last executing test programs: 3m26.917231183s ago: executing program 0 (id=1987): socket(0x10, 0x5, 0xffffffc0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af13, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 3m24.902029711s ago: executing program 0 (id=1988): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3m23.080232352s ago: executing program 0 (id=1993): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3m21.509255867s ago: executing program 0 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000002d40)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0xf0ffff, 0x10}, 0x10) 3m21.113044773s ago: executing program 0 (id=1997): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x31) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) socket(0x1e, 0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) read$auto_dvb_dvr_fops_dmxdev(r1, &(0x7f0000000240)=""/138, 0x8a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty43\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0600f000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x4, 0x3, 0x8000001d, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0xffffffffffffffff, 0x8, 0x0) 3m17.585800709s ago: executing program 0 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x20, 0x100, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040880) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 3m2.233724477s ago: executing program 32 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x20, 0x100, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040880) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 2m43.546817629s ago: executing program 4 (id=2075): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x5, 0xc0, 0x0) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0xffffca8a, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x2, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x2, 0x10, 0xfffffffffffffffd, 0x0, 0x100, 0x1, 0x4, 0xfffd, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0x3, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f0000000080)={0x3, 0x5c2}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r1) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffff54, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x200000001, 0x1, 0x8, 0x95f4da0b, 0xfffe, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0xbab, 0x3, 0x1000, 0x62, 0x4080008000001f, 0x100000000, 0x6d3e, 0x9, 0xffffffffffffffff, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 2m41.798479912s ago: executing program 4 (id=2080): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket(0x1e, 0x1, 0x0) 2m40.525289299s ago: executing program 4 (id=2085): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='\"\x1c6\x80p\xf9\xdc\xb09\xbb0\x1f\xa5S;', 0x100000a3d8) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x1000202) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 2m39.119396207s ago: executing program 4 (id=2086): socket(0x10, 0x5, 0xffffffc0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af13, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(0x0, 0x6) bpf$auto(0x0, 0x0, 0x6f3) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r3, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 2m37.010395031s ago: executing program 4 (id=2090): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x1000, 0x4, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x8000, 0x80000000, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0x7fffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080)) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x2000008001) write$auto(0x1, 0x0, 0x80000000) 2m35.31298879s ago: executing program 4 (id=2095): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2m20.192057909s ago: executing program 33 (id=2095): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2m19.866357504s ago: executing program 1 (id=2135): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2m17.592654525s ago: executing program 1 (id=2142): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x8, 0xd, 0x80}, 0x7e, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2m14.290324207s ago: executing program 1 (id=2149): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) mmap$auto(0x0, 0x40009, 0x7fffffff, 0x9b72, 0xffffffffffffffff, 0x100000000028000) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1311, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) fchdir$auto(r0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) 2m13.67180684s ago: executing program 1 (id=2150): socket(0x10, 0x5, 0xffffffc0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af13, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r3, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 2m12.590754803s ago: executing program 1 (id=2151): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x1000, 0x4, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x8000, 0x80000000, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0x7fffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080)) munmap$auto(0x8000, 0xffffffff) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 2m11.341668746s ago: executing program 1 (id=2154): socket(0x10, 0x5, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af13, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r7 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_map_fd=r1, 0x0, @old_map_fd=r5}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r7, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) read$auto_ftrace_avail_fops_trace_events(r4, &(0x7f0000000340)=""/251, 0xfb) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 2m7.079233388s ago: executing program 5 (id=2132): socket(0x10, 0x5, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(0x0, 0x6) bpf$auto(0x0, 0x0, 0x6f3) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 2m3.507925928s ago: executing program 5 (id=2165): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 2m2.153319804s ago: executing program 5 (id=2166): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bdi/7:9/wb_stats\x00', 0x214080, 0x0) r3 = wait4$auto(0x0, &(0x7f00000000c0)=0xfff, 0x5, &(0x7f0000000280)={{0x0, 0x949}, {0x8001, 0x7ff}, 0x7, 0x5, 0xa3, 0x8, 0xf2d, 0x5, 0x1, 0x5, 0x5, 0x0, 0x4, 0xd075, 0x10001, 0x10}) fcntl$auto(r0, 0x8000002, r3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0xa6}, 0x40010) 2m1.853730963s ago: executing program 5 (id=2168): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x1000, 0x4, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x8000, 0x80000000, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0x7fffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000080)) munmap$auto(0x8000, 0xffffffff) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 1m59.323437355s ago: executing program 5 (id=2173): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x1000, 0x4, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x8000, 0x80000000, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0x7fffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 1m56.193189124s ago: executing program 34 (id=2154): socket(0x10, 0x5, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af13, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r7 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_map_fd=r1, 0x0, @old_map_fd=r5}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r7, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) read$auto_ftrace_avail_fops_trace_events(r4, &(0x7f0000000340)=""/251, 0xfb) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 1m44.136126558s ago: executing program 35 (id=2173): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x1000, 0x4, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x8000, 0x80000000, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0x7fffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) 38.371080416s ago: executing program 6 (id=2350): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='\"\x1c6\x80p\xf9\xdc\xb09\xbb0\x1f\xa5S;', 0x100000a3d8) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) 36.805906544s ago: executing program 6 (id=2353): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x6, 0x5, 0xffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyae\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x2, 0x5, 0x2, 0xb48, 0x2095f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x202, 0x10000000000004, 0x40000006d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0xffff, 0x1, 0x62, 0x7fff, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000280)={0x80008006, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x80002, 0x1073) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0xce}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 34.807551037s ago: executing program 6 (id=2357): r0 = socket(0x15, 0x5, 0x0) ioctl$auto_FIOCLEX(r0, 0x5451, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 34.332828278s ago: executing program 6 (id=2358): bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 33.323382235s ago: executing program 6 (id=2362): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x6, 0x5, 0xffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyae\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x2, 0x5, 0x2, 0xb48, 0x2095f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x202, 0x10000000000004, 0x40000006d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0xffff, 0x1, 0x62, 0x7fff, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000280)={0x80008006, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x80002, 0x1073) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0xce}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 30.990917279s ago: executing program 6 (id=2366): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) r2 = socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r3) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x7f}, @ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x6}, @ETHTOOL_A_RSS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1ca}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x10000}, @ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x401}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x23000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x2, 0x52, 0x85, 0x2, 0x1a7b870a, 0x876c4, 0x8, 0x100000000}}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) socket(0x2, 0xa, 0x693) socket(0xa, 0x801, 0x84) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/010/001\x00', 0xa901, 0x0) 23.310464395s ago: executing program 7 (id=2389): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 22.98407546s ago: executing program 7 (id=2390): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) readv$auto(0x3, 0x0, 0x8) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) 22.641635916s ago: executing program 7 (id=2391): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x31) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f0000000240)={0xf5f, 0x7f}, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) getsockopt$auto_SO_KEEPALIVE(r2, 0x2, 0x9, &(0x7f0000000180)='(,*%p\x00', &(0x7f00000001c0)=0x757) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) 21.320553093s ago: executing program 7 (id=2395): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x2, 0x2, 0x7, 0xaf, 0x6, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x200]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) writev$auto(r0, &(0x7f0000000040)={0x0, 0x3}, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80002, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000640)="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", 0x226) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x3, 0x100) socket(0x27, 0x6, 0x8000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x5d4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x640002, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0xdb, 0x50, 0x0, 0x9) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) 20.224336821s ago: executing program 7 (id=2398): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x5, 0x0) setxattr$auto(&(0x7f0000000280)='}[,&*}\x00', &(0x7f00000002c0)=')+S\xb6:\x00', &(0x7f0000000300), 0x8fa4, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) r1 = getpid() ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r1) fgetxattr$auto(r0, &(0x7f00000004c0)='security.capabilisy\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd4.\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x96) set_mempolicy$auto(0x4, &(0x7f0000000000)=0x10001, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x85, 0x104, 0x0, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vub300/parameters/disable_offload_processing\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/stat\x00', 0x149902, 0x0) write$auto(0x3, 0x0, 0xffd8) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0xf0f7}, 0x1, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$auto(0x3, 0x7, 0x4d, 0x4) r4 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f00000001c0)=0x8) sendmsg$auto_NL80211_CMD_SET_CQM(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x848a092}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf253f00000028002d800e00a18cb94a2725772c2e272d000000050070000000000004042f000800ea00", @ANYRESHEX=r3, @ANYBLOB="d800f500235a6e75ae0a6166ec1a6553bd9f0ae9e4ef2981d5e9168206485e176d659b97b625982b87aadd545f992f3c71377782d79e43ba23987ea73361b39c03904e94186c2789c6e016e3429dea4dfc8a0d046f7af30277a5cfe639e59e0389b1f9ace6f85ea9e4afa90d0fd1beedf3f9c0ca77bd1cef56f1a3c24b333c376459c3af6e7b44a95836d862dde0c6c8343c296c6f8780b8a222600aacdba14bd2c5637c70fe5ef186b277129876f9bbaa5f85c73e044ab54443a76656248f686320ea3170fef20871e73e6fc67ecd819f88375c01d4bed9"], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4008040) unshare$auto(0x8921) socket(0x23, 0x80805, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000240)=0x2) 18.811153851s ago: executing program 7 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r1, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) 15.593764722s ago: executing program 36 (id=2366): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) r2 = socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r3) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x7f}, @ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x6}, @ETHTOOL_A_RSS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1ca}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x10000}, @ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x401}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x23000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x2, 0x52, 0x85, 0x2, 0x1a7b870a, 0x876c4, 0x8, 0x100000000}}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) socket(0x2, 0xa, 0x693) socket(0xa, 0x801, 0x84) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/010/001\x00', 0xa901, 0x0) 8.409852118s ago: executing program 3 (id=2414): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x101002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r1) socket(0xa, 0x3, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x2000000000007, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, &(0x7f0000000040)) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 8.39625059s ago: executing program 2 (id=2424): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 8.362489886s ago: executing program 8 (id=2415): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc030000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250100000004000280a4030280ec00a08008004e0000000000069460b98f9dc7a0844bac5f99d369cf85b7bce7ccb087a4a7079f37a38c85546a1dfbe45293e1c9ccf3ee8620f4d72529d24805591014acb8307d7cf8cc62b9f36b528920f1b4bc64afda3bdfe4ed383e07f774e69ab8646329a2375160cfb891a0795e4ede43c691d8685b64a4f040a07717886be5977d1ffc0c3c3f572364026bf909ac97447dffdde3e50a8001bfb7c5b69d6fa1328b8345a2f160403ba385e450c1f61f62adf70d23b31d34fb2f5309a04b7cfee526a28046a7b13c529c3f3805dbcc2c6a1f68649b4fad4e5eed66fc7b6c635272097fbd8cc480b638f708002600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000a9001f805b417f5250ad5387265634a5de59b43f52be81861de2314253d2ec56dacf650eae6d88a2de488bced3b7eaab1544baae2ac19e9172d76b520b406f3e30401bd2c49f6c5b7f62a107254249408c7a048be9ad66fc72286fc9c71400eb0000000000000000000000ffffe000000208003100", @ANYRES32=0x0, @ANYBLOB="230005002f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e6300000400068008000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3bc}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4b8483, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1003, 0x15f4da07, 0x3, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x0, 0x2, 0xb]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev5\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) 6.801797976s ago: executing program 2 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd25, 0x259fdbfe}, 0x14}, 0x1, 0x6000000000000000, 0x0, 0x200000c4}, 0xa0) 6.560673378s ago: executing program 2 (id=2417): socket(0x10, 0x5, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x1, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r5, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x182, 0x4020008, 0x80000000, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xa, 0x6, 0xf, 0x7, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 6.496247773s ago: executing program 8 (id=2418): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x6, 0x5, 0xffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyae\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x2, 0x5, 0x2, 0xb48, 0x2095f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x202, 0x10000000000004, 0x40000006d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0xffff, 0x1, 0x62, 0x7fff, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000280)={0x80008006, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x80002, 0x1073) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0xce}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.35769953s ago: executing program 3 (id=2419): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 4.901992216s ago: executing program 8 (id=2422): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 4.900426883s ago: executing program 3 (id=2423): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x2, 0x2, 0x7, 0xaf, 0x6, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x200]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) writev$auto(r0, &(0x7f0000000040)={0x0, 0x3}, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80002, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000640)="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", 0x226) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x3, 0x100) socket(0x27, 0x6, 0x8000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x5d4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x640002, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0xdb, 0x50, 0x0, 0x9) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 3.658625491s ago: executing program 37 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r1, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) 3.646750923s ago: executing program 8 (id=2426): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x6, 0x5, 0xffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyae\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x2, 0x5, 0x2, 0xb48, 0x2095f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x202, 0x10000000000004, 0x40000006d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0xffff, 0x1, 0x62, 0x7fff, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000280)={0x80008006, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x80002, 0x1073) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0xce}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.495605896s ago: executing program 3 (id=2427): r0 = pidfd_open$auto(0x1, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x11, 0x2, 0xa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x8, 0x0, 0xabc) close_range$auto(r1, 0x8, 0x8) r2 = io_uring_setup$auto(0x4, 0x0) io_uring_register$auto(0x2, 0x16, 0x0, 0x7) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0) syz_genetlink_get_family_id$auto_seg6(0x0, r1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x40902, 0x0) ioctl$auto_TIOCSWINSZ2(r5, 0x5414, &(0x7f0000000440)="a2affa625dd9fa5f442c8f846d1f7bdb6221572ab37f10ebfe1d9e439ff9af4bafe54520746df072f19135c85de840e0b7063c5171ec05d8e65c44bb36d92007655251f6c399dc3ad7") readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r6) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x810) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000540)="305d5fb0fad2a2f0fb00505343a79ed46fc4a4307384d3c00953e243037d687e18e3e5d801f2e5283ed517a67ed203cc85f3a3f93b97c1ac5359adf3d5830547858a619d3f8beca44081bd5fe5903e22695085f328ab64c4f5d96b59cb31bfa079b8dacc9749ddadfffade7a7d692d98dfe7484b5f352e9a667573884c") openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/psaux\x00', 0x80000, 0x0) read$auto_mISDN_fops_timerdev(r8, &(0x7f0000000140)=""/168, 0xa8) mmap$auto(0xfffffffffffff0d8, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0xf3c) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) 3.096480949s ago: executing program 2 (id=2428): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x2, 0x2, 0x7, 0xaf, 0x6, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x200]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) writev$auto(r0, &(0x7f0000000040)={0x0, 0x3}, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80002, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000640)="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", 0x226) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x3, 0x100) socket(0x27, 0x6, 0x8000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x5d4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x640002, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0xdb, 0x50, 0x0, 0x9) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 2.08663079s ago: executing program 2 (id=2429): open(&(0x7f0000001180)='./file0\x00', 0x42a40, 0x12) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x4c742, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff008, 0x180000000000000, 0x6) close_range$auto(0x2, 0x8, 0x0) 1.687770169s ago: executing program 3 (id=2430): open(&(0x7f0000001180)='./file0\x00', 0x42a40, 0x12) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x4c742, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x1008001, 0xc) socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff008, 0x180000000000000, 0x6) close_range$auto(0x2, 0x8, 0x0) 1.561562816s ago: executing program 8 (id=2431): r0 = socket(0x15, 0x5, 0x0) ioctl$auto_FIOCLEX(r0, 0x5451, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.160501996s ago: executing program 8 (id=2432): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x6, 0x5, 0xffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyae\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x2, 0x5, 0x2, 0xb48, 0x2095f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x202, 0x10000000000004, 0x40000006d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0xffff, 0x1, 0x62, 0x7fff, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x80002, 0x1073) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0xce}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 875.579648ms ago: executing program 2 (id=2433): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0xffff0000}, 0x40010) 0s ago: executing program 3 (id=2434): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x2, 0x2, 0x7, 0xaf, 0x6, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x200]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) writev$auto(r0, &(0x7f0000000040)={0x0, 0x3}, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80002, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000640)="445cc19989fb9c017005441c9085b524b7c0cc9b1a9f4edddfe162b01f9fe8f5adae095ec393ca717c2e4c6a64d1d08a304bb9528310c110129f6c575f67b4582a5f62b8e838fc6962c99765e6f49df32fe5fe58b9a26a37ef5d9c5f4789c742ab66cb019c4301e062dfeb918dbdb211b041bbeb9917bb2bb6c1bc1698a8d82139d84da0968c422c55239a2ed6bde3ec686e5fb78e80ee4c0045438d4f7fce23399079ece10b7e9e60185e97a0676ea0dbb2c14613f246f3089a1d9bbfd3dcc242b13e8ec303971c06b8e20f6f22820a23f0c642d9669ff73d85bf1c393f8d2f3a6755b5f222ee91f7f39c7eda4deaeeab296687a36914ac53eb6af38743eb03339bd94f3d9669adf2058b18648dc7306351ad5aada08450f3278cc2035282941542a4f2d70c1758b45a53fa2e016f57dd89629b5d2b7f5929c73da5f436ba0efec93deb7ccca0795176bb80d2afaea3bddec1d935a7c0fd9f41a3e180d19544b84b76d195ca07c9f88f0ffdf7e7831c01094133518941b5344c6b0771f9bda9af9ea4a571eba33acc91a32fd1240e06f5fc28f8b648b0d51d6efc66dbaaeed0bf3bc186093eaa6d060ef2001c298812c598be6cae0ca8ef5d4141224828f698daae1ffabfad67167dd5b5c3c91a496890ad9b3af588de8b8b58c220464c9695e815223e6800449615315539f5b9c670361fff443114a49c738e42709de97dd192d3360cd0227023c9676339b7d10fe70c2509f13a011dcc19bd447478499e1727ca5457f8b6", 0x226) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x3, 0x100) socket(0x27, 0x6, 0x8000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x5d4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x640002, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0xdb, 0x50, 0x0, 0x9) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) kernel console output (not intermixed with test programs): : AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input592 [ 825.483591][T14214] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input593 [ 826.107088][T14216] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input594 [ 826.969277][T14232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input595 [ 827.217708][T14233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input596 [ 828.042305][T14238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input597 [ 828.736340][T14239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input598 [ 829.781882][T14251] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input599 [ 831.144723][T14263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input600 [ 832.140540][T14272] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input601 [ 832.904767][T14282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input602 [ 834.189566][T14287] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input603 [ 834.914611][T14288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input604 [ 835.146510][T14303] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input605 [ 836.100251][T14312] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input606 [ 836.489141][T14321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input607 [ 837.469424][T14323] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input608 [ 838.362652][T14339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input609 [ 838.933011][T14341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input610 [ 839.729044][T14342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input611 [ 840.113809][T14356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input612 [ 840.515538][T14370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input613 [ 841.155910][T14371] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input614 [ 841.970183][T14390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input615 [ 842.387813][T14391] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input616 [ 843.093058][T14395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input617 [ 843.957007][T14396] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input618 [ 844.698915][T14405] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input619 [ 845.348558][T14416] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input620 [ 846.561803][T14431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input621 [ 846.684707][T14432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input622 [ 847.467775][T14437] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input623 [ 847.907311][T14446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input624 [ 851.187831][T14475] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input625 [ 851.696516][T14477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input626 [ 852.104789][T14482] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input627 [ 852.761241][T14490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input628 [ 853.876127][T14496] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input629 [ 854.397671][T14497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input630 [ 854.921920][T14507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input631 [ 855.586575][T14508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input632 [ 856.161267][T14522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input633 [ 856.880612][T14529] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input634 [ 857.940281][T14534] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input635 [ 858.424831][T14544] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input636 [ 859.603650][T14557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input637 [ 860.045802][T14558] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input638 [ 861.848788][T14584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input639 [ 862.369697][T14588] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input640 [ 865.952294][T14629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input641 [ 867.150739][T14638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input642 [ 867.803106][T14642] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input643 [ 868.662390][T14648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input644 [ 869.136433][T14654] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input645 [ 869.171776][T14658] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input646 [ 870.916370][T14677] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input647 [ 872.006820][T14678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input648 [ 875.027133][T14720] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input649 [ 875.741851][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.753052][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.037582][T14723] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input650 [ 876.510634][T14722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input651 [ 876.864747][T14727] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input652 [ 877.251925][T14732] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input653 [ 877.420684][T14742] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input654 [ 877.999208][T14746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input655 [ 878.804679][T14754] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input656 [ 879.449756][T14761] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input657 [ 880.453626][T14762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input658 [ 882.873458][T14791] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input659 [ 883.250864][T14792] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input660 [ 885.129557][T14805] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input661 [ 885.411814][T14807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input662 [ 886.101041][T14803] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input663 [ 886.617976][T14808] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input664 [ 887.541358][T14827] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input665 [ 888.428824][T14829] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input666 [ 889.448688][T14834] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input667 [ 890.516260][T14838] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input668 [ 891.608928][T14867] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input669 [ 892.449373][T14870] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input670 [ 893.706849][T14888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input671 [ 894.507434][T14890] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input672 [ 895.879042][T14914] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input673 [ 896.446406][T14915] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input674 [ 897.051842][T14924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input675 [ 897.700969][T14926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input676 [ 898.106084][T14937] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input677 [ 898.894003][T14938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input678 [ 900.423551][T14959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input679 [ 900.849219][T14960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input680 [ 901.520468][T14974] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input681 [ 902.459741][T14977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input682 [ 903.408900][T14993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input683 [ 904.043397][T14994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input684 [ 905.068777][T15005] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input685 [ 905.772776][T15009] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input686 [ 906.682234][T15021] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input687 [ 907.475094][T15022] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input688 [ 908.715930][T15037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input689 [ 909.229332][T15047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input690 [ 911.520498][T15061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input691 [ 911.977414][T15064] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input692 [ 912.504428][T15065] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input693 [ 912.796912][T15079] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input694 [ 916.804867][T15130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input695 [ 917.490980][T15143] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input696 [ 920.138063][T15153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input697 [ 920.479352][T15166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input698 [ 921.247385][T15175] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input699 [ 921.754460][T15176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input700 [ 922.845939][T15180] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input701 [ 923.328350][T15181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input702 [ 924.407404][T15203] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input703 [ 924.662800][T15207] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input704 [ 926.789949][T15225] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input705 [ 927.012777][T15226] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input706 [ 927.508705][T15233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input707 [ 928.104682][T15234] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input708 [ 929.900631][T15259] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input709 [ 930.321801][T15260] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input710 [ 930.930414][T15267] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input711 [ 933.011981][T15283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input712 [ 933.857171][T15284] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input713 [ 934.208883][T15288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input714 [ 934.466290][T15293] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input715 [ 934.810519][T15295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input716 [ 935.346703][T15313] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input717 [ 936.137840][T15327] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input718 [ 937.119060][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.125503][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.317644][T15338] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input719 [ 938.680615][T15339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input720 [ 939.562418][T15345] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input721 [ 940.168514][T15347] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input722 [ 940.610744][T15361] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input723 [ 941.133950][T15362] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input724 [ 942.043307][T15366] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input725 [ 942.371255][T15368] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input726 [ 942.702898][T15377] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input727 [ 943.450804][T15390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input728 [ 944.021932][T15391] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input729 [ 945.030973][T15392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input730 [ 946.370895][T15400] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input731 [ 947.068943][T15401] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input732 [ 947.581443][T15414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input733 [ 947.836963][T15416] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input734 [ 948.388898][T15422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input735 [ 949.239588][T15426] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input736 [ 950.134279][T15441] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input737 [ 950.667429][T15442] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input738 [ 951.288447][T15447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input739 [ 951.994430][T15458] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input740 [ 952.531616][T15463] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input741 [ 953.211528][T15465] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input742 [ 953.805306][T15471] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input743 [ 954.147532][T15476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input744 [ 957.152468][T15499] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input745 [ 957.680005][T15508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input746 [ 959.661099][T15525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input747 [ 960.629121][T15527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input748 [ 961.917471][T15543] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input749 [ 962.466938][T15545] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input750 [ 964.196422][T15557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input751 [ 964.656928][T15563] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input752 [ 966.271771][T15581] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input753 [ 966.794466][T15583] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input754 [ 968.850085][T15604] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input755 [ 969.305446][T15613] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input756 [ 970.558071][T15625] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input757 [ 971.988756][T15637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input758 [ 972.852771][T15644] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input759 [ 973.602936][T15647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input760 [ 974.277305][T15646] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input761 [ 974.628379][T15650] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input762 [ 975.423591][T15660] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input763 [ 976.066202][T15661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input764 [ 977.026662][T15681] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input765 [ 977.677392][T15682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input766 [ 980.768609][T15710] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input767 [ 980.916827][T15713] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input768 [ 981.644803][T15708] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input769 [ 982.148890][T15722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input770 [ 985.026142][T15756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input771 [ 985.619687][T15762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input772 [ 987.460084][T15783] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input773 [ 987.821476][T15784] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input774 [ 988.548706][T15788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input775 [ 989.572424][T15789] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input776 [ 990.419797][T15794] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input777 [ 990.888792][T15810] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input778 [ 991.484330][T15815] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input779 [ 991.897917][T15821] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input780 [ 994.943117][T15849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input781 [ 995.398339][T15858] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input782 [ 996.160956][T15856] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input783 [ 997.052672][T15859] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input784 [ 998.561802][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.568312][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.895556][T15880] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input785 [ 999.443100][T15883] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input786 [ 1001.477612][T15914] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input787 [ 1002.437844][T15918] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input788 [ 1003.187140][T15926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input789 [ 1003.617727][T15929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input790 [ 1004.233008][T15938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input791 [ 1005.097244][T15952] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input792 [ 1005.702779][T15950] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input793 [ 1006.081834][T15967] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input794 [ 1008.355107][T15990] FAULT_INJECTION: forcing a failure. [ 1008.355107][T15990] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.368095][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.0.1905 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1008.368137][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1008.368153][T15990] Call Trace: [ 1008.368161][T15990] [ 1008.368172][T15990] dump_stack_lvl+0x16c/0x1f0 [ 1008.368216][T15990] should_fail_ex+0x512/0x640 [ 1008.368253][T15990] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1008.368291][T15990] should_failslab+0xc2/0x120 [ 1008.368329][T15990] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1008.368365][T15990] ? mas_alloc_nodes+0x18b/0x8b0 [ 1008.368403][T15990] mas_alloc_nodes+0x18b/0x8b0 [ 1008.368442][T15990] mas_node_count_gfp+0x105/0x130 [ 1008.368476][T15990] mas_preallocate+0x7e0/0xde0 [ 1008.368513][T15990] ? __memcg_slab_post_alloc_hook+0x432/0x960 [ 1008.368560][T15990] ? __pfx_mas_preallocate+0x10/0x10 [ 1008.368612][T15990] ? anon_vma_name+0x81/0x2f0 [ 1008.368660][T15990] __split_vma+0x34a/0x1070 [ 1008.368698][T15990] ? __pfx___split_vma+0x10/0x10 [ 1008.368740][T15990] ? __pfx_mas_prev+0x10/0x10 [ 1008.368796][T15990] vms_gather_munmap_vmas+0x3b1/0x1340 [ 1008.368838][T15990] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1008.368877][T15990] ? mas_walk+0x6f5/0x980 [ 1008.368922][T15990] __mmap_region+0x436/0x27b0 [ 1008.368959][T15990] ? find_held_lock+0x2b/0x80 [ 1008.368987][T15990] ? __pfx___mmap_region+0x10/0x10 [ 1008.369017][T15990] ? process_measurement+0xf92/0x23e0 [ 1008.369059][T15990] ? vfs_getxattr_alloc+0xec/0x340 [ 1008.369092][T15990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1008.369134][T15990] ? rcu_is_watching+0x12/0xc0 [ 1008.369164][T15990] ? kfree+0x24f/0x4d0 [ 1008.369198][T15990] ? ima_free_modsig+0xd/0x50 [ 1008.369224][T15990] ? process_measurement+0x1e6/0x23e0 [ 1008.369308][T15990] ? trace_cap_capable+0x18d/0x200 [ 1008.369352][T15990] mmap_region+0x32b/0x3f0 [ 1008.369394][T15990] do_mmap+0xa3e/0x1210 [ 1008.369443][T15990] ? __pfx_do_mmap+0x10/0x10 [ 1008.369485][T15990] ? __pfx_down_write_killable+0x10/0x10 [ 1008.369532][T15990] vm_mmap_pgoff+0x29e/0x470 [ 1008.369581][T15990] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1008.369617][T15990] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1008.369660][T15990] ? hugetlbfs_get_inode+0x31f/0x730 [ 1008.369702][T15990] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1008.369750][T15990] __x64_sys_mmap+0x125/0x190 [ 1008.369806][T15990] do_syscall_64+0xcd/0x490 [ 1008.369845][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.369874][T15990] RIP: 0033:0x7f7201d8ebe9 [ 1008.369899][T15990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.369926][T15990] RSP: 002b:00007f7202bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1008.369955][T15990] RAX: ffffffffffffffda RBX: 00007f7201fb5fa0 RCX: 00007f7201d8ebe9 [ 1008.369973][T15990] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1008.369990][T15990] RBP: 00007f7202bac090 R08: 0000000000000401 R09: 0000300000000000 [ 1008.370008][T15990] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 1008.370024][T15990] R13: 00007f7201fb6038 R14: 00007f7201fb5fa0 R15: 00007ffeda4d18a8 [ 1008.370064][T15990] [ 1009.009038][T15995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input795 [ 1009.516315][T15999] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input796 [ 1010.351011][T16013] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input797 [ 1010.435946][T16020] usbip-vudc usbip-vudc.0: gadget not bound [ 1011.117161][T16015] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input798 [ 1011.739377][T16034] bond0: option all_slaves_active: invalid value () [ 1012.055365][T16024] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input799 [ 1012.797652][T16026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input800 [ 1013.988450][T16048] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input801 [ 1015.304453][T16051] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input802 [ 1015.752725][T16078] usbip-vudc usbip-vudc.0: gadget not bound [ 1016.087118][T16084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input803 [ 1016.816302][T16097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input804 [ 1019.162200][T16124] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input805 [ 1019.370724][T16126] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input806 [ 1019.651481][T16129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input807 [ 1020.246067][T16132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input808 [ 1021.903578][T16151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input809 [ 1022.497178][T16152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input810 [ 1023.021693][T16157] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input811 [ 1023.436800][T16159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input812 [ 1023.997617][T16176] FAULT_INJECTION: forcing a failure. [ 1023.997617][T16176] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.010605][T16176] CPU: 1 UID: 0 PID: 16176 Comm: syz.3.1930 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1024.010642][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1024.010653][T16176] Call Trace: [ 1024.010661][T16176] [ 1024.010669][T16176] dump_stack_lvl+0x16c/0x1f0 [ 1024.010696][T16176] should_fail_ex+0x512/0x640 [ 1024.010721][T16176] ? fs_reclaim_acquire+0xae/0x150 [ 1024.010749][T16176] ? ima_alloc_init_template+0xb5/0x720 [ 1024.010770][T16176] should_failslab+0xc2/0x120 [ 1024.010795][T16176] __kmalloc_noprof+0xd2/0x510 [ 1024.010816][T16176] ? find_held_lock+0x2b/0x80 [ 1024.010837][T16176] ima_alloc_init_template+0xb5/0x720 [ 1024.010860][T16176] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1024.010890][T16176] ima_store_measurement+0x1eb/0x5c0 [ 1024.010913][T16176] ? __pfx_ima_store_measurement+0x10/0x10 [ 1024.010936][T16176] ? vfs_getxattr_alloc+0xec/0x340 [ 1024.010962][T16176] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1024.010994][T16176] process_measurement+0x1ddb/0x23e0 [ 1024.011021][T16176] ? __pfx_process_measurement+0x10/0x10 [ 1024.011040][T16176] ? kasan_save_stack+0x33/0x60 [ 1024.011059][T16176] ? __kasan_slab_alloc+0x89/0x90 [ 1024.011080][T16176] ? security_file_alloc+0x34/0x2b0 [ 1024.011103][T16176] ? init_file+0x93/0x4c0 [ 1024.011131][T16176] ? find_held_lock+0x2b/0x80 [ 1024.011175][T16176] ima_file_mmap+0x1b1/0x1d0 [ 1024.011193][T16176] ? __pfx_ima_file_mmap+0x10/0x10 [ 1024.011216][T16176] security_mmap_file+0x88c/0x990 [ 1024.011241][T16176] vm_mmap_pgoff+0xec/0x470 [ 1024.011269][T16176] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1024.011292][T16176] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1024.011321][T16176] ? hugetlbfs_get_inode+0x31f/0x730 [ 1024.011347][T16176] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1024.011376][T16176] __x64_sys_mmap+0x125/0x190 [ 1024.011406][T16176] do_syscall_64+0xcd/0x490 [ 1024.011431][T16176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.011450][T16176] RIP: 0033:0x7f4e7e38ebe9 [ 1024.011465][T16176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.011482][T16176] RSP: 002b:00007f4e7f1d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1024.011501][T16176] RAX: ffffffffffffffda RBX: 00007f4e7e5b5fa0 RCX: 00007f4e7e38ebe9 [ 1024.011512][T16176] RDX: 00004000000000df RSI: 0000000000000004 RDI: 00000000fffff000 [ 1024.011523][T16176] RBP: 00007f4e7e411e19 R08: 0000000000000401 R09: 0000300000000000 [ 1024.011533][T16176] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1024.011544][T16176] R13: 00007f4e7e5b6038 R14: 00007f4e7e5b5fa0 R15: 00007ffc8b748e18 [ 1024.011566][T16176] [ 1024.165117][ T30] audit: type=1804 audit(1843104524.680:20): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.1930" name="anon_hugepage" dev="hugetlbfs" ino=53924 res=0 errno=0 [ 1024.510728][T16166] bond0: option all_slaves_active: invalid value () [ 1025.191319][T16183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input813 [ 1025.457845][T16191] ======================================================= [ 1025.457845][T16191] WARNING: The mand mount option has been deprecated and [ 1025.457845][T16191] and is ignored by this kernel. Remove the mand [ 1025.457845][T16191] option from the mount to silence this warning. [ 1025.457845][T16191] ======================================================= [ 1026.118667][T16199] FAULT_INJECTION: forcing a failure. [ 1026.118667][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.131943][T16199] CPU: 0 UID: 0 PID: 16199 Comm: syz.2.1934 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1026.131987][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1026.132004][T16199] Call Trace: [ 1026.132014][T16199] [ 1026.132025][T16199] dump_stack_lvl+0x16c/0x1f0 [ 1026.132064][T16199] should_fail_ex+0x512/0x640 [ 1026.132100][T16199] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1026.132127][T16199] should_failslab+0xc2/0x120 [ 1026.132152][T16199] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1026.132173][T16199] ? fput+0x9b/0xd0 [ 1026.132205][T16199] ? getname_flags.part.0+0x4c/0x550 [ 1026.132237][T16199] getname_flags.part.0+0x4c/0x550 [ 1026.132268][T16199] __x64_sys_mkdir+0xd8/0x140 [ 1026.132291][T16199] do_syscall_64+0xcd/0x490 [ 1026.132316][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.132335][T16199] RIP: 0033:0x7f1dac78ebe9 [ 1026.132350][T16199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.132368][T16199] RSP: 002b:00007f1dad57a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1026.132393][T16199] RAX: ffffffffffffffda RBX: 00007f1dac9b6180 RCX: 00007f1dac78ebe9 [ 1026.132405][T16199] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000480 [ 1026.132416][T16199] RBP: 00007f1dad57a090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.132427][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.132437][T16199] R13: 00007f1dac9b6218 R14: 00007f1dac9b6180 R15: 00007ffd9b093b28 [ 1026.132460][T16199] [ 1026.479987][T16197] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input814 [ 1027.950415][T16220] FAULT_INJECTION: forcing a failure. [ 1027.950415][T16220] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.005173][T16220] CPU: 1 UID: 0 PID: 16220 Comm: syz.2.1939 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1028.005220][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1028.005238][T16220] Call Trace: [ 1028.005248][T16220] [ 1028.005259][T16220] dump_stack_lvl+0x16c/0x1f0 [ 1028.005304][T16220] should_fail_ex+0x512/0x640 [ 1028.005343][T16220] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1028.005385][T16220] should_failslab+0xc2/0x120 [ 1028.005425][T16220] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1028.005462][T16220] ? getname_flags.part.0+0x4c/0x550 [ 1028.005513][T16220] getname_flags.part.0+0x4c/0x550 [ 1028.005564][T16220] getname_uflags+0x98/0xf0 [ 1028.005598][T16220] __x64_sys_execveat+0xc4/0x120 [ 1028.005636][T16220] do_syscall_64+0xcd/0x490 [ 1028.005687][T16220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.005718][T16220] RIP: 0033:0x7f1dac78ebe9 [ 1028.005744][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.005774][T16220] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1028.005805][T16220] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1028.005826][T16220] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1028.005845][T16220] RBP: 00007f1dad5bc090 R08: 0000000000011000 R09: 0000000000000000 [ 1028.005863][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.005881][T16220] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1028.005921][T16220] [ 1028.767355][T16227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input815 [ 1028.896999][T16229] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input816 [ 1030.862565][T16246] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input818 [ 1031.747965][T16249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input819 [ 1032.027242][T16253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input820 [ 1032.354711][T16257] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input821 [ 1032.857226][T16265] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input822 [ 1033.181353][T16266] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input823 [ 1033.640812][T16287] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input824 [ 1033.912622][T16288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input825 [ 1034.725994][T16302] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input826 [ 1034.990505][T16304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input827 [ 1036.412752][T16319] FAULT_INJECTION: forcing a failure. [ 1036.412752][T16319] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.445576][T16319] CPU: 1 UID: 0 PID: 16319 Comm: syz.0.1956 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1036.445605][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1036.445616][T16319] Call Trace: [ 1036.445622][T16319] [ 1036.445629][T16319] dump_stack_lvl+0x16c/0x1f0 [ 1036.445657][T16319] should_fail_ex+0x512/0x640 [ 1036.445682][T16319] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1036.445707][T16319] should_failslab+0xc2/0x120 [ 1036.445731][T16319] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1036.445754][T16319] ? getname_flags.part.0+0x4c/0x550 [ 1036.445786][T16319] getname_flags.part.0+0x4c/0x550 [ 1036.445816][T16319] getname_flags+0x93/0xf0 [ 1036.445844][T16319] user_path_at+0x24/0x60 [ 1036.445865][T16319] __x64_sys_umount+0x10a/0x1a0 [ 1036.445887][T16319] ? __pfx___x64_sys_umount+0x10/0x10 [ 1036.445911][T16319] ? rcu_is_watching+0x12/0xc0 [ 1036.445931][T16319] do_syscall_64+0xcd/0x490 [ 1036.445956][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.445975][T16319] RIP: 0033:0x7f7201d8ebe9 [ 1036.445990][T16319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.446008][T16319] RSP: 002b:00007f7202bac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1036.446026][T16319] RAX: ffffffffffffffda RBX: 00007f7201fb5fa0 RCX: 00007f7201d8ebe9 [ 1036.446038][T16319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 1036.446049][T16319] RBP: 00007f7202bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.446059][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.446070][T16319] R13: 00007f7201fb6038 R14: 00007f7201fb5fa0 R15: 00007ffeda4d18a8 [ 1036.446092][T16319] [ 1037.334539][T16324] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input828 [ 1037.991903][T16339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input829 [ 1038.466322][T16334] hub 8-0:1.0: USB hub found [ 1038.545386][T16334] hub 8-0:1.0: 1 port detected [ 1039.072515][T16349] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1962' sets config #0 [ 1039.594195][T16357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input830 [ 1039.616146][T16356] FAULT_INJECTION: forcing a failure. [ 1039.616146][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.847418][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.1963 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1039.847465][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1039.847483][T16356] Call Trace: [ 1039.847495][T16356] [ 1039.847507][T16356] dump_stack_lvl+0x16c/0x1f0 [ 1039.847551][T16356] should_fail_ex+0x512/0x640 [ 1039.847608][T16356] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1039.847645][T16356] should_failslab+0xc2/0x120 [ 1039.847685][T16356] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1039.847718][T16356] ? ptp_open+0xe4/0x550 [ 1039.847749][T16356] ptp_open+0xe4/0x550 [ 1039.847782][T16356] ? __pfx_ptp_open+0x10/0x10 [ 1039.847820][T16356] ? __pfx_ptp_open+0x10/0x10 [ 1039.847847][T16356] posix_clock_open+0x178/0x290 [ 1039.847881][T16356] ? __pfx_posix_clock_open+0x10/0x10 [ 1039.847913][T16356] chrdev_open+0x231/0x6a0 [ 1039.847949][T16356] ? __pfx_apparmor_file_open+0x10/0x10 [ 1039.847979][T16356] ? __pfx_chrdev_open+0x10/0x10 [ 1039.848019][T16356] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1039.848061][T16356] do_dentry_open+0x97f/0x1530 [ 1039.848097][T16356] ? __pfx_chrdev_open+0x10/0x10 [ 1039.848144][T16356] vfs_open+0x82/0x3f0 [ 1039.848193][T16356] path_openat+0x1de4/0x2cb0 [ 1039.848242][T16356] ? __pfx_path_openat+0x10/0x10 [ 1039.848286][T16356] do_filp_open+0x20b/0x470 [ 1039.848318][T16356] ? __pfx_do_filp_open+0x10/0x10 [ 1039.848385][T16356] ? alloc_fd+0x471/0x7d0 [ 1039.848427][T16356] do_sys_openat2+0x11b/0x1d0 [ 1039.848471][T16356] ? __pfx_do_sys_openat2+0x10/0x10 [ 1039.848531][T16356] __x64_sys_openat+0x174/0x210 [ 1039.848588][T16356] ? __pfx___x64_sys_openat+0x10/0x10 [ 1039.848653][T16356] do_syscall_64+0xcd/0x490 [ 1039.848697][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.848727][T16356] RIP: 0033:0x7f1dac78ebe9 [ 1039.848753][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.848781][T16356] RSP: 002b:00007f1dad59b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1039.848809][T16356] RAX: ffffffffffffffda RBX: 00007f1dac9b6090 RCX: 00007f1dac78ebe9 [ 1039.848828][T16356] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1039.848847][T16356] RBP: 00007f1dac811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1039.848865][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.848882][T16356] R13: 00007f1dac9b6128 R14: 00007f1dac9b6090 R15: 00007ffd9b093b28 [ 1039.848922][T16356] [ 1040.644798][T16358] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input831 [ 1041.188442][T16372] blktrace: Concurrent blktraces are not allowed on ram7 [ 1041.952834][T16379] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input833 [ 1042.077891][T16380] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input834 [ 1045.503034][T16418] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input835 [ 1046.107158][T16420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input836 [ 1046.784037][T16436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input837 [ 1047.254091][T16438] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input838 [ 1048.604502][T16447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input839 [ 1050.234479][T16462] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input840 [ 1052.048487][T16476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input841 [ 1052.073392][T16473] FAULT_INJECTION: forcing a failure. [ 1052.073392][T16473] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.197680][T16473] CPU: 0 UID: 0 PID: 16473 Comm: syz.1.1984 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1052.197721][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1052.197736][T16473] Call Trace: [ 1052.197744][T16473] [ 1052.197753][T16473] dump_stack_lvl+0x16c/0x1f0 [ 1052.197789][T16473] should_fail_ex+0x512/0x640 [ 1052.197822][T16473] ? __kmalloc_noprof+0xbf/0x510 [ 1052.197853][T16473] ? ptp_open+0x104/0x550 [ 1052.197874][T16473] should_failslab+0xc2/0x120 [ 1052.197905][T16473] __kmalloc_noprof+0xd2/0x510 [ 1052.197935][T16473] ? kasan_save_track+0x14/0x30 [ 1052.197966][T16473] ptp_open+0x104/0x550 [ 1052.197992][T16473] ? __pfx_ptp_open+0x10/0x10 [ 1052.198024][T16473] ? __pfx_ptp_open+0x10/0x10 [ 1052.198045][T16473] posix_clock_open+0x178/0x290 [ 1052.198072][T16473] ? __pfx_posix_clock_open+0x10/0x10 [ 1052.198098][T16473] chrdev_open+0x231/0x6a0 [ 1052.198127][T16473] ? __pfx_apparmor_file_open+0x10/0x10 [ 1052.198152][T16473] ? __pfx_chrdev_open+0x10/0x10 [ 1052.198183][T16473] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1052.198222][T16473] do_dentry_open+0x97f/0x1530 [ 1052.198252][T16473] ? __pfx_chrdev_open+0x10/0x10 [ 1052.198288][T16473] vfs_open+0x82/0x3f0 [ 1052.198327][T16473] path_openat+0x1de4/0x2cb0 [ 1052.198368][T16473] ? __pfx_path_openat+0x10/0x10 [ 1052.198405][T16473] do_filp_open+0x20b/0x470 [ 1052.198434][T16473] ? __pfx_do_filp_open+0x10/0x10 [ 1052.198529][T16473] ? alloc_fd+0x471/0x7d0 [ 1052.198566][T16473] do_sys_openat2+0x11b/0x1d0 [ 1052.198602][T16473] ? __pfx_do_sys_openat2+0x10/0x10 [ 1052.198652][T16473] __x64_sys_openat+0x174/0x210 [ 1052.198689][T16473] ? __pfx___x64_sys_openat+0x10/0x10 [ 1052.198742][T16473] do_syscall_64+0xcd/0x490 [ 1052.198775][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.198798][T16473] RIP: 0033:0x7f0a4ed8ebe9 [ 1052.198818][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.198842][T16473] RSP: 002b:00007f0a4cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1052.198865][T16473] RAX: ffffffffffffffda RBX: 00007f0a4efb6090 RCX: 00007f0a4ed8ebe9 [ 1052.198881][T16473] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1052.198895][T16473] RBP: 00007f0a4ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1052.198910][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.198923][T16473] R13: 00007f0a4efb6128 R14: 00007f0a4efb6090 R15: 00007ffd2dbe58f8 [ 1052.198956][T16473] [ 1053.090270][T16477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input842 [ 1055.357056][T16499] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input843 [ 1055.667019][T16501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input844 [ 1060.001216][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.009421][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.629742][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1061.693012][T16562] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1062.109130][T16572] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input845 [ 1062.644428][T16575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input846 [ 1064.362663][T16596] FAULT_INJECTION: forcing a failure. [ 1064.362663][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.386757][T16596] CPU: 1 UID: 0 PID: 16596 Comm: syz.2.2012 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1064.386805][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.386824][T16596] Call Trace: [ 1064.386834][T16596] [ 1064.386846][T16596] dump_stack_lvl+0x16c/0x1f0 [ 1064.386890][T16596] should_fail_ex+0x512/0x640 [ 1064.386931][T16596] ? __kmalloc_noprof+0xbf/0x510 [ 1064.386970][T16596] ? lsm_blob_alloc+0x68/0x90 [ 1064.387014][T16596] should_failslab+0xc2/0x120 [ 1064.387053][T16596] __kmalloc_noprof+0xd2/0x510 [ 1064.387098][T16596] lsm_blob_alloc+0x68/0x90 [ 1064.387144][T16596] security_sk_alloc+0x30/0x270 [ 1064.387181][T16596] sk_prot_alloc+0x1c7/0x2a0 [ 1064.387231][T16596] sk_alloc+0x36/0xc20 [ 1064.387268][T16596] __netlink_create+0x5e/0x2c0 [ 1064.387315][T16596] __netlink_kernel_create+0xed/0x750 [ 1064.387358][T16596] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1064.387412][T16596] uevent_net_init+0xf8/0x350 [ 1064.387457][T16596] ? __pfx_uevent_net_init+0x10/0x10 [ 1064.387504][T16596] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1064.387561][T16596] ? __pfx_uevent_net_init+0x10/0x10 [ 1064.387599][T16596] ops_init+0x1e2/0x5f0 [ 1064.387640][T16596] setup_net+0x10f/0x380 [ 1064.387675][T16596] ? lockdep_init_map_type+0x5c/0x280 [ 1064.387717][T16596] ? __pfx_setup_net+0x10/0x10 [ 1064.387759][T16596] ? debug_mutex_init+0x37/0x70 [ 1064.387793][T16596] copy_net_ns+0x2a6/0x5f0 [ 1064.387838][T16596] create_new_namespaces+0x3ea/0xa90 [ 1064.387883][T16596] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1064.387921][T16596] ksys_unshare+0x45b/0xa40 [ 1064.387960][T16596] ? __pfx_ksys_unshare+0x10/0x10 [ 1064.387999][T16596] ? xfd_validate_state+0x61/0x180 [ 1064.388052][T16596] __x64_sys_unshare+0x31/0x40 [ 1064.388093][T16596] do_syscall_64+0xcd/0x490 [ 1064.388133][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.388165][T16596] RIP: 0033:0x7f1dac78ebe9 [ 1064.388191][T16596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.388220][T16596] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1064.388249][T16596] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1064.388270][T16596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1064.388287][T16596] RBP: 00007f1dac811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1064.388317][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.388336][T16596] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1064.388380][T16596] [ 1064.390360][T16596] kobject_uevent: unable to create netlink socket! [ 1065.101894][T16604] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2014'. [ 1065.180897][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1065.232511][T16606] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1065.754419][T16616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input847 [ 1066.494701][T16617] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input848 [ 1066.900965][T16628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input849 [ 1067.943942][T16637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input850 [ 1068.871148][T16644] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input851 [ 1069.778313][T16649] FAULT_INJECTION: forcing a failure. [ 1069.778313][T16649] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.804729][T16649] CPU: 0 UID: 0 PID: 16649 Comm: syz.2.2025 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1069.804776][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.804795][T16649] Call Trace: [ 1069.804806][T16649] [ 1069.804818][T16649] dump_stack_lvl+0x16c/0x1f0 [ 1069.804864][T16649] should_fail_ex+0x512/0x640 [ 1069.804904][T16649] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1069.804947][T16649] should_failslab+0xc2/0x120 [ 1069.804986][T16649] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1069.805023][T16649] ? __alloc_skb+0x2b2/0x380 [ 1069.805065][T16649] __alloc_skb+0x2b2/0x380 [ 1069.805098][T16649] ? __pfx___alloc_skb+0x10/0x10 [ 1069.805141][T16649] ? netlink_has_listeners+0x20f/0x430 [ 1069.805184][T16649] alloc_uevent_skb+0x7d/0x210 [ 1069.805233][T16649] kobject_uevent_env+0xca4/0x1870 [ 1069.805284][T16649] ? queue_work_on+0x12a/0x1f0 [ 1069.805311][T16649] ? bus_to_subsys+0x131/0x160 [ 1069.805349][T16649] driver_bound+0x164/0x230 [ 1069.805390][T16649] device_bind_driver+0x3a/0x70 [ 1069.805430][T16649] mac80211_hwsim_new_radio+0x3e5/0x54d0 [ 1069.805513][T16649] ? __asan_memset+0x23/0x50 [ 1069.805549][T16649] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1069.805612][T16649] hwsim_new_radio_nl+0xb51/0x12c0 [ 1069.805648][T16649] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1069.805714][T16649] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1069.805761][T16649] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1069.805819][T16649] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1069.805868][T16649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1069.805931][T16649] ? bpf_lsm_capable+0x9/0x10 [ 1069.805959][T16649] ? security_capable+0x7e/0x260 [ 1069.805991][T16649] ? ns_capable+0xd7/0x110 [ 1069.806028][T16649] genl_rcv_msg+0x55c/0x800 [ 1069.806079][T16649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1069.806125][T16649] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1069.806193][T16649] netlink_rcv_skb+0x158/0x420 [ 1069.806234][T16649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1069.806279][T16649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1069.806341][T16649] ? netlink_deliver_tap+0x1ae/0xd30 [ 1069.806387][T16649] genl_rcv+0x28/0x40 [ 1069.806426][T16649] netlink_unicast+0x5a7/0x870 [ 1069.806474][T16649] ? __pfx_netlink_unicast+0x10/0x10 [ 1069.806522][T16649] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1069.806558][T16649] ? __lock_acquire+0xb97/0x1ce0 [ 1069.806612][T16649] netlink_sendmsg+0x8d1/0xdd0 [ 1069.806661][T16649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.806708][T16649] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1069.806751][T16649] ____sys_sendmsg+0xa95/0xc70 [ 1069.806801][T16649] ? copy_msghdr_from_user+0x10a/0x160 [ 1069.806839][T16649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.806900][T16649] ? __pfx_futex_wake_mark+0x10/0x10 [ 1069.806954][T16649] ___sys_sendmsg+0x134/0x1d0 [ 1069.806996][T16649] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.807102][T16649] __sys_sendmsg+0x16d/0x220 [ 1069.807141][T16649] ? __pfx___sys_sendmsg+0x10/0x10 [ 1069.807178][T16649] ? __x64_sys_futex+0x1e0/0x4c0 [ 1069.807247][T16649] do_syscall_64+0xcd/0x490 [ 1069.807290][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.807322][T16649] RIP: 0033:0x7f1dac78ebe9 [ 1069.807348][T16649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.807378][T16649] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.807406][T16649] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1069.807426][T16649] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 1069.807444][T16649] RBP: 00007f1dac811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1069.807464][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.807482][T16649] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1069.807534][T16649] [ 1070.772401][T16657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input852 [ 1070.782549][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1070.796554][T16655] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1071.910505][T16666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input853 [ 1072.098207][T16667] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input854 [ 1072.323261][T16669] FAULT_INJECTION: forcing a failure. [ 1072.323261][T16669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.390806][T16669] CPU: 1 UID: 0 PID: 16669 Comm: syz.3.2031 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1072.390836][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1072.390847][T16669] Call Trace: [ 1072.390854][T16669] [ 1072.390862][T16669] dump_stack_lvl+0x16c/0x1f0 [ 1072.390888][T16669] should_fail_ex+0x512/0x640 [ 1072.390917][T16669] _copy_to_iter+0x29f/0x16f0 [ 1072.390947][T16669] ? chacha_block_generic+0x211/0x330 [ 1072.390975][T16669] ? __pfx__copy_to_iter+0x10/0x10 [ 1072.391006][T16669] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.391027][T16669] ? crng_make_state+0x48e/0x6d0 [ 1072.391059][T16669] get_random_bytes_user+0x17f/0x3c0 [ 1072.391089][T16669] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1072.391122][T16669] ? do_futex+0x122/0x350 [ 1072.391150][T16669] ? import_ubuf+0x1b6/0x220 [ 1072.391178][T16669] __x64_sys_getrandom+0x183/0x290 [ 1072.391196][T16669] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1072.391224][T16669] do_syscall_64+0xcd/0x490 [ 1072.391248][T16669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.391266][T16669] RIP: 0033:0x7f4e7e38ebe9 [ 1072.391281][T16669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.391298][T16669] RSP: 002b:00007f4e7f1d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1072.391316][T16669] RAX: ffffffffffffffda RBX: 00007f4e7e5b5fa0 RCX: 00007f4e7e38ebe9 [ 1072.391327][T16669] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1072.391338][T16669] RBP: 00007f4e7e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1072.391348][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.391358][T16669] R13: 00007f4e7e5b6038 R14: 00007f4e7e5b5fa0 R15: 00007ffc8b748e18 [ 1072.391380][T16669] [ 1073.574284][T16689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input855 [ 1076.036730][T16711] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2039'. [ 1076.646798][T16715] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input856 [ 1077.969521][T16728] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input857 [ 1078.226672][T16735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1078.257761][T16735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1078.269939][T16735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1078.284805][T16735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1078.299404][T16735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1079.552929][T16739] delete_channel: no stack [ 1079.681699][T16748] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2047' sets config #0 [ 1080.407224][T16735] Bluetooth: hci4: command tx timeout [ 1080.897995][T16734] chnl_net:caif_netlink_parms(): no params data found [ 1081.464519][T16734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.484519][T16734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.523614][T16734] bridge_slave_0: entered allmulticast mode [ 1081.537335][T16734] bridge_slave_0: entered promiscuous mode [ 1081.546840][T16734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.554435][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.572144][T16734] bridge_slave_1: entered allmulticast mode [ 1081.691507][T16734] bridge_slave_1: entered promiscuous mode [ 1082.092469][T16734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.131965][T16734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.475861][T16735] Bluetooth: hci4: command tx timeout [ 1082.870883][T16734] team0: Port device team_slave_0 added [ 1083.024360][T16734] team0: Port device team_slave_1 added [ 1083.242594][T16786] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input858 [ 1083.442266][T16734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.506896][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.535116][T16734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.558918][T16734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.566094][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.593906][T16734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.971532][T16734] hsr_slave_0: entered promiscuous mode [ 1083.983626][T16734] hsr_slave_1: entered promiscuous mode [ 1083.994282][T16734] debugfs: 'hsr0' already exists in 'hsr' [ 1084.001643][T16734] Cannot create hsr debugfs directory [ 1084.557873][T16735] Bluetooth: hci4: command tx timeout [ 1084.667264][T16791] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input859 [ 1085.034204][T16734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1085.102530][T16734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1085.161237][T16734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1085.291518][T16734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1085.303597][T16795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input860 [ 1085.913301][T16816] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input861 [ 1085.926426][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.036664][T16817] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input862 [ 1086.084620][T16734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.156270][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.163454][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.236779][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.244119][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.507770][T16734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1086.519726][T16734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.636142][T16735] Bluetooth: hci4: command tx timeout [ 1087.248120][T16734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.004079][T16841] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input863 [ 1088.876660][T16734] veth0_vlan: entered promiscuous mode [ 1088.944316][T16734] veth1_vlan: entered promiscuous mode [ 1089.188460][T16734] veth0_macvtap: entered promiscuous mode [ 1089.210112][T16734] veth1_macvtap: entered promiscuous mode [ 1089.292535][T16734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.323489][T16734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.388379][ T7533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.496162][ T7533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.554525][ T7533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.635606][ T7533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.016635][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.024520][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.237620][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.317643][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.522943][T16734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1091.057632][T16869] netlink: zone id is out of range [ 1091.119817][T16869] netlink: zone id is out of range [ 1091.129997][T16869] netlink: zone id is out of range [ 1091.140192][T16869] netlink: zone id is out of range [ 1091.145689][T16869] netlink: zone id is out of range [ 1091.156418][T16869] netlink: zone id is out of range [ 1091.200811][T16869] netlink: zone id is out of range [ 1091.218623][T16869] netlink: zone id is out of range [ 1091.319519][T16869] netlink: zone id is out of range [ 1091.349929][T16869] netlink: zone id is out of range [ 1092.137315][T16882] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input864 [ 1094.484636][T16902] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1095.987819][T16916] FAULT_INJECTION: forcing a failure. [ 1095.987819][T16916] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.045080][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.2.2076 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1096.045122][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1096.045138][T16916] Call Trace: [ 1096.045148][T16916] [ 1096.045158][T16916] dump_stack_lvl+0x16c/0x1f0 [ 1096.045197][T16916] should_fail_ex+0x512/0x640 [ 1096.045234][T16916] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1096.045272][T16916] should_failslab+0xc2/0x120 [ 1096.045304][T16916] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1096.045334][T16916] ? __alloc_skb+0x2b2/0x380 [ 1096.045382][T16916] __alloc_skb+0x2b2/0x380 [ 1096.045415][T16916] ? __pfx___alloc_skb+0x10/0x10 [ 1096.045454][T16916] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1096.045490][T16916] ? __lock_acquire+0xb97/0x1ce0 [ 1096.045533][T16916] netlink_alloc_large_skb+0x69/0x130 [ 1096.045573][T16916] netlink_sendmsg+0x6a1/0xdd0 [ 1096.045625][T16916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.045667][T16916] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1096.045704][T16916] ____sys_sendmsg+0xa95/0xc70 [ 1096.045750][T16916] ? copy_msghdr_from_user+0x10a/0x160 [ 1096.045785][T16916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1096.045834][T16916] ? __pfx__kstrtoull+0x10/0x10 [ 1096.045875][T16916] ___sys_sendmsg+0x134/0x1d0 [ 1096.045912][T16916] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.045964][T16916] ? find_held_lock+0x2b/0x80 [ 1096.046014][T16916] __sys_sendmmsg+0x200/0x420 [ 1096.046067][T16916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1096.046119][T16916] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1096.046168][T16916] ? fput+0x9b/0xd0 [ 1096.046205][T16916] ? ksys_write+0x1ac/0x250 [ 1096.046235][T16916] ? __pfx_ksys_write+0x10/0x10 [ 1096.046272][T16916] __x64_sys_sendmmsg+0x9c/0x100 [ 1096.046307][T16916] ? lockdep_hardirqs_on+0x7c/0x110 [ 1096.046339][T16916] do_syscall_64+0xcd/0x490 [ 1096.046376][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.046405][T16916] RIP: 0033:0x7f1dac78ebe9 [ 1096.046431][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.046459][T16916] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1096.046488][T16916] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1096.046507][T16916] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1096.046525][T16916] RBP: 00007f1dad5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.046542][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.046557][T16916] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1096.046594][T16916] [ 1100.109559][T16960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input865 [ 1100.779968][T16961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input866 [ 1101.328193][T16972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input867 [ 1101.654137][T16975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input868 [ 1102.203008][T16984] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2092' sets config #0 [ 1102.269571][T16986] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input869 [ 1102.706197][T16988] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input870 [ 1104.112792][T17003] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input871 [ 1104.278044][T17008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input872 [ 1105.944173][T17021] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input873 [ 1106.430817][T17023] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input874 [ 1109.313284][T17060] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input875 [ 1109.807306][T17061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input876 [ 1111.038145][T17067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input877 [ 1111.300602][T17071] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input878 [ 1113.005443][T17088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input879 [ 1113.623399][T17092] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input880 [ 1114.436064][T17107] net_ratelimit: 5 callbacks suppressed [ 1114.436098][T17107] netlink: zone id is out of range [ 1114.467119][T17107] netlink: zone id is out of range [ 1114.510621][T17107] netlink: zone id is out of range [ 1114.525238][T17107] netlink: zone id is out of range [ 1114.536532][T17107] netlink: zone id is out of range [ 1114.546076][T17107] netlink: zone id is out of range [ 1114.562434][T17107] netlink: zone id is out of range [ 1114.572120][T17107] netlink: zone id is out of range [ 1114.585008][T17107] netlink: zone id is out of range [ 1114.595250][T17107] netlink: zone id is out of range [ 1116.245551][T17131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input881 [ 1116.763346][T17132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input882 [ 1119.733665][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1119.747636][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1119.758927][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1119.767879][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1119.776478][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1120.269900][T17180] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input883 [ 1120.745598][T17181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input884 [ 1121.058901][T17170] chnl_net:caif_netlink_parms(): no params data found [ 1121.449468][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.456090][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.836160][ T5863] Bluetooth: hci5: command tx timeout [ 1122.003816][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.394441][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.500101][T17170] bridge_slave_0: entered allmulticast mode [ 1122.538982][T17170] bridge_slave_0: entered promiscuous mode [ 1122.683331][T17170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.754949][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.812488][T17170] bridge_slave_1: entered allmulticast mode [ 1122.846977][T17170] bridge_slave_1: entered promiscuous mode [ 1123.538429][T17170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.722275][T17170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.910833][T17170] team0: Port device team_slave_0 added [ 1123.924961][ T5863] Bluetooth: hci5: command tx timeout [ 1124.135301][T17170] team0: Port device team_slave_1 added [ 1124.416685][T17170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.423802][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.466404][T17170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.503844][T17170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.523094][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.563188][T17170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.487732][T17170] hsr_slave_0: entered promiscuous mode [ 1125.539619][T17170] hsr_slave_1: entered promiscuous mode [ 1125.569931][T17230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input885 [ 1125.584690][T17170] debugfs: 'hsr0' already exists in 'hsr' [ 1125.605502][T17170] Cannot create hsr debugfs directory [ 1126.005080][ T5863] Bluetooth: hci5: command tx timeout [ 1126.024211][T17232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input886 [ 1126.968229][T17170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1127.018747][T17170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1127.105609][T17170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1127.416597][T17170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1127.906812][T17251] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input887 [ 1127.946953][T17170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.075977][ T5863] Bluetooth: hci5: command tx timeout [ 1128.116089][T17170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.201750][T17170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1128.212395][T17170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1128.233268][T17253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input888 [ 1128.238423][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.250191][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.297899][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.305275][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.013147][T17170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.244680][T17170] veth0_vlan: entered promiscuous mode [ 1130.294597][T17170] veth1_vlan: entered promiscuous mode [ 1130.668367][T17170] veth0_macvtap: entered promiscuous mode [ 1130.715076][T17170] veth1_macvtap: entered promiscuous mode [ 1130.859386][T17170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.920007][T17170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.022593][ T7538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.042942][ T7538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.075759][ T7533] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.144685][ T7538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.533577][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.576756][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.783834][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.846425][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.256302][T17290] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input889 [ 1132.495762][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 1132.748225][T17292] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input890 [ 1134.248002][T17310] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input891 [ 1135.418274][T17311] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input892 [ 1135.640454][T17317] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1137.237033][T17313] kexec: Could not allocate control_code_buffer [ 1143.880542][T16735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1143.905329][T16735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1143.913801][T16735] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1143.923591][T16735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1143.933039][T16735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1144.996935][T17375] chnl_net:caif_netlink_parms(): no params data found [ 1145.554356][T17403] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input893 [ 1145.674675][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.685383][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.693696][T17375] bridge_slave_0: entered allmulticast mode [ 1145.706222][T17375] bridge_slave_0: entered promiscuous mode [ 1145.913664][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.923402][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.938788][T17404] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input894 [ 1145.987822][T17375] bridge_slave_1: entered allmulticast mode [ 1146.011292][ T5863] Bluetooth: hci6: command tx timeout [ 1146.048506][T17375] bridge_slave_1: entered promiscuous mode [ 1146.389547][T17375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.502242][T17375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.703242][T17375] team0: Port device team_slave_0 added [ 1146.754536][T17375] team0: Port device team_slave_1 added [ 1146.950871][T17375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.989268][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.065254][T17375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.097407][T17375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.104773][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.204924][T17375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.502476][T17375] hsr_slave_0: entered promiscuous mode [ 1147.509637][T17375] hsr_slave_1: entered promiscuous mode [ 1147.516814][T17375] debugfs: 'hsr0' already exists in 'hsr' [ 1147.524356][T17375] Cannot create hsr debugfs directory [ 1147.995873][T17424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input895 [ 1148.080064][ T5863] Bluetooth: hci6: command tx timeout [ 1148.193686][T17375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1148.313375][T17375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1148.358432][T17425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input896 [ 1148.380995][T17375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1148.398594][T17375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1148.909752][T17375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.990823][T17375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.071706][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.079403][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.109399][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.116906][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.214542][T17375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1149.226071][T17375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1150.004042][T17453] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input897 [ 1150.012011][T17375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.165928][ T5863] Bluetooth: hci6: command tx timeout [ 1150.217466][T17455] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input898 [ 1151.656252][T17375] veth0_vlan: entered promiscuous mode [ 1151.701982][T17375] veth1_vlan: entered promiscuous mode [ 1151.952974][T17375] veth0_macvtap: entered promiscuous mode [ 1151.968196][T17375] veth1_macvtap: entered promiscuous mode [ 1152.042136][T17375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.129659][T17375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.235851][ T5863] Bluetooth: hci6: command tx timeout [ 1152.307169][T17470] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input899 [ 1152.454916][ T7533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.507422][ T7533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.573792][ T7533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.606089][ T7533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.780691][T17472] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input900 [ 1153.007314][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.035030][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.147453][ T7533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.174349][ T7533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.626332][T17492] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input901 [ 1154.198180][T17497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input902 [ 1156.235051][T17496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1156.315054][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 1156.343895][T17496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1156.351833][T17496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1156.361696][T17496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1156.442249][T17496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1156.495074][T17496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1156.543795][T17496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1156.573053][T17496] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1156.588695][T17496] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1156.669036][T17496] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1156.739578][T17496] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1156.755130][T17496] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1156.812914][T17496] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1156.895630][T16735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1156.906500][T16735] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1156.916012][T16735] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1156.927396][T16735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1156.936551][T16735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1157.157249][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1157.167278][T17521] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1157.818921][T17526] FAULT_INJECTION: forcing a failure. [ 1157.818921][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.908638][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.2.2207 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1157.908684][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1157.908702][T17526] Call Trace: [ 1157.908712][T17526] [ 1157.908723][T17526] dump_stack_lvl+0x16c/0x1f0 [ 1157.908764][T17526] should_fail_ex+0x512/0x640 [ 1157.908804][T17526] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1157.908845][T17526] should_failslab+0xc2/0x120 [ 1157.908885][T17526] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1157.908921][T17526] ? __alloc_skb+0x2b2/0x380 [ 1157.908963][T17526] __alloc_skb+0x2b2/0x380 [ 1157.908997][T17526] ? __pfx___alloc_skb+0x10/0x10 [ 1157.909039][T17526] ? find_held_lock+0x2b/0x80 [ 1157.909074][T17526] __ip6_append_data+0x2b74/0x4750 [ 1157.909119][T17526] ? __pfx_raw6_getfrag+0x10/0x10 [ 1157.909182][T17526] ? __pfx___ip6_append_data+0x10/0x10 [ 1157.909216][T17526] ? __pfx_ip6_mtu+0x10/0x10 [ 1157.909258][T17526] ? ip6_setup_cork+0xc51/0x1530 [ 1157.909294][T17526] ip6_append_data+0x1bd/0x4c0 [ 1157.909327][T17526] ? __pfx_raw6_getfrag+0x10/0x10 [ 1157.909378][T17526] rawv6_sendmsg+0x163d/0x4820 [ 1157.909407][T17526] ? aa_label_sk_perm+0x195/0x600 [ 1157.909442][T17526] ? up_write+0x1b2/0x520 [ 1157.909498][T17526] ? aa_profile_af_perm+0x360/0x3a0 [ 1157.909541][T17526] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1157.909572][T17526] ? __lock_acquire+0x62e/0x1ce0 [ 1157.909619][T17526] ? __lock_acquire+0x62e/0x1ce0 [ 1157.909705][T17526] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1157.909738][T17526] ? inet_sendmsg+0x119/0x140 [ 1157.909763][T17526] inet_sendmsg+0x119/0x140 [ 1157.909792][T17526] ____sys_sendmsg+0x973/0xc70 [ 1157.909838][T17526] ? copy_msghdr_from_user+0x10a/0x160 [ 1157.909874][T17526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.909925][T17526] ? __pfx__kstrtoull+0x10/0x10 [ 1157.909970][T17526] ___sys_sendmsg+0x134/0x1d0 [ 1157.910009][T17526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.910067][T17526] ? find_held_lock+0x2b/0x80 [ 1157.910123][T17526] __sys_sendmmsg+0x200/0x420 [ 1157.910167][T17526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1157.910218][T17526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1157.910274][T17526] ? fput+0x9b/0xd0 [ 1157.910314][T17526] ? ksys_write+0x1ac/0x250 [ 1157.910348][T17526] ? __pfx_ksys_write+0x10/0x10 [ 1157.910389][T17526] __x64_sys_sendmmsg+0x9c/0x100 [ 1157.910426][T17526] ? lockdep_hardirqs_on+0x7c/0x110 [ 1157.910461][T17526] do_syscall_64+0xcd/0x490 [ 1157.910511][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.910542][T17526] RIP: 0033:0x7f1dac78ebe9 [ 1157.910566][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.910594][T17526] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1157.910624][T17526] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1157.910645][T17526] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000003 [ 1157.910662][T17526] RBP: 00007f1dad5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.910679][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.910696][T17526] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1157.910736][T17526] [ 1158.368628][T16735] Bluetooth: hci1: command 0x0c1a tx timeout [ 1158.395379][T16735] Bluetooth: hci3: command 0x0c1a tx timeout [ 1158.395443][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 1158.427217][T17538] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input903 [ 1158.477290][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 1158.502728][T17510] chnl_net:caif_netlink_parms(): no params data found [ 1158.641786][ T5863] Bluetooth: hci5: command 0x0c1a tx timeout [ 1158.805099][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 1158.955229][ T5863] Bluetooth: hci7: command tx timeout [ 1159.185526][T17540] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input904 [ 1160.270913][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.292196][T17510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.324073][T17510] bridge_slave_0: entered allmulticast mode [ 1160.355947][T17510] bridge_slave_0: entered promiscuous mode [ 1160.474924][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.523860][T17510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.545470][T17510] bridge_slave_1: entered allmulticast mode [ 1160.555113][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 1160.555439][T17510] bridge_slave_1: entered promiscuous mode [ 1160.598928][T17555] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input905 [ 1160.719590][ T5863] Bluetooth: hci5: command 0x0c1a tx timeout [ 1160.875319][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 1161.038486][ T5863] Bluetooth: hci7: command tx timeout [ 1161.135896][T17557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input906 [ 1161.208643][T17510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.237399][T17510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.387167][T17510] team0: Port device team_slave_0 added [ 1161.438561][T17510] team0: Port device team_slave_1 added [ 1161.714234][T17510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.721573][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.770821][T17566] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1161.814863][T17510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.862697][T17510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.907883][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.012257][T17510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.286142][T17510] hsr_slave_0: entered promiscuous mode [ 1162.295582][T17510] hsr_slave_1: entered promiscuous mode [ 1162.302141][T17510] debugfs: 'hsr0' already exists in 'hsr' [ 1162.308307][T17510] Cannot create hsr debugfs directory [ 1162.634990][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 1162.825324][ T5863] Bluetooth: hci5: command 0x0c1a tx timeout [ 1162.955198][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 1163.115697][ T5863] Bluetooth: hci7: command tx timeout [ 1163.131828][T17510] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1163.237714][T17510] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1163.321446][T17510] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1163.399845][T17510] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1163.756456][T17588] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input907 [ 1163.933949][T17590] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input908 [ 1164.130085][T17510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.223396][T17510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.270407][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.277602][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.408025][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.415249][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.505309][T17597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input909 [ 1164.935159][T17601] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input910 [ 1165.285056][ T5863] Bluetooth: hci7: command tx timeout [ 1165.711984][T17510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.117906][T17510] veth0_vlan: entered promiscuous mode [ 1167.177094][T17510] veth1_vlan: entered promiscuous mode [ 1167.414243][T17510] veth0_macvtap: entered promiscuous mode [ 1167.528229][T17510] veth1_macvtap: entered promiscuous mode [ 1167.624714][T17510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.642344][T17510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.665984][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.694292][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.732952][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.782983][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.185428][T17624] FAULT_INJECTION: forcing a failure. [ 1168.185428][T17624] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.198538][T17624] CPU: 0 UID: 0 PID: 17624 Comm: syz.3.2228 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1168.198585][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.198603][T17624] Call Trace: [ 1168.198612][T17624] [ 1168.198623][T17624] dump_stack_lvl+0x16c/0x1f0 [ 1168.198666][T17624] should_fail_ex+0x512/0x640 [ 1168.198706][T17624] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1168.198747][T17624] should_failslab+0xc2/0x120 [ 1168.198787][T17624] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1168.198821][T17624] ? inode_set_ctime_current+0x2a1/0x8f0 [ 1168.198861][T17624] ? __d_alloc+0x32/0xae0 [ 1168.198901][T17624] __d_alloc+0x32/0xae0 [ 1168.198942][T17624] d_alloc_pseudo+0x1c/0xc0 [ 1168.198982][T17624] alloc_file_pseudo+0xcf/0x230 [ 1168.199027][T17624] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1168.199072][T17624] ? hugetlbfs_get_inode+0x31f/0x730 [ 1168.199112][T17624] hugetlb_file_setup+0x4ce/0x620 [ 1168.199149][T17624] ksys_mmap_pgoff+0x189/0x5c0 [ 1168.199199][T17624] __x64_sys_mmap+0x125/0x190 [ 1168.199251][T17624] do_syscall_64+0xcd/0x490 [ 1168.199293][T17624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.199325][T17624] RIP: 0033:0x7f4e7e38ebe9 [ 1168.199350][T17624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.199379][T17624] RSP: 002b:00007f4e7f1d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1168.199408][T17624] RAX: ffffffffffffffda RBX: 00007f4e7e5b5fa0 RCX: 00007f4e7e38ebe9 [ 1168.199428][T17624] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 1168.199456][T17624] RBP: 00007f4e7e411e19 R08: 0000000000000602 R09: 0000300000000000 [ 1168.199476][T17624] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1168.199494][T17624] R13: 00007f4e7e5b6038 R14: 00007f4e7e5b5fa0 R15: 00007ffc8b748e18 [ 1168.199535][T17624] [ 1168.468273][ T7534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.468274][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.476297][ T7534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.665951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.770730][T17633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input911 [ 1169.022067][T17638] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1169.329500][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 1169.368775][T17642] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2230'. [ 1169.653631][T17634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input912 [ 1170.237277][T17653] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1170.457630][T17653] CIFS mount error: No usable UNC path provided in device string! [ 1170.457630][T17653] [ 1170.505157][T17653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1171.860291][T17663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1172.585762][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1172.656604][T17674] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1174.292793][T17702] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input913 [ 1174.693787][T17703] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input914 [ 1174.731493][T17708] net_ratelimit: 5 callbacks suppressed [ 1174.731511][T17708] netlink: zone id is out of range [ 1174.743045][T17708] netlink: zone id is out of range [ 1174.765247][T17708] netlink: zone id is out of range [ 1174.787856][T17708] netlink: zone id is out of range [ 1174.822958][T17708] netlink: zone id is out of range [ 1174.838515][T17708] netlink: zone id is out of range [ 1174.843758][T17708] netlink: zone id is out of range [ 1174.878790][T17708] netlink: zone id is out of range [ 1174.938553][T17708] netlink: zone id is out of range [ 1174.944724][T17708] netlink: zone id is out of range [ 1175.793323][T17720] usbip-vudc usbip-vudc.0: gadget not bound [ 1178.333882][T17744] FAULT_INJECTION: forcing a failure. [ 1178.333882][T17744] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.347029][T17744] CPU: 1 UID: 0 PID: 17744 Comm: syz.2.2259 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1178.347057][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1178.347068][T17744] Call Trace: [ 1178.347074][T17744] [ 1178.347081][T17744] dump_stack_lvl+0x16c/0x1f0 [ 1178.347108][T17744] should_fail_ex+0x512/0x640 [ 1178.347134][T17744] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1178.347158][T17744] should_failslab+0xc2/0x120 [ 1178.347184][T17744] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1178.347206][T17744] ? vma_merge_new_range+0x3ae/0xa50 [ 1178.347226][T17744] ? vm_area_alloc+0x1f/0x160 [ 1178.347248][T17744] vm_area_alloc+0x1f/0x160 [ 1178.347266][T17744] __mmap_region+0xf90/0x27b0 [ 1178.347289][T17744] ? find_held_lock+0x2b/0x80 [ 1178.347307][T17744] ? __pfx___mmap_region+0x10/0x10 [ 1178.347327][T17744] ? process_measurement+0xf92/0x23e0 [ 1178.347352][T17744] ? vfs_getxattr_alloc+0xec/0x340 [ 1178.347398][T17744] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1178.347425][T17744] ? rcu_is_watching+0x12/0xc0 [ 1178.347444][T17744] ? kfree+0x24f/0x4d0 [ 1178.347494][T17744] ? trace_cap_capable+0x18d/0x200 [ 1178.347521][T17744] mmap_region+0x32b/0x3f0 [ 1178.347547][T17744] do_mmap+0xa3e/0x1210 [ 1178.347578][T17744] ? __pfx_do_mmap+0x10/0x10 [ 1178.347605][T17744] ? __pfx_down_write_killable+0x10/0x10 [ 1178.347635][T17744] vm_mmap_pgoff+0x29e/0x470 [ 1178.347666][T17744] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1178.347690][T17744] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1178.347719][T17744] ? hugetlbfs_get_inode+0x31f/0x730 [ 1178.347746][T17744] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1178.347777][T17744] __x64_sys_mmap+0x125/0x190 [ 1178.347808][T17744] do_syscall_64+0xcd/0x490 [ 1178.347833][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.347852][T17744] RIP: 0033:0x7f1dac78ebe9 [ 1178.347866][T17744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.347884][T17744] RSP: 002b:00007f1dad5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1178.347903][T17744] RAX: ffffffffffffffda RBX: 00007f1dac9b5fa0 RCX: 00007f1dac78ebe9 [ 1178.347914][T17744] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1178.347925][T17744] RBP: 00007f1dad5bc090 R08: 0000000000000401 R09: 0000300000000000 [ 1178.347936][T17744] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 1178.347947][T17744] R13: 00007f1dac9b6038 R14: 00007f1dac9b5fa0 R15: 00007ffd9b093b28 [ 1178.347969][T17744] [ 1181.548728][T17788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input915 [ 1182.130104][T17790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input916 [ 1182.546414][T17794] could not allocate digest TFM handle [ 1182.888985][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.898980][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.546647][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 1184.557086][T17824] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2279'. [ 1185.576457][T16735] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1185.613876][T16735] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1185.625744][T16735] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1185.634857][T16735] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1185.646590][T16735] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1185.967488][T17840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input917 [ 1186.232325][T17842] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input918 [ 1186.733867][T17835] chnl_net:caif_netlink_parms(): no params data found [ 1187.040400][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.055834][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.075934][T17835] bridge_slave_0: entered allmulticast mode [ 1187.101155][T17835] bridge_slave_0: entered promiscuous mode [ 1187.109399][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.117546][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.125026][T17835] bridge_slave_1: entered allmulticast mode [ 1187.216957][T17835] bridge_slave_1: entered promiscuous mode [ 1187.360229][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.389816][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.491677][T17835] team0: Port device team_slave_0 added [ 1187.536112][T17835] team0: Port device team_slave_1 added [ 1187.627403][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.634472][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.694970][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.707515][T16735] Bluetooth: hci8: command tx timeout [ 1187.725348][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.732835][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.810294][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.913036][T17835] hsr_slave_0: entered promiscuous mode [ 1187.930292][T17835] hsr_slave_1: entered promiscuous mode [ 1187.955929][T17835] debugfs: 'hsr0' already exists in 'hsr' [ 1187.961816][T17835] Cannot create hsr debugfs directory [ 1188.371978][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 1188.441246][T17858] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2285'. [ 1189.060318][T17835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.437329][T17835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.726419][T17835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.755535][T16735] Bluetooth: hci8: command tx timeout [ 1190.118462][T17835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.971442][T17835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1191.094154][T17835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1191.191822][T17835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1191.265006][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1191.279969][T17879] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1191.318630][T17835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1191.514011][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 1191.835953][T16735] Bluetooth: hci8: command tx timeout [ 1191.900766][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.048597][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.098383][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.105928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.148845][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.156347][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.965942][T17909] FAULT_INJECTION: forcing a failure. [ 1192.965942][T17909] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.005092][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.6.2296 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1193.005139][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1193.005158][T17909] Call Trace: [ 1193.005169][T17909] [ 1193.005180][T17909] dump_stack_lvl+0x16c/0x1f0 [ 1193.005223][T17909] should_fail_ex+0x512/0x640 [ 1193.005276][T17909] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1193.005315][T17909] should_failslab+0xc2/0x120 [ 1193.005354][T17909] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1193.005392][T17909] ? security_file_alloc+0x34/0x2b0 [ 1193.005440][T17909] security_file_alloc+0x34/0x2b0 [ 1193.005478][T17909] init_file+0x93/0x4c0 [ 1193.005515][T17909] alloc_empty_file+0x73/0x1e0 [ 1193.005559][T17909] path_openat+0xda/0x2cb0 [ 1193.005592][T17909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.005639][T17909] ? __pfx_path_openat+0x10/0x10 [ 1193.005686][T17909] do_filp_open+0x20b/0x470 [ 1193.005721][T17909] ? __pfx_do_filp_open+0x10/0x10 [ 1193.005787][T17909] ? alloc_fd+0x471/0x7d0 [ 1193.005830][T17909] do_sys_openat2+0x11b/0x1d0 [ 1193.005877][T17909] ? __pfx_do_sys_openat2+0x10/0x10 [ 1193.005937][T17909] __x64_sys_openat+0x174/0x210 [ 1193.005985][T17909] ? __pfx___x64_sys_openat+0x10/0x10 [ 1193.006048][T17909] do_syscall_64+0xcd/0x490 [ 1193.006089][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.006119][T17909] RIP: 0033:0x7fb19cd8ebe9 [ 1193.006144][T17909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.006173][T17909] RSP: 002b:00007fb19afd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1193.006204][T17909] RAX: ffffffffffffffda RBX: 00007fb19cfb6180 RCX: 00007fb19cd8ebe9 [ 1193.006224][T17909] RDX: 0000000000101080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1193.006251][T17909] RBP: 00007fb19ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1193.006267][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.006282][T17909] R13: 00007fb19cfb6218 R14: 00007fb19cfb6180 R15: 00007fff6386c1e8 [ 1193.006320][T17909] [ 1193.843714][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.916726][T17835] veth0_vlan: entered promiscuous mode [ 1193.923647][T16735] Bluetooth: hci8: command tx timeout [ 1193.932159][T17835] veth1_vlan: entered promiscuous mode [ 1194.393455][T17835] veth0_macvtap: entered promiscuous mode [ 1194.486330][T17835] veth1_macvtap: entered promiscuous mode [ 1194.598853][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.632191][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2300'. [ 1194.640261][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.704258][T17924] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2300'. [ 1194.730223][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.774732][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.862037][ T7524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.901745][ T7524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.597117][T17410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.611003][T17410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.890228][ T7538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.999268][ T7538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.247237][T17939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1198.627552][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 1198.644724][T17959] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2309'. [ 1198.846859][ T5863] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1198.858837][ T5863] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1198.867358][ T5863] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1198.877974][ T5863] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1198.886013][ T5863] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1199.818248][T17961] chnl_net:caif_netlink_parms(): no params data found [ 1200.206130][T17979] random: crng reseeded on system resumption [ 1200.637105][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.651405][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.667569][T17961] bridge_slave_0: entered allmulticast mode [ 1200.715661][T17961] bridge_slave_0: entered promiscuous mode [ 1200.763202][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.799868][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.811995][T17961] bridge_slave_1: entered allmulticast mode [ 1200.841545][T17961] bridge_slave_1: entered promiscuous mode [ 1200.899547][T17979] mmap: syz.7.2311 (17979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1200.977964][T16735] Bluetooth: hci9: command tx timeout [ 1201.064316][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.083423][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.330105][T17961] team0: Port device team_slave_0 added [ 1201.450270][T17961] team0: Port device team_slave_1 added [ 1201.747703][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.786575][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.955314][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.125897][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.169886][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.278755][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.658688][T17961] hsr_slave_0: entered promiscuous mode [ 1202.676485][T17961] hsr_slave_1: entered promiscuous mode [ 1202.693588][T17961] debugfs: 'hsr0' already exists in 'hsr' [ 1202.700133][T17961] Cannot create hsr debugfs directory [ 1203.055056][T16735] Bluetooth: hci9: command tx timeout [ 1203.571720][T17961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.993609][T17961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.268160][T17961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.303441][T18017] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input919 [ 1204.649279][T17961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.683956][T18018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input920 [ 1204.685796][T18017] FAULT_INJECTION: forcing a failure. [ 1204.685796][T18017] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.765098][T18017] CPU: 0 UID: 0 PID: 18017 Comm: syz.6.2319 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1204.765140][T18017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1204.765156][T18017] Call Trace: [ 1204.765166][T18017] [ 1204.765176][T18017] dump_stack_lvl+0x16c/0x1f0 [ 1204.765220][T18017] should_fail_ex+0x512/0x640 [ 1204.765259][T18017] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1204.765300][T18017] should_failslab+0xc2/0x120 [ 1204.765350][T18017] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1204.765386][T18017] ? __d_alloc+0x32/0xae0 [ 1204.765428][T18017] __d_alloc+0x32/0xae0 [ 1204.765470][T18017] d_alloc+0x4a/0x1e0 [ 1204.765508][T18017] lookup_one_qstr_excl+0x175/0x250 [ 1204.765550][T18017] ? mnt_want_write+0x161/0x450 [ 1204.765581][T18017] filename_create+0x1e7/0x4a0 [ 1204.765614][T18017] ? __pfx_filename_create+0x10/0x10 [ 1204.765651][T18017] ? __might_fault+0xe3/0x190 [ 1204.765684][T18017] ? __might_fault+0xe3/0x190 [ 1204.765713][T18017] ? __might_fault+0x13b/0x190 [ 1204.765751][T18017] do_mkdirat+0xaa/0x3e0 [ 1204.765789][T18017] ? __pfx_do_mkdirat+0x10/0x10 [ 1204.765827][T18017] ? getname_flags.part.0+0x1c5/0x550 [ 1204.765874][T18017] __x64_sys_mkdir+0xef/0x140 [ 1204.765910][T18017] do_syscall_64+0xcd/0x490 [ 1204.765949][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.765980][T18017] RIP: 0033:0x7fb19cd8ebe9 [ 1204.766004][T18017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.766031][T18017] RSP: 002b:00007fb19aff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1204.766060][T18017] RAX: ffffffffffffffda RBX: 00007fb19cfb6090 RCX: 00007fb19cd8ebe9 [ 1204.766080][T18017] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000480 [ 1204.766097][T18017] RBP: 00007fb19aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.766114][T18017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.766131][T18017] R13: 00007fb19cfb6128 R14: 00007fb19cfb6090 R15: 00007fff6386c1e8 [ 1204.766169][T18017] [ 1205.306890][T16735] Bluetooth: hci9: command tx timeout [ 1206.215320][T17961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1206.328872][T17961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1206.437256][T17961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1206.601967][T17961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1207.149881][T17961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.213423][T17961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.352453][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.359701][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.370970][T16735] Bluetooth: hci9: command tx timeout [ 1207.439433][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.446738][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.731474][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.047564][T18050] FAULT_INJECTION: forcing a failure. [ 1209.047564][T18050] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.080176][T18050] CPU: 0 UID: 0 PID: 18050 Comm: syz.3.2325 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1209.080218][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.080231][T18050] Call Trace: [ 1209.080240][T18050] [ 1209.080251][T18050] dump_stack_lvl+0x16c/0x1f0 [ 1209.080294][T18050] should_fail_ex+0x512/0x640 [ 1209.080332][T18050] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1209.080374][T18050] should_failslab+0xc2/0x120 [ 1209.080429][T18050] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1209.080462][T18050] ? alloc_empty_file+0x55/0x1e0 [ 1209.080510][T18050] alloc_empty_file+0x55/0x1e0 [ 1209.080560][T18050] path_openat+0xda/0x2cb0 [ 1209.080591][T18050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.080637][T18050] ? __pfx_path_openat+0x10/0x10 [ 1209.080681][T18050] do_filp_open+0x20b/0x470 [ 1209.080718][T18050] ? __pfx_do_filp_open+0x10/0x10 [ 1209.080783][T18050] ? alloc_fd+0x471/0x7d0 [ 1209.080826][T18050] do_sys_openat2+0x11b/0x1d0 [ 1209.080872][T18050] ? __pfx_do_sys_openat2+0x10/0x10 [ 1209.080932][T18050] __x64_sys_openat+0x174/0x210 [ 1209.080988][T18050] ? __pfx___x64_sys_openat+0x10/0x10 [ 1209.081051][T18050] do_syscall_64+0xcd/0x490 [ 1209.081091][T18050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.081120][T18050] RIP: 0033:0x7fd9d458ebe9 [ 1209.081145][T18050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.081173][T18050] RSP: 002b:00007fd9d53c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1209.081204][T18050] RAX: ffffffffffffffda RBX: 00007fd9d47b6090 RCX: 00007fd9d458ebe9 [ 1209.081225][T18050] RDX: 0000000000101080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1209.081245][T18050] RBP: 00007fd9d4611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1209.081263][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.081280][T18050] R13: 00007fd9d47b6128 R14: 00007fd9d47b6090 R15: 00007fffe82840b8 [ 1209.081319][T18050] [ 1209.508246][T17961] veth0_vlan: entered promiscuous mode [ 1209.568452][T17961] veth1_vlan: entered promiscuous mode [ 1210.079984][T17961] veth0_macvtap: entered promiscuous mode [ 1210.125632][T17961] veth1_macvtap: entered promiscuous mode [ 1210.231592][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.294496][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.450383][ T7524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.485171][T17410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.515077][T17410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.527475][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.995057][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.025175][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.413215][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.465423][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.763436][T18089] net_ratelimit: 20 callbacks suppressed [ 1211.763463][T18089] netlink: zone id is out of range [ 1211.775207][T18089] netlink: zone id is out of range [ 1211.783849][T18089] netlink: zone id is out of range [ 1211.942238][T18089] netlink: set zone limit has 8 unknown bytes [ 1212.571609][T18099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input921 [ 1213.122734][T18102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input922 [ 1213.958027][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 1214.819837][T18112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1215.479504][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2337'. [ 1215.546645][T18123] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2337'. [ 1217.695775][T18150] netlink: zone id is out of range [ 1217.700971][T18150] netlink: zone id is out of range [ 1217.727290][T18150] netlink: zone id is out of range [ 1217.818594][T18150] netlink: zone id is out of range [ 1218.076845][T18150] netlink: set zone limit has 8 unknown bytes [ 1224.304723][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2357'. [ 1224.469205][T18216] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2357'. [ 1225.455419][T18230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input923 [ 1225.719404][T18231] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input924 [ 1229.081584][T18261] netlink: zone id is out of range [ 1229.103773][T18261] netlink: zone id is out of range [ 1229.161741][T18261] netlink: zone id is out of range [ 1229.318680][T18261] netlink: set zone limit has 8 unknown bytes [ 1237.225620][T18346] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input925 [ 1237.613929][T18348] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input926 [ 1240.553493][T18382] capability: warning: `syz.2.2403' uses 32-bit capabilities (legacy support in use) [ 1244.323717][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.330269][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.862387][ T5863] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1244.873955][ T5863] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1244.882796][ T5863] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1244.891158][ T5863] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1244.900100][ T5863] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1245.530263][T18422] chnl_net:caif_netlink_parms(): no params data found [ 1245.788357][T18422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.805148][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.812649][T18422] bridge_slave_0: entered allmulticast mode [ 1245.835527][T18422] bridge_slave_0: entered promiscuous mode [ 1245.856834][T18422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.864177][T18422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.887717][T18422] bridge_slave_1: entered allmulticast mode [ 1245.906155][T18422] bridge_slave_1: entered promiscuous mode [ 1245.991507][T18422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.036189][T18422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.142876][T18422] team0: Port device team_slave_0 added [ 1246.163708][T18422] team0: Port device team_slave_1 added [ 1246.259245][T18422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.274977][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.311372][T18422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.329166][T18422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.339326][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.366647][T18422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.466322][T18422] hsr_slave_0: entered promiscuous mode [ 1246.473651][T18422] hsr_slave_1: entered promiscuous mode [ 1246.481082][T18422] debugfs: 'hsr0' already exists in 'hsr' [ 1246.487923][T18422] Cannot create hsr debugfs directory [ 1246.931625][T18422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1246.954979][T16735] Bluetooth: hci10: command tx timeout [ 1246.957774][T18422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1246.983788][T18422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1247.031352][T18422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1247.212003][T18422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.267947][T18422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.288601][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.295839][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.335918][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.343242][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.790992][T18422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.436916][T18422] veth0_vlan: entered promiscuous mode [ 1248.471009][T18422] veth1_vlan: entered promiscuous mode [ 1248.529882][T18422] veth0_macvtap: entered promiscuous mode [ 1248.576409][T18422] veth1_macvtap: entered promiscuous mode [ 1248.620767][T18422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.636468][T18422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.697599][T18081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.723279][T18081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.752055][T18081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.762253][T18081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.911372][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.937532][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.010066][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.035885][T16735] Bluetooth: hci10: command tx timeout [ 1249.036711][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.555143][T16564] svc: failed to register nfsdv3 RPC service (errno 512). [ 1249.568512][T16564] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1251.115002][T16735] Bluetooth: hci10: command tx timeout [ 1252.768393][T18488] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input927 [ 1253.194919][T16735] Bluetooth: hci10: command tx timeout [ 1253.236413][T18490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input928 [ 1256.656853][ T5863] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1256.671818][ T5863] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1256.686243][ T5863] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1256.696200][ T5863] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1256.707593][ T5863] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1257.696168][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2431'. [ 1257.756540][T18531] netlink: 25 bytes leftover after parsing attributes in process `syz.8.2431'. [ 1257.910869][T18518] chnl_net:caif_netlink_parms(): no params data found [ 1258.565627][T18518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.600996][T18518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.635437][T18518] bridge_slave_0: entered allmulticast mode [ 1258.681409][T18518] bridge_slave_0: entered promiscuous mode [ 1258.713236][T18518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.730563][T18518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.747250][T18518] bridge_slave_1: entered allmulticast mode [ 1258.758452][T18518] bridge_slave_1: entered promiscuous mode [ 1258.807186][ T5863] Bluetooth: hci11: command tx timeout [ 1258.921694][T18518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.945980][T18518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.039969][ T31] INFO: task syz-executor:16734 blocked for more than 143 seconds. [ 1259.065198][ T31] Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1259.106207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1259.126134][ T31] task:syz-executor state:D stack:24024 pid:16734 tgid:16734 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1259.177096][ T31] Call Trace: [ 1259.180455][ T31] [ 1259.214828][ T31] __schedule+0x1190/0x5de0 [ 1259.224880][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1259.229913][ T31] ? __pfx___schedule+0x10/0x10 [ 1259.271091][ T31] ? find_held_lock+0x2b/0x80 [ 1259.287139][ T31] ? schedule+0x2d7/0x3a0 [ 1259.291584][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1259.328292][ T31] schedule+0xe7/0x3a0 [ 1259.332462][ T31] schedule_preempt_disabled+0x13/0x30 [ 1259.362619][ T31] __mutex_lock+0x82a/0x10b0 [ 1259.374290][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1259.393066][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1259.409089][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1259.419246][ T31] ? net_generic+0xea/0x2a0 [ 1259.423866][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1259.478867][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1259.484278][ T31] nfsd_umount+0x48/0xe0 [ 1259.524870][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1259.530358][ T31] deactivate_super+0xde/0x100 [ 1259.554953][ T31] cleanup_mnt+0x225/0x450 [ 1259.559501][ T31] task_work_run+0x150/0x240 [ 1259.564170][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1259.594991][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1259.600553][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1259.624707][ T31] do_syscall_64+0x3f6/0x490 [ 1259.629549][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.714857][ T31] RIP: 0033:0x7f967038ff17 [ 1259.719377][ T31] RSP: 002b:00007ffcf82763b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1259.765126][ T31] RAX: 0000000000000000 RBX: 00007f9670411c05 RCX: 00007f967038ff17 [ 1259.794932][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf8276470 [ 1259.803092][ T31] RBP: 00007ffcf8276470 R08: 0000000000000000 R09: 0000000000000000 [ 1259.854852][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf8277500 [ 1259.863105][ T31] R13: 00007f9670411c05 R14: 000000000010d69c R15: 00007ffcf8277540 [ 1259.904942][ T31] [ 1259.916316][ T31] [ 1259.916316][ T31] Showing all locks held in the system: [ 1259.924265][ T31] 1 lock held by khungtaskd/31: [ 1259.964957][ T31] #0: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1260.015032][ T31] 2 locks held by kworker/u8:2/36: [ 1260.020222][ T31] #0: ffff88801f72d948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1260.074817][ T31] #1: ffffc90000ac7d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1260.114881][ T31] 2 locks held by getty/5626: [ 1260.119735][ T31] #0: ffff88814ce790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1260.144881][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1260.165105][ T31] 2 locks held by syz-executor/5865: [ 1260.170547][ T31] #0: ffff88802a0480e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.195537][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.215134][ T31] 2 locks held by syz-executor/5866: [ 1260.220512][ T31] #0: ffff88802b2160e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.245076][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.266267][ T31] 2 locks held by syz-executor/5869: [ 1260.271630][ T31] #0: ffff888057c120e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.305063][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.335686][ T31] 3 locks held by kworker/u8:18/7534: [ 1260.341133][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1260.374806][ T31] #1: ffffc9000458fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1260.415521][ T31] #2: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1260.445385][ T31] 2 locks held by kworker/u8:20/7538: [ 1260.450849][ T31] 2 locks held by syz.0.2003/16564: [ 1260.484942][ T31] #0: ffffffff90428a10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1260.493881][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1260.534895][ T31] 2 locks held by syz-executor/16734: [ 1260.540339][ T31] #0: ffff8880254620e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.565290][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.584818][ T31] 2 locks held by syz-executor/17170: [ 1260.590365][ T31] #0: ffff888078aa80e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.624928][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.634717][ T31] 2 locks held by syz-executor/17510: [ 1260.655378][ T31] #0: ffff8880257d40e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.678142][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.688409][ T31] 2 locks held by kworker/u8:4/18081: [ 1260.693821][ T31] 2 locks held by syz.6.2366/18254: [ 1260.700301][ T31] #0: ffff88804b2f60e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1260.711227][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1260.721566][ T31] 1 lock held by syz-executor/18422: [ 1260.727540][ T31] #0: ffffffff8e5cc578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1260.739042][ T31] 2 locks held by syz.2.2433/18542: [ 1260.744298][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1260.757415][ T31] #1: ffffffff8e5cc578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1260.768451][ T31] [ 1260.771021][ T31] ============================================= [ 1260.771021][ T31] [ 1260.782445][ T31] NMI backtrace for cpu 1 [ 1260.782465][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1260.782512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1260.782529][ T31] Call Trace: [ 1260.782539][ T31] [ 1260.782549][ T31] dump_stack_lvl+0x116/0x1f0 [ 1260.782590][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1260.782643][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1260.782677][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1260.782721][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1260.782773][ T31] watchdog+0xf0e/0x1260 [ 1260.782824][ T31] ? __pfx_watchdog+0x10/0x10 [ 1260.782861][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.782898][ T31] ? __kthread_parkme+0x19e/0x250 [ 1260.782937][ T31] ? __pfx_watchdog+0x10/0x10 [ 1260.782977][ T31] kthread+0x3c5/0x780 [ 1260.783020][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.783063][ T31] ? rcu_is_watching+0x12/0xc0 [ 1260.783092][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.783133][ T31] ret_from_fork+0x5d7/0x6f0 [ 1260.783175][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.783229][ T31] ret_from_fork_asm+0x1a/0x30 [ 1260.783282][ T31] [ 1260.783293][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1260.895385][ T5863] Bluetooth: hci11: command tx timeout [ 1260.900400][ C0] NMI backtrace for cpu 0 [ 1260.900421][ C0] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1260.900451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1260.900466][ C0] Workqueue: hci11 hci_cmd_timeout [ 1260.900493][ C0] RIP: 0010:__lock_acquire+0x156/0x1ce0 [ 1260.900523][ C0] Code: 25 f6 84 24 c8 00 00 00 01 75 1b 49 8d 74 1a d8 0f b7 46 20 25 ff 1f 00 00 39 f8 75 09 48 85 ed 0f 85 5b 03 00 00 4e 8d 24 13 <0f> b7 54 24 10 45 89 c8 41 0f b7 44 24 20 4d 89 7c 24 10 4c 89 e7 [ 1260.900544][ C0] RSP: 0018:ffffc90000006f30 EFLAGS: 00000046 [ 1260.900561][ C0] RAX: 0000000000000007 RBX: ffff88807817a8f0 RCX: 0000000000000002 [ 1260.900577][ C0] RDX: 0000000000000000 RSI: ffff88807817a940 RDI: 0000000000000007 [ 1260.900591][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.900605][ C0] R10: 0000000000000078 R11: 0000000000000001 R12: ffff88807817a968 [ 1260.900620][ C0] R13: ffff888078179e00 R14: 0000000000000000 R15: ffffffff8e5c0fe0 [ 1260.900635][ C0] FS: 0000000000000000(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 1260.900668][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1260.900684][ C0] CR2: 0000001b2f024220 CR3: 0000000046a3c000 CR4: 00000000003526f0 [ 1260.900699][ C0] Call Trace: [ 1260.900706][ C0] [ 1260.900717][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1260.900745][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 1260.900766][ C0] lock_acquire+0x179/0x350 [ 1260.900793][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1260.900817][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1260.900841][ C0] unwind_next_frame+0xd1/0x20a0 [ 1260.900862][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1260.900883][ C0] ? arch_stack_walk+0x73/0x100 [ 1260.900909][ C0] __unwind_start+0x45f/0x7f0 [ 1260.900929][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1260.900955][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1260.900980][ C0] arch_stack_walk+0x73/0x100 [ 1260.901004][ C0] ? arch_stack_walk+0x73/0x100 [ 1260.901027][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1260.901053][ C0] stack_trace_save+0x8e/0xc0 [ 1260.901075][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1260.901098][ C0] ? arch_stack_walk+0x85/0x100 [ 1260.901121][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1260.901152][ C0] ? destroy_inode+0x12c/0x1b0 [ 1260.901180][ C0] ? evict+0x5b4/0x920 [ 1260.901204][ C0] ? iput+0x521/0x880 [ 1260.901229][ C0] ? dentry_unlink_inode+0x29c/0x480 [ 1260.901255][ C0] ? __dentry_kill+0x1d0/0x600 [ 1260.901280][ C0] ? shrink_dentry_list+0x140/0x5d0 [ 1260.901309][ C0] ? shrink_dcache_parent+0xe1/0x530 [ 1260.901339][ C0] kasan_save_stack+0x33/0x60 [ 1260.901384][ C0] kasan_save_track+0x14/0x30 [ 1260.901407][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1260.901430][ C0] __kmalloc_noprof+0x223/0x510 [ 1260.901454][ C0] ? lock_acquire+0x179/0x350 [ 1260.901483][ C0] cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1260.901509][ C0] ? find_held_lock+0x2b/0x80 [ 1260.901531][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1260.901566][ C0] ? lock_acquire+0x179/0x350 [ 1260.901595][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1260.901617][ C0] cfg80211_inform_bss_data+0x224/0x3bd0 [ 1260.901650][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1260.901674][ C0] ? unwind_next_frame+0x3fe/0x20a0 [ 1260.901695][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1260.901724][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1260.901747][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1260.901776][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1260.901805][ C0] ? lock_acquire+0x179/0x350 [ 1260.901841][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1260.901872][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1260.901900][ C0] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 1260.901930][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1260.901965][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1260.902001][ C0] ? find_held_lock+0x2b/0x80 [ 1260.902022][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1260.902055][ C0] ieee80211_scan_rx+0x4cf/0xb30 [ 1260.902085][ C0] ? ieee80211_clean_skb+0x1a6/0x740 [ 1260.902119][ C0] ieee80211_rx_list+0x1bdb/0x2980 [ 1260.902146][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1260.902167][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1260.902203][ C0] ieee80211_rx_napi+0xdc/0x410 [ 1260.902225][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1260.902246][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.902272][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1260.902298][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 1260.902330][ C0] tasklet_action_common+0x284/0x400 [ 1260.902360][ C0] handle_softirqs+0x219/0x8e0 [ 1260.902387][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1260.902413][ C0] __irq_exit_rcu+0x109/0x170 [ 1260.902436][ C0] irq_exit_rcu+0x9/0x30 [ 1260.902459][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1260.902491][ C0] [ 1260.902498][ C0] [ 1260.902507][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1260.902530][ C0] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 1260.902552][ C0] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 04 a7 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 62 a2 20 00 48 85 ed 0f 85 25 01 00 00 e4 a6 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1260.902572][ C0] RSP: 0018:ffffc90003faf9c8 EFLAGS: 00000293 [ 1260.902588][ C0] RAX: 0000000000000000 RBX: 0000000000000024 RCX: ffffffff819a69ec [ 1260.902611][ C0] RDX: ffff888078179e00 RSI: ffffffff819a69f6 RDI: 0000000000000007 [ 1260.902625][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1260.902638][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920007f5f3b [ 1260.902658][ C0] R13: 0000000000000200 R14: ffff88801e6f5a00 R15: ffffc90003fafa90 [ 1260.902676][ C0] ? vprintk_emit+0x67c/0x6d0 [ 1260.902697][ C0] ? vprintk_emit+0x686/0x6d0 [ 1260.902720][ C0] ? vprintk_emit+0x686/0x6d0 [ 1260.902742][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1260.902763][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1260.902792][ C0] _printk+0xc7/0x100 [ 1260.902819][ C0] ? __pfx__printk+0x10/0x10 [ 1260.902846][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1260.902881][ C0] bt_err+0xe4/0x120 [ 1260.902900][ C0] ? __pfx_bt_err+0x10/0x10 [ 1260.902935][ C0] ? process_one_work+0x13d6/0x1b70 [ 1260.902968][ C0] hci_cmd_timeout+0x1ff/0x260 [ 1260.902989][ C0] process_one_work+0x9cc/0x1b70 [ 1260.903025][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1260.903060][ C0] ? assign_work+0x1a0/0x250 [ 1260.903090][ C0] worker_thread+0x6c8/0xf10 [ 1260.903125][ C0] ? __kthread_parkme+0x19e/0x250 [ 1260.903151][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1260.903181][ C0] kthread+0x3c5/0x780 [ 1260.903210][ C0] ? __pfx_kthread+0x10/0x10 [ 1260.903239][ C0] ? rcu_is_watching+0x12/0xc0 [ 1260.903260][ C0] ? __pfx_kthread+0x10/0x10 [ 1260.903289][ C0] ret_from_fork+0x5d7/0x6f0 [ 1260.903319][ C0] ? __pfx_kthread+0x10/0x10 [ 1260.903347][ C0] ret_from_fork_asm+0x1a/0x30 [ 1260.903378][ C0] [ 1261.411948][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1261.411975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1261.412010][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1261.412026][ T31] Call Trace: [ 1261.412036][ T31] [ 1261.412047][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1261.412084][ T31] vpanic+0x6e8/0x7a0 [ 1261.412123][ T31] ? __pfx_vpanic+0x10/0x10 [ 1261.412162][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1261.412206][ T31] panic+0xca/0xd0 [ 1261.412241][ T31] ? __pfx_panic+0x10/0x10 [ 1261.412279][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1261.412319][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1261.412362][ T31] ? watchdog+0xd78/0x1260 [ 1261.412399][ T31] ? watchdog+0xd6b/0x1260 [ 1261.412436][ T31] watchdog+0xd89/0x1260 [ 1261.412479][ T31] ? __pfx_watchdog+0x10/0x10 [ 1261.412522][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1261.412555][ T31] ? __kthread_parkme+0x19e/0x250 [ 1261.412590][ T31] ? __pfx_watchdog+0x10/0x10 [ 1261.412634][ T31] kthread+0x3c5/0x780 [ 1261.412672][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.412713][ T31] ? rcu_is_watching+0x12/0xc0 [ 1261.412741][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.412779][ T31] ret_from_fork+0x5d7/0x6f0 [ 1261.412817][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.412854][ T31] ret_from_fork_asm+0x1a/0x30 [ 1261.412900][ T31] [ 1261.415362][ T31] Kernel Offset: disabled