last executing test programs: 3m12.121568409s ago: executing program 3 (id=519): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25010000100c0006001000"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) r0 = socket(0xa, 0x1, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x6f7250c4) 3m11.584064559s ago: executing program 3 (id=523): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3m10.985065121s ago: executing program 3 (id=530): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x0, 0x6, 0x2, 0x3, 0x7fffffffb000) 3m10.609556466s ago: executing program 3 (id=539): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r0 = epoll_create$auto(0x8) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 3m10.416818996s ago: executing program 3 (id=534): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) 3m10.067431258s ago: executing program 3 (id=537): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) pread64$auto(r0, 0x0, 0x100000001, 0x100) 2m54.947796263s ago: executing program 32 (id=537): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) pread64$auto(r0, 0x0, 0x100000001, 0x100) 2m48.609980888s ago: executing program 0 (id=633): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000200)=@bpf_attr_4={0x1e, r0, 0x5}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) 2m48.412386788s ago: executing program 0 (id=627): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r0, 0x0) 2m47.721763154s ago: executing program 0 (id=640): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setuid$auto(0xee00) 2m46.408955066s ago: executing program 0 (id=642): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2m44.211303787s ago: executing program 0 (id=651): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r0, 0x0, 0x400) 2m44.0165042s ago: executing program 0 (id=653): mmap$auto(0x0, 0x9, 0x7fffffffffffffff, 0x3332, 0x8d73, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x8001, 0x0) fstat$auto(r0, 0x0) ioctl$auto(r2, 0x5393, r1) 2m28.883067667s ago: executing program 33 (id=653): mmap$auto(0x0, 0x9, 0x7fffffffffffffff, 0x3332, 0x8d73, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x8001, 0x0) fstat$auto(r0, 0x0) ioctl$auto(r2, 0x5393, r1) 2m15.971573972s ago: executing program 2 (id=821): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) 2m15.830398126s ago: executing program 2 (id=822): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) lchown$auto(&(0x7f00000001c0)='&&\x00', 0x0, 0x0) 2m14.514500558s ago: executing program 2 (id=827): sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 2m13.978860863s ago: executing program 2 (id=831): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61", 0x91) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto_BLKPG(r0, 0x1269, 0x300) 2m13.520912013s ago: executing program 2 (id=833): mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000240)='nfsd\x00', 0x10400, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) getdents$auto(r0, 0x0, 0x62d4) 2m13.211777671s ago: executing program 2 (id=835): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) umask$auto(0x6) 1m57.884877737s ago: executing program 34 (id=835): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) umask$auto(0x6) 55.264639724s ago: executing program 1 (id=1333): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 54.08833912s ago: executing program 1 (id=1346): io_uring_setup$auto(0x401, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84841, 0x0) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) ioctl$auto(r0, 0x8912, 0x24) 52.955122862s ago: executing program 1 (id=1341): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) 52.70850363s ago: executing program 1 (id=1343): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:6/strict_limit\x00', 0x0, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(r0, 0x0, 0x9) 52.58115441s ago: executing program 1 (id=1347): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r1, 0x0, 0x400) 52.449107275s ago: executing program 1 (id=1349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) r0 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x101}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 37.148879822s ago: executing program 35 (id=1349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) r0 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x101}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 4.540209187s ago: executing program 5 (id=1687): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r0) 4.274362531s ago: executing program 4 (id=1683): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x0, 0x29f, 0x100, 0x7f, 0xffffffff, 0x6, 0x2}, {0x8000100, 0x1, 0x8000052, 0x5, 0x1, 0x40, 0x76c5, 0x9a, 0x100000000}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x9, 0x0, 0x18) 4.165778086s ago: executing program 4 (id=1684): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x800000c8c1, 0x9, 0x6, 0x0, 0xb, 0x6, 0x5, 0xa, 0x5, 0x200cf, 0x45, 0x10c, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.372997735s ago: executing program 5 (id=1694): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram10\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) 3.152365536s ago: executing program 4 (id=1689): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f41, 0xffffffffffffffff) 3.007754682s ago: executing program 4 (id=1692): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x241, 0x2, 0x6}]}) 2.481865223s ago: executing program 4 (id=1696): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) set_robust_list$auto(0x0, 0x18) mknodat$auto(0xffffffffffffffff, 0x0, 0x0, 0x5) 2.364276131s ago: executing program 5 (id=1697): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x50001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) 2.004203735s ago: executing program 5 (id=1700): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.830629623s ago: executing program 7 (id=1702): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x3ff) 1.664533325s ago: executing program 6 (id=1703): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_cgname\x00', 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) 1.664315845s ago: executing program 7 (id=1704): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_nsim_pp_hold_fops_netdev(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x8) 1.561218224s ago: executing program 6 (id=1705): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 1.242289707s ago: executing program 6 (id=1706): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0x40000080) setreuid$auto(0x3, 0x7) lsm_list_modules$auto(0x0, 0xfffffffffffffffd, 0x0) ioctl$auto(r0, 0x4b64, r1) 901.003473ms ago: executing program 5 (id=1707): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 900.617556ms ago: executing program 7 (id=1708): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) 688.721659ms ago: executing program 5 (id=1709): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) 687.00903ms ago: executing program 6 (id=1710): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) setfsuid$auto(0xee00) 499.349346ms ago: executing program 7 (id=1711): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) umount2$auto(&(0x7f0000000040)='/proc/\x00\x18s/fs/bin\xe6mt_\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x05\xac\xb4\x896\xd3\xe1|\x82\xa1\x7fB\x18|T\x9ev\x15\xdcEM*\t\x91\xbbb\xc9X\xee<\xc4T\xc2dRw\xb6*A\x97\xf6\xf8\xeb\a\xf9\x06\x13\xdf)0\xef\xec\x1c\xc4\xf3\x02\xdf\xeea\x95>O\xa5\x03', 0x8) 450.05351ms ago: executing program 4 (id=1712): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x7, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f2, 0x24) 357.737808ms ago: executing program 7 (id=1713): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x800}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008010) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14080000", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 182.113522ms ago: executing program 6 (id=1714): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x1) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf4, 0xb0, @raw=0xfffff024}}) write$auto(r0, 0x0, 0x6) 629.254µs ago: executing program 6 (id=1715): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_nsim_pp_hold_fops_netdev(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x8) 0s ago: executing program 7 (id=1723): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x40881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) kernel console output (not intermixed with test programs): 444][ T7034] ? __pfx_filemap_map_pages+0x10/0x10 [ 151.319489][ T7034] __vmf_anon_prepare+0x11f/0x250 [ 151.319530][ T7034] do_fault+0x152/0x18e0 [ 151.319566][ T7034] ? __pmd_alloc+0x3fb/0x950 [ 151.319606][ T7034] __handle_mm_fault+0x1815/0x2b60 [ 151.319654][ T7034] ? mt_find+0x45e/0x8e0 [ 151.319690][ T7034] ? __pfx___handle_mm_fault+0x10/0x10 [ 151.319732][ T7034] ? __pfx_mt_find+0x10/0x10 [ 151.319798][ T7034] handle_mm_fault+0x36d/0xa20 [ 151.319849][ T7034] __get_user_pages+0xf9c/0x34d0 [ 151.319901][ T7034] ? __pfx___get_user_pages+0x10/0x10 [ 151.319970][ T7034] populate_vma_page_range+0x267/0x3f0 [ 151.320016][ T7034] ? __pfx_populate_vma_page_range+0x10/0x10 [ 151.320058][ T7034] ? __pfx_find_vma_intersection+0x10/0x10 [ 151.320107][ T7034] ? do_mmap+0x93f/0x12f0 [ 151.320152][ T7034] __mm_populate+0x107/0x3a0 [ 151.320198][ T7034] ? __pfx___mm_populate+0x10/0x10 [ 151.320244][ T7034] ? up_write+0x290/0x4f0 [ 151.320302][ T7034] vm_mmap_pgoff+0x37f/0x470 [ 151.320348][ T7034] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 151.320387][ T7034] ? __fget_files+0x215/0x3d0 [ 151.320429][ T7034] ? __fget_files+0x21f/0x3d0 [ 151.320472][ T7034] ksys_mmap_pgoff+0x3c8/0x650 [ 151.320511][ T7034] ? __x64_sys_futex+0x34f/0x4d0 [ 151.320556][ T7034] ? __x64_sys_futex+0x358/0x4d0 [ 151.320604][ T7034] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 151.320642][ T7034] ? xfd_validate_state+0x129/0x190 [ 151.320702][ T7034] __x64_sys_mmap+0x125/0x190 [ 151.320759][ T7034] do_syscall_64+0x106/0xf80 [ 151.320792][ T7034] ? clear_bhb_loop+0x40/0x90 [ 151.320835][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.320869][ T7034] RIP: 0033:0x7ff3c019c819 [ 151.320897][ T7034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.320929][ T7034] RSP: 002b:00007ff3c0fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 151.320961][ T7034] RAX: ffffffffffffffda RBX: 00007ff3c0415fa0 RCX: 00007ff3c019c819 [ 151.320983][ T7034] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 151.321002][ T7034] RBP: 00007ff3c0232c91 R08: 0000000000000003 R09: 0000000000008000 [ 151.321022][ T7034] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 151.321042][ T7034] R13: 00007ff3c0416038 R14: 00007ff3c0415fa0 R15: 00007ffd4fe0b498 [ 151.321109][ T7034] [ 151.846407][ T7044] capability: warning: `syz.1.404' uses 32-bit capabilities (legacy support in use) [ 151.915394][ T7046] FAULT_INJECTION: forcing a failure. [ 151.915394][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 151.959907][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.3.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.959974][ T7046] Tainted: [L]=SOFTLOCKUP [ 151.959986][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.960005][ T7046] Call Trace: [ 151.960016][ T7046] [ 151.960028][ T7046] dump_stack_lvl+0x100/0x190 [ 151.960086][ T7046] should_fail_ex.cold+0x5/0xa [ 151.960125][ T7046] ? lsm_blob_alloc+0x68/0x90 [ 151.960176][ T7046] should_failslab+0xc2/0x120 [ 151.960216][ T7046] __kmalloc_noprof+0xe0/0x850 [ 151.960269][ T7046] ? trace_kmem_cache_alloc+0xf3/0x120 [ 151.960316][ T7046] lsm_blob_alloc+0x68/0x90 [ 151.960368][ T7046] security_prepare_creds+0x2d/0x290 [ 151.960419][ T7046] prepare_creds+0x5d6/0x950 [ 151.960475][ T7046] lookup_user_key+0x8e9/0x1300 [ 151.960522][ T7046] ? __pfx_lookup_user_key+0x10/0x10 [ 151.960562][ T7046] ? do_futex+0x192/0x350 [ 151.960607][ T7046] ? __pfx_do_futex+0x10/0x10 [ 151.960654][ T7046] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 151.960700][ T7046] ? __x64_sys_futex+0x34f/0x4d0 [ 151.960742][ T7046] ? __x64_sys_futex+0x358/0x4d0 [ 151.960797][ T7046] keyctl_watch_key+0x52/0x500 [ 151.960846][ T7046] __do_sys_keyctl+0x29f/0x5a0 [ 151.960887][ T7046] do_syscall_64+0x106/0xf80 [ 151.960920][ T7046] ? clear_bhb_loop+0x40/0x90 [ 151.960961][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.960994][ T7046] RIP: 0033:0x7f6623d9c819 [ 151.961020][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.961051][ T7046] RSP: 002b:00007f6624cfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 151.961081][ T7046] RAX: ffffffffffffffda RBX: 00007f6624015fa0 RCX: 00007f6623d9c819 [ 151.961104][ T7046] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 151.961125][ T7046] RBP: 00007f6623e32c91 R08: 0000000000000008 R09: 0000000000000000 [ 151.961144][ T7046] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 151.961163][ T7046] R13: 00007f6624016038 R14: 00007f6624015fa0 R15: 00007ffd1fbed448 [ 151.961227][ T7046] [ 152.489586][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 152.508129][ T7061] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 153.195202][ T7078] netlink: 342 bytes leftover after parsing attributes in process `syz.1.418'. [ 154.398927][ T7107] FAULT_INJECTION: forcing a failure. [ 154.398927][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 154.411721][ T7107] CPU: 0 UID: 0 PID: 7107 Comm: syz.2.428 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.411772][ T7107] Tainted: [L]=SOFTLOCKUP [ 154.411784][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.411803][ T7107] Call Trace: [ 154.411834][ T7107] [ 154.411846][ T7107] dump_stack_lvl+0x100/0x190 [ 154.411905][ T7107] should_fail_ex.cold+0x5/0xa [ 154.411947][ T7107] ? sk_prot_alloc+0x10b/0x2a0 [ 154.411984][ T7107] should_failslab+0xc2/0x120 [ 154.412023][ T7107] __kmalloc_noprof+0xe0/0x850 [ 154.412085][ T7107] sk_prot_alloc+0x10b/0x2a0 [ 154.412128][ T7107] sk_alloc+0x36/0xe80 [ 154.412179][ T7107] caif_create+0x10b/0x430 [ 154.412236][ T7107] __sock_create+0x339/0x860 [ 154.412287][ T7107] __sys_socket+0x14d/0x260 [ 154.412333][ T7107] ? __pfx___sys_socket+0x10/0x10 [ 154.412390][ T7107] __x64_sys_socket+0x72/0xb0 [ 154.412432][ T7107] ? lockdep_hardirqs_on+0x78/0x100 [ 154.412466][ T7107] do_syscall_64+0x106/0xf80 [ 154.412499][ T7107] ? clear_bhb_loop+0x40/0x90 [ 154.412542][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.412576][ T7107] RIP: 0033:0x7fc3b5f9c819 [ 154.412604][ T7107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.412636][ T7107] RSP: 002b:00007fc3b6ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 154.412677][ T7107] RAX: ffffffffffffffda RBX: 00007fc3b6215fa0 RCX: 00007fc3b5f9c819 [ 154.412699][ T7107] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 154.412718][ T7107] RBP: 00007fc3b6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 154.412739][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.412758][ T7107] R13: 00007fc3b6216038 R14: 00007fc3b6215fa0 R15: 00007ffe1030fc08 [ 154.412803][ T7107] [ 154.873925][ T7116] size and base must be multiples of 4 kiB [ 154.904409][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.1.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.904460][ T7116] Tainted: [L]=SOFTLOCKUP [ 154.904471][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.904490][ T7116] Call Trace: [ 154.904500][ T7116] [ 154.904512][ T7116] dump_stack_lvl+0x100/0x190 [ 154.904568][ T7116] mtrr_del.cold+0x72/0x85 [ 154.904605][ T7116] mtrr_ioctl+0xbc8/0xcf0 [ 154.904663][ T7116] ? __pfx_mtrr_ioctl+0x10/0x10 [ 154.904716][ T7116] ? find_held_lock+0x2b/0x80 [ 154.904760][ T7116] ? __fget_files+0x21f/0x3d0 [ 154.904796][ T7116] ? __pfx_mtrr_ioctl+0x10/0x10 [ 154.904841][ T7116] proc_reg_unlocked_ioctl+0x229/0x320 [ 154.904893][ T7116] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 154.904950][ T7116] __x64_sys_ioctl+0x18e/0x210 [ 154.905004][ T7116] do_syscall_64+0x106/0xf80 [ 154.905037][ T7116] ? clear_bhb_loop+0x40/0x90 [ 154.905078][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.905112][ T7116] RIP: 0033:0x7ff3c019c819 [ 154.905138][ T7116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.905168][ T7116] RSP: 002b:00007ff3c0fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.905199][ T7116] RAX: ffffffffffffffda RBX: 00007ff3c0415fa0 RCX: 00007ff3c019c819 [ 154.905220][ T7116] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 154.905240][ T7116] RBP: 00007ff3c0232c91 R08: 0000000000000000 R09: 0000000000000000 [ 154.905260][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.905279][ T7116] R13: 00007ff3c0416038 R14: 00007ff3c0415fa0 R15: 00007ffd4fe0b498 [ 154.905321][ T7116] [ 155.747598][ T7141] FAULT_INJECTION: forcing a failure. [ 155.747598][ T7141] name fail_futex, interval 1, probability 0, space 0, times 1 [ 155.782428][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.0.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.782482][ T7141] Tainted: [L]=SOFTLOCKUP [ 155.782494][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.782512][ T7141] Call Trace: [ 155.782522][ T7141] [ 155.782534][ T7141] dump_stack_lvl+0x100/0x190 [ 155.782602][ T7141] should_fail_ex.cold+0x5/0xa [ 155.782642][ T7141] get_futex_key+0x1d2/0x1620 [ 155.782687][ T7141] ? __pfx_get_futex_key+0x10/0x10 [ 155.782729][ T7141] ? is_bpf_text_address+0x94/0x1a0 [ 155.782781][ T7141] ? kernel_text_address+0x8d/0x100 [ 155.782833][ T7141] ? __kernel_text_address+0xd/0x30 [ 155.782883][ T7141] ? unwind_get_return_address+0x59/0xa0 [ 155.782923][ T7141] futex_wait_setup+0x83/0x510 [ 155.782986][ T7141] __futex_wait+0x19f/0x300 [ 155.783043][ T7141] ? __pfx___futex_wait+0x10/0x10 [ 155.783101][ T7141] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.783157][ T7141] ? futex_hash+0x2c5/0x380 [ 155.783209][ T7141] futex_wait+0xed/0x380 [ 155.783262][ T7141] ? __pfx_futex_wait+0x10/0x10 [ 155.783311][ T7141] ? find_held_lock+0x2b/0x80 [ 155.783356][ T7141] ? __lock_acquire+0x4a5/0x2630 [ 155.783404][ T7141] do_futex+0x1ef/0x350 [ 155.783450][ T7141] ? __pfx_do_futex+0x10/0x10 [ 155.783511][ T7141] __x64_sys_futex+0x34f/0x4d0 [ 155.783569][ T7141] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.783632][ T7141] do_syscall_64+0x106/0xf80 [ 155.783664][ T7141] ? clear_bhb_loop+0x40/0x90 [ 155.783704][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.783738][ T7141] RIP: 0033:0x7f747939c819 [ 155.783765][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.783796][ T7141] RSP: 002b:00007f747a1950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.783829][ T7141] RAX: ffffffffffffffda RBX: 00007f7479615fa8 RCX: 00007f747939c819 [ 155.783850][ T7141] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7479615fa8 [ 155.783870][ T7141] RBP: 00007f7479615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 155.783889][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.783908][ T7141] R13: 00007f7479616038 R14: 00007ffef0416440 R15: 00007ffef0416528 [ 155.783951][ T7141] [ 156.873742][ T7155] netlink: 326 bytes leftover after parsing attributes in process `syz.3.444'. [ 158.568088][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 158.744020][ T7193] sctp: [Deprecated]: syz.1.457 (pid 7193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.744020][ T7193] Use struct sctp_sack_info instead [ 158.861787][ T7199] netlink: 74 bytes leftover after parsing attributes in process `syz.0.460'. [ 158.963055][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 159.383834][ T7215] netlink: 350 bytes leftover after parsing attributes in process `syz.2.466'. [ 159.521229][ T7217] netlink: 326 bytes leftover after parsing attributes in process `syz.2.467'. [ 160.265779][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 160.465549][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 160.776619][ T7246] FAULT_INJECTION: forcing a failure. [ 160.776619][ T7246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.790646][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.790700][ T7246] Tainted: [L]=SOFTLOCKUP [ 160.790712][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.790732][ T7246] Call Trace: [ 160.790742][ T7246] [ 160.790755][ T7246] dump_stack_lvl+0x100/0x190 [ 160.790816][ T7246] should_fail_ex.cold+0x5/0xa [ 160.790852][ T7246] ? prepare_alloc_pages+0x16d/0x5f0 [ 160.790898][ T7246] should_fail_alloc_page+0xeb/0x140 [ 160.790939][ T7246] prepare_alloc_pages+0x1f0/0x5f0 [ 160.790988][ T7246] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 160.791044][ T7246] ? __print_lock_name+0x61/0x80 [ 160.791079][ T7246] ? is_bpf_text_address+0x8a/0x1a0 [ 160.791135][ T7246] ? is_bpf_text_address+0x8a/0x1a0 [ 160.791195][ T7246] ? bpf_ksym_find+0x124/0x1c0 [ 160.791319][ T7246] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.791361][ T7246] ? is_bpf_text_address+0x94/0x1a0 [ 160.791414][ T7246] ? kernel_text_address+0x8d/0x100 [ 160.791467][ T7246] ? __kernel_text_address+0xd/0x30 [ 160.791517][ T7246] ? unwind_get_return_address+0x59/0xa0 [ 160.791556][ T7246] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.791631][ T7246] ? __pfx_stack_trace_save+0x10/0x10 [ 160.791667][ T7246] ? stack_depot_save_flags+0x27/0x9d0 [ 160.791714][ T7246] ? stack_trace_save+0x8e/0xc0 [ 160.791750][ T7246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.791788][ T7246] ? policy_nodemask+0xed/0x4f0 [ 160.791830][ T7246] alloc_pages_mpol+0x1fb/0x550 [ 160.791878][ T7246] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 160.791930][ T7246] alloc_pages_noprof+0x136/0x390 [ 160.791972][ T7246] kimage_alloc_pages+0x72/0x380 [ 160.792013][ T7246] kimage_alloc_control_pages+0x157/0xa20 [ 160.792062][ T7246] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 160.792113][ T7246] do_kexec_load+0x275/0x810 [ 160.792155][ T7246] ? __pfx_do_kexec_load+0x10/0x10 [ 160.792217][ T7246] ? _copy_from_user+0x59/0xd0 [ 160.792266][ T7246] __x64_sys_kexec_load+0x1bf/0x230 [ 160.792311][ T7246] do_syscall_64+0x106/0xf80 [ 160.792345][ T7246] ? clear_bhb_loop+0x40/0x90 [ 160.792387][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.792422][ T7246] RIP: 0033:0x7fc3b5f9c819 [ 160.792450][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.792482][ T7246] RSP: 002b:00007fc3b6ef3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 160.792515][ T7246] RAX: ffffffffffffffda RBX: 00007fc3b6215fa0 RCX: 00007fc3b5f9c819 [ 160.792537][ T7246] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000001 [ 160.792556][ T7246] RBP: 00007fc3b6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 160.792577][ T7246] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 160.792596][ T7246] R13: 00007fc3b6216038 R14: 00007fc3b6215fa0 R15: 00007ffe1030fc08 [ 160.792639][ T7246] [ 160.792897][ T7246] kexec: Could not allocate control_code_buffer [ 161.281418][ T7251] netlink: 302 bytes leftover after parsing attributes in process `syz.1.482'. [ 162.466036][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 162.761636][ T7281] FAULT_INJECTION: forcing a failure. [ 162.761636][ T7281] name failslab, interval 1, probability 0, space 0, times 0 [ 162.813155][ T7281] CPU: 1 UID: 0 PID: 7281 Comm: syz.0.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.813204][ T7281] Tainted: [L]=SOFTLOCKUP [ 162.813215][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.813232][ T7281] Call Trace: [ 162.813242][ T7281] [ 162.813253][ T7281] dump_stack_lvl+0x100/0x190 [ 162.813315][ T7281] should_fail_ex.cold+0x5/0xa [ 162.813353][ T7281] should_failslab+0xc2/0x120 [ 162.813389][ T7281] __kmalloc_cache_noprof+0x7a/0x6f0 [ 162.813432][ T7281] ? __vb2_init_fileio+0x18f/0x1000 [ 162.813472][ T7281] ? trace_contention_end+0x140/0x180 [ 162.813523][ T7281] __vb2_init_fileio+0x18f/0x1000 [ 162.813562][ T7281] ? vb2_fop_read+0xe5/0x520 [ 162.813595][ T7281] ? aa_file_perm+0x7f3/0x14d0 [ 162.813643][ T7281] ? lockdep_hardirqs_on+0x78/0x100 [ 162.813680][ T7281] __vb2_perform_fileio+0x91e/0x1380 [ 162.813732][ T7281] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 162.813774][ T7281] ? __pfx___might_resched+0x10/0x10 [ 162.813833][ T7281] vb2_fop_read+0x211/0x520 [ 162.813876][ T7281] v4l2_read+0x229/0x2c0 [ 162.813908][ T7281] ? __pfx_v4l2_read+0x10/0x10 [ 162.813943][ T7281] vfs_read+0x1e4/0xb30 [ 162.813979][ T7281] ? __pfx_vfs_read+0x10/0x10 [ 162.814005][ T7281] ? find_held_lock+0x2b/0x80 [ 162.814035][ T7281] ? __fget_files+0x215/0x3d0 [ 162.814066][ T7281] ? __fget_files+0x215/0x3d0 [ 162.814104][ T7281] ? __fget_files+0x21f/0x3d0 [ 162.814146][ T7281] ksys_read+0x12a/0x250 [ 162.814175][ T7281] ? __pfx_ksys_read+0x10/0x10 [ 162.814217][ T7281] do_syscall_64+0x106/0xf80 [ 162.814275][ T7281] ? clear_bhb_loop+0x40/0x90 [ 162.814318][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.814353][ T7281] RIP: 0033:0x7f747939c819 [ 162.814380][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.814428][ T7281] RSP: 002b:00007f747a195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.814459][ T7281] RAX: ffffffffffffffda RBX: 00007f7479615fa0 RCX: 00007f747939c819 [ 162.814481][ T7281] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 162.814501][ T7281] RBP: 00007f7479432c91 R08: 0000000000000000 R09: 0000000000000000 [ 162.814521][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.814540][ T7281] R13: 00007f7479616038 R14: 00007f7479615fa0 R15: 00007ffef0416528 [ 162.814583][ T7281] [ 163.220417][ T7286] dyndbg: bad flag-op 0, at start of 0x00060000 [ 163.255505][ T7286] dyndbg: flags parse failed [ 164.596121][ T7318] netlink: 342 bytes leftover after parsing attributes in process `syz.3.506'. [ 165.455723][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.511'. [ 166.160278][ T7350] netlink: 334 bytes leftover after parsing attributes in process `syz.2.527'. [ 166.629862][ T7361] netlink: 330 bytes leftover after parsing attributes in process `syz.2.521'. [ 167.227870][ T7380] FAULT_INJECTION: forcing a failure. [ 167.227870][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 167.244046][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.0.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.244099][ T7380] Tainted: [L]=SOFTLOCKUP [ 167.244111][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.244131][ T7380] Call Trace: [ 167.244141][ T7380] [ 167.244153][ T7380] dump_stack_lvl+0x100/0x190 [ 167.244211][ T7380] should_fail_ex.cold+0x5/0xa [ 167.244255][ T7380] should_failslab+0xc2/0x120 [ 167.244292][ T7380] __kmalloc_node_noprof+0xe6/0x850 [ 167.244343][ T7380] ? alloc_slab_obj_exts+0xae/0x260 [ 167.244397][ T7380] alloc_slab_obj_exts+0xae/0x260 [ 167.244449][ T7380] __memcg_slab_post_alloc_hook+0x246/0x990 [ 167.244498][ T7380] ? kasan_save_track+0x14/0x30 [ 167.244533][ T7380] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 167.244585][ T7380] ? mqueue_alloc_inode+0x25/0x50 [ 167.244621][ T7380] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 167.244655][ T7380] mqueue_alloc_inode+0x25/0x50 [ 167.244684][ T7380] alloc_inode+0x68/0x250 [ 167.244730][ T7380] new_inode+0x22/0x1c0 [ 167.244778][ T7380] mqueue_get_inode+0x2e/0xe00 [ 167.244830][ T7380] ? sget_fc+0x801/0xc70 [ 167.244884][ T7380] ? __pfx_mqueue_fill_super+0x10/0x10 [ 167.244935][ T7380] mqueue_fill_super+0x14d/0x260 [ 167.244987][ T7380] get_tree_nodev+0xdd/0x190 [ 167.245027][ T7380] mqueue_get_tree+0xf1/0x130 [ 167.245081][ T7380] vfs_get_tree+0x92/0x320 [ 167.245129][ T7380] fc_mount_longterm+0x1a/0x270 [ 167.245180][ T7380] mq_init_ns+0x482/0x820 [ 167.245219][ T7380] copy_ipcs+0x3dd/0x7e0 [ 167.245259][ T7380] create_new_namespaces+0x20a/0xac0 [ 167.245296][ T7380] ? security_capable+0x80/0x260 [ 167.245334][ T7380] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 167.245374][ T7380] ksys_unshare+0x473/0xad0 [ 167.245420][ T7380] ? __pfx_ksys_unshare+0x10/0x10 [ 167.245479][ T7380] __x64_sys_unshare+0x31/0x40 [ 167.245521][ T7380] do_syscall_64+0x106/0xf80 [ 167.245553][ T7380] ? clear_bhb_loop+0x40/0x90 [ 167.245593][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.245627][ T7380] RIP: 0033:0x7f747939c819 [ 167.245654][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.245685][ T7380] RSP: 002b:00007f747a195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.245716][ T7380] RAX: ffffffffffffffda RBX: 00007f7479615fa0 RCX: 00007f747939c819 [ 167.245737][ T7380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 167.245756][ T7380] RBP: 00007f7479432c91 R08: 0000000000000000 R09: 0000000000000000 [ 167.245775][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.245795][ T7380] R13: 00007f7479616038 R14: 00007f7479615fa0 R15: 00007ffef0416528 [ 167.245838][ T7380] [ 167.935122][ T7396] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 169.561689][ T7426] netlink: 'syz.0.546': attribute type 19 has an invalid length. [ 169.570172][ T7426] netlink: 334 bytes leftover after parsing attributes in process `syz.0.546'. [ 171.350166][ T7460] netlink: 342 bytes leftover after parsing attributes in process `syz.1.556'. [ 171.370784][ T7460] netlink: 342 bytes leftover after parsing attributes in process `syz.1.556'. [ 173.258091][ T7490] netlink: 342 bytes leftover after parsing attributes in process `syz.0.564'. [ 173.323232][ T7487] netlink: 342 bytes leftover after parsing attributes in process `syz.0.564'. [ 183.384753][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.393579][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.402035][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.410717][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.418660][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.584553][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 183.669153][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.676511][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.683702][ T7511] bridge_slave_0: entered allmulticast mode [ 183.692714][ T7511] bridge_slave_0: entered promiscuous mode [ 183.701787][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.709118][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.717045][ T7511] bridge_slave_1: entered allmulticast mode [ 183.726601][ T7511] bridge_slave_1: entered promiscuous mode [ 183.841709][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.878476][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.962700][ T7511] team0: Port device team_slave_0 added [ 183.975101][ T7511] team0: Port device team_slave_1 added [ 184.025518][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.032506][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.059314][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.071655][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.079972][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.106181][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.155083][ T7511] hsr_slave_0: entered promiscuous mode [ 184.161641][ T7511] hsr_slave_1: entered promiscuous mode [ 184.168062][ T7511] debugfs: 'hsr0' already exists in 'hsr' [ 184.173821][ T7511] Cannot create hsr debugfs directory [ 184.342785][ T7511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.353185][ T7511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.364543][ T7511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.375437][ T7511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.410215][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.417648][ T7511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.425312][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.432456][ T7511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.495876][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.514134][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.522236][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.541303][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.554310][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.561483][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.575829][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.582975][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.783335][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.030382][ T7511] veth0_vlan: entered promiscuous mode [ 185.043149][ T7511] veth1_vlan: entered promiscuous mode [ 185.073304][ T7511] veth0_macvtap: entered promiscuous mode [ 185.083129][ T7511] veth1_macvtap: entered promiscuous mode [ 185.106545][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.121617][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.137430][ T1137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.148526][ T1137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.160707][ T1137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.171032][ T1137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.242775][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.251260][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.286568][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.295060][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.474825][ T51] Bluetooth: hci4: command tx timeout [ 186.827922][ T7586] netlink: 342 bytes leftover after parsing attributes in process `syz.2.593'. [ 187.182284][ T7599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.555369][ T51] Bluetooth: hci4: command tx timeout [ 188.236455][ T7625] input: f¬ as /devices/virtual/input/input6 [ 188.981192][ T29] audit: type=1804 audit(1775311277.655:2): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.620" name=2F6E6577726F6F742F392F50524F46494C455F56455253494F4E3D32303135303530350A302D434F4D4D454E543D0A302D505245464552454E43453D7B206D61785F61756469745F6C6F673D3332206D61785F6C6561726E696E675F656E7472793D3634207D0A302D434F4E4649473D7B206D6F64653D6C6561726E696E67206772616E745F6C6F673D6E6F2072656A6563745F6C6F673D796573207D0A dev="tmpfs" ino=63 res=1 errno=0 [ 189.638352][ T51] Bluetooth: hci4: command tx timeout [ 191.714376][ T51] Bluetooth: hci4: command tx timeout [ 193.195253][ T7731] ubi0: attaching mtd0 [ 193.216935][ T7731] ubi0: scanning is finished [ 193.354462][ T7731] ubi0: empty MTD device detected [ 193.633663][ T7731] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 193.647510][ T7731] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 193.655137][ T7731] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 193.674332][ T7731] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 193.690301][ T7731] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 193.724511][ T7731] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 193.753792][ T7731] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3287845114 [ 193.804318][ T7731] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 193.898380][ T7732] ubi0: detaching mtd0 [ 193.999124][ T7732] ubi0: mtd0 is detached [ 194.360599][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367491][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.605347][ T7749] libceph: secret too big 125 [ 194.888950][ T7758] netlink: 334 bytes leftover after parsing attributes in process `syz.1.658'. [ 195.088648][ T7763] netlink: 342 bytes leftover after parsing attributes in process `syz.1.660'. [ 195.905179][ T7779] size and base must be multiples of 4 kiB [ 195.927089][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.2.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.927139][ T7779] Tainted: [L]=SOFTLOCKUP [ 195.927150][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 195.927179][ T7779] Call Trace: [ 195.927194][ T7779] [ 195.927206][ T7779] dump_stack_lvl+0x100/0x190 [ 195.927261][ T7779] mtrr_del.cold+0x72/0x85 [ 195.927295][ T7779] mtrr_ioctl+0xbc8/0xcf0 [ 195.927342][ T7779] ? __pfx_mtrr_ioctl+0x10/0x10 [ 195.927393][ T7779] ? find_held_lock+0x2b/0x80 [ 195.927434][ T7779] ? __fget_files+0x21f/0x3d0 [ 195.927466][ T7779] ? __pfx_mtrr_ioctl+0x10/0x10 [ 195.927509][ T7779] proc_reg_unlocked_ioctl+0x229/0x320 [ 195.927568][ T7779] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 195.927623][ T7779] __x64_sys_ioctl+0x18e/0x210 [ 195.927674][ T7779] do_syscall_64+0x106/0xf80 [ 195.927704][ T7779] ? clear_bhb_loop+0x40/0x90 [ 195.927741][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.927773][ T7779] RIP: 0033:0x7fc3b5f9c819 [ 195.927798][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.927830][ T7779] RSP: 002b:00007fc3b6ed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.927859][ T7779] RAX: ffffffffffffffda RBX: 00007fc3b6216090 RCX: 00007fc3b5f9c819 [ 195.927878][ T7779] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 195.927894][ T7779] RBP: 00007fc3b6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 195.927911][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.927927][ T7779] R13: 00007fc3b6216128 R14: 00007fc3b6216090 R15: 00007ffe1030fc08 [ 195.927965][ T7779] [ 196.452787][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 197.739303][ T7807] netlink: 342 bytes leftover after parsing attributes in process `syz.2.686'. [ 198.085814][ T7820] netlink: 'syz.4.683': attribute type 2 has an invalid length. [ 198.113341][ T7822] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 199.141206][ T7853] phram: not enough arguments [ 200.372178][ T7878] netlink: 342 bytes leftover after parsing attributes in process `syz.2.704'. [ 200.387693][ T7878] netlink: 342 bytes leftover after parsing attributes in process `syz.2.704'. [ 204.148642][ T7917] netlink: 350 bytes leftover after parsing attributes in process `syz.1.725'. [ 204.947214][ T7930] usbcore.quirks: string doesn't fit in 127 chars. [ 205.931499][ T7952] usbcore.quirks: string doesn't fit in 127 chars. [ 209.639831][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.649977][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.658404][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.666740][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.678024][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.629058][ T7999] chnl_net:caif_netlink_parms(): no params data found [ 210.862242][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.894756][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.923111][ T7999] bridge_slave_0: entered allmulticast mode [ 210.956364][ T7999] bridge_slave_0: entered promiscuous mode [ 210.973488][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.003142][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.030512][ T7999] bridge_slave_1: entered allmulticast mode [ 211.047077][ T7999] bridge_slave_1: entered promiscuous mode [ 211.211592][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.240811][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.304713][ T7999] team0: Port device team_slave_0 added [ 211.318154][ T7999] team0: Port device team_slave_1 added [ 211.344874][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.351870][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.378801][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.391445][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.398578][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.426287][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.472519][ T7999] hsr_slave_0: entered promiscuous mode [ 211.479423][ T7999] hsr_slave_1: entered promiscuous mode [ 211.486881][ T7999] debugfs: 'hsr0' already exists in 'hsr' [ 211.492705][ T7999] Cannot create hsr debugfs directory [ 211.663981][ T7999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.674667][ T7999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.686439][ T7999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.697252][ T7999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.725049][ T51] Bluetooth: hci5: command tx timeout [ 211.785899][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.808027][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.822481][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.829712][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.846664][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.853825][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.062857][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.309610][ T7999] veth0_vlan: entered promiscuous mode [ 212.328019][ T7999] veth1_vlan: entered promiscuous mode [ 212.360603][ T7999] veth0_macvtap: entered promiscuous mode [ 212.371117][ T7999] veth1_macvtap: entered promiscuous mode [ 212.391589][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.405948][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.421200][ T1137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.430292][ T1137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.452680][ T1137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.463062][ T1137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.535728][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.553505][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.581263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.591922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.814679][ T51] Bluetooth: hci5: command tx timeout [ 214.632110][ T8090] netlink: 342 bytes leftover after parsing attributes in process `syz.5.768'. [ 215.884748][ T51] Bluetooth: hci5: command tx timeout [ 216.018834][ T8123] netlink: 218 bytes leftover after parsing attributes in process `syz.1.785'. [ 216.340097][ T8127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'. [ 217.954566][ T51] Bluetooth: hci5: command tx timeout [ 220.079005][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 222.039037][ T8191] Bluetooth: hci3: command 0x0406 tx timeout [ 222.046106][ T8191] Bluetooth: hci1: command 0x0406 tx timeout [ 222.052185][ T8191] Bluetooth: hci0: command 0x0406 tx timeout [ 222.054763][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 224.035815][ T8250] netlink: 'syz.2.827': attribute type 15 has an invalid length. [ 224.105369][ T8250] netlink: 186 bytes leftover after parsing attributes in process `syz.2.827'. [ 225.434853][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.838'. [ 225.448731][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.456431][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.465711][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.473228][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.864607][ T8288] FAULT_INJECTION: forcing a failure. [ 225.864607][ T8288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.878160][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.5.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.878214][ T8288] Tainted: [L]=SOFTLOCKUP [ 225.878227][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.878246][ T8288] Call Trace: [ 225.878257][ T8288] [ 225.878269][ T8288] dump_stack_lvl+0x100/0x190 [ 225.878335][ T8288] should_fail_ex.cold+0x5/0xa [ 225.878370][ T8288] ? prepare_alloc_pages+0x16d/0x5f0 [ 225.878416][ T8288] should_fail_alloc_page+0xeb/0x140 [ 225.878456][ T8288] prepare_alloc_pages+0x1f0/0x5f0 [ 225.878504][ T8288] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 225.878567][ T8288] ? reacquire_held_locks+0xce/0x1e0 [ 225.878613][ T8288] ? folio_lock_anon_vma_read+0x348/0xe30 [ 225.878667][ T8288] ? folio_lock_anon_vma_read+0x348/0xe30 [ 225.878720][ T8288] ? __up_read+0x2c5/0x700 [ 225.878770][ T8288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.878824][ T8288] ? __pfx___up_read+0x10/0x10 [ 225.878871][ T8288] ? rmap_walk_anon+0x561/0x870 [ 225.878975][ T8288] __folio_alloc_noprof+0x13/0x2f0 [ 225.879022][ T8288] alloc_migration_target+0x1d7/0x6d0 [ 225.879063][ T8288] migrate_pages_batch+0x4f2/0x4530 [ 225.879123][ T8288] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.879173][ T8288] ? walk_pgd_range+0x1133/0x1dd0 [ 225.879227][ T8288] ? __pfx_migrate_pages_batch+0x10/0x10 [ 225.879297][ T8288] migrate_pages_sync+0x12c/0x880 [ 225.879347][ T8288] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.879397][ T8288] ? __pfx_migrate_pages_sync+0x10/0x10 [ 225.879436][ T8288] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 225.879486][ T8288] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 225.879527][ T8288] migrate_pages+0x1aae/0x28a0 [ 225.879574][ T8288] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.879624][ T8288] ? __pfx_migrate_pages+0x10/0x10 [ 225.879666][ T8288] ? queue_pages_range+0x11e/0x180 [ 225.879701][ T8288] ? __up_read+0x2c5/0x700 [ 225.879749][ T8288] ? __pfx___up_read+0x10/0x10 [ 225.879794][ T8288] ? do_migrate_pages+0x451/0x740 [ 225.879831][ T8288] ? do_migrate_pages+0x451/0x740 [ 225.879876][ T8288] do_migrate_pages+0x488/0x740 [ 225.879925][ T8288] ? __pfx_do_migrate_pages+0x10/0x10 [ 225.879970][ T8288] ? rcu_is_watching+0x12/0xc0 [ 225.880040][ T8288] ? cap_capable+0x107/0x460 [ 225.880073][ T8288] ? get_task_mm+0xc2/0xf0 [ 225.880108][ T8288] ? security_capable+0xbd/0x260 [ 225.880147][ T8288] kernel_migrate_pages+0x560/0x700 [ 225.880185][ T8288] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 225.880223][ T8288] ? xfd_validate_state+0x129/0x190 [ 225.880284][ T8288] __x64_sys_migrate_pages+0x96/0x100 [ 225.880331][ T8288] ? lockdep_hardirqs_on+0x78/0x100 [ 225.880367][ T8288] do_syscall_64+0x106/0xf80 [ 225.880400][ T8288] ? clear_bhb_loop+0x40/0x90 [ 225.880442][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.880476][ T8288] RIP: 0033:0x7f2ad379c819 [ 225.880503][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.880536][ T8288] RSP: 002b:00007f2ad46a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 225.880568][ T8288] RAX: ffffffffffffffda RBX: 00007f2ad3a15fa0 RCX: 00007f2ad379c819 [ 225.880590][ T8288] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 225.880610][ T8288] RBP: 00007f2ad3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 225.880630][ T8288] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 225.880650][ T8288] R13: 00007f2ad3a16038 R14: 00007f2ad3a15fa0 R15: 00007ffd1114fa68 [ 225.880693][ T8288] [ 227.144850][ T8302] netlink: zone id is out of range [ 227.150138][ T8302] netlink: zone id is out of range [ 227.191507][ T8302] netlink: zone id is out of range [ 227.227974][ T8302] netlink: set zone limit has 8 unknown bytes [ 227.239190][ T8306] netlink: zone id is out of range [ 227.253334][ T8306] netlink: zone id is out of range [ 227.260168][ T8306] netlink: zone id is out of range [ 227.265805][ T8306] netlink: zone id is out of range [ 227.270967][ T8306] netlink: zone id is out of range [ 227.276624][ T8306] netlink: zone id is out of range [ 228.082008][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'. [ 240.383737][ T8348] FAULT_INJECTION: forcing a failure. [ 240.383737][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 240.423471][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.4.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.423524][ T8348] Tainted: [L]=SOFTLOCKUP [ 240.423535][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.423553][ T8348] Call Trace: [ 240.423563][ T8348] [ 240.423575][ T8348] dump_stack_lvl+0x100/0x190 [ 240.423627][ T8348] should_fail_ex.cold+0x5/0xa [ 240.423663][ T8348] ? __seq_open_private+0x22/0xd0 [ 240.423709][ T8348] should_failslab+0xc2/0x120 [ 240.423760][ T8348] __kmalloc_noprof+0xe0/0x850 [ 240.423818][ T8348] ? __pfx_stats_fop_open+0x10/0x10 [ 240.423863][ T8348] __seq_open_private+0x22/0xd0 [ 240.423914][ T8348] sc_common_open+0x6b/0x200 [ 240.423961][ T8348] full_proxy_open_regular+0x1b6/0x370 [ 240.423999][ T8348] do_dentry_open+0x6d8/0x1660 [ 240.424034][ T8348] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 240.424078][ T8348] vfs_open+0x82/0x3f0 [ 240.424127][ T8348] path_openat+0x208c/0x31a0 [ 240.424178][ T8348] ? __pfx_path_openat+0x10/0x10 [ 240.424233][ T8348] do_file_open+0x20e/0x430 [ 240.424272][ T8348] ? __pfx_do_file_open+0x10/0x10 [ 240.424339][ T8348] ? alloc_fd+0x476/0x790 [ 240.424378][ T8348] ? do_getname+0x191/0x390 [ 240.424425][ T8348] do_sys_openat2+0x10d/0x1e0 [ 240.424470][ T8348] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.424527][ T8348] ? __fget_files+0x21f/0x3d0 [ 240.424571][ T8348] __x64_sys_openat+0x12d/0x210 [ 240.424617][ T8348] ? __pfx___x64_sys_openat+0x10/0x10 [ 240.424682][ T8348] do_syscall_64+0x106/0xf80 [ 240.424715][ T8348] ? clear_bhb_loop+0x40/0x90 [ 240.424755][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.424788][ T8348] RIP: 0033:0x7f06f8b9c819 [ 240.424815][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.424846][ T8348] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.424877][ T8348] RAX: ffffffffffffffda RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 240.424898][ T8348] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 240.424919][ T8348] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 240.424939][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.424958][ T8348] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 240.425001][ T8348] [ 240.810940][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.821000][ T5147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.833482][ T5147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.843793][ T5147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.852493][ T5147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.087463][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 241.174559][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.181786][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.189279][ T8355] bridge_slave_0: entered allmulticast mode [ 241.196953][ T8355] bridge_slave_0: entered promiscuous mode [ 241.205501][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.213931][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.221287][ T8355] bridge_slave_1: entered allmulticast mode [ 241.228993][ T8355] bridge_slave_1: entered promiscuous mode [ 241.260854][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.274897][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.308918][ T8355] team0: Port device team_slave_0 added [ 241.319274][ T8355] team0: Port device team_slave_1 added [ 241.347131][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.354121][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.380112][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.392349][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.399890][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.427215][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.476057][ T8355] hsr_slave_0: entered promiscuous mode [ 241.482625][ T8355] hsr_slave_1: entered promiscuous mode [ 241.489414][ T8355] debugfs: 'hsr0' already exists in 'hsr' [ 241.495230][ T8355] Cannot create hsr debugfs directory [ 241.666514][ T8355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.677318][ T8355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.687534][ T8355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.698139][ T8355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.737579][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.744740][ T8355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.752170][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.759399][ T8355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.819693][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.841836][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.849783][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.864698][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.879095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.886348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.901629][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.908828][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.126062][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.385315][ T8355] veth0_vlan: entered promiscuous mode [ 242.397570][ T8355] veth1_vlan: entered promiscuous mode [ 242.431486][ T8355] veth0_macvtap: entered promiscuous mode [ 242.443791][ T8355] veth1_macvtap: entered promiscuous mode [ 242.464067][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.479894][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.497557][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.509947][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.523137][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.532340][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.602426][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.613023][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.654806][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.662698][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.921072][ T5841] Bluetooth: hci6: command tx timeout [ 243.092819][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.864'. [ 243.747820][ T8414] FAULT_INJECTION: forcing a failure. [ 243.747820][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 243.811657][ T8414] CPU: 1 UID: 0 PID: 8414 Comm: syz.5.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.811708][ T8414] Tainted: [L]=SOFTLOCKUP [ 243.811720][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.811740][ T8414] Call Trace: [ 243.811752][ T8414] [ 243.811765][ T8414] dump_stack_lvl+0x100/0x190 [ 243.811824][ T8414] should_fail_ex.cold+0x5/0xa [ 243.811865][ T8414] ? drm_atomic_state_init+0xf4/0x490 [ 243.811908][ T8414] should_failslab+0xc2/0x120 [ 243.811947][ T8414] __kmalloc_noprof+0xe0/0x850 [ 243.812009][ T8414] drm_atomic_state_init+0xf4/0x490 [ 243.812052][ T8414] ? kasan_save_track+0x14/0x30 [ 243.812088][ T8414] drm_atomic_state_alloc+0xd3/0x120 [ 243.812135][ T8414] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 243.812190][ T8414] ? trace_contention_end+0x140/0x180 [ 243.812253][ T8414] ? __mutex_lock+0x26a/0x1b90 [ 243.812291][ T8414] ? __mutex_lock+0x26a/0x1b90 [ 243.812326][ T8414] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 243.812383][ T8414] ? drm_master_internal_acquire+0x21/0x80 [ 243.812473][ T8414] drm_client_modeset_commit_locked+0x14d/0x580 [ 243.812533][ T8414] drm_client_modeset_commit+0x4f/0x80 [ 243.812586][ T8414] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 243.812651][ T8414] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 243.812727][ T8414] drm_fbdev_client_restore+0x1b/0x30 [ 243.812772][ T8414] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 243.812815][ T8414] drm_client_dev_restore+0x205/0x2a0 [ 243.812893][ T8414] drm_release+0x2c6/0x360 [ 243.812945][ T8414] ? __pfx_drm_release+0x10/0x10 [ 243.812995][ T8414] __fput+0x3ff/0xb40 [ 243.813050][ T8414] task_work_run+0x150/0x240 [ 243.813103][ T8414] ? __pfx_task_work_run+0x10/0x10 [ 243.813168][ T8414] exit_to_user_mode_loop+0x100/0x4a0 [ 243.813220][ T8414] do_syscall_64+0x668/0xf80 [ 243.813261][ T8414] ? clear_bhb_loop+0x40/0x90 [ 243.813305][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.813341][ T8414] RIP: 0033:0x7f2ad379c819 [ 243.813370][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.813402][ T8414] RSP: 002b:00007f2ad46a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.813434][ T8414] RAX: 0000000000000000 RBX: 00007f2ad3a15fa0 RCX: 00007f2ad379c819 [ 243.813454][ T8414] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 243.813474][ T8414] RBP: 00007f2ad3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 243.813493][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.813513][ T8414] R13: 00007f2ad3a16038 R14: 00007f2ad3a15fa0 R15: 00007ffd1114fa68 [ 243.813560][ T8414] [ 244.995858][ T5841] Bluetooth: hci6: command tx timeout [ 245.281194][ T8446] netlink: 342 bytes leftover after parsing attributes in process `syz.1.888'. [ 246.181209][ T8460] netlink: 342 bytes leftover after parsing attributes in process `syz.5.894'. [ 246.223566][ T8460] netlink: 342 bytes leftover after parsing attributes in process `syz.5.894'. [ 247.074852][ T5841] Bluetooth: hci6: command tx timeout [ 247.769552][ T8489] FAULT_INJECTION: forcing a failure. [ 247.769552][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 247.786454][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.6.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.786515][ T8489] Tainted: [L]=SOFTLOCKUP [ 247.786525][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.786544][ T8489] Call Trace: [ 247.786554][ T8489] [ 247.786564][ T8489] dump_stack_lvl+0x100/0x190 [ 247.786619][ T8489] should_fail_ex.cold+0x5/0xa [ 247.786657][ T8489] should_failslab+0xc2/0x120 [ 247.786691][ T8489] __kmalloc_cache_noprof+0x7a/0x6f0 [ 247.786735][ T8489] ? vkms_plane_duplicate_state+0x87/0x130 [ 247.786784][ T8489] vkms_plane_duplicate_state+0x87/0x130 [ 247.786824][ T8489] drm_atomic_get_plane_state+0x279/0x760 [ 247.786871][ T8489] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 247.786925][ T8489] ? trace_contention_end+0x140/0x180 [ 247.786977][ T8489] ? __mutex_lock+0x26a/0x1b90 [ 247.787020][ T8489] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 247.787072][ T8489] ? drm_master_internal_acquire+0x21/0x80 [ 247.787154][ T8489] drm_client_modeset_commit_locked+0x14d/0x580 [ 247.787209][ T8489] drm_client_modeset_commit+0x4f/0x80 [ 247.787259][ T8489] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 247.787313][ T8489] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 247.787365][ T8489] drm_fbdev_client_restore+0x1b/0x30 [ 247.787404][ T8489] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 247.787442][ T8489] drm_client_dev_restore+0x205/0x2a0 [ 247.787513][ T8489] drm_release+0x2c6/0x360 [ 247.787559][ T8489] ? __pfx_drm_release+0x10/0x10 [ 247.787603][ T8489] __fput+0x3ff/0xb40 [ 247.787652][ T8489] task_work_run+0x150/0x240 [ 247.787701][ T8489] ? __pfx_task_work_run+0x10/0x10 [ 247.787761][ T8489] exit_to_user_mode_loop+0x100/0x4a0 [ 247.787808][ T8489] do_syscall_64+0x668/0xf80 [ 247.787840][ T8489] ? clear_bhb_loop+0x40/0x90 [ 247.787878][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.787908][ T8489] RIP: 0033:0x7f60c659c819 [ 247.787933][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.787962][ T8489] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 247.787999][ T8489] RAX: 0000000000000000 RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 247.788019][ T8489] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 247.788037][ T8489] RBP: 00007f60c6632c91 R08: 0000000000000000 R09: 0000000000000000 [ 247.788055][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.788073][ T8489] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 247.788114][ T8489] [ 248.212299][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 249.194384][ T5841] Bluetooth: hci6: command tx timeout [ 249.862110][ T8522] pim6reg: entered allmulticast mode [ 250.500432][ T8542] FAULT_INJECTION: forcing a failure. [ 250.500432][ T8542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.524528][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.6.923 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.524583][ T8542] Tainted: [L]=SOFTLOCKUP [ 250.524594][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 250.524612][ T8542] Call Trace: [ 250.524623][ T8542] [ 250.524636][ T8542] dump_stack_lvl+0x100/0x190 [ 250.524694][ T8542] should_fail_ex.cold+0x5/0xa [ 250.524730][ T8542] ? prepare_alloc_pages+0x16d/0x5f0 [ 250.524795][ T8542] should_fail_alloc_page+0xeb/0x140 [ 250.524835][ T8542] prepare_alloc_pages+0x1f0/0x5f0 [ 250.524875][ T8542] ? bpf_ksym_find+0x124/0x1c0 [ 250.524922][ T8542] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 250.524979][ T8542] ? __kernel_text_address+0xd/0x30 [ 250.525028][ T8542] ? unwind_get_return_address+0x59/0xa0 [ 250.525065][ T8542] ? arch_stack_walk+0xa6/0xf0 [ 250.525114][ T8542] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 250.525168][ T8542] ? stack_trace_save+0x8e/0xc0 [ 250.525200][ T8542] ? __pfx_stack_trace_save+0x10/0x10 [ 250.525233][ T8542] ? stack_depot_save_flags+0x27/0x9d0 [ 250.525279][ T8542] ? mas_store_prealloc+0x893/0xfb0 [ 250.525326][ T8542] ? kasan_save_stack+0x30/0x50 [ 250.525356][ T8542] ? kasan_save_track+0x14/0x30 [ 250.525384][ T8542] ? __kasan_slab_alloc+0x89/0x90 [ 250.525414][ T8542] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 250.525468][ T8542] ? __pmd_alloc+0xbf/0x950 [ 250.525523][ T8542] ? __handle_mm_fault+0xa9e/0x2b60 [ 250.525568][ T8542] ? handle_mm_fault+0x36d/0xa20 [ 250.525612][ T8542] ? __get_user_pages+0xf9c/0x34d0 [ 250.525655][ T8542] ? populate_vma_page_range+0x267/0x3f0 [ 250.525697][ T8542] ? __mm_populate+0x107/0x3a0 [ 250.525736][ T8542] ? vm_mmap_pgoff+0x37f/0x470 [ 250.525778][ T8542] ? ksys_mmap_pgoff+0xe1/0x650 [ 250.525821][ T8542] ? __x64_sys_mmap+0x125/0x190 [ 250.525870][ T8542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.525910][ T8542] ? policy_nodemask+0xed/0x4f0 [ 250.525950][ T8542] alloc_pages_mpol+0x1fb/0x550 [ 250.525990][ T8542] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 250.526038][ T8542] alloc_pages_noprof+0x136/0x390 [ 250.526078][ T8542] pte_alloc_one+0x1c/0x3d0 [ 250.526119][ T8542] __pte_alloc+0x6d/0x3e0 [ 250.526155][ T8542] ? __pfx___pte_alloc+0x10/0x10 [ 250.526194][ T8542] ? do_raw_spin_lock+0x128/0x260 [ 250.526246][ T8542] ? find_held_lock+0x2b/0x80 [ 250.526284][ T8542] do_anonymous_page+0x13cc/0x1fb0 [ 250.526334][ T8542] ? do_raw_spin_unlock+0x145/0x1e0 [ 250.526388][ T8542] ? _raw_spin_unlock+0x28/0x50 [ 250.526438][ T8542] ? __pmd_alloc+0x3fb/0x950 [ 250.526482][ T8542] __handle_mm_fault+0x1d48/0x2b60 [ 250.526537][ T8542] ? mt_find+0x45e/0x8e0 [ 250.526575][ T8542] ? __pfx___handle_mm_fault+0x10/0x10 [ 250.526622][ T8542] ? __pfx_mt_find+0x10/0x10 [ 250.526693][ T8542] handle_mm_fault+0x36d/0xa20 [ 250.526750][ T8542] __get_user_pages+0xf9c/0x34d0 [ 250.526813][ T8542] ? __pfx___get_user_pages+0x10/0x10 [ 250.526867][ T8542] populate_vma_page_range+0x267/0x3f0 [ 250.526913][ T8542] ? __pfx_populate_vma_page_range+0x10/0x10 [ 250.526972][ T8542] ? __pfx_find_vma_intersection+0x10/0x10 [ 250.527013][ T8542] ? do_mmap+0x93f/0x12f0 [ 250.527055][ T8542] __mm_populate+0x107/0x3a0 [ 250.527099][ T8542] ? __pfx___mm_populate+0x10/0x10 [ 250.527143][ T8542] ? up_write+0x290/0x4f0 [ 250.527197][ T8542] vm_mmap_pgoff+0x37f/0x470 [ 250.527241][ T8542] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 250.527284][ T8542] ? do_futex+0x192/0x350 [ 250.527329][ T8542] ? __pfx_do_futex+0x10/0x10 [ 250.527381][ T8542] ksys_mmap_pgoff+0xe1/0x650 [ 250.527419][ T8542] ? __x64_sys_futex+0x34f/0x4d0 [ 250.527462][ T8542] ? __x64_sys_futex+0x358/0x4d0 [ 250.527505][ T8542] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 250.527542][ T8542] ? xfd_validate_state+0x129/0x190 [ 250.527599][ T8542] __x64_sys_mmap+0x125/0x190 [ 250.527654][ T8542] do_syscall_64+0x106/0xf80 [ 250.527686][ T8542] ? clear_bhb_loop+0x40/0x90 [ 250.527726][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.527760][ T8542] RIP: 0033:0x7f60c659c819 [ 250.527794][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.527827][ T8542] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 250.527860][ T8542] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 250.527882][ T8542] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 250.527902][ T8542] RBP: 00007f60c6632c91 R08: ffffffffffffffff R09: 0000000000008000 [ 250.527924][ T8542] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 250.527944][ T8542] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 250.527987][ T8542] [ 255.800966][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810754][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.336104][ T8641] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 256.997362][ T8664] FAULT_INJECTION: forcing a failure. [ 256.997362][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 257.035307][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.1.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.035355][ T8664] Tainted: [L]=SOFTLOCKUP [ 257.035366][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.035384][ T8664] Call Trace: [ 257.035394][ T8664] [ 257.035404][ T8664] dump_stack_lvl+0x100/0x190 [ 257.035455][ T8664] should_fail_ex.cold+0x5/0xa [ 257.035490][ T8664] ? udp_init_sock+0x24e/0x450 [ 257.035528][ T8664] should_failslab+0xc2/0x120 [ 257.035561][ T8664] __kmalloc_noprof+0xe0/0x850 [ 257.035605][ T8664] ? lockdep_init_map_type+0x5c/0x250 [ 257.035661][ T8664] udp_init_sock+0x24e/0x450 [ 257.035695][ T8664] ? __pfx_udp_init_sock+0x10/0x10 [ 257.035733][ T8664] inet_create+0x94c/0x1060 [ 257.035767][ T8664] ? inet_create+0x94/0x1060 [ 257.035804][ T8664] __sock_create+0x339/0x860 [ 257.035843][ T8664] __sys_socket+0x14d/0x260 [ 257.035878][ T8664] ? __pfx___sys_socket+0x10/0x10 [ 257.035921][ T8664] __x64_sys_socket+0x72/0xb0 [ 257.035953][ T8664] ? lockdep_hardirqs_on+0x78/0x100 [ 257.035980][ T8664] do_syscall_64+0x106/0xf80 [ 257.036015][ T8664] ? clear_bhb_loop+0x40/0x90 [ 257.036048][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.036076][ T8664] RIP: 0033:0x7ff3c019c819 [ 257.036098][ T8664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.036124][ T8664] RSP: 002b:00007ff3c0fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 257.036150][ T8664] RAX: ffffffffffffffda RBX: 00007ff3c0415fa0 RCX: 00007ff3c019c819 [ 257.036168][ T8664] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 257.036184][ T8664] RBP: 00007ff3c0232c91 R08: 0000000000000000 R09: 0000000000000000 [ 257.036201][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.036217][ T8664] R13: 00007ff3c0416038 R14: 00007ff3c0415fa0 R15: 00007ffd4fe0b498 [ 257.036251][ T8664] [ 258.609809][ T8686] vcan0: tx drop: invalid da for name 0x000000000000003f [ 259.988482][ T8710] sctp: [Deprecated]: syz.6.980 (pid 8710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.988482][ T8710] Use struct sctp_sack_info instead [ 262.152548][ T8746] sctp: [Deprecated]: syz.4.991 (pid 8746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.152548][ T8746] Use struct sctp_sack_info instead [ 262.468692][ T8766] netlink: 342 bytes leftover after parsing attributes in process `syz.1.999'. [ 263.605599][ T8796] netlink: 198 bytes leftover after parsing attributes in process `syz.6.1010'. [ 264.112585][ T8804] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1013'. [ 264.607094][ T8806] sctp: [Deprecated]: syz.1.1012 (pid 8806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.607094][ T8806] Use struct sctp_sack_info instead [ 265.053184][ T8823] FAULT_INJECTION: forcing a failure. [ 265.053184][ T8823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.130047][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.6.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.130097][ T8823] Tainted: [L]=SOFTLOCKUP [ 265.130107][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 265.130124][ T8823] Call Trace: [ 265.130134][ T8823] [ 265.130145][ T8823] dump_stack_lvl+0x100/0x190 [ 265.130195][ T8823] should_fail_ex.cold+0x5/0xa [ 265.130224][ T8823] ? prepare_alloc_pages+0x16d/0x5f0 [ 265.130262][ T8823] should_fail_alloc_page+0xeb/0x140 [ 265.130298][ T8823] prepare_alloc_pages+0x1f0/0x5f0 [ 265.130332][ T8823] ? rcu_is_watching+0x12/0xc0 [ 265.130392][ T8823] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 265.130440][ T8823] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 265.130487][ T8823] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 265.130534][ T8823] ? mas_store_prealloc+0x893/0xfb0 [ 265.130571][ T8823] ? __pfx_perf_event_mmap+0x10/0x10 [ 265.130603][ T8823] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 265.130647][ T8823] ? vma_wants_writenotify+0x10b/0x390 [ 265.130692][ T8823] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 265.130740][ T8823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.130785][ T8823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.130839][ T8823] ? vma_set_page_prot+0xb1/0x120 [ 265.130885][ T8823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.130916][ T8823] ? policy_nodemask+0xed/0x4f0 [ 265.130957][ T8823] alloc_pages_mpol+0x1fb/0x550 [ 265.130990][ T8823] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 265.131023][ T8823] ? do_raw_spin_lock+0x128/0x260 [ 265.131066][ T8823] ? find_held_lock+0x2b/0x80 [ 265.131093][ T8823] ? __pud_alloc+0x4f6/0x690 [ 265.131131][ T8823] alloc_pages_noprof+0x136/0x390 [ 265.131165][ T8823] __pmd_alloc+0x3b/0x950 [ 265.131198][ T8823] ? __pud_alloc+0x4fb/0x690 [ 265.131234][ T8823] __handle_mm_fault+0xa9e/0x2b60 [ 265.131280][ T8823] ? mt_find+0x45e/0x8e0 [ 265.131312][ T8823] ? __pfx___handle_mm_fault+0x10/0x10 [ 265.131351][ T8823] ? __pfx_mt_find+0x10/0x10 [ 265.131422][ T8823] handle_mm_fault+0x36d/0xa20 [ 265.131471][ T8823] __get_user_pages+0xf9c/0x34d0 [ 265.131519][ T8823] ? __pfx___get_user_pages+0x10/0x10 [ 265.131564][ T8823] populate_vma_page_range+0x267/0x3f0 [ 265.131603][ T8823] ? __pfx_populate_vma_page_range+0x10/0x10 [ 265.131640][ T8823] ? __pfx_find_vma_intersection+0x10/0x10 [ 265.131675][ T8823] ? do_mmap+0x93f/0x12f0 [ 265.131711][ T8823] __mm_populate+0x107/0x3a0 [ 265.131749][ T8823] ? __pfx___mm_populate+0x10/0x10 [ 265.131787][ T8823] ? up_write+0x290/0x4f0 [ 265.131834][ T8823] vm_mmap_pgoff+0x37f/0x470 [ 265.131872][ T8823] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 265.131908][ T8823] ? do_futex+0x192/0x350 [ 265.131948][ T8823] ? __pfx_do_futex+0x10/0x10 [ 265.131993][ T8823] ksys_mmap_pgoff+0xe1/0x650 [ 265.132025][ T8823] ? __x64_sys_futex+0x34f/0x4d0 [ 265.132062][ T8823] ? __x64_sys_futex+0x358/0x4d0 [ 265.132101][ T8823] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 265.132133][ T8823] ? xfd_validate_state+0x129/0x190 [ 265.132183][ T8823] __x64_sys_mmap+0x125/0x190 [ 265.132230][ T8823] do_syscall_64+0x106/0xf80 [ 265.132258][ T8823] ? clear_bhb_loop+0x40/0x90 [ 265.132293][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.132323][ T8823] RIP: 0033:0x7f60c659c819 [ 265.132346][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.132381][ T8823] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 265.132408][ T8823] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 265.132427][ T8823] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000400000000000 [ 265.132445][ T8823] RBP: 00007f60c6632c91 R08: 0000000000000002 R09: 0000000000008000 [ 265.132463][ T8823] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 265.132480][ T8823] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 265.132517][ T8823] [ 270.118160][ T8917] FAULT_INJECTION: forcing a failure. [ 270.118160][ T8917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.145634][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.5.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.145697][ T8917] Tainted: [L]=SOFTLOCKUP [ 270.145708][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.145726][ T8917] Call Trace: [ 270.145735][ T8917] [ 270.145746][ T8917] dump_stack_lvl+0x100/0x190 [ 270.145803][ T8917] should_fail_ex.cold+0x5/0xa [ 270.145843][ T8917] _copy_from_user+0x2e/0xd0 [ 270.145888][ T8917] snd_pcm_oss_write2+0x1c2/0x400 [ 270.145934][ T8917] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 270.145991][ T8917] snd_pcm_oss_write+0x729/0xa30 [ 270.146039][ T8917] ? security_file_permission+0x76/0x210 [ 270.146093][ T8917] vfs_write+0x2aa/0x1070 [ 270.146127][ T8917] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 270.146175][ T8917] ? __pfx_vfs_write+0x10/0x10 [ 270.146204][ T8917] ? find_held_lock+0x2b/0x80 [ 270.146236][ T8917] ? __fget_files+0x215/0x3d0 [ 270.146275][ T8917] ? __fget_files+0x215/0x3d0 [ 270.146315][ T8917] ? __fget_files+0x21f/0x3d0 [ 270.146359][ T8917] ksys_write+0x12a/0x250 [ 270.146392][ T8917] ? __pfx_ksys_write+0x10/0x10 [ 270.146437][ T8917] do_syscall_64+0x106/0xf80 [ 270.146470][ T8917] ? clear_bhb_loop+0x40/0x90 [ 270.146512][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.146545][ T8917] RIP: 0033:0x7f2ad379c819 [ 270.146574][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.146606][ T8917] RSP: 002b:00007f2ad4687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.146638][ T8917] RAX: ffffffffffffffda RBX: 00007f2ad3a16090 RCX: 00007f2ad379c819 [ 270.146664][ T8917] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 270.146683][ T8917] RBP: 00007f2ad3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 270.146703][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.146722][ T8917] R13: 00007f2ad3a16128 R14: 00007f2ad3a16090 R15: 00007ffd1114fa68 [ 270.146766][ T8917] [ 270.804697][ T8925] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1057'. [ 270.875735][ T8925] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1057'. [ 271.480527][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1066'. [ 271.502819][ T8942] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1066'. [ 272.237580][ T8955] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 273.624742][ T8980] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1079'. [ 273.708607][ T8984] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1080'. [ 274.193453][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 274.230859][ T8998] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1085'. [ 275.117790][ T9019] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 275.220869][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1097'. [ 277.320635][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 278.428238][ T9110] FAULT_INJECTION: forcing a failure. [ 278.428238][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 278.502940][ T9110] CPU: 1 UID: 0 PID: 9110 Comm: syz.4.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.502994][ T9110] Tainted: [L]=SOFTLOCKUP [ 278.503007][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.503027][ T9110] Call Trace: [ 278.503038][ T9110] [ 278.503050][ T9110] dump_stack_lvl+0x100/0x190 [ 278.503110][ T9110] should_fail_ex.cold+0x5/0xa [ 278.503151][ T9110] should_failslab+0xc2/0x120 [ 278.503189][ T9110] __kvmalloc_node_noprof+0xfa/0xa00 [ 278.503223][ T9110] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 278.503258][ T9110] ? register_lock_class+0x40/0x560 [ 278.503314][ T9110] v4l2_ctrl_new+0x4a6/0x23a0 [ 278.503367][ T9110] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 278.503414][ T9110] ? lock_acquire+0x1cf/0x380 [ 278.503465][ T9110] ? rcu_is_watching+0x12/0xc0 [ 278.503524][ T9110] v4l2_ctrl_new_std+0x1bb/0x290 [ 278.503575][ T9110] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 278.503621][ T9110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.503665][ T9110] ? __asan_memset+0x23/0x50 [ 278.503715][ T9110] ? __asan_memcpy+0x3c/0x60 [ 278.503765][ T9110] ? find_ref+0x209/0x420 [ 278.503803][ T9110] handler_new_ref+0x82f/0xc60 [ 278.503851][ T9110] v4l2_ctrl_new+0xe67/0x23a0 [ 278.503903][ T9110] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 278.503965][ T9110] v4l2_ctrl_new_std+0x1bb/0x290 [ 278.504016][ T9110] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 278.504058][ T9110] ? trace_kmalloc+0x101/0x130 [ 278.504094][ T9110] ? __kasan_kmalloc+0xaa/0xb0 [ 278.504126][ T9110] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 278.504163][ T9110] ? lockdep_set_lock_cmp_fn+0xa0/0xe0 [ 278.504211][ T9110] ? media_request_object_init+0x105/0x180 [ 278.504274][ T9110] vim2m_open+0x140/0x830 [ 278.504332][ T9110] v4l2_open+0x1d2/0x490 [ 278.504367][ T9110] ? __pfx_v4l2_open+0x10/0x10 [ 278.504411][ T9110] chrdev_open+0x234/0x6a0 [ 278.504448][ T9110] ? __pfx_apparmor_file_open+0x10/0x10 [ 278.504486][ T9110] ? __pfx_chrdev_open+0x10/0x10 [ 278.504525][ T9110] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 278.504573][ T9110] do_dentry_open+0x6d8/0x1660 [ 278.504609][ T9110] ? __pfx_chrdev_open+0x10/0x10 [ 278.504655][ T9110] vfs_open+0x82/0x3f0 [ 278.504706][ T9110] path_openat+0x208c/0x31a0 [ 278.504756][ T9110] ? __pfx_path_openat+0x10/0x10 [ 278.504809][ T9110] do_file_open+0x20e/0x430 [ 278.504850][ T9110] ? __pfx_do_file_open+0x10/0x10 [ 278.504916][ T9110] ? alloc_fd+0x476/0x790 [ 278.504956][ T9110] ? do_getname+0x191/0x390 [ 278.505004][ T9110] do_sys_openat2+0x10d/0x1e0 [ 278.505051][ T9110] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.505112][ T9110] __x64_sys_openat+0x12d/0x210 [ 278.505159][ T9110] ? __pfx___x64_sys_openat+0x10/0x10 [ 278.505223][ T9110] do_syscall_64+0x106/0xf80 [ 278.505258][ T9110] ? clear_bhb_loop+0x40/0x90 [ 278.505300][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.505336][ T9110] RIP: 0033:0x7f06f8b9c819 [ 278.505363][ T9110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.505404][ T9110] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.505437][ T9110] RAX: ffffffffffffffda RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 278.505459][ T9110] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 278.505482][ T9110] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 278.505501][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.505521][ T9110] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 278.505564][ T9110] [ 279.164559][ T9117] device-mapper: ioctl: name not supplied when creating device [ 279.374040][ T9122] FAULT_INJECTION: forcing a failure. [ 279.374040][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 279.409995][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.6.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.410049][ T9122] Tainted: [L]=SOFTLOCKUP [ 279.410061][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 279.410080][ T9122] Call Trace: [ 279.410091][ T9122] [ 279.410103][ T9122] dump_stack_lvl+0x100/0x190 [ 279.410162][ T9122] should_fail_ex.cold+0x5/0xa [ 279.410205][ T9122] should_failslab+0xc2/0x120 [ 279.410243][ T9122] __kmalloc_cache_noprof+0x7a/0x6f0 [ 279.410293][ T9122] ? io_sq_offload_create+0x222/0xe10 [ 279.410349][ T9122] ? io_create_region+0x613/0xbe0 [ 279.410393][ T9122] io_sq_offload_create+0x222/0xe10 [ 279.410450][ T9122] ? __pfx_io_create_region+0x10/0x10 [ 279.410492][ T9122] ? __pfx_io_sq_offload_create+0x10/0x10 [ 279.410551][ T9122] ? bpf_lsm_capable+0x9/0x10 [ 279.410589][ T9122] ? security_capable+0x80/0x260 [ 279.410630][ T9122] io_uring_setup.cold+0x1525/0x1d79 [ 279.410702][ T9122] ? __pfx_io_uring_setup+0x10/0x10 [ 279.410761][ T9122] ? __pfx_do_futex+0x10/0x10 [ 279.410829][ T9122] ? __pfx___x64_sys_futex+0x10/0x10 [ 279.410878][ T9122] ? __pfx_do_writev+0x10/0x10 [ 279.410919][ T9122] __x64_sys_io_uring_setup+0xc2/0x170 [ 279.410975][ T9122] do_syscall_64+0x106/0xf80 [ 279.411009][ T9122] ? clear_bhb_loop+0x40/0x90 [ 279.411051][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.411087][ T9122] RIP: 0033:0x7f60c659c819 [ 279.411115][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.411149][ T9122] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 279.411194][ T9122] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 279.411216][ T9122] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 279.411237][ T9122] RBP: 00007f60c6632c91 R08: 0000000000000000 R09: 0000000000000000 [ 279.411257][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.411278][ T9122] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 279.411320][ T9122] [ 280.143124][ T9135] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1139'. [ 281.943099][ T9164] process 'syz.6.1149' launched '/dev/fd/3' with NULL argv: empty string added [ 282.748571][ T9184] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1157'. [ 283.123932][ T9196] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1160'. [ 283.312360][ T9202] hugetlbfs: syz.6.1165 (9202): Using mlock ulimits for SHM_HUGETLB is obsolete syzkaller syzkaller login: [ 286.153221][ T9260] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1187'. [ 286.237550][ T9264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.338534][ T9240] kexec: Could not allocate control_code_buffer [ 286.695293][ T9274] netlink: 74 bytes leftover after parsing attributes in process `syz.4.1192'. [ 286.864539][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 287.362986][ T9294] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1195'. [ 287.672722][ T9298] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1198'. [ 287.923506][ T9307] netlink: 'syz.1.1203': attribute type 19 has an invalid length. [ 287.931762][ T9307] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1203'. [ 287.966381][ T9310] FAULT_INJECTION: forcing a failure. [ 287.966381][ T9310] name failslab, interval 1, probability 0, space 0, times 0 [ 287.985625][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.4.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.985688][ T9310] Tainted: [L]=SOFTLOCKUP [ 287.985701][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.985722][ T9310] Call Trace: [ 287.985733][ T9310] [ 287.985745][ T9310] dump_stack_lvl+0x100/0x190 [ 287.985802][ T9310] should_fail_ex.cold+0x5/0xa [ 287.985842][ T9310] ? lsm_blob_alloc+0x68/0x90 [ 287.985893][ T9310] should_failslab+0xc2/0x120 [ 287.985932][ T9310] __kmalloc_noprof+0xe0/0x850 [ 287.985983][ T9310] ? down_write_nested+0x14f/0x200 [ 287.986042][ T9310] lsm_blob_alloc+0x68/0x90 [ 287.986095][ T9310] security_sb_alloc+0x25/0x240 [ 287.986132][ T9310] alloc_super+0x24c/0xd20 [ 287.986190][ T9310] ? __pfx_mqueue_fill_super+0x10/0x10 [ 287.986252][ T9310] sget_fc+0x117/0xc70 [ 287.986301][ T9310] ? __pfx_set_anon_super_fc+0x10/0x10 [ 287.986349][ T9310] ? __pfx_mqueue_fill_super+0x10/0x10 [ 287.986398][ T9310] get_tree_nodev+0x28/0x190 [ 287.986450][ T9310] mqueue_get_tree+0xf1/0x130 [ 287.986504][ T9310] vfs_get_tree+0x92/0x320 [ 287.986551][ T9310] fc_mount_longterm+0x1a/0x270 [ 287.986602][ T9310] mq_init_ns+0x482/0x820 [ 287.986645][ T9310] copy_ipcs+0x3dd/0x7e0 [ 287.986697][ T9310] create_new_namespaces+0x20a/0xac0 [ 287.986730][ T9310] ? security_capable+0x80/0x260 [ 287.986762][ T9310] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 287.986798][ T9310] ksys_unshare+0x473/0xad0 [ 287.986837][ T9310] ? __pfx_ksys_unshare+0x10/0x10 [ 287.986886][ T9310] __x64_sys_unshare+0x31/0x40 [ 287.986923][ T9310] do_syscall_64+0x106/0xf80 [ 287.986950][ T9310] ? clear_bhb_loop+0x40/0x90 [ 287.986984][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.987012][ T9310] RIP: 0033:0x7f06f8b9c819 [ 287.987035][ T9310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.987063][ T9310] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.987090][ T9310] RAX: ffffffffffffffda RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 287.987107][ T9310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 287.987124][ T9310] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 287.987141][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.987158][ T9310] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 287.987194][ T9310] [ 290.864032][ T9368] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1225'. [ 290.910716][ T9366] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1226'. [ 291.139300][ T9384] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1220'. [ 291.158033][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 291.817734][ T9406] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1228'. [ 292.210277][ T9414] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1232'. [ 292.360535][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1234'. [ 292.572191][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1236'. [ 293.135801][ T9441] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1241'. [ 293.330037][ T9445] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1242'. [ 293.497204][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1244'. [ 293.900203][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 293.909238][ T9466] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1250'. [ 295.300788][ T9501] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1264'. [ 295.528489][ T9508] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1267'. [ 295.537920][ T9508] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.559306][ T9508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.566950][ T9508] IPv6: NLM_F_CREATE should be set when creating new route [ 295.574270][ T9508] IPv6: NLM_F_CREATE should be set when creating new route [ 295.593987][ T9509] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1267'. [ 295.603744][ T9509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.649143][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1268'. [ 296.133540][ T9526] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1274'. [ 297.036887][ T9551] netlink: 'syz.6.1283': attribute type 33 has an invalid length. [ 297.045296][ T9551] netlink: 'syz.6.1283': attribute type 33 has an invalid length. [ 298.016180][ T9587] FAULT_INJECTION: forcing a failure. [ 298.016180][ T9587] name failslab, interval 1, probability 0, space 0, times 0 [ 298.029035][ T9587] CPU: 1 UID: 0 PID: 9587 Comm: syz.5.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.029084][ T9587] Tainted: [L]=SOFTLOCKUP [ 298.029095][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.029120][ T9587] Call Trace: [ 298.029132][ T9587] [ 298.029143][ T9587] dump_stack_lvl+0x100/0x190 [ 298.029199][ T9587] should_fail_ex.cold+0x5/0xa [ 298.029239][ T9587] should_failslab+0xc2/0x120 [ 298.029278][ T9587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 298.029323][ T9587] ? tipc_service_create+0xb1/0x340 [ 298.029368][ T9587] tipc_service_create+0xb1/0x340 [ 298.029402][ T9587] ? tipc_service_find+0x161/0x1c0 [ 298.029449][ T9587] tipc_nametbl_insert_publ+0xeca/0x1570 [ 298.029501][ T9587] tipc_nametbl_publish+0x137/0x260 [ 298.029543][ T9587] tipc_sk_publish+0x1d8/0x430 [ 298.029579][ T9587] ? __pfx_tipc_sk_publish+0x10/0x10 [ 298.029638][ T9587] ? __local_bh_enable_ip+0x9e/0x120 [ 298.029681][ T9587] tipc_sk_bind+0x16f/0x380 [ 298.029724][ T9587] tipc_bind+0x18d/0x280 [ 298.029766][ T9587] __sys_bind+0x1a9/0x260 [ 298.029814][ T9587] ? __pfx___sys_bind+0x10/0x10 [ 298.029886][ T9587] __x64_sys_bind+0x72/0xb0 [ 298.029928][ T9587] ? lockdep_hardirqs_on+0x78/0x100 [ 298.029962][ T9587] do_syscall_64+0x106/0xf80 [ 298.030020][ T9587] ? clear_bhb_loop+0x40/0x90 [ 298.030064][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.030099][ T9587] RIP: 0033:0x7f2ad379c819 [ 298.030128][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.030161][ T9587] RSP: 002b:00007f2ad46a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 298.030201][ T9587] RAX: ffffffffffffffda RBX: 00007f2ad3a15fa0 RCX: 00007f2ad379c819 [ 298.030224][ T9587] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000003 [ 298.030246][ T9587] RBP: 00007f2ad3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 298.030267][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.030288][ T9587] R13: 00007f2ad3a16038 R14: 00007f2ad3a15fa0 R15: 00007ffd1114fa68 [ 298.030334][ T9587] [ 298.030347][ T9587] tipc: Service creation failed, no memory [ 300.137696][ T9631] __nla_validate_parse: 3 callbacks suppressed [ 300.137724][ T9631] netlink: 86 bytes leftover after parsing attributes in process `syz.6.1310'. [ 301.466759][ T9662] FAULT_INJECTION: forcing a failure. [ 301.466759][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 301.479790][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.1.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.479844][ T9662] Tainted: [L]=SOFTLOCKUP [ 301.479857][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.479878][ T9662] Call Trace: [ 301.479889][ T9662] [ 301.479902][ T9662] dump_stack_lvl+0x100/0x190 [ 301.479972][ T9662] should_fail_ex.cold+0x5/0xa [ 301.480013][ T9662] ? lsm_blob_alloc+0x68/0x90 [ 301.480065][ T9662] should_failslab+0xc2/0x120 [ 301.480104][ T9662] __kmalloc_noprof+0xe0/0x850 [ 301.480157][ T9662] ? down_write_nested+0x14f/0x200 [ 301.480218][ T9662] lsm_blob_alloc+0x68/0x90 [ 301.480271][ T9662] security_sb_alloc+0x25/0x240 [ 301.480306][ T9662] alloc_super+0x24c/0xd20 [ 301.480365][ T9662] ? __pfx_mqueue_fill_super+0x10/0x10 [ 301.480419][ T9662] sget_fc+0x117/0xc70 [ 301.480472][ T9662] ? __pfx_set_anon_super_fc+0x10/0x10 [ 301.480525][ T9662] ? __pfx_mqueue_fill_super+0x10/0x10 [ 301.480579][ T9662] get_tree_nodev+0x28/0x190 [ 301.480613][ T9662] mqueue_get_tree+0xf1/0x130 [ 301.480667][ T9662] vfs_get_tree+0x92/0x320 [ 301.480723][ T9662] fc_mount_longterm+0x1a/0x270 [ 301.480779][ T9662] mq_init_ns+0x482/0x820 [ 301.480820][ T9662] copy_ipcs+0x3dd/0x7e0 [ 301.480862][ T9662] create_new_namespaces+0x20a/0xac0 [ 301.480900][ T9662] ? security_capable+0x80/0x260 [ 301.480948][ T9662] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 301.480992][ T9662] ksys_unshare+0x473/0xad0 [ 301.481040][ T9662] ? __pfx_ksys_unshare+0x10/0x10 [ 301.481101][ T9662] __x64_sys_unshare+0x31/0x40 [ 301.481145][ T9662] do_syscall_64+0x106/0xf80 [ 301.481178][ T9662] ? clear_bhb_loop+0x40/0x90 [ 301.481232][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.481265][ T9662] RIP: 0033:0x7ff3c019c819 [ 301.481291][ T9662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.481324][ T9662] RSP: 002b:00007ff3c0fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.481357][ T9662] RAX: ffffffffffffffda RBX: 00007ff3c0415fa0 RCX: 00007ff3c019c819 [ 301.481379][ T9662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 301.481398][ T9662] RBP: 00007ff3c0232c91 R08: 0000000000000000 R09: 0000000000000000 [ 301.481417][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.481436][ T9662] R13: 00007ff3c0416038 R14: 00007ff3c0415fa0 R15: 00007ffd4fe0b498 [ 301.481477][ T9662] [ 302.264434][ T9667] netlink: 86 bytes leftover after parsing attributes in process `syz.5.1323'. [ 302.731598][ T9686] netlink: 'syz.1.1331': attribute type 28 has an invalid length. [ 302.768522][ T9686] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1331'. [ 302.798195][ T9689] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1332'. [ 303.141033][ T9696] FAULT_INJECTION: forcing a failure. [ 303.141033][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 303.154028][ T9696] CPU: 1 UID: 0 PID: 9696 Comm: syz.5.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.154073][ T9696] Tainted: [L]=SOFTLOCKUP [ 303.154083][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 303.154100][ T9696] Call Trace: [ 303.154110][ T9696] [ 303.154121][ T9696] dump_stack_lvl+0x100/0x190 [ 303.154178][ T9696] should_fail_ex.cold+0x5/0xa [ 303.154216][ T9696] ? lsm_blob_alloc+0x68/0x90 [ 303.154262][ T9696] should_failslab+0xc2/0x120 [ 303.154296][ T9696] __kmalloc_noprof+0xe0/0x850 [ 303.154342][ T9696] ? down_write_nested+0x14f/0x200 [ 303.154415][ T9696] lsm_blob_alloc+0x68/0x90 [ 303.154468][ T9696] security_sb_alloc+0x25/0x240 [ 303.154505][ T9696] alloc_super+0x24c/0xd20 [ 303.154564][ T9696] ? __pfx_mqueue_fill_super+0x10/0x10 [ 303.154619][ T9696] sget_fc+0x117/0xc70 [ 303.154672][ T9696] ? __pfx_set_anon_super_fc+0x10/0x10 [ 303.154726][ T9696] ? __pfx_mqueue_fill_super+0x10/0x10 [ 303.154782][ T9696] get_tree_nodev+0x28/0x190 [ 303.154825][ T9696] mqueue_get_tree+0xf1/0x130 [ 303.154881][ T9696] vfs_get_tree+0x92/0x320 [ 303.154940][ T9696] fc_mount_longterm+0x1a/0x270 [ 303.154990][ T9696] mq_init_ns+0x482/0x820 [ 303.155028][ T9696] copy_ipcs+0x3dd/0x7e0 [ 303.155067][ T9696] create_new_namespaces+0x20a/0xac0 [ 303.155102][ T9696] ? security_capable+0x80/0x260 [ 303.155139][ T9696] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 303.155178][ T9696] ksys_unshare+0x473/0xad0 [ 303.155221][ T9696] ? __pfx_ksys_unshare+0x10/0x10 [ 303.155277][ T9696] __x64_sys_unshare+0x31/0x40 [ 303.155317][ T9696] do_syscall_64+0x106/0xf80 [ 303.155348][ T9696] ? clear_bhb_loop+0x40/0x90 [ 303.155387][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.155421][ T9696] RIP: 0033:0x7f2ad379c819 [ 303.155445][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.155477][ T9696] RSP: 002b:00007f2ad46a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.155507][ T9696] RAX: ffffffffffffffda RBX: 00007f2ad3a15fa0 RCX: 00007f2ad379c819 [ 303.155528][ T9696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 303.155547][ T9696] RBP: 00007f2ad3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 303.155565][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.155584][ T9696] R13: 00007f2ad3a16038 R14: 00007f2ad3a15fa0 R15: 00007ffd1114fa68 [ 303.155624][ T9696] [ 308.809455][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 309.074439][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 310.432265][ T9814] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 314.446328][ T9894] FAULT_INJECTION: forcing a failure. [ 314.446328][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 314.485140][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: syz.4.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.485196][ T9894] Tainted: [L]=SOFTLOCKUP [ 314.485208][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.485228][ T9894] Call Trace: [ 314.485238][ T9894] [ 314.485251][ T9894] dump_stack_lvl+0x100/0x190 [ 314.485308][ T9894] should_fail_ex.cold+0x5/0xa [ 314.485350][ T9894] should_failslab+0xc2/0x120 [ 314.485389][ T9894] __kmalloc_cache_noprof+0x7a/0x6f0 [ 314.485436][ T9894] ? snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 314.485489][ T9894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.485530][ T9894] snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 314.485583][ T9894] ? fixup_unreferenced_params+0x4b5/0xea0 [ 314.485636][ T9894] snd_pcm_hw_params+0x1729/0x1cb0 [ 314.485696][ T9894] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 314.485761][ T9894] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 314.485816][ T9894] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 314.485871][ T9894] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 314.485925][ T9894] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 314.485990][ T9894] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 314.486034][ T9894] ? task_work_add+0x201/0x3b0 [ 314.486085][ T9894] ? __pfx___mutex_lock+0x10/0x10 [ 314.486146][ T9894] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 314.486194][ T9894] snd_pcm_oss_sync+0x265/0x840 [ 314.486247][ T9894] snd_pcm_oss_release+0x238/0x300 [ 314.486293][ T9894] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 314.486341][ T9894] __fput+0x3ff/0xb40 [ 314.486393][ T9894] task_work_run+0x150/0x240 [ 314.486445][ T9894] ? __pfx_task_work_run+0x10/0x10 [ 314.486505][ T9894] exit_to_user_mode_loop+0x100/0x4a0 [ 314.486554][ T9894] do_syscall_64+0x668/0xf80 [ 314.486586][ T9894] ? clear_bhb_loop+0x40/0x90 [ 314.486625][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.486660][ T9894] RIP: 0033:0x7f06f8b9c819 [ 314.486685][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.486726][ T9894] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 314.486758][ T9894] RAX: 0000000000000000 RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 314.486779][ T9894] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 314.486798][ T9894] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 314.486818][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.486838][ T9894] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 314.486882][ T9894] [ 316.039080][ T9923] FAULT_INJECTION: forcing a failure. [ 316.039080][ T9923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.052758][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.4.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.052796][ T9923] Tainted: [L]=SOFTLOCKUP [ 316.052804][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.052819][ T9923] Call Trace: [ 316.052826][ T9923] [ 316.052835][ T9923] dump_stack_lvl+0x100/0x190 [ 316.052877][ T9923] should_fail_ex.cold+0x5/0xa [ 316.052902][ T9923] ? prepare_alloc_pages+0x16d/0x5f0 [ 316.052936][ T9923] should_fail_alloc_page+0xeb/0x140 [ 316.052965][ T9923] prepare_alloc_pages+0x1f0/0x5f0 [ 316.052999][ T9923] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 316.053043][ T9923] ? __pfx_css_rstat_updated+0x10/0x10 [ 316.053072][ T9923] ? look_up_lock_class+0x64/0x120 [ 316.053096][ T9923] ? kasan_save_stack+0x30/0x50 [ 316.053118][ T9923] ? register_lock_class+0x40/0x560 [ 316.053158][ T9923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 316.053205][ T9923] ? __asan_memcpy+0x3c/0x60 [ 316.053245][ T9923] ? __pfx_interleave_nid+0x10/0x10 [ 316.053283][ T9923] ? lock_acquire+0x1cf/0x380 [ 316.053315][ T9923] ? find_held_lock+0x2b/0x80 [ 316.053338][ T9923] ? page_table_check_set+0x49a/0xa10 [ 316.053366][ T9923] ? policy_nodemask+0xed/0x4f0 [ 316.053395][ T9923] alloc_pages_mpol+0x1fb/0x550 [ 316.053423][ T9923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 316.053458][ T9923] folio_alloc_mpol_noprof+0x36/0x340 [ 316.053514][ T9923] vma_alloc_folio_noprof+0xed/0x1d0 [ 316.053561][ T9923] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 316.053623][ T9923] do_anonymous_page+0xb3a/0x1fb0 [ 316.053687][ T9923] __handle_mm_fault+0x1d48/0x2b60 [ 316.053737][ T9923] ? __pfx___handle_mm_fault+0x10/0x10 [ 316.053774][ T9923] ? pte_offset_map_lock+0x174/0x320 [ 316.053801][ T9923] ? find_held_lock+0x2b/0x80 [ 316.053852][ T9923] ? follow_page_pte+0x5b3/0x1400 [ 316.053902][ T9923] handle_mm_fault+0x36d/0xa20 [ 316.053960][ T9923] __get_user_pages+0xf9c/0x34d0 [ 316.054001][ T9923] ? __pfx___get_user_pages+0x10/0x10 [ 316.054038][ T9923] populate_vma_page_range+0x267/0x3f0 [ 316.054072][ T9923] ? __pfx_populate_vma_page_range+0x10/0x10 [ 316.054103][ T9923] ? __pfx_find_vma_intersection+0x10/0x10 [ 316.054132][ T9923] ? do_mmap+0x93f/0x12f0 [ 316.054186][ T9923] __mm_populate+0x107/0x3a0 [ 316.054237][ T9923] ? __pfx___mm_populate+0x10/0x10 [ 316.054271][ T9923] ? up_write+0x290/0x4f0 [ 316.054310][ T9923] vm_mmap_pgoff+0x37f/0x470 [ 316.054342][ T9923] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 316.054373][ T9923] ? do_futex+0x192/0x350 [ 316.054405][ T9923] ? __pfx_do_futex+0x10/0x10 [ 316.054443][ T9923] ksys_mmap_pgoff+0xe1/0x650 [ 316.054471][ T9923] ? __x64_sys_futex+0x34f/0x4d0 [ 316.054502][ T9923] ? __x64_sys_futex+0x358/0x4d0 [ 316.054535][ T9923] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 316.054563][ T9923] ? __pfx___x64_sys_futex+0x10/0x10 [ 316.054597][ T9923] ? __pfx_do_writev+0x10/0x10 [ 316.054640][ T9923] __x64_sys_mmap+0x125/0x190 [ 316.054712][ T9923] do_syscall_64+0x106/0xf80 [ 316.054738][ T9923] ? clear_bhb_loop+0x40/0x90 [ 316.054768][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.054793][ T9923] RIP: 0033:0x7f06f8b9c819 [ 316.054814][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.054838][ T9923] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.054860][ T9923] RAX: ffffffffffffffda RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 316.054876][ T9923] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 316.054891][ T9923] RBP: 00007f06f8c32c91 R08: 0000000000000002 R09: 0000000000008000 [ 316.054906][ T9923] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 316.054922][ T9923] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 316.054953][ T9923] [ 316.714138][ T9931] FAULT_INJECTION: forcing a failure. [ 316.714138][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 316.726952][ T9931] CPU: 1 UID: 0 PID: 9931 Comm: syz.4.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.726995][ T9931] Tainted: [L]=SOFTLOCKUP [ 316.727004][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.727021][ T9931] Call Trace: [ 316.727030][ T9931] [ 316.727040][ T9931] dump_stack_lvl+0x100/0x190 [ 316.727088][ T9931] should_fail_ex.cold+0x5/0xa [ 316.727122][ T9931] should_failslab+0xc2/0x120 [ 316.727153][ T9931] __kmalloc_cache_noprof+0x7a/0x6f0 [ 316.727192][ T9931] ? call_usermodehelper_setup+0xaf/0x360 [ 316.727241][ T9931] ? __pfx_free_modprobe_argv+0x10/0x10 [ 316.727281][ T9931] call_usermodehelper_setup+0xaf/0x360 [ 316.727331][ T9931] __request_module+0x3c7/0x6c0 [ 316.727371][ T9931] ? __pfx___request_module+0x10/0x10 [ 316.727420][ T9931] ? __get_fs_type+0x12c/0x170 [ 316.727453][ T9931] ? __get_fs_type+0x12c/0x170 [ 316.727501][ T9931] get_fs_type+0xd7/0x190 [ 316.727539][ T9931] __x64_sys_fsopen+0xca/0x220 [ 316.727585][ T9931] do_syscall_64+0x106/0xf80 [ 316.727624][ T9931] ? clear_bhb_loop+0x40/0x90 [ 316.727658][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.727687][ T9931] RIP: 0033:0x7f06f8b9c819 [ 316.727709][ T9931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.727736][ T9931] RSP: 002b:00007f06f9aef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 316.727761][ T9931] RAX: ffffffffffffffda RBX: 00007f06f8e15fa0 RCX: 00007f06f8b9c819 [ 316.727780][ T9931] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 316.727814][ T9931] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 316.727834][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.727853][ T9931] R13: 00007f06f8e16038 R14: 00007f06f8e15fa0 R15: 00007ffdb8507c88 [ 316.727896][ T9931] [ 317.237257][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.243927][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.551560][ T9959] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1420'. [ 319.113016][ T9971] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 319.117847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.127814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.365085][ T5147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.377744][ T5147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.385884][ T5147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.406392][ T5147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.414378][ T5147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.492691][T10006] phram: parameter too long [ 321.831906][T10007] chnl_net:caif_netlink_parms(): no params data found [ 321.965262][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.972595][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.985246][T10007] bridge_slave_0: entered allmulticast mode [ 321.993280][T10007] bridge_slave_0: entered promiscuous mode [ 322.010002][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.017342][T10007] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.024716][T10007] bridge_slave_1: entered allmulticast mode [ 322.033426][T10007] bridge_slave_1: entered promiscuous mode [ 322.133358][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.171710][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.257870][T10007] team0: Port device team_slave_0 added [ 322.266958][T10007] team0: Port device team_slave_1 added [ 322.306149][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.314863][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.340944][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.353837][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.365272][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.391844][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.457679][T10007] hsr_slave_0: entered promiscuous mode [ 322.465079][T10007] hsr_slave_1: entered promiscuous mode [ 322.471633][T10007] debugfs: 'hsr0' already exists in 'hsr' [ 322.477514][T10007] Cannot create hsr debugfs directory [ 322.595923][T10036] syz.6.1452 (10036): /proc/10035/oom_adj is deprecated, please use /proc/10035/oom_score_adj instead. [ 322.774064][T10042] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1446'. [ 323.118040][T10007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.137473][T10007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.155508][T10007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.167505][T10007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.280057][T10007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.306105][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.332230][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.339491][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.359143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.366377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.475143][ T5147] Bluetooth: hci7: command tx timeout [ 324.029351][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.330245][T10007] veth0_vlan: entered promiscuous mode [ 324.342096][T10007] veth1_vlan: entered promiscuous mode [ 324.380618][T10007] veth0_macvtap: entered promiscuous mode [ 324.392478][T10007] veth1_macvtap: entered promiscuous mode [ 324.412970][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.428123][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.454188][ T1345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.466981][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.490362][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.501042][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.564091][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.576974][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.618403][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.627904][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.554512][ T5147] Bluetooth: hci7: command tx timeout [ 326.191429][T10093] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1467'. [ 327.564018][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1472'. [ 327.577382][T10128] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1471'. [ 327.647526][ T5147] Bluetooth: hci7: command tx timeout [ 327.762706][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 327.773378][T10134] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1474'. [ 329.721734][ T5147] Bluetooth: hci7: command tx timeout [ 329.885377][T10170] netlink: 'syz.6.1486': attribute type 21 has an invalid length. [ 329.896328][T10170] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1486'. [ 331.107913][T10208] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1501'. [ 331.162919][T10210] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1502'. [ 331.346779][T10215] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 331.645449][T10226] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1509'. [ 334.063548][T10276] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1525'. [ 334.189364][T10285] futex_wake_op: syz.5.1527 tries to shift op by -2048; fix this program [ 334.222734][T10285] futex_wake_op: syz.5.1527 tries to shift op by -2048; fix this program [ 334.467476][T10293] netlink: 'syz.5.1529': attribute type 64 has an invalid length. [ 334.477636][T10293] netlink: 74 bytes leftover after parsing attributes in process `syz.5.1529'. [ 334.676845][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 335.360576][T10309] netlink: 'syz.7.1536': attribute type 4 has an invalid length. [ 335.477541][T10311] FAULT_INJECTION: forcing a failure. [ 335.477541][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 335.530808][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.6.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.530861][T10311] Tainted: [L]=SOFTLOCKUP [ 335.530874][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.530894][T10311] Call Trace: [ 335.530904][T10311] [ 335.530917][T10311] dump_stack_lvl+0x100/0x190 [ 335.530974][T10311] should_fail_ex.cold+0x5/0xa [ 335.531017][T10311] should_failslab+0xc2/0x120 [ 335.531056][T10311] __kmalloc_cache_noprof+0x7a/0x6f0 [ 335.531104][T10311] ? alloc_tty_struct+0x96/0x8c0 [ 335.531147][T10311] alloc_tty_struct+0x96/0x8c0 [ 335.531185][T10311] ? __pfx_alloc_tty_struct+0x10/0x10 [ 335.531245][T10311] pty_common_install+0x1c7/0xb30 [ 335.531298][T10311] ? __pfx_pty_unix98_install+0x10/0x10 [ 335.531349][T10311] tty_init_dev.part.0+0x9e/0x470 [ 335.531404][T10311] tty_init_dev+0x60/0x80 [ 335.531437][T10311] ptmx_open+0x15e/0x3c0 [ 335.531479][T10311] ? __pfx_ptmx_open+0x10/0x10 [ 335.531520][T10311] chrdev_open+0x234/0x6a0 [ 335.531553][T10311] ? __pfx_apparmor_file_open+0x10/0x10 [ 335.531584][T10311] ? __pfx_chrdev_open+0x10/0x10 [ 335.531617][T10311] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 335.531653][T10311] do_dentry_open+0x6d8/0x1660 [ 335.531679][T10311] ? __pfx_chrdev_open+0x10/0x10 [ 335.531714][T10311] vfs_open+0x82/0x3f0 [ 335.531760][T10311] path_openat+0x208c/0x31a0 [ 335.531802][T10311] ? __pfx_path_openat+0x10/0x10 [ 335.531845][T10311] do_file_open+0x20e/0x430 [ 335.531873][T10311] ? __pfx_do_file_open+0x10/0x10 [ 335.531923][T10311] ? alloc_fd+0x476/0x790 [ 335.531955][T10311] ? do_getname+0x191/0x390 [ 335.531999][T10311] do_sys_openat2+0x10d/0x1e0 [ 335.532040][T10311] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.532086][T10311] ? __fget_files+0x21f/0x3d0 [ 335.532126][T10311] __x64_sys_openat+0x12d/0x210 [ 335.532168][T10311] ? __pfx___x64_sys_openat+0x10/0x10 [ 335.532229][T10311] do_syscall_64+0x106/0xf80 [ 335.532259][T10311] ? clear_bhb_loop+0x40/0x90 [ 335.532317][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.532352][T10311] RIP: 0033:0x7f60c659c819 [ 335.532379][T10311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.532419][T10311] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.532452][T10311] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 335.532473][T10311] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 335.532494][T10311] RBP: 00007f60c6632c91 R08: 0000000000000000 R09: 0000000000000000 [ 335.532514][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.532533][T10311] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 335.532578][T10311] [ 335.945506][T10315] FAULT_INJECTION: forcing a failure. [ 335.945506][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 336.001212][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.7.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.001259][T10315] Tainted: [L]=SOFTLOCKUP [ 336.001270][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 336.001288][T10315] Call Trace: [ 336.001298][T10315] [ 336.001309][T10315] dump_stack_lvl+0x100/0x190 [ 336.001362][T10315] should_fail_ex.cold+0x5/0xa [ 336.001399][T10315] should_failslab+0xc2/0x120 [ 336.001435][T10315] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 336.001484][T10315] ? security_inode_alloc+0x3b/0x2c0 [ 336.001520][T10315] ? lockdep_init_map_type+0x5c/0x250 [ 336.001569][T10315] security_inode_alloc+0x3b/0x2c0 [ 336.001608][T10315] inode_init_always_gfp+0xced/0x1040 [ 336.001647][T10315] alloc_inode+0x8e/0x250 [ 336.001691][T10315] new_inode+0x22/0x1c0 [ 336.001738][T10315] proc_pid_make_inode+0x22/0x160 [ 336.001786][T10315] proc_ns_dir_lookup+0x25b/0x390 [ 336.001838][T10315] lookup_open.isra.0+0x631/0x11b0 [ 336.001895][T10315] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 336.001966][T10315] ? mnt_get_write_access+0x1e9/0x2f0 [ 336.002018][T10315] path_openat+0xa98/0x31a0 [ 336.002065][T10315] ? __pfx_path_openat+0x10/0x10 [ 336.002124][T10315] do_file_open+0x20e/0x430 [ 336.002164][T10315] ? __pfx_do_file_open+0x10/0x10 [ 336.002214][T10315] ? __pfx_kfree_link+0x10/0x10 [ 336.002272][T10315] ? alloc_fd+0x476/0x790 [ 336.002309][T10315] ? do_getname+0x191/0x390 [ 336.002356][T10315] do_sys_openat2+0x10d/0x1e0 [ 336.002400][T10315] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.002445][T10315] ? find_held_lock+0x2b/0x80 [ 336.002487][T10315] __x64_sys_openat+0x12d/0x210 [ 336.002532][T10315] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.002592][T10315] do_syscall_64+0x106/0xf80 [ 336.002623][T10315] ? clear_bhb_loop+0x40/0x90 [ 336.002661][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.002693][T10315] RIP: 0033:0x7f257815d04e [ 336.002719][T10315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.002749][T10315] RSP: 002b:00007f25790e3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.002778][T10315] RAX: ffffffffffffffda RBX: 00007f25790e46c0 RCX: 00007f257815d04e [ 336.002799][T10315] RDX: 0000000000000002 RSI: 00007f25790e3f90 RDI: ffffffffffffff9c [ 336.002819][T10315] RBP: 00007f2578232c91 R08: 0000000000000000 R09: 0000000000000000 [ 336.002838][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.002856][T10315] R13: 00007f2578416038 R14: 00007f2578415fa0 R15: 00007ffdd5b81518 [ 336.002897][T10315] [ 336.631074][T10334] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1545'. [ 336.739104][T10337] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1546'. [ 338.075850][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'. [ 338.863082][T10389] bond0: option all_slaves_active: invalid value (7) [ 339.025234][T10393] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1569'. [ 339.046343][T10393] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1569'. [ 339.184011][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1571'. [ 339.235239][T10398] hsr_slave_0: left promiscuous mode [ 339.248159][T10398] hsr_slave_1: left promiscuous mode [ 339.515317][T10407] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 340.096085][T10421] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1587'. [ 344.643829][ T5841] Bluetooth: hci6: unexpected event 0x3e length: 726 > 260 [ 344.643873][ T5841] Bluetooth: hci6: unexpected subevent 0x0d length: 725 > 260 [ 344.664427][ T5841] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 344.664527][ T5841] Bluetooth: hci6: Malformed LE Event: 0x0d [ 348.238008][T10596] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1640'. [ 349.979234][T10632] FAULT_INJECTION: forcing a failure. [ 349.979234][T10632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.993185][T10632] CPU: 0 UID: 0 PID: 10632 Comm: syz.6.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.993235][T10632] Tainted: [L]=SOFTLOCKUP [ 349.993246][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.993266][T10632] Call Trace: [ 349.993277][T10632] [ 349.993289][T10632] dump_stack_lvl+0x100/0x190 [ 349.993346][T10632] should_fail_ex.cold+0x5/0xa [ 349.993387][T10632] ? prepare_alloc_pages+0x16d/0x5f0 [ 349.993432][T10632] should_fail_alloc_page+0xeb/0x140 [ 349.993475][T10632] prepare_alloc_pages+0x1f0/0x5f0 [ 349.993521][T10632] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 349.993577][T10632] ? mas_next_slot+0x1003/0x18b0 [ 349.993624][T10632] ? __pfx___up_read+0x10/0x10 [ 349.993673][T10632] ? validate_mm+0x261/0x4e0 [ 349.993719][T10632] ? validate_mm+0x261/0x4e0 [ 349.993770][T10632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.993828][T10632] ? validate_mm+0x392/0x4e0 [ 349.993880][T10632] ? __pfx_validate_mm+0x10/0x10 [ 349.993937][T10632] ? __pfx___vma_start_write+0x10/0x10 [ 349.993984][T10632] ? vma_iter_store_overwrite+0x392/0x650 [ 349.994031][T10632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.994087][T10632] ? policy_nodemask+0xed/0x4f0 [ 349.994129][T10632] alloc_pages_mpol+0x1fb/0x550 [ 349.994172][T10632] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 349.994219][T10632] alloc_pages_noprof+0x136/0x390 [ 349.994259][T10632] __pmd_alloc+0x3b/0x950 [ 349.994304][T10632] move_page_tables+0x3224/0x4500 [ 349.994366][T10632] ? __pfx_copy_vma+0x10/0x10 [ 349.994433][T10632] ? __pfx_move_page_tables+0x10/0x10 [ 349.994510][T10632] ? finish_task_switch.isra.0+0x200/0xb80 [ 349.994554][T10632] copy_vma_and_data+0x25c/0x7c0 [ 349.994610][T10632] ? __pfx_copy_vma_and_data+0x10/0x10 [ 349.994679][T10632] ? __vma_start_write+0x17f/0x280 [ 349.994726][T10632] ? __pfx___vma_start_write+0x10/0x10 [ 349.994782][T10632] move_vma+0x51b/0x1890 [ 349.994839][T10632] ? __pfx_move_vma+0x10/0x10 [ 349.994893][T10632] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 349.994936][T10632] ? cap_mmap_addr+0x4b/0x120 [ 349.994968][T10632] ? bpf_lsm_mmap_addr+0x9/0x30 [ 349.995001][T10632] ? security_mmap_addr+0x71/0x1e0 [ 349.995047][T10632] ? __get_unmapped_area+0x255/0x3e0 [ 349.995091][T10632] ? vrm_set_new_addr+0x204/0x290 [ 349.995145][T10632] mremap_to+0x1b7/0x450 [ 349.995197][T10632] do_mremap+0xb76/0x2130 [ 349.995265][T10632] ? __pfx_do_mremap+0x10/0x10 [ 349.995324][T10632] ? ksys_write+0x190/0x250 [ 349.995374][T10632] __do_sys_mremap+0x126/0x170 [ 349.995428][T10632] ? __pfx___do_sys_mremap+0x10/0x10 [ 349.995492][T10632] ? __x64_sys_futex+0x34f/0x4d0 [ 349.995563][T10632] do_syscall_64+0x106/0xf80 [ 349.995596][T10632] ? clear_bhb_loop+0x40/0x90 [ 349.995637][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.995672][T10632] RIP: 0033:0x7f60c659c819 [ 349.995699][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.995732][T10632] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 349.995764][T10632] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 349.995787][T10632] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 349.995807][T10632] RBP: 00007f60c6632c91 R08: 0000000100000000 R09: 0000000000000000 [ 349.995828][T10632] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 349.995848][T10632] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 349.995893][T10632] [ 350.451863][T10634] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1653'. [ 350.799488][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 350.848628][T10644] hsr_slave_0: left promiscuous mode [ 350.874478][T10644] hsr_slave_1: left promiscuous mode [ 351.878799][T10668] FAULT_INJECTION: forcing a failure. [ 351.878799][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 351.951609][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.4.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.951658][T10668] Tainted: [L]=SOFTLOCKUP [ 351.951670][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.951688][T10668] Call Trace: [ 351.951697][T10668] [ 351.951708][T10668] dump_stack_lvl+0x100/0x190 [ 351.951761][T10668] should_fail_ex.cold+0x5/0xa [ 351.951799][T10668] should_failslab+0xc2/0x120 [ 351.951834][T10668] __kvmalloc_node_noprof+0xfa/0xa00 [ 351.951863][T10668] ? alloc_fdtable+0x110/0x2d0 [ 351.951901][T10668] alloc_fdtable+0x110/0x2d0 [ 351.951932][T10668] dup_fd+0x995/0xd10 [ 351.951975][T10668] ? fd_statfs+0xdd/0x120 [ 351.952031][T10668] ksys_unshare+0x7ad/0xad0 [ 351.952074][T10668] ? __pfx_ksys_unshare+0x10/0x10 [ 351.952128][T10668] __x64_sys_unshare+0x31/0x40 [ 351.952168][T10668] do_syscall_64+0x106/0xf80 [ 351.952199][T10668] ? clear_bhb_loop+0x40/0x90 [ 351.952239][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.952270][T10668] RIP: 0033:0x7f06f8b9c819 [ 351.952296][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.952326][T10668] RSP: 002b:00007f06f9ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.952356][T10668] RAX: ffffffffffffffda RBX: 00007f06f8e16090 RCX: 00007f06f8b9c819 [ 351.952376][T10668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 351.952395][T10668] RBP: 00007f06f8c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 351.952413][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.952430][T10668] R13: 00007f06f8e16128 R14: 00007f06f8e16090 R15: 00007ffdb8507c88 [ 351.952471][T10668] [ 354.182708][T10723] netlink: 'syz.4.1684': attribute type 27 has an invalid length. [ 354.190847][T10723] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1684'. [ 355.489901][T10747] FAULT_INJECTION: forcing a failure. [ 355.489901][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 355.503019][T10747] CPU: 0 UID: 0 PID: 10747 Comm: syz.6.1695 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.503071][T10747] Tainted: [L]=SOFTLOCKUP [ 355.503083][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.503103][T10747] Call Trace: [ 355.503114][T10747] [ 355.503127][T10747] dump_stack_lvl+0x100/0x190 [ 355.503185][T10747] should_fail_ex.cold+0x5/0xa [ 355.503226][T10747] should_failslab+0xc2/0x120 [ 355.503265][T10747] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 355.503317][T10747] ? __send_signal_locked+0x155/0x12d0 [ 355.503380][T10747] __send_signal_locked+0x155/0x12d0 [ 355.503445][T10747] group_send_sig_info+0x2a4/0x300 [ 355.503486][T10747] ? __pfx_group_send_sig_info+0x10/0x10 [ 355.503539][T10747] ? kill_pid_info_type+0x1a/0x290 [ 355.503576][T10747] kill_pid_info_type+0x92/0x290 [ 355.503621][T10747] kill_proc_info+0x6f/0x1b0 [ 355.503672][T10747] kill_something_info+0x2a0/0x310 [ 355.503720][T10747] __x64_sys_kill+0x1c4/0x250 [ 355.503763][T10747] ? __pfx___x64_sys_kill+0x10/0x10 [ 355.503827][T10747] do_syscall_64+0x106/0xf80 [ 355.503860][T10747] ? clear_bhb_loop+0x40/0x90 [ 355.503900][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.503938][T10747] RIP: 0033:0x7f60c659c819 [ 355.503966][T10747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.503999][T10747] RSP: 002b:00007f60c74df028 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 355.504031][T10747] RAX: ffffffffffffffda RBX: 00007f60c6815fa0 RCX: 00007f60c659c819 [ 355.504054][T10747] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000257 [ 355.504075][T10747] RBP: 00007f60c6632c91 R08: 0000000000000000 R09: 0000000000000000 [ 355.504095][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.504115][T10747] R13: 00007f60c6816038 R14: 00007f60c6815fa0 R15: 00007ffc4dad1998 [ 355.504157][T10747] [ 356.415156][T10767] phram: not enough arguments [ 357.372895][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1707'. [ 357.384462][T10786] hsr_slave_0: left promiscuous mode [ 357.390752][T10786] hsr_slave_1: left promiscuous mode [ 357.941533][T10803] netlink: 334 bytes leftover after parsing attributes in process `syz.7.1713'. [ 358.198266][ T30] INFO: task syz-executor:5832 blocked for more than 163 seconds. [ 358.211715][ T30] Tainted: G L syzkaller #0 [ 358.226493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.262503][ T30] task:syz-executor state:D stack:22408 pid:5832 tgid:5832 ppid:1 task_flags:0x400140 flags:0x00080002 [ 358.285311][ T30] Call Trace: [ 358.288916][ T30] [ 358.292362][ T30] __schedule+0xfee/0x6120 [ 358.298033][ T30] ? __lock_acquire+0x4a5/0x2630 [ 358.303283][ T30] ? __pfx___schedule+0x10/0x10 [ 358.308339][ T30] ? find_held_lock+0x2b/0x80 [ 358.313126][ T30] ? schedule+0x2bf/0x390 [ 358.320537][ T30] schedule+0xdd/0x390 [ 358.325098][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.330845][ T30] __mutex_lock+0xc9a/0x1b90 [ 358.368486][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 358.381818][ T30] ? __lock_acquire+0x4a5/0x2630 [ 358.393722][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.424313][ T30] ? net_generic+0xea/0x2a0 [ 358.429001][ T30] ? net_generic+0xea/0x2a0 [ 358.456082][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 358.463376][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 358.488987][ T30] nfsd_umount+0x3b/0x60 [ 358.493440][ T30] deactivate_locked_super+0xc1/0x1b0 [ 358.514260][ T30] deactivate_super+0xe7/0x110 [ 358.519186][ T30] cleanup_mnt+0x21f/0x450 [ 358.544123][ T30] task_work_run+0x150/0x240 [ 358.548975][ T30] ? __pfx_task_work_run+0x10/0x10 [ 358.574224][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 358.584235][ T30] do_syscall_64+0x668/0xf80 [ 358.588992][ T30] ? clear_bhb_loop+0x40/0x90 [ 358.599759][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.606212][ T30] RIP: 0033:0x7f747939da57 [ 358.610816][ T30] RSP: 002b:00007ffef0415798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.619716][ T30] RAX: 0000000000000000 RBX: 00007f7479432048 RCX: 00007f747939da57 [ 358.628026][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0415850 [ 358.636406][ T30] RBP: 00007ffef0415850 R08: 00007ffef0416850 R09: 00000000ffffffff [ 358.644742][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef04168e0 [ 358.652949][ T30] R13: 00007f7479432048 R14: 000000000002f604 R15: 00007ffef0416920 [ 358.661378][ T30] [ 358.692341][ T30] INFO: task syz.3.537:7403 blocked for more than 184 seconds. [ 358.731083][ T30] Tainted: G L syzkaller #0 [ 358.744285][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.760928][ T30] task:syz.3.537 state:D stack:27704 pid:7403 tgid:7400 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 358.794798][ T30] Call Trace: [ 358.802711][ T30] [ 358.809256][ T30] __schedule+0xfee/0x6120 [ 358.821468][ T30] ? __lock_acquire+0x4a5/0x2630 [ 358.845462][ T30] ? __pfx___schedule+0x10/0x10 [ 358.854996][ T30] ? find_held_lock+0x2b/0x80 [ 358.864412][ T30] ? schedule+0x2bf/0x390 [ 358.873549][ T30] schedule+0xdd/0x390 [ 358.881154][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.886970][ T30] __mutex_lock+0xc9a/0x1b90 [ 358.891740][ T30] ? kasan_save_track+0x14/0x30 [ 358.896975][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 358.903998][ T30] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 358.910745][ T30] ? netlink_rcv_skb+0x159/0x420 [ 358.923273][ T30] ? genl_rcv+0x28/0x40 [ 358.928027][ T30] ? ____sys_sendmsg+0x9e1/0xb70 [ 358.933120][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.938576][ T30] ? __asan_memset+0x23/0x50 [ 358.943301][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 358.984276][ T30] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 358.990304][ T30] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 358.996402][ T30] ? rcu_is_watching+0x12/0xc0 [ 359.001274][ T30] ? trace_kmalloc+0x101/0x130 [ 359.006363][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 359.012819][ T30] ? __nla_parse+0x40/0x60 [ 359.024231][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 359.031255][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 359.044202][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 359.050198][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 359.065255][ T30] ? genl_get_cmd+0x3ef/0x720 [ 359.070049][ T30] ? bpf_lsm_capable+0x9/0x10 [ 359.090106][ T30] ? security_capable+0x80/0x260 [ 359.124244][ T30] genl_rcv_msg+0x560/0x800 [ 359.128928][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.134014][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 359.205459][ T30] netlink_rcv_skb+0x159/0x420 [ 359.210407][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.224191][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.229654][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 359.268891][ T30] genl_rcv+0x28/0x40 [ 359.273057][ T30] netlink_unicast+0x5aa/0x870 [ 359.294258][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 359.299669][ T30] ? __pfx___might_resched+0x10/0x10 [ 359.311155][ T30] ? __lock_acquire+0x4a5/0x2630 [ 359.316424][ T30] netlink_sendmsg+0x8b0/0xda0 [ 359.321275][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.326859][ T30] ? __import_iovec+0x1d2/0x640 [ 359.331800][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 359.347065][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 359.352006][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.364226][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.369621][ T30] ? kasan_quarantine_put+0x104/0x240 [ 359.399089][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 359.405645][ T30] ___sys_sendmsg+0x190/0x1e0 [ 359.410405][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.432400][ T30] ? tomoyo_path_number_perm+0x188/0x580 [ 359.438456][ T30] __sys_sendmsg+0x170/0x220 [ 359.443128][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.462427][ T30] ? rcu_is_watching+0x12/0xc0 [ 359.468413][ T30] ? kcov_ioctl+0x16a/0x720 [ 359.472993][ T30] do_syscall_64+0x106/0xf80 [ 359.479363][ T30] ? clear_bhb_loop+0x40/0x90 [ 359.496660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.502642][ T30] RIP: 0033:0x7f6623d9c819 [ 359.524200][ T30] RSP: 002b:00007f6624cdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.532696][ T30] RAX: ffffffffffffffda RBX: 00007f6624016090 RCX: 00007f6623d9c819 [ 359.554518][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 359.562589][ T30] RBP: 00007f6623e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 359.590432][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.614201][ T30] R13: 00007f6624016128 R14: 00007f6624016090 R15: 00007ffd1fbed448 [ 359.622282][ T30] [ 359.634326][ T30] [ 359.634326][ T30] Showing all locks held in the system: [ 359.642130][ T30] 1 lock held by khungtaskd/30: [ 359.674636][ T30] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 359.705335][ T30] 3 locks held by kworker/1:2/796: [ 359.710516][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 359.744189][ T30] #1: ffffc900039f7d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 359.764223][ T30] #2: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 359.784236][ T30] 4 locks held by kworker/u8:8/1331: [ 359.789593][ T30] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 359.801814][ T30] #1: ffffc9000581fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 359.811922][ T30] #2: ffffffff905fe490 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 359.821718][ T30] #3: ffffffff90616ce8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 359.830999][ T30] 1 lock held by klogd/5185: [ 359.835662][ T30] 2 locks held by syz-executor/5832: [ 359.840991][ T30] #0: ffff888038d180e0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 359.851462][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 359.861336][ T30] 2 locks held by syz-executor/5837: [ 359.866723][ T30] #0: ffff88803808a0e0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 359.877206][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 359.886932][ T30] 2 locks held by syz-executor/5839: [ 359.892258][ T30] #0: ffff8880563920e0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 359.904412][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 359.917472][ T30] 2 locks held by syz.3.537/7401: [ 359.922546][ T30] #0: ffffffff906c3030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.931098][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 359.942525][ T30] 2 locks held by syz.3.537/7403: [ 359.948388][ T30] #0: ffffffff906c3030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.958660][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 359.969051][ T30] 1 lock held by syz-executor/7999: [ 359.974347][ T30] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 359.984636][ T30] 2 locks held by getty/9221: [ 359.989339][ T30] #0: ffff8880355110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 360.001961][ T30] #1: ffffc90009d5f2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 360.065814][ T30] [ 360.068216][ T30] ============================================= [ 360.068216][ T30] [ 360.094279][ T30] NMI backtrace for cpu 1 [ 360.094311][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 360.094361][ T30] Tainted: [L]=SOFTLOCKUP [ 360.094371][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.094387][ T30] Call Trace: [ 360.094397][ T30] [ 360.094408][ T30] dump_stack_lvl+0x100/0x190 [ 360.094472][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 360.094524][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.094571][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 360.094619][ T30] sys_info+0x141/0x190 [ 360.094656][ T30] watchdog+0xd25/0x1050 [ 360.094698][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.094750][ T30] ? __kthread_parkme+0x18c/0x230 [ 360.094792][ T30] ? kthread+0x13a/0x450 [ 360.094834][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.094864][ T30] kthread+0x370/0x450 [ 360.094906][ T30] ? __pfx_kthread+0x10/0x10 [ 360.094953][ T30] ret_from_fork+0x754/0xd80 [ 360.095004][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 360.095057][ T30] ? __switch_to+0x7b4/0x1120 [ 360.095095][ T30] ? __pfx_kthread+0x10/0x10 [ 360.095143][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.095200][ T30] [ 360.095217][ T30] Sending NMI from CPU 1 to CPUs 0: [ 360.231810][ C0] NMI backtrace for cpu 0 [ 360.231833][ C0] CPU: 0 UID: 0 PID: 1209 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.231868][ C0] Tainted: [L]=SOFTLOCKUP [ 360.231876][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.231898][ C0] Workqueue: events drain_vmap_area_work [ 360.231930][ C0] RIP: 0010:lock_is_held_type+0x30/0x140 [ 360.231957][ C0] Code: ba b1 4b 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 65 8b 15 4a c9 7f 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 55 53 <48> 83 ec 08 65 48 8b 2d bc 81 7f 08 8b 95 54 0b 00 00 85 d2 0f 85 [ 360.231983][ C0] RSP: 0018:ffffc9000544f840 EFLAGS: 00000246 [ 360.232001][ C0] RAX: 00000000ffffffff RBX: 00000000000425dc RCX: 0000000000000001 [ 360.232016][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e7e7760 [ 360.232032][ C0] RBP: ffff88801c400000 R08: 0000000000000006 R09: 0000000000001000 [ 360.232047][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0001097700 [ 360.232062][ C0] R13: 00000053df7ce630 R14: 0000000000000000 R15: 0000000000000000 [ 360.232078][ C0] FS: 0000000000000000(0000) GS:ffff888124340000(0000) knlGS:0000000000000000 [ 360.232101][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.232117][ C0] CR2: 00007f06f9947e20 CR3: 0000000038390000 CR4: 00000000003526f0 [ 360.232133][ C0] Call Trace: [ 360.232140][ C0] [ 360.232152][ C0] lookup_page_ext+0x6e/0x100 [ 360.232176][ C0] page_ext_get+0x58/0x1a0 [ 360.232198][ C0] __reset_page_owner+0x2b/0x190 [ 360.232224][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 360.232260][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 360.232300][ C0] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 360.232346][ C0] __apply_to_page_range+0xb1d/0x1520 [ 360.232402][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 360.232447][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 360.232482][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 360.232527][ C0] __kasan_release_vmalloc+0xd7/0xe0 [ 360.232573][ C0] purge_vmap_node+0x210/0xb40 [ 360.232601][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 360.232635][ C0] ? preempt_schedule_common+0x42/0xc0 [ 360.232676][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 360.232702][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 360.232739][ C0] __purge_vmap_area_lazy+0x935/0xc20 [ 360.232770][ C0] drain_vmap_area_work+0x27/0x40 [ 360.232797][ C0] process_one_work+0xa23/0x19a0 [ 360.232842][ C0] ? __pfx_process_one_work+0x10/0x10 [ 360.232886][ C0] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 360.232916][ C0] worker_thread+0x5ef/0xe50 [ 360.232958][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.232995][ C0] ? kthread+0x13a/0x450 [ 360.233029][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.233065][ C0] kthread+0x370/0x450 [ 360.233097][ C0] ? __pfx_kthread+0x10/0x10 [ 360.233133][ C0] ret_from_fork+0x754/0xd80 [ 360.233172][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 360.233213][ C0] ? __switch_to+0x7b4/0x1120 [ 360.233241][ C0] ? __pfx_kthread+0x10/0x10 [ 360.233277][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.233333][ C0] [ 360.552412][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 360.559347][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 360.570105][ T30] Tainted: [L]=SOFTLOCKUP [ 360.574473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.584576][ T30] Call Trace: [ 360.587892][ T30] [ 360.590857][ T30] dump_stack_lvl+0x100/0x190 [ 360.595651][ T30] vpanic+0x552/0x970 [ 360.599678][ T30] ? __pfx_vpanic+0x10/0x10 [ 360.604228][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 360.610450][ T30] panic+0xd1/0xe0 [ 360.614223][ T30] ? __pfx_panic+0x10/0x10 [ 360.618705][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 360.624926][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 360.631133][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 360.637377][ T30] ? watchdog.cold+0x198/0x1ca [ 360.642187][ T30] ? watchdog+0xd35/0x1050 [ 360.646641][ T30] watchdog.cold+0x1a9/0x1ca [ 360.651298][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.656028][ T30] ? __kthread_parkme+0x18c/0x230 [ 360.661105][ T30] ? kthread+0x13a/0x450 [ 360.665409][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.670124][ T30] kthread+0x370/0x450 [ 360.674257][ T30] ? __pfx_kthread+0x10/0x10 [ 360.678902][ T30] ret_from_fork+0x754/0xd80 [ 360.683540][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 360.688704][ T30] ? __switch_to+0x7b4/0x1120 [ 360.693432][ T30] ? __pfx_kthread+0x10/0x10 [ 360.698081][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.702896][ T30] [ 360.706523][ T30] Kernel Offset: disabled [ 360.710866][ T30] Rebooting in 86400 seconds..