last executing test programs: 10.213300433s ago: executing program 0 (id=114): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1c, 0x43, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000780)=ANY=[@ANYBLOB="80b76f578ac7b016fa50b9d791713c6d", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf251000000018000180140002006d6163766c616e3100000000000000000800090003000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) write$auto(0x4, 0x0, 0x100080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(r4) setresuid$auto(r4, r5, r4) shmctl$auto_IPC_RMID(0xef, 0x0, &(0x7f0000000200)={{0xf4a, r5, 0xee00, 0x0, 0x396, 0x1, 0xb}, 0x200, 0x1, 0x9, 0x7, @inferred, @raw=0xffffffff, 0x0, 0x0, &(0x7f0000001380)="634c6049e7e82674c829b499e8568fd107c1848a75cce826", &(0x7f0000000100)="0c1a33cbc1442b2fb230b640de4ee1f41a1974419677bc08ec1539a3556d8151f5a85be76a6ba1ce9ea45d978c94718b9895423a9049e4a15163512c2793c13484bd0e002d474d83ad5492294b3af2a64a40a1b5562f62ad9bda351fd0e6485256c198a665cdc0ef682565745601c1b1f1ccb2b8f8a9ca3c949d228e52a58bfdd868ee9f05aa68786e14e24dc04339e4bccb58a3e268b15a7ed9b2d8ae6490356d790af779e3b4ae39118f3b44fdc1476c6e25dccea22598eb926d6425b44a06b13c36765c55b0deb694ec8a979586813770546431b5688ac2188171"}) r7 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/bus/usb-serial/drivers/zio/new_id\x00', 0x2486c1, 0x0) read$auto(0x3, 0x0, 0x7f) setresuid$auto(0xffffffffffffffff, r4, r6) r8 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x0, 0x0) r9 = waitid$auto(0x0, r7, &(0x7f0000000300)={@siginfo_0_0={0x3, 0x5, 0xe7bc, @_rt={0x0, r6, @sival_int=0x80000010}}}, 0x3, &(0x7f0000001540)={{0x3, 0x40}, {0x0, 0xfffffffffffffffd}, 0x7fffffffffffffff, 0xe0d, 0x575, 0x200000000001, 0x100, 0x6, 0xfffffffffffffc00, 0xe, 0x2, 0xef, 0x39a, 0x3, 0x8000000000000000, 0x1}) read$auto_drm_debugfs_entry_fops_drm_debugfs(r8, &(0x7f0000000380)=""/4096, 0x1000) name_to_handle_at$auto(r7, &(0x7f00000013c0)='\b\x00\x00\x00\x00', 0x0, 0x0, 0x5) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000001600)={{0x200, 0xee00, 0xee01, 0x6, 0x9, 0x1, 0x7}, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2, 0x2000008, 0x7, 0x2000000000004, 0x0, 0x9, 0x4b, 0xb, 0x8, @inferred=r9, @raw=0x2}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) 9.237649158s ago: executing program 0 (id=117): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x200000000000000) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) msgctl$auto(0x8000, 0x6, 0x0) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da06, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x801, 0x84) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xf, 0x10009}) io_uring_register$auto(0x2, 0x17, &(0x7f0000000000), 0x1) 7.521002358s ago: executing program 0 (id=122): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(r1, r2, 0x6e9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) r4 = socket(0xa, 0x5, 0x100) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x80) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r5, 0x0, 0xcc9c) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000c00b1e48c7c5ae768437ac31be647e57d05f0a60b304a9c1ef682f642ab43fa3fedebeac45f6a1c71a996d6cf6caf9ab2fb290de55185a2d9c253d69dbff9e3eab26f065a1f5b6db2a0e38092706d3f7d3a7aba45d61f9ebfa536aaed6906e07787373e821583cee0dc87b35b4b8fa30e3015e3297c5610343407a7b951f41aa2191312cce7d1bd18ade66ab1a74c877836d9966156b7c878775bb5fb96968d69cadaa28d900703ac3d0ae9d85ea7079efe5a22b0b2b94f1fe7498c12d6", @ANYRES16, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000100", @ANYRES32, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000076}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x48800) write$auto(r5, &(0x7f0000000400)='\'\x00', 0x8) userfaultfd$auto(0x4) r9 = socket(0xa, 0x5, 0x84) sendto$auto(r9, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) 6.406031633s ago: executing program 0 (id=124): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x8001, 0x1, 0x2, 0x15f4da0a, 0x59, 0x3, 0x300000000000600, 0x8000, 0x1f, 0x5, 0x5, 0x9, 0x4000]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.834380159s ago: executing program 2 (id=129): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto_SO_SNDBUF(r0, 0x0, 0x7, &(0x7f0000000140)='/dev/ppp\x00', 0x9) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mprotect$auto(0x0, 0x3ff, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_prepare\x00', 0x2400, 0x0) read$auto(r1, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/194, 0xc2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0x1) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) 5.609776276s ago: executing program 0 (id=130): mknod$auto(0x0, 0xc9, 0xfffffffa) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) write$auto(0xffffffffffffffff, 0x0, 0x7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7fc, 0x89, 0x26, 0x200000000000000, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0x7ff, 0x0, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x800000000, 0x4, 0x0, 0x0, 0x4, 0x8]}, 0x9, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0x7c, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pidfd_open$auto(0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) write$auto(0x3, 0x0, 0x100082) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub1/hw_params\x00', 0x20200, 0x0) 5.534503326s ago: executing program 2 (id=131): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x12b102, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000a40)="1670", 0x2) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket(0x6, 0x800, 0xa) connect$auto(r2, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) ioperm$auto(0x7fb, 0x1, 0x4000007) setresgid$auto(0x0, 0x6, 0x0) read$auto(r1, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000000)={0x0, 0xfc6}, 0x6, 0x0, 0x7, 0xa505}, 0x800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/topology/package_cpus\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) r6 = socket(0x10, 0x2, 0x2) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r7, &(0x7f0000004240)='\x01', 0x10000000004) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)={0x14, 0x0, 0x100, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400800}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 5.513479305s ago: executing program 3 (id=132): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b66, 0x1) 5.395449673s ago: executing program 3 (id=133): r0 = gettid() rt_sigqueueinfo$auto(r0, 0x88, 0x0) r1 = set_tid_address$auto(&(0x7f0000000040)=0x2) prctl$auto_PR_SET_MM_START_CODE(0x1d15, 0x1, r1, 0x0, 0x5) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x3a, 0x3, 0x0) mlockall$auto(0x7) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r6 = socket(0x2, 0x2, 0x0) getsockopt$auto(r6, 0x0, 0x17, 0xfffffffffffffffc, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7880fe00", @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0) r7 = socket(0x2a, 0x2, 0x1) connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55) 3.182875804s ago: executing program 3 (id=135): mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0x2, r0, 0x3, 0x4f) fcntl$auto(0xff80000000000000, 0x1, r0) ioctl$auto(0x3, 0x402c542b, 0x38) ptrace$auto_PTRACE_SYSEMU(0x1f, r0, 0x2, 0x200) 3.069166238s ago: executing program 1 (id=136): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/erspan0/netdev_group\x00', 0x502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffff0, 0x9}, 0x7}, 0x3, 0x0) 2.835663766s ago: executing program 3 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0xf0ffffff, 0x0, 0x240088d4}, 0x2000c880) 2.793777829s ago: executing program 2 (id=138): msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x0, 0xeb3, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=r1, 0x5, @old_prog_fd=r0}, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x7ff, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38bf5379eda5c69dd4e46f96e2d8f40aa618d39b7e5021b6ad2377f4c3fbfecf62d583e3928809d6f19f02984f0568cdd2b0e440d0b3c8b58f4e2e3efffb5dcd10d7e44a39c0c74c39d6c50ad8b42e8c08d46dde0a997739e221b08007cf2d70a3834be5c0fcd7e46aceb21490e6d92b59cde608b4f13273999c3ccbd8b96cb554b3b09e1892e4572d238dcd37ede4dbe9868a3a438ec380a82103c348786ed29a1e52b0b9a4016bad19471e9500000000000000095560c6fc452e009da4aff73fdffa63"], 0x28}}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x100000000) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x0, 0x7, 0x2, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) io_uring_setup$auto(0x4, &(0x7f0000000200)={0xe5, 0x6, 0xa, 0x9, 0x6, 0x80000001, r4, [0x6, 0x81, 0x3], {0x9, 0x4, 0x6, 0x9, 0xfffffff9, 0x0, 0x0, 0xbb0, 0x491c}, {0x2b73, 0x93, 0x153109c7, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0xa7}}) 2.656192815s ago: executing program 3 (id=139): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0xc9ffffffffffffff) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) msgctl$auto(0x8000, 0x6, 0x0) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da06, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x801, 0x84) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xf, 0x10009}) io_uring_register$auto(0x2, 0x17, &(0x7f0000000000), 0x1) 2.596811434s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25000000c0100007800c00018008000180000000000c000200"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 2.579237906s ago: executing program 2 (id=141): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="040429bd7000fcdbdf250500000008003400040000000800150005000000080034000008000008001c0003000000", @ANYBLOB="34800000", @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) prctl$auto(0x3, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x7, 0x6, 0xffffffff) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) mmap$auto(0x2000000000000000, 0x4, 0xdf, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0xc0a00, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6b) 2.387866458s ago: executing program 1 (id=142): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80840, 0x0) read$auto(r0, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x5) 2.238300375s ago: executing program 1 (id=143): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b66, 0x1) 2.233507355s ago: executing program 2 (id=144): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x3000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1.679859194s ago: executing program 1 (id=145): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(r1, r2, 0x6e9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) r4 = socket(0xa, 0x5, 0x100) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x80) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r5, 0x0, 0xcc9c) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000c00b1e48c7c5ae768437ac31be647e57d05f0a60b304a9c1ef682f642ab43fa3fedebeac45f6a1c71a996d6cf6caf9ab2fb290de55185a2d9c253d69dbff9e3eab26f065a1f5b6db2a0e38092706d3f7d3a7aba45d61f9ebfa536aaed6906e07787373e821583cee0dc87b35b4b8fa30e3015e3297c5610343407a7b951f41aa2191312cce7d1bd18ade66ab1a74c877836d9966156b7c878775bb5fb96968d69cadaa28d900703ac3d0ae9d85ea7079efe5a22b0b2b94f1fe7498c12d6", @ANYRES16, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000100", @ANYRES32, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000076}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x48800) write$auto(r5, &(0x7f0000000400)='\'\x00', 0x8) userfaultfd$auto(0x4) r9 = socket(0xa, 0x5, 0x84) sendto$auto(r9, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) 1.588393918s ago: executing program 0 (id=146): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) clock_gettime$auto(0x4, &(0x7f0000000000)={0x10000, 0x8}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000007c0)=""/153, 0x99) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) write$auto(r2, &(0x7f0000000100)='\x00', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) mlock$auto(0x5, 0xffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) 1.358798193s ago: executing program 3 (id=147): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x12b102, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000a40)="1670", 0x2) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket(0x6, 0x800, 0xa) connect$auto(r2, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) ioperm$auto(0x7fb, 0x1, 0x4000007) setresgid$auto(0x0, 0x6, 0x0) read$auto(r1, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000000)={0x0, 0xfc6}, 0x6, 0x0, 0x7, 0xa505}, 0x800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/topology/package_cpus\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) r6 = socket(0x10, 0x2, 0x2) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r7, &(0x7f0000004240)='\x01', 0x10000000004) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)={0x14, 0x0, 0x100, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400800}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 29.527843ms ago: executing program 1 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00', 0x0}) bpf$auto(0x401, &(0x7f00000005c0)=@link_create={@map_fd=r0, @target_ifindex=r2, 0x5, 0x5, @kprobe_multi={0x9, 0x3, 0x0, 0x4, 0x4}}, 0x3) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000003c0)="dfc855b3d7112faba6a77f7c4ededaad97b4cc975db206e60ed243adcb15272eecdd3644fd0b1cd8924db05ce17e2cff0562b36222162bab7acb66cfa4a795153ec9b6") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 0s ago: executing program 2 (id=149): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/stat/rt_cache\x00', 0x60200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0xddf) rt_sigaction$auto(0x5, 0x0, 0x0, 0x8) bind$auto(0xffffffffffffffff, 0x0, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x22, 0x2, 0x1) mmap$auto(0x561, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) adjtimex$auto(0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto(0x3, 0xae78, 0x38) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x502, 0x0) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/timer_source\x00', 0x240200, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) shmdt$auto(0x0) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 90.748317][ T5820] cgroup: Unknown subsys name 'net' [ 90.862754][ T5820] cgroup: Unknown subsys name 'cpuset' [ 90.872279][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.797567][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.981240][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.989799][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.997675][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.005987][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.038987][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.051984][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.061784][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.069958][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.077748][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.087620][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.095812][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.116246][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.129706][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.138454][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.148795][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.165843][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.173925][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.181823][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.189387][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.198951][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.792584][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 95.851060][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.986645][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 96.062203][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.121077][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.129635][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.137122][ T5829] bridge_slave_0: entered allmulticast mode [ 96.145618][ T5829] bridge_slave_0: entered promiscuous mode [ 96.184655][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.192238][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.199542][ T5829] bridge_slave_1: entered allmulticast mode [ 96.206879][ T5829] bridge_slave_1: entered promiscuous mode [ 96.220506][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.227667][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.235054][ T5833] bridge_slave_0: entered allmulticast mode [ 96.243262][ T5833] bridge_slave_0: entered promiscuous mode [ 96.287807][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.295101][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.302598][ T5833] bridge_slave_1: entered allmulticast mode [ 96.310473][ T5833] bridge_slave_1: entered promiscuous mode [ 96.387194][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.435485][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.459725][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.467046][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.474835][ T5840] bridge_slave_0: entered allmulticast mode [ 96.483717][ T5840] bridge_slave_0: entered promiscuous mode [ 96.494322][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.509469][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.546837][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.554652][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.562542][ T5840] bridge_slave_1: entered allmulticast mode [ 96.570656][ T5840] bridge_slave_1: entered promiscuous mode [ 96.608743][ T5829] team0: Port device team_slave_0 added [ 96.644658][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.652443][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.660117][ T5834] bridge_slave_0: entered allmulticast mode [ 96.667425][ T5834] bridge_slave_0: entered promiscuous mode [ 96.677693][ T5829] team0: Port device team_slave_1 added [ 96.707057][ T5833] team0: Port device team_slave_0 added [ 96.714044][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.721288][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.728670][ T5834] bridge_slave_1: entered allmulticast mode [ 96.736082][ T5834] bridge_slave_1: entered promiscuous mode [ 96.760843][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.774332][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.785433][ T5833] team0: Port device team_slave_1 added [ 96.881450][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.889049][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.915231][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.930596][ T5840] team0: Port device team_slave_0 added [ 96.957804][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.968868][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.975857][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.002470][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.024242][ T5840] team0: Port device team_slave_1 added [ 97.047868][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.054953][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.080978][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.094850][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.135657][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.142724][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.168818][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.189284][ T5842] Bluetooth: hci0: command tx timeout [ 97.198665][ T47] cfg80211: failed to load regulatory.db [ 97.219014][ T5834] team0: Port device team_slave_0 added [ 97.228412][ T5834] team0: Port device team_slave_1 added [ 97.235027][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.242221][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.268598][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.268620][ T5842] Bluetooth: hci3: command tx timeout [ 97.280131][ T5832] Bluetooth: hci1: command tx timeout [ 97.285843][ T5842] Bluetooth: hci2: command tx timeout [ 97.352714][ T5829] hsr_slave_0: entered promiscuous mode [ 97.359921][ T5829] hsr_slave_1: entered promiscuous mode [ 97.387348][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.394610][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.420776][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.510290][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.517297][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.544022][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.584789][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.591937][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.618318][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.635352][ T5833] hsr_slave_0: entered promiscuous mode [ 97.642171][ T5833] hsr_slave_1: entered promiscuous mode [ 97.648699][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.656582][ T5833] Cannot create hsr debugfs directory [ 97.719639][ T5840] hsr_slave_0: entered promiscuous mode [ 97.726158][ T5840] hsr_slave_1: entered promiscuous mode [ 97.733468][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.741139][ T5840] Cannot create hsr debugfs directory [ 97.897836][ T5834] hsr_slave_0: entered promiscuous mode [ 97.904588][ T5834] hsr_slave_1: entered promiscuous mode [ 97.911516][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.919752][ T5834] Cannot create hsr debugfs directory [ 98.217462][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.233195][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.266428][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.300902][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.394209][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.419339][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.449743][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.461463][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.532306][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.553335][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.567425][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.581131][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.688033][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.701854][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.725829][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.755743][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.866225][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.902187][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.953955][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.994108][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.001491][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.023794][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.051789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.059081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.071372][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.078564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.104397][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.126584][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.133963][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.197217][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.229995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.237164][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.262713][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.271724][ T5842] Bluetooth: hci0: command tx timeout [ 99.294402][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.301613][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.348994][ T5842] Bluetooth: hci1: command tx timeout [ 99.349288][ T5832] Bluetooth: hci3: command tx timeout [ 99.354443][ T5842] Bluetooth: hci2: command tx timeout [ 99.366539][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.403196][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.453923][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.461178][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.501788][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.509059][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.769227][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.906781][ T5829] veth0_vlan: entered promiscuous mode [ 99.953369][ T5829] veth1_vlan: entered promiscuous mode [ 100.062973][ T5829] veth0_macvtap: entered promiscuous mode [ 100.075926][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.095847][ T5829] veth1_macvtap: entered promiscuous mode [ 100.193919][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.216240][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.233718][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.245343][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.262301][ T5833] veth0_vlan: entered promiscuous mode [ 100.272452][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.281710][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.292153][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.302472][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.355626][ T5833] veth1_vlan: entered promiscuous mode [ 100.441584][ T5840] veth0_vlan: entered promiscuous mode [ 100.505722][ T5833] veth0_macvtap: entered promiscuous mode [ 100.523176][ T5840] veth1_vlan: entered promiscuous mode [ 100.545271][ T5833] veth1_macvtap: entered promiscuous mode [ 100.563393][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.578605][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.611888][ T5834] veth0_vlan: entered promiscuous mode [ 100.651396][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.665491][ T5840] veth0_macvtap: entered promiscuous mode [ 100.671809][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.687517][ T5834] veth1_vlan: entered promiscuous mode [ 100.705110][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.717703][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.732337][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.764956][ T5840] veth1_macvtap: entered promiscuous mode [ 100.784924][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.800783][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.816876][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.829592][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.851177][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.866273][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.888394][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.897184][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.956172][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.967768][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.980370][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.991322][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.003180][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.056673][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.080457][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.101925][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.120320][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.145148][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.160771][ T5834] veth0_macvtap: entered promiscuous mode [ 101.190524][ T5834] veth1_macvtap: entered promiscuous mode [ 101.291935][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.291999][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.292037][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.292075][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.349709][ T5842] Bluetooth: hci0: command tx timeout [ 101.358561][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.358605][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.358621][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.358642][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.358657][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.358679][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.361969][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.415897][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.415944][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.429424][ T55] Bluetooth: hci3: command tx timeout [ 101.429473][ T55] Bluetooth: hci1: command tx timeout [ 101.429603][ T5842] Bluetooth: hci2: command tx timeout [ 101.455583][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.455614][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.455630][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.455650][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.455665][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.455686][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.457166][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.474902][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474949][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474988][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.475026][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.562629][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.562658][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.641770][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.641800][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.834654][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.834676][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.983125][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.983154][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.223030][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.223061][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.278752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.528721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.345246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 103.428900][ T5832] Bluetooth: hci0: command tx timeout [ 103.498619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.509520][ T5832] Bluetooth: hci2: command tx timeout [ 103.516362][ T5832] Bluetooth: hci1: command tx timeout [ 103.521864][ T5842] Bluetooth: hci3: command tx timeout [ 104.027472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.068463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.150611][ T30] audit: type=1800 audit(1746383825.881:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9" name="dummy_udc" dev="gadgetfs" ino=5712 res=0 errno=0 [ 105.758396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.840675][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 105.969304][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 107.123725][ T5959] process 'syz.0.15' launched ':,' with NULL argv: empty string added [ 107.147243][ T5959] ======================================================= [ 107.147243][ T5959] WARNING: The mand mount option has been deprecated and [ 107.147243][ T5959] and is ignored by this kernel. Remove the mand [ 107.147243][ T5959] option from the mount to silence this warning. [ 107.147243][ T5959] ======================================================= [ 107.182500][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.079500][ T5972] FAULT_INJECTION: forcing a failure. [ 108.079500][ T5972] name failslab, interval 1, probability 0, space 0, times 1 [ 108.140745][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.3.18 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 108.140789][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 108.140819][ T5972] Call Trace: [ 108.140829][ T5972] [ 108.140844][ T5972] dump_stack_lvl+0x16c/0x1f0 [ 108.140899][ T5972] should_fail_ex+0x512/0x640 [ 108.140942][ T5972] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 108.140981][ T5972] should_failslab+0xc2/0x120 [ 108.141021][ T5972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 108.141057][ T5972] ? getname_flags.part.0+0x4c/0x550 [ 108.141105][ T5972] getname_flags.part.0+0x4c/0x550 [ 108.141150][ T5972] getname_flags+0x93/0xf0 [ 108.141196][ T5972] do_sys_openat2+0xb8/0x1d0 [ 108.141236][ T5972] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.141294][ T5972] __x64_sys_openat+0x174/0x210 [ 108.141339][ T5972] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.141387][ T5972] ? rcu_is_watching+0x12/0xc0 [ 108.141430][ T5972] do_syscall_64+0xcd/0x230 [ 108.141478][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.141511][ T5972] RIP: 0033:0x7f39b598e969 [ 108.141537][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.141569][ T5972] RSP: 002b:00007f39b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.141599][ T5972] RAX: ffffffffffffffda RBX: 00007f39b5bb6080 RCX: 00007f39b598e969 [ 108.141622][ T5972] RDX: 00000000003a5801 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 108.141642][ T5972] RBP: 00007f39b5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 108.141662][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.141680][ T5972] R13: 0000000000000000 R14: 00007f39b5bb6080 R15: 00007ffeb799e8f8 [ 108.141721][ T5972] [ 108.564677][ T5978] netlink: 338 bytes leftover after parsing attributes in process `syz.2.19'. [ 108.632140][ T5980] netlink: 338 bytes leftover after parsing attributes in process `syz.2.19'. [ 108.984572][ T5983] GUP no longer grows the stack in syz.0.20 (5983): 14000-401000 (4000) [ 109.024724][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.0.20 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 109.024769][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 109.024788][ T5983] Call Trace: [ 109.024798][ T5983] [ 109.024810][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 109.024862][ T5983] gup_vma_lookup+0x1d2/0x220 [ 109.024913][ T5983] __get_user_pages+0x234/0x36f0 [ 109.024979][ T5983] ? check_irq_usage+0xcb/0x920 [ 109.025019][ T5983] ? __pfx___get_user_pages+0x10/0x10 [ 109.025088][ T5983] __gup_longterm_locked+0x20d/0x1850 [ 109.025154][ T5983] ? __pfx___gup_longterm_locked+0x10/0x10 [ 109.025225][ T5983] pin_user_pages_remote+0xed/0x140 [ 109.025281][ T5983] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 109.025331][ T5983] ? mm_access+0x22d/0x2e0 [ 109.025386][ T5983] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 109.025433][ T5983] ? futex_wait_queue+0x14c/0x220 [ 109.025473][ T5983] ? futex_unqueue+0xba/0x140 [ 109.025514][ T5983] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 109.025561][ T5983] ? iovec_from_user+0xbb/0x140 [ 109.025631][ T5983] ? iovec_from_user+0xbb/0x140 [ 109.025686][ T5983] process_vm_rw+0x216/0x2c0 [ 109.025738][ T5983] ? __pfx_process_vm_rw+0x10/0x10 [ 109.025832][ T5983] ? xfd_validate_state+0x5d/0x180 [ 109.025896][ T5983] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 109.025939][ T5983] ? do_syscall_64+0x91/0x230 [ 109.025982][ T5983] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.026024][ T5983] do_syscall_64+0xcd/0x230 [ 109.026072][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.026105][ T5983] RIP: 0033:0x7fc3ced8e969 [ 109.026130][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.026160][ T5983] RSP: 002b:00007fc3cfc4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 109.026189][ T5983] RAX: ffffffffffffffda RBX: 00007fc3cefb6160 RCX: 00007fc3ced8e969 [ 109.026208][ T5983] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000018 [ 109.026226][ T5983] RBP: 00007fc3cee10ab1 R08: 0000000000000003 R09: 0000000000000000 [ 109.026244][ T5983] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 109.026262][ T5983] R13: 0000000000000000 R14: 00007fc3cefb6160 R15: 00007fff663a9bb8 [ 109.026300][ T5983] [ 109.255386][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.808648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.818605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.826945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.111688][ T5993] Zero length message leads to an empty skb [ 110.731358][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.263333][ T6008] kernel read not supported for file /set_event_notrace_pid (pid: 6008 comm: syz.2.26) [ 111.358733][ T30] audit: type=1800 audit(6041351128.107:3): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.26" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 111.859663][ T5990] sysfs_service_op_store: Client not running :-5: [ 112.914148][ T6019] netlink: 72 bytes leftover after parsing attributes in process `syz.1.30'. [ 116.807206][ T6064] kernel read not supported for file /set_event_notrace_pid (pid: 6064 comm: syz.3.40) [ 117.192510][ T30] audit: type=1800 audit(6041351133.947:4): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 119.557035][ T6090] kernel read not supported for file /set_event_notrace_pid (pid: 6090 comm: syz.2.47) [ 119.585231][ T30] audit: type=1800 audit(6041351136.337:5): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 121.287450][ T6117] sd 0:0:1:0: PR command failed: 1026 [ 121.296567][ T6117] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 121.304294][ T6117] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 121.901839][ T30] audit: type=1806 audit(6041351138.637:6): xattr=2EC7871B res=-22 [ 122.280902][ T6107] mmap: syz.2.51 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.491383][ T6127] netlink: 342 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.518122][ T6127] netlink: 342 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.547768][ T6127] netlink: 342 bytes leftover after parsing attributes in process `syz.0.56'. [ 123.079196][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 123.464311][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.720142][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'. [ 125.218881][ T6165] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[6165] [ 126.002814][ T5832] Bluetooth: hci0: unexpected subevent 0x01 length: 122 > 18 [ 127.773168][ T6189] can: request_module (can-proto-0) failed. [ 128.575740][ T6205] capability: warning: `syz.3.68' uses 32-bit capabilities (legacy support in use) [ 130.513990][ T6214] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[6214] [ 131.244833][ T6233] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[6233] [ 131.858789][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'. [ 131.891052][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.922575][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.958596][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.990209][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.427451][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 133.874976][ T6252] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 136.002369][ T6290] FAULT_INJECTION: forcing a failure. [ 136.002369][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 136.063081][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.2.83 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 136.063128][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 136.063148][ T6290] Call Trace: [ 136.063158][ T6290] [ 136.063170][ T6290] dump_stack_lvl+0x16c/0x1f0 [ 136.063219][ T6290] should_fail_ex+0x512/0x640 [ 136.063261][ T6290] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 136.063318][ T6290] should_failslab+0xc2/0x120 [ 136.063356][ T6290] __kmalloc_cache_noprof+0x6a/0x3e0 [ 136.063415][ T6290] ? mirred_init_net+0x56/0x270 [ 136.063458][ T6290] ? __pfx_mirred_init_net+0x10/0x10 [ 136.063493][ T6290] mirred_init_net+0x56/0x270 [ 136.063527][ T6290] ops_init+0x1df/0x5f0 [ 136.063571][ T6290] setup_net+0x21e/0x850 [ 136.063615][ T6290] ? __pfx_setup_net+0x10/0x10 [ 136.063650][ T6290] ? lockdep_init_map_type+0x5c/0x280 [ 136.063694][ T6290] ? __pfx_down_read_killable+0x10/0x10 [ 136.063750][ T6290] ? debug_mutex_init+0x37/0x70 [ 136.063806][ T6290] copy_net_ns+0x2a6/0x5f0 [ 136.063852][ T6290] create_new_namespaces+0x3ea/0xad0 [ 136.063898][ T6290] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 136.063936][ T6290] ksys_unshare+0x45b/0xa40 [ 136.063982][ T6290] ? __pfx_ksys_unshare+0x10/0x10 [ 136.064023][ T6290] ? xfd_validate_state+0x5d/0x180 [ 136.064077][ T6290] ? rcu_is_watching+0x12/0xc0 [ 136.064118][ T6290] __x64_sys_unshare+0x31/0x40 [ 136.064161][ T6290] do_syscall_64+0xcd/0x230 [ 136.064210][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.064242][ T6290] RIP: 0033:0x7f4bfff8e969 [ 136.064267][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.064298][ T6290] RSP: 002b:00007f4c00eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 136.064329][ T6290] RAX: ffffffffffffffda RBX: 00007f4c001b5fa0 RCX: 00007f4bfff8e969 [ 136.064349][ T6290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 136.064368][ T6290] RBP: 00007f4c00010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.064387][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.064413][ T6290] R13: 0000000000000000 R14: 00007f4c001b5fa0 R15: 00007ffcc91a41f8 [ 136.064454][ T6290] [ 136.315642][ T6273] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.100519][ T6307] kernel read not supported for file /set_event_notrace_pid (pid: 6307 comm: syz.2.88) [ 138.121448][ T30] audit: type=1800 audit(6041351154.877:7): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.88" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 138.162800][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.178145][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.405614][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.89'. [ 139.678643][ T6319] syz.2.91 uses obsolete (PF_INET,SOCK_PACKET) [ 140.019895][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 140.964935][ T6337] random: crng reseeded on system resumption [ 141.975040][ T6345] kernel read not supported for file /set_event_notrace_pid (pid: 6345 comm: syz.0.96) [ 142.036369][ T30] audit: type=1800 audit(6041351158.787:8): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.96" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 143.054117][ T6351] netlink: 330 bytes leftover after parsing attributes in process `syz.2.98'. [ 149.743909][ T6441] usbip-vudc usbip-vudc.0: gadget not bound [ 150.273306][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 150.628436][ T6445] svc: failed to register nfsdv3 RPC service (errno 111). [ 151.121038][ T6445] svc: failed to register nfsaclv3 RPC service (errno 111). [ 151.213365][ T6444] ima: policy update failed [ 151.236390][ T30] audit: type=1802 audit(4294967304.700:9): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.120" res=0 errno=0 [ 151.480914][ T6454] Setting dangerous option i915.mitigations - tainting kernel [ 153.351631][ T6486] FAULT_INJECTION: forcing a failure. [ 153.351631][ T6486] name fail_futex, interval 1, probability 0, space 0, times 1 [ 153.396964][ T6486] CPU: 1 UID: 0 PID: 6486 Comm: syz.2.131 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 153.397005][ T6486] Tainted: [U]=USER [ 153.397013][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 153.397027][ T6486] Call Trace: [ 153.397034][ T6486] [ 153.397043][ T6486] dump_stack_lvl+0x16c/0x1f0 [ 153.397080][ T6486] should_fail_ex+0x512/0x640 [ 153.397119][ T6486] get_futex_key+0x49e/0x1000 [ 153.397147][ T6486] ? __pfx_get_futex_key+0x10/0x10 [ 153.397170][ T6486] ? pick_eevdf+0x3be/0x5b0 [ 153.397197][ T6486] ? update_curr_se+0x8b/0x270 [ 153.397227][ T6486] ? update_curr+0x74/0x800 [ 153.397266][ T6486] futex_wait_setup+0x78/0x290 [ 153.397305][ T6486] __futex_wait+0x266/0x3c0 [ 153.397338][ T6486] ? __pfx___futex_wait+0x10/0x10 [ 153.397368][ T6486] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.397403][ T6486] ? __pfx_futex_wake_mark+0x10/0x10 [ 153.397446][ T6486] futex_wait+0xe8/0x380 [ 153.397476][ T6486] ? __pfx_futex_wait+0x10/0x10 [ 153.397515][ T6486] ? do_writev+0x218/0x330 [ 153.397557][ T6486] do_futex+0x229/0x350 [ 153.397583][ T6486] ? __pfx_do_futex+0x10/0x10 [ 153.397606][ T6486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.397648][ T6486] __x64_sys_futex+0x1e0/0x4c0 [ 153.397677][ T6486] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 153.397703][ T6486] ? __pfx___x64_sys_futex+0x10/0x10 [ 153.397730][ T6486] ? __pfx_do_writev+0x10/0x10 [ 153.397765][ T6486] ? rcu_is_watching+0x12/0xc0 [ 153.397794][ T6486] do_syscall_64+0xcd/0x230 [ 153.397830][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.397854][ T6486] RIP: 0033:0x7f4bfff8e969 [ 153.397872][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.397904][ T6486] RSP: 002b:00007f4c00eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.397939][ T6486] RAX: ffffffffffffffda RBX: 00007f4c001b5fa8 RCX: 00007f4bfff8e969 [ 153.397959][ T6486] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4c001b5fa8 [ 153.397978][ T6486] RBP: 00007f4c001b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 153.397997][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c001b5fac [ 153.398014][ T6486] R13: 0000000000000000 R14: 00007ffcc91a4110 R15: 00007ffcc91a41f8 [ 153.398055][ T6486] [ 153.630122][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.885219][ T6486] FAULT_INJECTION: forcing a failure. [ 153.885219][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 154.091477][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.2.131 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 154.091532][ T6486] Tainted: [U]=USER [ 154.091543][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 154.091572][ T6486] Call Trace: [ 154.091583][ T6486] [ 154.091595][ T6486] dump_stack_lvl+0x16c/0x1f0 [ 154.091647][ T6486] should_fail_ex+0x512/0x640 [ 154.091691][ T6486] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 154.091732][ T6486] should_failslab+0xc2/0x120 [ 154.091772][ T6486] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.091810][ T6486] ? __kernfs_new_node+0xd2/0x8a0 [ 154.091870][ T6486] __kernfs_new_node+0xd2/0x8a0 [ 154.091927][ T6486] ? __pfx___kernfs_new_node+0x10/0x10 [ 154.091989][ T6486] ? find_held_lock+0x2b/0x80 [ 154.092021][ T6486] ? kernfs_root+0xee/0x2a0 [ 154.092079][ T6486] kernfs_new_node+0x13c/0x1e0 [ 154.092121][ T6486] __kernfs_create_file+0x53/0x350 [ 154.092174][ T6486] sysfs_add_file_mode_ns+0x207/0x3c0 [ 154.092236][ T6486] internal_create_group+0x578/0xf30 [ 154.092279][ T6486] ? __pfx_internal_create_group+0x10/0x10 [ 154.092341][ T6486] ? kernfs_create_link+0x1bd/0x240 [ 154.092392][ T6486] internal_create_groups+0x9d/0x150 [ 154.092428][ T6486] device_add+0x6d1/0x1a70 [ 154.092477][ T6486] ? __pfx_device_add+0x10/0x10 [ 154.092520][ T6486] ? lockdep_init_map_type+0x5c/0x280 [ 154.092571][ T6486] ? __init_waitqueue_head+0xca/0x150 [ 154.092634][ T6486] netdev_register_kobject+0x182/0x3a0 [ 154.092682][ T6486] register_netdevice+0x13dc/0x2270 [ 154.092731][ T6486] ? __pfx_register_netdevice+0x10/0x10 [ 154.092785][ T6486] __ip_tunnel_create+0x4a8/0x680 [ 154.092828][ T6486] ? __pfx___ip_tunnel_create+0x10/0x10 [ 154.092880][ T6486] ip_tunnel_init_net+0x22f/0x7d0 [ 154.092926][ T6486] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 154.092974][ T6486] ? trace_kmalloc+0x2b/0xd0 [ 154.093017][ T6486] ? lockdep_init_map_type+0x5c/0x280 [ 154.093066][ T6486] ? __pfx_erspan_init_net+0x10/0x10 [ 154.093119][ T6486] ops_init+0x1df/0x5f0 [ 154.093163][ T6486] setup_net+0x21e/0x850 [ 154.093207][ T6486] ? __pfx_setup_net+0x10/0x10 [ 154.093243][ T6486] ? lockdep_init_map_type+0x5c/0x280 [ 154.093287][ T6486] ? __pfx_down_read_killable+0x10/0x10 [ 154.093359][ T6486] ? debug_mutex_init+0x37/0x70 [ 154.093418][ T6486] copy_net_ns+0x2a6/0x5f0 [ 154.093466][ T6486] create_new_namespaces+0x3ea/0xad0 [ 154.093515][ T6486] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 154.093555][ T6486] ksys_unshare+0x45b/0xa40 [ 154.093603][ T6486] ? __pfx_ksys_unshare+0x10/0x10 [ 154.093645][ T6486] ? xfd_validate_state+0x5d/0x180 [ 154.093700][ T6486] ? rcu_is_watching+0x12/0xc0 [ 154.093740][ T6486] __x64_sys_unshare+0x31/0x40 [ 154.093783][ T6486] do_syscall_64+0xcd/0x230 [ 154.093833][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.093866][ T6486] RIP: 0033:0x7f4bfff8e969 [ 154.093892][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.093923][ T6486] RSP: 002b:00007f4c00eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.093954][ T6486] RAX: ffffffffffffffda RBX: 00007f4c001b5fa0 RCX: 00007f4bfff8e969 [ 154.093976][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 154.093994][ T6486] RBP: 00007f4c00010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.094014][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.094033][ T6486] R13: 0000000000000000 R14: 00007f4c001b5fa0 R15: 00007ffcc91a41f8 [ 154.094077][ T6486] [ 154.533311][ T6498] kernel read not supported for file /set_event_notrace_pid (pid: 6498 comm: syz.1.134) [ 155.111438][ T30] audit: type=1800 audit(4294967308.010:10): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.134" name="set_event_notrace_pid" dev="tracefs" ino=1059 res=0 errno=0 [ 157.443320][ T6534] Setting dangerous option i915.mitigations - tainting kernel [ 157.911297][ T6541] FAULT_INJECTION: forcing a failure. [ 157.911297][ T6541] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.979266][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.3.147 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 157.979323][ T6541] Tainted: [U]=USER [ 157.979334][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 157.979353][ T6541] Call Trace: [ 157.979364][ T6541] [ 157.979377][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 157.979429][ T6541] should_fail_ex+0x512/0x640 [ 157.979484][ T6541] get_futex_key+0x49e/0x1000 [ 157.979516][ T6541] ? __pfx__kstrtoull+0x10/0x10 [ 157.979566][ T6541] ? __pfx_get_futex_key+0x10/0x10 [ 157.979600][ T6541] ? find_held_lock+0x2b/0x80 [ 157.979634][ T6541] ? kstrtouint+0xdd/0x130 [ 157.979675][ T6541] futex_wait_setup+0x78/0x290 [ 157.979730][ T6541] __futex_wait+0x266/0x3c0 [ 157.979776][ T6541] ? __pfx___futex_wait+0x10/0x10 [ 157.979829][ T6541] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.979890][ T6541] futex_wait+0xe8/0x380 [ 157.979933][ T6541] ? __pfx_futex_wait+0x10/0x10 [ 157.979987][ T6541] ? do_writev+0x218/0x330 [ 157.980046][ T6541] do_futex+0x229/0x350 [ 157.980082][ T6541] ? __pfx_do_futex+0x10/0x10 [ 157.980114][ T6541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.980174][ T6541] __x64_sys_futex+0x1e0/0x4c0 [ 157.980212][ T6541] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 157.980248][ T6541] ? __pfx___x64_sys_futex+0x10/0x10 [ 157.980286][ T6541] ? __pfx_do_writev+0x10/0x10 [ 157.980334][ T6541] ? rcu_is_watching+0x12/0xc0 [ 157.980377][ T6541] do_syscall_64+0xcd/0x230 [ 157.980425][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.980458][ T6541] RIP: 0033:0x7f39b598e969 [ 157.980483][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.980514][ T6541] RSP: 002b:00007f39b67230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.980552][ T6541] RAX: ffffffffffffffda RBX: 00007f39b5bb5fa8 RCX: 00007f39b598e969 [ 157.980573][ T6541] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f39b5bb5fa8 [ 157.980593][ T6541] RBP: 00007f39b5bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.980613][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39b5bb5fac [ 157.980633][ T6541] R13: 0000000000000000 R14: 00007ffeb799e810 R15: 00007ffeb799e8f8 [ 157.980674][ T6541] [ 158.214391][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.323562][ T6541] FAULT_INJECTION: forcing a failure. [ 158.323562][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 158.363270][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.3.147 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 158.363322][ T6541] Tainted: [U]=USER [ 158.363331][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 158.363348][ T6541] Call Trace: [ 158.363358][ T6541] [ 158.363369][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 158.363418][ T6541] should_fail_ex+0x512/0x640 [ 158.363460][ T6541] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 158.363497][ T6541] should_failslab+0xc2/0x120 [ 158.363534][ T6541] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 158.363566][ T6541] ? __proc_create+0xc3/0x8c0 [ 158.363596][ T6541] ? __proc_create+0x2ce/0x8c0 [ 158.363633][ T6541] __proc_create+0x2ce/0x8c0 [ 158.363666][ T6541] ? __pfx___proc_create+0x10/0x10 [ 158.363704][ T6541] ? _raw_write_unlock+0x28/0x50 [ 158.363741][ T6541] ? proc_register+0x314/0x5f0 [ 158.363778][ T6541] proc_create_reg+0x7d/0x180 [ 158.363816][ T6541] proc_create_net_data+0x8e/0x1b0 [ 158.363851][ T6541] ? __pfx_proc_create_net_data+0x10/0x10 [ 158.363897][ T6541] nfs_fs_proc_net_init+0xf3/0x1e0 [ 158.363942][ T6541] nfs_net_init+0x130/0x300 [ 158.363983][ T6541] ? __pfx_nfs_net_init+0x10/0x10 [ 158.364022][ T6541] ops_init+0x1df/0x5f0 [ 158.364061][ T6541] setup_net+0x21e/0x850 [ 158.364099][ T6541] ? __pfx_setup_net+0x10/0x10 [ 158.364131][ T6541] ? lockdep_init_map_type+0x5c/0x280 [ 158.364171][ T6541] ? __pfx_down_read_killable+0x10/0x10 [ 158.364221][ T6541] ? debug_mutex_init+0x37/0x70 [ 158.364289][ T6541] copy_net_ns+0x2a6/0x5f0 [ 158.364331][ T6541] create_new_namespaces+0x3ea/0xad0 [ 158.364373][ T6541] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 158.364410][ T6541] ksys_unshare+0x45b/0xa40 [ 158.364450][ T6541] ? __pfx_ksys_unshare+0x10/0x10 [ 158.364488][ T6541] ? xfd_validate_state+0x5d/0x180 [ 158.364537][ T6541] ? rcu_is_watching+0x12/0xc0 [ 158.364572][ T6541] __x64_sys_unshare+0x31/0x40 [ 158.364611][ T6541] do_syscall_64+0xcd/0x230 [ 158.364653][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.364683][ T6541] RIP: 0033:0x7f39b598e969 [ 158.364708][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.364736][ T6541] RSP: 002b:00007f39b6723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.364764][ T6541] RAX: ffffffffffffffda RBX: 00007f39b5bb5fa0 RCX: 00007f39b598e969 [ 158.364783][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 158.364800][ T6541] RBP: 00007f39b5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.364818][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.364834][ T6541] R13: 0000000000000000 R14: 00007f39b5bb5fa0 R15: 00007ffeb799e8f8 [ 158.364872][ T6541] [ 158.749970][ T6541] ------------[ cut here ]------------ [ 158.755520][ T6541] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 158.766032][ T6541] WARNING: CPU: 1 PID: 6541 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 158.775626][ T6541] Modules linked in: [ 158.780344][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.3.147 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 158.794569][ T6541] Tainted: [U]=USER [ 158.799075][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 158.809759][ T6541] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 158.818777][ T6541] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 6b a2 8b 48 c7 c7 e0 6a a2 8b e8 b3 f7 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 94 16 60 ff 90 48 b8 00 00 00 00 00 [ 158.839852][ T6541] RSP: 0018:ffffc90018fafb70 EFLAGS: 00010282 [ 158.846001][ T6541] RAX: 0000000000000000 RBX: ffff888031e44280 RCX: ffffc9000bf23000 [ 158.854700][ T6541] RDX: 0000000000080000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 158.863434][ T6541] RBP: ffff88807ecd7e80 R08: 0000000000000001 R09: 0000000000000000 [ 158.872210][ T6541] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ecd7dc0 [ 158.880334][ T6541] R13: ffff88807ecd7ea4 R14: ffff88802f0864a4 R15: dffffc0000000000 [ 158.888483][ T6541] FS: 00007f39b67236c0(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000 [ 158.897501][ T6541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.904256][ T6541] CR2: 000055556d977808 CR3: 000000005ebe0000 CR4: 00000000003526f0 [ 158.912365][ T6541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.912421][ T6541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.912444][ T6541] Call Trace: [ 158.912457][ T6541] [ 158.912475][ T6541] ? __pfx_remove_proc_entry+0x10/0x10 [ 158.912527][ T6541] ? kfree+0x2b6/0x4d0 [ 158.912580][ T6541] ? cache_destroy_net+0x31/0x50 [ 158.912629][ T6541] ? sunrpc_exit_net+0x37/0x90 [ 158.912682][ T6541] sunrpc_exit_net+0x46/0x90 [ 158.912729][ T6541] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 158.912778][ T6541] ops_exit_list+0xb0/0x180 [ 158.912823][ T6541] setup_net+0x4e8/0x850 [ 158.914075][ T6541] ? __pfx_setup_net+0x10/0x10 [ 158.914125][ T6541] ? lockdep_init_map_type+0x5c/0x280 [ 158.914172][ T6541] ? __pfx_down_read_killable+0x10/0x10 [ 158.914229][ T6541] ? debug_mutex_init+0x37/0x70 [ 158.914288][ T6541] copy_net_ns+0x2a6/0x5f0 [ 158.914339][ T6541] create_new_namespaces+0x3ea/0xad0 [ 158.914387][ T6541] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 158.914437][ T6541] ksys_unshare+0x45b/0xa40 [ 158.914484][ T6541] ? __pfx_ksys_unshare+0x10/0x10 [ 158.914528][ T6541] ? xfd_validate_state+0x5d/0x180 [ 158.914586][ T6541] ? rcu_is_watching+0x12/0xc0 [ 158.914629][ T6541] __x64_sys_unshare+0x31/0x40 [ 158.914675][ T6541] do_syscall_64+0xcd/0x230 [ 158.914727][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.914772][ T6541] RIP: 0033:0x7f39b598e969 [ 158.914800][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.914832][ T6541] RSP: 002b:00007f39b6723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.914868][ T6541] RAX: ffffffffffffffda RBX: 00007f39b5bb5fa0 RCX: 00007f39b598e969 [ 158.914892][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 158.914913][ T6541] RBP: 00007f39b5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.914935][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.914955][ T6541] R13: 0000000000000000 R14: 00007f39b5bb5fa0 R15: 00007ffeb799e8f8 [ 158.914999][ T6541] [ 158.915015][ T6541] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.915040][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.3.147 Tainted: G U 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 158.915088][ T6541] Tainted: [U]=USER [ 158.915100][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 158.915119][ T6541] Call Trace: [ 158.915129][ T6541] [ 158.915141][ T6541] dump_stack_lvl+0x3d/0x1f0 [ 158.915185][ T6541] panic+0x71c/0x800 [ 158.915233][ T6541] ? __pfx_panic+0x10/0x10 [ 158.915280][ T6541] ? show_trace_log_lvl+0x29b/0x3e0 [ 158.915329][ T6541] ? remove_proc_entry+0x45e/0x530 [ 158.915368][ T6541] check_panic_on_warn+0xab/0xb0 [ 158.915438][ T6541] __warn+0xf6/0x3c0 [ 158.915484][ T6541] ? preempt_schedule_notrace+0x62/0xe0 [ 158.915526][ T6541] ? remove_proc_entry+0x45e/0x530 [ 158.915569][ T6541] report_bug+0x3c3/0x580 [ 158.915608][ T6541] ? remove_proc_entry+0x45e/0x530 [ 158.915648][ T6541] handle_bug+0x184/0x210 [ 158.915695][ T6541] exc_invalid_op+0x17/0x50 [ 158.915745][ T6541] asm_exc_invalid_op+0x1a/0x20 [ 158.915777][ T6541] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 158.915818][ T6541] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 6b a2 8b 48 c7 c7 e0 6a a2 8b e8 b3 f7 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 94 16 60 ff 90 48 b8 00 00 00 00 00 [ 158.915849][ T6541] RSP: 0018:ffffc90018fafb70 EFLAGS: 00010282 [ 158.915877][ T6541] RAX: 0000000000000000 RBX: ffff888031e44280 RCX: ffffc9000bf23000 [ 158.915898][ T6541] RDX: 0000000000080000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 158.915919][ T6541] RBP: ffff88807ecd7e80 R08: 0000000000000001 R09: 0000000000000000 [ 158.915940][ T6541] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ecd7dc0 [ 158.915960][ T6541] R13: ffff88807ecd7ea4 R14: ffff88802f0864a4 R15: dffffc0000000000 [ 158.916006][ T6541] ? __warn_printk+0x1a5/0x350 [ 158.916063][ T6541] ? __pfx_remove_proc_entry+0x10/0x10 [ 158.916109][ T6541] ? kfree+0x2b6/0x4d0 [ 158.916158][ T6541] ? cache_destroy_net+0x31/0x50 [ 158.916205][ T6541] ? sunrpc_exit_net+0x37/0x90 [ 158.916257][ T6541] sunrpc_exit_net+0x46/0x90 [ 158.916302][ T6541] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 158.916347][ T6541] ops_exit_list+0xb0/0x180 [ 158.916387][ T6541] setup_net+0x4e8/0x850 [ 158.916438][ T6541] ? __pfx_setup_net+0x10/0x10 [ 158.916475][ T6541] ? lockdep_init_map_type+0x5c/0x280 [ 158.916520][ T6541] ? __pfx_down_read_killable+0x10/0x10 [ 158.916575][ T6541] ? debug_mutex_init+0x37/0x70 [ 158.916641][ T6541] copy_net_ns+0x2a6/0x5f0 [ 158.916689][ T6541] create_new_namespaces+0x3ea/0xad0 [ 158.916734][ T6541] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 158.916773][ T6541] ksys_unshare+0x45b/0xa40 [ 158.916818][ T6541] ? __pfx_ksys_unshare+0x10/0x10 [ 158.916859][ T6541] ? xfd_validate_state+0x5d/0x180 [ 158.916909][ T6541] ? rcu_is_watching+0x12/0xc0 [ 158.916953][ T6541] __x64_sys_unshare+0x31/0x40 [ 158.917002][ T6541] do_syscall_64+0xcd/0x230 [ 158.917053][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.917188][ T6541] RIP: 0033:0x7f39b598e969 [ 158.917225][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.917275][ T6541] RSP: 002b:00007f39b6723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.917308][ T6541] RAX: ffffffffffffffda RBX: 00007f39b5bb5fa0 RCX: 00007f39b598e969 [ 158.917331][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 158.917352][ T6541] RBP: 00007f39b5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.917373][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.917401][ T6541] R13: 0000000000000000 R14: 00007f39b5bb5fa0 R15: 00007ffeb799e8f8 [ 158.917450][ T6541] [ 158.925124][ T6541] Kernel Offset: disabled