last executing test programs: 5.55269105s ago: executing program 1 (id=2): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 5.493146967s ago: executing program 2 (id=3): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 4.734306039s ago: executing program 3 (id=4): r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0182, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="df8a8422b5d145440000", @ANYBLOB="01002b3d7000fcdbdf2504000000120018008ad7d37754998b128fb9afe8a9c6000004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 4.689944522s ago: executing program 0 (id=1): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 4.482920994s ago: executing program 1 (id=5): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0x22, 0x0, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) 4.430058684s ago: executing program 2 (id=6): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)=@link_update={r1, @new_map_fd=r0, 0x16, @old_map_fd=r0}, 0x5) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) 3.475661841s ago: executing program 1 (id=7): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 3.363912897s ago: executing program 2 (id=8): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 3.283600519s ago: executing program 3 (id=9): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 3.240183773s ago: executing program 0 (id=10): r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0182, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="df8a8422b5d145440000", @ANYBLOB="01002b3d7000fcdbdf2504000000120018008ad7d37754998b128fb9afe8a9c6000004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 2.333490112s ago: executing program 1 (id=11): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 2.294653288s ago: executing program 0 (id=12): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) 2.27315573s ago: executing program 3 (id=13): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 2.146827522s ago: executing program 2 (id=14): capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r7, 0x301, 0x70bd2d, 0x25dfdbff, {0x11, 0x0, 0xfcff}}, 0x14}}, 0x400c0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x4001090) r8 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r8, 0x0, 0x40000) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) 2.094601781s ago: executing program 1 (id=15): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0x22, 0x0, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x80000000) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) socket(0x10, 0x2, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) 1.728947357s ago: executing program 3 (id=16): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 1.596908234s ago: executing program 0 (id=17): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 1.542600166s ago: executing program 2 (id=18): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 1.004433762s ago: executing program 1 (id=19): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a5, 0x7004000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = socket(0x10, 0x2, 0x0) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000280), 0x404, 0xa505}, 0x8}, 0x655e15e, 0x4008) 757.387537ms ago: executing program 3 (id=20): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) 428.37451ms ago: executing program 0 (id=21): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 355.058552ms ago: executing program 2 (id=22): ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x3) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x2404c084) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 0s ago: executing program 3 (id=23): r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0182, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="df8a8422b5d145440000", @ANYBLOB="01002b3d7000fcdbdf2504000000120018008ad7d37754998b128fb9afe8a9c6000004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 76.176516][ T5845] cgroup: Unknown subsys name 'net' [ 76.326607][ T5845] cgroup: Unknown subsys name 'cpuset' [ 76.334511][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.637244][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.643675][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.646508][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.192758][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.200669][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.224465][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.232394][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.240252][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.262246][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.285242][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.294716][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.324563][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.332146][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.354553][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.376276][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.383697][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.405467][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.414998][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.424088][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.435037][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.442468][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.450514][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.459311][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.506973][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 79.621415][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.629023][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.636505][ T5854] bridge_slave_0: entered allmulticast mode [ 79.643207][ T5854] bridge_slave_0: entered promiscuous mode [ 79.653352][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.660484][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.668022][ T5854] bridge_slave_1: entered allmulticast mode [ 79.674781][ T5854] bridge_slave_1: entered promiscuous mode [ 79.708810][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.741983][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.770884][ T5854] team0: Port device team_slave_0 added [ 79.790389][ T5854] team0: Port device team_slave_1 added [ 79.827613][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.836177][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.863235][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.881086][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 79.890918][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.898398][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.924354][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.040141][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.047336][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.055262][ T5857] bridge_slave_0: entered allmulticast mode [ 80.061929][ T5857] bridge_slave_0: entered promiscuous mode [ 80.069284][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.076453][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.084023][ T5857] bridge_slave_1: entered allmulticast mode [ 80.091426][ T5857] bridge_slave_1: entered promiscuous mode [ 80.101036][ T5854] hsr_slave_0: entered promiscuous mode [ 80.107888][ T5854] hsr_slave_1: entered promiscuous mode [ 80.140278][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 80.180876][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.198993][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.245040][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 80.263157][ T5857] team0: Port device team_slave_0 added [ 80.271023][ T5857] team0: Port device team_slave_1 added [ 80.319350][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.326362][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.353015][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.378642][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.385708][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.411876][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.451302][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.458782][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.466043][ T5859] bridge_slave_0: entered allmulticast mode [ 80.472692][ T5859] bridge_slave_0: entered promiscuous mode [ 80.480564][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.487696][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.494995][ T5859] bridge_slave_1: entered allmulticast mode [ 80.501787][ T5859] bridge_slave_1: entered promiscuous mode [ 80.549269][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.556542][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.563659][ T5862] bridge_slave_0: entered allmulticast mode [ 80.570701][ T5862] bridge_slave_0: entered promiscuous mode [ 80.578339][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.585750][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.592899][ T5862] bridge_slave_1: entered allmulticast mode [ 80.599598][ T5862] bridge_slave_1: entered promiscuous mode [ 80.635495][ T5857] hsr_slave_0: entered promiscuous mode [ 80.641673][ T5857] hsr_slave_1: entered promiscuous mode [ 80.647988][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 80.653737][ T5857] Cannot create hsr debugfs directory [ 80.661426][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.673489][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.693000][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.719816][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.741294][ T5859] team0: Port device team_slave_0 added [ 80.749538][ T5859] team0: Port device team_slave_1 added [ 80.789995][ T5862] team0: Port device team_slave_0 added [ 80.811558][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.818608][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.844881][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.857893][ T5862] team0: Port device team_slave_1 added [ 80.870927][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.878589][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.904820][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.929376][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.939091][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.962618][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.972473][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.979675][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.006005][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.027365][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.037035][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.044002][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.070060][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.100283][ T5859] hsr_slave_0: entered promiscuous mode [ 81.106461][ T5859] hsr_slave_1: entered promiscuous mode [ 81.112668][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 81.118451][ T5859] Cannot create hsr debugfs directory [ 81.196623][ T5862] hsr_slave_0: entered promiscuous mode [ 81.202813][ T5862] hsr_slave_1: entered promiscuous mode [ 81.209098][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 81.215127][ T5862] Cannot create hsr debugfs directory [ 81.274640][ T5863] Bluetooth: hci0: command tx timeout [ 81.336127][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.353707][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.361312][ T5863] Bluetooth: hci1: command tx timeout [ 81.376212][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.389770][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.434442][ T5863] Bluetooth: hci2: command tx timeout [ 81.451229][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.469652][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.483773][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.495273][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.505054][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.524737][ T5863] Bluetooth: hci3: command tx timeout [ 81.545649][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.577092][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.606232][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.616951][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.624052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.633741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.640846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.666496][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.676641][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.708266][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.747361][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.777563][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.784707][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.822104][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.829670][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.859169][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.905778][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.936708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.943857][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.961870][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.977753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.984909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.012997][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.039044][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.069004][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.076181][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.098751][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.118325][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.125474][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.189245][ T5854] veth0_vlan: entered promiscuous mode [ 82.222197][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.242365][ T5854] veth1_vlan: entered promiscuous mode [ 82.318652][ T5854] veth0_macvtap: entered promiscuous mode [ 82.333330][ T5854] veth1_macvtap: entered promiscuous mode [ 82.342993][ T5857] veth0_vlan: entered promiscuous mode [ 82.362073][ T5857] veth1_vlan: entered promiscuous mode [ 82.379904][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.415414][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.435456][ T5857] veth0_macvtap: entered promiscuous mode [ 82.443735][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.453730][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485012][ T5857] veth1_macvtap: entered promiscuous mode [ 82.492994][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.500677][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.510091][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.537381][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.563895][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.580114][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.590122][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.601798][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.629629][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.638829][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657287][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.672969][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.743164][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.746437][ T5859] veth0_vlan: entered promiscuous mode [ 82.756644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.784800][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.793344][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.793763][ T5862] veth0_vlan: entered promiscuous mode [ 82.808180][ T5859] veth1_vlan: entered promiscuous mode [ 82.827709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.840638][ T5862] veth1_vlan: entered promiscuous mode [ 82.848210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.863046][ T5859] veth0_macvtap: entered promiscuous mode [ 82.886330][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.895545][ T5859] veth1_macvtap: entered promiscuous mode [ 82.935891][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.943482][ T5862] veth0_macvtap: entered promiscuous mode [ 82.985094][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.993731][ T5862] veth1_macvtap: entered promiscuous mode [ 83.029342][ T2985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049380][ T2985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.090946][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.114314][ T2985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.127378][ T2985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.156328][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.233925][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275574][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.318847][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.335491][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.357390][ T5863] Bluetooth: hci0: command tx timeout [ 83.396163][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.445679][ T5863] Bluetooth: hci1: command tx timeout [ 83.514637][ T5863] Bluetooth: hci2: command tx timeout [ 83.592635][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.600724][ T5863] Bluetooth: hci3: command tx timeout [ 83.649729][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.660290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.669145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.678933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.705878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.716233][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.852114][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.884468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.893151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 83.965285][ T5951] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.045125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.144451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.262388][ T5963] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.305727][ T5963] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 84.315014][ T5963] FAULT_INJECTION: forcing a failure. [ 84.315014][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 84.328215][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 84.328252][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.328270][ T5963] Call Trace: [ 84.328279][ T5963] [ 84.328289][ T5963] dump_stack_lvl+0x16c/0x1f0 [ 84.328337][ T5963] should_fail_ex+0x512/0x640 [ 84.328380][ T5963] should_failslab+0xc2/0x120 [ 84.328419][ T5963] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 84.328458][ T5963] ? evdev_connect+0x82/0x4c0 [ 84.328485][ T5963] ? input_attach_handler.isra.0+0x173/0x250 [ 84.328531][ T5963] ? input_register_device+0xab9/0x1180 [ 84.328558][ T5963] ? kvasprintf_const+0x66/0x1a0 [ 84.328596][ T5963] kvasprintf+0xbc/0x160 [ 84.328622][ T5963] ? __pfx_kvasprintf+0x10/0x10 [ 84.328657][ T5963] kvasprintf_const+0x66/0x1a0 [ 84.328686][ T5963] kobject_set_name_vargs+0x5a/0x140 [ 84.328730][ T5963] dev_set_name+0xc7/0x100 [ 84.328759][ T5963] ? __pfx_dev_set_name+0x10/0x10 [ 84.328790][ T5963] ? lockdep_init_map_type+0x5c/0x280 [ 84.328841][ T5963] ? lockdep_init_map_type+0x5c/0x280 [ 84.328903][ T5963] evdev_connect+0x17a/0x4c0 [ 84.328934][ T5963] input_attach_handler.isra.0+0x173/0x250 [ 84.328987][ T5963] input_register_device+0xab9/0x1180 [ 84.329017][ T5963] ? input_ff_create+0x1a1/0x350 [ 84.329056][ T5963] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 84.329103][ T5963] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.329153][ T5963] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 84.329200][ T5963] ? rcu_is_watching+0x12/0xc0 [ 84.329232][ T5963] ? __fget_files+0x204/0x3c0 [ 84.329274][ T5963] ? __pfx_uinput_ioctl+0x10/0x10 [ 84.329313][ T5963] __x64_sys_ioctl+0x18e/0x210 [ 84.329372][ T5963] do_syscall_64+0xcd/0x490 [ 84.329412][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.329442][ T5963] RIP: 0033:0x7f5a5d38ebe9 [ 84.329469][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.329503][ T5963] RSP: 002b:00007f5a5e230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.329531][ T5963] RAX: ffffffffffffffda RBX: 00007f5a5d5b5fa0 RCX: 00007f5a5d38ebe9 [ 84.329557][ T5963] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 84.329575][ T5963] RBP: 00007f5a5d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.329594][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.329612][ T5963] R13: 00007f5a5d5b6038 R14: 00007f5a5d5b5fa0 R15: 00007ffee4b225d8 [ 84.329640][ T5963] [ 84.604516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 84.899543][ T5963] input: failed to attach handler evdev to device input5, error: -22 [ 85.388615][ T5981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.423723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.438829][ T5863] Bluetooth: hci0: command tx timeout [ 85.514310][ T5863] Bluetooth: hci1: command tx timeout [ 85.594469][ T5863] Bluetooth: hci2: command tx timeout [ 85.685386][ T5863] Bluetooth: hci3: command tx timeout [ 86.285239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.325568][ T5994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 86.418311][ T5998] capability: warning: `syz.2.14' uses 32-bit capabilities (legacy support in use) [ 86.495593][ T5997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 86.598800][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 86.642381][ T6006] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 86.683173][ T5998] HfR: entered promiscuous mode [ 86.719878][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 86.825707][ T6007] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 86.844515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.944550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.953275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.515878][ T5863] Bluetooth: hci0: command tx timeout [ 87.595112][ T5863] Bluetooth: hci1: command tx timeout [ 87.686142][ T5863] Bluetooth: hci2: command tx timeout [ 87.765551][ T5863] Bluetooth: hci3: command tx timeout [ 88.128377][ T6028] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 88.179254][ T6030] FAULT_INJECTION: forcing a failure. [ 88.179254][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 88.209596][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 88.209641][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.209660][ T6030] Call Trace: [ 88.209669][ T6030] [ 88.209680][ T6030] dump_stack_lvl+0x16c/0x1f0 [ 88.209724][ T6030] should_fail_ex+0x512/0x640 [ 88.209774][ T6030] should_failslab+0xc2/0x120 [ 88.209816][ T6030] __kmalloc_cache_noprof+0x6a/0x3e0 [ 88.209849][ T6030] ? percpu_ref_init+0xec/0x410 [ 88.209891][ T6030] ? __pfx_css_release+0x10/0x10 [ 88.209933][ T6030] percpu_ref_init+0xec/0x410 [ 88.209972][ T6030] ? init_and_link_css+0x32c/0x700 [ 88.210006][ T6030] cgroup_apply_control_enable+0x50b/0xbb0 [ 88.210060][ T6030] cgroup_mkdir+0x5e7/0x11f0 [ 88.210111][ T6030] ? __pfx_cgroup_mkdir+0x10/0x10 [ 88.210159][ T6030] kernfs_iop_mkdir+0x111/0x190 [ 88.210204][ T6030] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 88.210246][ T6030] vfs_mkdir+0x590/0x8c0 [ 88.210287][ T6030] do_mkdirat+0x304/0x3e0 [ 88.210336][ T6030] ? __pfx_do_mkdirat+0x10/0x10 [ 88.210373][ T6030] ? getname_flags.part.0+0x1c5/0x550 [ 88.210421][ T6030] __x64_sys_mkdir+0xef/0x140 [ 88.210456][ T6030] do_syscall_64+0xcd/0x490 [ 88.210496][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.210527][ T6030] RIP: 0033:0x7f5a5d38ebe9 [ 88.210550][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.210579][ T6030] RSP: 002b:00007f5a5e230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 88.210611][ T6030] RAX: ffffffffffffffda RBX: 00007f5a5d5b5fa0 RCX: 00007f5a5d38ebe9 [ 88.210631][ T6030] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 88.210649][ T6030] RBP: 00007f5a5d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.210667][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.210684][ T6030] R13: 00007f5a5d5b6038 R14: 00007f5a5d5b5fa0 R15: 00007ffee4b225d8 [ 88.210712][ T6030] [ 88.461184][ T6031] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 88.486238][ T9] ------------[ cut here ]------------ [ 88.491762][ T9] WARNING: CPU: 0 PID: 9 at kernel/cgroup/rstat.c:488 css_rstat_exit+0x368/0x470 [ 88.501365][ T9] Modules linked in: [ 88.505691][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 88.514850][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.524953][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 88.531039][ T9] RIP: 0010:css_rstat_exit+0x368/0x470 [ 88.536523][ T9] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 88.556160][ T9] RSP: 0018:ffffc900000e7bc0 EFLAGS: 00010293 [ 88.562242][ T9] RAX: 0000000000000000 RBX: ffff88814049a700 RCX: ffff8881246c4000 [ 88.570322][ T9] RDX: ffff88801e290000 RSI: ffffffff81b405c7 RDI: ffffffff8df57e60 [ 88.578309][ T9] RBP: ffff88814049a708 R08: 0000000000000005 R09: 0000000000000007 [ 88.586287][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88814049a720 [ 88.594289][ T9] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 88.602603][ T9] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 88.611915][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.618533][ T9] CR2: 0000555560f6b808 CR3: 0000000076524000 CR4: 00000000003526f0 [ 88.626573][ T9] Call Trace: [ 88.629850][ T9] [ 88.632781][ T9] css_free_rwork_fn+0x80/0x12e0 [ 88.638171][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.642958][ T9] process_one_work+0x9cf/0x1b70 [ 88.648185][ T9] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 88.654017][ T9] ? __pfx_process_one_work+0x10/0x10 [ 88.659458][ T9] ? assign_work+0x1a0/0x250 [ 88.664061][ T9] worker_thread+0x6c8/0xf10 [ 88.668688][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.673814][ T9] kthread+0x3c5/0x780 [ 88.677985][ T9] ? __pfx_kthread+0x10/0x10 [ 88.682632][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.687479][ T9] ? __pfx_kthread+0x10/0x10 [ 88.692123][ T9] ret_from_fork+0x5d4/0x6f0 [ 88.696769][ T9] ? __pfx_kthread+0x10/0x10 [ 88.701689][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.706712][ T9] [ 88.709747][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.717020][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 88.726155][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.736220][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 88.742320][ T9] Call Trace: [ 88.745620][ T9] [ 88.748576][ T9] dump_stack_lvl+0x3d/0x1f0 [ 88.753197][ T9] vpanic+0x6e8/0x7a0 [ 88.757226][ T9] ? __pfx_vpanic+0x10/0x10 [ 88.761769][ T9] ? css_rstat_exit+0x368/0x470 [ 88.766629][ T9] panic+0xca/0xd0 [ 88.770368][ T9] ? __pfx_panic+0x10/0x10 [ 88.774867][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 88.779998][ T9] check_panic_on_warn+0xab/0xb0 [ 88.784975][ T9] __warn+0xf6/0x3c0 [ 88.788885][ T9] ? css_rstat_exit+0x368/0x470 [ 88.793745][ T9] report_bug+0x3c3/0x580 [ 88.798088][ T9] ? css_rstat_exit+0x368/0x470 [ 88.802956][ T9] handle_bug+0x184/0x210 [ 88.807331][ T9] exc_invalid_op+0x17/0x50 [ 88.812032][ T9] asm_exc_invalid_op+0x1a/0x20 [ 88.817005][ T9] RIP: 0010:css_rstat_exit+0x368/0x470 [ 88.822478][ T9] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 88.842228][ T9] RSP: 0018:ffffc900000e7bc0 EFLAGS: 00010293 [ 88.848396][ T9] RAX: 0000000000000000 RBX: ffff88814049a700 RCX: ffff8881246c4000 [ 88.856400][ T9] RDX: ffff88801e290000 RSI: ffffffff81b405c7 RDI: ffffffff8df57e60 [ 88.864380][ T9] RBP: ffff88814049a708 R08: 0000000000000005 R09: 0000000000000007 [ 88.872361][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88814049a720 [ 88.880603][ T9] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 88.888598][ T9] ? css_rstat_exit+0x367/0x470 [ 88.893484][ T9] css_free_rwork_fn+0x80/0x12e0 [ 88.898439][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.903223][ T9] process_one_work+0x9cf/0x1b70 [ 88.908188][ T9] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 88.914019][ T9] ? __pfx_process_one_work+0x10/0x10 [ 88.919754][ T9] ? assign_work+0x1a0/0x250 [ 88.924359][ T9] worker_thread+0x6c8/0xf10 [ 88.928989][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.934099][ T9] kthread+0x3c5/0x780 [ 88.938180][ T9] ? __pfx_kthread+0x10/0x10 [ 88.942796][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.947568][ T9] ? __pfx_kthread+0x10/0x10 [ 88.952440][ T9] ret_from_fork+0x5d4/0x6f0 [ 88.957056][ T9] ? __pfx_kthread+0x10/0x10 [ 88.961681][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.966464][ T9] [ 88.969803][ T9] Kernel Offset: disabled [ 88.974131][ T9] Rebooting in 86400 seconds..