last executing test programs: 13m41.855403277s ago: executing program 0 (id=2600): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xffdffffffffffffe, 0xffffffffffffffff, 0x1, 0x80000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, r1, 0xfffffffc) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x81) r2 = accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) open(0x0, 0xcd1e23e41b02d660, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5393, r3) 13m40.246667215s ago: executing program 0 (id=2606): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)) r1 = open(&(0x7f0000000000)='./file1\x00', 0x361342, 0x130) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x3f, 0x5}, 0x4f4) timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) mmap$auto(0x0, 0xb9c, 0xdb, 0x2009b72, r1, 0x8002) prctl$auto(0x3f, 0xffffffffffffffff, 0x4, 0x8000000000000000, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto(r2, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x5054c2, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x6, 0x1) socket(0x1e, 0x1, 0x0) socket(0x1a, 0x2, 0x6) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0xffffffffffffffff, 0x8, 0x1000000016, 0x13, 0xffffffffffffffff, 0xe02e2e4) ftruncate$auto(0x3, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\xf5Cm\x12\x1c\xf1Xe2\n|\xe1\xc5%\xfa\x04\x8fE_\x88\xa5\xb7\x97\x03\xd6\x1cZ\xce?=\xf9\xc6\xc7\x11\xa4\xa5\xc3\x8e\xd5\rL}9~\'\xef\x04\xb1T\xdcW\xbd\x9a\x1c~\xf6\xb6\x8b\xa6\xd4\xe5\x17\x12t\xa1=\x88\x19;1\x84\xb4\xc74\xa4\x16\x16\xad\xbe\x1e\xdfZ\'l\xe2&\x8b\xd2\x9f\x9b d\xd2\\\x18\x87\x9fm9A\xb9(!B\x94m\x1a\xdf\x82k.\xd45\x9d\x0f(8NI Tr\x9a]', &(0x7f0000000400)=&(0x7f0000000340)='(-*4', 0x6) bpf$auto(0x5, 0x0, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(r3, 0x5, 0x3, &(0x7f0000000300)='/sys/kernel/debug/page_owner_stacks/show_stacks\x00', 0x4) getsockopt$auto_SO_BINDTODEVICE(r1, 0x6, 0x19, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f00000001c0)=0x7) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 13m38.343870369s ago: executing program 0 (id=2611): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(r0, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x545c, 0x0) 13m37.250638924s ago: executing program 0 (id=2614): mmap$auto(0x5, 0x400008, 0xe1, 0x5e, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10442, 0x0) mmap$auto(0x4, 0x2, 0x10, 0x10, 0xffffffffffffffff, 0x80) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap$auto(0x0, 0x101, 0xdf, 0x9bf2, 0x2, 0x4) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x402c542b, 0x38) getrlimit$auto(0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000080)="83f72950c4a15930c2601a4a9bc630bc64855986ae86b0e5edcb4ff873f9ac90f6362e3c28d6bded6152cae220b4b23cff0bd19118c132f0908bba3bb4fa2cc8a9da3c288fa1061077e1548f206de75fb69de8718758268f4a59cb52f79b1dd32c31fedbb3b9899a46c0721ac716a3ac49bc") r4 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x24280, 0x0) mmap$auto(0x80, 0x5, 0x2, 0x7fffffffffffffff, r4, 0x1) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000040) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d80040", @ANYRES16=r5, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) mmap$auto(0xa, 0x8, 0x9d, 0x18, r4, 0x4) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRES16=r6, @ANYRES64=0x0], 0x100}, 0x1, 0x0, 0x0, 0x844}, 0x4010) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000500)=0x751) pread64$auto(r7, 0x0, 0x2e0423d, 0x588) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x9}, 0x7) 13m36.282877199s ago: executing program 0 (id=2615): listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0xa, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r1 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) fstat$auto(r1, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/status\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/37, 0x25) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r4) 13m35.14545103s ago: executing program 0 (id=2619): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1) 13m19.970155548s ago: executing program 32 (id=2619): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1) 6.858642177s ago: executing program 1 (id=5974): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/ext4/sda1/session_write_kbytes\x00', 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x2, 0xffffffffffffffff, 0xee01, 0x3, 0x10001, 0x9, 0x6}, &(0x7f0000000100)=0xfa, &(0x7f0000000140)=0xa5, 0x0, 0x0, 0x4, 0x2, 0x9, 0x6, 0x3, 0x2, @inferred, @raw=0x2}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d80), r4) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r5 = getpid() sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xab8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_UPCALL_STATS={0x500, 0xa, 0x0, 0x1, [@nested={0x1bc, 0x122, 0x0, 0x1, [@generic="efd884e430cb53e1c4571f8fb680689684b869cf8f0e03f81d81bd66f62c09c50849f7f39ac21214b4a18e6e018f5999d857306fbb6491daf63c2f139a47b567f8c9cc29de70280572d71e6494073800a2facb4a828e602b9eb91d60862109ca405e6b82ff3ac067802a21fc208f7b735b4c4061d45836b75ed15a3a441b0dc2a5e8c8342f0c90df9291fcb867c9d08ed54f9b7b40956f94827908f32f1c459ca002aae4822a4a16e791baf546b2f901ba747a60ad2d01640371e9a91edd95ac478b7c4dabb74c7eb0d4d2cc330f2f83b6de65637d0842fc31268be87ca503caf2bf165599cd08f0884e0abef38f60", @generic="b5a236b48daae231a5c1adf289487ca0608da88f8dd922a4e7195212a8b4f85533fe2fb4697be32777ee3b76d80b07d7c4714efc7e18a61db1ab838d91ab6962de49d91b5b4ad44472da8ce6f3ee766d57ec4fe8405c08069240c23fa9e536ce79e84ad4c5d9de3adfc36dc7a02e6297b1e636f08ff93b55eac11c55567fc946d09cdac853be3d4b5e9cae1f30d11ff6bdf65ea5cbe688f6b9610d32a49f1c05530ea9dd357d06adba86ccc2ec9a35c25330b320b3b2c4832bd65c1972", @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x3ff}]}, @nested={0xb3, 0x10d, 0x0, 0x1, [@generic="7a95219f6e5c3f6fb8c9dbcea1eadf44", @generic="4d334cc4f21e4533d82f30990d91ed8a7d1a34dae94cafdfb9e30c55b03e87de32f4c1e2f3200690aaeb88d1320e346435289b13b349b3c4a086d1c8370c160684115a4dcf7e5d293d2a6d4a892a4fe024c2b9703d1ca12742d5a30cd5d102e899f49ee6b219daa0c3fc4e155db00e148b9267d5401e1f3ac29b652e99bdbab3aab49eb68931fdc99644d65e25e7cb6641f53ae9ad7bf9bce0ed261a5ec9c0"]}, @nested={0x140, 0x67, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7fd2e2a85524124e8e04c38f94010dd6be144c526be2e3b2f766e3b2b70030c8dca345e2488c96c366ab14c3199e3ba900", @generic="1744f9b80b988c3ff943c950acff3cd100b48142977178b59430a6dfe2a3e1476b263963f574cc390f3bd20ca8654bc17b06a5266bdd0d0f24b9e78b5ff626e56509afae87813418be8a820fed7519c3881b7ff7afb6547f15717a848c54577ef50a45a5e22d383c4841a57af2caa9f88b27601bd1364b1c9386a41f4d8149c8e4be9b4db5859792fd109bbd1b2040f8e505388cd4441a27eef1b8e25e1d1999b1a9eb040c1ce166fcac3db53e74538fca2ca53f6e7fd184c1a7091387b937b14cd2a746461ff52f76803cb5619b4c", @nested={0x4, 0xfc}, @nested={0x4, 0xbf}, @typed={0x2b, 0x46, 0x0, 0x0, @str='/sys/fs/ext4/sda1/session_write_kbytes\x00'}]}, @generic="f8889c0b913062832da72844e2977d33bad6949a4fccd5aac5d1a506ebaf38a8454c51722de27c427fba3b4e05840bae77e7615a009655a5ca97fd967c67cd62e7d9deb5ea0982b65b1dddd5c7d4aa6ae9f961a0f6d03c10a4d9f83b782192afaddf29f16c2ce4d18d63ea21e18ffbe9abb5bfaed0504775c429e274d57b3bc929d3bebfafccb4f5a86ae0432726e68aa471b899e1307569ce746887d686b8a5c66146c4592ed48aaba9a6bf", @nested={0x8c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @u32=0x80000000}, @generic="54a286aa40feb26d6b508bec95a4945c7da53d8b0ccf1d37dc6ba704769331c2eb658b1f8c8617bcceddbdaccb2c5674541bf08c87dd7daffb89816437902621adaf6d32f4fbf96e38c24fe607544c9ba0a583204ff08ace8ff761cf244ec9854da092747dd1440f8ad16791", @typed={0xc, 0xb, 0x0, 0x0, @u64=0xb}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0xc4e, 0x3, 0xd333, 0xfffffffffffff78a, 0x7f, 0xf, 0xbb}}, @OVS_VPORT_ATTR_OPTIONS={0xc0, 0x4, 0x0, 0x1, [@typed={0xbc, 0xf4, 0x0, 0x0, @binary="79011f942be3a23c80c943aa93ee4d5a57c3c917a73c96900d3fb02f97e7282bc98e7ffb364f0f273a4b2a2bee7ab6d94927f05d2fc171e0904bd74be9da574402eaa331558086a9b1d74837da51c72d42c551d13fc6b526a4a50ff7a56e5777467bb4301f8594f62d4e7442ca1725c0d5b08cd75758ac599ab7a17156ba8263ee8316f0d06d064f111ff887ed39e697c8846e7dd490172baf5142e40d130dff2333ebbbb319726b35c3dbfe0f519a9ec0f22d64c26524f9"}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xed, 0x5, "5db86deb7ea0c15dac069e09bc767bac9539a658624a9995093fb6049c23e3b1ca6fa7b0e94dd9235820cba01f04a52bf3e8cc18bbb46bb99b119bba4c565939de601e4480c1904c82e5719bc74658674a52670af00d85b155457e74bcc10c1a078f7d0d50a777d4356697b93c58e1c5abbff56404c477ae10d2e2d0b5dcfc9ea256c4e8db6a179feee7527227cfcc0f409791c94d5b6dbf232eee44902e982cb074024070b923a08820649a2c189875f8e82081ab722a9ac1aaf1e808a33190f2e76943fe5c23edcc7a8cd7e1d90ee9053fe5ce8d19d27b67934ca2dec66d7546346a0655f54ebcd5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '\\#\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x2f7, 0x4, 0x0, 0x1, [@generic="49486e0201ac3f1b56162e6d423f5310a98ab0741a3fb940349c1be22167e011938d926a5a3b67b4c69e0afa5b72f3da2e1da434", @nested={0x2c, 0xae, 0x0, 0x1, [@nested={0x4, 0xca}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x15c}, @nested={0x4, 0xa5}, @nested={0x4, 0x126}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="dd92ea865bf6c81b3ed701c76351b7b84bc258e226f5f31e7090d3ac76c5ed986c9ee1ec598050172ab4deed6ec41863672e26dbf98d3695655537caa9c49f6e9d690b0833c6177431bb7c9af3cccd195eebf28c7cb04dc2a812f92dc734c42893c953479a1a221815077ecf01e9e058bb2fa209da2c1f3db046a222c983376254255109b90b98b7b27f0cc0e5d076776d4867d8f989c5ad74e45e10f1f8a2430929470599331ecded4466ffc323994c1a00f1ade3e79872dda58cec13197ee6e5", @typed={0x44, 0x106, 0x0, 0x0, @binary="83a39d51fc96ed5c696be2e5b206fae4c190e3c00abba6a2f448e121cc9084423c837853d5bdaf5a372c8ff65ac9e31f528e52863bcb2a6347932096dfb282f0"}, @generic="9f9e058deb73d66be54ed5fcc9e871f4a3a41d8ee5ea5823350882bd48a7be4d489a7f8eb04539f295cc7edb55178a8b36fa351c901fffe2c1c2f6eed8b3e3fecc0238b9a7c857e4ebdf1c22133067457683688465d0ce6d1b3c94ef7225ac3136fbe33a82836616712a6b9b7b76b83a943d8c0f1a11edcbca181e895dcf", @nested={0x7e, 0x130, 0x0, 0x1, [@typed={0xc, 0x152, 0x0, 0x0, @u64=0x4}, @generic="1e92507446d67b14d6505af07af1218dae6ec525468c355707dc502ad7c5ed4f179d8834bd9f26accde15255c7355ef8ce160ef78d634bb3fa74663e57a5e0290166c49b50b4014ea8af54694138eacab2ca23eb7b8281358962b3eefa25", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x121}, @typed={0x4, 0x1a}]}, @nested={0x90, 0x12c, 0x0, 0x1, [@generic="6662a85a8942c19564711ef6e43fc512425e5654a9a126525779081029c2aff1737305826ff08f984e1ee0752e3f3133fb8eda1d680f189ad5ea88e2f13065d87a0a0846411fdd9e8c8565d5ca23ad843913b23c04f11bfa0808a57afb06e8dcce2156859fea8dd66370057b732f1871fa26cb9fb2455f4cb05162fe23aa75925fe45815c625c0eb28260e38"]}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0xa0, 0xa, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @generic="4dfec34ae64b2f8c1bb82525f9b313e9fbd006165ca8cf777aff183014eee149a2582eec7dbbaf0c564bc01fcebce78f48d0a77667c386fb009b59dbe592b105a9c38c44e7743aee473e6a14e1978d", @generic="84dd6d55be46933aa664d4c6ccb795794cc42be311cc71913d90987804aa3f0c0dfd3275d98a77addb8c0a0e065975b3bb4e4c45e959a5368799756aaf2ba275b77f544e19"]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48441) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) 6.575044689s ago: executing program 1 (id=5976): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xa9b, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4e) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) move_pages$auto(r1, 0x100, &(0x7f0000000040)=&(0x7f0000000180)="18a9575bf8f75b00c0bb93329935fc4d666b1faae160257cc4a45d49ba8768cb235c2ca5a450029bdb2b6ff78335105f5ce23f0e8f6572eeddd645bb0b3e8e138e9f9a46281a6e5f25873a3efee842d8ac6a4673fc3c648a1a383470964959b6ef8951a6f6b92512c00da892c5c2be4a392d7b998e1e1df1d01ec1159a6c02f308d05dd72d3dc3d01addec7e1f7e4f7162b942ee527843ea", &(0x7f0000000080)=0x80000001, &(0x7f0000000240)=0x5, 0x200) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0xca4, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x0) 5.951549611s ago: executing program 2 (id=5979): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x2, 0x3, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 5.410988551s ago: executing program 1 (id=5982): listen$auto(0x3, 0x81) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x430b01, 0x0) r0 = socket(0x1d, 0x3, 0xbffffffe) getsockname$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xa75e69c17229b10b, 0x0) fgetxattr$auto(r1, &(0x7f00000000c0)='/s\x89s/devices/\x93S\x1b\xbb\x86virtual/et/ip6tnl0/statisuics/tx_comp+\x17\x00', &(0x7f0000001280)="08d014a84c4b3e884bb54ae712c723e353887b6289f41b0f730348f3613bec0af14a82bac0091fd21e39375d16a02b409a9123073609a2a0f917642386a6a9a89864e23cd1a0d2940c8ce1e4039914d7a9d3b65da8c5fa741180eadcb0205af702291d00000003000000000000", 0x8) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x440040, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001300)={@raw=0x80000000, "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"}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) 4.885588456s ago: executing program 2 (id=5984): r0 = socket(0xa, 0x1, 0x84) ioperm$auto(0x4, 0x4, 0x4000007) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2d) inotify_add_watch$auto(r0, &(0x7f0000000080)='./file0\x00', 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, r2, 0x9c, 0x0, r1, @relative_fd=r2, 0x80}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000118, 0x400, 0x9}]}) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x8, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x3]}, 0x0, 0x0) r5 = socket(0x2, 0x3, 0x2) setsockopt$auto_SO_ATTACH_FILTER(r5, 0x0, 0x1a, 0x0, 0x0) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0) ioctl$auto_EVIOCRMFF(r6, 0x40044581, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioperm$auto(0x8, 0xa, 0xeffffffa) 4.647830274s ago: executing program 1 (id=5986): socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r1 = socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1) 4.012650422s ago: executing program 4 (id=5990): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 7) 3.845521813s ago: executing program 4 (id=5991): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026ea95f173d8973e6a00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) 3.761411719s ago: executing program 4 (id=5992): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/ext4/sda1/session_write_kbytes\x00', 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x2, 0xffffffffffffffff, 0xee01, 0x3, 0x10001, 0x9, 0x6}, &(0x7f0000000100)=0xfa, &(0x7f0000000140)=0xa5, 0x0, 0x0, 0x4, 0x2, 0x9, 0x6, 0x3, 0x2, @inferred, @raw=0x2}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d80), r4) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r5 = getpid() sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xab8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_UPCALL_STATS={0x500, 0xa, 0x0, 0x1, [@nested={0x1bc, 0x122, 0x0, 0x1, [@generic="efd884e430cb53e1c4571f8fb680689684b869cf8f0e03f81d81bd66f62c09c50849f7f39ac21214b4a18e6e018f5999d857306fbb6491daf63c2f139a47b567f8c9cc29de70280572d71e6494073800a2facb4a828e602b9eb91d60862109ca405e6b82ff3ac067802a21fc208f7b735b4c4061d45836b75ed15a3a441b0dc2a5e8c8342f0c90df9291fcb867c9d08ed54f9b7b40956f94827908f32f1c459ca002aae4822a4a16e791baf546b2f901ba747a60ad2d01640371e9a91edd95ac478b7c4dabb74c7eb0d4d2cc330f2f83b6de65637d0842fc31268be87ca503caf2bf165599cd08f0884e0abef38f60", @generic="b5a236b48daae231a5c1adf289487ca0608da88f8dd922a4e7195212a8b4f85533fe2fb4697be32777ee3b76d80b07d7c4714efc7e18a61db1ab838d91ab6962de49d91b5b4ad44472da8ce6f3ee766d57ec4fe8405c08069240c23fa9e536ce79e84ad4c5d9de3adfc36dc7a02e6297b1e636f08ff93b55eac11c55567fc946d09cdac853be3d4b5e9cae1f30d11ff6bdf65ea5cbe688f6b9610d32a49f1c05530ea9dd357d06adba86ccc2ec9a35c25330b320b3b2c4832bd65c1972", @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x3ff}]}, @nested={0xb3, 0x10d, 0x0, 0x1, [@generic="7a95219f6e5c3f6fb8c9dbcea1eadf44", @generic="4d334cc4f21e4533d82f30990d91ed8a7d1a34dae94cafdfb9e30c55b03e87de32f4c1e2f3200690aaeb88d1320e346435289b13b349b3c4a086d1c8370c160684115a4dcf7e5d293d2a6d4a892a4fe024c2b9703d1ca12742d5a30cd5d102e899f49ee6b219daa0c3fc4e155db00e148b9267d5401e1f3ac29b652e99bdbab3aab49eb68931fdc99644d65e25e7cb6641f53ae9ad7bf9bce0ed261a5ec9c0"]}, @nested={0x140, 0x67, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7fd2e2a85524124e8e04c38f94010dd6be144c526be2e3b2f766e3b2b70030c8dca345e2488c96c366ab14c3199e3ba900", @generic="1744f9b80b988c3ff943c950acff3cd100b48142977178b59430a6dfe2a3e1476b263963f574cc390f3bd20ca8654bc17b06a5266bdd0d0f24b9e78b5ff626e56509afae87813418be8a820fed7519c3881b7ff7afb6547f15717a848c54577ef50a45a5e22d383c4841a57af2caa9f88b27601bd1364b1c9386a41f4d8149c8e4be9b4db5859792fd109bbd1b2040f8e505388cd4441a27eef1b8e25e1d1999b1a9eb040c1ce166fcac3db53e74538fca2ca53f6e7fd184c1a7091387b937b14cd2a746461ff52f76803cb5619b4c", @nested={0x4, 0xfc}, @nested={0x4, 0xbf}, @typed={0x2b, 0x46, 0x0, 0x0, @str='/sys/fs/ext4/sda1/session_write_kbytes\x00'}]}, @generic="f8889c0b913062832da72844e2977d33bad6949a4fccd5aac5d1a506ebaf38a8454c51722de27c427fba3b4e05840bae77e7615a009655a5ca97fd967c67cd62e7d9deb5ea0982b65b1dddd5c7d4aa6ae9f961a0f6d03c10a4d9f83b782192afaddf29f16c2ce4d18d63ea21e18ffbe9abb5bfaed0504775c429e274d57b3bc929d3bebfafccb4f5a86ae0432726e68aa471b899e1307569ce746887d686b8a5c66146c4592ed48aaba9a6bf", @nested={0x8c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @u32=0x80000000}, @generic="54a286aa40feb26d6b508bec95a4945c7da53d8b0ccf1d37dc6ba704769331c2eb658b1f8c8617bcceddbdaccb2c5674541bf08c87dd7daffb89816437902621adaf6d32f4fbf96e38c24fe607544c9ba0a583204ff08ace8ff761cf244ec9854da092747dd1440f8ad16791", @typed={0xc, 0xb, 0x0, 0x0, @u64=0xb}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0xc4e, 0x3, 0xd333, 0xfffffffffffff78a, 0x7f, 0xf, 0xbb}}, @OVS_VPORT_ATTR_OPTIONS={0xc0, 0x4, 0x0, 0x1, [@typed={0xbc, 0xf4, 0x0, 0x0, @binary="79011f942be3a23c80c943aa93ee4d5a57c3c917a73c96900d3fb02f97e7282bc98e7ffb364f0f273a4b2a2bee7ab6d94927f05d2fc171e0904bd74be9da574402eaa331558086a9b1d74837da51c72d42c551d13fc6b526a4a50ff7a56e5777467bb4301f8594f62d4e7442ca1725c0d5b08cd75758ac599ab7a17156ba8263ee8316f0d06d064f111ff887ed39e697c8846e7dd490172baf5142e40d130dff2333ebbbb319726b35c3dbfe0f519a9ec0f22d64c26524f9"}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xed, 0x5, "5db86deb7ea0c15dac069e09bc767bac9539a658624a9995093fb6049c23e3b1ca6fa7b0e94dd9235820cba01f04a52bf3e8cc18bbb46bb99b119bba4c565939de601e4480c1904c82e5719bc74658674a52670af00d85b155457e74bcc10c1a078f7d0d50a777d4356697b93c58e1c5abbff56404c477ae10d2e2d0b5dcfc9ea256c4e8db6a179feee7527227cfcc0f409791c94d5b6dbf232eee44902e982cb074024070b923a08820649a2c189875f8e82081ab722a9ac1aaf1e808a33190f2e76943fe5c23edcc7a8cd7e1d90ee9053fe5ce8d19d27b67934ca2dec66d7546346a0655f54ebcd5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '\\#\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x2f7, 0x4, 0x0, 0x1, [@generic="49486e0201ac3f1b56162e6d423f5310a98ab0741a3fb940349c1be22167e011938d926a5a3b67b4c69e0afa5b72f3da2e1da434", @nested={0x2c, 0xae, 0x0, 0x1, [@nested={0x4, 0xca}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x15c}, @nested={0x4, 0xa5}, @nested={0x4, 0x126}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="dd92ea865bf6c81b3ed701c76351b7b84bc258e226f5f31e7090d3ac76c5ed986c9ee1ec598050172ab4deed6ec41863672e26dbf98d3695655537caa9c49f6e9d690b0833c6177431bb7c9af3cccd195eebf28c7cb04dc2a812f92dc734c42893c953479a1a221815077ecf01e9e058bb2fa209da2c1f3db046a222c983376254255109b90b98b7b27f0cc0e5d076776d4867d8f989c5ad74e45e10f1f8a2430929470599331ecded4466ffc323994c1a00f1ade3e79872dda58cec13197ee6e5", @typed={0x44, 0x106, 0x0, 0x0, @binary="83a39d51fc96ed5c696be2e5b206fae4c190e3c00abba6a2f448e121cc9084423c837853d5bdaf5a372c8ff65ac9e31f528e52863bcb2a6347932096dfb282f0"}, @generic="9f9e058deb73d66be54ed5fcc9e871f4a3a41d8ee5ea5823350882bd48a7be4d489a7f8eb04539f295cc7edb55178a8b36fa351c901fffe2c1c2f6eed8b3e3fecc0238b9a7c857e4ebdf1c22133067457683688465d0ce6d1b3c94ef7225ac3136fbe33a82836616712a6b9b7b76b83a943d8c0f1a11edcbca181e895dcf", @nested={0x7e, 0x130, 0x0, 0x1, [@typed={0xc, 0x152, 0x0, 0x0, @u64=0x4}, @generic="1e92507446d67b14d6505af07af1218dae6ec525468c355707dc502ad7c5ed4f179d8834bd9f26accde15255c7355ef8ce160ef78d634bb3fa74663e57a5e0290166c49b50b4014ea8af54694138eacab2ca23eb7b8281358962b3eefa25", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x121}, @typed={0x4, 0x1a}]}, @nested={0x90, 0x12c, 0x0, 0x1, [@generic="6662a85a8942c19564711ef6e43fc512425e5654a9a126525779081029c2aff1737305826ff08f984e1ee0752e3f3133fb8eda1d680f189ad5ea88e2f13065d87a0a0846411fdd9e8c8565d5ca23ad843913b23c04f11bfa0808a57afb06e8dcce2156859fea8dd66370057b732f1871fa26cb9fb2455f4cb05162fe23aa75925fe45815c625c0eb28260e38"]}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0xa0, 0xa, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @generic="4dfec34ae64b2f8c1bb82525f9b313e9fbd006165ca8cf777aff183014eee149a2582eec7dbbaf0c564bc01fcebce78f48d0a77667c386fb009b59dbe592b105a9c38c44e7743aee473e6a14e1978d", @generic="84dd6d55be46933aa664d4c6ccb795794cc42be311cc71913d90987804aa3f0c0dfd3275d98a77addb8c0a0e065975b3bb4e4c45e959a5368799756aaf2ba275b77f544e19"]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48441) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) 3.696066131s ago: executing program 1 (id=5993): mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000) timer_settime$auto(0x0, 0x100, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7}) mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000) r1 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x5420, 0x38) 3.574147138s ago: executing program 4 (id=5994): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram4\x00', 0x26040, 0x0) (rerun: 32) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf810000000004e8ffffff000000aeed34830d00", 0x3ff, 0xfffffff7, 0xffc, 0x400004, 0x200000000040000d}) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4611, 0x0) 3.46594202s ago: executing program 1 (id=5995): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x200000, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, &(0x7f00000001c0)=0x9) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x200, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\t\x00\x00\x00\x00\x00\x00\x00\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4) socket(0x2b, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2000000002003f2, 0x15) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, r1, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory15/valid_zones\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x40c9) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(r1, r2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 2.754433345s ago: executing program 2 (id=5996): read$auto(0xffffffffffffffff, &(0x7f0000000140)='/sys/devZces/platform/vhci_hcd\x00\x93S\x1asb26/descriptors\x00', 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0xc0104d08, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sysfs$auto(0x2, 0x7, 0x0) r6 = fsopen$auto(0x0, 0x1) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x2, 0x9faf}, "654c6dbc7a4d3098b281ed4f8207ed72d7e40000000000ebff0400000600"}) readv$auto(r7, &(0x7f0000000a80)={0x0, 0x100000ffff}, 0x1) fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x1, 0x0) getsockopt$auto(r8, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) pipe$auto(0x0) 2.710397671s ago: executing program 4 (id=5997): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1) mmap$auto(0x10000000001, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20002, 0x1ff, 0xeb1, r0, 0x60fb) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(r2, 0x4008af22, r1) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) socket(0x2, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) 2.706331218s ago: executing program 3 (id=5998): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x48041, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) 2.188595349s ago: executing program 3 (id=5999): socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) (async) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0) 2.049497054s ago: executing program 3 (id=6000): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\xff\xff\xff\xfc'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 2.035717824s ago: executing program 3 (id=6001): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 8) 1.554601439s ago: executing program 2 (id=6002): socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r1 = socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1) 625.277834ms ago: executing program 3 (id=6003): mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000) timer_settime$auto(0x0, 0x100, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7}) mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000) r1 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x5420, 0x38) 567.015488ms ago: executing program 2 (id=6004): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x2, 0x5, 0x13, 0x9) (async) r2 = socket(0xa, 0x801, 0x84) setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async) gettid() (async) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) 419.217668ms ago: executing program 3 (id=6005): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81) r2 = socket(0x11, 0x3, 0x9) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xee01, 0x0, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20) r6 = open_tree$auto(r5, 0x0, 0x1001) statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0) ioctl$auto_TCFLSH2(r7, 0x5408, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r8, 0x80045438, r8) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) 305.525752ms ago: executing program 2 (id=6006): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = socket(0x25, 0x1, 0x9) connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) 0s ago: executing program 4 (id=6007): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x2, 0x3, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): 8] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1555.679004][T28528] do_splice_direct+0x174/0x240 [ 1555.679032][T28528] ? __pfx_do_splice_direct+0x10/0x10 [ 1555.679055][T28528] ? common_file_perm+0x1ab/0x4f0 [ 1555.679079][T28528] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1555.679124][T28528] ? rw_verify_area+0xce/0x6d0 [ 1555.679162][T28528] do_sendfile+0xadc/0xe20 [ 1555.679206][T28528] ? __pfx_do_sendfile+0x10/0x10 [ 1555.679244][T28528] ? __pfx_load_fixmap_gdt+0x10/0x10 [ 1555.679276][T28528] __x64_sys_sendfile64+0x1d8/0x220 [ 1555.679303][T28528] ? xfd_validate_state+0x129/0x190 [ 1555.679331][T28528] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1555.679368][T28528] do_syscall_64+0x106/0xf80 [ 1555.679404][T28528] ? clear_bhb_loop+0x40/0x90 [ 1555.679433][T28528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.679457][T28528] RIP: 0033:0x7f9c5539bf79 [ 1555.679476][T28528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.679500][T28528] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1555.679524][T28528] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1555.679540][T28528] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1555.679554][T28528] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.679569][T28528] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1555.679583][T28528] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1555.679613][T28528] [ 1557.394818][T28555] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1557.426688][T28562] netlink: 93 bytes leftover after parsing attributes in process `syz.1.5638'. [ 1557.451385][T28562] netlink: 93 bytes leftover after parsing attributes in process `syz.1.5638'. [ 1557.452318][T28555] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1557.535805][T28558] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1558.183562][T28576] FAULT_INJECTION: forcing a failure. [ 1558.183562][T28576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.266462][T28576] CPU: 0 UID: 0 PID: 28576 Comm: syz.3.5641 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1558.266503][T28576] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1558.266513][T28576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1558.266531][T28576] Call Trace: [ 1558.266539][T28576] [ 1558.266548][T28576] dump_stack_lvl+0x100/0x190 [ 1558.266585][T28576] should_fail_ex.cold+0x5/0xa [ 1558.266611][T28576] _copy_to_iter+0x1f3/0x1720 [ 1558.266641][T28576] ? __pfx__copy_to_iter+0x10/0x10 [ 1558.266663][T28576] ? kasan_quarantine_put+0x104/0x240 [ 1558.266686][T28576] ? lockdep_hardirqs_on+0x78/0x100 [ 1558.266726][T28576] ? kmem_cache_free+0x143/0x720 [ 1558.266761][T28576] ? skb_free_head+0x1cb/0x220 [ 1558.266782][T28576] ? put_netmem+0x299/0x320 [ 1558.266812][T28576] simple_copy_to_iter+0x46/0x90 [ 1558.266848][T28576] __skb_datagram_iter+0x5c8/0x900 [ 1558.266883][T28576] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1558.266930][T28576] skb_copy_datagram_iter+0x9f/0x210 [ 1558.266969][T28576] tcp_recvmsg_locked+0x1b36/0x28e0 [ 1558.267018][T28576] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1558.267059][T28576] ? __local_bh_enable_ip+0x9e/0x120 [ 1558.267099][T28576] tcp_recvmsg+0x138/0x630 [ 1558.267136][T28576] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1558.267183][T28576] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1558.267216][T28576] inet_recvmsg+0x129/0x6a0 [ 1558.267251][T28576] ? __pfx_inet_recvmsg+0x10/0x10 [ 1558.267286][T28576] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1558.267326][T28576] sock_recvmsg+0x1b2/0x250 [ 1558.267361][T28576] __sys_recvfrom+0x200/0x300 [ 1558.267386][T28576] ? 0xffffffff81000000 [ 1558.267404][T28576] ? __pfx___sys_recvfrom+0x10/0x10 [ 1558.267452][T28576] ? ksys_write+0x1ac/0x250 [ 1558.267474][T28576] ? __pfx_ksys_write+0x10/0x10 [ 1558.267501][T28576] __x64_sys_recvfrom+0xe0/0x1c0 [ 1558.267525][T28576] ? do_syscall_64+0x95/0xf80 [ 1558.267560][T28576] ? lockdep_hardirqs_on+0x78/0x100 [ 1558.267596][T28576] do_syscall_64+0x106/0xf80 [ 1558.267630][T28576] ? clear_bhb_loop+0x40/0x90 [ 1558.267658][T28576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.267683][T28576] RIP: 0033:0x7f9c5539bf79 [ 1558.267701][T28576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.267725][T28576] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1558.267748][T28576] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1558.267764][T28576] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1558.267779][T28576] RBP: 00007f9c56267090 R08: 0000000000000000 R09: ffffffff81000000 [ 1558.267801][T28576] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1558.267816][T28576] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1558.267838][T28576] ? 0xffffffff81000000 [ 1558.267862][T28576] [ 1558.619653][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1558.750285][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5645'. [ 1559.105010][T28596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5647'. [ 1559.898586][T28610] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1560.087764][T28608] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1560.259766][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 1560.340072][T28617] FAULT_INJECTION: forcing a failure. [ 1560.340072][T28617] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.340113][T28617] CPU: 0 UID: 0 PID: 28617 Comm: syz.2.5654 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1560.340149][T28617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1560.340158][T28617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1560.340173][T28617] Call Trace: [ 1560.340181][T28617] [ 1560.340190][T28617] dump_stack_lvl+0x100/0x190 [ 1560.340226][T28617] should_fail_ex.cold+0x5/0xa [ 1560.340266][T28617] ? sk_filter_trim_cap+0x571/0xde0 [ 1560.340300][T28617] should_failslab+0xc2/0x120 [ 1560.340327][T28617] kmem_cache_alloc_noprof+0x83/0x780 [ 1560.340352][T28617] ? skb_clone+0x190/0x400 [ 1560.340382][T28617] ? skb_clone+0x190/0x400 [ 1560.340405][T28617] skb_clone+0x190/0x400 [ 1560.340431][T28617] netlink_deliver_tap+0xaed/0xcc0 [ 1560.340463][T28617] netlink_dump+0xa60/0xd30 [ 1560.340491][T28617] ? __pfx_netlink_dump+0x10/0x10 [ 1560.340522][T28617] ? simple_copy_to_iter+0x4e/0x90 [ 1560.340593][T28617] netlink_recvmsg+0x7dc/0xa90 [ 1560.340621][T28617] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1560.340674][T28617] ____sys_recvmsg+0x5f7/0x6b0 [ 1560.340711][T28617] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1560.340753][T28617] ? __lock_acquire+0x4a5/0x2630 [ 1560.340781][T28617] ___sys_recvmsg+0x16a/0x1a0 [ 1560.340815][T28617] ? __pfx____sys_recvmsg+0x10/0x10 [ 1560.340864][T28617] ? __pfx___might_resched+0x10/0x10 [ 1560.340897][T28617] do_recvmmsg+0x301/0x760 [ 1560.340939][T28617] ? __pfx_do_recvmmsg+0x10/0x10 [ 1560.340971][T28617] ? ksys_write+0x190/0x250 [ 1560.340991][T28617] ? ksys_write+0x190/0x250 [ 1560.341017][T28617] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1560.341062][T28617] ? __fget_files+0x21f/0x3d0 [ 1560.341091][T28617] __x64_sys_recvmmsg+0x22a/0x280 [ 1560.341119][T28617] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1560.341154][T28617] do_syscall_64+0x106/0xf80 [ 1560.341188][T28617] ? clear_bhb_loop+0x40/0x90 [ 1560.341215][T28617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.341238][T28617] RIP: 0033:0x7fec8ed9bf79 [ 1560.341255][T28617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.341278][T28617] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1560.341300][T28617] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1560.341316][T28617] RDX: 000000000000010a RSI: 0000200000000180 RDI: 0000000000000003 [ 1560.341329][T28617] RBP: 00007fec8fcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.341343][T28617] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 1560.341356][T28617] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1560.341385][T28617] [ 1561.142666][T28631] FAULT_INJECTION: forcing a failure. [ 1561.142666][T28631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.142705][T28631] CPU: 0 UID: 0 PID: 28631 Comm: syz.2.5658 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1561.142740][T28631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1561.142749][T28631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1561.142764][T28631] Call Trace: [ 1561.142771][T28631] [ 1561.142780][T28631] dump_stack_lvl+0x100/0x190 [ 1561.142815][T28631] should_fail_ex.cold+0x5/0xa [ 1561.142840][T28631] _copy_from_user+0x2e/0xd0 [ 1561.142864][T28631] load_msg+0x253/0x4a0 [ 1561.142896][T28631] do_mq_timedsend+0x3ce/0xc40 [ 1561.142931][T28631] ? __pfx_do_mq_timedsend+0x10/0x10 [ 1561.142964][T28631] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1561.143002][T28631] ? __fget_files+0x215/0x3d0 [ 1561.143026][T28631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1561.143066][T28631] ? __fget_files+0x21f/0x3d0 [ 1561.143094][T28631] __x64_sys_mq_timedsend+0x1cd/0x260 [ 1561.143130][T28631] ? ksys_write+0x1ac/0x250 [ 1561.143151][T28631] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 1561.143195][T28631] do_syscall_64+0x106/0xf80 [ 1561.143229][T28631] ? clear_bhb_loop+0x40/0x90 [ 1561.143257][T28631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.143280][T28631] RIP: 0033:0x7fec8ed9bf79 [ 1561.143298][T28631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.143321][T28631] RSP: 002b:00007fec8fc93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1561.143344][T28631] RAX: ffffffffffffffda RBX: 00007fec8f016090 RCX: 00007fec8ed9bf79 [ 1561.143359][T28631] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1561.143374][T28631] RBP: 00007fec8fc93090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.143387][T28631] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1561.143401][T28631] R13: 00007fec8f016128 R14: 00007fec8f016090 R15: 00007ffd70a99ff8 [ 1561.143430][T28631] [ 1561.608734][T28635] FAULT_INJECTION: forcing a failure. [ 1561.608734][T28635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.608811][T28635] CPU: 0 UID: 0 PID: 28635 Comm: syz.4.5659 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1561.608847][T28635] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1561.608856][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1561.608871][T28635] Call Trace: [ 1561.608879][T28635] [ 1561.608888][T28635] dump_stack_lvl+0x100/0x190 [ 1561.608924][T28635] should_fail_ex.cold+0x5/0xa [ 1561.608950][T28635] _copy_to_iter+0x1f3/0x1720 [ 1561.608979][T28635] ? __pfx__copy_to_iter+0x10/0x10 [ 1561.609001][T28635] ? kasan_quarantine_put+0x104/0x240 [ 1561.609025][T28635] ? lockdep_hardirqs_on+0x78/0x100 [ 1561.609064][T28635] ? kmem_cache_free+0x143/0x720 [ 1561.609104][T28635] ? skb_free_head+0x1cb/0x220 [ 1561.609125][T28635] ? put_netmem+0x299/0x320 [ 1561.609149][T28635] simple_copy_to_iter+0x46/0x90 [ 1561.609185][T28635] __skb_datagram_iter+0x5c8/0x900 [ 1561.609221][T28635] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1561.609279][T28635] skb_copy_datagram_iter+0x9f/0x210 [ 1561.609317][T28635] tcp_recvmsg_locked+0x1b36/0x28e0 [ 1561.609363][T28635] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1561.609403][T28635] ? __local_bh_enable_ip+0x9e/0x120 [ 1561.609448][T28635] tcp_recvmsg+0x138/0x630 [ 1561.609483][T28635] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1561.609529][T28635] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1561.609561][T28635] inet_recvmsg+0x129/0x6a0 [ 1561.609595][T28635] ? __pfx_inet_recvmsg+0x10/0x10 [ 1561.609628][T28635] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1561.609667][T28635] sock_recvmsg+0x1b2/0x250 [ 1561.609699][T28635] __sys_recvfrom+0x200/0x300 [ 1561.609722][T28635] ? 0xffffffff81000000 [ 1561.609739][T28635] ? __pfx___sys_recvfrom+0x10/0x10 [ 1561.609798][T28635] ? ksys_write+0x1ac/0x250 [ 1561.609820][T28635] ? __pfx_ksys_write+0x10/0x10 [ 1561.609863][T28635] __x64_sys_recvfrom+0xe0/0x1c0 [ 1561.609887][T28635] ? do_syscall_64+0x95/0xf80 [ 1561.609921][T28635] ? lockdep_hardirqs_on+0x78/0x100 [ 1561.609955][T28635] do_syscall_64+0x106/0xf80 [ 1561.609989][T28635] ? clear_bhb_loop+0x40/0x90 [ 1561.610017][T28635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.610041][T28635] RIP: 0033:0x7fb563f9bf79 [ 1561.610058][T28635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.610081][T28635] RSP: 002b:00007fb5621f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1561.610104][T28635] RAX: ffffffffffffffda RBX: 00007fb564216090 RCX: 00007fb563f9bf79 [ 1561.610120][T28635] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1561.610134][T28635] RBP: 00007fb5621f6090 R08: 0000000000000000 R09: ffffffff81000000 [ 1561.610150][T28635] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1561.610164][T28635] R13: 00007fb564216128 R14: 00007fb564216090 R15: 00007ffdc747a488 [ 1561.610184][T28635] ? 0xffffffff81000000 [ 1561.610208][T28635] [ 1561.846668][T28639] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1562.163889][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1563.876061][T28672] FAULT_INJECTION: forcing a failure. [ 1563.876061][T28672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.913374][T28672] CPU: 0 UID: 0 PID: 28672 Comm: syz.1.5670 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1563.913413][T28672] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1563.913422][T28672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1563.913437][T28672] Call Trace: [ 1563.913444][T28672] [ 1563.913453][T28672] dump_stack_lvl+0x100/0x190 [ 1563.913495][T28672] should_fail_ex.cold+0x5/0xa [ 1563.913521][T28672] _copy_to_iter+0x1f3/0x1720 [ 1563.913549][T28672] ? __pfx__copy_to_iter+0x10/0x10 [ 1563.913571][T28672] ? kasan_quarantine_put+0x104/0x240 [ 1563.913593][T28672] ? lockdep_hardirqs_on+0x78/0x100 [ 1563.913630][T28672] ? kmem_cache_free+0x143/0x720 [ 1563.913663][T28672] ? skb_free_head+0x1cb/0x220 [ 1563.913683][T28672] ? put_netmem+0x299/0x320 [ 1563.913706][T28672] simple_copy_to_iter+0x46/0x90 [ 1563.913740][T28672] __skb_datagram_iter+0x5c8/0x900 [ 1563.913774][T28672] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1563.913817][T28672] skb_copy_datagram_iter+0x9f/0x210 [ 1563.913854][T28672] tcp_recvmsg_locked+0x1b36/0x28e0 [ 1563.913900][T28672] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1563.913939][T28672] ? __local_bh_enable_ip+0x9e/0x120 [ 1563.913977][T28672] tcp_recvmsg+0x138/0x630 [ 1563.914011][T28672] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1563.914056][T28672] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1563.914086][T28672] inet_recvmsg+0x129/0x6a0 [ 1563.914121][T28672] ? __pfx_inet_recvmsg+0x10/0x10 [ 1563.914172][T28672] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1563.914227][T28672] sock_recvmsg+0x1b2/0x250 [ 1563.914264][T28672] __sys_recvfrom+0x200/0x300 [ 1563.914288][T28672] ? 0xffffffff81000000 [ 1563.914306][T28672] ? __pfx___sys_recvfrom+0x10/0x10 [ 1563.914358][T28672] ? ksys_write+0x1ac/0x250 [ 1563.914380][T28672] ? __pfx_ksys_write+0x10/0x10 [ 1563.914406][T28672] __x64_sys_recvfrom+0xe0/0x1c0 [ 1563.914430][T28672] ? do_syscall_64+0x95/0xf80 [ 1563.914464][T28672] ? lockdep_hardirqs_on+0x78/0x100 [ 1563.914504][T28672] do_syscall_64+0x106/0xf80 [ 1563.914538][T28672] ? clear_bhb_loop+0x40/0x90 [ 1563.914566][T28672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.914589][T28672] RIP: 0033:0x7f9cf799bf79 [ 1563.914607][T28672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.914631][T28672] RSP: 002b:00007f9cf889b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1563.914654][T28672] RAX: ffffffffffffffda RBX: 00007f9cf7c15fa0 RCX: 00007f9cf799bf79 [ 1563.914669][T28672] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1563.914684][T28672] RBP: 00007f9cf889b090 R08: 0000000000000000 R09: ffffffff81000000 [ 1563.914699][T28672] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1563.914713][T28672] R13: 00007f9cf7c16038 R14: 00007f9cf7c15fa0 R15: 00007ffc141a43e8 [ 1563.914735][T28672] ? 0xffffffff81000000 [ 1563.914759][T28672] [ 1564.554772][T28689] FAULT_INJECTION: forcing a failure. [ 1564.554772][T28689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.583381][T28689] CPU: 0 UID: 0 PID: 28689 Comm: syz.2.5672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1564.583426][T28689] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1564.583435][T28689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1564.583448][T28689] Call Trace: [ 1564.583455][T28689] [ 1564.583464][T28689] dump_stack_lvl+0x100/0x190 [ 1564.583497][T28689] should_fail_ex.cold+0x5/0xa [ 1564.583540][T28689] _copy_from_user+0x2e/0xd0 [ 1564.583564][T28689] load_msg+0x253/0x4a0 [ 1564.583596][T28689] do_mq_timedsend+0x3ce/0xc40 [ 1564.583644][T28689] ? __pfx_do_mq_timedsend+0x10/0x10 [ 1564.583674][T28689] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1564.583708][T28689] ? __fget_files+0x215/0x3d0 [ 1564.583729][T28689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.583766][T28689] ? __fget_files+0x21f/0x3d0 [ 1564.583792][T28689] __x64_sys_mq_timedsend+0x1cd/0x260 [ 1564.583854][T28689] ? ksys_write+0x1ac/0x250 [ 1564.583875][T28689] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 1564.583917][T28689] do_syscall_64+0x106/0xf80 [ 1564.583950][T28689] ? clear_bhb_loop+0x40/0x90 [ 1564.583977][T28689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.583999][T28689] RIP: 0033:0x7fec8ed9bf79 [ 1564.584017][T28689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.584039][T28689] RSP: 002b:00007fec8fc93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1564.584061][T28689] RAX: ffffffffffffffda RBX: 00007fec8f016090 RCX: 00007fec8ed9bf79 [ 1564.584077][T28689] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1564.584090][T28689] RBP: 00007fec8fc93090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.584104][T28689] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1564.584118][T28689] R13: 00007fec8f016128 R14: 00007fec8f016090 R15: 00007ffd70a99ff8 [ 1564.584147][T28689] [ 1565.068111][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1566.080644][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1566.235863][T28714] netlink: 'syz.4.5680': attribute type 5 has an invalid length. [ 1566.413485][T28729] FAULT_INJECTION: forcing a failure. [ 1566.413485][T28729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.473208][T28729] CPU: 0 UID: 0 PID: 28729 Comm: syz.1.5684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1566.473248][T28729] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1566.473258][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1566.473272][T28729] Call Trace: [ 1566.473281][T28729] [ 1566.473290][T28729] dump_stack_lvl+0x100/0x190 [ 1566.473326][T28729] should_fail_ex.cold+0x5/0xa [ 1566.473352][T28729] _copy_to_user+0x32/0xd0 [ 1566.473377][T28729] simple_read_from_buffer+0xcb/0x170 [ 1566.473416][T28729] proc_fail_nth_read+0x1af/0x230 [ 1566.473442][T28729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.473468][T28729] ? rw_verify_area+0xce/0x6d0 [ 1566.473501][T28729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.473525][T28729] vfs_read+0x1e4/0xb30 [ 1566.473549][T28729] ? __pfx_vfs_read+0x10/0x10 [ 1566.473569][T28729] ? __fget_files+0x215/0x3d0 [ 1566.473596][T28729] ? __fget_files+0x21f/0x3d0 [ 1566.473625][T28729] ksys_read+0x12a/0x250 [ 1566.473646][T28729] ? __pfx_ksys_read+0x10/0x10 [ 1566.473694][T28729] do_syscall_64+0x106/0xf80 [ 1566.473729][T28729] ? clear_bhb_loop+0x40/0x90 [ 1566.473758][T28729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.473781][T28729] RIP: 0033:0x7f9cf795c84e [ 1566.473799][T28729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1566.473822][T28729] RSP: 002b:00007f9cf8879fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1566.473850][T28729] RAX: ffffffffffffffda RBX: 00007f9cf887a6c0 RCX: 00007f9cf795c84e [ 1566.473866][T28729] RDX: 000000000000000f RSI: 00007f9cf887a0a0 RDI: 000000000000000a [ 1566.473881][T28729] RBP: 00007f9cf887a090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.473895][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.473909][T28729] R13: 00007f9cf7c16128 R14: 00007f9cf7c16090 R15: 00007ffc141a43e8 [ 1566.473946][T28729] [ 1567.706493][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1568.079309][T28752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1568.290510][T28759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5694'. [ 1568.874969][T28768] can: request_module (can-proto-4) failed. [ 1569.079596][T28781] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1569.146750][T28779] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1569.154016][T28781] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1569.444803][T28796] random: crng reseeded on system resumption [ 1570.196256][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1571.185043][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1572.109929][T28832] Invalid ELF header magic: != ELF [ 1572.362787][T28833] device-mapper: ioctl: Invalid ioctl structure: uuid ? [ 1572.362787][T28833] , name , dev 3000000000 [ 1574.865495][T28844] NFSD: Failed to start, no listeners configured. [ 1574.942979][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1575.054089][T28859] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1575.134133][T28855] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1575.140097][T28859] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1575.222741][T21358] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1575.564827][T28863] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5719'. [ 1576.023791][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'. [ 1577.196695][T28903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 1577.652071][T28913] FAULT_INJECTION: forcing a failure. [ 1577.652071][T28913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1577.717288][T28913] CPU: 0 UID: 0 PID: 28913 Comm: syz.4.5730 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1577.717331][T28913] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1577.717341][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1577.717356][T28913] Call Trace: [ 1577.717364][T28913] [ 1577.717374][T28913] dump_stack_lvl+0x100/0x190 [ 1577.717412][T28913] should_fail_ex.cold+0x5/0xa [ 1577.717435][T28913] ? prepare_alloc_pages+0x16d/0x5f0 [ 1577.717470][T28913] should_fail_alloc_page+0xeb/0x140 [ 1577.717501][T28913] prepare_alloc_pages+0x1f0/0x5f0 [ 1577.717538][T28913] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1577.717581][T28913] ? stack_trace_save+0x8e/0xc0 [ 1577.717614][T28913] ? __pfx_stack_trace_save+0x10/0x10 [ 1577.717648][T28913] ? stack_depot_save_flags+0x27/0x9d0 [ 1577.717678][T28913] ? __lock_acquire+0x4a5/0x2630 [ 1577.717704][T28913] ? kasan_save_stack+0x3f/0x50 [ 1577.717729][T28913] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1577.717769][T28913] ? copy_time_ns+0xf6/0x800 [ 1577.717802][T28913] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1577.717838][T28913] ? __x64_sys_unshare+0x31/0x40 [ 1577.717872][T28913] ? do_syscall_64+0x106/0xf80 [ 1577.717909][T28913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.717947][T28913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1577.717981][T28913] ? policy_nodemask+0xed/0x4f0 [ 1577.718013][T28913] alloc_pages_mpol+0x1fb/0x550 [ 1577.718044][T28913] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1577.718080][T28913] alloc_pages_noprof+0x131/0x390 [ 1577.718112][T28913] copy_time_ns+0x11a/0x800 [ 1577.718143][T28913] ? copy_cgroup_ns+0x71/0x970 [ 1577.718182][T28913] create_new_namespaces+0x48a/0xac0 [ 1577.718224][T28913] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1577.718264][T28913] ksys_unshare+0x455/0xab0 [ 1577.718294][T28913] ? __pfx_ksys_unshare+0x10/0x10 [ 1577.718320][T28913] ? xfd_validate_state+0x129/0x190 [ 1577.718358][T28913] __x64_sys_unshare+0x31/0x40 [ 1577.718384][T28913] do_syscall_64+0x106/0xf80 [ 1577.718420][T28913] ? clear_bhb_loop+0x40/0x90 [ 1577.718450][T28913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.718475][T28913] RIP: 0033:0x7fb563f9bf79 [ 1577.718494][T28913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.718519][T28913] RSP: 002b:00007fb5621f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1577.718543][T28913] RAX: ffffffffffffffda RBX: 00007fb564216090 RCX: 00007fb563f9bf79 [ 1577.718560][T28913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1577.718575][T28913] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.718590][T28913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.718605][T28913] R13: 00007fb564216128 R14: 00007fb564216090 R15: 00007ffdc747a488 [ 1577.718636][T28913] [ 1578.835537][T28926] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078002dc0 pfn:0x78002 [ 1578.889342][T28926] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1578.942115][T28921] FAULT_INJECTION: forcing a failure. [ 1578.942115][T28921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1578.967516][T28926] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1579.026498][T28921] CPU: 0 UID: 0 PID: 28921 Comm: syz.3.5734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1579.026540][T28921] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1579.026549][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1579.026564][T28921] Call Trace: [ 1579.026573][T28921] [ 1579.026582][T28921] dump_stack_lvl+0x100/0x190 [ 1579.026619][T28921] should_fail_ex.cold+0x5/0xa [ 1579.026646][T28921] get_futex_key+0x1d2/0x1620 [ 1579.026686][T28921] ? __pfx_get_futex_key+0x10/0x10 [ 1579.026725][T28921] ? trace_pid_list_is_set+0x11a/0x390 [ 1579.026759][T28921] ? trace_pid_list_is_set+0x22c/0x390 [ 1579.026791][T28921] futex_wait_setup+0x81/0x500 [ 1579.026827][T28921] __futex_wait+0x19f/0x300 [ 1579.026858][T28921] ? __pfx___futex_wait+0x10/0x10 [ 1579.026885][T28921] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1579.026920][T28921] ? lockdep_hardirqs_on+0x78/0x100 [ 1579.026958][T28921] ? __pfx_futex_wake_mark+0x10/0x10 [ 1579.026991][T28921] ? find_held_lock+0x2b/0x80 [ 1579.027022][T28921] ? futex_wake+0x456/0x530 [ 1579.027055][T28921] futex_wait+0xed/0x380 [ 1579.027083][T28921] ? __pfx_futex_wait+0x10/0x10 [ 1579.027116][T28921] ? fd_install+0x223/0x580 [ 1579.027138][T28921] ? putname+0xb1/0x110 [ 1579.027170][T28921] do_futex+0x1ef/0x350 [ 1579.027192][T28921] ? __pfx_do_futex+0x10/0x10 [ 1579.027212][T28921] ? __pfx_do_sys_openat2+0x10/0x10 [ 1579.027247][T28921] ? __fget_files+0x21f/0x3d0 [ 1579.027272][T28921] __x64_sys_futex+0x34f/0x4d0 [ 1579.027299][T28921] ? __pfx___x64_sys_futex+0x10/0x10 [ 1579.027321][T28921] ? xfd_validate_state+0x129/0x190 [ 1579.027388][T28921] do_syscall_64+0x106/0xf80 [ 1579.027423][T28921] ? clear_bhb_loop+0x40/0x90 [ 1579.027451][T28921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.027475][T28921] RIP: 0033:0x7f9c5539bf79 [ 1579.027494][T28921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.027518][T28921] RSP: 002b:00007f9c562670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1579.027541][T28921] RAX: ffffffffffffffda RBX: 00007f9c55615fa8 RCX: 00007f9c5539bf79 [ 1579.027557][T28921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c55615fa8 [ 1579.027573][T28921] RBP: 00007f9c55615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1579.027587][T28921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.027602][T28921] R13: 00007f9c55616038 R14: 00007fff2ae582e0 R15: 00007fff2ae583c8 [ 1579.027632][T28921] [ 1579.031583][T28921] FAULT_INJECTION: forcing a failure. [ 1579.031583][T28921] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.303726][T28926] raw: ffff888078002dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1579.343552][T28926] page dumped because: unmovable page [ 1579.353189][T28926] page_owner tracks the page as allocated [ 1579.373768][T28926] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5998, tgid 5991 (syz.2.21), ts 114955268843, free_ts 113813219433 [ 1579.456033][T28926] post_alloc_hook+0x1e1/0x250 [ 1579.460878][T28926] get_page_from_freelist+0x111d/0x3140 [ 1579.518733][T28926] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1579.599735][T28926] alloc_pages_mpol+0x1fb/0x550 [ 1579.623283][T28926] alloc_pages_noprof+0x131/0x390 [ 1579.628374][T28926] brd_submit_bio+0x116a/0x20d0 [ 1579.672884][T28926] __submit_bio+0x419/0x6c0 [ 1579.677455][T28926] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 1579.717623][ T29] audit: type=1807 audit(2147485968.365:41): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 1579.717967][ T29] audit: type=1802 audit(2147485968.365:42): pid=28936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.5737" res=0 errno=0 [ 1579.894005][T28926] submit_bio_noacct+0xd17/0x1fb0 [ 1579.899106][T28926] submit_bh_wbc+0x59c/0x770 [ 1579.950890][T28926] __block_write_full_folio+0x77f/0xee0 [ 1579.956518][T28926] block_write_full_folio+0x3b5/0x4e0 [ 1580.014189][T28926] blkdev_writepages+0xc7/0x150 [ 1580.019151][T28926] do_writepages+0x278/0x600 [ 1580.061100][T28935] ima: policy update failed [ 1580.076282][T28926] filemap_writeback+0x22d/0x2e0 [ 1580.108068][T28926] filemap_write_and_wait_range+0xa6/0x130 [ 1580.124251][T28926] page last free pid 15 tgid 15 stack trace: [ 1580.157438][T28926] __free_frozen_pages+0x822/0x1130 [ 1580.177608][T28926] rcu_core+0x5a2/0x10d0 [ 1580.193101][T28926] handle_softirqs+0x1ea/0x910 [ 1580.210333][ T29] audit: type=1802 audit(2147485968.767:43): pid=28935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5737" res=0 errno=0 [ 1580.247840][T28926] run_ksoftirqd+0x38/0x60 [ 1580.277375][T28926] smpboot_thread_fn+0x3d3/0xaa0 [ 1580.312654][T28926] kthread+0x370/0x450 [ 1580.329504][T28926] ret_from_fork+0x754/0xd80 [ 1580.340992][T28921] CPU: 0 UID: 0 PID: 28921 Comm: syz.3.5734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1580.341030][T28921] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1580.341039][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1580.341053][T28921] Call Trace: [ 1580.341060][T28921] [ 1580.341068][T28921] dump_stack_lvl+0x100/0x190 [ 1580.341110][T28921] should_fail_ex.cold+0x5/0xa [ 1580.341160][T28921] should_failslab+0xc2/0x120 [ 1580.341189][T28921] kmem_cache_alloc_noprof+0x83/0x780 [ 1580.341214][T28921] ? d_instantiate+0x90/0xb0 [ 1580.341243][T28921] ? alloc_empty_file+0x55/0x1c0 [ 1580.341279][T28921] ? alloc_empty_file+0x55/0x1c0 [ 1580.341309][T28921] alloc_empty_file+0x55/0x1c0 [ 1580.341340][T28921] alloc_file_pseudo+0x13a/0x230 [ 1580.341374][T28921] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1580.341404][T28921] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1580.341434][T28921] create_pipe_files+0x360/0x970 [ 1580.341464][T28921] do_pipe2+0xbd/0x1e0 [ 1580.341490][T28921] ? __pfx_do_pipe2+0x10/0x10 [ 1580.341514][T28921] ? xfd_validate_state+0x129/0x190 [ 1580.341552][T28921] __x64_sys_pipe+0x33/0x50 [ 1580.341577][T28921] do_syscall_64+0x106/0xf80 [ 1580.341613][T28921] ? clear_bhb_loop+0x40/0x90 [ 1580.341642][T28921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.341666][T28921] RIP: 0033:0x7f9c5539bf79 [ 1580.341693][T28921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.341718][T28921] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1580.341742][T28921] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1580.341759][T28921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1580.341774][T28921] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.341789][T28921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.341804][T28921] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1580.341835][T28921] [ 1580.560907][T28926] ret_from_fork_asm+0x1a/0x30 [ 1580.672765][T28943] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 1582.141553][T28973] FAULT_INJECTION: forcing a failure. [ 1582.141553][T28973] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.200152][T28973] CPU: 0 UID: 0 PID: 28973 Comm: syz.4.5748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1582.200193][T28973] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1582.200203][T28973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1582.200224][T28973] Call Trace: [ 1582.200232][T28973] [ 1582.200242][T28973] dump_stack_lvl+0x100/0x190 [ 1582.200280][T28973] should_fail_ex.cold+0x5/0xa [ 1582.200306][T28973] should_failslab+0xc2/0x120 [ 1582.200334][T28973] ? alloc_pipe_info+0x1ec/0x590 [ 1582.200358][T28973] __kmalloc_noprof+0xf6/0x9c0 [ 1582.200401][T28973] ? alloc_pipe_info+0x1ec/0x590 [ 1582.200438][T28973] alloc_pipe_info+0x1ec/0x590 [ 1582.200464][T28973] ? aa_file_perm+0x277/0x1530 [ 1582.200514][T28973] splice_direct_to_actor+0x78f/0xa30 [ 1582.200541][T28973] ? __pfx_direct_splice_actor+0x10/0x10 [ 1582.200566][T28973] ? __pfx_aa_file_perm+0x10/0x10 [ 1582.200597][T28973] ? futex_hash+0x2c5/0x380 [ 1582.200633][T28973] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1582.200665][T28973] do_splice_direct+0x174/0x240 [ 1582.200690][T28973] ? __pfx_do_splice_direct+0x10/0x10 [ 1582.200713][T28973] ? common_file_perm+0x1ab/0x4f0 [ 1582.200737][T28973] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1582.200782][T28973] ? rw_verify_area+0xce/0x6d0 [ 1582.200822][T28973] do_sendfile+0xadc/0xe20 [ 1582.200866][T28973] ? __pfx_do_sendfile+0x10/0x10 [ 1582.200902][T28973] ? rcu_read_unlock+0x17/0x60 [ 1582.200942][T28973] __x64_sys_sendfile64+0x1d8/0x220 [ 1582.200970][T28973] ? xfd_validate_state+0x129/0x190 [ 1582.200998][T28973] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1582.201036][T28973] do_syscall_64+0x106/0xf80 [ 1582.201073][T28973] ? clear_bhb_loop+0x40/0x90 [ 1582.201103][T28973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.201127][T28973] RIP: 0033:0x7fb563f9bf79 [ 1582.201146][T28973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.201171][T28973] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1582.201195][T28973] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1582.201212][T28973] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1582.201226][T28973] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1582.201241][T28973] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1582.201256][T28973] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1582.201288][T28973] [ 1582.865841][T28976] FAULT_INJECTION: forcing a failure. [ 1582.865841][T28976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.914251][T28976] CPU: 0 UID: 0 PID: 28976 Comm: syz.4.5749 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1582.914295][T28976] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1582.914304][T28976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1582.914319][T28976] Call Trace: [ 1582.914327][T28976] [ 1582.914336][T28976] dump_stack_lvl+0x100/0x190 [ 1582.914373][T28976] should_fail_ex.cold+0x5/0xa [ 1582.914398][T28976] strncpy_from_user+0x3b/0x2d0 [ 1582.914424][T28976] do_getname+0x78/0x390 [ 1582.914457][T28976] do_sys_openat2+0xc5/0x1e0 [ 1582.914489][T28976] ? __pfx_do_sys_openat2+0x10/0x10 [ 1582.914521][T28976] ? rcu_read_unlock+0x17/0x60 [ 1582.914563][T28976] __x64_sys_openat+0x12d/0x210 [ 1582.914601][T28976] ? __pfx___x64_sys_openat+0x10/0x10 [ 1582.914632][T28976] ? xfd_validate_state+0x129/0x190 [ 1582.914670][T28976] do_syscall_64+0x106/0xf80 [ 1582.914709][T28976] ? clear_bhb_loop+0x40/0x90 [ 1582.914737][T28976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.914760][T28976] RIP: 0033:0x7fb563f5c84e [ 1582.914779][T28976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1582.914804][T28976] RSP: 002b:00007fb564d6ff98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1582.914828][T28976] RAX: ffffffffffffffda RBX: 00007fb564d706c0 RCX: 00007fb563f5c84e [ 1582.914844][T28976] RDX: 0000000000000002 RSI: 00007fb5640320e7 RDI: ffffffffffffff9c [ 1582.914860][T28976] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1582.914874][T28976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.914889][T28976] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1582.914919][T28976] [ 1583.925392][T28985] FAULT_INJECTION: forcing a failure. [ 1583.925392][T28985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.018078][T28985] CPU: 0 UID: 0 PID: 28985 Comm: syz.3.5752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1584.018120][T28985] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1584.018130][T28985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1584.018146][T28985] Call Trace: [ 1584.018154][T28985] [ 1584.018164][T28985] dump_stack_lvl+0x100/0x190 [ 1584.018203][T28985] should_fail_ex.cold+0x5/0xa [ 1584.018230][T28985] strncpy_from_user+0x3b/0x2d0 [ 1584.018309][T28985] do_getname+0x78/0x390 [ 1584.018345][T28985] do_sys_openat2+0xc5/0x1e0 [ 1584.018380][T28985] ? __pfx_do_sys_openat2+0x10/0x10 [ 1584.018414][T28985] ? rcu_read_unlock+0x17/0x60 [ 1584.018452][T28985] __x64_sys_openat+0x12d/0x210 [ 1584.018487][T28985] ? __pfx___x64_sys_openat+0x10/0x10 [ 1584.018520][T28985] ? xfd_validate_state+0x129/0x190 [ 1584.018560][T28985] do_syscall_64+0x106/0xf80 [ 1584.018610][T28985] ? clear_bhb_loop+0x40/0x90 [ 1584.018638][T28985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.018662][T28985] RIP: 0033:0x7f9c5539bf79 [ 1584.018680][T28985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.018705][T28985] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1584.018747][T28985] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1584.018764][T28985] RDX: 0000000000040001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1584.018780][T28985] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.018796][T28985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.018811][T28985] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1584.018846][T28985] [ 1584.228957][T28980] FAULT_INJECTION: forcing a failure. [ 1584.228957][T28980] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.241800][T28980] CPU: 0 UID: 0 PID: 28980 Comm: syz.1.5750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1584.241842][T28980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1584.241852][T28980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1584.241867][T28980] Call Trace: [ 1584.241876][T28980] [ 1584.241886][T28980] dump_stack_lvl+0x100/0x190 [ 1584.241924][T28980] should_fail_ex.cold+0x5/0xa [ 1584.241952][T28980] should_failslab+0xc2/0x120 [ 1584.241981][T28980] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1584.242009][T28980] ? inode_set_ctime_to_ts+0x12f/0x3a0 [ 1584.242038][T28980] ? __d_alloc+0x34/0xa80 [ 1584.242070][T28980] ? __d_alloc+0x34/0xa80 [ 1584.242095][T28980] __d_alloc+0x34/0xa80 [ 1584.242125][T28980] d_alloc_pseudo+0x1c/0xc0 [ 1584.242161][T28980] alloc_file_pseudo+0xcf/0x230 [ 1584.242195][T28980] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1584.242226][T28980] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1584.242264][T28980] create_pipe_files+0x360/0x970 [ 1584.242294][T28980] do_pipe2+0xbd/0x1e0 [ 1584.242319][T28980] ? __pfx_do_pipe2+0x10/0x10 [ 1584.242345][T28980] ? xfd_validate_state+0x129/0x190 [ 1584.242384][T28980] __x64_sys_pipe+0x33/0x50 [ 1584.242410][T28980] do_syscall_64+0x106/0xf80 [ 1584.242446][T28980] ? clear_bhb_loop+0x40/0x90 [ 1584.242481][T28980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.242507][T28980] RIP: 0033:0x7f9cf799bf79 [ 1584.242526][T28980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.242552][T28980] RSP: 002b:00007f9cf889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1584.242576][T28980] RAX: ffffffffffffffda RBX: 00007f9cf7c15fa0 RCX: 00007f9cf799bf79 [ 1584.242593][T28980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1584.242608][T28980] RBP: 00007f9cf7a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.242624][T28980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.242639][T28980] R13: 00007f9cf7c16038 R14: 00007f9cf7c15fa0 R15: 00007ffc141a43e8 [ 1584.242671][T28980] [ 1586.051763][T29035] binder: 29034:29035 ioctl c018620c 0 returned -1 [ 1587.755832][T29078] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078002dc0 pfn:0x78002 [ 1587.835614][T29078] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1587.887123][T29078] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1587.929959][T29078] raw: ffff888078002dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1588.008135][T29078] page dumped because: unmovable page [ 1588.008207][T29078] page_owner tracks the page as allocated [ 1588.008233][T29078] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5998, tgid 5991 (syz.2.21), ts 114955268843, free_ts 113813219433 [ 1588.008276][T29078] post_alloc_hook+0x1e1/0x250 [ 1588.008316][T29078] get_page_from_freelist+0x111d/0x3140 [ 1588.008356][T29078] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1588.008397][T29078] alloc_pages_mpol+0x1fb/0x550 [ 1588.008425][T29078] alloc_pages_noprof+0x131/0x390 [ 1588.008453][T29078] brd_submit_bio+0x116a/0x20d0 [ 1588.008477][T29078] __submit_bio+0x419/0x6c0 [ 1588.008505][T29078] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 1588.008536][T29078] submit_bio_noacct+0xd17/0x1fb0 [ 1588.008565][T29078] submit_bh_wbc+0x59c/0x770 [ 1588.008592][T29078] __block_write_full_folio+0x77f/0xee0 [ 1588.008627][T29078] block_write_full_folio+0x3b5/0x4e0 [ 1588.008664][T29078] blkdev_writepages+0xc7/0x150 [ 1588.008694][T29078] do_writepages+0x278/0x600 [ 1588.008727][T29078] filemap_writeback+0x22d/0x2e0 [ 1588.008761][T29078] filemap_write_and_wait_range+0xa6/0x130 [ 1588.008801][T29078] page last free pid 15 tgid 15 stack trace: [ 1588.008816][T29078] __free_frozen_pages+0x822/0x1130 [ 1588.008851][T29078] rcu_core+0x5a2/0x10d0 [ 1588.008883][T29078] handle_softirqs+0x1ea/0x910 [ 1588.008920][T29078] run_ksoftirqd+0x38/0x60 [ 1588.008956][T29078] smpboot_thread_fn+0x3d3/0xaa0 [ 1588.008995][T29078] kthread+0x370/0x450 [ 1588.009019][T29078] ret_from_fork+0x754/0xd80 [ 1588.009049][T29078] ret_from_fork_asm+0x1a/0x30 [ 1589.344562][T29093] FAULT_INJECTION: forcing a failure. [ 1589.344562][T29093] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.411944][T29093] CPU: 0 UID: 0 PID: 29093 Comm: syz.2.5769 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1589.412005][T29093] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1589.412015][T29093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1589.412030][T29093] Call Trace: [ 1589.412038][T29093] [ 1589.412048][T29093] dump_stack_lvl+0x100/0x190 [ 1589.412086][T29093] should_fail_ex.cold+0x5/0xa [ 1589.412114][T29093] should_failslab+0xc2/0x120 [ 1589.412143][T29093] ? alloc_pipe_info+0x1ec/0x590 [ 1589.412168][T29093] __kmalloc_noprof+0xf6/0x9c0 [ 1589.412212][T29093] ? alloc_pipe_info+0x1ec/0x590 [ 1589.412236][T29093] alloc_pipe_info+0x1ec/0x590 [ 1589.412261][T29093] ? aa_file_perm+0x277/0x1530 [ 1589.412293][T29093] splice_direct_to_actor+0x78f/0xa30 [ 1589.412320][T29093] ? __pfx_direct_splice_actor+0x10/0x10 [ 1589.412344][T29093] ? __pfx_aa_file_perm+0x10/0x10 [ 1589.412374][T29093] ? futex_hash+0x2c5/0x380 [ 1589.412410][T29093] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1589.412454][T29093] do_splice_direct+0x174/0x240 [ 1589.412478][T29093] ? __pfx_do_splice_direct+0x10/0x10 [ 1589.412500][T29093] ? common_file_perm+0x1ab/0x4f0 [ 1589.412524][T29093] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1589.412567][T29093] ? rw_verify_area+0xce/0x6d0 [ 1589.412645][T29093] do_sendfile+0xadc/0xe20 [ 1589.412690][T29093] ? __pfx_do_sendfile+0x10/0x10 [ 1589.412734][T29093] ? rcu_read_unlock+0x17/0x60 [ 1589.412775][T29093] __x64_sys_sendfile64+0x1d8/0x220 [ 1589.412805][T29093] ? xfd_validate_state+0x129/0x190 [ 1589.412835][T29093] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1589.412873][T29093] do_syscall_64+0x106/0xf80 [ 1589.412909][T29093] ? clear_bhb_loop+0x40/0x90 [ 1589.412939][T29093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.412963][T29093] RIP: 0033:0x7fec8ed9bf79 [ 1589.412983][T29093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.413008][T29093] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1589.413032][T29093] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1589.413049][T29093] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1589.413064][T29093] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.413080][T29093] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1589.413095][T29093] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1589.413126][T29093] [ 1590.837346][T29119] FAULT_INJECTION: forcing a failure. [ 1590.837346][T29119] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.883448][T29119] CPU: 0 UID: 0 PID: 29119 Comm: syz.4.5771 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1590.883490][T29119] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1590.883500][T29119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1590.883515][T29119] Call Trace: [ 1590.883523][T29119] [ 1590.883533][T29119] dump_stack_lvl+0x100/0x190 [ 1590.883570][T29119] should_fail_ex.cold+0x5/0xa [ 1590.883596][T29119] should_failslab+0xc2/0x120 [ 1590.883625][T29119] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1590.883651][T29119] ? inode_set_ctime_to_ts+0x12f/0x3a0 [ 1590.883687][T29119] ? __d_alloc+0x34/0xa80 [ 1590.883718][T29119] ? __d_alloc+0x34/0xa80 [ 1590.883742][T29119] __d_alloc+0x34/0xa80 [ 1590.883772][T29119] d_alloc_pseudo+0x1c/0xc0 [ 1590.883807][T29119] alloc_file_pseudo+0xcf/0x230 [ 1590.883839][T29119] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1590.883869][T29119] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1590.883899][T29119] create_pipe_files+0x360/0x970 [ 1590.883928][T29119] do_pipe2+0xbd/0x1e0 [ 1590.883953][T29119] ? __pfx_do_pipe2+0x10/0x10 [ 1590.883977][T29119] ? xfd_validate_state+0x129/0x190 [ 1590.884014][T29119] __x64_sys_pipe+0x33/0x50 [ 1590.884039][T29119] do_syscall_64+0x106/0xf80 [ 1590.884074][T29119] ? clear_bhb_loop+0x40/0x90 [ 1590.884103][T29119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.884127][T29119] RIP: 0033:0x7fb563f9bf79 [ 1590.884146][T29119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.884170][T29119] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1590.884193][T29119] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1590.884209][T29119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.884223][T29119] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.884238][T29119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.884252][T29119] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1590.884285][T29119] [ 1592.109687][T29126] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5774'. [ 1592.185016][T29127] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5774'. [ 1593.673488][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1596.386405][T29197] futex_wake_op: syz.1.5791 tries to shift op by -2048; fix this program [ 1596.521118][T29197] futex_wake_op: syz.1.5791 tries to shift op by -2048; fix this program [ 1596.619644][T29202] 0x000000000001-0x000000020000 : "" [ 1596.816025][T29202] ftl_cs: FTL header corrupt! [ 1596.822357][T29200] netlink: set zone limit has 8 unknown bytes [ 1596.863159][T29201] netlink: set zone limit has 8 unknown bytes [ 1597.444219][T29213] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1597.594806][T29211] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1597.691913][T29215] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1600.811104][T29265] FAULT_INJECTION: forcing a failure. [ 1600.811104][T29265] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.899251][T29265] CPU: 0 UID: 0 PID: 29265 Comm: syz.4.5809 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1600.899294][T29265] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1600.899304][T29265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1600.899320][T29265] Call Trace: [ 1600.899328][T29265] [ 1600.899337][T29265] dump_stack_lvl+0x100/0x190 [ 1600.899387][T29265] should_fail_ex.cold+0x5/0xa [ 1600.899413][T29265] should_failslab+0xc2/0x120 [ 1600.899441][T29265] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1600.899470][T29265] ? __d_alloc+0x34/0xa80 [ 1600.899501][T29265] ? __d_alloc+0x34/0xa80 [ 1600.899548][T29265] __d_alloc+0x34/0xa80 [ 1600.899573][T29265] ? stack_trace_save+0x8e/0xc0 [ 1600.899610][T29265] d_alloc_parallel+0x111/0x14e0 [ 1600.899651][T29265] ? __lock_acquire+0x4a5/0x2630 [ 1600.899679][T29265] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1600.899728][T29265] ? lockdep_init_map_type+0x5c/0x250 [ 1600.899756][T29265] ? lockdep_init_map_type+0x5c/0x250 [ 1600.899786][T29265] __lookup_slow+0x193/0x460 [ 1600.899821][T29265] ? __pfx___lookup_slow+0x10/0x10 [ 1600.899881][T29265] ? __d_lookup+0x266/0x4a0 [ 1600.899921][T29265] lookup_slow+0x50/0x70 [ 1600.899952][T29265] link_path_walk+0x1377/0x1cc0 [ 1600.899998][T29265] path_openat+0x1be/0x31a0 [ 1600.900021][T29265] ? kasan_save_track+0x14/0x30 [ 1600.900043][T29265] ? __kasan_slab_alloc+0x89/0x90 [ 1600.900067][T29265] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 1600.900092][T29265] ? do_sys_openat2+0xc5/0x1e0 [ 1600.900130][T29265] ? __pfx_path_openat+0x10/0x10 [ 1600.900165][T29265] do_file_open+0x20e/0x430 [ 1600.900193][T29265] ? __pfx_do_file_open+0x10/0x10 [ 1600.900237][T29265] ? alloc_fd+0x476/0x790 [ 1600.900264][T29265] ? do_getname+0x191/0x390 [ 1600.900296][T29265] do_sys_openat2+0x10d/0x1e0 [ 1600.900328][T29265] ? __pfx_do_sys_openat2+0x10/0x10 [ 1600.900371][T29265] __x64_sys_openat+0x12d/0x210 [ 1600.900404][T29265] ? __pfx___x64_sys_openat+0x10/0x10 [ 1600.900436][T29265] ? xfd_validate_state+0x129/0x190 [ 1600.900474][T29265] do_syscall_64+0x106/0xf80 [ 1600.900520][T29265] ? clear_bhb_loop+0x40/0x90 [ 1600.900565][T29265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.900590][T29265] RIP: 0033:0x7fb563f9bf79 [ 1600.900609][T29265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.900633][T29265] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1600.900656][T29265] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1600.900672][T29265] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 1600.900688][T29265] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.900704][T29265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.900724][T29265] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1600.900754][T29265] [ 1601.198449][T29261] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1601.258302][T29269] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1601.627741][T29266] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1603.928991][T22942] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1604.083624][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1605.910400][T29312] netlink: set zone limit has 8 unknown bytes [ 1606.158359][T29316] netlink: set zone limit has 8 unknown bytes [ 1606.188619][T29311] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1606.262961][T29317] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1606.968977][T29331] FAULT_INJECTION: forcing a failure. [ 1606.968977][T29331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1607.003192][T29332] FAULT_INJECTION: forcing a failure. [ 1607.003192][T29332] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.023102][T29331] CPU: 0 UID: 0 PID: 29331 Comm: syz.3.5824 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1607.023142][T29331] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1607.023151][T29331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1607.023166][T29331] Call Trace: [ 1607.023174][T29331] [ 1607.023183][T29331] dump_stack_lvl+0x100/0x190 [ 1607.023232][T29331] should_fail_ex.cold+0x5/0xa [ 1607.023256][T29331] _copy_from_user+0x2e/0xd0 [ 1607.023281][T29331] sctp_setsockopt+0x8cc/0xb370 [ 1607.023313][T29331] ? __pfx_aa_sk_perm+0x10/0x10 [ 1607.023338][T29331] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1607.023370][T29331] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1607.023401][T29331] ? sock_common_setsockopt+0x2e/0xf0 [ 1607.023431][T29331] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1607.023464][T29331] do_sock_setsockopt+0xf3/0x1d0 [ 1607.023497][T29331] __sys_setsockopt+0x119/0x190 [ 1607.023526][T29331] __x64_sys_setsockopt+0xbd/0x160 [ 1607.023549][T29331] ? do_syscall_64+0x95/0xf80 [ 1607.023582][T29331] ? lockdep_hardirqs_on+0x78/0x100 [ 1607.023615][T29331] do_syscall_64+0x106/0xf80 [ 1607.023648][T29331] ? clear_bhb_loop+0x40/0x90 [ 1607.023675][T29331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.023698][T29331] RIP: 0033:0x7f9c5539bf79 [ 1607.023715][T29331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.023739][T29331] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1607.023760][T29331] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1607.023775][T29331] RDX: 000000000000007f RSI: 0000010000000084 RDI: 0000000000000003 [ 1607.023789][T29331] RBP: 00007f9c56267090 R08: 0000000000000ad4 R09: 0000000000000000 [ 1607.023803][T29331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.023816][T29331] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1607.023845][T29331] [ 1607.425396][T29332] CPU: 0 UID: 0 PID: 29332 Comm: syz.4.5825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1607.425437][T29332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1607.425447][T29332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1607.425461][T29332] Call Trace: [ 1607.425469][T29332] [ 1607.425478][T29332] dump_stack_lvl+0x100/0x190 [ 1607.425515][T29332] should_fail_ex.cold+0x5/0xa [ 1607.425541][T29332] should_failslab+0xc2/0x120 [ 1607.425568][T29332] ? lsm_blob_alloc+0x68/0x90 [ 1607.425597][T29332] __kmalloc_noprof+0xf6/0x9c0 [ 1607.425630][T29332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1607.425669][T29332] ? lsm_blob_alloc+0x68/0x90 [ 1607.425705][T29332] ? __asan_memset+0x23/0x50 [ 1607.425739][T29332] lsm_blob_alloc+0x68/0x90 [ 1607.425769][T29332] security_task_alloc+0x2a/0x260 [ 1607.425799][T29332] copy_process+0x2531/0x79b0 [ 1607.425822][T29332] ? preempt_schedule_thunk+0x16/0x30 [ 1607.425861][T29332] ? __pfx_copy_process+0x10/0x10 [ 1607.425897][T29332] ? find_held_lock+0x2b/0x80 [ 1607.425931][T29332] ? futex_private_hash_put+0x107/0x1c0 [ 1607.425970][T29332] kernel_clone+0xfc/0x930 [ 1607.425993][T29332] ? __pfx_kernel_clone+0x10/0x10 [ 1607.426037][T29332] __do_sys_clone+0xd9/0x120 [ 1607.426059][T29332] ? __pfx___do_sys_clone+0x10/0x10 [ 1607.426093][T29332] ? xfd_validate_state+0x129/0x190 [ 1607.426129][T29332] do_syscall_64+0x106/0xf80 [ 1607.426181][T29332] ? clear_bhb_loop+0x40/0x90 [ 1607.426209][T29332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.426233][T29332] RIP: 0033:0x7fb563f9bf79 [ 1607.426252][T29332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.426286][T29332] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1607.426307][T29332] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1607.426323][T29332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1607.426336][T29332] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.426350][T29332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1607.426364][T29332] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1607.426393][T29332] [ 1608.050221][T29346] FAULT_INJECTION: forcing a failure. [ 1608.050221][T29346] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.137517][T29346] CPU: 0 UID: 0 PID: 29346 Comm: syz.3.5828 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1608.137573][T29346] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1608.137582][T29346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1608.137597][T29346] Call Trace: [ 1608.137605][T29346] [ 1608.137614][T29346] dump_stack_lvl+0x100/0x190 [ 1608.137651][T29346] should_fail_ex.cold+0x5/0xa [ 1608.137677][T29346] should_failslab+0xc2/0x120 [ 1608.137705][T29346] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1608.137734][T29346] ? __d_alloc+0x34/0xa80 [ 1608.137764][T29346] ? __d_alloc+0x34/0xa80 [ 1608.137789][T29346] __d_alloc+0x34/0xa80 [ 1608.137813][T29346] ? stack_trace_save+0x8e/0xc0 [ 1608.137848][T29346] d_alloc_parallel+0x111/0x14e0 [ 1608.137888][T29346] ? __lock_acquire+0x4a5/0x2630 [ 1608.137914][T29346] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1608.137953][T29346] ? lockdep_init_map_type+0x5c/0x250 [ 1608.137986][T29346] ? lockdep_init_map_type+0x5c/0x250 [ 1608.138015][T29346] __lookup_slow+0x193/0x460 [ 1608.138049][T29346] ? __pfx___lookup_slow+0x10/0x10 [ 1608.138097][T29346] ? __d_lookup+0x266/0x4a0 [ 1608.138137][T29346] lookup_slow+0x50/0x70 [ 1608.138169][T29346] link_path_walk+0x1377/0x1cc0 [ 1608.138215][T29346] path_openat+0x1be/0x31a0 [ 1608.138239][T29346] ? kasan_save_track+0x14/0x30 [ 1608.138261][T29346] ? __kasan_slab_alloc+0x89/0x90 [ 1608.138285][T29346] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 1608.138310][T29346] ? do_sys_openat2+0xc5/0x1e0 [ 1608.138348][T29346] ? __pfx_path_openat+0x10/0x10 [ 1608.138383][T29346] do_file_open+0x20e/0x430 [ 1608.138411][T29346] ? __pfx_do_file_open+0x10/0x10 [ 1608.138456][T29346] ? alloc_fd+0x476/0x790 [ 1608.138483][T29346] ? do_getname+0x191/0x390 [ 1608.138516][T29346] do_sys_openat2+0x10d/0x1e0 [ 1608.138548][T29346] ? __pfx_do_sys_openat2+0x10/0x10 [ 1608.138591][T29346] __x64_sys_openat+0x12d/0x210 [ 1608.138625][T29346] ? __pfx___x64_sys_openat+0x10/0x10 [ 1608.138656][T29346] ? xfd_validate_state+0x129/0x190 [ 1608.138695][T29346] do_syscall_64+0x106/0xf80 [ 1608.138730][T29346] ? clear_bhb_loop+0x40/0x90 [ 1608.138758][T29346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.138781][T29346] RIP: 0033:0x7f9c5539bf79 [ 1608.138800][T29346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.138823][T29346] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1608.138846][T29346] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1608.138862][T29346] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 1608.138877][T29346] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.138892][T29346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.138907][T29346] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1608.138937][T29346] [ 1608.483411][T29348] FAULT_INJECTION: forcing a failure. [ 1608.483411][T29348] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.497003][T29348] CPU: 0 UID: 0 PID: 29348 Comm: syz.1.5829 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1608.497043][T29348] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1608.497052][T29348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1608.497067][T29348] Call Trace: [ 1608.497075][T29348] [ 1608.497083][T29348] dump_stack_lvl+0x100/0x190 [ 1608.497121][T29348] should_fail_ex.cold+0x5/0xa [ 1608.497147][T29348] should_failslab+0xc2/0x120 [ 1608.497176][T29348] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1608.497202][T29348] ? inode_set_ctime_to_ts+0x12f/0x3a0 [ 1608.497230][T29348] ? __d_alloc+0x34/0xa80 [ 1608.497260][T29348] ? __d_alloc+0x34/0xa80 [ 1608.497285][T29348] __d_alloc+0x34/0xa80 [ 1608.497316][T29348] d_alloc_pseudo+0x1c/0xc0 [ 1608.497351][T29348] alloc_file_pseudo+0xcf/0x230 [ 1608.497384][T29348] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1608.497413][T29348] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1608.497442][T29348] create_pipe_files+0x360/0x970 [ 1608.497470][T29348] do_pipe2+0xbd/0x1e0 [ 1608.497494][T29348] ? __pfx_do_pipe2+0x10/0x10 [ 1608.497518][T29348] ? xfd_validate_state+0x129/0x190 [ 1608.497554][T29348] __x64_sys_pipe+0x33/0x50 [ 1608.497578][T29348] do_syscall_64+0x106/0xf80 [ 1608.497613][T29348] ? clear_bhb_loop+0x40/0x90 [ 1608.497651][T29348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.497675][T29348] RIP: 0033:0x7f9cf799bf79 [ 1608.497693][T29348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.497715][T29348] RSP: 002b:00007f9cf889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1608.497736][T29348] RAX: ffffffffffffffda RBX: 00007f9cf7c15fa0 RCX: 00007f9cf799bf79 [ 1608.497751][T29348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1608.497765][T29348] RBP: 00007f9cf7a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.497778][T29348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.497792][T29348] R13: 00007f9cf7c16038 R14: 00007f9cf7c15fa0 R15: 00007ffc141a43e8 [ 1608.497819][T29348] [ 1609.076691][T29352] netlink: 'syz.1.5830': attribute type 21 has an invalid length. [ 1609.094797][T29352] netlink: 334 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1611.401481][T29391] FAULT_INJECTION: forcing a failure. [ 1611.401481][T29391] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.448909][T29391] CPU: 0 UID: 0 PID: 29391 Comm: syz.3.5840 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1611.448950][T29391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1611.448960][T29391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1611.448975][T29391] Call Trace: [ 1611.448983][T29391] [ 1611.448995][T29391] dump_stack_lvl+0x100/0x190 [ 1611.449032][T29391] should_fail_ex.cold+0x5/0xa [ 1611.449058][T29391] should_failslab+0xc2/0x120 [ 1611.449087][T29391] kmem_cache_alloc_noprof+0x83/0x780 [ 1611.449112][T29391] ? d_instantiate+0x90/0xb0 [ 1611.449140][T29391] ? alloc_empty_file+0x55/0x1c0 [ 1611.449176][T29391] ? alloc_empty_file+0x55/0x1c0 [ 1611.449206][T29391] alloc_empty_file+0x55/0x1c0 [ 1611.449238][T29391] alloc_file_pseudo+0x13a/0x230 [ 1611.449271][T29391] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1611.449301][T29391] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1611.449331][T29391] create_pipe_files+0x360/0x970 [ 1611.449360][T29391] do_pipe2+0xbd/0x1e0 [ 1611.449385][T29391] ? __pfx_do_pipe2+0x10/0x10 [ 1611.449409][T29391] ? xfd_validate_state+0x129/0x190 [ 1611.449446][T29391] __x64_sys_pipe+0x33/0x50 [ 1611.449471][T29391] do_syscall_64+0x106/0xf80 [ 1611.449506][T29391] ? clear_bhb_loop+0x40/0x90 [ 1611.449535][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.449559][T29391] RIP: 0033:0x7f9c5539bf79 [ 1611.449578][T29391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.449603][T29391] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1611.449626][T29391] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1611.449642][T29391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1611.449657][T29391] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.449671][T29391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1611.449686][T29391] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1611.449724][T29391] [ 1612.616158][T29410] FAULT_INJECTION: forcing a failure. [ 1612.616158][T29410] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.684493][T29410] CPU: 0 UID: 0 PID: 29410 Comm: syz.4.5847 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1612.684543][T29410] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1612.684553][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1612.684567][T29410] Call Trace: [ 1612.684575][T29410] [ 1612.684585][T29410] dump_stack_lvl+0x100/0x190 [ 1612.684621][T29410] should_fail_ex.cold+0x5/0xa [ 1612.684648][T29410] should_failslab+0xc2/0x120 [ 1612.684675][T29410] kmem_cache_alloc_noprof+0x83/0x780 [ 1612.684701][T29410] ? __pmd_alloc+0xbf/0x9c0 [ 1612.684736][T29410] ? __pmd_alloc+0xbf/0x9c0 [ 1612.684764][T29410] __pmd_alloc+0xbf/0x9c0 [ 1612.684800][T29410] __handle_mm_fault+0xa99/0x2b50 [ 1612.684841][T29410] ? mt_find+0x45e/0x8e0 [ 1612.684864][T29410] ? __pfx___handle_mm_fault+0x10/0x10 [ 1612.684898][T29410] ? __pfx_mt_find+0x10/0x10 [ 1612.684935][T29410] ? find_vma+0xbf/0x140 [ 1612.684960][T29410] ? __pfx_find_vma+0x10/0x10 [ 1612.684989][T29410] handle_mm_fault+0x36d/0xa20 [ 1612.685031][T29410] do_user_addr_fault+0x74c/0x12f0 [ 1612.685073][T29410] exc_page_fault+0x6f/0xd0 [ 1612.685108][T29410] asm_exc_page_fault+0x26/0x30 [ 1612.685131][T29410] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1612.685159][T29410] Code: 86 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 86 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1612.685183][T29410] RSP: 0018:ffffc90005057cf0 EFLAGS: 00050202 [ 1612.685202][T29410] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000ad4 [ 1612.685217][T29410] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88807c0ce000 [ 1612.685232][T29410] RBP: 0000000000000ad4 R08: 0000000000000001 R09: ffffed100f819d5a [ 1612.685247][T29410] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1612.685261][T29410] R13: ffff88807c0ce000 R14: 0000000000000ad4 R15: 0000000000000ad4 [ 1612.685290][T29410] _copy_from_user+0x98/0xd0 [ 1612.685315][T29410] sctp_setsockopt+0x8cc/0xb370 [ 1612.685349][T29410] ? __pfx_aa_sk_perm+0x10/0x10 [ 1612.685375][T29410] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1612.685409][T29410] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1612.685440][T29410] ? sock_common_setsockopt+0x2e/0xf0 [ 1612.685472][T29410] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1612.685516][T29410] do_sock_setsockopt+0xf3/0x1d0 [ 1612.685551][T29410] __sys_setsockopt+0x119/0x190 [ 1612.685581][T29410] __x64_sys_setsockopt+0xbd/0x160 [ 1612.685618][T29410] ? do_syscall_64+0x95/0xf80 [ 1612.685652][T29410] ? lockdep_hardirqs_on+0x78/0x100 [ 1612.685685][T29410] do_syscall_64+0x106/0xf80 [ 1612.685717][T29410] ? clear_bhb_loop+0x40/0x90 [ 1612.685744][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.685766][T29410] RIP: 0033:0x7fb563f9bf79 [ 1612.685784][T29410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.685806][T29410] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1612.685826][T29410] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1612.685841][T29410] RDX: 000000000000007f RSI: 0000010000000084 RDI: 0000000000000003 [ 1612.685856][T29410] RBP: 00007fb564d70090 R08: 0000000000000ad4 R09: 0000000000000000 [ 1612.685870][T29410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.685884][T29410] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1612.685913][T29410] [ 1613.571879][T29412] NFSD: Failed to start, no listeners configured. [ 1613.882299][T29421] FAULT_INJECTION: forcing a failure. [ 1613.882299][T29421] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.957830][T29421] CPU: 0 UID: 0 PID: 29421 Comm: syz.2.5852 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1613.957873][T29421] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1613.957883][T29421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1613.957897][T29421] Call Trace: [ 1613.957905][T29421] [ 1613.957915][T29421] dump_stack_lvl+0x100/0x190 [ 1613.957952][T29421] should_fail_ex.cold+0x5/0xa [ 1613.957979][T29421] should_failslab+0xc2/0x120 [ 1613.958008][T29421] kmem_cache_alloc_noprof+0x83/0x780 [ 1613.958034][T29421] ? alloc_empty_file+0x55/0x1c0 [ 1613.958069][T29421] ? alloc_empty_file+0x55/0x1c0 [ 1613.958099][T29421] alloc_empty_file+0x55/0x1c0 [ 1613.958130][T29421] alloc_file_clone+0x5f/0x110 [ 1613.958162][T29421] create_pipe_files+0x40e/0x970 [ 1613.958191][T29421] do_pipe2+0xbd/0x1e0 [ 1613.958215][T29421] ? __pfx_do_pipe2+0x10/0x10 [ 1613.958240][T29421] ? xfd_validate_state+0x129/0x190 [ 1613.958277][T29421] __x64_sys_pipe+0x33/0x50 [ 1613.958302][T29421] do_syscall_64+0x106/0xf80 [ 1613.958337][T29421] ? clear_bhb_loop+0x40/0x90 [ 1613.958380][T29421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.958406][T29421] RIP: 0033:0x7fec8ed9bf79 [ 1613.958425][T29421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.958449][T29421] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1613.958472][T29421] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1613.958488][T29421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1613.958502][T29421] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.958517][T29421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.958531][T29421] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1613.958561][T29421] [ 1614.287304][T29428] FAULT_INJECTION: forcing a failure. [ 1614.287304][T29428] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.301952][T29428] CPU: 0 UID: 0 PID: 29428 Comm: syz.2.5855 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1614.302005][T29428] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1614.302014][T29428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1614.302029][T29428] Call Trace: [ 1614.302055][T29428] [ 1614.302064][T29428] dump_stack_lvl+0x100/0x190 [ 1614.302100][T29428] should_fail_ex.cold+0x5/0xa [ 1614.302127][T29428] should_failslab+0xc2/0x120 [ 1614.302155][T29428] ? alloc_pipe_info+0x1ec/0x590 [ 1614.302178][T29428] __kmalloc_noprof+0xf6/0x9c0 [ 1614.302221][T29428] ? alloc_pipe_info+0x1ec/0x590 [ 1614.302245][T29428] alloc_pipe_info+0x1ec/0x590 [ 1614.302268][T29428] ? aa_file_perm+0x277/0x1530 [ 1614.302299][T29428] splice_direct_to_actor+0x78f/0xa30 [ 1614.302324][T29428] ? __pfx_direct_splice_actor+0x10/0x10 [ 1614.302348][T29428] ? __pfx_aa_file_perm+0x10/0x10 [ 1614.302381][T29428] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1614.302418][T29428] do_splice_direct+0x174/0x240 [ 1614.302442][T29428] ? __pfx_do_splice_direct+0x10/0x10 [ 1614.302464][T29428] ? common_file_perm+0x1ab/0x4f0 [ 1614.302488][T29428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1614.302532][T29428] ? rw_verify_area+0xce/0x6d0 [ 1614.302570][T29428] do_sendfile+0xadc/0xe20 [ 1614.302614][T29428] ? __pfx_do_sendfile+0x10/0x10 [ 1614.302649][T29428] ? rcu_read_unlock+0x17/0x60 [ 1614.302687][T29428] __x64_sys_sendfile64+0x1d8/0x220 [ 1614.302713][T29428] ? xfd_validate_state+0x129/0x190 [ 1614.302741][T29428] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1614.302778][T29428] do_syscall_64+0x106/0xf80 [ 1614.302812][T29428] ? clear_bhb_loop+0x40/0x90 [ 1614.302840][T29428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.302864][T29428] RIP: 0033:0x7fec8ed9bf79 [ 1614.302882][T29428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.302906][T29428] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1614.302930][T29428] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1614.302946][T29428] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1614.302960][T29428] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1614.302975][T29428] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1614.302990][T29428] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1614.303020][T29428] [ 1615.283936][T29442] FAULT_INJECTION: forcing a failure. [ 1615.283936][T29442] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.345643][T29442] CPU: 0 UID: 0 PID: 29442 Comm: syz.4.5860 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1615.345683][T29442] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1615.345693][T29442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1615.345709][T29442] Call Trace: [ 1615.345717][T29442] [ 1615.345726][T29442] dump_stack_lvl+0x100/0x190 [ 1615.345764][T29442] should_fail_ex.cold+0x5/0xa [ 1615.345790][T29442] should_failslab+0xc2/0x120 [ 1615.345818][T29442] kmem_cache_alloc_noprof+0x83/0x780 [ 1615.345844][T29442] ? d_instantiate+0x90/0xb0 [ 1615.345871][T29442] ? alloc_empty_file+0x55/0x1c0 [ 1615.345907][T29442] ? alloc_empty_file+0x55/0x1c0 [ 1615.345936][T29442] alloc_empty_file+0x55/0x1c0 [ 1615.345967][T29442] alloc_file_pseudo+0x13a/0x230 [ 1615.346000][T29442] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1615.346032][T29442] ? alloc_fd+0x476/0x790 [ 1615.346060][T29442] sock_alloc_file+0x50/0x210 [ 1615.346090][T29442] __sys_socket+0x1c0/0x260 [ 1615.346124][T29442] ? exc_page_fault+0x6f/0xd0 [ 1615.346158][T29442] ? __pfx___sys_socket+0x10/0x10 [ 1615.346197][T29442] ? do_user_addr_fault+0x8d6/0x12f0 [ 1615.346234][T29442] __x64_sys_socket+0x72/0xb0 [ 1615.346317][T29442] ? lockdep_hardirqs_on+0x78/0x100 [ 1615.346358][T29442] do_syscall_64+0x106/0xf80 [ 1615.346393][T29442] ? clear_bhb_loop+0x40/0x90 [ 1615.346421][T29442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.346445][T29442] RIP: 0033:0x7fb563f9d807 [ 1615.346465][T29442] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.346507][T29442] RSP: 002b:00007fb5621f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1615.346531][T29442] RAX: ffffffffffffffda RBX: 00007fb564216090 RCX: 00007fb563f9d807 [ 1615.346547][T29442] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1615.346563][T29442] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1615.346578][T29442] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000000 [ 1615.346594][T29442] R13: 00007fb564216128 R14: 00007fb564216090 R15: 00007ffdc747a488 [ 1615.346626][T29442] [ 1615.750096][T29430] kexec: Could not allocate control_code_buffer [ 1615.853856][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1616.202887][T29458] FAULT_INJECTION: forcing a failure. [ 1616.202887][T29458] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.267167][T29458] CPU: 0 UID: 0 PID: 29458 Comm: syz.4.5867 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1616.267208][T29458] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1616.267218][T29458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1616.267232][T29458] Call Trace: [ 1616.267240][T29458] [ 1616.267261][T29458] dump_stack_lvl+0x100/0x190 [ 1616.267295][T29458] should_fail_ex.cold+0x5/0xa [ 1616.267320][T29458] should_failslab+0xc2/0x120 [ 1616.267347][T29458] kmem_cache_alloc_noprof+0x83/0x780 [ 1616.267371][T29458] ? alloc_empty_file+0x55/0x1c0 [ 1616.267404][T29458] ? alloc_empty_file+0x55/0x1c0 [ 1616.267432][T29458] alloc_empty_file+0x55/0x1c0 [ 1616.267461][T29458] alloc_file_clone+0x5f/0x110 [ 1616.267491][T29458] create_pipe_files+0x40e/0x970 [ 1616.267518][T29458] do_pipe2+0xbd/0x1e0 [ 1616.267540][T29458] ? __pfx_do_pipe2+0x10/0x10 [ 1616.267563][T29458] ? xfd_validate_state+0x129/0x190 [ 1616.267597][T29458] __x64_sys_pipe+0x33/0x50 [ 1616.267619][T29458] do_syscall_64+0x106/0xf80 [ 1616.267652][T29458] ? clear_bhb_loop+0x40/0x90 [ 1616.267679][T29458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.267700][T29458] RIP: 0033:0x7fb563f9bf79 [ 1616.267718][T29458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.267740][T29458] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1616.267762][T29458] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1616.267777][T29458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.267791][T29458] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.267806][T29458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.267819][T29458] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1616.267847][T29458] [ 1616.698783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.708555][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.699361][T29482] sd 0:0:1:0: PR command failed: 1026 [ 1617.704818][T29482] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1617.780683][T29482] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1622.264906][T29564] mkiss: ax0: crc mode is auto. [ 1622.557177][T29566] zswap: compressor not available [ 1622.773084][T29576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1623.315850][T29588] FAULT_INJECTION: forcing a failure. [ 1623.315850][T29588] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.465791][T29588] CPU: 0 UID: 0 PID: 29588 Comm: syz.3.5906 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1623.465831][T29588] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1623.465840][T29588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1623.465854][T29588] Call Trace: [ 1623.465862][T29588] [ 1623.465871][T29588] dump_stack_lvl+0x100/0x190 [ 1623.465906][T29588] should_fail_ex.cold+0x5/0xa [ 1623.465931][T29588] should_failslab+0xc2/0x120 [ 1623.465958][T29588] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1623.465982][T29588] ? lockdep_init_map_type+0x5c/0x250 [ 1623.466007][T29588] ? __d_alloc+0x34/0xa80 [ 1623.466035][T29588] ? __d_alloc+0x34/0xa80 [ 1623.466062][T29588] __d_alloc+0x34/0xa80 [ 1623.466090][T29588] d_alloc_pseudo+0x1c/0xc0 [ 1623.466123][T29588] alloc_file_pseudo+0xcf/0x230 [ 1623.466154][T29588] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1623.466184][T29588] ? alloc_fd+0x476/0x790 [ 1623.466210][T29588] sock_alloc_file+0x50/0x210 [ 1623.466238][T29588] __sys_socket+0x1c0/0x260 [ 1623.466270][T29588] ? fput+0x79/0x100 [ 1623.466295][T29588] ? __pfx___sys_socket+0x10/0x10 [ 1623.466327][T29588] ? xfd_validate_state+0x129/0x190 [ 1623.466360][T29588] __x64_sys_socket+0x72/0xb0 [ 1623.466392][T29588] ? lockdep_hardirqs_on+0x78/0x100 [ 1623.466426][T29588] do_syscall_64+0x106/0xf80 [ 1623.466458][T29588] ? clear_bhb_loop+0x40/0x90 [ 1623.466485][T29588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.466516][T29588] RIP: 0033:0x7f9c5539bf79 [ 1623.466533][T29588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.466556][T29588] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1623.466577][T29588] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1623.466592][T29588] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1623.466606][T29588] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1623.466619][T29588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.466633][T29588] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1623.466661][T29588] [ 1624.347518][T29596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5912'. [ 1624.406594][T29596] veth1_macvtap: left promiscuous mode [ 1624.837979][T29603] sctp: [Deprecated]: syz.3.5911 (pid 29603) Use of int in maxseg socket option. [ 1624.837979][T29603] Use struct sctp_assoc_value instead [ 1624.937557][T29612] FAULT_INJECTION: forcing a failure. [ 1624.937557][T29612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.113691][T29612] CPU: 0 UID: 0 PID: 29612 Comm: syz.2.5913 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1625.113731][T29612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1625.113740][T29612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1625.113772][T29612] Call Trace: [ 1625.113780][T29612] [ 1625.113789][T29612] dump_stack_lvl+0x100/0x190 [ 1625.113824][T29612] should_fail_ex.cold+0x5/0xa [ 1625.113850][T29612] _copy_to_user+0x32/0xd0 [ 1625.113876][T29612] simple_read_from_buffer+0xcb/0x170 [ 1625.113915][T29612] proc_fail_nth_read+0x1af/0x230 [ 1625.113941][T29612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1625.113968][T29612] ? rw_verify_area+0xce/0x6d0 [ 1625.114014][T29612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1625.114038][T29612] vfs_read+0x1e4/0xb30 [ 1625.114081][T29612] ? __pfx_vfs_read+0x10/0x10 [ 1625.114102][T29612] ? __fget_files+0x215/0x3d0 [ 1625.114131][T29612] ? __fget_files+0x21f/0x3d0 [ 1625.114161][T29612] ksys_read+0x12a/0x250 [ 1625.114182][T29612] ? __pfx_ksys_read+0x10/0x10 [ 1625.114215][T29612] do_syscall_64+0x106/0xf80 [ 1625.114250][T29612] ? clear_bhb_loop+0x40/0x90 [ 1625.114280][T29612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.114304][T29612] RIP: 0033:0x7fec8ed5c84e [ 1625.114322][T29612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1625.114346][T29612] RSP: 002b:00007fec8fcb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1625.114369][T29612] RAX: ffffffffffffffda RBX: 00007fec8fcb46c0 RCX: 00007fec8ed5c84e [ 1625.114385][T29612] RDX: 000000000000000f RSI: 00007fec8fcb40a0 RDI: 0000000000000004 [ 1625.114399][T29612] RBP: 00007fec8fcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.114413][T29612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.114427][T29612] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1625.114457][T29612] [ 1626.934443][T29634] FAULT_INJECTION: forcing a failure. [ 1626.934443][T29634] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.049373][T29634] CPU: 0 UID: 0 PID: 29634 Comm: syz.2.5921 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1627.049414][T29634] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1627.049424][T29634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1627.049438][T29634] Call Trace: [ 1627.049446][T29634] [ 1627.049455][T29634] dump_stack_lvl+0x100/0x190 [ 1627.049491][T29634] should_fail_ex.cold+0x5/0xa [ 1627.049517][T29634] should_failslab+0xc2/0x120 [ 1627.049544][T29634] ? copy_splice_read+0x1a3/0xb90 [ 1627.049566][T29634] __kmalloc_noprof+0xf6/0x9c0 [ 1627.049608][T29634] ? copy_splice_read+0x1a3/0xb90 [ 1627.049629][T29634] copy_splice_read+0x1a3/0xb90 [ 1627.049657][T29634] ? __pfx_copy_splice_read+0x10/0x10 [ 1627.049682][T29634] ? look_up_lock_class+0x55/0x120 [ 1627.049717][T29634] ? alloc_pipe_info+0x1ec/0x590 [ 1627.049746][T29634] ? lockdep_init_map_type+0x5c/0x250 [ 1627.049771][T29634] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1627.049796][T29634] ? __pfx_copy_splice_read+0x10/0x10 [ 1627.049818][T29634] do_splice_read+0x285/0x370 [ 1627.049844][T29634] splice_direct_to_actor+0x2a1/0xa30 [ 1627.049870][T29634] ? __pfx_direct_splice_actor+0x10/0x10 [ 1627.049899][T29634] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1627.049932][T29634] do_splice_direct+0x174/0x240 [ 1627.049956][T29634] ? __pfx_do_splice_direct+0x10/0x10 [ 1627.049978][T29634] ? common_file_perm+0x1ab/0x4f0 [ 1627.050003][T29634] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1627.050047][T29634] ? rw_verify_area+0xce/0x6d0 [ 1627.050085][T29634] do_sendfile+0xadc/0xe20 [ 1627.050128][T29634] ? __pfx_do_sendfile+0x10/0x10 [ 1627.050165][T29634] ? __fget_files+0x21f/0x3d0 [ 1627.050202][T29634] __x64_sys_sendfile64+0x1d8/0x220 [ 1627.050240][T29634] ? ksys_write+0x1ac/0x250 [ 1627.050261][T29634] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1627.050297][T29634] do_syscall_64+0x106/0xf80 [ 1627.050331][T29634] ? clear_bhb_loop+0x40/0x90 [ 1627.050357][T29634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.050384][T29634] RIP: 0033:0x7fec8ed9bf79 [ 1627.050402][T29634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.050425][T29634] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1627.050448][T29634] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1627.050463][T29634] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1627.050476][T29634] RBP: 00007fec8fcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.050490][T29634] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1627.050504][T29634] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1627.050533][T29634] [ 1627.957781][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1629.391038][T29664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1629.635891][T29668] FAULT_INJECTION: forcing a failure. [ 1629.635891][T29668] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.822780][T29668] CPU: 0 UID: 0 PID: 29668 Comm: syz.3.5931 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1629.822823][T29668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1629.822833][T29668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1629.822848][T29668] Call Trace: [ 1629.822856][T29668] [ 1629.822865][T29668] dump_stack_lvl+0x100/0x190 [ 1629.822903][T29668] should_fail_ex.cold+0x5/0xa [ 1629.822936][T29668] should_failslab+0xc2/0x120 [ 1629.822966][T29668] kmem_cache_alloc_noprof+0x83/0x780 [ 1629.822993][T29668] ? alloc_empty_file+0x55/0x1c0 [ 1629.823030][T29668] ? alloc_empty_file+0x55/0x1c0 [ 1629.823061][T29668] alloc_empty_file+0x55/0x1c0 [ 1629.823093][T29668] alloc_file_clone+0x5f/0x110 [ 1629.823127][T29668] create_pipe_files+0x40e/0x970 [ 1629.823157][T29668] do_pipe2+0xbd/0x1e0 [ 1629.823183][T29668] ? __pfx_do_pipe2+0x10/0x10 [ 1629.823208][T29668] ? xfd_validate_state+0x129/0x190 [ 1629.823246][T29668] __x64_sys_pipe+0x33/0x50 [ 1629.823273][T29668] do_syscall_64+0x106/0xf80 [ 1629.823309][T29668] ? clear_bhb_loop+0x40/0x90 [ 1629.823339][T29668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.823364][T29668] RIP: 0033:0x7f9c5539bf79 [ 1629.823384][T29668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.823408][T29668] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1629.823432][T29668] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1629.823448][T29668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1629.823463][T29668] RBP: 00007f9c554327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1629.823478][T29668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1629.823493][T29668] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1629.823523][T29668] [ 1632.943059][T29714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5946'. [ 1633.218182][T29716] udc dummy_udc.0: soft-connect without a gadget driver [ 1633.267247][T29718] FAULT_INJECTION: forcing a failure. [ 1633.267247][T29718] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.322109][T29716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1633.338870][T29718] CPU: 0 UID: 0 PID: 29718 Comm: syz.1.5947 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1633.338909][T29718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1633.338919][T29718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1633.338934][T29718] Call Trace: [ 1633.338942][T29718] [ 1633.338951][T29718] dump_stack_lvl+0x100/0x190 [ 1633.338999][T29718] should_fail_ex.cold+0x5/0xa [ 1633.339024][T29718] should_failslab+0xc2/0x120 [ 1633.339051][T29718] __kvmalloc_node_noprof+0x101/0xac0 [ 1633.339075][T29718] ? seq_read_iter+0x819/0x1270 [ 1633.339116][T29718] ? seq_read_iter+0x819/0x1270 [ 1633.339150][T29718] seq_read_iter+0x819/0x1270 [ 1633.339186][T29718] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1633.339211][T29718] ? rcu_is_watching+0x12/0xc0 [ 1633.339243][T29718] kernfs_fop_read_iter+0x46c/0x610 [ 1633.339271][T29718] copy_splice_read+0x4ba/0xb90 [ 1633.339299][T29718] ? __pfx_copy_splice_read+0x10/0x10 [ 1633.339343][T29718] ? look_up_lock_class+0x55/0x120 [ 1633.339377][T29718] ? alloc_pipe_info+0x1ec/0x590 [ 1633.339406][T29718] ? lockdep_init_map_type+0x5c/0x250 [ 1633.339432][T29718] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1633.339456][T29718] ? __pfx_copy_splice_read+0x10/0x10 [ 1633.339492][T29718] do_splice_read+0x285/0x370 [ 1633.339517][T29718] splice_direct_to_actor+0x2a1/0xa30 [ 1633.339559][T29718] ? __pfx_direct_splice_actor+0x10/0x10 [ 1633.339596][T29718] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1633.339629][T29718] do_splice_direct+0x174/0x240 [ 1633.339653][T29718] ? __pfx_do_splice_direct+0x10/0x10 [ 1633.339675][T29718] ? common_file_perm+0x1ab/0x4f0 [ 1633.339700][T29718] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1633.339744][T29718] ? rw_verify_area+0xce/0x6d0 [ 1633.339781][T29718] do_sendfile+0xadc/0xe20 [ 1633.339835][T29718] ? __pfx_do_sendfile+0x10/0x10 [ 1633.339871][T29718] ? __fget_files+0x21f/0x3d0 [ 1633.339900][T29718] __x64_sys_sendfile64+0x1d8/0x220 [ 1633.339927][T29718] ? ksys_write+0x1ac/0x250 [ 1633.339948][T29718] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1633.339983][T29718] do_syscall_64+0x106/0xf80 [ 1633.340016][T29718] ? clear_bhb_loop+0x40/0x90 [ 1633.340043][T29718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.340066][T29718] RIP: 0033:0x7f9cf799bf79 [ 1633.340083][T29718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.340106][T29718] RSP: 002b:00007f9cf889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1633.340127][T29718] RAX: ffffffffffffffda RBX: 00007f9cf7c15fa0 RCX: 00007f9cf799bf79 [ 1633.340148][T29718] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1633.340161][T29718] RBP: 00007f9cf889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.340175][T29718] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1633.340189][T29718] R13: 00007f9cf7c16038 R14: 00007f9cf7c15fa0 R15: 00007ffc141a43e8 [ 1633.340237][T29718] [ 1634.219419][T29723] FAULT_INJECTION: forcing a failure. [ 1634.219419][T29723] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.242028][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 1634.271491][T29723] CPU: 0 UID: 0 PID: 29723 Comm: syz.2.5949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1634.271535][T29723] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1634.271545][T29723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1634.271560][T29723] Call Trace: [ 1634.271569][T29723] [ 1634.271578][T29723] dump_stack_lvl+0x100/0x190 [ 1634.271617][T29723] should_fail_ex.cold+0x5/0xa [ 1634.271645][T29723] should_failslab+0xc2/0x120 [ 1634.271674][T29723] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1634.271701][T29723] ? inode_set_ctime_to_ts+0x12f/0x3a0 [ 1634.271739][T29723] ? __d_alloc+0x34/0xa80 [ 1634.271771][T29723] ? __d_alloc+0x34/0xa80 [ 1634.271797][T29723] __d_alloc+0x34/0xa80 [ 1634.271828][T29723] d_alloc_pseudo+0x1c/0xc0 [ 1634.271863][T29723] alloc_file_pseudo+0xcf/0x230 [ 1634.271897][T29723] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1634.271928][T29723] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1634.271959][T29723] create_pipe_files+0x360/0x970 [ 1634.271989][T29723] do_pipe2+0xbd/0x1e0 [ 1634.272015][T29723] ? __pfx_do_pipe2+0x10/0x10 [ 1634.272040][T29723] ? xfd_validate_state+0x129/0x190 [ 1634.272079][T29723] __x64_sys_pipe+0x33/0x50 [ 1634.272105][T29723] do_syscall_64+0x106/0xf80 [ 1634.272142][T29723] ? clear_bhb_loop+0x40/0x90 [ 1634.272171][T29723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.272196][T29723] RIP: 0033:0x7fec8ed9bf79 [ 1634.272217][T29723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.272242][T29723] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1634.272266][T29723] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1634.272283][T29723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1634.272298][T29723] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1634.272313][T29723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.272328][T29723] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1634.272359][T29723] [ 1634.897790][T29737] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1634.969563][T29731] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1635.003623][T29734] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1635.233075][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5953'. [ 1636.026795][T29765] FAULT_INJECTION: forcing a failure. [ 1636.026795][T29765] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.116334][T29765] CPU: 0 UID: 0 PID: 29765 Comm: syz.4.5959 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1636.116372][T29765] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1636.116382][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1636.116395][T29765] Call Trace: [ 1636.116404][T29765] [ 1636.116413][T29765] dump_stack_lvl+0x100/0x190 [ 1636.116448][T29765] should_fail_ex.cold+0x5/0xa [ 1636.116473][T29765] should_failslab+0xc2/0x120 [ 1636.116498][T29765] ? alloc_pipe_info+0x1ec/0x590 [ 1636.116521][T29765] __kmalloc_noprof+0xf6/0x9c0 [ 1636.116561][T29765] ? alloc_pipe_info+0x1ec/0x590 [ 1636.116583][T29765] alloc_pipe_info+0x1ec/0x590 [ 1636.116609][T29765] create_pipe_files+0x8c/0x970 [ 1636.116636][T29765] do_pipe2+0xbd/0x1e0 [ 1636.116659][T29765] ? __pfx_do_pipe2+0x10/0x10 [ 1636.116703][T29765] ? xfd_validate_state+0x129/0x190 [ 1636.116739][T29765] __x64_sys_pipe+0x33/0x50 [ 1636.116764][T29765] do_syscall_64+0x106/0xf80 [ 1636.116799][T29765] ? clear_bhb_loop+0x40/0x90 [ 1636.116827][T29765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.116851][T29765] RIP: 0033:0x7fb563f9bf79 [ 1636.116869][T29765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.116893][T29765] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1636.116916][T29765] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1636.116932][T29765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1636.116947][T29765] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.116961][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.116976][T29765] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1636.117006][T29765] [ 1636.319297][T29761] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1636.441714][T29768] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1636.516110][T29764] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1637.295241][T29786] FAULT_INJECTION: forcing a failure. [ 1637.295241][T29786] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.375966][T29786] CPU: 0 UID: 0 PID: 29786 Comm: syz.4.5964 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1637.376007][T29786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1637.376016][T29786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1637.376030][T29786] Call Trace: [ 1637.376039][T29786] [ 1637.376047][T29786] dump_stack_lvl+0x100/0x190 [ 1637.376083][T29786] should_fail_ex.cold+0x5/0xa [ 1637.376103][T29786] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1637.376155][T29786] should_failslab+0xc2/0x120 [ 1637.376183][T29786] kmem_cache_alloc_noprof+0x83/0x780 [ 1637.376209][T29786] ? skb_clone+0x190/0x400 [ 1637.376239][T29786] ? skb_clone+0x190/0x400 [ 1637.376263][T29786] skb_clone+0x190/0x400 [ 1637.376289][T29786] netlink_deliver_tap+0xaed/0xcc0 [ 1637.376322][T29786] netlink_unicast+0x650/0x870 [ 1637.376354][T29786] ? __pfx_netlink_unicast+0x10/0x10 [ 1637.376392][T29786] netlink_sendmsg+0x8b0/0xda0 [ 1637.376424][T29786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.376451][T29786] ? __import_iovec+0x1d2/0x640 [ 1637.376478][T29786] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1637.376517][T29786] ____sys_sendmsg+0xa54/0xc30 [ 1637.376562][T29786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1637.376603][T29786] ___sys_sendmsg+0x190/0x1e0 [ 1637.376636][T29786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1637.376697][T29786] __sys_sendmsg+0x170/0x220 [ 1637.376721][T29786] ? __pfx___sys_sendmsg+0x10/0x10 [ 1637.376760][T29786] do_syscall_64+0x106/0xf80 [ 1637.376792][T29786] ? clear_bhb_loop+0x40/0x90 [ 1637.376817][T29786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.376841][T29786] RIP: 0033:0x7fb563f9bf79 [ 1637.376858][T29786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.376897][T29786] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.376920][T29786] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1637.376936][T29786] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 0000000000000004 [ 1637.376950][T29786] RBP: 00007fb564d70090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.376964][T29786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.376978][T29786] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1637.377008][T29786] [ 1637.767757][T29795] FAULT_INJECTION: forcing a failure. [ 1637.767757][T29795] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.780455][T29795] CPU: 0 UID: 0 PID: 29795 Comm: syz.2.5968 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1637.780496][T29795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1637.780506][T29795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1637.780521][T29795] Call Trace: [ 1637.780529][T29795] [ 1637.780538][T29795] dump_stack_lvl+0x100/0x190 [ 1637.780576][T29795] should_fail_ex.cold+0x5/0xa [ 1637.780604][T29795] should_failslab+0xc2/0x120 [ 1637.780633][T29795] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1637.780661][T29795] ? lockdep_init_map_type+0x5c/0x250 [ 1637.780687][T29795] ? __d_alloc+0x34/0xa80 [ 1637.780719][T29795] ? __d_alloc+0x34/0xa80 [ 1637.780745][T29795] __d_alloc+0x34/0xa80 [ 1637.780775][T29795] d_alloc_pseudo+0x1c/0xc0 [ 1637.780811][T29795] alloc_file_pseudo+0xcf/0x230 [ 1637.780846][T29795] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1637.780879][T29795] ? alloc_fd+0x476/0x790 [ 1637.780908][T29795] sock_alloc_file+0x50/0x210 [ 1637.780939][T29795] __sys_socket+0x1c0/0x260 [ 1637.780974][T29795] ? fput+0x79/0x100 [ 1637.781002][T29795] ? __pfx___sys_socket+0x10/0x10 [ 1637.781038][T29795] ? xfd_validate_state+0x129/0x190 [ 1637.781075][T29795] __x64_sys_socket+0x72/0xb0 [ 1637.781118][T29795] ? lockdep_hardirqs_on+0x78/0x100 [ 1637.781160][T29795] do_syscall_64+0x106/0xf80 [ 1637.781197][T29795] ? clear_bhb_loop+0x40/0x90 [ 1637.781227][T29795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.781252][T29795] RIP: 0033:0x7fec8ed9bf79 [ 1637.781271][T29795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.781296][T29795] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1637.781320][T29795] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1637.781336][T29795] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1637.781352][T29795] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.781367][T29795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.781394][T29795] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1637.781435][T29795] [ 1638.016900][T29797] __nla_validate_parse: 3 callbacks suppressed [ 1638.016920][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1639.277496][T29828] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1639.314994][T29831] FAULT_INJECTION: forcing a failure. [ 1639.314994][T29831] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.363547][T29831] CPU: 0 UID: 0 PID: 29831 Comm: syz.1.5973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1639.363588][T29831] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1639.363599][T29831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1639.363613][T29831] Call Trace: [ 1639.363621][T29831] [ 1639.363631][T29831] dump_stack_lvl+0x100/0x190 [ 1639.363668][T29831] should_fail_ex.cold+0x5/0xa [ 1639.363695][T29831] should_failslab+0xc2/0x120 [ 1639.363723][T29831] ? alloc_pipe_info+0x1ec/0x590 [ 1639.363747][T29831] __kmalloc_noprof+0xf6/0x9c0 [ 1639.363790][T29831] ? alloc_pipe_info+0x1ec/0x590 [ 1639.363814][T29831] alloc_pipe_info+0x1ec/0x590 [ 1639.363838][T29831] ? aa_file_perm+0x277/0x1530 [ 1639.363894][T29831] splice_direct_to_actor+0x78f/0xa30 [ 1639.363921][T29831] ? __pfx_direct_splice_actor+0x10/0x10 [ 1639.363945][T29831] ? __pfx_aa_file_perm+0x10/0x10 [ 1639.363985][T29831] ? futex_hash+0x2c5/0x380 [ 1639.364021][T29831] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1639.364055][T29831] do_splice_direct+0x174/0x240 [ 1639.364094][T29831] ? __pfx_do_splice_direct+0x10/0x10 [ 1639.364116][T29831] ? common_file_perm+0x1ab/0x4f0 [ 1639.364140][T29831] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1639.364184][T29831] ? rw_verify_area+0xce/0x6d0 [ 1639.364222][T29831] do_sendfile+0xadc/0xe20 [ 1639.364265][T29831] ? __pfx_do_sendfile+0x10/0x10 [ 1639.364309][T29831] ? rcu_read_unlock+0x17/0x60 [ 1639.364367][T29831] __x64_sys_sendfile64+0x1d8/0x220 [ 1639.364396][T29831] ? xfd_validate_state+0x129/0x190 [ 1639.364425][T29831] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1639.364463][T29831] do_syscall_64+0x106/0xf80 [ 1639.364499][T29831] ? clear_bhb_loop+0x40/0x90 [ 1639.364529][T29831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.364554][T29831] RIP: 0033:0x7f9cf799bf79 [ 1639.364574][T29831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.364601][T29831] RSP: 002b:00007f9cf889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1639.364625][T29831] RAX: ffffffffffffffda RBX: 00007f9cf7c15fa0 RCX: 00007f9cf799bf79 [ 1639.364642][T29831] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1639.364657][T29831] RBP: 00007f9cf7a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.364672][T29831] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1639.364687][T29831] R13: 00007f9cf7c16038 R14: 00007f9cf7c15fa0 R15: 00007ffc141a43e8 [ 1639.364718][T29831] [ 1639.389148][T29824] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1639.503886][T29826] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1640.634843][T29849] FAULT_INJECTION: forcing a failure. [ 1640.634843][T29849] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.634974][T29849] CPU: 0 UID: 0 PID: 29849 Comm: syz.4.5980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1640.635014][T29849] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1640.635024][T29849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1640.635039][T29849] Call Trace: [ 1640.635046][T29849] [ 1640.635056][T29849] dump_stack_lvl+0x100/0x190 [ 1640.635093][T29849] should_fail_ex.cold+0x5/0xa [ 1640.635120][T29849] should_failslab+0xc2/0x120 [ 1640.635149][T29849] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1640.635176][T29849] ? inode_set_ctime_to_ts+0x12f/0x3a0 [ 1640.635206][T29849] ? __d_alloc+0x34/0xa80 [ 1640.635237][T29849] ? __d_alloc+0x34/0xa80 [ 1640.635263][T29849] __d_alloc+0x34/0xa80 [ 1640.635293][T29849] d_alloc_pseudo+0x1c/0xc0 [ 1640.635329][T29849] alloc_file_pseudo+0xcf/0x230 [ 1640.635367][T29849] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1640.635398][T29849] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1640.635428][T29849] create_pipe_files+0x360/0x970 [ 1640.635458][T29849] do_pipe2+0xbd/0x1e0 [ 1640.635484][T29849] ? __pfx_do_pipe2+0x10/0x10 [ 1640.635521][T29849] ? xfd_validate_state+0x129/0x190 [ 1640.635558][T29849] __x64_sys_pipe+0x33/0x50 [ 1640.635583][T29849] do_syscall_64+0x106/0xf80 [ 1640.635618][T29849] ? clear_bhb_loop+0x40/0x90 [ 1640.635647][T29849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.635670][T29849] RIP: 0033:0x7fb563f9bf79 [ 1640.635688][T29849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.635712][T29849] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1640.635734][T29849] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1640.635750][T29849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1640.635765][T29849] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.635779][T29849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.635793][T29849] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1640.635823][T29849] [ 1641.672526][T29866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5985'. [ 1641.675010][T29866] FAULT_INJECTION: forcing a failure. [ 1641.675010][T29866] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.675049][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.4.5985 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1641.675087][T29866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1641.675098][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1641.675113][T29866] Call Trace: [ 1641.675121][T29866] [ 1641.675130][T29866] dump_stack_lvl+0x100/0x190 [ 1641.675168][T29866] should_fail_ex.cold+0x5/0xa [ 1641.675195][T29866] should_failslab+0xc2/0x120 [ 1641.675224][T29866] kmem_cache_alloc_noprof+0x83/0x780 [ 1641.675250][T29866] ? d_instantiate+0x90/0xb0 [ 1641.675279][T29866] ? alloc_empty_file+0x55/0x1c0 [ 1641.675315][T29866] ? alloc_empty_file+0x55/0x1c0 [ 1641.675345][T29866] alloc_empty_file+0x55/0x1c0 [ 1641.675378][T29866] alloc_file_pseudo+0x13a/0x230 [ 1641.675416][T29866] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1641.675447][T29866] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1641.675478][T29866] create_pipe_files+0x360/0x970 [ 1641.675509][T29866] do_pipe2+0xbd/0x1e0 [ 1641.675547][T29866] ? __pfx_do_pipe2+0x10/0x10 [ 1641.675571][T29866] ? xfd_validate_state+0x129/0x190 [ 1641.675608][T29866] __x64_sys_pipe+0x33/0x50 [ 1641.675632][T29866] do_syscall_64+0x106/0xf80 [ 1641.675668][T29866] ? clear_bhb_loop+0x40/0x90 [ 1641.675696][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.675720][T29866] RIP: 0033:0x7fb563f9bf79 [ 1641.675745][T29866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.675768][T29866] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1641.675791][T29866] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1641.675807][T29866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1641.675821][T29866] RBP: 00007fb5640327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.675836][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.675850][T29866] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1641.675879][T29866] [ 1642.338064][T29879] FAULT_INJECTION: forcing a failure. [ 1642.338064][T29879] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.338135][T29879] CPU: 0 UID: 0 PID: 29879 Comm: syz.4.5990 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1642.338170][T29879] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1642.338179][T29879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1642.338193][T29879] Call Trace: [ 1642.338201][T29879] [ 1642.338209][T29879] dump_stack_lvl+0x100/0x190 [ 1642.338244][T29879] should_fail_ex.cold+0x5/0xa [ 1642.338270][T29879] should_failslab+0xc2/0x120 [ 1642.338296][T29879] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1642.338332][T29879] __kmalloc_noprof+0xf6/0x9c0 [ 1642.338365][T29879] ? iter_file_splice_write+0x1d3/0x10a0 [ 1642.338397][T29879] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1642.338432][T29879] kernfs_fop_write_iter+0x26a/0x5f0 [ 1642.338472][T29879] iter_file_splice_write+0x82b/0x10a0 [ 1642.338510][T29879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1642.338540][T29879] ? __pfx_copy_splice_read+0x10/0x10 [ 1642.338577][T29879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1642.338608][T29879] direct_splice_actor+0x192/0x6c0 [ 1642.338636][T29879] splice_direct_to_actor+0x345/0xa30 [ 1642.338660][T29879] ? __pfx_direct_splice_actor+0x10/0x10 [ 1642.338697][T29879] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1642.338728][T29879] do_splice_direct+0x174/0x240 [ 1642.338751][T29879] ? __pfx_do_splice_direct+0x10/0x10 [ 1642.338773][T29879] ? common_file_perm+0x1ab/0x4f0 [ 1642.338797][T29879] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1642.338839][T29879] ? rw_verify_area+0xce/0x6d0 [ 1642.338876][T29879] do_sendfile+0xadc/0xe20 [ 1642.338918][T29879] ? __pfx_do_sendfile+0x10/0x10 [ 1642.338954][T29879] ? __fget_files+0x21f/0x3d0 [ 1642.338984][T29879] __x64_sys_sendfile64+0x1d8/0x220 [ 1642.339010][T29879] ? ksys_write+0x1ac/0x250 [ 1642.339031][T29879] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1642.339067][T29879] do_syscall_64+0x106/0xf80 [ 1642.339101][T29879] ? clear_bhb_loop+0x40/0x90 [ 1642.339128][T29879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.339152][T29879] RIP: 0033:0x7fb563f9bf79 [ 1642.339169][T29879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.339192][T29879] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1642.339215][T29879] RAX: ffffffffffffffda RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1642.339230][T29879] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1642.339243][T29879] RBP: 00007fb564d70090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.339257][T29879] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1642.339271][T29879] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1642.339300][T29879] [ 1642.467803][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5991'. [ 1643.689001][T29896] FAULT_INJECTION: forcing a failure. [ 1643.689001][T29896] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.738786][T29896] CPU: 0 UID: 0 PID: 29896 Comm: syz.2.5996 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1643.738835][T29896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1643.738844][T29896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1643.738858][T29896] Call Trace: [ 1643.738865][T29896] [ 1643.738892][T29896] dump_stack_lvl+0x100/0x190 [ 1643.738930][T29896] should_fail_ex.cold+0x5/0xa [ 1643.738956][T29896] should_failslab+0xc2/0x120 [ 1643.738984][T29896] ? tomoyo_encode2+0xfb/0x3c0 [ 1643.739011][T29896] __kmalloc_noprof+0xf6/0x9c0 [ 1643.739045][T29896] ? __pfx_tomoyo_get_local_path+0x10/0x10 [ 1643.739074][T29896] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1643.739119][T29896] ? tomoyo_encode2+0xfb/0x3c0 [ 1643.739144][T29896] tomoyo_encode2+0xfb/0x3c0 [ 1643.739174][T29896] tomoyo_encode+0x29/0x50 [ 1643.739199][T29896] tomoyo_realpath_from_path+0x18c/0x690 [ 1643.739232][T29896] tomoyo_check_open_permission+0x2af/0x3c0 [ 1643.739256][T29896] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1643.739304][T29896] ? do_raw_spin_lock+0x128/0x260 [ 1643.739332][T29896] ? path_get+0x61/0x80 [ 1643.739360][T29896] tomoyo_file_open+0x6b/0x90 [ 1643.739392][T29896] security_file_open+0xb5/0x1e0 [ 1643.739417][T29896] do_dentry_open+0x5aa/0x1660 [ 1643.739442][T29896] ? security_inode_permission+0xbf/0x250 [ 1643.739486][T29896] vfs_open+0x82/0x3f0 [ 1643.739521][T29896] path_openat+0x208c/0x31a0 [ 1643.739555][T29896] ? __pfx_path_openat+0x10/0x10 [ 1643.739591][T29896] do_file_open+0x20e/0x430 [ 1643.739618][T29896] ? __pfx_do_file_open+0x10/0x10 [ 1643.739663][T29896] ? alloc_fd+0x476/0x790 [ 1643.739690][T29896] ? do_getname+0x191/0x390 [ 1643.739723][T29896] do_sys_openat2+0x10d/0x1e0 [ 1643.739755][T29896] ? __pfx_do_sys_openat2+0x10/0x10 [ 1643.739798][T29896] __x64_sys_openat+0x12d/0x210 [ 1643.739839][T29896] ? __pfx___x64_sys_openat+0x10/0x10 [ 1643.739871][T29896] ? xfd_validate_state+0x129/0x190 [ 1643.739909][T29896] do_syscall_64+0x106/0xf80 [ 1643.739945][T29896] ? clear_bhb_loop+0x40/0x90 [ 1643.739974][T29896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.739998][T29896] RIP: 0033:0x7fec8ed9bf79 [ 1643.740016][T29896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.740041][T29896] RSP: 002b:00007fec8fcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1643.740064][T29896] RAX: ffffffffffffffda RBX: 00007fec8f015fa0 RCX: 00007fec8ed9bf79 [ 1643.740080][T29896] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1643.740096][T29896] RBP: 00007fec8ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.740110][T29896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.740125][T29896] R13: 00007fec8f016038 R14: 00007fec8f015fa0 R15: 00007ffd70a99ff8 [ 1643.740156][T29896] [ 1644.068325][T29896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1644.271194][T29912] FAULT_INJECTION: forcing a failure. [ 1644.271194][T29912] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.284645][T29912] CPU: 0 UID: 0 PID: 29912 Comm: syz.3.6001 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1644.284685][T29912] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1644.284694][T29912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1644.284709][T29912] Call Trace: [ 1644.284723][T29912] [ 1644.284733][T29912] dump_stack_lvl+0x100/0x190 [ 1644.284770][T29912] should_fail_ex.cold+0x5/0xa [ 1644.284797][T29912] should_failslab+0xc2/0x120 [ 1644.284825][T29912] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1644.284853][T29912] ? nfs_netns_identifier_store+0xe3/0x150 [ 1644.284887][T29912] ? kmemdup_nul+0x49/0xd0 [ 1644.284909][T29912] kmemdup_nul+0x49/0xd0 [ 1644.284934][T29912] nfs_netns_identifier_store+0xe3/0x150 [ 1644.284965][T29912] ? __pfx_nfs_netns_identifier_store+0x10/0x10 [ 1644.284993][T29912] kobj_attr_store+0x58/0x80 [ 1644.285031][T29912] ? __pfx_kobj_attr_store+0x10/0x10 [ 1644.285069][T29912] sysfs_kf_write+0xf2/0x150 [ 1644.285096][T29912] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1644.285133][T29912] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1644.285161][T29912] iter_file_splice_write+0x82b/0x10a0 [ 1644.285212][T29912] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1644.285245][T29912] ? __pfx_copy_splice_read+0x10/0x10 [ 1644.285283][T29912] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1644.285311][T29912] direct_splice_actor+0x192/0x6c0 [ 1644.285338][T29912] splice_direct_to_actor+0x345/0xa30 [ 1644.285364][T29912] ? __pfx_direct_splice_actor+0x10/0x10 [ 1644.285394][T29912] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1644.285432][T29912] do_splice_direct+0x174/0x240 [ 1644.285495][T29912] ? __pfx_do_splice_direct+0x10/0x10 [ 1644.285517][T29912] ? common_file_perm+0x1ab/0x4f0 [ 1644.285542][T29912] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1644.285596][T29912] ? rw_verify_area+0xce/0x6d0 [ 1644.285630][T29912] do_sendfile+0xadc/0xe20 [ 1644.285669][T29912] ? __pfx_do_sendfile+0x10/0x10 [ 1644.285702][T29912] ? __fget_files+0x21f/0x3d0 [ 1644.285732][T29912] __x64_sys_sendfile64+0x1d8/0x220 [ 1644.285757][T29912] ? ksys_write+0x1ac/0x250 [ 1644.285795][T29912] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1644.285838][T29912] do_syscall_64+0x106/0xf80 [ 1644.285871][T29912] ? clear_bhb_loop+0x40/0x90 [ 1644.285920][T29912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.285944][T29912] RIP: 0033:0x7f9c5539bf79 [ 1644.285963][T29912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.285986][T29912] RSP: 002b:00007f9c56267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1644.286008][T29912] RAX: ffffffffffffffda RBX: 00007f9c55615fa0 RCX: 00007f9c5539bf79 [ 1644.286023][T29912] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1644.286037][T29912] RBP: 00007f9c56267090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.286051][T29912] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1644.286065][T29912] R13: 00007f9c55616038 R14: 00007f9c55615fa0 R15: 00007fff2ae583c8 [ 1644.286095][T29912] [ 1644.922339][T29916] FAULT_INJECTION: forcing a failure. [ 1644.922339][T29916] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.957518][T29916] CPU: 0 UID: 0 PID: 29916 Comm: syz.2.6002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1644.957567][T29916] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1644.957576][T29916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1644.957592][T29916] Call Trace: [ 1644.957599][T29916] [ 1644.957608][T29916] dump_stack_lvl+0x100/0x190 [ 1644.957644][T29916] should_fail_ex.cold+0x5/0xa [ 1644.957671][T29916] should_failslab+0xc2/0x120 [ 1644.957698][T29916] kmem_cache_alloc_noprof+0x83/0x780 [ 1644.957723][T29916] ? vm_area_dup+0x27/0x8e0 [ 1644.957760][T29916] ? vm_area_dup+0x27/0x8e0 [ 1644.957791][T29916] vm_area_dup+0x27/0x8e0 [ 1644.957825][T29916] __split_vma+0x18c/0xe30 [ 1644.957863][T29916] ? __pfx___split_vma+0x10/0x10 [ 1644.957895][T29916] ? validate_mm+0x261/0x4e0 [ 1644.957934][T29916] ? validate_mm+0x392/0x4e0 [ 1644.957972][T29916] vms_gather_munmap_vmas+0x1cb/0x1320 [ 1644.958008][T29916] ? __up_read+0x2c5/0x700 [ 1644.958034][T29916] ? __pfx___up_read+0x10/0x10 [ 1644.958059][T29916] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1644.958095][T29916] ? percpu_counter_add_batch+0xb9/0x230 [ 1644.958118][T29916] ? __mt_destroy+0xa6/0x390 [ 1644.958153][T29916] ? vms_complete_munmap_vmas+0x17b/0x970 [ 1644.958196][T29916] do_vmi_align_munmap+0x287/0x5f0 [ 1644.958236][T29916] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1644.958309][T29916] do_vmi_munmap+0x1f8/0x3e0 [ 1644.958349][T29916] __vm_munmap+0x196/0x390 [ 1644.958372][T29916] ? __pfx___vm_munmap+0x10/0x10 [ 1644.958418][T29916] __x64_sys_munmap+0x59/0x80 [ 1644.958448][T29916] do_syscall_64+0x106/0xf80 [ 1644.958481][T29916] ? clear_bhb_loop+0x40/0x90 [ 1644.958508][T29916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.958530][T29916] RIP: 0033:0x7fec8ed9bda7 [ 1644.958549][T29916] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.958571][T29916] RSP: 002b:00007fec8fc91d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1644.958612][T29916] RAX: ffffffffffffffda RBX: 00007fec88000000 RCX: 00007fec8ed9bda7 [ 1644.958628][T29916] RDX: 0000000000000000 RSI: 0000000000e00000 RDI: 00007fec8c000000 [ 1644.958643][T29916] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1644.958657][T29916] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1644.958672][T29916] R13: 0000000000001000 R14: 00007fec8c000000 R15: 0000000003200000 [ 1644.958703][T29916] [ 1646.242725][T29925] BUG: Bad rss-counter state mm:ffff88807d009880 type:MM_FILEPAGES val:352 Comm:syz.2.6004 Pid:29925 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1646.641484][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1647.713194][T29027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.076776][T29027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.240254][T29027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.402224][T29027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.485566][T29934] page: refcount:3 mapcount:1 mapping:ffff88807620e4f8 index:0x20 pfn:0x58633 [ 1648.495308][T29934] memcg:ffff8880280f0000 [ 1648.499557][T29934] aops:ext4_da_aops ino:7e5 [ 1648.504073][T29934] flags: 0xfff0000000032d(locked|referenced|uptodate|lru|active|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1648.515479][T29934] raw: 00fff0000000032d ffffea0001612148 ffffea0001a25c48 ffff88807620e4f8 [ 1648.524078][T29934] raw: 0000000000000020 0000000000000000 0000000300000000 ffff8880280f0000 [ 1648.532660][T29934] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1648.539940][T29934] page_owner tracks the page as allocated [ 1648.546639][T29934] page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28995, tgid 28995 (syz.2.5754), ts 1585443886357, free_ts 1585160983549 [ 1648.569755][T29934] post_alloc_hook+0x1e1/0x250 [ 1648.574628][T29934] get_page_from_freelist+0x111d/0x3140 [ 1648.580197][T29934] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1648.586107][T29934] alloc_pages_mpol+0x1fb/0x550 [ 1648.590964][T29934] folio_alloc_noprof+0x22/0x330 [ 1648.595919][T29934] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1648.602255][T29934] filemap_alloc_folio_noprof+0x5e/0x80 [ 1648.607815][T29934] ractl_alloc_folio+0x1d/0x100 [ 1648.612669][T29934] page_cache_ra_unbounded+0x31a/0x940 [ 1648.618132][T29934] page_cache_ra_order+0xcdc/0xfe0 [ 1648.623271][T29934] filemap_fault+0x1b56/0x37c0 [ 1648.628061][T29934] __do_fault+0x10d/0x550 [ 1648.632412][T29934] do_fault+0xaf9/0x1990 [ 1648.636665][T29934] __handle_mm_fault+0x1807/0x2b50 [ 1648.641791][T29934] handle_mm_fault+0x36d/0xa20 [ 1648.646573][T29934] do_user_addr_fault+0x5a3/0x12f0 [ 1648.651705][T29934] page last free pid 29029 tgid 28995 stack trace: [ 1648.658209][T29934] free_unref_folios+0xb2a/0x1760 [ 1648.663265][T29934] folios_put_refs+0x53c/0x840 [ 1648.668088][T29934] free_pages_and_swap_cache+0x242/0x480 [ 1648.673745][T29934] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 1648.679756][T29934] tlb_finish_mmu+0x1b0/0x810 [ 1648.684448][T29934] vms_clear_ptes+0x55c/0x790 [ 1648.689146][T29934] __mmap_region+0x5cd/0x2820 [ 1648.694030][T29934] mmap_region+0x180/0x3e0 [ 1648.698454][T29934] do_mmap+0xc63/0x12f0 [ 1648.702630][T29934] vm_mmap_pgoff+0x29e/0x470 [ 1648.707243][T29934] ksys_mmap_pgoff+0x1c4/0x5b0 [ 1648.712021][T29934] __x64_sys_mmap+0x125/0x190 [ 1648.716724][T29934] do_syscall_64+0x106/0xf80 [ 1648.721361][T29934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.727445][T29934] ------------[ cut here ]------------ [ 1648.732902][T29934] kernel BUG at mm/filemap.c:155! [ 1648.737943][T29934] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1648.744194][T29934] CPU: 0 UID: 0 PID: 29934 Comm: syz.4.6007 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1648.755144][T29934] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1648.760335][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1648.770389][T29934] RIP: 0010:filemap_unaccount_folio+0x728/0xb30 [ 1648.776643][T29934] Code: 00 48 8b b5 a0 01 00 00 48 89 df e8 b2 7d 03 00 e9 3c fd ff ff e8 98 3e c7 ff 48 c7 c6 40 22 9d 8b 48 89 df e8 89 9a 12 00 90 <0f> 0b e8 81 3e c7 ff 48 c7 c6 e0 1c 9d 8b 48 89 df e8 72 9a 12 00 [ 1648.796249][T29934] RSP: 0018:ffffc90004e9f2b8 EFLAGS: 00010093 [ 1648.802321][T29934] RAX: 0000000000000000 RBX: ffffea0001618cc0 RCX: ffffc90004e9f19c [ 1648.810330][T29934] RDX: ffff888022773c80 RSI: ffffffff8251ec48 RDI: ffff888022774104 [ 1648.818307][T29934] RBP: ffffea0001618cf0 R08: 0000000000000001 R09: 0000000000000000 [ 1648.826281][T29934] R10: 0000000000000001 R11: 000000000005e770 R12: ffff88807620e4f8 [ 1648.834278][T29934] R13: ffffea0001618cc8 R14: 0000000000000001 R15: ffffc90004e9f5f0 [ 1648.842273][T29934] FS: 0000000000000000(0000) GS:ffff8881245bf000(0000) knlGS:0000000000000000 [ 1648.851226][T29934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.857811][T29934] CR2: 00005639e310dee8 CR3: 000000002ed46000 CR4: 00000000003526f0 [ 1648.865782][T29934] Call Trace: [ 1648.869063][T29934] [ 1648.871996][T29934] delete_from_page_cache_batch+0x1db/0xc60 [ 1648.877911][T29934] ? unmap_mapping_folio+0x250/0x450 [ 1648.883210][T29934] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 1648.889734][T29934] ? __pfx_unmap_mapping_folio+0x10/0x10 [ 1648.895394][T29934] ? folio_mapping+0x11a/0x250 [ 1648.900173][T29934] truncate_inode_pages_range+0x276/0x1050 [ 1648.906020][T29934] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1648.912320][T29934] ? truncate_inode_pages_final+0x62/0x90 [ 1648.918056][T29934] ? truncate_inode_pages_final+0x62/0x90 [ 1648.923790][T29934] ? rcu_is_watching+0x12/0xc0 [ 1648.928566][T29934] ? _raw_spin_unlock_irq+0x23/0x50 [ 1648.933778][T29934] ? lockdep_hardirqs_on+0x78/0x100 [ 1648.939011][T29934] ext4_evict_inode+0x3c1/0x1760 [ 1648.943974][T29934] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1648.950070][T29934] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1648.955453][T29934] ? evict+0x37e/0xad0 [ 1648.959545][T29934] ? evict+0x37e/0xad0 [ 1648.963647][T29934] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1648.969031][T29934] evict+0x3c2/0xad0 [ 1648.972948][T29934] ? find_held_lock+0x2b/0x80 [ 1648.977631][T29934] ? __pfx_evict+0x10/0x10 [ 1648.982092][T29934] ? iput.part.0+0x5fd/0xf50 [ 1648.986708][T29934] iput.part.0+0x605/0xf50 [ 1648.991129][T29934] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1648.996429][T29934] iput+0x35/0x40 [ 1649.000076][T29934] dentry_unlink_inode+0x2a1/0x490 [ 1649.005218][T29934] __dentry_kill+0x1d0/0x600 [ 1649.009822][T29934] finish_dput+0x76/0x480 [ 1649.014178][T29934] dput.part.0+0x456/0x570 [ 1649.018624][T29934] dput+0x1f/0x30 [ 1649.022275][T29934] __fput+0x519/0xb40 [ 1649.026272][T29934] task_work_run+0x150/0x240 [ 1649.030869][T29934] ? __pfx_task_work_run+0x10/0x10 [ 1649.035992][T29934] do_exit+0x829/0x2a30 [ 1649.040161][T29934] ? __pfx_do_exit+0x10/0x10 [ 1649.044828][T29934] ? do_raw_spin_lock+0x128/0x260 [ 1649.049879][T29934] ? find_held_lock+0x2b/0x80 [ 1649.054583][T29934] ? get_signal+0x7e0/0x21e0 [ 1649.059204][T29934] do_group_exit+0xd5/0x2a0 [ 1649.063722][T29934] get_signal+0x1ec7/0x21e0 [ 1649.068254][T29934] ? __pfx___mm_populate+0x10/0x10 [ 1649.073409][T29934] ? __pfx_get_signal+0x10/0x10 [ 1649.078287][T29934] ? vm_mmap_pgoff+0x103/0x470 [ 1649.083081][T29934] arch_do_signal_or_restart+0x91/0x770 [ 1649.088638][T29934] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1649.094800][T29934] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1649.099669][T29934] exit_to_user_mode_loop+0x86/0x4a0 [ 1649.104987][T29934] ? rcu_is_watching+0x12/0xc0 [ 1649.109773][T29934] do_syscall_64+0x668/0xf80 [ 1649.114398][T29934] ? clear_bhb_loop+0x40/0x90 [ 1649.119099][T29934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.125024][T29934] RIP: 0033:0x7fb563f9bf79 [ 1649.129642][T29934] Code: Unable to access opcode bytes at 0x7fb563f9bf4f. [ 1649.136665][T29934] RSP: 002b:00007fb564d70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1649.145171][T29934] RAX: 0000000000000000 RBX: 00007fb564215fa0 RCX: 00007fb563f9bf79 [ 1649.153182][T29934] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1649.161162][T29934] RBP: 00007fb5640327e0 R08: 0000000000000002 R09: 0000000000008000 [ 1649.169152][T29934] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1649.177135][T29934] R13: 00007fb564216038 R14: 00007fb564215fa0 R15: 00007ffdc747a488 [ 1649.185127][T29934] [ 1649.188159][T29934] Modules linked in: [ 1649.192081][T29934] ---[ end trace 0000000000000000 ]--- [ 1649.197545][T29934] RIP: 0010:filemap_unaccount_folio+0x728/0xb30 [ 1649.203892][T29934] Code: 00 48 8b b5 a0 01 00 00 48 89 df e8 b2 7d 03 00 e9 3c fd ff ff e8 98 3e c7 ff 48 c7 c6 40 22 9d 8b 48 89 df e8 89 9a 12 00 90 <0f> 0b e8 81 3e c7 ff 48 c7 c6 e0 1c 9d 8b 48 89 df e8 72 9a 12 00 [ 1649.223613][T29934] RSP: 0018:ffffc90004e9f2b8 EFLAGS: 00010093 [ 1649.229687][T29934] RAX: 0000000000000000 RBX: ffffea0001618cc0 RCX: ffffc90004e9f19c [ 1649.237679][T29934] RDX: ffff888022773c80 RSI: ffffffff8251ec48 RDI: ffff888022774104 [ 1649.245659][T29934] RBP: ffffea0001618cf0 R08: 0000000000000001 R09: 0000000000000000 [ 1649.253639][T29934] R10: 0000000000000001 R11: 000000000005e770 R12: ffff88807620e4f8 [ 1649.261622][T29934] R13: ffffea0001618cc8 R14: 0000000000000001 R15: ffffc90004e9f5f0 [ 1649.269608][T29934] FS: 0000000000000000(0000) GS:ffff8881245bf000(0000) knlGS:0000000000000000 [ 1649.278561][T29934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1649.285151][T29934] CR2: 00005639e310dee8 CR3: 000000002ed46000 CR4: 00000000003526f0 [ 1649.293136][T29934] Kernel panic - not syncing: Fatal exception [ 1649.299280][T29934] Kernel Offset: disabled [ 1649.303601][T29934] Rebooting in 86400 seconds..