last executing test programs: 11.204654734s ago: executing program 0 (id=40): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="b2", 0x1) 10.782049014s ago: executing program 2 (id=42): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r2, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_tracing_saved_cmdlines_fops_trace(r3, 0x0, 0x0) write$auto(0xca, 0x0, 0x2b) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) semctl$auto_GETNCNT(0xfffffffa, 0x9, 0xe, 0xb) sendfile$auto(r4, r2, 0x0, 0x7fffe000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) 9.606018108s ago: executing program 0 (id=43): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r2, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 9.504865444s ago: executing program 1 (id=44): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x8a302, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 9.504653846s ago: executing program 2 (id=46): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x24600, 0x0) socket(0x2, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80000541b, 0x38) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0xffffffffffffffff, 0x2, 0x5, 0x0, 0x10000009) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x87, 0x6d3e, 0x9, 0x2, 0x4000000006]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7.918830625s ago: executing program 2 (id=48): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305615, 0x38) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) pivot_root$auto(0x0, 0x0) munmap$auto(0x1, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xe0, 0x968a, 0x7, 0x15f4da07, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x1, 0x80080000002, 0x7fffffff, 0x2, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 7.918143288s ago: executing program 0 (id=57): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) 6.74630783s ago: executing program 2 (id=49): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000001c0)="c3d20df38790e77baef236bc4227352d3cb76be7bcc8016bff7a1c62d937b22604e156b6807d34888b4bad0bdb9d115fd752490be738483766e826ee4525226ffa0778da3625a22cc86293c7c922068f99336c0da32f17a3c5bf8678f08f0ab91fcd80c2c0fe0bd7c87fcd5d0597ed37b259c2fe320eef804a449569df14e7267df0012bfc7c6cc451830a1b14cbaff482cbefa89e1b96a9d85abdfa611a7ed864f21602339bae8ed74b4929a3506eb6cd56abd7801270bd66d589bfb2dc3d775ef3c3960cff5cda4d5046452ce2ed09a008800513bfbbba0cb4f828714eb03a2cb9449c247d44c8e272c6fea09748", 0xe) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) 6.746166926s ago: executing program 3 (id=51): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/psaux\x00', 0x48100, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x890) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0x6, &(0x7f0000000180)={[0x2, 0x0, 0x8001, 0xffffffff, 0x2, 0xffffffffffffffff, 0x6, 0x4, 0x7, 0x9, 0x101, 0xfffffffffffffff9, 0x66, 0x1, 0xe7, 0x1]}, &(0x7f0000000240)={[0x9, 0x8, 0xde, 0x7, 0x8, 0x101, 0x2, 0x7, 0x6, 0x6c000000, 0x2, 0x6, 0x2, 0xbe, 0x400000000, 0x2]}, &(0x7f00000003c0)={[0xb49f, 0x1, 0x9, 0x5, 0x8, 0x5, 0x5, 0x0, 0x1, 0x140000000000, 0x7f, 0xff, 0xa, 0x1, 0x7, 0x5]}, &(0x7f0000000340)={0x957f, 0xff}, &(0x7f0000001100)="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") 6.740505057s ago: executing program 1 (id=52): shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0xdec, 0x5, 0xa5, 0x7}, 0x5, 0x5b, 0xfffffffffffffffc, 0x682, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x63f, 0x0, &(0x7f00000001c0)="029fb61e8bf880faf81027e520b3adf48399973e055347f4030b39b57fb334db07a4e318ff4cee953d8a6fbb06562f05e3d21a98d583886f5bd191686fe750fb841c2ad3bc5d0563e8ba264b5f72133bb785edf7a827d0fc1e17f7ffc9944120f0e23b84d430d8ef4bf218eda0bddbcf8142813a76e32bf9feb08d3b2da03604757efab39be26480528bc0e7500e32542ac7fdab5315efdd4fe5502f0347faa7809a952f0a1b8a17abea4a4b4a31489541616765ec5f2ae5bd2bb358b167baea3bdb966ae73fc3067fbe225b2c7a", &(0x7f0000000380)="799e926014af5f06f0a25425ba9f4c71d658b1e59c9476e8a2ba22ab9f44f4e83e217feefafe5d44d72cb9e978e6310e621698cd35eec4872652a53f9c7198bc7ab411cc52ae463eed01592f60ab9c874185fddb4cc1c419e7a97b2681be55f679d15e698465ea676f62e5722f5827774650694e5247d5e7e7fc56f2b392a01f3ca44699e78c6b457d30712cd67ae6a5458776ccdc81d262fbf074af47305887f250c061e5f071c5c186eb0cfa13088b88f2601c2c0de534f9ca70c9cd3b92f69284f11a92e7711b35080ee6cd7639eb1fe7f3f621038e"}) 6.444641638s ago: executing program 3 (id=53): r0 = socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x440, 0x3a02, 0xdf, 0x9b72, r0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000007, 0x4}, 0x800}, 0x200, 0x4008) r1 = socket(0x9, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESOCT], 0x1ac}, 0x1, 0x0, 0x0, 0x4004084}, 0x4c041) r2 = socket(0x27, 0x80000, 0x4) setsockopt$auto(r2, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x42100, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffe01, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x7, 0x9, 0x5, 0x0, 0x8004, 0xb0, 0x7, 0x1, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0x10, 0x2, 0x0) getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) 6.333696346s ago: executing program 1 (id=54): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r2, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_tracing_saved_cmdlines_fops_trace(r3, 0x0, 0x0) write$auto(0xca, 0x0, 0x2b) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) semctl$auto_GETNCNT(0xfffffffa, 0x9, 0xe, 0xb) sendfile$auto(r4, r2, 0x0, 0x7fffe000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) 6.28588735s ago: executing program 0 (id=55): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r2, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 6.136449426s ago: executing program 3 (id=56): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x648, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x61b, 0x33, "afa6e0335f4a2c0c9b03ed037529ed1f8c19df0534c0c618363857d371dfe3575f074ed09281c32a0f2392027bee6d0506bdc9f52f16c9cddce2ee2bf411b5c37071c69297cbc252870e10ae089076ebd6ce5e42336573f7457224fb6e4d5cbc4b2847351ae8b9723b261b5876aa693b1f99786a8aff10d220aadda3c7f68a53903dbf2891b524fb9d9f1935f6873af22229e32a71276fac61cfbb99a0e9896735a111f46a73d9141b874444d253c3bcc98c2eddc451cb222af5ff8bdf0222e89524e44e1550d57f65061818b2e64ed23cbadd4cd35c4e675a6c76c93487649d5e120e876eef7d33bda62ec8ff4194ac957e81ef9aea0f96d44b4d7d28d0a90f3f3f1ab2302188a33eba4baeb8a36328ff04c2f77de5f5c1a202b358ced0d7ea41158c3745dc867e377ecadeccfcd5b8b519bef4dabe08dc5d923fb1a0bcfb63eb4c8e2143c4d2132e5e9c82712afab78723dc43d092eeb8a1bf619dd7d7c27b9785b953d4506d0d5207f3e8b76284b7749045ca2b5f062013c53f35be3e4489a1b8e3232314c86fbe18a58751f0b58219c53c1907daa47745badd8947431a66134913519262c65969aae0a78e040810ad130354b65c729754e9af226114904d39c5b24eaf02702067fdae7ae01c7fb58aa834b3d815caabb1761ba0d83cf8d53502a268b63fc3501fb67ded5c1b1482367ee4f5214303dc652abe046ce1abf20a3f49e1036026d77c132d332e98878ea17bd994e882becd6fc52d9fd91260ef25c204390f2c88c9e8cccd2d3f51bb9a93f0765f02dd8422bd3715b1205811f72ef91397fd5ab58f60cd10542ef3fa257e6cb0c311287b1af50dac0fb5614eaa5e67563c8efd9e89bb8fc2d7c6c4f64e95768bed149a69a345aadb64c89bb9e4bec361d74bef891543a5c8ba242c434b476bad123aece2a552ad43999907b425f4df57d3e4ca2c2b865568e619be2ef134718b47b6055a0bcc8ea64ff4ebc05339f5481e3c6fceadbd6f4126ccca4fb0e6b2303c4ec0d591cb45a076706a700ff34ad1c569fd11674bcbab1228132f1bfe192d138f25ec2520da501ed6e583492447734f69fa581e64a96f90582f9d757e391c0d33ce8250cc7c9e0d3651801cb285c9eee5bd0224d388dddf8527e49ca9030fd7955e93e3365f9602b4a4ef1aaca177e44e7f1142c8ec0015f2b505a775afe9ae820df18adaad4b3924d8033965991fe1e59acbbad440bc64b3198a4eae215fd32283be418b6ee791a89eaf386422aed1ca9a18a0220f88a7609d536ffd7db73c9654cbe7a7835668771f8f2f98d58cf1d60cff1004ee2fb4c394bf3b48d0232866d382ceeae8f340bddb3ac677edc560982312ac13bf765db179a235e47ec0747d428fe273fda500641154f168cad55351172f93a970ccf26626ec89d52f64d89f0d7456212854f35542794264126abf75567f56cf0081de22def6305d279b2aabdb91ac0813ccd0a4e87dd63b3188cc10a3eee94e7af67e2ab5070bc5e639a204af69b49aef29b61c7efd1a9f4b6bc51659aeb399b34cf21dc827259991979828515c776d86f06cf69ea710e6be91ec0ea9e46e9d08e07ad2ab67a4b43e2d0763a4673a8002df95761309b011b25a6effab4da60e599c27e263394328da81b0af4ebcd6d838c1a9ff729482681115b4964be42bb4b8d8855c71450e9c48999e195227f41eb0fde516123e1da39f0db125045c3e5dadbfba05b329cf3d02dbd9fa01c75856ee233ef96b5e61f845560c640758d3883bb7ca2da85c9c5c15dc0f4033bc8140ec0965f91a4be0692c0348a3cc38fbac8a0e6db18433aeb3f05921c5cf614be4754f76c9e3323026a646d89a7a894e1b493a999af49864886b6ed68ce635ba2eeff167e99ac5fa5696aca29f1517b47f460151ca4b9afb34cc5ffbeb037ece8de9d223d8a1124b6c0ce000928070c021dc17499c9313264903ccc5ba90f9b0eb3c1617cb53c8192a7e2d12c566c83ac35ee265bd5bafb2b3208af0cc938e8306a45b50ccd17ee5e59fbfcf30c09185c2d84db35e05190a3251c097c288d5bfd800f2fc5e60aaaaa7bb297e39e40dfc35da14b1ffa060ed3f02722f35e345e7ad453e6758b5ec8ef2ebd3a57413a1ea68df9684dc4dda5bdeaf81ec602fee0057dfa42fe9bcd7f571e906b31c4044c07070a0cdfab85594b18c54691b269a"}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x9}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}]}, 0x648}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 5.237223031s ago: executing program 1 (id=58): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 5.073171163s ago: executing program 0 (id=59): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0xc) 5.058830898s ago: executing program 3 (id=67): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x648, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x61b, 0x33, "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"}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x9}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}]}, 0x648}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 2.414755163s ago: executing program 0 (id=60): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40000a, 0x3, 0x20000000009b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto_SO_RXQ_OVFL(r0, 0xffff, 0x28, 0x0, &(0x7f0000000280)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, &(0x7f0000000340)={0xffffffff, 0x5e9e}) readv$auto(0x3, 0x0, 0x1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) sendfile$auto(r1, r1, 0x0, 0x7fff) 2.414134831s ago: executing program 1 (id=61): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305615, 0x38) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) pivot_root$auto(0x0, 0x0) munmap$auto(0x1, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xe0, 0x968a, 0x7, 0x15f4da07, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x1, 0x80080000002, 0x7fffffff, 0x2, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 2.413967526s ago: executing program 2 (id=62): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r2, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 2.413818096s ago: executing program 3 (id=63): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x14d27e, 0x72) socket(0x1e, 0x1, 0x0) r3 = fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, 0x0) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x7fffffff, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 1.206575709s ago: executing program 2 (id=64): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x0, 0x5d77, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) open(0x0, 0x22240, 0x155) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0xa801, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8000, 0x0) getdents$auto(r3, 0x0, 0xde) setsockopt$auto(r2, 0x0, 0x20, 0x0, 0x20000b) 756.346431ms ago: executing program 3 (id=65): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) 0s ago: executing program 1 (id=66): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F 1 [ 95.649404][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.657197][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.665020][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.672713][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.680639][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.695968][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.702372][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.710974][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.718437][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.719524][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.733742][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.750405][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.782979][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.785023][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.809448][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.818184][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.821189][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.826734][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.840312][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.361670][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 96.452981][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 96.574389][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 96.606454][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 96.665944][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.673639][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.681138][ T5847] bridge_slave_0: entered allmulticast mode [ 96.689314][ T5847] bridge_slave_0: entered promiscuous mode [ 96.740876][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.748398][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.755709][ T5847] bridge_slave_1: entered allmulticast mode [ 96.762835][ T5847] bridge_slave_1: entered promiscuous mode [ 96.817227][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.824418][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.834059][ T5853] bridge_slave_0: entered allmulticast mode [ 96.841568][ T5853] bridge_slave_0: entered promiscuous mode [ 96.884208][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.893920][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.901987][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.909673][ T5853] bridge_slave_1: entered allmulticast mode [ 96.917496][ T5853] bridge_slave_1: entered promiscuous mode [ 96.926287][ T24] cfg80211: failed to load regulatory.db [ 96.963125][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.986658][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.994044][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.001689][ T5851] bridge_slave_0: entered allmulticast mode [ 97.010001][ T5851] bridge_slave_0: entered promiscuous mode [ 97.018312][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.025409][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.032806][ T5851] bridge_slave_1: entered allmulticast mode [ 97.040392][ T5851] bridge_slave_1: entered promiscuous mode [ 97.083856][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.095956][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.147632][ T5847] team0: Port device team_slave_0 added [ 97.181198][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.190439][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.197683][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.204833][ T5856] bridge_slave_0: entered allmulticast mode [ 97.212564][ T5856] bridge_slave_0: entered promiscuous mode [ 97.223667][ T5847] team0: Port device team_slave_1 added [ 97.245417][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.254788][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.262079][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.269552][ T5856] bridge_slave_1: entered allmulticast mode [ 97.277586][ T5856] bridge_slave_1: entered promiscuous mode [ 97.298576][ T5853] team0: Port device team_slave_0 added [ 97.344599][ T5853] team0: Port device team_slave_1 added [ 97.359827][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.366897][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.393680][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.407831][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.414805][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.440942][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.498944][ T5851] team0: Port device team_slave_0 added [ 97.508034][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.532205][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.539494][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.566160][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.579453][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.586817][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.613015][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.627089][ T5851] team0: Port device team_slave_1 added [ 97.642617][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.691281][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.698327][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.724618][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.767138][ T5856] team0: Port device team_slave_0 added [ 97.773864][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.781561][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.807801][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.818939][ T5854] Bluetooth: hci0: command tx timeout [ 97.854735][ T5856] team0: Port device team_slave_1 added [ 97.876075][ T5854] Bluetooth: hci2: command tx timeout [ 97.876341][ T5861] Bluetooth: hci3: command tx timeout [ 97.896334][ T5847] hsr_slave_0: entered promiscuous mode [ 97.902750][ T5847] hsr_slave_1: entered promiscuous mode [ 97.945121][ T5853] hsr_slave_0: entered promiscuous mode [ 97.952012][ T5853] hsr_slave_1: entered promiscuous mode [ 97.957798][ T5861] Bluetooth: hci1: command tx timeout [ 97.964145][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.971982][ T5853] Cannot create hsr debugfs directory [ 97.979716][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.987609][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.013885][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.027810][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.034781][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.060978][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.159360][ T5851] hsr_slave_0: entered promiscuous mode [ 98.166343][ T5851] hsr_slave_1: entered promiscuous mode [ 98.172505][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.180153][ T5851] Cannot create hsr debugfs directory [ 98.298811][ T5856] hsr_slave_0: entered promiscuous mode [ 98.305098][ T5856] hsr_slave_1: entered promiscuous mode [ 98.311389][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.319197][ T5856] Cannot create hsr debugfs directory [ 98.730402][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.751416][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.770731][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.791259][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.878337][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.910555][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.924533][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.974339][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.005209][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.020257][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.031935][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.044661][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.149689][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.162774][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.175424][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.186598][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.242985][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.327511][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.355089][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.362516][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.380544][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.387759][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.441720][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.482479][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.522846][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.567916][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.575059][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.592352][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.621658][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.628859][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.663210][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.670532][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.694846][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.702029][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.743222][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.864453][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.876192][ T5861] Bluetooth: hci0: command tx timeout [ 99.904049][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.911316][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.938881][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.946070][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.957035][ T5861] Bluetooth: hci2: command tx timeout [ 99.966514][ T5861] Bluetooth: hci3: command tx timeout [ 100.035794][ T5861] Bluetooth: hci1: command tx timeout [ 100.374418][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.440275][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.547968][ T5847] veth0_vlan: entered promiscuous mode [ 100.594238][ T5847] veth1_vlan: entered promiscuous mode [ 100.607431][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.620015][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.643473][ T5851] veth0_vlan: entered promiscuous mode [ 100.664609][ T5851] veth1_vlan: entered promiscuous mode [ 100.750056][ T5856] veth0_vlan: entered promiscuous mode [ 100.770471][ T5847] veth0_macvtap: entered promiscuous mode [ 100.800110][ T5853] veth0_vlan: entered promiscuous mode [ 100.808448][ T5847] veth1_macvtap: entered promiscuous mode [ 100.827974][ T5856] veth1_vlan: entered promiscuous mode [ 100.835017][ T5851] veth0_macvtap: entered promiscuous mode [ 100.860794][ T5851] veth1_macvtap: entered promiscuous mode [ 100.874472][ T5853] veth1_vlan: entered promiscuous mode [ 100.902978][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.932298][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.960427][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.977891][ T5856] veth0_macvtap: entered promiscuous mode [ 100.987047][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.998291][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.008102][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.017299][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.041302][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.052791][ T5856] veth1_macvtap: entered promiscuous mode [ 101.069444][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.079633][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.089279][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.098427][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.153573][ T5853] veth0_macvtap: entered promiscuous mode [ 101.170418][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.189299][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.199052][ T5853] veth1_macvtap: entered promiscuous mode [ 101.241728][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.251593][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.261616][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.270914][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.305427][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.363036][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.375124][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.387354][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.399675][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.408715][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439831][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.439831][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.439897][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.453453][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.574729][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.584099][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.637216][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.645076][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.699164][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.712070][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.753503][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.824461][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.834920][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.852685][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.868679][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.951277][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.959817][ T5861] Bluetooth: hci0: command tx timeout [ 102.006153][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.037562][ T5861] Bluetooth: hci3: command tx timeout [ 102.043055][ T5861] Bluetooth: hci2: command tx timeout [ 102.115716][ T5861] Bluetooth: hci1: command tx timeout [ 102.566620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.736064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.846427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.854739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.876215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.933335][ T5957] can0: slcan on pty238. [ 103.647187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.656007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.666063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 103.775941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 103.804225][ T5957] can0 (unregistered): slcan off pty238. [ 103.984796][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.025956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.050804][ T5861] Bluetooth: hci0: command tx timeout [ 104.127578][ T5861] Bluetooth: hci2: command tx timeout [ 104.137713][ T5854] Bluetooth: hci3: command tx timeout [ 104.195988][ T5854] Bluetooth: hci1: command tx timeout [ 111.046520][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.811986][ T6125] FAULT_INJECTION: forcing a failure. [ 113.811986][ T6125] name failslab, interval 1, probability 0, space 0, times 1 [ 113.883096][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.2.29 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 113.883125][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.883137][ T6125] Call Trace: [ 113.883143][ T6125] [ 113.883153][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 113.883180][ T6125] should_fail_ex+0x512/0x640 [ 113.883201][ T6125] ? __kmalloc_node_noprof+0xc5/0x500 [ 113.883225][ T6125] should_failslab+0xc2/0x120 [ 113.883249][ T6125] __kmalloc_node_noprof+0xd8/0x500 [ 113.883271][ T6125] ? alloc_slab_obj_exts+0x41/0xa0 [ 113.883306][ T6125] alloc_slab_obj_exts+0x41/0xa0 [ 113.883344][ T6125] __memcg_slab_post_alloc_hook+0x255/0x960 [ 113.883375][ T6125] ? kasan_save_track+0x14/0x30 [ 113.883398][ T6125] kmem_cache_alloc_noprof+0x307/0x3b0 [ 113.883418][ T6125] ? __pfx___might_resched+0x10/0x10 [ 113.883440][ T6125] ? __anon_vma_prepare+0xae/0x5e0 [ 113.883462][ T6125] __anon_vma_prepare+0xae/0x5e0 [ 113.883480][ T6125] ? __pfx___pte_alloc+0x10/0x10 [ 113.883507][ T6125] __vmf_anon_prepare+0x11c/0x240 [ 113.883535][ T6125] __handle_mm_fault+0x27f6/0x5490 [ 113.883575][ T6125] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.883627][ T6125] handle_mm_fault+0x589/0xd10 [ 113.883663][ T6125] __get_user_pages+0x589/0x3b80 [ 113.883701][ T6125] ? __pfx___get_user_pages+0x10/0x10 [ 113.883738][ T6125] get_user_pages_remote+0x258/0xb20 [ 113.883772][ T6125] ? __pfx_get_user_pages_remote+0x10/0x10 [ 113.883799][ T6125] ? __pfx_vma_link+0x10/0x10 [ 113.883828][ T6125] get_arg_page+0xf4/0x310 [ 113.883858][ T6125] ? __pfx_get_arg_page+0x10/0x10 [ 113.883889][ T6125] ? up_write+0x1b2/0x520 [ 113.883924][ T6125] copy_string_kernel+0x180/0x510 [ 113.883962][ T6125] do_execveat_common.isra.0+0x2ed/0x610 [ 113.884013][ T6125] __x64_sys_execve+0x8e/0xb0 [ 113.884061][ T6125] do_syscall_64+0xcd/0x490 [ 113.884093][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.884115][ T6125] RIP: 0033:0x7f03f078e9a9 [ 113.884137][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.884156][ T6125] RSP: 002b:00007f03f164e038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 113.884176][ T6125] RAX: ffffffffffffffda RBX: 00007f03f09b6080 RCX: 00007f03f078e9a9 [ 113.884189][ T6125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 113.884201][ T6125] RBP: 00007f03f0810d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.884213][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.884225][ T6125] R13: 0000000000000000 R14: 00007f03f09b6080 R15: 00007ffea9639448 [ 113.884249][ T6125] [ 113.884342][ T6125] process 'syz.2.29' launched ':,' with NULL argv: empty string added [ 119.947279][ T5854] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 124.213483][ T5854] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 126.130571][ T5854] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 130.389920][ T6381] [ 130.392332][ T6381] ====================================================== [ 130.399392][ T6381] WARNING: possible circular locking dependency detected [ 130.406459][ T6381] 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 Not tainted [ 130.413616][ T6381] ------------------------------------------------------ [ 130.420662][ T6381] syz.2.64/6381 is trying to acquire lock: [ 130.426504][ T6381] ffffffff8e72a5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 130.436138][ T6381] [ 130.436138][ T6381] but task is already holding lock: [ 130.443535][ T6381] ffff8881423aec40 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 130.454832][ T6381] [ 130.454832][ T6381] which lock already depends on the new lock. [ 130.454832][ T6381] [ 130.465253][ T6381] [ 130.465253][ T6381] the existing dependency chain (in reverse order) is: [ 130.474278][ T6381] [ 130.474278][ T6381] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 130.482923][ T6381] blk_alloc_queue+0x619/0x760 [ 130.488253][ T6381] blk_mq_alloc_queue+0x175/0x290 [ 130.493826][ T6381] __blk_mq_alloc_disk+0x29/0x120 [ 130.499387][ T6381] loop_add+0x49e/0xb70 [ 130.504098][ T6381] loop_init+0x164/0x270 [ 130.508901][ T6381] do_one_initcall+0x120/0x6e0 [ 130.514213][ T6381] kernel_init_freeable+0x5c2/0x900 [ 130.519999][ T6381] kernel_init+0x1c/0x2b0 [ 130.524912][ T6381] ret_from_fork+0x5d4/0x6f0 [ 130.530064][ T6381] ret_from_fork_asm+0x1a/0x30 [ 130.535377][ T6381] [ 130.535377][ T6381] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 130.542622][ T6381] fs_reclaim_acquire+0x102/0x150 [ 130.548200][ T6381] prepare_alloc_pages+0x162/0x610 [ 130.553866][ T6381] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 130.560315][ T6381] __alloc_pages_noprof+0xb/0x1b0 [ 130.565893][ T6381] pcpu_populate_chunk+0x110/0xb00 [ 130.571569][ T6381] pcpu_alloc_noprof+0x86a/0x1470 [ 130.577135][ T6381] xt_percpu_counter_alloc+0x13e/0x1b0 [ 130.583146][ T6381] find_check_entry.constprop.0+0xbc/0x9b0 [ 130.589562][ T6381] translate_table+0xc98/0x1720 [ 130.594978][ T6381] ipt_register_table+0x102/0x430 [ 130.600565][ T6381] iptable_mangle_table_init+0x40/0x60 [ 130.606604][ T6381] xt_find_table_lock+0x2e1/0x520 [ 130.612209][ T6381] xt_request_find_table_lock+0x28/0xf0 [ 130.618312][ T6381] get_info+0x190/0x610 [ 130.623017][ T6381] do_ipt_get_ctl+0x169/0xa10 [ 130.628253][ T6381] nf_getsockopt+0x79/0xe0 [ 130.633225][ T6381] ip_getsockopt+0x18c/0x1e0 [ 130.638377][ T6381] tcp_getsockopt+0x9e/0x100 [ 130.643546][ T6381] do_sock_getsockopt+0x34a/0x440 [ 130.649131][ T6381] __sys_getsockopt+0x123/0x1b0 [ 130.654523][ T6381] __x64_sys_getsockopt+0xbd/0x160 [ 130.660187][ T6381] do_syscall_64+0xcd/0x490 [ 130.665256][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.671709][ T6381] [ 130.671709][ T6381] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 130.679504][ T6381] __lock_acquire+0x126f/0x1c90 [ 130.684923][ T6381] lock_acquire+0x179/0x350 [ 130.689999][ T6381] __mutex_lock+0x199/0xb90 [ 130.695070][ T6381] pcpu_alloc_noprof+0xb4c/0x1470 [ 130.700643][ T6381] blk_stat_alloc_callback+0xc8/0x280 [ 130.706616][ T6381] wbt_init+0xac/0x540 [ 130.711234][ T6381] queue_wb_lat_store+0x354/0x3d0 [ 130.716804][ T6381] queue_attr_store+0x276/0x320 [ 130.722219][ T6381] sysfs_kf_write+0xf2/0x150 [ 130.727401][ T6381] kernfs_fop_write_iter+0x354/0x510 [ 130.733234][ T6381] vfs_write+0x6c4/0x1150 [ 130.738107][ T6381] ksys_write+0x12a/0x250 [ 130.742985][ T6381] do_syscall_64+0xcd/0x490 [ 130.748031][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.754565][ T6381] [ 130.754565][ T6381] other info that might help us debug this: [ 130.754565][ T6381] [ 130.764809][ T6381] Chain exists of: [ 130.764809][ T6381] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 130.764809][ T6381] [ 130.778518][ T6381] Possible unsafe locking scenario: [ 130.778518][ T6381] [ 130.785982][ T6381] CPU0 CPU1 [ 130.791361][ T6381] ---- ---- [ 130.796742][ T6381] lock(&q->q_usage_counter(io)#30); [ 130.802155][ T6381] lock(fs_reclaim); [ 130.808685][ T6381] lock(&q->q_usage_counter(io)#30); [ 130.816612][ T6381] lock(pcpu_alloc_mutex); [ 130.821138][ T6381] [ 130.821138][ T6381] *** DEADLOCK *** [ 130.821138][ T6381] [ 130.829288][ T6381] 6 locks held by syz.2.64/6381: [ 130.834258][ T6381] #0: ffff8880354eb978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 130.843364][ T6381] #1: ffff8880365fc428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 130.852425][ T6381] #2: ffff888032a4a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 130.862240][ T6381] #3: ffff888024ee7d28 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 130.872314][ T6381] #4: ffff8881423aec40 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 130.884060][ T6381] #5: ffff8881423aec78 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 130.896048][ T6381] [ 130.896048][ T6381] stack backtrace: [ 130.901949][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.2.64 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 130.901979][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.901994][ T6381] Call Trace: [ 130.902001][ T6381] [ 130.902009][ T6381] dump_stack_lvl+0x116/0x1f0 [ 130.902034][ T6381] print_circular_bug+0x275/0x350 [ 130.902067][ T6381] check_noncircular+0x14c/0x170 [ 130.902102][ T6381] __lock_acquire+0x126f/0x1c90 [ 130.902139][ T6381] lock_acquire+0x179/0x350 [ 130.902171][ T6381] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 130.902193][ T6381] ? __pfx___might_resched+0x10/0x10 [ 130.902218][ T6381] ? ksys_write+0x12a/0x250 [ 130.902239][ T6381] ? do_syscall_64+0xcd/0x490 [ 130.902262][ T6381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.902287][ T6381] __mutex_lock+0x199/0xb90 [ 130.902328][ T6381] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 130.902439][ T6381] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 130.902467][ T6381] ? __pfx___mutex_lock+0x10/0x10 [ 130.902502][ T6381] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 130.902524][ T6381] pcpu_alloc_noprof+0xb4c/0x1470 [ 130.902553][ T6381] ? __pfx_wbt_data_dir+0x10/0x10 [ 130.902578][ T6381] ? __pfx_wb_timer_fn+0x10/0x10 [ 130.902607][ T6381] blk_stat_alloc_callback+0xc8/0x280 [ 130.902640][ T6381] ? kasan_save_track+0x14/0x30 [ 130.902665][ T6381] wbt_init+0xac/0x540 [ 130.902697][ T6381] queue_wb_lat_store+0x354/0x3d0 [ 130.902726][ T6381] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 130.902765][ T6381] ? __mutex_trylock_common+0xe9/0x250 [ 130.902800][ T6381] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 130.902825][ T6381] queue_attr_store+0x276/0x320 [ 130.902851][ T6381] ? __pfx_queue_attr_store+0x10/0x10 [ 130.902875][ T6381] ? __lock_acquire+0x622/0x1c90 [ 130.902914][ T6381] ? find_held_lock+0x2b/0x80 [ 130.902937][ T6381] ? sysfs_file_kobj+0xe4/0x290 [ 130.902971][ T6381] ? __pfx_queue_attr_store+0x10/0x10 [ 130.902997][ T6381] sysfs_kf_write+0xf2/0x150 [ 130.903030][ T6381] kernfs_fop_write_iter+0x354/0x510 [ 130.903060][ T6381] ? __pfx_sysfs_kf_write+0x10/0x10 [ 130.903095][ T6381] vfs_write+0x6c4/0x1150 [ 130.903116][ T6381] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 130.903147][ T6381] ? __pfx___mutex_lock+0x10/0x10 [ 130.903171][ T6381] ? __pfx_vfs_write+0x10/0x10 [ 130.903201][ T6381] ksys_write+0x12a/0x250 [ 130.903222][ T6381] ? __pfx_ksys_write+0x10/0x10 [ 130.903247][ T6381] do_syscall_64+0xcd/0x490 [ 130.903272][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.903295][ T6381] RIP: 0033:0x7f03f078e9a9 [ 130.903314][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.903337][ T6381] RSP: 002b:00007f03f164e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.903358][ T6381] RAX: ffffffffffffffda RBX: 00007f03f09b6080 RCX: 00007f03f078e9a9 [ 130.903384][ T6381] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000004 [ 130.903398][ T6381] RBP: 00007f03f0810d69 R08: 0000000000000000 R09: 0000000000000000 [ 130.903413][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.903426][ T6381] R13: 0000000000000000 R14: 00007f03f09b6080 R15: 00007ffea9639448 [ 130.903448][ T6381] [ 131.716726][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 131.817125][ T6401] netlink: 93 bytes leftover after parsing attributes in process `syz.1.66'. [ 137.878288][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.884599][ T1301] ieee802154 phy1 wpan1: encryption failed: -22