last executing test programs: 5.823453569s ago: executing program 3 (id=5190): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae64, 0x38) 5.44614557s ago: executing program 3 (id=5191): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r3, 0x0, 0x81) close_range$auto(0x0, 0x2000000003, 0x0) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0xa, 0x5, 0x0) setsockopt$auto(0x2, 0x1, 0xa, &(0x7f0000000000)='\x00', 0x40) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103}) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_int=0xb1, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r4, 0x4b3a, 0x1) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x95c) r5 = socket(0x15, 0x5, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f0000000300)="5e4d2242e8e4f6c54c9539585b1e3a218d145f26b71078ac5a3838d7df51d19af037b6bb7329280ac73736bd7af0a880b3a5a2d9873d848b250fa22e4d52210298e8a142b989128686940e397d137b4ff929036540ac3af31ce00488d5376c83f84bda47796cceffc14ee8", 0x44d, &(0x7f0000000280)="07423034ef2936a715eaa0d0856c2e377dae0217044aa3c96531b5497bfe86503720819f99ce3f1498f9501d855ad506336de57128bccab4d9f9579c74ec", 0x494, &(0x7f0000000380)="c3343d88359082999983a90b8ba323d809e30370dc0b840d628f81d494eb4719021c6d23b9a92aa6", &(0x7f00000003c0)=0x9}) bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0xffff, @local}, 0x7) setsockopt$auto(r5, 0x114, 0x1, 0x0, 0x1b) r7 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 3.942241664s ago: executing program 0 (id=5193): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x56b) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x89f0, 0x24) r5 = epoll_create$auto(0x8800001) epoll_ctl$auto(r5, 0x1, r2, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) fcntl$auto(r0, 0x40a, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000040)) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/dev_snmp6/sit0\x00', 0x408e00, 0x0) syz_clone(0x34880000, &(0x7f0000000080)="8cb7a10ba7b557ba3f636f76ace85bebe8ed062555da8342cfe9f266d94fff158e7e73a34b643cd21f63dc7d9e020242b24ee77af3dc0bc133ec3a84c9cd", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="863147c371362041f9c607c086e08516c0ff55dd2ddad5685d09c3b9f5ef82708c476e98ddd8492973722850609819a3649a1bc35e05e96eeab4ef38355bbd4dc7abf302cf") mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) waitid$auto_P_PGID(0x2, r1, &(0x7f0000000280)={@_si_pad}, 0x69, &(0x7f0000000300)={{0xaf0, 0x9}, {0x825, 0x8}, 0x9, 0xffffffffffff93e0, 0xff, 0x5, 0xffff, 0x7, 0x3, 0x6, 0x7fff, 0x401, 0x0, 0x8000000000000000, 0x100, 0x6}) 3.941626223s ago: executing program 2 (id=5194): mmap$auto(0x0, 0x400008, 0x201, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r3) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r4, 0x737, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40014) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000080)=@prog_bind_map={r6, r0, 0x4}, 0x6f3) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) read$auto(r7, 0x0, 0xe8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3.657966146s ago: executing program 3 (id=5196): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) 3.062154888s ago: executing program 3 (id=5198): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x38) 2.836940334s ago: executing program 0 (id=5199): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae71, 0x38) 2.762739767s ago: executing program 1 (id=5200): bpf$auto(0x3ff, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0x0, 0x6, 0xa, 0x80000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffff7}, 0x6f3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb0, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x2, 0x8, 0x7d, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x81, 0x4, 0x1, 0x5, 0x3, r1}, 0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) epoll_pwait$auto(r2, &(0x7f0000000000)={0x2, 0x65d}, 0x400, 0x4, &(0x7f0000000040)={0x9}, 0x8) clock_settime$auto(0xffffffff, &(0x7f0000000000)={0x7fffffff, 0x4}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r7, 0x800064d1, r7) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x101) 2.418184555s ago: executing program 3 (id=5201): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x56b) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f0, 0x24) epoll_create$auto(0x8800001) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) syz_clone(0x34880000, &(0x7f0000000080)="8cb7a10ba7b557ba3f636f76ace85bebe8ed062555da8342cfe9f266d94fff158e7e73a34b643cd21f63dc7d9e020242b24ee77af3dc0bc133ec3a84c9cd", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="863147c371362041f9c607c086e08516c0ff55dd2ddad5685d09c3b9f5ef82708c476e98ddd8492973722850609819a3649a1bc35e05e96eeab4ef38355bbd4dc7abf302cf") mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) r3 = waitid$auto_P_PGID(0x2, r0, &(0x7f0000000280)={@_si_pad}, 0x69, &(0x7f0000000300)={{0xaf0, 0x9}, {0x825, 0x8}, 0x9, 0xffffffffffff93e0, 0xff, 0x5, 0xffff, 0x7, 0x3, 0x6, 0x7fff, 0x401, 0x0, 0x8000000000000000, 0x100, 0x6}) rt_sigqueueinfo$auto_SIGCONT(r3, 0x12, &(0x7f00000003c0)={@_si_pad}) 2.39751075s ago: executing program 1 (id=5202): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x7, 0x3) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x44200, 0x0) setsockopt$auto_SO_REUSEPORT(r5, 0x47d8, 0xf, &(0x7f00000001c0)='%$\\)/\'\'@\'(-+\'$^\x00', 0x1) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) ioctl$auto(r6, 0xc0046209, 0x9) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0xa0000, 0x0) ioctl$auto_BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)="21d3bd466499258e5456baef497005c459edf7352a5a22e64a48ded79e648a7e901da05fbafa7d6edf89503a352213882f0c84d098d934aef563280797bcf0cf07cae3e21984550e7a2f38100bad4f1002f9f348fe288f") close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.failcnt\x00', 0xc2061, 0x0) write$auto(r8, 0x0, 0x80) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000500)={0x1c, r2, 0x301, 0x70bd2e, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 2.254252826s ago: executing program 0 (id=5203): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x2000000000040007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa0041, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1a, 0x80010, r2, 0x100) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000020) 1.849102632s ago: executing program 2 (id=5204): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='\xe5\xc8\x01\t\x03:\x1b\xd3\x80 \x99*\x9f\x00\x84s\xf2e#\xe9J\x13\xf2\xe0\xff\x0f\x04A?\x11\t\xf3\x89\f\xf6\xd3:\r\x03_\xb2AT\xc8h\xc9\xfa1\x81\x1b\xde\xae\xc9_\x1f?\xd2\xf1\x03\xe0\xe1\xd8N\x90\x123`\x1c\xe3cF\xc6\xe5\x86aC4@\xfa\xe8g\xc3^\xc3\x14j?\xb9\xca\xec\xcd|\x04F\x91\a\xd1\x1b\xc0\xcf\xac\xe5\xf36\xbe\x9b\xba\xa8\x95\xe7\xe3\x91\xcf\x10\x16f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x6, 0x1001ff000) r4 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003ee, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) fgetxattr$auto(r4, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', 0x0, 0x68) getsockopt$auto(r4, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x6, 0x8000) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) sendfile$auto(r6, r6, 0x0, 0x200) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="44ba916fe6436304857518cf", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x90000000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r7, 0x5608, 0x0) connect$auto(0x3, 0x0, 0x54) r8 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/lapb3/queues/tx-0/xps_rxqs\x00', 0x220142, 0x0) setsockopt$auto_SO_BSDCOMPAT(r8, 0x6, 0xe, 0x0, 0x80001) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x19) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 1.429736142s ago: executing program 1 (id=5207): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) io_uring_setup$auto(0x9, &(0x7f0000000180)={0x7fffffff, 0xd, 0xc002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x2a3, 0x100, 0x7f, 0x101, 0x6, 0xfffc}, {0xfffffff9, 0x8000, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x4}}) r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000180), 0x6}, 0x5) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyzf\x00', 0x20502, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) read$auto(r2, 0x0, 0x6) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="90001866de1ac914c868945d8e0000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25750000002f000d0190470a94faebb974f4a15f896636ad4c87078f6a7b41895eca2de22bce1447715de209bacaad785b979e9c0008003501000000003a009d00cc10a0b3b0159811894785922dfa04a4dd9306ad60015cd2db8c0a127a921e2da7fb7035a1d97fc42784b54a96c1984016367499d5a6000005009200bd000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008005) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, r4, 0x0) (async) socket(0x10, 0x2, 0x4) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) close_range$auto(0x2, 0x8, 0x0) 1.194813747s ago: executing program 2 (id=5208): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) 1.185790647s ago: executing program 0 (id=5209): setresuid$auto(0x2, 0x7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) getresuid$auto(0x0, &(0x7f0000000040)=0xfffffffe, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x59) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x0, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r3, 0x2284, &(0x7f00000001c0)) (async) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r4, 0x1, 0x70bd29, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbd75}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x90) (async) socket(0xa, 0x801, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@generic={0x11, "02d0ac0c00e435826339c7320703"}, 0x6a) 1.023851202s ago: executing program 2 (id=5210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0005"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40001) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4) setsockopt$auto_SO_ZEROCOPY(r1, 0xd5, 0x3c, &(0x7f0000000040)='\x00', 0x5) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) 867.913326ms ago: executing program 2 (id=5211): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40041, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) 510.863592ms ago: executing program 0 (id=5212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x881}, 0xc810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0}) 503.254218ms ago: executing program 1 (id=5213): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, &(0x7f0000000440)="d7") 313.896027ms ago: executing program 1 (id=5214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae78, 0x38) 53.337877ms ago: executing program 0 (id=5215): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x21, 0x800, 0x33) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x26, 0x5, 0x8c68) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000002, 0x100000000000010}, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = ioctl$auto_TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x6, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x109080, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x6e30688036c57e87, 0x0) unshare$auto(0x40000080) sendmsg$auto_NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000eb00be4759cd87e853a910fcfecb01ac3ba4387947ef67ba5a7a40188b21c701d94358a9121bd085d0dbe0f4a912908d0f6eca112f4124b4e57d370bbae08892ed8e6437d16164415b3e61813836fa289d9aca7442c2cdb163215d918887db65faadfbf7c66fad0f18ccf05c17c597c57d8b3bec19932093f6f6ecc36f84d474fdfe33de7d00ebf4bc5576bcd82e03613c484d", @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf25020000001400020000000000000000000000ffff6401010214000200fc0000000000000000000000000000010500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x8, &(0x7f00000000c0)={&(0x7f00000008c0), 0x9}, 0x82, 0x0, 0x8000, 0x1ff}, 0x7}, 0xeb6, 0xffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 0s ago: executing program 1 (id=5216): bpf$auto(0xa, 0x0, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/mtrr\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000080)='\t\x00\\\x00\x00\x00\x00\x00\x95?\xf2\xa6\xa0.__t_event_not\x00', 0x9) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) syz_clone3(&(0x7f0000000200)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0xfffffe4d) madvise$auto(0x0, 0x200007, 0x8) r3 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2000000000000021, 0x1, 0x6) r4 = socket(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$auto(0x7, &(0x7f0000000000)=@query={@target_ifindex=r5, 0x80000002, 0xc6c3, 0xa24, 0x8000010002, @count=0x42, 0x0, 0x9, 0x9, 0x0, 0x3}, 0xa3) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r6 = socket(0x2, 0x3, 0xa) getsockopt$auto(r6, 0x0, 0x29, 0x0, &(0x7f0000000600)) mkdir$auto(&(0x7f00000021c0)='./file0\x00', 0x4) r7 = socket(0x10, 0x2, 0x0) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x1, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x25, 0x2, '/proc/sys/kernel/watchdog_thresh\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x40) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xa8) utimes$auto(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x7fffffffffffffff, 0x7}) madvise$auto(0x0, 0x200204, 0x15) kernel console output (not intermixed with test programs): T2366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.572049][ T2366] bridge_slave_1: entered allmulticast mode [ 1028.648863][ T2366] bridge_slave_1: entered promiscuous mode [ 1028.838246][ T2407] random: crng reseeded on system resumption [ 1028.937620][ T2407] hub 1-0:1.0: USB hub found [ 1028.975573][ T2407] hub 1-0:1.0: 1 port detected [ 1028.997374][T25798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.384872][ T2411] can0: slcan on ttyS2. [ 1029.503155][T25798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.606503][ T2366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.666555][ T2366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.736094][ T2420] can0 (unregistered): slcan off ttyS2. [ 1029.900493][T25798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.145714][T25798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.248609][ T2441] FAULT_INJECTION: forcing a failure. [ 1030.248609][ T2441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.336330][ T2366] team0: Port device team_slave_0 added [ 1030.342486][ T2441] CPU: 0 UID: 0 PID: 2441 Comm: syz.0.4859 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1030.342512][ T2441] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1030.342518][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.342527][ T2441] Call Trace: [ 1030.342533][ T2441] [ 1030.342539][ T2441] dump_stack_lvl+0x100/0x190 [ 1030.342565][ T2441] should_fail_ex.cold+0x5/0xa [ 1030.342583][ T2441] _copy_from_user+0x2e/0xd0 [ 1030.342598][ T2441] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 1030.342623][ T2441] snd_rawmidi_write+0x2dc/0xc60 [ 1030.342643][ T2441] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1030.342659][ T2441] ? __pfx_default_wake_function+0x10/0x10 [ 1030.342676][ T2441] ? bpf_lsm_file_permission+0x9/0x10 [ 1030.342698][ T2441] ? security_file_permission+0x76/0x210 [ 1030.342714][ T2441] ? rw_verify_area+0xce/0x6d0 [ 1030.342736][ T2441] vfs_write+0x2aa/0x1070 [ 1030.342758][ T2441] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1030.342775][ T2441] ? __pfx_vfs_write+0x10/0x10 [ 1030.342794][ T2441] ? find_held_lock+0x2b/0x80 [ 1030.342807][ T2441] ? __fget_files+0x215/0x3d0 [ 1030.342820][ T2441] ? __fget_files+0x215/0x3d0 [ 1030.342836][ T2441] ? __fget_files+0x21f/0x3d0 [ 1030.342854][ T2441] ksys_write+0x1f8/0x250 [ 1030.342867][ T2441] ? __pfx_ksys_write+0x10/0x10 [ 1030.342885][ T2441] do_syscall_64+0x106/0xf80 [ 1030.342902][ T2441] ? clear_bhb_loop+0x40/0x90 [ 1030.342919][ T2441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.342934][ T2441] RIP: 0033:0x7fe3a8d9c799 [ 1030.342947][ T2441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.342961][ T2441] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.342975][ T2441] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1030.342985][ T2441] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1030.342994][ T2441] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1030.343002][ T2441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.343011][ T2441] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1030.343029][ T2441] [ 1030.935116][T25315] Bluetooth: hci1: command tx timeout [ 1031.539721][ T2366] team0: Port device team_slave_1 added [ 1031.747788][ T2366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.804445][ T2366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.906023][ T2366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.017348][ T2366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.040840][ T2366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.124904][ T2366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.527630][T25798] team0: left allmulticast mode [ 1032.532511][T25798] team_slave_0: left allmulticast mode [ 1032.557593][T25798] team_slave_1: left allmulticast mode [ 1032.573331][T25798] team0: left promiscuous mode [ 1032.583773][T25798] team_slave_0: left promiscuous mode [ 1032.606100][T25798] team_slave_1: left promiscuous mode [ 1032.611715][T25798] bridge0: port 4(team0) entered disabled state [ 1032.649548][T25798] gretap0: left allmulticast mode [ 1032.654603][T25798] gretap0: left promiscuous mode [ 1032.680188][T25798] bridge0: port 3(gretap0) entered disabled state [ 1032.707387][T25798] bridge_slave_1: left allmulticast mode [ 1032.726442][T25798] bridge_slave_1: left promiscuous mode [ 1032.732147][T25798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.767346][T25798] bridge_slave_0: left allmulticast mode [ 1032.783242][T25798] bridge_slave_0: left promiscuous mode [ 1032.793476][T25798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.961210][T25315] Bluetooth: hci1: command tx timeout [ 1033.021210][T25798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.032163][T25798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.049268][T25798] bond0 (unregistering): Released all slaves [ 1033.073750][ T2366] hsr_slave_0: entered promiscuous mode [ 1033.102341][ T2366] hsr_slave_1: entered promiscuous mode [ 1033.140329][ T2366] debugfs: 'hsr0' already exists in 'hsr' [ 1033.159381][ T2366] Cannot create hsr debugfs directory [ 1033.189979][T25798] ovs_: left promiscuous mode [ 1034.023743][ T2493] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1034.440120][ T2503] FAULT_INJECTION: forcing a failure. [ 1034.440120][ T2503] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.548025][ T2503] CPU: 0 UID: 0 PID: 2503 Comm: syz.0.4867 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1034.548054][ T2503] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1034.548060][ T2503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.548090][ T2503] Call Trace: [ 1034.548096][ T2503] [ 1034.548103][ T2503] dump_stack_lvl+0x100/0x190 [ 1034.548132][ T2503] should_fail_ex.cold+0x5/0xa [ 1034.548150][ T2503] should_failslab+0xc2/0x120 [ 1034.548167][ T2503] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1034.548188][ T2503] ? security_inode_alloc+0x3b/0x2c0 [ 1034.548210][ T2503] ? lockdep_init_map_type+0x5c/0x250 [ 1034.548232][ T2503] security_inode_alloc+0x3b/0x2c0 [ 1034.548255][ T2503] inode_init_always_gfp+0xced/0x1040 [ 1034.548274][ T2503] alloc_inode+0x8e/0x250 [ 1034.548293][ T2503] new_inode+0x22/0x1c0 [ 1034.548313][ T2503] __debugfs_create_file+0x105/0x4f0 [ 1034.548341][ T2503] debugfs_create_file_full+0x41/0x60 [ 1034.548366][ T2503] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1034.548383][ T2503] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1034.548415][ T2503] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1034.548436][ T2503] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1034.548455][ T2503] ? lockdep_init_map_type+0x5c/0x250 [ 1034.548476][ T2503] ? __pfx_loopback_setup+0x10/0x10 [ 1034.548499][ T2503] alloc_netdev_mqs+0x314/0x14f0 [ 1034.548521][ T2503] ? __pfx_loopback_net_init+0x10/0x10 [ 1034.548543][ T2503] loopback_net_init+0x38/0x170 [ 1034.548565][ T2503] ? __pfx_loopback_net_init+0x10/0x10 [ 1034.548585][ T2503] ops_init+0x1e2/0x5f0 [ 1034.548606][ T2503] setup_net+0x118/0x3a0 [ 1034.548625][ T2503] ? __pfx_setup_net+0x10/0x10 [ 1034.548642][ T2503] ? lockdep_init_map_type+0x5c/0x250 [ 1034.548662][ T2503] ? mutex_init_lockep+0x110/0x150 [ 1034.548685][ T2503] copy_net_ns+0x46f/0x7c0 [ 1034.548707][ T2503] create_new_namespaces+0x3ea/0xac0 [ 1034.548728][ T2503] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1034.548745][ T2503] ksys_unshare+0x473/0xad0 [ 1034.548765][ T2503] ? __pfx_ksys_unshare+0x10/0x10 [ 1034.548791][ T2503] __x64_sys_unshare+0x31/0x40 [ 1034.548809][ T2503] do_syscall_64+0x106/0xf80 [ 1034.548827][ T2503] ? clear_bhb_loop+0x40/0x90 [ 1034.548845][ T2503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.548860][ T2503] RIP: 0033:0x7fe3a8d9c799 [ 1034.548874][ T2503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.548889][ T2503] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1034.548905][ T2503] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1034.548915][ T2503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1034.548925][ T2503] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1034.548934][ T2503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.548943][ T2503] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1034.548964][ T2503] [ 1034.548988][ T2503] debugfs: out of free dentries, can not create file 'netdev@ffff888060526620' [ 1035.074225][T25315] Bluetooth: hci1: command tx timeout [ 1035.660744][ T2366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1035.763490][ T2366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1035.794635][ T2539] FAULT_INJECTION: forcing a failure. [ 1035.794635][ T2539] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.834800][ T2366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1035.869581][ T2539] CPU: 0 UID: 0 PID: 2539 Comm: syz.3.4873 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1035.869608][ T2539] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1035.869614][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.869623][ T2539] Call Trace: [ 1035.869629][ T2539] [ 1035.869636][ T2539] dump_stack_lvl+0x100/0x190 [ 1035.869664][ T2539] should_fail_ex.cold+0x5/0xa [ 1035.869684][ T2539] should_failslab+0xc2/0x120 [ 1035.869700][ T2539] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1035.869724][ T2539] ? cache_create_net+0x2b/0x1f0 [ 1035.869746][ T2539] ? __pfx_nfsd_net_init+0x10/0x10 [ 1035.869806][ T2539] kmemdup_noprof+0x29/0x60 [ 1035.869831][ T2539] cache_create_net+0x2b/0x1f0 [ 1035.869849][ T2539] ? __pfx_nfsd_net_init+0x10/0x10 [ 1035.869872][ T2539] nfsd_export_init+0x62/0x250 [ 1035.869895][ T2539] ? __pfx_nfsd_net_init+0x10/0x10 [ 1035.869916][ T2539] nfsd_net_init+0x33/0x3d0 [ 1035.869938][ T2539] ? __pfx_nfsd_net_init+0x10/0x10 [ 1035.869960][ T2539] ops_init+0x1e2/0x5f0 [ 1035.869981][ T2539] setup_net+0x118/0x3a0 [ 1035.870007][ T2539] ? __pfx_setup_net+0x10/0x10 [ 1035.870025][ T2539] ? lockdep_init_map_type+0x5c/0x250 [ 1035.870046][ T2539] ? mutex_init_lockep+0x110/0x150 [ 1035.870070][ T2539] copy_net_ns+0x46f/0x7c0 [ 1035.870092][ T2539] create_new_namespaces+0x3ea/0xac0 [ 1035.870112][ T2539] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1035.870130][ T2539] ksys_unshare+0x473/0xad0 [ 1035.870149][ T2539] ? __pfx_ksys_unshare+0x10/0x10 [ 1035.870175][ T2539] __x64_sys_unshare+0x31/0x40 [ 1035.870192][ T2539] do_syscall_64+0x106/0xf80 [ 1035.870214][ T2539] ? clear_bhb_loop+0x40/0x90 [ 1035.870232][ T2539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.870247][ T2539] RIP: 0033:0x7f43b139c799 [ 1035.870261][ T2539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.870275][ T2539] RSP: 002b:00007f43b22e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1035.870291][ T2539] RAX: ffffffffffffffda RBX: 00007f43b1615fa0 RCX: 00007f43b139c799 [ 1035.870301][ T2539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1035.870310][ T2539] RBP: 00007f43b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1035.870319][ T2539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.870329][ T2539] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1035.870349][ T2539] [ 1036.140147][ T2366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1036.476379][ T2557] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1036.881899][ T2366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.973699][ T2581] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1037.060171][ T2366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.123429][T25314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.130598][T25314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.261114][T25314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.268265][T25314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.341208][ T2610] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4884'. [ 1038.424825][ T2366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.473221][ T2614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4883'. [ 1038.654405][T25798] hsr_slave_0: left promiscuous mode [ 1038.674097][T25798] hsr_slave_1: left promiscuous mode [ 1038.696469][T25798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.724938][T25798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.755034][T25798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.781006][T25798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.818550][T25798] veth1_macvtap: left allmulticast mode [ 1038.838880][T25798] veth1_macvtap: left promiscuous mode [ 1038.858759][T25798] veth1_vlan: left allmulticast mode [ 1038.875237][T25798] veth1_vlan: left promiscuous mode [ 1038.892272][T25798] veth0_vlan: left promiscuous mode [ 1039.047910][ T2629] FAULT_INJECTION: forcing a failure. [ 1039.047910][ T2629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1039.097663][ T2629] CPU: 0 UID: 0 PID: 2629 Comm: syz.2.4887 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1039.097692][ T2629] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1039.097698][ T2629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.097709][ T2629] Call Trace: [ 1039.097715][ T2629] [ 1039.097722][ T2629] dump_stack_lvl+0x100/0x190 [ 1039.097751][ T2629] should_fail_ex.cold+0x5/0xa [ 1039.097767][ T2629] ? prepare_alloc_pages+0x16d/0x5f0 [ 1039.097794][ T2629] should_fail_alloc_page+0xeb/0x140 [ 1039.097812][ T2629] prepare_alloc_pages+0x1f0/0x5f0 [ 1039.097829][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1039.097853][ T2629] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1039.097876][ T2629] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1039.097898][ T2629] ? __pfx_css_rstat_updated+0x10/0x10 [ 1039.097921][ T2629] ? find_held_lock+0x2b/0x80 [ 1039.097935][ T2629] ? rcu_read_unlock+0x17/0x60 [ 1039.097951][ T2629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1039.097972][ T2629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1039.097992][ T2629] ? page_counter_charge+0x1d2/0x240 [ 1039.098012][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1039.098034][ T2629] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1039.098057][ T2629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1039.098082][ T2629] ? policy_nodemask+0xed/0x4f0 [ 1039.098099][ T2629] alloc_pages_mpol+0x1fb/0x550 [ 1039.098115][ T2629] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1039.098131][ T2629] ? do_raw_spin_lock+0x128/0x260 [ 1039.098152][ T2629] ? find_held_lock+0x2b/0x80 [ 1039.098164][ T2629] ? __pud_alloc+0x575/0x760 [ 1039.098183][ T2629] alloc_pages_noprof+0x131/0x390 [ 1039.098200][ T2629] __pmd_alloc+0x3b/0x9c0 [ 1039.098216][ T2629] ? __pud_alloc+0x57a/0x760 [ 1039.098233][ T2629] walk_to_pmd+0x3a3/0x4c0 [ 1039.098252][ T2629] get_locked_pte+0x25/0xc0 [ 1039.098270][ T2629] map_ldt_struct+0x3c1/0xa70 [ 1039.098290][ T2629] ? __pfx_map_ldt_struct+0x10/0x10 [ 1039.098304][ T2629] ? alloc_pages_noprof+0x233/0x390 [ 1039.098324][ T2629] write_ldt+0x6d3/0xd40 [ 1039.098341][ T2629] ? __pfx_write_ldt+0x10/0x10 [ 1039.098357][ T2629] ? xfd_validate_state+0x129/0x190 [ 1039.098383][ T2629] __x64_sys_modify_ldt+0xb1/0x170 [ 1039.098398][ T2629] do_syscall_64+0x106/0xf80 [ 1039.098417][ T2629] ? clear_bhb_loop+0x40/0x90 [ 1039.098436][ T2629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.098451][ T2629] RIP: 0033:0x7fb033b9c799 [ 1039.098466][ T2629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.098480][ T2629] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1039.098496][ T2629] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1039.098506][ T2629] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 1039.098515][ T2629] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1039.098525][ T2629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.098534][ T2629] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1039.098555][ T2629] [ 1039.527918][T25798] team0 (unregistering): Port device team_slave_1 removed [ 1039.553920][T25798] team0 (unregistering): Port device team_slave_0 removed [ 1039.734142][ T2366] veth0_vlan: entered promiscuous mode [ 1039.743588][ T2366] veth1_vlan: entered promiscuous mode [ 1039.876438][ T2366] veth0_macvtap: entered promiscuous mode [ 1039.932203][ T2366] veth1_macvtap: entered promiscuous mode [ 1039.978666][ T2366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.064933][ T2366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.357745][T25317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.403239][T25317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.462267][T25317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.528136][T25317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.761540][T25515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.820064][T25515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.889541][T25798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.927017][T25798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.125597][ T2652] netlink: ct_mark mask cannot be 0 [ 1041.479072][ T2652] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1042.104507][ T2685] phram: not enough arguments [ 1042.157823][ T2682] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4897'. [ 1042.397480][ T2691] ubi0: attaching mtd0 [ 1042.426087][ T2691] ubi0: scanning is finished [ 1042.453360][ T2691] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1042.811898][ T2691] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1044.185541][ T2730] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1045.681848][ T2748] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1045.836051][ T2754] netlink: zone id is out of range [ 1045.841202][ T2754] netlink: zone id is out of range [ 1045.966328][ T2754] netlink: zone id is out of range [ 1045.982692][ T2760] netlink: 'syz.3.4911': attribute type 11 has an invalid length. [ 1046.039352][ T2760] netlink: 'syz.3.4911': attribute type 11 has an invalid length. [ 1046.073925][ T2754] netlink: zone id is out of range [ 1046.079062][ T2754] netlink: zone id is out of range [ 1046.103000][ T2760] netlink: 'syz.3.4911': attribute type 11 has an invalid length. [ 1046.158831][ T2760] netlink: 'syz.3.4911': attribute type 11 has an invalid length. [ 1046.193158][ T2754] netlink: zone id is out of range [ 1046.198504][ T2754] netlink: zone id is out of range [ 1046.334273][ T2754] netlink: zone id is out of range [ 1046.389921][ T2754] netlink: zone id is out of range [ 1046.412853][ T2754] netlink: zone id is out of range [ 1046.477096][ T2754] netlink: zone id is out of range [ 1046.510495][ T2754] netlink: zone id is out of range [ 1046.574101][ T2754] netlink: zone id is out of range [ 1046.579229][ T2754] netlink: zone id is out of range [ 1046.654057][ T2754] netlink: zone id is out of range [ 1046.951540][ T2779] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(18) [ 1049.016313][ T2826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4923'. [ 1049.196052][ T2826] team0 (unregistering): Port device team_slave_0 removed [ 1049.283207][ T2826] team0 (unregistering): Port device team_slave_1 removed [ 1051.726548][ T2888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1051.836145][ T2888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1051.909571][ T2888] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1052.010393][ T2888] page_type: f5(slab) [ 1052.056440][ T2888] raw: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 1052.065069][ T2888] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1052.127346][ T2888] head: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 1052.194789][ T2888] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1052.235754][ T2888] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1052.281257][ T2888] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1052.317528][ T2888] page dumped because: unmovable page [ 1052.349722][ T2888] page_owner tracks the page as allocated [ 1052.387620][ T2888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25798, tgid 25798 (kworker/u11:6), ts 1048191547879, free_ts 1048081045587 [ 1052.495719][ T2888] post_alloc_hook+0x153/0x170 [ 1052.502337][ T2888] get_page_from_freelist+0x111d/0x3140 [ 1052.524291][ T2888] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1052.549078][ T2888] alloc_pages_mpol+0x1fb/0x550 [ 1052.567560][ T2888] new_slab+0x43a/0x6d0 [ 1052.587762][ T2888] ___slab_alloc+0x2a0/0x850 [ 1052.592393][ T2888] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1052.644293][ T2888] kmalloc_reserve+0xe8/0x350 [ 1052.664405][ T2888] __alloc_skb+0x185/0x710 [ 1052.682781][ T2888] nsim_dev_trap_report_work+0x2af/0xd10 [ 1052.688875][ T2905] FAULT_INJECTION: forcing a failure. [ 1052.688875][ T2905] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.714767][ T2888] process_one_work+0x9d7/0x1920 [ 1052.732236][ T2888] worker_thread+0x5da/0xe40 [ 1052.746246][ T2905] CPU: 0 UID: 0 PID: 2905 Comm: syz.2.4936 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1052.746273][ T2905] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1052.746279][ T2905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1052.746289][ T2905] Call Trace: [ 1052.746294][ T2905] [ 1052.746301][ T2905] dump_stack_lvl+0x100/0x190 [ 1052.746329][ T2905] should_fail_ex.cold+0x5/0xa [ 1052.746357][ T2905] should_failslab+0xc2/0x120 [ 1052.746375][ T2905] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1052.746397][ T2905] ? shmem_alloc_inode+0x25/0x50 [ 1052.746418][ T2905] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1052.746436][ T2905] shmem_alloc_inode+0x25/0x50 [ 1052.746451][ T2905] alloc_inode+0x68/0x250 [ 1052.746470][ T2905] new_inode+0x22/0x1c0 [ 1052.746487][ T2905] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1052.746505][ T2905] shmem_get_inode+0x212/0x1040 [ 1052.746526][ T2905] ? __pfx_shmem_get_inode+0x10/0x10 [ 1052.746544][ T2905] ? rcu_is_watching+0x12/0xc0 [ 1052.746565][ T2905] ? percpu_counter_add_batch+0xb9/0x230 [ 1052.746595][ T2905] __shmem_file_setup+0x3ac/0x490 [ 1052.746616][ T2905] ? __pfx___shmem_file_setup+0x10/0x10 [ 1052.746639][ T2905] ? vm_area_alloc+0x1f/0x160 [ 1052.746660][ T2905] shmem_zero_setup+0x96/0x1b0 [ 1052.746684][ T2905] __mmap_region+0x2198/0x29e0 [ 1052.746708][ T2905] ? __pfx___mmap_region+0x10/0x10 [ 1052.746733][ T2905] ? set_next_entity+0x11e/0x9c0 [ 1052.746757][ T2905] ? __lock_acquire+0x4a5/0x2630 [ 1052.746775][ T2905] ? update_cfs_rq_load_avg+0x51/0x550 [ 1052.746799][ T2905] ? find_held_lock+0x2b/0x80 [ 1052.746812][ T2905] ? finish_task_switch.isra.0+0x200/0xb80 [ 1052.746828][ T2905] ? finish_task_switch.isra.0+0x200/0xb80 [ 1052.746852][ T2905] ? trace_sched_exit_tp+0x13a/0x180 [ 1052.746869][ T2905] ? __schedule+0x1000/0x6120 [ 1052.746911][ T2905] ? rcu_is_watching+0x12/0xc0 [ 1052.746931][ T2905] ? cap_capable+0x107/0x460 [ 1052.746955][ T2905] mmap_region+0x180/0x3e0 [ 1052.746981][ T2905] do_mmap+0xc63/0x12f0 [ 1052.747002][ T2905] ? __pfx_do_mmap+0x10/0x10 [ 1052.747018][ T2905] ? __pfx_down_write_killable+0x10/0x10 [ 1052.747042][ T2905] vm_mmap_pgoff+0x29e/0x470 [ 1052.747062][ T2905] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1052.747080][ T2905] ? do_futex+0x192/0x350 [ 1052.747098][ T2905] ? __pfx_do_futex+0x10/0x10 [ 1052.747120][ T2905] ksys_mmap_pgoff+0xe1/0x650 [ 1052.747136][ T2905] ? __x64_sys_futex+0x34f/0x4d0 [ 1052.747154][ T2905] ? __x64_sys_futex+0x358/0x4d0 [ 1052.747173][ T2905] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1052.747188][ T2905] ? xfd_validate_state+0x129/0x190 [ 1052.747212][ T2905] __x64_sys_mmap+0x125/0x190 [ 1052.747235][ T2905] do_syscall_64+0x106/0xf80 [ 1052.747251][ T2905] ? clear_bhb_loop+0x40/0x90 [ 1052.747270][ T2905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.747285][ T2905] RIP: 0033:0x7fb033b9c799 [ 1052.747300][ T2905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.747315][ T2905] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1052.747330][ T2905] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1052.747340][ T2905] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1052.747356][ T2905] RBP: 00007fb033c32bd9 R08: 0000000000000401 R09: 0000000000008000 [ 1052.747366][ T2905] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1052.747376][ T2905] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1052.747396][ T2905] [ 1052.752118][ T2888] kthread+0x370/0x450 [ 1053.929181][ T2888] ret_from_fork+0x754/0xd80 [ 1053.936762][ T2888] ret_from_fork_asm+0x1a/0x30 [ 1053.946764][ T2888] page last free pid 2785 tgid 2784 stack trace: [ 1053.963299][ T2888] __free_frozen_pages+0x7e1/0x10d0 [ 1053.971381][ T2888] __folio_put+0x3b4/0x540 [ 1053.986637][ T2888] skb_release_data+0x667/0x9d0 [ 1053.991614][ T2888] __kfree_skb+0x4f/0x70 [ 1053.995850][ T2888] tcp_write_queue_purge+0x624/0xcc0 [ 1054.016687][ T2888] tcp_v4_destroy_sock+0x1bc/0x600 [ 1054.021955][ T2888] inet_csk_destroy_sock+0x1a2/0x3d0 [ 1054.046673][ T2888] __tcp_close+0xcb4/0x1110 [ 1054.051318][ T2888] tcp_close+0x28/0x110 [ 1054.055464][ T2888] inet_release+0xed/0x200 [ 1054.070517][ T2888] __sock_release+0xb3/0x260 [ 1054.086006][ T2888] sock_close+0x1c/0x30 [ 1054.090671][ T2888] __fput+0x3ff/0xb40 [ 1054.096113][ T2888] task_work_run+0x150/0x240 [ 1054.106656][ T2888] get_signal+0x1bd/0x21e0 [ 1054.116329][ T2888] arch_do_signal_or_restart+0x91/0x770 [ 1054.182977][ T2890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1054.212712][ T2890] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1054.263996][ T2890] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1054.307323][ T2890] page_type: f5(slab) [ 1054.336981][ T2890] raw: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 1054.357422][ T2890] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1054.381141][ T2890] head: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 1054.416863][ T2890] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1054.477721][ T2890] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1054.545191][ T2890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1054.596364][ T2890] page dumped because: unmovable page [ 1054.620228][ T2890] page_owner tracks the page as allocated [ 1054.654688][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.661331][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.687447][ T2890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25798, tgid 25798 (kworker/u11:6), ts 1048191547879, free_ts 1048081045587 [ 1054.793383][ T2890] post_alloc_hook+0x153/0x170 [ 1054.812523][ T2890] get_page_from_freelist+0x111d/0x3140 [ 1054.834724][ T2890] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1054.854266][ T2890] alloc_pages_mpol+0x1fb/0x550 [ 1054.876861][ T2890] new_slab+0x43a/0x6d0 [ 1054.890219][ T2890] ___slab_alloc+0x2a0/0x850 [ 1054.908624][ T2890] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1054.932912][ T2890] kmalloc_reserve+0xe8/0x350 [ 1054.948165][ T2890] __alloc_skb+0x185/0x710 [ 1054.961815][ T2890] nsim_dev_trap_report_work+0x2af/0xd10 [ 1054.984467][ T2890] process_one_work+0x9d7/0x1920 [ 1055.007352][ T2890] worker_thread+0x5da/0xe40 [ 1055.018547][ T2890] kthread+0x370/0x450 [ 1055.032626][ T2890] ret_from_fork+0x754/0xd80 [ 1055.051661][ T2890] ret_from_fork_asm+0x1a/0x30 [ 1055.067168][ T2890] page last free pid 2785 tgid 2784 stack trace: [ 1055.087378][ T2890] __free_frozen_pages+0x7e1/0x10d0 [ 1055.104443][ T2890] __folio_put+0x3b4/0x540 [ 1055.119181][ T2890] skb_release_data+0x667/0x9d0 [ 1055.136244][ T2890] __kfree_skb+0x4f/0x70 [ 1055.152864][ T2890] tcp_write_queue_purge+0x624/0xcc0 [ 1055.169820][ T2890] tcp_v4_destroy_sock+0x1bc/0x600 [ 1055.185893][ T2890] inet_csk_destroy_sock+0x1a2/0x3d0 [ 1055.205339][ T2890] __tcp_close+0xcb4/0x1110 [ 1055.225076][ T2890] tcp_close+0x28/0x110 [ 1055.240607][ T2890] inet_release+0xed/0x200 [ 1055.254938][ T2890] __sock_release+0xb3/0x260 [ 1055.272017][ T2890] sock_close+0x1c/0x30 [ 1055.285073][ T2890] __fput+0x3ff/0xb40 [ 1055.304420][ T2890] task_work_run+0x150/0x240 [ 1055.319144][ T2890] get_signal+0x1bd/0x21e0 [ 1055.334846][ T2890] arch_do_signal_or_restart+0x91/0x770 [ 1055.352942][ T2928] FAULT_INJECTION: forcing a failure. [ 1055.352942][ T2928] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.418737][ T2928] CPU: 0 UID: 0 PID: 2928 Comm: syz.3.4941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.418768][ T2928] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.418774][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.418784][ T2928] Call Trace: [ 1055.418790][ T2928] [ 1055.418797][ T2928] dump_stack_lvl+0x100/0x190 [ 1055.418825][ T2928] should_fail_ex.cold+0x5/0xa [ 1055.418844][ T2928] ? __register_sysctl_table+0xbe4/0x1650 [ 1055.418868][ T2928] should_failslab+0xc2/0x120 [ 1055.418885][ T2928] __kmalloc_noprof+0xe0/0x850 [ 1055.418911][ T2928] __register_sysctl_table+0xbe4/0x1650 [ 1055.418939][ T2928] ? __pfx___register_sysctl_table+0x10/0x10 [ 1055.418962][ T2928] ? is_module_address+0x69/0xf0 [ 1055.418981][ T2928] ? register_net_sysctl_sz+0x222/0x430 [ 1055.419006][ T2928] ? __asan_memcpy+0x3c/0x60 [ 1055.419027][ T2928] sysctl_core_net_init+0xe6/0x290 [ 1055.419052][ T2928] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1055.419083][ T2928] ops_init+0x1e2/0x5f0 [ 1055.419103][ T2928] setup_net+0x118/0x3a0 [ 1055.419123][ T2928] ? __pfx_setup_net+0x10/0x10 [ 1055.419141][ T2928] ? lockdep_init_map_type+0x5c/0x250 [ 1055.419162][ T2928] ? mutex_init_lockep+0x110/0x150 [ 1055.419186][ T2928] copy_net_ns+0x46f/0x7c0 [ 1055.419208][ T2928] create_new_namespaces+0x3ea/0xac0 [ 1055.419229][ T2928] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1055.419246][ T2928] ksys_unshare+0x473/0xad0 [ 1055.419266][ T2928] ? __pfx_ksys_unshare+0x10/0x10 [ 1055.419292][ T2928] __x64_sys_unshare+0x31/0x40 [ 1055.419310][ T2928] do_syscall_64+0x106/0xf80 [ 1055.419329][ T2928] ? clear_bhb_loop+0x40/0x90 [ 1055.419347][ T2928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.419363][ T2928] RIP: 0033:0x7f43b139c799 [ 1055.419377][ T2928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.419392][ T2928] RSP: 002b:00007f43b22e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1055.419407][ T2928] RAX: ffffffffffffffda RBX: 00007f43b1615fa0 RCX: 00007f43b139c799 [ 1055.419417][ T2928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1055.419426][ T2928] RBP: 00007f43b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1055.419436][ T2928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.419446][ T2928] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1055.419466][ T2928] [ 1055.419474][ T2928] sysctl could not get directory: /net/core -12 [ 1056.090444][ T2943] netlink: 'syz.1.4946': attribute type 11 has an invalid length. [ 1056.114123][ T2943] netlink: 'syz.1.4946': attribute type 11 has an invalid length. [ 1056.147437][ T2943] netlink: 'syz.1.4946': attribute type 11 has an invalid length. [ 1056.170330][ T2943] netlink: 'syz.1.4946': attribute type 11 has an invalid length. [ 1056.608578][ T2952] phram: not enough arguments [ 1056.681498][ T2949] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1057.485489][ T2970] FAULT_INJECTION: forcing a failure. [ 1057.485489][ T2970] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.510812][ T2963] phram: not enough arguments [ 1057.549374][ T2963] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4952'. [ 1057.569861][ T2970] CPU: 0 UID: 0 PID: 2970 Comm: syz.0.4953 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1057.569890][ T2970] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1057.569896][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.569906][ T2970] Call Trace: [ 1057.569911][ T2970] [ 1057.569918][ T2970] dump_stack_lvl+0x100/0x190 [ 1057.569947][ T2970] should_fail_ex.cold+0x5/0xa [ 1057.569966][ T2970] ? __register_sysctl_table+0xbe4/0x1650 [ 1057.569991][ T2970] should_failslab+0xc2/0x120 [ 1057.570008][ T2970] __kmalloc_noprof+0xe0/0x850 [ 1057.570034][ T2970] __register_sysctl_table+0xbe4/0x1650 [ 1057.570062][ T2970] ? __pfx___register_sysctl_table+0x10/0x10 [ 1057.570085][ T2970] ? is_module_address+0x69/0xf0 [ 1057.570103][ T2970] ? register_net_sysctl_sz+0x222/0x430 [ 1057.570124][ T2970] ? __asan_memcpy+0x3c/0x60 [ 1057.570146][ T2970] sysctl_core_net_init+0xe6/0x290 [ 1057.570171][ T2970] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1057.570193][ T2970] ops_init+0x1e2/0x5f0 [ 1057.570218][ T2970] setup_net+0x118/0x3a0 [ 1057.570237][ T2970] ? __pfx_setup_net+0x10/0x10 [ 1057.570254][ T2970] ? lockdep_init_map_type+0x5c/0x250 [ 1057.570274][ T2970] ? mutex_init_lockep+0x110/0x150 [ 1057.570297][ T2970] copy_net_ns+0x46f/0x7c0 [ 1057.570319][ T2970] create_new_namespaces+0x3ea/0xac0 [ 1057.570339][ T2970] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1057.570357][ T2970] ksys_unshare+0x473/0xad0 [ 1057.570377][ T2970] ? __pfx_ksys_unshare+0x10/0x10 [ 1057.570403][ T2970] __x64_sys_unshare+0x31/0x40 [ 1057.570420][ T2970] do_syscall_64+0x106/0xf80 [ 1057.570438][ T2970] ? clear_bhb_loop+0x40/0x90 [ 1057.570456][ T2970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.570471][ T2970] RIP: 0033:0x7fe3a8d9c799 [ 1057.570485][ T2970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.570500][ T2970] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1057.570515][ T2970] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1057.570524][ T2970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1057.570533][ T2970] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1057.570542][ T2970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.570551][ T2970] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1057.570572][ T2970] [ 1057.570579][ T2970] sysctl could not get directory: /net/core -12 [ 1058.053075][ T2980] FAULT_INJECTION: forcing a failure. [ 1058.053075][ T2980] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.108912][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: syz.2.4955 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1058.108943][ T2980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1058.108949][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1058.108960][ T2980] Call Trace: [ 1058.108965][ T2980] [ 1058.108972][ T2980] dump_stack_lvl+0x100/0x190 [ 1058.109001][ T2980] should_fail_ex.cold+0x5/0xa [ 1058.109020][ T2980] should_failslab+0xc2/0x120 [ 1058.109037][ T2980] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1058.109059][ T2980] ? __kernfs_new_node+0xd2/0x960 [ 1058.109084][ T2980] __kernfs_new_node+0xd2/0x960 [ 1058.109107][ T2980] ? __pfx___kernfs_new_node+0x10/0x10 [ 1058.109132][ T2980] ? find_held_lock+0x2b/0x80 [ 1058.109146][ T2980] ? kernfs_root+0xee/0x2a0 [ 1058.109165][ T2980] ? kernfs_root+0xee/0x2a0 [ 1058.109189][ T2980] kernfs_new_node+0x11b/0x1a0 [ 1058.109214][ T2980] __kernfs_create_file+0x53/0x350 [ 1058.109233][ T2980] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1058.109257][ T2980] sysfs_merge_group+0x194/0x340 [ 1058.109280][ T2980] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1058.109303][ T2980] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1058.109329][ T2980] ? bus_to_subsys+0x114/0x150 [ 1058.109348][ T2980] dpm_sysfs_add+0x237/0x280 [ 1058.109372][ T2980] device_add+0x9ef/0x1950 [ 1058.109388][ T2980] ? __pfx_device_add+0x10/0x10 [ 1058.109403][ T2980] ? lockdep_init_map_type+0x5c/0x250 [ 1058.109422][ T2980] ? __init_waitqueue_head+0xca/0x150 [ 1058.109448][ T2980] netdev_register_kobject+0x1a9/0x3d0 [ 1058.109473][ T2980] register_netdevice+0x12e0/0x2210 [ 1058.109497][ T2980] ? __pfx_register_netdevice+0x10/0x10 [ 1058.109522][ T2980] __ip_tunnel_create+0x52b/0x670 [ 1058.109544][ T2980] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1058.109562][ T2980] ? net_generic+0xea/0x2a0 [ 1058.109585][ T2980] ip_tunnel_init_net+0x230/0x780 [ 1058.109607][ T2980] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1058.109632][ T2980] ? __kmalloc_noprof+0x320/0x850 [ 1058.109656][ T2980] ? __pfx_ipip_init_net+0x10/0x10 [ 1058.109703][ T2980] ops_init+0x1e2/0x5f0 [ 1058.109724][ T2980] setup_net+0x118/0x3a0 [ 1058.109743][ T2980] ? __pfx_setup_net+0x10/0x10 [ 1058.109761][ T2980] ? lockdep_init_map_type+0x5c/0x250 [ 1058.109781][ T2980] ? mutex_init_lockep+0x110/0x150 [ 1058.109805][ T2980] copy_net_ns+0x46f/0x7c0 [ 1058.109827][ T2980] create_new_namespaces+0x3ea/0xac0 [ 1058.109847][ T2980] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1058.109865][ T2980] ksys_unshare+0x473/0xad0 [ 1058.109884][ T2980] ? __pfx_ksys_unshare+0x10/0x10 [ 1058.109917][ T2980] __x64_sys_unshare+0x31/0x40 [ 1058.109937][ T2980] do_syscall_64+0x106/0xf80 [ 1058.109955][ T2980] ? clear_bhb_loop+0x40/0x90 [ 1058.109973][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.109988][ T2980] RIP: 0033:0x7fb033b9c799 [ 1058.110001][ T2980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.110016][ T2980] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1058.110032][ T2980] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1058.110042][ T2980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1058.110051][ T2980] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1058.110061][ T2980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.110070][ T2980] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1058.110091][ T2980] [ 1058.471113][ T2983] netlink: 'syz.3.4956': attribute type 11 has an invalid length. [ 1058.479376][ T2983] netlink: 'syz.3.4956': attribute type 11 has an invalid length. [ 1058.487171][ T2983] netlink: 'syz.3.4956': attribute type 11 has an invalid length. [ 1058.495320][ T2983] netlink: 'syz.3.4956': attribute type 11 has an invalid length. [ 1059.092896][ T2987] netlink: 'syz.3.4957': attribute type 11 has an invalid length. [ 1059.101130][ T2987] netlink: 'syz.3.4957': attribute type 11 has an invalid length. [ 1059.384476][ T2991] FAULT_INJECTION: forcing a failure. [ 1059.384476][ T2991] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.479125][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: syz.0.4958 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1059.479154][ T2991] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1059.479160][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.479170][ T2991] Call Trace: [ 1059.479176][ T2991] [ 1059.479182][ T2991] dump_stack_lvl+0x100/0x190 [ 1059.479211][ T2991] should_fail_ex.cold+0x5/0xa [ 1059.479230][ T2991] should_failslab+0xc2/0x120 [ 1059.479247][ T2991] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1059.479271][ T2991] ? __proc_create+0x2cb/0x8c0 [ 1059.479297][ T2991] __proc_create+0x2cb/0x8c0 [ 1059.479320][ T2991] ? __pfx___proc_create+0x10/0x10 [ 1059.479346][ T2991] ? _raw_spin_unlock+0x28/0x50 [ 1059.479365][ T2991] proc_create_reg+0x75/0x170 [ 1059.479381][ T2991] proc_create_net_data+0x8e/0x1c0 [ 1059.479405][ T2991] ? __pfx_proc_create_net_data+0x10/0x10 [ 1059.479433][ T2991] ? __pfx_arp_net_init+0x10/0x10 [ 1059.479455][ T2991] arp_net_init+0x53/0x80 [ 1059.479476][ T2991] ops_init+0x1e2/0x5f0 [ 1059.479497][ T2991] setup_net+0x118/0x3a0 [ 1059.479516][ T2991] ? __pfx_setup_net+0x10/0x10 [ 1059.479533][ T2991] ? lockdep_init_map_type+0x5c/0x250 [ 1059.479554][ T2991] ? mutex_init_lockep+0x110/0x150 [ 1059.479577][ T2991] copy_net_ns+0x46f/0x7c0 [ 1059.479599][ T2991] create_new_namespaces+0x3ea/0xac0 [ 1059.479619][ T2991] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1059.479638][ T2991] ksys_unshare+0x473/0xad0 [ 1059.479657][ T2991] ? __pfx_ksys_unshare+0x10/0x10 [ 1059.479683][ T2991] __x64_sys_unshare+0x31/0x40 [ 1059.479700][ T2991] do_syscall_64+0x106/0xf80 [ 1059.479717][ T2991] ? clear_bhb_loop+0x40/0x90 [ 1059.479735][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.479750][ T2991] RIP: 0033:0x7fe3a8d9c799 [ 1059.479763][ T2991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.479778][ T2991] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1059.479793][ T2991] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1059.479803][ T2991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1059.479812][ T2991] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1059.479822][ T2991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.479832][ T2991] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1059.479852][ T2991] [ 1060.193343][ T3002] ovs_: entered promiscuous mode [ 1060.443686][ T29] audit: type=1800 audit(6442508533.555:39): pid=3023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4966" name="dbroot" dev="configfs" ino=137150 res=0 errno=0 [ 1060.994942][T25365] ovs_: left promiscuous mode [ 1061.133613][ T3032] FAULT_INJECTION: forcing a failure. [ 1061.133613][ T3032] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.228987][ T3032] CPU: 0 UID: 0 PID: 3032 Comm: syz.2.4968 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1061.229016][ T3032] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1061.229023][ T3032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.229033][ T3032] Call Trace: [ 1061.229038][ T3032] [ 1061.229046][ T3032] dump_stack_lvl+0x100/0x190 [ 1061.229074][ T3032] should_fail_ex.cold+0x5/0xa [ 1061.229093][ T3032] ? sk_prot_alloc+0x10b/0x2a0 [ 1061.229114][ T3032] should_failslab+0xc2/0x120 [ 1061.229130][ T3032] __kmalloc_noprof+0xe0/0x850 [ 1061.229152][ T3032] ? security_inode_alloc+0xcf/0x2c0 [ 1061.229179][ T3032] sk_prot_alloc+0x10b/0x2a0 [ 1061.229201][ T3032] sk_alloc+0x36/0xe80 [ 1061.229218][ T3032] __netlink_create+0x5e/0x2c0 [ 1061.229237][ T3032] __netlink_kernel_create+0xed/0x750 [ 1061.229258][ T3032] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1061.229283][ T3032] rdma_nl_net_init+0xd9/0x1b0 [ 1061.229395][ T3032] ? __pfx_rdma_nl_net_init+0x10/0x10 [ 1061.229412][ T3032] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1061.229427][ T3032] ? rdma_dev_init_net+0x144/0x590 [ 1061.229458][ T3032] rdma_dev_init_net+0x184/0x590 [ 1061.229478][ T3032] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1061.229498][ T3032] ? __kmalloc_noprof+0x320/0x850 [ 1061.229523][ T3032] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1061.229541][ T3032] ops_init+0x1e2/0x5f0 [ 1061.229563][ T3032] setup_net+0x118/0x3a0 [ 1061.229582][ T3032] ? __pfx_setup_net+0x10/0x10 [ 1061.229599][ T3032] ? lockdep_init_map_type+0x5c/0x250 [ 1061.229619][ T3032] ? mutex_init_lockep+0x110/0x150 [ 1061.229642][ T3032] copy_net_ns+0x46f/0x7c0 [ 1061.229664][ T3032] create_new_namespaces+0x3ea/0xac0 [ 1061.229684][ T3032] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1061.229702][ T3032] ksys_unshare+0x473/0xad0 [ 1061.229722][ T3032] ? __pfx_ksys_unshare+0x10/0x10 [ 1061.229747][ T3032] __x64_sys_unshare+0x31/0x40 [ 1061.229764][ T3032] do_syscall_64+0x106/0xf80 [ 1061.229783][ T3032] ? clear_bhb_loop+0x40/0x90 [ 1061.229802][ T3032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.229817][ T3032] RIP: 0033:0x7fb033b9c799 [ 1061.229830][ T3032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.229845][ T3032] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1061.229860][ T3032] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1061.229871][ T3032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1061.229881][ T3032] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1061.229890][ T3032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.229900][ T3032] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1061.229920][ T3032] [ 1061.502034][ T3037] FAULT_INJECTION: forcing a failure. [ 1061.502034][ T3037] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.515936][ T3037] CPU: 0 UID: 0 PID: 3037 Comm: syz.3.4969 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1061.515965][ T3037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1061.515972][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.515982][ T3037] Call Trace: [ 1061.515987][ T3037] [ 1061.515994][ T3037] dump_stack_lvl+0x100/0x190 [ 1061.516023][ T3037] should_fail_ex.cold+0x5/0xa [ 1061.516042][ T3037] should_failslab+0xc2/0x120 [ 1061.516060][ T3037] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1061.516083][ T3037] ? mas_alloc_nodes+0x280/0x390 [ 1061.516105][ T3037] mas_alloc_nodes+0x280/0x390 [ 1061.516122][ T3037] mas_preallocate+0x39c/0xf10 [ 1061.516146][ T3037] ? __pfx_mas_preallocate+0x10/0x10 [ 1061.516170][ T3037] ? vm_area_alloc+0x1f/0x160 [ 1061.516192][ T3037] ? lockdep_init_map_type+0x5c/0x250 [ 1061.516215][ T3037] __mmap_region+0x12b5/0x29e0 [ 1061.516241][ T3037] ? __pfx___mmap_region+0x10/0x10 [ 1061.516267][ T3037] ? set_next_entity+0x11e/0x9c0 [ 1061.516292][ T3037] ? __lock_acquire+0x4a5/0x2630 [ 1061.516311][ T3037] ? update_cfs_rq_load_avg+0x51/0x550 [ 1061.516336][ T3037] ? find_held_lock+0x2b/0x80 [ 1061.516350][ T3037] ? finish_task_switch.isra.0+0x200/0xb80 [ 1061.516366][ T3037] ? finish_task_switch.isra.0+0x200/0xb80 [ 1061.516390][ T3037] ? trace_sched_exit_tp+0x13a/0x180 [ 1061.516409][ T3037] ? __schedule+0x1000/0x6120 [ 1061.516463][ T3037] ? rcu_is_watching+0x12/0xc0 [ 1061.516489][ T3037] ? cap_capable+0x107/0x460 [ 1061.516516][ T3037] mmap_region+0x180/0x3e0 [ 1061.516543][ T3037] do_mmap+0xc63/0x12f0 [ 1061.516565][ T3037] ? __pfx_do_mmap+0x10/0x10 [ 1061.516582][ T3037] ? __pfx_down_write_killable+0x10/0x10 [ 1061.516608][ T3037] vm_mmap_pgoff+0x29e/0x470 [ 1061.516629][ T3037] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1061.516649][ T3037] ? do_futex+0x192/0x350 [ 1061.516669][ T3037] ? __pfx_do_futex+0x10/0x10 [ 1061.516692][ T3037] ksys_mmap_pgoff+0xe1/0x650 [ 1061.516708][ T3037] ? __x64_sys_futex+0x34f/0x4d0 [ 1061.516727][ T3037] ? __x64_sys_futex+0x358/0x4d0 [ 1061.516748][ T3037] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1061.516764][ T3037] ? xfd_validate_state+0x129/0x190 [ 1061.516790][ T3037] __x64_sys_mmap+0x125/0x190 [ 1061.516815][ T3037] do_syscall_64+0x106/0xf80 [ 1061.516833][ T3037] ? clear_bhb_loop+0x40/0x90 [ 1061.516852][ T3037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.516868][ T3037] RIP: 0033:0x7f43b139c799 [ 1061.516883][ T3037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.516899][ T3037] RSP: 002b:00007f43b22e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1061.516915][ T3037] RAX: ffffffffffffffda RBX: 00007f43b1615fa0 RCX: 00007f43b139c799 [ 1061.516926][ T3037] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1061.516935][ T3037] RBP: 00007f43b1432bd9 R08: 0000000000000401 R09: 0000000000008000 [ 1061.516945][ T3037] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1061.516955][ T3037] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1061.516975][ T3037] [ 1062.075782][ T3039] FAULT_INJECTION: forcing a failure. [ 1062.075782][ T3039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.088921][ T3039] CPU: 0 UID: 0 PID: 3039 Comm: syz.3.4971 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1062.088947][ T3039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1062.088953][ T3039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.088961][ T3039] Call Trace: [ 1062.088969][ T3039] [ 1062.088975][ T3039] dump_stack_lvl+0x100/0x190 [ 1062.089003][ T3039] should_fail_ex.cold+0x5/0xa [ 1062.089021][ T3039] strncpy_from_user+0x3b/0x2d0 [ 1062.089048][ T3039] do_getname+0x78/0x390 [ 1062.089068][ T3039] do_sys_openat2+0xc5/0x1e0 [ 1062.089086][ T3039] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.089111][ T3039] __x64_sys_openat+0x12d/0x210 [ 1062.089130][ T3039] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.089155][ T3039] do_syscall_64+0x106/0xf80 [ 1062.089172][ T3039] ? clear_bhb_loop+0x40/0x90 [ 1062.089190][ T3039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.089205][ T3039] RIP: 0033:0x7f43b135cfce [ 1062.089218][ T3039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1062.089232][ T3039] RSP: 002b:00007f43b22e5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.089247][ T3039] RAX: ffffffffffffffda RBX: 00007f43b22e66c0 RCX: 00007f43b135cfce [ 1062.089256][ T3039] RDX: 0000000000000002 RSI: 00007f43b14324e0 RDI: ffffffffffffff9c [ 1062.089266][ T3039] RBP: 00007f43b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1062.089310][ T3039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.089319][ T3039] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1062.089338][ T3039] [ 1062.266726][ T3041] nla_validate_range_unsigned: 2 callbacks suppressed [ 1062.266741][ T3041] netlink: 'syz.1.4970': attribute type 11 has an invalid length. [ 1062.281794][ T3041] netlink: 'syz.1.4970': attribute type 11 has an invalid length. [ 1062.289582][ T3041] netlink: 'syz.1.4970': attribute type 11 has an invalid length. [ 1062.298110][ T3041] netlink: 'syz.1.4970': attribute type 11 has an invalid length. [ 1063.456490][ T3070] phram: not enough arguments [ 1063.505622][ T3070] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4980'. [ 1064.511078][ T3092] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input50 [ 1064.912053][ T29] audit: type=1800 audit(6442508538.012:40): pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4984" name="discovery_nqn" dev="configfs" ino=137811 res=0 errno=0 [ 1065.291277][ T2647] Process accounting resumed [ 1065.560924][ T3107] FAULT_INJECTION: forcing a failure. [ 1065.560924][ T3107] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.715161][ T3107] CPU: 0 UID: 0 PID: 3107 Comm: syz.2.4987 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1065.715191][ T3107] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1065.715197][ T3107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1065.715207][ T3107] Call Trace: [ 1065.715213][ T3107] [ 1065.715220][ T3107] dump_stack_lvl+0x100/0x190 [ 1065.715249][ T3107] should_fail_ex.cold+0x5/0xa [ 1065.715269][ T3107] should_failslab+0xc2/0x120 [ 1065.715285][ T3107] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1065.715307][ T3107] ? __proc_create+0x2cb/0x8c0 [ 1065.715334][ T3107] __proc_create+0x2cb/0x8c0 [ 1065.715357][ T3107] ? __pfx___proc_create+0x10/0x10 [ 1065.715383][ T3107] ? _raw_spin_unlock+0x28/0x50 [ 1065.715402][ T3107] proc_create_reg+0x75/0x170 [ 1065.715419][ T3107] proc_create_net_data+0x8e/0x1c0 [ 1065.715442][ T3107] ? __pfx_proc_create_net_data+0x10/0x10 [ 1065.715470][ T3107] ? __pfx_arp_net_init+0x10/0x10 [ 1065.715492][ T3107] arp_net_init+0x53/0x80 [ 1065.715512][ T3107] ops_init+0x1e2/0x5f0 [ 1065.715535][ T3107] setup_net+0x118/0x3a0 [ 1065.715554][ T3107] ? __pfx_setup_net+0x10/0x10 [ 1065.715571][ T3107] ? lockdep_init_map_type+0x5c/0x250 [ 1065.715591][ T3107] ? mutex_init_lockep+0x110/0x150 [ 1065.715613][ T3107] copy_net_ns+0x46f/0x7c0 [ 1065.715635][ T3107] create_new_namespaces+0x3ea/0xac0 [ 1065.715655][ T3107] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1065.715676][ T3107] ksys_unshare+0x473/0xad0 [ 1065.715697][ T3107] ? __pfx_ksys_unshare+0x10/0x10 [ 1065.715722][ T3107] __x64_sys_unshare+0x31/0x40 [ 1065.715740][ T3107] do_syscall_64+0x106/0xf80 [ 1065.715757][ T3107] ? clear_bhb_loop+0x40/0x90 [ 1065.715776][ T3107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.715791][ T3107] RIP: 0033:0x7fb033b9c799 [ 1065.715805][ T3107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.715819][ T3107] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1065.715834][ T3107] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1065.715844][ T3107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1065.715854][ T3107] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1065.715863][ T3107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.715872][ T3107] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1065.715893][ T3107] [ 1067.748624][ T3124] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4990'. [ 1068.053075][ T3134] netlink: 'syz.3.4992': attribute type 11 has an invalid length. [ 1068.091129][ T3134] netlink: 'syz.3.4992': attribute type 11 has an invalid length. [ 1068.139655][ T3134] netlink: 'syz.3.4992': attribute type 11 has an invalid length. [ 1068.177328][ T3134] netlink: 'syz.3.4992': attribute type 11 has an invalid length. [ 1068.422188][ T3140] netlink: 'syz.2.4994': attribute type 11 has an invalid length. [ 1068.453063][ T3140] netlink: 'syz.2.4994': attribute type 11 has an invalid length. [ 1068.493480][ T3140] netlink: 'syz.2.4994': attribute type 11 has an invalid length. [ 1068.552167][ T3140] netlink: 'syz.2.4994': attribute type 11 has an invalid length. [ 1069.089118][ T3149] Invalid ELF header magic: != ELF [ 1069.161978][ T3149] FAULT_INJECTION: forcing a failure. [ 1069.161978][ T3149] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.251943][ T3149] CPU: 0 UID: 0 PID: 3149 Comm: syz.2.4998 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1069.251973][ T3149] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1069.251979][ T3149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.251988][ T3149] Call Trace: [ 1069.251994][ T3149] [ 1069.252001][ T3149] dump_stack_lvl+0x100/0x190 [ 1069.252029][ T3149] should_fail_ex.cold+0x5/0xa [ 1069.252048][ T3149] should_failslab+0xc2/0x120 [ 1069.252064][ T3149] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1069.252083][ T3149] ? sctp_auth_shkey_create+0x9e/0x210 [ 1069.252194][ T3149] sctp_auth_shkey_create+0x9e/0x210 [ 1069.252214][ T3149] sctp_endpoint_new+0x589/0xb20 [ 1069.252276][ T3149] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1069.252295][ T3149] ? lockdep_init_map_type+0x5c/0x250 [ 1069.252316][ T3149] ? lockdep_init_map_type+0x5c/0x250 [ 1069.252335][ T3149] ? lockdep_init_map_type+0x5c/0x250 [ 1069.252357][ T3149] sctp_init_sock+0xe2b/0x1300 [ 1069.252395][ T3149] ? __pfx_sctp_init_sock+0x10/0x10 [ 1069.252414][ T3149] inet_create+0x94c/0x1060 [ 1069.252437][ T3149] ? inet_create+0x94/0x1060 [ 1069.252462][ T3149] __sock_create+0x339/0x860 [ 1069.252488][ T3149] __sys_socket+0x14d/0x260 [ 1069.252511][ T3149] ? __pfx___sys_socket+0x10/0x10 [ 1069.252538][ T3149] __x64_sys_socket+0x72/0xb0 [ 1069.252559][ T3149] ? lockdep_hardirqs_on+0x78/0x100 [ 1069.252606][ T3149] do_syscall_64+0x106/0xf80 [ 1069.252624][ T3149] ? clear_bhb_loop+0x40/0x90 [ 1069.252643][ T3149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.252659][ T3149] RIP: 0033:0x7fb033b9c799 [ 1069.252673][ T3149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.252688][ T3149] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1069.252703][ T3149] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1069.252714][ T3149] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1069.252723][ T3149] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1069.252733][ T3149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.252742][ T3149] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1069.252762][ T3149] [ 1071.142860][ T3180] phram: not enough arguments [ 1071.190396][ T3180] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5003'. [ 1071.492882][ T3196] netlink: 'syz.1.5006': attribute type 11 has an invalid length. [ 1071.525402][ T3196] netlink: 'syz.1.5006': attribute type 11 has an invalid length. [ 1072.687586][ T3221] bridge0: port 3(gretap0) entered blocking state [ 1072.759937][ T3221] bridge0: port 3(gretap0) entered disabled state [ 1072.858705][ T3221] gretap0: entered allmulticast mode [ 1072.924221][ T3221] gretap0: entered promiscuous mode [ 1072.965084][ T3221] bridge0: port 3(gretap0) entered blocking state [ 1072.971640][ T3221] bridge0: port 3(gretap0) entered forwarding state [ 1073.419989][ T3253] FAULT_INJECTION: forcing a failure. [ 1073.419989][ T3253] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.446153][ T3220] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(32767.4294967291.1710399341), cmd(1) [ 1073.520341][ T3253] CPU: 0 UID: 0 PID: 3253 Comm: syz.2.5017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1073.520368][ T3253] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1073.520375][ T3253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1073.520385][ T3253] Call Trace: [ 1073.520391][ T3253] [ 1073.520397][ T3253] dump_stack_lvl+0x100/0x190 [ 1073.520425][ T3253] should_fail_ex.cold+0x5/0xa [ 1073.520445][ T3253] should_failslab+0xc2/0x120 [ 1073.520464][ T3253] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1073.520486][ T3253] ? security_inode_alloc+0x3b/0x2c0 [ 1073.520508][ T3253] ? lockdep_init_map_type+0x5c/0x250 [ 1073.520530][ T3253] security_inode_alloc+0x3b/0x2c0 [ 1073.520552][ T3253] inode_init_always_gfp+0xced/0x1040 [ 1073.520571][ T3253] alloc_inode+0x8e/0x250 [ 1073.520590][ T3253] new_inode+0x22/0x1c0 [ 1073.520607][ T3253] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1073.520624][ T3253] shmem_get_inode+0x212/0x1040 [ 1073.520646][ T3253] ? __pfx_shmem_get_inode+0x10/0x10 [ 1073.520664][ T3253] ? rcu_is_watching+0x12/0xc0 [ 1073.520685][ T3253] ? percpu_counter_add_batch+0xb9/0x230 [ 1073.520714][ T3253] __shmem_file_setup+0x3ac/0x490 [ 1073.520734][ T3253] ? __pfx___shmem_file_setup+0x10/0x10 [ 1073.520757][ T3253] ? vm_area_alloc+0x1f/0x160 [ 1073.520779][ T3253] shmem_zero_setup+0x96/0x1b0 [ 1073.520802][ T3253] __mmap_region+0x2198/0x29e0 [ 1073.520827][ T3253] ? __pfx___mmap_region+0x10/0x10 [ 1073.520847][ T3253] ? update_cfs_rq_load_avg+0x51/0x550 [ 1073.520883][ T3253] ? sched_clock+0x38/0x60 [ 1073.520912][ T3253] ? lockdep_hardirqs_on+0x78/0x100 [ 1073.520930][ T3253] ? finish_task_switch.isra.0+0x205/0xb80 [ 1073.520947][ T3253] ? rcu_is_watching+0x12/0xc0 [ 1073.520990][ T3253] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1073.521013][ T3253] mmap_region+0x180/0x3e0 [ 1073.521039][ T3253] do_mmap+0xc63/0x12f0 [ 1073.521059][ T3253] ? __pfx_do_mmap+0x10/0x10 [ 1073.521074][ T3253] ? __pfx_down_write_killable+0x10/0x10 [ 1073.521099][ T3253] vm_mmap_pgoff+0x29e/0x470 [ 1073.521119][ T3253] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1073.521136][ T3253] ? do_futex+0x192/0x350 [ 1073.521155][ T3253] ? __pfx_do_futex+0x10/0x10 [ 1073.521177][ T3253] ksys_mmap_pgoff+0xe1/0x650 [ 1073.521201][ T3253] ? __x64_sys_futex+0x34f/0x4d0 [ 1073.521219][ T3253] ? __x64_sys_futex+0x358/0x4d0 [ 1073.521238][ T3253] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1073.521255][ T3253] ? xfd_validate_state+0x129/0x190 [ 1073.521280][ T3253] __x64_sys_mmap+0x125/0x190 [ 1073.521304][ T3253] do_syscall_64+0x106/0xf80 [ 1073.521321][ T3253] ? clear_bhb_loop+0x40/0x90 [ 1073.521339][ T3253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.521355][ T3253] RIP: 0033:0x7fb033b9c799 [ 1073.521369][ T3253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.521383][ T3253] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1073.521399][ T3253] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1073.521410][ T3253] RDX: 00000000000000df RSI: 0000000004020009 RDI: 000000000000f000 [ 1073.521419][ T3253] RBP: 00007fb033c32bd9 R08: 0000000000000401 R09: 0000000000008000 [ 1073.521429][ T3253] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1073.521438][ T3253] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1073.521459][ T3253] [ 1074.168997][ T3259] nla_validate_range_unsigned: 2 callbacks suppressed [ 1074.169012][ T3259] netlink: 'syz.3.5019': attribute type 11 has an invalid length. [ 1074.184467][ T3259] netlink: 'syz.3.5019': attribute type 11 has an invalid length. [ 1074.192332][ T3259] netlink: 'syz.3.5019': attribute type 11 has an invalid length. [ 1074.200193][ T3259] netlink: 'syz.3.5019': attribute type 11 has an invalid length. [ 1074.595204][ T3269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1074.775274][ T3273] FAULT_INJECTION: forcing a failure. [ 1074.775274][ T3273] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.878421][ T3273] CPU: 0 UID: 0 PID: 3273 Comm: syz.2.5023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1074.878451][ T3273] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1074.878457][ T3273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1074.878467][ T3273] Call Trace: [ 1074.878473][ T3273] [ 1074.878479][ T3273] dump_stack_lvl+0x100/0x190 [ 1074.878509][ T3273] should_fail_ex.cold+0x5/0xa [ 1074.878527][ T3273] should_failslab+0xc2/0x120 [ 1074.878543][ T3273] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1074.878564][ T3273] ? __proc_create+0x2cb/0x8c0 [ 1074.878590][ T3273] __proc_create+0x2cb/0x8c0 [ 1074.878613][ T3273] ? __pfx___proc_create+0x10/0x10 [ 1074.878639][ T3273] ? _raw_spin_unlock+0x28/0x50 [ 1074.878657][ T3273] proc_create_reg+0x75/0x170 [ 1074.878673][ T3273] proc_create_net_data+0x8e/0x1c0 [ 1074.878697][ T3273] ? __pfx_proc_create_net_data+0x10/0x10 [ 1074.878725][ T3273] ? __pfx_arp_net_init+0x10/0x10 [ 1074.878748][ T3273] arp_net_init+0x53/0x80 [ 1074.878768][ T3273] ops_init+0x1e2/0x5f0 [ 1074.878790][ T3273] setup_net+0x118/0x3a0 [ 1074.878809][ T3273] ? __pfx_setup_net+0x10/0x10 [ 1074.878827][ T3273] ? lockdep_init_map_type+0x5c/0x250 [ 1074.878847][ T3273] ? mutex_init_lockep+0x110/0x150 [ 1074.878869][ T3273] copy_net_ns+0x46f/0x7c0 [ 1074.878891][ T3273] create_new_namespaces+0x3ea/0xac0 [ 1074.878911][ T3273] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1074.878929][ T3273] ksys_unshare+0x473/0xad0 [ 1074.878948][ T3273] ? __pfx_ksys_unshare+0x10/0x10 [ 1074.878973][ T3273] __x64_sys_unshare+0x31/0x40 [ 1074.878991][ T3273] do_syscall_64+0x106/0xf80 [ 1074.879008][ T3273] ? clear_bhb_loop+0x40/0x90 [ 1074.879026][ T3273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.879041][ T3273] RIP: 0033:0x7fb033b9c799 [ 1074.879063][ T3273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.879078][ T3273] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1074.879093][ T3273] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1074.879104][ T3273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1074.879114][ T3273] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1074.879124][ T3273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.879133][ T3273] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1074.879153][ T3273] [ 1076.091588][ T3288] FAULT_INJECTION: forcing a failure. [ 1076.091588][ T3288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1076.174489][ T3288] CPU: 0 UID: 0 PID: 3288 Comm: syz.1.5026 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1076.174517][ T3288] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1076.174524][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1076.174534][ T3288] Call Trace: [ 1076.174540][ T3288] [ 1076.174547][ T3288] dump_stack_lvl+0x100/0x190 [ 1076.174575][ T3288] should_fail_ex.cold+0x5/0xa [ 1076.174591][ T3288] ? prepare_alloc_pages+0x16d/0x5f0 [ 1076.174610][ T3288] should_fail_alloc_page+0xeb/0x140 [ 1076.174627][ T3288] prepare_alloc_pages+0x1f0/0x5f0 [ 1076.174647][ T3288] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1076.174671][ T3288] ? stack_trace_save+0x8e/0xc0 [ 1076.174685][ T3288] ? __pfx_stack_trace_save+0x10/0x10 [ 1076.174701][ T3288] ? stack_depot_save_flags+0x27/0x9d0 [ 1076.174717][ T3288] ? stack_trace_save+0x8e/0xc0 [ 1076.174737][ T3288] ? kasan_save_stack+0x3f/0x50 [ 1076.174759][ T3288] ? kasan_save_stack+0x30/0x50 [ 1076.174780][ T3288] ? kasan_save_track+0x14/0x30 [ 1076.174800][ T3288] ? __kasan_slab_alloc+0x89/0x90 [ 1076.174815][ T3288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1076.174836][ T3288] ? get_locked_pte+0x25/0xc0 [ 1076.174852][ T3288] ? insert_page+0xcc/0x220 [ 1076.174868][ T3288] ? vm_insert_page+0x2c0/0x400 [ 1076.174884][ T3288] ? __mmap_region+0x1443/0x29e0 [ 1076.174904][ T3288] ? do_mmap+0xc63/0x12f0 [ 1076.174918][ T3288] ? vm_mmap_pgoff+0x29e/0x470 [ 1076.174933][ T3288] ? ksys_mmap_pgoff+0x3c8/0x650 [ 1076.174946][ T3288] ? __x64_sys_mmap+0x125/0x190 [ 1076.174974][ T3288] ? do_syscall_64+0x106/0xf80 [ 1076.174992][ T3288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.175017][ T3288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1076.175042][ T3288] ? policy_nodemask+0xed/0x4f0 [ 1076.175060][ T3288] alloc_pages_mpol+0x1fb/0x550 [ 1076.175078][ T3288] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1076.175099][ T3288] alloc_pages_noprof+0x131/0x390 [ 1076.175116][ T3288] pte_alloc_one+0x1e/0x3e0 [ 1076.175133][ T3288] __pte_alloc+0x6d/0x3f0 [ 1076.175148][ T3288] ? __pfx___pte_alloc+0x10/0x10 [ 1076.175164][ T3288] ? walk_to_pmd+0x302/0x4c0 [ 1076.175182][ T3288] get_locked_pte+0xa1/0xc0 [ 1076.175201][ T3288] insert_page+0xcc/0x220 [ 1076.175218][ T3288] ? __pfx_insert_page+0x10/0x10 [ 1076.175234][ T3288] ? __pfx_down_read_trylock+0x10/0x10 [ 1076.175261][ T3288] vm_insert_page+0x2c0/0x400 [ 1076.175280][ T3288] kcov_mmap+0xca/0x130 [ 1076.175303][ T3288] __mmap_region+0x1443/0x29e0 [ 1076.175328][ T3288] ? __pfx___mmap_region+0x10/0x10 [ 1076.175351][ T3288] ? find_held_lock+0x2b/0x80 [ 1076.175364][ T3288] ? ima_match_policy+0x8c4/0x2350 [ 1076.175449][ T3288] ? ima_match_policy+0x8c4/0x2350 [ 1076.175481][ T3288] ? find_held_lock+0x2b/0x80 [ 1076.175495][ T3288] ? process_measurement+0x4c8/0x2350 [ 1076.175516][ T3288] ? process_measurement+0x4c8/0x2350 [ 1076.175544][ T3288] ? process_measurement+0x1f4/0x2350 [ 1076.175596][ T3288] mmap_region+0x30a/0x3e0 [ 1076.175622][ T3288] do_mmap+0xc63/0x12f0 [ 1076.175641][ T3288] ? __pfx_do_mmap+0x10/0x10 [ 1076.175657][ T3288] ? __pfx_down_write_killable+0x10/0x10 [ 1076.175681][ T3288] vm_mmap_pgoff+0x29e/0x470 [ 1076.175702][ T3288] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1076.175716][ T3288] ? __fget_files+0x215/0x3d0 [ 1076.175735][ T3288] ? __fget_files+0x21f/0x3d0 [ 1076.175752][ T3288] ksys_mmap_pgoff+0x3c8/0x650 [ 1076.175768][ T3288] ? __x64_sys_futex+0x34f/0x4d0 [ 1076.175786][ T3288] ? __x64_sys_futex+0x358/0x4d0 [ 1076.175805][ T3288] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1076.175820][ T3288] ? xfd_validate_state+0x129/0x190 [ 1076.175845][ T3288] __x64_sys_mmap+0x125/0x190 [ 1076.175868][ T3288] do_syscall_64+0x106/0xf80 [ 1076.175885][ T3288] ? clear_bhb_loop+0x40/0x90 [ 1076.175904][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.175919][ T3288] RIP: 0033:0x7f964339c799 [ 1076.175934][ T3288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.175955][ T3288] RSP: 002b:00007f9644255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1076.175970][ T3288] RAX: ffffffffffffffda RBX: 00007f9643615fa0 RCX: 00007f964339c799 [ 1076.175980][ T3288] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000012000 [ 1076.175990][ T3288] RBP: 00007f9643432bd9 R08: 00000000000000dd R09: 0000000000000000 [ 1076.176000][ T3288] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1076.176010][ T3288] R13: 00007f9643616038 R14: 00007f9643615fa0 R15: 00007ffe03aa2578 [ 1076.176031][ T3288] [ 1077.159905][ T3299] netlink: 'syz.0.5028': attribute type 11 has an invalid length. [ 1077.191260][ T3299] netlink: 'syz.0.5028': attribute type 11 has an invalid length. [ 1077.218244][ T3299] netlink: 'syz.0.5028': attribute type 11 has an invalid length. [ 1077.241413][ T3299] netlink: 'syz.0.5028': attribute type 11 has an invalid length. [ 1077.528544][ T3307] FAULT_INJECTION: forcing a failure. [ 1077.528544][ T3307] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1077.562248][ T3307] CPU: 0 UID: 0 PID: 3307 Comm: syz.0.5031 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1077.562278][ T3307] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1077.562284][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1077.562295][ T3307] Call Trace: [ 1077.562300][ T3307] [ 1077.562307][ T3307] dump_stack_lvl+0x100/0x190 [ 1077.562335][ T3307] should_fail_ex.cold+0x5/0xa [ 1077.562354][ T3307] get_futex_key+0x1d2/0x1620 [ 1077.562375][ T3307] ? __pfx_get_futex_key+0x10/0x10 [ 1077.562391][ T3307] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 1077.562421][ T3307] futex_wait_setup+0x83/0x510 [ 1077.562449][ T3307] __futex_wait+0x19f/0x300 [ 1077.562472][ T3307] ? __pfx___futex_wait+0x10/0x10 [ 1077.562496][ T3307] ? __pfx_futex_wake_mark+0x10/0x10 [ 1077.562520][ T3307] ? futex_hash+0x2c5/0x380 [ 1077.562542][ T3307] futex_wait+0xed/0x380 [ 1077.562564][ T3307] ? __pfx_futex_wait+0x10/0x10 [ 1077.562595][ T3307] do_futex+0x1ef/0x350 [ 1077.562614][ T3307] ? __pfx_do_futex+0x10/0x10 [ 1077.562637][ T3307] __x64_sys_futex+0x34f/0x4d0 [ 1077.562656][ T3307] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1077.562673][ T3307] ? __pfx___x64_sys_futex+0x10/0x10 [ 1077.562699][ T3307] do_syscall_64+0x106/0xf80 [ 1077.562717][ T3307] ? clear_bhb_loop+0x40/0x90 [ 1077.562735][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.562750][ T3307] RIP: 0033:0x7fe3a8d9c799 [ 1077.562765][ T3307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.562780][ T3307] RSP: 002b:00007fe3a9c910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1077.562805][ T3307] RAX: ffffffffffffffda RBX: 00007fe3a9015fa8 RCX: 00007fe3a8d9c799 [ 1077.562816][ T3307] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3a9015fa8 [ 1077.562825][ T3307] RBP: 00007fe3a9015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.562835][ T3307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.562844][ T3307] R13: 00007fe3a9016038 R14: 00007ffc4c87d2e0 R15: 00007ffc4c87d3c8 [ 1077.562864][ T3307] [ 1078.589706][ T3332] FAULT_INJECTION: forcing a failure. [ 1078.589706][ T3332] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.643077][ T3332] CPU: 0 UID: 0 PID: 3332 Comm: syz.0.5036 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1078.643106][ T3332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1078.643112][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.643122][ T3332] Call Trace: [ 1078.643129][ T3332] [ 1078.643135][ T3332] dump_stack_lvl+0x100/0x190 [ 1078.643162][ T3332] should_fail_ex.cold+0x5/0xa [ 1078.643181][ T3332] ? tomoyo_encode2+0xfb/0x3c0 [ 1078.643199][ T3332] should_failslab+0xc2/0x120 [ 1078.643215][ T3332] __kmalloc_noprof+0xe0/0x850 [ 1078.643237][ T3332] ? rcu_is_watching+0x12/0xc0 [ 1078.643262][ T3332] tomoyo_encode2+0xfb/0x3c0 [ 1078.643283][ T3332] tomoyo_encode+0x29/0x50 [ 1078.643298][ T3332] tomoyo_realpath_from_path+0x18c/0x690 [ 1078.643319][ T3332] tomoyo_check_open_permission+0x2af/0x3c0 [ 1078.643344][ T3332] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1078.643384][ T3332] ? lock_acquire+0x1cf/0x380 [ 1078.643402][ T3332] ? find_held_lock+0x2b/0x80 [ 1078.643421][ T3332] tomoyo_file_open+0x6b/0x90 [ 1078.643441][ T3332] security_file_open+0xb5/0x1e0 [ 1078.643457][ T3332] do_dentry_open+0x5aa/0x1660 [ 1078.643478][ T3332] vfs_open+0x82/0x3f0 [ 1078.643498][ T3332] path_openat+0x208c/0x31a0 [ 1078.643520][ T3332] ? __pfx_path_openat+0x10/0x10 [ 1078.643542][ T3332] do_file_open+0x20e/0x430 [ 1078.643559][ T3332] ? __pfx_do_file_open+0x10/0x10 [ 1078.643588][ T3332] ? alloc_fd+0x476/0x790 [ 1078.643604][ T3332] ? do_getname+0x191/0x390 [ 1078.643624][ T3332] do_sys_openat2+0x10d/0x1e0 [ 1078.643645][ T3332] ? __pfx_do_sys_openat2+0x10/0x10 [ 1078.643679][ T3332] __x64_sys_openat+0x12d/0x210 [ 1078.643700][ T3332] ? __pfx___x64_sys_openat+0x10/0x10 [ 1078.643727][ T3332] do_syscall_64+0x106/0xf80 [ 1078.643746][ T3332] ? clear_bhb_loop+0x40/0x90 [ 1078.643764][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.643780][ T3332] RIP: 0033:0x7fe3a8d9c799 [ 1078.643793][ T3332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.643808][ T3332] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1078.643823][ T3332] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1078.643833][ T3332] RDX: 0000000000040042 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1078.643844][ T3332] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1078.643853][ T3332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.643863][ T3332] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1078.643883][ T3332] [ 1078.901915][ T3332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1079.123461][ T3346] phram: not enough arguments [ 1079.131240][ T3346] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1080.515533][ T3374] FAULT_INJECTION: forcing a failure. [ 1080.515533][ T3374] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.587947][ T3374] CPU: 0 UID: 0 PID: 3374 Comm: syz.1.5046 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1080.587976][ T3374] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1080.587983][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.587992][ T3374] Call Trace: [ 1080.587999][ T3374] [ 1080.588005][ T3374] dump_stack_lvl+0x100/0x190 [ 1080.588034][ T3374] should_fail_ex.cold+0x5/0xa [ 1080.588052][ T3374] should_failslab+0xc2/0x120 [ 1080.588068][ T3374] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1080.588090][ T3374] ? mas_alloc_nodes+0x280/0x390 [ 1080.588110][ T3374] mas_alloc_nodes+0x280/0x390 [ 1080.588127][ T3374] mas_preallocate+0x39c/0xf10 [ 1080.588149][ T3374] ? __pfx_mas_preallocate+0x10/0x10 [ 1080.588172][ T3374] ? vm_area_alloc+0x1f/0x160 [ 1080.588193][ T3374] ? lockdep_init_map_type+0x5c/0x250 [ 1080.588215][ T3374] __mmap_region+0x12b5/0x29e0 [ 1080.588240][ T3374] ? __pfx___mmap_region+0x10/0x10 [ 1080.588265][ T3374] ? set_next_entity+0x11e/0x9c0 [ 1080.588289][ T3374] ? __lock_acquire+0x4a5/0x2630 [ 1080.588307][ T3374] ? update_cfs_rq_load_avg+0x51/0x550 [ 1080.588331][ T3374] ? find_held_lock+0x2b/0x80 [ 1080.588344][ T3374] ? finish_task_switch.isra.0+0x200/0xb80 [ 1080.588360][ T3374] ? finish_task_switch.isra.0+0x200/0xb80 [ 1080.588383][ T3374] ? trace_sched_exit_tp+0x13a/0x180 [ 1080.588400][ T3374] ? __schedule+0x1000/0x6120 [ 1080.588492][ T3374] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1080.588528][ T3374] mmap_region+0x180/0x3e0 [ 1080.588556][ T3374] do_mmap+0xc63/0x12f0 [ 1080.588577][ T3374] ? __pfx_do_mmap+0x10/0x10 [ 1080.588595][ T3374] ? __pfx_down_write_killable+0x10/0x10 [ 1080.588619][ T3374] vm_mmap_pgoff+0x29e/0x470 [ 1080.588640][ T3374] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1080.588658][ T3374] ? do_futex+0x192/0x350 [ 1080.588678][ T3374] ? __pfx_do_futex+0x10/0x10 [ 1080.588700][ T3374] ksys_mmap_pgoff+0xe1/0x650 [ 1080.588716][ T3374] ? __x64_sys_futex+0x34f/0x4d0 [ 1080.588734][ T3374] ? __x64_sys_futex+0x358/0x4d0 [ 1080.588753][ T3374] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1080.588768][ T3374] ? xfd_validate_state+0x129/0x190 [ 1080.588793][ T3374] __x64_sys_mmap+0x125/0x190 [ 1080.588817][ T3374] do_syscall_64+0x106/0xf80 [ 1080.588834][ T3374] ? clear_bhb_loop+0x40/0x90 [ 1080.588852][ T3374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.588868][ T3374] RIP: 0033:0x7f964339c799 [ 1080.588883][ T3374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.588898][ T3374] RSP: 002b:00007f9644255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1080.588914][ T3374] RAX: ffffffffffffffda RBX: 00007f9643615fa0 RCX: 00007f964339c799 [ 1080.588924][ T3374] RDX: 00000000000000df RSI: 0000000004020009 RDI: 00000000fffff000 [ 1080.588934][ T3374] RBP: 00007f9643432bd9 R08: 0000000000000401 R09: 0000000000008000 [ 1080.588944][ T3374] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1080.588953][ T3374] R13: 00007f9643616038 R14: 00007f9643615fa0 R15: 00007ffe03aa2578 [ 1080.588977][ T3374] [ 1081.432269][ T3386] netlink: 4394 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1081.574523][ T3390] FAULT_INJECTION: forcing a failure. [ 1081.574523][ T3390] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.609033][ T3390] CPU: 0 UID: 0 PID: 3390 Comm: syz.2.5051 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1081.609061][ T3390] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1081.609067][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.609076][ T3390] Call Trace: [ 1081.609081][ T3390] [ 1081.609087][ T3390] dump_stack_lvl+0x100/0x190 [ 1081.609115][ T3390] should_fail_ex.cold+0x5/0xa [ 1081.609133][ T3390] should_failslab+0xc2/0x120 [ 1081.609149][ T3390] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1081.609172][ T3390] ? __alloc_skb+0x140/0x710 [ 1081.609192][ T3390] __alloc_skb+0x140/0x710 [ 1081.609207][ T3390] ? __alloc_skb+0x5b7/0x710 [ 1081.609223][ T3390] ? __pfx___alloc_skb+0x10/0x10 [ 1081.609238][ T3390] ? rtnl_prop_list_size+0x144/0x2c0 [ 1081.609256][ T3390] ? if_nlmsg_size+0x4a4/0xb30 [ 1081.609276][ T3390] rtmsg_ifinfo_build_skb+0x81/0x260 [ 1081.609300][ T3390] rtmsg_ifinfo+0xa4/0x1b0 [ 1081.609322][ T3390] register_netdevice+0x1b79/0x2210 [ 1081.609346][ T3390] ? __pfx_register_netdevice+0x10/0x10 [ 1081.609365][ T3390] ? alloc_netdev_mqs+0x1163/0x14f0 [ 1081.609386][ T3390] register_netdev+0x34/0x50 [ 1081.609404][ T3390] ip6gre_init_net+0x2aa/0x420 [ 1081.609529][ T3390] ? __pfx_ip6gre_init_net+0x10/0x10 [ 1081.609548][ T3390] ops_init+0x1e2/0x5f0 [ 1081.609570][ T3390] setup_net+0x118/0x3a0 [ 1081.609588][ T3390] ? __pfx_setup_net+0x10/0x10 [ 1081.609605][ T3390] ? lockdep_init_map_type+0x5c/0x250 [ 1081.609626][ T3390] ? mutex_init_lockep+0x110/0x150 [ 1081.609649][ T3390] copy_net_ns+0x46f/0x7c0 [ 1081.609671][ T3390] create_new_namespaces+0x3ea/0xac0 [ 1081.609692][ T3390] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1081.609710][ T3390] ksys_unshare+0x473/0xad0 [ 1081.609730][ T3390] ? __pfx_ksys_unshare+0x10/0x10 [ 1081.609755][ T3390] __x64_sys_unshare+0x31/0x40 [ 1081.609773][ T3390] do_syscall_64+0x106/0xf80 [ 1081.609790][ T3390] ? clear_bhb_loop+0x40/0x90 [ 1081.609809][ T3390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.609824][ T3390] RIP: 0033:0x7fb033b9c799 [ 1081.609837][ T3390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.609852][ T3390] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1081.609867][ T3390] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1081.609877][ T3390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1081.609887][ T3390] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1081.609896][ T3390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.609905][ T3390] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1081.609925][ T3390] [ 1082.337625][ T3403] FAULT_INJECTION: forcing a failure. [ 1082.337625][ T3403] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1082.350843][ T3403] CPU: 0 UID: 0 PID: 3403 Comm: syz.1.5052 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1082.350872][ T3403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1082.350878][ T3403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.350888][ T3403] Call Trace: [ 1082.350894][ T3403] [ 1082.350900][ T3403] dump_stack_lvl+0x100/0x190 [ 1082.350928][ T3403] should_fail_ex.cold+0x5/0xa [ 1082.350947][ T3403] should_fail_futex+0x4c/0x60 [ 1082.350965][ T3403] futex_lock_pi_atomic+0x12d/0xaf0 [ 1082.350991][ T3403] futex_lock_pi+0x246/0x7b0 [ 1082.351015][ T3403] ? __pfx_futex_lock_pi+0x10/0x10 [ 1082.351035][ T3403] ? preempt_schedule_common+0x42/0xc0 [ 1082.351053][ T3403] ? preempt_schedule_thunk+0x16/0x30 [ 1082.351079][ T3403] ? __pfx_try_to_wake_up+0x10/0x10 [ 1082.351099][ T3403] ? futex_private_hash_put+0x107/0x1c0 [ 1082.351120][ T3403] ? __pfx_futex_wake_mark+0x10/0x10 [ 1082.351147][ T3403] ? ksys_write+0x190/0x250 [ 1082.351160][ T3403] ? ksys_write+0x190/0x250 [ 1082.351177][ T3403] do_futex+0x18a/0x350 [ 1082.351196][ T3403] ? __pfx_do_futex+0x10/0x10 [ 1082.351219][ T3403] __x64_sys_futex+0x34f/0x4d0 [ 1082.351239][ T3403] ? __pfx___x64_sys_futex+0x10/0x10 [ 1082.351265][ T3403] do_syscall_64+0x106/0xf80 [ 1082.351282][ T3403] ? clear_bhb_loop+0x40/0x90 [ 1082.351300][ T3403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.351315][ T3403] RIP: 0033:0x7f964339c799 [ 1082.351329][ T3403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.351352][ T3403] RSP: 002b:00007f9644234028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.351368][ T3403] RAX: ffffffffffffffda RBX: 00007f9643616090 RCX: 00007f964339c799 [ 1082.351379][ T3403] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 1082.351389][ T3403] RBP: 00007f9643432bd9 R08: 0000000000000000 R09: 000000008000fff5 [ 1082.351399][ T3403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.351408][ T3403] R13: 00007f9643616128 R14: 00007f9643616090 R15: 00007ffe03aa2578 [ 1082.351428][ T3403] [ 1082.617008][ T3402] FAULT_INJECTION: forcing a failure. [ 1082.617008][ T3402] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1082.629904][ T3402] CPU: 0 UID: 0 PID: 3402 Comm: syz.1.5052 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1082.629931][ T3402] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1082.629937][ T3402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.629945][ T3402] Call Trace: [ 1082.629953][ T3402] [ 1082.629959][ T3402] dump_stack_lvl+0x100/0x190 [ 1082.629988][ T3402] should_fail_ex.cold+0x5/0xa [ 1082.630006][ T3402] get_futex_key+0x1d2/0x1620 [ 1082.630027][ T3402] ? __pfx_get_futex_key+0x10/0x10 [ 1082.630046][ T3402] ? update_se+0x94/0x760 [ 1082.630067][ T3402] futex_wait_setup+0x83/0x510 [ 1082.630095][ T3402] __futex_wait+0x19f/0x300 [ 1082.630119][ T3402] ? __pfx___futex_wait+0x10/0x10 [ 1082.630139][ T3402] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.630156][ T3402] ? lockdep_hardirqs_on+0x78/0x100 [ 1082.630175][ T3402] ? __pfx_futex_wake_mark+0x10/0x10 [ 1082.630204][ T3402] ? find_held_lock+0x2b/0x80 [ 1082.630217][ T3402] ? futex_wake+0x456/0x530 [ 1082.630242][ T3402] futex_wait+0xed/0x380 [ 1082.630263][ T3402] ? __pfx_futex_wait+0x10/0x10 [ 1082.630295][ T3402] do_futex+0x1ef/0x350 [ 1082.630314][ T3402] ? __pfx_do_futex+0x10/0x10 [ 1082.630345][ T3402] __x64_sys_futex+0x34f/0x4d0 [ 1082.630366][ T3402] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1082.630383][ T3402] ? __pfx___x64_sys_futex+0x10/0x10 [ 1082.630410][ T3402] do_syscall_64+0x106/0xf80 [ 1082.630427][ T3402] ? clear_bhb_loop+0x40/0x90 [ 1082.630445][ T3402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.630460][ T3402] RIP: 0033:0x7f964339c799 [ 1082.630474][ T3402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.630488][ T3402] RSP: 002b:00007f96442550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.630503][ T3402] RAX: ffffffffffffffda RBX: 00007f9643615fa8 RCX: 00007f964339c799 [ 1082.630513][ T3402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9643615fa8 [ 1082.630522][ T3402] RBP: 00007f9643615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.630531][ T3402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.630540][ T3402] R13: 00007f9643616038 R14: 00007ffe03aa2490 R15: 00007ffe03aa2578 [ 1082.630560][ T3402] [ 1084.504284][ T3429] phram: not enough arguments [ 1084.554012][ T3429] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5058'. [ 1085.078800][T25315] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 1085.078825][T25315] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 1085.096316][T25315] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 1085.096352][T25315] Bluetooth: hci1: Unknown advertising packet type: 0x37 [ 1085.105723][T25315] Bluetooth: hci1: Unknown advertising packet type: 0x55 [ 1085.112827][T25315] Bluetooth: hci1: adv larger than maximum supported [ 1085.120404][T25315] Bluetooth: hci1: Unknown advertising packet type: 0x75 [ 1085.127931][T25315] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 1085.135835][T25315] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1085.273267][ T3452] netlink: 'syz.2.5063': attribute type 11 has an invalid length. [ 1085.394279][ T3452] netlink: 'syz.2.5063': attribute type 11 has an invalid length. [ 1085.520549][ T3452] netlink: 'syz.2.5063': attribute type 11 has an invalid length. [ 1085.637139][ T3452] netlink: 'syz.2.5063': attribute type 11 has an invalid length. [ 1089.470646][ T3545] netlink: 'syz.3.5078': attribute type 11 has an invalid length. [ 1089.509009][ T3545] netlink: 'syz.3.5078': attribute type 11 has an invalid length. [ 1089.549460][ T3545] netlink: 'syz.3.5078': attribute type 11 has an invalid length. [ 1089.580281][ T3545] netlink: 'syz.3.5078': attribute type 11 has an invalid length. [ 1090.685666][ T3556] FAULT_INJECTION: forcing a failure. [ 1090.685666][ T3556] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.855249][ T3556] CPU: 0 UID: 0 PID: 3556 Comm: syz.2.5081 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1090.855278][ T3556] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1090.855284][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.855294][ T3556] Call Trace: [ 1090.855300][ T3556] [ 1090.855307][ T3556] dump_stack_lvl+0x100/0x190 [ 1090.855335][ T3556] should_fail_ex.cold+0x5/0xa [ 1090.855354][ T3556] should_failslab+0xc2/0x120 [ 1090.855370][ T3556] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1090.855393][ T3556] ? zswap_store+0xc42/0x29d0 [ 1090.855414][ T3556] zswap_store+0xc42/0x29d0 [ 1090.855434][ T3556] ? __pfx___up_read+0x10/0x10 [ 1090.855454][ T3556] ? rmap_walk_anon+0x561/0x870 [ 1090.855474][ T3556] ? __pfx_zswap_store+0x10/0x10 [ 1090.855491][ T3556] ? do_raw_spin_lock+0x128/0x260 [ 1090.855511][ T3556] ? find_held_lock+0x2b/0x80 [ 1090.855524][ T3556] ? folio_free_swap+0x3d9/0xb50 [ 1090.855538][ T3556] ? folio_free_swap+0x3d9/0xb50 [ 1090.855566][ T3556] ? do_raw_spin_unlock+0x145/0x1e0 [ 1090.855589][ T3556] ? _raw_spin_unlock+0x28/0x50 [ 1090.855605][ T3556] ? folio_free_swap+0x39/0xb50 [ 1090.855620][ T3556] ? __pfx_try_to_unmap+0x10/0x10 [ 1090.855643][ T3556] swap_writeout+0x49d/0x12b0 [ 1090.855671][ T3556] shrink_folio_list+0x5c4a/0x6000 [ 1090.855698][ T3556] ? stack_depot_save_flags+0x27/0x9d0 [ 1090.855716][ T3556] ? __pfx_shrink_folio_list+0x10/0x10 [ 1090.855740][ T3556] ? __lock_acquire+0x4a5/0x2630 [ 1090.855761][ T3556] ? __update_page_owner_handle+0x3c7/0x550 [ 1090.855797][ T3556] ? get_page_from_freelist+0x111d/0x3140 [ 1090.855824][ T3556] reclaim_folio_list+0xdc/0x600 [ 1090.855847][ T3556] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1090.855874][ T3556] ? css_rstat_updated+0x1ce/0x5a0 [ 1090.855895][ T3556] ? do_raw_spin_lock+0x128/0x260 [ 1090.855916][ T3556] ? lru_gen_del_folio+0x382/0x5f0 [ 1090.855936][ T3556] reclaim_pages+0x428/0x5e0 [ 1090.855959][ T3556] ? __pfx_reclaim_pages+0x10/0x10 [ 1090.855978][ T3556] ? find_held_lock+0x2b/0x80 [ 1090.855992][ T3556] ? madvise_cold_or_pageout_pte_range+0xb49/0x2720 [ 1090.856014][ T3556] madvise_cold_or_pageout_pte_range+0x1635/0x2720 [ 1090.856041][ T3556] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1090.856064][ T3556] ? stack_trace_save+0x8e/0xc0 [ 1090.856080][ T3556] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1090.856099][ T3556] walk_pgd_range+0xc04/0x1eb0 [ 1090.856133][ T3556] ? __pfx_walk_pgd_range+0x10/0x10 [ 1090.856157][ T3556] ? folios_put_refs+0x66d/0x840 [ 1090.856181][ T3556] __walk_page_range+0x163/0x820 [ 1090.856212][ T3556] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1090.856238][ T3556] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1090.856264][ T3556] ? find_held_lock+0x2b/0x80 [ 1090.856278][ T3556] ? mlock_drain_local+0x254/0x4e0 [ 1090.856298][ T3556] ? mlock_drain_local+0x254/0x4e0 [ 1090.856321][ T3556] walk_page_range_vma+0x63/0x90 [ 1090.856346][ T3556] madvise_pageout+0x259/0x540 [ 1090.856363][ T3556] ? __pfx_madvise_pageout+0x10/0x10 [ 1090.856393][ T3556] madvise_vma_behavior+0x3e6/0x3050 [ 1090.856411][ T3556] ? mt_find+0x687/0x8e0 [ 1090.856428][ T3556] ? mt_find+0x687/0x8e0 [ 1090.856446][ T3556] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1090.856466][ T3556] ? mt_find+0x45e/0x8e0 [ 1090.856485][ T3556] ? __pfx_mt_find+0x10/0x10 [ 1090.856507][ T3556] ? find_vma_prev+0xd8/0x150 [ 1090.856522][ T3556] ? futex_unqueue+0x133/0x2c0 [ 1090.856544][ T3556] ? find_vma+0xbf/0x140 [ 1090.856564][ T3556] ? __pfx_find_vma+0x10/0x10 [ 1090.856578][ T3556] ? __futex_wait+0x256/0x300 [ 1090.856604][ T3556] madvise_walk_vmas+0x2fe/0xa90 [ 1090.856625][ T3556] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1090.856649][ T3556] madvise_do_behavior+0x1ea/0x510 [ 1090.856669][ T3556] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1090.856687][ T3556] ? down_read+0x13b/0x460 [ 1090.856716][ T3556] do_madvise+0x195/0x240 [ 1090.856733][ T3556] ? __pfx_do_madvise+0x10/0x10 [ 1090.856750][ T3556] ? do_futex+0x192/0x350 [ 1090.856786][ T3556] __x64_sys_madvise+0xa9/0x110 [ 1090.856803][ T3556] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.856820][ T3556] do_syscall_64+0x106/0xf80 [ 1090.856837][ T3556] ? clear_bhb_loop+0x40/0x90 [ 1090.856855][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.856871][ T3556] RIP: 0033:0x7fb033b9c799 [ 1090.856885][ T3556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.856901][ T3556] RSP: 002b:00007fb034a02028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1090.856916][ T3556] RAX: ffffffffffffffda RBX: 00007fb033e16090 RCX: 00007fb033b9c799 [ 1090.856926][ T3556] RDX: 0000000000000015 RSI: fffffffffffeffff RDI: 0000000000000000 [ 1090.856935][ T3556] RBP: 00007fb033c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1090.856945][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.856955][ T3556] R13: 00007fb033e16128 R14: 00007fb033e16090 R15: 00007ffeda567e78 [ 1090.856975][ T3556] [ 1091.901035][ T3569] phram: not enough arguments [ 1091.916152][ T3569] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5084'. [ 1093.713691][ T3600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1094.438252][ T3613] phram: not enough arguments [ 1094.508445][ T3613] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1094.532258][ T3617] FAULT_INJECTION: forcing a failure. [ 1094.532258][ T3617] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.629416][ T3617] CPU: 0 UID: 0 PID: 3617 Comm: syz.3.5096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1094.629444][ T3617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1094.629451][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1094.629460][ T3617] Call Trace: [ 1094.629466][ T3617] [ 1094.629473][ T3617] dump_stack_lvl+0x100/0x190 [ 1094.629501][ T3617] should_fail_ex.cold+0x5/0xa [ 1094.629520][ T3617] ? __register_sysctl_table+0xac/0x1650 [ 1094.629543][ T3617] should_failslab+0xc2/0x120 [ 1094.629559][ T3617] __kmalloc_noprof+0xe0/0x850 [ 1094.629586][ T3617] __register_sysctl_table+0xac/0x1650 [ 1094.629609][ T3617] ? is_module_address+0x5f/0xf0 [ 1094.629630][ T3617] ? __pfx___register_sysctl_table+0x10/0x10 [ 1094.629653][ T3617] ? is_module_address+0x69/0xf0 [ 1094.629670][ T3617] ? register_net_sysctl_sz+0x222/0x430 [ 1094.629695][ T3617] __devinet_sysctl_register+0x1b9/0x360 [ 1094.629718][ T3617] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 1094.629735][ T3617] ? inetdev_init+0x245/0x570 [ 1094.629755][ T3617] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1094.629777][ T3617] ? copy_net_ns+0x46f/0x7c0 [ 1094.629795][ T3617] ? create_new_namespaces+0x3ea/0xac0 [ 1094.629810][ T3617] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1094.629826][ T3617] ? ksys_unshare+0x473/0xad0 [ 1094.629843][ T3617] ? __x64_sys_unshare+0x31/0x40 [ 1094.629860][ T3617] ? do_syscall_64+0x106/0xf80 [ 1094.629877][ T3617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.629895][ T3617] devinet_sysctl_register+0x17b/0x210 [ 1094.629916][ T3617] inetdev_init+0x2b8/0x570 [ 1094.629937][ T3617] inetdev_event+0x7fa/0x17f0 [ 1094.629957][ T3617] ? ib_netdevice_event+0xfc/0x330 [ 1094.629975][ T3617] ? __pfx_inetdev_event+0x10/0x10 [ 1094.629996][ T3617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.630023][ T3617] notifier_call_chain+0x99/0x420 [ 1094.630046][ T3617] call_netdevice_notifiers_info+0xbe/0x110 [ 1094.630069][ T3617] register_netdevice+0x16e6/0x2210 [ 1094.630092][ T3617] ? __pfx_register_netdevice+0x10/0x10 [ 1094.630117][ T3617] __ip_tunnel_create+0x52b/0x670 [ 1094.630137][ T3617] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1094.630165][ T3617] ? net_generic+0xea/0x2a0 [ 1094.630189][ T3617] ip_tunnel_init_net+0x230/0x780 [ 1094.630215][ T3617] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1094.630239][ T3617] ? __kmalloc_noprof+0x320/0x850 [ 1094.630263][ T3617] ? __pfx_ipip_init_net+0x10/0x10 [ 1094.630284][ T3617] ops_init+0x1e2/0x5f0 [ 1094.630305][ T3617] setup_net+0x118/0x3a0 [ 1094.630324][ T3617] ? __pfx_setup_net+0x10/0x10 [ 1094.630341][ T3617] ? lockdep_init_map_type+0x5c/0x250 [ 1094.630361][ T3617] ? mutex_init_lockep+0x110/0x150 [ 1094.630384][ T3617] copy_net_ns+0x46f/0x7c0 [ 1094.630406][ T3617] create_new_namespaces+0x3ea/0xac0 [ 1094.630426][ T3617] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1094.630443][ T3617] ksys_unshare+0x473/0xad0 [ 1094.630463][ T3617] ? __pfx_ksys_unshare+0x10/0x10 [ 1094.630488][ T3617] __x64_sys_unshare+0x31/0x40 [ 1094.630506][ T3617] do_syscall_64+0x106/0xf80 [ 1094.630523][ T3617] ? clear_bhb_loop+0x40/0x90 [ 1094.630541][ T3617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.630557][ T3617] RIP: 0033:0x7f43b139c799 [ 1094.630571][ T3617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.630585][ T3617] RSP: 002b:00007f43b22e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1094.630602][ T3617] RAX: ffffffffffffffda RBX: 00007f43b1615fa0 RCX: 00007f43b139c799 [ 1094.630612][ T3617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1094.630622][ T3617] RBP: 00007f43b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1094.630631][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.630640][ T3617] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1094.630661][ T3617] [ 1095.137364][ T3621] netlink: 'syz.0.5097': attribute type 11 has an invalid length. [ 1095.145865][ T3621] netlink: 'syz.0.5097': attribute type 11 has an invalid length. [ 1095.161585][ T3621] netlink: 'syz.0.5097': attribute type 11 has an invalid length. [ 1095.169714][ T3621] netlink: 'syz.0.5097': attribute type 11 has an invalid length. [ 1096.324967][ T3647] : Can't lookup blockdev [ 1097.162160][ T3662] phram: not enough arguments [ 1097.187785][ T3662] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1097.405883][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1097.442498][ T3672] netlink: 'syz.3.5109': attribute type 1 has an invalid length. [ 1097.465236][ T3672] netlink: 'syz.3.5109': attribute type 6 has an invalid length. [ 1097.483862][ T3674] FAULT_INJECTION: forcing a failure. [ 1097.483862][ T3674] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1097.545393][ T3674] CPU: 0 UID: 0 PID: 3674 Comm: syz.0.5110 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1097.545422][ T3674] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1097.545428][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1097.545439][ T3674] Call Trace: [ 1097.545445][ T3674] [ 1097.545452][ T3674] dump_stack_lvl+0x100/0x190 [ 1097.545480][ T3674] should_fail_ex.cold+0x5/0xa [ 1097.545500][ T3674] get_futex_key+0x1d2/0x1620 [ 1097.545520][ T3674] ? __pfx_get_futex_key+0x10/0x10 [ 1097.545539][ T3674] ? update_se+0x94/0x760 [ 1097.545561][ T3674] futex_wait_setup+0x83/0x510 [ 1097.545588][ T3674] __futex_wait+0x19f/0x300 [ 1097.545611][ T3674] ? __pfx___futex_wait+0x10/0x10 [ 1097.545632][ T3674] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1097.545649][ T3674] ? lockdep_hardirqs_on+0x78/0x100 [ 1097.545669][ T3674] ? __pfx_futex_wake_mark+0x10/0x10 [ 1097.545694][ T3674] ? find_held_lock+0x2b/0x80 [ 1097.545707][ T3674] ? futex_wake+0x456/0x530 [ 1097.545733][ T3674] futex_wait+0xed/0x380 [ 1097.545755][ T3674] ? __pfx_futex_wait+0x10/0x10 [ 1097.545781][ T3674] ? __fget_files+0x215/0x3d0 [ 1097.545816][ T3674] do_futex+0x1ef/0x350 [ 1097.545836][ T3674] ? __pfx_do_futex+0x10/0x10 [ 1097.545855][ T3674] ? fdget+0x18b/0x210 [ 1097.545869][ T3674] ? __sys_sendmsg+0x18f/0x220 [ 1097.545904][ T3674] __x64_sys_futex+0x34f/0x4d0 [ 1097.545927][ T3674] ? __pfx___x64_sys_futex+0x10/0x10 [ 1097.545955][ T3674] do_syscall_64+0x106/0xf80 [ 1097.545973][ T3674] ? clear_bhb_loop+0x40/0x90 [ 1097.545991][ T3674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.546006][ T3674] RIP: 0033:0x7fe3a8d9c799 [ 1097.546020][ T3674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.546036][ T3674] RSP: 002b:00007fe3a9c910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1097.546051][ T3674] RAX: ffffffffffffffda RBX: 00007fe3a9015fa8 RCX: 00007fe3a8d9c799 [ 1097.546062][ T3674] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3a9015fa8 [ 1097.546071][ T3674] RBP: 00007fe3a9015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.546081][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.546091][ T3674] R13: 00007fe3a9016038 R14: 00007ffc4c87d2e0 R15: 00007ffc4c87d3c8 [ 1097.546111][ T3674] [ 1098.197929][ T3678] random: crng reseeded on system resumption [ 1098.973764][ T3704] phram: not enough arguments [ 1099.008889][ T3704] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5117'. [ 1099.585995][ T3716] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.108357][ T2647] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.182120][ T2647] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.189577][ T2647] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.262666][ T3729] netlink: 'syz.3.5125': attribute type 11 has an invalid length. [ 1100.278052][ T2647] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.317043][ T3729] netlink: 'syz.3.5125': attribute type 11 has an invalid length. [ 1100.334046][ T2647] rtc rtc0: __rtc_set_alarm: err=-22 [ 1100.368977][ T3729] netlink: 'syz.3.5125': attribute type 11 has an invalid length. [ 1100.418484][ T3729] netlink: 'syz.3.5125': attribute type 11 has an invalid length. [ 1101.141192][ T3745] phram: not enough arguments [ 1101.163808][ T3759] FAULT_INJECTION: forcing a failure. [ 1101.163808][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.201243][ T3745] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5129'. [ 1101.218535][ T3759] CPU: 0 UID: 0 PID: 3759 Comm: syz.3.5133 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1101.218564][ T3759] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1101.218570][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.218580][ T3759] Call Trace: [ 1101.218586][ T3759] [ 1101.218593][ T3759] dump_stack_lvl+0x100/0x190 [ 1101.218621][ T3759] should_fail_ex.cold+0x5/0xa [ 1101.218638][ T3759] should_failslab+0xc2/0x120 [ 1101.218654][ T3759] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1101.218677][ T3759] ? __d_alloc+0x34/0xa80 [ 1101.218693][ T3759] ? raw_hash_sk+0x29f/0x5d0 [ 1101.218713][ T3759] ? raw_hash_sk+0x29f/0x5d0 [ 1101.218737][ T3759] __d_alloc+0x34/0xa80 [ 1101.218755][ T3759] d_alloc_pseudo+0x1c/0xc0 [ 1101.218775][ T3759] alloc_file_pseudo+0xcf/0x230 [ 1101.218794][ T3759] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1101.218813][ T3759] ? alloc_fd+0x476/0x790 [ 1101.218830][ T3759] sock_alloc_file+0x50/0x210 [ 1101.218850][ T3759] __sys_socket+0x1c0/0x260 [ 1101.218873][ T3759] ? __pfx___sys_socket+0x10/0x10 [ 1101.218900][ T3759] __x64_sys_socket+0x72/0xb0 [ 1101.218921][ T3759] ? lockdep_hardirqs_on+0x78/0x100 [ 1101.218940][ T3759] do_syscall_64+0x106/0xf80 [ 1101.218956][ T3759] ? clear_bhb_loop+0x40/0x90 [ 1101.218974][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.218989][ T3759] RIP: 0033:0x7f43b139c799 [ 1101.219003][ T3759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.219018][ T3759] RSP: 002b:00007f43b22c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1101.219033][ T3759] RAX: ffffffffffffffda RBX: 00007f43b1616090 RCX: 00007f43b139c799 [ 1101.219043][ T3759] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 1101.219052][ T3759] RBP: 00007f43b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1101.219061][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.219069][ T3759] R13: 00007f43b1616128 R14: 00007f43b1616090 R15: 00007ffd8e370868 [ 1101.219089][ T3759] [ 1101.861249][ T3765] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1102.081574][ T3771] netlink: 'syz.2.5138': attribute type 11 has an invalid length. [ 1102.137242][ T3771] netlink: 'syz.2.5138': attribute type 11 has an invalid length. [ 1102.185286][ T3771] netlink: 'syz.2.5138': attribute type 11 has an invalid length. [ 1102.241478][ T3771] netlink: 'syz.2.5138': attribute type 11 has an invalid length. [ 1104.097590][ T3807] netlink: 'syz.3.5147': attribute type 11 has an invalid length. [ 1104.133253][ T3807] netlink: 'syz.3.5147': attribute type 11 has an invalid length. [ 1105.760519][ T3850] misc userio: Invalid payload size [ 1105.937308][ T3859] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1106.293698][ T3868] FAULT_INJECTION: forcing a failure. [ 1106.293698][ T3868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.555213][ T3868] CPU: 0 UID: 0 PID: 3868 Comm: syz.1.5165 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1106.555240][ T3868] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1106.555246][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.555255][ T3868] Call Trace: [ 1106.555261][ T3868] [ 1106.555267][ T3868] dump_stack_lvl+0x100/0x190 [ 1106.555294][ T3868] should_fail_ex.cold+0x5/0xa [ 1106.555311][ T3868] _copy_from_user+0x2e/0xd0 [ 1106.555326][ T3868] dma_heap_ioctl+0x16d/0x5e0 [ 1106.555423][ T3868] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1106.555440][ T3868] ? find_held_lock+0x2b/0x80 [ 1106.555463][ T3868] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1106.555482][ T3868] __x64_sys_ioctl+0x18e/0x210 [ 1106.555504][ T3868] do_syscall_64+0x106/0xf80 [ 1106.555521][ T3868] ? clear_bhb_loop+0x40/0x90 [ 1106.555538][ T3868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.555553][ T3868] RIP: 0033:0x7f964339c799 [ 1106.555566][ T3868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.555580][ T3868] RSP: 002b:00007f9644255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.555595][ T3868] RAX: ffffffffffffffda RBX: 00007f9643615fa0 RCX: 00007f964339c799 [ 1106.555604][ T3868] RDX: 0000200000000440 RSI: ffffffff5fdffe00 RDI: 0000000000000003 [ 1106.555613][ T3868] RBP: 00007f9644255090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.555622][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.555631][ T3868] R13: 00007f9643616038 R14: 00007f9643615fa0 R15: 00007ffe03aa2578 [ 1106.555650][ T3868] [ 1107.622548][ T3865] MTRR 1 not used [ 1107.948656][ T3896] FAULT_INJECTION: forcing a failure. [ 1107.948656][ T3896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1108.017468][ T3896] CPU: 0 UID: 0 PID: 3896 Comm: syz.3.5167 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1108.017498][ T3896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1108.017505][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.017515][ T3896] Call Trace: [ 1108.017520][ T3896] [ 1108.017527][ T3896] dump_stack_lvl+0x100/0x190 [ 1108.017555][ T3896] should_fail_ex.cold+0x5/0xa [ 1108.017571][ T3896] ? prepare_alloc_pages+0x16d/0x5f0 [ 1108.017590][ T3896] should_fail_alloc_page+0xeb/0x140 [ 1108.017607][ T3896] prepare_alloc_pages+0x1f0/0x5f0 [ 1108.017627][ T3896] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1108.017651][ T3896] ? __pfx_stack_trace_save+0x10/0x10 [ 1108.017667][ T3896] ? stack_depot_save_flags+0x27/0x9d0 [ 1108.017682][ T3896] ? kasan_save_stack+0x3f/0x50 [ 1108.017703][ T3896] ? kasan_save_stack+0x30/0x50 [ 1108.017723][ T3896] ? kasan_save_track+0x14/0x30 [ 1108.017744][ T3896] ? __kasan_slab_alloc+0x89/0x90 [ 1108.017763][ T3896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1108.017790][ T3896] ? __pfx_css_rstat_updated+0x10/0x10 [ 1108.017811][ T3896] ? lock_acquire+0x1cf/0x380 [ 1108.017830][ T3896] ? find_held_lock+0x2b/0x80 [ 1108.017843][ T3896] ? page_table_check_set+0x49a/0xa10 [ 1108.017873][ T3896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1108.017898][ T3896] ? policy_nodemask+0xed/0x4f0 [ 1108.017916][ T3896] alloc_pages_mpol+0x1fb/0x550 [ 1108.017933][ T3896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1108.017954][ T3896] folio_alloc_mpol_noprof+0x36/0x340 [ 1108.017974][ T3896] vma_alloc_folio_noprof+0xed/0x1d0 [ 1108.017992][ T3896] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1108.018015][ T3896] do_anonymous_page+0xb3a/0x1fb0 [ 1108.018042][ T3896] __handle_mm_fault+0x1d42/0x2b60 [ 1108.018067][ T3896] ? __pfx___handle_mm_fault+0x10/0x10 [ 1108.018087][ T3896] ? pte_offset_map_lock+0x174/0x320 [ 1108.018102][ T3896] ? find_held_lock+0x2b/0x80 [ 1108.018122][ T3896] ? follow_page_pte+0x5b3/0x1400 [ 1108.018143][ T3896] handle_mm_fault+0x36d/0xa20 [ 1108.018166][ T3896] __get_user_pages+0xf9c/0x34d0 [ 1108.018189][ T3896] ? __pfx___get_user_pages+0x10/0x10 [ 1108.018212][ T3896] populate_vma_page_range+0x267/0x3f0 [ 1108.018230][ T3896] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1108.018247][ T3896] ? __pfx_find_vma_intersection+0x10/0x10 [ 1108.018264][ T3896] ? do_mmap+0x93f/0x12f0 [ 1108.018282][ T3896] __mm_populate+0x107/0x3a0 [ 1108.018300][ T3896] ? __pfx___mm_populate+0x10/0x10 [ 1108.018319][ T3896] ? up_write+0x290/0x4f0 [ 1108.018341][ T3896] vm_mmap_pgoff+0x37f/0x470 [ 1108.018360][ T3896] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1108.018378][ T3896] ? do_futex+0x192/0x350 [ 1108.018397][ T3896] ? __pfx_do_futex+0x10/0x10 [ 1108.018419][ T3896] ksys_mmap_pgoff+0xe1/0x650 [ 1108.018435][ T3896] ? __x64_sys_futex+0x34f/0x4d0 [ 1108.018452][ T3896] ? __x64_sys_futex+0x358/0x4d0 [ 1108.018471][ T3896] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1108.018487][ T3896] ? xfd_validate_state+0x129/0x190 [ 1108.018511][ T3896] __x64_sys_mmap+0x125/0x190 [ 1108.018535][ T3896] do_syscall_64+0x106/0xf80 [ 1108.018552][ T3896] ? clear_bhb_loop+0x40/0x90 [ 1108.018571][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.018587][ T3896] RIP: 0033:0x7f43b139c799 [ 1108.018601][ T3896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.018617][ T3896] RSP: 002b:00007f43b22e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1108.018631][ T3896] RAX: ffffffffffffffda RBX: 00007f43b1615fa0 RCX: 00007f43b139c799 [ 1108.018642][ T3896] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1108.018652][ T3896] RBP: 00007f43b1432bd9 R08: 0000000000000002 R09: 0000000000008000 [ 1108.018661][ T3896] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1108.018670][ T3896] R13: 00007f43b1616038 R14: 00007f43b1615fa0 R15: 00007ffd8e370868 [ 1108.018692][ T3896] [ 1108.824148][ T3897] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5168'. [ 1109.091653][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1109.496903][ T3907] FAULT_INJECTION: forcing a failure. [ 1109.496903][ T3907] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.576574][ T3907] CPU: 0 UID: 0 PID: 3907 Comm: syz.2.5170 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1109.576602][ T3907] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1109.576607][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.576617][ T3907] Call Trace: [ 1109.576622][ T3907] [ 1109.576628][ T3907] dump_stack_lvl+0x100/0x190 [ 1109.576656][ T3907] should_fail_ex.cold+0x5/0xa [ 1109.576680][ T3907] should_failslab+0xc2/0x120 [ 1109.576696][ T3907] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1109.576715][ T3907] ? system_heap_allocate+0xeb/0x1170 [ 1109.576739][ T3907] system_heap_allocate+0xeb/0x1170 [ 1109.576758][ T3907] ? irqentry_exit+0x180/0x670 [ 1109.576776][ T3907] ? lockdep_hardirqs_on+0x78/0x100 [ 1109.576795][ T3907] ? __pfx_system_heap_allocate+0x10/0x10 [ 1109.576820][ T3907] ? rep_movs_alternative+0x4a/0x90 [ 1109.576844][ T3907] dma_heap_ioctl+0x37f/0x5e0 [ 1109.576864][ T3907] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1109.576881][ T3907] ? find_held_lock+0x2b/0x80 [ 1109.576903][ T3907] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1109.576922][ T3907] __x64_sys_ioctl+0x18e/0x210 [ 1109.576943][ T3907] do_syscall_64+0x106/0xf80 [ 1109.576960][ T3907] ? clear_bhb_loop+0x40/0x90 [ 1109.576977][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.576992][ T3907] RIP: 0033:0x7fb033b9c799 [ 1109.577005][ T3907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.577018][ T3907] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.577033][ T3907] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1109.577042][ T3907] RDX: 0000200000000440 RSI: ffffffff5fdffe00 RDI: 0000000000000003 [ 1109.577051][ T3907] RBP: 00007fb034a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.577060][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.577068][ T3907] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1109.577087][ T3907] [ 1112.431230][T25804] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 927 with max blocks 1 with error 117 [ 1112.503330][T25804] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1112.503330][T25804] [ 1112.563475][T25804] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 926 with max blocks 1 with error 117 [ 1112.622600][T25804] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1112.622600][T25804] [ 1112.847289][T25317] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 926 with max blocks 1 with error 117 [ 1112.919406][T25317] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1112.919406][T25317] [ 1112.953241][ T3955] FAULT_INJECTION: forcing a failure. [ 1112.953241][ T3955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1113.076260][ T3955] CPU: 0 UID: 0 PID: 3955 Comm: syz.2.5181 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1113.076287][ T3955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1113.076292][ T3955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.076302][ T3955] Call Trace: [ 1113.076308][ T3955] [ 1113.076320][ T3955] dump_stack_lvl+0x100/0x190 [ 1113.076348][ T3955] should_fail_ex.cold+0x5/0xa [ 1113.076363][ T3955] ? prepare_alloc_pages+0x16d/0x5f0 [ 1113.076381][ T3955] should_fail_alloc_page+0xeb/0x140 [ 1113.076397][ T3955] prepare_alloc_pages+0x1f0/0x5f0 [ 1113.076413][ T3955] ? arch_stack_walk+0xa6/0xf0 [ 1113.076429][ T3955] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1113.076454][ T3955] ? stack_trace_save+0x8e/0xc0 [ 1113.076468][ T3955] ? __pfx_stack_trace_save+0x10/0x10 [ 1113.076482][ T3955] ? stack_depot_save_flags+0x27/0x9d0 [ 1113.076500][ T3955] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1113.076520][ T3955] ? kasan_save_stack+0x3f/0x50 [ 1113.076540][ T3955] ? kasan_save_stack+0x30/0x50 [ 1113.076560][ T3955] ? kasan_save_track+0x14/0x30 [ 1113.076579][ T3955] ? system_heap_allocate+0xeb/0x1170 [ 1113.076599][ T3955] ? __x64_sys_ioctl+0x18e/0x210 [ 1113.076618][ T3955] ? do_syscall_64+0x106/0xf80 [ 1113.076635][ T3955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.076658][ T3955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1113.076682][ T3955] ? policy_nodemask+0xed/0x4f0 [ 1113.076699][ T3955] alloc_pages_mpol+0x1fb/0x550 [ 1113.076714][ T3955] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1113.076731][ T3955] ? lockdep_init_map_type+0x5c/0x250 [ 1113.076752][ T3955] alloc_pages_noprof+0x131/0x390 [ 1113.076767][ T3955] system_heap_allocate+0x2d2/0x1170 [ 1113.076792][ T3955] ? __pfx_system_heap_allocate+0x10/0x10 [ 1113.076817][ T3955] ? rep_movs_alternative+0x4a/0x90 [ 1113.076841][ T3955] dma_heap_ioctl+0x37f/0x5e0 [ 1113.076861][ T3955] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1113.076878][ T3955] ? find_held_lock+0x2b/0x80 [ 1113.076899][ T3955] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1113.076918][ T3955] __x64_sys_ioctl+0x18e/0x210 [ 1113.076939][ T3955] do_syscall_64+0x106/0xf80 [ 1113.076955][ T3955] ? clear_bhb_loop+0x40/0x90 [ 1113.076972][ T3955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.076987][ T3955] RIP: 0033:0x7fb033b9c799 [ 1113.076999][ T3955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.077014][ T3955] RSP: 002b:00007fb034a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.077028][ T3955] RAX: ffffffffffffffda RBX: 00007fb033e15fa0 RCX: 00007fb033b9c799 [ 1113.077038][ T3955] RDX: 0000200000000440 RSI: ffffffff5fdffe00 RDI: 0000000000000003 [ 1113.077047][ T3955] RBP: 00007fb034a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.077056][ T3955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.077064][ T3955] R13: 00007fb033e16038 R14: 00007fb033e15fa0 R15: 00007ffeda567e78 [ 1113.077083][ T3955] [ 1114.034923][ T3968] nla_validate_range_unsigned: 2 callbacks suppressed [ 1114.034939][ T3968] netlink: 'syz.1.5184': attribute type 11 has an invalid length. [ 1114.062794][ T3968] netlink: 'syz.1.5184': attribute type 11 has an invalid length. [ 1114.079477][ T3968] netlink: 'syz.1.5184': attribute type 11 has an invalid length. [ 1114.096302][ T3968] netlink: 'syz.1.5184': attribute type 11 has an invalid length. [ 1116.109272][T25804] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 927 with max blocks 1 with error 117 [ 1116.109383][T25804] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1116.109383][T25804] [ 1116.123274][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.123314][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.168027][T25365] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 924 with max blocks 4 with error 117 [ 1116.168053][T25365] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1116.168053][T25365] [ 1116.231066][ T4000] phram: not enough arguments [ 1116.365875][ T4000] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1117.527815][ T4013] FAULT_INJECTION: forcing a failure. [ 1117.527815][ T4013] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.608528][ T4013] CPU: 0 UID: 0 PID: 4013 Comm: syz.1.5195 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1117.608556][ T4013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1117.608561][ T4013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.608570][ T4013] Call Trace: [ 1117.608576][ T4013] [ 1117.608582][ T4013] dump_stack_lvl+0x100/0x190 [ 1117.608609][ T4013] should_fail_ex.cold+0x5/0xa [ 1117.608626][ T4013] ? sg_kmalloc+0x35/0x70 [ 1117.608643][ T4013] should_failslab+0xc2/0x120 [ 1117.608658][ T4013] __kmalloc_noprof+0xe0/0x850 [ 1117.608679][ T4013] ? policy_nodemask+0xed/0x4f0 [ 1117.608696][ T4013] sg_kmalloc+0x35/0x70 [ 1117.608713][ T4013] __sg_alloc_table+0x31c/0x490 [ 1117.608736][ T4013] sg_alloc_table+0x37/0x1c0 [ 1117.608754][ T4013] ? __pfx_sg_kmalloc+0x10/0x10 [ 1117.608772][ T4013] system_heap_allocate+0x79c/0x1170 [ 1117.608798][ T4013] ? __pfx_system_heap_allocate+0x10/0x10 [ 1117.608823][ T4013] ? rep_movs_alternative+0x4a/0x90 [ 1117.608848][ T4013] dma_heap_ioctl+0x37f/0x5e0 [ 1117.608869][ T4013] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1117.608891][ T4013] ? find_held_lock+0x2b/0x80 [ 1117.608915][ T4013] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1117.608934][ T4013] __x64_sys_ioctl+0x18e/0x210 [ 1117.608955][ T4013] do_syscall_64+0x106/0xf80 [ 1117.608971][ T4013] ? clear_bhb_loop+0x40/0x90 [ 1117.608989][ T4013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.609004][ T4013] RIP: 0033:0x7f964339c799 [ 1117.609017][ T4013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.609032][ T4013] RSP: 002b:00007f9644255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.609046][ T4013] RAX: ffffffffffffffda RBX: 00007f9643615fa0 RCX: 00007f964339c799 [ 1117.609056][ T4013] RDX: 0000200000000440 RSI: ffffffff5fdffe00 RDI: 0000000000000003 [ 1117.609065][ T4013] RBP: 00007f9644255090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.609073][ T4013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.609081][ T4013] R13: 00007f9643616038 R14: 00007f9643615fa0 R15: 00007ffe03aa2578 [ 1117.609100][ T4013] [ 1118.180511][ T4019] netlink: 'syz.1.5197': attribute type 11 has an invalid length. [ 1118.206937][ T4019] netlink: 'syz.1.5197': attribute type 11 has an invalid length. [ 1118.251103][ T4019] netlink: 'syz.1.5197': attribute type 11 has an invalid length. [ 1118.275386][T25319] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.288903][ T4019] netlink: 'syz.1.5197': attribute type 11 has an invalid length. [ 1120.848873][ T4076] NFSD: Failed to start, no listeners configured. [ 1121.429676][ T4088] FAULT_INJECTION: forcing a failure. [ 1121.429676][ T4088] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.663712][ T4088] CPU: 0 UID: 0 PID: 4088 Comm: syz.0.5215 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1121.663741][ T4088] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1121.663747][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.663757][ T4088] Call Trace: [ 1121.663763][ T4088] [ 1121.663769][ T4088] dump_stack_lvl+0x100/0x190 [ 1121.663797][ T4088] should_fail_ex.cold+0x5/0xa [ 1121.663818][ T4088] should_failslab+0xc2/0x120 [ 1121.663834][ T4088] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1121.663853][ T4088] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1121.663961][ T4088] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 1121.663981][ T4088] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1121.664000][ T4088] vidtv_channel_si_init+0x1289/0x18d0 [ 1121.664025][ T4088] vidtv_mux_init+0x526/0xbf0 [ 1121.664047][ T4088] vidtv_start_feed+0x33e/0x4c0 [ 1121.664095][ T4088] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1121.664118][ T4088] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1121.664146][ T4088] ? mark_held_locks+0x40/0x70 [ 1121.664168][ T4088] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1121.664190][ T4088] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1121.664245][ T4088] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1121.664290][ T4088] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1121.664315][ T4088] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1121.664339][ T4088] dvb_demux_do_ioctl+0xe64/0x1200 [ 1121.664368][ T4088] dvb_usercopy+0x167/0x340 [ 1121.664387][ T4088] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1121.664410][ T4088] ? __pfx_dvb_usercopy+0x10/0x10 [ 1121.664438][ T4088] ? __fget_files+0x21f/0x3d0 [ 1121.664456][ T4088] dvb_demux_ioctl+0x29/0x40 [ 1121.664483][ T4088] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1121.664504][ T4088] __x64_sys_ioctl+0x18e/0x210 [ 1121.664527][ T4088] do_syscall_64+0x106/0xf80 [ 1121.664545][ T4088] ? clear_bhb_loop+0x40/0x90 [ 1121.664564][ T4088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.664580][ T4088] RIP: 0033:0x7fe3a8d9c799 [ 1121.664594][ T4088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.664609][ T4088] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.664624][ T4088] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1121.664635][ T4088] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1121.664644][ T4088] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1121.664654][ T4088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.664662][ T4088] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1121.664687][ T4088] [ 1122.194932][ T4088] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1122.206872][ T4088] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1122.215275][ T4088] CPU: 0 UID: 0 PID: 4088 Comm: syz.0.5215 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1122.226113][ T4088] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1122.231285][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1122.241318][ T4088] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 1122.247200][ T4088] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 8d 24 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 69 24 dc f9 4d 85 e4 [ 1122.266793][ T4088] RSP: 0018:ffffc90004847a10 EFLAGS: 00010247 [ 1122.272846][ T4088] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000ee81000 [ 1122.280796][ T4088] RDX: 0000000000000000 RSI: ffffffff882beb13 RDI: 0000000000000005 [ 1122.288747][ T4088] RBP: ffff8880363bf140 R08: 0000000000000000 R09: 4453534204050000 [ 1122.296702][ T4088] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1122.304655][ T4088] R13: ffff88804a6d39c0 R14: ffff888022ec3760 R15: ffff88804a6d3000 [ 1122.312606][ T4088] FS: 00007fe3a9c916c0(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 1122.321517][ T4088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.328083][ T4088] CR2: 0000001b2fc24220 CR3: 000000007876e000 CR4: 00000000003526f0 [ 1122.336040][ T4088] Call Trace: [ 1122.339305][ T4088] [ 1122.342224][ T4088] vidtv_channel_si_init+0x12fc/0x18d0 [ 1122.347677][ T4088] vidtv_mux_init+0x526/0xbf0 [ 1122.352342][ T4088] vidtv_start_feed+0x33e/0x4c0 [ 1122.357182][ T4088] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1122.362540][ T4088] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1122.369121][ T4088] ? mark_held_locks+0x40/0x70 [ 1122.373871][ T4088] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1122.379229][ T4088] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1122.384933][ T4088] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1122.390210][ T4088] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1122.395655][ T4088] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1122.400840][ T4088] dvb_demux_do_ioctl+0xe64/0x1200 [ 1122.405942][ T4088] dvb_usercopy+0x167/0x340 [ 1122.410429][ T4088] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1122.415966][ T4088] ? __pfx_dvb_usercopy+0x10/0x10 [ 1122.420978][ T4088] ? __fget_files+0x21f/0x3d0 [ 1122.425636][ T4088] dvb_demux_ioctl+0x29/0x40 [ 1122.430213][ T4088] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1122.435483][ T4088] __x64_sys_ioctl+0x18e/0x210 [ 1122.440233][ T4088] do_syscall_64+0x106/0xf80 [ 1122.444804][ T4088] ? clear_bhb_loop+0x40/0x90 [ 1122.449468][ T4088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.455341][ T4088] RIP: 0033:0x7fe3a8d9c799 [ 1122.459738][ T4088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.479325][ T4088] RSP: 002b:00007fe3a9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.487716][ T4088] RAX: ffffffffffffffda RBX: 00007fe3a9015fa0 RCX: 00007fe3a8d9c799 [ 1122.495665][ T4088] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1122.503615][ T4088] RBP: 00007fe3a8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1122.511563][ T4088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.519513][ T4088] R13: 00007fe3a9016038 R14: 00007fe3a9015fa0 R15: 00007ffc4c87d3c8 [ 1122.527469][ T4088] [ 1122.530467][ T4088] Modules linked in: [ 1122.535291][ T4088] ---[ end trace 0000000000000000 ]--- [ 1122.673102][T25515] EXT4-fs: 6 callbacks suppressed [ 1122.673114][T25515] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1332 with max blocks 56 with error 117 [ 1122.694281][T25515] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1122.694281][T25515] [ 1122.781633][T25365] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1330 with max blocks 3 with error 117 [ 1122.823350][T25365] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1122.823350][T25365] [ 1122.854687][T25365] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1329 with max blocks 1 with error 117 [ 1122.894729][T25365] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1122.894729][T25365] [ 1123.851853][ T4088] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 1123.857813][ T4088] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 8d 24 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 69 24 dc f9 4d 85 e4 [ 1123.879016][ T4088] RSP: 0018:ffffc90004847a10 EFLAGS: 00010247 [ 1123.885310][ T4088] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000ee81000 [ 1123.894833][ T4088] RDX: 0000000000000000 RSI: ffffffff882beb13 RDI: 0000000000000005 [ 1123.903061][ T4088] RBP: ffff8880363bf140 R08: 0000000000000000 R09: 4453534204050000 [ 1123.911069][ T4088] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1123.919313][ T4088] R13: ffff88804a6d39c0 R14: ffff888022ec3760 R15: ffff88804a6d3000 [ 1123.927439][ T4088] FS: 00007fe3a9c916c0(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 1123.937146][ T4088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1123.943884][ T4088] CR2: 00007f43b15e82f8 CR3: 000000007876e000 CR4: 00000000003526f0 [ 1123.952523][ T4088] Kernel panic - not syncing: Fatal exception [ 1123.958635][ T4088] Kernel Offset: disabled [ 1123.962940][ T4088] Rebooting in 86400 seconds..