last executing test programs: 4.043018466s ago: executing program 2 (id=3): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r0, 0x0, 0x30fe) getpriority$auto_PRIO_PGRP(0x1, 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev2\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FITRIM(r2, 0xc0185879, &(0x7f0000000200)={0x4, 0x400, 0x8}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x1, 0xa, 0x8, 0x1000, 0x6, 0x1, 0x2, r1}, 0x8098) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) 3.765736904s ago: executing program 2 (id=5): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyd2/power/runtime_suspended_time\x00', 0x80000, 0x0) r1 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0xfffffffc) read$auto_dfs_global_fops_debug(r1, &(0x7f0000000080), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) ioctl$auto_XFS_IOC_FREESP64(r1, 0x40305825, &(0x7f0000000140)={0xf, 0x8, 0x6, 0x5, 0x4, 0xffffffffffffffff}) r5 = getpid() capset$auto(&(0x7f0000000180)={0xe520, 0xffffffffffffffff}, &(0x7f00000001c0)={0x4, 0x4, 0x4c}) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x3b8, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xed}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xe}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x9}, @NFC_ATTR_LLC_SDP={0x35b, 0x13, 0x0, 0x1, [@nested={0xb3, 0x11f, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x72, 0x0, 0x0, @pid=r5}, @generic="4e4e1c8ddb9a8fbf8d087ee4d241c388b883f31bfbf55f9cbb0d4de9859a79ed188a15862be3d00e7348f0e64517f3ba5d6772aa9909102d8ffb40f63f89a308d8fe5f38b49ce4415514b886cff311018ec5ac1fbaebecbe7e62e9d2671f7a9d7299a106e366df142b2c88f24e8df892cf3948", @typed={0x27, 0x55, 0x0, 0x0, @binary="681566901f23d2cdc771555abcc86200d5379b2a0144ce831d1253b232b3a74713c96a"}, @nested={0x4, 0xce}]}, @nested={0xe4, 0x30, 0x0, 0x1, [@typed={0xd1, 0x3, 0x0, 0x0, @binary="bae20a6fcf60bde6759c2442b1240d746f08b1a581a09441ad1330f4d450c1c40c4770442cc2fa28f780f8e4177432b075696a1f9c93540707eaf5cc6deef7dc967a6e5beaa63c14f4d4a750d0d6ea2e4a9e4eee5a58aa39417c719357858c45f92a88da0f38389b8c138cbbf72686ceb8851f7cc5698b61e3e7d6c5549e58ca0e788d03bf8fd35d07a85ae7a2c5d4faea024ddace335e179ef08462337b09463607182db464866a651c33ce375eee376e9e53417e55576b434742ab3b493a00d54bd08fc3f0be1f5a4a5ae094"}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r6}, @typed={0x4, 0xbc}]}, @generic="57a1eb7ef85de7e65166e978e2753996ff63415bfa0df76aaa922f094685565106401c6bf6c854b53e4e4a195d0b76daccc99e9df61e4e44ed9962fc7a925ad7a3e253a5b3ccf58cf20272ceb65db52bdd1e6735ec0ad7fccf7908215a7839973b45ac92442d29111c6620a93d5110ea72bbed91e0abd96be764c830a0cbbeb4d6d156f677757d6064ba780acbbea074229f5674777d2f7169e3f21465163afeff587da749546342be45e2e64328c36d4b25a1aeb455d4524a2d65471185027962283348ba1849674e25587b3715492b5e2da12de02c69d9209071edc20ac0f93907a8f627e3cbdbb8c344dc5ecd28cab438", @generic="355f86fed68a51bf4eea75abaf47933a1d8c06aacbe9d1145d4ed429f2ccedc3c7e105f9a5191b2b89bd4d606a227a03ede0d75ffdec01584e00b84f9e5fb32056b7a3a3064f98a7b599e5f699775d2c9b421bffd0a3d2ccdb50414d3f069557d8da69fbfab4185057f2f6d8f14f5b093ccb9b0817ea4c4d1d73618ebc3d91aab85fda8686d13f45d1a617f25db0b9fecfa3b50261d2241a4707d3a9aa78a6c64e60acab020966652468dab59e10ea", @generic="746b936ccd239d4ed58b", @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$auto_BATADV_CMD_SET_VLAN(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @random="a71a15b00d0a"}, @BATADV_ATTR_NEIGH_ADDRESS={0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ROUTER={0xa}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) io_cancel$auto(0x9, &(0x7f0000000780)={0xf6e, 0x4, 0x14c0a3c6, 0xffff, 0x3, r2, 0x139, 0xffffffffffffffff, 0x2, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x6, 0x0, 0x2, 0x584}) r9 = socket(0x28, 0x800, 0x3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xec, 0x0, 0xa00, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xdf}, @NL80211_ATTR_SCAN_FREQ_KHZ={0xc1, 0x124, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @ipv4=@empty}, @generic="dd249084dcfe84cb91c88f482d3d5aae1e2270b8afaa305c494bb98dc191b8a0172a6f32033ec440716ed696618c818d957709a788be0705068a1b426a72405b36ff822f2ab418e32d547f5235eb32930460bfe0a08ab5bc7df3e4ee5a86981c4b2af792e4feebdfa9727f8392e731fc6f9ff79bb02681c6d544b8d1e9009e1f4bd64e5d7d94503649d80674193a797ed35cbf17015e488911a211a4776947e3e4a1a30c57ee27431a681362f237292807b66bebbc"]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) dup3$auto(r2, r1, 0x8) capget$auto(&(0x7f00000009c0)={0x0, r6}, &(0x7f0000000a00)={0x7, 0x81, 0xdf1}) mlockall$auto(0x2) r10 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x302201, 0x0) ioctl$auto_EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000a80)={0xffff, r8, 0x7, 0x7, 0x794, 0x6}) r12 = socket(0x1f, 0x1, 0x2) mount_setattr$auto(r7, &(0x7f0000000ac0)='./file0\x00', 0x8, &(0x7f0000000b00)={0x6, 0x5, 0x8, @raw=0x6}, 0x6) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), r12) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r13, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0x21, 0x34, "9318d212287f9157f4f5af99a4a9bb86e7c379f7bbc0f9c5ab05a86b42"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x3b, 0xe8, "6c3a120993a55432616f6f8c224f4f63cbd81d97a6ef21c9b31b7f39d010be47e02552220582c2e74efa29d6f0842343c5aa26c6f6dab3"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7f}]}, 0x7c}}, 0x40800) write$auto_sg_fops_sg(r11, &(0x7f0000000cc0)="5cae27a9827aafaf932580b48c824984c0cb98f5611d820daf32d94b9b80f9bef28b7de63bd7ee6c74674578cc14c369640929511d658c0449fae56b11bf4e14b3739988fe2c624c985f3db1dc1c4f98c7f6b1910f46c98ec9bdddcaa7af8f96", 0x60) r14 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000d80), r8) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, r14, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x86, 0x4, "5406e8d6d5c72ab7e6ab86748c886601134a63ceb71634f261074341647a8a91c4d60b09a67cea78d2a9d35c7c4a0c382ed20a8dd0db3eabf99028e149deacecdbd90529e746c0712158cb6fe8adcd7da4d626b19b7541097d1bc339f5c6947a290db5aa2a3bdf1c0294c0267d489df5ac0153ff42f8a0a9b1d5bbbe42adde865fcd"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800) ioctl$auto_SNDCTL_DSP_SYNC(r8, 0x5001, &(0x7f0000000f00)="b43c57a70d2c1e123d1c56a77a4e2064bb70f23c99bd370aea9b662dc8805721b5b1c4f6820e02c50c24a4041654bc5393b948602db3de04b7e89a8072d8f782ae40695f8c692113f730329960cf802823b0422f35b01a750cd38d5d44e369b99a1c") ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, &(0x7f0000000f80)="8a9b12e1a22367ec4b6b865d64a884890b61a952d0d29226143995bc8bfa2865b47040bcd2d37cc613b89fb7a2b55022a7f4e355571d5e960ac626f8de5b6ad4028d01ffde1445b2d3ebc5a5d556385adfe5e85d2e448cee7a3bfa27fd27e7e22b000a8543a72a") mlockall$auto(0xeba0) r15 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001040), r9) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r15, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2000001) 3.64381932s ago: executing program 2 (id=6): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r3, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0xfff, 0xebd, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r2, 0x0, 0x0) 3.238391641s ago: executing program 0 (id=1): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/ari_enabled\x00', 0xa0440, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) unshare$auto(0x8000000) shmget$auto(0x0, 0x7fffffffffffffff, 0x0) 3.005146688s ago: executing program 0 (id=7): socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x2000000000000, 0x6cb, 0x101) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, 0x0, 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x20800, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x102000, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) 2.787484429s ago: executing program 2 (id=8): socket(0x1d, 0x1, 0xd) socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x428000, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x3f) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/156, 0x9c) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/248, 0xf8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xa}, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x6, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0x13, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x9) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) mmap$auto(0x3, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/netfilter/nfnetlink_log\x00', 0xb00, 0x0) pread64$auto(r5, 0x0, 0xf469, 0x3) 2.271837581s ago: executing program 3 (id=4): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) socket(0x29, 0x2, 0x0) (async) r1 = socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0xfffffffe, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x10001, 0x13, r0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa4e00, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x222180, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) (async) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x8, 0x0, 0x6f7) (async) bpf$auto(0x8, 0x0, 0x6f7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getrusage$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) stat$auto(0x0, &(0x7f0000000380)={0x5, 0x7, 0x6, 0xfffffff2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x3ff, 0x401, 0x5f54, 0x80000000, 0xaa}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev$auto(r4, &(0x7f00000003c0)={0x0, 0x8}, 0x3) socket(0x28, 0x801, 0x0) r5 = clone$auto(0x1, 0x2, &(0x7f0000000340)=0xf, &(0x7f0000000380)=0xd15, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) (async) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(0x0, 0x0, 0x0) (async) execve$auto(0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) (async) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mknod$auto(&(0x7f0000000440)='X))\x00', 0x63c1, 0x7fc) kill$auto(r5, 0x800000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) 1.905321855s ago: executing program 1 (id=2): r0 = socket(0x1d, 0x80000, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x7fffffffffffffff}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r1, 0x80, 0x6f, 0x0, 0x0) setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3) socket(0x1d, 0x80000, 0x6) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) (async) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) (async) write$auto(0x3, 0x0, 0x3f00) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) socket(0xa, 0x801, 0x84) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) (async) ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x7fffffffffffffff}) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) io_uring_setup$auto(0x6, 0x0) (async) getsockopt$auto(r1, 0x80, 0x6f, 0x0, 0x0) (async) setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3) (async) 1.150595119s ago: executing program 1 (id=9): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0) socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/156, 0x9c) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/248, 0xf8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xa}, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x9) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 1.150161254s ago: executing program 3 (id=10): prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3ffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x0) close_range$auto(0x2, 0xa, 0x0) shmctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000740)={{0x3, 0x0, 0xee00, 0x8, 0x6, 0x5, 0x100}, 0x6, 0x10001, 0xffff, 0x7, @inferred, @raw=0x8, 0x3, 0x0, &(0x7f0000000580)="45a75b3d52454977f6d067ca425fa8907da7fa61f458958f0377cba3630255c3006c3a198e3ad64d3cca0e64fe5e509af022e495a48419df351477128ba0cf9ae06b4d46f398ee1e38b963e0e700edd01f43c1a8f5275df12926f345a9cf7b6109276bbe19772d59d83fc070898da6e7", &(0x7f0000000640)="5396def26b1d25effcdbd8a45fc8ebd28ca14f667eb5f58557dd96b94a17ca5b0b86c3a7da976235c059ad9b14ed606a5286a330e28104c4358237c3e61cedc47463801d189e3e2405f0bac8ea33b5b6e25044c1af17f96107170b3a31aeee5e676d8d01b25b28212de17bce9e6ccc8433276ec8761b6cc12bb2f932c94b6f490b36b584a72717b958623db9e337a34d8be564e63ba65bb0393eadcac467da1d2465448ae011c26cbd962693b117575f7e5dd658699a0efea7972f13f13beed709432833d7a99caf1fbd352f0a922a65babb2246dcec8c38f121cbc2ddd6d9771b0d1559bb7d391491a4dce25260d6"}) statx$auto(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x5, 0x10001, &(0x7f00000007c0)={0x1, 0x3cc, 0x1, 0x4, r0, 0xee00, 0x4, 0x7, 0x5c2, 0x3ff, 0xe, 0xffff, {0x9, 0x1}, {0xffff, 0xf}, {0x0, 0xfffffffa}, {0x7, 0x1}, 0x100, 0xfff, 0x0, 0x7, 0x93d, 0x6, 0x0, 0x408e7755, 0x5, 0x7, 0x74d, 0x7, [0x40, 0x7f, 0x2, 0x6, 0x7, 0x8, 0x4, 0x2, 0x7]}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x6, &(0x7f0000000180)={@_si_pad}, 0xd8, &(0x7f0000000340)={{0x81, 0x800}, {0x1, 0x9}, 0x400000000000000, 0x8, 0x9, 0x6, 0x5, 0x44a3, 0x4, 0x4, 0x8, 0x1000, 0xffffffffffff680e, 0x44fe255a, 0x7, 0x6}) process_vm_readv$auto(r2, &(0x7f0000000400)={&(0x7f0000000240)="d9aebeaabda37925d156659ec7fe283cf365a1b51e113d2bd1dc1166f5bc1d160e49a27ab947f6ae8becc32fea71c6b27859b911dfce78d0d3b0b40d9fdd8b7ad8f4949b3b9d3768dce61db38b6e0d1d04c1bfbeb4405dd45ab0d1c011e9d5aff5f556606e7002f7aee47aac5d894e4ce34e1708c0d2acc30d6dfb36", 0x9}, 0x5, &(0x7f0000000500)={&(0x7f0000000440)="5dd7fd4fa7a3f5fa3e1a25f07a73c9b4ae31ec15eb49e9343d5cc9f91fe9a7e26876bfc19a7218c0ffedb43d1afa0caf86eabcd491cf677e56705133d21b5b09cae80c54461b12cfc9d42a93b2ca4e394a6e8178a93f16286aa04c1e593fda7822c6740ffef76564b2223e524cb026dd21c7169ebcbf28e128118084e8a6a6d730c3", 0x5}, 0x13632af0, 0x8) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setresuid$auto(0x2, 0xee01, 0x8080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 784.68369ms ago: executing program 2 (id=11): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x3, 0x0, 0x0, 0x0, 0x440a48d3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x1000002) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x1ed242, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000200)="b91bec27a397fde6229d0efc46765a8abff944e7618db6b4c06f12874b2165952e3601ce7df1d4f6c907f389aaa9b937c688612936e4cc53d1a22539d0cbd1b50339547f39c805bcbde7bbd1ee11452726995adcd8c293ea62d79211db76e2d9266a4e3b0fb7ccc937f71a3fbdab5dee5df1d412bd3d28a99b2d87af9ff651dfa96164337391810ffb8e761535afdec335edec5aa8b00582289ee8babff1b5ea08683b25d08b7bc93b4633b5acf8169a36339b012f54c85acb778227d5d689ac102472700154a94353fac21ef2153c9090455efa480ac1d21f804d66f0e86153c8f5ee", 0x6}, 0x7) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, r2, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b47, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @multicast1}, 0x55) sendto$auto(0x3, 0x0, 0x2000f, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 0s ago: executing program 0 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) (async, rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count\x00', 0x400, 0x0) (rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x22dc2, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx8/power/runtime_status\x00', 0x3e52c0, 0x0) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x25, 0x1, 0x0) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x2ff) socketpair$auto(0x8, 0x0, 0x0, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async, rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/214, 0xd6) (async, rerun: 32) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bf2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 97.892784][ T5835] cgroup: Unknown subsys name 'net' [ 98.005244][ T5835] cgroup: Unknown subsys name 'cpuset' [ 98.015628][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.928409][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.198072][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.206633][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.221831][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.230413][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.252211][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.316587][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.325184][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.334302][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.382424][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.390942][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.417044][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.429865][ T1060] cfg80211: failed to load regulatory.db [ 102.439465][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.464237][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.483444][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.498409][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.561397][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.570513][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.579253][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.598749][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.606969][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.889233][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 103.216724][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 103.232905][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.241020][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.249086][ T5844] bridge_slave_0: entered allmulticast mode [ 103.256684][ T5844] bridge_slave_0: entered promiscuous mode [ 103.305119][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.312795][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.320477][ T5844] bridge_slave_1: entered allmulticast mode [ 103.328824][ T5844] bridge_slave_1: entered promiscuous mode [ 103.393913][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 103.415886][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.439851][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 103.456718][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.601151][ T5844] team0: Port device team_slave_0 added [ 103.610647][ T5844] team0: Port device team_slave_1 added [ 103.638341][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.645536][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.653272][ T5849] bridge_slave_0: entered allmulticast mode [ 103.660794][ T5849] bridge_slave_0: entered promiscuous mode [ 103.676995][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.684243][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.692038][ T5849] bridge_slave_1: entered allmulticast mode [ 103.699531][ T5849] bridge_slave_1: entered promiscuous mode [ 103.749786][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.757538][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.783846][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.835116][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.842680][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.868715][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.921398][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.934705][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.948823][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.956276][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.964020][ T5851] bridge_slave_0: entered allmulticast mode [ 103.971633][ T5851] bridge_slave_0: entered promiscuous mode [ 104.035710][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.045312][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.052910][ T5851] bridge_slave_1: entered allmulticast mode [ 104.061451][ T5851] bridge_slave_1: entered promiscuous mode [ 104.068987][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.076293][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.083891][ T5856] bridge_slave_0: entered allmulticast mode [ 104.091659][ T5856] bridge_slave_0: entered promiscuous mode [ 104.102530][ T5849] team0: Port device team_slave_0 added [ 104.169522][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.178314][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.185603][ T5856] bridge_slave_1: entered allmulticast mode [ 104.194493][ T5856] bridge_slave_1: entered promiscuous mode [ 104.204970][ T5849] team0: Port device team_slave_1 added [ 104.231857][ T5844] hsr_slave_0: entered promiscuous mode [ 104.239456][ T5844] hsr_slave_1: entered promiscuous mode [ 104.274890][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.324611][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.349743][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.357323][ T5847] Bluetooth: hci0: command tx timeout [ 104.363550][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.391652][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.434311][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.444757][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.452208][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.478355][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.507741][ T5847] Bluetooth: hci1: command tx timeout [ 104.529053][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.559332][ T5851] team0: Port device team_slave_0 added [ 104.587575][ T5847] Bluetooth: hci2: command tx timeout [ 104.614529][ T5851] team0: Port device team_slave_1 added [ 104.654980][ T5856] team0: Port device team_slave_0 added [ 104.665686][ T5856] team0: Port device team_slave_1 added [ 104.671667][ T5847] Bluetooth: hci3: command tx timeout [ 104.733403][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.743548][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.770632][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.784426][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.791751][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.817977][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.870540][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.878170][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.904723][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.936498][ T5849] hsr_slave_0: entered promiscuous mode [ 104.944881][ T5849] hsr_slave_1: entered promiscuous mode [ 104.952071][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.960524][ T5849] Cannot create hsr debugfs directory [ 104.976085][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.983306][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.009475][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.151471][ T5851] hsr_slave_0: entered promiscuous mode [ 105.159216][ T5851] hsr_slave_1: entered promiscuous mode [ 105.165715][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.174133][ T5851] Cannot create hsr debugfs directory [ 105.239607][ T5856] hsr_slave_0: entered promiscuous mode [ 105.246357][ T5856] hsr_slave_1: entered promiscuous mode [ 105.253473][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.261676][ T5856] Cannot create hsr debugfs directory [ 105.370708][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.426591][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.444627][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.489415][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.762358][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.794702][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.813893][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.840907][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.931204][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.945295][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.966366][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.992684][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.095065][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.121563][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.136075][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.156794][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.170896][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.256208][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.299710][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.307092][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.332266][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.339508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.427847][ T5847] Bluetooth: hci0: command tx timeout [ 106.459764][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.546390][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.566023][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.588008][ T5847] Bluetooth: hci1: command tx timeout [ 106.602738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.610058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.650366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.657657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.668933][ T5847] Bluetooth: hci2: command tx timeout [ 106.751796][ T5847] Bluetooth: hci3: command tx timeout [ 106.771524][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.815119][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.839794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.847068][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.875048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.882855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.944405][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.973383][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.001568][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.008880][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.061976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.069277][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.322508][ T5844] veth0_vlan: entered promiscuous mode [ 107.381735][ T5844] veth1_vlan: entered promiscuous mode [ 107.521042][ T5844] veth0_macvtap: entered promiscuous mode [ 107.550133][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.566630][ T5844] veth1_macvtap: entered promiscuous mode [ 107.636728][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.720685][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.759871][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.769631][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.779163][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.788843][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.819053][ T5851] veth0_vlan: entered promiscuous mode [ 107.875584][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.885557][ T5851] veth1_vlan: entered promiscuous mode [ 107.926174][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.033725][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.045811][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.070244][ T5851] veth0_macvtap: entered promiscuous mode [ 108.102034][ T5851] veth1_macvtap: entered promiscuous mode [ 108.126328][ T5849] veth0_vlan: entered promiscuous mode [ 108.163764][ T5849] veth1_vlan: entered promiscuous mode [ 108.182403][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.196001][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.231869][ T5856] veth0_vlan: entered promiscuous mode [ 108.261997][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.294186][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.314015][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.325365][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.326411][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.335321][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.365949][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.386927][ T5856] veth1_vlan: entered promiscuous mode [ 108.448653][ T5849] veth0_macvtap: entered promiscuous mode [ 108.515271][ T5847] Bluetooth: hci0: command tx timeout [ 108.519137][ T5849] veth1_macvtap: entered promiscuous mode [ 108.607382][ T5856] veth0_macvtap: entered promiscuous mode [ 108.626393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.630116][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.646461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.668068][ T5847] Bluetooth: hci1: command tx timeout [ 108.684920][ T5856] veth1_macvtap: entered promiscuous mode [ 108.700944][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.749397][ T5847] Bluetooth: hci2: command tx timeout [ 108.766377][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.783262][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.793761][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.806258][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.827125][ T5847] Bluetooth: hci3: command tx timeout [ 108.904735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.937465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.951058][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.004972][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.035903][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.045813][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.055938][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.065540][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.320327][ T5944] __vm_enough_memory: pid: 5944, comm: syz.0.1, bytes: 9223372036854775808 not enough memory for the allocation [ 109.363998][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.390758][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.505797][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.608779][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.646407][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.655995][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.664274][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.909987][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.007298][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.156980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.587569][ T5847] Bluetooth: hci0: command tx timeout [ 110.718170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.744956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.757950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.785899][ T5847] Bluetooth: hci1: command tx timeout [ 110.793596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.810999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.827607][ T5847] Bluetooth: hci2: command tx timeout [ 110.910677][ T5847] Bluetooth: hci3: command tx timeout [ 111.027436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.098757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 111.307425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.782468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.635029][ T5990] ================================================================== [ 112.643208][ T5990] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 112.651960][ T5990] Read of size 1 at addr ffff8881457bc567 by task syz.2.11/5990 [ 112.659621][ T5990] [ 112.662006][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.2.11 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 112.662036][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.662054][ T5990] Call Trace: [ 112.662063][ T5990] [ 112.662077][ T5990] dump_stack_lvl+0x116/0x1f0 [ 112.662120][ T5990] print_report+0xcd/0x680 [ 112.662141][ T5990] ? __virt_addr_valid+0x81/0x610 [ 112.662166][ T5990] ? __phys_addr+0xe8/0x180 [ 112.662201][ T5990] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 112.662227][ T5990] kasan_report+0xe0/0x110 [ 112.662249][ T5990] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 112.662279][ T5990] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 112.662304][ T5990] ? __lock_acquire+0xb8a/0x1c90 [ 112.662341][ T5990] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 112.662369][ T5990] ? find_held_lock+0x2b/0x80 [ 112.662392][ T5990] ? __might_fault+0xe3/0x190 [ 112.662425][ T5990] ? __might_fault+0xe3/0x190 [ 112.662458][ T5990] ? __might_fault+0x13b/0x190 [ 112.662498][ T5990] ? proc_simple_write+0x114/0x1b0 [ 112.662521][ T5990] proc_simple_write+0x114/0x1b0 [ 112.662544][ T5990] ? __pfx_proc_simple_write+0x10/0x10 [ 112.662568][ T5990] proc_reg_write+0x23d/0x330 [ 112.662603][ T5990] ? __pfx_proc_reg_write+0x10/0x10 [ 112.662637][ T5990] vfs_writev+0x5df/0xde0 [ 112.662667][ T5990] ? __pfx___mutex_trylock_common+0x10/0x10 [ 112.662706][ T5990] ? __pfx_vfs_writev+0x10/0x10 [ 112.662737][ T5990] ? __mutex_lock+0x1ca/0xb90 [ 112.662771][ T5990] ? kmem_cache_free+0x2d1/0x4d0 [ 112.662806][ T5990] ? __pfx___mutex_lock+0x10/0x10 [ 112.662846][ T5990] ? __fget_files+0x20e/0x3c0 [ 112.662882][ T5990] ? do_writev+0x132/0x340 [ 112.662911][ T5990] do_writev+0x132/0x340 [ 112.662942][ T5990] ? __pfx_do_writev+0x10/0x10 [ 112.662977][ T5990] do_syscall_64+0xcd/0x490 [ 112.663013][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.663038][ T5990] RIP: 0033:0x7f2a3f18e929 [ 112.663056][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.663080][ T5990] RSP: 002b:00007f2a3cbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.663102][ T5990] RAX: ffffffffffffffda RBX: 00007f2a3f3b6240 RCX: 00007f2a3f18e929 [ 112.663118][ T5990] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000009 [ 112.663133][ T5990] RBP: 00007f2a3f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.663148][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.663163][ T5990] R13: 0000000000000000 R14: 00007f2a3f3b6240 R15: 00007ffd5d753bd8 [ 112.663185][ T5990] [ 112.663201][ T5990] [ 112.922695][ T5990] Allocated by task 5990: [ 112.927064][ T5990] kasan_save_stack+0x33/0x60 [ 112.931817][ T5990] kasan_save_track+0x14/0x30 [ 112.936564][ T5990] __kasan_kmalloc+0xaa/0xb0 [ 112.941231][ T5990] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 112.947720][ T5990] memdup_user_nul+0x2b/0x120 [ 112.952448][ T5990] proc_simple_write+0xc7/0x1b0 [ 112.957391][ T5990] proc_reg_write+0x23d/0x330 [ 112.962137][ T5990] vfs_writev+0x5df/0xde0 [ 112.966522][ T5990] do_writev+0x132/0x340 [ 112.970897][ T5990] do_syscall_64+0xcd/0x490 [ 112.975462][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.981422][ T5990] [ 112.983874][ T5990] The buggy address belongs to the object at ffff8881457bc560 [ 112.983874][ T5990] which belongs to the cache kmalloc-8 of size 8 [ 112.997629][ T5990] The buggy address is located 0 bytes to the right of [ 112.997629][ T5990] allocated 7-byte region [ffff8881457bc560, ffff8881457bc567) [ 113.011984][ T5990] [ 113.014329][ T5990] The buggy address belongs to the physical page: [ 113.020770][ T5990] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1457bc [ 113.029668][ T5990] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 113.036909][ T5990] page_type: f5(slab) [ 113.040938][ T5990] raw: 057ff00000000000 ffff88801b841500 dead000000000100 dead000000000122 [ 113.049566][ T5990] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 113.058196][ T5990] page dumped because: kasan: bad access detected [ 113.064670][ T5990] page_owner tracks the page as allocated [ 113.070422][ T5990] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 23219573929, free_ts 0 [ 113.088234][ T5990] post_alloc_hook+0x1c0/0x230 [ 113.093056][ T5990] get_page_from_freelist+0x1321/0x3890 [ 113.098649][ T5990] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 113.104595][ T5990] alloc_pages_mpol+0x1fb/0x550 [ 113.109475][ T5990] new_slab+0x23b/0x330 [ 113.113668][ T5990] ___slab_alloc+0xd9c/0x1940 [ 113.118384][ T5990] __slab_alloc.constprop.0+0x56/0xb0 [ 113.123798][ T5990] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 113.130285][ T5990] kvasprintf+0xbc/0x160 [ 113.134670][ T5990] kvasprintf_const+0x66/0x1a0 [ 113.139495][ T5990] kobject_set_name_vargs+0x5a/0x140 [ 113.144839][ T5990] dev_set_name+0xc7/0x100 [ 113.149317][ T5990] usb_create_ep_devs+0x158/0x2b0 [ 113.154410][ T5990] usb_new_device+0xfc1/0x1a20 [ 113.159216][ T5990] register_root_hub+0x299/0x730 [ 113.164202][ T5990] usb_add_hcd+0xaf2/0x1730 [ 113.168755][ T5990] page_owner free stack trace missing [ 113.174158][ T5990] [ 113.176599][ T5990] Memory state around the buggy address: [ 113.182286][ T5990] ffff8881457bc400: 00 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 113.190426][ T5990] ffff8881457bc480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 113.198537][ T5990] >ffff8881457bc500: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 113.206661][ T5990] ^ [ 113.213888][ T5990] ffff8881457bc580: fa fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc [ 113.221998][ T5990] ffff8881457bc600: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 113.230109][ T5990] ================================================================== [ 113.512454][ T5990] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.519723][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.2.11 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 113.529912][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.540188][ T5990] Call Trace: [ 113.543529][ T5990] [ 113.546499][ T5990] dump_stack_lvl+0x3d/0x1f0 [ 113.551174][ T5990] panic+0x71c/0x800 [ 113.555196][ T5990] ? __pfx_panic+0x10/0x10 [ 113.559664][ T5990] ? mark_held_locks+0x49/0x80 [ 113.564473][ T5990] ? preempt_schedule_thunk+0x16/0x30 [ 113.569906][ T5990] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 113.575972][ T5990] ? preempt_schedule_common+0x44/0xc0 [ 113.581531][ T5990] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 113.587584][ T5990] check_panic_on_warn+0xab/0xb0 [ 113.592616][ T5990] end_report+0x107/0x170 [ 113.597012][ T5990] kasan_report+0xee/0x110 [ 113.601471][ T5990] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 113.607500][ T5990] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 113.613365][ T5990] ? __lock_acquire+0xb8a/0x1c90 [ 113.618370][ T5990] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 113.624578][ T5990] ? find_held_lock+0x2b/0x80 [ 113.629322][ T5990] ? __might_fault+0xe3/0x190 [ 113.634086][ T5990] ? __might_fault+0xe3/0x190 [ 113.638841][ T5990] ? __might_fault+0x13b/0x190 [ 113.643698][ T5990] ? proc_simple_write+0x114/0x1b0 [ 113.648861][ T5990] proc_simple_write+0x114/0x1b0 [ 113.653884][ T5990] ? __pfx_proc_simple_write+0x10/0x10 [ 113.659485][ T5990] proc_reg_write+0x23d/0x330 [ 113.664250][ T5990] ? __pfx_proc_reg_write+0x10/0x10 [ 113.669512][ T5990] vfs_writev+0x5df/0xde0 [ 113.673981][ T5990] ? __pfx___mutex_trylock_common+0x10/0x10 [ 113.679933][ T5990] ? __pfx_vfs_writev+0x10/0x10 [ 113.684853][ T5990] ? __mutex_lock+0x1ca/0xb90 [ 113.689692][ T5990] ? kmem_cache_free+0x2d1/0x4d0 [ 113.694708][ T5990] ? __pfx___mutex_lock+0x10/0x10 [ 113.699780][ T5990] ? __fget_files+0x20e/0x3c0 [ 113.704497][ T5990] ? do_writev+0x132/0x340 [ 113.708992][ T5990] do_writev+0x132/0x340 [ 113.713371][ T5990] ? __pfx_do_writev+0x10/0x10 [ 113.718204][ T5990] do_syscall_64+0xcd/0x490 [ 113.722773][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.728711][ T5990] RIP: 0033:0x7f2a3f18e929 [ 113.733168][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.752827][ T5990] RSP: 002b:00007f2a3cbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 113.761290][ T5990] RAX: ffffffffffffffda RBX: 00007f2a3f3b6240 RCX: 00007f2a3f18e929 [ 113.769300][ T5990] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000009 [ 113.777320][ T5990] RBP: 00007f2a3f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.785657][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.793668][ T5990] R13: 0000000000000000 R14: 00007f2a3f3b6240 R15: 00007ffd5d753bd8 [ 113.801684][ T5990] [ 113.805068][ T5990] Kernel Offset: disabled [ 113.809424][ T5990] Rebooting in 86400 seconds..