last executing test programs: 7.858552501s ago: executing program 0 (id=3443): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x160082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) 6.506133973s ago: executing program 0 (id=3447): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0xa802, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) 6.255364306s ago: executing program 0 (id=3448): readv$auto(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x8}, 0xe) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8802, 0x0) ioctl$auto_BLKTRACESTART2(r0, 0x1274, 0x0) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4188aec6, 0x38) 5.805502445s ago: executing program 0 (id=3453): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4.783948229s ago: executing program 0 (id=3462): unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r0, 0x0, 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x101901, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) 4.603023493s ago: executing program 3 (id=3463): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = socket(0x2, 0x3, 0x73) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) setsockopt$auto(r0, 0xff, 0x400, 0x0, 0x200) 4.101780911s ago: executing program 1 (id=3464): unshare$auto(0x20000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 3.885829573s ago: executing program 1 (id=3465): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x400040, 0x104, 0x8, 0x100000000}}) mlockall$auto(0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 3.552036438s ago: executing program 3 (id=3466): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000004}}) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mlockall$auto(0x7) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 2.411880906s ago: executing program 2 (id=3467): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r0 = epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) 2.357091905s ago: executing program 2 (id=3468): write$auto(0xffffffffffffffff, 0x0, 0x60) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x300040c0}, 0x24000080) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x21) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.356960595s ago: executing program 3 (id=3469): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) 2.244562469s ago: executing program 0 (id=3470): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) ioctl$auto(0x1, 0x8983, 0x4) 2.244457408s ago: executing program 3 (id=3471): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 2.173302503s ago: executing program 1 (id=3472): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 2.008705155s ago: executing program 2 (id=3473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x2, 0x20009, 0x4000000000df, 0x40000000000ebf, 0xffffffffffffffff, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) shutdown$auto(0x200000003, 0x2) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="57e72cbd700003dcdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x8010) 1.188697136s ago: executing program 1 (id=3474): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) 958.737188ms ago: executing program 1 (id=3475): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) mmap$auto(0x7, 0x40009, 0x9, 0x9b71, 0xffffffffffffffff, 0x4028000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x161000, 0x0) read$auto_random_fops_random(r0, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x4000090) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_thin_pool/parameters/snapshot_copy_throttle\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 735.839185ms ago: executing program 2 (id=3476): socket(0x11, 0x80003, 0x300) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x41040, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x2) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video69\x00', 0x101, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008aeba, 0x0) 532.761963ms ago: executing program 2 (id=3477): io_uring_setup$auto(0x86, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) 289.331448ms ago: executing program 1 (id=3478): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi22\x00', 0x1, 0x0) ioctl$auto(0x3, 0xc058565d, r1) 82.914223ms ago: executing program 3 (id=3479): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) tkill$auto(0x1, 0x9) 2.022898ms ago: executing program 2 (id=3480): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) 0s ago: executing program 3 (id=3481): socket(0x10, 0x2, 0x14) socket(0x18, 0x5, 0x2) r0 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) kernel console output (not intermixed with test programs): 612.686986][T16155] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3129'. [ 612.769247][T16163] FAULT_INJECTION: forcing a failure. [ 612.769247][T16163] name failslab, interval 1, probability 0, space 0, times 0 [ 612.812641][T16163] CPU: 0 UID: 0 PID: 16163 Comm: syz.0.3131 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.812687][T16163] Tainted: [L]=SOFTLOCKUP [ 612.812697][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.812713][T16163] Call Trace: [ 612.812722][T16163] [ 612.812735][T16163] dump_stack_lvl+0x100/0x190 [ 612.812786][T16163] should_fail_ex.cold+0x5/0xa [ 612.812820][T16163] should_failslab+0xc2/0x120 [ 612.812853][T16163] __kmalloc_cache_noprof+0x7a/0x6f0 [ 612.812889][T16163] ? netdev_init+0xa0/0x3c0 [ 612.812920][T16163] ? __pfx_proc_create_net_data+0x10/0x10 [ 612.812966][T16163] ? __pfx_uevent_net_rcv+0x10/0x10 [ 612.813004][T16163] netdev_init+0xa0/0x3c0 [ 612.813040][T16163] ? __pfx_netdev_init+0x10/0x10 [ 612.813074][T16163] ops_init+0x1e2/0x5f0 [ 612.813107][T16163] setup_net+0x118/0x3a0 [ 612.813137][T16163] ? __pfx_setup_net+0x10/0x10 [ 612.813167][T16163] ? mutex_init_lockdep+0xf1/0x120 [ 612.813198][T16163] copy_net_ns+0x46f/0x7c0 [ 612.813233][T16163] create_new_namespaces+0x3ea/0xac0 [ 612.813273][T16163] unshare_nsproxy_namespaces+0xf2/0x220 [ 612.813310][T16163] ksys_unshare+0x438/0xab0 [ 612.813350][T16163] ? __pfx_ksys_unshare+0x10/0x10 [ 612.813384][T16163] ? xfd_validate_state+0x129/0x190 [ 612.813410][T16163] ? exit_to_user_mode_loop+0xf3/0x670 [ 612.813465][T16163] __x64_sys_unshare+0x31/0x40 [ 612.813504][T16163] do_syscall_64+0x115/0x840 [ 612.813541][T16163] ? clear_bhb_loop+0x40/0x90 [ 612.813576][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.813604][T16163] RIP: 0033:0x7fb1a5d9ce59 [ 612.813629][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.813657][T16163] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 612.813685][T16163] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 612.813704][T16163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 612.813721][T16163] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 612.813738][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.813756][T16163] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 612.813800][T16163] [ 614.096812][ T29] audit: type=1800 audit(1781216120.968:27): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3135" name="dbroot" dev="configfs" ino=77090 res=0 errno=0 [ 617.381634][T16245] random: crng reseeded on system resumption [ 617.448388][T16245] hub 1-0:1.0: USB hub found [ 617.482190][T16245] hub 1-0:1.0: 1 port detected [ 617.855385][ T29] audit: type=1800 audit(1781216124.718:28): pid=16257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3155" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 618.333243][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3165'. [ 618.368061][T16261] bridge_slave_1: left allmulticast mode [ 618.390429][T16261] bridge_slave_1: left promiscuous mode [ 618.420368][T16261] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.468344][T16261] bridge_slave_0: left allmulticast mode [ 618.480219][T16261] bridge_slave_0: left promiscuous mode [ 618.511355][T16261] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.900945][T16288] FAULT_INJECTION: forcing a failure. [ 619.900945][T16288] name failslab, interval 1, probability 0, space 0, times 0 [ 619.936075][T16288] CPU: 0 UID: 0 PID: 16288 Comm: syz.2.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.936121][T16288] Tainted: [L]=SOFTLOCKUP [ 619.936131][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.936156][T16288] Call Trace: [ 619.936166][T16288] [ 619.936178][T16288] dump_stack_lvl+0x100/0x190 [ 619.936234][T16288] should_fail_ex.cold+0x5/0xa [ 619.936270][T16288] should_failslab+0xc2/0x120 [ 619.936305][T16288] __kmalloc_cache_noprof+0x7a/0x6f0 [ 619.936345][T16288] ? usb_control_msg+0xbc/0x4b0 [ 619.936387][T16288] ? __pfx___mutex_lock+0x10/0x10 [ 619.936434][T16288] usb_control_msg+0xbc/0x4b0 [ 619.936479][T16288] ? __pfx_usb_control_msg+0x10/0x10 [ 619.936522][T16288] ? __lock_acquire+0x4a5/0x2630 [ 619.936573][T16288] hub_ext_port_status+0x152/0x600 [ 619.936625][T16288] hub_activate+0x6d8/0x1d50 [ 619.936661][T16288] ? __pfx_hub_activate+0x10/0x10 [ 619.936687][T16288] ? usb_generic_driver_resume+0x70/0xa0 [ 619.936732][T16288] ? usbdev_notify+0x220/0x370 [ 619.936777][T16288] hub_resume+0xb0/0x400 [ 619.936801][T16288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.936840][T16288] ? __pfx_hub_resume+0x10/0x10 [ 619.936865][T16288] ? __pfx_hcd_bus_resume+0x10/0x10 [ 619.936908][T16288] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 619.936954][T16288] usb_resume_both+0x53a/0x7f0 [ 619.936991][T16288] ? __pfx_usb_resume_both+0x10/0x10 [ 619.937023][T16288] ? __rpm_callback+0x272/0x620 [ 619.937065][T16288] ? __pfx_usb_runtime_resume+0x10/0x10 [ 619.937118][T16288] ? rcu_is_watching+0x12/0xc0 [ 619.937162][T16288] ? __pfx_usb_runtime_resume+0x10/0x10 [ 619.937202][T16288] __rpm_callback+0xc8/0x620 [ 619.937243][T16288] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 619.937287][T16288] ? __pfx_usb_runtime_resume+0x10/0x10 [ 619.937326][T16288] rpm_callback+0x16a/0x1b0 [ 619.937367][T16288] ? __pfx_usb_runtime_resume+0x10/0x10 [ 619.937406][T16288] rpm_resume+0xd22/0x1330 [ 619.937450][T16288] ? usbdev_open+0x151/0x870 [ 619.937485][T16288] ? klist_put+0xcb/0x1d0 [ 619.937532][T16288] ? __pfx_rpm_resume+0x10/0x10 [ 619.937572][T16288] ? do_raw_spin_lock+0x128/0x260 [ 619.937604][T16288] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 619.937637][T16288] ? _raw_spin_lock_irqsave+0x52/0x60 [ 619.937680][T16288] __pm_runtime_resume+0xb6/0x170 [ 619.937711][T16288] usb_autoresume_device+0x23/0xe0 [ 619.937750][T16288] usbdev_open+0x228/0x870 [ 619.937788][T16288] ? kobject_get_unless_zero+0x156/0x200 [ 619.937833][T16288] ? __pfx_usbdev_open+0x10/0x10 [ 619.937869][T16288] ? chrdev_open+0x10b/0x6a0 [ 619.937902][T16288] ? chrdev_open+0x10b/0x6a0 [ 619.937942][T16288] ? __pfx_usbdev_open+0x10/0x10 [ 619.937979][T16288] chrdev_open+0x234/0x6a0 [ 619.938013][T16288] ? __pfx_apparmor_file_open+0x10/0x10 [ 619.938044][T16288] ? __pfx_chrdev_open+0x10/0x10 [ 619.938081][T16288] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 619.938128][T16288] do_dentry_open+0x6ab/0x14d0 [ 619.938168][T16288] ? __pfx_chrdev_open+0x10/0x10 [ 619.938212][T16288] vfs_open+0x82/0x3f0 [ 619.938259][T16288] path_openat+0x208c/0x31a0 [ 619.938303][T16288] ? __pfx_path_openat+0x10/0x10 [ 619.938349][T16288] do_file_open+0x20e/0x430 [ 619.938381][T16288] ? __pfx_do_file_open+0x10/0x10 [ 619.938435][T16288] ? alloc_fd+0x476/0x790 [ 619.938469][T16288] ? do_getname+0x191/0x390 [ 619.938507][T16288] do_sys_openat2+0x10d/0x1e0 [ 619.938548][T16288] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.938602][T16288] __x64_sys_openat+0x12d/0x210 [ 619.938641][T16288] ? __pfx___x64_sys_openat+0x10/0x10 [ 619.938682][T16288] ? ksys_read+0x1ac/0x250 [ 619.938718][T16288] ? rcu_is_watching+0x12/0xc0 [ 619.938754][T16288] do_syscall_64+0x115/0x840 [ 619.938793][T16288] ? clear_bhb_loop+0x40/0x90 [ 619.938827][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.938856][T16288] RIP: 0033:0x7f9c9439ce59 [ 619.938881][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.938909][T16288] RSP: 002b:00007f9c95203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.938935][T16288] RAX: ffffffffffffffda RBX: 00007f9c94615fa0 RCX: 00007f9c9439ce59 [ 619.938953][T16288] RDX: 0000000000040a02 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 619.938968][T16288] RBP: 00007f9c94432d6f R08: 0000000000000000 R09: 0000000000000000 [ 619.938982][T16288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.938997][T16288] R13: 00007f9c94616038 R14: 00007f9c94615fa0 R15: 00007ffc43b29ab8 [ 619.939035][T16288] [ 619.940609][T16288] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 622.035836][T16320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'. [ 622.066380][T16320] bridge_slave_1: left allmulticast mode [ 622.078240][T16320] bridge_slave_1: left promiscuous mode [ 622.091630][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.117603][T16320] bridge_slave_0: left allmulticast mode [ 622.126007][T16320] bridge_slave_0: left promiscuous mode [ 622.139649][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.299980][T16337] FAULT_INJECTION: forcing a failure. [ 623.299980][T16337] name failslab, interval 1, probability 0, space 0, times 0 [ 623.331928][T16337] CPU: 1 UID: 0 PID: 16337 Comm: syz.1.3180 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.331973][T16337] Tainted: [L]=SOFTLOCKUP [ 623.331984][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.332000][T16337] Call Trace: [ 623.332011][T16337] [ 623.332022][T16337] dump_stack_lvl+0x100/0x190 [ 623.332075][T16337] should_fail_ex.cold+0x5/0xa [ 623.332150][T16337] should_failslab+0xc2/0x120 [ 623.332184][T16337] __kmalloc_cache_noprof+0x7a/0x6f0 [ 623.332224][T16337] ? vidtv_psi_nit_table_init+0x9b/0x5f0 [ 623.332270][T16337] vidtv_psi_nit_table_init+0x9b/0x5f0 [ 623.332308][T16337] ? kasan_save_track+0x14/0x30 [ 623.332341][T16337] vidtv_channel_si_init+0xccf/0x18f0 [ 623.332398][T16337] vidtv_mux_init+0x526/0xbf0 [ 623.332444][T16337] vidtv_start_feed+0x34e/0x500 [ 623.332476][T16337] ? __pfx_vidtv_start_feed+0x10/0x10 [ 623.332510][T16337] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 623.332561][T16337] dmx_section_feed_start_filtering+0x3a8/0x660 [ 623.332604][T16337] dvb_dmxdev_filter_start+0x767/0xdd0 [ 623.332645][T16337] dvb_demux_do_ioctl+0xe64/0x1200 [ 623.332687][T16337] dvb_usercopy+0x167/0x340 [ 623.332729][T16337] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 623.332761][T16337] ? __pfx_dvb_usercopy+0x10/0x10 [ 623.332826][T16337] ? __fget_files+0x21f/0x3d0 [ 623.332868][T16337] dvb_demux_ioctl+0x29/0x40 [ 623.332893][T16337] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 623.332920][T16337] __x64_sys_ioctl+0x18e/0x210 [ 623.332951][T16337] do_syscall_64+0x115/0x840 [ 623.332988][T16337] ? clear_bhb_loop+0x40/0x90 [ 623.333023][T16337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.333052][T16337] RIP: 0033:0x7fbae3b9ce59 [ 623.333074][T16337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.333103][T16337] RSP: 002b:00007fbae4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.333130][T16337] RAX: ffffffffffffffda RBX: 00007fbae3e15fa0 RCX: 00007fbae3b9ce59 [ 623.333149][T16337] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 623.333167][T16337] RBP: 00007fbae3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 623.333184][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.333201][T16337] R13: 00007fbae3e16038 R14: 00007fbae3e15fa0 R15: 00007ffcbb8cae78 [ 623.333238][T16337] [ 624.609553][T16335] FAULT_INJECTION: forcing a failure. [ 624.609553][T16335] name failslab, interval 1, probability 0, space 0, times 0 [ 624.659914][T16335] CPU: 0 UID: 0 PID: 16335 Comm: syz.0.3178 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.659970][T16335] Tainted: [L]=SOFTLOCKUP [ 624.659981][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.659995][T16335] Call Trace: [ 624.660003][T16335] [ 624.660012][T16335] dump_stack_lvl+0x100/0x190 [ 624.660059][T16335] should_fail_ex.cold+0x5/0xa [ 624.660093][T16335] should_failslab+0xc2/0x120 [ 624.660127][T16335] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 624.660170][T16335] ? security_file_alloc+0x34/0x2c0 [ 624.660206][T16335] ? trace_kmem_cache_alloc+0xd5/0x100 [ 624.660245][T16335] security_file_alloc+0x34/0x2c0 [ 624.660282][T16335] init_file+0x95/0x480 [ 624.660321][T16335] alloc_empty_file+0x79/0x1c0 [ 624.660362][T16335] path_openat+0xe8/0x31a0 [ 624.660394][T16335] ? kasan_save_stack+0x3f/0x50 [ 624.660421][T16335] ? kasan_save_stack+0x30/0x50 [ 624.660444][T16335] ? kasan_save_track+0x14/0x30 [ 624.660470][T16335] ? __kasan_slab_alloc+0x89/0x90 [ 624.660498][T16335] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 624.660539][T16335] ? do_getname+0x35/0x390 [ 624.660575][T16335] ? do_sys_openat2+0xc5/0x1e0 [ 624.660616][T16335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.660651][T16335] ? __pfx_path_openat+0x10/0x10 [ 624.660695][T16335] do_file_open+0x20e/0x430 [ 624.660728][T16335] ? __pfx_do_file_open+0x10/0x10 [ 624.660786][T16335] ? alloc_fd+0x476/0x790 [ 624.660823][T16335] ? do_getname+0x191/0x390 [ 624.660865][T16335] do_sys_openat2+0x10d/0x1e0 [ 624.660905][T16335] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.660962][T16335] __x64_sys_openat+0x12d/0x210 [ 624.661005][T16335] ? __pfx___x64_sys_openat+0x10/0x10 [ 624.661045][T16335] ? ksys_read+0x1ac/0x250 [ 624.661080][T16335] ? rcu_is_watching+0x12/0xc0 [ 624.661116][T16335] do_syscall_64+0x115/0x840 [ 624.661154][T16335] ? clear_bhb_loop+0x40/0x90 [ 624.661188][T16335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.661217][T16335] RIP: 0033:0x7fb1a5d9ce59 [ 624.661241][T16335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.661270][T16335] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 624.661296][T16335] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 624.661322][T16335] RDX: 0000000000040a02 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 624.661341][T16335] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 624.661359][T16335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.661377][T16335] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 624.661417][T16335] [ 625.038066][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.044546][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.841550][T16367] netlink: 138 bytes leftover after parsing attributes in process `syz.2.3187'. [ 628.814941][T16417] random: crng reseeded on system resumption [ 628.942840][T16417] hub 1-0:1.0: USB hub found [ 628.964734][T16417] hub 1-0:1.0: 1 port detected [ 630.733566][T16397] Process accounting resumed [ 630.967688][T16431] FAULT_INJECTION: forcing a failure. [ 630.967688][T16431] name failslab, interval 1, probability 0, space 0, times 0 [ 631.000961][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.1.3207 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.001011][T16431] Tainted: [L]=SOFTLOCKUP [ 631.001021][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.001111][T16431] Call Trace: [ 631.001121][T16431] [ 631.001137][T16431] dump_stack_lvl+0x100/0x190 [ 631.001192][T16431] should_fail_ex.cold+0x5/0xa [ 631.001228][T16431] ? usb_alloc_urb+0x66/0xa0 [ 631.001266][T16431] should_failslab+0xc2/0x120 [ 631.001303][T16431] __kmalloc_noprof+0xe0/0x850 [ 631.001353][T16431] usb_alloc_urb+0x66/0xa0 [ 631.001389][T16431] usb_control_msg+0x1d3/0x4b0 [ 631.001434][T16431] ? __pfx_usb_control_msg+0x10/0x10 [ 631.001474][T16431] ? __lock_acquire+0x4a5/0x2630 [ 631.001525][T16431] hub_ext_port_status+0x152/0x600 [ 631.001576][T16431] hub_activate+0x6d8/0x1d50 [ 631.001612][T16431] ? __pfx_hub_activate+0x10/0x10 [ 631.001637][T16431] ? usb_generic_driver_resume+0x70/0xa0 [ 631.001679][T16431] ? usbdev_notify+0x220/0x370 [ 631.001727][T16431] hub_resume+0xb0/0x400 [ 631.001754][T16431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 631.001798][T16431] ? __pfx_hub_resume+0x10/0x10 [ 631.001825][T16431] ? __pfx_hcd_bus_resume+0x10/0x10 [ 631.001871][T16431] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 631.001910][T16431] usb_resume_both+0x53a/0x7f0 [ 631.001947][T16431] ? __pfx_usb_resume_both+0x10/0x10 [ 631.001978][T16431] ? __rpm_callback+0x272/0x620 [ 631.002022][T16431] ? __pfx_usb_runtime_resume+0x10/0x10 [ 631.002105][T16431] ? rcu_is_watching+0x12/0xc0 [ 631.002143][T16431] ? __pfx_usb_runtime_resume+0x10/0x10 [ 631.002183][T16431] __rpm_callback+0xc8/0x620 [ 631.002225][T16431] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 631.002263][T16431] ? __pfx_usb_runtime_resume+0x10/0x10 [ 631.002302][T16431] rpm_callback+0x16a/0x1b0 [ 631.002345][T16431] ? __pfx_usb_runtime_resume+0x10/0x10 [ 631.002386][T16431] rpm_resume+0xd22/0x1330 [ 631.002427][T16431] ? usbdev_open+0x151/0x870 [ 631.002462][T16431] ? klist_put+0xcb/0x1d0 [ 631.002508][T16431] ? __pfx_rpm_resume+0x10/0x10 [ 631.002544][T16431] ? do_raw_spin_lock+0x128/0x260 [ 631.002573][T16431] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 631.002605][T16431] ? _raw_spin_lock_irqsave+0x52/0x60 [ 631.002649][T16431] __pm_runtime_resume+0xb6/0x170 [ 631.002679][T16431] usb_autoresume_device+0x23/0xe0 [ 631.002720][T16431] usbdev_open+0x228/0x870 [ 631.002759][T16431] ? kobject_get_unless_zero+0x156/0x200 [ 631.002803][T16431] ? __pfx_usbdev_open+0x10/0x10 [ 631.002838][T16431] ? chrdev_open+0x10b/0x6a0 [ 631.002872][T16431] ? chrdev_open+0x10b/0x6a0 [ 631.002912][T16431] ? __pfx_usbdev_open+0x10/0x10 [ 631.002949][T16431] chrdev_open+0x234/0x6a0 [ 631.002984][T16431] ? __pfx_apparmor_file_open+0x10/0x10 [ 631.003015][T16431] ? __pfx_chrdev_open+0x10/0x10 [ 631.003061][T16431] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 631.003108][T16431] do_dentry_open+0x6ab/0x14d0 [ 631.003143][T16431] ? __pfx_chrdev_open+0x10/0x10 [ 631.003187][T16431] vfs_open+0x82/0x3f0 [ 631.003233][T16431] path_openat+0x208c/0x31a0 [ 631.003283][T16431] ? __pfx_path_openat+0x10/0x10 [ 631.003332][T16431] do_file_open+0x20e/0x430 [ 631.003371][T16431] ? __pfx_do_file_open+0x10/0x10 [ 631.003434][T16431] ? alloc_fd+0x476/0x790 [ 631.003471][T16431] ? do_getname+0x191/0x390 [ 631.003515][T16431] do_sys_openat2+0x10d/0x1e0 [ 631.003568][T16431] ? __pfx_do_sys_openat2+0x10/0x10 [ 631.003627][T16431] __x64_sys_openat+0x12d/0x210 [ 631.003682][T16431] ? __pfx___x64_sys_openat+0x10/0x10 [ 631.003726][T16431] ? ksys_read+0x1ac/0x250 [ 631.003763][T16431] ? rcu_is_watching+0x12/0xc0 [ 631.003800][T16431] do_syscall_64+0x115/0x840 [ 631.003835][T16431] ? clear_bhb_loop+0x40/0x90 [ 631.003867][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.003897][T16431] RIP: 0033:0x7fbae3b9ce59 [ 631.003921][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.003952][T16431] RSP: 002b:00007fbae4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.003980][T16431] RAX: ffffffffffffffda RBX: 00007fbae3e15fa0 RCX: 00007fbae3b9ce59 [ 631.004000][T16431] RDX: 0000000000040a02 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 631.004019][T16431] RBP: 00007fbae3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.004045][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.004064][T16431] R13: 00007fbae3e16038 R14: 00007fbae3e15fa0 R15: 00007ffcbb8cae78 [ 631.004102][T16431] [ 631.570311][T16431] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 631.883715][T16440] FAULT_INJECTION: forcing a failure. [ 631.883715][T16440] name failslab, interval 1, probability 0, space 0, times 0 [ 631.946322][T16440] CPU: 0 UID: 0 PID: 16440 Comm: syz.0.3206 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.946378][T16440] Tainted: [L]=SOFTLOCKUP [ 631.946387][T16440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.946404][T16440] Call Trace: [ 631.946414][T16440] [ 631.946424][T16440] dump_stack_lvl+0x100/0x190 [ 631.946488][T16440] should_fail_ex.cold+0x5/0xa [ 631.946527][T16440] should_failslab+0xc2/0x120 [ 631.946561][T16440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 631.946599][T16440] ? blk_alloc_queue_stats+0x3f/0x110 [ 631.946634][T16440] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 631.946678][T16440] ? blk_alloc_queue+0x31/0x790 [ 631.946724][T16440] blk_alloc_queue_stats+0x3f/0x110 [ 631.946759][T16440] blk_alloc_queue+0xda/0x790 [ 631.946800][T16440] blk_mq_alloc_queue+0x174/0x290 [ 631.946829][T16440] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 631.946879][T16440] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 631.946917][T16440] __blk_mq_alloc_disk+0x29/0x120 [ 631.946947][T16440] loop_add+0x498/0xb60 [ 631.946988][T16440] ? __pfx_loop_add+0x10/0x10 [ 631.947047][T16440] ? find_held_lock+0x2b/0x80 [ 631.947081][T16440] ? __fget_files+0x215/0x3d0 [ 631.947117][T16440] loop_control_ioctl+0xae/0x620 [ 631.947156][T16440] ? __pfx_loop_control_ioctl+0x10/0x10 [ 631.947205][T16440] ? __pfx_loop_control_ioctl+0x10/0x10 [ 631.947250][T16440] __x64_sys_ioctl+0x18e/0x210 [ 631.947281][T16440] do_syscall_64+0x115/0x840 [ 631.947318][T16440] ? clear_bhb_loop+0x40/0x90 [ 631.947352][T16440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.947380][T16440] RIP: 0033:0x7fb1a5d9ce59 [ 631.947402][T16440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.947428][T16440] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.947454][T16440] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 631.947473][T16440] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 631.947492][T16440] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.947509][T16440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.947526][T16440] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 631.947563][T16440] [ 633.125713][ T4947] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 633.729610][T16468] FAULT_INJECTION: forcing a failure. [ 633.729610][T16468] name failslab, interval 1, probability 0, space 0, times 0 [ 633.760503][T16468] CPU: 1 UID: 0 PID: 16468 Comm: syz.2.3212 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.760544][T16468] Tainted: [L]=SOFTLOCKUP [ 633.760553][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.760568][T16468] Call Trace: [ 633.760576][T16468] [ 633.760587][T16468] dump_stack_lvl+0x100/0x190 [ 633.760646][T16468] should_fail_ex.cold+0x5/0xa [ 633.760688][T16468] should_failslab+0xc2/0x120 [ 633.760721][T16468] __kmalloc_cache_noprof+0x7a/0x6f0 [ 633.760755][T16468] ? vidtv_psi_service_list_desc_init+0xf3/0x550 [ 633.760799][T16468] vidtv_psi_service_list_desc_init+0xf3/0x550 [ 633.760840][T16468] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 633.760877][T16468] ? kasan_save_track+0x14/0x30 [ 633.760908][T16468] vidtv_channel_si_init+0xccf/0x18f0 [ 633.760955][T16468] vidtv_mux_init+0x526/0xbf0 [ 633.760990][T16468] vidtv_start_feed+0x34e/0x500 [ 633.761016][T16468] ? __pfx_vidtv_start_feed+0x10/0x10 [ 633.761043][T16468] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 633.761083][T16468] dmx_section_feed_start_filtering+0x3a8/0x660 [ 633.761120][T16468] dvb_dmxdev_filter_start+0x767/0xdd0 [ 633.761153][T16468] dvb_demux_do_ioctl+0xe64/0x1200 [ 633.761186][T16468] dvb_usercopy+0x167/0x340 [ 633.761219][T16468] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 633.761244][T16468] ? __pfx_dvb_usercopy+0x10/0x10 [ 633.761288][T16468] ? __fget_files+0x21f/0x3d0 [ 633.761324][T16468] dvb_demux_ioctl+0x29/0x40 [ 633.761343][T16468] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 633.761364][T16468] __x64_sys_ioctl+0x18e/0x210 [ 633.761389][T16468] do_syscall_64+0x115/0x840 [ 633.761419][T16468] ? clear_bhb_loop+0x40/0x90 [ 633.761447][T16468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.761470][T16468] RIP: 0033:0x7f9c9439ce59 [ 633.761488][T16468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.761510][T16468] RSP: 002b:00007f9c95203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.761532][T16468] RAX: ffffffffffffffda RBX: 00007f9c94615fa0 RCX: 00007f9c9439ce59 [ 633.761548][T16468] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 633.761562][T16468] RBP: 00007f9c94432d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.761576][T16468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.761590][T16468] R13: 00007f9c94616038 R14: 00007f9c94615fa0 R15: 00007ffc43b29ab8 [ 633.761621][T16468] [ 634.215249][T16456] syz.0.3210 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 634.226225][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.0.3210 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.226267][T16456] Tainted: [L]=SOFTLOCKUP [ 634.226276][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.226293][T16456] Call Trace: [ 634.226302][T16456] [ 634.226312][T16456] dump_stack_lvl+0x100/0x190 [ 634.226362][T16456] dump_header+0xfb/0x606 [ 634.226394][T16456] oom_kill_process.cold+0xd/0x330 [ 634.226427][T16456] out_of_memory+0x340/0x14f0 [ 634.226478][T16456] ? __pfx_out_of_memory+0x10/0x10 [ 634.226531][T16456] mem_cgroup_out_of_memory+0xc6/0x130 [ 634.226573][T16456] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 634.226613][T16456] ? find_held_lock+0x2b/0x80 [ 634.226653][T16456] ? do_raw_spin_unlock+0x145/0x1e0 [ 634.226682][T16456] ? _raw_spin_unlock+0x28/0x50 [ 634.226717][T16456] try_charge_memcg+0x6e5/0xdf0 [ 634.226757][T16456] ? __pfx_try_charge_memcg+0x10/0x10 [ 634.226789][T16456] ? find_held_lock+0x2b/0x80 [ 634.226821][T16456] ? rcu_read_unlock+0x17/0x60 [ 634.226852][T16456] ? rcu_read_unlock+0x17/0x60 [ 634.226887][T16456] ? find_held_lock+0x2b/0x80 [ 634.226922][T16456] ? rcu_read_unlock+0x17/0x60 [ 634.226987][T16456] charge_memcg+0x19f/0x210 [ 634.227023][T16456] __mem_cgroup_charge+0x2b/0x1c0 [ 634.227063][T16456] shmem_alloc_and_add_folio+0x451/0xd40 [ 634.227117][T16456] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 634.227165][T16456] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 634.227202][T16456] shmem_get_folio_gfp+0x6ab/0x1900 [ 634.227238][T16456] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 634.227267][T16456] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 634.227296][T16456] ? lockdep_hardirqs_on+0x78/0x100 [ 634.227339][T16456] shmem_fault+0x1f9/0xa20 [ 634.227364][T16456] ? __lock_acquire+0x4a5/0x2630 [ 634.227408][T16456] ? __pfx_shmem_fault+0x10/0x10 [ 634.227437][T16456] ? __up_read+0x2c1/0x6e0 [ 634.227480][T16456] ? __pfx_filemap_map_pages+0x10/0x10 [ 634.227523][T16456] __do_fault+0x10b/0x440 [ 634.227549][T16456] ? find_held_lock+0x2b/0x80 [ 634.227584][T16456] do_fault+0x2db/0x1750 [ 634.227624][T16456] __handle_mm_fault+0x187d/0x2a00 [ 634.227669][T16456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 634.227703][T16456] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.227745][T16456] ? pte_offset_map_lock+0x174/0x320 [ 634.227775][T16456] ? find_held_lock+0x2b/0x80 [ 634.227816][T16456] ? follow_page_pte+0x4d0/0x13f0 [ 634.227854][T16456] handle_mm_fault+0x37b/0xa30 [ 634.227898][T16456] __get_user_pages+0x1178/0x32a0 [ 634.227950][T16456] ? down_read_killable+0x307/0x4b0 [ 634.227979][T16456] ? __pfx___get_user_pages+0x10/0x10 [ 634.228016][T16456] ? faultin_page_range+0x712/0x9e0 [ 634.228056][T16456] faultin_page_range+0x1f1/0x9e0 [ 634.228099][T16456] madvise_do_behavior+0x354/0x510 [ 634.228140][T16456] ? __pfx_madvise_do_behavior+0x10/0x10 [ 634.228198][T16456] do_madvise+0x195/0x240 [ 634.228235][T16456] ? __pfx_do_madvise+0x10/0x10 [ 634.228270][T16456] ? do_futex+0x192/0x350 [ 634.228323][T16456] ? ksys_write+0x1ac/0x250 [ 634.228364][T16456] __x64_sys_madvise+0xa9/0x110 [ 634.228400][T16456] ? lockdep_hardirqs_on+0x78/0x100 [ 634.228437][T16456] do_syscall_64+0x115/0x840 [ 634.228475][T16456] ? clear_bhb_loop+0x40/0x90 [ 634.228509][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.228537][T16456] RIP: 0033:0x7fb1a5d9ce59 [ 634.228562][T16456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.228589][T16456] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 634.228615][T16456] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 634.228634][T16456] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 634.228652][T16456] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.228669][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.228684][T16456] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 634.228713][T16456] [ 634.228723][T16456] memory: usage 3072kB, limit 3072kB, failcnt 25665 [ 634.641140][T16456] memory+swap: usage 49572kB, limit 9007199254740988kB, failcnt 0 [ 634.649280][T16456] kmem: usage 2292kB, limit 9007199254740988kB, failcnt 0 [ 634.660266][T16456] Memory cgroup stats for /syz0: [ 634.660580][T16456] cache 479232 [ 634.669642][T16456] rss 53248 [ 634.672863][T16456] rss_huge 0 [ 634.676079][T16456] shmem 139264 [ 634.679491][T16456] mapped_file 69632 [ 634.683376][T16456] dirty 0 [ 634.686334][T16456] writeback 0 [ 634.689634][T16456] workingset_refault_anon 16168 [ 634.702453][T16456] workingset_refault_file 12899 [ 634.712334][T16456] swap 47620096 [ 634.721590][T16456] swapcached 194068480 [ 634.734505][T16456] pgpgin 510462 [ 634.747895][T16456] pgpgout 519536 [ 634.755240][T16456] pgfault 570803 [ 634.762852][T16456] pgmajfault 2646 [ 634.774091][T16456] inactive_anon 262144 [ 634.782854][T16456] active_anon 0 [ 634.794714][T16456] inactive_file 335872 [ 634.805127][T16456] active_file 4096 [ 634.816169][T16456] unevictable 0 [ 634.826428][T16456] hierarchical_memory_limit 3145728 [ 634.855004][T16456] hierarchical_memsw_limit 9223372036854771712 [ 634.899173][T16456] total_cache 479232 [ 634.919033][T16456] total_rss 53248 [ 634.956749][T16456] total_rss_huge 0 [ 634.970344][T16456] total_shmem 139264 [ 634.976117][T16456] total_mapped_file 69632 [ 634.980597][T16456] total_dirty 0 [ 634.993134][T16456] total_writeback 0 [ 635.006851][T16456] total_workingset_refault_anon 16168 [ 635.019555][T16456] total_workingset_refault_file 12899 [ 635.027828][T16456] total_swap 47620096 [ 635.044266][T16456] total_swapcached 194068480 [ 635.080207][T16456] total_pgpgin 510462 [ 635.107313][T16456] total_pgpgout 519536 [ 635.127662][T16482] FAULT_INJECTION: forcing a failure. [ 635.127662][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 635.132946][T16456] total_pgfault 570803 [ 635.154918][T16482] CPU: 1 UID: 0 PID: 16482 Comm: syz.3.3217 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.154964][T16482] Tainted: [L]=SOFTLOCKUP [ 635.154975][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.154992][T16482] Call Trace: [ 635.155001][T16482] [ 635.155012][T16482] dump_stack_lvl+0x100/0x190 [ 635.155065][T16482] should_fail_ex.cold+0x5/0xa [ 635.155100][T16482] should_failslab+0xc2/0x120 [ 635.155135][T16482] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 635.155183][T16482] ? __alloc_skb+0x140/0x710 [ 635.155207][T16482] ? __alloc_skb+0x5b7/0x710 [ 635.155237][T16482] __alloc_skb+0x140/0x710 [ 635.155261][T16482] ? __alloc_skb+0x5b7/0x710 [ 635.155287][T16482] ? __pfx___alloc_skb+0x10/0x10 [ 635.155324][T16482] alloc_skb_with_frags+0xdd/0x760 [ 635.155369][T16482] sock_alloc_send_pskb+0x801/0x980 [ 635.155415][T16482] ? find_held_lock+0x2b/0x80 [ 635.155455][T16482] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 635.155498][T16482] ? ip6_output+0x2eb/0xa60 [ 635.155560][T16482] ? __pfx_ip6_output+0x10/0x10 [ 635.155609][T16482] __ip6_append_data+0x2a6a/0x4bf0 [ 635.155657][T16482] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 635.155709][T16482] ? __pfx___ip6_append_data+0x10/0x10 [ 635.155752][T16482] ? __pfx_ip6_mtu+0x10/0x10 [ 635.155788][T16482] ? ip6_setup_cork+0x5be/0x14c0 [ 635.155848][T16482] ip6_make_skb+0x2a3/0x3b0 [ 635.155894][T16482] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 635.155932][T16482] ? __pfx_ip6_make_skb+0x10/0x10 [ 635.155983][T16482] ? sk_dst_check+0x1e6/0x540 [ 635.156030][T16482] ? udpv6_sendmsg+0x2231/0x2c20 [ 635.156057][T16482] udpv6_sendmsg+0x2231/0x2c20 [ 635.156087][T16482] ? __lock_acquire+0x4a5/0x2630 [ 635.156128][T16482] ? aa_label_sk_perm+0xa1/0x5f0 [ 635.156175][T16482] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 635.156213][T16482] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 635.156262][T16482] ? __pfx___might_resched+0x10/0x10 [ 635.156315][T16482] ? __import_iovec+0x1d2/0x640 [ 635.156357][T16482] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 635.156391][T16482] ? inet6_sendmsg+0x105/0x140 [ 635.156423][T16482] inet6_sendmsg+0x105/0x140 [ 635.156457][T16482] ____sys_sendmsg+0x704/0xb70 [ 635.156497][T16482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.156537][T16482] ? rcu_is_watching+0x12/0xc0 [ 635.156566][T16482] ? ___sys_sendmsg+0x19d/0x1e0 [ 635.156601][T16482] ? kfree+0x1dd/0x6c0 [ 635.156645][T16482] ___sys_sendmsg+0x190/0x1e0 [ 635.156685][T16482] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.156757][T16482] ? __pfx___might_resched+0x10/0x10 [ 635.156801][T16482] __sys_sendmmsg+0x205/0x430 [ 635.156837][T16482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 635.156865][T16482] ? __local_bh_enable_ip+0x9e/0x120 [ 635.156916][T16482] ? __pfx_do_futex+0x10/0x10 [ 635.156963][T16482] ? xfd_validate_state+0x129/0x190 [ 635.157002][T16482] __x64_sys_sendmmsg+0x9c/0x100 [ 635.157032][T16482] ? lockdep_hardirqs_on+0x78/0x100 [ 635.157072][T16482] do_syscall_64+0x115/0x840 [ 635.157108][T16482] ? clear_bhb_loop+0x40/0x90 [ 635.157139][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.157167][T16482] RIP: 0033:0x7f711199ce59 [ 635.157192][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.157220][T16482] RSP: 002b:00007f7112842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 635.157247][T16482] RAX: ffffffffffffffda RBX: 00007f7111c15fa0 RCX: 00007f711199ce59 [ 635.157267][T16482] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.157283][T16482] RBP: 00007f7111a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 635.157299][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.157315][T16482] R13: 00007f7111c16038 R14: 00007f7111c15fa0 R15: 00007ffc756d06d8 [ 635.157352][T16482] [ 635.214896][T16456] total_pgmajfault 2646 [ 635.559776][T16456] total_inactive_anon 262144 [ 635.564595][T16456] total_active_anon 0 [ 635.568594][T16456] total_inactive_file 335872 [ 635.573602][T16456] total_active_file 4096 [ 635.577859][T16456] total_unevictable 0 [ 635.581852][T16456] anon_cost 0 [ 635.627218][T16456] file_cost 0 [ 635.635860][T16456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3136,pid=16189,uid=0 [ 635.657135][T16456] Memory cgroup out of memory: Killed process 16189 (syz.0.3136) total-vm:137312kB, anon-rss:1244kB, file-rss:23380kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 636.191229][T16189] syz.0.3136 (16189) used greatest stack depth: 16696 bytes left [ 637.397249][T16508] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 642.554177][T16594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 642.567557][T16594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 642.573987][T16594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 642.580294][T16594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.950743][T16623] FAULT_INJECTION: forcing a failure. [ 643.950743][T16623] name failslab, interval 1, probability 0, space 0, times 0 [ 643.973615][T16623] CPU: 0 UID: 0 PID: 16623 Comm: syz.1.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.973673][T16623] Tainted: [L]=SOFTLOCKUP [ 643.973683][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.973701][T16623] Call Trace: [ 643.973711][T16623] [ 643.973722][T16623] dump_stack_lvl+0x100/0x190 [ 643.973775][T16623] should_fail_ex.cold+0x5/0xa [ 643.973810][T16623] should_failslab+0xc2/0x120 [ 643.973845][T16623] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 643.973892][T16623] ? __alloc_skb+0x140/0x710 [ 643.973915][T16623] ? __alloc_skb+0x5b7/0x710 [ 643.973945][T16623] __alloc_skb+0x140/0x710 [ 643.973969][T16623] ? __alloc_skb+0x5b7/0x710 [ 643.973993][T16623] ? __pfx___alloc_skb+0x10/0x10 [ 643.974029][T16623] alloc_skb_with_frags+0xdd/0x760 [ 643.974072][T16623] sock_alloc_send_pskb+0x801/0x980 [ 643.974118][T16623] ? find_held_lock+0x2b/0x80 [ 643.974158][T16623] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 643.974202][T16623] ? ip6_output+0x2eb/0xa60 [ 643.974245][T16623] ? __pfx_ip6_output+0x10/0x10 [ 643.974293][T16623] __ip6_append_data+0x2a6a/0x4bf0 [ 643.974341][T16623] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 643.974393][T16623] ? __pfx___ip6_append_data+0x10/0x10 [ 643.974434][T16623] ? __pfx_ip6_mtu+0x10/0x10 [ 643.974466][T16623] ? ip6_setup_cork+0x5be/0x14c0 [ 643.974511][T16623] ip6_make_skb+0x2a3/0x3b0 [ 643.974557][T16623] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 643.974597][T16623] ? __pfx_ip6_make_skb+0x10/0x10 [ 643.974674][T16623] ? sk_dst_check+0x1e6/0x540 [ 643.974724][T16623] ? udpv6_sendmsg+0x2231/0x2c20 [ 643.974751][T16623] udpv6_sendmsg+0x2231/0x2c20 [ 643.974785][T16623] ? __lock_acquire+0x4a5/0x2630 [ 643.974827][T16623] ? aa_label_sk_perm+0xa1/0x5f0 [ 643.974869][T16623] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 643.974904][T16623] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 643.974952][T16623] ? __pfx___might_resched+0x10/0x10 [ 643.975011][T16623] ? __import_iovec+0x1d2/0x640 [ 643.975055][T16623] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 643.975089][T16623] ? inet6_sendmsg+0x105/0x140 [ 643.975118][T16623] inet6_sendmsg+0x105/0x140 [ 643.975151][T16623] ____sys_sendmsg+0x704/0xb70 [ 643.975191][T16623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.975233][T16623] ? rcu_is_watching+0x12/0xc0 [ 643.975264][T16623] ? ___sys_sendmsg+0x19d/0x1e0 [ 643.975298][T16623] ? kfree+0x1dd/0x6c0 [ 643.975342][T16623] ___sys_sendmsg+0x190/0x1e0 [ 643.975381][T16623] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.975451][T16623] ? __pfx___might_resched+0x10/0x10 [ 643.975488][T16623] __sys_sendmmsg+0x205/0x430 [ 643.975522][T16623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 643.975549][T16623] ? __local_bh_enable_ip+0x9e/0x120 [ 643.975593][T16623] ? __pfx_do_futex+0x10/0x10 [ 643.975639][T16623] ? xfd_validate_state+0x129/0x190 [ 643.975684][T16623] __x64_sys_sendmmsg+0x9c/0x100 [ 643.975714][T16623] ? lockdep_hardirqs_on+0x78/0x100 [ 643.975753][T16623] do_syscall_64+0x115/0x840 [ 643.975790][T16623] ? clear_bhb_loop+0x40/0x90 [ 643.975824][T16623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.975853][T16623] RIP: 0033:0x7fbae3b9ce59 [ 643.975877][T16623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.975905][T16623] RSP: 002b:00007fbae4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 643.975932][T16623] RAX: ffffffffffffffda RBX: 00007fbae3e15fa0 RCX: 00007fbae3b9ce59 [ 643.975951][T16623] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 643.975968][T16623] RBP: 00007fbae3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 643.975985][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.976003][T16623] R13: 00007fbae3e16038 R14: 00007fbae3e15fa0 R15: 00007ffcbb8cae78 [ 643.976040][T16623] [ 644.562654][ T4947] Bluetooth: hci0: command 0x0406 tx timeout [ 644.654453][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 644.660536][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 644.666719][ T4947] Bluetooth: hci3: command 0x0406 tx timeout [ 646.933165][ T29] audit: type=1806 audit(1781216153.798:29): xattr="." res=0 [ 649.749117][T16710] FAULT_INJECTION: forcing a failure. [ 649.749117][T16710] name failslab, interval 1, probability 0, space 0, times 0 [ 649.822510][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.0.3285 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.822552][T16710] Tainted: [L]=SOFTLOCKUP [ 649.822561][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.822577][T16710] Call Trace: [ 649.822585][T16710] [ 649.822596][T16710] dump_stack_lvl+0x100/0x190 [ 649.822649][T16710] should_fail_ex.cold+0x5/0xa [ 649.822688][T16710] should_failslab+0xc2/0x120 [ 649.822723][T16710] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 649.822765][T16710] ? ptlock_alloc+0x1f/0x70 [ 649.822805][T16710] ? __lock_acquire+0x4a5/0x2630 [ 649.822852][T16710] ptlock_alloc+0x1f/0x70 [ 649.822891][T16710] pte_alloc_one+0x82/0x3d0 [ 649.822929][T16710] __pte_alloc+0x6d/0x380 [ 649.822960][T16710] ? __pfx___pte_alloc+0x10/0x10 [ 649.822994][T16710] ? do_raw_spin_lock+0x128/0x260 [ 649.823037][T16710] ? find_held_lock+0x2b/0x80 [ 649.823073][T16710] do_anonymous_page+0x13c6/0x2050 [ 649.823118][T16710] ? __pmd_alloc+0x3fb/0x950 [ 649.823154][T16710] __handle_mm_fault+0x1d2c/0x2a00 [ 649.823201][T16710] ? mt_find+0x45e/0x8e0 [ 649.823244][T16710] ? __pfx___handle_mm_fault+0x10/0x10 [ 649.823369][T16710] ? __pfx_mt_find+0x10/0x10 [ 649.823448][T16710] handle_mm_fault+0x37b/0xa30 [ 649.823498][T16710] __get_user_pages+0x1178/0x32a0 [ 649.823548][T16710] ? __pfx___get_user_pages+0x10/0x10 [ 649.823594][T16710] get_user_pages_remote+0x3d2/0xb10 [ 649.823637][T16710] ? __pfx_get_user_pages_remote+0x10/0x10 [ 649.823675][T16710] ? __pfx_create_init_stack_vma+0x10/0x10 [ 649.823715][T16710] get_arg_page+0xf4/0x310 [ 649.823746][T16710] ? __pfx_get_arg_page+0x10/0x10 [ 649.823776][T16710] ? alloc_bprm+0x3da/0x710 [ 649.823804][T16710] ? alloc_bprm+0x3da/0x710 [ 649.823835][T16710] copy_string_kernel+0x17d/0x3f0 [ 649.823864][T16710] ? alloc_bprm+0x420/0x710 [ 649.823893][T16710] do_execveat_common.isra.0+0x2e6/0x580 [ 649.823927][T16710] __x64_sys_execve+0x93/0xd0 [ 649.823961][T16710] do_syscall_64+0x115/0x840 [ 649.823997][T16710] ? clear_bhb_loop+0x40/0x90 [ 649.824030][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.824056][T16710] RIP: 0033:0x7fb1a5d9ce59 [ 649.824080][T16710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.824107][T16710] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 649.824131][T16710] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 649.824150][T16710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 649.824168][T16710] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 649.824185][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.824200][T16710] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 649.824234][T16710] [ 652.716997][T16755] FAULT_INJECTION: forcing a failure. [ 652.716997][T16755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 652.742984][T16755] CPU: 1 UID: 0 PID: 16755 Comm: syz.1.3305 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.743033][T16755] Tainted: [L]=SOFTLOCKUP [ 652.743044][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.743063][T16755] Call Trace: [ 652.743072][T16755] [ 652.743084][T16755] dump_stack_lvl+0x100/0x190 [ 652.743140][T16755] should_fail_ex.cold+0x5/0xa [ 652.743182][T16755] get_futex_key+0x1d2/0x1510 [ 652.743248][T16755] ? __pfx_get_futex_key+0x10/0x10 [ 652.743296][T16755] ? putname+0xb1/0x110 [ 652.743333][T16755] ? kasan_save_stack+0x3f/0x50 [ 652.743359][T16755] ? kasan_save_stack+0x30/0x50 [ 652.743385][T16755] ? kasan_save_track+0x14/0x30 [ 652.743410][T16755] ? kasan_save_free_info+0x3b/0x70 [ 652.743447][T16755] ? __kasan_slab_free+0x5f/0x80 [ 652.743480][T16755] futex_wake+0xea/0x530 [ 652.743517][T16755] ? __pfx_futex_wake+0x10/0x10 [ 652.743567][T16755] do_futex+0x32b/0x350 [ 652.743596][T16755] ? __pfx_do_futex+0x10/0x10 [ 652.743635][T16755] __x64_sys_futex+0x34f/0x4d0 [ 652.743669][T16755] ? __pfx___x64_sys_futex+0x10/0x10 [ 652.743698][T16755] ? kmem_cache_free+0x127/0x6c0 [ 652.743743][T16755] ? rcu_is_watching+0x12/0xc0 [ 652.743781][T16755] do_syscall_64+0x115/0x840 [ 652.743819][T16755] ? clear_bhb_loop+0x40/0x90 [ 652.743853][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.743881][T16755] RIP: 0033:0x7fbae3b9ce59 [ 652.743907][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.743936][T16755] RSP: 002b:00007fbae4a2b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 652.743972][T16755] RAX: ffffffffffffffda RBX: 00007fbae3e15fa8 RCX: 00007fbae3b9ce59 [ 652.743992][T16755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbae3e15fac [ 652.744011][T16755] RBP: 00007fbae3e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 652.744029][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.744046][T16755] R13: 00007fbae3e16038 R14: 00007ffcbb8cad90 R15: 00007ffcbb8cae78 [ 652.744085][T16755] [ 654.302240][T16786] FAULT_INJECTION: forcing a failure. [ 654.302240][T16786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.318012][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.1.3303 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.318058][T16786] Tainted: [L]=SOFTLOCKUP [ 654.318068][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.318084][T16786] Call Trace: [ 654.318093][T16786] [ 654.318104][T16786] dump_stack_lvl+0x100/0x190 [ 654.318152][T16786] should_fail_ex.cold+0x5/0xa [ 654.318186][T16786] _copy_to_user+0x32/0xd0 [ 654.318227][T16786] do_proc_control+0xbac/0xe50 [ 654.318275][T16786] ? __pfx_do_proc_control+0x10/0x10 [ 654.318324][T16786] usbdev_ioctl+0x1a28/0x3aa0 [ 654.318370][T16786] ? __pfx_usbdev_ioctl+0x10/0x10 [ 654.318419][T16786] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.318461][T16786] ? do_vfs_ioctl+0x226/0x13e0 [ 654.318504][T16786] ? find_held_lock+0x2b/0x80 [ 654.318537][T16786] ? __fget_files+0x215/0x3d0 [ 654.318565][T16786] ? hook_file_ioctl_common+0x149/0x410 [ 654.318618][T16786] ? __fget_files+0x21f/0x3d0 [ 654.318654][T16786] ? __pfx_usbdev_ioctl+0x10/0x10 [ 654.318698][T16786] __x64_sys_ioctl+0x18e/0x210 [ 654.318730][T16786] do_syscall_64+0x115/0x840 [ 654.318770][T16786] ? clear_bhb_loop+0x40/0x90 [ 654.318805][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.318833][T16786] RIP: 0033:0x7fbae3b9ce59 [ 654.318855][T16786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.318883][T16786] RSP: 002b:00007fbae4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.318911][T16786] RAX: ffffffffffffffda RBX: 00007fbae3e15fa0 RCX: 00007fbae3b9ce59 [ 654.318930][T16786] RDX: 0000200000001040 RSI: 00000000c0185500 RDI: 0000000000000007 [ 654.318947][T16786] RBP: 00007fbae3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 654.318964][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.318981][T16786] R13: 00007fbae3e16038 R14: 00007fbae3e15fa0 R15: 00007ffcbb8cae78 [ 654.319019][T16786] [ 654.967978][T16792] FAULT_INJECTION: forcing a failure. [ 654.967978][T16792] name failslab, interval 1, probability 0, space 0, times 0 [ 654.995848][T16792] CPU: 1 UID: 0 PID: 16792 Comm: syz.1.3306 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.995894][T16792] Tainted: [L]=SOFTLOCKUP [ 654.995905][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.995923][T16792] Call Trace: [ 654.995933][T16792] [ 654.995944][T16792] dump_stack_lvl+0x100/0x190 [ 654.995998][T16792] should_fail_ex.cold+0x5/0xa [ 654.996034][T16792] should_failslab+0xc2/0x120 [ 654.996069][T16792] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 654.996114][T16792] ? alloc_empty_file+0x5b/0x1c0 [ 654.996162][T16792] alloc_empty_file+0x5b/0x1c0 [ 654.996204][T16792] alloc_file_pseudo+0x13a/0x230 [ 654.996248][T16792] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 654.996301][T16792] __shmem_file_setup+0x205/0x460 [ 654.996342][T16792] ? __pfx___shmem_file_setup+0x10/0x10 [ 654.996391][T16792] newseg+0x3c0/0xed0 [ 654.996436][T16792] ? __pfx_newseg+0x10/0x10 [ 654.996478][T16792] ? find_held_lock+0x2b/0x80 [ 654.996517][T16792] ? ipcget+0x8aa/0xf50 [ 654.996560][T16792] ipcget+0x909/0xf50 [ 654.996603][T16792] ? do_futex+0x192/0x350 [ 654.996642][T16792] ? __pfx_ipcget+0x10/0x10 [ 654.996681][T16792] ? __x64_sys_futex+0x34f/0x4d0 [ 654.996707][T16792] ? __x64_sys_futex+0x358/0x4d0 [ 654.996749][T16792] __x64_sys_shmget+0x13b/0x1b0 [ 654.996789][T16792] ? __pfx___x64_sys_shmget+0x10/0x10 [ 654.996834][T16792] ? rcu_is_watching+0x12/0xc0 [ 654.996870][T16792] do_syscall_64+0x115/0x840 [ 654.996910][T16792] ? clear_bhb_loop+0x40/0x90 [ 654.996944][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.996973][T16792] RIP: 0033:0x7fbae3b9ce59 [ 654.996997][T16792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.997025][T16792] RSP: 002b:00007fbae4a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 654.997051][T16792] RAX: ffffffffffffffda RBX: 00007fbae3e16090 RCX: 00007fbae3b9ce59 [ 654.997069][T16792] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 654.997086][T16792] RBP: 00007fbae3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 654.997103][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.997119][T16792] R13: 00007fbae3e16128 R14: 00007fbae3e16090 R15: 00007ffcbb8cae78 [ 654.997157][T16792] [ 657.789528][T16834] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3318'. [ 659.168120][T16588] syz.0.3248 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 659.193532][T16865] FAULT_INJECTION: forcing a failure. [ 659.193532][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 659.207362][T16865] CPU: 1 UID: 0 PID: 16865 Comm: syz.2.3327 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.207408][T16865] Tainted: [L]=SOFTLOCKUP [ 659.207418][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.207435][T16865] Call Trace: [ 659.207445][T16865] [ 659.207457][T16865] dump_stack_lvl+0x100/0x190 [ 659.207510][T16865] should_fail_ex.cold+0x5/0xa [ 659.207544][T16865] should_failslab+0xc2/0x120 [ 659.207584][T16865] __kmalloc_cache_noprof+0x7a/0x6f0 [ 659.207623][T16865] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 659.207675][T16865] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 659.207723][T16865] ? __mutex_lock+0x26d/0x1b10 [ 659.207767][T16865] ? tomoyo_path_number_perm+0x188/0x580 [ 659.207805][T16865] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 659.207847][T16865] ? __pfx___mutex_lock+0x10/0x10 [ 659.207899][T16865] ? do_vfs_ioctl+0x226/0x13e0 [ 659.207933][T16865] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 659.207974][T16865] snd_pcm_oss_ioctl+0x7b4/0x37c0 [ 659.208011][T16865] ? __fget_files+0x215/0x3d0 [ 659.208037][T16865] ? hook_file_ioctl_common+0x149/0x410 [ 659.208070][T16865] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 659.208113][T16865] ? __fget_files+0x21f/0x3d0 [ 659.208150][T16865] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 659.208185][T16865] __x64_sys_ioctl+0x18e/0x210 [ 659.208213][T16865] do_syscall_64+0x115/0x840 [ 659.208253][T16865] ? clear_bhb_loop+0x40/0x90 [ 659.208286][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.208339][T16865] RIP: 0033:0x7f9c9439ce59 [ 659.208360][T16865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.208383][T16865] RSP: 002b:00007f9c95203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.208406][T16865] RAX: ffffffffffffffda RBX: 00007f9c94615fa0 RCX: 00007f9c9439ce59 [ 659.208423][T16865] RDX: 00002000000000c0 RSI: 00000000800c5012 RDI: 0000000000000007 [ 659.208438][T16865] RBP: 00007f9c94432d6f R08: 0000000000000000 R09: 0000000000000000 [ 659.208453][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.208467][T16865] R13: 00007f9c94616038 R14: 00007f9c94615fa0 R15: 00007ffc43b29ab8 [ 659.208499][T16865] [ 659.485238][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.0.3248 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.485277][T16588] Tainted: [L]=SOFTLOCKUP [ 659.485286][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.485302][T16588] Call Trace: [ 659.485311][T16588] [ 659.485321][T16588] dump_stack_lvl+0x100/0x190 [ 659.485368][T16588] dump_header+0xfb/0x606 [ 659.485397][T16588] oom_kill_process.cold+0xd/0x330 [ 659.485428][T16588] out_of_memory+0x340/0x14f0 [ 659.485473][T16588] ? __pfx_out_of_memory+0x10/0x10 [ 659.485522][T16588] mem_cgroup_out_of_memory+0xc6/0x130 [ 659.485559][T16588] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 659.485595][T16588] ? find_held_lock+0x2b/0x80 [ 659.485634][T16588] ? do_raw_spin_unlock+0x145/0x1e0 [ 659.485662][T16588] ? _raw_spin_unlock+0x28/0x50 [ 659.485696][T16588] try_charge_memcg+0x6e5/0xdf0 [ 659.485734][T16588] ? __pfx_try_charge_memcg+0x10/0x10 [ 659.485762][T16588] ? find_held_lock+0x2b/0x80 [ 659.485792][T16588] ? rcu_read_unlock+0x17/0x60 [ 659.485827][T16588] ? rcu_read_unlock+0x17/0x60 [ 659.485857][T16588] ? find_held_lock+0x2b/0x80 [ 659.485889][T16588] ? rcu_read_unlock+0x17/0x60 [ 659.485928][T16588] charge_memcg+0x19f/0x210 [ 659.485960][T16588] __mem_cgroup_charge+0x2b/0x1c0 [ 659.485996][T16588] shmem_alloc_and_add_folio+0x451/0xd40 [ 659.486046][T16588] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 659.486096][T16588] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 659.486131][T16588] shmem_get_folio_gfp+0x6ab/0x1900 [ 659.486165][T16588] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 659.486200][T16588] shmem_write_begin+0x1a4/0x420 [ 659.486229][T16588] ? __pfx_shmem_write_begin+0x10/0x10 [ 659.486258][T16588] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 659.486290][T16588] ? lockdep_hardirqs_on+0x78/0x100 [ 659.486328][T16588] generic_perform_write+0x292/0xa40 [ 659.486378][T16588] ? __pfx_generic_perform_write+0x10/0x10 [ 659.486422][T16588] ? file_update_time_flags+0x373/0x500 [ 659.486462][T16588] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 659.486492][T16588] shmem_file_write_iter+0x10e/0x140 [ 659.486525][T16588] __kernel_write_iter+0x2ac/0x920 [ 659.486555][T16588] ? __pfx___kernel_write_iter+0x10/0x10 [ 659.486585][T16588] ? __up_read+0x2c1/0x6e0 [ 659.486615][T16588] ? dump_user_range+0x65e/0xad0 [ 659.486651][T16588] ? copy_mc_enhanced_fast_string+0x6/0xf [ 659.486686][T16588] dump_user_range+0x3f9/0xad0 [ 659.486731][T16588] ? __pfx_dump_user_range+0x10/0x10 [ 659.486778][T16588] ? __pfx_writenote+0x10/0x10 [ 659.486825][T16588] elf_core_dump+0x2d5f/0x3d10 [ 659.486883][T16588] ? __pfx_elf_core_dump+0x10/0x10 [ 659.486920][T16588] ? trace_sched_exit_tp+0x11c/0x160 [ 659.486958][T16588] ? __schedule+0x12a7/0x67a0 [ 659.486986][T16588] ? vfs_coredump+0x22db/0x5770 [ 659.487027][T16588] ? 0xffffffffff600000 [ 659.487115][T16588] ? vfs_coredump+0x2980/0x5770 [ 659.487148][T16588] vfs_coredump+0x2980/0x5770 [ 659.487200][T16588] ? __pfx_vfs_coredump+0x10/0x10 [ 659.487238][T16588] ? __lock_acquire+0x4a5/0x2630 [ 659.487292][T16588] ? lock_acquire+0x1b1/0x370 [ 659.487344][T16588] ? is_bpf_text_address+0x8a/0x1a0 [ 659.487379][T16588] ? bpf_ksym_find+0x124/0x1c0 [ 659.487415][T16588] ? __kernel_text_address+0xd/0x30 [ 659.487441][T16588] ? unwind_get_return_address+0x59/0xa0 [ 659.487472][T16588] ? arch_stack_walk+0xa6/0xf0 [ 659.487515][T16588] ? __sigqueue_free+0xbe/0x2a0 [ 659.487551][T16588] ? stack_trace_save+0x8e/0xc0 [ 659.487584][T16588] ? __pfx_stack_trace_save+0x10/0x10 [ 659.487617][T16588] ? stack_depot_save_flags+0x27/0x9d0 [ 659.487657][T16588] ? __lock_acquire+0x4a5/0x2630 [ 659.487758][T16588] ? proc_coredump_connector+0x2d3/0x4f0 [ 659.487792][T16588] ? __pfx_proc_coredump_connector+0x10/0x10 [ 659.487833][T16588] ? rcu_is_watching+0x12/0xc0 [ 659.487868][T16588] get_signal+0x2162/0x2210 [ 659.487915][T16588] ? __pfx_get_signal+0x10/0x10 [ 659.487944][T16588] ? __pfx_force_sig_fault+0x10/0x10 [ 659.487983][T16588] arch_do_signal_or_restart+0x91/0x7a0 [ 659.488023][T16588] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.488073][T16588] ? rcu_is_watching+0x12/0xc0 [ 659.488135][T16588] irqentry_exit+0x39e/0x970 [ 659.488176][T16588] asm_exc_page_fault+0x26/0x30 [ 659.488201][T16588] RIP: 0033:0x7fb1a5d9ce61 [ 659.488224][T16588] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 659.488249][T16588] RSP: 002b:00000000000072d2 EFLAGS: 00010217 [ 659.488270][T16588] RAX: 0000000000000000 RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 659.488288][T16588] RDX: 0000000000000000 RSI: 00000000000072d2 RDI: 0000000000000004 [ 659.488304][T16588] RBP: 00007fb1a5e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 659.488319][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.488333][T16588] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 659.488371][T16588] [ 659.976184][T16588] memory: usage 3072kB, limit 3072kB, failcnt 53168 [ 659.982932][T16588] memory+swap: usage 22304kB, limit 9007199254740988kB, failcnt 0 [ 659.992488][T16588] kmem: usage 2608kB, limit 9007199254740988kB, failcnt 0 [ 659.999755][T16588] Memory cgroup stats for /syz0: [ 660.000019][T16588] cache 0 [ 660.008014][T16588] rss 0 [ 660.010793][T16588] rss_huge 0 [ 660.014059][T16588] shmem 0 [ 660.017013][T16588] mapped_file 0 [ 660.020486][T16588] dirty 0 [ 660.023554][T16588] writeback 0 [ 660.026849][T16588] workingset_refault_anon 17605 [ 660.032972][T16588] workingset_refault_file 32042 [ 660.037842][T16588] swap 19693568 [ 660.041303][T16588] swapcached 241545216 [ 660.046291][T16588] pgpgin 544531 [ 660.049771][T16588] pgpgout 553727 [ 660.053377][T16588] pgfault 581539 [ 660.056933][T16588] pgmajfault 3785 [ 660.060569][T16588] inactive_anon 12288 [ 660.064592][T16588] active_anon 286720 [ 660.068495][T16588] inactive_file 0 [ 660.072134][T16588] active_file 0 [ 660.075666][T16588] unevictable 0 [ 660.079169][T16588] hierarchical_memory_limit 3145728 [ 660.084488][T16588] hierarchical_memsw_limit 9223372036854771712 [ 660.090684][T16588] total_cache 0 [ 660.095778][T16588] total_rss 0 [ 660.099084][T16588] total_rss_huge 0 [ 660.102843][T16588] total_shmem 0 [ 660.106312][T16588] total_mapped_file 0 [ 660.110303][T16588] total_dirty 0 [ 660.113817][T16588] total_writeback 0 [ 660.117626][T16588] total_workingset_refault_anon 17605 [ 660.123038][T16588] total_workingset_refault_file 32042 [ 660.128551][T16588] total_swap 19693568 [ 660.133824][T16588] total_swapcached 241545216 [ 660.138524][T16588] total_pgpgin 544531 [ 660.143358][T16588] total_pgpgout 553727 [ 660.147449][T16588] total_pgfault 581539 [ 660.151539][T16588] total_pgmajfault 3785 [ 660.155911][T16588] total_inactive_anon 12288 [ 660.160428][T16588] total_active_anon 286720 [ 660.164936][T16588] total_inactive_file 0 [ 660.169099][T16588] total_active_file 0 [ 660.173137][T16588] total_unevictable 0 [ 660.177124][T16588] anon_cost 0 [ 660.180415][T16588] file_cost 0 [ 660.183788][T16588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3311,pid=16805,uid=0 [ 660.203093][T16588] Memory cgroup out of memory: Killed process 16805 (syz.0.3311) total-vm:207216kB, anon-rss:1240kB, file-rss:26984kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 662.288854][T16897] Process accounting paused [ 663.390522][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'. [ 663.444568][T16934] netlink: 'syz.2.3348': attribute type 7 has an invalid length. [ 663.815866][T16943] ======================================================= [ 663.815866][T16943] WARNING: The mand mount option has been deprecated and [ 663.815866][T16943] and is ignored by this kernel. Remove the mand [ 663.815866][T16943] option from the mount to silence this warning. [ 663.815866][T16943] ======================================================= [ 666.400316][T16588] syz.0.3248 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 666.424512][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.0.3248 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.424554][T16588] Tainted: [L]=SOFTLOCKUP [ 666.424569][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.424586][T16588] Call Trace: [ 666.424594][T16588] [ 666.424604][T16588] dump_stack_lvl+0x100/0x190 [ 666.424672][T16588] dump_header+0xfb/0x606 [ 666.424707][T16588] oom_kill_process.cold+0xd/0x330 [ 666.424739][T16588] out_of_memory+0x340/0x14f0 [ 666.424791][T16588] ? __pfx_out_of_memory+0x10/0x10 [ 666.424845][T16588] mem_cgroup_out_of_memory+0xc6/0x130 [ 666.424885][T16588] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 666.424925][T16588] ? find_held_lock+0x2b/0x80 [ 666.424968][T16588] ? do_raw_spin_unlock+0x145/0x1e0 [ 666.425001][T16588] ? _raw_spin_unlock+0x28/0x50 [ 666.425041][T16588] try_charge_memcg+0x6e5/0xdf0 [ 666.425080][T16588] ? __pfx_try_charge_memcg+0x10/0x10 [ 666.425113][T16588] ? find_held_lock+0x2b/0x80 [ 666.425142][T16588] ? rcu_read_unlock+0x17/0x60 [ 666.425177][T16588] ? rcu_read_unlock+0x17/0x60 [ 666.425212][T16588] ? find_held_lock+0x2b/0x80 [ 666.425244][T16588] ? rcu_read_unlock+0x17/0x60 [ 666.425281][T16588] charge_memcg+0x19f/0x210 [ 666.425313][T16588] __mem_cgroup_charge+0x2b/0x1c0 [ 666.425348][T16588] filemap_add_folio+0xe7/0x690 [ 666.425384][T16588] ? __pfx_filemap_add_folio+0x10/0x10 [ 666.425415][T16588] ? do_page_cache_ra+0x119/0x160 [ 666.425466][T16588] __filemap_get_folio_mpol+0x5d5/0xe70 [ 666.425502][T16588] filemap_fault+0x888/0x2e90 [ 666.425533][T16588] ? __pfx_filemap_fault+0x10/0x10 [ 666.425569][T16588] ? find_held_lock+0x2b/0x80 [ 666.425607][T16588] __do_fault+0x10b/0x440 [ 666.425637][T16588] do_fault+0xa99/0x1750 [ 666.425683][T16588] __handle_mm_fault+0x187d/0x2a00 [ 666.425724][T16588] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 666.425756][T16588] ? __pfx___handle_mm_fault+0x10/0x10 [ 666.425797][T16588] ? pte_offset_map_lock+0x174/0x320 [ 666.425827][T16588] ? find_held_lock+0x2b/0x80 [ 666.425871][T16588] ? follow_page_pte+0x4d0/0x13f0 [ 666.425909][T16588] handle_mm_fault+0x37b/0xa30 [ 666.425955][T16588] __get_user_pages+0x1178/0x32a0 [ 666.426001][T16588] ? __pfx___get_user_pages+0x10/0x10 [ 666.426043][T16588] get_dump_page+0x27e/0x3d0 [ 666.426076][T16588] ? __pfx_get_dump_page+0x10/0x10 [ 666.426109][T16588] ? dump_user_range+0x65e/0xad0 [ 666.426144][T16588] ? copy_mc_enhanced_fast_string+0x6/0xf [ 666.426180][T16588] dump_user_range+0x18d/0xad0 [ 666.426224][T16588] ? __pfx_dump_user_range+0x10/0x10 [ 666.426271][T16588] ? __pfx_writenote+0x10/0x10 [ 666.426319][T16588] elf_core_dump+0x2d5f/0x3d10 [ 666.426378][T16588] ? __pfx_elf_core_dump+0x10/0x10 [ 666.426415][T16588] ? trace_sched_exit_tp+0x11c/0x160 [ 666.426459][T16588] ? __schedule+0x12a7/0x67a0 [ 666.426489][T16588] ? vfs_coredump+0x22db/0x5770 [ 666.426530][T16588] ? 0xffffffffff600000 [ 666.426618][T16588] ? vfs_coredump+0x2980/0x5770 [ 666.426659][T16588] vfs_coredump+0x2980/0x5770 [ 666.426710][T16588] ? __pfx_vfs_coredump+0x10/0x10 [ 666.426749][T16588] ? __lock_acquire+0x4a5/0x2630 [ 666.426802][T16588] ? lock_acquire+0x1b1/0x370 [ 666.426857][T16588] ? is_bpf_text_address+0x8a/0x1a0 [ 666.426892][T16588] ? bpf_ksym_find+0x124/0x1c0 [ 666.426928][T16588] ? __kernel_text_address+0xd/0x30 [ 666.426954][T16588] ? unwind_get_return_address+0x59/0xa0 [ 666.426987][T16588] ? arch_stack_walk+0xa6/0xf0 [ 666.427026][T16588] ? __sigqueue_free+0xbe/0x2a0 [ 666.427062][T16588] ? stack_trace_save+0x8e/0xc0 [ 666.427094][T16588] ? __pfx_stack_trace_save+0x10/0x10 [ 666.427132][T16588] ? stack_depot_save_flags+0x27/0x9d0 [ 666.427173][T16588] ? __lock_acquire+0x4a5/0x2630 [ 666.427278][T16588] ? proc_coredump_connector+0x2d3/0x4f0 [ 666.427320][T16588] ? __pfx_proc_coredump_connector+0x10/0x10 [ 666.427381][T16588] ? rcu_is_watching+0x12/0xc0 [ 666.427419][T16588] get_signal+0x2162/0x2210 [ 666.427467][T16588] ? __pfx_get_signal+0x10/0x10 [ 666.427501][T16588] ? __pfx_force_sig_fault+0x10/0x10 [ 666.427542][T16588] arch_do_signal_or_restart+0x91/0x7a0 [ 666.427583][T16588] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 666.427651][T16588] ? rcu_is_watching+0x12/0xc0 [ 666.427696][T16588] irqentry_exit+0x39e/0x970 [ 666.427751][T16588] asm_exc_page_fault+0x26/0x30 [ 666.427782][T16588] RIP: 0033:0x7fb1a5d9ce61 [ 666.427812][T16588] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 666.427837][T16588] RSP: 002b:00000000000072d2 EFLAGS: 00010217 [ 666.427856][T16588] RAX: 0000000000000000 RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 666.427881][T16588] RDX: 0000000000000000 RSI: 00000000000072d2 RDI: 0000000000000004 [ 666.427900][T16588] RBP: 00007fb1a5e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 666.427916][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.427934][T16588] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 666.427977][T16588] [ 666.432155][T16588] memory: usage 3072kB, limit 3072kB, failcnt 57826 [ 666.946208][T16588] memory+swap: usage 24788kB, limit 9007199254740988kB, failcnt 0 [ 666.946275][T16588] kmem: usage 2652kB, limit 9007199254740988kB, failcnt 0 [ 666.946291][T16588] Memory cgroup stats for /syz0: [ 666.946529][T16588] cache 0 [ 666.946542][T16588] rss 0 [ 666.946552][T16588] rss_huge 0 [ 666.946562][T16588] shmem 0 [ 666.946572][T16588] mapped_file 0 [ 666.946583][T16588] dirty 0 [ 666.946594][T16588] writeback 0 [ 666.946605][T16588] workingset_refault_anon 17928 [ 666.946617][T16588] workingset_refault_file 35258 [ 666.946629][T16588] swap 22237184 [ 666.946640][T16588] swapcached 249602048 [ 666.946652][T16588] pgpgin 550311 [ 666.946663][T16588] pgpgout 559476 [ 666.946674][T16588] pgfault 583253 [ 666.946683][T16588] pgmajfault 4058 [ 666.946694][T16588] inactive_anon 12288 [ 666.946705][T16588] active_anon 413696 [ 666.946717][T16588] inactive_file 0 [ 666.946728][T16588] active_file 0 [ 666.946739][T16588] unevictable 0 [ 666.946750][T16588] hierarchical_memory_limit 3145728 [ 666.946762][T16588] hierarchical_memsw_limit 9223372036854771712 [ 666.946776][T16588] total_cache 0 [ 666.946787][T16588] total_rss 0 [ 666.946798][T16588] total_rss_huge 0 [ 666.946808][T16588] total_shmem 0 [ 666.946819][T16588] total_mapped_file 0 [ 666.946830][T16588] total_dirty 0 [ 666.946842][T16588] total_writeback 0 [ 666.946852][T16588] total_workingset_refault_anon 17928 [ 666.946865][T16588] total_workingset_refault_file 35258 [ 666.946878][T16588] total_swap 22237184 [ 666.946889][T16588] total_swapcached 249602048 [ 666.946901][T16588] total_pgpgin 550311 [ 666.946912][T16588] total_pgpgout 559476 [ 666.946924][T16588] total_pgfault 583253 [ 666.946935][T16588] total_pgmajfault 4058 [ 666.946951][T16588] total_inactive_anon 12288 [ 666.946962][T16588] total_active_anon 413696 [ 666.946973][T16588] total_inactive_file 0 [ 666.946983][T16588] total_active_file 0 [ 666.946994][T16588] total_unevictable 0 [ 666.947005][T16588] anon_cost 0 [ 666.947015][T16588] file_cost 0 [ 666.947027][T16588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3343,pid=16920,uid=0 [ 666.947292][T16588] Memory cgroup out of memory: Killed process 16921 (syz.0.3343) total-vm:108644kB, anon-rss:1244kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 666.985884][T16975] netlink: 'syz.2.3363': attribute type 29 has an invalid length. [ 666.985946][T16975] netlink: 46 bytes leftover after parsing attributes in process `syz.2.3363'. [ 668.127028][T16987] FAULT_INJECTION: forcing a failure. [ 668.127028][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 668.176281][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.0.3367 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.176328][T16987] Tainted: [L]=SOFTLOCKUP [ 668.176340][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.176366][T16987] Call Trace: [ 668.176376][T16987] [ 668.176388][T16987] dump_stack_lvl+0x100/0x190 [ 668.176441][T16987] should_fail_ex.cold+0x5/0xa [ 668.176477][T16987] should_failslab+0xc2/0x120 [ 668.176513][T16987] __kmalloc_cache_noprof+0x7a/0x6f0 [ 668.176553][T16987] ? snd_pcm_attach_substream+0x436/0xd20 [ 668.176583][T16987] ? snd_ctl_get_preferred_subdevice+0x17a/0x1f0 [ 668.176637][T16987] snd_pcm_attach_substream+0x436/0xd20 [ 668.176676][T16987] snd_pcm_open_substream+0x90/0x1850 [ 668.176724][T16987] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 668.176768][T16987] ? lockdep_init_map_type+0x5c/0x250 [ 668.176811][T16987] ? lockdep_init_map_type+0x5c/0x250 [ 668.176860][T16987] snd_pcm_oss_open+0x735/0x1390 [ 668.176911][T16987] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 668.176957][T16987] ? __lock_acquire+0x4a5/0x2630 [ 668.176997][T16987] ? __pfx_default_wake_function+0x10/0x10 [ 668.177033][T16987] ? __lock_acquire+0x4a5/0x2630 [ 668.177087][T16987] ? do_raw_spin_lock+0x128/0x260 [ 668.177118][T16987] ? soundcore_open+0x231/0x5a0 [ 668.177155][T16987] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 668.177194][T16987] soundcore_open+0x2e3/0x5a0 [ 668.177231][T16987] ? __pfx_soundcore_open+0x10/0x10 [ 668.177265][T16987] chrdev_open+0x234/0x6a0 [ 668.177300][T16987] ? __pfx_apparmor_file_open+0x10/0x10 [ 668.177331][T16987] ? __pfx_chrdev_open+0x10/0x10 [ 668.177377][T16987] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 668.177423][T16987] do_dentry_open+0x6ab/0x14d0 [ 668.177457][T16987] ? __pfx_chrdev_open+0x10/0x10 [ 668.177499][T16987] vfs_open+0x82/0x3f0 [ 668.177545][T16987] path_openat+0x208c/0x31a0 [ 668.177592][T16987] ? __pfx_path_openat+0x10/0x10 [ 668.177642][T16987] do_file_open+0x20e/0x430 [ 668.177680][T16987] ? __pfx_do_file_open+0x10/0x10 [ 668.177741][T16987] ? alloc_fd+0x476/0x790 [ 668.177779][T16987] ? do_getname+0x191/0x390 [ 668.177824][T16987] do_sys_openat2+0x10d/0x1e0 [ 668.177866][T16987] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.177922][T16987] __x64_sys_openat+0x12d/0x210 [ 668.177966][T16987] ? __pfx___x64_sys_openat+0x10/0x10 [ 668.178016][T16987] ? rcu_is_watching+0x12/0xc0 [ 668.178052][T16987] do_syscall_64+0x115/0x840 [ 668.178089][T16987] ? clear_bhb_loop+0x40/0x90 [ 668.178121][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.178147][T16987] RIP: 0033:0x7fb1a5d9ce59 [ 668.178169][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.178195][T16987] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 668.178222][T16987] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 668.178239][T16987] RDX: 0000000000080402 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 668.178255][T16987] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 668.178270][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.178285][T16987] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 668.178323][T16987] [ 668.635203][T16990] random: crng reseeded on system resumption [ 670.782993][T17025] netlink: 178 bytes leftover after parsing attributes in process `syz.3.3377'. [ 670.811148][T17025] netlink: 178 bytes leftover after parsing attributes in process `syz.3.3377'. [ 672.266242][T17042] kvm: user requested TSC rate below hardware speed [ 672.375677][T17039] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3380'. [ 672.396857][T17039] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3380'. [ 672.731150][T17056] FAULT_INJECTION: forcing a failure. [ 672.731150][T17056] name failslab, interval 1, probability 0, space 0, times 0 [ 672.774292][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.2.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.774337][T17056] Tainted: [L]=SOFTLOCKUP [ 672.774346][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 672.774362][T17056] Call Trace: [ 672.774371][T17056] [ 672.774382][T17056] dump_stack_lvl+0x100/0x190 [ 672.774434][T17056] should_fail_ex.cold+0x5/0xa [ 672.774470][T17056] should_failslab+0xc2/0x120 [ 672.774504][T17056] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 672.774550][T17056] ? __d_alloc+0x34/0xa40 [ 672.774596][T17056] __d_alloc+0x34/0xa40 [ 672.774637][T17056] d_alloc_pseudo+0x1c/0xc0 [ 672.774665][T17056] alloc_file_pseudo+0xcf/0x230 [ 672.774719][T17056] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 672.774773][T17056] __shmem_file_setup+0x205/0x460 [ 672.774815][T17056] ? __pfx___shmem_file_setup+0x10/0x10 [ 672.774865][T17056] newseg+0x3c0/0xed0 [ 672.774909][T17056] ? __pfx_newseg+0x10/0x10 [ 672.774942][T17056] ? find_held_lock+0x2b/0x80 [ 672.774977][T17056] ? ipcget+0x8aa/0xf50 [ 672.775021][T17056] ipcget+0x909/0xf50 [ 672.775057][T17056] ? do_futex+0x192/0x350 [ 672.775095][T17056] ? __pfx_ipcget+0x10/0x10 [ 672.775135][T17056] ? __x64_sys_futex+0x34f/0x4d0 [ 672.775162][T17056] ? __x64_sys_futex+0x358/0x4d0 [ 672.775196][T17056] __x64_sys_shmget+0x13b/0x1b0 [ 672.775235][T17056] ? __pfx___x64_sys_shmget+0x10/0x10 [ 672.775277][T17056] ? rcu_is_watching+0x12/0xc0 [ 672.775312][T17056] do_syscall_64+0x115/0x840 [ 672.775347][T17056] ? clear_bhb_loop+0x40/0x90 [ 672.775383][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.775412][T17056] RIP: 0033:0x7f9c9439ce59 [ 672.775439][T17056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.775469][T17056] RSP: 002b:00007f9c951e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 672.775496][T17056] RAX: ffffffffffffffda RBX: 00007f9c94616090 RCX: 00007f9c9439ce59 [ 672.775515][T17056] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 672.775530][T17056] RBP: 00007f9c94432d6f R08: 0000000000000000 R09: 0000000000000000 [ 672.775547][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.775563][T17056] R13: 00007f9c94616128 R14: 00007f9c94616090 R15: 00007ffc43b29ab8 [ 672.775599][T17056] [ 675.531935][T17088] FAULT_INJECTION: forcing a failure. [ 675.531935][T17088] name failslab, interval 1, probability 0, space 0, times 0 [ 675.552421][T17088] CPU: 0 UID: 0 PID: 17088 Comm: syz.3.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.552455][T17088] Tainted: [L]=SOFTLOCKUP [ 675.552461][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.552471][T17088] Call Trace: [ 675.552477][T17088] [ 675.552484][T17088] dump_stack_lvl+0x100/0x190 [ 675.552513][T17088] should_fail_ex.cold+0x5/0xa [ 675.552532][T17088] should_failslab+0xc2/0x120 [ 675.552554][T17088] __kmalloc_cache_noprof+0x7a/0x6f0 [ 675.552574][T17088] ? __kthread_create_on_node+0xce/0x3f0 [ 675.552593][T17088] ? lockdep_init_map_type+0x5c/0x250 [ 675.552619][T17088] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 675.552637][T17088] __kthread_create_on_node+0xce/0x3f0 [ 675.552658][T17088] ? __pfx___kthread_create_on_node+0x10/0x10 [ 675.552686][T17088] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 675.552704][T17088] kthread_create_on_node+0xc7/0x100 [ 675.552723][T17088] ? __pfx_kthread_create_on_node+0x10/0x10 [ 675.552741][T17088] ? mark_held_locks+0x40/0x70 [ 675.552762][T17088] ? lockdep_hardirqs_on+0x78/0x100 [ 675.552783][T17088] ? find_held_lock+0x2b/0x80 [ 675.552800][T17088] ? tomoyo_notify_gc+0xc6/0x480 [ 675.552822][T17088] tomoyo_notify_gc+0x102/0x480 [ 675.552840][T17088] ? __pfx_tomoyo_release+0x10/0x10 [ 675.552862][T17088] tomoyo_release+0x31/0x40 [ 675.552882][T17088] __fput+0x3ff/0xb50 [ 675.552903][T17088] ? _raw_spin_unlock_irq+0x23/0x50 [ 675.552922][T17088] task_work_run+0x150/0x240 [ 675.552937][T17088] ? __pfx_task_work_run+0x10/0x10 [ 675.552953][T17088] ? rcu_is_watching+0x12/0xc0 [ 675.552971][T17088] exit_to_user_mode_loop+0x157/0x670 [ 675.552993][T17088] ? rcu_is_watching+0x12/0xc0 [ 675.553011][T17088] do_syscall_64+0x652/0x840 [ 675.553031][T17088] ? clear_bhb_loop+0x40/0x90 [ 675.553048][T17088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.553063][T17088] RIP: 0033:0x7f711199ce59 [ 675.553077][T17088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.553091][T17088] RSP: 002b:00007f7112842028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 675.553106][T17088] RAX: 0000000000000000 RBX: 00007f7111c15fa0 RCX: 00007f711199ce59 [ 675.553117][T17088] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 675.553125][T17088] RBP: 00007f7111a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 675.553134][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.553143][T17088] R13: 00007f7111c16038 R14: 00007f7111c15fa0 R15: 00007ffc756d06d8 [ 675.553163][T17088] [ 675.917984][ T5629] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 675.930822][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 675.930857][ T5629] Tainted: [L]=SOFTLOCKUP [ 675.930865][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.930877][ T5629] Call Trace: [ 675.930885][ T5629] [ 675.930894][ T5629] dump_stack_lvl+0x100/0x190 [ 675.930933][ T5629] dump_header+0xfb/0x606 [ 675.930958][ T5629] oom_kill_process.cold+0xd/0x330 [ 675.930984][ T5629] out_of_memory+0x340/0x14f0 [ 675.931024][ T5629] ? __pfx_out_of_memory+0x10/0x10 [ 675.931064][ T5629] mem_cgroup_out_of_memory+0xc6/0x130 [ 675.931096][ T5629] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 675.931126][ T5629] ? find_held_lock+0x2b/0x80 [ 675.931156][ T5629] ? do_raw_spin_unlock+0x145/0x1e0 [ 675.931180][ T5629] ? _raw_spin_unlock+0x28/0x50 [ 675.931209][ T5629] try_charge_memcg+0x6e5/0xdf0 [ 675.931240][ T5629] ? __pfx_try_charge_memcg+0x10/0x10 [ 675.931263][ T5629] ? find_held_lock+0x2b/0x80 [ 675.931287][ T5629] ? rcu_read_unlock+0x17/0x60 [ 675.931332][ T5629] ? rcu_read_unlock+0x17/0x60 [ 675.931363][ T5629] ? find_held_lock+0x2b/0x80 [ 675.931388][ T5629] ? rcu_read_unlock+0x17/0x60 [ 675.931420][ T5629] charge_memcg+0x19f/0x210 [ 675.931446][ T5629] mem_cgroup_swapin_charge_folio+0xd2/0x2f0 [ 675.931479][ T5629] __swap_cache_prepare_and_add+0x842/0xa20 [ 675.931512][ T5629] ? alloc_pages_mpol+0x25a/0x540 [ 675.931542][ T5629] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 675.931573][ T5629] ? __pfx_swap_entry_swapped+0x10/0x10 [ 675.931606][ T5629] swap_cache_alloc_folio+0x1cb/0x300 [ 675.931639][ T5629] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 675.931718][ T5629] swap_cluster_readahead+0x411/0x770 [ 675.931757][ T5629] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 675.931801][ T5629] ? clockevents_program_event+0x23e/0x820 [ 675.931829][ T5629] ? get_vma_policy+0x23d/0x3b0 [ 675.931856][ T5629] swapin_readahead+0x160/0x12c0 [ 675.931889][ T5629] ? clockevents_program_event+0x1ef/0x820 [ 675.931919][ T5629] ? __pfx_swapin_readahead+0x10/0x10 [ 675.931950][ T5629] ? find_held_lock+0x2b/0x80 [ 675.931973][ T5629] ? swap_table_get+0x103/0x2c0 [ 675.932009][ T5629] ? swap_table_get+0x10d/0x2c0 [ 675.932039][ T5629] ? swap_cache_get_folio+0x286/0x350 [ 675.932070][ T5629] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 675.932100][ T5629] ? __pfx_get_swap_device+0x10/0x10 [ 675.932129][ T5629] ? do_swap_page+0x931/0x6180 [ 675.932158][ T5629] do_swap_page+0x931/0x6180 [ 675.932201][ T5629] ? __pfx_do_swap_page+0x10/0x10 [ 675.932232][ T5629] ? __free_object+0x2a8/0x3f0 [ 675.932256][ T5629] ? lockdep_hardirqs_on+0x78/0x100 [ 675.932288][ T5629] ? rcu_is_watching+0x12/0xc0 [ 675.932311][ T5629] ? __pte_offset_map+0x179/0x310 [ 675.932338][ T5629] __handle_mm_fault+0x192f/0x2a00 [ 675.932374][ T5629] ? reacquire_held_locks+0xce/0x1e0 [ 675.932406][ T5629] ? __pfx___handle_mm_fault+0x10/0x10 [ 675.932450][ T5629] ? lock_vma_under_rcu+0x17c/0x590 [ 675.932497][ T5629] handle_mm_fault+0x37b/0xa30 [ 675.932532][ T5629] do_user_addr_fault+0x5a3/0x12f0 [ 675.932565][ T5629] exc_page_fault+0x6f/0xd0 [ 675.932595][ T5629] asm_exc_page_fault+0x26/0x30 [ 675.932616][ T5629] RIP: 0033:0x7fb1a5d5d68e [ 675.932634][ T5629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 675.932655][ T5629] RSP: 002b:00007ffd15281a48 EFLAGS: 00010246 [ 675.932677][ T5629] RAX: 0000000000000000 RBX: 0000555569c8e500 RCX: 00007fb1a5d5d68e [ 675.932691][ T5629] RDX: 00007ffd15281aa0 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.932704][ T5629] RBP: 00007ffd15281b0c R08: 0000000000000000 R09: 0000000000000000 [ 675.932716][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 675.932729][ T5629] R13: 00000000000927c0 R14: 00000000000a4e16 R15: 00007ffd15281b60 [ 675.932758][ T5629] [ 675.932770][ T5629] memory: usage 3072kB, limit 3072kB, failcnt 66279 [ 676.380097][ T5629] memory+swap: usage 23000kB, limit 9007199254740988kB, failcnt 0 [ 676.388092][ T5629] kmem: usage 2128kB, limit 9007199254740988kB, failcnt 0 [ 676.396968][ T5629] Memory cgroup stats for /syz0: [ 676.397219][ T5629] cache 323584 [ 676.405715][ T5629] rss 53248 [ 676.409736][ T5629] rss_huge 0 [ 676.412978][ T5629] shmem 0 [ 676.426355][ T5629] mapped_file 0 [ 676.430043][ T5629] dirty 0 [ 676.433016][ T5629] writeback 0 [ 676.439992][ T5629] workingset_refault_anon 18741 [ 676.445218][ T5629] workingset_refault_file 41013 [ 676.450213][ T5629] swap 20512768 [ 676.454646][ T5629] swapcached 260173824 [ 676.459062][ T5629] pgpgin 559326 [ 676.515603][T17093] netlink: 62 bytes leftover after parsing attributes in process `syz.2.3397'. [ 676.562812][ T5629] pgpgout 568385 [ 676.566825][ T5629] pgfault 586049 [ 676.570457][ T5629] pgmajfault 4780 [ 676.574983][ T5629] inactive_anon 536576 [ 676.579220][ T5629] active_anon 0 [ 676.583260][ T5629] inactive_file 323584 [ 676.587668][ T5629] active_file 0 [ 676.592036][ T5629] unevictable 0 [ 676.633949][ T5629] hierarchical_memory_limit 3145728 [ 676.652666][T17098] FAULT_INJECTION: forcing a failure. [ 676.652666][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 676.665686][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.3.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.665731][T17098] Tainted: [L]=SOFTLOCKUP [ 676.665742][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.665759][T17098] Call Trace: [ 676.665772][T17098] [ 676.665783][T17098] dump_stack_lvl+0x100/0x190 [ 676.665836][T17098] should_fail_ex.cold+0x5/0xa [ 676.665872][T17098] should_failslab+0xc2/0x120 [ 676.665908][T17098] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 676.665950][T17098] ? do_getname+0x35/0x390 [ 676.665991][T17098] ? ksys_write+0x190/0x250 [ 676.666026][T17098] do_getname+0x35/0x390 [ 676.666066][T17098] do_sys_openat2+0xc5/0x1e0 [ 676.666106][T17098] ? __pfx_do_sys_openat2+0x10/0x10 [ 676.666165][T17098] __x64_sys_openat+0x12d/0x210 [ 676.666209][T17098] ? __pfx___x64_sys_openat+0x10/0x10 [ 676.666251][T17098] ? do_getpgid+0x101/0x2e0 [ 676.666284][T17098] ? rcu_is_watching+0x12/0xc0 [ 676.666320][T17098] do_syscall_64+0x115/0x840 [ 676.666357][T17098] ? clear_bhb_loop+0x40/0x90 [ 676.666392][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.666429][T17098] RIP: 0033:0x7f711195d68e [ 676.666454][T17098] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 676.666484][T17098] RSP: 002b:00007f7112820ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 676.666512][T17098] RAX: ffffffffffffffda RBX: 00007f71128216c0 RCX: 00007f711195d68e [ 676.666531][T17098] RDX: 0000000000000002 RSI: 00007f7112820f90 RDI: ffffffffffffff9c [ 676.666549][T17098] RBP: 00007f7111a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 676.666567][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.666590][T17098] R13: 00007f7111c16128 R14: 00007f7111c16090 R15: 00007ffc756d06d8 [ 676.666628][T17098] [ 676.892672][ T5629] hierarchical_memsw_limit 9223372036854771712 [ 676.914578][ T5629] total_cache 323584 [ 676.941437][ T5629] total_rss 53248 [ 676.962292][ T5629] total_rss_huge 0 [ 676.971749][ T5629] total_shmem 0 [ 677.080469][ T5629] total_mapped_file 0 [ 677.139765][ T5629] total_dirty 0 [ 677.143304][ T5629] total_writeback 0 [ 677.147122][ T5629] total_workingset_refault_anon 18741 [ 677.169851][ T5629] total_workingset_refault_file 41013 [ 677.305378][ T5629] total_swap 20512768 [ 677.317801][ T5629] total_swapcached 260173824 [ 677.361423][ T5629] total_pgpgin 559326 [ 677.418553][ T5629] total_pgpgout 568385 [ 677.452273][ T5629] total_pgfault 586049 [ 677.456354][ T5629] total_pgmajfault 4780 [ 677.460685][ T5629] total_inactive_anon 536576 [ 677.465317][ T5629] total_active_anon 0 [ 677.469379][ T5629] total_inactive_file 323584 [ 677.497587][ T5629] total_active_file 0 [ 677.506393][ T5629] total_unevictable 0 [ 677.575790][ T5629] anon_cost 0 [ 677.597380][ T5629] file_cost 0 [ 677.602325][ T5629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3390,pid=17083,uid=0 [ 677.625617][ T5629] Memory cgroup out of memory: Killed process 17083 (syz.0.3390) total-vm:137312kB, anon-rss:1340kB, file-rss:22736kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 681.336247][T16588] syz.0.3248 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 681.346659][T16588] CPU: 1 UID: 0 PID: 16588 Comm: syz.0.3248 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.346698][T16588] Tainted: [L]=SOFTLOCKUP [ 681.346708][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.346723][T16588] Call Trace: [ 681.346732][T16588] [ 681.346741][T16588] dump_stack_lvl+0x100/0x190 [ 681.346790][T16588] dump_header+0xfb/0x606 [ 681.346827][T16588] oom_kill_process.cold+0xd/0x330 [ 681.346860][T16588] out_of_memory+0x340/0x14f0 [ 681.346907][T16588] ? __pfx_out_of_memory+0x10/0x10 [ 681.346956][T16588] mem_cgroup_out_of_memory+0xc6/0x130 [ 681.346994][T16588] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 681.347030][T16588] ? find_held_lock+0x2b/0x80 [ 681.347068][T16588] ? do_raw_spin_unlock+0x145/0x1e0 [ 681.347096][T16588] ? _raw_spin_unlock+0x28/0x50 [ 681.347136][T16588] try_charge_memcg+0x6e5/0xdf0 [ 681.347171][T16588] ? __pfx_try_charge_memcg+0x10/0x10 [ 681.347199][T16588] ? find_held_lock+0x2b/0x80 [ 681.347227][T16588] ? rcu_read_unlock+0x17/0x60 [ 681.347256][T16588] ? rcu_read_unlock+0x17/0x60 [ 681.347288][T16588] ? find_held_lock+0x2b/0x80 [ 681.347319][T16588] ? rcu_read_unlock+0x17/0x60 [ 681.347358][T16588] charge_memcg+0x19f/0x210 [ 681.347390][T16588] __mem_cgroup_charge+0x2b/0x1c0 [ 681.347425][T16588] shmem_alloc_and_add_folio+0x451/0xd40 [ 681.347475][T16588] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 681.347517][T16588] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 681.347552][T16588] shmem_get_folio_gfp+0x6ab/0x1900 [ 681.347585][T16588] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 681.347624][T16588] shmem_write_begin+0x1a4/0x420 [ 681.347652][T16588] ? __pfx_shmem_write_begin+0x10/0x10 [ 681.347677][T16588] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 681.347704][T16588] ? lockdep_hardirqs_on+0x78/0x100 [ 681.347742][T16588] generic_perform_write+0x292/0xa40 [ 681.347790][T16588] ? __pfx_generic_perform_write+0x10/0x10 [ 681.347840][T16588] ? file_update_time_flags+0x373/0x500 [ 681.347881][T16588] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 681.347910][T16588] shmem_file_write_iter+0x10e/0x140 [ 681.347942][T16588] __kernel_write_iter+0x2ac/0x920 [ 681.347974][T16588] ? __pfx___kernel_write_iter+0x10/0x10 [ 681.348003][T16588] ? __up_read+0x2c1/0x6e0 [ 681.348034][T16588] ? dump_user_range+0x65e/0xad0 [ 681.348068][T16588] ? copy_mc_enhanced_fast_string+0x6/0xf [ 681.348100][T16588] dump_user_range+0x3f9/0xad0 [ 681.348141][T16588] ? __pfx_dump_user_range+0x10/0x10 [ 681.348184][T16588] ? __pfx_writenote+0x10/0x10 [ 681.348225][T16588] elf_core_dump+0x2d5f/0x3d10 [ 681.348282][T16588] ? __pfx_elf_core_dump+0x10/0x10 [ 681.348315][T16588] ? trace_sched_exit_tp+0x11c/0x160 [ 681.348350][T16588] ? __schedule+0x12a7/0x67a0 [ 681.348375][T16588] ? vfs_coredump+0x22db/0x5770 [ 681.348411][T16588] ? 0xffffffffff600000 [ 681.348484][T16588] ? vfs_coredump+0x2980/0x5770 [ 681.348513][T16588] vfs_coredump+0x2980/0x5770 [ 681.348563][T16588] ? __pfx_vfs_coredump+0x10/0x10 [ 681.348600][T16588] ? __lock_acquire+0x4a5/0x2630 [ 681.348653][T16588] ? lock_acquire+0x1b1/0x370 [ 681.348705][T16588] ? is_bpf_text_address+0x8a/0x1a0 [ 681.348740][T16588] ? bpf_ksym_find+0x124/0x1c0 [ 681.348775][T16588] ? __kernel_text_address+0xd/0x30 [ 681.348800][T16588] ? unwind_get_return_address+0x59/0xa0 [ 681.348841][T16588] ? arch_stack_walk+0xa6/0xf0 [ 681.348884][T16588] ? __sigqueue_free+0xbe/0x2a0 [ 681.348920][T16588] ? stack_trace_save+0x8e/0xc0 [ 681.348952][T16588] ? __pfx_stack_trace_save+0x10/0x10 [ 681.348986][T16588] ? stack_depot_save_flags+0x27/0x9d0 [ 681.349026][T16588] ? __lock_acquire+0x4a5/0x2630 [ 681.349124][T16588] ? proc_coredump_connector+0x2d3/0x4f0 [ 681.349158][T16588] ? __pfx_proc_coredump_connector+0x10/0x10 [ 681.349198][T16588] ? rcu_is_watching+0x12/0xc0 [ 681.349235][T16588] get_signal+0x2162/0x2210 [ 681.349280][T16588] ? __pfx_get_signal+0x10/0x10 [ 681.349310][T16588] ? __pfx_force_sig_fault+0x10/0x10 [ 681.349348][T16588] arch_do_signal_or_restart+0x91/0x7a0 [ 681.349386][T16588] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 681.349436][T16588] ? rcu_is_watching+0x12/0xc0 [ 681.349470][T16588] irqentry_exit+0x39e/0x970 [ 681.349510][T16588] asm_exc_page_fault+0x26/0x30 [ 681.349535][T16588] RIP: 0033:0x7fb1a5d9ce61 [ 681.349557][T16588] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 681.349580][T16588] RSP: 002b:00000000000072d2 EFLAGS: 00010217 [ 681.349600][T16588] RAX: 0000000000000000 RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 681.349615][T16588] RDX: 0000000000000000 RSI: 00000000000072d2 RDI: 0000000000000004 [ 681.349629][T16588] RBP: 00007fb1a5e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 681.349643][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.349657][T16588] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 681.349693][T16588] [ 681.832884][T16588] memory: usage 3072kB, limit 3072kB, failcnt 70520 [ 681.854435][T16588] memory+swap: usage 36796kB, limit 9007199254740988kB, failcnt 0 [ 681.864504][T16588] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 681.876030][T16588] Memory cgroup stats for /syz0: [ 681.876201][T16588] cache 0 [ 681.884377][T16588] rss 0 [ 681.887701][T16588] rss_huge 0 [ 681.891014][T16588] shmem 0 [ 681.894090][T16588] mapped_file 0 [ 681.901181][T16588] dirty 0 [ 681.904256][T16588] writeback 0 [ 681.908087][T16588] workingset_refault_anon 19086 [ 681.913142][T16588] workingset_refault_file 41838 [ 681.924755][T16588] swap 34533376 [ 681.932950][T16588] swapcached 275755008 [ 681.944272][T16588] pgpgin 564006 [ 681.950522][T16588] pgpgout 573152 [ 681.954210][T16588] pgfault 587618 [ 681.960126][T16588] pgmajfault 5078 [ 681.963946][T16588] inactive_anon 24576 [ 681.969526][T16588] active_anon 479232 [ 681.973548][T16588] inactive_file 0 [ 681.977857][T16588] active_file 0 [ 681.981573][T16588] unevictable 0 [ 681.985790][T16588] hierarchical_memory_limit 3145728 [ 681.991171][T16588] hierarchical_memsw_limit 9223372036854771712 [ 682.000519][T16588] total_cache 0 [ 682.004167][T16588] total_rss 0 [ 682.017051][T16588] total_rss_huge 0 [ 682.027182][T16588] total_shmem 0 [ 682.027243][T16588] total_mapped_file 0 [ 682.027255][T16588] total_dirty 0 [ 682.027266][T16588] total_writeback 0 [ 682.027277][T16588] total_workingset_refault_anon 19086 [ 682.027289][T16588] total_workingset_refault_file 41838 [ 682.027301][T16588] total_swap 34533376 [ 682.027312][T16588] total_swapcached 275755008 [ 682.027323][T16588] total_pgpgin 564006 [ 682.027334][T16588] total_pgpgout 573152 [ 682.027345][T16588] total_pgfault 587618 [ 682.027356][T16588] total_pgmajfault 5078 [ 682.027368][T16588] total_inactive_anon 24576 [ 682.027379][T16588] total_active_anon 479232 [ 682.027390][T16588] total_inactive_file 0 [ 682.027402][T16588] total_active_file 0 [ 682.027414][T16588] total_unevictable 0 [ 682.027424][T16588] anon_cost 0 [ 682.027435][T16588] file_cost 0 [ 682.027447][T16588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3248,pid=16588,uid=0 [ 682.027618][T16588] Memory cgroup out of memory: Killed process 16588 (syz.0.3248) total-vm:104284kB, anon-rss:1244kB, file-rss:34252kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 682.041674][T17176] FAULT_INJECTION: forcing a failure. [ 682.041674][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 682.041757][T17176] CPU: 1 UID: 0 PID: 17176 Comm: syz.3.3421 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.041797][T17176] Tainted: [L]=SOFTLOCKUP [ 682.041807][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.041824][T17176] Call Trace: [ 682.041834][T17176] [ 682.041844][T17176] dump_stack_lvl+0x100/0x190 [ 682.041890][T17176] should_fail_ex.cold+0x5/0xa [ 682.041923][T17176] should_failslab+0xc2/0x120 [ 682.041965][T17176] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 682.042008][T17176] ? security_inode_alloc+0x3b/0x2c0 [ 682.042039][T17176] ? lockdep_init_map_type+0x5c/0x250 [ 682.042085][T17176] security_inode_alloc+0x3b/0x2c0 [ 682.042115][T17176] inode_init_always_gfp+0xc77/0xfb0 [ 682.042155][T17176] alloc_inode+0x8e/0x250 [ 682.042200][T17176] new_inode+0x22/0x1c0 [ 682.042242][T17176] shmem_get_inode+0x1e3/0xfb0 [ 682.042282][T17176] ? __pfx_shmem_get_inode+0x10/0x10 [ 682.042323][T17176] __shmem_file_setup+0x168/0x460 [ 682.042360][T17176] ? __pfx___shmem_file_setup+0x10/0x10 [ 682.042408][T17176] newseg+0x3c0/0xed0 [ 682.042448][T17176] ? __pfx_newseg+0x10/0x10 [ 682.042482][T17176] ? find_held_lock+0x2b/0x80 [ 682.042512][T17176] ? ipcget+0x8aa/0xf50 [ 682.042550][T17176] ipcget+0x909/0xf50 [ 682.042582][T17176] ? do_futex+0x192/0x350 [ 682.042619][T17176] ? __pfx_ipcget+0x10/0x10 [ 682.042658][T17176] ? __x64_sys_futex+0x34f/0x4d0 [ 682.042686][T17176] ? __x64_sys_futex+0x358/0x4d0 [ 682.042721][T17176] __x64_sys_shmget+0x13b/0x1b0 [ 682.042761][T17176] ? __pfx___x64_sys_shmget+0x10/0x10 [ 682.042803][T17176] ? rcu_is_watching+0x12/0xc0 [ 682.042836][T17176] do_syscall_64+0x115/0x840 [ 682.042873][T17176] ? clear_bhb_loop+0x40/0x90 [ 682.042909][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.042938][T17176] RIP: 0033:0x7f711199ce59 [ 682.042971][T17176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.042999][T17176] RSP: 002b:00007f7112842028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 682.043027][T17176] RAX: ffffffffffffffda RBX: 00007f7111c15fa0 RCX: 00007f711199ce59 [ 682.043047][T17176] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 682.043064][T17176] RBP: 00007f7111a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 682.043081][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.043096][T17176] R13: 00007f7111c16038 R14: 00007f7111c15fa0 R15: 00007ffc756d06d8 [ 682.043131][T17176] [ 682.817850][T17153] syz.0.3414 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 682.817954][T17153] CPU: 1 UID: 0 PID: 17153 Comm: syz.0.3414 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.817995][T17153] Tainted: [L]=SOFTLOCKUP [ 682.818005][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.818022][T17153] Call Trace: [ 682.818032][T17153] [ 682.818043][T17153] dump_stack_lvl+0x100/0x190 [ 682.818094][T17153] dump_header+0xfb/0x606 [ 682.818127][T17153] oom_kill_process.cold+0xd/0x330 [ 682.818161][T17153] out_of_memory+0x340/0x14f0 [ 682.818206][T17153] ? __pfx_out_of_memory+0x10/0x10 [ 682.818258][T17153] mem_cgroup_out_of_memory+0xc6/0x130 [ 682.818299][T17153] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 682.818337][T17153] ? find_held_lock+0x2b/0x80 [ 682.818378][T17153] ? do_raw_spin_unlock+0x145/0x1e0 [ 682.818410][T17153] ? _raw_spin_unlock+0x28/0x50 [ 682.818448][T17153] try_charge_memcg+0x6e5/0xdf0 [ 682.818489][T17153] ? __pfx_try_charge_memcg+0x10/0x10 [ 682.818523][T17153] ? find_held_lock+0x2b/0x80 [ 682.818556][T17153] ? rcu_read_unlock+0x17/0x60 [ 682.818589][T17153] ? rcu_read_unlock+0x17/0x60 [ 682.818636][T17153] __memcg_slab_post_alloc_hook+0x43a/0xff0 [ 682.818684][T17153] ? kasan_unpoison+0x27/0x60 [ 682.818737][T17153] __kmalloc_node_track_caller_noprof+0x66e/0x850 [ 682.818767][T17153] ? neigh_sysctl_register+0xb4/0x660 [ 682.818804][T17153] kmemdup_noprof+0x29/0x60 [ 682.818834][T17153] neigh_sysctl_register+0xb4/0x660 [ 682.818867][T17153] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 682.818895][T17153] ? inetdev_init+0x245/0x570 [ 682.818930][T17153] ? inetdev_event+0x7fa/0x17f0 [ 682.818963][T17153] ? notifier_call_chain+0x99/0x400 [ 682.819008][T17153] ? setup_net+0x118/0x3a0 [ 682.819035][T17153] ? copy_net_ns+0x46f/0x7c0 [ 682.819066][T17153] ? create_new_namespaces+0x3ea/0xac0 [ 682.819099][T17153] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 682.819131][T17153] ? ksys_unshare+0x438/0xab0 [ 682.819167][T17153] ? __x64_sys_unshare+0x31/0x40 [ 682.819204][T17153] ? do_syscall_64+0x115/0x840 [ 682.819246][T17153] devinet_sysctl_register+0xb6/0x210 [ 682.819282][T17153] inetdev_init+0x2b8/0x570 [ 682.819321][T17153] inetdev_event+0x7fa/0x17f0 [ 682.819360][T17153] ? ib_netdevice_event+0xfc/0x330 [ 682.819392][T17153] ? __pfx_inetdev_event+0x10/0x10 [ 682.819432][T17153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 682.819477][T17153] notifier_call_chain+0x99/0x400 [ 682.819525][T17153] call_netdevice_notifiers_info+0xbe/0x110 [ 682.819562][T17153] register_netdevice+0x18fe/0x24b0 [ 682.819600][T17153] ? __pfx_register_netdevice+0x10/0x10 [ 682.819643][T17153] __ip_tunnel_create+0x52b/0x670 [ 682.819683][T17153] ? __pfx___ip_tunnel_create+0x10/0x10 [ 682.819760][T17153] ? net_generic+0xea/0x2a0 [ 682.819806][T17153] ip_tunnel_init_net+0x230/0x780 [ 682.819848][T17153] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 682.819892][T17153] ? trace_kmalloc+0xe3/0x110 [ 682.819924][T17153] ? __kasan_kmalloc+0xaa/0xb0 [ 682.819955][T17153] ? __pfx_vti_init_net+0x10/0x10 [ 682.819992][T17153] vti_init_net+0x2e/0x140 [ 682.820026][T17153] ops_init+0x1e2/0x5f0 [ 682.820058][T17153] setup_net+0x118/0x3a0 [ 682.820085][T17153] ? __pfx_setup_net+0x10/0x10 [ 682.820113][T17153] ? mutex_init_lockdep+0xf1/0x120 [ 682.820144][T17153] copy_net_ns+0x46f/0x7c0 [ 682.820177][T17153] create_new_namespaces+0x3ea/0xac0 [ 682.820216][T17153] unshare_nsproxy_namespaces+0xf2/0x220 [ 682.820257][T17153] ksys_unshare+0x438/0xab0 [ 682.820290][T17153] ? kcov_ioctl+0x16a/0x720 [ 682.820323][T17153] ? kfree+0x1dd/0x6c0 [ 682.820356][T17153] ? __pfx_ksys_unshare+0x10/0x10 [ 682.820394][T17153] ? kcov_ioctl+0x16a/0x720 [ 682.820431][T17153] __x64_sys_unshare+0x31/0x40 [ 682.820467][T17153] do_syscall_64+0x115/0x840 [ 682.820504][T17153] ? clear_bhb_loop+0x40/0x90 [ 682.820539][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.820565][T17153] RIP: 0033:0x7fb1a5d9ce59 [ 682.820588][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.820615][T17153] RSP: 002b:00007fb1a6cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 682.820641][T17153] RAX: ffffffffffffffda RBX: 00007fb1a6015fa0 RCX: 00007fb1a5d9ce59 [ 682.820659][T17153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 682.820676][T17153] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 682.820693][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.820717][T17153] R13: 00007fb1a6016038 R14: 00007fb1a6015fa0 R15: 00007ffd15281768 [ 682.820756][T17153] [ 682.896152][T17153] memory: usage 3072kB, limit 3072kB, failcnt 70664 [ 682.896179][T17153] memory+swap: usage 36784kB, limit 9007199254740988kB, failcnt 0 [ 682.896200][T17153] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 682.896233][T17153] Memory cgroup stats for /syz0: [ 682.900144][T17153] cache 0 [ 682.900162][T17153] rss 0 [ 682.900172][T17153] rss_huge 0 [ 682.900182][T17153] shmem 0 [ 682.900192][T17153] mapped_file 0 [ 682.900202][T17153] dirty 0 [ 682.900213][T17153] writeback 0 [ 682.900224][T17153] workingset_refault_anon 19088 [ 682.900235][T17153] workingset_refault_file 41838 [ 682.900247][T17153] swap 34521088 [ 682.900257][T17153] swapcached 275763200 [ 682.900268][T17153] pgpgin 564009 [ 682.900280][T17153] pgpgout 573155 [ 682.900291][T17153] pgfault 587619 [ 682.900302][T17153] pgmajfault 5078 [ 682.900314][T17153] inactive_anon 65536 [ 682.900325][T17153] active_anon 438272 [ 682.900336][T17153] inactive_file 0 [ 682.900347][T17153] active_file 0 [ 682.900358][T17153] unevictable 0 [ 682.900368][T17153] hierarchical_memory_limit 3145728 [ 682.900380][T17153] hierarchical_memsw_limit 9223372036854771712 [ 682.900393][T17153] total_cache 0 [ 682.900404][T17153] total_rss 0 [ 682.900413][T17153] total_rss_huge 0 [ 682.900423][T17153] total_shmem 0 [ 682.900432][T17153] total_mapped_file 0 [ 682.900442][T17153] total_dirty 0 [ 682.900453][T17153] total_writeback 0 [ 682.912884][T17153] total_workingset_refault_anon 19088 [ 682.912903][T17153] total_workingset_refault_file 41838 [ 682.912915][T17153] total_swap 34521088 [ 682.912924][T17153] total_swapcached 275763200 [ 682.912930][T17153] total_pgpgin 564009 [ 682.912938][T17153] total_pgpgout 573155 [ 682.912945][T17153] total_pgfault 587619 [ 682.912951][T17153] total_pgmajfault 5078 [ 682.912957][T17153] total_inactive_anon 450560 [ 682.912964][T17153] total_active_anon 0 [ 682.912970][T17153] total_inactive_file 0 [ 682.912976][T17153] total_active_file 0 [ 682.912982][T17153] total_unevictable 0 [ 682.912988][T17153] anon_cost 0 [ 682.912994][T17153] file_cost 0 [ 682.913001][T17153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3414,pid=17151,uid=0 [ 682.915790][T17153] Memory cgroup out of memory: Killed process 17151 (syz.0.3414) total-vm:108512kB, anon-rss:1248kB, file-rss:21460kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 685.535112][T17241] FAULT_INJECTION: forcing a failure. [ 685.535112][T17241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 685.569756][T17241] CPU: 0 UID: 0 PID: 17241 Comm: syz.0.3443 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.569803][T17241] Tainted: [L]=SOFTLOCKUP [ 685.569813][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.569832][T17241] Call Trace: [ 685.569842][T17241] [ 685.569852][T17241] dump_stack_lvl+0x100/0x190 [ 685.569903][T17241] should_fail_ex.cold+0x5/0xa [ 685.569932][T17241] ? prepare_alloc_pages+0x16d/0x5f0 [ 685.569972][T17241] should_fail_alloc_page+0xeb/0x140 [ 685.570010][T17241] prepare_alloc_pages+0x1f0/0x5f0 [ 685.570052][T17241] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 685.570108][T17241] ? __lock_acquire+0x4a5/0x2630 [ 685.570150][T17241] ? __lock_acquire+0x4a5/0x2630 [ 685.570191][T17241] ? __css_rstat_updated+0x1ce/0x5a0 [ 685.570238][T17241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 685.570287][T17241] ? lock_acquire+0x1b1/0x370 [ 685.570356][T17241] ? find_held_lock+0x2b/0x80 [ 685.570390][T17241] ? page_table_check_set+0x477/0x920 [ 685.570435][T17241] ? page_table_check_set+0x486/0x920 [ 685.570470][T17241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 685.570512][T17241] ? policy_nodemask+0xed/0x4f0 [ 685.570548][T17241] alloc_pages_mpol+0x1fb/0x540 [ 685.570582][T17241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 685.570609][T17241] ? __lock_acquire+0x4a5/0x2630 [ 685.570645][T17241] ? rcu_read_unlock+0x2d/0xb0 [ 685.570690][T17241] folio_alloc_mpol_noprof+0x36/0x260 [ 685.570726][T17241] vma_alloc_folio_noprof+0xed/0x1d0 [ 685.570761][T17241] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 685.570803][T17241] ? __lock_acquire+0x4a5/0x2630 [ 685.570847][T17241] ? __pfx_filemap_map_pages+0x10/0x10 [ 685.570890][T17241] do_fault+0x1e6/0x1750 [ 685.570932][T17241] __handle_mm_fault+0x187d/0x2a00 [ 685.570977][T17241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 685.571012][T17241] ? __pfx___handle_mm_fault+0x10/0x10 [ 685.571056][T17241] ? pte_offset_map_lock+0x174/0x320 [ 685.571088][T17241] ? find_held_lock+0x2b/0x80 [ 685.571134][T17241] ? follow_page_pte+0x4d0/0x13f0 [ 685.571175][T17241] handle_mm_fault+0x37b/0xa30 [ 685.571224][T17241] __get_user_pages+0x1178/0x32a0 [ 685.571271][T17241] ? __pfx___get_user_pages+0x10/0x10 [ 685.571323][T17241] populate_vma_page_range+0x267/0x3f0 [ 685.571364][T17241] ? __pfx_populate_vma_page_range+0x10/0x10 [ 685.571401][T17241] ? __pfx_find_vma_intersection+0x10/0x10 [ 685.571438][T17241] ? do_mmap+0x93f/0x12f0 [ 685.571476][T17241] __mm_populate+0x107/0x3a0 [ 685.571513][T17241] ? __pfx___mm_populate+0x10/0x10 [ 685.571553][T17241] ? up_write+0x28c/0x4f0 [ 685.571586][T17241] vm_mmap_pgoff+0x37f/0x470 [ 685.571626][T17241] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 685.571659][T17241] ? __fget_files+0x215/0x3d0 [ 685.571696][T17241] ? __fget_files+0x21f/0x3d0 [ 685.571731][T17241] ksys_mmap_pgoff+0x3cb/0x610 [ 685.571762][T17241] ? __x64_sys_futex+0x358/0x4d0 [ 685.571790][T17241] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 685.571819][T17241] ? xfd_validate_state+0x129/0x190 [ 685.571851][T17241] __x64_sys_mmap+0x125/0x190 [ 685.571881][T17241] do_syscall_64+0x115/0x840 [ 685.571916][T17241] ? clear_bhb_loop+0x40/0x90 [ 685.571947][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.571973][T17241] RIP: 0033:0x7fb1a5d9ce59 [ 685.571995][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.572022][T17241] RSP: 002b:00007fb1a6c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 685.572047][T17241] RAX: ffffffffffffffda RBX: 00007fb1a6016090 RCX: 00007fb1a5d9ce59 [ 685.572064][T17241] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 685.572080][T17241] RBP: 00007fb1a5e32d6f R08: 0000000000000005 R09: 0000000000008000 [ 685.572095][T17241] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 685.572111][T17241] R13: 00007fb1a6016128 R14: 00007fb1a6016090 R15: 00007ffd15281768 [ 685.572144][T17241] [ 686.326556][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.333092][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.638904][T17249] syz.1.3445 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 689.423451][T17297] syz.2.3461 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 689.449851][T17297] CPU: 0 UID: 0 PID: 17297 Comm: syz.2.3461 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.449911][T17297] Tainted: [L]=SOFTLOCKUP [ 689.449921][T17297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 689.449936][T17297] Call Trace: [ 689.449945][T17297] [ 689.449962][T17297] dump_stack_lvl+0x100/0x190 [ 689.450011][T17297] dump_header+0xfb/0x606 [ 689.450041][T17297] oom_kill_process.cold+0xd/0x330 [ 689.450074][T17297] out_of_memory+0x340/0x14f0 [ 689.450119][T17297] ? __pfx_out_of_memory+0x10/0x10 [ 689.450166][T17297] mem_cgroup_out_of_memory+0xc6/0x130 [ 689.450206][T17297] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 689.450242][T17297] ? find_held_lock+0x2b/0x80 [ 689.450285][T17297] ? do_raw_spin_unlock+0x145/0x1e0 [ 689.450313][T17297] ? _raw_spin_unlock+0x28/0x50 [ 689.450349][T17297] try_charge_memcg+0x6e5/0xdf0 [ 689.450392][T17297] ? __pfx_try_charge_memcg+0x10/0x10 [ 689.450421][T17297] ? find_held_lock+0x2b/0x80 [ 689.450455][T17297] ? rcu_read_unlock+0x17/0x60 [ 689.450486][T17297] ? rcu_read_unlock+0x17/0x60 [ 689.450516][T17297] ? find_held_lock+0x2b/0x80 [ 689.450545][T17297] ? rcu_read_unlock+0x17/0x60 [ 689.450581][T17297] charge_memcg+0x19f/0x210 [ 689.450611][T17297] mem_cgroup_swapin_charge_folio+0xd2/0x2f0 [ 689.450649][T17297] __swap_cache_prepare_and_add+0x842/0xa20 [ 689.450688][T17297] ? alloc_pages_mpol+0x25a/0x540 [ 689.450724][T17297] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 689.450762][T17297] ? __pfx_swap_entry_swapped+0x10/0x10 [ 689.450798][T17297] swap_cache_alloc_folio+0x1cb/0x300 [ 689.450836][T17297] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 689.450887][T17297] swap_cluster_readahead+0x411/0x770 [ 689.450934][T17297] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 689.451003][T17297] ? get_vma_policy+0x23d/0x3b0 [ 689.451038][T17297] swapin_readahead+0x160/0x12c0 [ 689.451086][T17297] ? __pfx_swapin_readahead+0x10/0x10 [ 689.451121][T17297] ? find_held_lock+0x2b/0x80 [ 689.451150][T17297] ? swap_table_get+0x103/0x2c0 [ 689.451190][T17297] ? swap_table_get+0x10d/0x2c0 [ 689.451224][T17297] ? swap_cache_get_folio+0x286/0x350 [ 689.451262][T17297] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 689.451304][T17297] ? __pfx_get_swap_device+0x10/0x10 [ 689.451342][T17297] ? do_swap_page+0x931/0x6180 [ 689.451377][T17297] do_swap_page+0x931/0x6180 [ 689.451432][T17297] ? __pfx_do_swap_page+0x10/0x10 [ 689.451468][T17297] ? __free_object+0x2a8/0x3f0 [ 689.451496][T17297] ? lockdep_hardirqs_on+0x78/0x100 [ 689.451534][T17297] ? rcu_is_watching+0x12/0xc0 [ 689.451561][T17297] ? __pte_offset_map+0x179/0x310 [ 689.451594][T17297] __handle_mm_fault+0x192f/0x2a00 [ 689.451639][T17297] ? reacquire_held_locks+0xce/0x1e0 [ 689.451679][T17297] ? __pfx___handle_mm_fault+0x10/0x10 [ 689.451723][T17297] ? lock_vma_under_rcu+0x17c/0x590 [ 689.451777][T17297] handle_mm_fault+0x37b/0xa30 [ 689.451821][T17297] do_user_addr_fault+0x5a3/0x12f0 [ 689.451867][T17297] exc_page_fault+0x6f/0xd0 [ 689.451911][T17297] asm_exc_page_fault+0x26/0x30 [ 689.451937][T17297] RIP: 0033:0x7f9c942507bf [ 689.451966][T17297] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 689.451990][T17297] RSP: 002b:00007ffc43b29af8 EFLAGS: 00010206 [ 689.452021][T17297] RAX: 00000000826a095f RBX: ffffffff826a095f RCX: 0000001b34b09f68 [ 689.452039][T17297] RDX: 000000000000095f RSI: ffffffff826a095f RDI: 0000000000000009 [ 689.452055][T17297] RBP: 0000000000000005 R08: 00007f9c94600000 R09: 00007f9c94602000 [ 689.452072][T17297] R10: 00000000826a0963 R11: 0000000000000009 R12: 00007f9c94616128 [ 689.452088][T17297] R13: 0000000000000005 R14: ffffffff826a015e R15: 00007f9c95145720 [ 689.452106][T17297] ? is_valid_madvise+0x8e/0xd0 [ 689.452137][T17297] ? madvise_dontneed_free_valid_vma+0x25f/0x3b0 [ 689.452174][T17297] ? madvise_dontneed_free_valid_vma+0x25f/0x3b0 [ 689.452211][T17297] [ 689.452247][T17297] memory: usage 3072kB, limit 3072kB, failcnt 74029 [ 689.854590][T17297] memory+swap: usage 3536kB, limit 9007199254740988kB, failcnt 0 [ 689.862468][T17297] kmem: usage 2884kB, limit 9007199254740988kB, failcnt 0 [ 689.869788][T17297] Memory cgroup stats for /syz0: [ 689.869955][T17297] cache 0 [ 689.878038][T17297] rss 0 [ 689.880912][T17297] rss_huge 0 [ 689.884220][T17297] shmem 0 [ 689.887198][T17297] mapped_file 0 [ 689.890665][T17297] dirty 0 [ 689.893742][T17297] writeback 0 [ 689.897059][T17297] workingset_refault_anon 19378 [ 689.901954][T17297] workingset_refault_file 42605 [ 689.907057][T17297] swap 475136 [ 689.910372][T17297] swapcached 287973376 [ 689.916062][T17297] pgpgin 568786 [ 689.923101][T17297] pgpgout 578008 [ 689.929744][T17297] pgfault 592371 [ 689.933947][T17297] pgmajfault 5294 [ 689.937714][T17297] inactive_anon 0 [ 689.941580][T17297] active_anon 192512 [ 689.948951][T17297] inactive_file 0 [ 689.952782][T17297] active_file 0 [ 689.956819][T17297] unevictable 0 [ 689.960437][T17297] hierarchical_memory_limit 3145728 [ 689.966274][T17297] hierarchical_memsw_limit 9223372036854771712 [ 689.972594][T17297] total_cache 0 [ 689.976846][T17297] total_rss 0 [ 689.980272][T17297] total_rss_huge 0 [ 690.011306][T17297] total_shmem 0 [ 690.029993][T17297] total_mapped_file 0 [ 690.038393][T17297] total_dirty 0 [ 690.041978][T17297] total_writeback 0 [ 690.048085][T17297] total_workingset_refault_anon 19378 [ 690.054951][T17297] total_workingset_refault_file 42605 [ 690.060465][T17297] total_swap 475136 [ 690.064895][T17297] total_swapcached 287973376 [ 690.069700][T17297] total_pgpgin 568786 [ 690.074547][T17297] total_pgpgout 578008 [ 690.078777][T17297] total_pgfault 592371 [ 690.083358][T17297] total_pgmajfault 5294 [ 690.087606][T17297] total_inactive_anon 0 [ 690.091978][T17297] total_active_anon 192512 [ 690.101193][T17297] total_inactive_file 0 [ 690.105824][T17297] total_active_file 0 [ 690.109943][T17297] total_unevictable 0 [ 690.125245][T17297] anon_cost 0 [ 690.134390][T17297] file_cost 0 [ 690.157363][T17297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3462,pid=17299,uid=0 [ 690.200913][T17297] Memory cgroup out of memory: Killed process 17299 (syz.0.3462) total-vm:104412kB, anon-rss:1244kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 691.519212][T17338] syz.0.3470 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 691.530835][T17338] CPU: 0 UID: 0 PID: 17338 Comm: syz.0.3470 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.530879][T17338] Tainted: [L]=SOFTLOCKUP [ 691.530889][T17338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 691.530905][T17338] Call Trace: [ 691.530915][T17338] [ 691.530934][T17338] dump_stack_lvl+0x100/0x190 [ 691.530987][T17338] dump_header+0xfb/0x606 [ 691.531019][T17338] oom_kill_process.cold+0xd/0x330 [ 691.531054][T17338] out_of_memory+0x340/0x14f0 [ 691.531105][T17338] ? __pfx_out_of_memory+0x10/0x10 [ 691.531159][T17338] mem_cgroup_out_of_memory+0xc6/0x130 [ 691.531207][T17338] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 691.531248][T17338] ? find_held_lock+0x2b/0x80 [ 691.531290][T17338] ? do_raw_spin_unlock+0x145/0x1e0 [ 691.531323][T17338] ? _raw_spin_unlock+0x28/0x50 [ 691.531363][T17338] try_charge_memcg+0x6e5/0xdf0 [ 691.531404][T17338] ? __pfx_try_charge_memcg+0x10/0x10 [ 691.531438][T17338] ? find_held_lock+0x2b/0x80 [ 691.531472][T17338] ? rcu_read_unlock+0x17/0x60 [ 691.531506][T17338] ? rcu_read_unlock+0x17/0x60 [ 691.531552][T17338] __memcg_slab_post_alloc_hook+0x43a/0xff0 [ 691.531601][T17338] ? kasan_unpoison+0x27/0x60 [ 691.531650][T17338] __kmalloc_node_track_caller_noprof+0x66e/0x850 [ 691.531681][T17338] ? __devinet_sysctl_register+0xbc/0x360 [ 691.531723][T17338] ? register_net_sysctl_sz+0x211/0x430 [ 691.531772][T17338] kmemdup_noprof+0x29/0x60 [ 691.531803][T17338] __devinet_sysctl_register+0xbc/0x360 [ 691.531845][T17338] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 691.531873][T17338] ? inetdev_init+0x245/0x570 [ 691.531907][T17338] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 691.531952][T17338] ? copy_net_ns+0x46f/0x7c0 [ 691.531981][T17338] ? create_new_namespaces+0x3ea/0xac0 [ 691.532015][T17338] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 691.532049][T17338] ? ksys_unshare+0x438/0xab0 [ 691.532085][T17338] ? __x64_sys_unshare+0x31/0x40 [ 691.532121][T17338] ? do_syscall_64+0x115/0x840 [ 691.532159][T17338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.532195][T17338] devinet_sysctl_register+0x17b/0x210 [ 691.532238][T17338] inetdev_init+0x2b8/0x570 [ 691.532278][T17338] inetdev_event+0x7fa/0x17f0 [ 691.532318][T17338] ? ib_netdevice_event+0xfc/0x330 [ 691.532351][T17338] ? __pfx_inetdev_event+0x10/0x10 [ 691.532391][T17338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.532437][T17338] notifier_call_chain+0x99/0x400 [ 691.532486][T17338] call_netdevice_notifiers_info+0xbe/0x110 [ 691.532525][T17338] register_netdevice+0x18fe/0x24b0 [ 691.532563][T17338] ? __pfx_register_netdevice+0x10/0x10 [ 691.532611][T17338] __ip_tunnel_create+0x52b/0x670 [ 691.532652][T17338] ? __pfx___ip_tunnel_create+0x10/0x10 [ 691.532687][T17338] ? net_generic+0xea/0x2a0 [ 691.532733][T17338] ip_tunnel_init_net+0x230/0x780 [ 691.532777][T17338] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 691.532826][T17338] ? __kmalloc_noprof+0x320/0x850 [ 691.532874][T17338] ? __pfx_ipip_init_net+0x10/0x10 [ 691.532914][T17338] ops_init+0x1e2/0x5f0 [ 691.532954][T17338] setup_net+0x118/0x3a0 [ 691.532986][T17338] ? __pfx_setup_net+0x10/0x10 [ 691.533018][T17338] ? mutex_init_lockdep+0xf1/0x120 [ 691.533053][T17338] copy_net_ns+0x46f/0x7c0 [ 691.533089][T17338] create_new_namespaces+0x3ea/0xac0 [ 691.533133][T17338] unshare_nsproxy_namespaces+0xf2/0x220 [ 691.533171][T17338] ksys_unshare+0x438/0xab0 [ 691.533209][T17338] ? kcov_ioctl+0x16a/0x720 [ 691.533243][T17338] ? kfree+0x1dd/0x6c0 [ 691.533282][T17338] ? __pfx_ksys_unshare+0x10/0x10 [ 691.533322][T17338] ? kcov_ioctl+0x16a/0x720 [ 691.533366][T17338] __x64_sys_unshare+0x31/0x40 [ 691.533405][T17338] do_syscall_64+0x115/0x840 [ 691.533443][T17338] ? clear_bhb_loop+0x40/0x90 [ 691.533477][T17338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.533505][T17338] RIP: 0033:0x7fb1a5d9ce59 [ 691.533530][T17338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.533557][T17338] RSP: 002b:00007fb1a6c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 691.533585][T17338] RAX: ffffffffffffffda RBX: 00007fb1a6016090 RCX: 00007fb1a5d9ce59 [ 691.533604][T17338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 691.533621][T17338] RBP: 00007fb1a5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.533638][T17338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.533654][T17338] R13: 00007fb1a6016128 R14: 00007fb1a6016090 R15: 00007ffd15281768 [ 691.533691][T17338] [ 691.533885][T17338] memory: usage 3072kB, limit 3072kB, failcnt 74347 [ 692.066863][T17338] memory+swap: usage 3812kB, limit 9007199254740988kB, failcnt 0 [ 692.078171][T17338] kmem: usage 2876kB, limit 9007199254740988kB, failcnt 0 [ 692.100645][T17338] Memory cgroup stats for /syz0: [ 692.100756][T17338] cache 0 [ 692.114181][T17338] rss 0 [ 692.116997][T17338] rss_huge 0 [ 692.124068][T17338] shmem 0 [ 692.127160][T17338] mapped_file 0 [ 692.130828][T17338] dirty 0 [ 692.137230][T17338] writeback 0 [ 692.140734][T17338] workingset_refault_anon 19419 [ 692.146696][T17338] workingset_refault_file 42605 [ 692.161497][T17338] swap 757760 [ 692.164875][T17338] swapcached 288530432 [ 692.168956][T17338] pgpgin 568938 [ 692.172578][T17338] pgpgout 578158 [ 692.176162][T17338] pgfault 592588 [ 692.179739][T17338] pgmajfault 5316 [ 692.196016][T17338] inactive_anon 200704 [ 692.201803][T17338] active_anon 0 [ 692.206087][T17338] inactive_file 0 [ 692.209866][T17338] active_file 0 [ 692.226364][T17338] unevictable 0 [ 692.229942][T17338] hierarchical_memory_limit 3145728 [ 692.236823][T17338] hierarchical_memsw_limit 9223372036854771712 [ 692.243368][T17338] total_cache 0 [ 692.246981][T17338] total_rss 0 [ 692.250324][T17338] total_rss_huge 0 [ 692.254849][T17338] total_shmem 0 [ 692.258744][T17338] total_mapped_file 0 [ 692.263110][T17338] total_dirty 0 [ 692.266634][T17338] total_writeback 0 [ 692.270549][T17338] total_workingset_refault_anon 19419 [ 692.276614][T17338] total_workingset_refault_file 42605 [ 692.282387][T17338] total_swap 757760 [ 692.293691][T17338] total_swapcached 288530432 [ 692.301257][T17338] total_pgpgin 568938 [ 692.310742][T17338] total_pgpgout 578158 [ 692.314892][T17338] total_pgfault 592588 [ 692.318959][T17338] total_pgmajfault 5316 [ 692.327446][T17338] total_inactive_anon 200704 [ 692.332896][T17338] total_active_anon 0 [ 692.336924][T17338] total_inactive_file 0 [ 692.343038][T17338] total_active_file 0 [ 692.347079][T17338] total_unevictable 0 [ 692.352401][T17338] anon_cost 0 [ 692.357072][T17338] file_cost 0 [ 692.360650][T17338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3470,pid=17332,uid=0 [ 692.375991][T17338] Memory cgroup out of memory: Killed process 17332 (syz.0.3470) total-vm:113276kB, anon-rss:1244kB, file-rss:30600kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 693.303424][T17369] netlink: 'syz.3.3481': attribute type 1 has an invalid length. [ 693.312241][T17367] FAULT_INJECTION: forcing a failure. [ 693.312241][T17367] name failslab, interval 1, probability 0, space 0, times 0 [ 693.315632][T17369] netlink: 'syz.3.3481': attribute type 6 has an invalid length. [ 693.333167][T17367] CPU: 0 UID: 0 PID: 17367 Comm: syz.2.3480 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.333215][T17367] Tainted: [L]=SOFTLOCKUP [ 693.333226][T17367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.333244][T17367] Call Trace: [ 693.333253][T17367] [ 693.333265][T17367] dump_stack_lvl+0x100/0x190 [ 693.333321][T17367] should_fail_ex.cold+0x5/0xa [ 693.333357][T17367] should_failslab+0xc2/0x120 [ 693.333391][T17367] __kmalloc_cache_noprof+0x7a/0x6f0 [ 693.333432][T17367] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 693.333485][T17367] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 693.333535][T17367] vidtv_mux_init+0x8a6/0xbf0 [ 693.333582][T17367] vidtv_start_feed+0x34e/0x500 [ 693.333612][T17367] ? __pfx_vidtv_start_feed+0x10/0x10 [ 693.333645][T17367] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 693.333704][T17367] dmx_section_feed_start_filtering+0x3a8/0x660 [ 693.333753][T17367] dvb_dmxdev_filter_start+0x767/0xdd0 [ 693.333796][T17367] dvb_demux_do_ioctl+0xe64/0x1200 [ 693.333838][T17367] dvb_usercopy+0x167/0x340 [ 693.333894][T17367] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 693.333924][T17367] ? __pfx_dvb_usercopy+0x10/0x10 [ 693.333976][T17367] ? __fget_files+0x21f/0x3d0 [ 693.334019][T17367] dvb_demux_ioctl+0x29/0x40 [ 693.334046][T17367] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 693.334071][T17367] __x64_sys_ioctl+0x18e/0x210 [ 693.334098][T17367] do_syscall_64+0x115/0x840 [ 693.334130][T17367] ? clear_bhb_loop+0x40/0x90 [ 693.334164][T17367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.334189][T17367] RIP: 0033:0x7f9c9439ce59 [ 693.334213][T17367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.334237][T17367] RSP: 002b:00007f9c95203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.334260][T17367] RAX: ffffffffffffffda RBX: 00007f9c94615fa0 RCX: 00007f9c9439ce59 [ 693.334276][T17367] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 693.334290][T17367] RBP: 00007f9c94432d6f R08: 0000000000000000 R09: 0000000000000000 [ 693.334305][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.334320][T17367] R13: 00007f9c94616038 R14: 00007f9c94615fa0 R15: 00007ffc43b29ab8 [ 693.334352][T17367] [ 693.334550][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 693.573045][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 693.581458][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.592215][ T10] Tainted: [L]=SOFTLOCKUP [ 693.596526][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.606585][ T10] Workqueue: events vidtv_mux_tick [ 693.611718][ T10] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 693.618318][ T10] Code: 3b da d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 693.637928][ T10] RSP: 0018:ffffc900000f73f0 EFLAGS: 00010202 [ 693.643991][ T10] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 693.651955][ T10] RDX: 0000000000000000 RSI: ffffffff88302325 RDI: ffff88801e29be00 [ 693.659918][ T10] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 693.667879][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000f7690 [ 693.675844][ T10] R13: ffffc900000f7670 R14: 0000000000000178 R15: 0000000000000000 [ 693.683805][ T10] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 693.693166][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.699743][ T10] CR2: 0000001b34b10ff8 CR3: 0000000053fc0000 CR4: 00000000003526f0 [ 693.707708][ T10] Call Trace: [ 693.710977][ T10] [ 693.713904][ T10] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 693.720243][ T10] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 693.725790][ T10] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 693.731862][ T10] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 693.737585][ T10] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 693.743667][ T10] vidtv_mux_push_si+0x932/0xe80 [ 693.748608][ T10] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 693.754075][ T10] ? __lock_acquire+0x4a5/0x2630 [ 693.759022][ T10] ? vidtv_memset+0x50/0x90 [ 693.763519][ T10] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 693.769143][ T10] ? rcu_is_watching+0x12/0xc0 [ 693.773905][ T10] ? do_raw_spin_lock+0x128/0x260 [ 693.778930][ T10] vidtv_mux_tick+0xe93/0x1460 [ 693.783956][ T10] ? __lock_acquire+0x4a5/0x2630 [ 693.788904][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 693.794108][ T10] ? __lock_acquire+0x4a5/0x2630 [ 693.799044][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.804239][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 693.809873][ T10] ? rcu_is_watching+0x12/0xc0 [ 693.814643][ T10] process_one_work+0xa0e/0x1980 [ 693.819580][ T10] ? __pfx_process_one_work+0x10/0x10 [ 693.824950][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 693.830166][ T10] worker_thread+0x5ef/0xe50 [ 693.834764][ T10] ? __pfx_worker_thread+0x10/0x10 [ 693.839870][ T10] ? kthread+0x13a/0x450 [ 693.844133][ T10] ? __pfx_worker_thread+0x10/0x10 [ 693.849266][ T10] kthread+0x370/0x450 [ 693.853353][ T10] ? __pfx_kthread+0x10/0x10 [ 693.857948][ T10] ret_from_fork+0x72b/0xd50 [ 693.862532][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 693.867671][ T10] ? __switch_to+0x800/0x1100 [ 693.872373][ T10] ? __switch_to_asm+0x39/0x70 [ 693.877138][ T10] ? __pfx_kthread+0x10/0x10 [ 693.881737][ T10] ret_from_fork_asm+0x1a/0x30 [ 693.886504][ T10] [ 693.889521][ T10] Modules linked in: [ 693.894692][ T10] ---[ end trace 0000000000000000 ]--- [ 693.905644][ T10] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 693.912411][ T10] Code: 3b da d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 693.933909][ T10] RSP: 0018:ffffc900000f73f0 EFLAGS: 00010202 [ 693.940038][ T10] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 693.948070][ T10] RDX: 0000000000000000 RSI: ffffffff88302325 RDI: ffff88801e29be00 [ 693.956812][ T10] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 693.966665][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000f7690 [ 693.976469][ T10] R13: ffffc900000f7670 R14: 0000000000000178 R15: 0000000000000000 [ 693.986839][ T10] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 693.996053][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.997623][T17340] Process accounting resumed [ 694.008903][ T10] CR2: 0000001b34b10ff8 CR3: 000000006b4f0000 CR4: 00000000003526f0 [ 694.017224][ T10] Kernel panic - not syncing: Fatal exception [ 694.023869][ T10] Kernel Offset: disabled [ 694.028207][ T10] Rebooting in 86400 seconds..