10000, 0xffffffff}, 0x6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 8.761438742s ago: executing program 2 (id=80): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) socket(0x1f, 0x5, 0x10000fd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x6ab82, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x40300, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x104) read$auto(r0, 0x0, 0x35cb) write$auto(0x3, 0x0, 0xfdef) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000081) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) unshare$auto(0x40000080) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) 8.253337524s ago: executing program 0 (id=81): socket$nl_generic(0x10, 0x3, 0x10) getegid() write$auto(0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000c, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x1, 0x948b, 0x2000000000005, 0x15f4da0a, 0x6, 0x5, 0x7, 0x8000001f, 0x800000000000007, 0x3, 0xfffffffffffffffc, 0x2, 0x3]}, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x34204, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8, 0x0) 8.208906174s ago: executing program 3 (id=82): socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/rdma_cm/uevent\x00', 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x12, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x80045440, 0x10000000000402) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.51380088s ago: executing program 2 (id=83): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x89f1, r3) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x200000, 0x0) pread64$auto(r4, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) 6.94885126s ago: executing program 3 (id=84): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty8\x00', 0x2b7600, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x1ffffffff, 0xfffdfffffffffffa, 0x1, 0x0, 0x6, 0x0, 0x7, 0x1224578b, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x7f, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) setuid$auto(0x0) statx$auto(r0, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x8, 0xf, &(0x7f00000001c0)={0x5, 0x4, 0xc00000, 0x5323120c, 0xee01, 0x0, 0x9, 0x8, 0x4, 0x1, 0x4, 0x5, {0xd, 0x7}, {0x109b, 0x2}, {0x2306, 0xf8f5}, {0x10, 0x1}, 0x3, 0x8, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x1, 0xfffffff8, 0x9, 0x200, 0x2000, [0x6, 0x80000000, 0x832, 0x1, 0x3, 0x2, 0x101, 0xc12, 0xbe]}) msgctl$auto(0x0, 0x8, &(0x7f00000002c0)={{0x9, 0x0, 0xee01, 0x24000, 0x8, 0xe, 0x2}, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x1, 0x8, 0x4, 0x7, 0x0, 0x40, 0xb, 0x9, 0x0, @raw=0xffffff7d, @raw=0x70d}) keyctl$auto(0x8001, 0x0, r3, r4, 0x7) write$auto(r2, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r5 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r5) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1016c1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 6.280986594s ago: executing program 1 (id=85): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/crash_notes\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/247, 0xf7) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd6000fedb53250300000008000500b70a000006002700008000758b0d000800020015084fddb9563859b248414cab848902c93dbc6c", @ANYRES8=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="0600060005000000080004003d4b0000"], 0x68}, 0x1, 0x0, 0x0, 0x48080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x6900, 0x0) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.640716691s ago: executing program 0 (id=86): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kexec_load$auto(0x5, 0x4, 0x0, 0x4) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129c00, 0x0) ioctl$auto(r0, 0xb21064a5, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-', 0x1) 5.345457711s ago: executing program 1 (id=87): socket(0x15, 0x800, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) (async) readv$auto(0x3, 0x0, 0x87) socket(0x2, 0x2, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/crash_notes\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/247, 0xf7) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) writev$auto(0xffffffffffffffff, 0x0, 0x100) (async) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r3) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r6, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0xb, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3d, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) (async) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) (async) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) 3.915184246s ago: executing program 2 (id=88): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r3, 0x10000}, 0x10) bpf$auto(0x2, &(0x7f0000000480)=@bpf_attr_11={0x10001, 0x2545, 0xc, 0x8, 0x0, 0x1, 0xca}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xc81) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x10, 0xffffffffffffffff, 0x7) 3.80459959s ago: executing program 3 (id=89): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/neigh/veth1_virt_wifi/unres_qlen\x00', 0x12042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r0 = syz_clone(0x4c000000, &(0x7f0000000440)="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", 0x1000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)="11340e1a9edb82bcaee9a1493762ac60cc088c04cacaf8fb2cb88bdb834b429d84eb76ae1cce3a3a4ec8de00954af29fe053cf3ba2ea4a091307c129dfad0893419015adfade7f218a7cdc1b2b347335a2c908d1b58cf8f89f2dd8732fa2f45084a8911d11c8ee84c5905d1af7cb37a6871c8ec92adf8824955b0173cdf182c23013a7c87de307a054b6d43a7163bf84433678b38c61b7ee36f1149c1f8d95c32408ce380ca404b4fb7b1c82d5c16820eb01cb00c5722eced23751015ca34abf5c5e28c85ce8228ec03bfd45d8512af4") prctl$auto(0x663, 0xfcf, r0, 0xffff, 0xed2) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x7) r1 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r1, 0x0, 0x7, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffffffff, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x8, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.748766242s ago: executing program 1 (id=90): writev$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1}, 0x100) mmap$auto(0x0, 0xfffffffffffffff9, 0x40004000000000df, 0xeb1, 0x401, 0x8000007ffd) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000400)="ac84e8fdd26ffc03816bd48632defc5485e761cdeecbcbb70af38a4a26e10fda5bd80607ec07a320b5caaef1a1094409434108ddd1a0433eea108647a795967c285d457997689090fc126f7cbde487bfab785e9a9f27cfa2e67bc0591e5aebf00c9a012606c8d64cdd10ff984ac836dfcf92e0a964ec377de5f6ae452ed80738fa18afd76db06c038467065009a71341173ee721246bf1e1efad25a5e098e57cfd9b71bc8427ff4ae81efaca7d9ec04978f3683ecb", 0x5805}, 0x2) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x25, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x5018c3, 0x0) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)="325c2eb4f02850dd152681bf93024ba3bda8d8b129d60ab9ab02f9bec19a4f803f8ee4e1cd9a11595029fc945939fa54bf03074148d1b597bdf284a0e4dcf4bd405f5ec65796d81b34647b4c9a4ec13982ecb6fbf1f00cbd5c4ec18fd3f4c69dbbb91d194360ef42afda1cdd040209db6653c14d2b7f0522be8abefa168a488c31f1a510769122c71acda3e29457e621a4cdd78644ef62980205db8469f16f85a369bbb9252c907c4fcf750330afcd865c63f2336efbcc981b23dd3516b6ca8791220813077d9fcfe7645350dc4c4beb507a7125a702a24f016b976842d257315fe125a60e4d") prctl$auto(0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0) inotify_init1$auto(0x7) mmap$auto(0x0, 0xede8, 0xdf, 0x9b72, 0x5, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x4c2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) 2.554260601s ago: executing program 0 (id=91): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xcea0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) open(0x0, 0x22240, 0x155) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) (async) socket(0x2, 0x5, 0x0) (async) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x202802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0xc2dc0, 0x0) (async) socket(0x11, 0x2, 0x14) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 2.512893512s ago: executing program 1 (id=92): r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10043, 0x8, 0xffffffffffffffff, 0x0, 0xf, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x9d8d, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5f, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/location\x00', 0x80400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) io_uring_setup$auto(0xff, &(0x7f0000000040)={0x3, 0xffffff74, 0x915b, 0x0, 0x4, 0x8001, r0, [0xff, 0x5], {0xfffffff7, 0x8, 0x1fdb, 0x6, 0x7fffffff, 0x8000, 0x2, 0x6}, {0x8, 0x0, 0xf840, 0x6, 0x9, 0x5f06d6ce, 0xb95, 0x4, 0xbc51}}) execve$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=&(0x7f0000000140)='ethtool\x00', &(0x7f0000000400)=&(0x7f00000003c0)='\x00') open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) 1.976696249s ago: executing program 0 (id=93): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x6, 0x10000, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = syz_open_procfs$namespace(0x0, 0x0) getdents$auto(r1, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x141, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b482, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x0, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000280)="e9") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000040), 0x20402) 1.133917383s ago: executing program 1 (id=94): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = memfd_create$auto(0x0, 0x9) socket(0x10, 0x2, 0x6) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x6, 0xde, 0x1000000009b72, 0x7, 0x28000) capset$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) bpf$auto(0x0, 0x0, 0xf) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000100000", @ANYRES16], 0x240}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) 378.783522ms ago: executing program 2 (id=95): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r3, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040080) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_TCFLSH2(r4, 0x5453, 0x0) socket(0x15, 0x800, 0x81) prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x2, 0x2) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) 336.102ms ago: executing program 3 (id=96): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x206001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0x3, 0x80000, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x73) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24143e0c83a2ed647487ddcc2d33633828fa92e843d0fee92d1dad338a1ff2521202dd6e88aabba3364060da7735b279f0419f8feadf981d0ca698b962340b63ec8812acf2fa9e5b221e17227f239a8a689782a259bc694b73ae2639fd26cc5e8a6402cd376107c6df329e952535586e6b4b021c18dbdb653b", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r2, 0x80044d76, &(0x7f0000000080)) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x2000008001) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 0s ago: executing program 1 (id=97): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xe3102, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0xfffffffd, 0x1, 0x7, 0x2, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x2, 0xffffffffffffffff, 0xe4, 0x3, 0x8, 0x5, 0x4, 0x0, 0xfffffffc, @attach_prog_fd, 0x6, 0xffff, 0x3, 0x81, 0xfffffffe}, 0x4a) (async) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/pcmC1D0p\x00', 0x42, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001100)=0xf15) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x9b8f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xffffffff}, 0x8000, 0x0, 0x6) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vkms/graphics/fb0/pan\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 89.091047][ T5837] cgroup: Unknown subsys name 'net' [ 89.226150][ T5837] cgroup: Unknown subsys name 'cpuset' [ 89.235418][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.521045][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.794412][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.825450][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.833677][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.839073][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.842657][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.850171][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.863343][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.871794][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.880318][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.880713][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.903256][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.911352][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.919610][ T5168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.927970][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.928424][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.938546][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.943292][ T5168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.951014][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.957897][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.977450][ T5168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.441763][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 94.660189][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 94.782922][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.790306][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.799826][ T5853] bridge_slave_0: entered allmulticast mode [ 94.807549][ T5853] bridge_slave_0: entered promiscuous mode [ 94.815707][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 94.849170][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.856739][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.864070][ T5853] bridge_slave_1: entered allmulticast mode [ 94.871360][ T5853] bridge_slave_1: entered promiscuous mode [ 94.878870][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 94.979300][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.010014][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.017546][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.025373][ T5846] bridge_slave_0: entered allmulticast mode [ 95.034019][ T5846] bridge_slave_0: entered promiscuous mode [ 95.044479][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.091172][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.099081][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.106371][ T5846] bridge_slave_1: entered allmulticast mode [ 95.115121][ T5846] bridge_slave_1: entered promiscuous mode [ 95.170591][ T5853] team0: Port device team_slave_0 added [ 95.180372][ T5853] team0: Port device team_slave_1 added [ 95.208639][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.217274][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.225016][ T5852] bridge_slave_0: entered allmulticast mode [ 95.233193][ T5852] bridge_slave_0: entered promiscuous mode [ 95.254796][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.289908][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.297493][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.304870][ T5852] bridge_slave_1: entered allmulticast mode [ 95.312716][ T5852] bridge_slave_1: entered promiscuous mode [ 95.339855][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.360441][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.368522][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.375871][ T5851] bridge_slave_0: entered allmulticast mode [ 95.384036][ T5851] bridge_slave_0: entered promiscuous mode [ 95.419934][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.427039][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.453416][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.465840][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.473454][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.480676][ T5851] bridge_slave_1: entered allmulticast mode [ 95.488055][ T5851] bridge_slave_1: entered promiscuous mode [ 95.497441][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.510744][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.534230][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.541219][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.568066][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.650525][ T5846] team0: Port device team_slave_0 added [ 95.661762][ T5846] team0: Port device team_slave_1 added [ 95.671158][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.685348][ T5852] team0: Port device team_slave_0 added [ 95.718804][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.729896][ T5852] team0: Port device team_slave_1 added [ 95.801186][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.808961][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.836399][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.850465][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.857804][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.884297][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.901010][ T5853] hsr_slave_0: entered promiscuous mode [ 95.907529][ T5853] hsr_slave_1: entered promiscuous mode [ 95.927660][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.934869][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.962421][ T5858] Bluetooth: hci2: command tx timeout [ 95.968208][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.993841][ T5851] team0: Port device team_slave_0 added [ 96.001404][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.008762][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.035944][ T5858] Bluetooth: hci3: command tx timeout [ 96.036078][ T5858] Bluetooth: hci1: command tx timeout [ 96.041480][ T5168] Bluetooth: hci0: command tx timeout [ 96.050656][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.095514][ T5851] team0: Port device team_slave_1 added [ 96.166679][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.173884][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.200190][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.216693][ T5846] hsr_slave_0: entered promiscuous mode [ 96.223889][ T5846] hsr_slave_1: entered promiscuous mode [ 96.229969][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.238406][ T5846] Cannot create hsr debugfs directory [ 96.269905][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.277139][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.303606][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.360716][ T5852] hsr_slave_0: entered promiscuous mode [ 96.367194][ T5852] hsr_slave_1: entered promiscuous mode [ 96.373962][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.381545][ T5852] Cannot create hsr debugfs directory [ 96.488403][ T5851] hsr_slave_0: entered promiscuous mode [ 96.494937][ T5851] hsr_slave_1: entered promiscuous mode [ 96.501021][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.509622][ T5851] Cannot create hsr debugfs directory [ 96.906273][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.926157][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.936978][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.957817][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.024354][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.036362][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.048065][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.066468][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.157407][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.170596][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.185659][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.200477][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.220278][ T24] cfg80211: failed to load regulatory.db [ 97.324268][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.337698][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.348722][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.374172][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.477720][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.527254][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.550807][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.578291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.585637][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.608280][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.615597][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.675056][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.704083][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.741889][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.749435][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.784286][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.791511][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.811306][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.843261][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.862584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.869735][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.899505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.906719][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.012979][ T5168] Bluetooth: hci2: command tx timeout [ 98.040322][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.093260][ T5168] Bluetooth: hci1: command tx timeout [ 98.094573][ T5858] Bluetooth: hci0: command tx timeout [ 98.098898][ T5168] Bluetooth: hci3: command tx timeout [ 98.161652][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.168962][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.210954][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.218306][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.600711][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.646638][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.788392][ T5846] veth0_vlan: entered promiscuous mode [ 98.830170][ T5853] veth0_vlan: entered promiscuous mode [ 98.838655][ T5846] veth1_vlan: entered promiscuous mode [ 98.885381][ T5853] veth1_vlan: entered promiscuous mode [ 98.908513][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.968470][ T5846] veth0_macvtap: entered promiscuous mode [ 99.008470][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.023795][ T5846] veth1_macvtap: entered promiscuous mode [ 99.069225][ T5853] veth0_macvtap: entered promiscuous mode [ 99.097501][ T5852] veth0_vlan: entered promiscuous mode [ 99.106478][ T5853] veth1_macvtap: entered promiscuous mode [ 99.120615][ T5852] veth1_vlan: entered promiscuous mode [ 99.150064][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.185725][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.216778][ T5851] veth0_vlan: entered promiscuous mode [ 99.228934][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.238952][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.248080][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.257115][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.285334][ T5852] veth0_macvtap: entered promiscuous mode [ 99.298316][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.313104][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.321202][ T5851] veth1_vlan: entered promiscuous mode [ 99.355590][ T5852] veth1_macvtap: entered promiscuous mode [ 99.378302][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.387778][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.396875][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.410027][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.439274][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.453972][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.502948][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511726][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.520647][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.530943][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.590948][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.604410][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.644285][ T5851] veth0_macvtap: entered promiscuous mode [ 99.691615][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.694266][ T5851] veth1_macvtap: entered promiscuous mode [ 99.711491][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.826918][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.844129][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.850847][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.866854][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.884394][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.910637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.914942][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.919280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.929261][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.945917][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.955033][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.093445][ T5168] Bluetooth: hci2: command tx timeout [ 100.118480][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.140410][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.153620][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.168106][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.175711][ T5168] Bluetooth: hci0: command tx timeout [ 100.175765][ T5168] Bluetooth: hci1: command tx timeout [ 100.182313][ T5850] Bluetooth: hci3: command tx timeout [ 100.336582][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.359657][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.563348][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.572666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.581051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.634733][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.862407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.872366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.881238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.893205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.902117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.132406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.142601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.152640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.173246][ T5850] Bluetooth: hci2: command tx timeout [ 102.271209][ T5850] Bluetooth: hci3: command tx timeout [ 102.281438][ T5850] Bluetooth: hci1: command tx timeout [ 102.282183][ T5168] Bluetooth: hci0: command tx timeout [ 102.914116][ T5978] Zero length message leads to an empty skb [ 103.658042][ T5982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 105.810435][ T6013] random: crng reseeded on system resumption [ 106.502402][ T5168] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 107.361469][ T6027] netlink: set zone limit has 8 unknown bytes [ 107.462173][ T6027] netlink: zone id is out of range [ 107.482161][ T6027] netlink: del zone limit has 4 unknown bytes [ 108.566966][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.201991][ T6050] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 110.313304][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 110.424866][ T6068] hub 8-0:1.0: USB hub found [ 110.480918][ T6068] hub 8-0:1.0: 1 port detected [ 113.485814][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.570676][ T5848] Process accounting resumed [ 114.117096][ T6166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 120.293481][ T6247] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6247] ÿÿ$ € ,@([ 124.350250][ T6444] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 126.289843][ T6511] dyndbg: bad flag-op €, at start of € [ 126.312015][ T6511] dyndbg: flags parse failed [ 128.782208][ T6508] ima: policy update failed [ 128.794483][ T30] audit: type=1802 audit(1752471336.484:2): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.48" res=0 errno=0 [ 130.679792][ T6628] FAULT_INJECTION: forcing a failure. [ 130.679792][ T6628] name failslab, interval 1, probability 0, space 0, times 1 [ 130.692806][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.0.54 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 130.692849][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.692868][ T6628] Call Trace: [ 130.692878][ T6628] [ 130.692891][ T6628] dump_stack_lvl+0x16c/0x1f0 [ 130.692943][ T6628] should_fail_ex+0x512/0x640 [ 130.693003][ T6628] should_failslab+0xc2/0x120 [ 130.693033][ T6628] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 130.693081][ T6628] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 130.693129][ T6628] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 130.693178][ T6628] idr_get_free+0x528/0xa30 [ 130.693236][ T6628] idr_alloc_u32+0x190/0x2f0 [ 130.693282][ T6628] ? __pfx_idr_alloc_u32+0x10/0x10 [ 130.693340][ T6628] idr_alloc+0xc0/0x130 [ 130.693380][ T6628] ? __pfx_idr_alloc+0x10/0x10 [ 130.693417][ T6628] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.693476][ T6628] tipc_conn_alloc+0x337/0x590 [ 130.693518][ T6628] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 130.693563][ T6628] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 130.693610][ T6628] ? net_generic+0xea/0x2a0 [ 130.693658][ T6628] tipc_group_create+0x4ab/0x660 [ 130.693715][ T6628] tipc_setsockopt+0x7f0/0xdb0 [ 130.693748][ T6628] ? __pfx_tipc_setsockopt+0x10/0x10 [ 130.693788][ T6628] ? errseq_sample+0x53/0x70 [ 130.693844][ T6628] ? __pfx_tipc_setsockopt+0x10/0x10 [ 130.693875][ T6628] do_sock_setsockopt+0x224/0x470 [ 130.693907][ T6628] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.693965][ T6628] __sys_setsockopt+0x120/0x1a0 [ 130.694017][ T6628] __x64_sys_setsockopt+0xbd/0x160 [ 130.694059][ T6628] ? do_syscall_64+0x91/0x490 [ 130.694105][ T6628] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.694148][ T6628] do_syscall_64+0xcd/0x490 [ 130.694197][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.694229][ T6628] RIP: 0033:0x7f5647f8e929 [ 130.694256][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.694283][ T6628] RSP: 002b:00007f5648dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.694314][ T6628] RAX: ffffffffffffffda RBX: 00007f56481b6080 RCX: 00007f5647f8e929 [ 130.694334][ T6628] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 130.694353][ T6628] RBP: 00007f5648010b39 R08: 0000000000000014 R09: 0000000000000000 [ 130.694371][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.694390][ T6628] R13: 0000000000000000 R14: 00007f56481b6080 R15: 00007ffc16001ba8 [ 130.694432][ T6628] [ 133.447246][ T30] audit: type=1804 audit(1752471341.134:3): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.61" name="/newroot/sys/kernel/debug/tracing/set_event_pid" dev="tracefs" ino=16 res=1 errno=0 [ 137.162397][ T6851] process 'syz.3.68' launched './file0' with NULL argv: empty string added [ 138.179228][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.217089][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.862350][ T6996] mmap: syz.1.78 (6996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.779268][ T6996] program syz.1.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.239702][ T7069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 b[ 146.948530][ T7069] input: failed to attach handler evdev to device input7, error: -4 [ 148.890530][ T7096] kexec: Could not allocate control_code_buffer [ 149.521831][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'. [ 150.265762][ T7139] syz.2.88 (7139) used greatest stack depth: 19784 bytes left [ 150.445477][ T7190] hsr_slave_0 (unregistering): left promiscuous mode [ 150.975525][ T7240] hub 8-0:1.0: USB hub found [ 150.989371][ T7240] hub 8-0:1.0: 1 port detected [ 151.864157][ T7275] [ 151.866569][ T7275] ====================================================== [ 151.873810][ T7275] WARNING: possible circular locking dependency detected [ 151.880948][ T7275] 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 Not tainted [ 151.888165][ T7275] ------------------------------------------------------ [ 151.895199][ T7275] syz.2.95/7275 is trying to acquire lock: [ 151.901104][ T7275] ffff88807ab08958 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 151.912711][ T7275] [ 151.912711][ T7275] but task is already holding lock: [ 151.920180][ T7275] ffff888023f88258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 151.929199][ T7275] [ 151.929199][ T7275] which lock already depends on the new lock. [ 151.929199][ T7275] [ 151.939706][ T7275] [ 151.939706][ T7275] the existing dependency chain (in reverse order) is: [ 151.948736][ T7275] [ 151.948736][ T7275] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 151.956589][ T7275] lock_sock_nested+0x41/0xf0 [ 151.961815][ T7275] smc_listen_out+0x202/0x4a0 [ 151.967035][ T7275] smc_listen_work+0x5a3/0x50e0 [ 151.972437][ T7275] process_one_work+0x9cf/0x1b70 [ 151.978012][ T7275] worker_thread+0x6c8/0xf10 [ 151.983151][ T7275] kthread+0x3c2/0x780 [ 151.987770][ T7275] ret_from_fork+0x5d7/0x6f0 [ 151.992910][ T7275] ret_from_fork_asm+0x1a/0x30 [ 151.998385][ T7275] [ 151.998385][ T7275] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 152.008576][ T7275] __lock_acquire+0x126f/0x1c90 [ 152.013973][ T7275] lock_acquire+0x179/0x350 [ 152.019190][ T7275] __flush_work+0x4e4/0xcc0 [ 152.024328][ T7275] __cancel_work_sync+0x10c/0x130 [ 152.029892][ T7275] smc_clcsock_release+0x5f/0xe0 [ 152.035371][ T7275] __smc_release+0x5c2/0x880 [ 152.040507][ T7275] smc_close_non_accepted+0xda/0x200 [ 152.046423][ T7275] smc_close_active+0xc3c/0x1070 [ 152.051916][ T7275] __smc_release+0x634/0x880 [ 152.057370][ T7275] smc_release+0x1fc/0x5f0 [ 152.062362][ T7275] __sock_release+0xb0/0x270 [ 152.067537][ T7275] sock_close+0x1c/0x30 [ 152.072254][ T7275] __fput+0x3ff/0xb70 [ 152.076781][ T7275] task_work_run+0x150/0x240 [ 152.082010][ T7275] exit_to_user_mode_loop+0xeb/0x110 [ 152.087843][ T7275] do_syscall_64+0x3f6/0x490 [ 152.092988][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.099852][ T7275] [ 152.099852][ T7275] other info that might help us debug this: [ 152.099852][ T7275] [ 152.110182][ T7275] Possible unsafe locking scenario: [ 152.110182][ T7275] [ 152.117736][ T7275] CPU0 CPU1 [ 152.123116][ T7275] ---- ---- [ 152.128497][ T7275] lock(sk_lock-AF_SMC/1); [ 152.133035][ T7275] lock((work_completion)(&new_smc->smc_listen_work)); [ 152.142508][ T7275] lock(sk_lock-AF_SMC/1); [ 152.149565][ T7275] lock((work_completion)(&new_smc->smc_listen_work)); [ 152.156955][ T7275] [ 152.156955][ T7275] *** DEADLOCK *** [ 152.156955][ T7275] [ 152.165154][ T7275] 3 locks held by syz.2.95/7275: [ 152.170108][ T7275] #0: ffff88807eee9408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 152.180689][ T7275] #1: ffff888023f88258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 152.190135][ T7275] #2: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 152.199325][ T7275] [ 152.199325][ T7275] stack backtrace: [ 152.205234][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.2.95 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 152.205264][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.205276][ T7275] Call Trace: [ 152.205286][ T7275] [ 152.205294][ T7275] dump_stack_lvl+0x116/0x1f0 [ 152.205331][ T7275] print_circular_bug+0x275/0x350 [ 152.205361][ T7275] check_noncircular+0x14c/0x170 [ 152.205391][ T7275] __lock_acquire+0x126f/0x1c90 [ 152.205424][ T7275] lock_acquire+0x179/0x350 [ 152.205452][ T7275] ? __flush_work+0x4d0/0xcc0 [ 152.205481][ T7275] ? mark_held_locks+0x49/0x80 [ 152.205509][ T7275] ? __flush_work+0x4d0/0xcc0 [ 152.205529][ T7275] __flush_work+0x4e4/0xcc0 [ 152.205549][ T7275] ? __flush_work+0x4d0/0xcc0 [ 152.205570][ T7275] ? __pfx___flush_work+0x10/0x10 [ 152.205592][ T7275] ? __pfx_wq_barrier_func+0x10/0x10 [ 152.205621][ T7275] ? do_raw_spin_lock+0x12c/0x2b0 [ 152.205655][ T7275] ? __pfx___might_resched+0x10/0x10 [ 152.205680][ T7275] __cancel_work_sync+0x10c/0x130 [ 152.205702][ T7275] smc_clcsock_release+0x5f/0xe0 [ 152.205731][ T7275] __smc_release+0x5c2/0x880 [ 152.205756][ T7275] ? __pfx_sock_def_readable+0x10/0x10 [ 152.205785][ T7275] smc_close_non_accepted+0xda/0x200 [ 152.205812][ T7275] smc_close_active+0xc3c/0x1070 [ 152.205841][ T7275] __smc_release+0x634/0x880 [ 152.205865][ T7275] smc_release+0x1fc/0x5f0 [ 152.205890][ T7275] __sock_release+0xb0/0x270 [ 152.205922][ T7275] ? __pfx_sock_close+0x10/0x10 [ 152.205953][ T7275] sock_close+0x1c/0x30 [ 152.205983][ T7275] __fput+0x3ff/0xb70 [ 152.206005][ T7275] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.206033][ T7275] task_work_run+0x150/0x240 [ 152.206066][ T7275] ? __pfx_task_work_run+0x10/0x10 [ 152.206098][ T7275] ? __pfx___do_sys_close_range+0x10/0x10 [ 152.206132][ T7275] exit_to_user_mode_loop+0xeb/0x110 [ 152.206166][ T7275] do_syscall_64+0x3f6/0x490 [ 152.206198][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.206221][ T7275] RIP: 0033:0x7f894db8e929 [ 152.206240][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.206262][ T7275] RSP: 002b:00007ffd88fc3318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 152.206284][ T7275] RAX: 0000000000000000 RBX: 0000000000024fe5 RCX: 00007f894db8e929 [ 152.206297][ T7275] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 152.206310][ T7275] RBP: 00007f894ddb7ba0 R08: 0000000000000001 R09: 0000001e88fc360f [ 152.206323][ T7275] R10: 00007f894da00000 R11: 0000000000000246 R12: 00007f894ddb5fac [ 152.206336][ T7275] R13: 00007f894ddb5fa0 R14: ffffffffffffffff R15: 00007ffd88fc3430 [ 152.206356][ T7275] [ 152.650284][ T7287] base_sock_release(ffff88807eebf200) sk=ffff88802ecc6000 [ 152.745937][ T7289] ======================================================= [ 152.745937][ T7289] WARNING: The mand mount option has been deprecated and [ 152.745937][ T7289] and is ignored by this kernel. Remove the mand [ 152.745937][ T7289] option from the mount to silence this warning. [ 152.745937][ T7289] ======================================================= [ 152.781155][ C0] vkms_vblank_simulate: vblank timer overrun