last executing test programs: 9.272032645s ago: executing program 2 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) 9.186191479s ago: executing program 2 (id=711): mmap$auto(0x400, 0x140002020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0x10000, 0x809b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000580)=@in={0x2, 0x0, @loopback}, 0x6a) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="020000"], 0x2f8}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000ac0)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000895) connect$auto(r0, &(0x7f0000000500)=@in={0x2, 0x4e23, @multicast1}, 0x0) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x6, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x448001, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) sysfs$auto(0x2, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) mount$auto(0x0, 0x0, 0x0, 0x1, 0x0) poll$auto(&(0x7f0000000a80)={r0, 0x2, 0x8}, 0x4, 0xfffffff7) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) mmap$auto(0x0, 0xe, 0x8, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000004c0), 0x44a000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x80400, 0x0) 6.437900699s ago: executing program 2 (id=722): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xa}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xfdf31875370e1716) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1100, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = prctl$auto_PR_SCHED_CORE_CREATE(0x3, 0x1, 0xffffffffffffffff, 0xe, 0xffffffffffffffbb) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="1b0026a92dd86ee006db5b74c33c3009bd7400000000e3ff0700100003800c000680080000000400338012000100898769434d47ab105f4190826891d2aa16753597f7bbfb2350fd4c4dfe907b922bec2431df82c0e2310000000000000003e17206a70fabb3fbde405b812799a2abef2d", @ANYRES8=r5], 0x40}, 0x1, 0x0, 0x0, 0x4004054}, 0xc800) 5.924081003s ago: executing program 0 (id=723): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k', 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k', 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mmap$auto(0x9000, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) 5.386409157s ago: executing program 2 (id=724): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x21, 0x1, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4bfb, 0x9) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/geneve0/ioam6_id_wide\x00', 0x1c9082, 0x0) sendfile$auto(r4, 0x3, 0x0, 0x400000000008) 5.339839006s ago: executing program 0 (id=725): r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000024c0), 0x2802, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r1 = memfd_create$auto(0x0, 0x4) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x3, 0x38) alarm$auto(0xe4a) read$auto_check_wx_fops_(r0, &(0x7f0000002500)=""/104, 0x68) 4.312863353s ago: executing program 0 (id=728): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x8001, 0x20001, 0x1ef, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x6, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7c, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8001) close_range$auto(0xffffffffffffffff, r1, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x3fffffffff, 0x3}, 0x6f4) bpf$auto(0x100000001, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) r2 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x50) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x2a6efb5d) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1c90c0, 0x0) connect$auto(0x3, 0x0, 0x50) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x40000, 0x0) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x3f7780, 0x0) ioctl$auto_RNDADDENTROPY2(r4, 0x40085203, 0x0) ioctl$auto_SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000280)) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/markers\x00', 0x210100, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/mtd/mtd0/mtd0/nvmem\x00', 0x0, 0x0) socket(0xa, 0x80003, 0x3a) r6 = setfsuid$auto(0xee00) setfsuid$auto(0xee01) setresuid$auto(r6, r6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) read$auto(r5, &(0x7f0000002440)='\x00', 0xd) 3.826762503s ago: executing program 3 (id=733): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r0}, 0x92) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) getrlimit$auto(0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.541808457s ago: executing program 2 (id=735): syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/time_for_children\x00') unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007b, 0x7, 0x0, 0xe, 0x22000, 0x208, 0x0, 0x84, 0x8000000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x10000000, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd]}, 0x1fa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000380)="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") r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x81400, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) r2 = clone3$auto(0x0, 0x1) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r4, 0x40045017, &(0x7f0000000180)="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") ioctl$auto_HPET_IRQFREQ(r3, 0x40086806, &(0x7f0000000080)=0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) pkey_free$auto(0x8) 2.007331951s ago: executing program 2 (id=736): unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/snd/pcmC1D0p\x00', 0x80000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r0, 0xc0844123, &(0x7f0000000c80)={0xfffff0de, @status={0xe93f, 0x0, 0x3, 0x6, 0x1, 0x2df, 0x7ff, 0xccf6}, @reserved="9d92f5c7f63e1053e7ca4e6b87cf17e2e0a0810a15882ffcb924e8e9bc7ac33e01a3be43889309f30d432c352cf8d97ea92cd7a49a1d43cf93c72f0bad22eb78"}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = clone3$auto(0x0, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x523002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) membarrier$auto_MEMBARRIER_CMD_GLOBAL_EXPEDITED(0x2, 0x0, 0x8a4) unshare$auto(0x40000080) ioctl$auto_HPET_IRQFREQ(0xffffffffffffffff, 0x40086806, &(0x7f0000000280)=0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) pkey_free$auto(0x8) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 2.006935123s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) acct$auto(&(0x7f00000000c0)='/proc/net/rpc/use-gss-\x06roxy\x00') sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, r2, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x5, 0x5, 0x0, 0x1, [@generic="01"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000180)={{0xfffffffc, 0x0, 0x0, 0x5, 0x5f, 0xcf, 0x5}, &(0x7f0000000100)=0xd, 0x0, 0x7, 0x7, 0x6, 0x3, 0x14cd21ec, 0x3, 0x7, 0x4, @inferred=0xffffffffffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r7, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x72, 0xac, "8301d097cad41fb94bed58a942b6a5721aed3ac377a0badbd68ff41ffe52beb2fb2dc9251f16cde9b7657cb2e0b5f96aa15dded41ac4a9370cf778a07a4aea55b8417a2717949f66b20ddf79f3f47c646d3a35a159ba6c546aa146e1e0ea8e26695e247dffcf14545b4c88829e62"}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xff}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000480)={0x1, @inferred=r0, @inferred=r0, 0x7, 0x3, '\x00', {0x10001, 0x7, 0x3, r3, r4, 0x40, 0x6, 0xa8a, {0x3cf, 0xdc81}, {0x9, 0x1}, {0x0, 0x2}, 0x6, 0x2, 0x206b, 0x8, 0x6, 0x100, 0x8, 0xf95, 0x2, 0x5, '\x00', 0x7, 0x2, 0x2, 0x9}}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000001d40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000540)={0x1790, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_MLD_ADDR={0xae, 0x13a, "8db96b467cdcf6204a5bc690390dfff31821b01550087d9a01a7648c341588bebf1bc1cc96179a3c44cb1ef14f75e0c987677d9a46108a05b2b076268c67bb86364ed717603fcc9d1dcd72da18ba0361349a46d014b1706bc2cec92b51f0e5bcf72cbe90b93e47ad3f56acff54355699a8e5dde17f1184f45287a2ce6b618d0947123615915d652888302a21e86961af0c03d5710747f1d49fc39ad8babc59e98051ba80196921489544"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x1207, 0x23, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @uid=r8}, @nested={0x1110, 0x104, 0x0, 0x1, [@typed={0x1004, 0x11, 0x0, 0x0, @binary="c33d3a328a956e20e5ffc64a6048f43b31e579567480c91795a97358b97e9d0298e8bdbbcab1db2c82b673be042ef06599733804ce17d6c3a0b1101b84af5d909f985c6af9e04d97eae2d054666d53cd0b8bb7d0e38bc15bdcc9e13ca3520cc87454634cf2d6feb664a8372363024775fc09a513c8212f1d61469af80fbc2cf4bc61157d7866cdda501ed1c5dd15eca45aa8897d44c72a975144686b8d9f978bfbb5268edc4afeeeadf5ca55121b22c103d3bb896c78fda7f84fed1e913ccde8a0785c869b9fdb86ce098c5688ffadf9403043772107267f0742b183f8281d4b581e21f8a32cb91d767415d86bd226d57c180edbd5293b13e28f6b190f18869aaea66f4e918bf4ad849584628cf22b0822f98b114aead43abd02cd38257903f89c667fbf268932398258783c830a6f83bf8f147b4c83ef23dac10d20be596346fe425816e54e295ab8f339b2eaef10eb9ae6aa92808b3eb2bf7213fa764fd7b47d188f8d41ead3b32f7b8d7b145e0e65b1f4a51ecc0b401ffffaec5966a76bc4abaecc15db20b0fc31a9ac7f31f71668de5954231e0d8abcafa9f7b063dfc6930c0f26ee1b731fe0e499e754337b2c4845cbe11fdd0de1033c9dc720fc6ec4e204a959d2f59fdb658ff3fbd2cccf444952771e7da4ae26fc0cc62cfff2adf492fa0dd2f3874ccf2d53ecfe604d5bf01f600f803e50ec289c303950b456a51ff716259739fb5cb20e197ed2f903c3ddf9c504c9fb09b0aab9e8053cba6b9489ce922fd5165bd3d1cc907a6bbc4871df0af7e4f35b70c665a4a7f637154ecfc8c975d998a79fc52a3ac3d5dfd631783d834ecf399dfa09cd0b2fa5589e75378bd328d4193527eeab23b286bd74436b8a0999f66e040d0a02685ca3d346fab161a74d6fb06fcfa838c2d672b9f188570c0538e4b39a2cb1e451ad41c4312e8f87b5003bc44e036ba5749f7ffe5e1eb6acd21fc3df0a7addcefca9c6d58ba64043a19ca917d3f6dbc446ac73c02b2344e3c0eba9bd21f424bd3dab2aec0a8ff8c300ab68f596e47188771ade8c0915df514f3b848b17bbb1e42072bc588c00e5e7ebd5879d5d884edbd692fa8f63cf796722cad1ae03b2f904ab5d079c6336d0ac7e72218a659be53678c3755cc5ba198dc9ffd5a6f71e8153d80e42fe63e466bc382918dc96882ae4dc19bccea3e875a445e283b46dd0dad80dc92eefeeeeb812eb2abe1ecb29efb651a0b408e591a140adcdb3e6631ffc2968267fbfe2ed4763276f19b6958e3f4484c0d5e057516935203762eafcf3bfcc1284e492774aec9d0b4790fa98e9560c9c44e6f3ae203f7a229babcd45d9411d65e7b37a75adf56b29eaae5120f54d91fe773642eaeab5a5f59541c7e4de36fbc34098cd27d38e088f6fb8bf9841a521eee658a91e02a561a25a008b14a46e2e3721128ef0e9db735d5e6272a78ada92c8ba59118c072d2d2db7b6a77a6a695217735a1b8cd1945b6bcb24a3a3a38d5e949f59d968337b1afef5909f2e13c1e1433fef754f73afab88d7d2c92d43edafa7c50da34bbfd5861d47a9572c83b1c6141669712449076cbb6a79bdb0ca82e8f18b9c28f3b2ccb2d8f0f4b9277bd3a89f57dd6e74791a6fd3dca3c94237f0c9bae3913b0853cd515b0b6375275cf3e4eb7af8ea2e261932aaf9cf098ac21dfa8fe863bbc4f0886fecdb812ef5a2b6613b429d8569e6ab13a2f7b5e0f5348464cfeba427bde038fe042059b25f2bf7b5eea14b7d3d9c4b5cf26446b0978d17f9d236fa8a567ee09440732253ec4926f6cf30aa89d8ad8a5a61dd1f4e8e7f49e3cdb71f70ada795ad92213e6cec8459d73b8f90e5b7cc4bcec9d6ce899d562eb0fe8b34863fd0b5554715894597c860ca0abe8b646861f67bc567eb2683a09c39fc21ccf88a2fc4fee60c62e984df270e21631d9aa331a6c05ba5e506df7b5e87590fa5cd409db02a378c197d6faacf2d46f828005fc35e4a24fa7a59550cb24c6b14b3a2288d07e46fa9839ae7c38ac9d8fce1f5206e10057a74e7fafe5140cffea8499bd3a4cb5f142dae3dd9649a2ac3bdd852aa7c027499aaf94c57e4580702ef4a82170a2759e055dd1800f25ded8b4faa871504445f6e1ed6ee409e6f7c76c381a2cea6d16c94544f43a35759297eb7c971d4421bebdbd16ebb3c4255c33bb62459a91727acf50dab6427d09dafca8131951ea212bf9841725f623916574f72d17ad06d7140640b9eb268d451f2f197595b59cdd944c4ffd521863dea4eb06367a9660dc299d6c5f200cbf2ced45a0eb0bce166a2225d487e09745f72f0c87b74aaa2d15fd477114c5f7148ce75fab32b319ed5f91cf65b30bd20fd0963cc9fd29033dade5d40b599a96d17eef58c5b890215d7398fbc4172b1ded572328ee69f2db4f5f42e4c24cb147daf1854e568196ee4db1186ca8dea5f085c4d8cb65fe6cb04762edb648e6421c72b8df85edf5ebffc317afa36841f204ff1bb18d11c8bb2dae256a06ad194fe4a34835bf76faeb0c9e8d97b66645ed905c151e812e1728d615cb107c75d00635df2a39105d83b8d3f552acaa3abeda099ac356d9a6ea8ef7556a117e0f1f4d18a59ef04f99aef0e161bca64a4abbc364080cd2428eb21afda396219b7e652c16aad33b97f5bed3f57f0672477f513817f14d59c8c7a7f5d63771335449bb56a8ecd36ae7f58602c76eda028ab469beab6a0f8cd012f396a02532a40327fa0c88680c8132158033af12a56a3c42cdc1d490950ea1758541331dad6209c1e2af79106e49495ac80435f5bb650d4312baa90db3671648b355a0b95064813e30b5a0ad88a9384de5f458f63c152d5dee7b92e7978f90d1182874c0416e9a3b91f07e4daba9415b211ac21ebe7d01552cb92508b048104410a81549547eea914a2373da0ec14a6ea341c0964d14bb2c0a95848b6f9a581505b529867ae0b2081c3ee92f79ac0bc45f6bef4bab50f35b7df3570fad666c87a3dbeb5e8885eb9f4ee608d99a94bdbf25df6f1f5253eeb25a28e03c0706e6fa3b497577f9d5d31225a3b511dc49f1dbd0f9d007637ab77b6fa17a4a525852051d33099e82d043449f904be0792ea655a8a9238db98ef3f07a1270570cf797789026a48b4c32c69b72ca70f18deaaf9c815367ad4fd33681a289e5703f6ac0f0a572214be2f2e6221919cf35e5131258fbdd42f05b1fca443a12b58133b5633576f931f6dc101086e8854d01c6f04559614985f8694d22a166bfddd570c497ab4e0c5a2161a34f4e067494168e0eaea1dafef5d651c117c9474aa948a2ca2748cb63992374035d916e27184d6ae5785df0f57841262e48f40a113df4e0f6bdc48f8d0a04a5a20e1c9b52a69f455ced5762b07a78f64eec217cdf421de82bc2d4d7fbf53a3fdec9bec89ff80a7517547ab31f4ec814940091fc2f3e8868a5f0ec6ad85f3a28d179d6b88857193aa1e201060e94c644cd2b0f08039848c2cbbd5860964cb9af54fd691c80bd4382a4fd564c9595bb0d83b227d38acbce4b46a24782579ad8d0a41cf1e85b76c8db176057036cd0fb4e7da74fd0b473cec2c52605ef9c0285a45e47c450b27ac21275daf379161bd7511852ee48cd15e2107865ca9aa467235a630f1550dfd04c1eba2f6faf83f205866ee651f8bf72478da44761f78ba8463ae2ff587ef7e821e1eb180d4d1469c548a1514c1d010eafcd0bb6907665c5c9afc059eae4785ee99e2241eedf41abc881b6f73ad5c05b56e765a0fdff87f9dee7d0d03644f0b940df329a76269882324efb0ad4444d1b57a4dd2c5a2fdca5b9a8c6ac1cc0d55ea824647a40484a23fa9b2c3cf7ca0f97f48f972995ecf16d2d5c206c69e500ed32ed807ad327dfb5af0d8e0757820cccc45a799f289fb20d8f80e095d7cb889c98084d228331526efe53981f8ca35295c9113d2c8d8a1d0b63db91b246e02c94fcfd691adebf0329bc04984eb1d6d11987b9b9ee6b1a1da1581a17a3d5a8b9bea3ccb004f72df251a6f690e4b1af46401fa6efaad4d1d0dfe5087c90ff7bc7f5676aaffd434f3a8bf3660527296b24791be755108f067f1b35e5593849c15a12d5a0125527d9fc5e2f06d271c0aac24dcfbe35cd9feb39631d6bc0f50daf69e6e95596078becf55e5b900faa2770fe396c1b068b65d9bfcc06459c9c78fb5c9a864d1d2b2d5fa82ddbd7f1caa63e0eca3faee23909dd524ec9aca938d84a70aedd516cee9c46576a536c3851d949371ec55ea06552cf1d19f58dd74ccfe77a0731ebaef44247ee7a2223817282070a11054df9398d5b809c87cfdd7ed804fa7bd06b034e328c2ed3503106a0ba4a787567b8aac18b750bccc900f1f16b3294249c2ca7002b00bfc8aedbcc4f7750747809ea6ef7875eb8db224b1392dd0d160f2b271736be41a2dc2e52afcc61a3ff96c82c80b5ecdf41b02051adc987ebe5e69b81c24889a512566c4e38477106e74c234e15ecefdc412fb88215e7c2a07b0e5c89ed957d13ed4ef98c5222fdcd11b1749dacf80f07953b993e8f68191f59201b572303c87a438514b796e8a97a0a0c678203bd91932561dd9c31ecbf2e9cf86861e0c1184b792ac07093d41e98a5d79642f25aee14402652343c6ea6da0287fe07f9268bfb515f58e088ab811d02d1ac0f1809142efd9822f8dfae436755b23579c84981d78f8b27a3fcc548d7acfefb6794a92b23f95c3f809d7095cb27ab52e8337de95b2abada57185973680f587f15cbdfafdd0e4f498f71941b0ffd0c80571ce238e9bda72eca6a90363fa2ef20685394c0cb4d16a7b014e6ac9e48ec8431376f74fff8fdc4b8a05fa058f57da045602d62a7466a6083f21de02ac58b08e3430d0ae22de8264976c78708f08ab53c34b2674de3c247661d419ec5c2891c149ae037398398919e65b8d34d9875176067b20a4795896a7defe0aa039cdfac79e73b979df14478a00e0287817c6ca69e3f80bc51ae96869175a173887f9f3d2c4a7e47e3729bc661de63efa5036e92f4835ef04bc76794f57d01a6eda7892ec93a3568cc5cc97024b375dc4221955127a2c216d4164927c0ecc51fb9868a40585620ff728e4cb867e276b9cce9fd0a034d864d06651048a193e840fd7f31441e0a1e278e572072caf203ab1510f25a7980aa4dc98645670c3932a530ab835a33a68620ffaead47ae50cf312503b0a52ef2c2d470bcc20eb6aa0b92347d919a57459b2e126ff5463cc3696e54a2cf7567eada5bb3bd503339dc43d4ad182bb1cc72e2f41a1a1224f7328ef58e5c8ab5acda77cf78f9a3ea4f57eda4b9342406d9b8f1572c9df1c7a2b550e7914fc01dc256c707d8bda9d68e97d0a2f28fc8e69423ac94a990a812e8b4737e9539f42cda245985dd1f1bda45c9e77348d52eb5b6085bc943d0dc2f3bde267ba0fa1f1b2286dbc88e3e2a65b20172a4794a99f741e8cb1d900ee6c9bb94fb6dc5811ccd42b344454fa8e080f4d68940bc44d804f329d971ae55ce00d14d250543df1b405c272e4d15268a294279456af0d7566c22b30271cd44bdf963c1721a422f96faeeecc1aa1a4bde2dd52ef69a68d06698d8acec1e0f3b972917102d63919cfcb76636e5783c61b984b7c0de695b612326825a13c4095aec2aadca1273878c3884056143ae4120c1d239eddf1d4e7ad0bbfd1c4f67c876be6c8aaf08369a36d47967071b98ad870e85c9b0a58bad1c58a360cf61b935c0d3f35d562ed9938d45051b469afa886be80e202a5339311e5608b7ca5b930965b0aa300e9d2"}, @typed={0x8, 0xd9, 0x0, 0x0, @u32}, @nested={0x4, 0x11c}, @typed={0xfa, 0xce, 0x0, 0x0, @binary="d1883ed54ce4917c0fb37c7eb6f425f58b63e542ad7cc98422a153915fab38dd2e412bcdcfde47a818fea99eea6aedcc855879c96387e1ee4d9e688166c7ed638e13b90cc7fff411fdc4438670436004bd8b37455da79e65ee9e2832f7438ccff512ae2d2d11ab1746e73cf6cd48486cb6bf37a4dcb9ca72c97dd4a5ec1f863d06f432f0ae67c2a8b82434cee687032f91f0420ff100fbebfe0c0249a75751686313cb43bc13bcf02353e0892cd3b49232efa2e7c91b08e4b1b156695f40dcfa13acbf1cf3f0187fe3aa5049a80df40af2fe195cbc402d32f89d48cbd4000021da356593fb4b6582ecf3f415094fdff7ff41979d89e6"}]}, @generic="244678b73e9bc855bd3674ead54497e3cc2dbadcdd181986d6146c856d3b5b51c46dbff0382e09dc4e41b6df605352691a44e950ccbe8106b465a0e28c44458a04f6cced2269d7a56d9f279f57ee02813d196a6ccbd99b", @generic="51bfd18f7f90c999c95084c5add93bfd0984841204585e1f4a4f9fe132d31efb1739a598616fdcc266ccad0b9ee5fb9ae6521f84835c9e5faa162b5f5c558fc35ac9f1b0c4d9f298377d48797f8ac9acdfffbbbb39", @generic="9d2d9b0e32772b47a619fb217850c279c7a6b51a3241a921f247052c0a1d7e224b2583a433472db9c7bd5c67cbacd1fcc7e5c7677c11f2297425b4b19daaf0"]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x101, 0x9d, "65ebe94fba135c27c0f285172abb7fb57069b912e0b08b8fed7cbe6cdffba956269a8800c0ccc13ea4962c8f4402e177de5b3b97be7bcf0120e05e7877a3b315f443329de6715a344da6e79a013d0df9ea80d39337d94c35ec43d0bf6bea08af73f853c5583fb8af6a1739ddd2d076c6b4751c2c7e0cfd018f31fcdd509ae3304ae187a04a171e7e28dbec1da4b5230f862df4353c302f34ed8d339a0367b8e772e6eab219b7de2a546e535307e1393510c8977dcf7ddaef18e57967d511f6ff4708bf65edca5aacba4abd12849de6436ae50782b16c836fe5a40b27f6973424b2482372543cd3ea67dcff51ee96a4e36afb3dc13ed6d7c7636710fe2b"}, @NL80211_ATTR_SAR_SPEC={0x394, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS={0x5c, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6b9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffe}]}]}, @NL80211_SAR_ATTR_SPECS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS={0x1b0, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x22}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ff}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe77}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffff001}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7bb3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7b3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x20}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf7fc}]}]}, @NL80211_SAR_ATTR_SPECS={0x128, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8782}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x21}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x18000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}, @NL80211_SAR_ATTR_SPECS={0x3c, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x23b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}]}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x1790}, 0x1, 0x0, 0x0, 0x4c042}, 0x4000000) madvise$auto_MADV_GUARD_REMOVE(0x0, 0x4, 0x67) r9 = socket(0x29, 0x2, 0x0) setsockopt$auto(r9, 0x119, 0xfffffffe, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r10 = socket(0x2, 0x3, 0x100) r11 = socket(0x10, 0x2, 0x0) r12 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r11) sendmsg$auto_NL80211_CMD_GET_REG(r10, 0x0, 0x20000010) r13 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r11) sendmsg$auto_NFC_CMD_LLC_SDREQ(r11, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc6}, @NFC_ATTR_DEVICE_NAME={0x7, 0x2, '}.]'}, @NFC_ATTR_VENDOR_DATA={0xa1, 0x1f, "6d71a0261653206479b5a78013c9f54501b3988e8f94c87540ba5f2e1eadd4ce5261955d3641bff075e19fba0694f922ddcd32869f018ead979e0b433fd907d752d25b78e2cc0b45aed52ff5047d286b3efd74486070d4c816cebf838438a469bca1efca33a0263f56b8b370efb8d5d36f4c9ac01200bc972fa77521b6ce1dfe018f193313c98f8f1b3cfca330ed0ef711cd21fbef343167d32b40a2c0"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4801}, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r12, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.001579156s ago: executing program 0 (id=744): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) fcntl$auto(0x3, 0xfffffff7, 0xa553) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x2002, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000100)="2d8d", 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x45, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x533, 0x5, 0x80000000, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x7}, {0x10100, 0x1, 0x52, 0x85, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.000955266s ago: executing program 1 (id=738): socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/annotate\x00', 0x121882, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) read$auto(r0, 0x0, 0xa) write$auto(0x3, 0x0, 0xfdef) 1.862632423s ago: executing program 1 (id=739): r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000024c0), 0x2802, 0x0) read$auto_check_wx_fops_(r0, &(0x7f0000000080)=""/91, 0x5b) 1.492771631s ago: executing program 1 (id=740): r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/tx_filtered\x00', 0x8000, 0x0) read$auto_fops_ulong_ro_(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r2 = socket(0x1f, 0x1, 0x106) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r3, 0x921064a6, 0x20000000020000a) setsockopt$auto(r2, 0x6, 0x17, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2589e7b48dcf06aea2d308010000002cf0421003d19f381ff9f6160e5114840fa6d23a495a414bbdb786feb52a545ee9724b3512a9d122f8b262dd8dfc1c147abdadd5db2b5bad1f9a0ef4594f1174faa250b94a410cc4", @ANYRES16=r4, @ANYBLOB="110027bd700002dcdf251000000018000180140002006e657464657673696d30000000000000080007007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20088814) 1.425398314s ago: executing program 1 (id=741): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x157300, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80800, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897441b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) read$auto(r2, 0x0, 0x4) ioctl$auto(r2, 0xae41, r1) r4 = socket(0x2a, 0x2, 0x9) sendto$auto(r4, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000023, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0xd, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x5, 0xfffffffb, 0x3, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="bae77ee55e5324", @ANYRESHEX=r4, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20088814) dup2$auto(r3, r0) 1.38924719s ago: executing program 3 (id=742): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) fcntl$auto(0x3, 0xfffffff7, 0xa553) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000100)="2d8d", 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x45, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x533, 0x5, 0x80000000, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x7}, {0x10100, 0x1, 0x52, 0x85, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.227025901s ago: executing program 1 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) close_range$auto(r0, r0, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x500, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000300)="10d9ff") mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) write$auto(r3, &(0x7f0000000040)='\x00', 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) epoll_wait$auto(r6, &(0x7f0000000140)={0x3, 0xf}, 0x3, 0xfff) settimeofday$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x1}, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, r4, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x80000001}, 0x2) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r2, 0x0, 0x6}, 0xc) r7 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r7, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0x1, &(0x7f0000000000)="9cc7a32504d13395ca93d7209b8cc6b0818f554d09376ea3b9a33a73ed827fc755899d000036ea000000000000000049ec2f4c9945cdb545e02ef91d3ec52a6ab896973dde29195ea3a6c4a20eac858bb229410508b4ade1014bdb17963c755be875aaba26fa47e16f1dee", 0x3, 0xa8}, 0x80670}, 0x3f7ffffe, 0xd9) epoll_wait$auto(r7, &(0x7f0000000080)={0x6, 0x7}, 0x8, 0x3) 1.223948012s ago: executing program 3 (id=745): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffff70, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) ioctl$auto(r0, 0xab02, r0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x8, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x672e, 0x10df, 0xeb1, r1, 0x3) getsockopt$auto(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) rseq$auto(0x0, 0x8000, 0x0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.055918704s ago: executing program 0 (id=746): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x11, 0x3, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) (async) dup2$auto(0x0, 0x3) (async) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = pipe2$auto(0x0, 0x0) (async) r1 = io_uring_setup$auto(0x7, 0x0) (async) socketpair$auto(0x4, 0x5, 0x100000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) write$auto(r2, 0x0, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f00000005c0)="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") (async, rerun: 64) fstatfs$auto(r0, &(0x7f0000000080)={0x1, 0x3b, 0xf, 0x4, 0x5, 0x8, 0x5, {[0x0, 0x401]}, 0x101, 0x6, 0x9, [0x5, 0x0, 0xb, 0xfff]}) (rerun: 64) r3 = ioctl$auto_TUNSETOWNER(r1, 0x400454cc, &(0x7f0000000280)=0x4) readv$auto(r3, &(0x7f00000002c0)={&(0x7f0000000200)="a304edb922357c97ab8ca25fef05890648c7bf7377679e7fefecece327ee8e334b25adbb585091de165ea27a06ec4e4b720dba5dfdaf0295f59540a4fb8d82e7c6f6605089882fbc3cd5363c91e9", 0x4}, 0x1) 987.315506ms ago: executing program 1 (id=747): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x40044620, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) write$auto_media_devnode_fops_mc_devnode(r0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto_SO_RCVLOWAT(r2, 0xa151, 0x12, &(0x7f0000000180)='/dev/vhost-net\x00', &(0x7f00000001c0)=0x71bd) mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x6, 0x1, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000e, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffb, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) 658.104358ms ago: executing program 0 (id=748): syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/time_for_children\x00') unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007b, 0x7, 0x0, 0xe, 0x22000, 0x208, 0x0, 0x84, 0x8000000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x10000000, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd]}, 0x1fa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000380)="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") r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x81400, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) r2 = clone3$auto(0x0, 0x1) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r4, 0x40045017, &(0x7f0000000180)="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") ioctl$auto_HPET_IRQFREQ(r3, 0x40086806, &(0x7f0000000080)=0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) pkey_free$auto(0x8) 97.887072ms ago: executing program 3 (id=749): r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) setresuid$auto(0x8, 0x8, r1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/annotate\x00', 0x121882, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x25, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x5, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) bind$auto(r3, &(0x7f0000000000)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffc) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/dad_transmits\x00', 0x0, 0x0) sendfile$auto(r2, r4, 0x0, 0x3) 0s ago: executing program 3 (id=750): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2801, 0x0) (rerun: 64) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) (async) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000480)='\xf7\xff\xff\xff\xff\xff\xff\xff\x00'/19, 0x101000006, 0x4) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop6/rqos/wbt/enabled\x00', 0x880, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b30", 0xfdef) (async) read$auto(0xffffffffffffffff, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x759, 0x5, 0x7181, 0x1ffe2, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007b, 0x7, 0x0, 0xe, 0x22000, 0x208, 0x0, 0x84, 0x8000000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x10000000, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd]}, 0x1fa, 0xd) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x81400, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyqb\x00', 0xa0102, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) ioctl$auto(0x3, 0x541a, r3) kernel console output (not intermixed with test programs): ff ff f7 d8 64 89 01 48 [ 105.737909][ T6301] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.737924][ T6301] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 105.737933][ T6301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 105.737941][ T6301] RBP: 00007f4ec3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 105.737950][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.737958][ T6301] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 105.737978][ T6301] [ 106.118780][ T6301] sysctl could not get directory: /net/ipv6/conf/lo -12 [ 107.453449][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 107.486747][ T6334] netlink: 25 bytes leftover after parsing attributes in process `syz.1.100'. [ 107.775248][ T6349] FAULT_INJECTION: forcing a failure. [ 107.775248][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 107.788630][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full) [ 107.788664][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.788679][ T6349] Call Trace: [ 107.788688][ T6349] [ 107.788698][ T6349] dump_stack_lvl+0x100/0x190 [ 107.788748][ T6349] should_fail_ex.cold+0x5/0xa [ 107.788783][ T6349] should_failslab+0xc2/0x120 [ 107.788815][ T6349] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 107.788859][ T6349] ? vm_area_alloc+0x1f/0x160 [ 107.788897][ T6349] ? vma_merge_new_range+0x38b/0xa30 [ 107.788945][ T6349] vm_area_alloc+0x1f/0x160 [ 107.788983][ T6349] __mmap_region+0x10cc/0x29e0 [ 107.789032][ T6349] ? __pfx___mmap_region+0x10/0x10 [ 107.789083][ T6349] ? set_next_entity+0x11e/0x9c0 [ 107.789156][ T6349] ? __lock_acquire+0x4a5/0x2630 [ 107.789211][ T6349] ? find_held_lock+0x2b/0x80 [ 107.789238][ T6349] ? finish_task_switch.isra.0+0x200/0xb80 [ 107.789270][ T6349] ? finish_task_switch.isra.0+0x200/0xb80 [ 107.789317][ T6349] ? trace_sched_exit_tp+0x13a/0x180 [ 107.789353][ T6349] ? __schedule+0x1000/0x6120 [ 107.789453][ T6349] ? rcu_is_watching+0x12/0xc0 [ 107.789495][ T6349] ? cap_capable+0x107/0x460 [ 107.789525][ T6349] mmap_region+0x180/0x3e0 [ 107.789573][ T6349] do_mmap+0xc63/0x12f0 [ 107.789613][ T6349] ? __pfx_do_mmap+0x10/0x10 [ 107.789646][ T6349] ? __pfx_down_write_killable+0x10/0x10 [ 107.789687][ T6349] vm_mmap_pgoff+0x29e/0x470 [ 107.789723][ T6349] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.789758][ T6349] ? do_futex+0x192/0x350 [ 107.789796][ T6349] ? __pfx_do_futex+0x10/0x10 [ 107.789830][ T6349] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.789870][ T6349] ksys_mmap_pgoff+0xe1/0x650 [ 107.789901][ T6349] ? __x64_sys_futex+0x34f/0x4d0 [ 107.789934][ T6349] ? __x64_sys_futex+0x358/0x4d0 [ 107.789972][ T6349] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 107.790004][ T6349] ? xfd_validate_state+0x129/0x190 [ 107.790053][ T6349] __x64_sys_mmap+0x125/0x190 [ 107.790099][ T6349] do_syscall_64+0x106/0xf80 [ 107.790128][ T6349] ? clear_bhb_loop+0x40/0x90 [ 107.790164][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.790191][ T6349] RIP: 0033:0x7f4ec3d9c819 [ 107.790213][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.790239][ T6349] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.790265][ T6349] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 107.790283][ T6349] RDX: 000000000000005f RSI: 0000000000400008 RDI: 0000000000000000 [ 107.790297][ T6349] RBP: 00007f4ec3e32c91 R08: 0000000000000002 R09: 0000000000008000 [ 107.790311][ T6349] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 107.790326][ T6349] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 107.790363][ T6349] [ 111.096670][ T6417] bridge0: port 3(netdevsim2) entered blocking state [ 111.103538][ T6417] bridge0: port 3(netdevsim2) entered disabled state [ 111.111173][ T6417] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 111.128301][ T6417] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 111.147572][ T6417] bridge0: port 3(netdevsim2) entered blocking state [ 111.154371][ T6417] bridge0: port 3(netdevsim2) entered forwarding state [ 111.220453][ T6417] process 'syz.0.126' launched './file0' with NULL argv: empty string added [ 112.282013][ T6445] : Can't lookup blockdev [ 113.057963][ T6453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.559168][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 115.858152][ T6511] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.992735][ T6520] FAULT_INJECTION: forcing a failure. [ 115.992735][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 116.010600][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) [ 116.010651][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.010667][ T6520] Call Trace: [ 116.010677][ T6520] [ 116.010689][ T6520] dump_stack_lvl+0x100/0x190 [ 116.010739][ T6520] should_fail_ex.cold+0x5/0xa [ 116.010773][ T6520] should_failslab+0xc2/0x120 [ 116.010803][ T6520] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 116.010846][ T6520] ? __d_alloc+0x34/0xa80 [ 116.010885][ T6520] __d_alloc+0x34/0xa80 [ 116.010922][ T6520] d_alloc_pseudo+0x1c/0xc0 [ 116.010961][ T6520] alloc_file_pseudo+0xcf/0x230 [ 116.010999][ T6520] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 116.011035][ T6520] ? alloc_fd+0x476/0x790 [ 116.011069][ T6520] sock_alloc_file+0x50/0x210 [ 116.011098][ T6520] __sys_socket+0x1c0/0x260 [ 116.011136][ T6520] ? __pfx___sys_socket+0x10/0x10 [ 116.011177][ T6520] __x64_sys_socket+0x72/0xb0 [ 116.011213][ T6520] ? lockdep_hardirqs_on+0x78/0x100 [ 116.011240][ T6520] do_syscall_64+0x106/0xf80 [ 116.011267][ T6520] ? clear_bhb_loop+0x40/0x90 [ 116.011302][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.011331][ T6520] RIP: 0033:0x7f4ec3d9c819 [ 116.011352][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.011378][ T6520] RSP: 002b:00007f4ec4c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.011404][ T6520] RAX: ffffffffffffffda RBX: 00007f4ec4016090 RCX: 00007f4ec3d9c819 [ 116.011421][ T6520] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 116.011437][ T6520] RBP: 00007f4ec3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 116.011452][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.011468][ T6520] R13: 00007f4ec4016128 R14: 00007f4ec4016090 R15: 00007ffd00f74d08 [ 116.011503][ T6520] [ 117.472549][ T6557] netlink: 330 bytes leftover after parsing attributes in process `syz.0.162'. [ 117.888029][ T6567] FAULT_INJECTION: forcing a failure. [ 117.888029][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 117.968878][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 117.968918][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.968934][ T6567] Call Trace: [ 117.968944][ T6567] [ 117.968954][ T6567] dump_stack_lvl+0x100/0x190 [ 117.969003][ T6567] should_fail_ex.cold+0x5/0xa [ 117.969039][ T6567] should_failslab+0xc2/0x120 [ 117.969072][ T6567] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 117.969120][ T6567] ? __alloc_skb+0x140/0x710 [ 117.969170][ T6567] __alloc_skb+0x140/0x710 [ 117.969212][ T6567] ? __alloc_skb+0x5b7/0x710 [ 117.969254][ T6567] ? __pfx___alloc_skb+0x10/0x10 [ 117.969298][ T6567] ? if_nlmsg_size+0x5f6/0xd20 [ 117.969331][ T6567] rtmsg_ifinfo_build_skb+0x81/0x260 [ 117.969370][ T6567] rtmsg_ifinfo+0xa4/0x1b0 [ 117.969409][ T6567] netif_state_change+0x17f/0x380 [ 117.969441][ T6567] ? __pfx_netif_state_change+0x10/0x10 [ 117.969477][ T6567] ? tun_get+0x191/0x370 [ 117.969507][ T6567] ? tun_get+0x191/0x370 [ 117.969545][ T6567] netdev_state_change+0xaa/0x240 [ 117.969578][ T6567] __tun_chr_ioctl+0x24f3/0x47c0 [ 117.969611][ T6567] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.969661][ T6567] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 117.969708][ T6567] ? hook_file_ioctl_common+0x146/0x410 [ 117.969755][ T6567] ? __fget_files+0x21f/0x3d0 [ 117.969790][ T6567] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 117.969827][ T6567] __x64_sys_ioctl+0x18e/0x210 [ 117.969873][ T6567] do_syscall_64+0x106/0xf80 [ 117.969903][ T6567] ? clear_bhb_loop+0x40/0x90 [ 117.969939][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.969969][ T6567] RIP: 0033:0x7f45d2f9c819 [ 117.969992][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.970018][ T6567] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.970046][ T6567] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 117.970065][ T6567] RDX: 000000000000006f RSI: 00000000400454cc RDI: 04000000000000c8 [ 117.970082][ T6567] RBP: 00007f45d3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.970099][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.970116][ T6567] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 117.970155][ T6567] [ 118.239631][ T6567] FAULT_INJECTION: forcing a failure. [ 118.239631][ T6567] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.252852][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 118.252891][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.252908][ T6567] Call Trace: [ 118.252917][ T6567] [ 118.252927][ T6567] dump_stack_lvl+0x100/0x190 [ 118.252975][ T6567] should_fail_ex.cold+0x5/0xa [ 118.253015][ T6567] get_futex_key+0x1d2/0x1620 [ 118.253055][ T6567] ? __pfx_get_futex_key+0x10/0x10 [ 118.253089][ T6567] ? find_held_lock+0x2b/0x80 [ 118.253117][ T6567] ? get_pid_task+0xfc/0x250 [ 118.253152][ T6567] ? get_pid_task+0xfc/0x250 [ 118.253195][ T6567] futex_wake+0xea/0x530 [ 118.253236][ T6567] ? proc_fail_nth_write+0x9f/0x220 [ 118.253274][ T6567] ? find_held_lock+0x2b/0x80 [ 118.253302][ T6567] ? __pfx_futex_wake+0x10/0x10 [ 118.253349][ T6567] ? ksys_write+0x190/0x250 [ 118.253376][ T6567] ? ksys_write+0x190/0x250 [ 118.253410][ T6567] do_futex+0x32b/0x350 [ 118.253449][ T6567] ? __pfx_do_futex+0x10/0x10 [ 118.253501][ T6567] __x64_sys_futex+0x34f/0x4d0 [ 118.253543][ T6567] ? fput+0x79/0x100 [ 118.253576][ T6567] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.253614][ T6567] ? ksys_write+0x1ac/0x250 [ 118.253641][ T6567] ? __pfx_ksys_write+0x10/0x10 [ 118.253680][ T6567] do_syscall_64+0x106/0xf80 [ 118.253709][ T6567] ? clear_bhb_loop+0x40/0x90 [ 118.253745][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.253772][ T6567] RIP: 0033:0x7f45d2f9c819 [ 118.253795][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.253822][ T6567] RSP: 002b:00007f45d11f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.253849][ T6567] RAX: ffffffffffffffda RBX: 00007f45d3215fa8 RCX: 00007f45d2f9c819 [ 118.253868][ T6567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f45d3215fac [ 118.253885][ T6567] RBP: 00007f45d3215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 118.253900][ T6567] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000000 [ 118.253914][ T6567] R13: 00007f45d3216038 R14: 00007ffe25fcf8f0 R15: 00007ffe25fcf9d8 [ 118.253947][ T6567] [ 118.627854][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 118.898662][ T6585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 118.916533][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 119.580695][ T6598] netlink: 504 bytes leftover after parsing attributes in process `syz.0.175'. [ 120.223029][ T6613] ovs_ÿþÿþ?: entered promiscuous mode [ 120.558674][ T6629] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 120.570399][ T6629] cec cec26: uevent: failed to send synthetic uevent: -22 [ 121.038927][ T6638] netlink: 'syz.3.188': attribute type 2 has an invalid length. [ 123.475940][ T6715] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 123.674409][ T6718] bridge0: port 3(netdevsim2) entered blocking state [ 123.725478][ T6718] bridge0: port 3(netdevsim2) entered disabled state [ 123.755169][ T6718] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 123.826393][ T6718] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 123.865409][ T6718] bridge0: port 3(netdevsim2) entered blocking state [ 123.872274][ T6718] bridge0: port 3(netdevsim2) entered forwarding state [ 125.760943][ T6768] capability: warning: `syz.3.221' uses 32-bit capabilities (legacy support in use) [ 126.986900][ T6798] aoe: can't write to that file. [ 127.736002][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 127.795193][ T6831] netlink: 354 bytes leftover after parsing attributes in process `syz.2.238'. [ 127.949547][ T6834] bridge0: port 3(netdevsim2) entered blocking state [ 127.962639][ T6834] bridge0: port 3(netdevsim2) entered disabled state [ 128.010683][ T6834] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 128.099824][ T6834] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 128.133665][ T6834] bridge0: port 3(netdevsim2) entered blocking state [ 128.140581][ T6834] bridge0: port 3(netdevsim2) entered forwarding state [ 130.475957][ T6877] netlink: 326 bytes leftover after parsing attributes in process `syz.1.250'. [ 130.941486][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 131.751765][ T6905] netlink: 330 bytes leftover after parsing attributes in process `syz.3.258'. [ 132.794578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802774][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.006611][ T6968] FAULT_INJECTION: forcing a failure. [ 135.006611][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 135.186113][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 135.212231][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 135.212260][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.212269][ T6968] Call Trace: [ 135.212274][ T6968] [ 135.212280][ T6968] dump_stack_lvl+0x100/0x190 [ 135.212316][ T6968] should_fail_ex.cold+0x5/0xa [ 135.212335][ T6968] should_failslab+0xc2/0x120 [ 135.212352][ T6968] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.212371][ T6968] ? copy_net_ns+0x135/0x7c0 [ 135.212392][ T6968] copy_net_ns+0x135/0x7c0 [ 135.212407][ T6968] ? copy_cgroup_ns+0x71/0x970 [ 135.212426][ T6968] create_new_namespaces+0x3ea/0xac0 [ 135.212447][ T6968] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 135.212465][ T6968] ksys_unshare+0x473/0xad0 [ 135.212486][ T6968] ? __pfx_ksys_unshare+0x10/0x10 [ 135.212513][ T6968] __x64_sys_unshare+0x31/0x40 [ 135.212537][ T6968] do_syscall_64+0x106/0xf80 [ 135.212564][ T6968] ? clear_bhb_loop+0x40/0x90 [ 135.212592][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.212607][ T6968] RIP: 0033:0x7f943159c819 [ 135.212625][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.212639][ T6968] RSP: 002b:00007f94323bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.212654][ T6968] RAX: ffffffffffffffda RBX: 00007f9431816180 RCX: 00007f943159c819 [ 135.212663][ T6968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 135.212672][ T6968] RBP: 00007f9431632c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.212681][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.212690][ T6968] R13: 00007f9431816218 R14: 00007f9431816180 R15: 00007ffe80215c18 [ 135.212709][ T6968] [ 136.039382][ T6971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.277827][ T6978] netlink: 342 bytes leftover after parsing attributes in process `syz.2.279'. [ 136.287534][ T6978] IPv6: Can't replace route, no match found [ 136.379904][ T6971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.402001][ T6971] bond0 (unregistering): Released all slaves [ 138.023872][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 138.513208][ T7011] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.676959][ T7012] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.800387][ T7013] ima: policy update failed [ 138.806056][ T29] audit: type=1802 audit(1775555453.855:2): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.288" res=0 errno=0 [ 140.885025][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 140.930178][ T7070] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 140.967577][ T7070] netlink: 13 bytes leftover after parsing attributes in process `syz.1.303'. [ 141.712683][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 141.829936][ T7086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.923591][ T7086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.015156][ T7086] bond0 (unregistering): Released all slaves [ 145.097683][ T7146] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 145.402977][ T7149] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.665417][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 146.970364][ T7163] syz.3.322 uses obsolete (PF_INET,SOCK_PACKET) [ 147.676577][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 147.821356][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.921794][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.969108][ T7192] bond0 (unregistering): Released all slaves [ 150.886134][ T7238] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 151.954145][ T7239] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 152.407950][ T7266] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 154.693256][ T7313] FAULT_INJECTION: forcing a failure. [ 154.693256][ T7313] name failslab, interval 1, probability 0, space 0, times 0 [ 154.706184][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.1.364 Not tainted syzkaller #0 PREEMPT(full) [ 154.706217][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.706231][ T7313] Call Trace: [ 154.706239][ T7313] [ 154.706248][ T7313] dump_stack_lvl+0x100/0x190 [ 154.706291][ T7313] should_fail_ex.cold+0x5/0xa [ 154.706324][ T7313] should_failslab+0xc2/0x120 [ 154.706355][ T7313] __kmalloc_cache_noprof+0x7a/0x6f0 [ 154.706392][ T7313] ? alloc_pipe_info+0x10e/0x590 [ 154.706422][ T7313] ? find_held_lock+0x2b/0x80 [ 154.706455][ T7313] alloc_pipe_info+0x10e/0x590 [ 154.706489][ T7313] splice_direct_to_actor+0x78f/0xa30 [ 154.706521][ T7313] ? __lock_acquire+0x4a5/0x2630 [ 154.706554][ T7313] ? __pfx_direct_splice_actor+0x10/0x10 [ 154.706585][ T7313] ? __pfx_aa_file_perm+0x10/0x10 [ 154.706627][ T7313] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 154.706667][ T7313] do_splice_direct+0x174/0x240 [ 154.706697][ T7313] ? __pfx_do_splice_direct+0x10/0x10 [ 154.706727][ T7313] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 154.706761][ T7313] ? rw_verify_area+0xce/0x6d0 [ 154.706806][ T7313] do_sendfile+0xadc/0xe20 [ 154.706855][ T7313] ? __pfx_do_sendfile+0x10/0x10 [ 154.706899][ T7313] ? __fget_files+0x21f/0x3d0 [ 154.706935][ T7313] __x64_sys_sendfile64+0x1d8/0x220 [ 154.706966][ T7313] ? ksys_write+0x1ac/0x250 [ 154.706992][ T7313] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 154.707035][ T7313] do_syscall_64+0x106/0xf80 [ 154.707063][ T7313] ? clear_bhb_loop+0x40/0x90 [ 154.707097][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.707125][ T7313] RIP: 0033:0x7fc7f559c819 [ 154.707147][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.707177][ T7313] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.707204][ T7313] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 154.707222][ T7313] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 154.707237][ T7313] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 154.707253][ T7313] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 154.707269][ T7313] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 154.707305][ T7313] [ 155.776659][ T7336] netlink: 72 bytes leftover after parsing attributes in process `syz.2.370'. [ 156.671556][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 157.022171][ T7368] FAULT_INJECTION: forcing a failure. [ 157.022171][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 157.053209][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.0.380 Not tainted syzkaller #0 PREEMPT(full) [ 157.053247][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.053263][ T7368] Call Trace: [ 157.053272][ T7368] [ 157.053282][ T7368] dump_stack_lvl+0x100/0x190 [ 157.053333][ T7368] should_fail_ex.cold+0x5/0xa [ 157.053367][ T7368] should_failslab+0xc2/0x120 [ 157.053398][ T7368] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 157.053443][ T7368] ? __proc_create+0x2cb/0x8c0 [ 157.053480][ T7368] __proc_create+0x2cb/0x8c0 [ 157.053509][ T7368] ? __pfx___proc_create+0x10/0x10 [ 157.053544][ T7368] ? _raw_write_unlock+0x28/0x50 [ 157.053577][ T7368] proc_create_reg+0x75/0x170 [ 157.053611][ T7368] proc_create_data+0x86/0x110 [ 157.053646][ T7368] ? __pfx_proc_create_data+0x10/0x10 [ 157.053678][ T7368] ? cache_register_net+0x137/0x5e0 [ 157.053710][ T7368] ? cache_register_net+0x137/0x5e0 [ 157.053750][ T7368] cache_register_net+0x1e0/0x5e0 [ 157.053786][ T7368] gss_svc_init_net+0x14e/0x640 [ 157.053828][ T7368] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 157.053861][ T7368] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 157.053889][ T7368] ops_init+0x1e2/0x5f0 [ 157.053923][ T7368] setup_net+0x118/0x3a0 [ 157.053954][ T7368] ? __pfx_setup_net+0x10/0x10 [ 157.053981][ T7368] ? lockdep_init_map_type+0x5c/0x250 [ 157.054021][ T7368] ? mutex_init_lockep+0x110/0x150 [ 157.054066][ T7368] copy_net_ns+0x46f/0x7c0 [ 157.054109][ T7368] create_new_namespaces+0x3ea/0xac0 [ 157.054150][ T7368] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 157.054186][ T7368] ksys_unshare+0x473/0xad0 [ 157.054224][ T7368] ? __pfx_ksys_unshare+0x10/0x10 [ 157.054276][ T7368] __x64_sys_unshare+0x31/0x40 [ 157.054312][ T7368] do_syscall_64+0x106/0xf80 [ 157.054340][ T7368] ? clear_bhb_loop+0x40/0x90 [ 157.054374][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.054403][ T7368] RIP: 0033:0x7f4ec3d9c819 [ 157.054426][ T7368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.054451][ T7368] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.054475][ T7368] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 157.054493][ T7368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.054509][ T7368] RBP: 00007f4ec3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 157.054526][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.054541][ T7368] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 157.054579][ T7368] [ 157.571375][ T7377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.381'. [ 158.766749][ T5840] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 158.774816][ T5840] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 158.853838][ T29] audit: type=1800 audit(1775555474.009:3): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.389" name="version" dev="configfs" ino=16258 res=0 errno=0 [ 160.014521][ T7425] netlink: 72 bytes leftover after parsing attributes in process `syz.0.393'. [ 160.826894][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 165.715197][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 168.417413][ T7575] FAULT_INJECTION: forcing a failure. [ 168.417413][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 168.466831][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.2.435 Not tainted syzkaller #0 PREEMPT(full) [ 168.466867][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.466882][ T7575] Call Trace: [ 168.466891][ T7575] [ 168.466900][ T7575] dump_stack_lvl+0x100/0x190 [ 168.466946][ T7575] should_fail_ex.cold+0x5/0xa [ 168.466968][ T7575] ? iter_file_splice_write+0x1d8/0x10a0 [ 168.466984][ T7575] should_failslab+0xc2/0x120 [ 168.467001][ T7575] __kmalloc_noprof+0xe0/0x850 [ 168.467028][ T7575] iter_file_splice_write+0x1d8/0x10a0 [ 168.467043][ T7575] ? lockdep_hardirqs_on+0x78/0x100 [ 168.467060][ T7575] ? copy_splice_read+0x734/0xb90 [ 168.467073][ T7575] ? kfree+0x1f6/0x6b0 [ 168.467097][ T7575] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.467113][ T7575] ? __lock_acquire+0x4a5/0x2630 [ 168.467134][ T7575] ? __pfx_copy_splice_read+0x10/0x10 [ 168.467159][ T7575] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.467176][ T7575] direct_splice_actor+0x192/0x6c0 [ 168.467193][ T7575] splice_direct_to_actor+0x345/0xa30 [ 168.467216][ T7575] ? __pfx_direct_splice_actor+0x10/0x10 [ 168.467234][ T7575] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 168.467255][ T7575] do_splice_direct+0x174/0x240 [ 168.467271][ T7575] ? __pfx_do_splice_direct+0x10/0x10 [ 168.467287][ T7575] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 168.467304][ T7575] ? rw_verify_area+0xce/0x6d0 [ 168.467328][ T7575] do_sendfile+0xadc/0xe20 [ 168.467355][ T7575] ? __pfx_do_sendfile+0x10/0x10 [ 168.467378][ T7575] ? __fget_files+0x21f/0x3d0 [ 168.467398][ T7575] __x64_sys_sendfile64+0x1d8/0x220 [ 168.467415][ T7575] ? ksys_write+0x1ac/0x250 [ 168.467428][ T7575] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 168.467451][ T7575] do_syscall_64+0x106/0xf80 [ 168.467466][ T7575] ? clear_bhb_loop+0x40/0x90 [ 168.467484][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.467498][ T7575] RIP: 0033:0x7f943159c819 [ 168.467511][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.467524][ T7575] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.467538][ T7575] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 168.467548][ T7575] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 168.467556][ T7575] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 168.467564][ T7575] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 168.467572][ T7575] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 168.467591][ T7575] [ 168.823704][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 170.166646][ T5840] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 170.174252][ T5840] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 170.201584][ T29] audit: type=1800 audit(1775557533.408:4): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.443" name="version" dev="configfs" ino=18628 res=0 errno=0 [ 170.676251][ T7617] FAULT_INJECTION: forcing a failure. [ 170.676251][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 170.689504][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 170.689526][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.689535][ T7617] Call Trace: [ 170.689540][ T7617] [ 170.689547][ T7617] dump_stack_lvl+0x100/0x190 [ 170.689575][ T7617] should_fail_ex.cold+0x5/0xa [ 170.689594][ T7617] should_failslab+0xc2/0x120 [ 170.689610][ T7617] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 170.689632][ T7617] ? alloc_empty_file+0x55/0x1c0 [ 170.689654][ T7617] alloc_empty_file+0x55/0x1c0 [ 170.689674][ T7617] alloc_file_pseudo+0x13a/0x230 [ 170.689694][ T7617] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 170.689712][ T7617] ? inode_init_always_gfp+0xd0e/0x1040 [ 170.689732][ T7617] sock_alloc_file+0x50/0x210 [ 170.689749][ T7617] do_accept+0x242/0x530 [ 170.689769][ T7617] ? 0xffffffff81000000 [ 170.689780][ T7617] ? do_raw_spin_lock+0x128/0x260 [ 170.689803][ T7617] ? __pfx_do_accept+0x10/0x10 [ 170.689847][ T7617] ? 0xffffffff81000000 [ 170.689858][ T7617] __sys_accept4+0x108/0x200 [ 170.689879][ T7617] ? __pfx___sys_accept4+0x10/0x10 [ 170.689904][ T7617] __x64_sys_accept+0x74/0xb0 [ 170.689924][ T7617] ? lockdep_hardirqs_on+0x78/0x100 [ 170.689939][ T7617] do_syscall_64+0x106/0xf80 [ 170.689954][ T7617] ? clear_bhb_loop+0x40/0x90 [ 170.689972][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.689988][ T7617] RIP: 0033:0x7f943159c819 [ 170.690001][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.690015][ T7617] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 170.690030][ T7617] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 170.690040][ T7617] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 170.690049][ T7617] RBP: 00007f9431632c91 R08: 0000000000000000 R09: 0000000000000000 [ 170.690057][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.690065][ T7617] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 170.690079][ T7617] ? 0xffffffff81000000 [ 170.690094][ T7617] [ 172.533764][ T7661] FAULT_INJECTION: forcing a failure. [ 172.533764][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 172.674099][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) [ 172.674136][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.674152][ T7661] Call Trace: [ 172.674160][ T7661] [ 172.674170][ T7661] dump_stack_lvl+0x100/0x190 [ 172.674216][ T7661] should_fail_ex.cold+0x5/0xa [ 172.674248][ T7661] ? copy_splice_read+0x1a3/0xb90 [ 172.674275][ T7661] should_failslab+0xc2/0x120 [ 172.674305][ T7661] __kmalloc_noprof+0xe0/0x850 [ 172.674354][ T7661] copy_splice_read+0x1a3/0xb90 [ 172.674382][ T7661] ? __pfx_iter_file_splice_write+0x10/0x10 [ 172.674419][ T7661] ? __pfx_copy_splice_read+0x10/0x10 [ 172.674459][ T7661] ? find_held_lock+0x2b/0x80 [ 172.674493][ T7661] ? __pfx_copy_splice_read+0x10/0x10 [ 172.674521][ T7661] do_splice_read+0x285/0x370 [ 172.674553][ T7661] splice_direct_to_actor+0x2a1/0xa30 [ 172.674585][ T7661] ? __pfx_direct_splice_actor+0x10/0x10 [ 172.674620][ T7661] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 172.674660][ T7661] do_splice_direct+0x174/0x240 [ 172.674691][ T7661] ? __pfx_do_splice_direct+0x10/0x10 [ 172.674727][ T7661] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 172.674761][ T7661] ? rw_verify_area+0xce/0x6d0 [ 172.674805][ T7661] do_sendfile+0xadc/0xe20 [ 172.674854][ T7661] ? __pfx_do_sendfile+0x10/0x10 [ 172.674897][ T7661] ? __fget_files+0x21f/0x3d0 [ 172.674934][ T7661] __x64_sys_sendfile64+0x1d8/0x220 [ 172.674963][ T7661] ? ksys_write+0x1ac/0x250 [ 172.674989][ T7661] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 172.675030][ T7661] do_syscall_64+0x106/0xf80 [ 172.675057][ T7661] ? clear_bhb_loop+0x40/0x90 [ 172.675090][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.675121][ T7661] RIP: 0033:0x7f45d2f9c819 [ 172.675141][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.675166][ T7661] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.675191][ T7661] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 172.675207][ T7661] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 172.675223][ T7661] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.675238][ T7661] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 172.675253][ T7661] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 172.675289][ T7661] [ 174.047578][ T7692] FAULT_INJECTION: forcing a failure. [ 174.047578][ T7692] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.256609][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.3.466 Not tainted syzkaller #0 PREEMPT(full) [ 174.256631][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.256646][ T7692] Call Trace: [ 174.256651][ T7692] [ 174.256657][ T7692] dump_stack_lvl+0x100/0x190 [ 174.256684][ T7692] should_fail_ex.cold+0x5/0xa [ 174.256699][ T7692] ? prepare_alloc_pages+0x16d/0x5f0 [ 174.256718][ T7692] should_fail_alloc_page+0xeb/0x140 [ 174.256736][ T7692] prepare_alloc_pages+0x1f0/0x5f0 [ 174.256753][ T7692] ? kernel_text_address+0x8d/0x100 [ 174.256777][ T7692] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 174.256806][ T7692] ? copy_splice_read+0x1a3/0xb90 [ 174.256821][ T7692] ? stack_trace_save+0x8e/0xc0 [ 174.256836][ T7692] ? __pfx_stack_trace_save+0x10/0x10 [ 174.256852][ T7692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.256877][ T7692] ? copy_splice_read+0x1a3/0xb90 [ 174.256890][ T7692] ? kasan_save_stack+0x3f/0x50 [ 174.256903][ T7692] ? kasan_save_stack+0x30/0x50 [ 174.256915][ T7692] ? kasan_save_track+0x14/0x30 [ 174.256927][ T7692] ? __kasan_kmalloc+0xaa/0xb0 [ 174.256938][ T7692] ? __kmalloc_noprof+0x301/0x850 [ 174.256960][ T7692] ? copy_splice_read+0x1a3/0xb90 [ 174.256973][ T7692] ? do_splice_read+0x285/0x370 [ 174.256988][ T7692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.257014][ T7692] alloc_pages_bulk_noprof+0x782/0x1490 [ 174.257044][ T7692] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 174.257072][ T7692] ? __kmalloc_noprof+0x320/0x850 [ 174.257098][ T7692] copy_splice_read+0x1e1/0xb90 [ 174.257117][ T7692] ? __pfx_copy_splice_read+0x10/0x10 [ 174.257133][ T7692] ? look_up_lock_class+0x55/0x120 [ 174.257152][ T7692] ? lockdep_init_map_type+0x5c/0x250 [ 174.257174][ T7692] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 174.257189][ T7692] ? __pfx_copy_splice_read+0x10/0x10 [ 174.257203][ T7692] do_splice_read+0x285/0x370 [ 174.257220][ T7692] splice_direct_to_actor+0x2a1/0xa30 [ 174.257237][ T7692] ? __pfx_direct_splice_actor+0x10/0x10 [ 174.257255][ T7692] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 174.257276][ T7692] do_splice_direct+0x174/0x240 [ 174.257292][ T7692] ? __pfx_do_splice_direct+0x10/0x10 [ 174.257308][ T7692] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 174.257325][ T7692] ? rw_verify_area+0xce/0x6d0 [ 174.257348][ T7692] do_sendfile+0xadc/0xe20 [ 174.257375][ T7692] ? __pfx_do_sendfile+0x10/0x10 [ 174.257398][ T7692] ? __fget_files+0x21f/0x3d0 [ 174.257417][ T7692] __x64_sys_sendfile64+0x1d8/0x220 [ 174.257434][ T7692] ? ksys_write+0x1ac/0x250 [ 174.257448][ T7692] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 174.257471][ T7692] do_syscall_64+0x106/0xf80 [ 174.257485][ T7692] ? clear_bhb_loop+0x40/0x90 [ 174.257503][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.257518][ T7692] RIP: 0033:0x7f45d2f9c819 [ 174.257530][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.257543][ T7692] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.257558][ T7692] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 174.257567][ T7692] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 174.257575][ T7692] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.257583][ T7692] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 174.257591][ T7692] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 174.257610][ T7692] [ 175.069833][ T7688] zram: Added device: zram1 [ 175.136937][ T7677] bridge0: port 4(vlan0) entered blocking state [ 175.147943][ T7677] bridge0: port 4(vlan0) entered disabled state [ 175.169174][ T7677] vlan0: entered allmulticast mode [ 175.178995][ T7677] veth0_vlan: entered allmulticast mode [ 175.226484][ T7677] vlan0: entered promiscuous mode [ 175.239649][ T7677] bridge0: port 4(vlan0) entered blocking state [ 175.246034][ T7677] bridge0: port 4(vlan0) entered forwarding state [ 175.568629][ T7697] FAULT_INJECTION: forcing a failure. [ 175.568629][ T7697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.582013][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 175.582047][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.582062][ T7697] Call Trace: [ 175.582071][ T7697] [ 175.582080][ T7697] dump_stack_lvl+0x100/0x190 [ 175.582127][ T7697] should_fail_ex.cold+0x5/0xa [ 175.582154][ T7697] ? prepare_alloc_pages+0x16d/0x5f0 [ 175.582190][ T7697] should_fail_alloc_page+0xeb/0x140 [ 175.582223][ T7697] prepare_alloc_pages+0x1f0/0x5f0 [ 175.582256][ T7697] ? kernel_text_address+0x8d/0x100 [ 175.582301][ T7697] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 175.582357][ T7697] ? copy_splice_read+0x1a3/0xb90 [ 175.582385][ T7697] ? stack_trace_save+0x8e/0xc0 [ 175.582413][ T7697] ? __pfx_stack_trace_save+0x10/0x10 [ 175.582440][ T7697] ? do_splice_direct+0x174/0x240 [ 175.582470][ T7697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.582517][ T7697] ? copy_splice_read+0x1a3/0xb90 [ 175.582544][ T7697] ? kasan_save_stack+0x3f/0x50 [ 175.582568][ T7697] ? kasan_save_stack+0x30/0x50 [ 175.582593][ T7697] ? kasan_save_track+0x14/0x30 [ 175.582617][ T7697] ? __kasan_kmalloc+0xaa/0xb0 [ 175.582641][ T7697] ? __kmalloc_noprof+0x301/0x850 [ 175.582681][ T7697] ? copy_splice_read+0x1a3/0xb90 [ 175.582706][ T7697] ? do_splice_read+0x285/0x370 [ 175.582746][ T7697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.582795][ T7697] alloc_pages_bulk_noprof+0x782/0x1490 [ 175.582852][ T7697] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 175.582905][ T7697] ? __kmalloc_noprof+0x320/0x850 [ 175.582953][ T7697] copy_splice_read+0x1e1/0xb90 [ 175.582989][ T7697] ? __pfx_copy_splice_read+0x10/0x10 [ 175.583029][ T7697] ? find_held_lock+0x2b/0x80 [ 175.583063][ T7697] ? __pfx_copy_splice_read+0x10/0x10 [ 175.583091][ T7697] do_splice_read+0x285/0x370 [ 175.583123][ T7697] splice_direct_to_actor+0x2a1/0xa30 [ 175.583156][ T7697] ? __pfx_direct_splice_actor+0x10/0x10 [ 175.583192][ T7697] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 175.583233][ T7697] do_splice_direct+0x174/0x240 [ 175.583264][ T7697] ? __pfx_do_splice_direct+0x10/0x10 [ 175.583295][ T7697] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 175.583329][ T7697] ? rw_verify_area+0xce/0x6d0 [ 175.583374][ T7697] do_sendfile+0xadc/0xe20 [ 175.583425][ T7697] ? __pfx_do_sendfile+0x10/0x10 [ 175.583468][ T7697] ? __fget_files+0x21f/0x3d0 [ 175.583504][ T7697] __x64_sys_sendfile64+0x1d8/0x220 [ 175.583536][ T7697] ? ksys_write+0x1ac/0x250 [ 175.583566][ T7697] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 175.583611][ T7697] do_syscall_64+0x106/0xf80 [ 175.583638][ T7697] ? clear_bhb_loop+0x40/0x90 [ 175.583672][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.583700][ T7697] RIP: 0033:0x7f45d2f9c819 [ 175.583723][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.583754][ T7697] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 175.583779][ T7697] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 175.583798][ T7697] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 175.583813][ T7697] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.583829][ T7697] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 175.583845][ T7697] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 175.583882][ T7697] [ 176.951261][ T7727] FAULT_INJECTION: forcing a failure. [ 176.951261][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 176.988885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 177.021712][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 177.021745][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 177.021759][ T7727] Call Trace: [ 177.021768][ T7727] [ 177.021777][ T7727] dump_stack_lvl+0x100/0x190 [ 177.021821][ T7727] should_fail_ex.cold+0x5/0xa [ 177.021851][ T7727] should_failslab+0xc2/0x120 [ 177.021879][ T7727] __kvmalloc_node_noprof+0xfa/0xa00 [ 177.021903][ T7727] ? proc_sys_call_handler+0x2c7/0x5a0 [ 177.021934][ T7727] proc_sys_call_handler+0x2c7/0x5a0 [ 177.021960][ T7727] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 177.021987][ T7727] ? __kmalloc_noprof+0x320/0x850 [ 177.022031][ T7727] copy_splice_read+0x4ba/0xb90 [ 177.022062][ T7727] ? __pfx_copy_splice_read+0x10/0x10 [ 177.022091][ T7727] ? look_up_lock_class+0x55/0x120 [ 177.022122][ T7727] ? lockdep_init_map_type+0x5c/0x250 [ 177.022158][ T7727] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 177.022187][ T7727] ? __pfx_copy_splice_read+0x10/0x10 [ 177.022215][ T7727] do_splice_read+0x285/0x370 [ 177.022247][ T7727] splice_direct_to_actor+0x2a1/0xa30 [ 177.022278][ T7727] ? __pfx_direct_splice_actor+0x10/0x10 [ 177.022312][ T7727] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 177.022352][ T7727] do_splice_direct+0x174/0x240 [ 177.022390][ T7727] ? __pfx_do_splice_direct+0x10/0x10 [ 177.022420][ T7727] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 177.022453][ T7727] ? rw_verify_area+0xce/0x6d0 [ 177.022494][ T7727] do_sendfile+0xadc/0xe20 [ 177.022543][ T7727] ? __pfx_do_sendfile+0x10/0x10 [ 177.022585][ T7727] ? __fget_files+0x21f/0x3d0 [ 177.022622][ T7727] __x64_sys_sendfile64+0x1d8/0x220 [ 177.022653][ T7727] ? ksys_write+0x1ac/0x250 [ 177.022677][ T7727] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 177.022718][ T7727] do_syscall_64+0x106/0xf80 [ 177.022743][ T7727] ? clear_bhb_loop+0x40/0x90 [ 177.022775][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.022802][ T7727] RIP: 0033:0x7f943159c819 [ 177.022825][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.022848][ T7727] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.022871][ T7727] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 177.022886][ T7727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 177.022901][ T7727] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 177.022916][ T7727] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 177.022931][ T7727] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 177.022966][ T7727] [ 177.707700][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 178.046181][ T7744] FAULT_INJECTION: forcing a failure. [ 178.046181][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 178.060698][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.0.479 Not tainted syzkaller #0 PREEMPT(full) [ 178.060719][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.060728][ T7744] Call Trace: [ 178.060733][ T7744] [ 178.060739][ T7744] dump_stack_lvl+0x100/0x190 [ 178.060766][ T7744] should_fail_ex.cold+0x5/0xa [ 178.060783][ T7744] should_failslab+0xc2/0x120 [ 178.060800][ T7744] __kvmalloc_node_noprof+0xfa/0xa00 [ 178.060814][ T7744] ? proc_sys_call_handler+0x2c7/0x5a0 [ 178.060833][ T7744] proc_sys_call_handler+0x2c7/0x5a0 [ 178.060848][ T7744] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 178.060863][ T7744] ? __kmalloc_noprof+0x320/0x850 [ 178.060889][ T7744] copy_splice_read+0x4ba/0xb90 [ 178.060909][ T7744] ? __pfx_copy_splice_read+0x10/0x10 [ 178.060930][ T7744] ? find_held_lock+0x2b/0x80 [ 178.060948][ T7744] ? __pfx_copy_splice_read+0x10/0x10 [ 178.060963][ T7744] do_splice_read+0x285/0x370 [ 178.060979][ T7744] splice_direct_to_actor+0x2a1/0xa30 [ 178.060996][ T7744] ? __pfx_direct_splice_actor+0x10/0x10 [ 178.061014][ T7744] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 178.061035][ T7744] do_splice_direct+0x174/0x240 [ 178.061051][ T7744] ? __pfx_do_splice_direct+0x10/0x10 [ 178.061067][ T7744] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 178.061085][ T7744] ? rw_verify_area+0xce/0x6d0 [ 178.061108][ T7744] do_sendfile+0xadc/0xe20 [ 178.061135][ T7744] ? __pfx_do_sendfile+0x10/0x10 [ 178.061158][ T7744] ? __fget_files+0x21f/0x3d0 [ 178.061177][ T7744] __x64_sys_sendfile64+0x1d8/0x220 [ 178.061194][ T7744] ? ksys_write+0x1ac/0x250 [ 178.061208][ T7744] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 178.061231][ T7744] do_syscall_64+0x106/0xf80 [ 178.061246][ T7744] ? clear_bhb_loop+0x40/0x90 [ 178.061263][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.061278][ T7744] RIP: 0033:0x7f4ec3d9c819 [ 178.061292][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.061305][ T7744] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 178.061319][ T7744] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 178.061328][ T7744] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 178.061336][ T7744] RBP: 00007f4ec4c50090 R08: 0000000000000000 R09: 0000000000000000 [ 178.061344][ T7744] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 178.061355][ T7744] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 178.061373][ T7744] [ 178.599343][ T7730] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 180.215955][ T7793] FAULT_INJECTION: forcing a failure. [ 180.215955][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.251263][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.0.491 Not tainted syzkaller #0 PREEMPT(full) [ 180.251304][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.251320][ T7793] Call Trace: [ 180.251329][ T7793] [ 180.251339][ T7793] dump_stack_lvl+0x100/0x190 [ 180.251386][ T7793] should_fail_ex.cold+0x5/0xa [ 180.251421][ T7793] _copy_to_user+0x32/0xd0 [ 180.251461][ T7793] simple_read_from_buffer+0xcb/0x170 [ 180.251516][ T7793] proc_fail_nth_read+0x1af/0x230 [ 180.251553][ T7793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.251592][ T7793] ? rw_verify_area+0xce/0x6d0 [ 180.251634][ T7793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.251671][ T7793] vfs_read+0x1e4/0xb30 [ 180.251703][ T7793] ? __pfx_vfs_read+0x10/0x10 [ 180.251729][ T7793] ? __fget_files+0x215/0x3d0 [ 180.251766][ T7793] ? __fget_files+0x21f/0x3d0 [ 180.251805][ T7793] ksys_read+0x12a/0x250 [ 180.251832][ T7793] ? __pfx_ksys_read+0x10/0x10 [ 180.251871][ T7793] do_syscall_64+0x106/0xf80 [ 180.251900][ T7793] ? clear_bhb_loop+0x40/0x90 [ 180.251935][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.251964][ T7793] RIP: 0033:0x7f4ec3d5d04e [ 180.251988][ T7793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.252014][ T7793] RSP: 002b:00007f4ec4c4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.252040][ T7793] RAX: ffffffffffffffda RBX: 00007f4ec4c506c0 RCX: 00007f4ec3d5d04e [ 180.252059][ T7793] RDX: 000000000000000f RSI: 00007f4ec4c500a0 RDI: 0000000000000007 [ 180.252076][ T7793] RBP: 00007f4ec4c50090 R08: 0000000000000000 R09: 0000000000000000 [ 180.252093][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.252109][ T7793] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 180.252148][ T7793] [ 180.835869][ T7797] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 181.001034][ T7802] FAULT_INJECTION: forcing a failure. [ 181.001034][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 181.077165][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT(full) [ 181.077204][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.077220][ T7802] Call Trace: [ 181.077228][ T7802] [ 181.077238][ T7802] dump_stack_lvl+0x100/0x190 [ 181.077284][ T7802] should_fail_ex.cold+0x5/0xa [ 181.077318][ T7802] should_failslab+0xc2/0x120 [ 181.077349][ T7802] __kvmalloc_node_noprof+0xfa/0xa00 [ 181.077376][ T7802] ? seq_read_iter+0x819/0x1270 [ 181.077427][ T7802] seq_read_iter+0x819/0x1270 [ 181.077472][ T7802] ? aa_file_perm+0x7f3/0x14d0 [ 181.077528][ T7802] seq_read+0x33b/0x4c0 [ 181.077554][ T7802] ? __pfx_seq_read+0x10/0x10 [ 181.077607][ T7802] full_proxy_read+0x135/0x1a0 [ 181.077649][ T7802] ? __pfx_full_proxy_read+0x10/0x10 [ 181.077696][ T7802] vfs_read+0x1e4/0xb30 [ 181.077728][ T7802] ? __pfx_vfs_read+0x10/0x10 [ 181.077757][ T7802] ? __fget_files+0x215/0x3d0 [ 181.077793][ T7802] ? __fget_files+0x21f/0x3d0 [ 181.077832][ T7802] ksys_read+0x12a/0x250 [ 181.077859][ T7802] ? __pfx_ksys_read+0x10/0x10 [ 181.077897][ T7802] do_syscall_64+0x106/0xf80 [ 181.077925][ T7802] ? clear_bhb_loop+0x40/0x90 [ 181.077959][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.077987][ T7802] RIP: 0033:0x7fc7f559c819 [ 181.078009][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.078034][ T7802] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.078060][ T7802] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 181.078078][ T7802] RDX: 0000000000000068 RSI: 0000200000002500 RDI: 0000000000000003 [ 181.078095][ T7802] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 181.078111][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.078127][ T7802] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 181.078170][ T7802] [ 182.709895][ T7830] FAULT_INJECTION: forcing a failure. [ 182.709895][ T7830] name failslab, interval 1, probability 0, space 0, times 0 [ 182.762191][ T7830] CPU: 1 UID: 0 PID: 7830 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 182.762212][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.762221][ T7830] Call Trace: [ 182.762226][ T7830] [ 182.762232][ T7830] dump_stack_lvl+0x100/0x190 [ 182.762259][ T7830] should_fail_ex.cold+0x5/0xa [ 182.762280][ T7830] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 182.762297][ T7830] should_failslab+0xc2/0x120 [ 182.762314][ T7830] __kmalloc_noprof+0xe0/0x850 [ 182.762342][ T7830] ? trace_kmalloc+0x101/0x130 [ 182.762361][ T7830] kernfs_fop_write_iter+0x26a/0x5f0 [ 182.762380][ T7830] iter_file_splice_write+0x830/0x10a0 [ 182.762406][ T7830] ? __pfx_iter_file_splice_write+0x10/0x10 [ 182.762425][ T7830] ? __pfx_copy_splice_read+0x10/0x10 [ 182.762450][ T7830] ? __pfx_iter_file_splice_write+0x10/0x10 [ 182.762467][ T7830] direct_splice_actor+0x192/0x6c0 [ 182.762484][ T7830] splice_direct_to_actor+0x345/0xa30 [ 182.762501][ T7830] ? __pfx_direct_splice_actor+0x10/0x10 [ 182.762520][ T7830] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 182.762541][ T7830] do_splice_direct+0x174/0x240 [ 182.762556][ T7830] ? __pfx_do_splice_direct+0x10/0x10 [ 182.762572][ T7830] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 182.762590][ T7830] ? rw_verify_area+0xce/0x6d0 [ 182.762613][ T7830] do_sendfile+0xadc/0xe20 [ 182.762641][ T7830] ? __pfx_do_sendfile+0x10/0x10 [ 182.762664][ T7830] ? __fget_files+0x21f/0x3d0 [ 182.762683][ T7830] __x64_sys_sendfile64+0x1d8/0x220 [ 182.762700][ T7830] ? ksys_write+0x1ac/0x250 [ 182.762717][ T7830] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 182.762740][ T7830] do_syscall_64+0x106/0xf80 [ 182.762755][ T7830] ? clear_bhb_loop+0x40/0x90 [ 182.762773][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.762788][ T7830] RIP: 0033:0x7f45d2f9c819 [ 182.762801][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.762814][ T7830] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 182.762829][ T7830] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 182.762838][ T7830] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 182.762846][ T7830] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.762854][ T7830] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 182.762862][ T7830] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 182.762881][ T7830] [ 183.098638][ T7825] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 183.486546][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 183.505876][ T7841] netlink: 334 bytes leftover after parsing attributes in process `syz.3.507'. [ 183.570880][ T7841] netlink: 334 bytes leftover after parsing attributes in process `syz.3.507'. [ 184.073847][ T7856] zswap: compressor not available [ 185.008105][ T7877] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 185.382744][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 185.871295][ T7897] FAULT_INJECTION: forcing a failure. [ 185.871295][ T7897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.921031][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.3.521 Not tainted syzkaller #0 PREEMPT(full) [ 185.921054][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.921062][ T7897] Call Trace: [ 185.921068][ T7897] [ 185.921074][ T7897] dump_stack_lvl+0x100/0x190 [ 185.921101][ T7897] should_fail_ex.cold+0x5/0xa [ 185.921118][ T7897] _copy_from_user+0x2e/0xd0 [ 185.921139][ T7897] copy_msghdr_from_user+0x9f/0x4f0 [ 185.921160][ T7897] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 185.921208][ T7897] ___sys_sendmsg+0x106/0x1e0 [ 185.921242][ T7897] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.921289][ T7897] __sys_sendmsg+0x170/0x220 [ 185.921304][ T7897] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.921329][ T7897] do_syscall_64+0x106/0xf80 [ 185.921344][ T7897] ? clear_bhb_loop+0x40/0x90 [ 185.921362][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.921377][ T7897] RIP: 0033:0x7f45d2f9c819 [ 185.921390][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.921403][ T7897] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.921417][ T7897] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 185.921427][ T7897] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 185.921435][ T7897] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.921443][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.921451][ T7897] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 185.921470][ T7897] [ 186.317515][ T7901] FAULT_INJECTION: forcing a failure. [ 186.317515][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.349093][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(full) [ 186.349127][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.349141][ T7901] Call Trace: [ 186.349150][ T7901] [ 186.349159][ T7901] dump_stack_lvl+0x100/0x190 [ 186.349200][ T7901] should_fail_ex.cold+0x5/0xa [ 186.349229][ T7901] _copy_from_user+0x2e/0xd0 [ 186.349261][ T7901] copy_msghdr_from_user+0x9f/0x4f0 [ 186.349297][ T7901] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.349346][ T7901] ___sys_sendmsg+0x106/0x1e0 [ 186.349385][ T7901] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.349464][ T7901] __sys_sendmsg+0x170/0x220 [ 186.349492][ T7901] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.349543][ T7901] do_syscall_64+0x106/0xf80 [ 186.349572][ T7901] ? clear_bhb_loop+0x40/0x90 [ 186.349606][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.349634][ T7901] RIP: 0033:0x7fc7f559c819 [ 186.349658][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.349683][ T7901] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.349709][ T7901] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 186.349727][ T7901] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 186.349744][ T7901] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 186.349766][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.349782][ T7901] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 186.349819][ T7901] [ 186.640999][ T7907] vhci_hcd: not connected 4 [ 187.137151][ T7915] FAULT_INJECTION: forcing a failure. [ 187.137151][ T7915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.181514][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 187.181536][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.181545][ T7915] Call Trace: [ 187.181550][ T7915] [ 187.181556][ T7915] dump_stack_lvl+0x100/0x190 [ 187.181585][ T7915] should_fail_ex.cold+0x5/0xa [ 187.181601][ T7915] ? prepare_alloc_pages+0x16d/0x5f0 [ 187.181621][ T7915] should_fail_alloc_page+0xeb/0x140 [ 187.181639][ T7915] prepare_alloc_pages+0x1f0/0x5f0 [ 187.181659][ T7915] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 187.181684][ T7915] ? mark_held_locks+0x40/0x70 [ 187.181746][ T7915] ? finish_task_switch.isra.0+0x205/0xb80 [ 187.181766][ T7915] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 187.181783][ T7915] ? rcu_is_watching+0x12/0xc0 [ 187.181805][ T7915] ? trace_sched_exit_tp+0x13a/0x180 [ 187.181825][ T7915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.181858][ T7915] ? lock_acquire+0x1cf/0x380 [ 187.181876][ T7915] ? find_held_lock+0x2b/0x80 [ 187.181890][ T7915] ? page_table_check_set+0x49a/0xa10 [ 187.181905][ T7915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.181921][ T7915] ? policy_nodemask+0xed/0x4f0 [ 187.181939][ T7915] alloc_pages_mpol+0x1fb/0x550 [ 187.181956][ T7915] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.181977][ T7915] folio_alloc_mpol_noprof+0x36/0x340 [ 187.181997][ T7915] vma_alloc_folio_noprof+0xed/0x1d0 [ 187.182016][ T7915] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 187.182040][ T7915] do_anonymous_page+0xb3a/0x1fb0 [ 187.182067][ T7915] __handle_mm_fault+0x1d48/0x2b60 [ 187.182093][ T7915] ? __pfx___handle_mm_fault+0x10/0x10 [ 187.182115][ T7915] ? pte_offset_map_lock+0x174/0x320 [ 187.182131][ T7915] ? find_held_lock+0x2b/0x80 [ 187.182151][ T7915] ? follow_page_pte+0x5b3/0x1400 [ 187.182172][ T7915] handle_mm_fault+0x36d/0xa20 [ 187.182195][ T7915] __get_user_pages+0xf9c/0x34d0 [ 187.182220][ T7915] ? __pfx___get_user_pages+0x10/0x10 [ 187.182242][ T7915] populate_vma_page_range+0x267/0x3f0 [ 187.182262][ T7915] ? __pfx_populate_vma_page_range+0x10/0x10 [ 187.182280][ T7915] ? __pfx_find_vma_intersection+0x10/0x10 [ 187.182297][ T7915] ? do_mmap+0x93f/0x12f0 [ 187.182316][ T7915] __mm_populate+0x107/0x3a0 [ 187.182335][ T7915] ? __pfx___mm_populate+0x10/0x10 [ 187.182355][ T7915] ? up_write+0x290/0x4f0 [ 187.182377][ T7915] vm_mmap_pgoff+0x37f/0x470 [ 187.182397][ T7915] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 187.182415][ T7915] ? do_futex+0x192/0x350 [ 187.182435][ T7915] ? __pfx_do_futex+0x10/0x10 [ 187.182457][ T7915] ksys_mmap_pgoff+0xe1/0x650 [ 187.182474][ T7915] ? __x64_sys_futex+0x34f/0x4d0 [ 187.182492][ T7915] ? __x64_sys_futex+0x358/0x4d0 [ 187.182511][ T7915] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 187.182527][ T7915] ? xfd_validate_state+0x129/0x190 [ 187.182552][ T7915] __x64_sys_mmap+0x125/0x190 [ 187.182576][ T7915] do_syscall_64+0x106/0xf80 [ 187.182592][ T7915] ? clear_bhb_loop+0x40/0x90 [ 187.182611][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.182626][ T7915] RIP: 0033:0x7f4ec3d9c819 [ 187.182640][ T7915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.182654][ T7915] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 187.182669][ T7915] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 187.182679][ T7915] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 187.182688][ T7915] RBP: 00007f4ec3e32c91 R08: 0000000000000002 R09: 0000000000008000 [ 187.182697][ T7915] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 187.182715][ T7915] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 187.182736][ T7915] [ 187.788131][ T7909] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 189.252657][ T7952] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 189.623042][ T7967] HfR: entered promiscuous mode [ 190.556372][ T7983] ubi0: attaching mtd0 [ 190.566264][ T7983] ubi0: scanning is finished [ 190.570987][ T7983] ubi0: empty MTD device detected [ 190.959992][ T7983] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 190.967553][ T7983] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 190.974846][ T7983] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 190.981812][ T7983] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 190.990226][ T7983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 190.997351][ T7983] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.019644][ T7983] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3614503739 [ 191.064601][ T7983] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.111253][ T7996] ubi0: background thread "ubi_bgt0d" started, PID 7996 [ 191.619754][ T8000] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 192.306691][ T8016] FAULT_INJECTION: forcing a failure. [ 192.306691][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 192.324573][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 192.324608][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.324622][ T8016] Call Trace: [ 192.324631][ T8016] [ 192.324640][ T8016] dump_stack_lvl+0x100/0x190 [ 192.324685][ T8016] should_fail_ex.cold+0x5/0xa [ 192.324718][ T8016] should_failslab+0xc2/0x120 [ 192.324749][ T8016] __kvmalloc_node_noprof+0xfa/0xa00 [ 192.324774][ T8016] ? proc_sys_call_handler+0x2c7/0x5a0 [ 192.324810][ T8016] proc_sys_call_handler+0x2c7/0x5a0 [ 192.324839][ T8016] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 192.324867][ T8016] ? __kmalloc_noprof+0x320/0x850 [ 192.324915][ T8016] copy_splice_read+0x4ba/0xb90 [ 192.324952][ T8016] ? __pfx_copy_splice_read+0x10/0x10 [ 192.324991][ T8016] ? find_held_lock+0x2b/0x80 [ 192.325026][ T8016] ? __pfx_copy_splice_read+0x10/0x10 [ 192.325053][ T8016] do_splice_read+0x285/0x370 [ 192.325085][ T8016] splice_direct_to_actor+0x2a1/0xa30 [ 192.325116][ T8016] ? __pfx_direct_splice_actor+0x10/0x10 [ 192.325151][ T8016] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 192.325190][ T8016] do_splice_direct+0x174/0x240 [ 192.325220][ T8016] ? __pfx_do_splice_direct+0x10/0x10 [ 192.325250][ T8016] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 192.325283][ T8016] ? rw_verify_area+0xce/0x6d0 [ 192.325325][ T8016] do_sendfile+0xadc/0xe20 [ 192.325412][ T8016] ? __pfx_do_sendfile+0x10/0x10 [ 192.325455][ T8016] ? __fget_files+0x21f/0x3d0 [ 192.325491][ T8016] __x64_sys_sendfile64+0x1d8/0x220 [ 192.325522][ T8016] ? ksys_write+0x1ac/0x250 [ 192.325548][ T8016] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 192.325591][ T8016] do_syscall_64+0x106/0xf80 [ 192.325618][ T8016] ? clear_bhb_loop+0x40/0x90 [ 192.325651][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.325678][ T8016] RIP: 0033:0x7fc7f559c819 [ 192.325700][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.325725][ T8016] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 192.325750][ T8016] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 192.325768][ T8016] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 192.325782][ T8016] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 192.325796][ T8016] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 192.325807][ T8016] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 192.325827][ T8016] [ 192.874625][ T8020] nbd: illegal input index -1073741824 [ 193.158769][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 193.494181][ T8036] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 193.534046][ T8039] FAULT_INJECTION: forcing a failure. [ 193.534046][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 193.546719][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT(full) [ 193.546739][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.546748][ T8039] Call Trace: [ 193.546754][ T8039] [ 193.546759][ T8039] dump_stack_lvl+0x100/0x190 [ 193.546787][ T8039] should_fail_ex.cold+0x5/0xa [ 193.546804][ T8039] ? alloc_pipe_info+0x1ec/0x590 [ 193.546820][ T8039] should_failslab+0xc2/0x120 [ 193.546836][ T8039] __kmalloc_noprof+0xe0/0x850 [ 193.546863][ T8039] alloc_pipe_info+0x1ec/0x590 [ 193.546881][ T8039] splice_direct_to_actor+0x78f/0xa30 [ 193.546897][ T8039] ? __lock_acquire+0x4a5/0x2630 [ 193.546916][ T8039] ? __pfx_direct_splice_actor+0x10/0x10 [ 193.546932][ T8039] ? __pfx_aa_file_perm+0x10/0x10 [ 193.546955][ T8039] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 193.546976][ T8039] do_splice_direct+0x174/0x240 [ 193.546991][ T8039] ? __pfx_do_splice_direct+0x10/0x10 [ 193.547007][ T8039] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 193.547025][ T8039] ? rw_verify_area+0xce/0x6d0 [ 193.547048][ T8039] do_sendfile+0xadc/0xe20 [ 193.547075][ T8039] ? __pfx_do_sendfile+0x10/0x10 [ 193.547098][ T8039] ? __fget_files+0x21f/0x3d0 [ 193.547117][ T8039] __x64_sys_sendfile64+0x1d8/0x220 [ 193.547134][ T8039] ? ksys_write+0x1ac/0x250 [ 193.547148][ T8039] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 193.547171][ T8039] do_syscall_64+0x106/0xf80 [ 193.547186][ T8039] ? clear_bhb_loop+0x40/0x90 [ 193.547204][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.547219][ T8039] RIP: 0033:0x7fc7f559c819 [ 193.547232][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.547245][ T8039] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 193.547259][ T8039] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 193.547268][ T8039] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 193.547276][ T8039] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 193.547284][ T8039] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 193.547292][ T8039] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 193.547311][ T8039] [ 193.959471][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.965829][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.428641][ T8058] FAULT_INJECTION: forcing a failure. [ 194.428641][ T8058] name failslab, interval 1, probability 0, space 0, times 0 [ 194.465798][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.0.567 Not tainted syzkaller #0 PREEMPT(full) [ 194.465835][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.465851][ T8058] Call Trace: [ 194.465860][ T8058] [ 194.465870][ T8058] dump_stack_lvl+0x100/0x190 [ 194.465915][ T8058] should_fail_ex.cold+0x5/0xa [ 194.465950][ T8058] should_failslab+0xc2/0x120 [ 194.465981][ T8058] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 194.466022][ T8058] ? skb_clone+0x190/0x400 [ 194.466057][ T8058] skb_clone+0x190/0x400 [ 194.466085][ T8058] netlink_deliver_tap+0xaed/0xcc0 [ 194.466121][ T8058] netlink_unicast+0x650/0x870 [ 194.466157][ T8058] ? __pfx_netlink_unicast+0x10/0x10 [ 194.466186][ T8058] ? __pfx___might_resched+0x10/0x10 [ 194.466226][ T8058] ? __lock_acquire+0x4a5/0x2630 [ 194.466273][ T8058] netlink_sendmsg+0x8b0/0xda0 [ 194.466310][ T8058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.466338][ T8058] ? __import_iovec+0x1d2/0x640 [ 194.466386][ T8058] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 194.466418][ T8058] ____sys_sendmsg+0x9e1/0xb70 [ 194.466454][ T8058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.466488][ T8058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.466540][ T8058] ___sys_sendmsg+0x190/0x1e0 [ 194.466579][ T8058] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.466661][ T8058] __sys_sendmsg+0x170/0x220 [ 194.466690][ T8058] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.466742][ T8058] do_syscall_64+0x106/0xf80 [ 194.466770][ T8058] ? clear_bhb_loop+0x40/0x90 [ 194.466805][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.466833][ T8058] RIP: 0033:0x7f4ec3d9c819 [ 194.466856][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.466881][ T8058] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.466905][ T8058] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 194.466923][ T8058] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 194.466940][ T8058] RBP: 00007f4ec4c50090 R08: 0000000000000000 R09: 0000000000000000 [ 194.466956][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.466972][ T8058] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 194.467010][ T8058] [ 194.773300][ T8043] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 197.299446][ T8081] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 198.140469][ T5828] Bluetooth: hci3: unexpected event 0x04 length: 64 > 10 [ 198.140713][ T5828] Bluetooth: hci3: connection err: -111 [ 198.344326][ T8111] FAULT_INJECTION: forcing a failure. [ 198.344326][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 198.359284][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(full) [ 198.359307][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.359315][ T8111] Call Trace: [ 198.359321][ T8111] [ 198.359326][ T8111] dump_stack_lvl+0x100/0x190 [ 198.359353][ T8111] should_fail_ex.cold+0x5/0xa [ 198.359371][ T8111] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 198.359391][ T8111] should_failslab+0xc2/0x120 [ 198.359408][ T8111] __kmalloc_noprof+0xe0/0x850 [ 198.359430][ T8111] ? lockdep_hardirqs_on+0x78/0x100 [ 198.359449][ T8111] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 198.359472][ T8111] genl_family_rcv_msg_doit+0xc7/0x300 [ 198.359492][ T8111] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.359510][ T8111] ? genl_get_cmd+0x3ef/0x720 [ 198.359531][ T8111] ? bpf_lsm_capable+0x9/0x10 [ 198.359547][ T8111] ? security_capable+0x80/0x260 [ 198.359563][ T8111] ? ns_capable+0xd2/0xf0 [ 198.359579][ T8111] genl_rcv_msg+0x560/0x800 [ 198.359600][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.359618][ T8111] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 198.359640][ T8111] netlink_rcv_skb+0x159/0x420 [ 198.359656][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.359674][ T8111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.359698][ T8111] ? netlink_deliver_tap+0x1ae/0xcc0 [ 198.359715][ T8111] genl_rcv+0x28/0x40 [ 198.359730][ T8111] netlink_unicast+0x5aa/0x870 [ 198.359749][ T8111] ? __pfx_netlink_unicast+0x10/0x10 [ 198.359764][ T8111] ? __pfx___might_resched+0x10/0x10 [ 198.359786][ T8111] ? __lock_acquire+0x4a5/0x2630 [ 198.359810][ T8111] netlink_sendmsg+0x8b0/0xda0 [ 198.359829][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.359843][ T8111] ? __import_iovec+0x1d2/0x640 [ 198.359865][ T8111] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 198.359884][ T8111] ____sys_sendmsg+0x9e1/0xb70 [ 198.359902][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.359919][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.359946][ T8111] ___sys_sendmsg+0x190/0x1e0 [ 198.359973][ T8111] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.360016][ T8111] __sys_sendmsg+0x170/0x220 [ 198.360031][ T8111] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.360057][ T8111] do_syscall_64+0x106/0xf80 [ 198.360076][ T8111] ? clear_bhb_loop+0x40/0x90 [ 198.360095][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.360109][ T8111] RIP: 0033:0x7fc7f559c819 [ 198.360122][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.360136][ T8111] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.360150][ T8111] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 198.360159][ T8111] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 198.360167][ T8111] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 198.360176][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.360184][ T8111] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 198.360205][ T8111] [ 198.834070][ T8116] FAULT_INJECTION: forcing a failure. [ 198.834070][ T8116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.858476][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.3.582 Not tainted syzkaller #0 PREEMPT(full) [ 198.858511][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.858527][ T8116] Call Trace: [ 198.858536][ T8116] [ 198.858545][ T8116] dump_stack_lvl+0x100/0x190 [ 198.858591][ T8116] should_fail_ex.cold+0x5/0xa [ 198.858618][ T8116] ? prepare_alloc_pages+0x16d/0x5f0 [ 198.858654][ T8116] should_fail_alloc_page+0xeb/0x140 [ 198.858688][ T8116] prepare_alloc_pages+0x1f0/0x5f0 [ 198.858720][ T8116] ? kernel_text_address+0x8d/0x100 [ 198.858765][ T8116] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 198.858820][ T8116] ? copy_splice_read+0x1a3/0xb90 [ 198.858847][ T8116] ? stack_trace_save+0x8e/0xc0 [ 198.858875][ T8116] ? __pfx_stack_trace_save+0x10/0x10 [ 198.858906][ T8116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.858946][ T8116] ? copy_splice_read+0x1a3/0xb90 [ 198.858971][ T8116] ? kasan_save_stack+0x3f/0x50 [ 198.858995][ T8116] ? kasan_save_stack+0x30/0x50 [ 198.859019][ T8116] ? kasan_save_track+0x14/0x30 [ 198.859043][ T8116] ? __kasan_kmalloc+0xaa/0xb0 [ 198.859065][ T8116] ? __kmalloc_noprof+0x301/0x850 [ 198.859103][ T8116] ? copy_splice_read+0x1a3/0xb90 [ 198.859127][ T8116] ? do_splice_read+0x285/0x370 [ 198.859153][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.859203][ T8116] alloc_pages_bulk_noprof+0x782/0x1490 [ 198.859257][ T8116] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 198.859308][ T8116] ? __kmalloc_noprof+0x320/0x850 [ 198.859354][ T8116] copy_splice_read+0x1e1/0xb90 [ 198.859387][ T8116] ? __pfx_copy_splice_read+0x10/0x10 [ 198.859417][ T8116] ? look_up_lock_class+0x55/0x120 [ 198.859452][ T8116] ? lockdep_init_map_type+0x5c/0x250 [ 198.859489][ T8116] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 198.859517][ T8116] ? __pfx_copy_splice_read+0x10/0x10 [ 198.859544][ T8116] do_splice_read+0x285/0x370 [ 198.859576][ T8116] splice_direct_to_actor+0x2a1/0xa30 [ 198.859607][ T8116] ? __pfx_direct_splice_actor+0x10/0x10 [ 198.859642][ T8116] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 198.859682][ T8116] do_splice_direct+0x174/0x240 [ 198.859712][ T8116] ? __pfx_do_splice_direct+0x10/0x10 [ 198.859741][ T8116] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 198.859774][ T8116] ? rw_verify_area+0xce/0x6d0 [ 198.859816][ T8116] do_sendfile+0xadc/0xe20 [ 198.859847][ T8116] ? __pfx_do_sendfile+0x10/0x10 [ 198.859870][ T8116] ? __fget_files+0x21f/0x3d0 [ 198.859890][ T8116] __x64_sys_sendfile64+0x1d8/0x220 [ 198.859908][ T8116] ? ksys_write+0x1ac/0x250 [ 198.859925][ T8116] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 198.859951][ T8116] do_syscall_64+0x106/0xf80 [ 198.859965][ T8116] ? clear_bhb_loop+0x40/0x90 [ 198.859983][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.859998][ T8116] RIP: 0033:0x7f45d2f9c819 [ 198.860011][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.860024][ T8116] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 198.860039][ T8116] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 198.860048][ T8116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 198.860056][ T8116] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.860064][ T8116] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 198.860072][ T8116] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 198.860091][ T8116] [ 200.322244][ T8141] FAULT_INJECTION: forcing a failure. [ 200.322244][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 200.343740][ T8141] CPU: 0 UID: 0 PID: 8141 Comm: syz.1.589 Not tainted syzkaller #0 PREEMPT(full) [ 200.343763][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.343772][ T8141] Call Trace: [ 200.343783][ T8141] [ 200.343789][ T8141] dump_stack_lvl+0x100/0x190 [ 200.343816][ T8141] should_fail_ex.cold+0x5/0xa [ 200.343834][ T8141] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 200.343854][ T8141] should_failslab+0xc2/0x120 [ 200.343871][ T8141] __kmalloc_noprof+0xe0/0x850 [ 200.343893][ T8141] ? lockdep_hardirqs_on+0x78/0x100 [ 200.343912][ T8141] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 200.343935][ T8141] genl_family_rcv_msg_doit+0xc7/0x300 [ 200.343956][ T8141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.343974][ T8141] ? genl_get_cmd+0x3ef/0x720 [ 200.343994][ T8141] ? bpf_lsm_capable+0x9/0x10 [ 200.344010][ T8141] ? security_capable+0x80/0x260 [ 200.344028][ T8141] ? ns_capable+0xd2/0xf0 [ 200.344045][ T8141] genl_rcv_msg+0x560/0x800 [ 200.344066][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.344084][ T8141] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 200.344106][ T8141] netlink_rcv_skb+0x159/0x420 [ 200.344122][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.344140][ T8141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.344164][ T8141] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.344181][ T8141] genl_rcv+0x28/0x40 [ 200.344196][ T8141] netlink_unicast+0x5aa/0x870 [ 200.344215][ T8141] ? __pfx_netlink_unicast+0x10/0x10 [ 200.344229][ T8141] ? __pfx___might_resched+0x10/0x10 [ 200.344251][ T8141] ? __lock_acquire+0x4a5/0x2630 [ 200.344276][ T8141] netlink_sendmsg+0x8b0/0xda0 [ 200.344295][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.344309][ T8141] ? __import_iovec+0x1d2/0x640 [ 200.344331][ T8141] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 200.344349][ T8141] ____sys_sendmsg+0x9e1/0xb70 [ 200.344367][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.344384][ T8141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.344411][ T8141] ___sys_sendmsg+0x190/0x1e0 [ 200.344432][ T8141] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.344473][ T8141] __sys_sendmsg+0x170/0x220 [ 200.344488][ T8141] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.344514][ T8141] do_syscall_64+0x106/0xf80 [ 200.344529][ T8141] ? clear_bhb_loop+0x40/0x90 [ 200.344547][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.344562][ T8141] RIP: 0033:0x7fc7f559c819 [ 200.344575][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.344588][ T8141] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.344602][ T8141] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 200.344611][ T8141] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 200.344620][ T8141] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 200.344628][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.344636][ T8141] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 200.344655][ T8141] [ 201.064308][ T8147] FAULT_INJECTION: forcing a failure. [ 201.064308][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 201.109586][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.1.592 Not tainted syzkaller #0 PREEMPT(full) [ 201.109621][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.109636][ T8147] Call Trace: [ 201.109645][ T8147] [ 201.109654][ T8147] dump_stack_lvl+0x100/0x190 [ 201.109696][ T8147] should_fail_ex.cold+0x5/0xa [ 201.109726][ T8147] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 201.109761][ T8147] should_failslab+0xc2/0x120 [ 201.109789][ T8147] __kmalloc_noprof+0xe0/0x850 [ 201.109829][ T8147] ? lockdep_hardirqs_on+0x78/0x100 [ 201.109862][ T8147] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 201.109887][ T8147] genl_family_rcv_msg_doit+0xc7/0x300 [ 201.109908][ T8147] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.109926][ T8147] ? genl_get_cmd+0x3ef/0x720 [ 201.109946][ T8147] ? bpf_lsm_capable+0x9/0x10 [ 201.109969][ T8147] ? security_capable+0x80/0x260 [ 201.109985][ T8147] ? ns_capable+0xd2/0xf0 [ 201.110001][ T8147] genl_rcv_msg+0x560/0x800 [ 201.110022][ T8147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.110040][ T8147] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 201.110062][ T8147] netlink_rcv_skb+0x159/0x420 [ 201.110078][ T8147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.110096][ T8147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.110120][ T8147] ? netlink_deliver_tap+0x1ae/0xcc0 [ 201.110137][ T8147] genl_rcv+0x28/0x40 [ 201.110153][ T8147] netlink_unicast+0x5aa/0x870 [ 201.110171][ T8147] ? __pfx_netlink_unicast+0x10/0x10 [ 201.110186][ T8147] ? __pfx___might_resched+0x10/0x10 [ 201.110207][ T8147] ? __lock_acquire+0x4a5/0x2630 [ 201.110232][ T8147] netlink_sendmsg+0x8b0/0xda0 [ 201.110251][ T8147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.110266][ T8147] ? __import_iovec+0x1d2/0x640 [ 201.110287][ T8147] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 201.110305][ T8147] ____sys_sendmsg+0x9e1/0xb70 [ 201.110323][ T8147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.110340][ T8147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.110367][ T8147] ___sys_sendmsg+0x190/0x1e0 [ 201.110387][ T8147] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.110429][ T8147] __sys_sendmsg+0x170/0x220 [ 201.110444][ T8147] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.110471][ T8147] do_syscall_64+0x106/0xf80 [ 201.110485][ T8147] ? clear_bhb_loop+0x40/0x90 [ 201.110503][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.110518][ T8147] RIP: 0033:0x7fc7f559c819 [ 201.110531][ T8147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.110544][ T8147] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.110559][ T8147] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 201.110568][ T8147] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 201.110576][ T8147] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 201.110585][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.110592][ T8147] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 201.110611][ T8147] [ 201.873410][ T8155] FAULT_INJECTION: forcing a failure. [ 201.873410][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 201.924346][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) [ 201.924383][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.924399][ T8155] Call Trace: [ 201.924409][ T8155] [ 201.924418][ T8155] dump_stack_lvl+0x100/0x190 [ 201.924464][ T8155] should_fail_ex.cold+0x5/0xa [ 201.924494][ T8155] ? memcg_list_lru_alloc+0x4ec/0x740 [ 201.924533][ T8155] should_failslab+0xc2/0x120 [ 201.924562][ T8155] __kmalloc_noprof+0xe0/0x850 [ 201.924608][ T8155] memcg_list_lru_alloc+0x4ec/0x740 [ 201.924655][ T8155] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 201.924732][ T8155] ? rcu_read_unlock+0x17/0x60 [ 201.924775][ T8155] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 201.924821][ T8155] __memcg_slab_post_alloc_hook+0x130/0x990 [ 201.924863][ T8155] ? kasan_save_track+0x14/0x30 [ 201.924891][ T8155] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 201.924934][ T8155] ? __d_alloc+0x34/0xa80 [ 201.924974][ T8155] __d_alloc+0x34/0xa80 [ 201.925005][ T8155] ? security_inode_alloc+0xcf/0x2c0 [ 201.925041][ T8155] d_alloc_pseudo+0x1c/0xc0 [ 201.925082][ T8155] alloc_file_pseudo+0xcf/0x230 [ 201.925123][ T8155] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 201.925161][ T8155] ? security_inode_init_security_anon+0x7b/0x230 [ 201.925203][ T8155] __do_sys_memfd_secret+0x11d/0x3d0 [ 201.925237][ T8155] do_syscall_64+0x106/0xf80 [ 201.925266][ T8155] ? clear_bhb_loop+0x40/0x90 [ 201.925302][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.925335][ T8155] RIP: 0033:0x7fc7f559c819 [ 201.925358][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.925386][ T8155] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 201.925411][ T8155] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 201.925428][ T8155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.925442][ T8155] RBP: 00007fc7f5632c91 R08: 0000000000000000 R09: 0000000000000000 [ 201.925457][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.925473][ T8155] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 201.925509][ T8155] [ 202.203517][ T8152] FAULT_INJECTION: forcing a failure. [ 202.203517][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 202.395085][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 202.395109][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 202.395118][ T8152] Call Trace: [ 202.395124][ T8152] [ 202.395130][ T8152] dump_stack_lvl+0x100/0x190 [ 202.395158][ T8152] should_fail_ex.cold+0x5/0xa [ 202.395178][ T8152] should_failslab+0xc2/0x120 [ 202.395194][ T8152] __kmalloc_cache_noprof+0x7a/0x6f0 [ 202.395214][ T8152] ? usb_control_msg+0xbc/0x4b0 [ 202.395239][ T8152] usb_control_msg+0xbc/0x4b0 [ 202.395261][ T8152] ? __pfx_usb_control_msg+0x10/0x10 [ 202.395287][ T8152] usb_clear_port_feature+0x64/0x90 [ 202.395313][ T8152] disable_store+0x38f/0x450 [ 202.395329][ T8152] ? __pfx_disable_store+0x10/0x10 [ 202.395343][ T8152] ? find_held_lock+0x2b/0x80 [ 202.395357][ T8152] ? sysfs_file_kobj+0xe4/0x290 [ 202.395376][ T8152] ? sysfs_file_kobj+0xe4/0x290 [ 202.395395][ T8152] ? __pfx_disable_store+0x10/0x10 [ 202.395408][ T8152] dev_attr_store+0x58/0x80 [ 202.395428][ T8152] ? __pfx_dev_attr_store+0x10/0x10 [ 202.395447][ T8152] sysfs_kf_write+0xf2/0x150 [ 202.395467][ T8152] kernfs_fop_write_iter+0x3e0/0x5f0 [ 202.395483][ T8152] ? __pfx_sysfs_kf_write+0x10/0x10 [ 202.395504][ T8152] vfs_write+0x6ac/0x1070 [ 202.395519][ T8152] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 202.395538][ T8152] ? __pfx_vfs_write+0x10/0x10 [ 202.395564][ T8152] ksys_write+0x12a/0x250 [ 202.395579][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 202.395599][ T8152] do_syscall_64+0x106/0xf80 [ 202.395614][ T8152] ? clear_bhb_loop+0x40/0x90 [ 202.395692][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.395708][ T8152] RIP: 0033:0x7f943159c819 [ 202.395727][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.395742][ T8152] RSP: 002b:00007f94323de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.395756][ T8152] RAX: ffffffffffffffda RBX: 00007f9431816090 RCX: 00007f943159c819 [ 202.395767][ T8152] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.395776][ T8152] RBP: 00007f9431632c91 R08: 0000000000000000 R09: 0000000000000000 [ 202.395784][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.395793][ T8152] R13: 00007f9431816128 R14: 00007f9431816090 R15: 00007ffe80215c18 [ 202.395814][ T8152] [ 202.893541][ T8159] FAULT_INJECTION: forcing a failure. [ 202.893541][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 202.924505][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.2.596 Not tainted syzkaller #0 PREEMPT(full) [ 202.924537][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 202.924551][ T8159] Call Trace: [ 202.924558][ T8159] [ 202.924566][ T8159] dump_stack_lvl+0x100/0x190 [ 202.924609][ T8159] should_fail_ex.cold+0x5/0xa [ 202.924640][ T8159] should_failslab+0xc2/0x120 [ 202.924669][ T8159] __kvmalloc_node_noprof+0xfa/0xa00 [ 202.924692][ T8159] ? proc_sys_call_handler+0x2c7/0x5a0 [ 202.924723][ T8159] proc_sys_call_handler+0x2c7/0x5a0 [ 202.924749][ T8159] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 202.924773][ T8159] ? __kmalloc_noprof+0x320/0x850 [ 202.924815][ T8159] copy_splice_read+0x4ba/0xb90 [ 202.924854][ T8159] ? __pfx_copy_splice_read+0x10/0x10 [ 202.924881][ T8159] ? look_up_lock_class+0x55/0x120 [ 202.924911][ T8159] ? lockdep_init_map_type+0x5c/0x250 [ 202.924945][ T8159] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 202.924971][ T8159] ? __pfx_copy_splice_read+0x10/0x10 [ 202.924995][ T8159] do_splice_read+0x285/0x370 [ 202.925023][ T8159] splice_direct_to_actor+0x2a1/0xa30 [ 202.925050][ T8159] ? __pfx_direct_splice_actor+0x10/0x10 [ 202.925080][ T8159] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 202.925115][ T8159] do_splice_direct+0x174/0x240 [ 202.925141][ T8159] ? __pfx_do_splice_direct+0x10/0x10 [ 202.925167][ T8159] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 202.925196][ T8159] ? rw_verify_area+0xce/0x6d0 [ 202.925234][ T8159] do_sendfile+0xadc/0xe20 [ 202.925276][ T8159] ? __pfx_do_sendfile+0x10/0x10 [ 202.925313][ T8159] ? __fget_files+0x21f/0x3d0 [ 202.925345][ T8159] __x64_sys_sendfile64+0x1d8/0x220 [ 202.925372][ T8159] ? ksys_write+0x1ac/0x250 [ 202.925395][ T8159] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 202.925433][ T8159] do_syscall_64+0x106/0xf80 [ 202.925456][ T8159] ? clear_bhb_loop+0x40/0x90 [ 202.925485][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.925509][ T8159] RIP: 0033:0x7f943159c819 [ 202.925529][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.925552][ T8159] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 202.925575][ T8159] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 202.925592][ T8159] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 202.925610][ T8159] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 202.925625][ T8159] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 202.925639][ T8159] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 202.925671][ T8159] [ 203.376620][ T8168] FAULT_INJECTION: forcing a failure. [ 203.376620][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 203.389974][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.3.601 Not tainted syzkaller #0 PREEMPT(full) [ 203.390008][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.390023][ T8168] Call Trace: [ 203.390031][ T8168] [ 203.390041][ T8168] dump_stack_lvl+0x100/0x190 [ 203.390088][ T8168] should_fail_ex.cold+0x5/0xa [ 203.390121][ T8168] ? ethnl_default_set_doit+0x174/0x9b0 [ 203.390148][ T8168] should_failslab+0xc2/0x120 [ 203.390179][ T8168] __kmalloc_noprof+0xe0/0x850 [ 203.390222][ T8168] ? __nla_parse+0x40/0x60 [ 203.390253][ T8168] ethnl_default_set_doit+0x174/0x9b0 [ 203.390287][ T8168] genl_family_rcv_msg_doit+0x214/0x300 [ 203.390324][ T8168] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 203.390355][ T8168] ? genl_get_cmd+0x3ef/0x720 [ 203.390390][ T8168] ? bpf_lsm_capable+0x9/0x10 [ 203.390417][ T8168] ? security_capable+0x80/0x260 [ 203.390443][ T8168] ? ns_capable+0xd2/0xf0 [ 203.390471][ T8168] genl_rcv_msg+0x560/0x800 [ 203.390505][ T8168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.390536][ T8168] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 203.390575][ T8168] netlink_rcv_skb+0x159/0x420 [ 203.390601][ T8168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.390634][ T8168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.390675][ T8168] ? netlink_deliver_tap+0x1ae/0xcc0 [ 203.390706][ T8168] genl_rcv+0x28/0x40 [ 203.390732][ T8168] netlink_unicast+0x5aa/0x870 [ 203.390765][ T8168] ? __pfx_netlink_unicast+0x10/0x10 [ 203.390790][ T8168] ? __pfx___might_resched+0x10/0x10 [ 203.390827][ T8168] ? __lock_acquire+0x4a5/0x2630 [ 203.390878][ T8168] netlink_sendmsg+0x8b0/0xda0 [ 203.390912][ T8168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.390937][ T8168] ? __import_iovec+0x1d2/0x640 [ 203.390973][ T8168] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 203.391006][ T8168] ____sys_sendmsg+0x9e1/0xb70 [ 203.391036][ T8168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.391066][ T8168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.391113][ T8168] ___sys_sendmsg+0x190/0x1e0 [ 203.391148][ T8168] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.391223][ T8168] __sys_sendmsg+0x170/0x220 [ 203.391248][ T8168] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.391296][ T8168] do_syscall_64+0x106/0xf80 [ 203.391322][ T8168] ? clear_bhb_loop+0x40/0x90 [ 203.391353][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.391379][ T8168] RIP: 0033:0x7f45d2f9c819 [ 203.391400][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.391424][ T8168] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.391448][ T8168] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 203.391465][ T8168] RDX: 0000000020088814 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 203.391481][ T8168] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.391496][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.391510][ T8168] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 203.391545][ T8168] [ 203.856482][ T8179] bond0: Unable to set up delay as MII monitoring is disabled [ 204.575402][ T8175] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 204.947850][ T8197] FAULT_INJECTION: forcing a failure. [ 204.947850][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 204.982661][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.1.610 Not tainted syzkaller #0 PREEMPT(full) [ 204.982697][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.982716][ T8197] Call Trace: [ 204.982724][ T8197] [ 204.982733][ T8197] dump_stack_lvl+0x100/0x190 [ 204.982777][ T8197] should_fail_ex.cold+0x5/0xa [ 204.982813][ T8197] ? iter_file_splice_write+0x1d8/0x10a0 [ 204.982841][ T8197] should_failslab+0xc2/0x120 [ 204.982870][ T8197] __kmalloc_noprof+0xe0/0x850 [ 204.982917][ T8197] iter_file_splice_write+0x1d8/0x10a0 [ 204.982945][ T8197] ? lockdep_hardirqs_on+0x78/0x100 [ 204.982977][ T8197] ? copy_splice_read+0x734/0xb90 [ 204.983006][ T8197] ? kfree+0x1f6/0x6b0 [ 204.983049][ T8197] ? __pfx_iter_file_splice_write+0x10/0x10 [ 204.983078][ T8197] ? __lock_acquire+0x4a5/0x2630 [ 204.983117][ T8197] ? __pfx_copy_splice_read+0x10/0x10 [ 204.983165][ T8197] ? __pfx_iter_file_splice_write+0x10/0x10 [ 204.983198][ T8197] direct_splice_actor+0x192/0x6c0 [ 204.983231][ T8197] splice_direct_to_actor+0x345/0xa30 [ 204.983264][ T8197] ? __pfx_direct_splice_actor+0x10/0x10 [ 204.983300][ T8197] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 204.983341][ T8197] do_splice_direct+0x174/0x240 [ 204.983372][ T8197] ? __pfx_do_splice_direct+0x10/0x10 [ 204.983403][ T8197] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 204.983435][ T8197] ? rw_verify_area+0xce/0x6d0 [ 204.983476][ T8197] do_sendfile+0xadc/0xe20 [ 204.983525][ T8197] ? __pfx_do_sendfile+0x10/0x10 [ 204.983564][ T8197] ? __fget_files+0x21f/0x3d0 [ 204.983601][ T8197] __x64_sys_sendfile64+0x1d8/0x220 [ 204.983633][ T8197] ? ksys_write+0x1ac/0x250 [ 204.983659][ T8197] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 204.983702][ T8197] do_syscall_64+0x106/0xf80 [ 204.983730][ T8197] ? clear_bhb_loop+0x40/0x90 [ 204.983764][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.983791][ T8197] RIP: 0033:0x7fc7f559c819 [ 204.983820][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.983846][ T8197] RSP: 002b:00007fc7f6418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 204.983870][ T8197] RAX: ffffffffffffffda RBX: 00007fc7f5815fa0 RCX: 00007fc7f559c819 [ 204.983888][ T8197] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 204.983904][ T8197] RBP: 00007fc7f6418090 R08: 0000000000000000 R09: 0000000000000000 [ 204.983921][ T8197] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 204.983937][ T8197] R13: 00007fc7f5816038 R14: 00007fc7f5815fa0 R15: 00007ffec4d97b78 [ 204.983974][ T8197] [ 205.317184][ T5828] Bluetooth: hci2: unexpected event 0x04 length: 64 > 10 [ 205.317283][ T5828] Bluetooth: hci2: connection err: -111 [ 205.381528][ T8207] bond0: Unable to set up delay as MII monitoring is disabled [ 205.390327][ T8199] netlink: 206 bytes leftover after parsing attributes in process `syz.2.609'. [ 205.410699][ T8209] loop6: detected capacity change from 0 to 8 [ 205.582611][ T8214] FAULT_INJECTION: forcing a failure. [ 205.582611][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.665507][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.3.615 Not tainted syzkaller #0 PREEMPT(full) [ 205.665543][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.665558][ T8214] Call Trace: [ 205.665567][ T8214] [ 205.665577][ T8214] dump_stack_lvl+0x100/0x190 [ 205.665622][ T8214] should_fail_ex.cold+0x5/0xa [ 205.665656][ T8214] _copy_to_user+0x32/0xd0 [ 205.665700][ T8214] simple_read_from_buffer+0xcb/0x170 [ 205.665746][ T8214] proc_fail_nth_read+0x1af/0x230 [ 205.665783][ T8214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.665821][ T8214] ? rw_verify_area+0xce/0x6d0 [ 205.665860][ T8214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.665895][ T8214] vfs_read+0x1e4/0xb30 [ 205.665927][ T8214] ? __pfx_vfs_read+0x10/0x10 [ 205.665952][ T8214] ? __fget_files+0x215/0x3d0 [ 205.665989][ T8214] ? __fget_files+0x21f/0x3d0 [ 205.666027][ T8214] ksys_read+0x12a/0x250 [ 205.666053][ T8214] ? __pfx_ksys_read+0x10/0x10 [ 205.666091][ T8214] do_syscall_64+0x106/0xf80 [ 205.666119][ T8214] ? clear_bhb_loop+0x40/0x90 [ 205.666156][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.666185][ T8214] RIP: 0033:0x7f45d2f5d04e [ 205.666208][ T8214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.666234][ T8214] RSP: 002b:00007f45d11f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.666259][ T8214] RAX: ffffffffffffffda RBX: 00007f45d11f66c0 RCX: 00007f45d2f5d04e [ 205.666277][ T8214] RDX: 000000000000000f RSI: 00007f45d11f60a0 RDI: 0000000000000004 [ 205.666293][ T8214] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.666309][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.666324][ T8214] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 205.666362][ T8214] [ 206.258918][ T8220] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 206.521867][ T8229] FAULT_INJECTION: forcing a failure. [ 206.521867][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 206.535372][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(full) [ 206.535406][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.535421][ T8229] Call Trace: [ 206.535429][ T8229] [ 206.535438][ T8229] dump_stack_lvl+0x100/0x190 [ 206.535483][ T8229] should_fail_ex.cold+0x5/0xa [ 206.535514][ T8229] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 206.535544][ T8229] should_failslab+0xc2/0x120 [ 206.535574][ T8229] __kmalloc_noprof+0xe0/0x850 [ 206.535622][ T8229] ? trace_kmalloc+0x101/0x130 [ 206.535658][ T8229] kernfs_fop_write_iter+0x26a/0x5f0 [ 206.535696][ T8229] iter_file_splice_write+0x830/0x10a0 [ 206.535747][ T8229] ? __pfx_iter_file_splice_write+0x10/0x10 [ 206.535785][ T8229] ? __pfx_copy_splice_read+0x10/0x10 [ 206.535836][ T8229] ? __pfx_iter_file_splice_write+0x10/0x10 [ 206.535869][ T8229] direct_splice_actor+0x192/0x6c0 [ 206.535903][ T8229] splice_direct_to_actor+0x345/0xa30 [ 206.535937][ T8229] ? __pfx_direct_splice_actor+0x10/0x10 [ 206.535973][ T8229] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 206.536015][ T8229] do_splice_direct+0x174/0x240 [ 206.536047][ T8229] ? __pfx_do_splice_direct+0x10/0x10 [ 206.536078][ T8229] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 206.536114][ T8229] ? rw_verify_area+0xce/0x6d0 [ 206.536159][ T8229] do_sendfile+0xadc/0xe20 [ 206.536210][ T8229] ? __pfx_do_sendfile+0x10/0x10 [ 206.536254][ T8229] ? __fget_files+0x21f/0x3d0 [ 206.536293][ T8229] __x64_sys_sendfile64+0x1d8/0x220 [ 206.536325][ T8229] ? ksys_write+0x1ac/0x250 [ 206.536352][ T8229] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 206.536402][ T8229] do_syscall_64+0x106/0xf80 [ 206.536430][ T8229] ? clear_bhb_loop+0x40/0x90 [ 206.536465][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.536493][ T8229] RIP: 0033:0x7f943159c819 [ 206.536516][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.536542][ T8229] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.536568][ T8229] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 206.536587][ T8229] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 206.536608][ T8229] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 206.536626][ T8229] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 206.536642][ T8229] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 206.536681][ T8229] [ 206.926398][ T8237] bond0: Unable to set up delay as MII monitoring is disabled [ 207.132120][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 207.165244][ T8239] netlink: 25 bytes leftover after parsing attributes in process `syz.0.625'. [ 207.223468][ T29] audit: type=1800 audit(1775557570.633:5): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.625" name="members" dev="configfs" ino=21702 res=0 errno=0 [ 207.240413][ T8245] KVM: debugfs: duplicate directory 8245-3 [ 207.704450][ T8259] FAULT_INJECTION: forcing a failure. [ 207.704450][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.730228][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT(full) [ 207.730266][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.730282][ T8259] Call Trace: [ 207.730291][ T8259] [ 207.730301][ T8259] dump_stack_lvl+0x100/0x190 [ 207.730353][ T8259] should_fail_ex.cold+0x5/0xa [ 207.730394][ T8259] _copy_to_user+0x32/0xd0 [ 207.730434][ T8259] simple_read_from_buffer+0xcb/0x170 [ 207.730482][ T8259] proc_fail_nth_read+0x1af/0x230 [ 207.730520][ T8259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.730559][ T8259] ? rw_verify_area+0xce/0x6d0 [ 207.730601][ T8259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.730635][ T8259] vfs_read+0x1e4/0xb30 [ 207.730664][ T8259] ? __pfx_vfs_read+0x10/0x10 [ 207.730692][ T8259] ? __fget_files+0x215/0x3d0 [ 207.730726][ T8259] ? __fget_files+0x21f/0x3d0 [ 207.730762][ T8259] ksys_read+0x12a/0x250 [ 207.730787][ T8259] ? __pfx_ksys_read+0x10/0x10 [ 207.730821][ T8259] do_syscall_64+0x106/0xf80 [ 207.730846][ T8259] ? clear_bhb_loop+0x40/0x90 [ 207.730877][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.730902][ T8259] RIP: 0033:0x7f4ec3d5d04e [ 207.730923][ T8259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.730946][ T8259] RSP: 002b:00007f4ec4c4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.730969][ T8259] RAX: ffffffffffffffda RBX: 00007f4ec4c506c0 RCX: 00007f4ec3d5d04e [ 207.730986][ T8259] RDX: 000000000000000f RSI: 00007f4ec4c500a0 RDI: 0000000000000004 [ 207.731001][ T8259] RBP: 00007f4ec4c50090 R08: 0000000000000000 R09: 0000000000000000 [ 207.731016][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.731031][ T8259] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 207.731065][ T8259] [ 208.009244][ T8242] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 208.045943][ T8257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.082621][ T8257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.094352][ T8257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.102165][ T8257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.250346][ T8268] netlink: 146 bytes leftover after parsing attributes in process `syz.3.634'. [ 208.641106][ T8280] HfR: entered promiscuous mode [ 208.838399][ T8283] netlink: 334 bytes leftover after parsing attributes in process `syz.3.637'. [ 209.215437][ T8264] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 210.065352][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.132380][ T8312] input: f¬ as /devices/virtual/input/input8 [ 210.144825][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.146757][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.150868][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.651556][ T8333] openvswitch: HfR: Dropping previously announced user features [ 210.826842][ T8338] random: crng reseeded on system resumption [ 212.201720][ T8375] FAULT_INJECTION: forcing a failure. [ 212.201720][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 212.222868][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 212.234723][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.0.661 Not tainted syzkaller #0 PREEMPT(full) [ 212.234758][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.234774][ T8375] Call Trace: [ 212.234782][ T8375] [ 212.234793][ T8375] dump_stack_lvl+0x100/0x190 [ 212.234839][ T8375] should_fail_ex.cold+0x5/0xa [ 212.234873][ T8375] should_failslab+0xc2/0x120 [ 212.234904][ T8375] __kmalloc_cache_noprof+0x7a/0x6f0 [ 212.234938][ T8375] ? call_usermodehelper_setup+0xaf/0x360 [ 212.234985][ T8375] ? __pfx_free_modprobe_argv+0x10/0x10 [ 212.235025][ T8375] call_usermodehelper_setup+0xaf/0x360 [ 212.235075][ T8375] __request_module+0x3c7/0x6c0 [ 212.235115][ T8375] ? __pfx___request_module+0x10/0x10 [ 212.235154][ T8375] ? arch_stack_walk+0xa6/0xf0 [ 212.235198][ T8375] ? do_raw_spin_lock+0x128/0x260 [ 212.235234][ T8375] ? find_held_lock+0x2b/0x80 [ 212.235260][ T8375] ? elv_iosched_store+0x1f9/0x460 [ 212.235296][ T8375] ? elv_iosched_store+0x1f9/0x460 [ 212.235337][ T8375] elv_iosched_store+0x407/0x460 [ 212.235374][ T8375] ? __pfx_elv_iosched_store+0x10/0x10 [ 212.235410][ T8375] ? kasan_save_track+0x14/0x30 [ 212.235453][ T8375] ? __pfx_elv_iosched_store+0x10/0x10 [ 212.235490][ T8375] queue_attr_store+0x25f/0x2f0 [ 212.235523][ T8375] ? __pfx_queue_attr_store+0x10/0x10 [ 212.235554][ T8375] ? __lock_acquire+0x4a5/0x2630 [ 212.235601][ T8375] ? find_held_lock+0x2b/0x80 [ 212.235626][ T8375] ? sysfs_file_kobj+0xe4/0x290 [ 212.235659][ T8375] ? sysfs_file_kobj+0xe4/0x290 [ 212.235697][ T8375] ? __pfx_queue_attr_store+0x10/0x10 [ 212.235728][ T8375] sysfs_kf_write+0xf2/0x150 [ 212.235766][ T8375] kernfs_fop_write_iter+0x3e0/0x5f0 [ 212.235797][ T8375] ? __pfx_sysfs_kf_write+0x10/0x10 [ 212.235836][ T8375] iter_file_splice_write+0x830/0x10a0 [ 212.235887][ T8375] ? __pfx_iter_file_splice_write+0x10/0x10 [ 212.235926][ T8375] ? __pfx_copy_splice_read+0x10/0x10 [ 212.235971][ T8375] ? __pfx_iter_file_splice_write+0x10/0x10 [ 212.236005][ T8375] direct_splice_actor+0x192/0x6c0 [ 212.236036][ T8375] splice_direct_to_actor+0x345/0xa30 [ 212.236068][ T8375] ? __pfx_direct_splice_actor+0x10/0x10 [ 212.236103][ T8375] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 212.236146][ T8375] do_splice_direct+0x174/0x240 [ 212.236175][ T8375] ? __pfx_do_splice_direct+0x10/0x10 [ 212.236212][ T8375] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 212.236247][ T8375] ? rw_verify_area+0xce/0x6d0 [ 212.236290][ T8375] do_sendfile+0xadc/0xe20 [ 212.236341][ T8375] ? __pfx_do_sendfile+0x10/0x10 [ 212.236384][ T8375] ? __fget_files+0x21f/0x3d0 [ 212.236423][ T8375] __x64_sys_sendfile64+0x1d8/0x220 [ 212.236455][ T8375] ? ksys_write+0x1ac/0x250 [ 212.236481][ T8375] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 212.236525][ T8375] do_syscall_64+0x106/0xf80 [ 212.236553][ T8375] ? clear_bhb_loop+0x40/0x90 [ 212.236588][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.236615][ T8375] RIP: 0033:0x7f4ec3d9c819 [ 212.236638][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.236663][ T8375] RSP: 002b:00007f4ec4c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.236690][ T8375] RAX: ffffffffffffffda RBX: 00007f4ec4015fa0 RCX: 00007f4ec3d9c819 [ 212.236708][ T8375] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 212.236724][ T8375] RBP: 00007f4ec4c50090 R08: 0000000000000000 R09: 0000000000000000 [ 212.236740][ T8375] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 212.236755][ T8375] R13: 00007f4ec4016038 R14: 00007f4ec4015fa0 R15: 00007ffd00f74d08 [ 212.236794][ T8375] [ 213.126028][ T8388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 213.244499][ T8390] random: crng reseeded on system resumption [ 215.193911][ T8448] FAULT_INJECTION: forcing a failure. [ 215.193911][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 215.243997][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.2.683 Not tainted syzkaller #0 PREEMPT(full) [ 215.244020][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.244030][ T8448] Call Trace: [ 215.244035][ T8448] [ 215.244041][ T8448] dump_stack_lvl+0x100/0x190 [ 215.244074][ T8448] should_fail_ex.cold+0x5/0xa [ 215.244094][ T8448] should_failslab+0xc2/0x120 [ 215.244111][ T8448] __kmalloc_cache_node_noprof+0x7d/0x770 [ 215.244126][ T8448] ? blk_mq_init_tags+0x8c/0x300 [ 215.244147][ T8448] blk_mq_init_tags+0x8c/0x300 [ 215.244165][ T8448] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 215.244182][ T8448] ? __kmalloc_noprof+0x320/0x850 [ 215.244209][ T8448] blk_mq_alloc_sched_tags+0x1de/0x350 [ 215.244234][ T8448] blk_mq_alloc_sched_res+0x8e/0x250 [ 215.244258][ T8448] elevator_change+0x136/0x530 [ 215.244281][ T8448] elv_iosched_store+0x3be/0x460 [ 215.244303][ T8448] ? __pfx_elv_iosched_store+0x10/0x10 [ 215.244322][ T8448] ? kasan_save_track+0x14/0x30 [ 215.244345][ T8448] ? __pfx_elv_iosched_store+0x10/0x10 [ 215.244366][ T8448] queue_attr_store+0x25f/0x2f0 [ 215.244385][ T8448] ? __pfx_queue_attr_store+0x10/0x10 [ 215.244402][ T8448] ? __lock_acquire+0x4a5/0x2630 [ 215.244430][ T8448] ? find_held_lock+0x2b/0x80 [ 215.244444][ T8448] ? sysfs_file_kobj+0xe4/0x290 [ 215.244463][ T8448] ? sysfs_file_kobj+0xe4/0x290 [ 215.244485][ T8448] ? __pfx_queue_attr_store+0x10/0x10 [ 215.244501][ T8448] sysfs_kf_write+0xf2/0x150 [ 215.244522][ T8448] kernfs_fop_write_iter+0x3e0/0x5f0 [ 215.244538][ T8448] ? __pfx_sysfs_kf_write+0x10/0x10 [ 215.244559][ T8448] iter_file_splice_write+0x830/0x10a0 [ 215.244586][ T8448] ? __pfx_iter_file_splice_write+0x10/0x10 [ 215.244606][ T8448] ? __pfx_copy_splice_read+0x10/0x10 [ 215.244632][ T8448] ? __pfx_iter_file_splice_write+0x10/0x10 [ 215.244650][ T8448] direct_splice_actor+0x192/0x6c0 [ 215.244668][ T8448] splice_direct_to_actor+0x345/0xa30 [ 215.244685][ T8448] ? __pfx_direct_splice_actor+0x10/0x10 [ 215.244704][ T8448] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 215.244725][ T8448] do_splice_direct+0x174/0x240 [ 215.244741][ T8448] ? __pfx_do_splice_direct+0x10/0x10 [ 215.244758][ T8448] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 215.244776][ T8448] ? rw_verify_area+0xce/0x6d0 [ 215.244800][ T8448] do_sendfile+0xadc/0xe20 [ 215.244830][ T8448] ? __pfx_do_sendfile+0x10/0x10 [ 215.244853][ T8448] ? __fget_files+0x21f/0x3d0 [ 215.244874][ T8448] __x64_sys_sendfile64+0x1d8/0x220 [ 215.244891][ T8448] ? ksys_write+0x1ac/0x250 [ 215.244904][ T8448] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 215.244928][ T8448] do_syscall_64+0x106/0xf80 [ 215.244943][ T8448] ? clear_bhb_loop+0x40/0x90 [ 215.244971][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.244998][ T8448] RIP: 0033:0x7f943159c819 [ 215.245021][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.245045][ T8448] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 215.245075][ T8448] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 215.245093][ T8448] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 215.245105][ T8448] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 215.245113][ T8448] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 215.245121][ T8448] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 215.245142][ T8448] [ 215.635657][ T8432] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 217.273429][ T8479] FAULT_INJECTION: forcing a failure. [ 217.273429][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 217.286369][ T8479] CPU: 1 UID: 0 PID: 8479 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT(full) [ 217.286407][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.286423][ T8479] Call Trace: [ 217.286433][ T8479] [ 217.286443][ T8479] dump_stack_lvl+0x100/0x190 [ 217.286490][ T8479] should_fail_ex.cold+0x5/0xa [ 217.286525][ T8479] should_failslab+0xc2/0x120 [ 217.286558][ T8479] __kvmalloc_node_noprof+0xfa/0xa00 [ 217.286585][ T8479] ? sbitmap_init_node+0x1cc/0x720 [ 217.286641][ T8479] sbitmap_init_node+0x1cc/0x720 [ 217.286691][ T8479] sbitmap_queue_init_node+0x40/0x4a0 [ 217.286725][ T8479] blk_mq_init_tags+0x184/0x300 [ 217.286762][ T8479] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 217.286795][ T8479] ? __kmalloc_noprof+0x320/0x850 [ 217.286847][ T8479] blk_mq_alloc_sched_tags+0x1de/0x350 [ 217.286902][ T8479] blk_mq_alloc_sched_res+0x8e/0x250 [ 217.286948][ T8479] elevator_change+0x136/0x530 [ 217.286993][ T8479] elv_iosched_store+0x3be/0x460 [ 217.287034][ T8479] ? __pfx_elv_iosched_store+0x10/0x10 [ 217.287073][ T8479] ? kasan_save_track+0x14/0x30 [ 217.287118][ T8479] ? __pfx_elv_iosched_store+0x10/0x10 [ 217.287160][ T8479] queue_attr_store+0x25f/0x2f0 [ 217.287196][ T8479] ? __pfx_queue_attr_store+0x10/0x10 [ 217.287230][ T8479] ? __lock_acquire+0x4a5/0x2630 [ 217.287288][ T8479] ? find_held_lock+0x2b/0x80 [ 217.287315][ T8479] ? sysfs_file_kobj+0xe4/0x290 [ 217.287347][ T8479] ? sysfs_file_kobj+0xe4/0x290 [ 217.287385][ T8479] ? __pfx_queue_attr_store+0x10/0x10 [ 217.287415][ T8479] sysfs_kf_write+0xf2/0x150 [ 217.287451][ T8479] kernfs_fop_write_iter+0x3e0/0x5f0 [ 217.287481][ T8479] ? __pfx_sysfs_kf_write+0x10/0x10 [ 217.287521][ T8479] iter_file_splice_write+0x830/0x10a0 [ 217.287575][ T8479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 217.287610][ T8479] ? __pfx_copy_splice_read+0x10/0x10 [ 217.287660][ T8479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 217.287695][ T8479] direct_splice_actor+0x192/0x6c0 [ 217.287730][ T8479] splice_direct_to_actor+0x345/0xa30 [ 217.287763][ T8479] ? __pfx_direct_splice_actor+0x10/0x10 [ 217.287801][ T8479] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 217.287862][ T8479] do_splice_direct+0x174/0x240 [ 217.287894][ T8479] ? __pfx_do_splice_direct+0x10/0x10 [ 217.287932][ T8479] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 217.287969][ T8479] ? rw_verify_area+0xce/0x6d0 [ 217.288025][ T8479] do_sendfile+0xadc/0xe20 [ 217.288078][ T8479] ? __pfx_do_sendfile+0x10/0x10 [ 217.288124][ T8479] ? __fget_files+0x21f/0x3d0 [ 217.288164][ T8479] __x64_sys_sendfile64+0x1d8/0x220 [ 217.288198][ T8479] ? ksys_write+0x1ac/0x250 [ 217.288225][ T8479] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 217.288273][ T8479] do_syscall_64+0x106/0xf80 [ 217.288302][ T8479] ? clear_bhb_loop+0x40/0x90 [ 217.288346][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.288376][ T8479] RIP: 0033:0x7f45d2f9c819 [ 217.288399][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.288432][ T8479] RSP: 002b:00007f45d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 217.288459][ T8479] RAX: ffffffffffffffda RBX: 00007f45d3215fa0 RCX: 00007f45d2f9c819 [ 217.288478][ T8479] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 217.288495][ T8479] RBP: 00007f45d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.288512][ T8479] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 217.288529][ T8479] R13: 00007f45d3216038 R14: 00007f45d3215fa0 R15: 00007ffe25fcf9d8 [ 217.288572][ T8479] [ 218.090943][ T8474] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 218.740624][ T8502] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 219.084294][ T8513] FAULT_INJECTION: forcing a failure. [ 219.084294][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 219.097364][ T8513] CPU: 0 UID: 0 PID: 8513 Comm: syz.2.707 Not tainted syzkaller #0 PREEMPT(full) [ 219.097400][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.097415][ T8513] Call Trace: [ 219.097424][ T8513] [ 219.097434][ T8513] dump_stack_lvl+0x100/0x190 [ 219.097480][ T8513] should_fail_ex.cold+0x5/0xa [ 219.097514][ T8513] should_failslab+0xc2/0x120 [ 219.097544][ T8513] __kmalloc_cache_node_noprof+0x7d/0x770 [ 219.097574][ T8513] ? sbitmap_queue_init_node+0x291/0x4a0 [ 219.097609][ T8513] sbitmap_queue_init_node+0x291/0x4a0 [ 219.097641][ T8513] blk_mq_init_tags+0x184/0x300 [ 219.097676][ T8513] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 219.097707][ T8513] ? __kmalloc_noprof+0x320/0x850 [ 219.097763][ T8513] blk_mq_alloc_sched_tags+0x1de/0x350 [ 219.097810][ T8513] blk_mq_alloc_sched_res+0x8e/0x250 [ 219.097857][ T8513] elevator_change+0x136/0x530 [ 219.097899][ T8513] elv_iosched_store+0x3be/0x460 [ 219.097939][ T8513] ? __pfx_elv_iosched_store+0x10/0x10 [ 219.097975][ T8513] ? kasan_save_track+0x14/0x30 [ 219.098025][ T8513] ? __pfx_elv_iosched_store+0x10/0x10 [ 219.098066][ T8513] queue_attr_store+0x25f/0x2f0 [ 219.098101][ T8513] ? __pfx_queue_attr_store+0x10/0x10 [ 219.098133][ T8513] ? __lock_acquire+0x4a5/0x2630 [ 219.098185][ T8513] ? find_held_lock+0x2b/0x80 [ 219.098212][ T8513] ? sysfs_file_kobj+0xe4/0x290 [ 219.098246][ T8513] ? sysfs_file_kobj+0xe4/0x290 [ 219.098286][ T8513] ? __pfx_queue_attr_store+0x10/0x10 [ 219.098318][ T8513] sysfs_kf_write+0xf2/0x150 [ 219.098357][ T8513] kernfs_fop_write_iter+0x3e0/0x5f0 [ 219.098387][ T8513] ? __pfx_sysfs_kf_write+0x10/0x10 [ 219.098427][ T8513] iter_file_splice_write+0x830/0x10a0 [ 219.098477][ T8513] ? __pfx_iter_file_splice_write+0x10/0x10 [ 219.098514][ T8513] ? __pfx_copy_splice_read+0x10/0x10 [ 219.098564][ T8513] ? __pfx_iter_file_splice_write+0x10/0x10 [ 219.098597][ T8513] direct_splice_actor+0x192/0x6c0 [ 219.098629][ T8513] splice_direct_to_actor+0x345/0xa30 [ 219.098663][ T8513] ? __pfx_direct_splice_actor+0x10/0x10 [ 219.098698][ T8513] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 219.098740][ T8513] do_splice_direct+0x174/0x240 [ 219.098777][ T8513] ? __pfx_do_splice_direct+0x10/0x10 [ 219.098808][ T8513] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 219.098842][ T8513] ? rw_verify_area+0xce/0x6d0 [ 219.098886][ T8513] do_sendfile+0xadc/0xe20 [ 219.098937][ T8513] ? __pfx_do_sendfile+0x10/0x10 [ 219.098980][ T8513] ? __fget_files+0x21f/0x3d0 [ 219.099019][ T8513] __x64_sys_sendfile64+0x1d8/0x220 [ 219.099051][ T8513] ? ksys_write+0x1ac/0x250 [ 219.099077][ T8513] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 219.099122][ T8513] do_syscall_64+0x106/0xf80 [ 219.099150][ T8513] ? clear_bhb_loop+0x40/0x90 [ 219.099184][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.099212][ T8513] RIP: 0033:0x7f943159c819 [ 219.099235][ T8513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.099261][ T8513] RSP: 002b:00007f94323ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.099287][ T8513] RAX: ffffffffffffffda RBX: 00007f9431815fa0 RCX: 00007f943159c819 [ 219.099305][ T8513] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 219.099321][ T8513] RBP: 00007f94323ff090 R08: 0000000000000000 R09: 0000000000000000 [ 219.099338][ T8513] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 219.099354][ T8513] R13: 00007f9431816038 R14: 00007f9431815fa0 R15: 00007ffe80215c18 [ 219.099392][ T8513] [ 220.317411][ T24] Process accounting resumed [ 220.634450][ T8529] random: crng reseeded on system resumption [ 221.467615][ T8551] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 225.866900][ T8627] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 227.805006][ T8645] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 228.763381][ T8675] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 229.552124][ T8682] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 229.590109][ T8683] ================================================================== [ 229.590130][ T8683] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 229.590160][ T8683] Write of size 8 at addr ffffc900046d9000 by task syz.3.750/8683 [ 229.590173][ T8683] [ 229.590180][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(full) [ 229.590197][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.590207][ T8683] Call Trace: [ 229.590212][ T8683] [ 229.590217][ T8683] dump_stack_lvl+0x100/0x190 [ 229.590240][ T8683] print_report+0x156/0x4c9 [ 229.590260][ T8683] ? _raw_spin_lock_irqsave+0x52/0x60 [ 229.590284][ T8683] ? sys_imageblit+0x19fb/0x1d60 [ 229.590306][ T8683] kasan_report+0xdf/0x1e0 [ 229.590325][ T8683] ? sys_imageblit+0x19fb/0x1d60 [ 229.590349][ T8683] sys_imageblit+0x19fb/0x1d60 [ 229.590373][ T8683] ? __pfx_sys_imageblit+0x10/0x10 [ 229.590396][ T8683] ? prb_read_valid+0x78/0xa0 [ 229.590415][ T8683] ? __pfx_prb_read_valid+0x10/0x10 [ 229.590443][ T8683] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 229.590461][ T8683] soft_cursor+0x524/0xa10 [ 229.590482][ T8683] ? fb_get_color_depth+0x120/0x250 [ 229.590500][ T8683] bit_cursor+0xe58/0x16f0 [ 229.590520][ T8683] ? __pfx_bit_cursor+0x10/0x10 [ 229.590538][ T8683] ? __lock_acquire+0x4a5/0x2630 [ 229.590562][ T8683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.590578][ T8683] ? get_color+0x1da/0x450 [ 229.590599][ T8683] ? __pfx_bit_cursor+0x10/0x10 [ 229.590620][ T8683] fbcon_cursor+0x43c/0x5e0 [ 229.590636][ T8683] ? add_softcursor+0x180/0x290 [ 229.590657][ T8683] set_cursor+0x1db/0x250 [ 229.590676][ T8683] con_write+0x89/0xb0 [ 229.590689][ T8683] do_output_char+0x63b/0x850 [ 229.590705][ T8683] n_tty_write+0x528/0x12d0 [ 229.590725][ T8683] ? __pfx_n_tty_write+0x10/0x10 [ 229.590741][ T8683] ? __pfx_woken_wake_function+0x10/0x10 [ 229.590770][ T8683] ? __pfx___might_resched+0x10/0x10 [ 229.590793][ T8683] ? __pfx_n_tty_write+0x10/0x10 [ 229.590809][ T8683] file_tty_write.isra.0+0x4d2/0x890 [ 229.590835][ T8683] redirected_tty_write+0xd4/0x120 [ 229.590858][ T8683] vfs_write+0x6ac/0x1070 [ 229.590872][ T8683] ? __pfx_redirected_tty_write+0x10/0x10 [ 229.590895][ T8683] ? __pfx_vfs_write+0x10/0x10 [ 229.590908][ T8683] ? find_held_lock+0x2b/0x80 [ 229.590926][ T8683] ksys_write+0x12a/0x250 [ 229.590940][ T8683] ? __pfx_ksys_write+0x10/0x10 [ 229.590956][ T8683] do_syscall_64+0x106/0xf80 [ 229.590970][ T8683] ? clear_bhb_loop+0x40/0x90 [ 229.590986][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.591001][ T8683] RIP: 0033:0x7f45d2f9c819 [ 229.591013][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.591028][ T8683] RSP: 002b:00007f45d11d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.591042][ T8683] RAX: ffffffffffffffda RBX: 00007f45d3216090 RCX: 00007f45d2f9c819 [ 229.591058][ T8683] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 229.591067][ T8683] RBP: 00007f45d3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 229.591076][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.591084][ T8683] R13: 00007f45d3216128 R14: 00007f45d3216090 R15: 00007ffe25fcf9d8 [ 229.591098][ T8683] [ 229.591103][ T8683] [ 229.591107][ T8683] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900043d9000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 229.591134][ T8683] Memory state around the buggy address: [ 229.591142][ T8683] ffffc900046d8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.591156][ T8683] ffffc900046d8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.591166][ T8683] >ffffc900046d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.591174][ T8683] ^ [ 229.591181][ T8683] ffffc900046d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.591190][ T8683] ffffc900046d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.591198][ T8683] ================================================================== [ 229.597888][ T8683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.597904][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(full) [ 229.597921][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.597931][ T8683] Call Trace: [ 229.597936][ T8683] [ 229.597942][ T8683] dump_stack_lvl+0x100/0x190 [ 229.597968][ T8683] vpanic+0x552/0x970 [ 229.597982][ T8683] ? __pfx_vpanic+0x10/0x10 [ 229.597998][ T8683] ? sys_imageblit+0x19fb/0x1d60 [ 229.598021][ T8683] panic+0xd1/0xe0 [ 229.598037][ T8683] ? __pfx_panic+0x10/0x10 [ 229.598055][ T8683] ? sys_imageblit+0x19fb/0x1d60 [ 229.598077][ T8683] ? preempt_schedule_common+0x42/0xc0 [ 229.598094][ T8683] ? check_panic_on_warn+0x1f/0x90 [ 229.598116][ T8683] check_panic_on_warn.cold+0x19/0x34 [ 229.598131][ T8683] end_report.part.0+0x3a/0x90 [ 229.598152][ T8683] kasan_report.cold+0xe/0x18 [ 229.598172][ T8683] ? sys_imageblit+0x19fb/0x1d60 [ 229.598196][ T8683] sys_imageblit+0x19fb/0x1d60 [ 229.598220][ T8683] ? __pfx_sys_imageblit+0x10/0x10 [ 229.598243][ T8683] ? prb_read_valid+0x78/0xa0 [ 229.598264][ T8683] ? __pfx_prb_read_valid+0x10/0x10 [ 229.598284][ T8683] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 229.598303][ T8683] soft_cursor+0x524/0xa10 [ 229.598324][ T8683] ? fb_get_color_depth+0x120/0x250 [ 229.598342][ T8683] bit_cursor+0xe58/0x16f0 [ 229.598363][ T8683] ? __pfx_bit_cursor+0x10/0x10 [ 229.598381][ T8683] ? __lock_acquire+0x4a5/0x2630 [ 229.598402][ T8683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.598418][ T8683] ? get_color+0x1da/0x450 [ 229.598433][ T8683] ? __pfx_bit_cursor+0x10/0x10 [ 229.598452][ T8683] fbcon_cursor+0x43c/0x5e0 [ 229.598468][ T8683] ? add_softcursor+0x180/0x290 [ 229.598489][ T8683] set_cursor+0x1db/0x250 [ 229.598509][ T8683] con_write+0x89/0xb0 [ 229.598522][ T8683] do_output_char+0x63b/0x850 [ 229.598539][ T8683] n_tty_write+0x528/0x12d0 [ 229.598559][ T8683] ? __pfx_n_tty_write+0x10/0x10 [ 229.598576][ T8683] ? __pfx_woken_wake_function+0x10/0x10 [ 229.598600][ T8683] ? __pfx___might_resched+0x10/0x10 [ 229.598623][ T8683] ? __pfx_n_tty_write+0x10/0x10 [ 229.598640][ T8683] file_tty_write.isra.0+0x4d2/0x890 [ 229.598666][ T8683] redirected_tty_write+0xd4/0x120 [ 229.598689][ T8683] vfs_write+0x6ac/0x1070 [ 229.598704][ T8683] ? __pfx_redirected_tty_write+0x10/0x10 [ 229.598728][ T8683] ? __pfx_vfs_write+0x10/0x10 [ 229.598741][ T8683] ? find_held_lock+0x2b/0x80 [ 229.598760][ T8683] ksys_write+0x12a/0x250 [ 229.598779][ T8683] ? __pfx_ksys_write+0x10/0x10 [ 229.598795][ T8683] do_syscall_64+0x106/0xf80 [ 229.598810][ T8683] ? clear_bhb_loop+0x40/0x90 [ 229.598827][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.598842][ T8683] RIP: 0033:0x7f45d2f9c819 [ 229.598854][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.598869][ T8683] RSP: 002b:00007f45d11d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.598884][ T8683] RAX: ffffffffffffffda RBX: 00007f45d3216090 RCX: 00007f45d2f9c819 [ 229.598894][ T8683] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 229.598903][ T8683] RBP: 00007f45d3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 229.598912][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.598921][ T8683] R13: 00007f45d3216128 R14: 00007f45d3216090 R15: 00007ffe25fcf9d8 [ 229.598935][ T8683] [ 229.599289][ T8683] Kernel Offset: disabled