last executing test programs: 10.746377209s ago: executing program 2 (id=519): mmap$auto(0x0, 0x5, 0x5, 0x13, 0xffffffffffffffff, 0x0) (async) r0 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f00000000c0)=0x1) close_range$auto(r0, r0, 0x40) (async) r1 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1c, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x10000002, 0x6}, {0xe63c, 0x3, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) (async) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/set_event\x00', 0x48382, 0x0) writev$auto(r3, &(0x7f0000001480)={0x0, 0xe}, 0x6) (async) write$auto(0x3, 0x0, 0x1) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xffffffffc0403d11, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r2, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x2, 0x0) (async) connect$auto(r1, &(0x7f0000000080)=@can, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x4000000) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') (async) write$auto(0xffffffffffffffff, 0x0, 0x8000007f) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) (async) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x44, 0x0, 0x0}, 0x58) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x2, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 10.492030382s ago: executing program 2 (id=521): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) write$auto(0x4, 0x0, 0x100082) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 8.429582453s ago: executing program 3 (id=526): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x7, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) 7.716972286s ago: executing program 0 (id=528): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/43, 0x2b) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0x80, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) read$auto(r2, 0x0, 0x3) r4 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, r4, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r3, 0x10000, 0x7ffffffa, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000380)={0x40a, 0x1, 0x44f, 0x9, 0x1, 0x1007181, 0x5, 0x807, 0x7, 0x7, 0x10001, 0x26, 0x4, 0x200000000001, 0xffffffffff9ff343, 0x3, 0x500000000000000, 0x0, 0x30, 0x6, 0x864, 0xe, 0x8, 0x9, 0x0, 0x80084, 0x0, 0x0, 0x5, 0x0, 0x0, [0x12d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100000, 0x3, 0x551f198b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc], "c178555996db472f3df89640feec8a1a0641f702a723600000006d9800"}, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000002c0)="d0a009", 0x3) 7.423219358s ago: executing program 2 (id=530): r0 = socket(0x1e, 0x5, 0xffffbffe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4) setsockopt$auto(r1, 0x10000000084, 0x2, 0x0, 0x10005) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) bind$auto(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket(0x29, 0x80000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8001) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r3) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013d9fb40c90a116eb250100000020bf14561bb95c0f95ffdce2b3323e8cd2a1dcb35098e2d48a749bd6e4970ffe5f4b84c1a1ff030000000000007f6efea12c025d53e885dd690d00c98230cbbd5a3add34afa1c32dea8d241887b3dc0aa6708071ed1a6d000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3401f900", @ANYRES16=r4, @ANYBLOB="000829bd7000fddbdf25050000000c00030006247e70a90b5343000000000000000c00078008000d80040044800c000800060000000000000005000a005e0000000800010004000000b20007800800a00001000000b31dcc5641895c5e42bd3803a185968a02f5fd5438b0017791c12ca28495971ab5ba2c9e88390f5ec6d4565474f5eb87e1c1edcaf217e4fdf2f8afbd866e91baaf6ed82492dcbcb921ccaee68ca6e8e54e79745fe192dbc2dc4de20f07d092f75f26861ca49de2ee7d63f549f782351f777203c9bc815fa77cb10bc0b961e18d188514f8ef883cc14226684b8b70"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x4004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8) r5 = socket(0xa, 0x5, 0x84) setsockopt$auto(r5, 0x10000000084, 0x22, 0x0, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) 7.291191543s ago: executing program 1 (id=531): mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="e7fdff8d44916c5dbbdd2310000056b103cfe0ed7b3b700442fbf598d28ed0553238b0023f51cd8a9d2df44ce666337d2e04000000000000b7a00ad9bc0046b3eb2f939f3d84dca30cd7b0b6b3ab0bff9bc793b415ef83f68700823d2d2e51b8e19744697dd98dff315a6a6b7794818c02ddb41abb"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(r1, 0x6, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(r1, &(0x7f0000000100)='/dev/raw-gadget\x00', 0xa) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000003c0)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x7, 0x6, 0x8, 0xae, 0x7, 0x2, 0x7, 0x8, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, [0x0, 0x40, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0xfffffffffffffffe, 0x3f, 0x0, 0x20000, 0x0, 0x0, 0x4], "4b7d3a9f800c5ffc95d1589c5341511254fb42f97b0d8f3878f61cb511887dc8109d6f57a4bbfff476032fe2f78e124a0c00acc1e5"}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) unshare$auto(0x1) dup2$auto(r3, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe) madvise$auto(0xd24, 0x2, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x5, 0x8000007, 0x80000001, &(0x7f0000000200)) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port5/power/runtime_status\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) 7.087026496s ago: executing program 0 (id=532): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.weight.nice\x00', 0xa001, 0x0) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, "5bdea972a5301a5ab5220e33e11a5044346e14eb950328cfbc16b9271f29a757806e006f1b38b36e5ed1fb481be9a7bbf36ff30eb660ff3e37300bd123a2ea92192709691865cc2e35d4fe8190b42a834cafd2e2a5ea6e0509fd0796b3ea7f1bf4241dae0e666d360b1f2160bbf9d1f530"}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8801) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x60041, 0x0) write$auto_drm_connector_fops_drm_debugfs(r3, &(0x7f0000001240)="b3827964b69f25ba34ba41a7", 0xc) r4 = socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1f, 0x1, 0x948b, 0x5, 0x15f4da07, 0x9, 0x1010, 0xb1, 0xeffffffffffffffe, 0x1000, 0xb, 0x100000000, 0x9, 0xa]}, 0x0) r5 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000014140), 0xc00, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f00000141c0)={0x4, 0x6}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) fcntl$auto(0x3, 0x4, 0xa553) read$auto_rb_simple_fops_trace(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0x7fffffff) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 6.71880766s ago: executing program 3 (id=533): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) madvise$auto(0x0, 0x200007, 0x19) keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/cpulist\x00', 0x28000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000140)="aad5c957e4ce6f7bd5a4285999792c0a678340ed0e886dc934866f69b116f12480fd7c4e74108ecc424592a1ee32fa9523bcff872256bdd528707672ea5b4c02a415b07262b3821d9d3ee38528dcaf57a6ab9f1c49cc349036c9ad72d6e98b268d3be80c0d07969dad06ca65fb2508c094d1628e4ddda885c8312dd5df4ed8e90903bc6fd810eee16c8ce952323cdf0390ba781897a2e22471378ef1df56e21005002bb1b1cd8bb9a2") syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0xc, 0x3) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) 6.235904327s ago: executing program 1 (id=534): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000040)={@_si_pad}, 0x3, &(0x7f00000000c0)={{0x4, 0x59b}, {0xa, 0x8000}, 0x6, 0x8, 0x0, 0x7, 0x7, 0x3, 0x400, 0x3b7, 0x10000, 0x2, 0x5, 0x6, 0xfff, 0xfd20}) prctl$auto_PR_SET_MM_START_CODE(0x4, 0x1, r0, 0x8, 0x2b0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) ioctl$auto(0xc8, 0x800454dd, 0xffffffffffffffff) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x2f, 0x8, 0xfff, r1, 0x2e, 0x7ff}, 0x6f5) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi6\x00', 0x82400, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) ioctl$auto(r2, 0x1, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x802, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) socket(0x10, 0x2, 0xf) mmap$auto(0x2, 0xe97f, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008004) memfd_create$auto(0x0, 0x4) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r6}, 0xa3) bpf$auto(0x1, &(0x7f0000000280)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0x2) 6.036539771s ago: executing program 2 (id=535): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0xf1f, 0x0, 0x400000000ffb, 0x8000004008011, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, r0, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(0x0, r1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0xc000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x4, 0x2000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x4, r0) socket(0xa, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6.018675288s ago: executing program 0 (id=536): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semget$auto(0x7, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) set_mempolicy$auto(0x1, 0x0, 0x21) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0x4, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') poll$auto(&(0x7f0000000340)={r3, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) close_range$auto(0x2, 0x8, 0x0) 5.84036589s ago: executing program 1 (id=537): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)="e50dc05b13a1d494370be2b7f2dfc610cbcccfe83c748fc56380eb733988808c09f2c9bb8035eea67627ca91078d6183519a48e10157fb6d8f3b7adb4b0f0a64a8d40adad5eef1e3bc1734633936285b8b9b5ebb", 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) write$auto(0x3, 0x0, 0x800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) 4.769535168s ago: executing program 1 (id=538): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) write$auto(0x4, 0x0, 0x100082) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, 0x0, 0x40) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 3.543238706s ago: executing program 0 (id=539): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) write$auto(0x4, 0x0, 0x100082) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 3.505094312s ago: executing program 3 (id=540): preadv$auto(0xffffffffffffffff, 0x0, 0x8, 0x7, 0x402) unshare$auto(0x40000080) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/erspan0/address\x00', 0xa8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/93, 0x5d) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r2, &(0x7f0000000180)=""/38, 0x26) socket(0x5, 0x3, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec13\x00', 0xa0000, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1000000000001ff, 0x7, 0x7, 0x1, 0x948b, 0x9, 0x15f4da07, 0x10001, 0x2, 0x67, 0x80000020, 0x1004, 0x400b, 0x9, 0x2, 0xffffffff]}, 0x0) socket(0xa, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x110c230000, 0x1fffffe, 0x9) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) 2.389979194s ago: executing program 2 (id=541): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r3 = socket(0x1e, 0x1, 0x0) getsockopt$auto(r3, 0x6, 0x7, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000400)={r2, &(0x7f0000000100)="2078d0538cf8d48cae51a6a5c8f80b5fab0e2c2521b9ebdb09703aa3994cc3fd7a7de2c277cbe7cf8b9d6146e87bffb6a5218c62537ace8877140f8e00521c4da4c45573c2e33a37c07a376a9e0f049b72abd5b734d63cd1388a94b589338b4c77aa3023371282dbea37bbd64a", 0x80000001, &(0x7f0000000280)="f0602cde7124f79713f24e54462db9008a9a850a182ab2bd773c65dee64d13e5db8be6b848fd93a293f710cf089202f24f0750b547ef490faf056e8dddb454bc86b504546b819f88edf989cc6867678929ac03664876b992f2582b84dc39f55961847872dd1484e1ce50312b733572b4246b995e17bc71e1930a90944c284ed61f99f8059e153170720a4bf72b32faa54880fd53dbb072b033144c96cc8d0a2de8ada1cef65b7578ed9fe9ed7458d98b6597a0ab79249739755185656920b874501115208ab5fc13403c3c10228f59efbf8b80b3032d77fded41d1b24b357e050b00eb074daedecd397bc1a9dac7c110f08704bd34", 0x0, &(0x7f0000000380)="6194d8a862e527c6b5d4", &(0x7f00000003c0)=0x5}) r4 = socket(0x28, 0x80002, 0x5) setsockopt$auto_SO_MARK(r4, 0x0, 0x24, 0x0, 0x5) ioctl$auto(r0, 0x5646, r4) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) r5 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci5/force_suspend\x00', 0x333000, 0x0) close_range$auto(r5, r5, 0x4e) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) 1.98852319s ago: executing program 2 (id=542): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) write$auto(0x4, 0x0, 0x100082) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000000)={0xe8, 0x3ff, 0x9, 0x9, 0xf97}) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f00000000c0)=0x6) io_uring_register$auto_IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)="0ca045c19e742e509722c76cfbecb85c1d61f82c7cebab17b15511d77ce2ee484a27b6960e81f9db5e7bea", 0x8cb6) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1.406065942s ago: executing program 1 (id=543): mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="e7fdff8d44916c5dbbdd2310000056b103cfe0ed7b3b700442fbf598d28ed0553238b0023f51cd8a9d2df44ce666337d2e04000000000000b7a00ad9bc0046b3eb2f939f3d84dca30cd7b0b6b3ab0bff9bc793b415ef83f68700823d2d2e51b8e19744697dd98dff315a6a6b7794818c02ddb41abb"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(r1, 0x6, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(r1, &(0x7f0000000100)='/dev/raw-gadget\x00', 0xa) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000003c0)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x7, 0x6, 0x8, 0xae, 0x7, 0x2, 0x7, 0x8, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, [0x0, 0x40, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0xfffffffffffffffe, 0x3f, 0x0, 0x20000, 0x0, 0x0, 0x4], "4b7d3a9f800c5ffc95d1589c5341511254fb42f97b0d8f3878f61cb511887dc8109d6f57a4bbfff476032fe2f78e124a0c00acc1e5"}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) unshare$auto(0x1) dup2$auto(r3, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe) madvise$auto(0xd24, 0x2, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x5, 0x8000007, 0x80000001, &(0x7f0000000200)) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port5/power/runtime_status\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) 991.221723ms ago: executing program 3 (id=544): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x81, 0xc731, 0x60, &(0x7f0000000080)="761459129c47a0a470a67448750a43dddf00b69bfed5e6ae7ea5fe5c9d8cd869069983c3ddaf20", 0x2, 0x3, 0x7, @stream_id=0x6, 0xfffffff5, 0x476, 0x0}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/ns/cgroup\x00', 0x180, 0x0) ioctl$auto(r2, 0x8008b70c, 0xffffffffffffffff) ioctl$auto(r1, 0x4b3a, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x6, 0x10001, 0x20000b, 0x2e1, 0x504, 0x1, 0x101, 0x6, 0x5}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000040000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x2) r4 = socket(0xa, 0x3, 0x3a) ioctl$auto(r4, 0x890c, 0x1) unshare$auto(0x40000080) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x3}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xe, 0xd, 0x1, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0x100000b, 0x2de, 0x504, 0x1, 0x80, 0x5, 0x6}, {0xfff7ffff, 0xf5, 0x52, 0x5, 0x10001, 0x40, 0x276c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) 842.334401ms ago: executing program 0 (id=545): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x2, 0x0) bind$auto(r0, 0xfffffffffffffffe, 0xfffffffe) wait4$auto(0x0, &(0x7f0000000000)=0x2, 0x7, &(0x7f00000000c0)={{0xf79, 0x7fff}, {0x40004, 0x101}, 0x2, 0x0, 0x80, 0x3, 0x1, 0xdf2, 0x8, 0x2, 0x5, 0x1, 0x4, 0xffffffff, 0x55, 0xef16}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x55) socket(0x2, 0x3, 0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0) socket(0x2, 0x3, 0xff) pread64$auto(r2, 0x0, 0x8, 0xffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x10001) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0xf, &(0x7f0000000140)={0x0, 0x20000004}, 0x1, 0x0, 0xfff, 0x84}, 0x3ff}, 0x100007c, 0xdb22, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r4 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r4, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) 665.317561ms ago: executing program 0 (id=546): openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) r2 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/environ\x00', 0x200202, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x6320000) mq_open$auto(0x0, 0x62, 0xfff6, 0x0) socket(0x10, 0x2, 0x40000008) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(r3, &(0x7f0000000100)='/sys/devices/~latform/vhci_hc$.7/usb23\x1823-0:1.p\f\xdd\xb4\n-&\x8fV\x1e\x9f\xe7@\xe7\xdc0/~\xda=\xd7\xc3\x10\x8c\x90l\xb0\xbc\x87N\a\x00\x00\x00\x00\x00\x00\x00\x0fvero\xb5\x90<\xa8\xd3<\x01\xd8\x00\x00\xddk\xbbu\x917\xe7\xd9\xb8\x84\xac\x96\xdd\x1d\xb8\xecvyV\xf2\x83\xbe\x89\x05\xf6\x83\xc1\xcc\x87\a\r\x89,<\x04\xec\xc5\xe2\\\xb7\xc9\xfb\xd2\x17\x12\xfd\x03>a\x06\x89\xc0sp\x9e\xc8ZO\x16s\xef4wJP\xf9\xa2\x01+\xb7A}\xe3<\x12D\xaf\x83\xdf\x85\xadg_\xc7L\xa6\xbe\x1f\xc5\xa1\x9b\xd2\x16\xad\xa3z\'\x065\x9c\fC\xf2\xe2a/\xab\xa1\xf9\xa3\x04\x1e$\\\xa9\xe9i\xc5\xfc\x8dC\xae\x10G7\xc37B\x96\x13\x8bTP\xe6\x9cAV\x01\x9e\x8fTH\xf6\b\xceqs\x9d6`*\xd2\x03\xc6\xc1', 0x6864a34) socket(0x2, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1000000000e8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x5, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mprotect$auto(0x200000000000, 0x806124, 0x8) sigaltstack$auto(&(0x7f0000000040)={0x0, 0xffffffff, 0x7}, 0x0) close_range$auto(0x2, 0x8, 0x0) 393.150005ms ago: executing program 3 (id=547): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyx9\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TIOCGETD2(r0, 0x5424, &(0x7f0000000440)="fcd2435bb9cebc49aea71138d32b33beff7b7a1cedae7e0b5e767ef294d7591e905966802eb2427f9ea5e3bc79ad4bd16b09bea6c2aea0ceff5271c38dba5147a0c0afb87c35c612b5db8e672d424e727d8da7898ed84fe068f9a899030119bca8487ff359d9677786244acf76ef15864d23757bf25eed8183c75ceea5a9229d0b43cb970ca7154385451abf6e214a549a06cb839299eb99b4ba190ec37c2cb879a095084f524d6ee27f05be864909c8083d365930fe55a8f41e357b2f9332ae69ca43635b9c26ff14a00f34aca8096be380000000000000") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dm_mod/parameters/reserved_rq_based_ios\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r1) r3 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r3, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x20006, 0x4000000000f0, 0xeb1, 0x401, 0x8003) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x9, 0x2000000000020009, 0x4000000020df, 0xeb1, 0x401, 0x100000008000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/bond_slave_1/arp_announce\x00', 0x208240, 0x0) write$auto(0x3, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r4, 0xffffffff}, 0xd) bpf$auto(0xd381, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955ba, 0x40000, 0x4, 0x1005, 0x80, 0x4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x6, 0xffffffffffffffff, 0x7, 0x4, 0x4, 0x5, 0x10001, 0x0, 0x8001, @attach_btf_obj_fd, 0x7e, 0x4, 0x1, 0x4005, 0x3}, 0x5) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x28480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe8282, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x101901, 0x0) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x78) 179.59877ms ago: executing program 1 (id=548): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) sysfs$auto(0x2, 0x24, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0xaf0) (fail_nth: 2) 0s ago: executing program 3 (id=549): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2) sysfs$auto(0x2, 0x24, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0xaf0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 85.015257][ T5621] cgroup: Unknown subsys name 'net' [ 85.131371][ T5621] cgroup: Unknown subsys name 'cpuset' [ 85.141155][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.982772][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.190468][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.202557][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.211952][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.226277][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.234694][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.340173][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.350536][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.365151][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.372985][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.382993][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.403443][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.403855][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.415397][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.418067][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.427966][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.442790][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.457027][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.459133][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.475966][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.484381][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.974446][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.983543][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.995254][ T5633] bridge_slave_0: entered allmulticast mode [ 91.003651][ T5633] bridge_slave_0: entered promiscuous mode [ 91.035056][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.042345][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.050597][ T5633] bridge_slave_1: entered allmulticast mode [ 91.057959][ T5633] bridge_slave_1: entered promiscuous mode [ 91.169307][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.204505][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.278201][ T5647] Bluetooth: hci0: command tx timeout [ 91.295139][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.302888][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.310211][ T5644] bridge_slave_0: entered allmulticast mode [ 91.317602][ T5644] bridge_slave_0: entered promiscuous mode [ 91.338041][ T5633] team0: Port device team_slave_0 added [ 91.354608][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.362137][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.369519][ T5644] bridge_slave_1: entered allmulticast mode [ 91.376708][ T5644] bridge_slave_1: entered promiscuous mode [ 91.384106][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.391263][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.398681][ T5640] bridge_slave_0: entered allmulticast mode [ 91.405840][ T5640] bridge_slave_0: entered promiscuous mode [ 91.415398][ T5633] team0: Port device team_slave_1 added [ 91.442015][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.449452][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.456597][ T5640] bridge_slave_1: entered allmulticast mode [ 91.464176][ T5640] bridge_slave_1: entered promiscuous mode [ 91.480889][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.488086][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.495601][ T5638] bridge_slave_0: entered allmulticast mode [ 91.503611][ T5638] bridge_slave_0: entered promiscuous mode [ 91.517433][ T50] Bluetooth: hci1: command tx timeout [ 91.517551][ T5645] Bluetooth: hci2: command tx timeout [ 91.529927][ T5647] Bluetooth: hci3: command tx timeout [ 91.536053][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.565768][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.573047][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.580305][ T5638] bridge_slave_1: entered allmulticast mode [ 91.587570][ T5638] bridge_slave_1: entered promiscuous mode [ 91.596687][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.618194][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.625218][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.651312][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.699167][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.710656][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.717758][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.743755][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.777338][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.796558][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.808338][ T5644] team0: Port device team_slave_0 added [ 91.838573][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.849839][ T5644] team0: Port device team_slave_1 added [ 91.859069][ T5640] team0: Port device team_slave_0 added [ 91.897723][ T5640] team0: Port device team_slave_1 added [ 91.951677][ T5638] team0: Port device team_slave_0 added [ 91.958088][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.965102][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.991251][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.008357][ T3110] cfg80211: failed to load regulatory.db [ 92.028322][ T5633] hsr_slave_0: entered promiscuous mode [ 92.035263][ T5633] hsr_slave_1: entered promiscuous mode [ 92.055504][ T5638] team0: Port device team_slave_1 added [ 92.062832][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.070159][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.097418][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.121973][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.129821][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.156554][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.200476][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.207873][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.233886][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.246081][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.253108][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.279430][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.321514][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.328609][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.355080][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.407443][ T5644] hsr_slave_0: entered promiscuous mode [ 92.413871][ T5644] hsr_slave_1: entered promiscuous mode [ 92.420345][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 92.426176][ T5644] Cannot create hsr debugfs directory [ 92.505354][ T5640] hsr_slave_0: entered promiscuous mode [ 92.512798][ T5640] hsr_slave_1: entered promiscuous mode [ 92.519591][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 92.525400][ T5640] Cannot create hsr debugfs directory [ 92.549003][ T5638] hsr_slave_0: entered promiscuous mode [ 92.555334][ T5638] hsr_slave_1: entered promiscuous mode [ 92.561901][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 92.567857][ T5638] Cannot create hsr debugfs directory [ 93.006334][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.022293][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.031157][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.042248][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.051959][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.064274][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.080920][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.090689][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.164973][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.176441][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.185425][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.195407][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.203828][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.215043][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.223954][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.234106][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.345938][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.357142][ T5645] Bluetooth: hci0: command tx timeout [ 93.365225][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.374040][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.388135][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.413814][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.424282][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.438670][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.449256][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.572702][ T5644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.583753][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.592907][ T5644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.599740][ T5645] Bluetooth: hci3: command tx timeout [ 93.607160][ T5645] Bluetooth: hci2: command tx timeout [ 93.607174][ T5647] Bluetooth: hci1: command tx timeout [ 93.617970][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.629948][ T5644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.640644][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.648848][ T5644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.658618][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.689534][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.753108][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.779442][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.816585][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.824073][ T865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.858778][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.875938][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.883097][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.910602][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.917743][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.941491][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.948641][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.014931][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.048371][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.096307][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.114922][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.129279][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.136417][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.173479][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.180718][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.198250][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.205478][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.262483][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.269845][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.300029][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.346584][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.442441][ T5647] Bluetooth: hci0: command tx timeout [ 95.486476][ T5638] veth0_vlan: entered promiscuous mode [ 95.543232][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.561737][ T5638] veth1_vlan: entered promiscuous mode [ 95.609898][ T5633] veth0_vlan: entered promiscuous mode [ 95.665813][ T5633] veth1_vlan: entered promiscuous mode [ 95.677232][ T5647] Bluetooth: hci1: command tx timeout [ 95.677300][ T5645] Bluetooth: hci2: command tx timeout [ 95.683294][ T5647] Bluetooth: hci3: command tx timeout [ 95.719832][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.729263][ T5638] veth0_macvtap: entered promiscuous mode [ 95.754865][ T5638] veth1_macvtap: entered promiscuous mode [ 95.816276][ T5640] veth0_vlan: entered promiscuous mode [ 95.830271][ T5633] veth0_macvtap: entered promiscuous mode [ 95.854113][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.870680][ T5633] veth1_macvtap: entered promiscuous mode [ 95.889339][ T5640] veth1_vlan: entered promiscuous mode [ 95.905610][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.915770][ T5644] veth0_vlan: entered promiscuous mode [ 95.943326][ T3327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.956137][ T3327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.965507][ T3327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.985176][ T3327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994792][ T5644] veth1_vlan: entered promiscuous mode [ 96.018371][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.052839][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.099666][ T1124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.110758][ T1124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.134252][ T1124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.145838][ T1124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.175545][ T5640] veth0_macvtap: entered promiscuous mode [ 96.189095][ T5640] veth1_macvtap: entered promiscuous mode [ 96.213422][ T865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.221877][ T865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.273129][ T5644] veth0_macvtap: entered promiscuous mode [ 96.322851][ T865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.323851][ T5644] veth1_macvtap: entered promiscuous mode [ 96.338471][ T865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.358792][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.374052][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.442287][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.450635][ T865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.462289][ T865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.475092][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.493074][ T865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.505227][ T865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.518384][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.520497][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.526271][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.578575][ T865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.589366][ T865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.657156][ T865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.664072][ T5785] binder: 5784:5785 ioctl c0306201 200000000000 returned -14 [ 96.671119][ T865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.695117][ T865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.709807][ T865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.860033][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.884753][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.995589][ T865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.027063][ T865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.227417][ T3327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.247582][ T3327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.518485][ T5647] Bluetooth: hci0: command tx timeout [ 97.575286][ T865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.605354][ T865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.757269][ T5647] Bluetooth: hci3: command tx timeout [ 97.766892][ T5647] Bluetooth: hci2: command tx timeout [ 97.767058][ T50] Bluetooth: hci1: command tx timeout [ 98.141948][ T5804] nbd: must specify at least one socket [ 98.643512][ T5809] nbd: must specify at least one socket [ 100.678859][ T5830] netlink: 206 bytes leftover after parsing attributes in process `syz.3.10'. [ 100.705570][ T5827] mmap: syz.2.9 (5827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.284734][ T30] audit: type=1800 audit(1781028066.936:2): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13" name="lu_gp_id" dev="configfs" ino=8012 res=0 errno=0 [ 105.492129][ T5873] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.780943][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.280581][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 115.104043][ T30] audit: type=1800 audit(1781028078.756:3): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="lu_gp_id" dev="configfs" ino=8842 res=0 errno=0 [ 115.702294][ T5971] process 'syz.2.37' launched './file0' with NULL argv: empty string added [ 117.099925][ T5981] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 117.799809][ T30] audit: type=1800 audit(1781028081.456:4): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="lu_gp_id" dev="configfs" ino=9580 res=0 errno=0 [ 117.856827][ T5998] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.693290][ T6049] random: crng reseeded on system resumption [ 124.219444][ T6073] FAULT_INJECTION: forcing a failure. [ 124.219444][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 124.286613][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 124.286656][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.286673][ T6073] Call Trace: [ 124.286683][ T6073] [ 124.286695][ T6073] dump_stack_lvl+0x100/0x190 [ 124.286751][ T6073] should_fail_ex.cold+0x5/0xa [ 124.286787][ T6073] should_failslab+0xc2/0x120 [ 124.286819][ T6073] __kmalloc_cache_noprof+0x7a/0x6f0 [ 124.286858][ T6073] ? sctp_add_bind_addr+0xae/0x3e0 [ 124.286911][ T6073] sctp_add_bind_addr+0xae/0x3e0 [ 124.286960][ T6073] sctp_copy_local_addr_list+0x349/0x550 [ 124.286996][ T6073] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 124.287029][ T6073] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 124.287061][ T6073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.287104][ T6073] sctp_bind_addr_copy+0x331/0x530 [ 124.287154][ T6073] sctp_connect_new_asoc+0x1c9/0x770 [ 124.287194][ T6073] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 124.287237][ T6073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.287280][ T6073] sctp_sendmsg+0x1743/0x22e0 [ 124.287334][ T6073] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.287366][ T6073] ? try_to_wake_up+0x5f6/0x1900 [ 124.287408][ T6073] ? aa_sk_perm+0x309/0xaa0 [ 124.287450][ T6073] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.287480][ T6073] ? __might_fault+0xc5/0x140 [ 124.287530][ T6073] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.287567][ T6073] inet_sendmsg+0x11c/0x140 [ 124.287610][ T6073] __sys_sendto+0x446/0x4b0 [ 124.287648][ T6073] ? __pfx_inet_sendmsg+0x10/0x10 [ 124.287691][ T6073] ? __pfx___sys_sendto+0x10/0x10 [ 124.287744][ T6073] ? fd_install+0x223/0x580 [ 124.287792][ T6073] ? xfd_validate_state+0x129/0x190 [ 124.287819][ T6073] ? exit_to_user_mode_loop+0xf3/0x670 [ 124.287872][ T6073] __x64_sys_sendto+0xe0/0x1c0 [ 124.287911][ T6073] ? do_syscall_64+0x90/0x840 [ 124.287947][ T6073] ? lockdep_hardirqs_on+0x78/0x100 [ 124.287983][ T6073] do_syscall_64+0x115/0x840 [ 124.288019][ T6073] ? clear_bhb_loop+0x40/0x90 [ 124.288054][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.288085][ T6073] RIP: 0033:0x7f9fce99ce59 [ 124.288110][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.288136][ T6073] RSP: 002b:00007f9fccbb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.288165][ T6073] RAX: ffffffffffffffda RBX: 00007f9fcec16180 RCX: 00007f9fce99ce59 [ 124.288184][ T6073] RDX: 000000000002020f RSI: 0000000000000000 RDI: 0000000000000003 [ 124.288202][ T6073] RBP: 00007f9fcea32d6f R08: 0000200000000000 R09: 000000000000001c [ 124.288218][ T6073] R10: 0000000000000901 R11: 0000000000000246 R12: 0000000000000000 [ 124.288235][ T6073] R13: 00007f9fcec16218 R14: 00007f9fcec16180 R15: 00007ffeca7f9e28 [ 124.288274][ T6073] [ 128.933417][ T30] audit: type=1800 audit(1843104522.080:5): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="lu_gp_id" dev="configfs" ino=9975 res=0 errno=0 [ 130.924723][ T6140] kAFS: unparsable volume name [ 132.966696][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974650][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.968596][ T6163] sd 0:0:1:0: PR command failed: 1026 [ 133.986446][ T6163] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 134.010810][ T6163] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 135.716772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.570087][ T6184] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 136.748323][ T6161] bond0: option slaves: interface -]=,Do does not exist! [ 137.063713][ T6194] Zero length message leads to an empty skb [ 137.073342][ T6197] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.671461][ T50] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 138.671507][ T50] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 138.689924][ T50] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 142.615485][ T6247] random: crng reseeded on system resumption [ 151.837277][ T6350] smpboot: CPU 1 is now offline [ 157.984502][ T6410] nbd: must specify at least one socket [ 163.659911][ T6436] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 163.840285][ T6436] syz.0.118 (6436): /proc/6434/oom_adj is deprecated, please use /proc/6434/oom_score_adj instead. [ 169.500724][ T6522] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 169.622858][ T30] audit: type=1800 audit(1843104562.780:6): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.137" name="lu_gp_id" dev="configfs" ino=12882 res=0 errno=0 [ 172.062467][ T6561] FAULT_INJECTION: forcing a failure. [ 172.062467][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 172.262798][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 172.262832][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.262844][ T6561] Call Trace: [ 172.262850][ T6561] [ 172.262858][ T6561] dump_stack_lvl+0x100/0x190 [ 172.262895][ T6561] should_fail_ex.cold+0x5/0xa [ 172.262918][ T6561] ? tracepoint_add_func+0x3a8/0x1150 [ 172.262942][ T6561] should_failslab+0xc2/0x120 [ 172.262963][ T6561] __kmalloc_noprof+0xe0/0x850 [ 172.262994][ T6561] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 172.263026][ T6561] tracepoint_add_func+0x3a8/0x1150 [ 172.263057][ T6561] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 172.263093][ T6561] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 172.263125][ T6561] tracepoint_probe_register+0xc4/0x110 [ 172.263151][ T6561] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 172.263176][ T6561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.263203][ T6561] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 172.263234][ T6561] ? __pfx_probe_sched_switch+0x10/0x10 [ 172.263260][ T6561] ? __lock_acquire+0x4a5/0x2630 [ 172.263291][ T6561] trace_event_reg+0x209/0x350 [ 172.263314][ T6561] __ftrace_event_enable_disable+0x211/0x6f0 [ 172.263343][ T6561] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 172.263379][ T6561] ftrace_set_clr_event+0x1b7/0x3f0 [ 172.263400][ T6561] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 172.263419][ T6561] ? trace_get_user+0x3ae/0xa70 [ 172.263450][ T6561] ftrace_event_write+0x259/0x2c0 [ 172.263469][ T6561] ? __pfx_ftrace_event_write+0x10/0x10 [ 172.263498][ T6561] vfs_write+0x2aa/0x1070 [ 172.263518][ T6561] ? __pfx_ftrace_event_write+0x10/0x10 [ 172.263539][ T6561] ? __pfx_vfs_write+0x10/0x10 [ 172.263558][ T6561] ? __fget_files+0x215/0x3d0 [ 172.263583][ T6561] ? __fget_files+0x21f/0x3d0 [ 172.263613][ T6561] ksys_write+0x12a/0x250 [ 172.263633][ T6561] ? __pfx_ksys_write+0x10/0x10 [ 172.263654][ T6561] ? rcu_is_watching+0x12/0xc0 [ 172.263678][ T6561] do_syscall_64+0x115/0x840 [ 172.263702][ T6561] ? clear_bhb_loop+0x40/0x90 [ 172.263723][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.263742][ T6561] RIP: 0033:0x7fa2aab9ce59 [ 172.263758][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.263775][ T6561] RSP: 002b:00007fa2aba3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.263792][ T6561] RAX: ffffffffffffffda RBX: 00007fa2aae15fa0 RCX: 00007fa2aab9ce59 [ 172.263803][ T6561] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 172.263813][ T6561] RBP: 00007fa2aac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 172.263823][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.263833][ T6561] R13: 00007fa2aae16038 R14: 00007fa2aae15fa0 R15: 00007ffe89e8fc18 [ 172.263856][ T6561] [ 172.613691][ T6579] futex_wake_op: syz.3.146 tries to shift op by -2048; fix this program [ 172.744251][ T6561] event trace: Could not enable event nfsd_file_open [ 173.558067][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 173.571234][ T6606] veth1_macvtap: left promiscuous mode [ 174.024869][ T6613] binder: 6612:6613 ioctl c0046209 ffffffffffffffff returned -22 [ 178.079630][ T6704] random: crng reseeded on system resumption [ 179.573818][ T6732] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 180.950412][ T6758] syz.3.171 uses obsolete (PF_INET,SOCK_PACKET) [ 181.459366][ T6768] netlink: 342 bytes leftover after parsing attributes in process `syz.0.172'. [ 182.508861][ T30] audit: type=1800 audit(1843104575.670:7): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.173" name="lu_gp_id" dev="configfs" ino=13995 res=0 errno=0 [ 182.869673][ T6779] random: crng reseeded on system resumption [ 183.088106][ T6790] syz.2.177: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.169398][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.2.177 Not tainted syzkaller #0 PREEMPT(full) [ 183.169425][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.169437][ T6790] Call Trace: [ 183.169444][ T6790] [ 183.169455][ T6790] dump_stack_lvl+0x100/0x190 [ 183.169490][ T6790] warn_alloc.cold+0x95/0x1c1 [ 183.169514][ T6790] ? __pfx_warn_alloc+0x10/0x10 [ 183.169546][ T6790] ? __bfs+0x150/0x2a0 [ 183.169568][ T6790] ? stack_trace_save+0x8e/0xc0 [ 183.169594][ T6790] ? __pfx___schedule+0x10/0x10 [ 183.169621][ T6790] __vmalloc_node_range_noprof+0x136c/0x1630 [ 183.169646][ T6790] ? irqentry_exit+0x24d/0x970 [ 183.169670][ T6790] ? lockdep_hardirqs_on+0x78/0x100 [ 183.169699][ T6790] ? disksize_store+0x11a/0x4e0 [ 183.169730][ T6790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.169756][ T6790] ? __pfx___might_resched+0x10/0x10 [ 183.169781][ T6790] ? disksize_store+0x11a/0x4e0 [ 183.169804][ T6790] __vmalloc_node_noprof+0xad/0xf0 [ 183.169827][ T6790] ? disksize_store+0x11a/0x4e0 [ 183.169852][ T6790] disksize_store+0x11a/0x4e0 [ 183.169877][ T6790] ? sysfs_file_kobj+0xe4/0x290 [ 183.169906][ T6790] ? __pfx_disksize_store+0x10/0x10 [ 183.169929][ T6790] dev_attr_store+0x58/0x80 [ 183.169948][ T6790] ? __pfx_dev_attr_store+0x10/0x10 [ 183.169966][ T6790] sysfs_kf_write+0xf2/0x150 [ 183.169994][ T6790] kernfs_fop_write_iter+0x3e0/0x5f0 [ 183.170019][ T6790] ? __pfx_sysfs_kf_write+0x10/0x10 [ 183.170065][ T6790] vfs_write+0x6ac/0x1070 [ 183.170088][ T6790] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 183.170115][ T6790] ? __pfx_vfs_write+0x10/0x10 [ 183.170150][ T6790] ksys_write+0x12a/0x250 [ 183.170170][ T6790] ? __pfx_ksys_write+0x10/0x10 [ 183.170189][ T6790] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 183.170216][ T6790] ? syscall_user_dispatch+0x76/0x130 [ 183.170238][ T6790] do_syscall_64+0x115/0x840 [ 183.170262][ T6790] ? clear_bhb_loop+0x40/0x90 [ 183.170284][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.170302][ T6790] RIP: 0033:0x7fa2aab9ce59 [ 183.170318][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.170334][ T6790] RSP: 002b:00007fa2aba3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.170351][ T6790] RAX: ffffffffffffffda RBX: 00007fa2aae15fa0 RCX: 00007fa2aab9ce59 [ 183.170362][ T6790] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000004 [ 183.170372][ T6790] RBP: 00007fa2aac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.170382][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.170392][ T6790] R13: 00007fa2aae16038 R14: 00007fa2aae15fa0 R15: 00007ffe89e8fc18 [ 183.170415][ T6790] [ 183.494436][ T6790] Mem-Info: [ 183.498999][ T6790] active_anon:6490 inactive_anon:1 isolated_anon:0 [ 183.498999][ T6790] active_file:6889 inactive_file:40328 isolated_file:0 [ 183.498999][ T6790] unevictable:768 dirty:408 writeback:0 [ 183.498999][ T6790] slab_reclaimable:10175 slab_unreclaimable:89893 [ 183.498999][ T6790] mapped:24717 shmem:1333 pagetables:1075 [ 183.498999][ T6790] sec_pagetables:0 bounce:0 [ 183.498999][ T6790] kernel_misc_reclaimable:0 [ 183.498999][ T6790] free:1339972 free_pcp:10712 free_cma:0 [ 183.547958][ T6790] Node 0 active_anon:25960kB inactive_anon:4kB active_file:27556kB inactive_file:161120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98868kB dirty:1620kB writeback:0kB shmem:3796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:11584kB pagetables:4152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.584434][ T6790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.622230][ T6790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.654333][ T6790] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 183.661276][ T6790] Node 0 DMA32 free:1410128kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25960kB inactive_anon:4kB active_file:27556kB inactive_file:161120kB unevictable:1536kB writepending:1620kB zspages:176kB present:3129332kB managed:2537496kB mlocked:0kB bounce:0kB free_pcp:42088kB local_pcp:42088kB free_cma:0kB [ 183.699379][ T6790] lowmem_reserve[]: 0 0 1 1 1 [ 183.704428][ T6790] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 183.739056][ T6790] lowmem_reserve[]: 0 0 0 0 0 [ 183.745030][ T6790] Node 1 Normal free:3934400kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:756kB local_pcp:756kB free_cma:0kB [ 183.801374][ T6790] lowmem_reserve[]: 0 0 0 0 0 [ 183.811121][ T6790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.836836][ T6790] Node 0 DMA32: 3648*4kB (UME) 1422*8kB (UM) 729*16kB (UM) 370*32kB (UM) 241*64kB (UME) 118*128kB (UME) 48*256kB (UME) 14*512kB (UME) 2*1024kB (U) 3*2048kB (UME) 318*4096kB (M) = 1410176kB [ 183.868371][ T6790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.902428][ T6790] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 4*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934400kB [ 183.972012][ T6790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.981979][ T6790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.006879][ T6790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.051844][ T6790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.102368][ T6790] 48573 total pagecache pages [ 184.124821][ T6790] 34 pages in swap cache [ 184.142750][ T6790] Free swap = 124856kB [ 184.156180][ T6790] Total swap = 124996kB [ 184.170744][ T6790] 2097051 pages RAM [ 184.181114][ T6790] 0 pages HighMem/MovableOnly [ 184.196428][ T6790] 430784 pages reserved [ 184.200871][ T6790] 0 pages cma reserved [ 184.762577][ T6777] hub 1-0:1.0: USB hub found [ 184.794940][ T6777] hub 1-0:1.0: 1 port detected [ 186.203422][ T6814] futex_wake_op: syz.1.182 tries to shift op by -1; fix this program [ 188.315611][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 193.395603][ T50] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 194.387469][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403034][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.503489][ T6919] random: crng reseeded on system resumption [ 197.012317][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 197.106431][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 197.508451][ T6925] syz.3.205 (6925) used greatest stack depth: 18752 bytes left [ 199.791009][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 201.034301][ T6989] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 201.248135][ T6990] smpboot: CPU 1 is now offline [ 201.836441][ T7002] random: crng reseeded on system resumption [ 201.868854][ T7002] Restarting kernel threads ... [ 201.887876][ T7002] Done restarting kernel threads. [ 202.499744][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 202.520051][ T7017] futex_wake_op: syz.0.223 tries to shift op by -2048; fix this program [ 202.565612][ T7017] futex_wake_op: syz.0.223 tries to shift op by -2048; fix this program [ 202.717196][ T7017] random: crng reseeded on system resumption [ 203.437947][ T1108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.758312][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.768352][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.786563][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.804805][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.815353][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.830009][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 204.043547][ T1108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.542703][ T1108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.777472][ T1108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.402377][ T7044] No such timeout policy "" [ 205.427783][ T7044] netlink: Failed to associated timeout policy '' [ 205.568783][ T1108] bridge_slave_1: left allmulticast mode [ 205.608613][ T1108] bridge_slave_1: left promiscuous mode [ 205.651211][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.755671][ T1108] bridge_slave_0: left allmulticast mode [ 205.798489][ T1108] bridge_slave_0: left promiscuous mode [ 205.830780][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.922749][ T5647] Bluetooth: hci1: command tx timeout [ 206.248124][ T30] audit: type=1804 audit(1843106647.462:8): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.231" name="/newroot/63/file0" dev="tmpfs" ino=345 res=1 errno=0 [ 206.819037][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.871257][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.917538][ T1108] bond0 (unregistering): Released all slaves [ 207.776557][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.991221][ T5647] Bluetooth: hci1: command tx timeout [ 208.091429][ T1108] hsr_slave_0: left promiscuous mode [ 208.113178][ T1108] hsr_slave_1: left promiscuous mode [ 208.139371][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.176997][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.237774][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.277161][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.406685][ T1108] veth1_macvtap: left promiscuous mode [ 208.440935][ T1108] veth0_macvtap: left promiscuous mode [ 208.467592][ T1108] veth1_vlan: left promiscuous mode [ 208.496710][ T1108] veth0_vlan: left promiscuous mode [ 209.419171][ T7099] ubi0: attaching mtd0 [ 209.464076][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 209.479332][ T7099] ubi0: scanning is finished [ 209.524687][ T7099] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 209.549191][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 209.878003][ T7099] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 210.060543][ T5641] Bluetooth: hci1: command tx timeout [ 211.549487][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.606017][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.652273][ T7024] bridge_slave_0: entered allmulticast mode [ 211.696772][ T7024] bridge_slave_0: entered promiscuous mode [ 211.733643][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 211.739747][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 211.746051][ T4950] Bluetooth: hci2: command 0x0406 tx timeout [ 211.788440][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.839640][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.889573][ T7024] bridge_slave_1: entered allmulticast mode [ 211.939534][ T7024] bridge_slave_1: entered promiscuous mode [ 212.129875][ T5647] Bluetooth: hci1: command tx timeout [ 212.260162][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.373414][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.426122][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.808949][ T7024] team0: Port device team_slave_0 added [ 212.942904][ T7024] team0: Port device team_slave_1 added [ 213.342535][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.378462][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.491567][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.571650][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.594212][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.710047][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.095579][ T7024] hsr_slave_0: entered promiscuous mode [ 214.141282][ T7024] hsr_slave_1: entered promiscuous mode [ 214.167020][ T7024] debugfs: 'hsr0' already exists in 'hsr' [ 214.195272][ T7024] Cannot create hsr debugfs directory [ 214.720911][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.970421][ T7169] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 215.163097][ T7169] netlink: 342 bytes leftover after parsing attributes in process `syz.3.244'. [ 215.332236][ T7177] netlink: 342 bytes leftover after parsing attributes in process `syz.0.245'. [ 215.681674][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 216.009619][ T7192] kfence: disabled [ 216.686999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 217.239910][ T7024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.327159][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.399660][ T7024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.499860][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.542694][ T7024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.633646][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.652467][ T7024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.690278][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.142507][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.199620][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.272878][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.280377][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.361914][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.369259][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.779280][ T30] audit: type=1800 audit(1843106660.077:9): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="lu_gp_id" dev="configfs" ino=16619 res=0 errno=0 [ 220.495515][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.724592][ T7024] veth0_vlan: entered promiscuous mode [ 220.790255][ T7024] veth1_vlan: entered promiscuous mode [ 220.857329][ T7280] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 220.893130][ T7024] veth0_macvtap: entered promiscuous mode [ 220.922483][ T7024] veth1_macvtap: entered promiscuous mode [ 221.004334][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.079017][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.117181][ T3327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.167681][ T3327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.194455][ T3327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.246521][ T3327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.494070][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.537077][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.685237][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.712533][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.811589][ T7328] netlink: 330 bytes leftover after parsing attributes in process `syz.2.261'. [ 223.092091][ T7328] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 223.722889][ T7342] hub 1-0:1.0: USB hub found [ 223.741414][ T7342] hub 1-0:1.0: 1 port detected [ 225.368644][ T7362] FAULT_INJECTION: forcing a failure. [ 225.368644][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 225.410607][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.3.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.410658][ T7362] Tainted: [L]=SOFTLOCKUP [ 225.410669][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.410686][ T7362] Call Trace: [ 225.410696][ T7362] [ 225.410708][ T7362] dump_stack_lvl+0x100/0x190 [ 225.410782][ T7362] should_fail_ex.cold+0x5/0xa [ 225.410821][ T7362] should_failslab+0xc2/0x120 [ 225.410857][ T7362] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 225.410888][ T7362] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 225.410936][ T7362] kstrdup+0x51/0xe0 [ 225.410968][ T7362] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 225.411007][ T7362] vidtv_channel_s302m_init+0x15b/0x9b0 [ 225.411037][ T7362] ? trace_kmalloc+0xe3/0x110 [ 225.411179][ T7362] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 225.411228][ T7362] ? __asan_memcpy+0x3c/0x60 [ 225.411271][ T7362] vidtv_channels_init+0x4c/0xb0 [ 225.411298][ T7362] vidtv_mux_init+0x9df/0xbf0 [ 225.411332][ T7362] vidtv_start_feed+0x34e/0x500 [ 225.411352][ T7362] ? __pfx_vidtv_start_feed+0x10/0x10 [ 225.411372][ T7362] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 225.411405][ T7362] dmx_section_feed_start_filtering+0x3a8/0x660 [ 225.411435][ T7362] dvb_dmxdev_filter_start+0x767/0xdd0 [ 225.411466][ T7362] dvb_demux_do_ioctl+0xe64/0x1200 [ 225.411493][ T7362] dvb_usercopy+0x167/0x340 [ 225.411523][ T7362] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 225.411544][ T7362] ? __pfx_dvb_usercopy+0x10/0x10 [ 225.411581][ T7362] ? __fget_files+0x21f/0x3d0 [ 225.411627][ T7362] dvb_demux_ioctl+0x29/0x40 [ 225.411644][ T7362] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 225.411661][ T7362] __x64_sys_ioctl+0x18e/0x210 [ 225.411681][ T7362] do_syscall_64+0x115/0x840 [ 225.411708][ T7362] ? clear_bhb_loop+0x40/0x90 [ 225.411731][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.411754][ T7362] RIP: 0033:0x7f9fce99ce59 [ 225.411791][ T7362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.411810][ T7362] RSP: 002b:00007f9fccbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.411829][ T7362] RAX: ffffffffffffffda RBX: 00007f9fcec16090 RCX: 00007f9fce99ce59 [ 225.411841][ T7362] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 000000000000000a [ 225.411851][ T7362] RBP: 00007f9fcea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 225.411862][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.411873][ T7362] R13: 00007f9fcec16128 R14: 00007f9fcec16090 R15: 00007ffeca7f9e28 [ 225.411899][ T7362] [ 226.196081][ T5647] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6 [ 226.284366][ T5647] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6 [ 229.107712][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 229.179619][ T7419] netlink: 'syz.3.276': attribute type 7 has an invalid length. [ 229.654823][ T7428] blktrace: Concurrent blktraces are not allowed on loop2 [ 230.419824][ T30] audit: type=1800 audit(1843106671.778:10): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.281" name="dbroot" dev="configfs" ino=17701 res=0 errno=0 [ 231.015733][ T7453] nbd: must specify at least one socket [ 232.654863][ T7471] capability: warning: `syz.0.289' uses 32-bit capabilities (legacy support in use) [ 234.896574][ T30] audit: type=1800 audit(1843106676.281:11): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="lu_gp_id" dev="configfs" ino=18552 res=0 errno=0 [ 241.728018][ T7559] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.838614][ T7599] misc userio: The device must be registered before sending interrupts [ 245.074503][ T7599] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 246.712457][ T5647] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 246.719990][ T5647] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 246.753675][ T7624] futex_wake_op: syz.0.321 tries to shift op by -2048; fix this program [ 246.770948][ T7624] futex_wake_op: syz.0.321 tries to shift op by -2048; fix this program [ 246.871579][ T7625] random: crng reseeded on system resumption [ 251.842343][ T7682] syz.3.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 251.886911][ T7684] futex_wake_op: syz.3.331 tries to shift op by -2048; fix this program [ 255.516383][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.524542][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.579609][ T7797] nbd: must specify at least one socket [ 258.909895][ T7782] FAULT_INJECTION: forcing a failure. [ 258.909895][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.003404][ T7782] CPU: 0 UID: 0 PID: 7782 Comm: syz.0.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.003437][ T7782] Tainted: [L]=SOFTLOCKUP [ 259.003443][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.003454][ T7782] Call Trace: [ 259.003463][ T7782] [ 259.003470][ T7782] dump_stack_lvl+0x100/0x190 [ 259.003505][ T7782] should_fail_ex.cold+0x5/0xa [ 259.003528][ T7782] _copy_from_user+0x2e/0xd0 [ 259.003553][ T7782] __x64_sys_rt_sigsuspend+0x119/0x170 [ 259.003571][ T7782] ? __pfx___x64_sys_rt_sigsuspend+0x10/0x10 [ 259.003602][ T7782] ? rcu_is_watching+0x12/0xc0 [ 259.003626][ T7782] do_syscall_64+0x115/0x840 [ 259.003650][ T7782] ? clear_bhb_loop+0x40/0x90 [ 259.003671][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.003689][ T7782] RIP: 0033:0x7f786db9ce59 [ 259.003703][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.003720][ T7782] RSP: 002b:00007f786b9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 259.003737][ T7782] RAX: ffffffffffffffda RBX: 00007f786de16270 RCX: 00007f786db9ce59 [ 259.003748][ T7782] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 259.003758][ T7782] RBP: 00007f786dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 259.003767][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.003777][ T7782] R13: 00007f786de16308 R14: 00007f786de16270 R15: 00007fff34314508 [ 259.003802][ T7782] [ 259.200840][ T7801] FAULT_INJECTION: forcing a failure. [ 259.200840][ T7801] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.215043][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.2.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.215086][ T7801] Tainted: [L]=SOFTLOCKUP [ 259.215095][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.215109][ T7801] Call Trace: [ 259.215120][ T7801] [ 259.215131][ T7801] dump_stack_lvl+0x100/0x190 [ 259.215179][ T7801] should_fail_ex.cold+0x5/0xa [ 259.215206][ T7801] ? prepare_alloc_pages+0x16d/0x5f0 [ 259.215242][ T7801] should_fail_alloc_page+0xeb/0x140 [ 259.215275][ T7801] prepare_alloc_pages+0x1f0/0x5f0 [ 259.215314][ T7801] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 259.215358][ T7801] ? __lock_acquire+0x4a5/0x2630 [ 259.215414][ T7801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.215461][ T7801] ? __lock_acquire+0x4a5/0x2630 [ 259.215499][ T7801] ? __lock_acquire+0x4a5/0x2630 [ 259.215535][ T7801] ? __css_rstat_updated+0x1ce/0x5a0 [ 259.215585][ T7801] ? lock_acquire+0x1b1/0x370 [ 259.215623][ T7801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.215661][ T7801] ? policy_nodemask+0xed/0x4f0 [ 259.215695][ T7801] alloc_pages_mpol+0x1fb/0x540 [ 259.215729][ T7801] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 259.215763][ T7801] ? __lock_acquire+0x4a5/0x2630 [ 259.215805][ T7801] folio_alloc_mpol_noprof+0x36/0x260 [ 259.215842][ T7801] vma_alloc_folio_noprof+0xed/0x1d0 [ 259.215876][ T7801] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 259.215923][ T7801] do_anonymous_page+0xb46/0x2050 [ 259.215971][ T7801] ? rcu_read_unlock+0x2d/0xb0 [ 259.216019][ T7801] __handle_mm_fault+0x1d2c/0x2a00 [ 259.216062][ T7801] ? mt_find+0x45e/0x8e0 [ 259.216106][ T7801] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.216142][ T7801] ? __pfx_mt_find+0x10/0x10 [ 259.216201][ T7801] ? find_vma+0xbf/0x140 [ 259.216229][ T7801] ? __pfx_find_vma+0x10/0x10 [ 259.216261][ T7801] handle_mm_fault+0x37b/0xa30 [ 259.216309][ T7801] do_user_addr_fault+0x74c/0x12f0 [ 259.216343][ T7801] ? trace_page_fault_kernel+0x7a/0x200 [ 259.216376][ T7801] exc_page_fault+0x6f/0xd0 [ 259.216413][ T7801] asm_exc_page_fault+0x26/0x30 [ 259.216439][ T7801] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 259.216465][ T7801] Code: c9 75 f6 e9 12 aa 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 259.216489][ T7801] RSP: 0018:ffffc90005887cb8 EFLAGS: 00050206 [ 259.216512][ T7801] RAX: 0000000000000000 RBX: 000000007fff2000 RCX: 0000000000000240 [ 259.216529][ T7801] RDX: ffff888032035d00 RSI: ffffffff8257f711 RDI: 000020000000e000 [ 259.216546][ T7801] RBP: 0000000000001000 R08: 0000000000000001 R09: 00000000000001c5 [ 259.216561][ T7801] R10: 0000000000000200 R11: 0000000000000000 R12: 000000000000e000 [ 259.216577][ T7801] R13: ffff888032035d00 R14: dffffc0000000000 R15: 000020000000d240 [ 259.216605][ T7801] ? __might_fault+0x111/0x140 [ 259.216648][ T7801] read_zero+0xed/0x1f0 [ 259.216687][ T7801] ? __pfx_read_zero+0x10/0x10 [ 259.216725][ T7801] vfs_read+0x1e4/0xb30 [ 259.216761][ T7801] ? __pfx_vfs_read+0x10/0x10 [ 259.216787][ T7801] ? __pfx_vfs_write+0x10/0x10 [ 259.216815][ T7801] ? do_sys_openat2+0x157/0x1e0 [ 259.216855][ T7801] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.216897][ T7801] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.216943][ T7801] __x64_sys_pread64+0x1eb/0x250 [ 259.216983][ T7801] ? __pfx___x64_sys_pread64+0x10/0x10 [ 259.217018][ T7801] ? rcu_is_watching+0x12/0xc0 [ 259.217053][ T7801] do_syscall_64+0x115/0x840 [ 259.217088][ T7801] ? clear_bhb_loop+0x40/0x90 [ 259.217120][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.217146][ T7801] RIP: 0033:0x7fa2aab9ce59 [ 259.217168][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.217191][ T7801] RSP: 002b:00007fa2aba3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 259.217213][ T7801] RAX: ffffffffffffffda RBX: 00007fa2aae15fa0 RCX: 00007fa2aab9ce59 [ 259.217230][ T7801] RDX: 0000000100000002 RSI: 0000200000000240 RDI: 0000000000000000 [ 259.217245][ T7801] RBP: 00007fa2aba3c090 R08: 0000000000000000 R09: 0000000000000000 [ 259.217259][ T7801] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 259.217274][ T7801] R13: 00007fa2aae16038 R14: 00007fa2aae15fa0 R15: 00007ffe89e8fc18 [ 259.217310][ T7801] [ 261.204848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 262.902587][ T7852] bridge0: port 3(bond0) entered blocking state [ 262.918797][ T7852] bridge0: port 3(bond0) entered disabled state [ 262.950672][ T7852] bond0: entered allmulticast mode [ 262.965368][ T7852] bond_slave_0: entered allmulticast mode [ 262.993789][ T7852] bond_slave_1: entered allmulticast mode [ 263.031861][ T7852] bond0: entered promiscuous mode [ 263.042194][ T7852] bond_slave_0: entered promiscuous mode [ 263.052593][ T7852] bond_slave_1: entered promiscuous mode [ 263.097299][ T7852] bridge0: port 3(bond0) entered blocking state [ 263.105135][ T7852] bridge0: port 3(bond0) entered forwarding state [ 263.881213][ T30] audit: type=1800 audit(1843106705.402:12): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.368" name="lu_gp_id" dev="configfs" ino=20075 res=0 errno=0 [ 265.212367][ T7886] vivid-007: ================= START STATUS ================= [ 265.255846][ T7886] vivid-007: Enable Output Cropping: true grabbed [ 265.255943][ T7886] vivid-007: Enable Output Composing: true grabbed [ 265.255987][ T7886] vivid-007: Enable Output Scaler: true grabbed [ 265.256029][ T7886] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 265.256072][ T7886] vivid-007: Transmit Mode: HDMI grabbed [ 265.256114][ T7886] vivid-007: Hotplug Present: 0x00000000 [ 265.256149][ T7886] vivid-007: RxSense Present: 0x00000000 [ 265.256182][ T7886] vivid-007: EDID Present: 0x00000000 [ 265.256215][ T7886] vivid-007: ================== END STATUS ================== [ 265.671937][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'. [ 265.770265][ T7890] syz.2.372(7890): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 266.587802][ T7904] binder: 7903:7904 ioctl c0306201 0 returned -14 [ 267.030173][ T7908] FAULT_INJECTION: forcing a failure. [ 267.030173][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 267.099915][ T7908] CPU: 1 UID: 0 PID: 7908 Comm: syz.2.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.099964][ T7908] Tainted: [L]=SOFTLOCKUP [ 267.099975][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.099992][ T7908] Call Trace: [ 267.100003][ T7908] [ 267.100015][ T7908] dump_stack_lvl+0x100/0x190 [ 267.100065][ T7908] should_fail_ex.cold+0x5/0xa [ 267.100100][ T7908] ? tracepoint_add_func+0x3a8/0x1150 [ 267.100137][ T7908] should_failslab+0xc2/0x120 [ 267.100168][ T7908] __kmalloc_noprof+0xe0/0x850 [ 267.100216][ T7908] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 267.100263][ T7908] tracepoint_add_func+0x3a8/0x1150 [ 267.100297][ T7908] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 267.100348][ T7908] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 267.100394][ T7908] tracepoint_probe_register+0xc4/0x110 [ 267.100433][ T7908] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 267.100470][ T7908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.100509][ T7908] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 267.100554][ T7908] ? __pfx_probe_sched_switch+0x10/0x10 [ 267.100592][ T7908] ? __lock_acquire+0x4a5/0x2630 [ 267.100636][ T7908] trace_event_reg+0x209/0x350 [ 267.100669][ T7908] __ftrace_event_enable_disable+0x211/0x6f0 [ 267.100713][ T7908] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 267.100779][ T7908] ftrace_set_clr_event+0x1b7/0x3f0 [ 267.100811][ T7908] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 267.100845][ T7908] ? trace_get_user+0x3ae/0xa70 [ 267.100901][ T7908] ftrace_event_write+0x259/0x2c0 [ 267.100941][ T7908] ? __pfx_ftrace_event_write+0x10/0x10 [ 267.100992][ T7908] vfs_write+0x2aa/0x1070 [ 267.101028][ T7908] ? __pfx_ftrace_event_write+0x10/0x10 [ 267.101066][ T7908] ? __pfx_vfs_write+0x10/0x10 [ 267.101098][ T7908] ? __fget_files+0x215/0x3d0 [ 267.101141][ T7908] ? __fget_files+0x21f/0x3d0 [ 267.101180][ T7908] ksys_write+0x12a/0x250 [ 267.101205][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 267.101238][ T7908] ? rcu_is_watching+0x12/0xc0 [ 267.101275][ T7908] do_syscall_64+0x115/0x840 [ 267.101313][ T7908] ? clear_bhb_loop+0x40/0x90 [ 267.101346][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.101386][ T7908] RIP: 0033:0x7fa2aab9ce59 [ 267.101413][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.101439][ T7908] RSP: 002b:00007fa2aba3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.101467][ T7908] RAX: ffffffffffffffda RBX: 00007fa2aae15fa0 RCX: 00007fa2aab9ce59 [ 267.101488][ T7908] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 267.101505][ T7908] RBP: 00007fa2aac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 267.101522][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.101539][ T7908] R13: 00007fa2aae16038 R14: 00007fa2aae15fa0 R15: 00007ffe89e8fc18 [ 267.101591][ T7908] [ 267.101754][ T7908] event trace: Could not enable event nfsd_file_open [ 267.213635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 268.046276][ T30] audit: type=1800 audit(1843106709.583:13): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.381" name="lu_gp_id" dev="configfs" ino=20694 res=0 errno=0 [ 270.902280][ T7946] nbd: must specify at least one socket [ 272.335604][ T7975] nbd: must specify at least one socket [ 275.457684][ T8023] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 275.475885][ T8027] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 276.812816][ T30] audit: type=1804 audit(1843106718.409:14): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.401" name="/newroot/101/file0" dev="tmpfs" ino=553 res=1 errno=0 [ 276.892397][ T30] audit: type=1804 audit(1843106718.419:15): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.401" name="/newroot/101/file0" dev="tmpfs" ino=553 res=1 errno=0 [ 278.558500][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 278.959519][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'. [ 279.036790][ T8102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.104002][ T8153] syz.1.415: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.145568][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.1.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.145600][ T8153] Tainted: [L]=SOFTLOCKUP [ 282.145606][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.145616][ T8153] Call Trace: [ 282.145623][ T8153] [ 282.145630][ T8153] dump_stack_lvl+0x100/0x190 [ 282.145665][ T8153] warn_alloc.cold+0x95/0x1c1 [ 282.145685][ T8153] ? __pfx_warn_alloc+0x10/0x10 [ 282.145712][ T8153] ? unwind_get_return_address+0x59/0xa0 [ 282.145743][ T8153] ? look_up_lock_class+0x64/0x120 [ 282.145769][ T8153] ? register_lock_class+0x40/0x560 [ 282.145803][ T8153] __vmalloc_node_range_noprof+0x136c/0x1630 [ 282.145829][ T8153] ? __lock_acquire+0x4a5/0x2630 [ 282.145870][ T8153] ? ksys_write+0x12a/0x250 [ 282.145890][ T8153] ? disksize_store+0x11a/0x4e0 [ 282.145926][ T8153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.145954][ T8153] ? __pfx___might_resched+0x10/0x10 [ 282.145979][ T8153] ? disksize_store+0x11a/0x4e0 [ 282.146001][ T8153] __vmalloc_node_noprof+0xad/0xf0 [ 282.146025][ T8153] ? disksize_store+0x11a/0x4e0 [ 282.146050][ T8153] disksize_store+0x11a/0x4e0 [ 282.146075][ T8153] ? sysfs_file_kobj+0xe4/0x290 [ 282.146103][ T8153] ? __pfx_disksize_store+0x10/0x10 [ 282.146126][ T8153] dev_attr_store+0x58/0x80 [ 282.146144][ T8153] ? __pfx_dev_attr_store+0x10/0x10 [ 282.146162][ T8153] sysfs_kf_write+0xf2/0x150 [ 282.146192][ T8153] kernfs_fop_write_iter+0x3e0/0x5f0 [ 282.146216][ T8153] ? __pfx_sysfs_kf_write+0x10/0x10 [ 282.146245][ T8153] vfs_write+0x6ac/0x1070 [ 282.146266][ T8153] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 282.146293][ T8153] ? __pfx_vfs_write+0x10/0x10 [ 282.146327][ T8153] ksys_write+0x12a/0x250 [ 282.146347][ T8153] ? __pfx_ksys_write+0x10/0x10 [ 282.146365][ T8153] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 282.146392][ T8153] ? syscall_user_dispatch+0x76/0x130 [ 282.146421][ T8153] do_syscall_64+0x115/0x840 [ 282.146445][ T8153] ? clear_bhb_loop+0x40/0x90 [ 282.146467][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.146485][ T8153] RIP: 0033:0x7f46dc59ce59 [ 282.146502][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.146519][ T8153] RSP: 002b:00007f46dd396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.146538][ T8153] RAX: ffffffffffffffda RBX: 00007f46dc815fa0 RCX: 00007f46dc59ce59 [ 282.146549][ T8153] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000004 [ 282.146559][ T8153] RBP: 00007f46dc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 282.146569][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.146579][ T8153] R13: 00007f46dc816038 R14: 00007f46dc815fa0 R15: 00007ffdb563de58 [ 282.146602][ T8153] [ 282.146609][ T8153] Mem-Info: [ 282.488181][ T8153] active_anon:9930 inactive_anon:3 isolated_anon:0 [ 282.488181][ T8153] active_file:9998 inactive_file:40380 isolated_file:0 [ 282.488181][ T8153] unevictable:786 dirty:501 writeback:0 [ 282.488181][ T8153] slab_reclaimable:10393 slab_unreclaimable:92442 [ 282.488181][ T8153] mapped:27396 shmem:1372 pagetables:1094 [ 282.488181][ T8153] sec_pagetables:0 bounce:0 [ 282.488181][ T8153] kernel_misc_reclaimable:0 [ 282.488181][ T8153] free:1321614 free_pcp:16056 free_cma:0 [ 282.547777][ T8155] random: crng reseeded on system resumption [ 282.573946][ T8153] Node 0 active_anon:39732kB inactive_anon:8kB active_file:40052kB inactive_file:161328kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:109620kB dirty:2100kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:11564kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.645740][ T8153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.747496][ T8153] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.872631][ T8153] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 282.971864][ T8153] Node 0 DMA32 free:1342896kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33456kB inactive_anon:8kB active_file:37504kB inactive_file:161328kB unevictable:1572kB writepending:2100kB zspages:0kB present:3129332kB managed:2537496kB mlocked:36kB bounce:0kB free_pcp:65500kB local_pcp:31360kB free_cma:0kB [ 283.103089][ T8153] lowmem_reserve[]: 0 0 1 1 1 [ 283.114216][ T8153] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 283.180169][ T8153] lowmem_reserve[]: 0 0 0 0 0 [ 283.190854][ T8153] Node 1 Normal free:3934896kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 283.265323][ T8153] lowmem_reserve[]: 0 0 0 0 0 [ 283.281628][ T8153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.344177][ T8153] Node 0 DMA32: 3097*4kB (UME) 1988*8kB (UME) 577*16kB (UME) 143*32kB (UME) 17*64kB (UME) 81*128kB (M) 56*256kB (UME) 33*512kB (UM) 21*1024kB (UME) 2*2048kB (UM) 302*4096kB (M) = 1347380kB [ 283.419124][ T8153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.464443][ T8153] Node 1 Normal: 4*4kB (M) 10*8kB (UM) 7*16kB (UM) 9*32kB (UM) 7*64kB (U) 4*128kB (UM) 1*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934896kB [ 283.509993][ T8153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.555422][ T8153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.607640][ T8153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.638928][ T8176] netlink: 21 bytes leftover after parsing attributes in process `syz.0.421'. [ 283.657771][ T8153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.704697][ T8153] 50470 total pagecache pages [ 283.717750][ T8153] 2 pages in swap cache [ 283.730414][ T8153] Free swap = 124988kB [ 283.744643][ T8153] Total swap = 124996kB [ 283.762761][ T8153] 2097051 pages RAM [ 283.766624][ T8153] 0 pages HighMem/MovableOnly [ 283.772551][ T8153] 430784 pages reserved [ 283.777645][ T8153] 0 pages cma reserved [ 284.042702][ T8181] netlink: 290 bytes leftover after parsing attributes in process `syz.1.423'. [ 285.442422][ T8197] HfR: entered promiscuous mode [ 285.496111][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 285.505390][ T8197] HfR: left promiscuous mode [ 286.600520][ T8219] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 286.759817][ T8220] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:3 is already present [ 287.323023][ T8241] nbd: must specify at least one socket [ 287.821521][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 288.543824][ T8263] smpboot: CPU 1 is now offline [ 292.700884][ T8296] tipc: Can't bind to reserved service type 63 [ 296.677053][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 298.807790][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 298.984225][ T8387] team0: Port device team_slave_1 removed [ 300.578054][ T30] audit: type=1800 audit(1843104533.293:16): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="lu_gp_id" dev="configfs" ino=23144 res=0 errno=0 [ 302.434730][ T30] audit: type=1800 audit(1843104535.163:17): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.473" name="members" dev="configfs" ino=23294 res=0 errno=0 [ 302.874165][ T8444] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 303.502594][ T8458] netlink: 146 bytes leftover after parsing attributes in process `syz.3.478'. [ 304.506083][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 304.734724][ T8472] netlink: 338 bytes leftover after parsing attributes in process `syz.1.482'. [ 305.150656][ T8476] nbd: must specify at least one socket [ 305.200709][ T8465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.230719][ T8465] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 305.303876][ T8465] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 305.366010][ T8465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.394341][ T8465] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.478238][ T8465] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.537401][ T8465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.566553][ T8465] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 305.594700][ T8465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.620768][ T8465] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.686779][ T8465] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.853322][ T8482] nbd: must specify at least one socket [ 306.263616][ T30] audit: type=1800 audit(1843104539.003:18): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="lu_gp_id" dev="configfs" ino=23675 res=0 errno=0 [ 306.445386][ T5647] Bluetooth: hci0: command 0x0406 tx timeout [ 307.394363][ T5647] Bluetooth: hci2: command 0x0406 tx timeout [ 307.553623][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 307.634268][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.275455][ T8520] random: crng reseeded on system resumption [ 308.508756][ T5647] Bluetooth: hci0: command 0x0406 tx timeout [ 308.903093][ T8501] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 308.903093][ T8501] program syz.0.488 not setting count and/or reply_len properly [ 309.463985][ T5647] Bluetooth: hci2: command 0x0406 tx timeout [ 309.622994][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 309.702627][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.156272][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 310.894115][ T8533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.928539][ T8533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.967216][ T8533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.999226][ T8533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.169413][ T5647] Bluetooth: hci0: command 0x0406 tx timeout [ 312.965468][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 312.971956][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 313.044795][ T5645] Bluetooth: hci1: command 0x0c1a tx timeout [ 316.628700][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.635119][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.756825][ T8646] nbd: must specify at least one socket [ 317.946233][ T8648] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.445175][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 320.660615][ T8688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.687321][ T8688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.716793][ T8688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.743512][ T8688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.292081][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.528'. [ 321.716713][ T8712] nbd: must specify at least one socket [ 321.758875][ T30] audit: type=1800 audit(1843104554.584:19): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.531" name="lu_gp_id" dev="configfs" ino=25067 res=0 errno=0 [ 321.960071][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 322.754401][ T5645] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.760492][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 322.766613][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 325.436719][ T8737] random: crng reseeded on system resumption [ 327.619802][ T30] audit: type=1800 audit(1843104560.484:20): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="lu_gp_id" dev="configfs" ino=25316 res=0 errno=0 [ 327.990839][ T8779] usb usb13: usbfs: process 8779 (syz.3.544) did not claim interface 0 before use [ 328.780581][ T8791] FAULT_INJECTION: forcing a failure. [ 328.780581][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 328.859167][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.1.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.859196][ T8791] Tainted: [L]=SOFTLOCKUP [ 328.859202][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.859211][ T8791] Call Trace: [ 328.859217][ T8791] [ 328.859224][ T8791] dump_stack_lvl+0x100/0x190 [ 328.859259][ T8791] should_fail_ex.cold+0x5/0xa [ 328.859281][ T8791] ? tracepoint_add_func+0x3a8/0x1150 [ 328.859305][ T8791] should_failslab+0xc2/0x120 [ 328.859326][ T8791] __kmalloc_noprof+0xe0/0x850 [ 328.859356][ T8791] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 328.859386][ T8791] tracepoint_add_func+0x3a8/0x1150 [ 328.859410][ T8791] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 328.859440][ T8791] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 328.859466][ T8791] tracepoint_probe_register+0xc4/0x110 [ 328.859492][ T8791] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 328.859517][ T8791] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 328.859543][ T8791] ? __lock_acquire+0x4a5/0x2630 [ 328.859575][ T8791] tracing_start_sched_switch+0xaf/0x170 [ 328.859601][ T8791] __ftrace_event_enable_disable+0x557/0x6f0 [ 328.859632][ T8791] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 328.859668][ T8791] ftrace_set_clr_event+0x1b7/0x3f0 [ 328.859689][ T8791] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 328.859707][ T8791] ? trace_get_user+0x3ae/0xa70 [ 328.859738][ T8791] ftrace_event_write+0x259/0x2c0 [ 328.859758][ T8791] ? __pfx_ftrace_event_write+0x10/0x10 [ 328.859786][ T8791] vfs_write+0x2aa/0x1070 [ 328.859807][ T8791] ? __pfx_ftrace_event_write+0x10/0x10 [ 328.859828][ T8791] ? __pfx_vfs_write+0x10/0x10 [ 328.859847][ T8791] ? __fget_files+0x215/0x3d0 [ 328.859872][ T8791] ? __fget_files+0x21f/0x3d0 [ 328.859899][ T8791] ksys_write+0x12a/0x250 [ 328.859918][ T8791] ? __pfx_ksys_write+0x10/0x10 [ 328.859940][ T8791] ? rcu_is_watching+0x12/0xc0 [ 328.859963][ T8791] do_syscall_64+0x115/0x840 [ 328.859987][ T8791] ? clear_bhb_loop+0x40/0x90 [ 328.860008][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.860026][ T8791] RIP: 0033:0x7f46dc59ce59 [ 328.860040][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.860057][ T8791] RSP: 002b:00007f46dd396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.860073][ T8791] RAX: ffffffffffffffda RBX: 00007f46dc815fa0 RCX: 00007f46dc59ce59 [ 328.860084][ T8791] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000005 [ 328.860094][ T8791] RBP: 00007f46dd396090 R08: 0000000000000000 R09: 0000000000000000 [ 328.860104][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.860113][ T8791] R13: 00007f46dc816038 R14: 00007f46dc815fa0 R15: 00007ffdb563de58 [ 328.860143][ T8791] [ 329.135621][ T8791] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 329.185953][ T8795] ------------[ cut here ]------------ [ 329.191798][ T8795] IS_ERR(old) [ 329.191812][ T8795] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.3.549/8795 [ 329.206407][ T8795] Modules linked in: [ 329.210481][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.221435][ T8795] Tainted: [L]=SOFTLOCKUP [ 329.225771][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.235981][ T8795] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 329.242649][ T8795] Code: 09 e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 40 c9 09 82 48 c7 c7 80 30 87 8e e8 d6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 329.263253][ T8795] RSP: 0018:ffffc90005b278b0 EFLAGS: 00010287 [ 329.269598][ T8795] RAX: 00000000000481f3 RBX: 00000000fffffffe RCX: ffffc9000647a000 [ 329.277841][ T8795] RDX: 0000000000080000 RSI: ffffffff8209da36 RDI: ffff88802f4a1f00 [ 329.286278][ T8795] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 329.294431][ T8795] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82103030 [ 329.303610][ T8795] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49440 [ 329.311847][ T8795] FS: 00007f9fccbf66c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 329.320935][ T8795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.327525][ T8795] CR2: 0000001b2d208ff8 CR3: 000000007aa6c000 CR4: 00000000003526f0 [ 329.335561][ T8795] Call Trace: [ 329.338855][ T8795] [ 329.341823][ T8795] tracing_stop_cmdline_record+0x66/0xa0 [ 329.347486][ T8795] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 329.353533][ T8795] ftrace_event_set_open+0x224/0x380 [ 329.359154][ T8795] do_dentry_open+0x6ab/0x14d0 [ 329.364083][ T8795] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 329.370175][ T8795] vfs_open+0x82/0x3f0 [ 329.374287][ T8795] path_openat+0x208c/0x31a0 [ 329.378889][ T8795] ? __pfx_path_openat+0x10/0x10 [ 329.384063][ T8795] do_file_open+0x20e/0x430 [ 329.388598][ T8795] ? __pfx_do_file_open+0x10/0x10 [ 329.393771][ T8795] ? alloc_fd+0x476/0x790 [ 329.398128][ T8795] ? do_getname+0x191/0x390 [ 329.402674][ T8795] do_sys_openat2+0x10d/0x1e0 [ 329.407380][ T8795] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.412630][ T8795] ? find_held_lock+0x2b/0x80 [ 329.417337][ T8795] __x64_sys_openat+0x12d/0x210 [ 329.422247][ T8795] ? __pfx___x64_sys_openat+0x10/0x10 [ 329.427733][ T8795] ? rcu_is_watching+0x12/0xc0 [ 329.432540][ T8795] do_syscall_64+0x115/0x840 [ 329.437165][ T8795] ? clear_bhb_loop+0x40/0x90 [ 329.441904][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.447830][ T8795] RIP: 0033:0x7f9fce99ce59 [ 329.452288][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.472457][ T8795] RSP: 002b:00007f9fccbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.481099][ T8795] RAX: ffffffffffffffda RBX: 00007f9fcec15fa0 RCX: 00007f9fce99ce59 [ 329.489089][ T8795] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 329.497095][ T8795] RBP: 00007f9fcea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 329.505112][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.513115][ T8795] R13: 00007f9fcec16038 R14: 00007f9fcec15fa0 R15: 00007ffeca7f9e28 [ 329.521246][ T8795] [ 329.524300][ T8795] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 329.531600][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.542359][ T8795] Tainted: [L]=SOFTLOCKUP [ 329.546674][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.556725][ T8795] Call Trace: [ 329.559998][ T8795] [ 329.562922][ T8795] dump_stack_lvl+0x100/0x190 [ 329.567612][ T8795] vpanic+0x552/0x970 [ 329.572127][ T8795] ? __pfx_vpanic+0x10/0x10 [ 329.576665][ T8795] panic+0xd1/0xe0 [ 329.580400][ T8795] ? __pfx_panic+0x10/0x10 [ 329.584868][ T8795] check_panic_on_warn.cold+0x19/0x34 [ 329.590260][ T8795] ? tracepoint_probe_unregister+0x837/0xd10 [ 329.596263][ T8795] __warn.cold+0x191/0x328 [ 329.600684][ T8795] __report_bug+0x296/0x3d0 [ 329.605192][ T8795] ? tracepoint_probe_unregister+0x837/0xd10 [ 329.611268][ T8795] ? __pfx___report_bug+0x10/0x10 [ 329.616301][ T8795] ? rcu_is_watching+0x12/0xc0 [ 329.621095][ T8795] ? trace_contention_end+0x122/0x170 [ 329.626470][ T8795] ? __mutex_lock+0x26d/0x1b10 [ 329.631254][ T8795] ? tracepoint_probe_unregister+0x31/0xd10 [ 329.637152][ T8795] ? rcu_is_watching+0x12/0xc0 [ 329.641921][ T8795] ? trace_contention_end+0x122/0x170 [ 329.647306][ T8795] ? tracepoint_probe_unregister+0x837/0xd10 [ 329.653296][ T8795] report_bug+0xb2/0x220 [ 329.657561][ T8795] ? tracepoint_probe_unregister+0x837/0xd10 [ 329.663549][ T8795] handle_bug+0x16a/0x2a0 [ 329.667935][ T8795] exc_invalid_op+0x17/0x50 [ 329.672451][ T8795] asm_exc_invalid_op+0x1a/0x20 [ 329.677311][ T8795] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 329.683910][ T8795] Code: 09 e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 40 c9 09 82 48 c7 c7 80 30 87 8e e8 d6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 329.703518][ T8795] RSP: 0018:ffffc90005b278b0 EFLAGS: 00010287 [ 329.709600][ T8795] RAX: 00000000000481f3 RBX: 00000000fffffffe RCX: ffffc9000647a000 [ 329.717571][ T8795] RDX: 0000000000080000 RSI: ffffffff8209da36 RDI: ffff88802f4a1f00 [ 329.725628][ T8795] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 329.733595][ T8795] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82103030 [ 329.741562][ T8795] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49440 [ 329.749533][ T8795] ? __pfx_probe_sched_switch+0x10/0x10 [ 329.755099][ T8795] ? tracepoint_probe_unregister+0x836/0xd10 [ 329.761097][ T8795] tracing_stop_cmdline_record+0x66/0xa0 [ 329.766740][ T8795] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 329.772737][ T8795] ftrace_event_set_open+0x224/0x380 [ 329.778040][ T8795] do_dentry_open+0x6ab/0x14d0 [ 329.782829][ T8795] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 329.788662][ T8795] vfs_open+0x82/0x3f0 [ 329.792761][ T8795] path_openat+0x208c/0x31a0 [ 329.797371][ T8795] ? __pfx_path_openat+0x10/0x10 [ 329.802322][ T8795] do_file_open+0x20e/0x430 [ 329.806844][ T8795] ? __pfx_do_file_open+0x10/0x10 [ 329.811886][ T8795] ? alloc_fd+0x476/0x790 [ 329.816237][ T8795] ? do_getname+0x191/0x390 [ 329.820764][ T8795] do_sys_openat2+0x10d/0x1e0 [ 329.825463][ T8795] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.830673][ T8795] ? find_held_lock+0x2b/0x80 [ 329.835376][ T8795] __x64_sys_openat+0x12d/0x210 [ 329.840242][ T8795] ? __pfx___x64_sys_openat+0x10/0x10 [ 329.845714][ T8795] ? rcu_is_watching+0x12/0xc0 [ 329.850482][ T8795] do_syscall_64+0x115/0x840 [ 329.855078][ T8795] ? clear_bhb_loop+0x40/0x90 [ 329.859759][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.865659][ T8795] RIP: 0033:0x7f9fce99ce59 [ 329.870090][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.889708][ T8795] RSP: 002b:00007f9fccbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.898122][ T8795] RAX: ffffffffffffffda RBX: 00007f9fcec15fa0 RCX: 00007f9fce99ce59 [ 329.906106][ T8795] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 329.914078][ T8795] RBP: 00007f9fcea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 329.922049][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.930033][ T8795] R13: 00007f9fcec16038 R14: 00007f9fcec15fa0 R15: 00007ffeca7f9e28 [ 329.938016][ T8795] [ 329.941124][ T8795] Kernel Offset: disabled [ 329.945461][ T8795] Rebooting in 86400 seconds..