Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. 2026/10/19 00:19:21 parsed 1 programs 2026/10/19 00:19:21 serving rpc on tcp://41997 [ 71.038479][ T4199] cgroup: Unknown subsys name 'net' [ 71.162939][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.713746][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.574475][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.601914][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.614469][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.715954][ T3828] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.714770][ T4221] infiniband rxe0: set active [ 74.728727][ T4221] infiniband rxe0: added rxe_eth0 [ 74.783631][ T4221] RDS/IB: rxe0: added [ 74.788490][ T4221] smc: adding ib device rxe0 with port count 1 [ 74.795237][ T4221] smc: ib device rxe0 port 1 has pnetid [ 74.802360][ T3828] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.812841][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.914439][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.020856][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.146815][ T4221] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.345954][ T4221] chnl_net:caif_netlink_parms(): no params data found [ 75.420472][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.432078][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.440491][ T4221] device bridge_slave_0 entered promiscuous mode [ 75.451890][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.459162][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.470809][ T4221] device bridge_slave_1 entered promiscuous mode [ 75.497060][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.508711][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.538515][ T4221] team0: Port device team_slave_0 added [ 75.546817][ T4221] team0: Port device team_slave_1 added [ 75.569690][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.576848][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.603246][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.621202][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.628534][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.655503][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.695542][ T4221] device hsr_slave_0 entered promiscuous mode [ 75.702579][ T4221] device hsr_slave_1 entered promiscuous mode [ 75.850093][ T4221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.862460][ T4221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.874962][ T4221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.887464][ T4221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.920935][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.928248][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.936604][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.943953][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.008105][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.022967][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.035375][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.045666][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.054307][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.071685][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.084640][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.094097][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.101300][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.126424][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.136258][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.143358][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.155796][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.165611][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.189908][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.200651][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.209438][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.223761][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.357679][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.367018][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.381407][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.418036][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.430653][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.453079][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.464276][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.477584][ T4221] device veth0_vlan entered promiscuous mode [ 76.487937][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.496981][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.510814][ T4221] device veth1_vlan entered promiscuous mode [ 76.539434][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.550145][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.558516][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.568258][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.579370][ T4221] device veth0_macvtap entered promiscuous mode [ 76.592768][ T4221] device veth1_macvtap entered promiscuous mode [ 76.612241][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.621928][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.632160][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.640862][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.650622][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.664495][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.676247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.688305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.699924][ T4221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.709442][ T4221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.718419][ T4221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.727828][ T4221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.833114][ T4221] syz-executor (4221) used greatest stack depth: 20544 bytes left [ 76.879923][ T4266] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.017481][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.103322][ T4270] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.372307][ T4278] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.587727][ T4284] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.770749][ T4288] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.008871][ T4292] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.199126][ T4296] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.382501][ T4299] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.513211][ T4301] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.676479][ T4305] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.792419][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.803397][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.823027][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.836800][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.844671][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.853269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.927870][ T4309] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/19 00:19:32 executed programs: 0 [ 79.370510][ T4312] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.416264][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.522806][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 79.571869][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579315][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.587482][ T4312] device bridge_slave_0 entered promiscuous mode [ 79.596253][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.603448][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.611731][ T4312] device bridge_slave_1 entered promiscuous mode [ 79.633744][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.646410][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.670063][ T4312] team0: Port device team_slave_0 added [ 79.679529][ T4312] team0: Port device team_slave_1 added [ 79.698291][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.705478][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.731933][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.744042][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.751505][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.777946][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.809836][ T4312] device hsr_slave_0 entered promiscuous mode [ 79.817082][ T4312] device hsr_slave_1 entered promiscuous mode [ 79.823796][ T4312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.831916][ T4312] Cannot create hsr debugfs directory [ 81.376192][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 82.341155][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.393966][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.420057][ T4312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.430049][ T4312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.443653][ T4312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.454245][ T4312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.455386][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 83.543866][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.562508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.572569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.587104][ T144] device hsr_slave_0 left promiscuous mode [ 83.594219][ T144] device hsr_slave_1 left promiscuous mode [ 83.601452][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.609329][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.620711][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.628278][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.636241][ T144] device bridge_slave_1 left promiscuous mode [ 83.643252][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.657698][ T144] device bridge_slave_0 left promiscuous mode [ 83.664377][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.684194][ T144] device veth1_macvtap left promiscuous mode [ 83.690912][ T144] device veth0_macvtap left promiscuous mode [ 83.697415][ T144] device veth1_vlan left promiscuous mode [ 83.703431][ T144] device veth0_vlan left promiscuous mode [ 83.871517][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.885559][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.900141][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.914666][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.976489][ T144] bond0 (unregistering): Released all slaves [ 84.002997][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.014120][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.023510][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.032437][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.039570][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.048308][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.064427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.073718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.082517][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.089605][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.100647][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.119377][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.129245][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.143190][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.153675][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.167285][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.176065][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.197113][ T4312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.209890][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.223595][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.232901][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.241832][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.250438][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.264340][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.358125][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.366035][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.379726][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.406876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.416004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.431514][ T4312] device veth0_vlan entered promiscuous mode [ 84.446620][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.457796][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.476832][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.495256][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.516951][ T4256] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.526598][ T4312] device veth1_vlan entered promiscuous mode [ 84.556781][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.569487][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.595729][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.616306][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.637666][ T4312] device veth0_macvtap entered promiscuous mode [ 84.669299][ T4312] device veth1_macvtap entered promiscuous mode [ 84.699706][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.715273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.724103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.755861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.778956][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.796603][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.816277][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.838185][ T4312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.856162][ T4312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875982][ T4312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884743][ T4312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.989754][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.008539][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.028521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/10/19 00:19:38 executed programs: 2 [ 85.043502][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.054422][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.062312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.115109][ T4380] FAULT_INJECTION: forcing a failure. [ 85.115109][ T4380] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.131982][ T4380] CPU: 1 PID: 4380 Comm: syz.0.17 Not tainted syzkaller #0 [ 85.139253][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.149366][ T4380] Call Trace: [ 85.152682][ T4380] [ 85.155650][ T4380] dump_stack_lvl+0x188/0x250 [ 85.160392][ T4380] ? show_regs_print_info+0x20/0x20 [ 85.165632][ T4380] ? load_image+0x410/0x410 [ 85.170212][ T4380] ? __lock_acquire+0x7d40/0x7d40 [ 85.175276][ T4380] ? __vmalloc_node_range+0x2dd/0x8b0 [ 85.180690][ T4380] ? vzalloc+0x75/0x80 [ 85.184801][ T4380] should_fail+0x383/0x4b0 [ 85.189262][ T4380] prepare_alloc_pages+0x1e3/0x5b0 [ 85.194417][ T4380] __alloc_pages+0x11b/0x480 [ 85.199046][ T4380] ? zone_statistics+0x170/0x170 [ 85.204046][ T4380] ? alloc_pages+0x452/0x560 [ 85.208685][ T4380] __vmalloc_node_range+0x4b1/0x8b0 [ 85.213981][ T4380] ? vidtv_s302m_encoder_init+0x174/0x770 [ 85.219745][ T4380] vzalloc+0x75/0x80 [ 85.223677][ T4380] ? vidtv_s302m_encoder_init+0x174/0x770 [ 85.229456][ T4380] vidtv_s302m_encoder_init+0x174/0x770 [ 85.235043][ T4380] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 85.240648][ T4380] vidtv_channel_s302m_init+0x357/0x830 [ 85.246246][ T4380] vidtv_channels_init+0x41/0x90 [ 85.251269][ T4380] vidtv_mux_init+0x4d0/0x1950 [ 85.256068][ T4380] ? __mutex_lock_common+0x435/0x2400 [ 85.261507][ T4380] vidtv_start_feed+0x368/0x590 [ 85.266419][ T4380] ? vidtv_i2c_func+0x10/0x10 [ 85.271134][ T4380] ? vidtv_stop_feed+0x250/0x250 [ 85.276114][ T4380] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.281173][ T4380] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.287120][ T4380] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.292408][ T4380] dmx_section_feed_start_filtering+0x4f3/0x680 [ 85.298706][ T4380] dvb_dmxdev_filter_start+0xc62/0x1060 [ 85.304297][ T4380] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 85.309797][ T4380] dvb_demux_do_ioctl+0x463/0x530 [ 85.314858][ T4380] dvb_usercopy+0x191/0x2b0 [ 85.319387][ T4380] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 85.324961][ T4380] ? dvb_generic_ioctl+0xb0/0xb0 [ 85.329973][ T4380] ? dvb_demux_poll+0x210/0x210 [ 85.334860][ T4380] dvb_demux_ioctl+0x25/0x30 [ 85.339483][ T4380] __se_sys_ioctl+0xfa/0x170 [ 85.344110][ T4380] do_syscall_64+0x4c/0xa0 [ 85.348560][ T4380] ? clear_bhb_loop+0x30/0x80 [ 85.353356][ T4380] ? clear_bhb_loop+0x30/0x80 [ 85.358069][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.364022][ T4380] RIP: 0033:0x7f7b6f1f4559 [ 85.368476][ T4380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.388144][ T4380] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.396603][ T4380] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 85.404634][ T4380] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 85.412632][ T4380] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 85.420636][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.428644][ T4380] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 85.436675][ T4380] [ 85.500904][ T4382] FAULT_INJECTION: forcing a failure. [ 85.500904][ T4382] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.514302][ T4382] CPU: 0 PID: 4382 Comm: syz.0.18 Not tainted syzkaller #0 [ 85.521538][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.531741][ T4382] Call Trace: [ 85.535088][ T4382] [ 85.538057][ T4382] dump_stack_lvl+0x188/0x250 [ 85.542784][ T4382] ? show_regs_print_info+0x20/0x20 [ 85.548016][ T4382] ? load_image+0x410/0x410 [ 85.552561][ T4382] ? __lock_acquire+0x7d40/0x7d40 [ 85.557615][ T4382] ? __vmalloc_node_range+0x2dd/0x8b0 [ 85.563104][ T4382] ? vzalloc+0x75/0x80 [ 85.567218][ T4382] should_fail+0x383/0x4b0 [ 85.569481][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 85.571707][ T4382] prepare_alloc_pages+0x1e3/0x5b0 [ 85.582829][ T4382] __alloc_pages+0x11b/0x480 [ 85.587582][ T4382] ? zone_statistics+0x170/0x170 [ 85.592596][ T4382] ? alloc_pages+0x452/0x560 [ 85.597279][ T4382] __vmalloc_node_range+0x4b1/0x8b0 [ 85.602532][ T4382] ? vidtv_s302m_encoder_init+0x174/0x770 [ 85.608282][ T4382] vzalloc+0x75/0x80 [ 85.612210][ T4382] ? vidtv_s302m_encoder_init+0x174/0x770 [ 85.617967][ T4382] vidtv_s302m_encoder_init+0x174/0x770 [ 85.623572][ T4382] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 85.629178][ T4382] vidtv_channel_s302m_init+0x357/0x830 [ 85.634913][ T4382] vidtv_channels_init+0x41/0x90 [ 85.639931][ T4382] vidtv_mux_init+0x4d0/0x1950 [ 85.644733][ T4382] ? __mutex_lock_common+0x435/0x2400 [ 85.650159][ T4382] vidtv_start_feed+0x368/0x590 [ 85.655158][ T4382] ? vidtv_i2c_func+0x10/0x10 [ 85.659861][ T4382] ? vidtv_stop_feed+0x250/0x250 [ 85.664831][ T4382] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.669919][ T4382] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.675718][ T4382] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.680994][ T4382] dmx_section_feed_start_filtering+0x4f3/0x680 [ 85.687297][ T4382] dvb_dmxdev_filter_start+0xc62/0x1060 [ 85.692895][ T4382] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 85.698586][ T4382] dvb_demux_do_ioctl+0x463/0x530 [ 85.703919][ T4382] dvb_usercopy+0x191/0x2b0 [ 85.708467][ T4382] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 85.714162][ T4382] ? dvb_generic_ioctl+0xb0/0xb0 [ 85.719263][ T4382] ? dvb_demux_poll+0x210/0x210 [ 85.724160][ T4382] dvb_demux_ioctl+0x25/0x30 [ 85.728853][ T4382] __se_sys_ioctl+0xfa/0x170 [ 85.733490][ T4382] do_syscall_64+0x4c/0xa0 [ 85.738217][ T4382] ? clear_bhb_loop+0x30/0x80 [ 85.743031][ T4382] ? clear_bhb_loop+0x30/0x80 [ 85.747742][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.753671][ T4382] RIP: 0033:0x7f7b6f1f4559 [ 85.758117][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.777885][ T4382] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.786364][ T4382] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 85.794404][ T4382] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 85.802414][ T4382] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 85.810431][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.818449][ T4382] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 85.826512][ T4382] [ 85.897128][ T4384] FAULT_INJECTION: forcing a failure. [ 85.897128][ T4384] name failslab, interval 1, probability 0, space 0, times 1 [ 85.926852][ T4384] CPU: 1 PID: 4384 Comm: syz.0.19 Not tainted syzkaller #0 [ 85.934151][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.944254][ T4384] Call Trace: [ 85.947582][ T4384] [ 85.950555][ T4384] dump_stack_lvl+0x188/0x250 [ 85.955285][ T4384] ? show_regs_print_info+0x20/0x20 [ 85.960558][ T4384] ? load_image+0x410/0x410 [ 85.965133][ T4384] ? __might_sleep+0xf0/0xf0 [ 85.969763][ T4384] ? __lock_acquire+0x7d40/0x7d40 [ 85.974839][ T4384] should_fail+0x383/0x4b0 [ 85.979321][ T4384] should_failslab+0x5/0x20 [ 85.983862][ T4384] slab_pre_alloc_hook+0x51/0xc0 [ 85.988839][ T4384] ? vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 85.995245][ T4384] __kmalloc_track_caller+0x69/0x330 [ 86.000662][ T4384] ? vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 86.007115][ T4384] kstrdup+0x32/0x70 [ 86.011094][ T4384] vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 86.017335][ T4384] vidtv_channel_s302m_init+0x3f0/0x830 [ 86.022966][ T4384] vidtv_channels_init+0x41/0x90 [ 86.027947][ T4384] vidtv_mux_init+0x4d0/0x1950 [ 86.032749][ T4384] ? __mutex_lock_common+0x435/0x2400 [ 86.038158][ T4384] vidtv_start_feed+0x368/0x590 [ 86.043047][ T4384] ? vidtv_i2c_func+0x10/0x10 [ 86.047782][ T4384] ? vidtv_stop_feed+0x250/0x250 [ 86.052759][ T4384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.057818][ T4384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.063397][ T4384] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.068667][ T4384] dmx_section_feed_start_filtering+0x4f3/0x680 [ 86.075003][ T4384] dvb_dmxdev_filter_start+0xc62/0x1060 [ 86.080628][ T4384] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 86.086134][ T4384] dvb_demux_do_ioctl+0x463/0x530 [ 86.091201][ T4384] dvb_usercopy+0x191/0x2b0 [ 86.095868][ T4384] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 86.101455][ T4384] ? dvb_generic_ioctl+0xb0/0xb0 [ 86.106456][ T4384] ? dvb_demux_poll+0x210/0x210 [ 86.111372][ T4384] dvb_demux_ioctl+0x25/0x30 [ 86.115994][ T4384] __se_sys_ioctl+0xfa/0x170 [ 86.120617][ T4384] do_syscall_64+0x4c/0xa0 [ 86.125063][ T4384] ? clear_bhb_loop+0x30/0x80 [ 86.129775][ T4384] ? clear_bhb_loop+0x30/0x80 [ 86.134482][ T4384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.140413][ T4384] RIP: 0033:0x7f7b6f1f4559 [ 86.144863][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.164589][ T4384] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.173048][ T4384] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 86.181078][ T4384] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 86.189087][ T4384] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 86.197113][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.205113][ T4384] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 86.213138][ T4384] [ 86.261435][ T4386] FAULT_INJECTION: forcing a failure. [ 86.261435][ T4386] name failslab, interval 1, probability 0, space 0, times 0 [ 86.276679][ T4386] CPU: 0 PID: 4386 Comm: syz.0.20 Not tainted syzkaller #0 [ 86.283931][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.294029][ T4386] Call Trace: [ 86.297382][ T4386] [ 86.300355][ T4386] dump_stack_lvl+0x188/0x250 [ 86.305078][ T4386] ? show_regs_print_info+0x20/0x20 [ 86.310311][ T4386] ? load_image+0x410/0x410 [ 86.314884][ T4386] ? __might_sleep+0xf0/0xf0 [ 86.319645][ T4386] ? __lock_acquire+0x7d40/0x7d40 [ 86.324704][ T4386] should_fail+0x383/0x4b0 [ 86.329159][ T4386] should_failslab+0x5/0x20 [ 86.333698][ T4386] slab_pre_alloc_hook+0x51/0xc0 [ 86.338697][ T4386] kmem_cache_alloc_trace+0x47/0x290 [ 86.344010][ T4386] ? vidtv_psi_eit_event_init+0xc5/0x470 [ 86.349677][ T4386] ? vidtv_s302m_encoder_init+0x5ad/0x770 [ 86.355441][ T4386] vidtv_psi_eit_event_init+0xc5/0x470 [ 86.360943][ T4386] ? vidtv_psi_eit_write_into+0x890/0x890 [ 86.366728][ T4386] vidtv_channel_s302m_init+0x3a4/0x830 [ 86.372372][ T4386] vidtv_channels_init+0x41/0x90 [ 86.377360][ T4386] vidtv_mux_init+0x4d0/0x1950 [ 86.382174][ T4386] ? __mutex_lock_common+0x435/0x2400 [ 86.387594][ T4386] vidtv_start_feed+0x368/0x590 [ 86.392488][ T4386] ? vidtv_i2c_func+0x10/0x10 [ 86.397204][ T4386] ? vidtv_stop_feed+0x250/0x250 [ 86.402175][ T4386] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.407241][ T4386] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.412826][ T4386] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.418216][ T4386] dmx_section_feed_start_filtering+0x4f3/0x680 [ 86.424533][ T4386] dvb_dmxdev_filter_start+0xc62/0x1060 [ 86.430138][ T4386] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 86.435651][ T4386] dvb_demux_do_ioctl+0x463/0x530 [ 86.440721][ T4386] dvb_usercopy+0x191/0x2b0 [ 86.445260][ T4386] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 86.450837][ T4386] ? dvb_generic_ioctl+0xb0/0xb0 [ 86.455836][ T4386] ? dvb_demux_poll+0x210/0x210 [ 86.460809][ T4386] dvb_demux_ioctl+0x25/0x30 [ 86.465854][ T4386] __se_sys_ioctl+0xfa/0x170 [ 86.470508][ T4386] do_syscall_64+0x4c/0xa0 [ 86.474962][ T4386] ? clear_bhb_loop+0x30/0x80 [ 86.479715][ T4386] ? clear_bhb_loop+0x30/0x80 [ 86.484430][ T4386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.490368][ T4386] RIP: 0033:0x7f7b6f1f4559 [ 86.494818][ T4386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.514465][ T4386] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.522916][ T4386] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 86.530925][ T4386] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 86.538932][ T4386] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 86.546940][ T4386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.554944][ T4386] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 86.562965][ T4386] [ 86.601759][ T4388] FAULT_INJECTION: forcing a failure. [ 86.601759][ T4388] name failslab, interval 1, probability 0, space 0, times 0 [ 86.615003][ T4388] CPU: 1 PID: 4388 Comm: syz.0.21 Not tainted syzkaller #0 [ 86.622272][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.632373][ T4388] Call Trace: [ 86.635679][ T4388] [ 86.638633][ T4388] dump_stack_lvl+0x188/0x250 [ 86.643361][ T4388] ? show_regs_print_info+0x20/0x20 [ 86.648596][ T4388] ? load_image+0x410/0x410 [ 86.653144][ T4388] ? __might_sleep+0xf0/0xf0 [ 86.657761][ T4388] ? __lock_acquire+0x7d40/0x7d40 [ 86.662824][ T4388] should_fail+0x383/0x4b0 [ 86.667285][ T4388] should_failslab+0x5/0x20 [ 86.671832][ T4388] slab_pre_alloc_hook+0x51/0xc0 [ 86.676832][ T4388] kmem_cache_alloc_trace+0x47/0x290 [ 86.682145][ T4388] ? vidtv_psi_short_event_desc_init+0xe8/0x6b0 [ 86.688424][ T4388] vidtv_psi_short_event_desc_init+0xe8/0x6b0 [ 86.694545][ T4388] vidtv_channel_s302m_init+0x3f0/0x830 [ 86.700148][ T4388] vidtv_channels_init+0x41/0x90 [ 86.705117][ T4388] vidtv_mux_init+0x4d0/0x1950 [ 86.709909][ T4388] ? __mutex_lock_common+0x435/0x2400 [ 86.715318][ T4388] vidtv_start_feed+0x368/0x590 [ 86.720205][ T4388] ? vidtv_i2c_func+0x10/0x10 [ 86.725029][ T4388] ? vidtv_stop_feed+0x250/0x250 [ 86.730030][ T4388] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.735102][ T4388] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.740683][ T4388] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.745923][ T4388] dmx_section_feed_start_filtering+0x4f3/0x680 [ 86.752221][ T4388] dvb_dmxdev_filter_start+0xc62/0x1060 [ 86.757935][ T4388] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 86.763455][ T4388] dvb_demux_do_ioctl+0x463/0x530 [ 86.768530][ T4388] dvb_usercopy+0x191/0x2b0 [ 86.773163][ T4388] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 86.778742][ T4388] ? dvb_generic_ioctl+0xb0/0xb0 [ 86.783749][ T4388] ? dvb_demux_poll+0x210/0x210 [ 86.788642][ T4388] dvb_demux_ioctl+0x25/0x30 [ 86.793279][ T4388] __se_sys_ioctl+0xfa/0x170 [ 86.797922][ T4388] do_syscall_64+0x4c/0xa0 [ 86.802377][ T4388] ? clear_bhb_loop+0x30/0x80 [ 86.807105][ T4388] ? clear_bhb_loop+0x30/0x80 [ 86.811828][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.817759][ T4388] RIP: 0033:0x7f7b6f1f4559 [ 86.822211][ T4388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.841982][ T4388] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.850481][ T4388] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 86.858488][ T4388] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 86.866497][ T4388] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 86.874773][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.882795][ T4388] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 86.890868][ T4388] [ 86.898867][ T1108] cfg80211: failed to load regulatory.db [ 86.944669][ T4390] FAULT_INJECTION: forcing a failure. [ 86.944669][ T4390] name failslab, interval 1, probability 0, space 0, times 0 [ 86.958734][ T4390] CPU: 1 PID: 4390 Comm: syz.0.22 Not tainted syzkaller #0 [ 86.965980][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.976131][ T4390] Call Trace: [ 86.979461][ T4390] [ 86.982416][ T4390] dump_stack_lvl+0x188/0x250 [ 86.987146][ T4390] ? show_regs_print_info+0x20/0x20 [ 86.992391][ T4390] ? load_image+0x410/0x410 [ 86.996940][ T4390] ? __might_sleep+0xf0/0xf0 [ 87.001571][ T4390] ? __lock_acquire+0x7d40/0x7d40 [ 87.006641][ T4390] should_fail+0x383/0x4b0 [ 87.011103][ T4390] should_failslab+0x5/0x20 [ 87.015641][ T4390] slab_pre_alloc_hook+0x51/0xc0 [ 87.020620][ T4390] ? vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 87.026993][ T4390] __kmalloc_track_caller+0x69/0x330 [ 87.032319][ T4390] ? vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 87.038693][ T4390] kstrdup+0x32/0x70 [ 87.042621][ T4390] vidtv_psi_short_event_desc_init+0x186/0x6b0 [ 87.048811][ T4390] vidtv_channel_s302m_init+0x3f0/0x830 [ 87.054396][ T4390] vidtv_channels_init+0x41/0x90 [ 87.059359][ T4390] vidtv_mux_init+0x4d0/0x1950 [ 87.064152][ T4390] ? __mutex_lock_common+0x435/0x2400 [ 87.069553][ T4390] vidtv_start_feed+0x368/0x590 [ 87.074426][ T4390] ? vidtv_i2c_func+0x10/0x10 [ 87.079128][ T4390] ? vidtv_stop_feed+0x250/0x250 [ 87.084448][ T4390] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.089494][ T4390] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.095071][ T4390] ? _raw_spin_unlock_irq+0x1f/0x40 [ 87.100303][ T4390] dmx_section_feed_start_filtering+0x4f3/0x680 [ 87.106571][ T4390] dvb_dmxdev_filter_start+0xc62/0x1060 [ 87.112280][ T4390] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 87.117775][ T4390] dvb_demux_do_ioctl+0x463/0x530 [ 87.122827][ T4390] dvb_usercopy+0x191/0x2b0 [ 87.127347][ T4390] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 87.132913][ T4390] ? dvb_generic_ioctl+0xb0/0xb0 [ 87.137927][ T4390] ? dvb_demux_poll+0x210/0x210 [ 87.142799][ T4390] dvb_demux_ioctl+0x25/0x30 [ 87.147409][ T4390] __se_sys_ioctl+0xfa/0x170 [ 87.152025][ T4390] do_syscall_64+0x4c/0xa0 [ 87.156464][ T4390] ? clear_bhb_loop+0x30/0x80 [ 87.161164][ T4390] ? clear_bhb_loop+0x30/0x80 [ 87.165867][ T4390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.171783][ T4390] RIP: 0033:0x7f7b6f1f4559 [ 87.176224][ T4390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.195853][ T4390] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.204293][ T4390] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 87.212284][ T4390] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 87.220274][ T4390] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.228262][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.236429][ T4390] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 87.244438][ T4390] [ 87.542572][ T4400] FAULT_INJECTION: forcing a failure. [ 87.542572][ T4400] name failslab, interval 1, probability 0, space 0, times 0 [ 87.574994][ T4400] CPU: 0 PID: 4400 Comm: syz.0.23 Not tainted syzkaller #0 [ 87.582264][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.592362][ T4400] Call Trace: [ 87.595684][ T4400] [ 87.598753][ T4400] dump_stack_lvl+0x188/0x250 [ 87.603481][ T4400] ? show_regs_print_info+0x20/0x20 [ 87.608733][ T4400] ? load_image+0x410/0x410 [ 87.613290][ T4400] ? __might_sleep+0xf0/0xf0 [ 87.618029][ T4400] ? __lock_acquire+0x7d40/0x7d40 [ 87.623110][ T4400] should_fail+0x383/0x4b0 [ 87.627594][ T4400] should_failslab+0x5/0x20 [ 87.632146][ T4400] slab_pre_alloc_hook+0x51/0xc0 [ 87.637130][ T4400] kmem_cache_alloc_trace+0x47/0x290 [ 87.642459][ T4400] ? vidtv_s302m_encoder_init+0x322/0x770 [ 87.648232][ T4400] vidtv_s302m_encoder_init+0x322/0x770 [ 87.653833][ T4400] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 87.659490][ T4400] vidtv_channel_s302m_init+0x357/0x830 [ 87.665123][ T4400] vidtv_channels_init+0x41/0x90 [ 87.670115][ T4400] vidtv_mux_init+0x4d0/0x1950 [ 87.674922][ T4400] ? __mutex_lock_common+0x435/0x2400 [ 87.675263][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 87.680339][ T4400] vidtv_start_feed+0x368/0x590 [ 87.691373][ T4400] ? vidtv_i2c_func+0x10/0x10 [ 87.696101][ T4400] ? vidtv_stop_feed+0x250/0x250 [ 87.701112][ T4400] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.706187][ T4400] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.711795][ T4400] ? _raw_spin_unlock_irq+0x1f/0x40 [ 87.717043][ T4400] dmx_section_feed_start_filtering+0x4f3/0x680 [ 87.723344][ T4400] dvb_dmxdev_filter_start+0xc62/0x1060 [ 87.728946][ T4400] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 87.734453][ T4400] dvb_demux_do_ioctl+0x463/0x530 [ 87.739532][ T4400] dvb_usercopy+0x191/0x2b0 [ 87.744084][ T4400] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 87.749670][ T4400] ? dvb_generic_ioctl+0xb0/0xb0 [ 87.754707][ T4400] ? dvb_demux_poll+0x210/0x210 [ 87.759714][ T4400] dvb_demux_ioctl+0x25/0x30 [ 87.764346][ T4400] __se_sys_ioctl+0xfa/0x170 [ 87.769006][ T4400] do_syscall_64+0x4c/0xa0 [ 87.773463][ T4400] ? clear_bhb_loop+0x30/0x80 [ 87.778179][ T4400] ? clear_bhb_loop+0x30/0x80 [ 87.782909][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.788849][ T4400] RIP: 0033:0x7f7b6f1f4559 [ 87.793307][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.812957][ T4400] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.821453][ T4400] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 87.829473][ T4400] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 87.837496][ T4400] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.845683][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.853694][ T4400] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 87.861728][ T4400] [ 87.922944][ T4400] ------------[ cut here ]------------ [ 87.935608][ T4400] kernel BUG at arch/x86/mm/physaddr.c:28! [ 87.941520][ T4400] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.947620][ T4400] CPU: 1 PID: 4400 Comm: syz.0.23 Not tainted syzkaller #0 [ 87.954846][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.964936][ T4400] RIP: 0010:__phys_addr+0x158/0x170 [ 87.970196][ T4400] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 87.989926][ T4400] RSP: 0018:ffffc9000343f800 EFLAGS: 00010293 [ 87.996033][ T4400] RAX: ffffffff81360e88 RBX: 0000408003319000 RCX: ffff88801a5a1dc0 [ 88.004050][ T4400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 88.012051][ T4400] RBP: ffffc9000343f978 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 88.020055][ T4400] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff8880235df210 [ 88.028060][ T4400] R13: ffff8880235df240 R14: 000000000000002e R15: 0000000000000001 [ 88.036189][ T4400] FS: 00007f7b6e8546c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 88.045153][ T4400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.051766][ T4400] CR2: 000055987e9f4950 CR3: 0000000073a35000 CR4: 00000000003506e0 [ 88.059797][ T4400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.067825][ T4400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.075825][ T4400] Call Trace: [ 88.079130][ T4400] [ 88.082081][ T4400] ? vidtv_s302m_encoder_init+0x573/0x770 [ 88.087830][ T4400] kfree+0x64/0x2a0 [ 88.091685][ T4400] ? kmem_cache_alloc_trace+0x18d/0x290 [ 88.097257][ T4400] ? vidtv_s302m_encoder_init+0x322/0x770 [ 88.103014][ T4400] vidtv_s302m_encoder_init+0x573/0x770 [ 88.108591][ T4400] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 88.114186][ T4400] vidtv_channel_s302m_init+0x357/0x830 [ 88.119768][ T4400] vidtv_channels_init+0x41/0x90 [ 88.124731][ T4400] vidtv_mux_init+0x4d0/0x1950 [ 88.129524][ T4400] ? __mutex_lock_common+0x435/0x2400 [ 88.134920][ T4400] vidtv_start_feed+0x368/0x590 [ 88.139819][ T4400] ? vidtv_i2c_func+0x10/0x10 [ 88.144517][ T4400] ? vidtv_stop_feed+0x250/0x250 [ 88.149477][ T4400] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.154526][ T4400] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.160095][ T4400] ? _raw_spin_unlock_irq+0x1f/0x40 [ 88.165318][ T4400] dmx_section_feed_start_filtering+0x4f3/0x680 [ 88.171589][ T4400] dvb_dmxdev_filter_start+0xc62/0x1060 [ 88.177170][ T4400] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 88.182669][ T4400] dvb_demux_do_ioctl+0x463/0x530 [ 88.187734][ T4400] dvb_usercopy+0x191/0x2b0 [ 88.192274][ T4400] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 88.197858][ T4400] ? dvb_generic_ioctl+0xb0/0xb0 [ 88.202847][ T4400] ? dvb_demux_poll+0x210/0x210 [ 88.207731][ T4400] dvb_demux_ioctl+0x25/0x30 [ 88.212358][ T4400] __se_sys_ioctl+0xfa/0x170 [ 88.216994][ T4400] do_syscall_64+0x4c/0xa0 [ 88.221446][ T4400] ? clear_bhb_loop+0x30/0x80 [ 88.226162][ T4400] ? clear_bhb_loop+0x30/0x80 [ 88.230869][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.236796][ T4400] RIP: 0033:0x7f7b6f1f4559 [ 88.241247][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.260896][ T4400] RSP: 002b:00007f7b6e854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.269354][ T4400] RAX: ffffffffffffffda RBX: 00007f7b6f47bfa0 RCX: 00007f7b6f1f4559 [ 88.277443][ T4400] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 88.285443][ T4400] RBP: 00007f7b6f28bab8 R08: 0000000000000000 R09: 0000000000000000 [ 88.293425][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.301423][ T4400] R13: 00007f7b6f47c038 R14: 00007f7b6f47bfa0 R15: 00007ffeccc24db8 [ 88.309425][ T4400] [ 88.312462][ T4400] Modules linked in: [ 88.317236][ T4400] ---[ end trace e927f313fa622970 ]--- [ 88.322790][ T4400] RIP: 0010:__phys_addr+0x158/0x170 [ 88.328920][ T4400] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 88.353832][ T4400] RSP: 0018:ffffc9000343f800 EFLAGS: 00010293 [ 88.360358][ T4400] RAX: ffffffff81360e88 RBX: 0000408003319000 RCX: ffff88801a5a1dc0 [ 88.369973][ T4400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 88.378689][ T4400] RBP: ffffc9000343f978 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 88.387449][ T4400] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff8880235df210 [ 88.395725][ T4400] R13: ffff8880235df240 R14: 000000000000002e R15: 0000000000000001 [ 88.403824][ T4400] FS: 00007f7b6e8546c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 88.413613][ T4400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.420758][ T4400] CR2: 00005642e7b9f290 CR3: 0000000073a35000 CR4: 00000000003506f0 [ 88.430662][ T4400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.439132][ T4400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.448067][ T4400] Kernel panic - not syncing: Fatal exception [ 88.454419][ T4400] Kernel Offset: disabled [ 88.458756][ T4400] Rebooting in 86400 seconds..