last executing test programs: 7.393232914s ago: executing program 2 (id=3749): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x40006a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, 0x0) r4 = socket(0x2, 0x5, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r2, 0x2, r0, &(0x7f0000000100)={0xfffffff7, 0x5}) socket(0x11, 0x80003, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) socket(0x10, 0x2, 0x0) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7001fbdbdf250100000005002e00fd00080008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) adjtimex$auto(&(0x7f0000000100)={0x81, 0x0, 0x0, 0x1, 0x5, 0x100000001, 0x7, 0x0, 0x1, 0x34b616f1, 0x213, {0x8, 0x100000001}, 0x5, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x4828, 0x9, 0xc, 0x5, 0xd}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r6, &(0x7f0000000040)={0x8, 0x2, "0600000000000000"}, 0x405459) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3) r9 = setfsuid$auto(0xee00) r10 = setfsuid$auto(0xee01) setresuid$auto(r9, r10, r9) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000003380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003340)={&(0x7f0000000f80)={0x2398, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_NAN_FUNC={0x237b, 0xf0, 0x0, 0x1, [@generic="edfe95ddb661eb86087c62175b917eec8e3efeeaf31784157a3fcf605ae703535b15f0bf3a3dab2806e6b33416c95573e646368db5141a76c9c5e32b3aba296b7fe04a2d127452df26edd07bb49ad274ef5b7fba5282b17ffcffa7615c806ae3eba33ed1b1e69af36f47114bf98162f240e90d0cea0f055bb7dd47bb9ff654eef42ea1f6f1f906674a4e48aa80da8622cfe7b952df23fda20a038962fdec7ba3083a438eefa9fdb027bf42672ad8cc80e5576e94b7a31bc4beba723f0039eda132118d3f8c5880571d611f5f2fe93f664667d9badd913106", @generic="e81ea87173e0a2700ae585fec2ea7771c919cca11067db735990f9bc4b1acd762f1fdf9d1ea1182883e27d7ffd01162fd450b7", @nested={0x120, 0x100, 0x0, 0x1, [@nested={0x4, 0xba}, @typed={0x8, 0x93, 0x0, 0x0, @uid=r10}, @typed={0x7, 0x83, 0x0, 0x0, @str='^(\x00'}, @typed={0x45, 0x97, 0x0, 0x0, @str='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00'}, @generic="4e5a60a29fce8d35374b1e328d68dcf28a24528808ce16f383486aa1cba42157253107241f7d886c445c1e3507b4284a9734898e67839fdc6f2c2193b553eb694bd632c0783d8f8032fdf93063e0f67b3464019346786c36a6bb64283d2267af58f42447fe9544ad9b5f07e4c8ef5eac2eb83f061dd9e45e71fa8bbfaa9748bb3af0840cffb612a23ce770315f736ea62e5041aec8b4c277840ba57807edfbe0a059208cf3518a4f124bd49aa0b6a2c9f79db11cdb901e757c91d811afb2bec3"]}, @generic="1e3a6ca68d009d94626654c7e7d8f1a9b7f42174dab632a92111688a", @nested={0x100c, 0x122, 0x0, 0x1, [@nested={0x4, 0x81}, @nested={0x4, 0xaf}, @generic="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"]}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x111c, 0xdf, 0x0, 0x1, [@generic="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", @typed={0x6, 0x145, 0x0, 0x0, @str='\\\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xf0, 0x0, 0x0, @fd=r0}, @typed={0x1004, 0xad, 0x0, 0x0, @binary="9f007854950f43d3b46cb1ccb55e2618447588af08e764ea2df2889a2bee6cbae6c5a5c7ceefd485d0c6e489b0787790d86f4b11052541b2b78d0267312706afbf1447097bd112f4e06ed80347798ea94cde9f1f89d65e3475f419655e65798ba45e7f9fbb8467aba44ffdac1708e4cc8a2077a0ddebdeab6f2876d6024ceff2f86e1128e36ffb3dfe56aa16a3a104f7f649c15028ea6ea95eafca0538587c94a32e446920c9a5f836a9449e3e9b8cea1c5e1602be6a60859756736d51e334c1a085523797df75d9345892fb605e1812fce0968f32d4f7d198a5e35771afe9987236f5f4fe8a93dda4566e9bb882ca00891485b4128337b75ba739bc4cf1a9250a5938629dc6d9c10f934aaa65afa17c8178ba09144a64dda66b559096a91afb1e41db5ebb1e8910fc7369e015293c522ca98ebd07de86506d18c0d000bfa8fb5f7b28fbecbf1d1802382801ec74c62067f732f2dcff2a2ec6e376a924c5c28fab1dfe9b14163132a30bc6b887232685a7f48ab79e06cd2b26509ca9ff688b8f874f3f8abc8d7d86f5924d6d4ef30841a5a57019fcd9df832dea0c44c8e463a6a9ed3e25b8420e7e976cfc7b6a529c0265c23dc45259878891e5d1080a788f95b591d12d6e903203e5bb0bf054858645534d3bc3d8d9a0d27f613ebd860046fbf8f2cebf9a80cac8716cbc47799124c47bfeb1f6b40a59595d0e3e57abcf3b6505030aae6ea27ac811ba02b271cac9ac9710063bd255f776ddc023781ec37b5d3e154357ac721d4368e4562d0764fa854b630634cb0d71df9e584da0c21ddcd91bcefe0b868f2ab0a5a38ae33c55feda232c5a5d6ce35aba9d79f2d4a862fc6620df4cc8021fd2df9a77af2b084add070533cc078378005f242ba6f1a7f3de0d4b4cbb59a7738b9df20ad94c2277f963fed26144affe403413f8fa7e9555a3c755edafebea0ecebff106ee53bd578eb085480cc7fb16768472b1d25be0e4dd4160e561f948ba042bd88f91e811ee451ab52d31ae184d3ba12b5b910e3d44777eb464761f32d3169f282977e25e8af73d44b943f7aa092a28783b71f59ff625c8f2bf67d2bf59028f02a2ac7cf237ba58c31b05c819ce28121e85275495a68b6932ea489d1b472f2bcf70bb83d736d6773dd4a4752ba344b6e84b3cc8ddf1fd6dbb415705be5feb15360cf305228d1d66eda083108fbe468657de60d7d5e57a08335c8ef82445a46a4ee724578449de7edfdbe9601266fd784af00845d52246fc48e09288250c89fcd28e0cbc1be4450bb6da0ac3372ec3f8b6b2dbda0cca7259df27ce4d04cc16436c3bf9e6f25c760abf88df8beb153d94a368b0121980e739cd83e320dd2c491a8f3969597e076a8536eb9c00ff16e52b7c743890519c7ecc69f4b7ee3c96d3303478c9e00145851d24247d72f812574389356e40c7c231a12a82dffb39b987c29474b6dc483cf88b8a3084ba2c47e29474d4abb7f482cc6fea944874594bd10dcd2a757bd91cecdfb76eae2076bb19ae8d0d2d42841e32ce690c943ff6f56cb522a593b65902b5796b6d370b0f18b8492474649fd55ef2226af84ff1b30a8658405a91d2a19e9211193a97604e1cbc822b7160421bffa71d93223296d230aa655da11e10aad0a8925f4f145e9596ec2854202fcfd9f8bd61d9b5e5915262de689c4196172f0ba496853a853a305f86b4bd5e10a248eec396ea0b50e1abbdf4d80b5294b85cf687ed6d9a8b6799dd8b6e46362a104d5c15b5d2f14444738bb4d73655c15b084a007d9fca3967ec7ccae7292ef65e36a50ddb0ad30f6881c6d2494a77892b985572b6ea374ada11af3df97367cf97c0257d5970ec2acd743172ba2305bcbca6399c829d1c4261c195edfc695f38b2c0519ba0432d8de0f48d5a42d804f08bcc7c5b7688ad043f48201ee4f0949a32ac7fcaa738d33ff76512a7bbebd0f057d68fb6b53d6fc168bfdc1ca5dd67ae27782d07c4fb61d8b2a87d488bf2e7f53879f176e5f138985e3a16e692b1996afc01a83d64d3b754d3bd80ac22354826515cf65eab015cc5744f99e93647fc186cfca913d8f21332aa80d5cad59be1b694ec276ca272d36b6348a8363fc8149869dba3f3cfcdff23b07423da5efd52f245f59367cc8fdcb57b7337846b8a1130ce257aa3dfa56e183d3303bf36232215e9baacb0cd63e95ffa7dbe5a75b2fa8aa2ab7f8e3f3ace5828075bcacd32dcc04e9e2babb4440dec2ae35a5cee2e5c960d5924060677550a7ff795c6227532403af8456ebfc4c1a085f34cd0e4774745b74efd1d85f967a83df8d0e3b359a770e26fa40b55d7bd8d6c3e47a61c8f9688e5d9a3ffa04a85e41ab490e9eacf52e38843640cbf32a9824f6ec22cd5991f297956abc0e0f186778e54a6cb0837444fc3feb621a9d10bc364ec76c9d09799e7fbaf4e19c9a3514e797ed5f12990d8ceba0a8fbb2c128a7481c63c57f546fc24d194934400c4a46a3e93f20e93e0e624433a8335521fe25db947604b2f7e2c21cb3db2f44181756d08de52a020ad212860d9ca10281a2aa8499cbab77c9534c45ed87d439ad8b4cb0ab8729666c846b3e798326cfcdac535f20693c910035ded0eaab4e07da6885260b598329244f0b79e585aa2a6d0b0bcf7fbc17def516c9077df06207893d42a214cc5951b5c0072dd0dc0b307bd4442baed35c9561a283e3108edfd7b42028a029db102ca224b532e1f76259cbc8de7a5afa28d53490705a3d9de0550ecbf8a76dcc90505d98aabf5f5b122498df6c5c0af728bbc9dd277fb43c95e5a7c110328769431b5a188f0be8b6604563864ba0d559b7ace913fff47e71253b68eeb3c1cff0ec849dc3c349dc30b7836385c03a4547984bf2c4ae326ec78e7080a73b61b39f3838077a57d7dc29c5df69e47e9bda1c788e81dc68d2509eca3033c4cd5281e668f535e4bc9b085451fb66e441714b3eeb15e7a61b08e8a8c023afbfd75a915e1f2c662f5a3e2a11280705a5b04c5983903bda475bedd19fc394714e9eeeffbbbf8a01166554b238fd38462f3cfa7e0a73b4715e6a31e5d9c00eed5156c4a15b702fc32db77dd5db3a141892e2c6d5cf9a03026b859ac53257c9cf1c70cde3b75c403858a42fde9479eca128d457dc2acad7c4c1f41f9f313371cb03633be909225e5630db4e69f4e1f3618097d416f1db0c04c296dc9618a064fdc1d7f6f9e3f854a2175c743acf3d18660103aabdf2be3616905b58b4984ec6abdb0eb574b2082bc047b0ee1dc0e21b914cdd7a29103c41a1a5fa02dccdb660147ecc0689392f119c1ec8098b4c519b68db0ce9c64765cd650831c5d44ca45e45ad882ab06c18191459fa4ea12bfdf221d59b6bd09611071f283c1e195965401e5c863e317395ab0deccd597a729255372bc328baab3388dd5d6c42ec9672aac392efe8819760d038dc8cd3c51c998dab30a0773dddec8065a20e922923d3147cadb8fe1058f8ce520de57b206f5cb4d4daebe08a0b864156f1601210409c0319e3caf924358c80a7dbffc4fb9a61af460f3f021f45ae8400ea23fbdd49dca6138a20c1bf371e8d20c9f588c3f8727c3dcc3c32f112c92cf512719a121b144be46eb871674e431bdeb14fbab3c6ccd7a6082719bc9d6dc208e7c7651ab3b699dcb17f54e36c3b965a20a1e2c93d1329e6501f915030d618259c13367aa087ca8a1cacdcdaa2cc038128521e068bd007e415e7cd7258b81aedc28c59162fac8e995d475f0b08ce188167001837ef28cf249cf8504aaa02177766cf2df844b2c61a047e451f23a0697d89e874a73e91d98f05042b176cbd588643e5758c8540494d829b41d54d0a42afbfd038b3412ae8ba2cea0281b094c315adfbb70ae403ddf363c9ebac39859767cc56125b1d78e22246ee38f397ea0ddf120dd59ebb995f00acd3d06d9f7561b1b85809c7175df53906410681593a20f8b654cacb2bc24198ae8a2fea4d52f1759942502e9c07b564b8c684ac322617ddc2d0deebe74887eb09441012defbc402d436316a0ca7181a74958656be783058f0fd47fb79a200ebce5709855895783f82104e05b7c8edcb9db75acf98e8e293ec7106a645427bd2e2cb5c7f7a8488629ea0aa29f83b4dcb66d7607f474a7fbe7b79dce5ee4f3d4df093818979cb9e263f604a7a49e01ba126fe349c74e10571af5fbcb14b8cd787073fc4873f85c1b2809286a17a77621ee8fe6bd7e644197aebcdf98218914945405b1b86175b92afe3076639ad394af9b68c7486dfc252e4d40f32b8cdb83c75022f6fd0547822ea6bf5d2f23849449fb11411ae4a1fdb13c04a712daa2bca92f1f4616f7a179c3ede31753a17d0972c749f142b709eb9f2e5bb6290ca9f11a92fb1eaca28b2cde3dd97cc795d968e971a1b6355b162fcae36d0037b46b2ba924b3644cd754ba8fa5e79c1407de5efcd27f1482c4e758a9ab11c226919f3bd5c740f1e9912a4c7a3d39734dd732ce88409fc77f9ed4c8d602a03cb5dd09217ff3acbbadcaaeda490605e3319f908359d5d91f3b26f91f12a3975eafaf2046a284df3c8e76878722dc3bd6648815360ed6ec4a22d4f4a73843ee9a8a64e0910bf56380974a60ed5707b0405d8bad7b5d63d90a5c5883ec3097f00ffbaec73535f780bab9837493fecdd48b6614aa73741893d46dc9dbd0e66cfe17258327196c72af2e95ea89ccf9ae4090dc25892e5f78cf48611f44d2d3a2a954c693df5d3fae6604b5da10806765908067009acc1688768a572b42681eff1a3268802aca72b6afa78f2cb2324a4f640a71ac93bfbb0e341c79e07a6346f5f1934ed02cf8e8e5757db958f4ffb23ed014abe60df58661308ab40cf2a829a74b2732c15fb17f1d81a1f56e5a15f61965b7dd804f8ac9c94c1227954db36959da859acbbf9f3f3e467175c47e7d1734a877b92b3efcff7df98c361d05b0c5eaeda63bb9b0d3653b8cb442ca1c7ad0234e903a0e19bc48796c6a750cf15cd40fa57e9e427f815a679bf2a2f9126550279b97b399af8247a4daca810893cbaef3c8a0a01fe223e4e714db476525f6f8f094682fccf94907fc596dadfa2c217ab68dd8b165391d82652a88a9d6d96fd003190cef99288ef9a875ae71b1003fcda859bb0d4384611d397f74909fad700fdd5c4956ed1573c584f8c98c3129636f4ff676e513693deedb554a141b593d50290d4435ccd99ec032d6b835c243932d0df4f92055d82788827fdd2d3f39d1e5022412bc0b29482321d3b7fd0c9e24f9631a9c6c48abf8ae7d2e98e97b4fdd5851f5ef8d7929bb72be52c9355c1d282829f6ce09596613c4406fe31e60697feeff5e3a7d6d87391405030b521792f27d715f046e433098aff4351a3423e63a62daf2d61d2fc5d8573487d7199b182509e8864a47d4e0520627e169410990b6a8eaca2c29b556f1fad13236b03c0d5e39e78a1fcd0f5e053e6b7df0b70de784282af6eb645fe097815c6f87e02cc30a06c11315bbb7ce5d8679622f31e645fe0ca233c0d0b8b7f879b00dec3d6b6f93dd0df582cd7d0681e675b38db416fd2212afe0d39c6e42c8b6be23b66a58ee2de0fa7ed3d81429194c26378b924543abf8bd8e5bf9bb22eeb0ff0cd70870a857d100358d92e7d59cffd2c963e3b03fe8745d6e8b49ff076707e29aa77964df95d24ae443bfb97112a1e83c0b21295bcf66f83da2b5174eed75f5cb23f010089227392690fbdd1f075696a6f879ad2d890ce2293c84bdcdfa62fb065daf82d750933d608ca2dccf0517"}]}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}]}, 0x2398}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000094) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b2338", 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f00000003c0)={0x20080522}, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mount$auto(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000000240)="8983b4d503e98c29ac0907551c70860db5cca27b1ab4bc56020b5d379e3632275ddfcea8c9fa21b267c9caaecb3712fa39bdf3664db83c2a79a27345e968ee01e9943d") r11 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r11, 0x4b46, 0x1) 5.581613081s ago: executing program 0 (id=3753): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/smt/control\x00', 0xab42, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6) (fail_nth: 3) 4.817991641s ago: executing program 2 (id=3755): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000240)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0943b28e00e9c2f919d54fe990911e4c265c3d23eb66229", 0x83) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x11, 0x3, 0x2) r2 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$auto(r2, 0xf5, &(0x7f0000000040)='/^&\\%&^!)\'\x00', &(0x7f0000000080)="f794333c", 0xee01) (async) getsockopt$auto(r1, 0x107, 0x11, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x125080, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = socket(0x2, 0x1, 0x106) setsockopt$auto(r5, 0x1, 0x12, 0x0, 0xeb66) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) (async) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10000, 0x7, 0x3, 0x7ffffffd, 0xffffffffffffffff, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffc, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x0, 0xd, 0x3, 0x40, 0x76c5, 0x8, 0x100000000}}) (async, rerun: 32) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) (rerun: 32) fsconfig$auto_XFS_DAX_NEVER(r6, 0x4, &(0x7f0000000040)='^\x00', 0x0, 0x2) (async) r7 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x4400, 0x0) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) (async, rerun: 32) getdents64$auto(r7, &(0x7f0000000000)={0x307, 0x6, 0xffff, 0x7}, 0xef) (rerun: 32) r9 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$auto(r3, 0x852, r9) (async) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x3a, 0x400, 0x9}]}) 4.561599245s ago: executing program 1 (id=3756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/flush\x00', 0x80a02, 0x0) pipe$auto(0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 4.447767595s ago: executing program 1 (id=3757): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x1e, 0x4, 0x0) (rerun: 64) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) bind$auto(0x4, 0xfffffffffffffffe, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video7\x00', 0x8200, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x6, 0x4, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#$@\\]\\-\x00'}]}, 0x34}, 0x1, 0x300, 0x0, 0x801}, 0x0) r6 = getsid$auto(0x0) (async) r7 = semctl$auto_GETPID(0x3, 0x7fffffff, 0xb, 0x253d) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@OVS_DP_ATTR_NAME={0x7, 0x1, '%}\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x1}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008000) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/133, 0x85) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/27, 0x1b) (async, rerun: 64) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x488040, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0) (async) shutdown$auto(r8, 0x5) 4.241277634s ago: executing program 2 (id=3758): socket(0xa, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) uname$auto(&(0x7f0000000180)={"ad84726f530323e52242c6a93688db926cbfc1df52329ce084257b9e88f3763fb54838f1f32351e3de4dd4d19cea9a1e55f92c76b8e5978d75f9c58a45d8c81aba", "04986eda295453432af666835d32fbc12209644003d240001d1b33e1b356e48cc9f32f6f6892796a7f54c8f602e987294f980934ebbb1d75bfd4978b3f61a500", "382bf3fe479186b41938be067ef57648446f01772f5396103529adfb49d37dd17d6d185aefe183b0c681f7c034ad1c4f6173d92f2dcb73c09afeb346dca00217dc", "c0d3b0a967eef631a8130db3027d9d90680cdaae7b014c340b219e3df22244da8c5970a188bbb4ba9d3eae86fd611f522462665398b71ca368a0d910e404cf64a7", "7eaaa11f4a5f991d3d554d459ab70f3fc9947e3348afcbe228be5279d2ac905668cb3cf3504c577c3e4bc62e06777689462f3ccd49455b84526f04d5ad5fa2667a", "0740565cd2129083d9584fa321770915e771bb111720f212c38bafbec6d9d6e89f0bdd0718eb627debedadebfb69443684364970e41228e894c17c7bcb955761ae"}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000840)={0x0, 0xffffffffffffff4a, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4814}, 0x400c850) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1000}, 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0xffffffffffffffff}, 0xcf) 4.065847286s ago: executing program 0 (id=3759): timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xb, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x5) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendfile$auto(r1, r1, 0x0, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop1/integrity/read_verify\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/112, 0x70) unshare$auto(0x20000080) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, r2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, 0x0, 0x400c8d4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) setsockopt$auto(r3, 0x1, 0x4b, 0x0, 0xb) recvmmsg$auto(0x3, 0x0, 0x4, 0x1006, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3.940374568s ago: executing program 1 (id=3760): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x4c786f70}, 0x2) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES16], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="72010006b3c2098dc6c5d5c35e166166ab8d38d18fa401cf1d2fc106b2606a9d6869f216666a2b6de360ed0a72d09bfb46", @ANYBLOB="19"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_BRK(0x3, 0x7, 0xffffffffffffffff, 0x8000000000000000, 0x0) getsockopt$auto_SO_PEERNAME(r2, 0x9, 0x1c, &(0x7f0000000140)='&-\x00', &(0x7f0000000180)=0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0x401}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nbd12\x00', 0x6a640, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x40) r3 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r3, 0x205, 0xa, 0x4, 0x0) read$auto(0x3, 0x0, 0x87f) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) write$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) semctl$auto_GETNCNT(0x0, 0x0, 0xe, 0x4) setrlimit$auto(0x8, 0x0) io_uring_setup$auto(0x59, 0x0) 3.490093111s ago: executing program 3 (id=3761): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x41, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x2, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x22841, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) open(0x0, 0x161342, 0x100) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x161401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x30d540, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40204706, 0x0) 3.070258426s ago: executing program 1 (id=3762): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x40006a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, 0x0) r4 = socket(0x2, 0x5, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r2, 0x2, r0, &(0x7f0000000100)={0xfffffff7, 0x5}) socket(0x11, 0x80003, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) socket(0x10, 0x2, 0x0) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(r0, 0x5646, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, r2, 0x7f) gettid() socket(0x10, 0x2, 0x0) brk$auto(0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) timer_gettime$auto(0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x1, 0x10d3, 0x3ff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10, 0x3e, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) 1.718353872s ago: executing program 1 (id=3767): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x3, 0xf3d, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x202a01, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x2) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 1.56696253s ago: executing program 0 (id=3768): mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0xfffffffc, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x83}}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x8) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = io_uring_setup$auto(0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r2, 0xc00455d0, &(0x7f0000000000)=0xc) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r3, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) unshare$auto(0x40000080) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, &(0x7f00000000c0)={0x3, 0xffffffff, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"}) bind$auto(0x3, 0x0, 0x6a) accept$auto(0xffffffffffffffff, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0, 0x4}, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, 0x0, 0x40081) ioctl$auto_FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000080)="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") 1.077415402s ago: executing program 2 (id=3769): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dc) socket(0x2c, 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x80) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)='\n') msgrcv$auto(0x0, 0x0, 0xf55c, 0x3, 0x4a4d) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x30143, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x8300000000000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) 938.650108ms ago: executing program 1 (id=3770): unshare$auto(0x40000080) listen$auto(0x3, 0xfffffffe) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/smt/control\x00', 0xab42, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6) 770.377403ms ago: executing program 0 (id=3771): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0xe2080, 0x0) (async) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000200)={{0xffffffffffffff80, 0x80}, {0xda4}}, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000180)={@raw=0xfffffffffffffffe, 0xe0, 0x401, @unused, @subvolid}) (async) r1 = fanotify_init$auto(0x0, 0x1) mmap$auto(0x8000000000000000, 0x7c, 0x5, 0x3fb, r1, 0x7) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1c, 0x6, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0Q\x88H\x95\v\xbe5\xc2os\xe2iq\x1d>,\xe8\xb3\x950\xca\xfc\x98\xbd\xff\x93&\x98\'\\\xf4\xfe\xed7\x8e.I\xc3HG\x8d\xa3m\'\xbf\xc4\xad:\x96z\xcb\x1b\xe6\xa9J\xcfL\xf9\xd5\x00\x00\x00\x00\x00\x00X\xa8\xdb\xcf\xbb?f\xa2\xd0\xa4\xc2#f\xce\x98\x98\xbf\x03\xb6\x1aaAT\x1b\xa9\xa0\xee\xa2K\xe6\xf2B\xdb|\xa1\x19\xf0#\xda\x1b\xaf\x94\xed\x17)\x9f}\x19\x81\x11|G\x97\f\xe2\xf2%AvH\x82~', 0x4) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) getdents$auto(r2, &(0x7f0000000280)={0x2, 0x100, 0xff, "d328904ca5b5dd780df5e383a9640c752c86726ae0630f7b2a1db7bf8a9c162821199e5ee06ddca231e00dec6d448669fde41ce93c9dfa540553c6a49a25eb0a07f32d9eaff2a8188141b3ac00dd91a3809ac6a0e0f6229d816185e77a28e0801914639fc0baedf2781972534b10de3df007293c63877a33e8382398de6ea63c350caf14e5f620c75afd"}, 0x9) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000140), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r6, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) 712.668703ms ago: executing program 2 (id=3772): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0xa, 0xec, 0x4, 0x80000000081, 0x8, 0x4, 0xfffffffffffffff8, 0x1}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x0, 0x5, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') acct$auto(&(0x7f0000000280)='/dev/ptp0\x00') openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = io_uring_setup$auto(0x400, 0x0) readv$auto(r0, 0x0, 0xfffffffffffffffe) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r0, 0x40184150, &(0x7f0000000000)={0x400, &(0x7f0000000080)="343c34f4f67943f8c5a6d2711d70652fee4313d3c1f329685b6b8f550343455f918e27b0ae3b990a62503f6b1b79485b703e972258fd30fd3f816e0224769469ae0e95e67d7bec24093e0401f8d6ddb149aa9b5f3608b78be0181c8e2cdc893887305a16808fb07872887ff1bd5ddef3e00131df8691ad34be8c67c2f273fc0d54a26b7fa4cd627da1600bcac89b6d671c23bbfd8be94856d4718fb18b913e084d7c38ce4b8d", 0x4}) madvise$auto(0x1, 0x5, 0x6) clock_adjtime$auto(0xfffffffffffffffb, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) fstatfs$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) getsockopt$auto(r1, 0x84, 0x85, 0x0, 0x0) 173.566041ms ago: executing program 0 (id=3773): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x41, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x2, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x22841, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x161401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x30d540, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40204706, 0x0) 0s ago: executing program 3 (id=3774): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(r0, 0x0, 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) write$auto(r0, &(0x7f0000000040)='7\x00\\\x1c\xe7k\x00\x00\x00\x00\x00\x00\x00\x00', 0x3f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) writev$auto(r0, 0x0, 0x2) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x40, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) (async) write$auto(r0, &(0x7f0000000040)='7\x00\\\x1c\xe7k\x00\x00\x00\x00\x00\x00\x00\x00', 0x3f) (async) kernel console output (not intermixed with test programs): 20676][T22964] vfs_open+0x82/0x3f0 [ 1143.120716][T22964] path_openat+0x208c/0x31a0 [ 1143.120757][T22964] ? __pfx_path_openat+0x10/0x10 [ 1143.120798][T22964] do_file_open+0x20e/0x430 [ 1143.120832][T22964] ? __pfx_do_file_open+0x10/0x10 [ 1143.120884][T22964] ? alloc_fd+0x476/0x790 [ 1143.120916][T22964] ? do_getname+0x191/0x390 [ 1143.120955][T22964] do_sys_openat2+0x10d/0x1e0 [ 1143.120993][T22964] ? __pfx_do_sys_openat2+0x10/0x10 [ 1143.121033][T22964] ? find_held_lock+0x2b/0x80 [ 1143.121077][T22964] __x64_sys_openat+0x12d/0x210 [ 1143.121118][T22964] ? __pfx___x64_sys_openat+0x10/0x10 [ 1143.121163][T22964] ? rcu_is_watching+0x12/0xc0 [ 1143.121197][T22964] do_syscall_64+0x10b/0xf80 [ 1143.121229][T22964] ? clear_bhb_loop+0x40/0x90 [ 1143.121259][T22964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.121285][T22964] RIP: 0033:0x7fa123d9cdd9 [ 1143.121304][T22964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.121328][T22964] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1143.121352][T22964] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1143.121369][T22964] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1143.121386][T22964] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1143.121401][T22964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.121417][T22964] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1143.121447][T22964] [ 1143.888358][T22967] Process accounting resumed [ 1144.098741][T22980] netlink: 'syz.1.3517': attribute type 2 has an invalid length. [ 1144.152580][T22980] netlink: 'syz.1.3517': attribute type 2 has an invalid length. [ 1145.347424][T22330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1145.366084][T22330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1145.374872][T22330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1145.387166][T22330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1145.412080][T22330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.967170][T23011] Process accounting resumed [ 1146.104785][T23017] vivid-007: ================= START STATUS ================= [ 1146.278543][T23017] vivid-007: Generate PTS: true [ 1146.458979][T23017] vivid-007: Generate SCR: true [ 1146.607582][T23017] tpg source WxH: 320x240 (Y'CbCr) [ 1146.683063][T23017] tpg field: 1 [ 1146.727965][T23017] tpg crop: (0,0)/320x240 [ 1146.786096][T23017] tpg compose: (0,0)/320x240 [ 1146.847495][T23017] tpg colorspace: 8 [ 1146.922460][T23017] tpg transfer function: 0/0 [ 1146.980299][ C0] bridge0: port 5(dummy0) entered learning state [ 1147.003835][T23017] tpg Y'CbCr encoding: 0/0 [ 1147.088368][T23019] Process accounting resumed [ 1147.094533][T23017] tpg quantization: 0/0 [ 1147.167275][T23017] tpg RGB range: 0/2 [ 1147.252148][T23017] vivid-007: ================== END STATUS ================== [ 1147.540097][T22330] Bluetooth: hci0: command tx timeout [ 1147.607214][T23039] FAULT_INJECTION: forcing a failure. [ 1147.607214][T23039] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.649128][T23039] CPU: 0 UID: 0 PID: 23039 Comm: syz.1.3529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.649167][T23039] Tainted: [L]=SOFTLOCKUP [ 1147.649176][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.649192][T23039] Call Trace: [ 1147.649201][T23039] [ 1147.649211][T23039] dump_stack_lvl+0x100/0x190 [ 1147.649243][T23039] should_fail_ex.cold+0x5/0xa [ 1147.649276][T23039] should_failslab+0xc2/0x120 [ 1147.649306][T23039] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1147.649347][T23039] ? ep_ptable_queue_proc+0x5b/0x280 [ 1147.649383][T23039] ep_ptable_queue_proc+0x5b/0x280 [ 1147.649415][T23039] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1147.649445][T23039] snd_seq_pool_poll_wait+0x5b/0x170 [ 1147.649491][T23039] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 1147.649527][T23039] snd_seq_oss_poll+0x17d/0x1d0 [ 1147.649568][T23039] ? __pfx_odev_poll+0x10/0x10 [ 1147.649640][T23039] odev_poll+0x4a/0x90 [ 1147.649673][T23039] ep_item_poll+0x141/0x1f0 [ 1147.649708][T23039] do_epoll_ctl+0x1f33/0x36a0 [ 1147.649755][T23039] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1147.649788][T23039] ? find_held_lock+0x2b/0x80 [ 1147.649821][T23039] ? __might_fault+0xc5/0x140 [ 1147.649860][T23039] ? __might_fault+0xc5/0x140 [ 1147.649897][T23039] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1147.649938][T23039] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1147.649971][T23039] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1147.650007][T23039] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1147.650046][T23039] ? rcu_is_watching+0x12/0xc0 [ 1147.650080][T23039] do_syscall_64+0x10b/0xf80 [ 1147.650112][T23039] ? clear_bhb_loop+0x40/0x90 [ 1147.650143][T23039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.650170][T23039] RIP: 0033:0x7f1b0179cdd9 [ 1147.650191][T23039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.650216][T23039] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1147.650240][T23039] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1147.650257][T23039] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1147.650272][T23039] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1147.650288][T23039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.650302][T23039] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1147.650334][T23039] [ 1147.976929][T23044] FAULT_INJECTION: forcing a failure. [ 1147.976929][T23044] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.990680][T23044] CPU: 0 UID: 0 PID: 23044 Comm: syz.0.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.990718][T23044] Tainted: [L]=SOFTLOCKUP [ 1147.990726][T23044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.990741][T23044] Call Trace: [ 1147.990749][T23044] [ 1147.990758][T23044] dump_stack_lvl+0x100/0x190 [ 1147.990789][T23044] should_fail_ex.cold+0x5/0xa [ 1147.990822][T23044] should_failslab+0xc2/0x120 [ 1147.990849][T23044] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1147.990888][T23044] ? alloc_empty_file+0x5b/0x1c0 [ 1147.990925][T23044] ? __pfx_stack_trace_save+0x10/0x10 [ 1147.990964][T23044] alloc_empty_file+0x5b/0x1c0 [ 1147.991001][T23044] path_openat+0xe8/0x31a0 [ 1147.991030][T23044] ? kasan_save_stack+0x3f/0x50 [ 1147.991053][T23044] ? kasan_save_stack+0x30/0x50 [ 1147.991074][T23044] ? kasan_save_track+0x14/0x30 [ 1147.991097][T23044] ? __kasan_slab_alloc+0x89/0x90 [ 1147.991121][T23044] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1147.991160][T23044] ? do_getname+0x35/0x390 [ 1147.991194][T23044] ? do_sys_openat2+0xc5/0x1e0 [ 1147.991236][T23044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.991264][T23044] ? __pfx_path_openat+0x10/0x10 [ 1147.991304][T23044] do_file_open+0x20e/0x430 [ 1147.991336][T23044] ? __pfx_do_file_open+0x10/0x10 [ 1147.991386][T23044] ? alloc_fd+0x476/0x790 [ 1147.991418][T23044] ? do_getname+0x191/0x390 [ 1147.991456][T23044] do_sys_openat2+0x10d/0x1e0 [ 1147.991494][T23044] ? __pfx_do_sys_openat2+0x10/0x10 [ 1147.991533][T23044] ? find_held_lock+0x2b/0x80 [ 1147.991596][T23044] ? __fget_files+0x215/0x3d0 [ 1147.991628][T23044] __x64_sys_openat+0x12d/0x210 [ 1147.991666][T23044] ? __pfx___x64_sys_openat+0x10/0x10 [ 1147.991708][T23044] ? rcu_is_watching+0x12/0xc0 [ 1147.991740][T23044] do_syscall_64+0x10b/0xf80 [ 1147.991780][T23044] ? clear_bhb_loop+0x40/0x90 [ 1147.991815][T23044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.991842][T23044] RIP: 0033:0x7fb6fd35d60e [ 1147.991861][T23044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1147.991885][T23044] RSP: 002b:00007fb6fb5f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1147.991907][T23044] RAX: ffffffffffffffda RBX: 00007fb6fb5f66c0 RCX: 00007fb6fd35d60e [ 1147.991924][T23044] RDX: 0000000000000002 RSI: 00007fb6fd432670 RDI: ffffffffffffff9c [ 1147.991939][T23044] RBP: 00007fb6fd432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1147.991953][T23044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.991968][T23044] R13: 00007fb6fd616038 R14: 00007fb6fd615fa0 R15: 00007ffda3f159f8 [ 1147.991997][T23044] [ 1148.444735][T23051] random: crng reseeded on system resumption [ 1148.608747][T23054] random: crng reseeded on system resumption [ 1148.778320][T23054] hub 1-0:1.0: USB hub found [ 1148.799131][T23054] hub 1-0:1.0: 1 port detected [ 1148.997506][T23060] blktrace: Concurrent blktraces are not allowed on loop15 [ 1149.105851][T23000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.132397][T23000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.181795][T23000] bridge_slave_0: entered allmulticast mode [ 1149.196730][T23000] bridge_slave_0: entered promiscuous mode [ 1149.249983][T23000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.292713][T23000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.339553][T23000] bridge_slave_1: entered allmulticast mode [ 1149.382441][T23000] bridge_slave_1: entered promiscuous mode [ 1149.558122][T23000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.596931][T23000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.626465][T22330] Bluetooth: hci0: command tx timeout [ 1149.772797][T23000] team0: Port device team_slave_0 added [ 1149.825896][T23000] team0: Port device team_slave_1 added [ 1150.038584][T23000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.092845][T23000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.165869][T23092] random: crng reseeded on system resumption [ 1150.262396][T23000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.336696][T23000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.393838][T23000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.489634][T23101] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.509644][T23000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.558964][T23096] FAULT_INJECTION: forcing a failure. [ 1150.558964][T23096] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1150.605963][T23096] CPU: 0 UID: 0 PID: 23096 Comm: syz.2.3546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.605995][T23096] Tainted: [L]=SOFTLOCKUP [ 1150.606003][T23096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.606015][T23096] Call Trace: [ 1150.606022][T23096] [ 1150.606030][T23096] dump_stack_lvl+0x100/0x190 [ 1150.606056][T23096] should_fail_ex.cold+0x5/0xa [ 1150.606082][T23096] get_futex_key+0x295/0x1510 [ 1150.606105][T23096] ? __pfx_get_futex_key+0x10/0x10 [ 1150.606124][T23096] ? lock_acquire+0x1b1/0x370 [ 1150.606150][T23096] futex_wake+0xea/0x530 [ 1150.606178][T23096] ? __pfx_futex_wake+0x10/0x10 [ 1150.606203][T23096] ? exit_mm_release+0x19/0x30 [ 1150.606272][T23096] do_futex+0x32b/0x350 [ 1150.606295][T23096] ? __pfx_do_futex+0x10/0x10 [ 1150.606315][T23096] ? __might_fault+0xc5/0x140 [ 1150.606353][T23096] mm_release+0x24a/0x2f0 [ 1150.606379][T23096] do_exit+0x707/0x2a60 [ 1150.606421][T23096] ? __pfx_do_exit+0x10/0x10 [ 1150.606451][T23096] ? do_raw_spin_lock+0x128/0x260 [ 1150.606474][T23096] ? find_held_lock+0x2b/0x80 [ 1150.606500][T23096] ? get_signal+0x7e0/0x21e0 [ 1150.606528][T23096] do_group_exit+0xd5/0x2a0 [ 1150.606563][T23096] get_signal+0x1ec7/0x21e0 [ 1150.606597][T23096] ? __pfx_get_signal+0x10/0x10 [ 1150.606625][T23096] ? do_futex+0x192/0x350 [ 1150.606666][T23096] arch_do_signal_or_restart+0x91/0x770 [ 1150.606702][T23096] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1150.606742][T23096] ? __pfx___x64_sys_futex+0x10/0x10 [ 1150.606766][T23096] ? rcu_is_watching+0x12/0xc0 [ 1150.606806][T23096] exit_to_user_mode_loop+0x86/0x4a0 [ 1150.606826][T23096] ? do_syscall_64+0x519/0xf80 [ 1150.606855][T23096] do_syscall_64+0x6f2/0xf80 [ 1150.606881][T23096] ? clear_bhb_loop+0x40/0x90 [ 1150.606906][T23096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.606927][T23096] RIP: 0033:0x7fa123d9cdd9 [ 1150.606943][T23096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.606964][T23096] RSP: 002b:00007fa124c4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1150.606984][T23096] RAX: fffffffffffffe00 RBX: 00007fa124015fa8 RCX: 00007fa123d9cdd9 [ 1150.606998][T23096] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa124015fa8 [ 1150.607011][T23096] RBP: 00007fa124015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.607023][T23096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.607035][T23096] R13: 00007fa124016038 R14: 00007ffc8c815220 R15: 00007ffc8c815308 [ 1150.607061][T23096] [ 1150.607440][T23100] [U] [ 1150.860478][T23100] [U] [ 1150.951164][T23000] hsr_slave_0: entered promiscuous mode [ 1150.959667][T23000] hsr_slave_1: entered promiscuous mode [ 1150.983833][T23000] debugfs: 'hsr0' already exists in 'hsr' [ 1150.997360][T23000] Cannot create hsr debugfs directory [ 1151.169268][ T30] audit: type=1800 audit(4294967550.713:54): pid=23107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3549" name="members" dev="configfs" ino=100379 res=0 errno=0 [ 1151.596646][T23098] [U] [ 1151.603645][T23000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.702743][T22330] Bluetooth: hci0: command tx timeout [ 1152.015968][T23000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.150835][ T30] audit: type=1800 audit(4294967551.722:55): pid=23128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3555" name="members" dev="configfs" ino=100477 res=0 errno=0 [ 1152.333556][T23000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.438371][T23000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.662024][T23135] FAULT_INJECTION: forcing a failure. [ 1152.662024][T23135] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.739644][T23135] CPU: 0 UID: 0 PID: 23135 Comm: syz.1.3557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.739681][T23135] Tainted: [L]=SOFTLOCKUP [ 1152.739690][T23135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1152.739704][T23135] Call Trace: [ 1152.739716][T23135] [ 1152.739725][T23135] dump_stack_lvl+0x100/0x190 [ 1152.739754][T23135] should_fail_ex.cold+0x5/0xa [ 1152.739783][T23135] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1152.739813][T23135] should_failslab+0xc2/0x120 [ 1152.739840][T23135] __kmalloc_noprof+0xe0/0x850 [ 1152.739876][T23135] ? kfree+0x1dd/0x6c0 [ 1152.739913][T23135] tomoyo_realpath_from_path+0xb6/0x690 [ 1152.739948][T23135] tomoyo_check_open_permission+0x2af/0x3c0 [ 1152.739974][T23135] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1152.740008][T23135] ? hook_file_open+0x24e/0x7a0 [ 1152.740069][T23135] ? path_get+0x61/0x80 [ 1152.740106][T23135] tomoyo_file_open+0x6b/0x90 [ 1152.740142][T23135] security_file_open+0xb5/0x1e0 [ 1152.740179][T23135] do_dentry_open+0x5aa/0x1660 [ 1152.740211][T23135] ? security_inode_permission+0xbf/0x250 [ 1152.740241][T23135] vfs_open+0x82/0x3f0 [ 1152.740282][T23135] path_openat+0x208c/0x31a0 [ 1152.740322][T23135] ? __pfx_path_openat+0x10/0x10 [ 1152.740364][T23135] do_file_open+0x20e/0x430 [ 1152.740396][T23135] ? __pfx_do_file_open+0x10/0x10 [ 1152.740447][T23135] ? alloc_fd+0x476/0x790 [ 1152.740480][T23135] ? do_getname+0x191/0x390 [ 1152.740519][T23135] do_sys_openat2+0x10d/0x1e0 [ 1152.740557][T23135] ? __pfx_do_sys_openat2+0x10/0x10 [ 1152.740606][T23135] __x64_sys_openat+0x12d/0x210 [ 1152.740645][T23135] ? __pfx___x64_sys_openat+0x10/0x10 [ 1152.740683][T23135] ? ksys_write+0x1ac/0x250 [ 1152.740715][T23135] ? rcu_is_watching+0x12/0xc0 [ 1152.740749][T23135] do_syscall_64+0x10b/0xf80 [ 1152.740780][T23135] ? clear_bhb_loop+0x40/0x90 [ 1152.740811][T23135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.740837][T23135] RIP: 0033:0x7f1b0179cdd9 [ 1152.740856][T23135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.740880][T23135] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1152.740903][T23135] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1152.740920][T23135] RDX: 000000000000a140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1152.740936][T23135] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1152.740951][T23135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.740966][T23135] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1152.740997][T23135] [ 1153.081419][T23135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1153.143034][T23139] FAULT_INJECTION: forcing a failure. [ 1153.143034][T23139] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.155777][T23139] CPU: 0 UID: 0 PID: 23139 Comm: syz.2.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.155816][T23139] Tainted: [L]=SOFTLOCKUP [ 1153.155825][T23139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.155842][T23139] Call Trace: [ 1153.155851][T23139] [ 1153.155861][T23139] dump_stack_lvl+0x100/0x190 [ 1153.155893][T23139] should_fail_ex.cold+0x5/0xa [ 1153.155925][T23139] should_failslab+0xc2/0x120 [ 1153.155955][T23139] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1153.155997][T23139] ? do_epoll_ctl+0x2434/0x36a0 [ 1153.156038][T23139] do_epoll_ctl+0x2434/0x36a0 [ 1153.156083][T23139] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1153.156122][T23139] ? find_held_lock+0x2b/0x80 [ 1153.156155][T23139] ? __might_fault+0xc5/0x140 [ 1153.156194][T23139] ? __might_fault+0xc5/0x140 [ 1153.156244][T23139] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1153.156278][T23139] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1153.156314][T23139] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1153.156348][T23139] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1153.156389][T23139] ? syscall_user_dispatch+0x76/0x130 [ 1153.156421][T23139] do_syscall_64+0x10b/0xf80 [ 1153.156454][T23139] ? clear_bhb_loop+0x40/0x90 [ 1153.156485][T23139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.156511][T23139] RIP: 0033:0x7fa123d9cdd9 [ 1153.156532][T23139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.156557][T23139] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1153.156581][T23139] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1153.156599][T23139] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1153.156614][T23139] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1153.156630][T23139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.156646][T23139] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1153.156678][T23139] [ 1153.798043][T22330] Bluetooth: hci0: command tx timeout [ 1154.359208][T23000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1154.382518][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1154.401780][T23000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1154.430842][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1154.451911][T23000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1154.470361][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1154.495442][T23000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1154.508619][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1154.535530][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1154.564910][T23149] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1154.602313][T23149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1154.722805][T23000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.801114][T23000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.846994][T19859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.854283][T19859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.915353][T23147] Process accounting paused [ 1154.969811][T19859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.977055][T19859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.182399][T23000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.415915][T23000] veth0_vlan: entered promiscuous mode [ 1157.460548][T23000] veth1_vlan: entered promiscuous mode [ 1157.849092][T23000] veth0_macvtap: entered promiscuous mode [ 1157.903980][T23000] veth1_macvtap: entered promiscuous mode [ 1158.104785][T23000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.179281][T23000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.250033][T19855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.288443][T19855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.341308][T19855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.392922][T19855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.676551][T23223] random: crng reseeded on system resumption [ 1158.754195][T19859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.786872][T19859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.888808][T16843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.923114][T16843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.496388][T23247] WARNING! power/level is deprecated; use power/control instead [ 1160.594132][T23258] FAULT_INJECTION: forcing a failure. [ 1160.594132][T23258] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.694450][T23258] CPU: 0 UID: 0 PID: 23258 Comm: syz.1.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.694494][T23258] Tainted: [L]=SOFTLOCKUP [ 1160.694503][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1160.694519][T23258] Call Trace: [ 1160.694527][T23258] [ 1160.694537][T23258] dump_stack_lvl+0x100/0x190 [ 1160.694568][T23258] should_fail_ex.cold+0x5/0xa [ 1160.694599][T23258] should_failslab+0xc2/0x120 [ 1160.694628][T23258] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1160.694669][T23258] ? do_epoll_ctl+0x2434/0x36a0 [ 1160.694708][T23258] do_epoll_ctl+0x2434/0x36a0 [ 1160.694752][T23258] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1160.694784][T23258] ? find_held_lock+0x2b/0x80 [ 1160.694816][T23258] ? __might_fault+0xc5/0x140 [ 1160.694853][T23258] ? __might_fault+0xc5/0x140 [ 1160.694902][T23258] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1160.694934][T23258] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1160.694970][T23258] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1160.695004][T23258] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1160.695044][T23258] ? syscall_user_dispatch+0x76/0x130 [ 1160.695075][T23258] do_syscall_64+0x10b/0xf80 [ 1160.695107][T23258] ? clear_bhb_loop+0x40/0x90 [ 1160.695137][T23258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.695162][T23258] RIP: 0033:0x7f1b0179cdd9 [ 1160.695182][T23258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.695207][T23258] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1160.695230][T23258] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1160.695247][T23258] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1160.695262][T23258] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1160.695278][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.695293][T23258] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1160.695324][T23258] [ 1162.075364][T23254] Process accounting paused [ 1162.350139][ C0] bridge0: port 5(dummy0) entered forwarding state [ 1162.356760][ C0] bridge0: topology change detected, propagating [ 1162.446842][T23279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1163.563429][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1164.784330][T23323] can: request_module (can-proto-3) failed. [ 1165.194235][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 1165.228151][T23331] FAULT_INJECTION: forcing a failure. [ 1165.228151][T23331] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.352033][T23331] CPU: 0 UID: 0 PID: 23331 Comm: syz.2.3600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.352074][T23331] Tainted: [L]=SOFTLOCKUP [ 1165.352084][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1165.352111][T23331] Call Trace: [ 1165.352120][T23331] [ 1165.352130][T23331] dump_stack_lvl+0x100/0x190 [ 1165.352160][T23331] should_fail_ex.cold+0x5/0xa [ 1165.352193][T23331] should_failslab+0xc2/0x120 [ 1165.352221][T23331] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1165.352262][T23331] ? __pmd_alloc+0xbf/0x950 [ 1165.352299][T23331] __pmd_alloc+0xbf/0x950 [ 1165.352329][T23331] ? __pud_alloc+0x4fb/0x690 [ 1165.352362][T23331] walk_to_pmd+0x3a3/0x4c0 [ 1165.352396][T23331] get_locked_pte+0x25/0xc0 [ 1165.352429][T23331] map_ldt_struct+0x3c1/0xa70 [ 1165.352471][T23331] ? __pfx_map_ldt_struct+0x10/0x10 [ 1165.352504][T23331] ? alloc_pages_noprof+0xf9/0x160 [ 1165.352541][T23331] write_ldt+0x6d3/0xd40 [ 1165.352576][T23331] ? __pfx_write_ldt+0x10/0x10 [ 1165.352609][T23331] ? xfd_validate_state+0x129/0x190 [ 1165.352633][T23331] ? ksys_write+0x1ac/0x250 [ 1165.352668][T23331] __x64_sys_modify_ldt+0xb1/0x170 [ 1165.352702][T23331] do_syscall_64+0x10b/0xf80 [ 1165.352733][T23331] ? clear_bhb_loop+0x40/0x90 [ 1165.352764][T23331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.352789][T23331] RIP: 0033:0x7fa123d9cdd9 [ 1165.352810][T23331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.352852][T23331] RSP: 002b:00007fa124c0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1165.352910][T23331] RAX: ffffffffffffffda RBX: 00007fa124016180 RCX: 00007fa123d9cdd9 [ 1165.352927][T23331] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 1165.352943][T23331] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1165.352965][T23331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.352980][T23331] R13: 00007fa124016218 R14: 00007fa124016180 R15: 00007ffc8c815308 [ 1165.353012][T23331] [ 1167.060890][T23352] FAULT_INJECTION: forcing a failure. [ 1167.060890][T23352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.111458][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.1.3606 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.111497][T23352] Tainted: [L]=SOFTLOCKUP [ 1167.111505][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1167.111519][T23352] Call Trace: [ 1167.111527][T23352] [ 1167.111536][T23352] dump_stack_lvl+0x100/0x190 [ 1167.111567][T23352] should_fail_ex.cold+0x5/0xa [ 1167.111597][T23352] _copy_from_user+0x2e/0xd0 [ 1167.111638][T23352] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1167.111674][T23352] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1167.111718][T23352] do_sock_getsockopt+0x530/0x6e0 [ 1167.111748][T23352] ? __lock_acquire+0x4a5/0x2630 [ 1167.111772][T23352] ? 0xffffffffff600000 [ 1167.111798][T23352] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1167.111841][T23352] ? find_held_lock+0x2b/0x80 [ 1167.111871][T23352] ? ksys_write+0x190/0x250 [ 1167.111900][T23352] ? 0xffffffffff600000 [ 1167.111919][T23352] ? find_held_lock+0x2b/0x80 [ 1167.111956][T23352] ? __fget_files+0x21f/0x3d0 [ 1167.111989][T23352] __sys_getsockopt+0x133/0x1d0 [ 1167.112013][T23352] ? 0xffffffffff600000 [ 1167.112030][T23352] ? __pfx_ksys_write+0x10/0x10 [ 1167.112060][T23352] ? __x64_sys_getsockopt+0xbd/0x160 [ 1167.112083][T23352] __x64_sys_getsockopt+0xbd/0x160 [ 1167.112106][T23352] ? do_syscall_64+0x90/0xf80 [ 1167.112137][T23352] ? lockdep_hardirqs_on+0x78/0x100 [ 1167.112167][T23352] do_syscall_64+0x10b/0xf80 [ 1167.112196][T23352] ? clear_bhb_loop+0x40/0x90 [ 1167.112224][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.112248][T23352] RIP: 0033:0x7f1b0179cdd9 [ 1167.112265][T23352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.112288][T23352] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1167.112310][T23352] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1167.112326][T23352] RDX: 0000000000002713 RSI: 0000000000000114 RDI: 0000000000000003 [ 1167.112341][T23352] RBP: 00007f1b02737090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.112355][T23352] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.112370][T23352] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1167.112389][T23352] ? 0xffffffffff600000 [ 1167.112414][T23352] [ 1167.732658][ T30] audit: type=1804 audit(4294967567.254:56): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3607" name="/newroot/10/file0" dev="tmpfs" ino=72 res=1 errno=0 [ 1169.035692][ T30] audit: type=1800 audit(4294967568.604:57): pid=23381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3616" name="members" dev="configfs" ino=102272 res=0 errno=0 [ 1169.236220][T23383] blktrace: Concurrent blktraces are not allowed on loop15 [ 1169.904414][T23401] FAULT_INJECTION: forcing a failure. [ 1169.904414][T23401] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.991551][T23401] CPU: 0 UID: 0 PID: 23401 Comm: syz.3.3621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.991598][T23401] Tainted: [L]=SOFTLOCKUP [ 1169.991608][T23401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.991624][T23401] Call Trace: [ 1169.991633][T23401] [ 1169.991643][T23401] dump_stack_lvl+0x100/0x190 [ 1169.991676][T23401] should_fail_ex.cold+0x5/0xa [ 1169.991708][T23401] should_failslab+0xc2/0x120 [ 1169.991737][T23401] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1169.991779][T23401] ? do_epoll_ctl+0x2434/0x36a0 [ 1169.991821][T23401] do_epoll_ctl+0x2434/0x36a0 [ 1169.991867][T23401] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1169.991900][T23401] ? find_held_lock+0x2b/0x80 [ 1169.991933][T23401] ? __might_fault+0xc5/0x140 [ 1169.991972][T23401] ? __might_fault+0xc5/0x140 [ 1169.992022][T23401] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1169.992056][T23401] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1169.992092][T23401] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1169.992134][T23401] ? rcu_is_watching+0x12/0xc0 [ 1169.992169][T23401] do_syscall_64+0x10b/0xf80 [ 1169.992201][T23401] ? clear_bhb_loop+0x40/0x90 [ 1169.992233][T23401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.992258][T23401] RIP: 0033:0x7f035fb9cdd9 [ 1169.992279][T23401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.992304][T23401] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1169.992328][T23401] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1169.992345][T23401] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1169.992361][T23401] RBP: 00007f035fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1169.992377][T23401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.992392][T23401] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1169.992443][T23401] [ 1171.063165][T23421] FAULT_INJECTION: forcing a failure. [ 1171.063165][T23421] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.121199][T23421] CPU: 0 UID: 0 PID: 23421 Comm: syz.2.3628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.121235][T23421] Tainted: [L]=SOFTLOCKUP [ 1171.121243][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.121259][T23421] Call Trace: [ 1171.121267][T23421] [ 1171.121276][T23421] dump_stack_lvl+0x100/0x190 [ 1171.121305][T23421] should_fail_ex.cold+0x5/0xa [ 1171.121335][T23421] should_failslab+0xc2/0x120 [ 1171.121365][T23421] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1171.121403][T23421] ? ep_ptable_queue_proc+0x5b/0x280 [ 1171.121444][T23421] ep_ptable_queue_proc+0x5b/0x280 [ 1171.121473][T23421] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1171.121501][T23421] snd_seq_pool_poll_wait+0x5b/0x170 [ 1171.121539][T23421] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 1171.121572][T23421] snd_seq_oss_poll+0x17d/0x1d0 [ 1171.121607][T23421] ? __pfx_odev_poll+0x10/0x10 [ 1171.121636][T23421] odev_poll+0x4a/0x90 [ 1171.121664][T23421] ep_item_poll+0x141/0x1f0 [ 1171.121695][T23421] do_epoll_ctl+0x1f33/0x36a0 [ 1171.121737][T23421] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1171.121767][T23421] ? find_held_lock+0x2b/0x80 [ 1171.121797][T23421] ? __might_fault+0xc5/0x140 [ 1171.121832][T23421] ? __might_fault+0xc5/0x140 [ 1171.121866][T23421] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1171.121904][T23421] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1171.121953][T23421] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1171.121988][T23421] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1171.122026][T23421] ? rcu_is_watching+0x12/0xc0 [ 1171.122059][T23421] do_syscall_64+0x10b/0xf80 [ 1171.122091][T23421] ? clear_bhb_loop+0x40/0x90 [ 1171.122121][T23421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.122146][T23421] RIP: 0033:0x7fa123d9cdd9 [ 1171.122167][T23421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.122191][T23421] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1171.122215][T23421] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1171.122232][T23421] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1171.122247][T23421] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1171.122263][T23421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.122277][T23421] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1171.122307][T23421] [ 1172.098513][T23428] FAULT_INJECTION: forcing a failure. [ 1172.098513][T23428] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.231807][T23428] CPU: 0 UID: 0 PID: 23428 Comm: syz.1.3630 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.231848][T23428] Tainted: [L]=SOFTLOCKUP [ 1172.231858][T23428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1172.231874][T23428] Call Trace: [ 1172.231882][T23428] [ 1172.231892][T23428] dump_stack_lvl+0x100/0x190 [ 1172.231928][T23428] should_fail_ex.cold+0x5/0xa [ 1172.231961][T23428] should_failslab+0xc2/0x120 [ 1172.231992][T23428] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1172.232030][T23428] ? snd_seq_port_connect+0x61/0x550 [ 1172.232061][T23428] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1172.232092][T23428] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1172.232127][T23428] snd_seq_port_connect+0x61/0x550 [ 1172.232159][T23428] ? _raw_read_unlock+0x28/0x50 [ 1172.232190][T23428] ? check_subscription_permission.isra.0+0x146/0x240 [ 1172.232246][T23428] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 1172.232285][T23428] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1172.232382][T23428] call_seq_client_ctl+0xa3/0x130 [ 1172.232416][T23428] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1172.232450][T23428] snd_seq_oss_midi_open+0x596/0x690 [ 1172.232495][T23428] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1172.232550][T23428] ? lockdep_hardirqs_on+0x78/0x100 [ 1172.232585][T23428] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1172.232620][T23428] snd_seq_oss_synth_setup_midi+0x131/0x590 [ 1172.232669][T23428] snd_seq_oss_open+0x82e/0xa10 [ 1172.232710][T23428] odev_open+0x6f/0x90 [ 1172.232739][T23428] ? __pfx_odev_open+0x10/0x10 [ 1172.232770][T23428] soundcore_open+0x2e3/0x5a0 [ 1172.232805][T23428] ? __pfx_soundcore_open+0x10/0x10 [ 1172.232837][T23428] chrdev_open+0x234/0x6a0 [ 1172.232869][T23428] ? __pfx_apparmor_file_open+0x10/0x10 [ 1172.232909][T23428] ? __pfx_chrdev_open+0x10/0x10 [ 1172.232943][T23428] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1172.232984][T23428] do_dentry_open+0x6d8/0x1660 [ 1172.233015][T23428] ? __pfx_chrdev_open+0x10/0x10 [ 1172.233055][T23428] vfs_open+0x82/0x3f0 [ 1172.233096][T23428] path_openat+0x208c/0x31a0 [ 1172.233138][T23428] ? __pfx_path_openat+0x10/0x10 [ 1172.233181][T23428] do_file_open+0x20e/0x430 [ 1172.233215][T23428] ? __pfx_do_file_open+0x10/0x10 [ 1172.233269][T23428] ? alloc_fd+0x476/0x790 [ 1172.233302][T23428] ? do_getname+0x191/0x390 [ 1172.233349][T23428] do_sys_openat2+0x10d/0x1e0 [ 1172.233390][T23428] ? __pfx_do_sys_openat2+0x10/0x10 [ 1172.233432][T23428] ? __fget_files+0x21f/0x3d0 [ 1172.233468][T23428] __x64_sys_openat+0x12d/0x210 [ 1172.233509][T23428] ? __pfx___x64_sys_openat+0x10/0x10 [ 1172.233556][T23428] ? rcu_is_watching+0x12/0xc0 [ 1172.233591][T23428] do_syscall_64+0x10b/0xf80 [ 1172.233623][T23428] ? clear_bhb_loop+0x40/0x90 [ 1172.233654][T23428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.233681][T23428] RIP: 0033:0x7f1b0179cdd9 [ 1172.233701][T23428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.233727][T23428] RSP: 002b:00007f1b02716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1172.233752][T23428] RAX: ffffffffffffffda RBX: 00007f1b01a16090 RCX: 00007f1b0179cdd9 [ 1172.233769][T23428] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1172.233800][T23428] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1172.233816][T23428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.233832][T23428] R13: 00007f1b01a16128 R14: 00007f1b01a16090 R15: 00007ffdb5e26dc8 [ 1172.233863][T23428] [ 1173.605241][T23445] FAULT_INJECTION: forcing a failure. [ 1173.605241][T23445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1173.703191][T23445] CPU: 0 UID: 0 PID: 23445 Comm: syz.3.3633 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.703233][T23445] Tainted: [L]=SOFTLOCKUP [ 1173.703242][T23445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1173.703256][T23445] Call Trace: [ 1173.703264][T23445] [ 1173.703273][T23445] dump_stack_lvl+0x100/0x190 [ 1173.703303][T23445] should_fail_ex.cold+0x5/0xa [ 1173.703329][T23445] ? prepare_alloc_pages+0x16d/0x5f0 [ 1173.703362][T23445] should_fail_alloc_page+0xeb/0x140 [ 1173.703392][T23445] prepare_alloc_pages+0x1f0/0x5f0 [ 1173.703421][T23445] ? ima_match_policy+0x8c4/0x2350 [ 1173.703450][T23445] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1173.703507][T23445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1173.703547][T23445] ? __pfx___might_resched+0x10/0x10 [ 1173.703575][T23445] ? find_held_lock+0x2b/0x80 [ 1173.703606][T23445] ? process_measurement+0x4c8/0x2350 [ 1173.703640][T23445] ? process_measurement+0x4c8/0x2350 [ 1173.703680][T23445] ? up_write+0x28c/0x4f0 [ 1173.703707][T23445] ? vma_is_special_huge+0x23f/0x2d0 [ 1173.703735][T23445] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1173.703762][T23445] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1173.703799][T23445] ? policy_nodemask+0xed/0x4f0 [ 1173.703829][T23445] alloc_pages_mpol+0x1fb/0x540 [ 1173.703858][T23445] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1173.703888][T23445] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1173.703927][T23445] alloc_pages_noprof+0x1a/0x160 [ 1173.703959][T23445] __pmd_alloc+0x3b/0x950 [ 1173.703993][T23445] __handle_mm_fault+0xa9c/0x2a00 [ 1173.704034][T23445] ? mt_find+0x45e/0x8e0 [ 1173.704069][T23445] ? __pfx___handle_mm_fault+0x10/0x10 [ 1173.704102][T23445] ? __pfx_mt_find+0x10/0x10 [ 1173.704150][T23445] ? find_vma+0xbf/0x140 [ 1173.704175][T23445] ? __pfx_find_vma+0x10/0x10 [ 1173.704209][T23445] handle_mm_fault+0x36d/0xa20 [ 1173.704251][T23445] do_user_addr_fault+0x74c/0x12f0 [ 1173.704284][T23445] ? trace_page_fault_kernel+0x7a/0x200 [ 1173.704315][T23445] exc_page_fault+0x6f/0xd0 [ 1173.704347][T23445] asm_exc_page_fault+0x26/0x30 [ 1173.704371][T23445] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1173.704411][T23445] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 1173.704435][T23445] RSP: 0018:ffffc900046afbd0 EFLAGS: 00050202 [ 1173.704455][T23445] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1173.704470][T23445] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900046afcf0 [ 1173.704485][T23445] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520008d5f9e [ 1173.704500][T23445] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1173.704514][T23445] R13: ffffc900046afcf0 R14: 0000000000000000 R15: 0000000000000114 [ 1173.704543][T23445] _copy_from_user+0x98/0xd0 [ 1173.704584][T23445] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1173.704621][T23445] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1173.704663][T23445] do_sock_getsockopt+0x530/0x6e0 [ 1173.704693][T23445] ? __lock_acquire+0x4a5/0x2630 [ 1173.704716][T23445] ? 0xffffffffff600000 [ 1173.704737][T23445] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1173.704767][T23445] ? find_held_lock+0x2b/0x80 [ 1173.704797][T23445] ? ksys_write+0x190/0x250 [ 1173.704826][T23445] ? 0xffffffffff600000 [ 1173.704845][T23445] ? find_held_lock+0x2b/0x80 [ 1173.704883][T23445] ? __fget_files+0x21f/0x3d0 [ 1173.704918][T23445] __sys_getsockopt+0x133/0x1d0 [ 1173.704941][T23445] ? 0xffffffffff600000 [ 1173.704960][T23445] ? __pfx_ksys_write+0x10/0x10 [ 1173.704991][T23445] ? __x64_sys_getsockopt+0xbd/0x160 [ 1173.705013][T23445] __x64_sys_getsockopt+0xbd/0x160 [ 1173.705036][T23445] ? do_syscall_64+0x90/0xf80 [ 1173.705066][T23445] ? lockdep_hardirqs_on+0x78/0x100 [ 1173.705097][T23445] do_syscall_64+0x10b/0xf80 [ 1173.705127][T23445] ? clear_bhb_loop+0x40/0x90 [ 1173.705156][T23445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.705180][T23445] RIP: 0033:0x7f035fb9cdd9 [ 1173.705198][T23445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.705225][T23445] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1173.705246][T23445] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1173.705261][T23445] RDX: 0000000000002713 RSI: 0000000000000114 RDI: 0000000000000003 [ 1173.705276][T23445] RBP: 00007f0360a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.705290][T23445] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.705306][T23445] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1173.705326][T23445] ? 0xffffffffff600000 [ 1173.705352][T23445] [ 1175.911655][T23459] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1176.891794][T23477] FAULT_INJECTION: forcing a failure. [ 1176.891794][T23477] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.959809][T23477] CPU: 0 UID: 0 PID: 23477 Comm: syz.3.3643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.959851][T23477] Tainted: [L]=SOFTLOCKUP [ 1176.959860][T23477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1176.959877][T23477] Call Trace: [ 1176.959885][T23477] [ 1176.959895][T23477] dump_stack_lvl+0x100/0x190 [ 1176.959933][T23477] should_fail_ex.cold+0x5/0xa [ 1176.959970][T23477] should_failslab+0xc2/0x120 [ 1176.960000][T23477] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1176.960042][T23477] ? alloc_empty_file+0x5b/0x1c0 [ 1176.960080][T23477] ? __pfx_stack_trace_save+0x10/0x10 [ 1176.960122][T23477] alloc_empty_file+0x5b/0x1c0 [ 1176.960161][T23477] path_openat+0xe8/0x31a0 [ 1176.960191][T23477] ? kasan_save_stack+0x3f/0x50 [ 1176.960215][T23477] ? kasan_save_stack+0x30/0x50 [ 1176.960238][T23477] ? kasan_save_track+0x14/0x30 [ 1176.960261][T23477] ? __kasan_slab_alloc+0x89/0x90 [ 1176.960287][T23477] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1176.960328][T23477] ? do_getname+0x35/0x390 [ 1176.960364][T23477] ? do_sys_openat2+0xc5/0x1e0 [ 1176.960403][T23477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.960433][T23477] ? __pfx_path_openat+0x10/0x10 [ 1176.960476][T23477] do_file_open+0x20e/0x430 [ 1176.960510][T23477] ? __pfx_do_file_open+0x10/0x10 [ 1176.960562][T23477] ? alloc_fd+0x476/0x790 [ 1176.960595][T23477] ? do_getname+0x191/0x390 [ 1176.960635][T23477] do_sys_openat2+0x10d/0x1e0 [ 1176.960675][T23477] ? __pfx_do_sys_openat2+0x10/0x10 [ 1176.960725][T23477] __x64_sys_openat+0x12d/0x210 [ 1176.960767][T23477] ? __pfx___x64_sys_openat+0x10/0x10 [ 1176.960806][T23477] ? ksys_write+0x1ac/0x250 [ 1176.960839][T23477] ? rcu_is_watching+0x12/0xc0 [ 1176.960873][T23477] do_syscall_64+0x10b/0xf80 [ 1176.960912][T23477] ? clear_bhb_loop+0x40/0x90 [ 1176.960943][T23477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.960969][T23477] RIP: 0033:0x7f035fb9cdd9 [ 1176.960989][T23477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.961015][T23477] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1176.961039][T23477] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1176.961057][T23477] RDX: 000000000000a140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1176.961074][T23477] RBP: 00007f035fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1176.961089][T23477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.961105][T23477] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1176.961136][T23477] [ 1177.776721][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.793322][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.802320][ T30] audit: type=1800 audit(4294967577.339:58): pid=23489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3644" name="members" dev="configfs" ino=102765 res=0 errno=0 [ 1178.242900][T23471] Process accounting paused [ 1179.228071][T23510] FAULT_INJECTION: forcing a failure. [ 1179.228071][T23510] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.260721][T23510] CPU: 0 UID: 0 PID: 23510 Comm: syz.3.3651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.260763][T23510] Tainted: [L]=SOFTLOCKUP [ 1179.260773][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.260789][T23510] Call Trace: [ 1179.260798][T23510] [ 1179.260808][T23510] dump_stack_lvl+0x100/0x190 [ 1179.260843][T23510] should_fail_ex.cold+0x5/0xa [ 1179.260881][T23510] should_failslab+0xc2/0x120 [ 1179.260911][T23510] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1179.260953][T23510] ? do_epoll_ctl+0x2434/0x36a0 [ 1179.261000][T23510] do_epoll_ctl+0x2434/0x36a0 [ 1179.261046][T23510] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1179.261080][T23510] ? find_held_lock+0x2b/0x80 [ 1179.261113][T23510] ? __might_fault+0xc5/0x140 [ 1179.261152][T23510] ? __might_fault+0xc5/0x140 [ 1179.261203][T23510] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1179.261237][T23510] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1179.261274][T23510] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1179.261313][T23510] ? rcu_is_watching+0x12/0xc0 [ 1179.261348][T23510] do_syscall_64+0x10b/0xf80 [ 1179.261381][T23510] ? clear_bhb_loop+0x40/0x90 [ 1179.261412][T23510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.261439][T23510] RIP: 0033:0x7f035fb9cdd9 [ 1179.261459][T23510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.261486][T23510] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1179.261510][T23510] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1179.261528][T23510] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1179.261551][T23510] RBP: 00007f035fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1179.261567][T23510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.261583][T23510] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1179.261622][T23510] [ 1179.510123][T23513] FAULT_INJECTION: forcing a failure. [ 1179.510123][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.522886][T23513] CPU: 0 UID: 0 PID: 23513 Comm: syz.3.3652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.522922][T23513] Tainted: [L]=SOFTLOCKUP [ 1179.522931][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.522945][T23513] Call Trace: [ 1179.522958][T23513] [ 1179.522968][T23513] dump_stack_lvl+0x100/0x190 [ 1179.522999][T23513] should_fail_ex.cold+0x5/0xa [ 1179.523030][T23513] should_failslab+0xc2/0x120 [ 1179.523058][T23513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1179.523096][T23513] ? __pmd_alloc+0xbf/0x950 [ 1179.523132][T23513] __pmd_alloc+0xbf/0x950 [ 1179.523165][T23513] __handle_mm_fault+0xa9c/0x2a00 [ 1179.523206][T23513] ? mt_find+0x45e/0x8e0 [ 1179.523240][T23513] ? __pfx___handle_mm_fault+0x10/0x10 [ 1179.523274][T23513] ? __pfx_mt_find+0x10/0x10 [ 1179.523322][T23513] ? find_vma+0xbf/0x140 [ 1179.523347][T23513] ? __pfx_find_vma+0x10/0x10 [ 1179.523376][T23513] handle_mm_fault+0x36d/0xa20 [ 1179.523417][T23513] do_user_addr_fault+0x74c/0x12f0 [ 1179.523451][T23513] ? trace_page_fault_kernel+0x7a/0x200 [ 1179.523482][T23513] exc_page_fault+0x6f/0xd0 [ 1179.523513][T23513] asm_exc_page_fault+0x26/0x30 [ 1179.523537][T23513] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1179.523583][T23513] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 1179.523607][T23513] RSP: 0018:ffffc90005397bd0 EFLAGS: 00050202 [ 1179.523626][T23513] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1179.523641][T23513] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005397cf0 [ 1179.523665][T23513] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000a72f9e [ 1179.523681][T23513] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1179.523696][T23513] R13: ffffc90005397cf0 R14: 0000000000000000 R15: 0000000000000114 [ 1179.523725][T23513] _copy_from_user+0x98/0xd0 [ 1179.523768][T23513] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1179.523805][T23513] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1179.523849][T23513] do_sock_getsockopt+0x530/0x6e0 [ 1179.523879][T23513] ? __lock_acquire+0x4a5/0x2630 [ 1179.523904][T23513] ? 0xffffffffff600000 [ 1179.523924][T23513] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1179.523954][T23513] ? find_held_lock+0x2b/0x80 [ 1179.523985][T23513] ? ksys_write+0x190/0x250 [ 1179.524015][T23513] ? 0xffffffffff600000 [ 1179.524034][T23513] ? find_held_lock+0x2b/0x80 [ 1179.524072][T23513] ? __fget_files+0x21f/0x3d0 [ 1179.524107][T23513] __sys_getsockopt+0x133/0x1d0 [ 1179.524131][T23513] ? 0xffffffffff600000 [ 1179.524150][T23513] ? __pfx_ksys_write+0x10/0x10 [ 1179.524181][T23513] ? __x64_sys_getsockopt+0xbd/0x160 [ 1179.524204][T23513] __x64_sys_getsockopt+0xbd/0x160 [ 1179.524227][T23513] ? do_syscall_64+0x90/0xf80 [ 1179.524263][T23513] ? lockdep_hardirqs_on+0x78/0x100 [ 1179.524293][T23513] do_syscall_64+0x10b/0xf80 [ 1179.524323][T23513] ? clear_bhb_loop+0x40/0x90 [ 1179.524351][T23513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.524375][T23513] RIP: 0033:0x7f035fb9cdd9 [ 1179.524393][T23513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.524416][T23513] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1179.524437][T23513] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1179.524452][T23513] RDX: 0000000000002713 RSI: 0000000000000114 RDI: 0000000000000003 [ 1179.524467][T23513] RBP: 00007f0360a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.524481][T23513] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.524496][T23513] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1179.524516][T23513] ? 0xffffffffff600000 [ 1179.524542][T23513] [ 1180.037942][T23495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1180.044086][T23495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1180.050794][T23495] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1180.067351][T23495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1180.074083][T23495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1180.082424][T23495] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1180.111744][T23495] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1180.425197][T23522] futex_wake_op: syz.2.3656 tries to shift op by -2048; fix this program [ 1180.492803][T23522] futex_wake_op: syz.2.3656 tries to shift op by -2048; fix this program [ 1180.534177][ T30] audit: type=1800 audit(4294967580.098:59): pid=23528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3654" name="members" dev="configfs" ino=102951 res=0 errno=0 [ 1180.676233][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 1180.828095][T23536] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input13 [ 1180.905758][T19853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.025976][T23556] random: crng reseeded on system resumption [ 1182.122044][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 1182.128320][T22330] Bluetooth: hci1: command 0x0c1a tx timeout [ 1182.134612][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 1182.456933][T23561] FAULT_INJECTION: forcing a failure. [ 1182.456933][T23561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.549201][T23561] CPU: 0 UID: 0 PID: 23561 Comm: syz.2.3663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.549240][T23561] Tainted: [L]=SOFTLOCKUP [ 1182.549249][T23561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.549264][T23561] Call Trace: [ 1182.549272][T23561] [ 1182.549282][T23561] dump_stack_lvl+0x100/0x190 [ 1182.549312][T23561] should_fail_ex.cold+0x5/0xa [ 1182.549339][T23561] ? prepare_alloc_pages+0x16d/0x5f0 [ 1182.549372][T23561] should_fail_alloc_page+0xeb/0x140 [ 1182.549407][T23561] prepare_alloc_pages+0x1f0/0x5f0 [ 1182.549442][T23561] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1182.549484][T23561] ? stack_trace_save+0x8e/0xc0 [ 1182.549518][T23561] ? __pfx_stack_trace_save+0x10/0x10 [ 1182.549549][T23561] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1182.549589][T23561] ? stack_depot_save_flags+0x27/0x9d0 [ 1182.549622][T23561] ? kasan_save_stack+0x3f/0x50 [ 1182.549643][T23561] ? kasan_save_stack+0x30/0x50 [ 1182.549664][T23561] ? kasan_save_track+0x14/0x30 [ 1182.549686][T23561] ? __kasan_slab_alloc+0x89/0x90 [ 1182.549709][T23561] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1182.549748][T23561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1182.549787][T23561] ? do_user_addr_fault+0x74c/0x12f0 [ 1182.549815][T23561] ? exc_page_fault+0x6f/0xd0 [ 1182.549843][T23561] ? asm_exc_page_fault+0x26/0x30 [ 1182.549867][T23561] ? _copy_from_user+0x98/0xd0 [ 1182.549905][T23561] ? do_sock_getsockopt+0x530/0x6e0 [ 1182.549935][T23561] ? __sys_getsockopt+0x133/0x1d0 [ 1182.549958][T23561] ? __x64_sys_getsockopt+0xbd/0x160 [ 1182.549982][T23561] ? do_syscall_64+0x10b/0xf80 [ 1182.550012][T23561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.550046][T23561] ? __lock_acquire+0x4a5/0x2630 [ 1182.550071][T23561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1182.550109][T23561] ? policy_nodemask+0xed/0x4f0 [ 1182.550139][T23561] alloc_pages_mpol+0x1fb/0x540 [ 1182.550169][T23561] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1182.550197][T23561] ? __thp_vma_allowable_orders+0x1d9/0xe90 [ 1182.550232][T23561] ? do_raw_spin_lock+0x128/0x260 [ 1182.550263][T23561] alloc_pages_noprof+0x1a/0x160 [ 1182.550297][T23561] pte_alloc_one+0x1c/0x3d0 [ 1182.550330][T23561] do_fault+0x86c/0x1750 [ 1182.550360][T23561] ? __pmd_alloc+0x3fb/0x950 [ 1182.550399][T23561] __handle_mm_fault+0x187d/0x2a00 [ 1182.550440][T23561] ? mt_find+0x45e/0x8e0 [ 1182.550474][T23561] ? __pfx___handle_mm_fault+0x10/0x10 [ 1182.550509][T23561] ? __pfx_mt_find+0x10/0x10 [ 1182.550556][T23561] ? find_vma+0xbf/0x140 [ 1182.550581][T23561] ? __pfx_find_vma+0x10/0x10 [ 1182.550610][T23561] handle_mm_fault+0x36d/0xa20 [ 1182.550651][T23561] do_user_addr_fault+0x74c/0x12f0 [ 1182.550684][T23561] ? trace_page_fault_kernel+0x7a/0x200 [ 1182.550716][T23561] exc_page_fault+0x6f/0xd0 [ 1182.550747][T23561] asm_exc_page_fault+0x26/0x30 [ 1182.550770][T23561] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1182.550810][T23561] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 1182.550835][T23561] RSP: 0018:ffffc90003407bd0 EFLAGS: 00050202 [ 1182.550854][T23561] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1182.550869][T23561] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003407cf0 [ 1182.550885][T23561] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000680f9e [ 1182.550899][T23561] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1182.550913][T23561] R13: ffffc90003407cf0 R14: 0000000000000000 R15: 0000000000000114 [ 1182.550942][T23561] _copy_from_user+0x98/0xd0 [ 1182.550981][T23561] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1182.551016][T23561] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1182.551059][T23561] do_sock_getsockopt+0x530/0x6e0 [ 1182.551089][T23561] ? __lock_acquire+0x4a5/0x2630 [ 1182.551112][T23561] ? 0xffffffffff600000 [ 1182.551131][T23561] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1182.551162][T23561] ? find_held_lock+0x2b/0x80 [ 1182.551192][T23561] ? ksys_write+0x190/0x250 [ 1182.551222][T23561] ? 0xffffffffff600000 [ 1182.551242][T23561] ? find_held_lock+0x2b/0x80 [ 1182.551299][T23561] ? __fget_files+0x21f/0x3d0 [ 1182.551333][T23561] __sys_getsockopt+0x133/0x1d0 [ 1182.551358][T23561] ? 0xffffffffff600000 [ 1182.551376][T23561] ? __pfx_ksys_write+0x10/0x10 [ 1182.551412][T23561] ? __x64_sys_getsockopt+0xbd/0x160 [ 1182.551435][T23561] __x64_sys_getsockopt+0xbd/0x160 [ 1182.551458][T23561] ? do_syscall_64+0x90/0xf80 [ 1182.551488][T23561] ? lockdep_hardirqs_on+0x78/0x100 [ 1182.551525][T23561] do_syscall_64+0x10b/0xf80 [ 1182.551554][T23561] ? clear_bhb_loop+0x40/0x90 [ 1182.551584][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.551608][T23561] RIP: 0033:0x7fa123d9cdd9 [ 1182.551626][T23561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.551648][T23561] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1182.551670][T23561] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1182.551685][T23561] RDX: 0000000000002713 RSI: 0000000000000114 RDI: 0000000000000003 [ 1182.551700][T23561] RBP: 00007fa124c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.551715][T23561] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.551730][T23561] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1182.551750][T23561] ? 0xffffffffff600000 [ 1182.551776][T23561] [ 1183.633907][T23571] FAULT_INJECTION: forcing a failure. [ 1183.633907][T23571] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.647463][T23571] CPU: 0 UID: 0 PID: 23571 Comm: syz.1.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.647503][T23571] Tainted: [L]=SOFTLOCKUP [ 1183.647512][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.647528][T23571] Call Trace: [ 1183.647537][T23571] [ 1183.647546][T23571] dump_stack_lvl+0x100/0x190 [ 1183.647583][T23571] should_fail_ex.cold+0x5/0xa [ 1183.647615][T23571] should_failslab+0xc2/0x120 [ 1183.647644][T23571] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1183.647686][T23571] ? do_epoll_ctl+0x2434/0x36a0 [ 1183.647727][T23571] do_epoll_ctl+0x2434/0x36a0 [ 1183.647773][T23571] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1183.647806][T23571] ? find_held_lock+0x2b/0x80 [ 1183.647839][T23571] ? __might_fault+0xc5/0x140 [ 1183.647878][T23571] ? __might_fault+0xc5/0x140 [ 1183.647928][T23571] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1183.647962][T23571] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1183.647998][T23571] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1183.648033][T23571] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1183.648074][T23571] ? syscall_user_dispatch+0x76/0x130 [ 1183.648107][T23571] do_syscall_64+0x10b/0xf80 [ 1183.648140][T23571] ? clear_bhb_loop+0x40/0x90 [ 1183.648171][T23571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.648198][T23571] RIP: 0033:0x7f1b0179cdd9 [ 1183.648219][T23571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.648244][T23571] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1183.648268][T23571] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1183.648286][T23571] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1183.648302][T23571] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1183.648323][T23571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.648339][T23571] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1183.648371][T23571] [ 1183.924916][T16003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1183.938911][T16003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1183.949061][T16003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1183.961784][T16003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1183.970216][T16003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.160917][ T30] audit: type=1800 audit(4294967583.726:60): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3668" name="members" dev="configfs" ino=103229 res=0 errno=0 [ 1184.202913][T16003] Bluetooth: hci4: command 0x0c1a tx timeout [ 1184.209187][T16003] Bluetooth: hci0: command 0x0c1a tx timeout [ 1184.415581][T19853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.683278][T19853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.937146][T19853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.614593][T23607] random: crng reseeded on system resumption [ 1186.162239][T23620] FAULT_INJECTION: forcing a failure. [ 1186.162239][T23620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.200568][T16003] Bluetooth: hci1: command tx timeout [ 1186.261666][T23620] CPU: 0 UID: 0 PID: 23620 Comm: syz.3.3677 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.261701][T23620] Tainted: [L]=SOFTLOCKUP [ 1186.261710][T23620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.261727][T23620] Call Trace: [ 1186.261735][T23620] [ 1186.261744][T23620] dump_stack_lvl+0x100/0x190 [ 1186.261773][T23620] should_fail_ex.cold+0x5/0xa [ 1186.261804][T23620] _copy_from_user+0x2e/0xd0 [ 1186.261842][T23620] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1186.261876][T23620] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1186.261917][T23620] do_sock_getsockopt+0x530/0x6e0 [ 1186.261945][T23620] ? __lock_acquire+0x4a5/0x2630 [ 1186.261968][T23620] ? 0xffffffffff600000 [ 1186.261987][T23620] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1186.262016][T23620] ? find_held_lock+0x2b/0x80 [ 1186.262045][T23620] ? ksys_write+0x190/0x250 [ 1186.262079][T23620] ? 0xffffffffff600000 [ 1186.262098][T23620] ? find_held_lock+0x2b/0x80 [ 1186.262134][T23620] ? __fget_files+0x21f/0x3d0 [ 1186.262167][T23620] __sys_getsockopt+0x133/0x1d0 [ 1186.262190][T23620] ? 0xffffffffff600000 [ 1186.262207][T23620] ? __pfx_ksys_write+0x10/0x10 [ 1186.262237][T23620] ? __x64_sys_getsockopt+0xbd/0x160 [ 1186.262259][T23620] __x64_sys_getsockopt+0xbd/0x160 [ 1186.262301][T23620] ? do_syscall_64+0x90/0xf80 [ 1186.262332][T23620] ? lockdep_hardirqs_on+0x78/0x100 [ 1186.262393][T23620] do_syscall_64+0x10b/0xf80 [ 1186.262423][T23620] ? clear_bhb_loop+0x40/0x90 [ 1186.262452][T23620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.262477][T23620] RIP: 0033:0x7f035fb9cdd9 [ 1186.262496][T23620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.262520][T23620] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1186.262542][T23620] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1186.262559][T23620] RDX: 0000000000000002 RSI: 0000040000000113 RDI: 0000000000000003 [ 1186.262574][T23620] RBP: 00007f0360a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.262589][T23620] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.262604][T23620] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1186.262624][T23620] ? 0xffffffffff600000 [ 1186.262650][T23620] [ 1186.720924][T23612] ima: policy update failed [ 1186.797175][T16003] Bluetooth: hci0: command 0x0c1a tx timeout [ 1186.845670][ T30] audit: type=1807 audit(4294967586.235:61): UNKNOWN=nl802ÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 1186.846006][ T30] audit: type=1802 audit(4294967586.245:62): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3676" res=0 errno=0 [ 1187.431266][T19853] bond0: left allmulticast mode [ 1187.439111][T19853] bond_slave_0: left allmulticast mode [ 1187.462714][T19853] bond_slave_1: left allmulticast mode [ 1187.505455][T23640] FAULT_INJECTION: forcing a failure. [ 1187.505455][T23640] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.537173][T19853] bond0: left promiscuous mode [ 1187.557964][T19853] bond_slave_0: left promiscuous mode [ 1187.576091][ T30] audit: type=1802 audit(4294967586.285:63): pid=23612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3676" res=0 errno=0 [ 1187.597865][T19853] bond_slave_1: left promiscuous mode [ 1187.608186][T23640] CPU: 0 UID: 0 PID: 23640 Comm: syz.2.3682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.608236][T23640] Tainted: [L]=SOFTLOCKUP [ 1187.608245][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1187.608261][T23640] Call Trace: [ 1187.608270][T23640] [ 1187.608279][T23640] dump_stack_lvl+0x100/0x190 [ 1187.608310][T23640] should_fail_ex.cold+0x5/0xa [ 1187.608343][T23640] should_failslab+0xc2/0x120 [ 1187.608372][T23640] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1187.608412][T23640] ? do_epoll_ctl+0x2434/0x36a0 [ 1187.608451][T23640] do_epoll_ctl+0x2434/0x36a0 [ 1187.608495][T23640] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1187.608528][T23640] ? find_held_lock+0x2b/0x80 [ 1187.608560][T23640] ? __might_fault+0xc5/0x140 [ 1187.608597][T23640] ? __might_fault+0xc5/0x140 [ 1187.608645][T23640] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1187.608678][T23640] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1187.608714][T23640] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1187.608747][T23640] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1187.608787][T23640] ? syscall_user_dispatch+0x76/0x130 [ 1187.608818][T23640] do_syscall_64+0x10b/0xf80 [ 1187.608851][T23640] ? clear_bhb_loop+0x40/0x90 [ 1187.608880][T23640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.608906][T23640] RIP: 0033:0x7fa123d9cdd9 [ 1187.608925][T23640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.608955][T23640] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1187.608978][T23640] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1187.609000][T23640] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1187.609015][T23640] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1187.609030][T23640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.609046][T23640] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1187.609076][T23640] [ 1187.855610][T19853] bridge0: port 3(bond0) entered disabled state [ 1187.928736][T19853] bridge_slave_1: left allmulticast mode [ 1187.934525][T19853] bridge_slave_1: left promiscuous mode [ 1187.940266][T19853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.038621][T19853] bridge_slave_0: left allmulticast mode [ 1188.059203][T19853] bridge_slave_0: left promiscuous mode [ 1188.079321][T19853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.261705][T23655] netlink: 74 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1188.283688][T23559] Bluetooth: hci1: command tx timeout [ 1188.652548][T19853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.689436][T19853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.724512][T19853] bond0 (unregistering): Released all slaves [ 1188.794750][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1188.909364][T19853] ovs_: left promiscuous mode [ 1189.826047][T23684] FAULT_INJECTION: forcing a failure. [ 1189.826047][T23684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1189.917961][T23684] CPU: 0 UID: 0 PID: 23684 Comm: syz.3.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 1189.917998][T23684] Tainted: [L]=SOFTLOCKUP [ 1189.918007][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1189.918021][T23684] Call Trace: [ 1189.918029][T23684] [ 1189.918038][T23684] dump_stack_lvl+0x100/0x190 [ 1189.918069][T23684] should_fail_ex.cold+0x5/0xa [ 1189.918095][T23684] ? prepare_alloc_pages+0x16d/0x5f0 [ 1189.918127][T23684] should_fail_alloc_page+0xeb/0x140 [ 1189.918176][T23684] prepare_alloc_pages+0x1f0/0x5f0 [ 1189.918207][T23684] ? ima_match_policy+0x8c4/0x2350 [ 1189.918236][T23684] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1189.918294][T23684] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1189.918336][T23684] ? __pfx___might_resched+0x10/0x10 [ 1189.918365][T23684] ? find_held_lock+0x2b/0x80 [ 1189.918396][T23684] ? process_measurement+0x4c8/0x2350 [ 1189.918431][T23684] ? process_measurement+0x4c8/0x2350 [ 1189.918471][T23684] ? up_write+0x28c/0x4f0 [ 1189.918499][T23684] ? vma_is_special_huge+0x23f/0x2d0 [ 1189.918527][T23684] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1189.918556][T23684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1189.918594][T23684] ? policy_nodemask+0xed/0x4f0 [ 1189.918624][T23684] alloc_pages_mpol+0x1fb/0x540 [ 1189.918654][T23684] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1189.918684][T23684] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1189.918721][T23684] alloc_pages_noprof+0x1a/0x160 [ 1189.918761][T23684] __pmd_alloc+0x3b/0x950 [ 1189.918794][T23684] __handle_mm_fault+0xa9c/0x2a00 [ 1189.918836][T23684] ? mt_find+0x45e/0x8e0 [ 1189.918876][T23684] ? __pfx___handle_mm_fault+0x10/0x10 [ 1189.918909][T23684] ? __pfx_mt_find+0x10/0x10 [ 1189.918957][T23684] ? find_vma+0xbf/0x140 [ 1189.918982][T23684] ? __pfx_find_vma+0x10/0x10 [ 1189.919010][T23684] handle_mm_fault+0x36d/0xa20 [ 1189.919051][T23684] do_user_addr_fault+0x74c/0x12f0 [ 1189.919084][T23684] ? trace_page_fault_kernel+0x7a/0x200 [ 1189.919115][T23684] exc_page_fault+0x6f/0xd0 [ 1189.919147][T23684] asm_exc_page_fault+0x26/0x30 [ 1189.919171][T23684] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1189.919224][T23684] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 1189.919247][T23684] RSP: 0018:ffffc90003adfbd0 EFLAGS: 00050202 [ 1189.919266][T23684] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1189.919281][T23684] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003adfcf0 [ 1189.919295][T23684] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200075bf9e [ 1189.919310][T23684] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1189.919324][T23684] R13: ffffc90003adfcf0 R14: 0000000000000000 R15: 0000000000000113 [ 1189.919353][T23684] _copy_from_user+0x98/0xd0 [ 1189.919392][T23684] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1189.919427][T23684] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1189.919468][T23684] do_sock_getsockopt+0x530/0x6e0 [ 1189.919497][T23684] ? __lock_acquire+0x4a5/0x2630 [ 1189.919519][T23684] ? 0xffffffffff600000 [ 1189.919539][T23684] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1189.919568][T23684] ? find_held_lock+0x2b/0x80 [ 1189.919597][T23684] ? ksys_write+0x190/0x250 [ 1189.919626][T23684] ? 0xffffffffff600000 [ 1189.919646][T23684] ? find_held_lock+0x2b/0x80 [ 1189.919683][T23684] ? __fget_files+0x21f/0x3d0 [ 1189.919717][T23684] __sys_getsockopt+0x133/0x1d0 [ 1189.919786][T23684] ? 0xffffffffff600000 [ 1189.919804][T23684] ? __pfx_ksys_write+0x10/0x10 [ 1189.919835][T23684] ? __x64_sys_getsockopt+0xbd/0x160 [ 1189.919859][T23684] __x64_sys_getsockopt+0xbd/0x160 [ 1189.919881][T23684] ? do_syscall_64+0x90/0xf80 [ 1189.919912][T23684] ? lockdep_hardirqs_on+0x78/0x100 [ 1189.919942][T23684] do_syscall_64+0x10b/0xf80 [ 1189.919971][T23684] ? clear_bhb_loop+0x40/0x90 [ 1189.920000][T23684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.920024][T23684] RIP: 0033:0x7f035fb9cdd9 [ 1189.920041][T23684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.920064][T23684] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1189.920085][T23684] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1189.920101][T23684] RDX: 0000000000000002 RSI: 0000040000000113 RDI: 0000000000000003 [ 1189.920116][T23684] RBP: 00007f0360a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.920130][T23684] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.920145][T23684] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1189.920165][T23684] ? 0xffffffffff600000 [ 1189.920191][T23684] [ 1190.871649][T23559] Bluetooth: hci1: command tx timeout [ 1191.297539][T23709] blktrace: Concurrent blktraces are not allowed on loop15 [ 1192.141802][T23572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.150806][T23572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.170952][T23572] bridge_slave_0: entered allmulticast mode [ 1192.198544][T23572] bridge_slave_0: entered promiscuous mode [ 1192.241479][T23572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.270455][T23572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.296511][T23572] bridge_slave_1: entered allmulticast mode [ 1192.349678][T23572] bridge_slave_1: entered promiscuous mode [ 1192.397890][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1192.525580][T19853] hsr_slave_0: left promiscuous mode [ 1192.541213][T19853] hsr_slave_1: left promiscuous mode [ 1192.555931][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.581879][T19853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.609071][T23718] Process accounting resumed [ 1192.622968][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.643603][T19853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.710915][T19853] veth1_macvtap: left promiscuous mode [ 1192.731865][T19853] veth0_macvtap: left promiscuous mode [ 1192.755125][T19853] veth1_vlan: left promiscuous mode [ 1192.768604][T19853] veth0_vlan: left promiscuous mode [ 1192.924098][T23559] Bluetooth: hci1: command tx timeout [ 1193.683885][T19853] team0 (unregistering): Port device team_slave_1 removed [ 1193.742432][T19853] team0 (unregistering): Port device team_slave_0 removed [ 1194.301156][T23572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.372906][T23572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.504512][T23572] team0: Port device team_slave_0 added [ 1194.548584][T23572] team0: Port device team_slave_1 added [ 1194.735686][T23572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.771064][T23572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.870766][T23572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.965415][T23572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.991622][T23572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.107876][T23572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.220422][T19853] bridge_slave_1: left allmulticast mode [ 1195.237809][T19853] bridge_slave_1: left promiscuous mode [ 1195.262945][T19853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.288679][T19853] bridge_slave_0: left allmulticast mode [ 1195.301683][T19853] bridge_slave_0: left promiscuous mode [ 1195.316270][T19853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.822942][T19853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.841062][T19853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.852538][T19853] bond0 (unregistering): Released all slaves [ 1195.932862][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1196.162545][T23768] random: crng reseeded on system resumption [ 1196.232573][T23768] FAULT_INJECTION: forcing a failure. [ 1196.232573][T23768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1196.289144][T23572] hsr_slave_0: entered promiscuous mode [ 1196.307996][T23768] CPU: 0 UID: 0 PID: 23768 Comm: syz.2.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.308036][T23768] Tainted: [L]=SOFTLOCKUP [ 1196.308046][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.308062][T23768] Call Trace: [ 1196.308071][T23768] [ 1196.308080][T23768] dump_stack_lvl+0x100/0x190 [ 1196.308113][T23768] should_fail_ex.cold+0x5/0xa [ 1196.308142][T23768] ? prepare_alloc_pages+0x16d/0x5f0 [ 1196.308177][T23768] should_fail_alloc_page+0xeb/0x140 [ 1196.308210][T23768] prepare_alloc_pages+0x1f0/0x5f0 [ 1196.308248][T23768] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1196.308295][T23768] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1196.308347][T23768] ? stack_trace_save+0x8e/0xc0 [ 1196.308382][T23768] ? __pfx_stack_trace_save+0x10/0x10 [ 1196.308417][T23768] ? arch_stack_walk+0xa6/0xf0 [ 1196.308450][T23768] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1196.308504][T23768] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1196.308550][T23768] ? kasan_save_stack+0x30/0x50 [ 1196.308573][T23768] ? kasan_save_track+0x14/0x30 [ 1196.308597][T23768] ? __kasan_kmalloc+0xaa/0xb0 [ 1196.308619][T23768] ? memory_bm_create+0x14d/0xba0 [ 1196.308658][T23768] ? do_syscall_64+0x10b/0xf80 [ 1196.308690][T23768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.308721][T23768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1196.308763][T23768] ? policy_nodemask+0xed/0x4f0 [ 1196.308795][T23768] alloc_pages_mpol+0x1fb/0x540 [ 1196.308827][T23768] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1196.308858][T23768] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1196.308893][T23768] alloc_pages_noprof+0x1a/0x160 [ 1196.308927][T23768] get_zeroed_page_noprof+0x18/0xb0 [ 1196.308959][T23768] get_image_page+0x18/0x1a0 [ 1196.308991][T23768] alloc_rtree_node+0x3c/0xb0 [ 1196.309024][T23768] memory_bm_create+0x65e/0xba0 [ 1196.309070][T23768] create_basic_memory_bitmaps+0x10b/0x350 [ 1196.309111][T23768] snapshot_open+0x230/0x2a0 [ 1196.309150][T23768] ? __pfx_snapshot_open+0x10/0x10 [ 1196.309189][T23768] misc_open+0x26d/0x450 [ 1196.309221][T23768] ? __pfx_misc_open+0x10/0x10 [ 1196.309251][T23768] chrdev_open+0x234/0x6a0 [ 1196.309283][T23768] ? __pfx_apparmor_file_open+0x10/0x10 [ 1196.309324][T23768] ? __pfx_chrdev_open+0x10/0x10 [ 1196.309358][T23768] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1196.309400][T23768] do_dentry_open+0x6d8/0x1660 [ 1196.309430][T23768] ? __pfx_chrdev_open+0x10/0x10 [ 1196.309475][T23768] vfs_open+0x82/0x3f0 [ 1196.309517][T23768] path_openat+0x208c/0x31a0 [ 1196.309559][T23768] ? __pfx_path_openat+0x10/0x10 [ 1196.309602][T23768] do_file_open+0x20e/0x430 [ 1196.309637][T23768] ? __pfx_do_file_open+0x10/0x10 [ 1196.309690][T23768] ? alloc_fd+0x476/0x790 [ 1196.309724][T23768] ? do_getname+0x191/0x390 [ 1196.309765][T23768] do_sys_openat2+0x10d/0x1e0 [ 1196.309804][T23768] ? __pfx_do_sys_openat2+0x10/0x10 [ 1196.309855][T23768] __x64_sys_openat+0x12d/0x210 [ 1196.309896][T23768] ? __pfx___x64_sys_openat+0x10/0x10 [ 1196.309942][T23768] ? rcu_is_watching+0x12/0xc0 [ 1196.309978][T23768] do_syscall_64+0x10b/0xf80 [ 1196.310023][T23768] ? clear_bhb_loop+0x40/0x90 [ 1196.310055][T23768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.310082][T23768] RIP: 0033:0x7fa123d9cdd9 [ 1196.310102][T23768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.310128][T23768] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1196.310153][T23768] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1196.310171][T23768] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1196.310188][T23768] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1196.310204][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.310220][T23768] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1196.310252][T23768] [ 1196.326846][T23572] hsr_slave_1: entered promiscuous mode [ 1196.327365][T23572] debugfs: 'hsr0' already exists in 'hsr' [ 1196.330085][T23572] Cannot create hsr debugfs directory [ 1196.670239][T23778] random: crng reseeded on system resumption [ 1196.713538][T23778] FAULT_INJECTION: forcing a failure. [ 1196.713538][T23778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1196.713580][T23778] CPU: 0 UID: 0 PID: 23778 Comm: syz.2.3709 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.713616][T23778] Tainted: [L]=SOFTLOCKUP [ 1196.713625][T23778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.713640][T23778] Call Trace: [ 1196.713649][T23778] [ 1196.713659][T23778] dump_stack_lvl+0x100/0x190 [ 1196.713690][T23778] should_fail_ex.cold+0x5/0xa [ 1196.713717][T23778] ? prepare_alloc_pages+0x16d/0x5f0 [ 1196.713753][T23778] should_fail_alloc_page+0xeb/0x140 [ 1196.713784][T23778] prepare_alloc_pages+0x1f0/0x5f0 [ 1196.713822][T23778] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1196.713867][T23778] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1196.713919][T23778] ? stack_trace_save+0x8e/0xc0 [ 1196.713954][T23778] ? __pfx_stack_trace_save+0x10/0x10 [ 1196.713988][T23778] ? arch_stack_walk+0xa6/0xf0 [ 1196.714021][T23778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1196.714066][T23778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1196.714117][T23778] ? kasan_save_stack+0x30/0x50 [ 1196.714144][T23778] ? kasan_save_track+0x14/0x30 [ 1196.714168][T23778] ? __kasan_kmalloc+0xaa/0xb0 [ 1196.714190][T23778] ? memory_bm_create+0x14d/0xba0 [ 1196.714228][T23778] ? do_syscall_64+0x10b/0xf80 [ 1196.714260][T23778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.714290][T23778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1196.714330][T23778] ? policy_nodemask+0xed/0x4f0 [ 1196.714362][T23778] alloc_pages_mpol+0x1fb/0x540 [ 1196.714393][T23778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1196.714424][T23778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1196.714458][T23778] alloc_pages_noprof+0x1a/0x160 [ 1196.714493][T23778] get_zeroed_page_noprof+0x18/0xb0 [ 1196.714525][T23778] get_image_page+0x18/0x1a0 [ 1196.714558][T23778] alloc_rtree_node+0x3c/0xb0 [ 1196.714591][T23778] memory_bm_create+0x65e/0xba0 [ 1196.714637][T23778] create_basic_memory_bitmaps+0x10b/0x350 [ 1196.714685][T23778] snapshot_open+0x230/0x2a0 [ 1196.714724][T23778] ? __pfx_snapshot_open+0x10/0x10 [ 1196.714764][T23778] misc_open+0x26d/0x450 [ 1196.714795][T23778] ? __pfx_misc_open+0x10/0x10 [ 1196.714825][T23778] chrdev_open+0x234/0x6a0 [ 1196.714857][T23778] ? __pfx_apparmor_file_open+0x10/0x10 [ 1196.714902][T23778] ? __pfx_chrdev_open+0x10/0x10 [ 1196.714936][T23778] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1196.714978][T23778] do_dentry_open+0x6d8/0x1660 [ 1196.715009][T23778] ? __pfx_chrdev_open+0x10/0x10 [ 1196.715048][T23778] vfs_open+0x82/0x3f0 [ 1196.715089][T23778] path_openat+0x208c/0x31a0 [ 1196.715135][T23778] ? __pfx_path_openat+0x10/0x10 [ 1196.715179][T23778] do_file_open+0x20e/0x430 [ 1196.715213][T23778] ? __pfx_do_file_open+0x10/0x10 [ 1196.715267][T23778] ? alloc_fd+0x476/0x790 [ 1196.715301][T23778] ? do_getname+0x191/0x390 [ 1196.715342][T23778] do_sys_openat2+0x10d/0x1e0 [ 1196.715382][T23778] ? __pfx_do_sys_openat2+0x10/0x10 [ 1196.715433][T23778] __x64_sys_openat+0x12d/0x210 [ 1196.715474][T23778] ? __pfx___x64_sys_openat+0x10/0x10 [ 1196.715520][T23778] ? rcu_is_watching+0x12/0xc0 [ 1196.715555][T23778] do_syscall_64+0x10b/0xf80 [ 1196.715587][T23778] ? clear_bhb_loop+0x40/0x90 [ 1196.715638][T23778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.715665][T23778] RIP: 0033:0x7fa123d9cdd9 [ 1196.715686][T23778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.715711][T23778] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1196.715735][T23778] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1196.715752][T23778] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1196.715769][T23778] RBP: 00007fa123e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1196.715786][T23778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.715801][T23778] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1196.715839][T23778] [ 1196.774151][ T30] audit: type=1800 audit(4294967596.330:64): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3708" name="members" dev="configfs" ino=104230 res=0 errno=0 [ 1197.082701][T19853] hsr_slave_0: left promiscuous mode [ 1197.087401][T19853] hsr_slave_1: left promiscuous mode [ 1197.088092][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.088113][T19853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.088740][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.088760][T19853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.122327][T19853] veth1_macvtap: left promiscuous mode [ 1197.122360][T19853] veth0_macvtap: left promiscuous mode [ 1197.122485][T19853] veth1_vlan: left promiscuous mode [ 1197.122536][T19853] veth0_vlan: left promiscuous mode [ 1198.222448][T19853] team0 (unregistering): Port device team_slave_0 removed [ 1198.353290][T23806] FAULT_INJECTION: forcing a failure. [ 1198.353290][T23806] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1198.353331][T23806] CPU: 0 UID: 0 PID: 23806 Comm: syz.2.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.353364][T23806] Tainted: [L]=SOFTLOCKUP [ 1198.353373][T23806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1198.353388][T23806] Call Trace: [ 1198.353396][T23806] [ 1198.353405][T23806] dump_stack_lvl+0x100/0x190 [ 1198.353434][T23806] should_fail_ex.cold+0x5/0xa [ 1198.353464][T23806] ? mtree_range_walk+0x72b/0xb70 [ 1198.353494][T23806] get_futex_key+0x1d2/0x1510 [ 1198.353521][T23806] ? __pfx_get_futex_key+0x10/0x10 [ 1198.353555][T23806] futex_wake+0xea/0x530 [ 1198.353586][T23806] ? __do_sys_mremap+0x97f/0x1850 [ 1198.353625][T23806] ? __pfx_futex_wake+0x10/0x10 [ 1198.353661][T23806] ? __pfx___do_sys_mremap+0x10/0x10 [ 1198.353703][T23806] do_futex+0x32b/0x350 [ 1198.353729][T23806] ? __pfx_do_futex+0x10/0x10 [ 1198.353762][T23806] __x64_sys_futex+0x34f/0x4d0 [ 1198.353792][T23806] ? __pfx___x64_sys_futex+0x10/0x10 [ 1198.353823][T23806] ? rcu_is_watching+0x12/0xc0 [ 1198.353865][T23806] do_syscall_64+0x10b/0xf80 [ 1198.353895][T23806] ? clear_bhb_loop+0x40/0x90 [ 1198.353925][T23806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.353949][T23806] RIP: 0033:0x7fa123d9cdd9 [ 1198.353972][T23806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.353996][T23806] RSP: 002b:00007fa124bea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1198.354018][T23806] RAX: ffffffffffffffda RBX: 00007fa124016278 RCX: 00007fa123d9cdd9 [ 1198.354035][T23806] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa12401627c [ 1198.354050][T23806] RBP: 00007fa124016270 R08: 0000000000000001 R09: 0000000000000000 [ 1198.354065][T23806] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.354080][T23806] R13: 00007fa124016308 R14: 00007ffc8c815220 R15: 00007ffc8c815308 [ 1198.354109][T23806] [ 1198.887526][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1200.929497][T23572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1200.932776][T23572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1200.941538][T23572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1200.954444][T23572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1200.955453][T23572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1200.963326][T23572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1200.966004][T23572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1200.981209][T23572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1201.203884][T23572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.248238][T23572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.262872][T19853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.262971][T19853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.272551][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.272629][T19855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.724875][T23572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.081084][T23882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1203.251743][T23885] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1203.477085][T23572] veth0_vlan: entered promiscuous mode [ 1203.592459][T23572] veth1_vlan: entered promiscuous mode [ 1203.794873][ T30] audit: type=1400 audit(4294967603.346:65): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23891 comm="syz.3.3720" [ 1203.866328][T23895] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1203.874967][T23572] veth0_macvtap: entered promiscuous mode [ 1203.971905][T23572] veth1_macvtap: entered promiscuous mode [ 1204.586726][T23572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.683776][T23572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.813268][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.867606][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.930277][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.998431][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.608556][T23924] binder: 23923:23924 unknown command 0 [ 1205.650421][T23924] binder: 23923:23924 ioctl c0306201 2000000000c0 returned -22 [ 1206.042423][T19853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.091863][T19853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.485668][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.563012][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.481488][T23953] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1207.508414][T23956] FAULT_INJECTION: forcing a failure. [ 1207.508414][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.584820][T23956] CPU: 0 UID: 0 PID: 23956 Comm: syz.2.3729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.584857][T23956] Tainted: [L]=SOFTLOCKUP [ 1207.584866][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.584880][T23956] Call Trace: [ 1207.584888][T23956] [ 1207.584897][T23956] dump_stack_lvl+0x100/0x190 [ 1207.584927][T23956] should_fail_ex.cold+0x5/0xa [ 1207.584958][T23956] should_failslab+0xc2/0x120 [ 1207.584985][T23956] __kvmalloc_node_noprof+0xfa/0xa00 [ 1207.585008][T23956] ? seq_read_iter+0x819/0x1270 [ 1207.585032][T23956] ? aa_file_perm+0x7e4/0x14d0 [ 1207.585061][T23956] ? aa_file_perm+0x7e4/0x14d0 [ 1207.585095][T23956] seq_read_iter+0x819/0x1270 [ 1207.585127][T23956] ? __pfx__kstrtoull+0x10/0x10 [ 1207.585163][T23956] kernfs_fop_read_iter+0x46c/0x610 [ 1207.585202][T23956] do_iter_readv_writev+0x60d/0x920 [ 1207.585229][T23956] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1207.585261][T23956] ? rw_verify_area+0xce/0x6d0 [ 1207.585289][T23956] vfs_readv+0x4d3/0x8d0 [ 1207.585320][T23956] ? __pfx_vfs_readv+0x10/0x10 [ 1207.585344][T23956] ? find_held_lock+0x2b/0x80 [ 1207.585374][T23956] ? ksys_write+0x190/0x250 [ 1207.585415][T23956] ? __fget_files+0x21f/0x3d0 [ 1207.585448][T23956] ? do_readv+0x13e/0x340 [ 1207.585470][T23956] do_readv+0x13e/0x340 [ 1207.585495][T23956] ? __pfx_do_readv+0x10/0x10 [ 1207.585520][T23956] ? rcu_is_watching+0x12/0xc0 [ 1207.585552][T23956] do_syscall_64+0x10b/0xf80 [ 1207.585582][T23956] ? clear_bhb_loop+0x40/0x90 [ 1207.585612][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.585635][T23956] RIP: 0033:0x7fa123d9cdd9 [ 1207.585653][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.585676][T23956] RSP: 002b:00007fa124c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1207.585699][T23956] RAX: ffffffffffffffda RBX: 00007fa124015fa0 RCX: 00007fa123d9cdd9 [ 1207.585715][T23956] RDX: 0000000000000006 RSI: 0000200000003080 RDI: 0000000000000003 [ 1207.585729][T23956] RBP: 00007fa124c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.585744][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.585758][T23956] R13: 00007fa124016038 R14: 00007fa124015fa0 R15: 00007ffc8c815308 [ 1207.585787][T23956] [ 1208.516366][ T30] audit: type=1800 audit(4294967608.044:66): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3730" name="members" dev="configfs" ino=105422 res=0 errno=0 [ 1208.976250][T23974] random: crng reseeded on system resumption [ 1209.152219][T23958] Process accounting resumed [ 1209.489373][T23982] FAULT_INJECTION: forcing a failure. [ 1209.489373][T23982] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.601547][T23982] CPU: 0 UID: 0 PID: 23982 Comm: syz.1.3735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.601588][T23982] Tainted: [L]=SOFTLOCKUP [ 1209.601597][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1209.601613][T23982] Call Trace: [ 1209.601621][T23982] [ 1209.601631][T23982] dump_stack_lvl+0x100/0x190 [ 1209.601675][T23982] should_fail_ex.cold+0x5/0xa [ 1209.601710][T23982] should_failslab+0xc2/0x120 [ 1209.601739][T23982] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1209.601765][T23982] ? __pfx_stack_trace_save+0x10/0x10 [ 1209.601800][T23982] ? __get_vm_area_node+0x101/0x330 [ 1209.601836][T23982] __get_vm_area_node+0x101/0x330 [ 1209.601866][T23982] ? kasan_save_stack+0x3f/0x50 [ 1209.601890][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1209.601928][T23982] __vmalloc_node_range_noprof+0x228/0x1630 [ 1209.601964][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1209.601992][T23982] ? vfs_read+0x1e4/0xb30 [ 1209.602028][T23982] ? ksys_read+0x12a/0x250 [ 1209.602052][T23982] ? do_syscall_64+0x10b/0xf80 [ 1209.602082][T23982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.602112][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1209.602147][T23982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1209.602189][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1209.602218][T23982] vmalloc_user_noprof+0x9e/0xe0 [ 1209.602248][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1209.602276][T23982] vb2_vmalloc_alloc+0x135/0x410 [ 1209.602302][T23982] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1209.602332][T23982] __vb2_queue_alloc+0x8d5/0x1160 [ 1209.602370][T23982] vb2_core_reqbufs+0x899/0xf30 [ 1209.602401][T23982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1209.602441][T23982] __vb2_init_fileio+0x32d/0x1000 [ 1209.602468][T23982] ? aa_file_perm+0x7f3/0x14d0 [ 1209.602503][T23982] __vb2_perform_fileio+0x91e/0x1380 [ 1209.602538][T23982] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1209.602565][T23982] ? __pfx___might_resched+0x10/0x10 [ 1209.602599][T23982] vb2_fop_read+0x211/0x520 [ 1209.602626][T23982] v4l2_read+0x229/0x2c0 [ 1209.602663][T23982] ? __pfx_v4l2_read+0x10/0x10 [ 1209.602701][T23982] vfs_read+0x1e4/0xb30 [ 1209.602730][T23982] ? __pfx_vfs_read+0x10/0x10 [ 1209.602753][T23982] ? find_held_lock+0x2b/0x80 [ 1209.602783][T23982] ? __fget_files+0x215/0x3d0 [ 1209.602809][T23982] ? __fget_files+0x215/0x3d0 [ 1209.602840][T23982] ? __fget_files+0x21f/0x3d0 [ 1209.602874][T23982] ksys_read+0x12a/0x250 [ 1209.602899][T23982] ? __pfx_ksys_read+0x10/0x10 [ 1209.602932][T23982] ? rcu_is_watching+0x12/0xc0 [ 1209.602964][T23982] do_syscall_64+0x10b/0xf80 [ 1209.602998][T23982] ? clear_bhb_loop+0x40/0x90 [ 1209.603026][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.603049][T23982] RIP: 0033:0x7f1b0179cdd9 [ 1209.603068][T23982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.603091][T23982] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1209.603114][T23982] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1209.603129][T23982] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 1209.603143][T23982] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1209.603158][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.603172][T23982] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1209.603201][T23982] [ 1210.261782][T23982] syz.1.3735: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1210.277330][T23982] CPU: 0 UID: 0 PID: 23982 Comm: syz.1.3735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1210.277363][T23982] Tainted: [L]=SOFTLOCKUP [ 1210.277372][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.277385][T23982] Call Trace: [ 1210.277393][T23982] [ 1210.277401][T23982] dump_stack_lvl+0x100/0x190 [ 1210.277427][T23982] warn_alloc.cold+0x95/0x1c1 [ 1210.277451][T23982] ? __pfx_warn_alloc+0x10/0x10 [ 1210.277503][T23982] ? trace_kmalloc+0xe3/0x110 [ 1210.277533][T23982] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1210.277561][T23982] ? __kasan_kmalloc+0x8a/0xb0 [ 1210.277584][T23982] ? __get_vm_area_node+0x208/0x330 [ 1210.277615][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1210.277644][T23982] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1210.277676][T23982] ? vfs_read+0x1e4/0xb30 [ 1210.277699][T23982] ? ksys_read+0x12a/0x250 [ 1210.277724][T23982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.277754][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1210.277788][T23982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1210.277838][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1210.277865][T23982] vmalloc_user_noprof+0x9e/0xe0 [ 1210.277897][T23982] ? vb2_vmalloc_alloc+0x135/0x410 [ 1210.277925][T23982] vb2_vmalloc_alloc+0x135/0x410 [ 1210.277952][T23982] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1210.277981][T23982] __vb2_queue_alloc+0x8d5/0x1160 [ 1210.278019][T23982] vb2_core_reqbufs+0x899/0xf30 [ 1210.278050][T23982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1210.278091][T23982] __vb2_init_fileio+0x32d/0x1000 [ 1210.278117][T23982] ? aa_file_perm+0x7f3/0x14d0 [ 1210.278153][T23982] __vb2_perform_fileio+0x91e/0x1380 [ 1210.278187][T23982] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1210.278214][T23982] ? __pfx___might_resched+0x10/0x10 [ 1210.278247][T23982] vb2_fop_read+0x211/0x520 [ 1210.278275][T23982] v4l2_read+0x229/0x2c0 [ 1210.278311][T23982] ? __pfx_v4l2_read+0x10/0x10 [ 1210.278349][T23982] vfs_read+0x1e4/0xb30 [ 1210.278381][T23982] ? __pfx_vfs_read+0x10/0x10 [ 1210.278405][T23982] ? find_held_lock+0x2b/0x80 [ 1210.278434][T23982] ? __fget_files+0x215/0x3d0 [ 1210.278461][T23982] ? __fget_files+0x215/0x3d0 [ 1210.278492][T23982] ? __fget_files+0x21f/0x3d0 [ 1210.278526][T23982] ksys_read+0x12a/0x250 [ 1210.278585][T23982] ? __pfx_ksys_read+0x10/0x10 [ 1210.278613][T23982] ? rcu_is_watching+0x12/0xc0 [ 1210.278645][T23982] do_syscall_64+0x10b/0xf80 [ 1210.278676][T23982] ? clear_bhb_loop+0x40/0x90 [ 1210.278704][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.278728][T23982] RIP: 0033:0x7f1b0179cdd9 [ 1210.278747][T23982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.278770][T23982] RSP: 002b:00007f1b02737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1210.278792][T23982] RAX: ffffffffffffffda RBX: 00007f1b01a15fa0 RCX: 00007f1b0179cdd9 [ 1210.278808][T23982] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 1210.278823][T23982] RBP: 00007f1b01832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1210.278844][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.278858][T23982] R13: 00007f1b01a16038 R14: 00007f1b01a15fa0 R15: 00007ffdb5e26dc8 [ 1210.278887][T23982] [ 1210.279142][T23982] Mem-Info: [ 1211.362886][T24003] netlink: 'syz.2.3737': attribute type 2 has an invalid length. [ 1211.409626][T24003] netlink: 'syz.2.3737': attribute type 2 has an invalid length. [ 1211.429344][T23982] active_anon:11257 inactive_anon:30602 isolated_anon:0 [ 1211.429344][T23982] active_file:19965 inactive_file:39598 isolated_file:0 [ 1211.429344][T23982] unevictable:768 dirty:472 writeback:0 [ 1211.429344][T23982] slab_reclaimable:12977 slab_unreclaimable:108274 [ 1211.429344][T23982] mapped:40867 shmem:23155 pagetables:1630 [ 1211.429344][T23982] sec_pagetables:0 bounce:0 [ 1211.429344][T23982] kernel_misc_reclaimable:0 [ 1211.429344][T23982] free:1266803 free_pcp:9192 free_cma:0 [ 1211.657230][T23982] Node 0 active_anon:45028kB inactive_anon:127920kB active_file:79280kB inactive_file:158260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162892kB dirty:2044kB writeback:0kB shmem:96596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:30720kB kernel_stack:14112kB pagetables:6476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1211.901218][T23982] Node 1 active_anon:0kB inactive_anon:0kB active_file:580kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:576kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1212.153804][T23982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.328627][T23982] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1212.366446][T23982] Node 0 DMA32 free:1102576kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40336kB inactive_anon:116108kB active_file:79280kB inactive_file:158260kB unevictable:1536kB writepending:2168kB zspages:0kB present:3129332kB managed:2537392kB mlocked:0kB bounce:0kB free_pcp:56136kB local_pcp:56136kB free_cma:0kB [ 1212.457860][T24016] random: crng reseeded on system resumption [ 1212.561087][T23982] lowmem_reserve[]: 0 0 1 1 1 [ 1212.591584][T23982] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.819199][T23982] lowmem_reserve[]: 0 0 0 0 0 [ 1212.867196][T23982] Node 1 Normal free:3935176kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:580kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6396kB local_pcp:6396kB free_cma:0kB [ 1212.904568][T24023] FAULT_INJECTION: forcing a failure. [ 1212.904568][T24023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.028860][T24023] CPU: 0 UID: 0 PID: 24023 Comm: syz.3.3740 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.028898][T24023] Tainted: [L]=SOFTLOCKUP [ 1213.028907][T24023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1213.028922][T24023] Call Trace: [ 1213.028930][T24023] [ 1213.028939][T24023] dump_stack_lvl+0x100/0x190 [ 1213.028969][T24023] should_fail_ex.cold+0x5/0xa [ 1213.029000][T24023] _copy_to_iter+0x5a4/0x1720 [ 1213.029050][T24023] ? __pfx__copy_to_iter+0x10/0x10 [ 1213.029087][T24023] ? kernfs_seq_stop+0xcd/0x120 [ 1213.029126][T24023] ? kernfs_put_active+0x93/0xe0 [ 1213.029159][T24023] seq_read_iter+0xdab/0x1270 [ 1213.029198][T24023] kernfs_fop_read_iter+0x46c/0x610 [ 1213.029239][T24023] do_iter_readv_writev+0x60d/0x920 [ 1213.029266][T24023] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1213.029299][T24023] ? rw_verify_area+0xce/0x6d0 [ 1213.029325][T24023] vfs_readv+0x4d3/0x8d0 [ 1213.029356][T24023] ? __pfx_vfs_readv+0x10/0x10 [ 1213.029381][T24023] ? find_held_lock+0x2b/0x80 [ 1213.029414][T24023] ? ksys_write+0x190/0x250 [ 1213.029457][T24023] ? __fget_files+0x21f/0x3d0 [ 1213.029492][T24023] ? do_readv+0x13e/0x340 [ 1213.029515][T24023] do_readv+0x13e/0x340 [ 1213.029540][T24023] ? __pfx_do_readv+0x10/0x10 [ 1213.029566][T24023] ? rcu_is_watching+0x12/0xc0 [ 1213.029601][T24023] do_syscall_64+0x10b/0xf80 [ 1213.029632][T24023] ? clear_bhb_loop+0x40/0x90 [ 1213.029663][T24023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.029687][T24023] RIP: 0033:0x7f035fb9cdd9 [ 1213.029705][T24023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.029729][T24023] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1213.029752][T24023] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1213.029768][T24023] RDX: 0000000000000006 RSI: 0000200000003080 RDI: 0000000000000003 [ 1213.029783][T24023] RBP: 00007f0360a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.029798][T24023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.029813][T24023] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1213.029849][T24023] [ 1213.488693][T23982] lowmem_reserve[]: 0 0 0 0 0 [ 1213.493557][T23982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1213.519180][T23982] Node 0 DMA32: 2760*4kB (U) 4197*8kB (UE) 2782*16kB (UME) 864*32kB (UME) 1322*64kB (UME) 986*128kB (UME) 584*256kB (UM) 288*512kB (UM) 133*1024kB (UM) 35*2048kB (UM) 69*4096kB (UM) = 1115048kB [ 1213.588004][T23982] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1213.682511][T23982] Node 1 Normal: 0*4kB 1*8kB (U) 8*16kB (U) 12*32kB (U) 7*64kB (UM) 6*128kB (UM) 5*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 959*4096kB (UM) = 3935176kB [ 1213.806082][T23982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1213.895623][T23982] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1213.965102][T24035] FAULT_INJECTION: forcing a failure. [ 1213.965102][T24035] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.978403][T23982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.022890][T23982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.041082][T24035] CPU: 0 UID: 0 PID: 24035 Comm: syz.0.3744 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.041119][T24035] Tainted: [L]=SOFTLOCKUP [ 1214.041129][T24035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1214.041144][T24035] Call Trace: [ 1214.041152][T24035] [ 1214.041162][T24035] dump_stack_lvl+0x100/0x190 [ 1214.041192][T24035] should_fail_ex.cold+0x5/0xa [ 1214.041224][T24035] should_failslab+0xc2/0x120 [ 1214.041253][T24035] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1214.041292][T24035] ? security_inode_alloc+0x3b/0x2c0 [ 1214.041332][T24035] ? lockdep_init_map_type+0x5c/0x250 [ 1214.041362][T24035] security_inode_alloc+0x3b/0x2c0 [ 1214.041403][T24035] inode_init_always_gfp+0xcc0/0x1000 [ 1214.041438][T24035] alloc_inode+0x8e/0x250 [ 1214.041477][T24035] new_inode+0x22/0x1c0 [ 1214.041518][T24035] shmem_get_inode+0x1e3/0xfb0 [ 1214.041562][T24035] ? __pfx_shmem_get_inode+0x10/0x10 [ 1214.041603][T24035] __shmem_file_setup+0x382/0x460 [ 1214.041640][T24035] ? __pfx___shmem_file_setup+0x10/0x10 [ 1214.041678][T24035] ? vm_area_alloc+0x1f/0x160 [ 1214.041717][T24035] shmem_zero_setup+0x96/0x1b0 [ 1214.041745][T24035] __mmap_region+0x24e9/0x2da0 [ 1214.041789][T24035] ? __pfx___mmap_region+0x10/0x10 [ 1214.041844][T24035] ? find_held_lock+0x2b/0x80 [ 1214.041874][T24035] ? process_measurement+0x4c8/0x2350 [ 1214.041907][T24035] ? process_measurement+0x4c8/0x2350 [ 1214.041952][T24035] ? __lock_acquire+0x4a5/0x2630 [ 1214.041975][T24035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1214.042002][T24035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1214.042041][T24035] ? find_held_lock+0x2b/0x80 [ 1214.042095][T24035] ? rcu_is_watching+0x12/0xc0 [ 1214.042138][T24035] ? rcu_is_watching+0x12/0xc0 [ 1214.042168][T24035] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1214.042201][T24035] ? lockdep_hardirqs_on+0x78/0x100 [ 1214.042275][T24035] mmap_region+0x35d/0x620 [ 1214.042298][T24035] ? rcu_is_watching+0x12/0xc0 [ 1214.042328][T24035] ? __pfx_mmap_region+0x10/0x10 [ 1214.042354][T24035] ? cap_mmap_addr+0x4b/0x120 [ 1214.042389][T24035] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1214.042412][T24035] ? security_mmap_addr+0x71/0x1e0 [ 1214.042439][T24035] ? __get_unmapped_area+0x255/0x3e0 [ 1214.042473][T24035] do_mmap+0xc63/0x12f0 [ 1214.042508][T24035] ? __pfx_do_mmap+0x10/0x10 [ 1214.042538][T24035] ? __pfx_down_write_killable+0x10/0x10 [ 1214.042587][T24035] vm_mmap_pgoff+0x29e/0x470 [ 1214.042624][T24035] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1214.042657][T24035] ? do_futex+0x192/0x350 [ 1214.042685][T24035] ? __pfx_do_futex+0x10/0x10 [ 1214.042716][T24035] ksys_mmap_pgoff+0xe4/0x610 [ 1214.042747][T24035] ? __x64_sys_futex+0x358/0x4d0 [ 1214.042774][T24035] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1214.042803][T24035] ? xfd_validate_state+0x129/0x190 [ 1214.042828][T24035] ? ksys_write+0x1ac/0x250 [ 1214.042861][T24035] __x64_sys_mmap+0x125/0x190 [ 1214.042890][T24035] do_syscall_64+0x10b/0xf80 [ 1214.042922][T24035] ? clear_bhb_loop+0x40/0x90 [ 1214.042951][T24035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.042977][T24035] RIP: 0033:0x7f871e99cdd9 [ 1214.042997][T24035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.043021][T24035] RSP: 002b:00007f871f81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1214.043045][T24035] RAX: ffffffffffffffda RBX: 00007f871ec15fa0 RCX: 00007f871e99cdd9 [ 1214.043061][T24035] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1214.043077][T24035] RBP: 00007f871ea32d69 R08: fffffffffffffffa R09: 0000000000008000 [ 1214.043094][T24035] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1214.043109][T24035] R13: 00007f871ec16038 R14: 00007f871ec15fa0 R15: 00007ffe06837ee8 [ 1214.043140][T24035] [ 1214.597248][T23982] 66003 total pagecache pages [ 1214.602544][T23982] 50 pages in swap cache [ 1214.607504][T23982] Free swap = 123180kB [ 1214.611952][T23982] Total swap = 124996kB [ 1214.616584][T23982] 2097051 pages RAM [ 1214.621190][T23982] 0 pages HighMem/MovableOnly [ 1214.626253][T23982] 430813 pages reserved [ 1214.630702][T23982] 0 pages cma reserved [ 1215.512548][T24041] FAULT_INJECTION: forcing a failure. [ 1215.512548][T24041] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1215.550312][T24041] CPU: 0 UID: 0 PID: 24041 Comm: syz.3.3747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.550349][T24041] Tainted: [L]=SOFTLOCKUP [ 1215.550357][T24041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1215.550376][T24041] Call Trace: [ 1215.550383][T24041] [ 1215.550392][T24041] dump_stack_lvl+0x100/0x190 [ 1215.550422][T24041] should_fail_ex.cold+0x5/0xa [ 1215.550452][T24041] get_futex_key+0xf78/0x1510 [ 1215.550478][T24041] ? __pfx_get_futex_key+0x10/0x10 [ 1215.550501][T24041] ? lock_acquire+0x1b1/0x370 [ 1215.550530][T24041] futex_wake+0xea/0x530 [ 1215.550563][T24041] ? __pfx_futex_wake+0x10/0x10 [ 1215.550604][T24041] ? exit_mm_release+0x19/0x30 [ 1215.550643][T24041] do_futex+0x32b/0x350 [ 1215.550667][T24041] ? __pfx_do_futex+0x10/0x10 [ 1215.550696][T24041] ? __might_fault+0xc5/0x140 [ 1215.550735][T24041] mm_release+0x24a/0x2f0 [ 1215.550763][T24041] do_exit+0x707/0x2a60 [ 1215.550800][T24041] ? __pfx_do_exit+0x10/0x10 [ 1215.550833][T24041] ? do_raw_spin_lock+0x128/0x260 [ 1215.550856][T24041] ? find_held_lock+0x2b/0x80 [ 1215.550885][T24041] ? get_signal+0x7e0/0x21e0 [ 1215.550915][T24041] do_group_exit+0xd5/0x2a0 [ 1215.550952][T24041] get_signal+0x1ec7/0x21e0 [ 1215.550989][T24041] ? __pfx_get_signal+0x10/0x10 [ 1215.551018][T24041] ? do_futex+0x192/0x350 [ 1215.551045][T24041] arch_do_signal_or_restart+0x91/0x770 [ 1215.551081][T24041] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1215.551122][T24041] ? __pfx___x64_sys_futex+0x10/0x10 [ 1215.551147][T24041] ? rcu_is_watching+0x12/0xc0 [ 1215.551177][T24041] exit_to_user_mode_loop+0x86/0x4a0 [ 1215.551197][T24041] ? do_syscall_64+0x519/0xf80 [ 1215.551228][T24041] do_syscall_64+0x6f2/0xf80 [ 1215.551255][T24041] ? clear_bhb_loop+0x40/0x90 [ 1215.551300][T24041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.551324][T24041] RIP: 0033:0x7f035fb9cdd9 [ 1215.551342][T24041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.551364][T24041] RSP: 002b:00007f0360a090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1215.551385][T24041] RAX: fffffffffffffe00 RBX: 00007f035fe15fa8 RCX: 00007f035fb9cdd9 [ 1215.551401][T24041] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f035fe15fa8 [ 1215.551415][T24041] RBP: 00007f035fe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1215.551429][T24041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.551443][T24041] R13: 00007f035fe16038 R14: 00007fffb477ded0 R15: 00007fffb477dfb8 [ 1215.551472][T24041] [ 1216.386378][T24068] futex_wake_op: syz.3.3750 tries to shift op by -2048; fix this program [ 1216.428824][T24068] futex_wake_op: syz.3.3750 tries to shift op by -2048; fix this program [ 1216.475270][T24072] 0x000000000001-0x000000020000 : "" [ 1216.554405][T24072] ftl_cs: FTL header corrupt! [ 1217.143287][T24081] FAULT_INJECTION: forcing a failure. [ 1217.143287][T24081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.236109][T24081] CPU: 0 UID: 0 PID: 24081 Comm: syz.0.3753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.236143][T24081] Tainted: [L]=SOFTLOCKUP [ 1217.236151][T24081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1217.236164][T24081] Call Trace: [ 1217.236172][T24081] [ 1217.236180][T24081] dump_stack_lvl+0x100/0x190 [ 1217.236213][T24081] should_fail_ex.cold+0x5/0xa [ 1217.236241][T24081] _copy_to_user+0x32/0xd0 [ 1217.236278][T24081] simple_read_from_buffer+0xcb/0x170 [ 1217.236306][T24081] proc_fail_nth_read+0x1af/0x230 [ 1217.236342][T24081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.236378][T24081] ? rw_verify_area+0xce/0x6d0 [ 1217.236398][T24081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.236432][T24081] vfs_read+0x1e4/0xb30 [ 1217.236460][T24081] ? __pfx_vfs_read+0x10/0x10 [ 1217.236484][T24081] ? __fget_files+0x215/0x3d0 [ 1217.236526][T24081] ? __fget_files+0x21f/0x3d0 [ 1217.236556][T24081] ksys_read+0x12a/0x250 [ 1217.236578][T24081] ? __pfx_ksys_read+0x10/0x10 [ 1217.236602][T24081] ? rcu_is_watching+0x12/0xc0 [ 1217.236630][T24081] do_syscall_64+0x10b/0xf80 [ 1217.236656][T24081] ? clear_bhb_loop+0x40/0x90 [ 1217.236681][T24081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.236701][T24081] RIP: 0033:0x7f871e95d60e [ 1217.236717][T24081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1217.236737][T24081] RSP: 002b:00007f871f81afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1217.236756][T24081] RAX: ffffffffffffffda RBX: 00007f871f81b6c0 RCX: 00007f871e95d60e [ 1217.236770][T24081] RDX: 000000000000000f RSI: 00007f871f81b0a0 RDI: 0000000000000004 [ 1217.236782][T24081] RBP: 00007f871f81b090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.236795][T24081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.236807][T24081] R13: 00007f871ec16038 R14: 00007f871ec15fa0 R15: 00007ffe06837ee8 [ 1217.236833][T24081] [ 1218.203520][T24100] &#$@\]\-: entered promiscuous mode [ 1218.556257][T24110] FAULT_INJECTION: forcing a failure. [ 1218.556257][T24110] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.614481][T24110] CPU: 0 UID: 0 PID: 24110 Comm: syz.0.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1218.614518][T24110] Tainted: [L]=SOFTLOCKUP [ 1218.614526][T24110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.614541][T24110] Call Trace: [ 1218.614548][T24110] [ 1218.614558][T24110] dump_stack_lvl+0x100/0x190 [ 1218.614586][T24110] should_fail_ex.cold+0x5/0xa [ 1218.614617][T24110] should_failslab+0xc2/0x120 [ 1218.614644][T24110] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1218.614682][T24110] ? security_file_alloc+0x34/0x2c0 [ 1218.614708][T24110] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1218.614740][T24110] security_file_alloc+0x34/0x2c0 [ 1218.614766][T24110] init_file+0x95/0x480 [ 1218.614799][T24110] alloc_empty_file+0x79/0x1c0 [ 1218.614834][T24110] path_openat+0xe8/0x31a0 [ 1218.614862][T24110] ? kasan_save_stack+0x3f/0x50 [ 1218.614883][T24110] ? kasan_save_stack+0x30/0x50 [ 1218.614904][T24110] ? kasan_save_track+0x14/0x30 [ 1218.614925][T24110] ? __kasan_slab_alloc+0x89/0x90 [ 1218.614948][T24110] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1218.614985][T24110] ? do_getname+0x35/0x390 [ 1218.615017][T24110] ? do_sys_openat2+0xc5/0x1e0 [ 1218.615052][T24110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.615083][T24110] ? __pfx_path_openat+0x10/0x10 [ 1218.615122][T24110] do_file_open+0x20e/0x430 [ 1218.615160][T24110] ? __pfx_do_file_open+0x10/0x10 [ 1218.615207][T24110] ? alloc_fd+0x476/0x790 [ 1218.615238][T24110] ? do_getname+0x191/0x390 [ 1218.615274][T24110] do_sys_openat2+0x10d/0x1e0 [ 1218.615310][T24110] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.615356][T24110] __x64_sys_openat+0x12d/0x210 [ 1218.615393][T24110] ? __pfx___x64_sys_openat+0x10/0x10 [ 1218.615429][T24110] ? ksys_write+0x1ac/0x250 [ 1218.615458][T24110] ? rcu_is_watching+0x12/0xc0 [ 1218.615490][T24110] do_syscall_64+0x10b/0xf80 [ 1218.615519][T24110] ? clear_bhb_loop+0x40/0x90 [ 1218.615547][T24110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.615571][T24110] RIP: 0033:0x7f871e99cdd9 [ 1218.615589][T24110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.615612][T24110] RSP: 002b:00007f871f81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1218.615633][T24110] RAX: ffffffffffffffda RBX: 00007f871ec15fa0 RCX: 00007f871e99cdd9 [ 1218.615649][T24110] RDX: 000000000000a140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1218.615664][T24110] RBP: 00007f871ea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1218.615678][T24110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.615692][T24110] R13: 00007f871ec16038 R14: 00007f871ec15fa0 R15: 00007ffe06837ee8 [ 1218.615721][T24110] [ 1219.760772][T24133] random: crng reseeded on system resumption [ 1220.610603][T23559] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1220.650128][T24144] vivid-008: ================= START STATUS ================= [ 1220.725488][T24145] vivid-007: ================= START STATUS ================= [ 1220.782720][T24144] vivid-008: ================== END STATUS ================== [ 1220.881241][T24145] vivid-007: Generate PTS: true [ 1220.948617][T24145] vivid-007: Generate SCR: true [ 1221.029980][T24145] tpg source WxH: 320x240 (Y'CbCr) [ 1221.111653][T24145] tpg field: 1 [ 1221.150873][T24145] tpg crop: (0,0)/320x240 [ 1221.221122][T24145] tpg compose: (0,0)/320x240 [ 1221.290141][T24145] tpg colorspace: 8 [ 1221.331337][T24145] tpg transfer function: 0/0 [ 1221.372552][T24145] tpg Y'CbCr encoding: 0/0 [ 1221.399770][T24145] tpg quantization: 0/0 [ 1221.464507][T24145] tpg RGB range: 0/2 [ 1221.509763][T24145] vivid-007: ================== END STATUS ================== [ 1221.800048][T24155] random: crng reseeded on system resumption [ 1222.682383][T24183] ================================================================== [ 1222.682407][T24183] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1222.682439][T24183] Read of size 26 at addr ffff88802d4978ea by task syz.3.3774/24183 [ 1222.682457][T24183] [ 1222.682471][T24183] CPU: 0 UID: 0 PID: 24183 Comm: syz.3.3774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.682502][T24183] Tainted: [L]=SOFTLOCKUP [ 1222.682511][T24183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.682525][T24183] Call Trace: [ 1222.682533][T24183] [ 1222.682542][T24183] dump_stack_lvl+0x100/0x190 [ 1222.682566][T24183] print_report+0x13d/0x4b0 [ 1222.682600][T24183] ? __virt_addr_valid+0x239/0x430 [ 1222.682638][T24183] ? fbcon_prepare_logo+0x94e/0xc60 [ 1222.682662][T24183] kasan_report+0xdf/0x1d0 [ 1222.682689][T24183] ? fbcon_prepare_logo+0x94e/0xc60 [ 1222.682723][T24183] kasan_check_range+0x10f/0x1e0 [ 1222.682755][T24183] __asan_memcpy+0x23/0x60 [ 1222.682790][T24183] fbcon_prepare_logo+0x94e/0xc60 [ 1222.682820][T24183] fbcon_init+0x1065/0x1830 [ 1222.682848][T24183] visual_init+0x320/0x620 [ 1222.682876][T24183] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1222.682913][T24183] store_bind+0x609/0x730 [ 1222.682949][T24183] ? __pfx_store_bind+0x10/0x10 [ 1222.682985][T24183] dev_attr_store+0x58/0x80 [ 1222.683018][T24183] ? __pfx_dev_attr_store+0x10/0x10 [ 1222.683045][T24183] sysfs_kf_write+0xf2/0x150 [ 1222.683083][T24183] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1222.683116][T24183] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1222.683155][T24183] vfs_write+0x6ac/0x1070 [ 1222.683182][T24183] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1222.683217][T24183] ? __pfx_vfs_write+0x10/0x10 [ 1222.683252][T24183] ksys_write+0x12a/0x250 [ 1222.683278][T24183] ? __pfx_ksys_write+0x10/0x10 [ 1222.683305][T24183] ? rcu_is_watching+0x12/0xc0 [ 1222.683335][T24183] do_syscall_64+0x10b/0xf80 [ 1222.683364][T24183] ? clear_bhb_loop+0x40/0x90 [ 1222.683391][T24183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.683415][T24183] RIP: 0033:0x7f035fb9cdd9 [ 1222.683450][T24183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.683472][T24183] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1222.683493][T24183] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1222.683508][T24183] RDX: 000000000000003f RSI: 0000200000000040 RDI: 0000000000000003 [ 1222.683523][T24183] RBP: 00007f035fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1222.683537][T24183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.683551][T24183] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1222.683572][T24183] [ 1222.683598][T24183] [ 1222.683604][T24183] Allocated by task 21597: [ 1222.683619][T24183] kasan_save_stack+0x30/0x50 [ 1222.683640][T24183] kasan_save_track+0x14/0x30 [ 1222.683660][T24183] __kasan_kmalloc+0xaa/0xb0 [ 1222.683683][T24183] __kvmalloc_node_noprof+0x360/0xa00 [ 1222.683705][T24183] bucket_table_alloc.isra.0+0x88/0x460 [ 1222.683743][T24183] rhashtable_init_noprof+0x43b/0x890 [ 1222.683775][T24183] rhltable_init_noprof+0x20/0x60 [ 1222.683806][T24183] sta_info_init+0x5f/0x160 [ 1222.683831][T24183] ieee80211_alloc_hw_nm+0x86b/0x22e0 [ 1222.683862][T24183] mac80211_hwsim_new_radio+0x1de/0x5aa0 [ 1222.683885][T24183] hwsim_new_radio_nl+0xc5f/0x1370 [ 1222.683905][T24183] genl_family_rcv_msg_doit+0x214/0x300 [ 1222.683940][T24183] genl_rcv_msg+0x560/0x800 [ 1222.683973][T24183] netlink_rcv_skb+0x159/0x420 [ 1222.684002][T24183] genl_rcv+0x28/0x40 [ 1222.684031][T24183] netlink_unicast+0x585/0x850 [ 1222.684059][T24183] netlink_sendmsg+0x8b0/0xda0 [ 1222.684087][T24183] ____sys_sendmsg+0x9e1/0xb70 [ 1222.684115][T24183] ___sys_sendmsg+0x190/0x1e0 [ 1222.684144][T24183] __sys_sendmsg+0x170/0x220 [ 1222.684165][T24183] do_syscall_64+0x10b/0xf80 [ 1222.684192][T24183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.684215][T24183] [ 1222.684220][T24183] The buggy address belongs to the object at ffff88802d497800 [ 1222.684220][T24183] which belongs to the cache kmalloc-192 of size 192 [ 1222.684238][T24183] The buggy address is located 74 bytes to the right of [ 1222.684238][T24183] allocated 160-byte region [ffff88802d497800, ffff88802d4978a0) [ 1222.684262][T24183] [ 1222.684271][T24183] The buggy address belongs to the physical page: [ 1222.684289][T24183] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d497 [ 1222.684309][T24183] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1222.684331][T24183] page_type: f5(slab) [ 1222.684351][T24183] raw: 00fff00000000000 ffff88813fe2e3c0 dead000000000100 dead000000000122 [ 1222.684372][T24183] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1222.684386][T24183] page dumped because: kasan: bad access detected [ 1222.684403][T24183] page_owner tracks the page as allocated [ 1222.684411][T24183] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 17397007151, free_ts 17396564492 [ 1222.684467][T24183] post_alloc_hook+0x153/0x170 [ 1222.684499][T24183] get_page_from_freelist+0x11a6/0x33b0 [ 1222.684534][T24183] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1222.684570][T24183] new_slab+0xa6/0x6c0 [ 1222.684599][T24183] refill_objects+0x277/0x420 [ 1222.684631][T24183] __pcs_replace_empty_main+0x375/0x650 [ 1222.684665][T24183] __kmalloc_noprof+0x688/0x850 [ 1222.684699][T24183] usb_alloc_urb+0x66/0xa0 [ 1222.684729][T24183] usb_control_msg+0x1d3/0x4b0 [ 1222.684758][T24183] hub_ext_port_status+0x152/0x600 [ 1222.684784][T24183] hub_activate+0x6d8/0x1d50 [ 1222.684812][T24183] process_one_work+0xa0e/0x1980 [ 1222.684833][T24183] worker_thread+0x5ef/0xe50 [ 1222.684854][T24183] kthread+0x370/0x450 [ 1222.684871][T24183] ret_from_fork+0x72b/0xd50 [ 1222.684894][T24183] ret_from_fork_asm+0x1a/0x30 [ 1222.684924][T24183] page last free pid 10 tgid 10 stack trace: [ 1222.684936][T24183] __free_frozen_pages+0x747/0x1040 [ 1222.684968][T24183] vfree+0x15f/0x8d0 [ 1222.684993][T24183] delayed_vfree_work+0x56/0x80 [ 1222.685020][T24183] process_one_work+0xa0e/0x1980 [ 1222.685046][T24183] worker_thread+0x5ef/0xe50 [ 1222.685066][T24183] kthread+0x370/0x450 [ 1222.685084][T24183] ret_from_fork+0x72b/0xd50 [ 1222.685106][T24183] ret_from_fork_asm+0x1a/0x30 [ 1222.685135][T24183] [ 1222.685141][T24183] Memory state around the buggy address: [ 1222.685152][T24183] ffff88802d497780: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 1222.685169][T24183] ffff88802d497800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1222.685186][T24183] >ffff88802d497880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1222.685199][T24183] ^ [ 1222.685213][T24183] ffff88802d497900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1222.685229][T24183] ffff88802d497980: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 1222.685242][T24183] ================================================================== [ 1222.700509][T16003] Bluetooth: hci0: command 0x0c1a tx timeout [ 1222.741837][T24183] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1222.741858][T24183] CPU: 0 UID: 0 PID: 24183 Comm: syz.3.3774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.741890][T24183] Tainted: [L]=SOFTLOCKUP [ 1222.741898][T24183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.741912][T24183] Call Trace: [ 1222.741920][T24183] [ 1222.741928][T24183] dump_stack_lvl+0x100/0x190 [ 1222.741956][T24183] vpanic+0x552/0x970 [ 1222.741978][T24183] ? __pfx_vpanic+0x10/0x10 [ 1222.742001][T24183] ? fbcon_prepare_logo+0x94e/0xc60 [ 1222.742025][T24183] panic+0xd1/0xe0 [ 1222.742045][T24183] ? __pfx_panic+0x10/0x10 [ 1222.742066][T24183] ? fbcon_prepare_logo+0x94e/0xc60 [ 1222.742089][T24183] ? preempt_schedule_common+0x42/0xc0 [ 1222.742118][T24183] ? check_panic_on_warn+0x1f/0x90 [ 1222.742141][T24183] check_panic_on_warn.cold+0x19/0x34 [ 1222.742165][T24183] end_report.part.0+0x3a/0x90 [ 1222.742197][T24183] kasan_report.cold+0xe/0x18 [ 1222.742228][T24183] ? fbcon_prepare_logo+0x94e/0xc60 [ 1222.742255][T24183] kasan_check_range+0x10f/0x1e0 [ 1222.742285][T24183] __asan_memcpy+0x23/0x60 [ 1222.742318][T24183] fbcon_prepare_logo+0x94e/0xc60 [ 1222.742347][T24183] fbcon_init+0x1065/0x1830 [ 1222.742395][T24183] visual_init+0x320/0x620 [ 1222.742423][T24183] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1222.742466][T24183] store_bind+0x609/0x730 [ 1222.742500][T24183] ? __pfx_store_bind+0x10/0x10 [ 1222.742531][T24183] dev_attr_store+0x58/0x80 [ 1222.742560][T24183] ? __pfx_dev_attr_store+0x10/0x10 [ 1222.742587][T24183] sysfs_kf_write+0xf2/0x150 [ 1222.742625][T24183] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1222.742658][T24183] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1222.742695][T24183] vfs_write+0x6ac/0x1070 [ 1222.742727][T24183] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1222.742769][T24183] ? __pfx_vfs_write+0x10/0x10 [ 1222.742803][T24183] ksys_write+0x12a/0x250 [ 1222.742829][T24183] ? __pfx_ksys_write+0x10/0x10 [ 1222.742856][T24183] ? rcu_is_watching+0x12/0xc0 [ 1222.742886][T24183] do_syscall_64+0x10b/0xf80 [ 1222.742915][T24183] ? clear_bhb_loop+0x40/0x90 [ 1222.742942][T24183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.742967][T24183] RIP: 0033:0x7f035fb9cdd9 [ 1222.742989][T24183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.743013][T24183] RSP: 002b:00007f0360a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1222.743035][T24183] RAX: ffffffffffffffda RBX: 00007f035fe15fa0 RCX: 00007f035fb9cdd9 [ 1222.743052][T24183] RDX: 000000000000003f RSI: 0000200000000040 RDI: 0000000000000003 [ 1222.743067][T24183] RBP: 00007f035fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1222.743082][T24183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.743097][T24183] R13: 00007f035fe16038 R14: 00007f035fe15fa0 R15: 00007fffb477dfb8 [ 1222.743120][T24183] [ 1222.743182][T24183] Kernel Offset: disabled