last executing test programs: 12.278838138s ago: executing program 2 (id=3): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x8009, 0x3, 0x9, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8d, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x15, 0x2, 0x8001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) setresuid$auto(0x0, 0x8, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xfdf31875370e1716) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r1, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r2, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) mmap$auto(0x0, 0x70, 0x8, 0x853, 0x2, 0x80000000008000) unshare$auto(0x40000080) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) write$auto(0xffffffffffffffff, 0x0, 0x3) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) pread64$auto(r5, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x6c000, 0x63) acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') 10.218658547s ago: executing program 2 (id=14): mmap$auto(0x0, 0x2000c, 0xfffffffffffffff8, 0x20eb5, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getrusage$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(r0, 0x0, 0x8, 0xffff) stat$auto(0x0, &(0x7f0000000380)={0x8, 0x81, 0x6, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xa, 0xff, 0x7ffc, 0x401, 0x5f53, 0x80000000, 0xaa}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev$auto(r1, &(0x7f00000003c0)={0x0, 0x8}, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mlockall$auto(0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x54) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/softirqs\x00', 0x400, 0x0) kill$auto(0x0, 0x12) preadv$auto(r2, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) 9.365926483s ago: executing program 3 (id=16): r0 = socket(0x5, 0x3, 0x6) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250500000005000700050000006d00018008000100", @ANYRES32=0x0, @ANYBLOB="94d3045e82651e95bd2eacc22dd01e55b90b0846e78fde4cc28f728dc8ae8636638bc0d6f993ae4fc9468affd18e527d3bf76b57a67e9c9ec7cea0cb2b8ad444f9e86a69205ebb6102e0bab9612400f22c6b505f5644463d77267969944da875e54d8cb54944192bb4cb6d7933088cab10acb750d6102dd3d5dcee873979a5da9c402101c12721a31f7ef21ae43f1fdc45bda27630f3df92"], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000802) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x44009}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) personality$auto(0xfffffffc) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) 9.082074833s ago: executing program 1 (id=17): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9402, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mq_timedreceive$auto(r0, &(0x7f0000000100)='nl802154\x00', 0x4e, 0x0, &(0x7f0000000180)={0x5, 0x9}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x88c42, 0x0) pread64$auto(r2, 0x0, 0x640, 0x2da5) r3 = prctl$auto(0x7, 0xfffffffffffffffd, 0x0, 0xd49, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="04002d0316d64866ea00a89a5092c7eafb64f48ae4a09fab68c398db953cacabfa239bda54c04cfd2bd5e5a32daa673ef58884c4a49603baac0f68f83411734d4d37b9ccb97efef8e1a3a0161380eff0a8bcd405a8d8"], 0x20}}, 0x4000000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0x84a40, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0xa, 0x0) lsm_set_self_attr$auto(0xc5, &(0x7f00000001c0)={0x7fffffffffffffff, 0x2, 0x200000000400, 0x7a, "6d4908109197eca9d94397fc90ee72ec88d94c2768e2eefd552e7a52eb97ac079d7c0c653889fe04901b591c0e3da2401bb80de70f781ff51ef04f69422df34e7a4467f0fca2c9a7b571713c7abcaaf5bd92c30c51f433851b6851768b0d292bb9ac636fe69aae38e153a47a11ed6d9da6f7a36e4a988c8cbf5b"}, 0x5, 0xf) r6 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20020010}, 0x20040014) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x10, 0x2, 0x14) close_range$auto(0x2, r3, 0x0) 7.736164301s ago: executing program 1 (id=19): unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x901064ae, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x3, 0x200000000005, 0xdf, 0xeb5, 0x401, 0x8001) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xe8, 0x400008, 0x80000000009, 0x9b76, 0x2, 0x4000040000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r1, 0x7439) creat$auto(&(0x7f0000000280)=']\\\xe8@!^).\'\x00', 0xcc38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x8005, 0x3, 0x1, 0x7, 0x2, 0x73, 0x40, 0x10003, 0x3}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) 7.216124813s ago: executing program 2 (id=20): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r2}, 0x287) ioctl$auto_TIOCSBRK2(r1, 0x5427, 0x0) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x280502, 0x100) mmap$auto(0xffffffffffffffff, 0xd, 0xd747, 0x13, 0xffffffffffffffff, 0x25884d0e) capset$auto(0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x80000, 0x0) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000000)='/dev/sequencer2\x00', 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x181800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x4, 0x1}) 6.400201322s ago: executing program 3 (id=22): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x301240, 0x0) ioctl$auto_FITHAW(r0, 0xc0045878, 0x3) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2e36dc88", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf257c00000005003e000600000038000d0152f78a0cfd9f7f89156af4d82560a51b1b7a719b146f4ef879956a904fc0115f5388d8ac323dfa39a9d8bc64c8b72cbbb12ab9b2080057003c09000006001a018c4100000c009900c0020000000000000400460104008700"], 0x78}, 0x1, 0x0, 0x0, 0x24044004}, 0x2004c011) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000001c0)=r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r2, 0x3) r6 = open_by_handle_at$auto(r3, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r6, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 4.932601099s ago: executing program 1 (id=24): mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x13d8, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x98) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x3, 0x4000000000df, 0xa7c, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(r3, 0xffffffffffffffff, 0x993) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r4, 0x11) io_setup$auto(0x7ffe, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d"}, 0x3, 0x5, 0x4, @inferred, @integer={0x1, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) 4.765656682s ago: executing program 0 (id=25): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/agg_status\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 4.188607088s ago: executing program 0 (id=26): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xc8, 0x0, 0x200) madvise$auto(0x0, 0x200006, 0x19) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000012c0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3f44}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x4880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001700), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fcntl$auto(0x8000000000000001, 0x7, 0x8) rt_sigaction$auto(0x1, 0x0, 0x0, 0x8) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000001740)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) 3.741519569s ago: executing program 3 (id=27): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto_PR_SET_MM_END_DATA(0x2, 0x4, 0x0, 0x2, 0x8001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x2, 0x0, 0xcf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x84002, 0x0) open(0x0, 0x22240, 0x154) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, 0x0, 0x40000104) setreuid$auto(0xffffffffffffffff, 0x8) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(r2, 0x0, 0x5) 2.692198488s ago: executing program 3 (id=28): mmap$auto(0x0, 0xfee, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) listen$auto(r0, 0x3) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 2.511192727s ago: executing program 2 (id=29): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x567300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) setresuid$auto(0x0, 0x0, 0xee00) setresuid$auto(0xffffffffffffffff, 0xffffffff, 0x0) mmap$auto(0x0, 0x402000a, 0xdf, 0x10000000000eb1, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'veth1_to_batadv\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x9e}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1d}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfffff1c9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x48005}, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) open(0x0, 0x6041, 0x0) 2.197330658s ago: executing program 0 (id=30): syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4bfa, 0xffffffffffffffff) ptrace$auto(0x10, r0, 0x4, 0x8800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r2) mlockall$auto(0x5) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x2) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) 2.158753609s ago: executing program 1 (id=31): prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x83) listen$auto(0x3, 0x81) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x39, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.\x00R\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 2.156872747s ago: executing program 3 (id=32): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) write$auto(0x4, 0x0, 0x100082) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r1, 0x5408, r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="1c520b214b19", 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x7}, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) mmap$auto(0xfe, 0x7, 0x80000000000df, 0x2000000010c4d9, r0, 0x7ffe) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f00000000c0)=""/41, 0x29) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0xb, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCGIDLE64(r6, 0x8010743f, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) 1.51823568s ago: executing program 1 (id=33): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5d50", 0x60) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hpage_pmd_size\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = socket(0x29, 0x2, 0x0) setsockopt$auto(r4, 0x119, 0x1, 0x0, 0x8) read$auto(r1, 0x0, 0x20) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/rx-8/rps_flow_cnt\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='\xff\x9b\xc6\xae\x00\x00\x00\x00\x00\x00\x00\x00\xc7k', 0x4081) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @inferred=r5, 0x80000024, 0x7fff, 0x2004}, 0x0, 0x7fffffffeffe, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001700), r7) 1.19508395s ago: executing program 0 (id=34): mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ff"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2010040", @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x100d1}, 0x24048000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x1f}, 0x7}, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) io_uring_setup$auto(0x8000, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x5aa, 0x0, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100) unshare$auto(0x40000080) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media5\x00', 0x202, 0x0) getsockopt$auto_SO_ERROR(r0, 0x7ff, 0x4, &(0x7f0000000140)=':>()\x00', &(0x7f0000000180)=0xa7d) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/vmw_vmci/uevent\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) 493.534901ms ago: executing program 3 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, r1, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r5, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000080)={0x0}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0x80000000a, 0x40000000) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000c00)) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) ioctl$auto(0x3, 0x400454ca, 0x38) r8 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r8, 0x0, 0x4) r9 = ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r9) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000001f80)={0x18, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) r12 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r12, 0xaf01, 0x5) ioctl$auto(r12, 0x4004af07, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) shutdown$auto(0x200000003, 0x2) 393.192292ms ago: executing program 1 (id=36): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0x200000000000ebd, 0x401, 0x401) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) prctl$auto(0xb, 0x2d2d, 0x8, 0x9, 0x80001) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(r1, 0x400454ca, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, 0xffffffffffffffff, [0x80, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x0, 0x1, 0xffff, 0x0, 0x200006}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x7, 0xfffffffa, 0x4}}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r4, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r5, 0x5609, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(r4, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 274.643034ms ago: executing program 0 (id=37): r0 = socket(0xa, 0x801, 0x106) ioctl$auto(r0, 0x890c, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x4002) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 57.439619ms ago: executing program 2 (id=38): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(0xffffffffffffffff, 0x92106410, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r0 = fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) io_uring_setup$auto(0x8000, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x5aa, 0x0, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/dev_snmp6/veth0_to_hsr\x00', 0x2440, 0x0) pread64$auto(r1, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x10001, 0x3) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio16\x00', 0x2bc01, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media5\x00', 0x202, 0x0) getsockopt$auto_SO_ERROR(r2, 0x7ff, 0x4, &(0x7f0000000140)=':>()\x00', &(0x7f0000000180)=0xa7d) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r3, 0x6, 0x8, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/vmw_vmci/uevent\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)="11cc1dc0af44dc5a7ebdfd37ce15bed6c7c17213e2649c112e9e4681453f515e3b1b4b967962b4da70101e8a7b8eab3756a5b3558413b33e12ab7b378992eb25a1319b00cd6f5735519b0bd76666e0b77343a9c920045f74cda3e048e5a2846f45", 0x61) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0xea38235968d29556, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) 0s ago: executing program 0 (id=39): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x0, 0x8000000000000001) socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x65}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x5) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0x14, r5, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) io_uring_setup$auto(0x59, 0x0) socket(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 98.740388][ T5825] cgroup: Unknown subsys name 'net' [ 98.873897][ T5825] cgroup: Unknown subsys name 'cpuset' [ 98.884875][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.669772][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.970617][ T44] cfg80211: failed to load regulatory.db [ 102.810152][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.838744][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.846790][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.855138][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.863082][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.916163][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.924576][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.932685][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.941151][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.949835][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.978145][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.987215][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.995836][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.003540][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.056243][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.063912][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.072898][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.080368][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.088844][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.098653][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.392517][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 103.637180][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.644587][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.652675][ T5843] bridge_slave_0: entered allmulticast mode [ 103.660666][ T5843] bridge_slave_0: entered promiscuous mode [ 103.711228][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.719194][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.726411][ T5843] bridge_slave_1: entered allmulticast mode [ 103.734158][ T5843] bridge_slave_1: entered promiscuous mode [ 103.741670][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 103.845365][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.858719][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.891480][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 104.025962][ T5843] team0: Port device team_slave_0 added [ 104.037915][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 104.058134][ T5843] team0: Port device team_slave_1 added [ 104.144733][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.152187][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.160457][ T5840] bridge_slave_0: entered allmulticast mode [ 104.167685][ T5840] bridge_slave_0: entered promiscuous mode [ 104.175573][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.183178][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.190633][ T5840] bridge_slave_1: entered allmulticast mode [ 104.197903][ T5840] bridge_slave_1: entered promiscuous mode [ 104.231108][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.238193][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.264522][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.317854][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.325140][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.351221][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.399611][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.406850][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.414141][ T5846] bridge_slave_0: entered allmulticast mode [ 104.421776][ T5846] bridge_slave_0: entered promiscuous mode [ 104.431010][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.438202][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.445492][ T5846] bridge_slave_1: entered allmulticast mode [ 104.454382][ T5846] bridge_slave_1: entered promiscuous mode [ 104.472745][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.547169][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.556844][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.564219][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.571878][ T5845] bridge_slave_0: entered allmulticast mode [ 104.579698][ T5845] bridge_slave_0: entered promiscuous mode [ 104.590373][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.604116][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.654072][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.661526][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.668877][ T5845] bridge_slave_1: entered allmulticast mode [ 104.676292][ T5845] bridge_slave_1: entered promiscuous mode [ 104.702047][ T5843] hsr_slave_0: entered promiscuous mode [ 104.708896][ T5843] hsr_slave_1: entered promiscuous mode [ 104.720095][ T5840] team0: Port device team_slave_0 added [ 104.754052][ T5846] team0: Port device team_slave_0 added [ 104.762229][ T5840] team0: Port device team_slave_1 added [ 104.800546][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.811876][ T5846] team0: Port device team_slave_1 added [ 104.821070][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.894596][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.902900][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.929009][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.933601][ T5156] Bluetooth: hci0: command tx timeout [ 104.942032][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.952412][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.978433][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.997047][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.004192][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.008383][ T5156] Bluetooth: hci1: command tx timeout [ 105.034257][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.079666][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.086642][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.115538][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.129758][ T5845] team0: Port device team_slave_0 added [ 105.139730][ T5845] team0: Port device team_slave_1 added [ 105.169640][ T5842] Bluetooth: hci3: command tx timeout [ 105.174870][ T5156] Bluetooth: hci2: command tx timeout [ 105.196830][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.204086][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.230405][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.291399][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.299100][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.325461][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.394944][ T5840] hsr_slave_0: entered promiscuous mode [ 105.401979][ T5840] hsr_slave_1: entered promiscuous mode [ 105.409129][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.416886][ T5840] Cannot create hsr debugfs directory [ 105.451465][ T5846] hsr_slave_0: entered promiscuous mode [ 105.457970][ T5846] hsr_slave_1: entered promiscuous mode [ 105.464448][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.472119][ T5846] Cannot create hsr debugfs directory [ 105.618225][ T5845] hsr_slave_0: entered promiscuous mode [ 105.624714][ T5845] hsr_slave_1: entered promiscuous mode [ 105.631537][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.639256][ T5845] Cannot create hsr debugfs directory [ 105.797581][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.841631][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.870579][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.907278][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.055655][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.072926][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.095660][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.107752][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.187602][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.203976][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.218207][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.231618][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.337753][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.360045][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.375076][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.399443][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.419412][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.450006][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.492644][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.500017][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.524269][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.531475][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.666508][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.724485][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.737810][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.776512][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.783755][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.800548][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.807841][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.871369][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.898612][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.945673][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.967542][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.974780][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.008773][ T5156] Bluetooth: hci0: command tx timeout [ 107.027967][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.035183][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.046548][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.053770][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.088495][ T5156] Bluetooth: hci1: command tx timeout [ 107.105881][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.113139][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.202653][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.250110][ T5156] Bluetooth: hci3: command tx timeout [ 107.251614][ T5842] Bluetooth: hci2: command tx timeout [ 107.390914][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.432524][ T5843] veth0_vlan: entered promiscuous mode [ 107.482376][ T5843] veth1_vlan: entered promiscuous mode [ 107.574929][ T5843] veth0_macvtap: entered promiscuous mode [ 107.602126][ T5843] veth1_macvtap: entered promiscuous mode [ 107.647472][ T5840] veth0_vlan: entered promiscuous mode [ 107.710257][ T5840] veth1_vlan: entered promiscuous mode [ 107.725638][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.764080][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.812593][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.825002][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.834018][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.842945][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.901204][ T5840] veth0_macvtap: entered promiscuous mode [ 107.914960][ T5840] veth1_macvtap: entered promiscuous mode [ 107.933995][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.005428][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.047529][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.063738][ T5066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.066215][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.089771][ T5066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.135649][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.136717][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.148954][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.153845][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.169237][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.177991][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.273658][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.344293][ T5846] veth0_vlan: entered promiscuous mode [ 108.363938][ T5845] veth0_vlan: entered promiscuous mode [ 108.414002][ T5846] veth1_vlan: entered promiscuous mode [ 108.433299][ T5845] veth1_vlan: entered promiscuous mode [ 108.445658][ T5922] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.466757][ T5922] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.499003][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.514334][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.578917][ T5845] veth0_macvtap: entered promiscuous mode [ 108.669735][ T5845] veth1_macvtap: entered promiscuous mode [ 108.716147][ T5846] veth0_macvtap: entered promiscuous mode [ 108.736200][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.752042][ T5846] veth1_macvtap: entered promiscuous mode [ 108.757275][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.798130][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.845719][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.893013][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.934255][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.970240][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.988310][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.997118][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.043927][ T5925] capability: warning: `syz.0.5' uses 32-bit capabilities (legacy support in use) [ 109.053366][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.081250][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.091640][ T5842] Bluetooth: hci0: command tx timeout [ 109.096375][ T5925] capability: warning: `syz.0.5' uses deprecated v2 capabilities in a way that may be insecure [ 109.114167][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 109.114213][ T5842] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 109.129937][ T5842] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 109.139453][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.139500][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.139542][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.178911][ T5842] Bluetooth: hci1: command tx timeout [ 109.328852][ T5156] Bluetooth: hci3: command tx timeout [ 109.334426][ T5842] Bluetooth: hci2: command tx timeout [ 109.509429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.517335][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.533248][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.552967][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.613097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.626392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.711159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.749931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.759082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.844867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.872469][ T5842] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 109.889568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.938826][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.063221][ T5939] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 110.073659][ T5941] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 110.084895][ T5941] netlink: 230 bytes leftover after parsing attributes in process `syz.1.2'. [ 110.156980][ T5941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 110.221185][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.254394][ T5948] Zero length message leads to an empty skb [ 111.168572][ T5842] Bluetooth: hci0: command tx timeout [ 111.249002][ T5842] Bluetooth: hci1: command tx timeout [ 111.384563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.396344][ T5966] zswap: compressor not available [ 111.409511][ T5842] Bluetooth: hci2: command tx timeout [ 111.414979][ T5842] Bluetooth: hci3: command tx timeout [ 111.968676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.998746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.633801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.930098][ T5975] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 113.447831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.897950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.907493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.852487][ T6021] netlink: 3056 bytes leftover after parsing attributes in process `syz.0.21'. [ 116.857266][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 117.235269][ T6032] veth1_macvtap: entered allmulticast mode [ 119.658455][ T6048] [U] [ 120.342263][ T6069] random: crng reseeded on system resumption [ 120.869560][ T6069] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.296861][ T6099] ovs_: entered promiscuous mode [ 122.371390][ T6094] netlink: set zone limit has 8 unknown bytes [ 122.378101][ T6100] [ 122.380475][ T6100] ====================================================== [ 122.387542][ T6100] WARNING: possible circular locking dependency detected [ 122.394610][ T6100] 6.15.0-syzkaller-12426-ge271ed52b344 #0 Not tainted [ 122.401398][ T6100] ------------------------------------------------------ [ 122.408429][ T6100] syz.1.36/6100 is trying to acquire lock: [ 122.414245][ T6100] ffffffff8e52f4c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 122.423890][ T6100] [ 122.423890][ T6100] but task is already holding lock: [ 122.431262][ T6100] ffff888026368a70 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 122.442559][ T6100] [ 122.442559][ T6100] which lock already depends on the new lock. [ 122.442559][ T6100] [ 122.452985][ T6100] [ 122.452985][ T6100] the existing dependency chain (in reverse order) is: [ 122.462019][ T6100] [ 122.462019][ T6100] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 122.470665][ T6100] blk_alloc_queue+0x619/0x760 [ 122.475983][ T6100] blk_mq_alloc_queue+0x175/0x290 [ 122.481567][ T6100] __blk_mq_alloc_disk+0x29/0x120 [ 122.487157][ T6100] loop_add+0x49e/0xb70 [ 122.491870][ T6100] loop_init+0x164/0x270 [ 122.496665][ T6100] do_one_initcall+0x120/0x6e0 [ 122.501976][ T6100] kernel_init_freeable+0x5c2/0x900 [ 122.507720][ T6100] kernel_init+0x1c/0x2b0 [ 122.512597][ T6100] ret_from_fork+0x5d7/0x6f0 [ 122.517755][ T6100] ret_from_fork_asm+0x1a/0x30 [ 122.523073][ T6100] [ 122.523073][ T6100] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 122.530328][ T6100] fs_reclaim_acquire+0x102/0x150 [ 122.535911][ T6100] prepare_alloc_pages+0x162/0x610 [ 122.541576][ T6100] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 122.548035][ T6100] __alloc_pages_noprof+0xb/0x1b0 [ 122.553617][ T6100] pcpu_populate_chunk+0x110/0xb00 [ 122.559278][ T6100] pcpu_alloc_noprof+0x86a/0x1470 [ 122.564855][ T6100] xt_percpu_counter_alloc+0x13e/0x1b0 [ 122.570860][ T6100] find_check_entry.constprop.0+0xbc/0x9b0 [ 122.577254][ T6100] translate_table+0xc98/0x1720 [ 122.582659][ T6100] ipt_register_table+0x102/0x430 [ 122.588248][ T6100] iptable_mangle_table_init+0x40/0x60 [ 122.594262][ T6100] xt_find_table_lock+0x2e4/0x520 [ 122.599847][ T6100] xt_request_find_table_lock+0x28/0xf0 [ 122.605966][ T6100] get_info+0x190/0x610 [ 122.610666][ T6100] do_ipt_get_ctl+0x169/0xa10 [ 122.615891][ T6100] nf_getsockopt+0x79/0xe0 [ 122.620847][ T6100] ip_getsockopt+0x18c/0x1e0 [ 122.625981][ T6100] tcp_getsockopt+0x9e/0x100 [ 122.631118][ T6100] do_sock_getsockopt+0x3ff/0x800 [ 122.636689][ T6100] __sys_getsockopt+0x123/0x1b0 [ 122.642094][ T6100] __x64_sys_getsockopt+0xbd/0x160 [ 122.647764][ T6100] do_syscall_64+0xcd/0x490 [ 122.652833][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.659286][ T6100] [ 122.659286][ T6100] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 122.667049][ T6100] __lock_acquire+0x126f/0x1c90 [ 122.672456][ T6100] lock_acquire+0x179/0x350 [ 122.677520][ T6100] __mutex_lock+0x199/0xb90 [ 122.682578][ T6100] pcpu_alloc_noprof+0xb4c/0x1470 [ 122.688166][ T6100] blk_stat_alloc_callback+0xc8/0x280 [ 122.694088][ T6100] wbt_init+0xac/0x540 [ 122.698702][ T6100] queue_wb_lat_store+0x354/0x3d0 [ 122.704268][ T6100] queue_attr_store+0x279/0x320 [ 122.709658][ T6100] sysfs_kf_write+0xef/0x150 [ 122.714799][ T6100] kernfs_fop_write_iter+0x354/0x510 [ 122.720624][ T6100] vfs_write+0x6c4/0x1150 [ 122.725502][ T6100] ksys_write+0x12a/0x250 [ 122.730384][ T6100] do_syscall_64+0xcd/0x490 [ 122.735469][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.741911][ T6100] [ 122.741911][ T6100] other info that might help us debug this: [ 122.741911][ T6100] [ 122.752152][ T6100] Chain exists of: [ 122.752152][ T6100] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 122.752152][ T6100] [ 122.765848][ T6100] Possible unsafe locking scenario: [ 122.765848][ T6100] [ 122.773313][ T6100] CPU0 CPU1 [ 122.778690][ T6100] ---- ---- [ 122.784062][ T6100] lock(&q->q_usage_counter(io)#18); [ 122.789465][ T6100] lock(fs_reclaim); [ 122.796011][ T6100] lock(&q->q_usage_counter(io)#18); [ 122.803958][ T6100] lock(pcpu_alloc_mutex); [ 122.808481][ T6100] [ 122.808481][ T6100] *** DEADLOCK *** [ 122.808481][ T6100] [ 122.816629][ T6100] 6 locks held by syz.1.36/6100: [ 122.821568][ T6100] #0: ffff88803300deb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 122.830680][ T6100] #1: ffff888034f98428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 122.839714][ T6100] #2: ffff88805bd96488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 122.849512][ T6100] #3: ffff888142702e18 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 122.859591][ T6100] #4: ffff888026368a70 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 122.871319][ T6100] #5: ffff888026368aa8 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 122.883307][ T6100] [ 122.883307][ T6100] stack backtrace: [ 122.889226][ T6100] CPU: 1 UID: 0 PID: 6100 Comm: syz.1.36 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 122.889258][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.889279][ T6100] Call Trace: [ 122.889290][ T6100] [ 122.889303][ T6100] dump_stack_lvl+0x116/0x1f0 [ 122.889343][ T6100] print_circular_bug+0x275/0x350 [ 122.889377][ T6100] check_noncircular+0x14c/0x170 [ 122.889413][ T6100] __lock_acquire+0x126f/0x1c90 [ 122.889456][ T6100] lock_acquire+0x179/0x350 [ 122.889488][ T6100] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 122.889526][ T6100] ? __pfx___might_resched+0x10/0x10 [ 122.889551][ T6100] ? ksys_write+0x12a/0x250 [ 122.889587][ T6100] ? do_syscall_64+0xcd/0x490 [ 122.889622][ T6100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.889660][ T6100] __mutex_lock+0x199/0xb90 [ 122.889693][ T6100] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 122.889727][ T6100] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 122.889761][ T6100] ? __pfx___mutex_lock+0x10/0x10 [ 122.889803][ T6100] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 122.889836][ T6100] pcpu_alloc_noprof+0xb4c/0x1470 [ 122.889874][ T6100] ? __pfx_wbt_data_dir+0x10/0x10 [ 122.889910][ T6100] ? __pfx_wb_timer_fn+0x10/0x10 [ 122.889934][ T6100] blk_stat_alloc_callback+0xc8/0x280 [ 122.889958][ T6100] ? kasan_save_track+0x14/0x30 [ 122.889996][ T6100] wbt_init+0xac/0x540 [ 122.890022][ T6100] queue_wb_lat_store+0x354/0x3d0 [ 122.890044][ T6100] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 122.890086][ T6100] ? __mutex_trylock_common+0xe9/0x250 [ 122.890119][ T6100] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 122.890157][ T6100] queue_attr_store+0x279/0x320 [ 122.890179][ T6100] ? __pfx_queue_attr_store+0x10/0x10 [ 122.890200][ T6100] ? __lock_acquire+0x622/0x1c90 [ 122.890237][ T6100] ? find_held_lock+0x2b/0x80 [ 122.890259][ T6100] ? sysfs_file_kobj+0xe4/0x290 [ 122.890290][ T6100] ? __pfx_queue_attr_store+0x10/0x10 [ 122.890311][ T6100] sysfs_kf_write+0xef/0x150 [ 122.890340][ T6100] kernfs_fop_write_iter+0x354/0x510 [ 122.890365][ T6100] ? __pfx_sysfs_kf_write+0x10/0x10 [ 122.890395][ T6100] vfs_write+0x6c4/0x1150 [ 122.890453][ T6100] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 122.890499][ T6100] ? __pfx___mutex_lock+0x10/0x10 [ 122.890537][ T6100] ? __pfx_vfs_write+0x10/0x10 [ 122.890587][ T6100] ksys_write+0x12a/0x250 [ 122.890625][ T6100] ? __pfx_ksys_write+0x10/0x10 [ 122.890669][ T6100] do_syscall_64+0xcd/0x490 [ 122.890709][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.890735][ T6100] RIP: 0033:0x7f76b1f8e929 [ 122.890760][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.890786][ T6100] RSP: 002b:00007f76b2e75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.890811][ T6100] RAX: ffffffffffffffda RBX: 00007f76b21b6160 RCX: 00007f76b1f8e929 [ 122.890828][ T6100] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000005 [ 122.890844][ T6100] RBP: 00007f76b2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.890861][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.890876][ T6100] R13: 0000000000000000 R14: 00007f76b21b6160 R15: 00007ffc15acc0e8 [ 122.890901][ T6100]