last executing test programs: 9.894050854s ago: executing program 2 (id=99): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x10004) sync_file_range$auto(r0, 0xfffffffffffffff1, 0xa, 0x1) r1 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) madvise$auto(0x1eb, 0xa59, 0xc) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x502, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) clone$auto(0xad8c, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) setsockopt$auto(r1, 0x6, 0x16, 0x0, 0xfb2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty61\x00', 0x40200, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x7, 0x6, 0x2}, {0x100, 0x1, 0x56, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x240, 0x0) preadv$auto(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0x2}, 0x4, 0x7, 0xe3) ioctl$auto(0x3, 0x1, 0xffffffffffffffff) keyctl$auto(0xa, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) rt_sigqueueinfo$auto(0x0, 0x800, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x3}}}) getpid() mmap$auto(0x0, 0x400008, 0x80, 0x9b72, r1, 0x9) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) ioctl$auto(0xffffffffffffffff, 0x4b4d, 0xffffffffffffffff) 7.690061043s ago: executing program 2 (id=105): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) uname$auto(0x0) (async) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) sendfile$auto(0x1, r2, 0x0, 0xc01) (async) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0xfffffffffffffffd, 0x11, 0x404, 0x8000) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() open(0x0, 0x0, 0x152) (async) rseq$auto(&(0x7f00000001c0)={0x20006, 0x5, 0x0, 0x7, 0xffffffff, 0x80000001}, 0x7ffd, 0xa, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x3, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) 7.687345075s ago: executing program 0 (id=106): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x414802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) (async) unshare$auto(0x40000080) (async) mremap$auto(0xffbfffffffffffff, 0x8000, 0x6, 0xe6b6, 0x6) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\x0f\x00\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\x04\x00\x00\x00\x00\x00\x00\x00U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)\x03\xfaK\xdf>f\xb8&\x959-\n\xd5Ww\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syslog$auto(0x1, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0x8000) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') getdents$auto(r2, 0x0, 0xfff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.14/usb37/37-0:1.0/usb37-port5/power/pm_qos_no_power_off\x00', 0x8c00, 0x0) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) (async) ioperm$auto(0xfffffffffffffff4, 0x100, 0x5c) (async) write$auto(0xffffffffffffffff, 0x0, 0x7) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x14}}, 0x4000000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0x79e, r3, 0x1) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 7.07398013s ago: executing program 3 (id=109): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zram0\x00', 0x121002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x80, 0x0) pread64$auto(r0, 0x0, 0x40, 0x3) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$auto(r1, 0x89a2, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x5c8) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x83000000) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x68) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x2, 0x200, 0x4, 0x84}, 0x1fe, 0x5) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd02, &(0x7f00000001c0)) 6.643097085s ago: executing program 1 (id=111): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x1, 0x3, 0x3, 0xec91, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x3b6a709c8c08a15d, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='/dev/vcsa\x00', 0x7b05, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000180)=0x7) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r1, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="746cb551e830601e0d16aabb95291469d303f663aee02f11c85470d52aad0e1a83597ff7ee28603127a63aa61486d9def84244b955e043f80e4863109603599904e43691d52f8b8db3f762b23603e1aeea28c050892624ce04b9aa085cc103b84b27b4f6399119f1c648753803ada83ef75d2f83473afa338a9363aec6fc7e290c779f559a7721508685a053719936c59213308d23b1d3d1e8555c43793617dd0492ab7c5024ad50f8abd13c2b5ea6b33cb1b1730c67f78ba2a77fcf21948b126604c380be7ebf"], 0x40}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x7000000, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x64) io_uring_setup$auto(0x6, 0x0) 6.377960504s ago: executing program 2 (id=112): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x3000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0xa, 0x4) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fe2408362f63e068dc0004000800000006000700008000000a0001001b1d059ad4c700000a004900000000000000000008000400ff000000080004001000000008000300faeaffff08000400b7000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x40091) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.403480641s ago: executing program 0 (id=113): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/16, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0xfffffffffffffbff, 0x3fe, 0x0, &(0x7f0000000080)=0x7e, 0x7fff, 0x6) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) (async) socket(0x11, 0x0, 0x2) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x3, 0x73) (async) socket(0x29, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x2, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5, 0x1000, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0xeb5, 0x0, 0x0) (async) fsopen$auto(0x0, 0x1) (async) socket(0xa, 0x5, 0x94) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) mmap$auto(0x7, 0xf8b02a2, 0xdf, 0x9b71, 0xffffffffffffffff, 0xa) socket(0x2, 0x1, 0x106) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto(0x3, 0x0, 0x7) 4.932436864s ago: executing program 2 (id=114): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/27, 0x1b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$auto(r1, 0x40045108, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) setreuid$auto(0xffffffffffffffff, 0x8) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = memfd_create$auto(0x0, 0x9) fallocate$auto(r3, 0x3, 0x8000000000002, 0x3) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) 4.861244768s ago: executing program 3 (id=115): statmount$auto(0x0, 0x0, 0x1fa, 0xd) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8001, 0x2, 0x7fa, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0xc, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x8, 0x6]}, 0x0) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) r3 = pipe$auto(0x0) splice$auto(0x4, 0x0, r3, 0x0, 0x80000001, 0x9) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="49080000000100000022843a2d008200", @ANYRES16, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) sysfs$auto(0x2, 0x0, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000040)=')\'$-{%+\'@,\x00') 4.816515883s ago: executing program 1 (id=116): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x3d, 0xdeb1, 0x803}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(r0, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) rename$auto(0x0, &(0x7f00000004c0)='./file1\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000440)={{0xffffff1b, 0x0, 0xee01, 0x5, 0x9, 0xca82857c, 0x99f8}, 0x84, 0x5, 0x8, 0x3, @inferred, @raw=0x53b, 0x2, 0x0, &(0x7f0000000280)="261061700e33c3342b7606b4a93e9e955c8d790c5b20b4a28af4e4a7f260b4d0ef32deaa08eae5b45677c68ff021acf329731f3fd7a08ff3d1bd762abb50c975f42c1ab6c6ef2e01c078af108ace089b8a8f66e49c", &(0x7f00000005c0)="dae536d504bd88537506478a3326857c9d83be26e035ad1d4146ed9a5f5d01f4b322e67d724c6eea280a31ecaa0cc7344f7b08e44ec28742ecd95d73bbb1867d3347cfed11df57d53b998c4df251080e60f59d2f4bbaef735201366bb8a16fc32adf0640af92af5cc225199b6451ac4533e80bd22dc543eedb1134a03816b426"}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getdents$auto(r2, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f0000000700)={[0x1a, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon13\x00', 0x400000, 0x0) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) 3.906023091s ago: executing program 0 (id=117): r0 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xff, r0, 0x100000000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25040000000c000180080001000100000004000a8008000800", @ANYRES32=r3, @ANYBLOB="0800060007000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='4', 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000000000000007, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x200000000007, 0x2, 0x9, 0x2, 0x6]}, 0x0) 3.621467225s ago: executing program 2 (id=118): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x1, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x12, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x7ff, &(0x7f0000000000)={0x30, 0x6, 0xb0}}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x80557) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xac, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x98, 0x11, '\x00\xab\xe6\x84\x18\xa6\x9a\xaeZ\xe0(\bK;\xe0ZBkI\xa5\x04\x86\xff\x1f\x98\xe1\xd1Hu\xf7Y\x7f\xa0+L\xa4\xe5\rL Y\xa6\xd4\xe2\x1d\xcc\xeb\x1b$\xf3 B`\x8a\xf2\xdd\xe5T\x89>l\n,\x132A\x1e\xba3\xe0\xe4\xb0\xfd\xb3\x9e\xe5\xd7\x95W\xfd\x93\x88c<\x02 \xd9!\x13Zs\xe2\xdf\xad@\x8a\xc0l\x0f\x97q&\xd2\xcbJN\x97\xbba\x81\xd8\xf3\x01]L\x1d\xc3\b\x05\xf9$\x85\xb5{\xc2\x87L\xf4\xbf\x99\x87`Z@\xa8\xa2\xbdd\x8c\x8f\xb8}\xcb\xb5\xc8+\xaf\xc8'}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/conf/default/forwarding\x00', 0x2102, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) 3.553989713s ago: executing program 1 (id=119): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2082, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000000), 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000000)={0x0, 0xfc6}, 0x6, 0x0, 0x7, 0xa505}, 0x800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/fail-nth\x00', 0xc982, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) rt_sigqueueinfo$auto(0x0, 0xec, 0x0) unshare$auto(0x40000080) write$auto(r3, 0x0, 0xff) r6 = socket(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x82180, 0x0) socket(0xb, 0x0, 0x3) 3.309578485s ago: executing program 3 (id=120): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto_SO_COOKIE(r1, 0x6, 0x39, 0x0, &(0x7f0000000440)=0x7) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), r4) (async) shmctl$auto_SHM_LOCK(0xfffffcc9, 0xb, &(0x7f0000000240)={{0x1, 0xee01, 0xee01, 0x0, 0x3, 0x8, 0xc5}, 0x2, 0x5, 0x3, 0x84c, @raw=0x101, @raw=0x3, 0x7, 0x0, &(0x7f00000001c0)="f3b21f45df9839213e2e58b8ab24e0a2948c3b1b99198b67ffafdba0d9a946d71407fe277c98bddc35edb1860388df748d7b8f2612a5e89828", &(0x7f0000000200)="a53e4bcf6c2e5999c01d47ce8d86832677d970a13b0a93004e8949db97de709e38c8237acd6f2d72c240ae5126eadacfbee8"}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x1bc, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'dvmrp1\x00'}, @THERMAL_GENL_ATTR_CDEV={0x194, 0xe, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @uid=r6}, @nested={0x188, 0xa8, 0x0, 0x1, [@nested={0x4, 0x43}, @generic="43f62d16e7d347018164feeaef527f766b8c430e4c5fba0bf5557fe539e29b8216319281a63b81ae424d1fd66b0b6b3886595e3f91dc67fe3b1a293c2bab23dd74424a44b68d2808f9ea69901e725d16c491c34da70ff814cc6141b1ed9996cbec1fb4bf266c549fc58fb7965a7a2990f781ea1e1cd98d", @typed={0x8, 0xf1, 0x0, 0x0, @u32=0xfffffffe}, @nested={0x4, 0xd3}, @typed={0x8, 0xfd, 0x0, 0x0, @pid}, @nested={0x4, 0x97}, @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0xe28}, @generic="70541c3b6d7115d9466e5ea3d8dc31222c8afcbd81dc280c11b7dbefdbd79a4fe0c10f05410a8cafa3c045271462dbfedf4ec1c35a254f0ae2b2ce8e6966c7b0700941caf575236e59c6b1ad6a200a117631113bd8c1b0d2617c3a6ee1d113d13eb3d9b9df656957cc1cdef7d1e8b3f42a42dc2c706ad61fe6948a31b6914696fc1656ab87c4c9ec820e06967e2dae5f532d5b4871e0606f1fc0b54df7c4ee301b66277ee1cbb6ffd58a8847c194c062939b9bef1d5200d2c5a0b36260702968b520cb6ba1872020c1d2a5ec38897597d9"]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x884}, 0x4004000) (async) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x14040, 0x0) (async) mmap$auto(0x80000000, 0x202000b, 0x9, 0xeb6, r3, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) 2.386574202s ago: executing program 0 (id=121): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x0) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptybf\x00', 0x72180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_VHOST_GET_FEATURES2(r0, 0x8008af00, &(0x7f0000000040)=0x1) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) listen$auto(0x3, 0x83) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) write$auto(0x3, 0x0, 0x81) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x381, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.182128183s ago: executing program 3 (id=122): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x3000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0xa, 0x4) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fe2408362f63e068dc0004000800000006000700008000000a0001001b1d059ad4c700000a004900000000000000000008000400ff000000080004001000000008000300faeaffff08000400b7000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x40091) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.787868557s ago: executing program 2 (id=123): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zram0\x00', 0x121002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x80, 0x0) pread64$auto(r0, 0x0, 0x40, 0x3) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$auto(r1, 0x89a2, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x5c8) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x83000000) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x68) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x2, 0x200, 0x4, 0x84}, 0x1fe, 0x5) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd02, &(0x7f00000001c0)) 926.212239ms ago: executing program 1 (id=124): lsm_get_self_attr$auto(0x65, 0x0, 0x0, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x42146, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x0, 0x0, 0x3) (async) sysfs$auto(0x2, 0x4, 0x0) (async) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async, rerun: 64) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) (async, rerun: 64) fcntl$auto(0x8000000000000001, 0x5, 0x8) (async) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) (async, rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x103401, 0x0) write$auto(r0, &(0x7f0000000400)='6\xbe\xec\x8e8g\xc6\x10K\xaa>\xf6)\xf9[F\xc1\xe2\b\xba\x88Ki\xef\xeb(\xf2,\xe0\xd6\xc7\xf3\v\xad\x96\xaa\xf4CS F\xe0\xf9X\xf6\x00\xd0\xae\xa7Q\xc6\x8b\xc6\x87\xafI>U\xa3d\x15\xb4\xed\b;#\x84_\xcc\x81\x8e\xc1#\xc1\x10\x82\x8cn\xdf,\xacn\xab\a7&\xce\xf4\xa4DP\x02N\x97\x1a\x1a\x02\x1d.H\xfaZlOH\x89:!U\x05\xe9/\x1c\xc6\x9fz\xc1\xd7\x93\x04zt\xc6\xd2\xa5\x8f,\xd5\xd9\xa6\xb7\xaa\xcbgB\x18\x81\xfa\xdb8\xb4\r', 0xa3db) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) (async, rerun: 64) r2 = socketpair$auto(0x400, 0x2, 0x1, 0x0) (rerun: 64) clock_adjtime$auto(0x1000, &(0x7f0000000300)={0x87a, 0x0, 0x3, 0x4, 0x8fc0000, 0x1, 0x9, 0x0, 0xed, 0x7, 0x0, {0x4, 0x2}, 0x4, 0x775, 0x7fffffff, 0x8, 0x0, 0x0, 0x8, 0x4, 0x979, 0x4, 0xaea}) (async) mmap$auto(0x9, 0x1, 0x3, 0x19, r1, 0x8000) (async, rerun: 64) open(&(0x7f00000005c0)='./file0\x00', 0x408002, 0x8) (async, rerun: 64) write$auto(0xffffffffffffffff, 0x0, 0xfdef) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) ioctl$auto_TCSBRKP2(r2, 0x5425, &(0x7f0000000240)="ea92d4a5ed6cd82a6a292289adede3e10fbd291548738cce4ba0c6458af474f9cb3bb0ac3ae4a70810c83fbed7012d7159ef3d") (async, rerun: 32) write$auto(r1, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) (async, rerun: 32) r3 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x100, 0x0) fsmount$auto(r1, 0x1ff, 0x48) read$auto_event_trigger_fops_trace(r3, &(0x7f0000000180)=""/178, 0xb2) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) 846.054933ms ago: executing program 0 (id=125): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (rerun: 64) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async, rerun: 64) lseek$auto(r0, 0x7fffffffffffffff, 0x6) (rerun: 64) mmap$auto(0xd00, 0x2000d, 0x7fffffff, 0xeb1, r0, 0x7ffe) (async, rerun: 64) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async, rerun: 64) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) (async) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40000000000026b, 0x4}, {0x0, 0x83}}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr9/statistics/tx_fifo_errors\x00', 0x309801, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffa33}, 0x4) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) (async) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x1ff) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) r4 = io_uring_setup$auto(0xe, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x1414c0, 0x0) (async) r5 = gettid() readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) tkill$auto(r5, 0xa) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty0\x00', 0xdc749328495b792f, 0x0) ioctl$auto(r6, 0x5609, 0xffffffffffffffff) ioctl$auto_NS_GET_PID_FROM_PIDNS(r4, 0x8004b706, &(0x7f00000001c0)=0xc) (async) mknod$auto(0x0, 0x20e9, 0x103) 610.291419ms ago: executing program 3 (id=126): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34000}, 0x0, 0x0, 0x3, 0xab}, 0xfffffffd}, 0x3f800000, 0xdb) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010029"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='m'], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto(r2, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x6) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)="5d3d4b8c60c2f201bbdecdf45a36e14cf63e57caea0fdf108d") close_range$auto(0x2, 0x8, 0x0) 508.834906ms ago: executing program 1 (id=127): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket(0x2, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x36, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x4, 0x3, 0x6, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0xffffffff, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES8, @ANYRESDEC=r2, @ANYBLOB="cbb316f25768362c9c9122a249587ab8ddc012eab50695e99fca1c4da35a30deeb6e98325d03b7ee547f2d0215f002241516beb4e96a448682cef3b7af3853a3a6331ccdfe42cbf5579c7cefafab80d65d943e193c80e837a91bd483cb435a3a0118aa"], 0x1ac}, 0x1, 0x0, 0x0, 0xc85}, 0x24044011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3f, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async, rerun: 64) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) write$auto_tracing_mark_raw_fops_trace(r4, &(0x7f0000000040)='%/bI$F', 0x6) (async) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch13\x00', 0x280, 0x0) (async, rerun: 64) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x400880, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r7, 0xc0045004, &(0x7f0000000000)) (async) setsockopt$auto_SO_RCVBUFFORCE(r7, 0x7, 0x21, &(0x7f0000000040)=':\x00', 0xdab5) (async) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) ioctl$auto(r6, 0x4020565b, 0x38) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x545c, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="9bdeddd7eee0ee1bf10a2b521412c5aa47323f55fc17c4c62c19bc465c5eb89c586765d22d358e2e6db9780a5d6a54f0bee145750f3a7b4def08ae1ccdbe37c85bb926c36b31dc082322b73cd6230d7f71452be3003445e6e67eb764ceb747dfd4aa6d4e89f0efe83d84413bd7438d51cdc4916d78395ddb48389a0d8675f8261aa7502e904947e6", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 341.969644ms ago: executing program 0 (id=128): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x3d, 0xdeb1, 0x803}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(r0, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) rename$auto(0x0, &(0x7f00000004c0)='./file1\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000440)={{0xffffff1b, 0x0, 0xee01, 0x5, 0x9, 0xca82857c, 0x99f8}, 0x84, 0x5, 0x8, 0x3, @inferred, @raw=0x53b, 0x2, 0x0, &(0x7f0000000280)="261061700e33c3342b7606b4a93e9e955c8d790c5b20b4a28af4e4a7f260b4d0ef32deaa08eae5b45677c68ff021acf329731f3fd7a08ff3d1bd762abb50c975f42c1ab6c6ef2e01c078af108ace089b8a8f66e49c35f2ad", &(0x7f00000005c0)="dae536d504bd88537506478a3326857c9d83be26e035ad1d4146ed9a5f5d01f4b322e67d724c6eea280a31ecaa0cc7344f7b08e44ec28742ecd95d73bbb1867d3347cfed11df57d53b998c4df251080e60f59d2f4bbaef735201366bb8a16fc32adf0640af92af5cc225199b6451ac4533e80bd22dc543eedb1134a03816b426"}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getdents$auto(r2, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f0000000700)={[0x1a, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon13\x00', 0x400000, 0x0) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) 279.50653ms ago: executing program 3 (id=129): mmap$auto(0x0, 0x202000c, 0x1, 0xeb1, 0xffffffffffffffff, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x9, 0xa, 0x843, 0x7fffffffffffff, 0x10000007) getpgid$auto(0xffffffffffffffff) mmap$auto(0x3, 0x8001, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x880080, 0x0) bpf$auto(0x40000e, &(0x7f0000000380)=@bpf_attr_4={0x2, r0, 0x40001, r0}, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r2 = open(0x0, 0x222ac2, 0x5d745cb200ae4d73) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x4000, 0x0) read$auto(r3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x4, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) read$auto(r5, 0x0, 0xf30) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/kvm/guest_mode\x00', 0x300, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0xfffffffffffffff9) r6 = gettid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x400454d8, 0x10) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x28000, 0x0) read$auto_mon_fops_text_t_mon_text(r7, 0x0, 0x0) kill$auto(r6, 0x11) 0s ago: executing program 1 (id=130): arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x140040b0}, 0x24002001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x7, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xfc3201, 0x128) write$auto(0x3, 0x0, 0x100082) r2 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x1b) mmap$auto(0x4, 0x1, 0x9, 0x9b72, 0x2, 0x8000) gettid() open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152) msync$auto(0x5, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) ioprio_set$auto(0x2, 0x800000000, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 96.957678][ T24] cfg80211: failed to load regulatory.db [ 98.268388][ T5819] cgroup: Unknown subsys name 'net' [ 98.410810][ T5819] cgroup: Unknown subsys name 'cpuset' [ 98.420570][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.221994][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.529481][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.542667][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.551465][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.559644][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.576930][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.596080][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.632670][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.642388][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.642479][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.651115][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.665180][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.666500][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.683175][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.691908][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.702444][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.703060][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.717653][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.719287][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.736202][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.744200][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.275734][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 103.392183][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.465958][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 103.629246][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 103.717718][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.725430][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.733709][ T5843] bridge_slave_0: entered allmulticast mode [ 103.741760][ T5843] bridge_slave_0: entered promiscuous mode [ 103.795054][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.802478][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.810080][ T5837] bridge_slave_0: entered allmulticast mode [ 103.817657][ T5837] bridge_slave_0: entered promiscuous mode [ 103.826069][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.833240][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.842000][ T5843] bridge_slave_1: entered allmulticast mode [ 103.849475][ T5843] bridge_slave_1: entered promiscuous mode [ 103.892555][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.900139][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.908113][ T5837] bridge_slave_1: entered allmulticast mode [ 103.916518][ T5837] bridge_slave_1: entered promiscuous mode [ 103.944792][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.952775][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.960088][ T5834] bridge_slave_0: entered allmulticast mode [ 103.967570][ T5834] bridge_slave_0: entered promiscuous mode [ 104.009705][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.027256][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.034473][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.042311][ T5834] bridge_slave_1: entered allmulticast mode [ 104.050478][ T5834] bridge_slave_1: entered promiscuous mode [ 104.077057][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.090000][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.148252][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.206539][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.240420][ T5843] team0: Port device team_slave_0 added [ 104.247254][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.254465][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.261944][ T5841] bridge_slave_0: entered allmulticast mode [ 104.269886][ T5841] bridge_slave_0: entered promiscuous mode [ 104.281089][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.293272][ T5837] team0: Port device team_slave_0 added [ 104.301963][ T5843] team0: Port device team_slave_1 added [ 104.324192][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.331491][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.338887][ T5841] bridge_slave_1: entered allmulticast mode [ 104.346727][ T5841] bridge_slave_1: entered promiscuous mode [ 104.383983][ T5837] team0: Port device team_slave_1 added [ 104.465105][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.472183][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.502354][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.519248][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.532057][ T5834] team0: Port device team_slave_0 added [ 104.539205][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.546390][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.573318][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.588131][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.595116][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.621442][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.635270][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.645401][ T5845] Bluetooth: hci0: command tx timeout [ 104.669617][ T5834] team0: Port device team_slave_1 added [ 104.676275][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.683255][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.709608][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.716130][ T5845] Bluetooth: hci1: command tx timeout [ 104.780206][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.787256][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.813353][ T5845] Bluetooth: hci2: command tx timeout [ 104.818981][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.820362][ T5142] Bluetooth: hci3: command tx timeout [ 104.838909][ T5841] team0: Port device team_slave_0 added [ 104.850305][ T5841] team0: Port device team_slave_1 added [ 104.873069][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.880306][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.906611][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.968485][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.975498][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.002264][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.015908][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.022901][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.048989][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.134782][ T5843] hsr_slave_0: entered promiscuous mode [ 105.142979][ T5843] hsr_slave_1: entered promiscuous mode [ 105.155219][ T5837] hsr_slave_0: entered promiscuous mode [ 105.162647][ T5837] hsr_slave_1: entered promiscuous mode [ 105.169444][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.178126][ T5837] Cannot create hsr debugfs directory [ 105.192416][ T5834] hsr_slave_0: entered promiscuous mode [ 105.199069][ T5834] hsr_slave_1: entered promiscuous mode [ 105.205253][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.213052][ T5834] Cannot create hsr debugfs directory [ 105.337726][ T5841] hsr_slave_0: entered promiscuous mode [ 105.344357][ T5841] hsr_slave_1: entered promiscuous mode [ 105.351023][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.358662][ T5841] Cannot create hsr debugfs directory [ 105.838033][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.855316][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.867278][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.880961][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.952025][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.964974][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.988206][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.999883][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.117629][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.130950][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.162516][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.186460][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.274599][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.283194][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.309332][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.323291][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.335520][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.365412][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.407907][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.415245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.476630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.483838][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.522906][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.618271][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.675171][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.682386][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.693028][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.700198][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.716162][ T5142] Bluetooth: hci0: command tx timeout [ 106.740102][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.796676][ T5142] Bluetooth: hci1: command tx timeout [ 106.823704][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.862333][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.879599][ T5142] Bluetooth: hci3: command tx timeout [ 106.879609][ T5845] Bluetooth: hci2: command tx timeout [ 106.900545][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.907788][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.949397][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.956629][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.990828][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.093114][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.100430][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.130980][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.138230][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.210321][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.332547][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.431573][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.515199][ T5837] veth0_vlan: entered promiscuous mode [ 107.610076][ T5837] veth1_vlan: entered promiscuous mode [ 107.688382][ T5834] veth0_vlan: entered promiscuous mode [ 107.741104][ T5837] veth0_macvtap: entered promiscuous mode [ 107.781838][ T5837] veth1_macvtap: entered promiscuous mode [ 107.793433][ T5834] veth1_vlan: entered promiscuous mode [ 107.862944][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.887771][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.932307][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.953870][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.972124][ T5834] veth0_macvtap: entered promiscuous mode [ 107.983064][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994094][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.004035][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.013020][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.050446][ T5834] veth1_macvtap: entered promiscuous mode [ 108.099074][ T5843] veth0_vlan: entered promiscuous mode [ 108.110951][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.137882][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.162771][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.171839][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.180727][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.189536][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.219316][ T5843] veth1_vlan: entered promiscuous mode [ 108.310564][ T5841] veth0_vlan: entered promiscuous mode [ 108.368505][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.372645][ T5841] veth1_vlan: entered promiscuous mode [ 108.382890][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.408807][ T5843] veth0_macvtap: entered promiscuous mode [ 108.439131][ T5843] veth1_macvtap: entered promiscuous mode [ 108.484527][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.495329][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.553998][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.562634][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.569478][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.577978][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.585624][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.628776][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.649912][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.658958][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.668250][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.678680][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.712482][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.738492][ T5841] veth0_macvtap: entered promiscuous mode [ 108.758339][ T5841] veth1_macvtap: entered promiscuous mode [ 108.796255][ T5142] Bluetooth: hci0: command tx timeout [ 108.843819][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.876004][ T5142] Bluetooth: hci1: command tx timeout [ 108.935647][ T5894] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 108.957135][ T5845] Bluetooth: hci3: command tx timeout [ 108.962697][ T5142] Bluetooth: hci2: command tx timeout [ 108.969657][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.021567][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.030883][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.041674][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.050823][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.073018][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.081592][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.228849][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.264599][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.479010][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.497671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.519798][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.084105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.095908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.146270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.179064][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.191002][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.389697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.399383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.502204][ T5913] vhci_hcd: invalid port number 21 [ 110.595833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 110.604174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 110.745814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.754664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.876449][ T5142] Bluetooth: hci0: command tx timeout [ 110.955969][ T5142] Bluetooth: hci1: command tx timeout [ 111.042222][ T5142] Bluetooth: hci2: command tx timeout [ 111.048183][ T5142] Bluetooth: hci3: command tx timeout [ 111.712018][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.720854][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 112.801179][ T5930] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 112.879958][ T5930] Zero length message leads to an empty skb [ 113.066209][ T5915] < [ 113.466477][ T5942] FAULT_INJECTION: forcing a failure. [ 113.466477][ T5942] name failslab, interval 1, probability 0, space 0, times 1 [ 113.726444][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.3.13 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 113.726492][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.726515][ T5942] Call Trace: [ 113.726527][ T5942] [ 113.726544][ T5942] dump_stack_lvl+0x16c/0x1f0 [ 113.726605][ T5942] should_fail_ex+0x512/0x640 [ 113.726654][ T5942] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 113.726698][ T5942] should_failslab+0xc2/0x120 [ 113.726740][ T5942] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 113.726776][ T5942] ? __proc_create+0xc3/0x8c0 [ 113.726823][ T5942] ? __proc_create+0x2ce/0x8c0 [ 113.726868][ T5942] __proc_create+0x2ce/0x8c0 [ 113.726908][ T5942] ? __pfx___proc_create+0x10/0x10 [ 113.726952][ T5942] ? __pfx___netlink_kernel_create+0x10/0x10 [ 113.727007][ T5942] proc_create_reg+0x7d/0x180 [ 113.727051][ T5942] proc_create_net_data+0x8e/0x1b0 [ 113.727093][ T5942] ? __pfx_proc_create_net_data+0x10/0x10 [ 113.727130][ T5942] ? __pfx_uevent_net_rcv+0x10/0x10 [ 113.727176][ T5942] ? __pfx_proto_init_net+0x10/0x10 [ 113.727226][ T5942] proto_init_net+0x53/0x70 [ 113.727275][ T5942] ops_init+0x1e2/0x5f0 [ 113.727323][ T5942] setup_net+0x21e/0x850 [ 113.727383][ T5942] ? __pfx_setup_net+0x10/0x10 [ 113.727422][ T5942] ? lockdep_init_map_type+0x5c/0x280 [ 113.727466][ T5942] ? __pfx_down_read_killable+0x10/0x10 [ 113.727514][ T5942] ? debug_mutex_init+0x37/0x70 [ 113.727548][ T5942] copy_net_ns+0x2a6/0x5f0 [ 113.727595][ T5942] create_new_namespaces+0x3ea/0xad0 [ 113.727640][ T5942] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 113.727680][ T5942] ksys_unshare+0x45b/0xa40 [ 113.727724][ T5942] ? __pfx_ksys_unshare+0x10/0x10 [ 113.727764][ T5942] ? xfd_validate_state+0x5d/0x180 [ 113.727803][ T5942] ? rcu_is_watching+0x12/0xc0 [ 113.727842][ T5942] __x64_sys_unshare+0x31/0x40 [ 113.727884][ T5942] do_syscall_64+0xcd/0x230 [ 113.727934][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.727966][ T5942] RIP: 0033:0x7fe80f78e969 [ 113.727990][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.728019][ T5942] RSP: 002b:00007fe8105ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.728047][ T5942] RAX: ffffffffffffffda RBX: 00007fe80f9b5fa0 RCX: 00007fe80f78e969 [ 113.728066][ T5942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 113.728083][ T5942] RBP: 00007fe80f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 113.728101][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.728118][ T5942] R13: 0000000000000000 R14: 00007fe80f9b5fa0 R15: 00007fffb7ec71e8 [ 113.728158][ T5942] [ 117.674140][ T5982] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.754767][ T5982] CIFS mount error: No usable UNC path provided in device string! [ 117.754767][ T5982] [ 117.809946][ T5982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.619629][ T5993] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 119.922764][ T6010] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 119.972328][ T5992] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 120.194318][ T6017] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 120.656198][ T6022] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 121.369336][ T6025] mmap: syz.0.28 (6025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.976279][ T6047] : Can't lookup blockdev [ 124.683029][ T6073] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 125.369539][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.792631][ T6088] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 127.004369][ T6098] vhci_hcd: invalid port number 21 [ 128.391256][ T6116] : Can't lookup blockdev [ 130.359168][ T6133] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 131.941036][ T6153] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 132.628146][ T6158] : Can't lookup blockdev [ 133.938505][ T6166] FAULT_INJECTION: forcing a failure. [ 133.938505][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 133.952304][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.3.56 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 133.952345][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.952364][ T6166] Call Trace: [ 133.952374][ T6166] [ 133.952386][ T6166] dump_stack_lvl+0x16c/0x1f0 [ 133.952445][ T6166] should_fail_ex+0x512/0x640 [ 133.952495][ T6166] ? fs_reclaim_acquire+0xae/0x150 [ 133.952548][ T6166] ? tomoyo_encode2+0x100/0x3e0 [ 133.952612][ T6166] should_failslab+0xc2/0x120 [ 133.952653][ T6166] __kmalloc_noprof+0xd2/0x510 [ 133.952690][ T6166] ? d_absolute_path+0x136/0x1a0 [ 133.952739][ T6166] tomoyo_encode2+0x100/0x3e0 [ 133.952794][ T6166] tomoyo_encode+0x29/0x50 [ 133.952841][ T6166] tomoyo_realpath_from_path+0x18f/0x6e0 [ 133.952902][ T6166] tomoyo_path_number_perm+0x245/0x580 [ 133.952942][ T6166] ? tomoyo_path_number_perm+0x237/0x580 [ 133.952983][ T6166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.953071][ T6166] ? find_held_lock+0x2b/0x80 [ 133.953104][ T6166] ? hook_file_ioctl_common+0x145/0x410 [ 133.953154][ T6166] ? __fget_files+0x20e/0x3c0 [ 133.953203][ T6166] security_file_ioctl+0x9b/0x240 [ 133.953249][ T6166] __x64_sys_ioctl+0xb7/0x200 [ 133.953299][ T6166] do_syscall_64+0xcd/0x230 [ 133.953354][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.953386][ T6166] RIP: 0033:0x7fe80f78e969 [ 133.953412][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.953452][ T6166] RSP: 002b:00007fe81058b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.953484][ T6166] RAX: ffffffffffffffda RBX: 00007fe80f9b6080 RCX: 00007fe80f78e969 [ 133.953505][ T6166] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 133.953524][ T6166] RBP: 00007fe80f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 133.953544][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.953564][ T6166] R13: 0000000000000000 R14: 00007fe80f9b6080 R15: 00007fffb7ec71e8 [ 133.953608][ T6166] [ 133.953637][ T6166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.407103][ T6193] FAULT_INJECTION: forcing a failure. [ 136.407103][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 136.472953][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.3.61 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 136.472996][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.473015][ T6193] Call Trace: [ 136.473025][ T6193] [ 136.473038][ T6193] dump_stack_lvl+0x16c/0x1f0 [ 136.473095][ T6193] should_fail_ex+0x512/0x640 [ 136.473143][ T6193] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 136.473187][ T6193] should_failslab+0xc2/0x120 [ 136.473227][ T6193] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 136.473264][ T6193] ? alloc_inode+0x61/0x240 [ 136.473302][ T6193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.473355][ T6193] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 136.473398][ T6193] alloc_inode+0x61/0x240 [ 136.473439][ T6193] new_inode+0x22/0x1c0 [ 136.473504][ T6193] __rpc_create_common+0x57/0x2f0 [ 136.473561][ T6193] rpc_populate.constprop.0+0x20a/0x5d0 [ 136.473623][ T6193] rpc_fill_super+0x485/0x840 [ 136.473672][ T6193] ? sget_fc+0x808/0xc20 [ 136.473707][ T6193] ? __pfx_rpc_fill_super+0x10/0x10 [ 136.473769][ T6193] get_tree_keyed+0x10e/0x1d0 [ 136.473805][ T6193] vfs_get_tree+0x8e/0x340 [ 136.473853][ T6193] vfs_cmd_create+0xd7/0x2a0 [ 136.473907][ T6193] __do_sys_fsconfig+0x7b8/0xbe0 [ 136.473950][ T6193] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 136.473987][ T6193] ? xfd_validate_state+0x5d/0x180 [ 136.474022][ T6193] ? rcu_is_watching+0x12/0xc0 [ 136.474066][ T6193] do_syscall_64+0xcd/0x230 [ 136.474120][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.474152][ T6193] RIP: 0033:0x7fe80f78e969 [ 136.474176][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.474207][ T6193] RSP: 002b:00007fe8105ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 136.474236][ T6193] RAX: ffffffffffffffda RBX: 00007fe80f9b5fa0 RCX: 00007fe80f78e969 [ 136.474256][ T6193] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 136.474275][ T6193] RBP: 00007fe80f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.474294][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.474313][ T6193] R13: 0000000000000000 R14: 00007fe80f9b5fa0 R15: 00007fffb7ec71e8 [ 136.474356][ T6193] [ 136.474368][ T6193] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 136.718267][ T6193] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX [ 136.760179][ T6200] warning: `syz.0.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.933331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.940902][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.484283][ T6216] Invalid ELF header magic: != ELF [ 140.054731][ T6216] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 140.653122][ T6245] [U] [ 140.656165][ T6245] [U] [ 140.678693][ T6216] vhci_hcd: invalid port number 21 [ 140.726439][ T6244] [U] [ 141.598576][ T6267] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 143.139906][ T6283] netlink: zone id is out of range [ 143.172050][ T6283] netlink: zone id is out of range [ 145.020218][ T6308] Invalid ELF header magic: != ELF [ 145.733980][ T6321] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 146.506910][ T6309] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 146.580335][ T6309] vhci_hcd: invalid port number 21 [ 149.688278][ T6365] netlink: 346 bytes leftover after parsing attributes in process `syz.3.95'. [ 149.708200][ T6365] vhci_hcd: invalid port number 21 [ 149.866986][ T6372] openvswitch: netlink: IPv6 tunnel dst address is zero [ 150.011687][ T6374] FAULT_INJECTION: forcing a failure. [ 150.011687][ T6374] name failslab, interval 1, probability 0, space 0, times 0 [ 150.035697][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.3.98 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 150.035742][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.035761][ T6374] Call Trace: [ 150.035771][ T6374] [ 150.035783][ T6374] dump_stack_lvl+0x16c/0x1f0 [ 150.035837][ T6374] should_fail_ex+0x512/0x640 [ 150.035905][ T6374] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 150.035944][ T6374] should_failslab+0xc2/0x120 [ 150.036000][ T6374] __kmalloc_cache_noprof+0x6a/0x3e0 [ 150.036030][ T6374] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 150.036079][ T6374] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 150.036129][ T6374] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 150.036189][ T6374] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 150.036247][ T6374] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 150.036300][ T6374] ? __asan_memset+0x23/0x50 [ 150.036328][ T6374] ? calc_src_frames.isra.0+0x187/0x1d0 [ 150.036377][ T6374] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 150.036421][ T6374] snd_pcm_oss_change_params_locked+0x1398/0x3b40 [ 150.036497][ T6374] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 150.036574][ T6374] ? snd_pcm_oss_sync+0x30c/0x840 [ 150.036652][ T6374] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 150.036708][ T6374] snd_pcm_oss_sync+0x32e/0x840 [ 150.036765][ T6374] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 150.036819][ T6374] snd_pcm_oss_release+0x28b/0x310 [ 150.036873][ T6374] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 150.036925][ T6374] __fput+0x402/0xb70 [ 150.036977][ T6374] task_work_run+0x150/0x240 [ 150.037028][ T6374] ? __pfx_task_work_run+0x10/0x10 [ 150.037080][ T6374] ? __pfx___do_sys_close_range+0x10/0x10 [ 150.037112][ T6374] ? rcu_is_watching+0x12/0xc0 [ 150.037152][ T6374] syscall_exit_to_user_mode+0x27b/0x2a0 [ 150.037203][ T6374] do_syscall_64+0xda/0x230 [ 150.037257][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.037291][ T6374] RIP: 0033:0x7fe80f78e969 [ 150.037316][ T6374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.037345][ T6374] RSP: 002b:00007fe8105ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 150.037376][ T6374] RAX: 0000000000000000 RBX: 00007fe80f9b5fa0 RCX: 00007fe80f78e969 [ 150.037396][ T6374] RDX: 0000000000000000 RSI: 0000000000008000 RDI: 0000000000000001 [ 150.037414][ T6374] RBP: 00007fe80f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 150.037433][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.037451][ T6374] R13: 0000000000000000 R14: 00007fe80f9b5fa0 R15: 00007fffb7ec71e8 [ 150.037494][ T6374] [ 151.066625][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 151.454451][ T6398] : Can't lookup blockdev syzkaller syzkaller login: [ 155.709504][ T6458] : Can't lookup blockdev [ 156.190612][ T6466] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(12.0.7), cmd(5) [ 159.280675][ T6513] process 'syz.0.125' launched ':,' with NULL argv: empty string added [ 159.772570][ T6534] : Can't lookup blockdev [ 160.066128][ T6537] [ 160.068522][ T6537] ====================================================== [ 160.075562][ T6537] WARNING: possible circular locking dependency detected [ 160.082603][ T6537] 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 Not tainted [ 160.089737][ T6537] ------------------------------------------------------ [ 160.096798][ T6537] syz.3.129/6537 is trying to acquire lock: [ 160.102720][ T6537] ffff888025f39958 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 160.112636][ T6537] [ 160.112636][ T6537] but task is already holding lock: [ 160.120019][ T6537] ffff888025f39428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 160.131351][ T6537] [ 160.131351][ T6537] which lock already depends on the new lock. [ 160.131351][ T6537] [ 160.141771][ T6537] [ 160.141771][ T6537] the existing dependency chain (in reverse order) is: [ 160.150797][ T6537] [ 160.150797][ T6537] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 160.159475][ T6537] blk_alloc_queue+0x619/0x760 [ 160.164794][ T6537] blk_mq_alloc_queue+0x179/0x290 [ 160.170381][ T6537] __blk_mq_alloc_disk+0x29/0x120 [ 160.175970][ T6537] loop_add+0x496/0xb70 [ 160.180680][ T6537] loop_init+0x164/0x270 [ 160.185482][ T6537] do_one_initcall+0x120/0x6e0 [ 160.190824][ T6537] kernel_init_freeable+0x5c2/0x900 [ 160.196577][ T6537] kernel_init+0x1c/0x2b0 [ 160.201459][ T6537] ret_from_fork+0x48/0x80 [ 160.206411][ T6537] ret_from_fork_asm+0x1a/0x30 [ 160.211723][ T6537] [ 160.211723][ T6537] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 160.218969][ T6537] fs_reclaim_acquire+0x102/0x150 [ 160.224575][ T6537] kmem_cache_alloc_noprof+0x53/0x3b0 [ 160.230519][ T6537] __kernfs_new_node+0xd2/0x8a0 [ 160.235936][ T6537] kernfs_new_node+0x13c/0x1e0 [ 160.241238][ T6537] kernfs_create_dir_ns+0x4c/0x1a0 [ 160.246994][ T6537] sysfs_create_dir_ns+0x13a/0x2b0 [ 160.252690][ T6537] kobject_add_internal+0x2c4/0x9b0 [ 160.258429][ T6537] kobject_add+0x16e/0x240 [ 160.263388][ T6537] elv_register_queue+0xd3/0x2a0 [ 160.268961][ T6537] blk_register_queue+0x3c4/0x560 [ 160.274534][ T6537] add_disk_fwnode+0x911/0x13a0 [ 160.279946][ T6537] nbd_dev_add+0x78e/0xbb0 [ 160.284923][ T6537] nbd_init+0x181/0x320 [ 160.289657][ T6537] do_one_initcall+0x120/0x6e0 [ 160.294990][ T6537] kernel_init_freeable+0x5c2/0x900 [ 160.300756][ T6537] kernel_init+0x1c/0x2b0 [ 160.305638][ T6537] ret_from_fork+0x48/0x80 [ 160.310604][ T6537] ret_from_fork_asm+0x1a/0x30 [ 160.315930][ T6537] [ 160.315930][ T6537] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 160.323781][ T6537] __lock_acquire+0x1173/0x1ba0 [ 160.329180][ T6537] lock_acquire+0x179/0x350 [ 160.334230][ T6537] __mutex_lock+0x199/0xb90 [ 160.339288][ T6537] queue_requests_store+0x1c7/0x310 [ 160.345042][ T6537] queue_attr_store+0x273/0x310 [ 160.350521][ T6537] sysfs_kf_write+0xf2/0x150 [ 160.355705][ T6537] kernfs_fop_write_iter+0x351/0x510 [ 160.361540][ T6537] vfs_write+0x5ba/0x1180 [ 160.366425][ T6537] ksys_write+0x12a/0x240 [ 160.371315][ T6537] do_syscall_64+0xcd/0x230 [ 160.376395][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.382844][ T6537] [ 160.382844][ T6537] other info that might help us debug this: [ 160.382844][ T6537] [ 160.393086][ T6537] Chain exists of: [ 160.393086][ T6537] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 160.393086][ T6537] [ 160.406957][ T6537] Possible unsafe locking scenario: [ 160.406957][ T6537] [ 160.414420][ T6537] CPU0 CPU1 [ 160.419806][ T6537] ---- ---- [ 160.425181][ T6537] lock(&q->q_usage_counter(io)#29); [ 160.430590][ T6537] lock(fs_reclaim); [ 160.437113][ T6537] lock(&q->q_usage_counter(io)#29); [ 160.445033][ T6537] lock(&q->elevator_lock); [ 160.449643][ T6537] [ 160.449643][ T6537] *** DEADLOCK *** [ 160.449643][ T6537] [ 160.457792][ T6537] 6 locks held by syz.3.129/6537: [ 160.462843][ T6537] #0: ffff888032ba3b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 160.471962][ T6537] #1: ffff888036542420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 160.480982][ T6537] #2: ffff888032a44c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 160.490788][ T6537] #3: ffff888025b0f878 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 160.500866][ T6537] #4: ffff888025f39428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 160.512596][ T6537] #5: ffff888025f39460 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 160.524596][ T6537] [ 160.524596][ T6537] stack backtrace: [ 160.530498][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.3.129 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 160.530533][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.530549][ T6537] Call Trace: [ 160.530558][ T6537] [ 160.530568][ T6537] dump_stack_lvl+0x116/0x1f0 [ 160.530617][ T6537] print_circular_bug+0x275/0x350 [ 160.530653][ T6537] check_noncircular+0x14c/0x170 [ 160.530691][ T6537] __lock_acquire+0x1173/0x1ba0 [ 160.530733][ T6537] lock_acquire+0x179/0x350 [ 160.530767][ T6537] ? queue_requests_store+0x1c7/0x310 [ 160.530796][ T6537] ? __pfx___might_resched+0x10/0x10 [ 160.530828][ T6537] ? do_raw_spin_lock+0x12c/0x2b0 [ 160.530871][ T6537] __mutex_lock+0x199/0xb90 [ 160.530911][ T6537] ? queue_requests_store+0x1c7/0x310 [ 160.530940][ T6537] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 160.530977][ T6537] ? queue_requests_store+0x1c7/0x310 [ 160.531003][ T6537] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.531042][ T6537] ? __pfx___mutex_lock+0x10/0x10 [ 160.531087][ T6537] ? __pfx_autoremove_wake_function+0x10/0x10 [ 160.531125][ T6537] ? queue_requests_store+0x1c7/0x310 [ 160.531151][ T6537] queue_requests_store+0x1c7/0x310 [ 160.531179][ T6537] ? __pfx_queue_requests_store+0x10/0x10 [ 160.531209][ T6537] ? __mutex_trylock_common+0xe9/0x250 [ 160.531246][ T6537] ? __pfx_queue_requests_store+0x10/0x10 [ 160.531273][ T6537] queue_attr_store+0x273/0x310 [ 160.531299][ T6537] ? __pfx_queue_attr_store+0x10/0x10 [ 160.531332][ T6537] ? find_held_lock+0x2b/0x80 [ 160.531358][ T6537] ? sysfs_file_kobj+0xe4/0x290 [ 160.531409][ T6537] ? __pfx_queue_attr_store+0x10/0x10 [ 160.531433][ T6537] sysfs_kf_write+0xf2/0x150 [ 160.531471][ T6537] kernfs_fop_write_iter+0x351/0x510 [ 160.531504][ T6537] ? __pfx_sysfs_kf_write+0x10/0x10 [ 160.531544][ T6537] vfs_write+0x5ba/0x1180 [ 160.531569][ T6537] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 160.531611][ T6537] ? __pfx___mutex_lock+0x10/0x10 [ 160.531650][ T6537] ? __pfx_vfs_write+0x10/0x10 [ 160.531685][ T6537] ksys_write+0x12a/0x240 [ 160.531709][ T6537] ? __pfx_ksys_write+0x10/0x10 [ 160.531733][ T6537] ? rcu_is_watching+0x12/0xc0 [ 160.531762][ T6537] do_syscall_64+0xcd/0x230 [ 160.531804][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.531836][ T6537] RIP: 0033:0x7fe80f78e969 [ 160.531857][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.531882][ T6537] RSP: 002b:00007fe8105ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.531905][ T6537] RAX: ffffffffffffffda RBX: 00007fe80f9b5fa0 RCX: 00007fe80f78e969 [ 160.531922][ T6537] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.531937][ T6537] RBP: 00007fe80f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 160.531953][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.531967][ T6537] R13: 0000000000000000 R14: 00007fe80f9b5fa0 R15: 00007fffb7ec71e8 [ 160.531991][ T6537] [ 160.889405][ T6540] random: crng reseeded on system resumption [ 160.899278][ T6540] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 160.912221][ T6540] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 160.921299][ T6540] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 161.018416][ T6540] PM: hibernation: Basic memory bitmaps created [ 161.126640][ T6539] PM: hibernation: Basic memory bitmaps freed