last executing test programs: 10.297923095s ago: executing program 3 (id=148): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x4, 0x0, 0x1, 0x1009}, 0x7}, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x240080d1}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8949, 0x24) 9.138362812s ago: executing program 3 (id=150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af03, 0x0) r1 = gettid() kill$auto(r1, 0x11) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.stat\x00', 0x8040, 0x0) sendfile$auto(0x2, r2, 0x0, 0x400000000000c3e0) wait4$auto(r1, &(0x7f0000000000)=0x40, 0xd, &(0x7f0000000080)={{0x8, 0xfbb5}, {0x5, 0x7}, 0x7, 0x3, 0x422, 0x0, 0x8, 0x100000000, 0x2, 0x363, 0x800, 0x8, 0x9, 0x7ff, 0xd, 0x80}) 7.976953036s ago: executing program 3 (id=155): socket(0x15, 0xa, 0x401) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x48040, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r0, 0x10007ffd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x458, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3d, 0x2, 0x0, 0x3, 0x10001) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)="9558163b6832e19e981b6aa22d92e2d2943a4634051b46c29b3e2cf0a8c06cfcfca073c23440b4211be9e3018e1f6e9333f3e075c4cb74ad09d47dff52c093548cb15d443f2e135216e77474bc2f042b76a3738b385bdae5831448ec91b448ee358835cc498bc8b568992485d12b6882f878c632f2c58218272b755ab831b5af9bf5b72164a3298f63564b78b848f2f93cfae68a0a5fdbc550ae6570962f098e99632f014e2f0c3d0ddb04c610f9f96f019d03e0f0180508b02b05fab50ed163faeaa66885141233f5a6d971dc0c9331e87656fb77ff464a0909f22decfe6b5892c553934081", 0xffffffffffffffff}, 0x1, 0x8, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x7) ioctl$auto_PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x401, 0x1}) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x5], {0xd74c, 0x80, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x732, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) 7.963226906s ago: executing program 1 (id=156): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x1230}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) bind$auto(r4, 0x0, 0x3) r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x1e, 0x5, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1, {r6}}, 0x58) socket(0xa, 0x2, 0x3a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x20000000064, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x4000000000c, 0xff, 0x10001, 0x6da, 0x3, 0x3e01, 0xfffffffffffffffe, 0x9, 0x7, 0xffffdfffffffff81, 0x4]}, 0x0) r7 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r7, &(0x7f0000000080)=""/18, 0x12) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000540)=0x5) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0xfe04) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r8 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20020000", @ANYRES16=r8, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40) 6.611881038s ago: executing program 1 (id=161): mmap$auto(0x0, 0xe983, 0xdf, 0x400000000eb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x20000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) statmount$auto(0x0, 0x0, 0x800, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000040)=0x400) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) 5.77989475s ago: executing program 0 (id=164): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x6) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) mmap$auto(0x3, 0xe983, 0xdc, 0xeb1, 0x401, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x7) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x29800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000000000000000700", @raw=0x40000005}, 0x4, 0x966, 0x7, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x15, 0x1, 0xa) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x3, 0xe4, 0x2}) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.2MB.failcnt\x00', 0x80002, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fff) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfdf3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 4.702136471s ago: executing program 0 (id=166): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de6580000000000000000fd", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) 4.244997299s ago: executing program 0 (id=167): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x6, 0x25, &(0x7f0000000040)='(\x00', 0x7) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x1b9883, 0x0) read$auto_zero_fops_mem(r1, &(0x7f0000000080)=""/56, 0x38) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x7, 0x0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x800064c1, r2) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x1c7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x18803, 0x0) pidfd_open$auto(0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(r4, 0x3, 0x4e88, 0x4cbd5d) memfd_secret$auto(0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae8a, &(0x7f00000000c0)={0xfc}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4606c1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.779417359s ago: executing program 0 (id=169): mremap$auto(0xa7, 0x100000007, 0x4, 0x3, 0x100000000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x10000) mmap$auto(0x6, 0x400008, 0xdf, 0x9b77, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x1, 0x0, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2100, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0042, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) (fail_nth: 7) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x7d0d, 0x0, 0x1f, 0xfffbfffd}, 0xfffc}, 0x4000, 0x2) 3.684738787s ago: executing program 1 (id=170): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 3.628326381s ago: executing program 2 (id=171): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x4, 0x0, 0x1, 0x1009}, 0x7}, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x240080d1}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8949, 0x24) 3.29653665s ago: executing program 3 (id=172): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x7fffffffa000, 0x5, 0x7fffffffffffffff, 0x3132, 0x8d73, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @uid}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r2 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x2}, @NET_DM_ATTR_HW_DROPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2.907516017s ago: executing program 0 (id=173): mmap$auto(0x40080, 0x0, 0x4000000000e3, 0x200000000ebf, 0x401, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000340)=@raw_tracepoint={0x100000001, 0xffffffffffffffff, 0x0, 0x60}, 0x81) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mremap$auto(0x5, 0x8000000000, 0x2, 0xffffffffffffffff, 0x9) mremap$auto(0x5, 0x1069, 0xa, 0xe, 0x9) r2 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@enable_stats={0x6}, 0xc0000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f00000030c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYBLOB="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"]) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100050000000000df25000000000800080005ad179abd3a98193d000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000020c0)=""/4093, 0xffd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r6, 0x410, 0x0) utimes$auto(&(0x7f0000000000)='./file0\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x190, 0x0, 0x302, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x5}, @NL802154_ATTR_COORDINATOR={0x16a, 0x1e, 0x0, 0x1, [@typed={0x14, 0xff, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0xe7, 0x100, 0x0, 0x1, [@nested={0x4, 0xd4}, @generic="f9e915b72d68dd74a10bb558615b72b1b7d475e069f317e257bba45ba90871a9f1e7181e45629d7fdb452a6ea724b0c8968707655d626a7e9b57d3d070a5eecc142ee585612b2b41f42e9ffff73b145bda2afb958694b989c26f36527046d2761089ed893713cfeee2fccf3f8c308d719b48f439c8140834d0e392546179cfeaff49b069a7dd4c450e7200e9a865460cdc464c991fcabdaa357a91426b2cf129727bd0c172315a5e11ca26dc21674c3255a1dcc0240e67246d15ab646af0f83732b11e85ffbfdb189a2fee044b02471f1065f9ffb03209708580bd", @nested={0x4, 0xbd}]}, @typed={0x8, 0xc2, 0x0, 0x0, @uid}, @generic="f018a972a9159a2ddf0e1d6b8b2483ac425142b8775a6961b17ef1da3f9a0e6884cd8bebfe436e8dbfd302c7cd3f88f50cb9", @nested={0xc, 0x3f, 0x0, 0x1, [@nested={0x4, 0xdf}, @nested={0x4, 0x9d}]}, @nested={0x4, 0x3c}, @typed={0xc, 0x105, 0x0, 0x0, @u64}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040801) 2.750739987s ago: executing program 1 (id=174): r0 = timerfd_create$auto(0xc, 0x800) read$auto_ppp_device_fops_ppp_generic(r0, 0x0, 0x39) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0x18}, 0x58) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) mprotect$auto(0x1ffffffffffd, 0x1f, 0xb) close_range$auto(0x2, 0x8, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x38, r5, 0x201, 0x70bd28, 0x25dfdc03, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r7}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x9}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xf6}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r9, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000000}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]}, 0x28}}, 0x4000000) r11 = socket(0x1d, 0x2, 0x6) r12 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r11, &(0x7f0000000040)=@can={0x1d, r13, 0xfd}, 0x6a) 2.535769414s ago: executing program 2 (id=175): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0x2) setsockopt$auto_SO_ATTACH_FILTER(r2, 0x0, 0x1a, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) pread64$auto(r3, 0x0, 0x0, 0x0) 2.276881095s ago: executing program 2 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) mmap$auto(0x0, 0x40009, 0x4, 0x9b72, 0xffffffffffffffff, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r1 = socket(0xa, 0x5, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100546309a81597d83445194800504a", @ANYRES8=r2, @ANYBLOB="1b0025bd7000f9dbdf2503000000040008001400038010000c800c00098008003b00ac1e000112000100898771f1c19f17790485908286dd00000400028004000800"], 0x48}, 0x1, 0x0, 0x0, 0x40080d0}, 0x400c880) setsockopt$auto_SO_MAX_PACING_RATE(r3, 0x7, 0x2f, &(0x7f00000001c0)='.\x00', 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x81) mkdirat$auto(r4, &(0x7f0000000040)='}[,&*}\x00', 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x15fc83, 0x0) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) pread64$auto(r0, &(0x7f0000000080)='\'/&.\'\x00', 0xd, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="00040000", @ANYRES16=r6, @ANYBLOB="036c25bd7000fddbdf25040000000800170000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) r7 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r7, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) ioctl$auto_I2C_PEC(r7, 0x708, &(0x7f00000000c0)="bb4c935488d187897095afc7") 2.007348556s ago: executing program 2 (id=177): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) 1.774301479s ago: executing program 2 (id=178): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) (async) lseek$auto(0x3, 0x8000000000000004, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setresuid$auto(0x60, 0x1000, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) 1.621603406s ago: executing program 3 (id=179): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) (fail_nth: 1) 1.511864813s ago: executing program 2 (id=180): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r0, 0x0, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141000, 0x5c) futimesat$auto(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x100000001}) fcntl$auto_F_SETLK(r1, 0x6, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0xc) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x8954, 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x00\x00\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x1, 0x7ff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@inferred=r4, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8aa, 0x5, 0x7, 0x7, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x8, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x10001, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0x4a, 0xfffffffffffffffe, 0x4, 0x7fff, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x40000008, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xd1e3, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0xa, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x80000000, 0x5, 0x1, 0xfffffffffffffffe, 0x8000000000000001, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x13fffffffffffd, 0x6, 0xfffffffffffffffe, 0x0, 0x3, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x100000000, 0x7, 0x2, 0x8, 0x80000000, 0x1f, 0x8001, 0xc13, 0x6, 0x200, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xfffe], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) 527.024099ms ago: executing program 0 (id=181): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r3 = socket(0x2, 0xa, 0x5) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0xfffffffd, 0x1, r0, 0x2, 0x2) r4 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/current_tracer\x00', 0x8000, 0x0) timerfd_settime$auto(r4, 0x4, 0x0, &(0x7f0000000280)={{0x6, 0xb382}, {0x5, 0xbd78}}) (async) getsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0x9) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) (async) msync$auto(0x110c230000, 0x200001, 0x6) msgctl$auto(0x0, 0x1, 0x0) r5 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x202402, 0x0) preadv2$auto(r5, &(0x7f0000000140)={&(0x7f00000000c0)="48bb4bd4af61a7cd986362a83404e7d7ea1518a9f255d31f44353ca8988cf473b2dbc0488681944bf094d573c658348df88b5321d0399032294f9062406e89ea6c471d9fd389ab56d5945c14e402ad6da5371e27fcb46f447679dac4c277ca270853e22dd8324f63912bee854d135d206c4e51564720436b816b", 0x7}, 0x2, 0x91b, 0x8f8, 0x3) 525.518927ms ago: executing program 1 (id=182): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 178.276824ms ago: executing program 1 (id=183): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x4, 0x0, 0x1, 0x1009}, 0x7}, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x240080d1}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8949, 0x24) 0s ago: executing program 3 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80801, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bec2c4d", 0x23) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r4, 0x0, 0x40002) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0x1, 0x7ffd}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 104.078260][ T5613] cgroup: Unknown subsys name 'net' [ 104.191755][ T5613] cgroup: Unknown subsys name 'cpuset' [ 104.202060][ T5613] cgroup: Unknown subsys name 'rlimit' [ 104.239554][ T809] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 106.105004][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.275293][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.288685][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.294304][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.313005][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.322881][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.326668][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.342057][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.357697][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.364721][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.375639][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.386383][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.395591][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.411092][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.425873][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.433610][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.438671][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.443204][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.461049][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.469654][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.479633][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.333171][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.345689][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.353585][ T5627] bridge_slave_0: entered allmulticast mode [ 110.361857][ T5627] bridge_slave_0: entered promiscuous mode [ 110.403162][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.416496][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.424482][ T5627] bridge_slave_1: entered allmulticast mode [ 110.432341][ T5627] bridge_slave_1: entered promiscuous mode [ 110.517570][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.531525][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.540153][ T5628] bridge_slave_0: entered allmulticast mode [ 110.548153][ T5628] bridge_slave_0: entered promiscuous mode [ 110.557275][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.561605][ T5636] Bluetooth: hci2: command tx timeout [ 110.565925][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.566678][ T5628] bridge_slave_1: entered allmulticast mode [ 110.574301][ T5635] Bluetooth: hci3: command tx timeout [ 110.581770][ T4942] Bluetooth: hci0: command tx timeout [ 110.604721][ T5641] Bluetooth: hci1: command tx timeout [ 110.608664][ T5628] bridge_slave_1: entered promiscuous mode [ 110.687350][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.731080][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.757362][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.810250][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.853157][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.860842][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.871822][ T5626] bridge_slave_0: entered allmulticast mode [ 110.886469][ T5626] bridge_slave_0: entered promiscuous mode [ 110.907854][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.915579][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.924204][ T5629] bridge_slave_0: entered allmulticast mode [ 110.933544][ T5629] bridge_slave_0: entered promiscuous mode [ 110.945328][ T5627] team0: Port device team_slave_0 added [ 110.959867][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.970900][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.982094][ T5626] bridge_slave_1: entered allmulticast mode [ 110.991128][ T5626] bridge_slave_1: entered promiscuous mode [ 111.013240][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.024119][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.033651][ T5629] bridge_slave_1: entered allmulticast mode [ 111.044037][ T5629] bridge_slave_1: entered promiscuous mode [ 111.053669][ T5627] team0: Port device team_slave_1 added [ 111.086258][ T5628] team0: Port device team_slave_0 added [ 111.130115][ T5628] team0: Port device team_slave_1 added [ 111.148129][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.155383][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.182289][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.197641][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.228786][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.239378][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.246422][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.277804][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.317503][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.362732][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.412906][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.421329][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.462352][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.504922][ T5626] team0: Port device team_slave_0 added [ 111.515180][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.524603][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.560428][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.606431][ T5629] team0: Port device team_slave_0 added [ 111.615687][ T5626] team0: Port device team_slave_1 added [ 111.665725][ T5629] team0: Port device team_slave_1 added [ 111.701568][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.709312][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.735527][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.756646][ T5627] hsr_slave_0: entered promiscuous mode [ 111.764949][ T5627] hsr_slave_1: entered promiscuous mode [ 111.785698][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.793106][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.826039][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.839184][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.847311][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.875807][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.923404][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.932811][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.972443][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.011205][ T5628] hsr_slave_0: entered promiscuous mode [ 112.018928][ T5628] hsr_slave_1: entered promiscuous mode [ 112.025441][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 112.031662][ T5628] Cannot create hsr debugfs directory [ 112.166063][ T5626] hsr_slave_0: entered promiscuous mode [ 112.173417][ T5626] hsr_slave_1: entered promiscuous mode [ 112.180120][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 112.186005][ T5626] Cannot create hsr debugfs directory [ 112.245395][ T5629] hsr_slave_0: entered promiscuous mode [ 112.252205][ T5629] hsr_slave_1: entered promiscuous mode [ 112.259130][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 112.264912][ T5629] Cannot create hsr debugfs directory [ 112.637058][ T5641] Bluetooth: hci2: command tx timeout [ 112.637078][ T5635] Bluetooth: hci0: command tx timeout [ 112.637165][ T5635] Bluetooth: hci1: command tx timeout [ 112.644518][ T4942] Bluetooth: hci3: command tx timeout [ 112.737135][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.760040][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.768484][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.782249][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.790722][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.803780][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.814365][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.826430][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.917938][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.932731][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.942187][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.956046][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.964834][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.979834][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.988066][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.999848][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.141942][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.153316][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.161614][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.171713][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.181113][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.192223][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.201877][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.213503][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.324012][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.338580][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.348646][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.360378][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.368973][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.380031][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.388674][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.400911][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.426270][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.490439][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.539981][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.547852][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.563880][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.571350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.591898][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.666693][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.692641][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.699861][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.738926][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.746129][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.775882][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.873136][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.912346][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.945480][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.952758][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.004619][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.012096][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.068212][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.109806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.117068][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.174509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.182836][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.719144][ T4942] Bluetooth: hci1: command tx timeout [ 114.725383][ T4942] Bluetooth: hci3: command tx timeout [ 114.728986][ T5636] Bluetooth: hci0: command tx timeout [ 114.737205][ T5635] Bluetooth: hci2: command tx timeout [ 114.925628][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.123063][ T5627] veth0_vlan: entered promiscuous mode [ 115.168015][ T5627] veth1_vlan: entered promiscuous mode [ 115.193051][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.325665][ T5627] veth0_macvtap: entered promiscuous mode [ 115.364131][ T5627] veth1_macvtap: entered promiscuous mode [ 115.448126][ T5628] veth0_vlan: entered promiscuous mode [ 115.464684][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.502945][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.530073][ T5628] veth1_vlan: entered promiscuous mode [ 115.572326][ T365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.585756][ T365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.607478][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.626301][ T365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.637583][ T365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.670024][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.740009][ T5628] veth0_macvtap: entered promiscuous mode [ 115.789332][ T5628] veth1_macvtap: entered promiscuous mode [ 115.873480][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.885898][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.908239][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.951788][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.993478][ T5626] veth0_vlan: entered promiscuous mode [ 116.011004][ T5629] veth0_vlan: entered promiscuous mode [ 116.023192][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.039706][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.053805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.065582][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.080645][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.089911][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.113868][ T5629] veth1_vlan: entered promiscuous mode [ 116.130457][ T5626] veth1_vlan: entered promiscuous mode [ 116.250350][ T5626] veth0_macvtap: entered promiscuous mode [ 116.256399][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.293784][ T5626] veth1_macvtap: entered promiscuous mode [ 116.360064][ T5629] veth0_macvtap: entered promiscuous mode [ 116.374146][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.406294][ T5629] veth1_macvtap: entered promiscuous mode [ 116.414186][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.483621][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.531451][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.563614][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.582330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.586639][ T365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.600488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.608744][ T365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.637561][ T30] audit: type=1800 audit(1782632976.423:2): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file0" dev="tmpfs" ino=18 res=0 errno=0 [ 116.663157][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.673004][ T365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.704507][ T365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.714986][ T365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.792373][ T365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.803276][ T5635] Bluetooth: hci3: command tx timeout [ 116.803322][ T5635] Bluetooth: hci1: command tx timeout [ 116.809575][ T5636] Bluetooth: hci2: command tx timeout [ 116.809617][ T5636] Bluetooth: hci0: command tx timeout [ 116.830652][ T365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.884248][ T365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.228836][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.241227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.249707][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.258554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.475546][ T365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.499623][ T365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.635667][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.672778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.546292][ T5828] FAULT_INJECTION: forcing a failure. [ 119.546292][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 119.571774][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 119.571822][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.571844][ T5828] Call Trace: [ 119.571853][ T5828] [ 119.571863][ T5828] dump_stack_lvl+0x100/0x190 [ 119.571914][ T5828] should_fail_ex.cold+0x5/0xa [ 119.571949][ T5828] should_failslab+0xc2/0x120 [ 119.571996][ T5828] __kmalloc_cache_noprof+0x91/0x6c0 [ 119.572023][ T5828] ? __kasan_kmalloc+0xaa/0xb0 [ 119.572058][ T5828] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 119.572095][ T5828] vidtv_psi_network_name_desc_init+0x68/0x310 [ 119.572128][ T5828] vidtv_psi_nit_table_init+0x291/0x5f0 [ 119.572165][ T5828] vidtv_channel_si_init+0xccf/0x18f0 [ 119.572211][ T5828] vidtv_mux_init+0x522/0xbf0 [ 119.572251][ T5828] vidtv_start_feed+0x34e/0x500 [ 119.572296][ T5828] ? __pfx_vidtv_start_feed+0x10/0x10 [ 119.572341][ T5828] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 119.572406][ T5828] dmx_section_feed_start_filtering+0x3a8/0x660 [ 119.572446][ T5828] dvb_dmxdev_filter_start+0x767/0xdd0 [ 119.572502][ T5828] dvb_demux_do_ioctl+0xe64/0x1200 [ 119.572559][ T5828] dvb_usercopy+0x167/0x340 [ 119.572596][ T5828] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 119.572643][ T5828] ? __pfx_dvb_usercopy+0x10/0x10 [ 119.572730][ T5828] ? __fget_files+0x21f/0x3d0 [ 119.572772][ T5828] dvb_demux_ioctl+0x29/0x40 [ 119.572813][ T5828] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 119.572852][ T5828] __x64_sys_ioctl+0x18e/0x210 [ 119.572894][ T5828] do_syscall_64+0x115/0x840 [ 119.572918][ T5828] ? clear_bhb_loop+0x40/0x90 [ 119.572951][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.572986][ T5828] RIP: 0033:0x7f8512f9ce59 [ 119.573017][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.573043][ T5828] RSP: 002b:00007f8513edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.573075][ T5828] RAX: ffffffffffffffda RBX: 00007f8513215fa0 RCX: 00007f8512f9ce59 [ 119.573093][ T5828] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 119.573109][ T5828] RBP: 00007f8513032e6f R08: 0000000000000000 R09: 0000000000000000 [ 119.573125][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.573165][ T5828] R13: 00007f8513216038 R14: 00007f8513215fa0 R15: 00007ffc9c4ba348 [ 119.573212][ T5828] [ 120.949185][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 121.566939][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.100388][ T5859] FAULT_INJECTION: forcing a failure. [ 123.100388][ T5859] name failslab, interval 1, probability 0, space 0, times 0 [ 123.123134][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz.2.18 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.123190][ T5859] Tainted: [L]=SOFTLOCKUP [ 123.123202][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.123222][ T5859] Call Trace: [ 123.123233][ T5859] [ 123.123246][ T5859] dump_stack_lvl+0x100/0x190 [ 123.123297][ T5859] should_fail_ex.cold+0x5/0xa [ 123.123344][ T5859] should_failslab+0xc2/0x120 [ 123.123394][ T5859] __kmalloc_cache_noprof+0x91/0x6c0 [ 123.123432][ T5859] ? __kasan_kmalloc+0xaa/0xb0 [ 123.123475][ T5859] ? vidtv_psi_nit_table_init+0x9b/0x5f0 [ 123.123526][ T5859] vidtv_psi_nit_table_init+0x9b/0x5f0 [ 123.123574][ T5859] vidtv_channel_si_init+0xccf/0x18f0 [ 123.123633][ T5859] vidtv_mux_init+0x522/0xbf0 [ 123.123685][ T5859] vidtv_start_feed+0x34e/0x500 [ 123.123742][ T5859] ? __pfx_vidtv_start_feed+0x10/0x10 [ 123.123799][ T5859] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 123.123877][ T5859] dmx_section_feed_start_filtering+0x3a8/0x660 [ 123.123928][ T5859] dvb_dmxdev_filter_start+0x767/0xdd0 [ 123.123993][ T5859] dvb_demux_do_ioctl+0xe64/0x1200 [ 123.124069][ T5859] dvb_usercopy+0x167/0x340 [ 123.124117][ T5859] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 123.124175][ T5859] ? __pfx_dvb_usercopy+0x10/0x10 [ 123.124247][ T5859] ? __fget_files+0x21f/0x3d0 [ 123.124288][ T5859] dvb_demux_ioctl+0x29/0x40 [ 123.124336][ T5859] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 123.124387][ T5859] __x64_sys_ioctl+0x18e/0x210 [ 123.124443][ T5859] do_syscall_64+0x115/0x840 [ 123.124473][ T5859] ? clear_bhb_loop+0x40/0x90 [ 123.124521][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.124557][ T5859] RIP: 0033:0x7f49e059ce59 [ 123.124589][ T5859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.124621][ T5859] RSP: 002b:00007f49e1417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.124654][ T5859] RAX: ffffffffffffffda RBX: 00007f49e0815fa0 RCX: 00007f49e059ce59 [ 123.124676][ T5859] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 123.124697][ T5859] RBP: 00007f49e0632e6f R08: 0000000000000000 R09: 0000000000000000 [ 123.124717][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.124738][ T5859] R13: 00007f49e0816038 R14: 00007f49e0815fa0 R15: 00007ffda9cea8e8 [ 123.124783][ T5859] [ 123.768592][ T5863] ubi0: attaching mtd0 [ 123.808065][ T5863] ubi0: scanning is finished [ 123.821809][ T5863] ubi0: empty MTD device detected [ 124.183756][ T5877] FAULT_INJECTION: forcing a failure. [ 124.183756][ T5877] name failslab, interval 1, probability 0, space 0, times 0 [ 124.210858][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.0.21 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.210897][ T5877] Tainted: [L]=SOFTLOCKUP [ 124.210905][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.210919][ T5877] Call Trace: [ 124.210927][ T5877] [ 124.210937][ T5877] dump_stack_lvl+0x100/0x190 [ 124.210974][ T5877] should_fail_ex.cold+0x5/0xa [ 124.211006][ T5877] should_failslab+0xc2/0x120 [ 124.211041][ T5877] __kmalloc_cache_noprof+0x91/0x6c0 [ 124.211066][ T5877] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 124.211099][ T5877] ? vidtv_psi_eit_event_init+0xe1/0x400 [ 124.211134][ T5877] vidtv_psi_eit_event_init+0xe1/0x400 [ 124.211164][ T5877] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 124.211202][ T5877] ? vidtv_psi_desc_clone+0x358/0x5d0 [ 124.211230][ T5877] vidtv_channel_si_init+0x845/0x18f0 [ 124.211277][ T5877] vidtv_mux_init+0x522/0xbf0 [ 124.211315][ T5877] vidtv_start_feed+0x34e/0x500 [ 124.211356][ T5877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 124.211397][ T5877] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 124.211453][ T5877] dmx_section_feed_start_filtering+0x3a8/0x660 [ 124.211496][ T5877] dvb_dmxdev_filter_start+0x767/0xdd0 [ 124.211543][ T5877] dvb_demux_do_ioctl+0xe64/0x1200 [ 124.211591][ T5877] dvb_usercopy+0x167/0x340 [ 124.211624][ T5877] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 124.211664][ T5877] ? __pfx_dvb_usercopy+0x10/0x10 [ 124.211708][ T5877] ? __fget_files+0x21f/0x3d0 [ 124.211736][ T5877] dvb_demux_ioctl+0x29/0x40 [ 124.211770][ T5877] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 124.211805][ T5877] __x64_sys_ioctl+0x18e/0x210 [ 124.211848][ T5877] do_syscall_64+0x115/0x840 [ 124.211869][ T5877] ? clear_bhb_loop+0x40/0x90 [ 124.211898][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.211922][ T5877] RIP: 0033:0x7f52bef9ce59 [ 124.211943][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.211968][ T5877] RSP: 002b:00007f52bfdea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.211991][ T5877] RAX: ffffffffffffffda RBX: 00007f52bf215fa0 RCX: 00007f52bef9ce59 [ 124.212006][ T5877] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 124.212021][ T5877] RBP: 00007f52bf032e6f R08: 0000000000000000 R09: 0000000000000000 [ 124.212035][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.212049][ T5877] R13: 00007f52bf216038 R14: 00007f52bf215fa0 R15: 00007ffe17b8fb48 [ 124.212080][ T5877] [ 124.568953][ T5863] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 124.578968][ T5863] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 124.698399][ T5863] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 124.720734][ T5863] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 124.739988][ T5863] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 124.752357][ T5863] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.763094][ T5863] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2917079192 [ 124.773554][ T5863] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.787278][ T5878] ubi0: background thread "ubi_bgt0d" started, PID 5878 [ 124.830865][ T5871] ubi0: detaching mtd0 [ 124.915056][ T5871] ubi0: mtd0 is detached [ 125.031221][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.301149][ T5899] Zero length message leads to an empty skb [ 126.506629][ T5895] can0: slcan on ptm0. [ 126.793893][ T5895] can0 (unregistered): slcan off ptm0. [ 126.802244][ T5911] FAULT_INJECTION: forcing a failure. [ 126.802244][ T5911] name failslab, interval 1, probability 0, space 0, times 0 [ 126.843153][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.0.29 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.843209][ T5911] Tainted: [L]=SOFTLOCKUP [ 126.843220][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.843239][ T5911] Call Trace: [ 126.843250][ T5911] [ 126.843262][ T5911] dump_stack_lvl+0x100/0x190 [ 126.843306][ T5911] should_fail_ex.cold+0x5/0xa [ 126.843347][ T5911] should_failslab+0xc2/0x120 [ 126.843392][ T5911] __kmalloc_cache_noprof+0x91/0x6c0 [ 126.843434][ T5911] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 126.843468][ T5911] ? vidtv_psi_service_list_desc_init+0xf3/0x550 [ 126.843507][ T5911] vidtv_psi_service_list_desc_init+0xf3/0x550 [ 126.843546][ T5911] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 126.843587][ T5911] vidtv_channel_si_init+0xccf/0x18f0 [ 126.843636][ T5911] vidtv_mux_init+0x522/0xbf0 [ 126.843679][ T5911] vidtv_start_feed+0x34e/0x500 [ 126.843727][ T5911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 126.843775][ T5911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 126.843842][ T5911] dmx_section_feed_start_filtering+0x3a8/0x660 [ 126.843892][ T5911] dvb_dmxdev_filter_start+0x767/0xdd0 [ 126.843956][ T5911] dvb_demux_do_ioctl+0xe64/0x1200 [ 126.844018][ T5911] dvb_usercopy+0x167/0x340 [ 126.844058][ T5911] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 126.844108][ T5911] ? __pfx_dvb_usercopy+0x10/0x10 [ 126.844164][ T5911] ? __fget_files+0x21f/0x3d0 [ 126.844204][ T5911] dvb_demux_ioctl+0x29/0x40 [ 126.844250][ T5911] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 126.844300][ T5911] __x64_sys_ioctl+0x18e/0x210 [ 126.844353][ T5911] do_syscall_64+0x115/0x840 [ 126.844383][ T5911] ? clear_bhb_loop+0x40/0x90 [ 126.844437][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.844473][ T5911] RIP: 0033:0x7f52bef9ce59 [ 126.844500][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.844535][ T5911] RSP: 002b:00007f52bfdea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.844566][ T5911] RAX: ffffffffffffffda RBX: 00007f52bf215fa0 RCX: 00007f52bef9ce59 [ 126.844595][ T5911] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 126.844616][ T5911] RBP: 00007f52bf032e6f R08: 0000000000000000 R09: 0000000000000000 [ 126.844635][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.844655][ T5911] R13: 00007f52bf216038 R14: 00007f52bf215fa0 R15: 00007ffe17b8fb48 [ 126.844701][ T5911] [ 127.188452][ T5913] FAULT_INJECTION: forcing a failure. [ 127.188452][ T5913] name failslab, interval 1, probability 0, space 0, times 0 [ 127.201511][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz.0.30 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.201563][ T5913] Tainted: [L]=SOFTLOCKUP [ 127.201574][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.201594][ T5913] Call Trace: [ 127.201605][ T5913] [ 127.201617][ T5913] dump_stack_lvl+0x100/0x190 [ 127.201667][ T5913] should_fail_ex.cold+0x5/0xa [ 127.201717][ T5913] should_failslab+0xc2/0x120 [ 127.201767][ T5913] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 127.201823][ T5913] ? __pfx___kasan_kmalloc+0x10/0x10 [ 127.201869][ T5913] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 127.201921][ T5913] kstrdup+0x51/0xe0 [ 127.201967][ T5913] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 127.202010][ T5913] vidtv_psi_desc_clone+0x496/0x5d0 [ 127.202056][ T5913] vidtv_channel_si_init+0x4b7/0x18f0 [ 127.202115][ T5913] vidtv_mux_init+0x522/0xbf0 [ 127.202171][ T5913] vidtv_start_feed+0x34e/0x500 [ 127.202228][ T5913] ? __pfx_vidtv_start_feed+0x10/0x10 [ 127.202284][ T5913] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 127.202364][ T5913] dmx_section_feed_start_filtering+0x3a8/0x660 [ 127.202415][ T5913] dvb_dmxdev_filter_start+0x767/0xdd0 [ 127.202484][ T5913] dvb_demux_do_ioctl+0xe64/0x1200 [ 127.202552][ T5913] dvb_usercopy+0x167/0x340 [ 127.202599][ T5913] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 127.202655][ T5913] ? __pfx_dvb_usercopy+0x10/0x10 [ 127.202715][ T5913] ? __fget_files+0x21f/0x3d0 [ 127.202754][ T5913] dvb_demux_ioctl+0x29/0x40 [ 127.202810][ T5913] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 127.202862][ T5913] __x64_sys_ioctl+0x18e/0x210 [ 127.202916][ T5913] do_syscall_64+0x115/0x840 [ 127.202946][ T5913] ? clear_bhb_loop+0x40/0x90 [ 127.202989][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.203025][ T5913] RIP: 0033:0x7f52bef9ce59 [ 127.203054][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.203086][ T5913] RSP: 002b:00007f52bfdea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.203117][ T5913] RAX: ffffffffffffffda RBX: 00007f52bf215fa0 RCX: 00007f52bef9ce59 [ 127.203138][ T5913] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 127.203158][ T5913] RBP: 00007f52bf032e6f R08: 0000000000000000 R09: 0000000000000000 [ 127.203178][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.203197][ T5913] R13: 00007f52bf216038 R14: 00007f52bf215fa0 R15: 00007ffe17b8fb48 [ 127.203240][ T5913] [ 127.496086][ T5909] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.202312][ T5922] FAULT_INJECTION: forcing a failure. [ 128.202312][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 128.233789][ T5918] NFSD: Failed to start, no listeners configured. [ 128.269997][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.2.33 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.270046][ T5922] Tainted: [L]=SOFTLOCKUP [ 128.270057][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.270074][ T5922] Call Trace: [ 128.270085][ T5922] [ 128.270096][ T5922] dump_stack_lvl+0x100/0x190 [ 128.270143][ T5922] should_fail_ex.cold+0x5/0xa [ 128.270193][ T5922] should_failslab+0xc2/0x120 [ 128.270253][ T5922] __kmalloc_noprof+0xfc/0x820 [ 128.270294][ T5922] ? rcu_is_watching+0x12/0xc0 [ 128.270336][ T5922] ? tomoyo_realpath_from_path+0xb6/0x690 [ 128.270395][ T5922] tomoyo_realpath_from_path+0xb6/0x690 [ 128.270454][ T5922] tomoyo_path_number_perm+0x23c/0x580 [ 128.270495][ T5922] ? tomoyo_path_number_perm+0x22e/0x580 [ 128.270545][ T5922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.270628][ T5922] ? find_held_lock+0x2b/0x80 [ 128.270670][ T5922] ? __fget_files+0x215/0x3d0 [ 128.270764][ T5922] ? hook_file_ioctl_common+0x140/0x440 [ 128.270805][ T5922] ? __fget_files+0x215/0x3d0 [ 128.270843][ T5922] ? __fget_files+0x21f/0x3d0 [ 128.270881][ T5922] security_file_ioctl+0xd3/0x230 [ 128.270924][ T5922] __x64_sys_ioctl+0xb7/0x210 [ 128.270976][ T5922] do_syscall_64+0x115/0x840 [ 128.271005][ T5922] ? clear_bhb_loop+0x40/0x90 [ 128.271046][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.271080][ T5922] RIP: 0033:0x7f49e059ce59 [ 128.271107][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.271137][ T5922] RSP: 002b:00007f49e1417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.271168][ T5922] RAX: ffffffffffffffda RBX: 00007f49e0815fa0 RCX: 00007f49e059ce59 [ 128.271188][ T5922] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000004 [ 128.271206][ T5922] RBP: 00007f49e1417090 R08: 0000000000000000 R09: 0000000000000000 [ 128.271223][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.271241][ T5922] R13: 00007f49e0816038 R14: 00007f49e0815fa0 R15: 00007ffda9cea8e8 [ 128.271282][ T5922] [ 128.552754][ T5922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.601733][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 128.842891][ T5930] FAULT_INJECTION: forcing a failure. [ 128.842891][ T5930] name failslab, interval 1, probability 0, space 0, times 0 [ 128.898251][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.3.35 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.898305][ T5930] Tainted: [L]=SOFTLOCKUP [ 128.898317][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.898337][ T5930] Call Trace: [ 128.898347][ T5930] [ 128.898359][ T5930] dump_stack_lvl+0x100/0x190 [ 128.898413][ T5930] should_fail_ex.cold+0x5/0xa [ 128.898462][ T5930] should_failslab+0xc2/0x120 [ 128.898526][ T5930] __kmalloc_noprof+0xfc/0x820 [ 128.898571][ T5930] ? tomoyo_encode2+0xfb/0x3c0 [ 128.898630][ T5930] tomoyo_encode2+0xfb/0x3c0 [ 128.898685][ T5930] tomoyo_encode+0x29/0x50 [ 128.898732][ T5930] tomoyo_realpath_from_path+0x18c/0x690 [ 128.898794][ T5930] tomoyo_check_open_permission+0x2af/0x3c0 [ 128.898839][ T5930] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 128.898898][ T5930] ? hook_file_open+0x24f/0x8f0 [ 128.898973][ T5930] ? path_get+0x61/0x80 [ 128.899017][ T5930] tomoyo_file_open+0x6b/0x90 [ 128.899052][ T5930] security_file_open+0xb5/0x1e0 [ 128.899101][ T5930] do_dentry_open+0x588/0x14d0 [ 128.899148][ T5930] vfs_open+0x82/0x3f0 [ 128.899198][ T5930] path_openat+0x2873/0x4280 [ 128.899252][ T5930] ? __pfx_path_openat+0x10/0x10 [ 128.899300][ T5930] do_file_open+0x20e/0x430 [ 128.899340][ T5930] ? __pfx_do_file_open+0x10/0x10 [ 128.899406][ T5930] ? alloc_fd+0x471/0x7a0 [ 128.899445][ T5930] ? do_getname+0x191/0x390 [ 128.899493][ T5930] do_sys_openat2+0x10f/0x1e0 [ 128.899547][ T5930] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.899602][ T5930] ? do_raw_spin_lock+0x128/0x260 [ 128.899652][ T5930] __x64_sys_openat+0x12d/0x210 [ 128.899702][ T5930] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.899766][ T5930] do_syscall_64+0x115/0x840 [ 128.899796][ T5930] ? clear_bhb_loop+0x40/0x90 [ 128.899838][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.899874][ T5930] RIP: 0033:0x7f180059ce59 [ 128.899903][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.899934][ T5930] RSP: 002b:00007f18013ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.899968][ T5930] RAX: ffffffffffffffda RBX: 00007f1800816090 RCX: 00007f180059ce59 [ 128.899990][ T5930] RDX: 0000000000103e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 128.900011][ T5930] RBP: 00007f1800632e6f R08: 0000000000000000 R09: 0000000000000000 [ 128.900032][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.900052][ T5930] R13: 00007f1800816128 R14: 00007f1800816090 R15: 00007ffe951742d8 [ 128.900095][ T5930] [ 128.900320][ T5930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.303942][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 129.808488][ T5945] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.958503][ T5949] input: jJǸ-9%v\qlQ J86 as /devices/virtual/input/input5 [ 130.252970][ T5954] input: jJǸ-9%v\qlQ J86 as /devices/virtual/input/input6 [ 130.877781][ T5956] can0: slcan on ptm0. [ 131.050312][ T5956] can0 (unregistered): slcan off ptm0. [ 131.387739][ T5974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.4294967291), cmd(2) [ 133.330331][ T6012] ubi0: attaching mtd0 [ 133.363341][ T6012] ubi0: scanning is finished [ 133.783759][ T6012] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.823773][ T6012] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.859458][ T6012] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.898122][ T6012] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 133.992573][ T6012] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 134.026786][ T6012] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 134.050225][ T6012] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2917079192 [ 134.070654][ T6012] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 134.205156][ T6024] ubi0: background thread "ubi_bgt0d" started, PID 6024 [ 134.213864][ T6018] ubi0: detaching mtd0 [ 134.471119][ T6018] ubi0: mtd0 is detached [ 135.078151][ T6042] input: jJǸ-9%v\qlQ J86 as /devices/virtual/input/input7 [ 136.298586][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 137.134477][ T6059] can0: slcan on ptm0. [ 137.337472][ T6059] can0 (unregistered): slcan off ptm0. [ 137.784560][ T6077] FAULT_INJECTION: forcing a failure. [ 137.784560][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 137.808120][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: syz.1.59 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.808167][ T6077] Tainted: [L]=SOFTLOCKUP [ 137.808177][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.808195][ T6077] Call Trace: [ 137.808204][ T6077] [ 137.808215][ T6077] dump_stack_lvl+0x100/0x190 [ 137.808258][ T6077] should_fail_ex.cold+0x5/0xa [ 137.808297][ T6077] should_failslab+0xc2/0x120 [ 137.808338][ T6077] kmem_cache_alloc_noprof+0x91/0x6a0 [ 137.808384][ T6077] ? mas_preallocate+0x1105/0x14a0 [ 137.808425][ T6077] mas_preallocate+0x1105/0x14a0 [ 137.808466][ T6077] ? __pfx_mas_preallocate+0x10/0x10 [ 137.808509][ T6077] ? vm_area_alloc+0x1f/0x160 [ 137.808537][ T6077] ? lockdep_init_map_type+0x5c/0x250 [ 137.808570][ T6077] __mmap_region+0x1230/0x2db0 [ 137.808607][ T6077] ? __pfx___mmap_region+0x10/0x10 [ 137.808656][ T6077] ? __lock_acquire+0x49f/0x1a40 [ 137.808703][ T6077] ? __lock_acquire+0x49f/0x1a40 [ 137.808745][ T6077] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 137.808797][ T6077] ? rcu_is_watching+0x12/0xc0 [ 137.808831][ T6077] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 137.808863][ T6077] ? lockdep_hardirqs_on+0x78/0x100 [ 137.808960][ T6077] mmap_region+0x35d/0x620 [ 137.808994][ T6077] ? rcu_is_watching+0x12/0xc0 [ 137.809028][ T6077] ? __pfx_mmap_region+0x10/0x10 [ 137.809065][ T6077] ? cap_mmap_addr+0x4b/0x120 [ 137.809092][ T6077] ? bpf_lsm_mmap_addr+0x9/0x30 [ 137.809120][ T6077] ? security_mmap_addr+0x71/0x1e0 [ 137.809161][ T6077] ? __get_unmapped_area+0x255/0x3e0 [ 137.809207][ T6077] do_mmap+0xc63/0x12f0 [ 137.809255][ T6077] ? __pfx_do_mmap+0x10/0x10 [ 137.809296][ T6077] ? __pfx_down_write_killable+0x10/0x10 [ 137.809327][ T6077] ? __pfx_futex_wait+0x10/0x10 [ 137.809372][ T6077] vm_mmap_pgoff+0x29e/0x470 [ 137.809419][ T6077] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 137.809465][ T6077] ? __pfx_do_futex+0x10/0x10 [ 137.809510][ T6077] ksys_mmap_pgoff+0xe4/0x610 [ 137.809552][ T6077] ? __x64_sys_futex+0x358/0x4d0 [ 137.809586][ T6077] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.809627][ T6077] ? xfd_validate_state+0x129/0x190 [ 137.809681][ T6077] __x64_sys_mmap+0x125/0x190 [ 137.809722][ T6077] do_syscall_64+0x115/0x840 [ 137.809747][ T6077] ? clear_bhb_loop+0x40/0x90 [ 137.809783][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.809813][ T6077] RIP: 0033:0x7f8512f9ce59 [ 137.809838][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.809867][ T6077] RSP: 002b:00007f8513ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.809895][ T6077] RAX: ffffffffffffffda RBX: 00007f8513216090 RCX: 00007f8512f9ce59 [ 137.809917][ T6077] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 137.809936][ T6077] RBP: 00007f8513032e6f R08: 0000000000000401 R09: 0000000000008000 [ 137.809957][ T6077] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 137.809976][ T6077] R13: 00007f8513216128 R14: 00007f8513216090 R15: 00007ffc9c4ba348 [ 137.810018][ T6077] [ 137.917987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 139.434149][ T6104] input: jJǸ-9%v\qlQ J86 as /devices/virtual/input/input8 [ 140.087720][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.097664][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.211696][ T6126] hub 1-0:1.0: USB hub found [ 141.303109][ T6139] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 141.314614][ T6126] hub 1-0:1.0: 1 port detected [ 142.066951][ T6155] input: jJǸ-9%v\qlQ J86 as /devices/virtual/input/input9 [ 143.254757][ T6173] HfR: entered promiscuous mode [ 144.017915][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 145.291371][ T6213] futex_wake_op: syz.0.86 tries to shift op by -2048; fix this program [ 145.332065][ T6213] 0x000000000001-0x000000020000 : "" [ 145.385667][ T6213] ftl_cs: FTL header corrupt! [ 146.382703][ T6240] random: crng reseeded on system resumption [ 146.817365][ T6245] hub 1-0:1.0: USB hub found [ 146.827816][ T6245] hub 1-0:1.0: 1 port detected [ 147.968817][ T6262] FAULT_INJECTION: forcing a failure. [ 147.968817][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.008668][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.1.100 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.008717][ T6262] Tainted: [L]=SOFTLOCKUP [ 148.008731][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.008749][ T6262] Call Trace: [ 148.008759][ T6262] [ 148.008772][ T6262] dump_stack_lvl+0x100/0x190 [ 148.008819][ T6262] should_fail_ex.cold+0x5/0xa [ 148.008862][ T6262] _copy_to_user+0x32/0xd0 [ 148.008914][ T6262] simple_read_from_buffer+0xcb/0x170 [ 148.008978][ T6262] proc_fail_nth_read+0x1af/0x230 [ 148.009025][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.009073][ T6262] ? rw_verify_area+0xce/0x6d0 [ 148.009121][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.009166][ T6262] vfs_read+0x1e4/0xb40 [ 148.009202][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 148.009231][ T6262] ? __fget_files+0x215/0x3d0 [ 148.009271][ T6262] ? __fget_files+0x21f/0x3d0 [ 148.009313][ T6262] ksys_read+0x12a/0x250 [ 148.009348][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 148.009391][ T6262] do_syscall_64+0x115/0x840 [ 148.009420][ T6262] ? clear_bhb_loop+0x40/0x90 [ 148.009461][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.009494][ T6262] RIP: 0033:0x7f8512f5d68e [ 148.009521][ T6262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.009550][ T6262] RSP: 002b:00007f8513edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.009580][ T6262] RAX: ffffffffffffffda RBX: 00007f8513edf6c0 RCX: 00007f8512f5d68e [ 148.009601][ T6262] RDX: 000000000000000f RSI: 00007f8513edf0a0 RDI: 0000000000000004 [ 148.009619][ T6262] RBP: 00007f8513edf090 R08: 0000000000000000 R09: 0000000000000000 [ 148.009638][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.009656][ T6262] R13: 00007f8513216038 R14: 00007f8513215fa0 R15: 00007ffc9c4ba348 [ 148.009699][ T6262] [ 148.549458][ T6265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.599304][ T6271] process 'syz.1.101' launched '/dev/fd/12/./file0' with NULL argv: empty string added [ 149.209248][ T6278] HfR: entered promiscuous mode [ 149.709984][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 151.735007][ T6346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.775311][ T6349] FAULT_INJECTION: forcing a failure. [ 151.775311][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 151.838561][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.1.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.838618][ T6349] Tainted: [L]=SOFTLOCKUP [ 151.838631][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.838650][ T6349] Call Trace: [ 151.838661][ T6349] [ 151.838672][ T6349] dump_stack_lvl+0x100/0x190 [ 151.838725][ T6349] should_fail_ex.cold+0x5/0xa [ 151.838769][ T6349] should_failslab+0xc2/0x120 [ 151.838819][ T6349] __kvmalloc_node_noprof+0x116/0x970 [ 151.838865][ T6349] ? percpu_ref_init+0xec/0x3f0 [ 151.838908][ T6349] ? io_alloc_cache_init+0x38/0x170 [ 151.838957][ T6349] io_alloc_cache_init+0x38/0x170 [ 151.839002][ T6349] io_uring_setup.cold+0x450/0x1c2e [ 151.839059][ T6349] ? ksys_write+0x190/0x250 [ 151.839089][ T6349] ? ksys_write+0x190/0x250 [ 151.839120][ T6349] ? __pfx_io_uring_setup+0x10/0x10 [ 151.839156][ T6349] ? do_futex+0x190/0x440 [ 151.839197][ T6349] ? __pfx_do_futex+0x10/0x10 [ 151.839254][ T6349] ? xfd_validate_state+0x129/0x190 [ 151.839307][ T6349] __x64_sys_io_uring_setup+0xc2/0x170 [ 151.839343][ T6349] do_syscall_64+0x115/0x840 [ 151.839377][ T6349] ? clear_bhb_loop+0x40/0x90 [ 151.839420][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.839464][ T6349] RIP: 0033:0x7f8512f9ce59 [ 151.839493][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.839524][ T6349] RSP: 002b:00007f8513edf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 151.839557][ T6349] RAX: ffffffffffffffda RBX: 00007f8513215fa0 RCX: 00007f8512f9ce59 [ 151.839579][ T6349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 151.839599][ T6349] RBP: 00007f8513032e6f R08: 0000000000000000 R09: 0000000000000000 [ 151.839619][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.839638][ T6349] R13: 00007f8513216038 R14: 00007f8513215fa0 R15: 00007ffc9c4ba348 [ 151.839677][ T6349] [ 152.634111][ T6365] : renamed from bond0 (while UP) [ 153.873978][ T6384] zswap: compressor not available [ 154.297251][ T6403] FAULT_INJECTION: forcing a failure. [ 154.297251][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 154.311760][ T6403] CPU: 1 UID: 0 PID: 6403 Comm: syz.0.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.311812][ T6403] Tainted: [L]=SOFTLOCKUP [ 154.311824][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.311843][ T6403] Call Trace: [ 154.311853][ T6403] [ 154.311865][ T6403] dump_stack_lvl+0x100/0x190 [ 154.311912][ T6403] should_fail_ex.cold+0x5/0xa [ 154.311960][ T6403] should_failslab+0xc2/0x120 [ 154.312011][ T6403] kmem_cache_alloc_noprof+0x91/0x6a0 [ 154.312067][ T6403] ? vm_area_alloc+0x1f/0x160 [ 154.312109][ T6403] vm_area_alloc+0x1f/0x160 [ 154.312142][ T6403] create_init_stack_vma+0x2ad/0xc10 [ 154.312198][ T6403] ? __pfx_create_init_stack_vma+0x10/0x10 [ 154.312239][ T6403] ? find_held_lock+0x2b/0x80 [ 154.312284][ T6403] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 154.312349][ T6403] ? do_raw_spin_lock+0x128/0x260 [ 154.312387][ T6403] ? find_held_lock+0x2b/0x80 [ 154.312430][ T6403] ? alloc_bprm+0x548/0x9d0 [ 154.312480][ T6403] ? alloc_bprm+0x548/0x9d0 [ 154.312540][ T6403] alloc_bprm+0x575/0x9d0 [ 154.312598][ T6403] do_execveat_common.isra.0+0x19c/0x580 [ 154.312655][ T6403] ? do_getname+0x191/0x390 [ 154.312703][ T6403] __x64_sys_execveat+0xdf/0x130 [ 154.312761][ T6403] do_syscall_64+0x115/0x840 [ 154.312791][ T6403] ? clear_bhb_loop+0x40/0x90 [ 154.312833][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.312869][ T6403] RIP: 0033:0x7f52bef9ce59 [ 154.312897][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.312930][ T6403] RSP: 002b:00007f52bfdea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 154.312962][ T6403] RAX: ffffffffffffffda RBX: 00007f52bf215fa0 RCX: 00007f52bef9ce59 [ 154.312985][ T6403] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 154.313005][ T6403] RBP: 00007f52bf032e6f R08: 0000000000001000 R09: 0000000000000000 [ 154.313025][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.313044][ T6403] R13: 00007f52bf216038 R14: 00007f52bf215fa0 R15: 00007ffe17b8fb48 [ 154.313095][ T6403] [ 155.615849][ T5635] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 157.161316][ T6443] FAULT_INJECTION: forcing a failure. [ 157.161316][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 157.196610][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.1.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.196649][ T6443] Tainted: [L]=SOFTLOCKUP [ 157.196657][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.196671][ T6443] Call Trace: [ 157.196679][ T6443] [ 157.196715][ T6443] dump_stack_lvl+0x100/0x190 [ 157.196763][ T6443] should_fail_ex.cold+0x5/0xa [ 157.196810][ T6443] should_failslab+0xc2/0x120 [ 157.196865][ T6443] __kmalloc_cache_noprof+0x91/0x6c0 [ 157.196905][ T6443] ? sctp_add_bind_addr+0xae/0x3e0 [ 157.196947][ T6443] sctp_add_bind_addr+0xae/0x3e0 [ 157.196996][ T6443] sctp_copy_local_addr_list+0x349/0x550 [ 157.197044][ T6443] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 157.197086][ T6443] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 157.197137][ T6443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.197195][ T6443] sctp_bind_addr_copy+0xe0/0x530 [ 157.197241][ T6443] sctp_sf_do_unexpected_init.isra.0+0xa0c/0x18c0 [ 157.197292][ T6443] ? __pfx_sctp_sf_do_unexpected_init.isra.0+0x10/0x10 [ 157.197334][ T6443] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 157.197378][ T6443] ? __pfx_sctp_cname+0x10/0x10 [ 157.197411][ T6443] sctp_do_sm+0x17a/0x5be0 [ 157.197466][ T6443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.197528][ T6443] ? __pfx_sctp_do_sm+0x10/0x10 [ 157.197585][ T6443] ? sctp_ulpevent_notify_peer_addr_change+0xf3/0xb70 [ 157.197681][ T6443] ? ktime_get+0x22c/0x320 [ 157.197710][ T6443] ? lockdep_hardirqs_on+0x78/0x100 [ 157.197772][ T6443] sctp_assoc_bh_rcv+0x392/0x6f0 [ 157.197830][ T6443] sctp_inq_push+0x1db/0x280 [ 157.197880][ T6443] sctp_backlog_rcv+0x169/0x590 [ 157.197939][ T6443] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 157.198002][ T6443] __release_sock+0x3a2/0x440 [ 157.198056][ T6443] ? __pfx_sctp_inet_connect+0x10/0x10 [ 157.198104][ T6443] release_sock+0x1e5/0x280 [ 157.198147][ T6443] sctp_inet_connect+0x16e/0x220 [ 157.198199][ T6443] __sys_connect_file+0x141/0x1a0 [ 157.198240][ T6443] __sys_connect+0x141/0x170 [ 157.198275][ T6443] ? __pfx___sys_connect+0x10/0x10 [ 157.198334][ T6443] __x64_sys_connect+0x72/0xb0 [ 157.198366][ T6443] ? lockdep_hardirqs_on+0x78/0x100 [ 157.198420][ T6443] do_syscall_64+0x115/0x840 [ 157.198450][ T6443] ? clear_bhb_loop+0x40/0x90 [ 157.198494][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.198530][ T6443] RIP: 0033:0x7f8512f9ce59 [ 157.198559][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.198590][ T6443] RSP: 002b:00007f8513edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 157.198621][ T6443] RAX: ffffffffffffffda RBX: 00007f8513215fa0 RCX: 00007f8512f9ce59 [ 157.198643][ T6443] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 157.198663][ T6443] RBP: 00007f8513032e6f R08: 0000000000000000 R09: 0000000000000000 [ 157.198682][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.198701][ T6443] R13: 00007f8513216038 R14: 00007f8513215fa0 R15: 00007ffc9c4ba348 [ 157.198743][ T6443] [ 158.001900][ T6455] random: crng reseeded on system resumption [ 158.758779][ T6448] smpboot: CPU 1 is now offline [ 159.743885][ T6472] zswap: compressor 000 not available [ 159.944374][ T30] audit: type=1800 audit(1843104542.640:3): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="version" dev="configfs" ino=11020 res=0 errno=0 [ 160.159855][ T6485] FAULT_INJECTION: forcing a failure. [ 160.159855][ T6485] name fail_futex, interval 1, probability 0, space 0, times 1 [ 160.226593][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.1.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.226632][ T6485] Tainted: [L]=SOFTLOCKUP [ 160.226640][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.226654][ T6485] Call Trace: [ 160.226662][ T6485] [ 160.226670][ T6485] dump_stack_lvl+0x100/0x190 [ 160.226708][ T6485] should_fail_ex.cold+0x5/0xa [ 160.226740][ T6485] get_futex_key+0x1d2/0x14f0 [ 160.226768][ T6485] ? __pfx_get_futex_key+0x10/0x10 [ 160.226792][ T6485] ? __pfx_futex_hash+0x10/0x10 [ 160.226823][ T6485] futex_wake+0xf4/0x5e0 [ 160.226852][ T6485] ? futex_wait+0x11e/0x370 [ 160.226887][ T6485] ? __pfx_futex_wake+0x10/0x10 [ 160.226922][ T6485] ? find_held_lock+0x2b/0x80 [ 160.226958][ T6485] ? msgctl_stat+0x543/0x780 [ 160.226995][ T6485] ? msgctl_stat+0x543/0x780 [ 160.227042][ T6485] do_futex+0x2b2/0x440 [ 160.227071][ T6485] ? __pfx_do_futex+0x10/0x10 [ 160.227096][ T6485] ? ksys_msgctl.constprop.0+0x1a8/0x340 [ 160.227141][ T6485] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 160.227179][ T6485] ? find_held_lock+0x2b/0x80 [ 160.227210][ T6485] ? setid_policy_lookup+0x10c/0x350 [ 160.227249][ T6485] __x64_sys_futex+0x34f/0x4d0 [ 160.227281][ T6485] ? __pfx___x64_sys_futex+0x10/0x10 [ 160.227324][ T6485] do_syscall_64+0x115/0x840 [ 160.227346][ T6485] ? clear_bhb_loop+0x40/0x90 [ 160.227375][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.227401][ T6485] RIP: 0033:0x7f8512f9ce59 [ 160.227420][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.227443][ T6485] RSP: 002b:00007f8513e9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.227465][ T6485] RAX: ffffffffffffffda RBX: 00007f8513216188 RCX: 00007f8512f9ce59 [ 160.227487][ T6485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f851321618c [ 160.227502][ T6485] RBP: 00007f8513216180 R08: 0000000000000001 R09: 0000000000000000 [ 160.227516][ T6485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 160.227531][ T6485] R13: 00007f8513216218 R14: 00007ffc9c4ba260 R15: 00007ffc9c4ba348 [ 160.227561][ T6485] [ 163.893233][ T6520] syz.2.157 (6520) used greatest stack depth: 18704 bytes left [ 164.249030][ T6532] netlink: 346 bytes leftover after parsing attributes in process `syz.2.158'. [ 164.933416][ T6544] ubi0: attaching mtd0 [ 164.974550][ T6544] ubi0: scanning is finished [ 165.385837][ T6544] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 165.517857][ T6544] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 165.621171][ T6558] block2mtd: illegal erase size [ 165.666816][ T6544] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 165.767676][ T6563] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:1073741829 is already present [ 165.796789][ T6544] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 165.925501][ T6544] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 166.035050][ T6544] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 166.209990][ T6544] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2917079192 [ 166.433287][ T6544] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 166.713948][ T6555] ubi0: background thread "ubi_bgt0d" started, PID 6555 [ 166.746554][ T6547] ubi0: detaching mtd0 [ 166.834658][ T6573] input: f as /devices/virtual/input/input10 [ 167.046254][ T6547] ubi0: mtd0 is detached [ 167.225464][ T6577] TCP: TCP_TX_DELAY enabled [ 167.921902][ T6534] Process accounting resumed [ 168.727999][ T6596] netlink: Unknown NAT attribute (type=262, max=9) [ 169.858060][ T6618] FAULT_INJECTION: forcing a failure. [ 169.858060][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 169.908002][ T6620] FAULT_INJECTION: forcing a failure. [ 169.908002][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 169.929105][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.3.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.929142][ T6618] Tainted: [L]=SOFTLOCKUP [ 169.929150][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.929170][ T6618] Call Trace: [ 169.929178][ T6618] [ 169.929187][ T6618] dump_stack_lvl+0x100/0x190 [ 169.929221][ T6618] should_fail_ex.cold+0x5/0xa [ 169.929251][ T6618] should_failslab+0xc2/0x120 [ 169.929285][ T6618] __kmalloc_noprof+0xfc/0x820 [ 169.929313][ T6618] ? rcu_is_watching+0x12/0xc0 [ 169.929342][ T6618] ? tomoyo_realpath_from_path+0xb6/0x690 [ 169.929383][ T6618] tomoyo_realpath_from_path+0xb6/0x690 [ 169.929424][ T6618] tomoyo_path_number_perm+0x23c/0x580 [ 169.929451][ T6618] ? tomoyo_path_number_perm+0x22e/0x580 [ 169.929482][ T6618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.929538][ T6618] ? find_held_lock+0x2b/0x80 [ 169.929568][ T6618] ? __fget_files+0x215/0x3d0 [ 169.929588][ T6618] ? hook_file_ioctl_common+0x140/0x440 [ 169.929616][ T6618] ? __fget_files+0x215/0x3d0 [ 169.929642][ T6618] ? __fget_files+0x21f/0x3d0 [ 169.929668][ T6618] security_file_ioctl+0xd3/0x230 [ 169.929707][ T6618] __x64_sys_ioctl+0xb7/0x210 [ 169.929743][ T6618] do_syscall_64+0x115/0x840 [ 169.929764][ T6618] ? clear_bhb_loop+0x40/0x90 [ 169.929793][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.929816][ T6618] RIP: 0033:0x7f180059ce59 [ 169.929835][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.929857][ T6618] RSP: 002b:00007f18013ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.929878][ T6618] RAX: ffffffffffffffda RBX: 00007f1800815fa0 RCX: 00007f180059ce59 [ 169.929894][ T6618] RDX: 00002000000006c0 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 169.929908][ T6618] RBP: 00007f18013ef090 R08: 0000000000000000 R09: 0000000000000000 [ 169.929921][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.929935][ T6618] R13: 00007f1800816038 R14: 00007f1800815fa0 R15: 00007ffe951742d8 [ 169.929964][ T6618] [ 169.936460][ T6618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.176661][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.2.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.176703][ T6620] Tainted: [L]=SOFTLOCKUP [ 170.176712][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.176728][ T6620] Call Trace: [ 170.176736][ T6620] [ 170.176745][ T6620] dump_stack_lvl+0x100/0x190 [ 170.176779][ T6620] should_fail_ex.cold+0x5/0xa [ 170.176813][ T6620] should_failslab+0xc2/0x120 [ 170.176848][ T6620] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 170.176881][ T6620] ? __d_alloc+0x35/0xa50 [ 170.176912][ T6620] __d_alloc+0x35/0xa50 [ 170.176938][ T6620] ? __lock_acquire+0x49f/0x1a40 [ 170.176965][ T6620] d_alloc_parallel+0x105/0x14b0 [ 170.177010][ T6620] ? __pfx_d_alloc_parallel+0x10/0x10 [ 170.177044][ T6620] ? __d_lookup+0x25c/0x4a0 [ 170.177084][ T6620] ? __d_lookup+0x266/0x4a0 [ 170.177125][ T6620] path_openat+0x271c/0x4280 [ 170.177162][ T6620] ? __pfx_path_openat+0x10/0x10 [ 170.177197][ T6620] do_file_open+0x20e/0x430 [ 170.177224][ T6620] ? __pfx_do_file_open+0x10/0x10 [ 170.177277][ T6620] ? alloc_fd+0x471/0x7a0 [ 170.177304][ T6620] ? do_getname+0x191/0x390 [ 170.177337][ T6620] do_sys_openat2+0x10f/0x1e0 [ 170.177369][ T6620] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.177404][ T6620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.177453][ T6620] __x64_sys_openat+0x12d/0x210 [ 170.177486][ T6620] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.177520][ T6620] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 170.177569][ T6620] ? syscall_user_dispatch+0x76/0x130 [ 170.177602][ T6620] do_syscall_64+0x115/0x840 [ 170.177623][ T6620] ? clear_bhb_loop+0x40/0x90 [ 170.177653][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.177677][ T6620] RIP: 0033:0x7f49e059ce59 [ 170.177697][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.177722][ T6620] RSP: 002b:00007f49e1417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.177746][ T6620] RAX: ffffffffffffffda RBX: 00007f49e0815fa0 RCX: 00007f49e059ce59 [ 170.177762][ T6620] RDX: 0000000000141000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 170.177777][ T6620] RBP: 00007f49e0632e6f R08: 0000000000000000 R09: 0000000000000000 [ 170.177792][ T6620] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 170.177811][ T6620] R13: 00007f49e0816038 R14: 00007f49e0815fa0 R15: 00007ffda9cea8e8 [ 170.177841][ T6620] [ 170.989289][ T6626] syz.0.181 uses obsolete (PF_INET,SOCK_PACKET) [ 171.424617][ T6633] block2mtd: illegal erase size [ 171.547193][ T9] ================================================================== [ 171.547219][ T9] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 171.547255][ T9] Write of size 8 at addr ffffc90004749660 by task kworker/0:0/9 [ 171.547274][ T9] [ 171.547287][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.547318][ T9] Tainted: [L]=SOFTLOCKUP [ 171.547327][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.547345][ T9] Workqueue: events_power_efficient fb_flashcursor [ 171.547379][ T9] Call Trace: [ 171.547386][ T9] [ 171.547395][ T9] dump_stack_lvl+0x100/0x190 [ 171.547431][ T9] print_report+0x13d/0x4b0 [ 171.547464][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 171.547502][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 171.547529][ T9] kasan_report+0xdf/0x1c0 [ 171.547562][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 171.547594][ T9] sys_imageblit+0x19fb/0x1d60 [ 171.547626][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 171.547660][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 171.547700][ T9] soft_cursor+0x524/0xa10 [ 171.547727][ T9] bit_cursor+0xca1/0x1490 [ 171.547753][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 171.547779][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.547814][ T9] ? get_color+0x1da/0x450 [ 171.547846][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 171.547867][ T9] fb_flashcursor+0x338/0x430 [ 171.547901][ T9] process_one_work+0xa23/0x1940 [ 171.547942][ T9] ? __pfx_process_one_work+0x10/0x10 [ 171.547980][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 171.548022][ T9] worker_thread+0x5ef/0xe50 [ 171.548061][ T9] ? kthread+0x13a/0x450 [ 171.548090][ T9] ? __pfx_worker_thread+0x10/0x10 [ 171.548123][ T9] kthread+0x370/0x450 [ 171.548153][ T9] ? __pfx_kthread+0x10/0x10 [ 171.548184][ T9] ret_from_fork+0x72b/0xd50 [ 171.548213][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 171.548242][ T9] ? __switch_to+0x800/0x10f0 [ 171.548261][ T9] ? __switch_to_asm+0x39/0x70 [ 171.548294][ T9] ? __pfx_kthread+0x10/0x10 [ 171.548326][ T9] ret_from_fork_asm+0x1a/0x30 [ 171.548366][ T9] [ 171.548374][ T9] [ 171.548379][ T9] The buggy address belongs to a vmalloc virtual mapping [ 171.548395][ T9] Memory state around the buggy address: [ 171.548406][ T9] ffffc90004749500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 171.548426][ T9] ffffc90004749580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 171.548442][ T9] >ffffc90004749600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 171.548455][ T9] ^ [ 171.548468][ T9] ffffc90004749680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 171.548483][ T9] ffffc90004749700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 171.548496][ T9] ================================================================== [ 171.548525][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.548541][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.548572][ T9] Tainted: [L]=SOFTLOCKUP [ 171.548580][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.548598][ T9] Workqueue: events_power_efficient fb_flashcursor [ 171.548631][ T9] Call Trace: [ 171.548638][ T9] [ 171.548646][ T9] dump_stack_lvl+0x100/0x190 [ 171.548673][ T9] vpanic+0x552/0x970 [ 171.548695][ T9] ? __pfx_vpanic+0x10/0x10 [ 171.548716][ T9] ? mark_held_locks+0x40/0x70 [ 171.548753][ T9] ? irqentry_exit+0x24d/0xa00 [ 171.548797][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 171.548825][ T9] panic+0xd1/0xe0 [ 171.548845][ T9] ? __pfx_panic+0x10/0x10 [ 171.548871][ T9] ? check_panic_on_warn+0x1f/0x90 [ 171.548908][ T9] check_panic_on_warn.cold+0x19/0x34 [ 171.548936][ T9] end_report.part.0+0x3a/0x90 [ 171.548969][ T9] kasan_report.cold+0xe/0x18 [ 171.549007][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 171.549039][ T9] sys_imageblit+0x19fb/0x1d60 [ 171.549071][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 171.549105][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 171.549145][ T9] soft_cursor+0x524/0xa10 [ 171.549172][ T9] bit_cursor+0xca1/0x1490 [ 171.549198][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 171.549225][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.549260][ T9] ? get_color+0x1da/0x450 [ 171.549292][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 171.549313][ T9] fb_flashcursor+0x338/0x430 [ 171.549347][ T9] process_one_work+0xa23/0x1940 [ 171.549388][ T9] ? __pfx_process_one_work+0x10/0x10 [ 171.549426][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 171.549461][ T9] worker_thread+0x5ef/0xe50 [ 171.549500][ T9] ? kthread+0x13a/0x450 [ 171.549530][ T9] ? __pfx_worker_thread+0x10/0x10 [ 171.549564][ T9] kthread+0x370/0x450 [ 171.549594][ T9] ? __pfx_kthread+0x10/0x10 [ 171.549626][ T9] ret_from_fork+0x72b/0xd50 [ 171.549655][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 171.549691][ T9] ? __switch_to+0x800/0x10f0 [ 171.549711][ T9] ? __switch_to_asm+0x39/0x70 [ 171.549745][ T9] ? __pfx_kthread+0x10/0x10 [ 171.549777][ T9] ret_from_fork_asm+0x1a/0x30 [ 171.549818][ T9] [ 171.549893][ T9] Kernel Offset: disabled