last executing test programs: 9.598750338s ago: executing program 0 (id=1): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r0 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/ports/2/udp_ports_table0\x00', 0x80, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=0x9) setsockopt$auto_SO_PASSCRED(r1, 0x80000000, 0x10, &(0x7f00000000c0)='\x85/\xbf', 0xbfd7) setsockopt$auto_SO_LINGER(r0, 0xffffffff, 0xd, &(0x7f0000000040)='\'[-#^!\x00', 0x2) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)=@enable_stats={0xaf}, 0x8001) mlockall$auto(0x800000000000005) madvise$auto(0xf500, 0x200007, 0x19) 9.080921203s ago: executing program 2 (id=3): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x2, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000280)={0xc0, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xa4, 0x2, 0x0, 0x1, [@generic="255591f28857a3dc1ae55c03c3d19f81f12b1d09a12932f438c6f220bcae215c170901fa045b34954919bd4301a2a1c27eebbbda543d04c2928b51d9d9ea7cffe7869d0f5f3eb1fb4cb5976b298f553b13c7d46ab1e6c60ca858b9975dfb139278df2003ad369342e9557c258d0ca830dc6bb5a1ba265d9a8e6464f0d498fd6e937fe8cf52945d536c71e81bbedf0c9f83f95964ca2c68efbe910f3200181165"]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0507255ce6d10900df351c000000e5419add431862ce11fe8f65cf7fb09c85af77672062264dfb637d99645bb94bad9c1474f7db47e77c6b561b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r7, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="20050000", @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf2502000000040001800805018003052f80800022003ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b32b4d02edce816134154a0f50376a72eb390400f7802bb6aff7fd456404268008002300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x520}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, &(0x7f00000000c0)=0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 8.956692627s ago: executing program 0 (id=5): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r1, 0x4008550c, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf250100000005000900040000000400080004000180"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_vs_conn_sync\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000380)=""/23, 0x17) pread64$auto(r5, 0x0, 0x8, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x1002000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x1, 0x0) socketpair$auto(0xf6, 0x100, 0x0, 0x0) 8.713290545s ago: executing program 3 (id=4): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0x7fff, 0xfffffffffffffffa, 0x8008000) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x2, 0x80000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x8b, 0x400, 0x2}]}) r2 = prctl$auto(0x1000000003b, 0x8, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r2) syz_clone(0xac000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x73) set_mempolicy$auto(0x2, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffffff, 0x0, 0x0) futex$auto(0x0, 0x10e, 0xa, 0x0, 0x0, 0x9) r3 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r3, 0x3a, 0x1, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_7={@btf_id, 0xd, 0x9}, 0x6) r4 = socket(0xa, 0x2, 0x88) lseek$auto(0x3, 0x7fffffffffffffff, 0x401) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x1801, @old_map_fd=0x3ff}, 0xa3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x102, 0x0) 7.34936963s ago: executing program 1 (id=8): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101c81, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 7.331411241s ago: executing program 3 (id=9): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x80000, 0x0) semctl$auto_GETZCNT(0x0, 0x9, 0xf, 0x5bf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/cache/index2/size\x00', 0x180, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 6.678601398s ago: executing program 0 (id=10): mmap$auto(0x4000000, 0xffffffff00000000, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x6) clock_gettime$auto(0xfffffffffffffff0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) inotify_init1$auto(0x4) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)="f1deefed5ddf77c3086ac06f73353a35cf09d9cab432b2fc686eb8cfacf3f7e0d79f", 0x22) sysfs$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1) r3 = socket(0xa, 0x1, 0x84) r4 = getsockopt$auto(r3, 0x84, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) capset$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) ioctl$auto_BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000080)=0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram3/trace/end_lba\x00', 0x2062, 0x0) write$auto(r5, 0x0, 0x98c7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) 6.215940461s ago: executing program 2 (id=11): ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x176, 0x100, 0x3fc}, {0x401, 0xe3, 0xffffffffffffffff}]}) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x100, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f0000000080)=""/238, 0xffffffe9) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2}) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000200)="c734db9a2e9edc8f6c8396f3f70705cc162b62bd03a9ea04a601447f2cf5a7b30e1cf8de514cc20ab07e7f8a80f8514d2e3b8731030b2727490b7e514f5a8caf9fdbae5eb816ddc64e3417b573a60ce7e1e27c8487b1c0", 0x57) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') name_to_handle_at$auto(r4, &(0x7f0000000040)='/dev/vcsu1\x00', &(0x7f0000000400)={0xea, 0x1, "a49831dbe2aec15c2539cc987343468d156494c6f41c0433e23d536a81ece70f255a4ab18f67396c38a1b8d816d8feb168a6a26f3cd7a828f68449025c38f22f0b0d88474d94abb738762e3f0e2c23a0d1bd193942046aeae17441f0c6cd23ad7b5381be937876262c5bc2fc4048e1b749d5b3681bbf3c35a78d9c19498fe3eab2141cdbfba80ea2b7306a94dbc0b35b39d987f0ba5c6dc1598120ce3b11ea0d18d0e317f62785ee1df547f782d681ce7e44b9a869b7aad09a504125f222ded6023ab2de97876ae44147c9637cd263e04b373e45a2ef3a41a129543d2245cae9078246d207c7df6765e3"}, &(0x7f0000000500)="4bcd15fb2779391a9170a94d98a5e3c7245fbd14910fbd81a301aa69d0b83ebd00bec562461017323c3c8ad3545d13751e42cbfe3df9f42ee902e3e3504b4dccb1f6cf29baaef1e11000b01d3cce81b42cf1a421ca3f313e9df11efd3e67b441672fd61df4ad9a5233842f315d0419101272233dd50d49f7f3675b513b50a122b879c925ce7b9f396da9582393562d7ae5559f2b011eac769eb0a82969d0e558208537ea85e50c845c391f2af198a5fc9943de361f3a54ec41528153d5b216b1b844ac0d539e75776c69f53ef98ebaa889b0b5d60382a99ef27e0d24821a93ec9ec2214a34c473425c5285a45abb9b4ebee5e37d6f125f63fca79e5c", 0x9) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000300)=""/234, 0xea) 6.160454827s ago: executing program 3 (id=12): unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r0 = socket(0x29, 0x5, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x1190}, 0x1, 0x0, 0x0, 0x2c095}, 0x4080) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r?\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xe, 0x3) r1 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x440000080) sendmmsg$auto(r1, 0x0, 0x200004, 0x5) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xddf) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 5.244152851s ago: executing program 2 (id=13): mmap$auto(0x0, 0x6, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0, 0x0) mmap$auto(0x0, 0x40000a, 0xdb, 0x10010, 0x2, 0x8003) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/cards\x00', 0x529043, 0x0) socket(0x1e, 0x80000, 0x5c) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xfffffffffffffff7, 0x400001fffffff, 0x40002, 0x401000000eb5, r0, 0x800000000008) clock_nanosleep$auto(0x0, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc854}, 0x10) madvise$auto(0xffffffffffffffff, 0xe80, 0x8) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x810) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq1/flags\x00', 0x0, 0x0) r4 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64$auto(r4, 0x0, 0x86bc090, 0x9) socket(0x1e, 0x3, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xffff, 0x9}, 0x6, 0x3) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.952505134s ago: executing program 1 (id=14): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f00000005c0)={"a2deb44a91ef74794bf5433bcf2d0531d84285ef06760b6fca3cc9f1f203241c67be4d0966ac6f5a9174d1520e6b705b2ce0ebb9bde012c7ef10f692f95fbc257da2bb7c2b4b9b0302570117352d20a3e6de5dae9d9ec9068ff14b7a290233ce9f9bc221306ae785844f85ade313895a88b8af2a56e28e9ed9a064298f73f59b", "c2a1bf76c61ad8a6ce328ad73c6e8c79811a87b253855ed2637ab301db8b760636a579be016aaa3c87e8328e2ad96df1b633f2e8f325d8a55ad745c16afc81235f3ec7a262b04ffb02c69c62c0b392b8fdb061cc0cd6866976b5da83b72b6934378e6c28f3eaf39362b08db1b8c0da6fdb5bc6558ab5c6bcb7ae56d011056aff", 0x3}) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x400000003, 0x6, 0x0, 0x1, 0x5b8f5189, 0x2, {0x100000001, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff6291, 0xa747, 0xdeb1}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) close_range$auto(r1, 0x8, 0x0) timer_settime$auto(0x0, 0x8, 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0xe, 0x0, 0x3, 0xb}, "025ea8dc66b90681f792faef5ffcbfda8eb631cf38118ce99f838f98ad901cd249af2c1d3eb04f3411b64fd760ee594453a555a77fc8efc43bbae5e884a1f1d09466dacf21efcc2900b2e848ef2abf79", 0x5dd}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$auto(r2, &(0x7f0000000080)=@l2={0x1f, 0x2, @any, 0x7fff}, 0x3ff) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r2) mmap$auto(0x0, 0x1ebe9bbb, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 3.98040727s ago: executing program 1 (id=15): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) listen$auto(0x3, 0xf) accept$auto(0xffffffffffffffff, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, &(0x7f0000000040)=0x28) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x6a) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) accept4$auto(r1, 0x0, 0x0, 0x0) 3.663785842s ago: executing program 0 (id=16): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322cf3) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x2, "0500000000000000"}, 0x2) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0xfffffffffffffffe, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x1, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x8, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) 3.513415715s ago: executing program 2 (id=17): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x2000000000000, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x44000, 0x0) mmap$auto(0x8, 0xa00006, 0x400002, 0x16, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x0, 0x40000000000000e2, 0x80000011, 0x2, 0x8000) madvise$auto(0x1, 0x4, 0x7) socket(0x2, 0x1, 0x106) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x3, @private=0xa010101}, 0x40000057) openat$dir(0xffffffffffffff9c, 0x0, 0x64000, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x94201, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x2000000000004, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x0, 0xfffffffffffffff4, 0xfff, 0x3f80, 0x79d, 0x338, 0x9, 0x2, 0xb]}, 0x0) io_uring_setup$auto(0x86, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x1e, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003ec, 0x14) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto_TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0xcad) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 3.207761092s ago: executing program 3 (id=18): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r1, 0x4008550c, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB='$1\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_vs_conn_sync\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000380)=""/23, 0x17) pread64$auto(r5, 0x0, 0x8, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x1002000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x1, 0x0) socketpair$auto(0xf6, 0x100, 0x0, 0x0) 2.564446137s ago: executing program 1 (id=19): mmap$auto(0x4, 0x800000002000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x8001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) lseek$auto(0x3, 0x8, 0x1) socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fefa465158fbbeb89451043553ff869189cf3250b65c544ccd3988b29f3cdb20660e616d3daa3e36b174c5661e383221287595a7e873202add9b0f11733de4ec2cd9c5b048058ed89c590d73c2e44d11636cb85ea9cb4180c5d1ab11f731cec20c57489baf87d298ef21b138e83a6a13cfdc39ffcf7c18ae6946c0d58c5026cd804c5d2f1a5348a159fe5e6746038217e838e23a24c5cda52d0af4c570a9983422fb706704f8410113a38fc2decb77fbcbca9e8f3dd2b2ccb939869852e91137af1e79ab833c8b104726d0a00", 0xd9) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r3, 0x0, 0x10) socket(0x15, 0x5, 0x0) socket(0x1f, 0x6, 0x106) 1.257525414s ago: executing program 1 (id=20): shmat$auto(0x0, 0x0, 0x825) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_mount$auto(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x6) munmap$auto(0x100000001, 0x430a) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sync_file_range$auto(0xffffffffffffffff, 0x400, 0x9, 0x6af) mknod$auto(0x0, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYBLOB="e4ac932c75e718d778ad070b613877c914"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) ioctl$auto(0xffffffffffffffff, 0x5609, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) 867.86668ms ago: executing program 1 (id=21): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fsmount$auto(0xffffffffffffffff, 0x4, 0x32b) io_uring_setup$auto(0x4, 0x0) unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) listmount$auto(0x0, &(0x7f00000001c0)=0x6, 0x4, 0x101) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(&(0x7f00000000c0)=',/\\\x00', 0x7) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x1038, 0x0, 0x4, 0x70bd25, 0x3, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_PMK={0x2a, 0xfe, "e088cf61a66b7b8eff95763c3a980bdc5448f16e5d85f1c311ae52caeca00400cafc4ad82499"}, @NL80211_ATTR_REG_ALPHA2={0xff3, 0x21, "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"}]}, 0x1038}}, 0x4004) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r6, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) splice$auto(r3, &(0x7f0000000040)=0xffffffffffffc148, r5, &(0x7f0000000080)=0x3, 0x5, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x11) io_uring_setup$auto(0x3, 0x0) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) 682.107886ms ago: executing program 0 (id=22): close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0x5, 0x2) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x142080}, 0xfffffffffffffe05, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000006e70e27f1b82b48de6c927edce73906884169a19d117c8470af6ccc77418440471a8704b2c", @ANYRES16=r1, @ANYBLOB="20002fbd7000fbdbdf250300000047001f007a79f52885a203fb19ec0183a3585d44154ab3052af6dff5e587374ebf26dd319c23f74e0b73a43daf485abade7ddaac260183f156a2f14ea681ed9bc98dca865202ef00"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0x5f, 0x500000000000000, 0x0, r2, 0x80000001}, 0x6d4) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) unlink$auto(&(0x7f0000000000)='./file0\x00') ioctl$auto(0xc8, 0x400454ce, 0x5c8d) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000002c0), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xd0, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x93, 0x7, "11f530de890fe47363debb98714886e3b99f01ee2e5d7d8c75a020cce7eee7785c3ab87dabb85633ebfe51043190273384a0a990db6f95bd03e9bb9be2c1c001eb2859aa811fedca48b7acf722d7f0421de8a0734eb9a4a851d8d870d8ce4994ce85e288572b82096710d26c163a9cffdcb0cda247a8dd4cded72409234219762e54d6c7afb9fe49b6e9031da87946"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000000)={'ip6_vti0\x00'}) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x80, 0x101, 0x5, 0x2}, {0x100, 0x20001, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) utimes$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4, 0x8}) 559.238613ms ago: executing program 3 (id=23): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x0, 0x5d77, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) open(0x0, 0x22240, 0x155) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0xa801, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8000, 0x0) getdents$auto(r3, 0x0, 0xde) setsockopt$auto(r2, 0x0, 0x20, 0x0, 0x20000b) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000f9dbdf25df676282040008000c00018008000f00ac1e0001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 55.481262ms ago: executing program 2 (id=24): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r1, 0x4008550c, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB='$1\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf250100000005000900040000000400080004"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_vs_conn_sync\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000380)=""/23, 0x17) pread64$auto(r5, 0x0, 0x8, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x1002000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x1, 0x0) socketpair$auto(0xf6, 0x100, 0x0, 0x0) 0s ago: executing program 0 (id=25): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x40, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x4, 0x7000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub0/hw_params\x00', 0x999843, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. [ 98.420157][ T5835] cgroup: Unknown subsys name 'net' [ 98.536959][ T5835] cgroup: Unknown subsys name 'cpuset' [ 98.546480][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.449450][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.229736][ T981] cfg80211: failed to load regulatory.db [ 102.613230][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.622176][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.630432][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.638929][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.647263][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.729271][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.743437][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.752443][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.773691][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.782676][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.833466][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.841866][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.850096][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.858885][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.867000][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.952716][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.965573][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.973701][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.003277][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.011420][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.426431][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 103.557020][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 103.646576][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 103.786182][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.793552][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.801030][ T5846] bridge_slave_0: entered allmulticast mode [ 103.809760][ T5846] bridge_slave_0: entered promiscuous mode [ 103.854671][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.862531][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.869769][ T5846] bridge_slave_1: entered allmulticast mode [ 103.878158][ T5846] bridge_slave_1: entered promiscuous mode [ 103.885691][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 103.944882][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.952791][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.959995][ T5849] bridge_slave_0: entered allmulticast mode [ 103.968309][ T5849] bridge_slave_0: entered promiscuous mode [ 104.001113][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.029495][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.036932][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.044911][ T5849] bridge_slave_1: entered allmulticast mode [ 104.052548][ T5849] bridge_slave_1: entered promiscuous mode [ 104.082952][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.159363][ T5846] team0: Port device team_slave_0 added [ 104.197267][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.230713][ T5846] team0: Port device team_slave_1 added [ 104.237477][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.245493][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.253130][ T5853] bridge_slave_0: entered allmulticast mode [ 104.260455][ T5853] bridge_slave_0: entered promiscuous mode [ 104.270909][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.298854][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.306339][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.313854][ T5856] bridge_slave_0: entered allmulticast mode [ 104.321225][ T5856] bridge_slave_0: entered promiscuous mode [ 104.343881][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.351145][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.358484][ T5853] bridge_slave_1: entered allmulticast mode [ 104.366781][ T5853] bridge_slave_1: entered promiscuous mode [ 104.393730][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.400957][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.408362][ T5856] bridge_slave_1: entered allmulticast mode [ 104.416383][ T5856] bridge_slave_1: entered promiscuous mode [ 104.495268][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.502548][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.528705][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.557599][ T5849] team0: Port device team_slave_0 added [ 104.567377][ T5849] team0: Port device team_slave_1 added [ 104.577173][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.587300][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.595810][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.625501][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.639642][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.664045][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.693111][ T5169] Bluetooth: hci0: command tx timeout [ 104.716502][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.756317][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.763390][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.789743][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.804891][ T5856] team0: Port device team_slave_0 added [ 104.831201][ T5853] team0: Port device team_slave_0 added [ 104.838123][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.845657][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.872001][ T5169] Bluetooth: hci1: command tx timeout [ 104.877897][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.891905][ T5856] team0: Port device team_slave_1 added [ 104.915329][ T5853] team0: Port device team_slave_1 added [ 104.932541][ T5169] Bluetooth: hci2: command tx timeout [ 105.008505][ T5846] hsr_slave_0: entered promiscuous mode [ 105.016086][ T5846] hsr_slave_1: entered promiscuous mode [ 105.041151][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.048301][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.074579][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.087437][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.092251][ T5169] Bluetooth: hci3: command tx timeout [ 105.100611][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.126941][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.166569][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.173928][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.200143][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.212112][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.219112][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.245547][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.284182][ T5849] hsr_slave_0: entered promiscuous mode [ 105.290615][ T5849] hsr_slave_1: entered promiscuous mode [ 105.297545][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.305537][ T5849] Cannot create hsr debugfs directory [ 105.485367][ T5853] hsr_slave_0: entered promiscuous mode [ 105.492411][ T5853] hsr_slave_1: entered promiscuous mode [ 105.498627][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.506367][ T5853] Cannot create hsr debugfs directory [ 105.545619][ T5856] hsr_slave_0: entered promiscuous mode [ 105.552431][ T5856] hsr_slave_1: entered promiscuous mode [ 105.558607][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.566771][ T5856] Cannot create hsr debugfs directory [ 105.857609][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.905913][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.956044][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.976615][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.076179][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.087098][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.104768][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.116314][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.210684][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.223350][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.245656][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.259602][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.367446][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.388386][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.412786][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.435640][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.481112][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.564500][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.590220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.597519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.625954][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.638023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.645272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.665335][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.739306][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.780215][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.787120][ T5169] Bluetooth: hci0: command tx timeout [ 106.798380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.805583][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.821565][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.828835][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.855929][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.863517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.897217][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.904458][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.933897][ T5169] Bluetooth: hci1: command tx timeout [ 106.957888][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.014188][ T5169] Bluetooth: hci2: command tx timeout [ 107.031342][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.060896][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.099348][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.106616][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.137687][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.144921][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.173007][ T5169] Bluetooth: hci3: command tx timeout [ 107.508315][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.688046][ T5846] veth0_vlan: entered promiscuous mode [ 107.746941][ T5846] veth1_vlan: entered promiscuous mode [ 107.797446][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.868558][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.923906][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.949511][ T5846] veth0_macvtap: entered promiscuous mode [ 107.959654][ T5849] veth0_vlan: entered promiscuous mode [ 107.971735][ T5846] veth1_macvtap: entered promiscuous mode [ 108.010326][ T5849] veth1_vlan: entered promiscuous mode [ 108.027718][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.079993][ T5856] veth0_vlan: entered promiscuous mode [ 108.088453][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.122387][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.131405][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.141089][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.150852][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.174572][ T5853] veth0_vlan: entered promiscuous mode [ 108.189627][ T5856] veth1_vlan: entered promiscuous mode [ 108.198061][ T5849] veth0_macvtap: entered promiscuous mode [ 108.228764][ T5853] veth1_vlan: entered promiscuous mode [ 108.243945][ T5849] veth1_macvtap: entered promiscuous mode [ 108.330915][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.373096][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.385992][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.401357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.404576][ T5856] veth0_macvtap: entered promiscuous mode [ 108.424128][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.433831][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.443147][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.453399][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.486146][ T5853] veth0_macvtap: entered promiscuous mode [ 108.508605][ T5856] veth1_macvtap: entered promiscuous mode [ 108.523762][ T5853] veth1_macvtap: entered promiscuous mode [ 108.549195][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.558821][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.587456][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.609774][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.646320][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.661770][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.676988][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.685875][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.696090][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.731038][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.784947][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.795326][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.816551][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.854751][ T5169] Bluetooth: hci0: command tx timeout [ 108.879787][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.902016][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.910817][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946273][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.012776][ T5169] Bluetooth: hci1: command tx timeout [ 109.048801][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.063562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.087178][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.095661][ T5169] Bluetooth: hci2: command tx timeout [ 109.101706][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.171263][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.196473][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.253130][ T5169] Bluetooth: hci3: command tx timeout [ 109.324801][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.380088][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.501234][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.521694][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.569797][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.877925][ T5942] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3'. [ 109.914300][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.058919][ T5942] netlink: zone id is out of range [ 110.077598][ T5942] netlink: zone id is out of range [ 110.127637][ T5942] netlink: zone id is out of range [ 110.162977][ T5942] netlink: zone id is out of range [ 110.206799][ T5942] netlink: zone id is out of range [ 110.239769][ T5942] netlink: zone id is out of range [ 110.265560][ T5949] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 110.281700][ T5942] netlink: zone id is out of range [ 110.310292][ T5942] netlink: zone id is out of range [ 110.377972][ T5942] netlink: zone id is out of range [ 110.383993][ T5942] netlink: zone id is out of range [ 110.725847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.933092][ T5169] Bluetooth: hci0: command tx timeout [ 111.104797][ T5169] Bluetooth: hci1: command tx timeout [ 111.172135][ T5169] Bluetooth: hci2: command tx timeout [ 111.335494][ T5169] Bluetooth: hci3: command tx timeout [ 111.993736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.002872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.011192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.020664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.029602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.041563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.050654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.059888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 112.154391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.649686][ T30] audit: type=1800 audit(6048703436.152:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="members" dev="configfs" ino=6630 res=0 errno=0 [ 118.565819][ T6031] [ 118.568212][ T6031] ====================================================== [ 118.575238][ T6031] WARNING: possible circular locking dependency detected [ 118.582293][ T6031] 6.16.0-syzkaller #0 Not tainted [ 118.587360][ T6031] ------------------------------------------------------ [ 118.594425][ T6031] syz.3.23/6031 is trying to acquire lock: [ 118.600256][ T6031] ffffffff8e72a5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 118.609883][ T6031] [ 118.609883][ T6031] but task is already holding lock: [ 118.617289][ T6031] ffff88814231ec40 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.628965][ T6031] [ 118.628965][ T6031] which lock already depends on the new lock. [ 118.628965][ T6031] [ 118.639433][ T6031] [ 118.639433][ T6031] the existing dependency chain (in reverse order) is: [ 118.648496][ T6031] [ 118.648496][ T6031] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 118.657234][ T6031] blk_alloc_queue+0x619/0x760 [ 118.662601][ T6031] blk_mq_alloc_queue+0x175/0x290 [ 118.668219][ T6031] __blk_mq_alloc_disk+0x29/0x120 [ 118.673834][ T6031] loop_add+0x49e/0xb70 [ 118.678595][ T6031] loop_init+0x164/0x270 [ 118.683429][ T6031] do_one_initcall+0x120/0x6e0 [ 118.688766][ T6031] kernel_init_freeable+0x5c2/0x900 [ 118.694545][ T6031] kernel_init+0x1c/0x2b0 [ 118.699445][ T6031] ret_from_fork+0x5d4/0x6f0 [ 118.704610][ T6031] ret_from_fork_asm+0x1a/0x30 [ 118.709941][ T6031] [ 118.709941][ T6031] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 118.717260][ T6031] fs_reclaim_acquire+0x102/0x150 [ 118.722873][ T6031] prepare_alloc_pages+0x162/0x610 [ 118.728569][ T6031] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 118.735034][ T6031] __alloc_pages_noprof+0xb/0x1b0 [ 118.740619][ T6031] pcpu_populate_chunk+0x110/0xb00 [ 118.746326][ T6031] pcpu_alloc_noprof+0x86a/0x1470 [ 118.751925][ T6031] xt_percpu_counter_alloc+0x13e/0x1b0 [ 118.757975][ T6031] find_check_entry.constprop.0+0xbc/0x9b0 [ 118.764360][ T6031] translate_table+0xc98/0x1720 [ 118.769780][ T6031] ipt_register_table+0x102/0x430 [ 118.775377][ T6031] iptable_nat_table_init+0x4b/0x250 [ 118.781213][ T6031] xt_find_table_lock+0x2e1/0x520 [ 118.786820][ T6031] xt_request_find_table_lock+0x28/0xf0 [ 118.792943][ T6031] get_info+0x190/0x610 [ 118.797698][ T6031] do_ipt_get_ctl+0x169/0xa10 [ 118.802949][ T6031] nf_getsockopt+0x79/0xe0 [ 118.807932][ T6031] ip_getsockopt+0x18c/0x1e0 [ 118.813100][ T6031] tcp_getsockopt+0x9e/0x100 [ 118.818241][ T6031] do_sock_getsockopt+0x34a/0x440 [ 118.823836][ T6031] __sys_getsockopt+0x123/0x1b0 [ 118.829241][ T6031] __x64_sys_getsockopt+0xbd/0x160 [ 118.834903][ T6031] do_syscall_64+0xcd/0x490 [ 118.840001][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.846448][ T6031] [ 118.846448][ T6031] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 118.854224][ T6031] __lock_acquire+0x126f/0x1c90 [ 118.859662][ T6031] lock_acquire+0x179/0x350 [ 118.864749][ T6031] __mutex_lock+0x199/0xb90 [ 118.869827][ T6031] pcpu_alloc_noprof+0xb4c/0x1470 [ 118.875406][ T6031] blk_stat_alloc_callback+0xc8/0x280 [ 118.881340][ T6031] wbt_init+0xac/0x540 [ 118.885966][ T6031] queue_wb_lat_store+0x354/0x3d0 [ 118.891545][ T6031] queue_attr_store+0x276/0x320 [ 118.896959][ T6031] sysfs_kf_write+0xf2/0x150 [ 118.902125][ T6031] kernfs_fop_write_iter+0x354/0x510 [ 118.907983][ T6031] vfs_write+0x6c4/0x1150 [ 118.912860][ T6031] ksys_write+0x12a/0x250 [ 118.917744][ T6031] do_syscall_64+0xcd/0x490 [ 118.922799][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.929246][ T6031] [ 118.929246][ T6031] other info that might help us debug this: [ 118.929246][ T6031] [ 118.939494][ T6031] Chain exists of: [ 118.939494][ T6031] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 118.939494][ T6031] [ 118.953291][ T6031] Possible unsafe locking scenario: [ 118.953291][ T6031] [ 118.960755][ T6031] CPU0 CPU1 [ 118.966135][ T6031] ---- ---- [ 118.971527][ T6031] lock(&q->q_usage_counter(io)#30); [ 118.976938][ T6031] lock(fs_reclaim); [ 118.983472][ T6031] lock(&q->q_usage_counter(io)#30); [ 118.991405][ T6031] lock(pcpu_alloc_mutex); [ 118.995950][ T6031] [ 118.995950][ T6031] *** DEADLOCK *** [ 118.995950][ T6031] [ 119.004119][ T6031] 6 locks held by syz.3.23/6031: [ 119.009089][ T6031] #0: ffff8880307a09b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 119.018206][ T6031] #1: ffff888036a2c428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 119.027242][ T6031] #2: ffff888025ff7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 119.037143][ T6031] #3: ffff888142b7a878 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 119.047227][ T6031] #4: ffff88814231ec40 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 119.058977][ T6031] #5: ffff88814231ec78 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 119.070984][ T6031] [ 119.070984][ T6031] stack backtrace: [ 119.076904][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.3.23 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 119.076938][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.076963][ T6031] Call Trace: [ 119.076972][ T6031] [ 119.076986][ T6031] dump_stack_lvl+0x116/0x1f0 [ 119.077018][ T6031] print_circular_bug+0x275/0x350 [ 119.077057][ T6031] check_noncircular+0x14c/0x170 [ 119.077099][ T6031] __lock_acquire+0x126f/0x1c90 [ 119.077142][ T6031] lock_acquire+0x179/0x350 [ 119.077179][ T6031] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 119.077206][ T6031] ? __pfx___might_resched+0x10/0x10 [ 119.077236][ T6031] ? ksys_write+0x12a/0x250 [ 119.077260][ T6031] ? do_syscall_64+0xcd/0x490 [ 119.077287][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.077330][ T6031] __mutex_lock+0x199/0xb90 [ 119.077357][ T6031] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 119.077381][ T6031] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 119.077406][ T6031] ? __pfx___mutex_lock+0x10/0x10 [ 119.077442][ T6031] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 119.077465][ T6031] pcpu_alloc_noprof+0xb4c/0x1470 [ 119.077494][ T6031] ? __pfx_wbt_data_dir+0x10/0x10 [ 119.077521][ T6031] ? __pfx_wb_timer_fn+0x10/0x10 [ 119.077552][ T6031] blk_stat_alloc_callback+0xc8/0x280 [ 119.077584][ T6031] ? kasan_save_track+0x14/0x30 [ 119.077611][ T6031] wbt_init+0xac/0x540 [ 119.077651][ T6031] queue_wb_lat_store+0x354/0x3d0 [ 119.077699][ T6031] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 119.077730][ T6031] ? __mutex_trylock_common+0xe9/0x250 [ 119.077771][ T6031] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 119.077800][ T6031] queue_attr_store+0x276/0x320 [ 119.077831][ T6031] ? __pfx_queue_attr_store+0x10/0x10 [ 119.077860][ T6031] ? __lock_acquire+0x622/0x1c90 [ 119.077906][ T6031] ? find_held_lock+0x2b/0x80 [ 119.077947][ T6031] ? sysfs_file_kobj+0xe4/0x290 [ 119.077998][ T6031] ? __pfx_queue_attr_store+0x10/0x10 [ 119.078028][ T6031] sysfs_kf_write+0xf2/0x150 [ 119.078068][ T6031] kernfs_fop_write_iter+0x354/0x510 [ 119.078103][ T6031] ? __pfx_sysfs_kf_write+0x10/0x10 [ 119.078144][ T6031] vfs_write+0x6c4/0x1150 [ 119.078168][ T6031] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 119.078205][ T6031] ? __pfx___mutex_lock+0x10/0x10 [ 119.078234][ T6031] ? __pfx_vfs_write+0x10/0x10 [ 119.078269][ T6031] ksys_write+0x12a/0x250 [ 119.078294][ T6031] ? __pfx_ksys_write+0x10/0x10 [ 119.078324][ T6031] do_syscall_64+0xcd/0x490 [ 119.078352][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.078380][ T6031] RIP: 0033:0x7fb1ebf8e9a9 [ 119.078405][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.078432][ T6031] RSP: 002b:00007fb1e9df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.078457][ T6031] RAX: ffffffffffffffda RBX: 00007fb1ec1b5fa0 RCX: 00007fb1ebf8e9a9 [ 119.078475][ T6031] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000004 [ 119.078492][ T6031] RBP: 00007fb1ec010d69 R08: 0000000000000000 R09: 0000000000000000 [ 119.078509][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.078525][ T6031] R13: 0000000000000000 R14: 00007fb1ec1b5fa0 R15: 00007ffebef0a0f8 [ 119.078551][ T6031]