last executing test programs: 8.227621932s ago: executing program 1 (id=746): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x393) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_cifs(0x0, r0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r2, 0x541c, 0xffffffffffffffff) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x402, 0x0) write$auto(r3, 0x0, 0x7) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c) 6.076049625s ago: executing program 1 (id=754): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e000000000000800130000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r4, 0x0, 0x8) 4.413789592s ago: executing program 3 (id=761): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x6) (async) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') (async) read$auto(r0, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) (async) r3 = socket(0x1e, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/min_links\x00', 0x88282, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20008015) (async) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL_EXPEDITED(0x2, 0x0, 0x5eed86c8) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb4, 0xffffffffffffffff, 0x4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYRES8=r7, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyue\x00', 0x201, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x2, 0x0, 0x5, 0xa) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$auto(0x7, 0x1, 0x3, 0x0) 4.307365758s ago: executing program 0 (id=762): mmap$auto(0x0, 0x400008, 0x8000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = fcntl$auto(0x0, 0x407, 0x8100000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x3, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7e, 0x0, 0x6, 0x80000000000000}, {0xe639, 0x1, 0x52, 0x85, 0x5, 0x1a7b870a, 0x76c6, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r2 = socket(0x18, 0x800, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='i\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000340)="690ee335bc7b32631b83cba3bac57e0bc99029935bf3d21fe19aaad01e74422c21dd883918402d18a0ea3377794e92b09f36bdac1e7c39283d9b69ebe6aac8f635a7596f86e05b857ba1332cc32e5c23b9fcbb0937d783d91a6ead8977c4f8c167dc479a2af0c2626777cdbeb633e7ec6edf5476ee3fcbb58cbfea132c5620627dde331c2547eb4dd1626081b2c4c929eaa7eee3cd75f2745c", 0x12, 0x0, 0x9, 0x0, 0x1f}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(r1, 0x0, 0x800000000e, 0x200, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x1, 0x7e, &(0x7f0000000040)={0xfffffffffffffff8, 0x6, 0xffffffffffffffc0, 0x800000000000046}) socket(0x2, 0x80805, 0x0) r3 = eventfd$auto(0x9) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000280)=""/40, 0x28) r4 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r4, &(0x7f0000003540)='\a', 0x1) sendmmsg$auto(r4, 0x0, 0x9a6, 0x80) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 4.129058207s ago: executing program 1 (id=763): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/1/msr\x00', 0x329002, 0x0) ioctl$auto_X86_IOC_WRMSR_REGS(r1, 0xc02063a1, &(0x7f0000000440)=[0x7acb, 0x6, 0x9, 0x3, 0x4, 0x7f, 0x3, 0x2]) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x3) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xf8\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000340)=""/139, 0x8b) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x21) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x20000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0x81) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x0) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x2, 0xffffffffffffffff, 0x4, 0x2a) setresuid$auto(0x0, 0x7, 0x0) madvise$auto(0x110c230000, 0x4, 0x9) 3.758238824s ago: executing program 2 (id=764): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x1, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mremap$auto(0x0, 0x9, 0x1fd6, 0x0, 0x1ffffffa) r1 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0xffffffff) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_OOBINLINE(r2, 0x0, 0xa, &(0x7f0000000040)='H\xff\x7f\v\x00kvm\x00', &(0x7f0000000080)=0x400) io_uring_setup$auto(0x59, 0x0) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$auto(r0, 0x8000, 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy10/airtime_flags\x00', 0x2641, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x111, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x3, 0xdf, 0xebf, 0x40000000000a5, 0x200000008000) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x401, 0x4, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(r3, 0x0, r3, 0x0, 0x10000, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x40100000a3d5) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) 3.433860057s ago: executing program 0 (id=765): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x89ef, 0x74) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x9, 0x7ff}, 0x6f4) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x7, 0x0) socket(0x2d, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfdf3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.299326693s ago: executing program 2 (id=766): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) socket(0x11, 0x3, 0x9) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty5\x00', 0x101e81, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) read$auto(r2, 0x0, 0x3) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$auto(0xffffffffffffffff, &(0x7f0000000280)='\x06m\x8a\xa7\xaa\xd3\xa7{\x0e\xfe\xbe\xd8\xc8\xfbH\x8c\x9c\xd9\xadj\x03z\xfc\xfc~\x92p\xcb\xc5_D\xd7:vEF\xb5\xf5\x86\x94\xff9\xca\xf1\xd7\t\xd85*\x1b\xc5B-\xb4\xba6\xabs)\x00\xd9)\xcd6\xf5T.\x84I\xfb\xe3\t\'C\xd1\x05\x8c\xa2<\xa3\x9dB\xe1e4*%\xff\x05\xd4$~\xed=\xc8V\xb9\x94b\xe4/G\xb57\xa1\x01\xf2\\\xe2>\x12Oq\xe0\xbe>\xde\x88\x00\xc6\x19\xd2\xc1\xd9\xae\'\xb3\x1dQ\xa7\xbf3\xa97\xe2\\\xec\x12\xae\xe0\xd5\xf6\xd1\vg\xc5\xfa\x01\x84', 0xffffffffffffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x62d4) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.887273471s ago: executing program 2 (id=767): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r0, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) r2 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/setgroups\x00', 0x183200, 0x0) pread64$auto(r2, &(0x7f0000000400)=']}%\x00', 0x4, 0x5) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r3, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) r4 = getuid() keyctl$auto(0x421f, 0x1, r4, 0x3, 0x1) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) 2.834480663s ago: executing program 3 (id=768): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) prctl$auto(0x1000000001c, 0x4000005, 0x0, 0x400000000009, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x4, 0x7ff) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0xd, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.831665269s ago: executing program 1 (id=769): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x8020) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x612000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x3bbc00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) setdomainname$auto(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f34, 0x0) r3 = socket(0xa, 0x2, 0x0) epoll_pwait2$auto(r3, 0x0, 0xfffffc00, 0x0, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800028700", @ANYRES16=r4, @ANYBLOB="05072abd7000ffdbdf250700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, 0x0, 0x6) mlockall$auto(0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) 2.825869286s ago: executing program 0 (id=770): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x7, 0x8b, 0x5, 0x800000001007181, 0x2, 0x7, 0x7, 0x3, 0xb9, 0x26, 0x4, 0x200000000001, 0x384, 0x5, 0x8, 0x0, 0x30, 0xfffffffffffffffe, 0x864, 0xe, 0x10022010, 0x9, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, [0x4000000, 0x5, 0x0, 0x0, 0x2fc4, 0x0, 0x8000000000000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x81, 0x2000000000000000, 0x0, 0x20000, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x100000004, 0x0, 0x1951, 0x0, 0x2, 0x0, 0xb5e3, 0x9, 0x0, 0x3]}, 0x9, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0xe6a9030037b8afae, 0x69) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0xa8000, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(r2, 0x2, &(0x7f0000000080)='/dev/raw-gadget\x00', 0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = memfd_create$auto(0x0, 0x4) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(r2, 0x6fd7, 0x0, &(0x7f0000000580)="46c0717ce93d270303d23be6fce9c08c59db20b3aa8088f411830b737b112cb2728c80f087f52298bb7f131d6e4b994f4d53e14184aac23fc47d160d19ea8babc8943bff39883d6f5728633616b141ee181e9d7e495a82b20ca7833c", 0xfffffffffffffffe) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x1e) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) socket(0x2000000000000021, 0x2, 0x10000000000002) fchdir$auto(r1) 2.593189598s ago: executing program 3 (id=771): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0xfffffffffffff91d, 0x3, 0xeb1, r1, 0x8) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = syz_clone(0xc0c28080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400004, 0xffffffff, 0x13, 0x2, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video68\x00', 0x169000, 0x0) ioctl$auto(r3, 0x80085617, r3) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0002, 0x19) renameat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) read$auto(r0, 0x0, 0x1) msgget$auto(0xc, 0x77d9) tgkill$auto_SIGCONT(r2, 0x0, 0x12) ptrace$auto_ARCH_SET_GS(0xffffffff, r2, 0x9f3, 0x1001) r4 = syz_clone(0x90011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x820}, 0x4) wait4$auto(r4, 0x0, 0x8, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r8, 0x9004b70b, r8) rt_tgsigqueueinfo$auto(0x0, r2, 0xb45, 0x0) 2.329525849s ago: executing program 0 (id=772): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.stat\x00', 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(&(0x7f0000000000)='\x00', 0x8cf) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(r1, 0x0, 0x6, 0x4697) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x4a901, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close$auto(0xffffffffffffffff) open(0x0, 0x0, 0x40c) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r2, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000140)=0x8001) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) sendfile$auto(0x2, r0, 0x0, 0x400000000000c3e0) 2.186861575s ago: executing program 1 (id=773): mmap$auto(0x200000000000, 0x5, 0x4, 0xffffffffffffff5e, 0x401, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x9, &(0x7f0000000000)={0x4, 0xf3, 0xb0, @raw=0xfffff034}}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8e02, 0x0) write$auto(0xca, &(0x7f0000000300)='\x00', 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8004) mmap$auto(0x0, 0x2, 0x4, 0x800000000000eb1, r1, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000180)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\f\xc4\xc4>\xf6\x84\x9ch\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xee\xd0\x17\xe2', 0x10000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) getrlimit$auto(0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0xe545, &(0x7f0000000040)={0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x3ff, &(0x7f00000000c0)={{0xe7ec}, {0x0, 0x85}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 1.739901143s ago: executing program 2 (id=774): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x400040, 0x104, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r0, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000440)={0x77c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_PMKID={0x3b, 0x55, "b03923cdca5b767696a1ca5cb459c172bc655d8fb59c8e375bacaecd27ecad76fb64c4702074a8992a9d1b3162c3d7e73eed2d42c65e8f"}, @NL80211_ATTR_BSS_SELECT={0x9c, 0xe3, 0x0, 0x1, [@generic="85e428b6d7204bbbfe8235fede44bfb2ee1e5f97868fdbba1e2061004f0b5773f97580c9ed9ce340c4192d4c8e700b50ee6e858c96099c4174344cd8e8069ae48707a206b8d43ad0f39334d0cdd577eecab6bbd5f72c6931f0865c12b8a6082abcd683b4effb56b2660059613f4984ae86258283c689cfec26ba4b9042830f8de4a9ec333670368625e6b015a4a13cb7", @typed={0x8, 0x122, 0x0, 0x0, @u32=0x2000}]}, @NL80211_ATTR_MLO_LINKS={0x688, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, {0x530, 0x0, 0x0, 0x1, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x93}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xdc64}, @NL80211_ATTR_FILS_NONCES={0xd2, 0xf3, "8ad8409ce56a2fdeded59332255e98459a4647d40e1db04cd4332e49823f6b7ce0c6235cdc37a87fb0f3862ffc702c5176c5a7682e7c93da19fe649dc06ae27798c9ff9505b9b730814141622b0118f2d26967dead03c3944b64cb37eb3f75c2f72426b4daa7c66d41e74611845313e44e0799de7b60755a714681c532bf73817cf9c472db759dfa7ad0879145a37eb85360db23659744f63595a3a4011d41a2ded804a51fb68c4735a8ca99e3436313149e00215262a7e90b61b4888331c6706854b2afec251f64271cabbdae24"}, @NL80211_ATTR_FTM_RESPONDER={0x424, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x47, 0x3, "53513b287f3386cc86639a25d46815eec83600209c7e731f21ae1b1368661d269eb77ba3e02ca8a3622296b128bda5bb72703aee7d7b0e24a51cb103362389bcd6f203"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe7, 0x2, "88c9e847547d18b9ea330cb4cb8293ea5de7a3c052ca3b87c8ec5b49338a31ec9b8cbacafa501f7f06cf25ab43d2e0a4ddf83ca5269b228c9b6c9405fadf65866b33a2b8652e05d35171ffb99502e1e0fec7cb6ec75c745f9f4c89cedc59a5340d5f64e05cb94f4e3b9b1a26732b81f56e7345085a334061f8187a096ff4075046240328319726dde3530d517d08bd272cbdb06da09c179de4073235f220381fd7d617705d7b5e2fa259db0ec1a4cb288ee4f22e719d1fc19606c800829f3bc702d760ab03fa109c738a557164aa98fe551baa0dd0b5e356a8d301c47d0bbe63561d8f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc5, 0x2, "7baf6d47f993c5424affebe9c39ac781a6473fdd912fa34441e2991073273c8020c1fb4eec1b24861de677b19e3844030352796f7d0d6e477da40d212f3ffbf5c42e2f56581fa958466c0b1673b1bf7a712a6204bfe1bcd2e341a222aa2c3aba9a7d25f8d0abe69a74cddcf13d8291d385f6c8dff3aeea2447b5b84b7034be3272fc254a3e30e7183a301fdf2a5c0236afd67109732613cb5ff7280c338952b4115cef67a75a1d020a07e8f84475ff0e73ce35c0b48066a47de5ae96677aaa6559"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2c, 0x3, "66cbb6845f9f45f8167538d2f0567322712a2e97c795715da57c62c8449cef75772f7428f0f2cea6"}, @NL80211_FTM_RESP_ATTR_LCI={0xfb, 0x2, "f4a9f5542725f4c9c40aa612bb3aac69c7e13d6ac8490afddc6c385d91b2dd348ee96c5edd2d17eb02aa267ac6a917933e6a154aaeff3b5e3da1bd406e6e0eca4099854d94d83defbfa7e47e2113e03004f9a561b2dda2af36e441aa3e7afe3b5b5b7d9095d249a3c2d8518bc149438c1a2286900f1f8db503a3e1d2a2118a9519a629995e8427e079764649931a7b76d78091e8437d5ccf4aed3cf7756abe37b73ee673f2c0ce39fa7255fc0d2bffc17f5f64f10872baf58657cac21e6d7bab8e02c49ceada2474c6dae1969235131fb22e4cc2073b9c870aca39f7037f203875438c3fe205540db93e1ed06b12514e8c9d7a9a239e18"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf2, 0x3, "22804282c9ad7ce5181f8b578d552968d0adfe27dfe7745f44cca0dc7a048d19694ec3a2f0fe0e937199e1ce9baafab174733b57eaeffe18f519c362552974d6458b1d93db7af547fd917ae7ae8df552c4b69e415e0258533b930d4e3158ba22860fbd829ccf07879d642be55189a4d24041865b4667532f99cb4a0a172e1cf0ed87cdfcbc9604375b0ed5c59e30bebe3610b2001edb3797c92be4cbefb6c7a189c3f47b8db21882795294791d93509513167e2349fce7a37f49ab25d559bbeee8d2a4c102879b34ac748f037cc393c95415205cdeb5da6c6bf8f9bda3c089401f386768e798323cfacffa06ef84"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffffeff}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_MNTR_FLAGS={0x79, 0x17, "4fef0aa9253b26aad689f392b48e58755eaed96aaf56076d9a502596e5668682b6938a52bf40c41d6e11c5ba034d07046be815a4b12f75ffc0be4ab960939585284c1d009eb361ed92668b4df1fbec641911857ad06342e33b8107ce2bf3ba24946a1b9b757084ddd834832bf1e3466b95409599af"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0xae, 0x124, 0x0, 0x1, [@generic="384eb3b4748788d3c84a11c9a7d18dbc9add3f8fbb32af36d5235c0d4ed16f71fbb4dece30464221fcb096a3ff7a02f52a5211a729e9b01871d61fd51d5e6dbc49f53d3a024ce46e3f0736db05b6f7b8f8502a168f0c44bc36fe65eef46b1e77591a552c387803fd128cbd534352a57d1374cdfa88a27824b9b46ea3d0ff9b264fe7549c1666ab0174ef1f831dc981a477a7ddb1eb7714745f322929f7c269d541ce3b7bb2bb93a9ce26"]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x73b1}]}]}]}, 0x77c}, 0x1, 0x0, 0x0, 0x80}, 0x80) mlockall$auto(0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r1 = socket(0xa, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000640)={&(0x7f0000001d80)={0xb80, r2, 0x2d04d25b566a859f, 0x70bd29, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0xb64, 0x4, 0x0, 0x1, [@nested={0x246, 0xc5, 0x0, 0x1, [@generic="07b536a0d1addff89d5ada3390f300635e774d49a03e87c518e5f1eb10564de167df1cb49d9971637242fb8b3faf97344c88b3d4472c1fa3c3b94bde055cc192c77300db025caa04bd1152255ab5453662c0f4a7f6d897f16b60384307c68cf55cef5baddf9f1742fd6b5517a0f39b8cf125852c2757fabc475c1e21ca9791bc57897c1bf86bef9fa80e5f4dc6", @generic="b8cebde838d7200b5713b4d3d7c94d16bff3fc00417689ec75a77c49ba08a8194d7795964cfac71c6109dbb9a8fd29896cfdc64f66ce5d24d3b06126ab0e9287a1f5cf5f71f62913c95f1cb46d8981a727d3bf4aa09f9820c12b811df39014837870fc6b3cb128f139db0176435ab13fa90f8b7dd407859301be70dcf93338ade387f75767406f61a079125dcead651a7c7f549976", @typed={0x8, 0x156, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x84}, @nested={0x4, 0xe}, @typed={0x110, 0x60, 0x0, 0x0, @binary="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"/268}]}, @nested={0x90b, 0x28, 0x0, 0x1, [@nested={0x4, 0x7f}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x400}, @generic="cfa62f09d4b9266940b825ab6054cb07577e43d81247e234d1457ee166c1e582f627eb3400e950dc7d8f2e067b7f5bfa3d17c88addd6a6a82359d41e6f6de747cca24561e9d92e227aed1f3003cfaad79522d64e72115c021c938eb4b1cc4eb3aabc36e84f83984ae0843134a2d5293a381caa0dd144a3ffe0ff8a652f447ff315e5cb8d72907c55fe1eb895cfcda63c3cd282c66ab84339b2b31d7478234d4d23a1ecd158e6279fd7898c9ea6eb65a618722d3b700162b6ccaeab3e1de7ef23acfdaa87803fb6953c5b8c97c0a45fd846d5de3a97e07a1bf72703d68b6f3d5c1a", @typed={0x7a, 0xc9, 0x0, 0x0, @binary="83e4424083989cc6f607ecd04aa47db76620fa49bb2f7e1901c03d073a7e8be2653e0cee29b5d62bc30b922a036273f0d28fe74b236e98eea4788c593f037faa985de5157ef8309033c12b2460af2b9680fbbcd118fa84bd8f984f075b4030b068d2cff8f04e37e4b95046b5a3179846bdc46a557b3a"}, @nested={0x71b, 0x85, 0x0, 0x1, [@generic="5de4e9a2f68e3ed5fa932b4a96b311e5b4f51e3883ed2403d591c9aaa06a744b7348966d7dfde4f018492d57216d2e0b1b0fb8d8eb63bf0b9b6e6108715c75aaa29d661d2499ee34024162bc7f6b6d4b5e7cb43f7daa14b13198e57710fe5e320d58523231af552209223f2acb24f9086c0dafd107494a211d8e93300ec12b229f2e5e9f31ca8906313b561bd56a7889e9d97ee9ab05b7f0e9ffeeea36d2aa63205b5a1b75af74c57e3e543a828fbaf9f31a1807df1c220ccc5c9d9608c26fcc03b9b8a7669dc2414c4b9d7a", @nested={0x8, 0x104, 0x0, 0x1, [@nested={0x4, 0x14}]}, @nested={0x84, 0x68, 0x0, 0x1, [@nested={0x4, 0xd4}, @nested={0x4, 0x111}, @generic="bb61d57037cd7d17853b7942f018429091c83a65dd6c26012b6de6d9ca314ee9319f16564f9c915e4a15819ad6a60246bf5cbe3efedd8424a807717a92ec909ea4bdd8aef1bf6eab7b51746fbb0db68ae96dfed285aa2170034abb823fb06d961ae254e62c982f22e29158cabb27ced1a0409d346c14f65b"]}, @nested={0x3c7, 0x12, 0x0, 0x1, [@generic="712806d101d1ed2395fbe38016250b9f621225b4080e6bab51d1f0db3387128cdf69aec23862bcca391850ac7397435c4795a2f23dca884cdde1b9a17564a679ba71e9672e033493a1f9cbcba5ad5131371d1d4c29e1efc5c7b74f61208b8c8622b05d1d61b4ad8adfb5b171c2c15e35be42b9fead5afb5f6d17a9527fc1f1ea449c7fdd3d", @nested={0x2c, 0xba, 0x0, 0x1, [@typed={0xf, 0x8f, 0x0, 0x0, @str='/dev/hwrng\x00'}, @typed={0x8, 0x64, 0x0, 0x0, @uid}, @typed={0x8, 0x10b, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x163, 0x0, 0x0, @fd=r1}]}, @generic="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", @generic="1c744517b70a45bffce1783bc9f75b812877fdd8ea3b317800d51a2d487e7f066eddc0ae6861873432147377a887fa07ccda0089f10cb9e6bb7721ab7b41499c57c176397a1b91855295de3cc5687a9ee95b1b0dad1e6cdca838ee6187c4ab89ea0960838539c7c1a18f6a7465aee51b3546129f3776329ed775adf9b775ae1616544b70ac9c20e8aca71a8dfe300c5e0bd79580e4edb8a6981d22e5e16ad7af100ab037e76e1192a28b4649614820a25a5ef4702feb9d880fd74bba3df32bb21a8feb7afe46959ad29438021e18a2a8004e85605a5b9ac13f4f7677daed5d1d6181d4aa9d3a3f8bc4555d5870ac25cee9aec461c0703eac84", @typed={0x7, 0xf8, 0x0, 0x0, @str='-+\x00'}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="67c29fa28b92998b61", @nested={0x4, 0x2e}, @generic="73a935eb41f8b527d55ff608b60b667d690bef17c127daac09b47a7f5ecb97ef9c944bfbf3778958fa486a96c18d169097491a57cf109ff4d42931d4bd2bcfd047bc5f9b32c84e244044514e0fc1df4a7306c09fafb5b4d476ee46cf18458e1bee6b8261a026890042235bf85b8bb68d7ee664fd6e0745624000cd09f94aad7a5f96e566fcccde539324e37005d4372a099dbf4c98046b9faae8f7291a8ec4a024be932bb00a82737be82e93f5e45e7a0f704a3f41e58ee8faaca14d88e5a67587839681aeb808320fdf5f08e1e18b29eb6814091f804ac7c742d11286797424d3ef736f855d1064e50990fada007b3c220ee3dc", @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x6}]}, @nested={0x1aa, 0xee, 0x0, 0x1, [@nested={0x4, 0x121}, @generic="573b7764c55b7d02ff11dd9b20c4c0bfbf3e5aad102a658ba67c1bee8631e5849c0fc16331bee0c89a5e3eee60a33c8ab909ef404347ef4459a3fea24fae31500a35cb3900f5ef480a3c07772b0df009d8556ada6d57b3d4fdff8982a40def41c7d504c4a4ee05aa10875810a5e6c53a94cb9bd918efc445ca813113f1f3cb9b160edd4ae524c1136d62af58b61057851812c735df2e23ef9f89bbe117f45fd5e7398d01815ff0db22ef51ef3e20e11bb3df2a70ecbfe8", @nested={0x4, 0x14e}, @generic="285b3fbc3a103542c58966ad580ead27f108161886ab95c440642abb194ff2b4fdfc40f9a008e454f20951dcf7af3bbe8d513d2b91d669606b53773bb2c355c51eaf44a02b28f262da22c959e39d649df303e37738fd45f97d7296d0a304e0bb9d4ca04d27255649d087102fa84dc4d20fd8a537c66178ab305a9db201e3b3ec7ddb8652582578aea53a06169b48a20ce506093116b380e0876f68a4ed597701a2afc77489e27ced78850255ec955cee095d7a21264de4ce179af7c09a6c20d44f607793d05654354519aad7ee27beebe560c3231783cea556269d5ea0e2234ab0848f", @nested={0x4, 0xc}]}, @generic="eeeb14fd8da5d083a44fc883025baa2286aed0d0c81bc375a374f44427d9bb1e3aefa3f471f9336cba1db8209afa277ef3d3590f1a935f63ff3c3d26888903", @typed={0xc, 0x164, 0x0, 0x0, @u64=0x4}]}, @generic="6d3345e13ae346058958416ea4a5ebca38e4d57df47e28dee4b3733dbc15d3d0c0e0e7c76b6d97891e83ccb84fd6e65867f15a0828e0d9b1bdd83874d193676ded8b183c27e79820dc74fe764eca4e26c0ad5a4c9f9a9d4edc9bd1669e8bde8afec7ebf5aacb995bdb00de4375b25e6a408d", @nested={0x4, 0xd8}, @nested={0x4, 0x89}, @nested={0x4, 0x9b}]}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x40040003}]}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x1000}]}, 0xb80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40051) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) r5 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) bind$auto(r5, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) 1.607577431s ago: executing program 3 (id=775): close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.449182873s ago: executing program 3 (id=776): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x0, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff8, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048890}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x2, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0xb, 0x40000d, 0x10010401, 0x6, 0x4, 0x80006, 0xffffffffffffffff, [0xbb, 0x0, 0x802000], {0x7, 0x200004, 0x7, 0x2a3, 0x102, 0x3, 0x40100101, 0x6, 0xfffffffffffffb57}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0xa5d2, 0xcc, 0x8000008, 0x100000000}}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dsp1\x00', 0x20342, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/pcmC0D0c\x00', 0x20c440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/020/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x1) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) 1.237789476s ago: executing program 0 (id=777): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) unshare$auto(0x4) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$auto(0x3, 0x401, r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4188aea7, 0x0) r3 = socket(0xa, 0x801, 0x84) setsockopt$auto(r3, 0x10000000084, 0xd, 0x0, 0x9c) 1.234663319s ago: executing program 2 (id=778): close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (fail_nth: 2) 527.323181ms ago: executing program 2 (id=779): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x18800) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(&(0x7f0000000500)) r3 = fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x8, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0xb, 0x2, 0x1, 0x948b, 0x1000000000000001, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d2c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x400008, 0x8, 0x9b72, r3, 0x7ffe) 406.462929ms ago: executing program 0 (id=780): bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x80}, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r1) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000005c0)="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"/541, 0x8}, 0x7, 0x0, 0x7, 0xb5) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r5, 0xffff, 0x29}, 0x3, 0x7) ioctl$auto_VHOST_SET_FEATURES2(r4, 0x4008af00, &(0x7f0000000040)=0x4) r6 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r6, 0x6a, 0x2, 0x0, 0x6) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x7ffbfffc) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x122) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="251729bd7000fedbdf250100080d0300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20401000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf251d000000100018800c009000800000000000000005000700010000000c0006000600000000000000050029000100000008000d00810000000c000600080000000000000005002400070000000500070005000000"], 0x64}}, 0x8000) 193.924987ms ago: executing program 3 (id=781): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x8020) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x612000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x3bbc00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) setdomainname$auto(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f34, 0x0) r3 = socket(0xa, 0x2, 0x0) epoll_pwait2$auto(r3, 0x0, 0xfffffc00, 0x0, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800028700", @ANYRES16=r4, @ANYBLOB="05072abd7000ffdbdf250700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, 0x0, 0x6) mlockall$auto(0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) 0s ago: executing program 1 (id=782): mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/conf/wlan0/igmpv2_unsolicited_report_interval\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x6, 0x1) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) mprotect$auto(0x200000000000, 0x806120, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x401, 0x9}, 0x7ffd, 0x0) shmget$auto(0x100000000, 0x3, 0x79e56dc9) kernel console output (not intermixed with test programs): tive_substream+0x175/0x1d0 [ 199.183763][ T7617] snd_pcm_oss_get_formats+0x7d/0x350 [ 199.183812][ T7617] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 199.183878][ T7617] snd_pcm_oss_ioctl+0x1870/0x3790 [ 199.183919][ T7617] ? find_held_lock+0x2b/0x80 [ 199.183951][ T7617] ? __fget_files+0x215/0x3d0 [ 199.183991][ T7617] ? hook_file_ioctl_common+0x140/0x440 [ 199.184025][ T7617] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 199.184067][ T7617] ? __fget_files+0x21f/0x3d0 [ 199.184113][ T7617] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 199.184156][ T7617] __x64_sys_ioctl+0x18e/0x210 [ 199.184196][ T7617] do_syscall_64+0x115/0x840 [ 199.184222][ T7617] ? clear_bhb_loop+0x40/0x90 [ 199.184258][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.184287][ T7617] RIP: 0033:0x7f3c04f9de59 [ 199.184310][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.184339][ T7617] RSP: 002b:00007f3c031d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.184367][ T7617] RAX: ffffffffffffffda RBX: 00007f3c05226090 RCX: 00007f3c04f9de59 [ 199.184386][ T7617] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 199.184403][ T7617] RBP: 00007f3c05033e6f R08: 0000000000000000 R09: 0000000000000000 [ 199.184421][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.184437][ T7617] R13: 00007f3c05226128 R14: 00007f3c05226090 R15: 00007ffd6f497c48 [ 199.184472][ T7617] [ 199.688667][ T7633] netlink: 162 bytes leftover after parsing attributes in process `syz.0.371'. [ 201.948377][ T7701] FAULT_INJECTION: forcing a failure. [ 201.948377][ T7701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.974051][ T7694] futex_wake_op: syz.3.379 tries to shift op by -1; fix this program [ 202.002796][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.2.380 Not tainted syzkaller #0 PREEMPT(full) [ 202.002831][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.002846][ T7701] Call Trace: [ 202.002855][ T7701] [ 202.002866][ T7701] dump_stack_lvl+0x100/0x190 [ 202.002902][ T7701] should_fail_ex.cold+0x5/0xa [ 202.002933][ T7701] _copy_from_iter+0x1f4/0x1690 [ 202.002975][ T7701] ? __asan_memset+0x23/0x50 [ 202.003003][ T7701] ? __pfx__copy_from_iter+0x10/0x10 [ 202.003039][ T7701] ? __pfx___alloc_skb+0x10/0x10 [ 202.003082][ T7701] netlink_sendmsg+0x808/0xda0 [ 202.003130][ T7701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.003176][ T7701] ? apparmor_socket_sendmsg+0x15b/0x270 [ 202.003223][ T7701] __sys_sendto+0x48b/0x4e0 [ 202.003247][ T7701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.003287][ T7701] ? __pfx___sys_sendto+0x10/0x10 [ 202.003333][ T7701] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 202.003392][ T7701] __x64_sys_sendto+0xe0/0x1c0 [ 202.003419][ T7701] ? do_syscall_64+0x90/0x840 [ 202.003444][ T7701] ? lockdep_hardirqs_on+0x78/0x100 [ 202.003483][ T7701] do_syscall_64+0x115/0x840 [ 202.003505][ T7701] ? clear_bhb_loop+0x40/0x90 [ 202.003541][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.003568][ T7701] RIP: 0033:0x7fda88f5e68e [ 202.003589][ T7701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.003614][ T7701] RSP: 002b:00007fda87191e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 202.003640][ T7701] RAX: ffffffffffffffda RBX: 00007fda871936c0 RCX: 00007fda88f5e68e [ 202.003657][ T7701] RDX: 000000000000001c RSI: 00007fda87192000 RDI: 0000000000000005 [ 202.003672][ T7701] RBP: 0000000000000000 R08: 00007fda87191f04 R09: 000000000000000c [ 202.003689][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 202.003705][ T7701] R13: 00007fda87191f58 R14: 00007fda87192000 R15: 0000000000000000 [ 202.003740][ T7701] [ 202.607496][ T7673] Process accounting paused [ 203.484272][ T7740] FAULT_INJECTION: forcing a failure. [ 203.484272][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 203.512395][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 203.512435][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.512453][ T7740] Call Trace: [ 203.512462][ T7740] [ 203.512472][ T7740] dump_stack_lvl+0x100/0x190 [ 203.512509][ T7740] should_fail_ex.cold+0x5/0xa [ 203.512543][ T7740] should_failslab+0xc2/0x120 [ 203.512580][ T7740] __kmalloc_noprof+0xfc/0x820 [ 203.512623][ T7740] ? tomoyo_encode2+0xfb/0x3c0 [ 203.512667][ T7740] tomoyo_encode2+0xfb/0x3c0 [ 203.512710][ T7740] tomoyo_encode+0x29/0x50 [ 203.512747][ T7740] tomoyo_realpath_from_path+0x18c/0x690 [ 203.512795][ T7740] tomoyo_check_open_permission+0x2af/0x3c0 [ 203.512829][ T7740] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 203.512875][ T7740] ? hook_file_open+0x24f/0x8f0 [ 203.512935][ T7740] ? path_get+0x61/0x80 [ 203.512968][ T7740] tomoyo_file_open+0x6b/0x90 [ 203.513012][ T7740] security_file_open+0xb5/0x1e0 [ 203.513049][ T7740] do_dentry_open+0x588/0x14d0 [ 203.513100][ T7740] vfs_open+0x82/0x3f0 [ 203.513138][ T7740] path_openat+0x2873/0x4280 [ 203.513198][ T7740] ? __pfx_path_openat+0x10/0x10 [ 203.513254][ T7740] do_file_open+0x20e/0x430 [ 203.513296][ T7740] ? __pfx_do_file_open+0x10/0x10 [ 203.513364][ T7740] ? alloc_fd+0x471/0x7a0 [ 203.513410][ T7740] ? do_getname+0x191/0x390 [ 203.513446][ T7740] do_sys_openat2+0x10f/0x1e0 [ 203.513481][ T7740] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.513517][ T7740] ? find_held_lock+0x2b/0x80 [ 203.513560][ T7740] __x64_sys_openat+0x12d/0x210 [ 203.513603][ T7740] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.513654][ T7740] do_syscall_64+0x115/0x840 [ 203.513679][ T7740] ? clear_bhb_loop+0x40/0x90 [ 203.513715][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.513745][ T7740] RIP: 0033:0x7fa14d99de59 [ 203.513769][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.513797][ T7740] RSP: 002b:00007fa14e7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.513826][ T7740] RAX: ffffffffffffffda RBX: 00007fa14dc25fa0 RCX: 00007fa14d99de59 [ 203.513846][ T7740] RDX: 0000000000008c80 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 203.513864][ T7740] RBP: 00007fa14da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 203.513883][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.513900][ T7740] R13: 00007fa14dc26038 R14: 00007fa14dc25fa0 R15: 00007ffff39cf328 [ 203.513939][ T7740] [ 203.513995][ T7740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.644273][ T30] audit: type=1800 audit(1783905812.223:2): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 205.560001][ T7769] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 206.114407][ T7779] netlink: 334 bytes leftover after parsing attributes in process `syz.0.394'. [ 206.578180][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 206.584313][ T4940] Bluetooth: hci2: command 0x0406 tx timeout [ 206.590401][ T4940] Bluetooth: hci0: command 0x0406 tx timeout [ 206.601745][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 207.294314][ T7787] can0: slcan on ptm0. [ 207.302142][ T7790] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 207.331494][ T7790] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 207.363765][ T7790] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 207.383516][ T7790] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 207.419559][ T7790] page dumped because: unmovable page [ 207.467809][ T7790] page_owner tracks the page as allocated [ 207.490753][ T7790] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 207.542763][ T7790] register_early_stack+0x74/0xaf [ 207.573384][ T7790] init_page_owner+0x4c/0xa10 [ 207.601236][ T7790] page_ext_init+0x71d/0x780 [ 207.622702][ T7790] mm_core_init+0x229/0x270 [ 207.648360][ T7790] page_owner free stack trace missing [ 207.683875][ T7786] can0 (unregistered): slcan off ptm0. [ 208.026112][ T7788] kernel profiling enabled (shift: 7) [ 209.043305][ T7785] kexec: Could not allocate control_code_buffer [ 209.094045][ T7836] futex_wake_op: syz.1.402 tries to shift op by -1; fix this program [ 210.446894][ T7842] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 210.459316][ T7842] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 212.678401][ T7902] netlink: 334 bytes leftover after parsing attributes in process `syz.0.414'. [ 213.182462][ T7907] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 213.193070][ T7907] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 213.206774][ T7907] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 213.244222][ T7907] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 213.277474][ T7907] page dumped because: unmovable page [ 213.286341][ T7907] page_owner tracks the page as allocated [ 213.292208][ T7907] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 213.316885][ T7907] register_early_stack+0x74/0xaf [ 213.345601][ T7907] init_page_owner+0x4c/0xa10 [ 213.364027][ T7907] page_ext_init+0x71d/0x780 [ 213.382745][ T7907] mm_core_init+0x229/0x270 [ 213.391916][ T7907] page_owner free stack trace missing [ 213.482549][ T7916] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 213.486443][ T7919] FAULT_INJECTION: forcing a failure. [ 213.486443][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 213.548705][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(full) [ 213.548745][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.548763][ T7919] Call Trace: [ 213.548773][ T7919] [ 213.548783][ T7919] dump_stack_lvl+0x100/0x190 [ 213.548821][ T7919] should_fail_ex.cold+0x5/0xa [ 213.548854][ T7919] should_failslab+0xc2/0x120 [ 213.548892][ T7919] __kmalloc_cache_noprof+0x91/0x6c0 [ 213.548936][ T7919] ? trace_pid_list_alloc+0x232/0x480 [ 213.548987][ T7919] trace_pid_list_alloc+0x232/0x480 [ 213.549031][ T7919] trace_pid_write+0x110/0x460 [ 213.549069][ T7919] ? __pfx_trace_pid_write+0x10/0x10 [ 213.549130][ T7919] event_pid_write.isra.0+0x1e4/0x7d0 [ 213.549173][ T7919] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 213.549225][ T7919] vfs_write+0x2aa/0x1050 [ 213.549268][ T7919] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 213.549310][ T7919] ? __pfx_vfs_write+0x10/0x10 [ 213.549351][ T7919] ? __pfx_do_futex+0x10/0x10 [ 213.549377][ T7919] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.549428][ T7919] ? __x64_sys_futex+0x34f/0x4d0 [ 213.549455][ T7919] ? __x64_sys_futex+0x358/0x4d0 [ 213.549488][ T7919] ksys_write+0x12a/0x250 [ 213.549531][ T7919] ? __pfx_ksys_write+0x10/0x10 [ 213.549582][ T7919] do_syscall_64+0x115/0x840 [ 213.549606][ T7919] ? clear_bhb_loop+0x40/0x90 [ 213.549641][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.549670][ T7919] RIP: 0033:0x7f3c04f9de59 [ 213.549692][ T7919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.549719][ T7919] RSP: 002b:00007f3c031b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.549745][ T7919] RAX: ffffffffffffffda RBX: 00007f3c05226180 RCX: 00007f3c04f9de59 [ 213.549763][ T7919] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 213.549779][ T7919] RBP: 00007f3c05033e6f R08: 0000000000000000 R09: 0000000000000000 [ 213.549795][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.549811][ T7919] R13: 00007f3c05226218 R14: 00007f3c05226180 R15: 00007ffd6f497c48 [ 213.549848][ T7919] [ 214.792825][ T7945] FAULT_INJECTION: forcing a failure. [ 214.792825][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 214.817378][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.1.423 Not tainted syzkaller #0 PREEMPT(full) [ 214.817419][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.817437][ T7945] Call Trace: [ 214.817464][ T7945] [ 214.817476][ T7945] dump_stack_lvl+0x100/0x190 [ 214.817515][ T7945] should_fail_ex.cold+0x5/0xa [ 214.817550][ T7945] should_failslab+0xc2/0x120 [ 214.817587][ T7945] __kmalloc_cache_noprof+0x91/0x6c0 [ 214.817635][ T7945] ? trace_pid_list_alloc+0x232/0x480 [ 214.817680][ T7945] trace_pid_list_alloc+0x232/0x480 [ 214.817723][ T7945] trace_pid_write+0x110/0x460 [ 214.817763][ T7945] ? __pfx_trace_pid_write+0x10/0x10 [ 214.817824][ T7945] event_pid_write.isra.0+0x1e4/0x7d0 [ 214.817875][ T7945] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 214.817927][ T7945] vfs_write+0x2aa/0x1050 [ 214.817971][ T7945] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 214.818016][ T7945] ? __pfx_vfs_write+0x10/0x10 [ 214.818061][ T7945] ? __pfx_do_futex+0x10/0x10 [ 214.818087][ T7945] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.818132][ T7945] ? __x64_sys_futex+0x34f/0x4d0 [ 214.818159][ T7945] ? __x64_sys_futex+0x358/0x4d0 [ 214.818193][ T7945] ksys_write+0x12a/0x250 [ 214.818235][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 214.818290][ T7945] do_syscall_64+0x115/0x840 [ 214.818316][ T7945] ? clear_bhb_loop+0x40/0x90 [ 214.818350][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.818384][ T7945] RIP: 0033:0x7fed7b19de59 [ 214.818409][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.818436][ T7945] RSP: 002b:00007fed7bfcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.818465][ T7945] RAX: ffffffffffffffda RBX: 00007fed7b426090 RCX: 00007fed7b19de59 [ 214.818485][ T7945] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 214.818503][ T7945] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 214.818520][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.818539][ T7945] R13: 00007fed7b426128 R14: 00007fed7b426090 R15: 00007ffd600ff038 [ 214.818580][ T7945] [ 215.126265][ T7950] FAULT_INJECTION: forcing a failure. [ 215.126265][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 215.187197][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.3.424 Not tainted syzkaller #0 PREEMPT(full) [ 215.187236][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.187252][ T7950] Call Trace: [ 215.187262][ T7950] [ 215.187271][ T7950] dump_stack_lvl+0x100/0x190 [ 215.187309][ T7950] should_fail_ex.cold+0x5/0xa [ 215.187340][ T7950] should_failslab+0xc2/0x120 [ 215.187376][ T7950] __kmalloc_noprof+0xfc/0x820 [ 215.187407][ T7950] ? add_lock_to_list+0x99/0x110 [ 215.187439][ T7950] ? acpi_ns_internalize_name+0x161/0x2e0 [ 215.187486][ T7950] acpi_ns_internalize_name+0x161/0x2e0 [ 215.187521][ T7950] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 215.187557][ T7950] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 215.187598][ T7950] acpi_ns_get_node_unlocked+0x18c/0x500 [ 215.187640][ T7950] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 215.187679][ T7950] ? mark_held_locks+0x40/0x70 [ 215.187734][ T7950] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 215.187783][ T7950] ? acpi_ns_get_node+0x6c/0xf0 [ 215.187815][ T7950] acpi_ns_get_node+0x6c/0xf0 [ 215.187855][ T7950] acpi_ns_evaluate+0xb01/0x1670 [ 215.187888][ T7950] ? acpi_evaluate_object+0xf5/0xe00 [ 215.187934][ T7950] acpi_evaluate_object+0x420/0xe00 [ 215.187988][ T7950] ? __kvmalloc_node_noprof+0x34f/0x970 [ 215.188018][ T7950] ? seq_read_iter+0x819/0x1270 [ 215.188056][ T7950] ? vfs_read+0x82e/0xb40 [ 215.188099][ T7950] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 215.188136][ T7950] ? lock_acquire+0x1b9/0x370 [ 215.188186][ T7950] acpi_evaluate_integer+0xdf/0x220 [ 215.188219][ T7950] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 215.188254][ T7950] ? __lock_acquire+0x49f/0x1a40 [ 215.188307][ T7950] ? __pfx_status_show+0x10/0x10 [ 215.188344][ T7950] status_show+0xa0/0x120 [ 215.188381][ T7950] ? __pfx_status_show+0x10/0x10 [ 215.188430][ T7950] dev_attr_show+0x52/0xa0 [ 215.188469][ T7950] ? __pfx_dev_attr_show+0x10/0x10 [ 215.188507][ T7950] sysfs_kf_seq_show+0x217/0x3f0 [ 215.188550][ T7950] seq_read_iter+0x32f/0x1270 [ 215.188588][ T7950] ? lock_acquire+0x1b9/0x370 [ 215.188643][ T7950] kernfs_fop_read_iter+0x46c/0x610 [ 215.188675][ T7950] ? rw_verify_area+0xce/0x6d0 [ 215.188717][ T7950] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 215.188751][ T7950] vfs_read+0x82e/0xb40 [ 215.188796][ T7950] ? __pfx_vfs_read+0x10/0x10 [ 215.188862][ T7950] ksys_read+0x12a/0x250 [ 215.188901][ T7950] ? __pfx_ksys_read+0x10/0x10 [ 215.188953][ T7950] do_syscall_64+0x115/0x840 [ 215.188979][ T7950] ? clear_bhb_loop+0x40/0x90 [ 215.189014][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.189044][ T7950] RIP: 0033:0x7fa14d99de59 [ 215.189068][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.189095][ T7950] RSP: 002b:00007fa14e7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.189122][ T7950] RAX: ffffffffffffffda RBX: 00007fa14dc25fa0 RCX: 00007fa14d99de59 [ 215.189141][ T7950] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 215.189159][ T7950] RBP: 00007fa14e7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 215.189176][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.189193][ T7950] R13: 00007fa14dc26038 R14: 00007fa14dc25fa0 R15: 00007ffff39cf328 [ 215.189232][ T7950] [ 215.791956][ T7958] netlink: 334 bytes leftover after parsing attributes in process `syz.0.425'. [ 215.945053][ T7959] netlink: 146 bytes leftover after parsing attributes in process `syz.1.426'. [ 216.291114][ T7962] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 217.537452][ T7983] FAULT_INJECTION: forcing a failure. [ 217.537452][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 217.583040][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) [ 217.583075][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.583091][ T7983] Call Trace: [ 217.583098][ T7983] [ 217.583104][ T7983] dump_stack_lvl+0x100/0x190 [ 217.583125][ T7983] should_fail_ex.cold+0x5/0xa [ 217.583142][ T7983] should_failslab+0xc2/0x120 [ 217.583163][ T7983] __kmalloc_cache_noprof+0x91/0x6c0 [ 217.583187][ T7983] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 217.583210][ T7983] tcp_sendmsg_fastopen+0x24d/0x750 [ 217.583232][ T7983] tcp_sendmsg_locked+0x276d/0x44d0 [ 217.583251][ T7983] ? register_lock_class+0x40/0x560 [ 217.583276][ T7983] ? __lock_acquire+0x49f/0x1a40 [ 217.583296][ T7983] ? __lock_acquire+0x49f/0x1a40 [ 217.583317][ T7983] ? smc_switch_to_fallback+0x5c8/0xa10 [ 217.583337][ T7983] ? smc_switch_to_fallback+0x5c8/0xa10 [ 217.583359][ T7983] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 217.583378][ T7983] ? do_raw_spin_lock+0x128/0x260 [ 217.583393][ T7983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.583412][ T7983] ? __local_bh_enable_ip+0x9e/0x120 [ 217.583434][ T7983] tcp_sendmsg+0x2e/0x50 [ 217.583450][ T7983] ? __pfx_tcp_sendmsg+0x10/0x10 [ 217.583467][ T7983] inet_sendmsg+0xb9/0x140 [ 217.583485][ T7983] smc_sendmsg+0x230/0x540 [ 217.583506][ T7983] ____sys_sendmsg+0xa4d/0xbe0 [ 217.583526][ T7983] ? __pfx_smc_sendmsg+0x10/0x10 [ 217.583547][ T7983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.583571][ T7983] ? __pfx__kstrtoull+0x10/0x10 [ 217.583590][ T7983] ___sys_sendmsg+0x190/0x1e0 [ 217.583613][ T7983] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.583643][ T7983] ? find_held_lock+0x2b/0x80 [ 217.583672][ T7983] __sys_sendmmsg+0x20c/0x440 [ 217.583691][ T7983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.583707][ T7983] ? ksys_write+0x190/0x250 [ 217.583743][ T7983] ? fput+0x79/0x100 [ 217.583758][ T7983] ? ksys_write+0x1ac/0x250 [ 217.583778][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 217.583803][ T7983] __x64_sys_sendmmsg+0x9c/0x100 [ 217.583820][ T7983] ? lockdep_hardirqs_on+0x78/0x100 [ 217.583842][ T7983] do_syscall_64+0x115/0x840 [ 217.583855][ T7983] ? clear_bhb_loop+0x40/0x90 [ 217.583873][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.583888][ T7983] RIP: 0033:0x7f3c04f9de59 [ 217.583902][ T7983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.583916][ T7983] RSP: 002b:00007f3c031f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.583937][ T7983] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9de59 [ 217.583947][ T7983] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.583956][ T7983] RBP: 00007f3c031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.583965][ T7983] R10: 0000000020000043 R11: 0000000000000246 R12: 0000000000000001 [ 217.583974][ T7983] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 217.583994][ T7983] [ 218.382274][ T8007] netlink: 334 bytes leftover after parsing attributes in process `syz.0.439'. [ 219.161821][ T8024] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 219.274260][ T8017] FAULT_INJECTION: forcing a failure. [ 219.274260][ T8017] name failslab, interval 1, probability 0, space 0, times 0 [ 219.323979][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(full) [ 219.324016][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.324033][ T8017] Call Trace: [ 219.324042][ T8017] [ 219.324053][ T8017] dump_stack_lvl+0x100/0x190 [ 219.324090][ T8017] should_fail_ex.cold+0x5/0xa [ 219.324121][ T8017] should_failslab+0xc2/0x120 [ 219.324156][ T8017] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 219.324190][ T8017] ? __alloc_skb+0x140/0x710 [ 219.324225][ T8017] __alloc_skb+0x140/0x710 [ 219.324254][ T8017] ? __pfx___alloc_skb+0x10/0x10 [ 219.324294][ T8017] tcp_stream_alloc_skb+0x34/0x660 [ 219.324330][ T8017] tcp_sendmsg_locked+0x13b2/0x44d0 [ 219.324372][ T8017] ? __lock_acquire+0x49f/0x1a40 [ 219.324414][ T8017] ? is_bpf_text_address+0x94/0x1a0 [ 219.324456][ T8017] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 219.324493][ T8017] ? do_raw_spin_lock+0x128/0x260 [ 219.324521][ T8017] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.324557][ T8017] ? __local_bh_enable_ip+0x9e/0x120 [ 219.324591][ T8017] tcp_sendmsg+0x2e/0x50 [ 219.324621][ T8017] ? __pfx_tcp_sendmsg+0x10/0x10 [ 219.324652][ T8017] inet_sendmsg+0xb9/0x140 [ 219.324681][ T8017] sock_sendmsg+0x352/0x410 [ 219.324735][ T8017] ? __pfx_inet_sendmsg+0x10/0x10 [ 219.324765][ T8017] ? __pfx_sock_sendmsg+0x10/0x10 [ 219.324802][ T8017] ? do_splice_direct+0x174/0x240 [ 219.324875][ T8017] splice_to_socket+0xb3c/0x11a0 [ 219.324920][ T8017] ? __pfx_splice_to_socket+0x10/0x10 [ 219.324990][ T8017] ? lockdep_init_map_type+0x5c/0x250 [ 219.325034][ T8017] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 219.325076][ T8017] ? __pfx_splice_to_socket+0x10/0x10 [ 219.325106][ T8017] direct_splice_actor+0x192/0x690 [ 219.325153][ T8017] splice_direct_to_actor+0x345/0xa30 [ 219.325199][ T8017] ? __pfx_direct_splice_actor+0x10/0x10 [ 219.325247][ T8017] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 219.325303][ T8017] do_splice_direct+0x174/0x240 [ 219.325349][ T8017] ? __pfx_do_splice_direct+0x10/0x10 [ 219.325393][ T8017] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 219.325437][ T8017] ? bpf_lsm_file_permission+0x9/0x10 [ 219.325476][ T8017] ? security_file_permission+0x76/0x210 [ 219.325512][ T8017] ? rw_verify_area+0xce/0x6d0 [ 219.325553][ T8017] do_sendfile+0xadc/0xe20 [ 219.325598][ T8017] ? __pfx_do_sendfile+0x10/0x10 [ 219.325635][ T8017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.325675][ T8017] ? __fget_files+0x21f/0x3d0 [ 219.325727][ T8017] __x64_sys_sendfile64+0x1d8/0x220 [ 219.325752][ T8017] ? ksys_write+0x1ac/0x250 [ 219.325786][ T8017] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 219.325823][ T8017] do_syscall_64+0x115/0x840 [ 219.325845][ T8017] ? clear_bhb_loop+0x40/0x90 [ 219.325883][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.325911][ T8017] RIP: 0033:0x7fed7b19de59 [ 219.325933][ T8017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.325959][ T8017] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.325986][ T8017] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 219.326004][ T8017] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 219.326020][ T8017] RBP: 00007fed7bff0090 R08: 0000000000000000 R09: 0000000000000000 [ 219.326036][ T8017] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 219.326053][ T8017] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 219.326090][ T8017] [ 221.627161][ T8055] FAULT_INJECTION: forcing a failure. [ 221.627161][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 221.654984][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT(full) [ 221.655009][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.655018][ T8055] Call Trace: [ 221.655024][ T8055] [ 221.655029][ T8055] dump_stack_lvl+0x100/0x190 [ 221.655051][ T8055] should_fail_ex.cold+0x5/0xa [ 221.655068][ T8055] should_failslab+0xc2/0x120 [ 221.655088][ T8055] kmem_cache_alloc_noprof+0x91/0x6a0 [ 221.655106][ T8055] ? anon_vma_clone+0x2ba/0xcd0 [ 221.655130][ T8055] anon_vma_clone+0x2ba/0xcd0 [ 221.655149][ T8055] ? kmem_cache_alloc_noprof+0x271/0x6a0 [ 221.655171][ T8055] anon_vma_fork+0x1bb/0x6b0 [ 221.655196][ T8055] dup_mmap+0x143e/0x21b0 [ 221.655224][ T8055] ? __pfx_dup_mmap+0x10/0x10 [ 221.655243][ T8055] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.655268][ T8055] ? __lock_acquire+0x49f/0x1a40 [ 221.655291][ T8055] ? find_held_lock+0x2b/0x80 [ 221.655307][ T8055] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 221.655341][ T8055] copy_process+0x4588/0x8030 [ 221.655356][ T8055] ? try_to_wake_up+0x70a/0x1c90 [ 221.655382][ T8055] ? __pfx_copy_process+0x10/0x10 [ 221.655398][ T8055] ? futex_wake+0x4ea/0x5e0 [ 221.655418][ T8055] ? futex_private_hash_put+0x115/0x1c0 [ 221.655444][ T8055] kernel_clone+0x176/0x9d0 [ 221.655462][ T8055] ? __pfx_futex_wake+0x10/0x10 [ 221.655481][ T8055] ? __pfx_kernel_clone+0x10/0x10 [ 221.655508][ T8055] ? 0xffffffff81000000 [ 221.655519][ T8055] __do_sys_clone+0xd9/0x120 [ 221.655536][ T8055] ? __pfx___do_sys_clone+0x10/0x10 [ 221.655552][ T8055] ? __fget_files+0x21f/0x3d0 [ 221.655574][ T8055] ? 0xffffffff81000000 [ 221.655599][ T8055] do_syscall_64+0x115/0x840 [ 221.655613][ T8055] ? clear_bhb_loop+0x40/0x90 [ 221.655631][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.655646][ T8055] RIP: 0033:0x7fa14d99de59 [ 221.655659][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.655673][ T8055] RSP: 002b:00007fa14e7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 221.655688][ T8055] RAX: ffffffffffffffda RBX: 00007fa14dc25fa0 RCX: 00007fa14d99de59 [ 221.655699][ T8055] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 221.655708][ T8055] RBP: 00007fa14da33e6f R08: 0000000000000006 R09: 0000000000000000 [ 221.655717][ T8055] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.655727][ T8055] R13: 00007fa14dc26038 R14: 00007fa14dc25fa0 R15: 00007ffff39cf328 [ 221.655740][ T8055] ? 0xffffffff81000000 [ 221.655757][ T8055] [ 222.053826][ T8058] FAULT_INJECTION: forcing a failure. [ 222.053826][ T8058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.131710][ T8060] netlink: 334 bytes leftover after parsing attributes in process `syz.0.453'. [ 222.153162][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(full) [ 222.153199][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.153215][ T8058] Call Trace: [ 222.153224][ T8058] [ 222.153235][ T8058] dump_stack_lvl+0x100/0x190 [ 222.153271][ T8058] should_fail_ex.cold+0x5/0xa [ 222.153297][ T8058] ? prepare_alloc_pages+0x16d/0x5f0 [ 222.153338][ T8058] should_fail_alloc_page+0xeb/0x140 [ 222.153376][ T8058] prepare_alloc_pages+0x1f0/0x5f0 [ 222.153418][ T8058] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 222.153454][ T8058] ? stack_trace_save+0x8e/0xc0 [ 222.153497][ T8058] ? __pfx_stack_trace_save+0x10/0x10 [ 222.153532][ T8058] ? stack_depot_save_flags+0x27/0x9d0 [ 222.153580][ T8058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.153609][ T8058] ? __kasan_slab_alloc+0x89/0x90 [ 222.153641][ T8058] ? __pmd_alloc+0xbf/0x950 [ 222.153675][ T8058] ? handle_mm_fault+0x37b/0xa30 [ 222.153712][ T8058] ? do_user_addr_fault+0x74c/0x12f0 [ 222.153746][ T8058] ? exc_page_fault+0x6f/0xd0 [ 222.153784][ T8058] ? asm_exc_page_fault+0x26/0x30 [ 222.153811][ T8058] ? rep_movs_alternative+0x4a/0xa0 [ 222.153842][ T8058] ? _copy_from_iter+0x355/0x1690 [ 222.153876][ T8058] ? proc_sys_call_handler+0x3ed/0x5a0 [ 222.153923][ T8058] ? vfs_write+0x6ac/0x1050 [ 222.153960][ T8058] ? ksys_write+0x12a/0x250 [ 222.153997][ T8058] ? do_syscall_64+0x115/0x840 [ 222.154021][ T8058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.154069][ T8058] ? __lock_acquire+0x49f/0x1a40 [ 222.154106][ T8058] ? __css_rstat_updated+0x1ce/0x5a0 [ 222.154146][ T8058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.154188][ T8058] ? policy_nodemask+0xed/0x4f0 [ 222.154227][ T8058] alloc_pages_mpol+0x1fb/0x540 [ 222.154265][ T8058] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 222.154300][ T8058] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 222.154344][ T8058] ? do_raw_spin_lock+0x128/0x260 [ 222.154376][ T8058] alloc_pages_noprof+0x1a/0x160 [ 222.154417][ T8058] pte_alloc_one+0x1c/0x3d0 [ 222.154456][ T8058] do_fault+0x86c/0x1750 [ 222.154491][ T8058] ? __pmd_alloc+0x3fb/0x950 [ 222.154530][ T8058] __handle_mm_fault+0x187d/0x2a00 [ 222.154579][ T8058] ? mt_find+0x45e/0x8e0 [ 222.154610][ T8058] ? __pfx___handle_mm_fault+0x10/0x10 [ 222.154649][ T8058] ? __pfx_mt_find+0x10/0x10 [ 222.154700][ T8058] ? find_vma+0xbf/0x140 [ 222.154731][ T8058] ? __pfx_find_vma+0x10/0x10 [ 222.154766][ T8058] handle_mm_fault+0x37b/0xa30 [ 222.154816][ T8058] do_user_addr_fault+0x74c/0x12f0 [ 222.154862][ T8058] exc_page_fault+0x6f/0xd0 [ 222.154909][ T8058] asm_exc_page_fault+0x26/0x30 [ 222.154937][ T8058] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 222.154973][ T8058] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 222.154998][ T8058] RSP: 0018:ffffc90005797b30 EFLAGS: 00050202 [ 222.155021][ T8058] RAX: 0000000000000001 RBX: ffff88802b730000 RCX: 000000000000ffd8 [ 222.155039][ T8058] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802b730000 [ 222.155056][ T8058] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056e7ffa [ 222.155073][ T8058] R10: ffff88802b73ffd7 R11: 0000000000000000 R12: ffffc90005797d80 [ 222.155090][ T8058] R13: 0000000000000000 R14: 000000000000ffd8 R15: 0000000000000000 [ 222.155127][ T8058] _copy_from_iter+0x355/0x1690 [ 222.155169][ T8058] ? rcu_is_watching+0x12/0xc0 [ 222.155200][ T8058] ? __pfx__copy_from_iter+0x10/0x10 [ 222.155240][ T8058] ? __kvmalloc_node_noprof+0x616/0x970 [ 222.155275][ T8058] ? ns_capable_noaudit+0xd5/0x100 [ 222.155300][ T8058] ? proc_sys_call_handler+0x2c7/0x5a0 [ 222.155350][ T8058] proc_sys_call_handler+0x3ed/0x5a0 [ 222.155395][ T8058] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 222.155440][ T8058] vfs_write+0x6ac/0x1050 [ 222.155481][ T8058] ? __pfx_proc_sys_write+0x10/0x10 [ 222.155525][ T8058] ? __pfx_vfs_write+0x10/0x10 [ 222.155590][ T8058] ksys_write+0x12a/0x250 [ 222.155629][ T8058] ? __pfx_ksys_write+0x10/0x10 [ 222.155680][ T8058] do_syscall_64+0x115/0x840 [ 222.155711][ T8058] ? clear_bhb_loop+0x40/0x90 [ 222.155745][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.155774][ T8058] RIP: 0033:0x7fed7b19de59 [ 222.155796][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.155822][ T8058] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.155846][ T8058] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 222.155865][ T8058] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 222.155882][ T8058] RBP: 00007fed7bff0090 R08: 0000000000000000 R09: 0000000000000000 [ 222.155906][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.155922][ T8058] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 222.155962][ T8058] [ 222.719430][ T8067] FAULT_INJECTION: forcing a failure. [ 222.719430][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 222.738177][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.2.455 Not tainted syzkaller #0 PREEMPT(full) [ 222.738218][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.738236][ T8067] Call Trace: [ 222.738245][ T8067] [ 222.738256][ T8067] dump_stack_lvl+0x100/0x190 [ 222.738295][ T8067] should_fail_ex.cold+0x5/0xa [ 222.738331][ T8067] should_failslab+0xc2/0x120 [ 222.738365][ T8067] __kmalloc_cache_noprof+0x91/0x6c0 [ 222.738409][ T8067] ? trace_pid_list_alloc+0x232/0x480 [ 222.738463][ T8067] trace_pid_list_alloc+0x232/0x480 [ 222.738505][ T8067] trace_pid_write+0x110/0x460 [ 222.738542][ T8067] ? __pfx_trace_pid_write+0x10/0x10 [ 222.738600][ T8067] event_pid_write.isra.0+0x1e4/0x7d0 [ 222.738638][ T8067] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 222.738687][ T8067] vfs_write+0x2aa/0x1050 [ 222.738725][ T8067] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 222.738767][ T8067] ? __pfx_vfs_write+0x10/0x10 [ 222.738810][ T8067] ? __pfx_do_futex+0x10/0x10 [ 222.738836][ T8067] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.738878][ T8067] ? __x64_sys_futex+0x34f/0x4d0 [ 222.738903][ T8067] ? __x64_sys_futex+0x358/0x4d0 [ 222.738934][ T8067] ksys_write+0x12a/0x250 [ 222.738975][ T8067] ? __pfx_ksys_write+0x10/0x10 [ 222.739028][ T8067] do_syscall_64+0x115/0x840 [ 222.739054][ T8067] ? clear_bhb_loop+0x40/0x90 [ 222.739091][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.739118][ T8067] RIP: 0033:0x7fda88f9de59 [ 222.739140][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.739167][ T8067] RSP: 002b:00007fda871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.739194][ T8067] RAX: ffffffffffffffda RBX: 00007fda89226090 RCX: 00007fda88f9de59 [ 222.739214][ T8067] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 222.739232][ T8067] RBP: 00007fda89033e6f R08: 0000000000000000 R09: 0000000000000000 [ 222.739249][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.739266][ T8067] R13: 00007fda89226128 R14: 00007fda89226090 R15: 00007fff30dd3cd8 [ 222.739303][ T8067] [ 222.973121][ T8069] FAULT_INJECTION: forcing a failure. [ 222.973121][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 222.985798][ T8069] CPU: 1 UID: 0 PID: 8069 Comm: syz.3.456 Not tainted syzkaller #0 PREEMPT(full) [ 222.985835][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.985853][ T8069] Call Trace: [ 222.985860][ T8069] [ 222.985866][ T8069] dump_stack_lvl+0x100/0x190 [ 222.985890][ T8069] should_fail_ex.cold+0x5/0xa [ 222.985909][ T8069] should_failslab+0xc2/0x120 [ 222.985929][ T8069] __kmalloc_cache_noprof+0x91/0x6c0 [ 222.985959][ T8069] ? trace_pid_list_alloc+0x232/0x480 [ 222.986002][ T8069] trace_pid_list_alloc+0x232/0x480 [ 222.986045][ T8069] trace_pid_write+0x110/0x460 [ 222.986083][ T8069] ? __pfx_trace_pid_write+0x10/0x10 [ 222.986131][ T8069] event_pid_write.isra.0+0x1e4/0x7d0 [ 222.986154][ T8069] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 222.986180][ T8069] vfs_write+0x2aa/0x1050 [ 222.986201][ T8069] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 222.986223][ T8069] ? __pfx_vfs_write+0x10/0x10 [ 222.986245][ T8069] ? __pfx_do_futex+0x10/0x10 [ 222.986258][ T8069] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.986281][ T8069] ? __x64_sys_futex+0x34f/0x4d0 [ 222.986294][ T8069] ? __x64_sys_futex+0x358/0x4d0 [ 222.986311][ T8069] ksys_write+0x12a/0x250 [ 222.986332][ T8069] ? __pfx_ksys_write+0x10/0x10 [ 222.986358][ T8069] do_syscall_64+0x115/0x840 [ 222.986372][ T8069] ? clear_bhb_loop+0x40/0x90 [ 222.986398][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.986414][ T8069] RIP: 0033:0x7fa14d99de59 [ 222.986429][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.986443][ T8069] RSP: 002b:00007fa14bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.986458][ T8069] RAX: ffffffffffffffda RBX: 00007fa14dc26180 RCX: 00007fa14d99de59 [ 222.986468][ T8069] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 222.986477][ T8069] RBP: 00007fa14da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 222.986486][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.986495][ T8069] R13: 00007fa14dc26218 R14: 00007fa14dc26180 R15: 00007ffff39cf328 [ 222.986516][ T8069] [ 225.226386][ T8114] blktrace: Concurrent blktraces are not allowed on nbd5 [ 225.783490][ T8129] netlink: 334 bytes leftover after parsing attributes in process `syz.3.470'. [ 226.321743][ T8136] FAULT_INJECTION: forcing a failure. [ 226.321743][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 226.380659][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 226.380698][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.380715][ T8136] Call Trace: [ 226.380724][ T8136] [ 226.380736][ T8136] dump_stack_lvl+0x100/0x190 [ 226.380774][ T8136] should_fail_ex.cold+0x5/0xa [ 226.380808][ T8136] should_failslab+0xc2/0x120 [ 226.380845][ T8136] kmem_cache_alloc_noprof+0x91/0x6a0 [ 226.380881][ T8136] ? vm_area_dup+0x27/0x8e0 [ 226.380937][ T8136] vm_area_dup+0x27/0x8e0 [ 226.380983][ T8136] dup_mmap+0x6f6/0x21b0 [ 226.381037][ T8136] ? __pfx_dup_mmap+0x10/0x10 [ 226.381075][ T8136] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 226.381126][ T8136] ? __lock_acquire+0x49f/0x1a40 [ 226.381169][ T8136] ? find_held_lock+0x2b/0x80 [ 226.381200][ T8136] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 226.381267][ T8136] copy_process+0x4588/0x8030 [ 226.381322][ T8136] ? __pfx_copy_process+0x10/0x10 [ 226.381355][ T8136] ? futex_wake+0x4ea/0x5e0 [ 226.381402][ T8136] kernel_clone+0x176/0x9d0 [ 226.381437][ T8136] ? __pfx_kernel_clone+0x10/0x10 [ 226.381490][ T8136] ? 0xffffffff81000000 [ 226.381509][ T8136] __do_sys_clone+0xd9/0x120 [ 226.381539][ T8136] ? __pfx___do_sys_clone+0x10/0x10 [ 226.381570][ T8136] ? __fget_files+0x21f/0x3d0 [ 226.381612][ T8136] ? 0xffffffff81000000 [ 226.381660][ T8136] do_syscall_64+0x115/0x840 [ 226.381682][ T8136] ? clear_bhb_loop+0x40/0x90 [ 226.381715][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.381743][ T8136] RIP: 0033:0x7f3c04f9de59 [ 226.381764][ T8136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.381791][ T8136] RSP: 002b:00007f3c031f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 226.381818][ T8136] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9de59 [ 226.381837][ T8136] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 226.381856][ T8136] RBP: 00007f3c05033e6f R08: 0000000000000006 R09: 0000000000000000 [ 226.381874][ T8136] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.381901][ T8136] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 226.381927][ T8136] ? 0xffffffff81000000 [ 226.381961][ T8136] [ 227.030688][ T8147] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 227.048441][ T8147] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.056216][ T8147] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 227.087748][ T8147] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 227.109638][ T8147] page dumped because: unmovable page [ 227.120925][ T8147] page_owner tracks the page as allocated [ 227.128182][ T8147] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 227.143119][ T8147] register_early_stack+0x74/0xaf [ 227.148226][ T8147] init_page_owner+0x4c/0xa10 [ 227.154149][ T8151] FAULT_INJECTION: forcing a failure. [ 227.154149][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 227.166133][ T8147] page_ext_init+0x71d/0x780 [ 227.184195][ T8147] mm_core_init+0x229/0x270 [ 227.200247][ T8147] page_owner free stack trace missing [ 227.216828][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: syz.0.477 Not tainted syzkaller #0 PREEMPT(full) [ 227.216865][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.216881][ T8151] Call Trace: [ 227.216890][ T8151] [ 227.216900][ T8151] dump_stack_lvl+0x100/0x190 [ 227.216935][ T8151] should_fail_ex.cold+0x5/0xa [ 227.216966][ T8151] should_failslab+0xc2/0x120 [ 227.217002][ T8151] kmem_cache_alloc_noprof+0x91/0x6a0 [ 227.217035][ T8151] ? __pmd_alloc+0xbf/0x950 [ 227.217078][ T8151] __pmd_alloc+0xbf/0x950 [ 227.217118][ T8151] __handle_mm_fault+0xa9c/0x2a00 [ 227.217166][ T8151] ? mt_find+0x45e/0x8e0 [ 227.217198][ T8151] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.217238][ T8151] ? __pfx_mt_find+0x10/0x10 [ 227.217296][ T8151] ? find_vma+0xbf/0x140 [ 227.217327][ T8151] ? __pfx_find_vma+0x10/0x10 [ 227.217362][ T8151] handle_mm_fault+0x37b/0xa30 [ 227.217412][ T8151] do_user_addr_fault+0x74c/0x12f0 [ 227.217459][ T8151] exc_page_fault+0x6f/0xd0 [ 227.217500][ T8151] asm_exc_page_fault+0x26/0x30 [ 227.217528][ T8151] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 227.217565][ T8151] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 227.217591][ T8151] RSP: 0018:ffffc90003b87d10 EFLAGS: 00050202 [ 227.217614][ T8151] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000028 [ 227.217631][ T8151] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc90003b87e00 [ 227.217649][ T8151] RBP: 0000000000000028 R08: 0000000000000001 R09: fffff52000770fc4 [ 227.217667][ T8151] R10: ffffc90003b87e27 R11: 0000000000000000 R12: 0000000000000000 [ 227.217685][ T8151] R13: ffffc90003b87e00 R14: ffffc90003b87e00 R15: ffff88807fafda40 [ 227.217722][ T8151] _copy_from_user+0x98/0xd0 [ 227.217758][ T8151] __tun_chr_ioctl+0x1df/0x47c0 [ 227.217799][ T8151] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.217841][ T8151] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 227.217889][ T8151] ? hook_file_ioctl_common+0x140/0x440 [ 227.217928][ T8151] ? __fget_files+0x21f/0x3d0 [ 227.217971][ T8151] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 227.218016][ T8151] __x64_sys_ioctl+0x18e/0x210 [ 227.218054][ T8151] do_syscall_64+0x115/0x840 [ 227.218079][ T8151] ? clear_bhb_loop+0x40/0x90 [ 227.218113][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.218142][ T8151] RIP: 0033:0x7f3c04f9de59 [ 227.218164][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.218191][ T8151] RSP: 002b:00007f3c031f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.218217][ T8151] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9de59 [ 227.218236][ T8151] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 227.218253][ T8151] RBP: 00007f3c031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.218271][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.218294][ T8151] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 227.218333][ T8151] [ 227.671974][ T8158] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 227.768715][ T8162] FAULT_INJECTION: forcing a failure. [ 227.768715][ T8162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.783362][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.2.481 Not tainted syzkaller #0 PREEMPT(full) [ 227.783398][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.783414][ T8162] Call Trace: [ 227.783423][ T8162] [ 227.783434][ T8162] dump_stack_lvl+0x100/0x190 [ 227.783470][ T8162] should_fail_ex.cold+0x5/0xa [ 227.783495][ T8162] ? prepare_alloc_pages+0x16d/0x5f0 [ 227.783536][ T8162] should_fail_alloc_page+0xeb/0x140 [ 227.783575][ T8162] prepare_alloc_pages+0x1f0/0x5f0 [ 227.783619][ T8162] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 227.783651][ T8162] ? folio_batch_move_lru+0x37c/0xc00 [ 227.783697][ T8162] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.783744][ T8162] ? folio_batch_move_lru+0x3a9/0xc00 [ 227.783788][ T8162] ? __pfx_lru_add+0x10/0x10 [ 227.783832][ T8162] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 227.783875][ T8162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.783918][ T8162] ? __lock_acquire+0x49f/0x1a40 [ 227.783960][ T8162] ? __lock_acquire+0x49f/0x1a40 [ 227.784012][ T8162] ? lock_acquire+0x1b9/0x370 [ 227.784052][ T8162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.784094][ T8162] ? policy_nodemask+0xed/0x4f0 [ 227.784135][ T8162] alloc_pages_mpol+0x1fb/0x540 [ 227.784175][ T8162] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 227.784223][ T8162] folio_alloc_mpol_noprof+0x36/0x260 [ 227.784277][ T8162] vma_alloc_folio_noprof+0xed/0x1d0 [ 227.784321][ T8162] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 227.784378][ T8162] do_anonymous_page+0xb2b/0x2080 [ 227.784425][ T8162] ? rcu_read_unlock+0x2d/0xb0 [ 227.784460][ T8162] __handle_mm_fault+0x1d2c/0x2a00 [ 227.784509][ T8162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.784538][ T8162] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.784583][ T8162] ? pte_offset_map_lock+0x174/0x320 [ 227.784611][ T8162] ? find_held_lock+0x2b/0x80 [ 227.784650][ T8162] ? follow_page_pte+0x4d0/0x13f0 [ 227.784689][ T8162] handle_mm_fault+0x37b/0xa30 [ 227.784735][ T8162] __get_user_pages+0x1178/0x32a0 [ 227.784783][ T8162] ? __pfx___get_user_pages+0x10/0x10 [ 227.784828][ T8162] populate_vma_page_range+0x267/0x3f0 [ 227.784870][ T8162] ? __pfx_populate_vma_page_range+0x10/0x10 [ 227.784907][ T8162] ? __pfx_find_vma_intersection+0x10/0x10 [ 227.784939][ T8162] ? do_mmap+0x93f/0x12f0 [ 227.784974][ T8162] __mm_populate+0x107/0x3a0 [ 227.785012][ T8162] ? __pfx___mm_populate+0x10/0x10 [ 227.785055][ T8162] ? up_write+0x2e5/0x5c0 [ 227.785084][ T8162] vm_mmap_pgoff+0x37f/0x470 [ 227.785125][ T8162] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 227.785168][ T8162] ? __pfx_do_futex+0x10/0x10 [ 227.785196][ T8162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.785247][ T8162] ksys_mmap_pgoff+0xe4/0x610 [ 227.785292][ T8162] ? __x64_sys_futex+0x358/0x4d0 [ 227.785321][ T8162] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 227.785355][ T8162] ? xfd_validate_state+0x129/0x190 [ 227.785388][ T8162] __x64_sys_mmap+0x125/0x190 [ 227.785420][ T8162] do_syscall_64+0x115/0x840 [ 227.785444][ T8162] ? clear_bhb_loop+0x40/0x90 [ 227.785477][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.785504][ T8162] RIP: 0033:0x7fda88f9de59 [ 227.785528][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.785554][ T8162] RSP: 002b:00007fda89d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 227.785582][ T8162] RAX: ffffffffffffffda RBX: 00007fda89225fa0 RCX: 00007fda88f9de59 [ 227.785600][ T8162] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 227.785617][ T8162] RBP: 00007fda89033e6f R08: fffffffffffffffe R09: 0000000000008000 [ 227.785636][ T8162] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 227.785653][ T8162] R13: 00007fda89226038 R14: 00007fda89225fa0 R15: 00007fff30dd3cd8 [ 227.785697][ T8162] [ 228.321505][ T8168] FAULT_INJECTION: forcing a failure. [ 228.321505][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 228.335439][ T8168] CPU: 1 UID: 0 PID: 8168 Comm: syz.1.483 Not tainted syzkaller #0 PREEMPT(full) [ 228.335477][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.335493][ T8168] Call Trace: [ 228.335501][ T8168] [ 228.335511][ T8168] dump_stack_lvl+0x100/0x190 [ 228.335546][ T8168] should_fail_ex.cold+0x5/0xa [ 228.335579][ T8168] should_failslab+0xc2/0x120 [ 228.335615][ T8168] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.335660][ T8168] ? trace_pid_list_alloc+0x232/0x480 [ 228.335702][ T8168] trace_pid_list_alloc+0x232/0x480 [ 228.335744][ T8168] trace_pid_write+0x110/0x460 [ 228.335784][ T8168] ? __pfx_trace_pid_write+0x10/0x10 [ 228.335847][ T8168] event_pid_write.isra.0+0x1e4/0x7d0 [ 228.335891][ T8168] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 228.335944][ T8168] vfs_write+0x2aa/0x1050 [ 228.335988][ T8168] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 228.336033][ T8168] ? __pfx_vfs_write+0x10/0x10 [ 228.336078][ T8168] ? __pfx_do_futex+0x10/0x10 [ 228.336105][ T8168] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.336149][ T8168] ? __x64_sys_futex+0x34f/0x4d0 [ 228.336176][ T8168] ? __x64_sys_futex+0x358/0x4d0 [ 228.336216][ T8168] ksys_write+0x12a/0x250 [ 228.336256][ T8168] ? __pfx_ksys_write+0x10/0x10 [ 228.336303][ T8168] do_syscall_64+0x115/0x840 [ 228.336326][ T8168] ? clear_bhb_loop+0x40/0x90 [ 228.336361][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.336388][ T8168] RIP: 0033:0x7fed7b19de59 [ 228.336409][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.336437][ T8168] RSP: 002b:00007fed7bfcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.336464][ T8168] RAX: ffffffffffffffda RBX: 00007fed7b426090 RCX: 00007fed7b19de59 [ 228.336483][ T8168] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.336500][ T8168] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 228.336517][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.336533][ T8168] R13: 00007fed7b426128 R14: 00007fed7b426090 R15: 00007ffd600ff038 [ 228.336568][ T8168] [ 228.818688][ T30] audit: type=1800 audit(1783905836.381:3): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.481" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 228.820274][ T8169] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 228.852270][ T8169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 228.890753][ T8169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 229.311374][ T8169] syz.2.481 (8169) used greatest stack depth: 19936 bytes left [ 229.714171][ T8191] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 229.751756][ T8191] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 229.807339][ T8191] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 229.826620][ T8191] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 229.842525][ T8191] page dumped because: unmovable page [ 229.853119][ T8191] page_owner tracks the page as allocated [ 229.865578][ T8191] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 229.896249][ T8191] register_early_stack+0x74/0xaf [ 229.911278][ T8191] init_page_owner+0x4c/0xa10 [ 229.920096][ T8191] page_ext_init+0x71d/0x780 [ 229.930210][ T8191] mm_core_init+0x229/0x270 [ 229.946817][ T8191] page_owner free stack trace missing [ 232.163879][ T8204] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 232.184617][ T8204] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 232.564702][ T8212] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 232.575717][ T8212] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 233.378197][ T8229] netlink: 334 bytes leftover after parsing attributes in process `syz.2.495'. [ 233.382648][ T8224] FAULT_INJECTION: forcing a failure. [ 233.382648][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 233.442678][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.1.494 Not tainted syzkaller #0 PREEMPT(full) [ 233.442715][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.442732][ T8224] Call Trace: [ 233.442742][ T8224] [ 233.442753][ T8224] dump_stack_lvl+0x100/0x190 [ 233.442785][ T8224] should_fail_ex.cold+0x5/0xa [ 233.442804][ T8224] should_failslab+0xc2/0x120 [ 233.442823][ T8224] kmem_cache_alloc_noprof+0x91/0x6a0 [ 233.442841][ T8224] ? vm_area_dup+0x27/0x8e0 [ 233.442866][ T8224] vm_area_dup+0x27/0x8e0 [ 233.442889][ T8224] dup_mmap+0x6f6/0x21b0 [ 233.442917][ T8224] ? __pfx_dup_mmap+0x10/0x10 [ 233.442936][ T8224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 233.442962][ T8224] ? __lock_acquire+0x49f/0x1a40 [ 233.442986][ T8224] ? find_held_lock+0x2b/0x80 [ 233.443002][ T8224] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 233.443036][ T8224] copy_process+0x4588/0x8030 [ 233.443071][ T8224] ? __pfx_copy_process+0x10/0x10 [ 233.443088][ T8224] ? futex_wake+0x4ea/0x5e0 [ 233.443112][ T8224] kernel_clone+0x176/0x9d0 [ 233.443130][ T8224] ? __pfx_kernel_clone+0x10/0x10 [ 233.443157][ T8224] ? 0xffffffff81000000 [ 233.443168][ T8224] __do_sys_clone+0xd9/0x120 [ 233.443185][ T8224] ? __pfx___do_sys_clone+0x10/0x10 [ 233.443201][ T8224] ? __fget_files+0x21f/0x3d0 [ 233.443223][ T8224] ? 0xffffffff81000000 [ 233.443248][ T8224] do_syscall_64+0x115/0x840 [ 233.443261][ T8224] ? clear_bhb_loop+0x40/0x90 [ 233.443280][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.443295][ T8224] RIP: 0033:0x7fed7b19de59 [ 233.443307][ T8224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.443322][ T8224] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 233.443337][ T8224] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 233.443348][ T8224] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 233.443357][ T8224] RBP: 00007fed7b233e6f R08: 0000000000000006 R09: 0000000000000000 [ 233.443366][ T8224] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.443375][ T8224] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 233.443389][ T8224] ? 0xffffffff81000000 [ 233.443406][ T8224] [ 234.146210][ T8224] Process accounting resumed [ 234.626837][ T8240] smpboot: CPU 1 is now offline [ 235.371323][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 235.479638][ T8256] veth0_macvtap: left promiscuous mode [ 235.516168][ T8256] macvtap0: entered promiscuous mode [ 235.537311][ T8256] macvtap0: entered allmulticast mode [ 236.501131][ T8270] FAULT_INJECTION: forcing a failure. [ 236.501131][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 236.582122][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) [ 236.582145][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.582155][ T8270] Call Trace: [ 236.582160][ T8270] [ 236.582166][ T8270] dump_stack_lvl+0x100/0x190 [ 236.582189][ T8270] should_fail_ex.cold+0x5/0xa [ 236.582208][ T8270] should_failslab+0xc2/0x120 [ 236.582227][ T8270] kmem_cache_alloc_noprof+0x91/0x6a0 [ 236.582244][ T8270] ? irqentry_exit+0x24d/0xa00 [ 236.582267][ T8270] ? anon_vma_clone+0x2ba/0xcd0 [ 236.582291][ T8270] anon_vma_clone+0x2ba/0xcd0 [ 236.582318][ T8270] anon_vma_fork+0x1bb/0x6b0 [ 236.582343][ T8270] dup_mmap+0x143e/0x21b0 [ 236.582371][ T8270] ? __pfx_dup_mmap+0x10/0x10 [ 236.582390][ T8270] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.582416][ T8270] ? __lock_acquire+0x49f/0x1a40 [ 236.582439][ T8270] ? find_held_lock+0x2b/0x80 [ 236.582455][ T8270] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 236.582489][ T8270] copy_process+0x4588/0x8030 [ 236.582505][ T8270] ? try_to_wake_up+0x70a/0x1c90 [ 236.582531][ T8270] ? __pfx_copy_process+0x10/0x10 [ 236.582547][ T8270] ? futex_wake+0x4ea/0x5e0 [ 236.582567][ T8270] ? futex_private_hash_put+0x115/0x1c0 [ 236.582593][ T8270] kernel_clone+0x176/0x9d0 [ 236.582610][ T8270] ? __pfx_futex_wake+0x10/0x10 [ 236.582627][ T8270] ? __pfx_kernel_clone+0x10/0x10 [ 236.582654][ T8270] ? 0xffffffff81000000 [ 236.582671][ T8270] __do_sys_clone+0xd9/0x120 [ 236.582689][ T8270] ? __pfx___do_sys_clone+0x10/0x10 [ 236.582705][ T8270] ? __fget_files+0x21f/0x3d0 [ 236.582727][ T8270] ? 0xffffffff81000000 [ 236.582752][ T8270] do_syscall_64+0x115/0x840 [ 236.582766][ T8270] ? clear_bhb_loop+0x40/0x90 [ 236.582784][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.582799][ T8270] RIP: 0033:0x7fed7b19de59 [ 236.582812][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.582826][ T8270] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 236.582841][ T8270] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 236.582851][ T8270] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 236.582861][ T8270] RBP: 00007fed7b233e6f R08: 0000000000000006 R09: 0000000000000000 [ 236.582870][ T8270] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.582880][ T8270] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 236.582893][ T8270] ? 0xffffffff81000000 [ 236.582910][ T8270] [ 240.022051][ T8317] netlink: 334 bytes leftover after parsing attributes in process `syz.2.515'. [ 240.735297][ T8303] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 240.766444][ T8303] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 241.067548][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'. [ 241.351937][ T1042] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.747188][ T8346] FAULT_INJECTION: forcing a failure. [ 241.747188][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 241.797466][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.0.523 Not tainted syzkaller #0 PREEMPT(full) [ 241.797490][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.797500][ T8346] Call Trace: [ 241.797505][ T8346] [ 241.797512][ T8346] dump_stack_lvl+0x100/0x190 [ 241.797534][ T8346] should_fail_ex.cold+0x5/0xa [ 241.797551][ T8346] should_failslab+0xc2/0x120 [ 241.797571][ T8346] kmem_cache_alloc_noprof+0x91/0x6a0 [ 241.797590][ T8346] ? vm_area_dup+0x27/0x8e0 [ 241.797615][ T8346] vm_area_dup+0x27/0x8e0 [ 241.797638][ T8346] dup_mmap+0x6f6/0x21b0 [ 241.797665][ T8346] ? __pfx_dup_mmap+0x10/0x10 [ 241.797684][ T8346] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 241.797710][ T8346] ? __lock_acquire+0x49f/0x1a40 [ 241.797732][ T8346] ? find_held_lock+0x2b/0x80 [ 241.797748][ T8346] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 241.797782][ T8346] copy_process+0x4588/0x8030 [ 241.797810][ T8346] ? __pfx_copy_process+0x10/0x10 [ 241.797826][ T8346] ? futex_wake+0x4ea/0x5e0 [ 241.797851][ T8346] kernel_clone+0x176/0x9d0 [ 241.797868][ T8346] ? __pfx_kernel_clone+0x10/0x10 [ 241.797895][ T8346] ? 0xffffffff81000000 [ 241.797907][ T8346] __do_sys_clone+0xd9/0x120 [ 241.797924][ T8346] ? __pfx___do_sys_clone+0x10/0x10 [ 241.797940][ T8346] ? __fget_files+0x21f/0x3d0 [ 241.797961][ T8346] ? 0xffffffff81000000 [ 241.797987][ T8346] do_syscall_64+0x115/0x840 [ 241.798000][ T8346] ? clear_bhb_loop+0x40/0x90 [ 241.798018][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.798034][ T8346] RIP: 0033:0x7f3c04f9de59 [ 241.798046][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.798060][ T8346] RSP: 002b:00007f3c031f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 241.798075][ T8346] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9de59 [ 241.798085][ T8346] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 241.798094][ T8346] RBP: 00007f3c05033e6f R08: 0000000000000006 R09: 0000000000000000 [ 241.798103][ T8346] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.798112][ T8346] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 241.798125][ T8346] ? 0xffffffff81000000 [ 241.798142][ T8346] [ 243.923076][ T8389] FAULT_INJECTION: forcing a failure. [ 243.923076][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 243.972110][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.1.533 Not tainted syzkaller #0 PREEMPT(full) [ 243.972133][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.972143][ T8389] Call Trace: [ 243.972149][ T8389] [ 243.972155][ T8389] dump_stack_lvl+0x100/0x190 [ 243.972178][ T8389] should_fail_ex.cold+0x5/0xa [ 243.972196][ T8389] should_failslab+0xc2/0x120 [ 243.972216][ T8389] __kmalloc_noprof+0xfc/0x820 [ 243.972234][ T8389] ? usb_hcd_submit_urb+0x5e8/0x2150 [ 243.972259][ T8389] usb_hcd_submit_urb+0x5e8/0x2150 [ 243.972287][ T8389] usb_submit_urb+0x827/0x19b0 [ 243.972304][ T8389] ? __init_swait_queue_head+0xca/0x150 [ 243.972330][ T8389] usb_start_wait_urb+0x10e/0x580 [ 243.972346][ T8389] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 243.972369][ T8389] ? trace_kmalloc+0xeb/0x110 [ 243.972406][ T8389] ? __asan_memset+0x23/0x50 [ 243.972427][ T8389] usb_control_msg+0x328/0x4b0 [ 243.972443][ T8389] ? __pfx_usb_control_msg+0x10/0x10 [ 243.972459][ T8389] ? __lock_acquire+0x49f/0x1a40 [ 243.972484][ T8389] hub_ext_port_status+0x152/0x600 [ 243.972513][ T8389] hub_activate+0x6d8/0x1d50 [ 243.972533][ T8389] ? __pfx_hub_activate+0x10/0x10 [ 243.972547][ T8389] ? find_held_lock+0x2b/0x80 [ 243.972562][ T8389] ? rwsem_spin_on_owner+0x40/0x230 [ 243.972585][ T8389] ? proc_do_submiturb+0x13e0/0x3820 [ 243.972607][ T8389] ? usb_generic_driver_resume+0x70/0xa0 [ 243.972621][ T8389] ? hcd_bus_resume+0x37b/0x810 [ 243.972644][ T8389] hub_resume+0xb0/0x400 [ 243.972660][ T8389] ? __pfx_hub_resume+0x10/0x10 [ 243.972675][ T8389] ? __pfx_hcd_bus_resume+0x10/0x10 [ 243.972700][ T8389] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 243.972724][ T8389] usb_resume_both+0x53a/0x7f0 [ 243.972743][ T8389] ? do_dentry_open+0x6ab/0x14d0 [ 243.972765][ T8389] ? __pfx_usb_resume_both+0x10/0x10 [ 243.972782][ T8389] ? __rpm_callback+0x272/0x620 [ 243.972800][ T8389] ? __pfx_usb_runtime_resume+0x10/0x10 [ 243.972820][ T8389] ? rcu_is_watching+0x12/0xc0 [ 243.972837][ T8389] ? __pfx_usb_runtime_resume+0x10/0x10 [ 243.972858][ T8389] __rpm_callback+0xc8/0x620 [ 243.972882][ T8389] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 243.972904][ T8389] ? __pfx_usb_runtime_resume+0x10/0x10 [ 243.972926][ T8389] rpm_callback+0x16a/0x1b0 [ 243.972944][ T8389] ? __pfx_usb_runtime_resume+0x10/0x10 [ 243.972965][ T8389] rpm_resume+0xd13/0x1320 [ 243.972981][ T8389] ? usbdev_open+0x181/0x870 [ 243.973000][ T8389] ? klist_put+0xcb/0x1d0 [ 243.973019][ T8389] ? __pfx_rpm_resume+0x10/0x10 [ 243.973035][ T8389] ? do_raw_spin_lock+0x128/0x260 [ 243.973050][ T8389] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.973067][ T8389] ? _raw_spin_lock_irqsave+0x52/0x60 [ 243.973091][ T8389] __pm_runtime_resume+0xb6/0x170 [ 243.973111][ T8389] usb_autoresume_device+0x23/0xe0 [ 243.973133][ T8389] usbdev_open+0x228/0x870 [ 243.973154][ T8389] ? kobject_get_unless_zero+0x156/0x200 [ 243.973171][ T8389] ? __pfx_usbdev_open+0x10/0x10 [ 243.973190][ T8389] ? chrdev_open+0x10b/0x6a0 [ 243.973212][ T8389] ? chrdev_open+0x10b/0x6a0 [ 243.973236][ T8389] ? __pfx_usbdev_open+0x10/0x10 [ 243.973257][ T8389] chrdev_open+0x234/0x6a0 [ 243.973278][ T8389] ? __pfx_apparmor_file_open+0x10/0x10 [ 243.973302][ T8389] ? __pfx_chrdev_open+0x10/0x10 [ 243.973325][ T8389] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 243.973345][ T8389] do_dentry_open+0x6ab/0x14d0 [ 243.973367][ T8389] ? __pfx_chrdev_open+0x10/0x10 [ 243.973394][ T8389] vfs_open+0x82/0x3f0 [ 243.973413][ T8389] path_openat+0x2873/0x4280 [ 243.973444][ T8389] ? __pfx_path_openat+0x10/0x10 [ 243.973471][ T8389] do_file_open+0x20e/0x430 [ 243.973495][ T8389] ? __pfx_do_file_open+0x10/0x10 [ 243.973531][ T8389] ? alloc_fd+0x471/0x7a0 [ 243.973554][ T8389] ? do_getname+0x191/0x390 [ 243.973573][ T8389] do_sys_openat2+0x10f/0x1e0 [ 243.973590][ T8389] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.973608][ T8389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.973637][ T8389] __x64_sys_openat+0x12d/0x210 [ 243.973655][ T8389] ? __pfx___x64_sys_openat+0x10/0x10 [ 243.973681][ T8389] do_syscall_64+0x115/0x840 [ 243.973694][ T8389] ? clear_bhb_loop+0x40/0x90 [ 243.973713][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.973729][ T8389] RIP: 0033:0x7fed7b19de59 [ 243.973744][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.973758][ T8389] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.973773][ T8389] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 243.973784][ T8389] RDX: 000000000004a901 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 243.973794][ T8389] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 243.973803][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.973813][ T8389] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 243.973833][ T8389] [ 244.977176][ T8395] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 245.024388][ T8395] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 245.233491][ T8389] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 246.817579][ T8419] openvswitch: netlink: IP tunnel dst address not specified [ 247.975499][ T8460] FAULT_INJECTION: forcing a failure. [ 247.975499][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 248.111727][ T8460] CPU: 0 UID: 0 PID: 8460 Comm: syz.1.548 Not tainted syzkaller #0 PREEMPT(full) [ 248.111752][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.111762][ T8460] Call Trace: [ 248.111769][ T8460] [ 248.111776][ T8460] dump_stack_lvl+0x100/0x190 [ 248.111798][ T8460] should_fail_ex.cold+0x5/0xa [ 248.111816][ T8460] should_failslab+0xc2/0x120 [ 248.111836][ T8460] __kmalloc_cache_noprof+0x91/0x6c0 [ 248.111860][ T8460] ? trace_pid_list_alloc+0x232/0x480 [ 248.111884][ T8460] trace_pid_list_alloc+0x232/0x480 [ 248.111906][ T8460] trace_pid_write+0x110/0x460 [ 248.111926][ T8460] ? __pfx_trace_pid_write+0x10/0x10 [ 248.111956][ T8460] event_pid_write.isra.0+0x1e4/0x7d0 [ 248.111978][ T8460] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 248.112007][ T8460] vfs_write+0x2aa/0x1050 [ 248.112029][ T8460] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 248.112051][ T8460] ? __pfx_vfs_write+0x10/0x10 [ 248.112073][ T8460] ? __pfx_do_futex+0x10/0x10 [ 248.112087][ T8460] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.112109][ T8460] ? __x64_sys_futex+0x34f/0x4d0 [ 248.112123][ T8460] ? __x64_sys_futex+0x358/0x4d0 [ 248.112140][ T8460] ksys_write+0x12a/0x250 [ 248.112160][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 248.112187][ T8460] do_syscall_64+0x115/0x840 [ 248.112200][ T8460] ? clear_bhb_loop+0x40/0x90 [ 248.112225][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.112241][ T8460] RIP: 0033:0x7fed7b19de59 [ 248.112256][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.112271][ T8460] RSP: 002b:00007fed7bfcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.112285][ T8460] RAX: ffffffffffffffda RBX: 00007fed7b426090 RCX: 00007fed7b19de59 [ 248.112296][ T8460] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 248.112305][ T8460] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 248.112314][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.112324][ T8460] R13: 00007fed7b426128 R14: 00007fed7b426090 R15: 00007ffd600ff038 [ 248.112392][ T8460] [ 248.427805][ T8446] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 248.435230][ T8446] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 249.113258][ T8477] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 249.845882][ T8503] FAULT_INJECTION: forcing a failure. [ 249.845882][ T8503] name (null), interval 1, probability 0, space 0, times 1 [ 250.015117][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(full) [ 250.015139][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.015148][ T8503] Call Trace: [ 250.015154][ T8503] [ 250.015167][ T8503] dump_stack_lvl+0x100/0x190 [ 250.015189][ T8503] should_fail_ex.cold+0x5/0xa [ 250.015203][ T8503] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 250.015223][ T8503] null_queue_rq+0x24d/0xfb0 [ 250.015247][ T8503] __blk_mq_issue_directly+0xe2/0x200 [ 250.015265][ T8503] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 250.015288][ T8503] blk_mq_try_issue_directly+0x21b/0x420 [ 250.015314][ T8503] blk_mq_submit_bio+0x21f2/0x3010 [ 250.015339][ T8503] ? clockevents_program_event+0x23e/0x820 [ 250.015355][ T8503] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 250.015384][ T8503] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 250.015406][ T8503] ? filemap_get_folios_tag+0x4ee/0xbb0 [ 250.015428][ T8503] __submit_bio+0x90/0x3d0 [ 250.015448][ T8503] submit_bio_noacct_nocheck+0x549/0xc00 [ 250.015469][ T8503] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 250.015489][ T8503] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 250.015513][ T8503] ? __pfx___might_resched+0x10/0x10 [ 250.015533][ T8503] ? irqentry_exit+0x24d/0xa00 [ 250.015556][ T8503] ? lockdep_hardirqs_on+0x78/0x100 [ 250.015580][ T8503] submit_bio_noacct+0xd18/0x1ff0 [ 250.015604][ T8503] bio_await+0x1fa/0x240 [ 250.015626][ T8503] ? __pfx_bio_await+0x10/0x10 [ 250.015652][ T8503] ? bio_iov_iter_get_pages+0x34e/0x670 [ 250.015668][ T8503] ? bio_associate_blkg+0xcf/0x730 [ 250.015692][ T8503] submit_bio_wait+0x19/0x60 [ 250.015713][ T8503] __blkdev_direct_IO_simple+0x49c/0x890 [ 250.015739][ T8503] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 250.015765][ T8503] ? __pfx_bio_wait_end_io+0x10/0x10 [ 250.015793][ T8503] ? __filemap_fdatawait_range+0x1af/0x230 [ 250.015822][ T8503] blkdev_direct_IO+0xc76/0x1fb0 [ 250.015852][ T8503] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 250.015876][ T8503] ? filemap_check_errors+0xa9/0x150 [ 250.015893][ T8503] ? filemap_write_and_wait_range.part.0+0xea/0x110 [ 250.015917][ T8503] blkdev_read_iter+0x225/0x4f0 [ 250.015942][ T8503] copy_splice_read+0x4ba/0xbb0 [ 250.015970][ T8503] ? __pfx_copy_splice_read+0x10/0x10 [ 250.015994][ T8503] ? look_up_lock_class+0x55/0x120 [ 250.016019][ T8503] ? lockdep_init_map_type+0x5c/0x250 [ 250.016043][ T8503] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 250.016066][ T8503] ? __pfx_filemap_splice_read+0x10/0x10 [ 250.016080][ T8503] do_splice_read+0x2bd/0x370 [ 250.016105][ T8503] splice_direct_to_actor+0x2a1/0xa30 [ 250.016130][ T8503] ? __pfx_direct_splice_actor+0x10/0x10 [ 250.016160][ T8503] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 250.016189][ T8503] do_splice_direct+0x174/0x240 [ 250.016213][ T8503] ? __pfx_do_splice_direct+0x10/0x10 [ 250.016239][ T8503] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 250.016262][ T8503] ? bpf_lsm_file_permission+0x9/0x10 [ 250.016283][ T8503] ? security_file_permission+0x76/0x210 [ 250.016302][ T8503] ? rw_verify_area+0xce/0x6d0 [ 250.016323][ T8503] do_sendfile+0xadc/0xe20 [ 250.016347][ T8503] ? __pfx_do_sendfile+0x10/0x10 [ 250.016366][ T8503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.016391][ T8503] ? __fget_files+0x21f/0x3d0 [ 250.016418][ T8503] __x64_sys_sendfile64+0x1d8/0x220 [ 250.016433][ T8503] ? ksys_write+0x1ac/0x250 [ 250.016453][ T8503] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 250.016474][ T8503] do_syscall_64+0x115/0x840 [ 250.016487][ T8503] ? clear_bhb_loop+0x40/0x90 [ 250.016505][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.016520][ T8503] RIP: 0033:0x7fda88f9de59 [ 250.016533][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.016547][ T8503] RSP: 002b:00007fda871d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.016562][ T8503] RAX: ffffffffffffffda RBX: 00007fda89226180 RCX: 00007fda88f9de59 [ 250.016572][ T8503] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 250.016580][ T8503] RBP: 00007fda871d5090 R08: 0000000000000000 R09: 0000000000000000 [ 250.016589][ T8503] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 250.016598][ T8503] R13: 00007fda89226218 R14: 00007fda89226180 R15: 00007fff30dd3cd8 [ 250.016617][ T8503] [ 250.932037][ T8518] FAULT_INJECTION: forcing a failure. [ 250.932037][ T8518] name (null), interval 1, probability 0, space 0, times 1 [ 250.950271][ T8518] CPU: 0 UID: 0 PID: 8518 Comm: syz.0.563 Not tainted syzkaller #0 PREEMPT(full) [ 250.950293][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.950303][ T8518] Call Trace: [ 250.950308][ T8518] [ 250.950314][ T8518] dump_stack_lvl+0x100/0x190 [ 250.950335][ T8518] should_fail_ex.cold+0x5/0xa [ 250.950352][ T8518] null_queue_rq+0x24d/0xfb0 [ 250.950375][ T8518] __blk_mq_issue_directly+0xe2/0x200 [ 250.950394][ T8518] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 250.950423][ T8518] blk_mq_try_issue_directly+0x21b/0x420 [ 250.950449][ T8518] blk_mq_submit_bio+0x21f2/0x3010 [ 250.950476][ T8518] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 250.950504][ T8518] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 250.950526][ T8518] ? find_held_lock+0x2b/0x80 [ 250.950546][ T8518] __submit_bio+0x90/0x3d0 [ 250.950566][ T8518] submit_bio_noacct_nocheck+0x549/0xc00 [ 250.950589][ T8518] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 250.950612][ T8518] ? __pfx___might_resched+0x10/0x10 [ 250.950637][ T8518] submit_bio_noacct+0xd18/0x1ff0 [ 250.950662][ T8518] bio_await+0x1fa/0x240 [ 250.950683][ T8518] ? __pfx_bio_await+0x10/0x10 [ 250.950709][ T8518] ? bio_iov_iter_get_pages+0x34e/0x670 [ 250.950725][ T8518] ? bio_associate_blkg+0xcf/0x730 [ 250.950748][ T8518] submit_bio_wait+0x19/0x60 [ 250.950770][ T8518] __blkdev_direct_IO_simple+0x49c/0x890 [ 250.950795][ T8518] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 250.950821][ T8518] ? __pfx_bio_wait_end_io+0x10/0x10 [ 250.950853][ T8518] ? __filemap_fdatawait_range+0x1af/0x230 [ 250.950883][ T8518] blkdev_direct_IO+0xc76/0x1fb0 [ 250.950912][ T8518] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 250.950936][ T8518] ? filemap_check_errors+0xa9/0x150 [ 250.950953][ T8518] ? filemap_write_and_wait_range.part.0+0xea/0x110 [ 250.950978][ T8518] blkdev_read_iter+0x225/0x4f0 [ 250.951003][ T8518] copy_splice_read+0x4ba/0xbb0 [ 250.951036][ T8518] ? __pfx_copy_splice_read+0x10/0x10 [ 250.951061][ T8518] ? look_up_lock_class+0x55/0x120 [ 250.951088][ T8518] ? lockdep_init_map_type+0x5c/0x250 [ 250.951111][ T8518] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 250.951133][ T8518] ? __pfx_filemap_splice_read+0x10/0x10 [ 250.951147][ T8518] do_splice_read+0x2bd/0x370 [ 250.951172][ T8518] splice_direct_to_actor+0x2a1/0xa30 [ 250.951197][ T8518] ? __pfx_direct_splice_actor+0x10/0x10 [ 250.951223][ T8518] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 250.951254][ T8518] do_splice_direct+0x174/0x240 [ 250.951278][ T8518] ? __pfx_do_splice_direct+0x10/0x10 [ 250.951307][ T8518] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 250.951334][ T8518] ? bpf_lsm_file_permission+0x9/0x10 [ 250.951355][ T8518] ? security_file_permission+0x76/0x210 [ 250.951373][ T8518] ? rw_verify_area+0xce/0x6d0 [ 250.951395][ T8518] do_sendfile+0xadc/0xe20 [ 250.951419][ T8518] ? __pfx_do_sendfile+0x10/0x10 [ 250.951437][ T8518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.951462][ T8518] ? __fget_files+0x21f/0x3d0 [ 250.951488][ T8518] __x64_sys_sendfile64+0x1d8/0x220 [ 250.951503][ T8518] ? ksys_write+0x1ac/0x250 [ 250.951524][ T8518] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 250.951545][ T8518] do_syscall_64+0x115/0x840 [ 250.951558][ T8518] ? clear_bhb_loop+0x40/0x90 [ 250.951576][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.951591][ T8518] RIP: 0033:0x7f3c04f9de59 [ 250.951604][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.951618][ T8518] RSP: 002b:00007f3c031d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.951633][ T8518] RAX: ffffffffffffffda RBX: 00007f3c05226090 RCX: 00007f3c04f9de59 [ 250.951643][ T8518] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 250.951651][ T8518] RBP: 00007f3c031d5090 R08: 0000000000000000 R09: 0000000000000000 [ 250.951660][ T8518] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 250.951669][ T8518] R13: 00007f3c05226128 R14: 00007f3c05226090 R15: 00007ffd6f497c48 [ 250.951689][ T8518] [ 254.787278][ T8558] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 254.820547][ T8558] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 255.685699][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692079][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.754473][ T8580] FAULT_INJECTION: forcing a failure. [ 255.754473][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 255.785169][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.3.578 Not tainted syzkaller #0 PREEMPT(full) [ 255.785191][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.785202][ T8580] Call Trace: [ 255.785208][ T8580] [ 255.785215][ T8580] dump_stack_lvl+0x100/0x190 [ 255.785237][ T8580] should_fail_ex.cold+0x5/0xa [ 255.785255][ T8580] should_failslab+0xc2/0x120 [ 255.785275][ T8580] __kmalloc_cache_noprof+0x91/0x6c0 [ 255.785298][ T8580] ? trace_pid_list_alloc+0x232/0x480 [ 255.785322][ T8580] trace_pid_list_alloc+0x232/0x480 [ 255.785344][ T8580] trace_pid_write+0x110/0x460 [ 255.785363][ T8580] ? __pfx_trace_pid_write+0x10/0x10 [ 255.785394][ T8580] event_pid_write.isra.0+0x1e4/0x7d0 [ 255.785416][ T8580] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 255.785449][ T8580] vfs_write+0x2aa/0x1050 [ 255.785471][ T8580] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 255.785494][ T8580] ? __pfx_vfs_write+0x10/0x10 [ 255.785516][ T8580] ? __pfx_do_futex+0x10/0x10 [ 255.785530][ T8580] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.785553][ T8580] ? __x64_sys_futex+0x34f/0x4d0 [ 255.785566][ T8580] ? __x64_sys_futex+0x358/0x4d0 [ 255.785583][ T8580] ksys_write+0x12a/0x250 [ 255.785604][ T8580] ? __pfx_ksys_write+0x10/0x10 [ 255.785631][ T8580] do_syscall_64+0x115/0x840 [ 255.785645][ T8580] ? clear_bhb_loop+0x40/0x90 [ 255.785663][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.785678][ T8580] RIP: 0033:0x7fa14d99de59 [ 255.785692][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.785706][ T8580] RSP: 002b:00007fa14e77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.785721][ T8580] RAX: ffffffffffffffda RBX: 00007fa14dc26090 RCX: 00007fa14d99de59 [ 255.785731][ T8580] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.785740][ T8580] RBP: 00007fa14da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 255.785749][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.785757][ T8580] R13: 00007fa14dc26128 R14: 00007fa14dc26090 R15: 00007ffff39cf328 [ 255.785777][ T8580] [ 256.028936][ T7606] null_blk: rq ffff888026b92d00 timed out [ 256.035157][ T7606] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 256.092146][ T8582] ptp ptp0: max value is 20 [ 256.284538][ T8589] FAULT_INJECTION: forcing a failure. [ 256.284538][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 256.329024][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.1.581 Not tainted syzkaller #0 PREEMPT(full) [ 256.329046][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.329055][ T8589] Call Trace: [ 256.329061][ T8589] [ 256.329068][ T8589] dump_stack_lvl+0x100/0x190 [ 256.329089][ T8589] should_fail_ex.cold+0x5/0xa [ 256.329107][ T8589] should_failslab+0xc2/0x120 [ 256.329126][ T8589] __kmalloc_noprof+0xfc/0x820 [ 256.329143][ T8589] ? iter_file_splice_write+0x1d8/0x10b0 [ 256.329171][ T8589] iter_file_splice_write+0x1d8/0x10b0 [ 256.329197][ T8589] ? copy_splice_read+0x6e0/0xbb0 [ 256.329219][ T8589] ? copy_splice_read+0x734/0xbb0 [ 256.329245][ T8589] ? copy_splice_read+0x739/0xbb0 [ 256.329266][ T8589] ? __pfx_iter_file_splice_write+0x10/0x10 [ 256.329290][ T8589] ? __lock_acquire+0x49f/0x1a40 [ 256.329314][ T8589] ? __pfx_copy_splice_read+0x10/0x10 [ 256.329347][ T8589] ? __pfx_iter_file_splice_write+0x10/0x10 [ 256.329372][ T8589] direct_splice_actor+0x192/0x690 [ 256.329397][ T8589] splice_direct_to_actor+0x345/0xa30 [ 256.329421][ T8589] ? __pfx_direct_splice_actor+0x10/0x10 [ 256.329447][ T8589] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 256.329476][ T8589] do_splice_direct+0x174/0x240 [ 256.329506][ T8589] ? __pfx_do_splice_direct+0x10/0x10 [ 256.329529][ T8589] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 256.329555][ T8589] ? rw_verify_area+0xce/0x6d0 [ 256.329576][ T8589] do_sendfile+0xadc/0xe20 [ 256.329600][ T8589] ? __pfx_do_sendfile+0x10/0x10 [ 256.329619][ T8589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.329644][ T8589] ? __fget_files+0x21f/0x3d0 [ 256.329670][ T8589] __x64_sys_sendfile64+0x1d8/0x220 [ 256.329685][ T8589] ? ksys_write+0x1ac/0x250 [ 256.329706][ T8589] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 256.329721][ T8589] ? __pfx_handle_softirqs+0x10/0x10 [ 256.329741][ T8589] do_syscall_64+0x115/0x840 [ 256.329754][ T8589] ? clear_bhb_loop+0x40/0x90 [ 256.329772][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.329787][ T8589] RIP: 0033:0x7fed7b19de59 [ 256.329801][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.329815][ T8589] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.329830][ T8589] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 256.329840][ T8589] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 256.329849][ T8589] RBP: 00007fed7bff0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.329857][ T8589] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 256.329866][ T8589] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 256.329885][ T8589] [ 256.908147][ T7606] null_blk: rq ffff888026b91b00 timed out [ 256.945101][ T7606] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 257.077577][ T8596] FAULT_INJECTION: forcing a failure. [ 257.077577][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 257.190348][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.3.583 Not tainted syzkaller #0 PREEMPT(full) [ 257.190371][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.190380][ T8596] Call Trace: [ 257.190385][ T8596] [ 257.190391][ T8596] dump_stack_lvl+0x100/0x190 [ 257.190416][ T8596] should_fail_ex.cold+0x5/0xa [ 257.190434][ T8596] should_failslab+0xc2/0x120 [ 257.190454][ T8596] kmem_cache_alloc_noprof+0x91/0x6a0 [ 257.190471][ T8596] ? anon_vma_clone+0x2ba/0xcd0 [ 257.190495][ T8596] anon_vma_clone+0x2ba/0xcd0 [ 257.190514][ T8596] ? kmem_cache_alloc_noprof+0x271/0x6a0 [ 257.190537][ T8596] anon_vma_fork+0x1bb/0x6b0 [ 257.190561][ T8596] dup_mmap+0x143e/0x21b0 [ 257.190590][ T8596] ? __pfx_dup_mmap+0x10/0x10 [ 257.190609][ T8596] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.190635][ T8596] ? __lock_acquire+0x49f/0x1a40 [ 257.190658][ T8596] ? find_held_lock+0x2b/0x80 [ 257.190674][ T8596] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 257.190708][ T8596] copy_process+0x4588/0x8030 [ 257.190725][ T8596] ? try_to_wake_up+0x70a/0x1c90 [ 257.190750][ T8596] ? __pfx_copy_process+0x10/0x10 [ 257.190766][ T8596] ? futex_wake+0x4ea/0x5e0 [ 257.190786][ T8596] ? futex_private_hash_put+0x115/0x1c0 [ 257.190813][ T8596] kernel_clone+0x176/0x9d0 [ 257.190829][ T8596] ? __pfx_futex_wake+0x10/0x10 [ 257.190846][ T8596] ? __pfx_kernel_clone+0x10/0x10 [ 257.190873][ T8596] ? 0xffffffff81000000 [ 257.190884][ T8596] __do_sys_clone+0xd9/0x120 [ 257.190901][ T8596] ? __pfx___do_sys_clone+0x10/0x10 [ 257.190917][ T8596] ? __fget_files+0x21f/0x3d0 [ 257.190939][ T8596] ? 0xffffffff81000000 [ 257.190964][ T8596] do_syscall_64+0x115/0x840 [ 257.190984][ T8596] ? clear_bhb_loop+0x40/0x90 [ 257.191003][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.191018][ T8596] RIP: 0033:0x7fa14d99de59 [ 257.191030][ T8596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.191045][ T8596] RSP: 002b:00007fa14e7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 257.191060][ T8596] RAX: ffffffffffffffda RBX: 00007fa14dc25fa0 RCX: 00007fa14d99de59 [ 257.191070][ T8596] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 257.191080][ T8596] RBP: 00007fa14da33e6f R08: 0000000000000006 R09: 0000000000000000 [ 257.191089][ T8596] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.191099][ T8596] R13: 00007fa14dc26038 R14: 00007fa14dc25fa0 R15: 00007ffff39cf328 [ 257.191111][ T8596] ? 0xffffffff81000000 [ 257.191129][ T8596] [ 258.459708][ T8616] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 260.900505][ T8676] FAULT_INJECTION: forcing a failure. [ 260.900505][ T8676] name failslab, interval 1, probability 0, space 0, times 0 [ 261.032819][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 261.032855][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.032871][ T8676] Call Trace: [ 261.032880][ T8676] [ 261.032890][ T8676] dump_stack_lvl+0x100/0x190 [ 261.032923][ T8676] should_fail_ex.cold+0x5/0xa [ 261.032955][ T8676] should_failslab+0xc2/0x120 [ 261.032990][ T8676] __kmalloc_cache_noprof+0x91/0x6c0 [ 261.033032][ T8676] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 261.033072][ T8676] ? kvm_init_irq_routing+0x43/0xf0 [ 261.033111][ T8676] kvm_init_irq_routing+0x43/0xf0 [ 261.033143][ T8676] kvm_dev_ioctl+0x7d4/0x1a50 [ 261.033190][ T8676] ? find_held_lock+0x2b/0x80 [ 261.033220][ T8676] ? __fget_files+0x215/0x3d0 [ 261.033258][ T8676] ? hook_file_ioctl_common+0x140/0x440 [ 261.033292][ T8676] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 261.033337][ T8676] ? __fget_files+0x21f/0x3d0 [ 261.033360][ T8676] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 261.033382][ T8676] __x64_sys_ioctl+0x18e/0x210 [ 261.033402][ T8676] do_syscall_64+0x115/0x840 [ 261.033415][ T8676] ? clear_bhb_loop+0x40/0x90 [ 261.033434][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.033448][ T8676] RIP: 0033:0x7fda88f9de59 [ 261.033469][ T8676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.033483][ T8676] RSP: 002b:00007fda89d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.033498][ T8676] RAX: ffffffffffffffda RBX: 00007fda89225fa0 RCX: 00007fda88f9de59 [ 261.033508][ T8676] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 261.033517][ T8676] RBP: 00007fda89d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 261.033525][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.033534][ T8676] R13: 00007fda89226038 R14: 00007fda89225fa0 R15: 00007fff30dd3cd8 [ 261.033553][ T8676] [ 261.679315][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 264.182567][ T8726] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 264.496172][ T8740] FAULT_INJECTION: forcing a failure. [ 264.496172][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 264.570686][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.2.616 Not tainted syzkaller #0 PREEMPT(full) [ 264.570709][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.570719][ T8740] Call Trace: [ 264.570724][ T8740] [ 264.570730][ T8740] dump_stack_lvl+0x100/0x190 [ 264.570752][ T8740] should_fail_ex.cold+0x5/0xa [ 264.570770][ T8740] should_failslab+0xc2/0x120 [ 264.570790][ T8740] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 264.570807][ T8740] ? __alloc_skb+0x5b7/0x710 [ 264.570823][ T8740] ? __alloc_skb+0x140/0x710 [ 264.570841][ T8740] __alloc_skb+0x140/0x710 [ 264.570855][ T8740] ? __alloc_skb+0x5b7/0x710 [ 264.570871][ T8740] ? __pfx___alloc_skb+0x10/0x10 [ 264.570892][ T8740] netlink_alloc_large_skb+0x69/0x150 [ 264.570916][ T8740] netlink_sendmsg+0x680/0xda0 [ 264.570940][ T8740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.570966][ T8740] ? apparmor_socket_sendmsg+0x15b/0x270 [ 264.570993][ T8740] __sys_sendto+0x48b/0x4e0 [ 264.571007][ T8740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.571029][ T8740] ? __pfx___sys_sendto+0x10/0x10 [ 264.571048][ T8740] ? fd_install+0x223/0x580 [ 264.571078][ T8740] ? __pfx___sys_socket+0x10/0x10 [ 264.571103][ T8740] __x64_sys_sendto+0xe0/0x1c0 [ 264.571118][ T8740] ? do_syscall_64+0x90/0x840 [ 264.571131][ T8740] ? lockdep_hardirqs_on+0x78/0x100 [ 264.571153][ T8740] do_syscall_64+0x115/0x840 [ 264.571166][ T8740] ? clear_bhb_loop+0x40/0x90 [ 264.571185][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.571200][ T8740] RIP: 0033:0x7fda88f5e68e [ 264.571214][ T8740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.571228][ T8740] RSP: 002b:00007fda89d9ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.571243][ T8740] RAX: ffffffffffffffda RBX: 00007fda89d9c6c0 RCX: 00007fda88f5e68e [ 264.571253][ T8740] RDX: 0000000000000020 RSI: 00007fda89d9b000 RDI: 000000000000000d [ 264.571262][ T8740] RBP: 0000000000000000 R08: 00007fda89d9af04 R09: 000000000000000c [ 264.571271][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 264.571280][ T8740] R13: 00007fda89d9af58 R14: 00007fda89d9b000 R15: 0000000000000000 [ 264.571299][ T8740] [ 265.008125][ T8746] FAULT_INJECTION: forcing a failure. [ 265.008125][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 265.021114][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.3.617 Not tainted syzkaller #0 PREEMPT(full) [ 265.021134][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.021144][ T8746] Call Trace: [ 265.021150][ T8746] [ 265.021156][ T8746] dump_stack_lvl+0x100/0x190 [ 265.021177][ T8746] should_fail_ex.cold+0x5/0xa [ 265.021195][ T8746] should_failslab+0xc2/0x120 [ 265.021214][ T8746] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 265.021232][ T8746] ? alloc_inode+0x183/0x250 [ 265.021253][ T8746] alloc_inode+0x183/0x250 [ 265.021270][ T8746] iget_locked+0x1d9/0x6d0 [ 265.021288][ T8746] ? __pfx_iget_locked+0x10/0x10 [ 265.021304][ T8746] ? kernfs_root+0xee/0x2a0 [ 265.021329][ T8746] ? kernfs_root+0xee/0x2a0 [ 265.021352][ T8746] kernfs_get_inode+0x46/0x470 [ 265.021373][ T8746] kernfs_iop_lookup+0x1a7/0x2d0 [ 265.021396][ T8746] __lookup_slow+0x155/0x320 [ 265.021415][ T8746] lookup_slow+0x50/0x70 [ 265.021432][ T8746] link_path_walk+0x1377/0x1cc0 [ 265.021459][ T8746] __filename_parentat+0x213/0x740 [ 265.021482][ T8746] ? __pfx___filename_parentat+0x10/0x10 [ 265.021501][ T8746] ? stack_trace_save+0x8e/0xc0 [ 265.021541][ T8746] filename_renameat2+0x23d/0xa60 [ 265.021564][ T8746] ? __pfx_filename_renameat2+0x10/0x10 [ 265.021584][ T8746] ? __might_fault+0xc5/0x140 [ 265.021608][ T8746] ? do_getname+0x191/0x390 [ 265.021626][ T8746] __x64_sys_rename+0x81/0xb0 [ 265.021642][ T8746] do_syscall_64+0x115/0x840 [ 265.021656][ T8746] ? clear_bhb_loop+0x40/0x90 [ 265.021675][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.021690][ T8746] RIP: 0033:0x7fa14d99de59 [ 265.021703][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.021717][ T8746] RSP: 002b:00007fa14bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 265.021732][ T8746] RAX: ffffffffffffffda RBX: 00007fa14dc26180 RCX: 00007fa14d99de59 [ 265.021742][ T8746] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 265.021751][ T8746] RBP: 00007fa14bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.021760][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.021768][ T8746] R13: 00007fa14dc26218 R14: 00007fa14dc26180 R15: 00007ffff39cf328 [ 265.021788][ T8746] [ 265.974635][ T8731] Process accounting paused [ 266.407112][ T8773] netlink: 334 bytes leftover after parsing attributes in process `syz.2.622'. [ 266.800525][ T8785] FAULT_INJECTION: forcing a failure. [ 266.800525][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 266.887350][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.3.624 Not tainted syzkaller #0 PREEMPT(full) [ 266.887375][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.887384][ T8785] Call Trace: [ 266.887390][ T8785] [ 266.887397][ T8785] dump_stack_lvl+0x100/0x190 [ 266.887420][ T8785] should_fail_ex.cold+0x5/0xa [ 266.887438][ T8785] should_failslab+0xc2/0x120 [ 266.887457][ T8785] __kmalloc_cache_noprof+0x91/0x6c0 [ 266.887481][ T8785] ? trace_pid_list_alloc+0x232/0x480 [ 266.887504][ T8785] trace_pid_list_alloc+0x232/0x480 [ 266.887525][ T8785] trace_pid_write+0x110/0x460 [ 266.887545][ T8785] ? __pfx_trace_pid_write+0x10/0x10 [ 266.887576][ T8785] event_pid_write.isra.0+0x1e4/0x7d0 [ 266.887598][ T8785] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 266.887623][ T8785] vfs_write+0x2aa/0x1050 [ 266.887645][ T8785] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 266.887678][ T8785] ? __pfx_vfs_write+0x10/0x10 [ 266.887701][ T8785] ? __pfx_do_futex+0x10/0x10 [ 266.887715][ T8785] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.887738][ T8785] ? __x64_sys_futex+0x34f/0x4d0 [ 266.887752][ T8785] ? __x64_sys_futex+0x358/0x4d0 [ 266.887770][ T8785] ksys_write+0x12a/0x250 [ 266.887792][ T8785] ? __pfx_ksys_write+0x10/0x10 [ 266.887821][ T8785] do_syscall_64+0x115/0x840 [ 266.887835][ T8785] ? clear_bhb_loop+0x40/0x90 [ 266.887852][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.887869][ T8785] RIP: 0033:0x7fa14d99de59 [ 266.887884][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.887898][ T8785] RSP: 002b:00007fa14e77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.887913][ T8785] RAX: ffffffffffffffda RBX: 00007fa14dc26090 RCX: 00007fa14d99de59 [ 266.887923][ T8785] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.887932][ T8785] RBP: 00007fa14da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 266.887940][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.887949][ T8785] R13: 00007fa14dc26128 R14: 00007fa14dc26090 R15: 00007ffff39cf328 [ 266.887969][ T8785] [ 267.243020][ T8789] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 267.562806][ T8792] Process accounting resumed [ 267.624696][ T8800] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 267.648152][ T8800] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 267.676950][ T8800] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 267.705164][ T8800] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 267.729807][ T8800] page dumped because: unmovable page [ 267.744697][ T8800] page_owner tracks the page as allocated [ 267.764656][ T8800] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 267.796600][ T8800] register_early_stack+0x74/0xaf [ 267.810429][ T8800] init_page_owner+0x4c/0xa10 [ 267.824176][ T8800] page_ext_init+0x71d/0x780 [ 267.834431][ T8800] mm_core_init+0x229/0x270 [ 267.850996][ T8800] page_owner free stack trace missing [ 268.096375][ T8809] futex_wake_op: syz.2.630 tries to shift op by -1; fix this program [ 268.181910][ T8812] FAULT_INJECTION: forcing a failure. [ 268.181910][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 268.225040][ T8812] CPU: 0 UID: 0 PID: 8812 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT(full) [ 268.225063][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.225073][ T8812] Call Trace: [ 268.225079][ T8812] [ 268.225085][ T8812] dump_stack_lvl+0x100/0x190 [ 268.225106][ T8812] should_fail_ex.cold+0x5/0xa [ 268.225127][ T8812] should_failslab+0xc2/0x120 [ 268.225147][ T8812] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 268.225166][ T8812] ? sock_alloc_inode+0x26/0x2c0 [ 268.225187][ T8812] ? __pfx_sock_alloc_inode+0x10/0x10 [ 268.225207][ T8812] sock_alloc_inode+0x26/0x2c0 [ 268.225227][ T8812] ? __pfx_sock_alloc_inode+0x10/0x10 [ 268.225246][ T8812] alloc_inode+0x68/0x250 [ 268.225263][ T8812] sock_alloc+0x44/0x280 [ 268.225279][ T8812] ? security_socket_create+0x7f/0x250 [ 268.225303][ T8812] __sock_create+0xc2/0x860 [ 268.225327][ T8812] __sys_socket+0x14d/0x260 [ 268.225349][ T8812] ? __pfx___sys_socket+0x10/0x10 [ 268.225377][ T8812] __x64_sys_socket+0x72/0xb0 [ 268.225403][ T8812] ? lockdep_hardirqs_on+0x78/0x100 [ 268.225428][ T8812] do_syscall_64+0x115/0x840 [ 268.225441][ T8812] ? clear_bhb_loop+0x40/0x90 [ 268.225459][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.225475][ T8812] RIP: 0033:0x7f3c04f9f6c7 [ 268.225488][ T8812] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.225503][ T8812] RSP: 002b:00007f3c031f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 268.225517][ T8812] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9f6c7 [ 268.225527][ T8812] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 268.225536][ T8812] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 268.225545][ T8812] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 268.225553][ T8812] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 268.225572][ T8812] [ 268.226706][ T8812] socket: no more sockets [ 271.848802][ T8867] FAULT_INJECTION: forcing a failure. [ 271.848802][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 271.936796][ T8867] CPU: 0 UID: 0 PID: 8867 Comm: syz.1.642 Not tainted syzkaller #0 PREEMPT(full) [ 271.936819][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.936829][ T8867] Call Trace: [ 271.936835][ T8867] [ 271.936840][ T8867] dump_stack_lvl+0x100/0x190 [ 271.936863][ T8867] should_fail_ex.cold+0x5/0xa [ 271.936881][ T8867] should_failslab+0xc2/0x120 [ 271.936900][ T8867] __kmalloc_cache_noprof+0x91/0x6c0 [ 271.936924][ T8867] ? trace_pid_list_alloc+0x232/0x480 [ 271.936946][ T8867] trace_pid_list_alloc+0x232/0x480 [ 271.936968][ T8867] trace_pid_write+0x110/0x460 [ 271.936988][ T8867] ? __pfx_trace_pid_write+0x10/0x10 [ 271.937018][ T8867] event_pid_write.isra.0+0x1e4/0x7d0 [ 271.937048][ T8867] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 271.937081][ T8867] vfs_write+0x2aa/0x1050 [ 271.937105][ T8867] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 271.937129][ T8867] ? __pfx_vfs_write+0x10/0x10 [ 271.937151][ T8867] ? __pfx_do_futex+0x10/0x10 [ 271.937165][ T8867] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.937187][ T8867] ? __x64_sys_futex+0x34f/0x4d0 [ 271.937201][ T8867] ? __x64_sys_futex+0x358/0x4d0 [ 271.937218][ T8867] ksys_write+0x12a/0x250 [ 271.937239][ T8867] ? __pfx_ksys_write+0x10/0x10 [ 271.937266][ T8867] do_syscall_64+0x115/0x840 [ 271.937279][ T8867] ? clear_bhb_loop+0x40/0x90 [ 271.937300][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.937316][ T8867] RIP: 0033:0x7fed7b19de59 [ 271.937329][ T8867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.937344][ T8867] RSP: 002b:00007fed7bfcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.937359][ T8867] RAX: ffffffffffffffda RBX: 00007fed7b426090 RCX: 00007fed7b19de59 [ 271.937369][ T8867] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 271.937378][ T8867] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 271.937387][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.937395][ T8867] R13: 00007fed7b426128 R14: 00007fed7b426090 R15: 00007ffd600ff038 [ 271.937415][ T8867] [ 272.479851][ T8877] FAULT_INJECTION: forcing a failure. [ 272.479851][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 272.525832][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.0.644 Not tainted syzkaller #0 PREEMPT(full) [ 272.525853][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.525862][ T8877] Call Trace: [ 272.525867][ T8877] [ 272.525872][ T8877] dump_stack_lvl+0x100/0x190 [ 272.525893][ T8877] should_fail_ex.cold+0x5/0xa [ 272.525910][ T8877] should_failslab+0xc2/0x120 [ 272.525930][ T8877] __kmalloc_noprof+0xfc/0x820 [ 272.525946][ T8877] ? tomoyo_encode2+0xfb/0x3c0 [ 272.525968][ T8877] tomoyo_encode2+0xfb/0x3c0 [ 272.525990][ T8877] tomoyo_encode+0x29/0x50 [ 272.526008][ T8877] tomoyo_realpath_from_path+0x18c/0x690 [ 272.526032][ T8877] tomoyo_check_open_permission+0x2af/0x3c0 [ 272.526049][ T8877] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 272.526072][ T8877] ? hook_file_open+0x24f/0x8f0 [ 272.526103][ T8877] ? path_get+0x61/0x80 [ 272.526120][ T8877] tomoyo_file_open+0x6b/0x90 [ 272.526142][ T8877] security_file_open+0xb5/0x1e0 [ 272.526160][ T8877] do_dentry_open+0x588/0x14d0 [ 272.526188][ T8877] vfs_open+0x82/0x3f0 [ 272.526207][ T8877] path_openat+0x2873/0x4280 [ 272.526237][ T8877] ? __pfx_path_openat+0x10/0x10 [ 272.526265][ T8877] do_file_open+0x20e/0x430 [ 272.526289][ T8877] ? __pfx_do_file_open+0x10/0x10 [ 272.526325][ T8877] ? alloc_fd+0x471/0x7a0 [ 272.526349][ T8877] ? do_getname+0x191/0x390 [ 272.526367][ T8877] do_sys_openat2+0x10f/0x1e0 [ 272.526385][ T8877] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.526409][ T8877] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.526434][ T8877] __x64_sys_openat+0x12d/0x210 [ 272.526453][ T8877] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.526469][ T8877] ? ksys_write+0x1ac/0x250 [ 272.526504][ T8877] do_syscall_64+0x115/0x840 [ 272.526517][ T8877] ? clear_bhb_loop+0x40/0x90 [ 272.526535][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.526550][ T8877] RIP: 0033:0x7f3c04f9de59 [ 272.526564][ T8877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.526578][ T8877] RSP: 002b:00007f3c031f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.526593][ T8877] RAX: ffffffffffffffda RBX: 00007f3c05225fa0 RCX: 00007f3c04f9de59 [ 272.526603][ T8877] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 272.526612][ T8877] RBP: 00007f3c031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.526621][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.526630][ T8877] R13: 00007f3c05226038 R14: 00007f3c05225fa0 R15: 00007ffd6f497c48 [ 272.526649][ T8877] [ 272.526664][ T8877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.430313][ T8889] netlink: 334 bytes leftover after parsing attributes in process `syz.1.647'. [ 273.566664][ T8892] netlink: 334 bytes leftover after parsing attributes in process `syz.0.648'. [ 275.172305][ T8932] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 276.284239][ T8959] netlink: 338 bytes leftover after parsing attributes in process `syz.3.660'. [ 276.993396][ T8944] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 277.098994][ T8944] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 277.652902][ T8980] FAULT_INJECTION: forcing a failure. [ 277.652902][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 277.791263][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT(full) [ 277.791287][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.791297][ T8980] Call Trace: [ 277.791302][ T8980] [ 277.791308][ T8980] dump_stack_lvl+0x100/0x190 [ 277.791330][ T8980] should_fail_ex.cold+0x5/0xa [ 277.791348][ T8980] should_failslab+0xc2/0x120 [ 277.791368][ T8980] __kmalloc_cache_noprof+0x91/0x6c0 [ 277.791392][ T8980] ? trace_pid_list_alloc+0x232/0x480 [ 277.791416][ T8980] trace_pid_list_alloc+0x232/0x480 [ 277.791437][ T8980] trace_pid_write+0x110/0x460 [ 277.791457][ T8980] ? __pfx_trace_pid_write+0x10/0x10 [ 277.791495][ T8980] event_pid_write.isra.0+0x1e4/0x7d0 [ 277.791518][ T8980] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 277.791546][ T8980] vfs_write+0x2aa/0x1050 [ 277.791569][ T8980] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 277.791591][ T8980] ? __pfx_vfs_write+0x10/0x10 [ 277.791613][ T8980] ? __pfx_do_futex+0x10/0x10 [ 277.791627][ T8980] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.791649][ T8980] ? __x64_sys_futex+0x34f/0x4d0 [ 277.791663][ T8980] ? __x64_sys_futex+0x358/0x4d0 [ 277.791680][ T8980] ksys_write+0x12a/0x250 [ 277.791701][ T8980] ? __pfx_ksys_write+0x10/0x10 [ 277.791728][ T8980] do_syscall_64+0x115/0x840 [ 277.791741][ T8980] ? clear_bhb_loop+0x40/0x90 [ 277.791759][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.791774][ T8980] RIP: 0033:0x7fed7b19de59 [ 277.791788][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.791803][ T8980] RSP: 002b:00007fed7bfcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.791818][ T8980] RAX: ffffffffffffffda RBX: 00007fed7b426090 RCX: 00007fed7b19de59 [ 277.791828][ T8980] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.791836][ T8980] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 277.791845][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.791854][ T8980] R13: 00007fed7b426128 R14: 00007fed7b426090 R15: 00007ffd600ff038 [ 277.791874][ T8980] [ 280.256742][ T9014] FAULT_INJECTION: forcing a failure. [ 280.256742][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 280.418341][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.2.671 Not tainted syzkaller #0 PREEMPT(full) [ 280.418364][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.418374][ T9014] Call Trace: [ 280.418379][ T9014] [ 280.418386][ T9014] dump_stack_lvl+0x100/0x190 [ 280.418408][ T9014] should_fail_ex.cold+0x5/0xa [ 280.418425][ T9014] should_failslab+0xc2/0x120 [ 280.418445][ T9014] kmem_cache_alloc_noprof+0x91/0x6a0 [ 280.418463][ T9014] ? vm_area_dup+0x27/0x8e0 [ 280.418488][ T9014] vm_area_dup+0x27/0x8e0 [ 280.418511][ T9014] dup_mmap+0x6f6/0x21b0 [ 280.418539][ T9014] ? __pfx_dup_mmap+0x10/0x10 [ 280.418565][ T9014] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 280.418591][ T9014] ? __lock_acquire+0x49f/0x1a40 [ 280.418614][ T9014] ? find_held_lock+0x2b/0x80 [ 280.418630][ T9014] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 280.418665][ T9014] copy_process+0x4588/0x8030 [ 280.418693][ T9014] ? __pfx_copy_process+0x10/0x10 [ 280.418709][ T9014] ? futex_wake+0x4ea/0x5e0 [ 280.418735][ T9014] kernel_clone+0x176/0x9d0 [ 280.418753][ T9014] ? __pfx_kernel_clone+0x10/0x10 [ 280.418780][ T9014] ? 0xffffffff81000000 [ 280.418791][ T9014] __do_sys_clone+0xd9/0x120 [ 280.418808][ T9014] ? __pfx___do_sys_clone+0x10/0x10 [ 280.418824][ T9014] ? __fget_files+0x21f/0x3d0 [ 280.418846][ T9014] ? 0xffffffff81000000 [ 280.418871][ T9014] do_syscall_64+0x115/0x840 [ 280.418885][ T9014] ? clear_bhb_loop+0x40/0x90 [ 280.418960][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.418988][ T9014] RIP: 0033:0x7fda88f9de59 [ 280.419004][ T9014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.419018][ T9014] RSP: 002b:00007fda89d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 280.419033][ T9014] RAX: ffffffffffffffda RBX: 00007fda89225fa0 RCX: 00007fda88f9de59 [ 280.419047][ T9014] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 280.419056][ T9014] RBP: 00007fda89033e6f R08: 0000000000000006 R09: 0000000000000000 [ 280.419065][ T9014] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.419075][ T9014] R13: 00007fda89226038 R14: 00007fda89225fa0 R15: 00007fff30dd3cd8 [ 280.419088][ T9014] ? 0xffffffff81000000 [ 280.419105][ T9014] [ 282.318730][ T9021] Process accounting resumed [ 283.892396][ T9045] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 284.996274][ T9077] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 285.052271][ T9077] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 285.093287][ T9077] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 285.144911][ T9077] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 285.193443][ T9077] page dumped because: unmovable page [ 285.224325][ T9077] page_owner tracks the page as allocated [ 285.247513][ T9053] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 285.265296][ T9077] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 285.303617][ T9053] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 285.334152][ T9077] register_early_stack+0x74/0xaf [ 285.355573][ T9077] init_page_owner+0x4c/0xa10 [ 285.385389][ T9077] page_ext_init+0x71d/0x780 [ 285.410135][ T9077] mm_core_init+0x229/0x270 [ 285.437480][ T9077] page_owner free stack trace missing [ 287.275960][ T9124] FAULT_INJECTION: forcing a failure. [ 287.275960][ T9124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.523828][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.0.689 Not tainted syzkaller #0 PREEMPT(full) [ 287.523851][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.523861][ T9124] Call Trace: [ 287.523866][ T9124] [ 287.523872][ T9124] dump_stack_lvl+0x100/0x190 [ 287.523894][ T9124] should_fail_ex.cold+0x5/0xa [ 287.523909][ T9124] ? prepare_alloc_pages+0x16d/0x5f0 [ 287.523931][ T9124] should_fail_alloc_page+0xeb/0x140 [ 287.523952][ T9124] prepare_alloc_pages+0x1f0/0x5f0 [ 287.523975][ T9124] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 287.523991][ T9124] ? mas_next_slot+0x10a3/0x1960 [ 287.524011][ T9124] ? __pfx___up_read+0x10/0x10 [ 287.524025][ T9124] ? validate_mm+0x261/0x4e0 [ 287.524045][ T9124] ? validate_mm+0x261/0x4e0 [ 287.524068][ T9124] ? mas_find+0x2dd/0x740 [ 287.524083][ T9124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.524102][ T9124] ? __pfx_validate_mm+0x10/0x10 [ 287.524131][ T9124] ? vma_iter_store_overwrite+0x392/0x650 [ 287.524162][ T9124] ? vma_link+0x5ee/0x8d0 [ 287.524183][ T9124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.524204][ T9124] ? policy_nodemask+0xed/0x4f0 [ 287.524225][ T9124] alloc_pages_mpol+0x1fb/0x540 [ 287.524245][ T9124] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 287.524270][ T9124] alloc_pages_noprof+0x1a/0x160 [ 287.524291][ T9124] __pmd_alloc+0x3b/0x950 [ 287.524312][ T9124] move_page_tables+0x2f7c/0x4610 [ 287.524329][ T9124] ? __pfx_copy_vma+0x10/0x10 [ 287.524350][ T9124] ? __pfx_move_page_tables+0x10/0x10 [ 287.524378][ T9124] copy_vma_and_data+0x25c/0x7c0 [ 287.524395][ T9124] ? __pfx_copy_vma_and_data+0x10/0x10 [ 287.524417][ T9124] ? __vma_start_write+0x17f/0x280 [ 287.524438][ T9124] ? __pfx___vma_start_write+0x10/0x10 [ 287.524464][ T9124] move_vma+0x574/0x1920 [ 287.524481][ T9124] ? __pfx_move_vma+0x10/0x10 [ 287.524497][ T9124] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 287.524517][ T9124] ? cap_mmap_addr+0x4b/0x120 [ 287.524538][ T9124] ? bpf_lsm_mmap_addr+0x9/0x30 [ 287.524559][ T9124] ? security_mmap_addr+0x71/0x1e0 [ 287.524577][ T9124] ? __get_unmapped_area+0x255/0x3e0 [ 287.524598][ T9124] ? vrm_set_new_addr+0x204/0x290 [ 287.524622][ T9124] mremap_to+0x234/0x4c0 [ 287.524635][ T9124] ? mas_walk+0x6ef/0x9b0 [ 287.524648][ T9124] ? __pfx_mremap_to+0x10/0x10 [ 287.524661][ T9124] ? check_prep_vma+0x912/0xe60 [ 287.524679][ T9124] __do_sys_mremap+0x88c/0x1850 [ 287.524706][ T9124] ? __pfx___do_sys_mremap+0x10/0x10 [ 287.524727][ T9124] ? __pfx_do_futex+0x10/0x10 [ 287.524748][ T9124] ? __x64_sys_futex+0x34f/0x4d0 [ 287.524775][ T9124] do_syscall_64+0x115/0x840 [ 287.524788][ T9124] ? clear_bhb_loop+0x40/0x90 [ 287.524809][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.524824][ T9124] RIP: 0033:0x7f3c04f9de59 [ 287.524839][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.524853][ T9124] RSP: 002b:00007f3c031d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 287.524868][ T9124] RAX: ffffffffffffffda RBX: 00007f3c05226090 RCX: 00007f3c04f9de59 [ 287.524878][ T9124] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 287.524888][ T9124] RBP: 00007f3c05033e6f R08: 0000000100000000 R09: 0000000000000000 [ 287.524897][ T9124] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 287.524907][ T9124] R13: 00007f3c05226128 R14: 00007f3c05226090 R15: 00007ffd6f497c48 [ 287.524927][ T9124] [ 289.667100][ T9155] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 289.706196][ T9155] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 289.740163][ T9155] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 289.780946][ T9155] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 289.820123][ T9155] page dumped because: unmovable page [ 289.843419][ T9155] page_owner tracks the page as allocated [ 289.874296][ T9155] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 289.944047][ T9155] register_early_stack+0x74/0xaf [ 289.970704][ T9155] init_page_owner+0x4c/0xa10 [ 289.991192][ T9155] page_ext_init+0x71d/0x780 [ 290.010438][ T9155] mm_core_init+0x229/0x270 [ 290.029239][ T9155] page_owner free stack trace missing [ 290.262424][ T9164] netlink: 342 bytes leftover after parsing attributes in process `syz.2.696'. [ 290.327303][ T9165] FAULT_INJECTION: forcing a failure. [ 290.327303][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 290.394358][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(full) [ 290.394381][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.394391][ T9165] Call Trace: [ 290.394396][ T9165] [ 290.394402][ T9165] dump_stack_lvl+0x100/0x190 [ 290.394424][ T9165] should_fail_ex.cold+0x5/0xa [ 290.394441][ T9165] should_failslab+0xc2/0x120 [ 290.394461][ T9165] kmem_cache_alloc_noprof+0x91/0x6a0 [ 290.394479][ T9165] ? vm_area_dup+0x27/0x8e0 [ 290.394504][ T9165] vm_area_dup+0x27/0x8e0 [ 290.394526][ T9165] dup_mmap+0x6f6/0x21b0 [ 290.394554][ T9165] ? __pfx_dup_mmap+0x10/0x10 [ 290.394573][ T9165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.394600][ T9165] ? __lock_acquire+0x49f/0x1a40 [ 290.394623][ T9165] ? find_held_lock+0x2b/0x80 [ 290.394639][ T9165] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 290.394673][ T9165] copy_process+0x4588/0x8030 [ 290.394702][ T9165] ? __pfx_copy_process+0x10/0x10 [ 290.394718][ T9165] ? futex_wake+0x4ea/0x5e0 [ 290.394743][ T9165] kernel_clone+0x176/0x9d0 [ 290.394761][ T9165] ? __pfx_kernel_clone+0x10/0x10 [ 290.394788][ T9165] ? 0xffffffff81000000 [ 290.394799][ T9165] __do_sys_clone+0xd9/0x120 [ 290.394816][ T9165] ? __pfx___do_sys_clone+0x10/0x10 [ 290.394832][ T9165] ? __fget_files+0x21f/0x3d0 [ 290.394855][ T9165] ? 0xffffffff81000000 [ 290.394880][ T9165] do_syscall_64+0x115/0x840 [ 290.394893][ T9165] ? clear_bhb_loop+0x40/0x90 [ 290.394912][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.394927][ T9165] RIP: 0033:0x7fed7b19de59 [ 290.394939][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.394954][ T9165] RSP: 002b:00007fed7bff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 290.394969][ T9165] RAX: ffffffffffffffda RBX: 00007fed7b425fa0 RCX: 00007fed7b19de59 [ 290.394980][ T9165] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 290.394989][ T9165] RBP: 00007fed7b233e6f R08: 0000000000000006 R09: 0000000000000000 [ 290.394998][ T9165] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.395008][ T9165] R13: 00007fed7b426038 R14: 00007fed7b425fa0 R15: 00007ffd600ff038 [ 290.395021][ T9165] ? 0xffffffff81000000 [ 290.395038][ T9165] [ 291.526059][ T5638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 293.056388][ T9197] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 293.259523][ T9197] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 293.392179][ T9197] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 293.554653][ T9197] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 293.708756][ T9197] page dumped because: unmovable page [ 293.800136][ T9197] page_owner tracks the page as allocated [ 293.874128][ T9197] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1421439929, free_ts 0 [ 293.998891][ T9197] register_early_stack+0x74/0xaf [ 294.055820][ T9197] init_page_owner+0x4c/0xa10 [ 294.109152][ T9197] page_ext_init+0x71d/0x780 [ 294.180564][ T9197] mm_core_init+0x229/0x270 [ 294.245092][ T9197] page_owner free stack trace missing [ 294.548437][ T9222] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 295.775166][ T9233] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 295.808971][ T9233] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 295.999999][ T9233] Process accounting resumed [ 298.341317][ T9181] Process accounting paused [ 298.502105][ T9280] netlink: 342 bytes leftover after parsing attributes in process `syz.3.722'. [ 302.403280][ T9297] syz.1.725 (9297) used greatest stack depth: 19768 bytes left [ 302.471396][ T30] audit: type=1800 audit(4294967359.676:4): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.727" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 305.641614][ T9358] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 305.661531][ T9358] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 306.807428][ T9408] netlink: 334 bytes leftover after parsing attributes in process `syz.2.748'. [ 309.628100][ T9435] ima: policy update failed [ 309.671037][ T30] audit: type=1802 audit(4294967366.889:5): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.755" res=0 errno=0 [ 310.029859][ T9461] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 311.977924][ T9511] futex_wake_op: syz.3.771 tries to shift op by -2048; fix this program [ 312.103929][ T9518] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 313.050203][ T9532] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 313.136876][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 313.205308][ T9520] Process accounting paused [ 313.337772][ T9542] usb usb20: check_ctrlrecip: process 9542 (syz.3.776) requesting ep 01 but needs 81 [ 313.355799][ T9543] FAULT_INJECTION: forcing a failure. [ 313.355799][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.420930][ T9543] CPU: 0 UID: 0 PID: 9543 Comm: syz.2.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.420956][ T9543] Tainted: [L]=SOFTLOCKUP [ 313.420961][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.420981][ T9543] Call Trace: [ 313.420986][ T9543] [ 313.420992][ T9543] dump_stack_lvl+0x100/0x190 [ 313.421014][ T9543] should_fail_ex.cold+0x5/0xa [ 313.421031][ T9543] _copy_from_user+0x2e/0xd0 [ 313.421052][ T9543] cache_do_downcall+0x47/0x130 [ 313.421071][ T9543] cache_write_procfs+0xfb/0x170 [ 313.421089][ T9543] ? __pfx_cache_write_procfs+0x10/0x10 [ 313.421106][ T9543] proc_reg_write+0x240/0x330 [ 313.421130][ T9543] ? __pfx_proc_reg_write+0x10/0x10 [ 313.421150][ T9543] vfs_writev+0x5ed/0xdd0 [ 313.421176][ T9543] ? __pfx_vfs_writev+0x10/0x10 [ 313.421197][ T9543] ? rcu_read_lock_any_held+0x6a/0xa0 [ 313.421227][ T9543] ? __fget_files+0x21f/0x3d0 [ 313.421253][ T9543] ? do_writev+0x13e/0x340 [ 313.421272][ T9543] do_writev+0x13e/0x340 [ 313.421292][ T9543] ? __pfx_do_writev+0x10/0x10 [ 313.421318][ T9543] do_syscall_64+0x115/0x840 [ 313.421331][ T9543] ? clear_bhb_loop+0x40/0x90 [ 313.421349][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.421364][ T9543] RIP: 0033:0x7fda88f9de59 [ 313.421378][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.421392][ T9543] RSP: 002b:00007fda89d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 313.421406][ T9543] RAX: ffffffffffffffda RBX: 00007fda89225fa0 RCX: 00007fda88f9de59 [ 313.421416][ T9543] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 313.421425][ T9543] RBP: 00007fda89d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 313.421434][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.421443][ T9543] R13: 00007fda89226038 R14: 00007fda89225fa0 R15: 00007fff30dd3cd8 [ 313.421462][ T9543] [ 313.844463][ T9542] usb usb20: usbfs: process 9542 (syz.3.776) did not claim interface 0 before use [ 314.776811][ T9566] ================================================================== [ 314.776832][ T9566] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 314.776856][ T9566] Write of size 8 at addr ffffc90004ab1000 by task syz.1.782/9566 [ 314.776870][ T9566] [ 314.776880][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.1.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.776901][ T9566] Tainted: [L]=SOFTLOCKUP [ 314.776907][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.776916][ T9566] Call Trace: [ 314.776921][ T9566] [ 314.776928][ T9566] dump_stack_lvl+0x100/0x190 [ 314.776944][ T9566] print_report+0x13d/0x4b0 [ 314.776966][ T9566] ? _raw_spin_lock_irqsave+0x52/0x60 [ 314.776987][ T9566] ? sys_imageblit+0x19fb/0x1d60 [ 314.777003][ T9566] kasan_report+0xdf/0x1c0 [ 314.777022][ T9566] ? sys_imageblit+0x19fb/0x1d60 [ 314.777040][ T9566] sys_imageblit+0x19fb/0x1d60 [ 314.777057][ T9566] ? __asan_memcpy+0x3c/0x60 [ 314.777071][ T9566] ? __pfx_sys_imageblit+0x10/0x10 [ 314.777086][ T9566] ? desc_read+0x2e2/0x380 [ 314.777106][ T9566] ? panic_on_this_cpu+0x32/0x40 [ 314.777125][ T9566] ? _prb_read_valid+0x72a/0x880 [ 314.777146][ T9566] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 314.777169][ T9566] soft_cursor+0x524/0xa10 [ 314.777195][ T9566] ? desc_read+0x2e2/0x380 [ 314.777213][ T9566] ? fb_get_color_depth+0x120/0x250 [ 314.777234][ T9566] bit_cursor+0xca1/0x1490 [ 314.777258][ T9566] ? __pfx_bit_cursor+0x10/0x10 [ 314.777282][ T9566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.777302][ T9566] ? get_color+0x1da/0x450 [ 314.777320][ T9566] ? __pfx_bit_cursor+0x10/0x10 [ 314.777341][ T9566] fbcon_cursor+0x43c/0x5e0 [ 314.777360][ T9566] ? mark_lock+0xa00/0xa20 [ 314.777384][ T9566] hide_cursor+0x87/0x230 [ 314.777402][ T9566] do_con_write+0x224c/0x4a30 [ 314.777420][ T9566] ? __mutex_lock+0x26d/0x1bd0 [ 314.777435][ T9566] ? find_held_lock+0x2b/0x80 [ 314.777450][ T9566] ? n_tty_write+0x500/0x1160 [ 314.777470][ T9566] ? n_tty_write+0x500/0x1160 [ 314.777489][ T9566] ? __pfx___mutex_lock+0x10/0x10 [ 314.777503][ T9566] ? __pfx_do_con_write+0x10/0x10 [ 314.777520][ T9566] ? mark_held_locks+0x40/0x70 [ 314.777551][ T9566] ? con_write+0x93/0xb0 [ 314.777569][ T9566] con_write+0x23/0xb0 [ 314.777586][ T9566] n_tty_write+0x431/0x1160 [ 314.777610][ T9566] ? __pfx_n_tty_write+0x10/0x10 [ 314.777631][ T9566] ? __pfx_woken_wake_function+0x10/0x10 [ 314.777655][ T9566] ? __pfx___might_resched+0x10/0x10 [ 314.777675][ T9566] ? kfree+0x1e5/0x6c0 [ 314.777695][ T9566] ? __pfx_n_tty_write+0x10/0x10 [ 314.777714][ T9566] file_tty_write.isra.0+0x4d2/0x890 [ 314.777734][ T9566] redirected_tty_write+0xd4/0x120 [ 314.777751][ T9566] vfs_write+0x6ac/0x1050 [ 314.777771][ T9566] ? __pfx_redirected_tty_write+0x10/0x10 [ 314.777789][ T9566] ? __pfx_vfs_write+0x10/0x10 [ 314.777808][ T9566] ? find_held_lock+0x2b/0x80 [ 314.777829][ T9566] ksys_write+0x12a/0x250 [ 314.777849][ T9566] ? __pfx_ksys_write+0x10/0x10 [ 314.777871][ T9566] do_syscall_64+0x115/0x840 [ 314.777884][ T9566] ? clear_bhb_loop+0x40/0x90 [ 314.777900][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.777915][ T9566] RIP: 0033:0x7fed7b19de59 [ 314.777928][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.777943][ T9566] RSP: 002b:00007fed7bfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.777957][ T9566] RAX: ffffffffffffffda RBX: 00007fed7b426180 RCX: 00007fed7b19de59 [ 314.777968][ T9566] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 314.777978][ T9566] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 314.777987][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.777997][ T9566] R13: 00007fed7b426218 R14: 00007fed7b426180 R15: 00007ffd600ff038 [ 314.778011][ T9566] [ 314.778017][ T9566] [ 314.778021][ T9566] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900047b1000 allocated at drm_gem_shmem_vmap_locked+0x553/0x860 [ 314.778056][ T9566] Memory state around the buggy address: [ 314.778065][ T9566] ffffc90004ab0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.778075][ T9566] ffffc90004ab0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.778086][ T9566] >ffffc90004ab1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.778095][ T9566] ^ [ 314.778102][ T9566] ffffc90004ab1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.778112][ T9566] ffffc90004ab1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.778120][ T9566] ================================================================== [ 314.801497][ T9566] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.801516][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.1.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.801546][ T9566] Tainted: [L]=SOFTLOCKUP [ 314.801552][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.801562][ T9566] Call Trace: [ 314.801567][ T9566] [ 314.801574][ T9566] dump_stack_lvl+0x100/0x190 [ 314.801594][ T9566] vpanic+0x552/0x970 [ 314.801609][ T9566] ? __pfx_vpanic+0x10/0x10 [ 314.801623][ T9566] ? mark_held_locks+0x40/0x70 [ 314.801646][ T9566] ? sys_imageblit+0x19fb/0x1d60 [ 314.801662][ T9566] panic+0xd1/0xe0 [ 314.801677][ T9566] ? __pfx_panic+0x10/0x10 [ 314.801691][ T9566] ? sys_imageblit+0x19fb/0x1d60 [ 314.801707][ T9566] ? preempt_schedule_common+0x42/0xc0 [ 314.801731][ T9566] check_panic_on_warn.cold+0x19/0x34 [ 314.801746][ T9566] end_report.part.0+0x3a/0x90 [ 314.801767][ T9566] kasan_report.cold+0xe/0x18 [ 314.801788][ T9566] ? sys_imageblit+0x19fb/0x1d60 [ 314.801807][ T9566] sys_imageblit+0x19fb/0x1d60 [ 314.801825][ T9566] ? __asan_memcpy+0x3c/0x60 [ 314.801839][ T9566] ? __pfx_sys_imageblit+0x10/0x10 [ 314.801855][ T9566] ? desc_read+0x2e2/0x380 [ 314.801876][ T9566] ? panic_on_this_cpu+0x32/0x40 [ 314.801893][ T9566] ? _prb_read_valid+0x72a/0x880 [ 314.801915][ T9566] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 314.801938][ T9566] soft_cursor+0x524/0xa10 [ 314.801962][ T9566] ? desc_read+0x2e2/0x380 [ 314.801981][ T9566] ? fb_get_color_depth+0x120/0x250 [ 314.802002][ T9566] bit_cursor+0xca1/0x1490 [ 314.802026][ T9566] ? __pfx_bit_cursor+0x10/0x10 [ 314.802050][ T9566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.802070][ T9566] ? get_color+0x1da/0x450 [ 314.802089][ T9566] ? __pfx_bit_cursor+0x10/0x10 [ 314.802110][ T9566] fbcon_cursor+0x43c/0x5e0 [ 314.802129][ T9566] ? mark_lock+0xa00/0xa20 [ 314.802149][ T9566] hide_cursor+0x87/0x230 [ 314.802164][ T9566] do_con_write+0x224c/0x4a30 [ 314.802182][ T9566] ? __mutex_lock+0x26d/0x1bd0 [ 314.802196][ T9566] ? find_held_lock+0x2b/0x80 [ 314.802212][ T9566] ? n_tty_write+0x500/0x1160 [ 314.802231][ T9566] ? n_tty_write+0x500/0x1160 [ 314.802251][ T9566] ? __pfx___mutex_lock+0x10/0x10 [ 314.802265][ T9566] ? __pfx_do_con_write+0x10/0x10 [ 314.802282][ T9566] ? mark_held_locks+0x40/0x70 [ 314.802304][ T9566] ? con_write+0x93/0xb0 [ 314.802321][ T9566] con_write+0x23/0xb0 [ 314.802338][ T9566] n_tty_write+0x431/0x1160 [ 314.802361][ T9566] ? __pfx_n_tty_write+0x10/0x10 [ 314.802381][ T9566] ? __pfx_woken_wake_function+0x10/0x10 [ 314.802405][ T9566] ? __pfx___might_resched+0x10/0x10 [ 314.802425][ T9566] ? kfree+0x1e5/0x6c0 [ 314.802445][ T9566] ? __pfx_n_tty_write+0x10/0x10 [ 314.802465][ T9566] file_tty_write.isra.0+0x4d2/0x890 [ 314.802484][ T9566] redirected_tty_write+0xd4/0x120 [ 314.802502][ T9566] vfs_write+0x6ac/0x1050 [ 314.802522][ T9566] ? __pfx_redirected_tty_write+0x10/0x10 [ 314.802548][ T9566] ? __pfx_vfs_write+0x10/0x10 [ 314.802568][ T9566] ? find_held_lock+0x2b/0x80 [ 314.802591][ T9566] ksys_write+0x12a/0x250 [ 314.802612][ T9566] ? __pfx_ksys_write+0x10/0x10 [ 314.802636][ T9566] do_syscall_64+0x115/0x840 [ 314.802649][ T9566] ? clear_bhb_loop+0x40/0x90 [ 314.802667][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.802682][ T9566] RIP: 0033:0x7fed7b19de59 [ 314.802695][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.802709][ T9566] RSP: 002b:00007fed7bfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.802725][ T9566] RAX: ffffffffffffffda RBX: 00007fed7b426180 RCX: 00007fed7b19de59 [ 314.802736][ T9566] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 314.802746][ T9566] RBP: 00007fed7b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 314.802755][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.802764][ T9566] R13: 00007fed7b426218 R14: 00007fed7b426180 R15: 00007ffd600ff038 [ 314.802780][ T9566] [ 314.802847][ T9566] Kernel Offset: disabled