last executing test programs: 46.22136661s ago: executing program 4 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 45.83753853s ago: executing program 4 (id=230): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)="00000088fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010010020000000000000000000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000008000"/154, 0x98) 43.777618409s ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 43.600226244s ago: executing program 4 (id=241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000002cc0)="5776dd4c433833d064bbdc12cbad08457f4402044e0d919314e1eb794fb4c63228641443ba0166fc560274b24b4ddc9b86c989f984420bf729541ffd166f17739df7f48333cd43e999f4a8"}) 43.228177853s ago: executing program 4 (id=245): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='Y\x00', 0x2) 41.055534375s ago: executing program 4 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x2, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 11.661547528s ago: executing program 0 (id=344): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d05, 0x0) 11.393680014s ago: executing program 0 (id=346): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, 0x0, 0x12) 10.74120144s ago: executing program 0 (id=350): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)="00000088fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010010", 0x4d) 9.605047928s ago: executing program 0 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 9.138585189s ago: executing program 3 (id=357): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 8.850435256s ago: executing program 3 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0x20}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000180)={0x23, 0x2, 0x8}, 0x10) sendto$phonet(r1, &(0x7f00000001c0)="0041010000000000", 0x8, 0x0, &(0x7f0000000200)={0x23, 0x1, 0x8}, 0x10) 8.398868207s ago: executing program 3 (id=359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0xd, 0xfffffffffffffffa, 0xf, 0x0, 0x0, 0x0, "01e60000000000000034dbca9fe6083a", 0x0, 0x0, 0x0, 0xc4}) 6.325950947s ago: executing program 1 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.174533711s ago: executing program 0 (id=363): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r0, &(0x7f0000000300), 0x0) 6.054864674s ago: executing program 2 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="3cb89a1d182dc611ac64297361626c65640a", 0x12) 5.944081146s ago: executing program 1 (id=365): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)="00000088fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010010020000000000000000000000000000000000000000000000000000000000000000010000000100", 0x74) 5.81228158s ago: executing program 0 (id=366): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010102030109022000010100c0000904000002080650000705810200020007050202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) 5.429741429s ago: executing program 2 (id=367): unshare(0x20000) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='oom_score_adj < 100\x00', 0x13) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x1) close(r0) 5.243613623s ago: executing program 2 (id=368): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, 0x0) mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(0x0, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='madvise\x00', 0x8) 5.022651259s ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='functionfs\x00', 0xb) read(0xffffffffffffffff, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="0300000033000000071b000001000000", 0x33) 4.892048122s ago: executing program 2 (id=370): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c90012000e00050014090a000800b300ff"], 0x17) 4.800413494s ago: executing program 1 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000882}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.54988965s ago: executing program 2 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='none\x00', &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/task-filter\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='Y\x00', 0x2) write(r4, &(0x7f0000000440)='1\x00', 0x2) write(r2, &(0x7f0000000140)='100\x00', 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.430058353s ago: executing program 3 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.030405291s ago: executing program 1 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', 0x0, 0x0, 0x0) 1.307749319s ago: executing program 1 (id=375): mkdir(&(0x7f00000000c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000240)="ffffffff00"/24) nanosleep(&(0x7f0000000280)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi0\x00', 0x2, 0x0) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, &(0x7f00000004c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\x00', 0x2) 269.547234ms ago: executing program 1 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 15.50367ms ago: executing program 3 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="3cb89a1d182dc611ac64297361626c65640a", 0x12) 0s ago: executing program 2 (id=378): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)='10', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): , BSSID 50:50:50:50:50:50 [ 85.653137][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.662211][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.671290][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.680153][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.689035][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.704337][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.716276][ T4273] device veth0_macvtap entered promiscuous mode [ 85.742686][ T4272] device veth1_vlan entered promiscuous mode [ 85.754689][ T4273] device veth1_macvtap entered promiscuous mode [ 85.775710][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.785116][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.795833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.878760][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.890534][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.903976][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.913581][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933541][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.952818][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.964116][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.975206][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.985258][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.002681][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.017701][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.052933][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.065771][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.085567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.123545][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.144496][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.155976][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.168881][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.179499][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.190853][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.214941][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.224695][ T4272] device veth0_macvtap entered promiscuous mode [ 86.255495][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.265274][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.282231][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.309455][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 86.331535][ T4272] device veth1_macvtap entered promiscuous mode [ 86.377952][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.389765][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 86.395852][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 86.402973][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 86.409065][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 86.409124][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.426576][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439292][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.473193][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.507998][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.531043][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.548630][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.565285][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.575929][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.594223][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.608109][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.625837][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.638516][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.656853][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.682601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.700132][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.726857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.742759][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.763738][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.809208][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.819101][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.861460][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.902954][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.932502][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.960493][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.999374][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.032235][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.062085][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.081901][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.097093][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.108107][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.138391][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.179074][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.203007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.240616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.277101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.550752][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.558635][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.628614][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.667733][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.719337][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.766670][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.771297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.798929][ T4374] device syzkaller0 entered promiscuous mode [ 87.802541][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.840729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.876634][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.906975][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.045437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.277853][ T4259] FAULT_INJECTION: forcing a failure. [ 88.277853][ T4259] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 88.282892][ T4384] FAULT_INJECTION: forcing a failure. [ 88.282892][ T4384] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 88.293733][ C1] FAULT_INJECTION: forcing a failure. [ 88.293733][ C1] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 88.308417][ T4282] FAULT_INJECTION: forcing a failure. [ 88.308417][ T4282] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 88.319253][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 88.319277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.319294][ C1] Call Trace: [ 88.319302][ C1] [ 88.319311][ C1] dump_stack_lvl+0x188/0x24e [ 88.319360][ C1] ? show_regs_print_info+0x12/0x12 [ 88.319391][ C1] ? load_image+0x410/0x410 [ 88.319422][ C1] ? mark_lock+0x94/0x320 [ 88.319452][ C1] ? verify_lock_unused+0x140/0x140 [ 88.319486][ C1] should_fail_ex+0x390/0x4c0 [ 88.319521][ C1] prepare_alloc_pages+0x1e1/0x5b0 [ 88.319561][ C1] __alloc_pages+0x130/0x4f0 [ 88.319596][ C1] ? zone_statistics+0x170/0x170 [ 88.319637][ C1] ? alloc_pages+0x4dd/0x740 [ 88.319674][ C1] alloc_slab_page+0x5d/0x180 [ 88.319697][ C1] ? mempolicy_slab_node+0x3d/0x410 [ 88.319726][ C1] new_slab+0x1b3/0x2d0 [ 88.319761][ C1] ___slab_alloc+0xbc5/0x1240 [ 88.319786][ C1] ? ___slab_alloc+0x20e/0x1240 [ 88.319814][ C0] FAULT_INJECTION: forcing a failure. [ 88.319814][ C0] name fail_page_alloc, interval 1, probability 100, space 0, times 8 [ 88.319812][ C1] ? skb_clone+0x1e7/0x370 [ 88.319854][ C1] kmem_cache_alloc+0x111/0x2f0 [ 88.319877][ C1] ? skb_clone+0x1e7/0x370 [ 88.319912][ C1] skb_clone+0x1e7/0x370 [ 88.319936][ C1] ? dev_queue_xmit_nit+0x223/0xba0 [ 88.319959][ C1] dev_queue_xmit_nit+0x23b/0xba0 [ 88.319977][ C1] ? dev_queue_xmit_nit+0x29/0xba0 [ 88.320004][ C1] dev_hard_start_xmit+0x158/0x8b0 [ 88.320028][ C1] ? __rwlock_init+0x140/0x140 [ 88.320057][ C1] sch_direct_xmit+0x24d/0x4a0 [ 88.320082][ C1] ? do_raw_spin_lock+0x2f0/0x2f0 [ 88.320101][ C1] ? mrp_pdu_append_vecattr_event+0x1670/0x1670 [ 88.320135][ C1] __dev_queue_xmit+0x180d/0x3810 [ 88.320164][ C1] ? __dev_queue_xmit+0x281/0x3810 [ 88.320193][ C1] ? netdev_core_pick_tx+0x360/0x360 [ 88.320222][ C1] ? mark_lock+0x94/0x320 [ 88.320252][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.320278][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 88.320304][ C1] ? lock_chain_count+0x20/0x20 [ 88.320332][ C1] ? ip_finish_output2+0xa2b/0x1220 [ 88.320361][ C1] ? ip_finish_output2+0x407/0x1220 [ 88.320386][ C1] ip_finish_output2+0xc20/0x1220 [ 88.320413][ C1] ? ip_finish_output2+0x407/0x1220 [ 88.320446][ C1] ? ip_fragment+0x210/0x210 [ 88.320479][ C1] ? ip_finish_output+0x3e8/0x4b0 [ 88.320508][ C1] ip_output+0x2d9/0x400 [ 88.320532][ C1] ? ip_output+0x57/0x400 [ 88.320558][ C1] __ip_queue_xmit+0x10e6/0x1c10 [ 88.320581][ C1] ? tcp_push_one+0xf0/0xf0 [ 88.320600][ C1] ? __ip_queue_xmit+0x59/0x1c10 [ 88.320632][ C1] __tcp_transmit_skb+0x1cc4/0x31e0 [ 88.320677][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 88.320693][ C1] ? __tcp_send_ack+0x9d/0x5a0 [ 88.320724][ C1] ? __tcp_send_ack+0x172/0x5a0 [ 88.320753][ C1] tcp_rcv_established+0xc1e/0x1de0 [ 88.320796][ C1] ? tcp_check_space+0xa70/0xa70 [ 88.320819][ C1] ? ipv4_confirm_neigh+0x4d0/0x4f0 [ 88.320842][ C1] ? rt_is_expired+0x24a/0x2c0 [ 88.320868][ C1] tcp_v4_do_rcv+0x67c/0xaf0 [ 88.320896][ C1] tcp_v4_rcv+0x2810/0x2e90 [ 88.320967][ C1] ? tcp_filter+0x90/0x90 [ 88.320999][ C1] ip_protocol_deliver_rcu+0x38c/0x740 [ 88.321024][ C1] ? ip_local_deliver_finish+0x1bf/0x510 [ 88.321049][ C1] ip_local_deliver_finish+0x2c0/0x510 [ 88.321077][ C1] NF_HOOK+0x329/0x3b0 [ 88.321101][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 88.321121][ C1] ? NF_HOOK+0x9b/0x3b0 [ 88.321142][ C1] ? ip_local_deliver+0x180/0x180 [ 88.321167][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 88.321194][ C1] ? ip_local_deliver+0x107/0x180 [ 88.321219][ C1] ip_sublist_rcv+0xa2e/0xd50 [ 88.321241][ C1] ? consume_skb+0xc8/0x100 [ 88.321278][ C1] ? ip_list_rcv+0x440/0x440 [ 88.321298][ C1] ? packet_sock_destruct+0x160/0x160 [ 88.321318][ C1] ? __netif_receive_skb_core+0x30b5/0x38c0 [ 88.321348][ C1] ? ip_rcv_core+0xb90/0xb90 [ 88.321367][ C1] ? memset+0x1e/0x40 [ 88.321385][ C1] ? ip_rcv_core+0x74c/0xb90 [ 88.321415][ C1] ip_list_rcv+0x3e9/0x440 [ 88.321446][ C1] ? ip_rcv_finish+0x250/0x250 [ 88.321474][ C1] ? ip_rcv_finish+0x250/0x250 [ 88.321498][ C1] __netif_receive_skb_list_core+0x57e/0x770 [ 88.321539][ C1] ? set_rps_cpu+0x660/0x660 [ 88.321575][ C1] netif_receive_skb_list_internal+0x93f/0xca0 [ 88.321604][ C1] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 88.321628][ C1] ? netif_receive_skb_core+0x230/0x230 [ 88.321667][ C1] napi_complete_done+0x37e/0x850 [ 88.321693][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 88.321715][ C1] ? __napi_schedule_irqoff+0x80/0x80 [ 88.321740][ C1] ? virtqueue_get_buf_ctx+0x474/0xd00 [ 88.321772][ C1] ? virtqueue_enable_cb_prepare+0x20d/0x4f0 [ 88.321796][ C1] virtnet_poll+0x9c3/0x1140 [ 88.321818][ C1] ? verify_lock_unused+0x140/0x140 [ 88.321857][ C1] ? refill_work+0x220/0x220 [ 88.321880][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.321909][ C1] ? lock_chain_count+0x20/0x20 [ 88.321938][ C1] __napi_poll+0xbb/0x460 [ 88.321968][ C1] net_rx_action+0x622/0xbc0 [ 88.322005][ C1] ? net_tx_action+0x930/0x930 [ 88.322033][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.322059][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 88.322078][ C1] ? lock_chain_count+0x20/0x20 [ 88.322100][ C1] ? finish_task_switch+0x262/0x8e0 [ 88.322135][ C1] handle_softirqs+0x291/0x910 [ 88.322159][ C1] ? run_ksoftirqd+0xa4/0x100 [ 88.322182][ C1] ? do_softirq+0x210/0x210 [ 88.322211][ C1] run_ksoftirqd+0xa4/0x100 [ 88.322229][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 88.322250][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 88.322280][ C1] ? takeover_tasklets+0x770/0x770 [ 88.322298][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 88.322317][ C1] smpboot_thread_fn+0x667/0xa30 [ 88.322343][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 88.322378][ C1] kthread+0x29d/0x330 [ 88.322393][ C1] ? cpu_report_death+0x250/0x250 [ 88.322418][ C1] ? kthread_blkcg+0xd0/0xd0 [ 88.322437][ C1] ret_from_fork+0x1f/0x30 [ 88.322476][ C1] [ 88.322483][ C0] CPU: 0 PID: 4282 Comm: syz-executor Not tainted syzkaller #0 [ 88.322501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.322516][ C0] Call Trace: [ 88.322522][ C0] [ 88.322528][ C0] dump_stack_lvl+0x188/0x24e [ 88.322555][ C0] ? show_regs_print_info+0x12/0x12 [ 88.322583][ C0] ? load_image+0x410/0x410 [ 88.322607][ C0] ? verify_lock_unused+0x140/0x140 [ 88.322635][ C0] should_fail_ex+0x390/0x4c0 [ 88.322654][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 88.322667][ C0] prepare_alloc_pages+0x1e1/0x5b0 [ 88.322673][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 88.322705][ C0] __alloc_pages+0x130/0x4f0 [ 88.322724][ C1] node 0: slabs: 1975, objs: 23700, free: 0 [ 88.322735][ C0] ? zone_statistics+0x170/0x170 [ 88.322743][ C1] node 1: slabs: 4, objs: 48, free: 48 [ 88.322773][ C0] ? alloc_pages+0x4dd/0x740 [ 88.322798][ C0] ? lock_chain_count+0x20/0x20 [ 88.322826][ C0] alloc_slab_page+0x5d/0x180 [ 88.322848][ C0] ? mempolicy_slab_node+0x3d/0x410 [ 88.322876][ C0] new_slab+0x1b3/0x2d0 [ 88.322899][ C0] ___slab_alloc+0xbc5/0x1240 [ 88.322924][ C0] ? ___slab_alloc+0x20e/0x1240 [ 88.322946][ C0] ? __alloc_skb+0xf9/0x7d0 [ 88.322982][ C0] kmem_cache_alloc_node+0x134/0x310 [ 88.323005][ C0] ? __alloc_skb+0xf9/0x7d0 [ 88.323038][ C0] __alloc_skb+0xf9/0x7d0 [ 88.323071][ C0] ndisc_alloc_skb+0xa6/0x450 [ 88.323101][ C0] ndisc_send_rs+0x279/0x690 [ 88.323128][ C0] ? ipv6_get_lladdr+0x27/0x3e0 [ 88.323152][ C0] addrconf_rs_timer+0x367/0x640 [ 88.323178][ C0] ? detach_timer+0x30/0x350 [ 88.323203][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.323240][ C0] call_timer_fn+0x1ac/0x670 [ 88.323270][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.323296][ C0] ? call_timer_fn+0xcf/0x670 [ 88.323317][ C0] ? __run_timers+0x810/0x810 [ 88.323347][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 88.323372][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.323392][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.323421][ C0] __run_timers+0x56c/0x810 [ 88.323478][ C0] ? detach_timer+0x350/0x350 [ 88.323506][ C0] ? lock_chain_count+0x20/0x20 [ 88.323541][ C0] run_timer_softirq+0x63/0xf0 [ 88.323563][ C0] handle_softirqs+0x291/0x910 [ 88.323589][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 88.323614][ C0] ? do_softirq+0x210/0x210 [ 88.323631][ C0] ? hrtimer_interrupt+0x775/0x980 [ 88.323659][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 88.323683][ C0] __irq_exit_rcu+0x13b/0x230 [ 88.323704][ C0] ? irq_exit_rcu+0x20/0x20 [ 88.323736][ C0] irq_exit_rcu+0x5/0x20 [ 88.323754][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 88.323776][ C0] [ 88.323784][ C0] [ 88.323792][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.323821][ C0] RIP: 0010:vprintk_emit+0x48b/0x6a0 [ 88.323853][ C0] Code: 86 01 00 00 e8 96 10 1b 00 41 89 df 4d 85 f6 48 8b 5c 24 08 75 07 e8 84 10 1b 00 eb 06 e8 7d 10 1b 00 fb 48 c7 c7 20 1e b2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fd d4 [ 88.323870][ C0] RSP: 0018:ffffc900042d70a0 EFLAGS: 00000293 [ 88.323892][ C0] RAX: ffffffff81672373 RBX: ffffffff81672205 RCX: ffff8880791b9e00 [ 88.323909][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb21e20 [ 88.323923][ C0] RBP: ffffc900042d7190 R08: ffffffff90b0f2ef R09: 1ffffffff2161e5d [ 88.323940][ C0] R10: dffffc0000000000 R11: fffffbfff2161e5e R12: dffffc0000000000 [ 88.323956][ C0] R13: 1ffff9200085ae18 R14: 0000000000000200 R15: 0000000000000067 [ 88.323974][ C0] ? vprintk_emit+0x315/0x6a0 [ 88.324005][ C0] ? vprintk_emit+0x483/0x6a0 [ 88.324040][ C0] ? vprintk_emit+0x315/0x6a0 [ 88.324070][ C0] ? printk_sprint+0x460/0x460 [ 88.324097][ C0] ? get_random_u8+0x4ab/0x980 [ 88.324120][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.324141][ C0] ? get_random_u8+0x168/0x980 [ 88.324162][ C0] ? get_random_u8+0x512/0x980 [ 88.324194][ C0] _printk+0xda/0x130 [ 88.324222][ C0] ? load_image+0x410/0x410 [ 88.324255][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 88.324282][ C0] ? finish_task_switch+0x262/0x8e0 [ 88.324317][ C0] should_fail_ex+0x371/0x4c0 [ 88.324349][ C0] prepare_alloc_pages+0x1e1/0x5b0 [ 88.324387][ C0] __alloc_pages+0x130/0x4f0 [ 88.324419][ C0] ? zone_statistics+0x170/0x170 [ 88.324465][ C0] pte_alloc_one+0x7b/0x310 [ 88.324493][ C0] ? pfn_modify_allowed+0x560/0x560 [ 88.324521][ C0] ? __might_sleep+0xd0/0xd0 [ 88.324545][ C0] ? rcu_is_watching+0x11/0xa0 [ 88.324578][ C0] __pte_alloc+0x21/0x150 [ 88.324612][ C0] copy_page_range+0x322f/0x3a60 [ 88.324690][ C0] ? pfn_valid+0x450/0x450 [ 88.324734][ C0] ? up_write+0x1b6/0x410 [ 88.324763][ C0] copy_mm+0xeb0/0x1680 [ 88.324799][ C0] ? copy_signal+0x640/0x640 [ 88.324820][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 88.324867][ C0] ? __init_rwsem+0x11e/0x160 [ 88.324894][ C0] ? copy_signal+0x51f/0x640 [ 88.324920][ C0] copy_process+0x19a6/0x40c0 [ 88.324952][ C0] ? verify_lock_unused+0x140/0x140 [ 88.324983][ C0] ? copy_process+0x974/0x40c0 [ 88.325019][ C0] ? idle_dummy+0x10/0x10 [ 88.325053][ C0] kernel_clone+0x24b/0x900 [ 88.325081][ C0] ? create_io_thread+0x170/0x170 [ 88.325113][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 88.325140][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.325176][ C0] __x64_sys_clone+0x1a7/0x220 [ 88.325198][ C0] ? __might_fault+0xc2/0x120 [ 88.325221][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 88.325262][ C0] ? lock_chain_count+0x20/0x20 [ 88.325297][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.325322][ C0] do_syscall_64+0x4c/0xa0 [ 88.325348][ C0] ? clear_bhb_loop+0x60/0xb0 [ 88.325374][ C0] ? clear_bhb_loop+0x60/0xb0 [ 88.325404][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.325429][ C0] RIP: 0033:0x7fc5dbfc6912 [ 88.325461][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 88.325478][ C0] RSP: 002b:00007ffd85fc1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.325500][ C0] RAX: ffffffffffffffda RBX: 00007ffd85fc1f40 RCX: 00007fc5dbfc6912 [ 88.325516][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 88.325529][ C0] RBP: 00007ffd85fc20cc R08: 0000000000000000 R09: 0000000000000001 [ 88.325543][ C0] R10: 000055555943b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 88.325556][ C0] R13: 00000000000927c0 R14: 0000000000015705 R15: 00007ffd85fc2120 [ 88.325586][ C0] [ 88.325596][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 88.325612][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 88.325632][ C0] node 0: slabs: 1975, objs: 23700, free: 0 [ 88.325649][ C0] node 1: slabs: 4, objs: 48, free: 48 [ 88.325693][ C0] FAULT_INJECTION: forcing a failure. [ 88.325693][ C0] name fail_page_alloc, interval 1, probability 100, space 0, times 3 [ 88.325716][ C0] CPU: 0 PID: 4282 Comm: syz-executor Not tainted syzkaller #0 [ 88.325735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.325747][ C0] Call Trace: [ 88.325754][ C0] [ 88.325762][ C0] dump_stack_lvl+0x188/0x24e [ 88.325794][ C0] ? show_regs_print_info+0x12/0x12 [ 88.325824][ C0] ? load_image+0x410/0x410 [ 88.325852][ C0] ? verify_lock_unused+0x140/0x140 [ 88.325886][ C0] should_fail_ex+0x390/0x4c0 [ 88.325919][ C0] prepare_alloc_pages+0x1e1/0x5b0 [ 88.325956][ C0] __alloc_pages+0x130/0x4f0 [ 88.325989][ C0] ? zone_statistics+0x170/0x170 [ 88.326028][ C0] ? alloc_pages+0x4dd/0x740 [ 88.326057][ C0] ? lock_chain_count+0x20/0x20 [ 88.326088][ C0] alloc_slab_page+0x5d/0x180 [ 88.326112][ C0] ? mempolicy_slab_node+0x3d/0x410 [ 88.326142][ C0] new_slab+0x1b3/0x2d0 [ 88.326169][ C0] ___slab_alloc+0xbc5/0x1240 [ 88.326197][ C0] ? __alloc_skb+0xf9/0x7d0 [ 88.326232][ C0] kmem_cache_alloc_node+0x134/0x310 [ 88.326263][ C0] ? __alloc_skb+0xf9/0x7d0 [ 88.326295][ C0] __alloc_skb+0xf9/0x7d0 [ 88.326328][ C0] ndisc_alloc_skb+0xa6/0x450 [ 88.326357][ C0] ndisc_send_rs+0x279/0x690 [ 88.326384][ C0] ? ipv6_get_lladdr+0x27/0x3e0 [ 88.326407][ C0] addrconf_rs_timer+0x367/0x640 [ 88.326433][ C0] ? detach_timer+0x30/0x350 [ 88.326458][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.326495][ C0] call_timer_fn+0x1ac/0x670 [ 88.326516][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.326541][ C0] ? call_timer_fn+0xcf/0x670 [ 88.326563][ C0] ? __run_timers+0x810/0x810 [ 88.326593][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 88.326616][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.326636][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 88.326665][ C0] __run_timers+0x56c/0x810 [ 88.326701][ C0] ? detach_timer+0x350/0x350 [ 88.326729][ C0] ? lock_chain_count+0x20/0x20 [ 88.326764][ C0] run_timer_softirq+0x63/0xf0 [ 88.326786][ C0] handle_softirqs+0x291/0x910 [ 88.326812][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 88.326836][ C0] ? do_softirq+0x210/0x210 [ 88.326854][ C0] ? hrtimer_interrupt+0x775/0x980 [ 88.326882][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 88.326905][ C0] __irq_exit_rcu+0x13b/0x230 [ 88.326926][ C0] ? irq_exit_rcu+0x20/0x20 [ 88.326957][ C0] irq_exit_rcu+0x5/0x20 [ 88.326975][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 88.326996][ C0] [ 88.327003][ C0] [ 88.327011][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.327039][ C0] RIP: 0010:vprintk_emit+0x48b/0x6a0 [ 88.327068][ C0] Code: 86 01 00 00 e8 96 10 1b 00 41 89 df 4d 85 f6 48 8b 5c 24 08 75 07 e8 84 10 1b 00 eb 06 e8 7d 10 1b 00 fb 48 c7 c7 20 1e b2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fd d4 [ 88.327085][ C0] RSP: 0018:ffffc900042d70a0 EFLAGS: 00000293 [ 88.327104][ C0] RAX: ffffffff81672373 RBX: ffffffff81672205 RCX: ffff8880791b9e00 [ 88.327121][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb21e20 [ 88.327135][ C0] RBP: ffffc900042d7190 R08: ffffffff90b0f2ef R09: 1ffffffff2161e5d [ 88.327151][ C0] R10: dffffc0000000000 R11: fffffbfff2161e5e R12: dffffc0000000000 [ 88.327167][ C0] R13: 1ffff9200085ae18 R14: 0000000000000200 R15: 0000000000000067 [ 88.327186][ C0] ? vprintk_emit+0x315/0x6a0 [ 88.327216][ C0] ? vprintk_emit+0x483/0x6a0 [ 88.327258][ C0] ? vprintk_emit+0x315/0x6a0 [ 88.327289][ C0] ? printk_sprint+0x460/0x460 [ 88.327316][ C0] ? get_random_u8+0x4ab/0x980 [ 88.327338][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.327359][ C0] ? get_random_u8+0x168/0x980 [ 88.327380][ C0] ? get_random_u8+0x512/0x980 [ 88.327411][ C0] _printk+0xda/0x130 [ 88.327438][ C0] ? load_image+0x410/0x410 [ 88.327463][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 88.327490][ C0] ? finish_task_switch+0x262/0x8e0 [ 88.327525][ C0] should_fail_ex+0x371/0x4c0 [ 88.327557][ C0] prepare_alloc_pages+0x1e1/0x5b0 [ 88.327595][ C0] __alloc_pages+0x130/0x4f0 [ 88.327627][ C0] ? zone_statistics+0x170/0x170 [ 88.327673][ C0] pte_alloc_one+0x7b/0x310 [ 88.327699][ C0] ? pfn_modify_allowed+0x560/0x560 [ 88.327728][ C0] ? __might_sleep+0xd0/0xd0 [ 88.327751][ C0] ? rcu_is_watching+0x11/0xa0 [ 88.327784][ C0] __pte_alloc+0x21/0x150 [ 88.327817][ C0] copy_page_range+0x322f/0x3a60 [ 88.327895][ C0] ? pfn_valid+0x450/0x450 [ 88.327940][ C0] ? up_write+0x1b6/0x410 [ 88.327969][ C0] copy_mm+0xeb0/0x1680 [ 88.328003][ C0] ? copy_signal+0x640/0x640 [ 88.328025][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 88.328071][ C0] ? __init_rwsem+0x11e/0x160 [ 88.328098][ C0] ? copy_signal+0x51f/0x640 [ 88.328123][ C0] copy_process+0x19a6/0x40c0 [ 88.328154][ C0] ? verify_lock_unused+0x140/0x140 [ 88.328186][ C0] ? copy_process+0x974/0x40c0 [ 88.328221][ C0] ? idle_dummy+0x10/0x10 [ 88.328263][ C0] kernel_clone+0x24b/0x900 [ 88.328291][ C0] ? create_io_thread+0x170/0x170 [ 88.328323][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 88.328350][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.328386][ C0] __x64_sys_clone+0x1a7/0x220 [ 88.328408][ C0] ? __might_fault+0xc2/0x120 [ 88.328431][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 88.328466][ C0] ? lock_chain_count+0x20/0x20 [ 88.328501][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 88.328526][ C0] do_syscall_64+0x4c/0xa0 [ 88.328552][ C0] ? clear_bhb_loop+0x60/0xb0 [ 88.328578][ C0] ? clear_bhb_loop+0x60/0xb0 [ 88.328607][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.328631][ C0] RIP: 0033:0x7fc5dbfc6912 [ 88.328648][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 88.328648][ T4302] FAULT_INJECTION: forcing a failure. [ 88.328648][ T4302] name fail_page_alloc, interval 1, probability 100, space 0, times 2 [ 88.328665][ C0] RSP: 002b:00007ffd85fc1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.328687][ C0] RAX: ffffffffffffffda RBX: 00007ffd85fc1f40 RCX: 00007fc5dbfc6912 [ 88.328703][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 88.328716][ C0] RBP: 00007ffd85fc20cc R08: 0000000000000000 R09: 0000000000000001 [ 88.328729][ C0] R10: 000055555943b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 88.328740][ C0] R13: 00000000000927c0 R14: 0000000000015705 R15: 00007ffd85fc2120 [ 88.328766][ C0] [ 88.328774][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 88.328773][ T4302] CPU: 1 PID: 4302 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 88.328790][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 88.328795][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.328810][ C0] node 0: slabs: 1975, objs: 23700, free: 0 [ 88.328809][ T4302] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 88.328826][ C0] node 1: slabs: 4, objs: 48, free: 48 [ 88.328837][ T4302] [ 88.328844][ T4302] Call Trace: [ 88.328851][ T4302] [ 88.328860][ T4302] dump_stack_lvl+0x188/0x24e [ 88.328893][ T4302] ? show_regs_print_info+0x12/0x12 [ 88.328924][ T4302] ? load_image+0x410/0x410 [ 88.328945][ T4302] ? mark_lock+0x94/0x320 [ 88.328977][ T4302] ? verify_lock_unused+0x140/0x140 [ 88.329007][ T4302] ? register_lock_class+0xc0/0x870 [ 88.329039][ T4302] should_fail_ex+0x390/0x4c0 [ 88.329073][ T4302] prepare_alloc_pages+0x1e1/0x5b0 [ 88.329112][ T4302] __alloc_pages+0x130/0x4f0 [ 88.329151][ T4302] ? zone_statistics+0x170/0x170 [ 88.329179][ T4302] ? mark_lock+0x94/0x320 [ 88.329214][ T4302] ? alloc_pages+0x4dd/0x740 [ 88.329242][ T4302] ? lock_chain_count+0x20/0x20 [ 88.329270][ T4302] ? queue_delayed_work_on+0x110/0x1f0 [ 88.329295][ T4302] alloc_slab_page+0x5d/0x180 [ 88.329324][ T4302] new_slab+0x1b3/0x2d0 [ 88.329350][ T4302] ___slab_alloc+0xbc5/0x1240 [ 88.329375][ T4302] ? skb_clone+0x1e7/0x370 [ 90.421029][ T4387] binder: 4385:4387 ioctl c0306201 0 returned -14 [ 90.423302][ T4302] kmem_cache_alloc+0x111/0x2f0 [ 90.434691][ T4302] ? skb_clone+0x1e7/0x370 [ 90.439168][ T4302] skb_clone+0x1e7/0x370 [ 90.443466][ T4302] batadv_iv_send_outstanding_bat_ogm_packet+0x5e0/0x800 [ 90.450551][ T4302] ? process_one_work+0x7b4/0x1160 [ 90.455714][ T4302] process_one_work+0x8ab/0x1160 [ 90.460709][ T4302] ? worker_detach_from_pool+0x240/0x240 [ 90.466380][ T4302] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.471449][ T4302] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.477038][ T4302] ? wq_worker_running+0x97/0x190 [ 90.482225][ T4302] worker_thread+0xaf5/0x12a0 [ 90.486972][ T4302] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.492930][ T4302] kthread+0x29d/0x330 [ 90.497045][ T4302] ? worker_clr_flags+0x1a0/0x1a0 [ 90.502122][ T4302] ? kthread_blkcg+0xd0/0xd0 [ 90.506751][ T4302] ret_from_fork+0x1f/0x30 [ 90.511233][ T4302] [ 90.514301][ T4282] CPU: 0 PID: 4282 Comm: syz-executor Not tainted syzkaller #0 [ 90.521915][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.532030][ T4282] Call Trace: [ 90.535407][ T4282] [ 90.538379][ T4282] dump_stack_lvl+0x188/0x24e [ 90.543128][ T4282] ? show_regs_print_info+0x12/0x12 [ 90.548400][ T4282] ? load_image+0x410/0x410 [ 90.552968][ T4282] ? __lock_acquire+0x7c40/0x7c40 [ 90.558048][ T4282] ? finish_task_switch+0x262/0x8e0 [ 90.563350][ T4282] should_fail_ex+0x390/0x4c0 [ 90.568092][ T4282] prepare_alloc_pages+0x1e1/0x5b0 [ 90.573336][ T4282] __alloc_pages+0x130/0x4f0 [ 90.577996][ T4282] ? zone_statistics+0x170/0x170 [ 90.583028][ T4282] pte_alloc_one+0x7b/0x310 [ 90.587606][ T4282] ? pfn_modify_allowed+0x560/0x560 [ 90.592863][ T4282] ? __might_sleep+0xd0/0xd0 [ 90.597509][ T4282] ? rcu_is_watching+0x11/0xa0 [ 90.602342][ T4282] __pte_alloc+0x21/0x150 [ 90.606830][ T4282] copy_page_range+0x322f/0x3a60 [ 90.611887][ T4282] ? pfn_valid+0x450/0x450 [ 90.616383][ T4282] ? up_write+0x1b6/0x410 [ 90.620776][ T4282] copy_mm+0xeb0/0x1680 [ 90.624970][ T4282] ? copy_signal+0x640/0x640 [ 90.629590][ T4282] ? lockdep_init_map_type+0x98/0x8d0 [ 90.635014][ T4282] ? __init_rwsem+0x11e/0x160 [ 90.639719][ T4282] ? copy_signal+0x51f/0x640 [ 90.644348][ T4282] copy_process+0x19a6/0x40c0 [ 90.649063][ T4282] ? verify_lock_unused+0x140/0x140 [ 90.654299][ T4282] ? copy_process+0x974/0x40c0 [ 90.659101][ T4282] ? idle_dummy+0x10/0x10 [ 90.663470][ T4282] kernel_clone+0x24b/0x900 [ 90.668039][ T4282] ? create_io_thread+0x170/0x170 [ 90.673107][ T4282] ? __lock_acquire+0x7c40/0x7c40 [ 90.678185][ T4282] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.684200][ T4282] __x64_sys_clone+0x1a7/0x220 [ 90.688993][ T4282] ? __might_fault+0xc2/0x120 [ 90.693697][ T4282] ? __ia32_sys_vfork+0x140/0x140 [ 90.698764][ T4282] ? lock_chain_count+0x20/0x20 [ 90.703649][ T4282] ? lockdep_hardirqs_on+0x94/0x140 [ 90.708877][ T4282] do_syscall_64+0x4c/0xa0 [ 90.713330][ T4282] ? clear_bhb_loop+0x60/0xb0 [ 90.718037][ T4282] ? clear_bhb_loop+0x60/0xb0 [ 90.722751][ T4282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.728682][ T4282] RIP: 0033:0x7fc5dbfc6912 [ 90.733155][ T4282] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 90.752871][ T4282] RSP: 002b:00007ffd85fc1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 90.761400][ T4282] RAX: ffffffffffffffda RBX: 00007ffd85fc1f40 RCX: 00007fc5dbfc6912 [ 90.769396][ T4282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 90.777393][ T4282] RBP: 00007ffd85fc20cc R08: 0000000000000000 R09: 0000000000000001 [ 90.785404][ T4282] R10: 000055555943b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 90.793403][ T4282] R13: 00000000000927c0 R14: 0000000000015705 R15: 00007ffd85fc2120 [ 90.801415][ T4282] [ 90.819703][ T4384] CPU: 0 PID: 4384 Comm: syz.0.1 Not tainted syzkaller #0 [ 90.826903][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.837043][ T4384] Call Trace: [ 90.840367][ T4384] [ 90.843368][ T4384] dump_stack_lvl+0x188/0x24e [ 90.848123][ T4384] ? show_regs_print_info+0x12/0x12 [ 90.853383][ T4384] ? load_image+0x410/0x410 [ 90.857942][ T4384] ? __lock_acquire+0x7c40/0x7c40 [ 90.863027][ T4384] ? __lock_acquire+0x138a/0x7c40 [ 90.868142][ T4384] should_fail_ex+0x390/0x4c0 [ 90.872891][ T4384] prepare_alloc_pages+0x1e1/0x5b0 [ 90.878082][ T4384] __alloc_pages+0x130/0x4f0 [ 90.882740][ T4384] ? zone_statistics+0x170/0x170 [ 90.887778][ T4384] pte_alloc_one+0x7b/0x310 [ 90.892435][ T4384] ? pfn_modify_allowed+0x560/0x560 [ 90.898143][ T4384] ? hugepage_vma_check+0x461/0x540 [ 90.903426][ T4384] handle_mm_fault+0x257d/0x3d40 [ 90.908449][ T4384] ? numa_migrate_prep+0x250/0x250 [ 90.913636][ T4384] ? check_vma_flags+0x42e/0x4c0 [ 90.918642][ T4384] __get_user_pages+0x40d/0xec0 [ 90.923572][ T4384] ? populate_vma_page_range+0x2b0/0x2b0 [ 90.929286][ T4384] populate_vma_page_range+0x214/0x2b0 [ 90.934818][ T4384] __mm_populate+0x25c/0x380 [ 90.939475][ T4384] ? check_vma_flags+0x4c0/0x4c0 [ 90.944485][ T4384] ? up_write+0x1b6/0x410 [ 90.948882][ T4384] vm_mmap_pgoff+0x212/0x2d0 [ 90.953564][ T4384] ? account_locked_vm+0xe0/0xe0 [ 90.958588][ T4384] ? ksys_mmap_pgoff+0xef/0x720 [ 90.963520][ T4384] ? lockdep_hardirqs_on+0x94/0x140 [ 90.968778][ T4384] do_syscall_64+0x4c/0xa0 [ 90.973252][ T4384] ? clear_bhb_loop+0x60/0xb0 [ 90.978034][ T4384] ? clear_bhb_loop+0x60/0xb0 [ 90.982776][ T4384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.988730][ T4384] RIP: 0033:0x7f624db9de99 [ 90.993204][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.012911][ T4384] RSP: 002b:00007f624eb2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.021427][ T4384] RAX: ffffffffffffffda RBX: 00007f624de25fa0 RCX: 00007f624db9de99 [ 91.029456][ T4384] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 91.037777][ T4384] RBP: 00007f624dc33eaf R08: ffffffffffffffff R09: 0000000000000000 [ 91.045811][ T4384] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 91.053836][ T4384] R13: 00007f624de26038 R14: 00007f624de25fa0 R15: 00007fff6fa566e8 [ 91.061878][ T4384] [ 91.072837][ T4259] CPU: 0 PID: 4259 Comm: syz-executor Not tainted syzkaller #0 [ 91.080467][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.090739][ T4259] Call Trace: [ 91.094059][ T4259] [ 91.097069][ T4259] dump_stack_lvl+0x188/0x24e [ 91.101813][ T4259] ? show_regs_print_info+0x12/0x12 [ 91.107080][ T4259] ? load_image+0x410/0x410 [ 91.111651][ T4259] ? __lock_acquire+0x7c40/0x7c40 [ 91.116741][ T4259] should_fail_ex+0x390/0x4c0 [ 91.121487][ T4259] prepare_alloc_pages+0x1e1/0x5b0 [ 91.126673][ T4259] __alloc_pages+0x130/0x4f0 [ 91.131420][ T4259] ? zone_statistics+0x170/0x170 [ 91.136441][ T4259] ? __lock_acquire+0x7c40/0x7c40 [ 91.141546][ T4259] pte_alloc_one+0x7b/0x310 [ 91.146114][ T4259] ? pfn_modify_allowed+0x560/0x560 [ 91.151379][ T4259] ? count_memcg_event_mm+0x36b/0x3c0 [ 91.156810][ T4259] ? __lock_acquire+0x7c40/0x7c40 [ 91.161902][ T4259] ? count_memcg_event_mm+0x8a/0x3c0 [ 91.167243][ T4259] ? put_page+0x270/0x270 [ 91.171637][ T4259] __do_fault+0xd7/0x4e0 [ 91.175938][ T4259] ? handle_mm_fault+0x1804/0x3d40 [ 91.181545][ T4259] handle_mm_fault+0x192e/0x3d40 [ 91.186669][ T4259] ? mt_find+0x157/0x830 [ 91.191101][ T4259] ? numa_migrate_prep+0x250/0x250 [ 91.196274][ T4259] ? lock_chain_count+0x20/0x20 [ 91.201194][ T4259] ? lock_mm_and_find_vma+0xae/0x2f0 [ 91.206530][ T4259] do_user_addr_fault+0x58e/0xb20 [ 91.211628][ T4259] exc_page_fault+0x60/0x100 [ 91.216264][ T4259] ? clear_bhb_loop+0x60/0xb0 [ 91.220998][ T4259] asm_exc_page_fault+0x22/0x30 [ 91.225943][ T4259] RIP: 0033:0x7fa8a576ce87 [ 91.230442][ T4259] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 91.250118][ T4259] RSP: 002b:00007ffd2e1bb448 EFLAGS: 00010207 [ 91.256246][ T4259] RAX: 00007fa89d600000 RBX: 000055555864f600 RCX: 00007fa89d600000 [ 91.264308][ T4259] RDX: 00007fa89d60022f RSI: 0000555558642960 RDI: 00007fa89d600020 [ 91.272326][ T4259] RBP: 00007ffd2e1bb460 R08: 0000000000000000 R09: 0000000000000000 [ 91.280350][ T4259] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555558641fe0 [ 91.288450][ T4259] R13: 0000000000000008 R14: 0000000000000001 R15: 0000000000000000 [ 91.296474][ T4259] [ 91.337433][ T4259] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 91.408713][ T4391] tipc: Started in network mode [ 91.414132][ T4391] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.431343][ T4391] tipc: New replicast peer: 172.20.20.187 [ 91.463956][ T4391] tipc: Enabled bearer , priority 10 [ 91.634630][ T4399] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.704706][ T4401] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.724024][ T4399] CIFS: Attempting to mount \\127.0.0.1\share [ 91.732652][ T4399] CIFS: VFS: No username specified [ 91.752329][ T4302] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 91.760493][ T4302] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 91.771317][ T4302] node 0: slabs: 2142, objs: 25704, free: 0 [ 91.777486][ T4302] node 1: slabs: 4, objs: 48, free: 48 [ 91.912397][ T129] cfg80211: failed to load regulatory.db [ 91.961304][ T4410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 92.062698][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.221540][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.391481][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.518668][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.614820][ T4317] tipc: Node number set to 2886997162 [ 92.975709][ T4428] tipc: Started in network mode [ 93.020070][ T4428] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.040946][ T4428] tipc: New replicast peer: 172.20.20.187 [ 93.047493][ T4428] tipc: Enabled bearer , priority 10 [ 93.439899][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28'. [ 93.454814][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.466299][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.505442][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.518241][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.543333][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.550851][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.008578][ T4458] CIFS: Attempting to mount \\127.0.0.1\share [ 94.034681][ T4458] CIFS: VFS: No username specified [ 94.223800][ T4321] tipc: Node number set to 2886997162 [ 94.823484][ T4479] tipc: Started in network mode [ 94.828648][ T4479] tipc: Node identity ac1414aa, cluster identity 4711 [ 94.850200][ T4479] tipc: New replicast peer: 172.20.20.187 [ 94.874599][ T4479] tipc: Enabled bearer , priority 10 [ 94.898309][ T4442] chnl_net:caif_netlink_parms(): no params data found [ 94.962062][ T4484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 95.517353][ T9] device hsr_slave_0 left promiscuous mode [ 95.555170][ T9] device hsr_slave_1 left promiscuous mode [ 95.567814][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.585716][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.597476][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.599537][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 95.627347][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.665639][ T9] device bridge_slave_1 left promiscuous mode [ 95.718942][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.777854][ T9] device bridge_slave_0 left promiscuous mode [ 95.791938][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.905407][ T9] device veth1_macvtap left promiscuous mode [ 95.919567][ T9] device veth0_macvtap left promiscuous mode [ 95.925944][ T9] device veth1_vlan left promiscuous mode [ 95.936622][ T9] device veth0_vlan left promiscuous mode [ 96.325938][ T4521] CIFS: Attempting to mount \\127.0.0.1\share [ 96.340126][ T4521] CIFS: VFS: No username specified [ 96.717629][ T9] team0 (unregistering): Port device team_slave_1 removed [ 96.759610][ T9] team0 (unregistering): Port device team_slave_0 removed [ 96.797526][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.835685][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.115579][ T9] bond0 (unregistering): Released all slaves [ 97.226629][ T129] tipc: Node number set to 2886997162 [ 97.236365][ T4523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 97.280730][ T4528] tipc: Enabling of bearer rejected, already enabled [ 97.330036][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.349415][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.364798][ T4442] device bridge_slave_0 entered promiscuous mode [ 97.421965][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.429628][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.439953][ T4442] device bridge_slave_1 entered promiscuous mode [ 97.578666][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.628128][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.670690][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 97.783390][ T4442] team0: Port device team_slave_0 added [ 97.827744][ T4442] team0: Port device team_slave_1 added [ 97.921776][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.933401][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.040354][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.072105][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.134884][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.217156][ T4556] CIFS: Attempting to mount \\127.0.0.1\share [ 98.244228][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.266629][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'. [ 98.341584][ T4559] CIFS: VFS: Invalid response size 0 for command 0 [ 98.369099][ T4559] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 98.504933][ T4442] device hsr_slave_0 entered promiscuous mode [ 98.560760][ T4442] device hsr_slave_1 entered promiscuous mode [ 98.579483][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.619356][ T4442] Cannot create hsr debugfs directory [ 98.931967][ T4556] CIFS: VFS: cifs_mount failed w/return code = -5 [ 99.749357][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 99.815833][ T4600] Zero length message leads to an empty skb [ 99.878909][ T4442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.962425][ T4442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.008961][ T4442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.056943][ T4608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 100.113285][ T4442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.147170][ T4611] CIFS: Attempting to mount \\127.0.0.1\share [ 100.288021][ T4617] CIFS: VFS: Invalid response size 0 for command 0 [ 100.325596][ T4617] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 100.355749][ T4611] CIFS: VFS: cifs_mount failed w/return code = -5 [ 100.566686][ T4442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.639113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.654282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.678544][ T4442] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.711210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.733010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.778623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.785893][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.835042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.863382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.908121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.937338][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.944622][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.985597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.030112][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.069095][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.097883][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.137473][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.165695][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.192302][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.225687][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.248697][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.325761][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.338283][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.358147][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.829947][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 101.890814][ T4660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 102.145306][ T4668] binder: BINDER_SET_CONTEXT_MGR already set [ 102.184248][ T4668] binder: 4665:4668 ioctl 4018620d 2000000002c0 returned -16 [ 102.270627][ T4671] CIFS: Attempting to mount \\127.0.0.1\share [ 102.324029][ T4674] CIFS: VFS: Invalid response size 0 for command 0 [ 102.332864][ T4671] CIFS: VFS: cifs_mount failed w/return code = -5 [ 102.626483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.638803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.674651][ T4442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.682836][ T4684] device syzkaller0 entered promiscuous mode [ 102.827228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.875122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.950034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.990326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.004827][ T4442] device veth0_vlan entered promiscuous mode [ 103.021858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.047465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.076901][ T4442] device veth1_vlan entered promiscuous mode [ 103.209592][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.225441][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.258135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.285711][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.343020][ T4442] device veth0_macvtap entered promiscuous mode [ 103.392424][ T4442] device veth1_macvtap entered promiscuous mode [ 103.465581][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.506085][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.569974][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.610842][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.631042][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.656882][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.668800][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.686233][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.704883][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.717708][ T4707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 103.731458][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.744726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.798262][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.849708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.917087][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.954697][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.980029][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.999229][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.019411][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.042580][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.064981][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.076104][ T4723] CIFS: Attempting to mount \\127.0.0.1\share [ 104.101460][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.129974][ T4724] CIFS: VFS: Invalid response size 0 for command 0 [ 104.146827][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.162714][ T4724] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 104.187662][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.206956][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.220770][ T4723] CIFS: VFS: cifs_mount failed w/return code = -5 [ 104.252920][ T4442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.274001][ T4442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.309462][ T4442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.348747][ T4442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.704368][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.744128][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.796199][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.900795][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.908729][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.962287][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.149561][ T4753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 105.457872][ T4765] CIFS: Attempting to mount \\127.0.0.1\share [ 105.511509][ T4768] CIFS: VFS: Invalid response size 0 for command 0 [ 105.525166][ T4765] CIFS: VFS: cifs_mount failed w/return code = -5 [ 106.240040][ T4794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 107.400882][ T4813] CIFS: Attempting to mount \\127.0.0.1\share [ 107.453577][ T4814] CIFS: VFS: Invalid response size 0 for command 0 [ 107.480812][ T4813] CIFS: VFS: cifs_mount failed w/return code = -5 [ 107.931867][ T4834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 109.387923][ T4862] CIFS: Attempting to mount \\127.0.0.1\share [ 109.405101][ T4862] CIFS: VFS: Error connecting to socket. Aborting operation. [ 109.446842][ T4862] CIFS: VFS: cifs_mount failed w/return code = -111 [ 109.993012][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 111.587697][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'. [ 112.437409][ T4919] CIFS: Attempting to mount \\127.0.0.1\share [ 112.511209][ T4919] CIFS: VFS: Error connecting to socket. Aborting operation. [ 112.518765][ T4919] CIFS: VFS: cifs_mount failed w/return code = -111 [ 113.426054][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 113.481039][ T4956] device syzkaller0 entered promiscuous mode [ 114.690706][ T4977] CIFS: Attempting to mount \\127.0.0.1\share [ 114.737670][ T4977] CIFS: VFS: Error connecting to socket. Aborting operation. [ 114.782941][ T4977] CIFS: VFS: cifs_mount failed w/return code = -111 [ 114.796464][ T4981] file system registered [ 114.848166][ T4981] read descriptors [ 114.942552][ T4272] ffs_data_put(): freeing [ 115.725537][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 116.681710][ T5014] device syzkaller0 entered promiscuous mode [ 116.770502][ T5023] read descriptors [ 116.864282][ T4281] ffs_data_put(): freeing [ 117.075416][ T5038] FAULT_INJECTION: forcing a failure. [ 117.075416][ T5038] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 117.076281][ T4442] FAULT_INJECTION: forcing a failure. [ 117.076281][ T4442] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 117.128941][ T5038] CPU: 0 PID: 5038 Comm: syz.2.228 Not tainted syzkaller #0 [ 117.136318][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.146441][ T5038] Call Trace: [ 117.149763][ T5038] [ 117.152742][ T5038] dump_stack_lvl+0x188/0x24e [ 117.157548][ T5038] ? show_regs_print_info+0x12/0x12 [ 117.162801][ T5038] ? load_image+0x410/0x410 [ 117.167362][ T5038] ? __lock_acquire+0x7c40/0x7c40 [ 117.172456][ T5038] ? __lock_acquire+0x138a/0x7c40 [ 117.177536][ T5038] should_fail_ex+0x390/0x4c0 [ 117.182277][ T5038] prepare_alloc_pages+0x1e1/0x5b0 [ 117.187460][ T5038] __alloc_pages+0x130/0x4f0 [ 117.192206][ T5038] ? zone_statistics+0x170/0x170 [ 117.197202][ T5038] pte_alloc_one+0x7b/0x310 [ 117.201751][ T5038] ? pfn_modify_allowed+0x560/0x560 [ 117.207045][ T5038] ? hugepage_vma_check+0x461/0x540 [ 117.212306][ T5038] handle_mm_fault+0x257d/0x3d40 [ 117.217326][ T5038] ? numa_migrate_prep+0x250/0x250 [ 117.222498][ T5038] ? check_vma_flags+0x42e/0x4c0 [ 117.227532][ T5038] __get_user_pages+0x40d/0xec0 [ 117.232448][ T5038] ? populate_vma_page_range+0x2b0/0x2b0 [ 117.238155][ T5038] populate_vma_page_range+0x214/0x2b0 [ 117.243688][ T5038] __mm_populate+0x25c/0x380 [ 117.248340][ T5038] ? check_vma_flags+0x4c0/0x4c0 [ 117.253341][ T5038] ? up_write+0x1b6/0x410 [ 117.257718][ T5038] vm_mmap_pgoff+0x212/0x2d0 [ 117.262369][ T5038] ? account_locked_vm+0xe0/0xe0 [ 117.267460][ T5038] ? ksys_mmap_pgoff+0xef/0x720 [ 117.272378][ T5038] ? lockdep_hardirqs_on+0x94/0x140 [ 117.277710][ T5038] do_syscall_64+0x4c/0xa0 [ 117.282175][ T5038] ? clear_bhb_loop+0x60/0xb0 [ 117.286912][ T5038] ? clear_bhb_loop+0x60/0xb0 [ 117.291752][ T5038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.297722][ T5038] RIP: 0033:0x7f7b2059de99 [ 117.302193][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.321858][ T5038] RSP: 002b:00007f7b21382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.330343][ T5038] RAX: ffffffffffffffda RBX: 00007f7b20825fa0 RCX: 00007f7b2059de99 [ 117.338367][ T5038] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 117.346403][ T5038] RBP: 00007f7b20633eaf R08: ffffffffffffffff R09: 0000000000000000 [ 117.354423][ T5038] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 117.362484][ T5038] R13: 00007f7b20826038 R14: 00007f7b20825fa0 R15: 00007ffcaabe99b8 [ 117.370541][ T5038] [ 117.375731][ T4442] CPU: 1 PID: 4442 Comm: syz-executor Not tainted syzkaller #0 [ 117.383382][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.393758][ T4442] Call Trace: [ 117.397071][ T4442] [ 117.400462][ T4442] dump_stack_lvl+0x188/0x24e [ 117.405176][ T4442] ? show_regs_print_info+0x12/0x12 [ 117.410408][ T4442] ? load_image+0x410/0x410 [ 117.414939][ T4442] ? __lock_acquire+0x7c40/0x7c40 [ 117.419994][ T4442] ? finish_task_switch+0x327/0x8e0 [ 117.425350][ T4442] should_fail_ex+0x390/0x4c0 [ 117.430094][ T4442] prepare_alloc_pages+0x1e1/0x5b0 [ 117.435262][ T4442] __alloc_pages+0x130/0x4f0 [ 117.439892][ T4442] ? zone_statistics+0x170/0x170 [ 117.444879][ T4442] pte_alloc_one+0x7b/0x310 [ 117.449425][ T4442] ? pfn_modify_allowed+0x560/0x560 [ 117.454660][ T4442] ? __might_sleep+0xd0/0xd0 [ 117.459285][ T4442] ? rcu_is_watching+0x11/0xa0 [ 117.464090][ T4442] __pte_alloc+0x21/0x150 [ 117.468456][ T4442] copy_page_range+0x322f/0x3a60 [ 117.473478][ T4442] ? pfn_valid+0x450/0x450 [ 117.478206][ T4442] ? up_write+0x1b6/0x410 [ 117.482573][ T4442] copy_mm+0xeb0/0x1680 [ 117.486788][ T4442] ? copy_signal+0x640/0x640 [ 117.491412][ T4442] ? lockdep_init_map_type+0x98/0x8d0 [ 117.496835][ T4442] ? __init_rwsem+0x11e/0x160 [ 117.501666][ T4442] ? copy_signal+0x51f/0x640 [ 117.506292][ T4442] copy_process+0x19a6/0x40c0 [ 117.511002][ T4442] ? verify_lock_unused+0x140/0x140 [ 117.516244][ T4442] ? copy_process+0x974/0x40c0 [ 117.521052][ T4442] ? idle_dummy+0x10/0x10 [ 117.525422][ T4442] kernel_clone+0x24b/0x900 [ 117.529968][ T4442] ? create_io_thread+0x170/0x170 [ 117.535058][ T4442] ? __lock_acquire+0x7c40/0x7c40 [ 117.540122][ T4442] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.546145][ T4442] __x64_sys_clone+0x1a7/0x220 [ 117.550959][ T4442] ? __might_fault+0xc2/0x120 [ 117.555665][ T4442] ? __ia32_sys_vfork+0x140/0x140 [ 117.560900][ T4442] ? lock_chain_count+0x20/0x20 [ 117.565910][ T4442] ? lockdep_hardirqs_on+0x94/0x140 [ 117.571163][ T4442] do_syscall_64+0x4c/0xa0 [ 117.575663][ T4442] ? clear_bhb_loop+0x60/0xb0 [ 117.580392][ T4442] ? clear_bhb_loop+0x60/0xb0 [ 117.585107][ T4442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.591044][ T4442] RIP: 0033:0x7fce6a3c6912 [ 117.595488][ T4442] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 117.615138][ T4442] RSP: 002b:00007ffd29a6e6a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 117.623686][ T4442] RAX: ffffffffffffffda RBX: 00007ffd29a6e6a0 RCX: 00007fce6a3c6912 [ 117.632046][ T4442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 117.640045][ T4442] RBP: 00007ffd29a6e82c R08: 0000000000000000 R09: 0000000000000001 [ 117.648668][ T4442] R10: 00005555875b27d0 R11: 0000000000000246 R12: 0000000000000001 [ 117.656688][ T4442] R13: 00000000000927c0 R14: 000000000001c7c3 R15: 00007ffd29a6e880 [ 117.664748][ T4442] [ 117.745697][ T5040] CIFS: Attempting to mount \\127.0.0.1\share [ 117.766736][ T5040] CIFS: VFS: Error connecting to socket. Aborting operation. [ 117.776691][ T5040] CIFS: VFS: cifs_mount failed w/return code = -111 [ 118.303282][ T4802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.674183][ T5058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 119.110630][ T4802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.275880][ T4802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.423177][ T4802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.465943][ T5069] device syzkaller0 entered promiscuous mode [ 119.915134][ T5083] FAULT_INJECTION: forcing a failure. [ 119.915134][ T5083] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 119.918808][ T4352] FAULT_INJECTION: forcing a failure. [ 119.918808][ T4352] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 119.945957][ T5084] FAULT_INJECTION: forcing a failure. [ 119.945957][ T5084] name fail_page_alloc, interval 1, probability 100, space 0, times 8 [ 119.950017][ T3638] FAULT_INJECTION: forcing a failure. [ 119.950017][ T3638] name fail_page_alloc, interval 1, probability 100, space 0, times 7 [ 119.964774][ T4272] FAULT_INJECTION: forcing a failure. [ 119.964774][ T4272] name fail_page_alloc, interval 1, probability 100, space 0, times 7 [ 119.973952][ T4273] FAULT_INJECTION: forcing a failure. [ 119.973952][ T4273] name fail_page_alloc, interval 1, probability 100, space 0, times 6 [ 120.019500][ T4352] CPU: 1 PID: 4352 Comm: udevd Not tainted syzkaller #0 [ 120.026553][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.036914][ T4352] Call Trace: [ 120.040339][ T4352] [ 120.043301][ T4352] dump_stack_lvl+0x188/0x24e [ 120.048029][ T4352] ? show_regs_print_info+0x12/0x12 [ 120.053274][ T4352] ? load_image+0x410/0x410 [ 120.057817][ T4352] ? __lock_acquire+0x7c40/0x7c40 [ 120.062885][ T4352] ? verify_lock_unused+0x140/0x140 [ 120.068138][ T4352] should_fail_ex+0x390/0x4c0 [ 120.072945][ T4352] prepare_alloc_pages+0x1e1/0x5b0 [ 120.078104][ T4352] __alloc_pages+0x130/0x4f0 [ 120.082932][ T4352] ? zone_statistics+0x170/0x170 [ 120.087956][ T4352] alloc_slab_page+0x5d/0x180 [ 120.092765][ T4352] new_slab+0x1b3/0x2d0 [ 120.096963][ T4352] ___slab_alloc+0xbc5/0x1240 [ 120.101728][ T4352] ? ___slab_alloc+0x20e/0x1240 [ 120.106617][ T4352] ? getname_flags+0xb7/0x500 [ 120.111335][ T4352] kmem_cache_alloc+0x111/0x2f0 [ 120.116215][ T4352] ? getname_flags+0xb7/0x500 [ 120.120937][ T4352] getname_flags+0xb7/0x500 [ 120.125482][ T4352] __x64_sys_newfstatat+0x16f/0x240 [ 120.130723][ T4352] ? kmem_cache_free+0xf7/0x2a0 [ 120.135646][ T4352] ? __ia32_sys_newlstat+0x1f0/0x1f0 [ 120.140978][ T4352] ? lockdep_hardirqs_on+0x94/0x140 [ 120.146208][ T4352] do_syscall_64+0x4c/0xa0 [ 120.150667][ T4352] ? clear_bhb_loop+0x60/0xb0 [ 120.155393][ T4352] ? clear_bhb_loop+0x60/0xb0 [ 120.160108][ T4352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.166059][ T4352] RIP: 0033:0x7efdf6311b0a [ 120.170517][ T4352] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 120.190177][ T4352] RSP: 002b:00007ffe1329ca98 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 120.198626][ T4352] RAX: ffffffffffffffda RBX: 0000563a22844bd1 RCX: 00007efdf6311b0a [ 120.206730][ T4352] RDX: 00007ffe1329caa0 RSI: 00007ffe1329cb30 RDI: 00000000ffffff9c [ 120.214819][ T4352] RBP: 0000563a22834f10 R08: 0000563a22844bd1 R09: 0000000000000000 [ 120.222829][ T4352] R10: 0000000000000100 R11: 0000000000000206 R12: 0000563a22835000 [ 120.230834][ T4352] R13: 00007ffe1329cb30 R14: 0000563a2281864c R15: 00005639f49d9bcc [ 120.238847][ T4352] [ 120.251360][ T4272] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 120.259006][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.269170][ T4272] Call Trace: [ 120.272590][ T4272] [ 120.275572][ T4272] dump_stack_lvl+0x188/0x24e [ 120.280313][ T4272] ? show_regs_print_info+0x12/0x12 [ 120.285588][ T4272] ? load_image+0x410/0x410 [ 120.290146][ T4272] ? __lock_acquire+0x7c40/0x7c40 [ 120.295233][ T4272] ? is_bpf_text_address+0x22/0x2a0 [ 120.300484][ T4272] should_fail_ex+0x390/0x4c0 [ 120.305325][ T4272] prepare_alloc_pages+0x1e1/0x5b0 [ 120.310608][ T4272] __alloc_pages+0x130/0x4f0 [ 120.315272][ T4272] ? zone_statistics+0x170/0x170 [ 120.320288][ T4272] pte_alloc_one+0x7b/0x310 [ 120.324857][ T4272] ? pfn_modify_allowed+0x560/0x560 [ 120.330120][ T4272] ? __might_sleep+0xd0/0xd0 [ 120.334764][ T4272] ? rcu_is_watching+0x11/0xa0 [ 120.339579][ T4272] __pte_alloc+0x21/0x150 [ 120.344020][ T4272] copy_page_range+0x322f/0x3a60 [ 120.349161][ T4272] ? pfn_valid+0x450/0x450 [ 120.353778][ T4272] ? up_write+0x1b6/0x410 [ 120.358424][ T4272] copy_mm+0xeb0/0x1680 [ 120.362646][ T4272] ? copy_signal+0x640/0x640 [ 120.367279][ T4272] ? lockdep_init_map_type+0x98/0x8d0 [ 120.372910][ T4272] ? __init_rwsem+0x11e/0x160 [ 120.377664][ T4272] ? copy_signal+0x51f/0x640 [ 120.382327][ T4272] copy_process+0x19a6/0x40c0 [ 120.387089][ T4272] ? verify_lock_unused+0x140/0x140 [ 120.392347][ T4272] ? copy_process+0x974/0x40c0 [ 120.397176][ T4272] ? idle_dummy+0x10/0x10 [ 120.401566][ T4272] kernel_clone+0x24b/0x900 [ 120.406129][ T4272] ? create_io_thread+0x170/0x170 [ 120.411586][ T4272] ? __lock_acquire+0x7c40/0x7c40 [ 120.417116][ T4272] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.423595][ T4272] __x64_sys_clone+0x1a7/0x220 [ 120.429298][ T4272] ? __might_fault+0xc2/0x120 [ 120.434576][ T4272] ? __ia32_sys_vfork+0x140/0x140 [ 120.439976][ T4272] ? lock_chain_count+0x20/0x20 [ 120.445071][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 120.450853][ T4272] do_syscall_64+0x4c/0xa0 [ 120.455631][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 120.461028][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 120.466975][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.473882][ T4272] RIP: 0033:0x7f7e355c6912 [ 120.478423][ T4272] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 120.500049][ T4272] RSP: 002b:00007ffcfb1da210 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 120.508959][ T4272] RAX: ffffffffffffffda RBX: 00007ffcfb1da210 RCX: 00007f7e355c6912 [ 120.516986][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 120.525009][ T4272] RBP: 00007ffcfb1da39c R08: 0000000000000000 R09: 0000000000000001 [ 120.533025][ T4272] R10: 000055557e0117d0 R11: 0000000000000246 R12: 0000000000000001 [ 120.541056][ T4272] R13: 00000000000927c0 R14: 000000000001d336 R15: 00007ffcfb1da3f0 [ 120.549104][ T4272] [ 120.552169][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 120.559792][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.569907][ T4273] Call Trace: [ 120.573236][ T4273] [ 120.576201][ T4273] dump_stack_lvl+0x188/0x24e [ 120.581021][ T4273] ? show_regs_print_info+0x12/0x12 [ 120.586290][ T4273] ? load_image+0x410/0x410 [ 120.590863][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 120.595942][ T4273] ? verify_lock_unused+0x140/0x140 [ 120.601237][ T4273] should_fail_ex+0x390/0x4c0 [ 120.605994][ T4273] prepare_alloc_pages+0x1e1/0x5b0 [ 120.611177][ T4273] __alloc_pages+0x130/0x4f0 [ 120.615824][ T4273] ? zone_statistics+0x170/0x170 [ 120.620818][ T4273] ? alloc_pages+0x4dd/0x740 [ 120.625479][ T4273] ? lock_chain_count+0x20/0x20 [ 120.630377][ T4273] alloc_slab_page+0x5d/0x180 [ 120.635140][ T4273] new_slab+0x1b3/0x2d0 [ 120.639348][ T4273] ___slab_alloc+0xbc5/0x1240 [ 120.644071][ T4273] ? getname_flags+0xb7/0x500 [ 120.648785][ T4273] kmem_cache_alloc+0x111/0x2f0 [ 120.653711][ T4273] ? getname_flags+0xb7/0x500 [ 120.658450][ T4273] getname_flags+0xb7/0x500 [ 120.663012][ T4273] user_path_at_empty+0x28/0x60 [ 120.667919][ T4273] __x64_sys_umount+0xf9/0x170 [ 120.672730][ T4273] ? path_umount+0xfa0/0xfa0 [ 120.677363][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 120.682593][ T4273] do_syscall_64+0x4c/0xa0 [ 120.687047][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 120.691778][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 120.696592][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.702521][ T4273] RIP: 0033:0x7f624db9f0d7 [ 120.706965][ T4273] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 120.726603][ T4273] RSP: 002b:00007fff6fa55958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.735225][ T4273] RAX: ffffffffffffffda RBX: 00007f624dc3330a RCX: 00007f624db9f0d7 [ 120.743232][ T4273] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007fff6fa56aa0 [ 120.751664][ T4273] RBP: 00007fff6fa56a8c R08: 0000000000000000 R09: 0000000000000000 [ 120.759677][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6fa56aa0 [ 120.767676][ T4273] R13: 00007f624dc3330a R14: 000000000001d37d R15: 00007fff6fa56ae0 [ 120.775689][ T4273] [ 120.780981][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 120.787998][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.798102][ T3638] Call Trace: [ 120.801448][ T3638] [ 120.804417][ T3638] dump_stack_lvl+0x188/0x24e [ 120.809151][ T3638] ? show_regs_print_info+0x12/0x12 [ 120.814399][ T3638] ? load_image+0x410/0x410 [ 120.818942][ T3638] ? __lock_acquire+0x7c40/0x7c40 [ 120.824019][ T3638] ? verify_lock_unused+0x140/0x140 [ 120.829276][ T3638] should_fail_ex+0x390/0x4c0 [ 120.834014][ T3638] prepare_alloc_pages+0x1e1/0x5b0 [ 120.839174][ T3638] __alloc_pages+0x130/0x4f0 [ 120.843908][ T3638] ? zone_statistics+0x170/0x170 [ 120.848919][ T3638] alloc_slab_page+0x5d/0x180 [ 120.853649][ T3638] new_slab+0x1b3/0x2d0 [ 120.857866][ T3638] ___slab_alloc+0xbc5/0x1240 [ 120.862596][ T3638] ? getname_flags+0xb7/0x500 [ 120.867324][ T3638] kmem_cache_alloc+0x111/0x2f0 [ 120.872218][ T3638] ? getname_flags+0xb7/0x500 [ 120.876938][ T3638] getname_flags+0xb7/0x500 [ 120.881503][ T3638] do_sys_openat2+0xdd/0x4f0 [ 120.886235][ T3638] ? __bpf_trace_rseq_ip_fixup+0x40/0x40 [ 120.891925][ T3638] ? do_sys_open+0xe0/0xe0 [ 120.896395][ T3638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.902438][ T3638] ? lock_chain_count+0x20/0x20 [ 120.907358][ T3638] __x64_sys_openat+0x135/0x160 [ 120.912265][ T3638] do_syscall_64+0x4c/0xa0 [ 120.916725][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 120.921449][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 120.926185][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.932138][ T3638] RIP: 0033:0x7efdf62a7407 [ 120.936599][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 120.956263][ T3638] RSP: 002b:00007ffe132a2e30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 120.964726][ T3638] RAX: ffffffffffffffda RBX: 00007efdf6a35880 RCX: 00007efdf62a7407 [ 120.972734][ T3638] RDX: 0000000000080141 RSI: 00005639f49d202e RDI: ffffffffffffff9c [ 120.980751][ T3638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.988770][ T3638] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 120.996793][ T3638] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 121.004826][ T3638] [ 121.007884][ T5084] CPU: 0 PID: 5084 Comm: dhcpcd Not tainted syzkaller #0 [ 121.014969][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.025072][ T5084] Call Trace: [ 121.028391][ T5084] [ 121.031361][ T5084] dump_stack_lvl+0x188/0x24e [ 121.036093][ T5084] ? show_regs_print_info+0x12/0x12 [ 121.041330][ T5084] ? load_image+0x410/0x410 [ 121.045885][ T5084] ? __lock_acquire+0x7c40/0x7c40 [ 121.050946][ T5084] should_fail_ex+0x390/0x4c0 [ 121.055661][ T5084] prepare_alloc_pages+0x1e1/0x5b0 [ 121.060819][ T5084] __alloc_pages+0x130/0x4f0 [ 121.065479][ T5084] ? zone_statistics+0x170/0x170 [ 121.070467][ T5084] ? __lock_acquire+0x7c40/0x7c40 [ 121.075543][ T5084] __folio_alloc+0xe/0x30 [ 121.079915][ T5084] vma_alloc_folio+0x499/0x900 [ 121.084725][ T5084] handle_mm_fault+0x1fe3/0x3d40 [ 121.089693][ T5084] ? mt_find+0x157/0x830 [ 121.094016][ T5084] ? numa_migrate_prep+0x250/0x250 [ 121.099168][ T5084] ? lock_chain_count+0x20/0x20 [ 121.104064][ T5084] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 121.110176][ T5084] ? lock_mm_and_find_vma+0xae/0x2f0 [ 121.116105][ T5084] do_user_addr_fault+0x58e/0xb20 [ 121.121182][ T5084] exc_page_fault+0x60/0x100 [ 121.126003][ T5084] asm_exc_page_fault+0x22/0x30 [ 121.130906][ T5084] RIP: 0033:0x7fdda0110e16 [ 121.135368][ T5084] Code: 83 0d 00 c3 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 48 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 d2 48 89 c7 b8 3c 00 00 00 0f 05 48 8b 0d af ff 0c 00 f7 d8 64 [ 121.155184][ T5084] RSP: 002b:00007fdd9ff4c000 EFLAGS: 00010246 [ 121.161637][ T5084] RAX: 0000000000000000 RBX: 0000000000009000 RCX: 00007fdda0110e09 [ 121.169655][ T5084] RDX: 00007fdda00fbdd0 RSI: 0000000000000058 RDI: 00007ffc94942180 [ 121.177750][ T5084] RBP: 0000000000000000 R08: 00007ffc94942180 R09: 0000000000000000 [ 121.185753][ T5084] R10: 0000000000000008 R11: 0000000000000202 R12: 00007ffc949424a0 [ 121.194015][ T5084] R13: 00007ffc94942180 R14: 0000000000000000 R15: 00007fdda00fbdd0 [ 121.202485][ T5084] [ 121.205995][ T4352] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 121.210219][ T5083] CPU: 0 PID: 5083 Comm: syz.3.244 Not tainted syzkaller #0 [ 121.214207][ T4352] cache: names_cache, object size: 4096, buffer size: 4352, default order: 3, min order: 1 [ 121.221419][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.221434][ T5083] Call Trace: [ 121.221447][ T5083] [ 121.221457][ T5083] dump_stack_lvl+0x188/0x24e [ 121.233265][ T4352] names_cache debugging increased min order, use slub_debug=O to disable. [ 121.241718][ T5083] ? show_regs_print_info+0x12/0x12 [ 121.241758][ T5083] ? load_image+0x410/0x410 [ 121.241785][ T5083] ? __lock_acquire+0x7c40/0x7c40 [ 121.241816][ T5083] ? __lock_acquire+0x138a/0x7c40 [ 121.241855][ T5083] should_fail_ex+0x390/0x4c0 [ 121.245175][ T4352] node 0: slabs: 1386, objs: 9702, free: 28 [ 121.248133][ T5083] prepare_alloc_pages+0x1e1/0x5b0 [ 121.252924][ T4352] node 1: slabs: 4, objs: 28, free: 28 [ 121.261509][ T5083] __alloc_pages+0x130/0x4f0 [ 121.261551][ T5083] ? zone_statistics+0x170/0x170 [ 121.279335][ T3638] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 121.281461][ T5083] pte_alloc_one+0x7b/0x310 [ 121.286150][ T3638] cache: names_cache, object size: 4096, buffer size: 4352, default order: 3, min order: 1 [ 121.292230][ T5083] ? pfn_modify_allowed+0x560/0x560 [ 121.292267][ T5083] ? hugepage_vma_check+0x461/0x540 [ 121.297393][ T3638] names_cache debugging increased min order, use slub_debug=O to disable. [ 121.303075][ T5083] handle_mm_fault+0x257d/0x3d40 [ 121.303157][ T5083] ? numa_migrate_prep+0x250/0x250 [ 121.307695][ T3638] node 0: slabs: 1386, objs: 9702, free: 6 [ 121.312659][ T5083] ? check_vma_flags+0x42e/0x4c0 [ 121.312694][ T5083] __get_user_pages+0x40d/0xec0 [ 121.312733][ T5083] ? populate_vma_page_range+0x2b0/0x2b0 [ 121.312775][ T5083] populate_vma_page_range+0x214/0x2b0 [ 121.312808][ T5083] __mm_populate+0x25c/0x380 [ 121.312838][ T5083] ? check_vma_flags+0x4c0/0x4c0 [ 121.312871][ T5083] ? up_write+0x1b6/0x410 [ 121.312901][ T5083] vm_mmap_pgoff+0x212/0x2d0 [ 121.312941][ T5083] ? account_locked_vm+0xe0/0xe0 [ 121.312990][ T5083] ? ksys_mmap_pgoff+0xef/0x720 [ 121.321175][ T3638] node 1: slabs: 4, objs: 28, free: 28 [ 121.325622][ T5083] ? lockdep_hardirqs_on+0x94/0x140 [ 121.429081][ T3638] udevd[3638]: could not touch /run/udev/queue: Cannot allocate memory [ 121.431748][ T5083] do_syscall_64+0x4c/0xa0 [ 121.431787][ T5083] ? clear_bhb_loop+0x60/0xb0 [ 121.449388][ T5083] ? clear_bhb_loop+0x60/0xb0 [ 121.454133][ T5083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.460086][ T5083] RIP: 0033:0x7f4fe379de99 [ 121.464548][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.484209][ T5083] RSP: 002b:00007f4fe45d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.492684][ T5083] RAX: ffffffffffffffda RBX: 00007f4fe3a25fa0 RCX: 00007f4fe379de99 [ 121.501229][ T5083] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 121.509280][ T5083] RBP: 00007f4fe3833eaf R08: ffffffffffffffff R09: 0000000000000000 [ 121.517296][ T5083] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 121.525301][ T5083] R13: 00007f4fe3a26038 R14: 00007f4fe3a25fa0 R15: 00007fff61bc1358 [ 121.533316][ T5083] [ 121.537028][ T4273] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 121.545125][ T4273] cache: names_cache, object size: 4096, buffer size: 4352, default order: 3, min order: 1 [ 121.555403][ T4273] names_cache debugging increased min order, use slub_debug=O to disable. [ 121.564201][ T4273] node 0: slabs: 1389, objs: 9723, free: 0 [ 121.570256][ T4273] node 1: slabs: 4, objs: 28, free: 28 [ 121.663590][ T5084] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 121.717548][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.727463][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.736116][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.769051][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.777964][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.785473][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.935628][ T5096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.249'. [ 122.873178][ T5100] CIFS: Attempting to mount \\127.0.0.1\share [ 122.962403][ T5100] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.998441][ T5100] CIFS: VFS: cifs_mount failed w/return code = -111 [ 123.524236][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 123.839920][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 123.991526][ T4802] device hsr_slave_0 left promiscuous mode [ 124.095473][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.105652][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.113894][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.124473][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.132918][ T4802] device hsr_slave_1 left promiscuous mode [ 124.139228][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.146588][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.187780][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.207068][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.221042][ T5146] FAULT_INJECTION: forcing a failure. [ 124.221042][ T5146] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 124.230306][ T5133] FAULT_INJECTION: forcing a failure. [ 124.230306][ T5133] name fail_page_alloc, interval 1, probability 100, space 0, times 8 [ 124.246343][ T5148] FAULT_INJECTION: forcing a failure. [ 124.246343][ T5148] name fail_page_alloc, interval 1, probability 100, space 0, times 4 [ 124.248882][ T5133] CPU: 1 PID: 5133 Comm: syz.0.257 Not tainted syzkaller #0 [ 124.263080][ T5143] FAULT_INJECTION: forcing a failure. [ 124.263080][ T5143] name fail_page_alloc, interval 1, probability 100, space 0, times 3 [ 124.269150][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.269166][ T5133] Call Trace: [ 124.269173][ T5133] [ 124.269182][ T5133] dump_stack_lvl+0x188/0x24e [ 124.303712][ T5133] ? show_regs_print_info+0x12/0x12 [ 124.308949][ T5133] ? load_image+0x410/0x410 [ 124.313487][ T5133] ? __lock_acquire+0x7c40/0x7c40 [ 124.318543][ T5133] ? verify_lock_unused+0x140/0x140 [ 124.323786][ T5133] should_fail_ex+0x390/0x4c0 [ 124.328509][ T5133] prepare_alloc_pages+0x1e1/0x5b0 [ 124.333712][ T5133] __alloc_pages+0x130/0x4f0 [ 124.338358][ T5133] ? zone_statistics+0x170/0x170 [ 124.343470][ T5133] alloc_slab_page+0x5d/0x180 [ 124.348182][ T5133] new_slab+0x1b3/0x2d0 [ 124.352368][ T5133] ___slab_alloc+0xbc5/0x1240 [ 124.357106][ T5133] ? ___slab_alloc+0x20e/0x1240 [ 124.361993][ T5133] ? mas_alloc_nodes+0x449/0x880 [ 124.366967][ T5133] kmem_cache_alloc_bulk+0x1a3/0x4e0 [ 124.372282][ T5133] ? kmem_cache_alloc_bulk+0xbe/0x4e0 [ 124.377692][ T5133] mas_alloc_nodes+0x449/0x880 [ 124.382496][ T5133] mas_preallocate+0x162/0x3b0 [ 124.387300][ T5133] vma_expand+0x232/0x850 [ 124.391670][ T5133] mmap_region+0xc69/0x1c50 [ 124.396221][ T5133] ? file_mmap_ok+0x170/0x170 [ 124.400947][ T5133] ? vma_expand+0x850/0x850 [ 124.405496][ T5133] ? cap_mmap_addr+0x153/0x2c0 [ 124.410312][ T5133] do_mmap+0x9ce/0x10d0 [ 124.414507][ T5133] ? mlock_future_check+0x100/0x100 [ 124.419824][ T5133] ? ima_file_mmap+0xf7/0x140 [ 124.424532][ T5133] ? ima_file_free+0x3e0/0x3e0 [ 124.429427][ T5133] vm_mmap_pgoff+0x1c1/0x2d0 [ 124.434117][ T5133] ? account_locked_vm+0xe0/0xe0 [ 124.439095][ T5133] ? ksys_mmap_pgoff+0xef/0x720 [ 124.444068][ T5133] ? lockdep_hardirqs_on+0x94/0x140 [ 124.449817][ T5133] do_syscall_64+0x4c/0xa0 [ 124.454281][ T5133] ? clear_bhb_loop+0x60/0xb0 [ 124.458992][ T5133] ? clear_bhb_loop+0x60/0xb0 [ 124.463711][ T5133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.469663][ T5133] RIP: 0033:0x7f624db9dc02 [ 124.474126][ T5133] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 124.493849][ T5133] RSP: 002b:00007fff6fa56678 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.502298][ T5133] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f624db9dc02 [ 124.510389][ T5133] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 124.518421][ T5133] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 124.526426][ T5133] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff6fa567e0 [ 124.534458][ T5133] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 124.542474][ T5133] [ 124.546648][ C1] FAULT_INJECTION: forcing a failure. [ 124.546648][ C1] name fail_page_alloc, interval 1, probability 100, space 0, times 3 [ 124.560165][ C1] CPU: 1 PID: 4321 Comm: kworker/1:7 Not tainted syzkaller #0 [ 124.567666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.577771][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 124.583908][ C1] Call Trace: [ 124.587217][ C1] [ 124.590100][ C1] dump_stack_lvl+0x188/0x24e [ 124.594828][ C1] ? show_regs_print_info+0x12/0x12 [ 124.600083][ C1] ? load_image+0x410/0x410 [ 124.602845][ T5133] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 124.604665][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 124.614267][ T5133] cache: maple_node, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 124.617965][ C1] should_fail_ex+0x390/0x4c0 [ 124.628473][ T5133] node 0: slabs: 1474, objs: 23584, free: 0 [ 124.632562][ C1] prepare_alloc_pages+0x1e1/0x5b0 [ 124.632605][ C1] __alloc_pages+0x130/0x4f0 [ 124.638663][ T5133] node 1: slabs: 0, objs: 0, free: 0 [ 124.643800][ C1] ? zone_statistics+0x170/0x170 [ 124.643831][ C1] ? __lock_acquire+0x138a/0x7c40 [ 124.664047][ C1] ? verify_lock_unused+0x140/0x140 [ 124.669404][ C1] ? mark_lock+0x94/0x320 [ 124.673802][ C1] alloc_pages_node+0x10a/0x170 [ 124.678702][ C1] ? skb_attempt_defer_free+0x3f0/0x3f0 [ 124.684295][ C1] ? mark_lock+0x94/0x320 [ 124.688680][ C1] __napi_alloc_skb+0x33d/0x510 [ 124.693590][ C1] page_to_skb+0x2ae/0xac0 [ 124.698170][ C1] receive_buf+0x360/0x4e00 [ 124.702736][ C1] ? __lock_acquire+0x1465/0x7c40 [ 124.707820][ C1] ? virtnet_poll_tx+0x530/0x530 [ 124.712826][ C1] ? detach_buf_split+0x8ac/0xab0 [ 124.717916][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 124.722995][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 124.728243][ C1] ? virtqueue_get_buf_ctx+0x6b3/0xd00 [ 124.733785][ C1] virtnet_poll+0x5ed/0x1140 [ 124.738445][ C1] ? refill_work+0x220/0x220 [ 124.743080][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.749124][ C1] ? lock_chain_count+0x20/0x20 [ 124.754031][ C1] __napi_poll+0xbb/0x460 [ 124.758416][ C1] net_rx_action+0x622/0xbc0 [ 124.763070][ C1] ? net_tx_action+0x930/0x930 [ 124.767876][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.773983][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 124.779229][ C1] ? lock_chain_count+0x20/0x20 [ 124.784182][ C1] handle_softirqs+0x291/0x910 [ 124.788999][ C1] ? do_softirq+0x142/0x210 [ 124.793638][ C1] ? do_softirq+0x210/0x210 [ 124.798184][ C1] do_softirq+0x142/0x210 [ 124.802550][ C1] [ 124.805505][ C1] [ 124.808461][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 124.813910][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 124.819949][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 124.825322][ C1] ? mod_peer_timer+0x1f/0x250 [ 124.830141][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 124.835392][ C1] ? _local_bh_enable+0xa0/0xa0 [ 124.840285][ C1] ? mod_peer_timer+0x1f/0x250 [ 124.845115][ C1] ? mod_peer_timer+0x1f/0x250 [ 124.849945][ C1] ? mod_peer_timer+0x203/0x250 [ 124.854871][ C1] wg_packet_tx_worker+0x167/0x7e0 [ 124.860041][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.865281][ C1] ? process_one_work+0x7b4/0x1160 [ 124.870445][ C1] process_one_work+0x8ab/0x1160 [ 124.875466][ C1] ? worker_detach_from_pool+0x240/0x240 [ 124.881185][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.886257][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.891858][ C1] ? wq_worker_running+0x97/0x190 [ 124.896952][ C1] worker_thread+0xaf5/0x12a0 [ 124.901694][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.907643][ C1] kthread+0x29d/0x330 [ 124.911833][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 124.916904][ C1] ? kthread_blkcg+0xd0/0xd0 [ 124.921559][ C1] ret_from_fork+0x1f/0x30 [ 124.926045][ C1] [ 124.949405][ T5143] CPU: 0 PID: 5143 Comm: modprobe Not tainted syzkaller #0 [ 124.956716][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.966830][ T5143] Call Trace: [ 124.970158][ T5143] [ 124.973145][ T5143] dump_stack_lvl+0x188/0x24e [ 124.977900][ T5143] ? show_regs_print_info+0x12/0x12 [ 124.983161][ T5143] ? load_image+0x410/0x410 [ 124.987731][ T5143] ? __lock_acquire+0x7c40/0x7c40 [ 124.992819][ T5143] ? verify_lock_unused+0x140/0x140 [ 124.998100][ T5143] should_fail_ex+0x390/0x4c0 [ 125.002851][ T5143] prepare_alloc_pages+0x1e1/0x5b0 [ 125.008032][ T5143] __alloc_pages+0x130/0x4f0 [ 125.012676][ T5143] ? zone_statistics+0x170/0x170 [ 125.017676][ T5143] ? alloc_pages+0x4dd/0x740 [ 125.022369][ T5143] ? lock_chain_count+0x20/0x20 [ 125.025965][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.027273][ T5143] alloc_slab_page+0x5d/0x180 [ 125.034886][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.039392][ T5143] new_slab+0x1b3/0x2d0 [ 125.039422][ T5143] ___slab_alloc+0xbc5/0x1240 [ 125.039463][ T5143] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 125.062004][ T5143] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 125.067799][ T5143] __kmem_cache_alloc_node+0x126/0x270 [ 125.073324][ T5143] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 125.079166][ T5143] __kmalloc+0xa3/0x240 [ 125.083406][ T5143] tomoyo_realpath_from_path+0xe2/0x5c0 [ 125.089015][ T5143] tomoyo_check_open_permission+0x212/0x440 [ 125.094959][ T5143] ? tomoyo_check_open_permission+0x1bf/0x440 [ 125.101073][ T5143] ? tomoyo_check_path_number_acl+0x280/0x280 [ 125.107225][ T5143] ? __lock_acquire+0x7c40/0x7c40 [ 125.112342][ T5143] ? __rwlock_init+0x140/0x140 [ 125.117129][ T5143] ? __lock_acquire+0x7c40/0x7c40 [ 125.122182][ T5143] ? tomoyo_file_open+0xe9/0x170 [ 125.127159][ T5143] security_file_open+0x5e/0xa0 [ 125.132131][ T5143] do_dentry_open+0x2fd/0x10b0 [ 125.136945][ T5143] ? memcpy+0x3c/0x60 [ 125.140959][ T5143] path_openat+0x2674/0x2f10 [ 125.145603][ T5143] ? verify_lock_unused+0x140/0x140 [ 125.150924][ T5143] ? do_sys_openat2+0xdd/0x4f0 [ 125.155724][ T5143] ? do_filp_open+0x420/0x420 [ 125.160450][ T5143] do_filp_open+0x1ee/0x420 [ 125.165072][ T5143] ? vfs_tmpfile+0x470/0x470 [ 125.169712][ T5143] ? _raw_spin_unlock+0x24/0x40 [ 125.174676][ T5143] ? alloc_fd+0x590/0x640 [ 125.179043][ T5143] do_sys_openat2+0x14b/0x4f0 [ 125.183761][ T5143] ? do_sys_open+0xe0/0xe0 [ 125.188212][ T5143] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.194250][ T5143] ? lock_chain_count+0x20/0x20 [ 125.199139][ T5143] __x64_sys_openat+0x135/0x160 [ 125.204031][ T5143] do_syscall_64+0x4c/0xa0 [ 125.208484][ T5143] ? clear_bhb_loop+0x60/0xb0 [ 125.213197][ T5143] ? clear_bhb_loop+0x60/0xb0 [ 125.217914][ T5143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.223838][ T5143] RIP: 0033:0x7f2d5859e0ba [ 125.228366][ T5143] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 125.248132][ T5143] RSP: 002b:00007ffe220cce88 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 125.256594][ T5143] RAX: ffffffffffffffda RBX: 00007ffe220ccf00 RCX: 00007f2d5859e0ba [ 125.264598][ T5143] RDX: 0000000000080000 RSI: 00007ffe220ccf00 RDI: 00000000ffffff9c [ 125.272602][ T5143] RBP: 00007ffe220ccef0 R08: 00007ffe220cd0f7 R09: 0000000000000000 [ 125.280612][ T5143] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000001c [ 125.288615][ T5143] R13: 00007f2d5857a000 R14: 00007ffe220cd110 R15: 0000000000000000 [ 125.296642][ T5143] [ 125.310098][ T4802] device bridge_slave_1 left promiscuous mode [ 125.316414][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.339356][ T5146] CPU: 0 PID: 5146 Comm: syz.2.260 Not tainted syzkaller #0 [ 125.346785][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.356893][ T5146] Call Trace: [ 125.360222][ T5146] [ 125.363198][ T5146] dump_stack_lvl+0x188/0x24e [ 125.367980][ T5146] ? show_regs_print_info+0x12/0x12 [ 125.373244][ T5146] ? load_image+0x410/0x410 [ 125.377802][ T5146] ? __lock_acquire+0x7c40/0x7c40 [ 125.382900][ T5146] ? verify_lock_unused+0x140/0x140 [ 125.388171][ T5146] ? __lock_acquire+0x1465/0x7c40 [ 125.393267][ T5146] should_fail_ex+0x390/0x4c0 [ 125.398018][ T5146] prepare_alloc_pages+0x1e1/0x5b0 [ 125.403242][ T5146] __alloc_pages+0x130/0x4f0 [ 125.407896][ T5146] ? zone_statistics+0x170/0x170 [ 125.412906][ T5146] alloc_slab_page+0x5d/0x180 [ 125.417640][ T5146] new_slab+0x1b3/0x2d0 [ 125.421885][ T5146] ___slab_alloc+0xbc5/0x1240 [ 125.426624][ T5146] ? ___slab_alloc+0x20e/0x1240 [ 125.431533][ T5146] ? mas_alloc_nodes+0x2ec/0x880 [ 125.436522][ T5146] kmem_cache_alloc+0x111/0x2f0 [ 125.441443][ T5146] ? mas_alloc_nodes+0x2ec/0x880 [ 125.446444][ T5146] mas_alloc_nodes+0x2ec/0x880 [ 125.451282][ T5146] mas_preallocate+0x162/0x3b0 [ 125.456111][ T5146] __vma_adjust+0x2ff/0x1d00 [ 125.460774][ T5146] ? validate_mm+0x2e0/0x2e0 [ 125.465441][ T5146] ? up_write+0x1b6/0x410 [ 125.469828][ T5146] ? anon_vma_clone+0x475/0x4c0 [ 125.474756][ T5146] __split_vma+0x3a2/0x4f0 [ 125.479235][ T5146] do_mas_align_munmap+0x7b8/0x12d0 [ 125.484506][ T5146] ? do_mas_munmap+0x2b0/0x2b0 [ 125.489349][ T5146] ? mtree_range_walk+0x664/0x780 [ 125.494665][ T5146] ? mas_walk+0x15f/0x180 [ 125.499057][ T5146] ? mas_find+0x1ba/0x220 [ 125.503443][ T5146] do_mas_munmap+0x240/0x2b0 [ 125.508110][ T5146] mmap_region+0x7ab/0x1c50 [ 125.512697][ T5146] ? file_mmap_ok+0x170/0x170 [ 125.517431][ T5146] ? validate_mm+0x23f/0x2e0 [ 125.522078][ T5146] ? arch_get_unmapped_area+0x640/0x640 [ 125.527683][ T5146] ? cap_mmap_addr+0x153/0x2c0 [ 125.532617][ T5146] do_mmap+0x9ce/0x10d0 [ 125.536840][ T5146] ? mlock_future_check+0x100/0x100 [ 125.542096][ T5146] ? ima_file_mmap+0xf7/0x140 [ 125.546844][ T5146] ? ima_file_free+0x3e0/0x3e0 [ 125.551769][ T5146] vm_mmap_pgoff+0x1c1/0x2d0 [ 125.556437][ T5146] ? account_locked_vm+0xe0/0xe0 [ 125.561467][ T5146] ? ksys_mmap_pgoff+0xef/0x720 [ 125.566373][ T5146] ? lockdep_hardirqs_on+0x94/0x140 [ 125.571627][ T5146] do_syscall_64+0x4c/0xa0 [ 125.576084][ T5146] ? clear_bhb_loop+0x60/0xb0 [ 125.580806][ T5146] ? clear_bhb_loop+0x60/0xb0 [ 125.585545][ T5146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.591499][ T5146] RIP: 0033:0x7f7b2059de99 [ 125.595968][ T5146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.615629][ T5146] RSP: 002b:00007f7b21382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.624092][ T5146] RAX: ffffffffffffffda RBX: 00007f7b20825fa0 RCX: 00007f7b2059de99 [ 125.632136][ T5146] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 125.640166][ T5146] RBP: 00007f7b20633eaf R08: ffffffffffffffff R09: 0000000000000000 [ 125.648318][ T5146] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 125.656359][ T5146] R13: 00007f7b20826038 R14: 00007f7b20825fa0 R15: 00007ffcaabe99b8 [ 125.664414][ T5146] [ 125.687858][ T4802] device bridge_slave_0 left promiscuous mode [ 125.702289][ T5148] CPU: 1 PID: 5148 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 125.709980][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.720098][ T5148] Call Trace: [ 125.723418][ T5148] [ 125.726386][ T5148] dump_stack_lvl+0x188/0x24e [ 125.731135][ T5148] ? show_regs_print_info+0x12/0x12 [ 125.736410][ T5148] ? load_image+0x410/0x410 [ 125.740976][ T5148] ? __lock_acquire+0x7c40/0x7c40 [ 125.746064][ T5148] should_fail_ex+0x390/0x4c0 [ 125.750801][ T5148] prepare_alloc_pages+0x1e1/0x5b0 [ 125.752589][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.755971][ T5148] __alloc_pages+0x130/0x4f0 [ 125.767790][ T5148] ? zone_statistics+0x170/0x170 [ 125.773637][ T5148] ? free_zapped_rcu+0x1f0/0x1f0 [ 125.778651][ T5148] ? alloc_pages+0x4dd/0x740 [ 125.783356][ T5148] __get_free_pages+0x8/0x30 [ 125.788013][ T5148] pgd_alloc+0x1e/0x1d0 [ 125.792238][ T5148] mm_init+0x53f/0x940 [ 125.796367][ T5148] alloc_bprm+0x211/0x710 [ 125.800771][ T5148] ? getname_kernel+0x209/0x2f0 [ 125.805679][ T5148] kernel_execve+0x94/0x980 [ 125.810263][ T5148] call_usermodehelper_exec_async+0x207/0x350 [ 125.816428][ T5148] ? proc_cap_handler+0x460/0x460 [ 125.821537][ T5148] ret_from_fork+0x1f/0x30 [ 125.826034][ T5148] [ 125.909319][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 125.927268][ T4802] device veth1_macvtap left promiscuous mode [ 125.943897][ T4802] device veth0_macvtap left promiscuous mode [ 125.953297][ T5143] SLUB: Unable to allocate memory on node -1, gfp=0xc40(GFP_NOFS) [ 125.961273][ T5143] cache: kmalloc-4k, object size: 4096, buffer size: 8192, default order: 3, min order: 1 [ 125.968779][ T4802] device veth1_vlan left promiscuous mode [ 125.971406][ T5143] kmalloc-4k debugging increased min order, use slub_debug=O to disable. [ 125.971422][ T5143] node 0: slabs: 3809, objs: 15230, free: 22 [ 125.992576][ T5143] node 1: slabs: 94, objs: 376, free: 10 [ 126.002444][ T5143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.039345][ T5146] SLUB: Unable to allocate memory on node -1, gfp=0xcc0(GFP_KERNEL) [ 126.048778][ T5146] cache: maple_node, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 126.058908][ T5146] node 0: slabs: 1490, objs: 23840, free: 0 [ 126.065236][ T5146] node 1: slabs: 0, objs: 0, free: 0 [ 126.095324][ T4802] device veth0_vlan left promiscuous mode [ 126.229642][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 127.976707][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.002372][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 128.213643][ T4323] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 128.246044][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.274876][ T4323] usb 3-1: Product: syz [ 128.287825][ T4323] usb 3-1: Manufacturer: syz [ 128.299450][ T4323] usb 3-1: SerialNumber: syz [ 128.340002][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 128.383823][ T4323] usb-storage 3-1:1.0: USB Mass Storage device detected [ 128.463567][ T4802] team0 (unregistering): Port device team_slave_1 removed [ 128.494713][ T4323] scsi host1: usb-storage 3-1:1.0 [ 128.583810][ T4802] team0 (unregistering): Port device team_slave_0 removed [ 128.672039][ T5177] dummy_hcd dummy_hcd.0: remove, state 4 [ 128.678365][ T5177] usb usb1: USB disconnect, device number 1 [ 128.699875][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.752873][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.766463][ T5177] dummy_hcd dummy_hcd.0: stopped [ 128.774853][ T5177] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 128.821112][ T5183] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 128.866705][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.867355][ T5183] dummy_hcd dummy_hcd.0: Dummy host controller [ 128.906445][ T5183] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 128.927531][ T5183] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.01 [ 128.939911][ T5183] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 128.948793][ T5183] usb usb1: Product: Dummy host controller [ 128.973493][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 128.980060][ T5183] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 128.987988][ T5183] usb usb1: SerialNumber: dummy_hcd.0 [ 128.995122][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.037114][ T4317] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 129.052771][ T5183] hub 1-0:1.0: USB hub found [ 129.058437][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.073183][ T5183] hub 1-0:1.0: 1 port detected [ 129.078272][ T4317] usb 4-1: Product: syz [ 129.087720][ T4317] usb 4-1: Manufacturer: syz [ 129.096718][ T4317] usb 4-1: SerialNumber: syz [ 129.391069][ T4317] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 129.414228][ T4317] usb 4-1: unit 37 not found! [ 129.419112][ T4317] usb 4-1: unit 0 not found! [ 129.537148][ T4317] usb 4-1: USB disconnect, device number 2 [ 130.047990][ T4802] bond0 (unregistering): Released all slaves [ 130.088862][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 130.396139][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 130.515849][ T5192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.641045][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.741430][ T4317] usb 3-1: USB disconnect, device number 2 [ 132.049527][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.056744][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.089082][ T5087] device bridge_slave_0 entered promiscuous mode [ 132.118333][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.138311][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.147889][ T5087] device bridge_slave_1 entered promiscuous mode [ 132.265692][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.289267][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.399964][ T5087] team0: Port device team_slave_0 added [ 132.441196][ T5087] team0: Port device team_slave_1 added [ 132.490557][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 132.523313][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.624973][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.698320][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.753095][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.785084][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.891617][ T5207] CIFS: Attempting to mount \\127.0.0.1\share [ 132.919181][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.033048][ T5207] CIFS: VFS: Error connecting to socket. Aborting operation. [ 133.049542][ T5207] CIFS: VFS: cifs_mount failed w/return code = -111 [ 133.107421][ T5087] device hsr_slave_0 entered promiscuous mode [ 133.141576][ T5087] device hsr_slave_1 entered promiscuous mode [ 133.172019][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.179715][ T5087] Cannot create hsr debugfs directory [ 133.655058][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 133.915548][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.969304][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.983139][ T5135] device bridge_slave_0 entered promiscuous mode [ 134.032506][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.087807][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.132075][ T5135] device bridge_slave_1 entered promiscuous mode [ 134.231417][ T5226] FAULT_INJECTION: forcing a failure. [ 134.231417][ T5226] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 134.295864][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.335120][ T5226] CPU: 0 PID: 5226 Comm: syz.2.280 Not tainted syzkaller #0 [ 134.335889][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.342527][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.342547][ T5226] Call Trace: [ 134.342556][ T5226] [ 134.342565][ T5226] dump_stack_lvl+0x188/0x24e [ 134.374703][ T5226] ? show_regs_print_info+0x12/0x12 [ 134.379983][ T5226] ? load_image+0x410/0x410 [ 134.384544][ T5226] ? __lock_acquire+0x7c40/0x7c40 [ 134.389674][ T5226] ? __lock_acquire+0x138a/0x7c40 [ 134.394860][ T5226] should_fail_ex+0x390/0x4c0 [ 134.399607][ T5226] prepare_alloc_pages+0x1e1/0x5b0 [ 134.405101][ T5226] __alloc_pages+0x130/0x4f0 [ 134.409764][ T5226] ? zone_statistics+0x170/0x170 [ 134.414793][ T5226] pte_alloc_one+0x7b/0x310 [ 134.419369][ T5226] ? pfn_modify_allowed+0x560/0x560 [ 134.426378][ T5226] ? hugepage_vma_check+0x461/0x540 [ 134.431665][ T5226] handle_mm_fault+0x257d/0x3d40 [ 134.436697][ T5226] ? numa_migrate_prep+0x250/0x250 [ 134.441919][ T5226] ? check_vma_flags+0x42e/0x4c0 [ 134.446942][ T5226] __get_user_pages+0x40d/0xec0 [ 134.451877][ T5226] ? populate_vma_page_range+0x2b0/0x2b0 [ 134.457598][ T5226] populate_vma_page_range+0x214/0x2b0 [ 134.463179][ T5226] __mm_populate+0x25c/0x380 [ 134.467946][ T5226] ? check_vma_flags+0x4c0/0x4c0 [ 134.473047][ T5226] ? up_write+0x1b6/0x410 [ 134.477454][ T5226] vm_mmap_pgoff+0x212/0x2d0 [ 134.482149][ T5226] ? account_locked_vm+0xe0/0xe0 [ 134.487177][ T5226] ? ksys_mmap_pgoff+0xef/0x720 [ 134.492101][ T5226] ? lockdep_hardirqs_on+0x94/0x140 [ 134.497374][ T5226] do_syscall_64+0x4c/0xa0 [ 134.501858][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 134.506604][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 134.511361][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.517331][ T5226] RIP: 0033:0x7f7b2059de99 [ 134.521802][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.541466][ T5226] RSP: 002b:00007f7b21382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.549941][ T5226] RAX: ffffffffffffffda RBX: 00007f7b20825fa0 RCX: 00007f7b2059de99 [ 134.557967][ T5226] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 134.565997][ T5226] RBP: 00007f7b20633eaf R08: ffffffffffffffff R09: 0000000000000000 [ 134.574126][ T5226] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 134.582136][ T5226] R13: 00007f7b20826038 R14: 00007f7b20825fa0 R15: 00007ffcaabe99b8 [ 134.590156][ T5226] [ 134.626376][ T5135] team0: Port device team_slave_0 added [ 134.681056][ T5135] team0: Port device team_slave_1 added [ 134.805003][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.835986][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.959202][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.016264][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.049184][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.160372][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.363316][ T5135] device hsr_slave_0 entered promiscuous mode [ 135.417918][ T5135] device hsr_slave_1 entered promiscuous mode [ 135.439220][ T5135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.446853][ T5135] Cannot create hsr debugfs directory [ 137.724732][ T5266] ubi0: attaching mtd0 [ 137.747804][ T5266] ubi0: scanning is finished [ 137.754589][ T5266] ubi0: empty MTD device detected [ 137.978705][ T5266] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.005763][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.012196][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.022739][ T5266] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 138.039261][ T5266] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.069291][ T5266] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 138.091512][ T5266] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.130611][ T5266] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 138.179476][ T5266] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3400752212 [ 138.225867][ T5266] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.237383][ T5270] ubi0: background thread "ubi_bgt0d" started, PID 5270 [ 139.152722][ T4316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.640858][ T5293] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 139.676529][ T5293] UBIFS error (pid: 5293): cannot open "ubi0_0", error -19 [ 139.871834][ T4316] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 139.954567][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.964066][ T4316] usb 4-1: Product: syz [ 139.968444][ T4316] usb 4-1: Manufacturer: syz [ 140.013847][ T4316] usb 4-1: SerialNumber: syz [ 140.100124][ T4316] usb-storage 4-1:1.0: USB Mass Storage device detected [ 140.137597][ T4316] scsi host1: usb-storage 4-1:1.0 [ 140.340038][ T5278] dummy_hcd dummy_hcd.0: remove, state 4 [ 140.345853][ T5278] usb usb1: USB disconnect, device number 1 [ 140.404699][ T5278] dummy_hcd dummy_hcd.0: stopped [ 140.433449][ T5278] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 140.487815][ T5303] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 140.545353][ T5303] dummy_hcd dummy_hcd.0: Dummy host controller [ 140.583440][ T5303] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 140.712801][ T5303] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.01 [ 140.722263][ T5303] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 140.741217][ T5303] usb usb1: Product: Dummy host controller [ 140.747203][ T5303] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 140.767218][ T5303] usb usb1: SerialNumber: dummy_hcd.0 [ 140.833035][ T5303] hub 1-0:1.0: USB hub found [ 140.861460][ T5303] hub 1-0:1.0: 1 port detected [ 142.108237][ T4317] usb 4-1: USB disconnect, device number 3 [ 144.470348][ T5351] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 144.519539][ T5351] UBIFS error (pid: 5351): cannot open "ubi0_0", error -19 [ 146.757812][ T5389] ubi: mtd0 is already attached to ubi0 [ 149.167149][ T5432] ubi: mtd0 is already attached to ubi0 [ 150.467543][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.082462][ T5087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.170992][ T5087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.250820][ T5087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.284642][ T5087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.630526][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.693458][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.702229][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.747538][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.782985][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.806620][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.859826][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.867062][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.972310][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.006312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.021089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.058526][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.065785][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.159309][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.239744][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.266166][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.313937][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.360154][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.400287][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.420852][ T5493] ubi: mtd0 is already attached to ubi0 [ 152.459922][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.502475][ T5497] CIFS: Attempting to mount \\127.0.0.1\share [ 152.510422][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.540744][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.590021][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.608730][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.637343][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.259615][ T5511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.301033][ T5497] CIFS: VFS: cifs_mount failed w/return code = -512 [ 153.873000][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.892680][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.909420][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.095437][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.118518][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.175751][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.192797][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.230277][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.403282][ T5135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.465798][ T5087] device veth0_vlan entered promiscuous mode [ 154.473947][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.501321][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.529825][ T4321] usb 3-1: Using ep0 maxpacket: 32 [ 154.561930][ T5087] device veth1_vlan entered promiscuous mode [ 154.652359][ T5087] device veth0_macvtap entered promiscuous mode [ 154.662726][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.696392][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.724428][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.767463][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.782642][ T4321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.820015][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.865063][ T5087] device veth1_macvtap entered promiscuous mode [ 154.914007][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.943743][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.964180][ T4321] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 154.984436][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.007431][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.031202][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.081447][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.106442][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.148122][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.175195][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.179994][ T4321] usb 3-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 155.218435][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.235537][ T4321] usb 3-1: Product: syz [ 155.260328][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.268421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.274816][ T4321] usb 3-1: Manufacturer: syz [ 155.281165][ T4321] usb 3-1: SerialNumber: syz [ 155.296557][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.302000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.393192][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.419084][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.439024][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.503263][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.513375][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.534403][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.572097][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.607749][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.640786][ T4320] usb 3-1: USB disconnect, device number 3 [ 155.674216][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.733833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.774395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.793029][ T5087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812630][ T5087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.822348][ T5087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.846230][ T27] usb 4-1: config 0 has no interfaces? [ 155.851850][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.865928][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.875610][ T5087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.920311][ T27] usb 4-1: config 0 descriptor?? [ 156.146317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.199195][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.240489][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.316690][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.340806][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.387491][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.301451][ T5559] CIFS: Attempting to mount \\127.0.0.1\share [ 157.750577][ T4320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.955893][ T4321] usb 4-1: USB disconnect, device number 4 [ 158.159404][ T5559] CIFS: VFS: cifs_mount failed w/return code = -112 [ 158.335937][ T4286] Bluetooth: Wrong link type (-71) [ 158.555926][ T4320] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 158.565157][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.586557][ T4320] usb 1-1: Product: syz [ 158.656016][ T4320] usb 1-1: Manufacturer: syz [ 158.669192][ T4320] usb 1-1: SerialNumber: syz [ 158.730279][ T5582] device syzkaller0 entered promiscuous mode [ 158.749681][ T4320] usb-storage 1-1:1.0: USB Mass Storage device detected [ 158.804778][ T5578] FAULT_INJECTION: forcing a failure. [ 158.804778][ T5578] name failslab, interval 1, probability 100, space 0, times 1 [ 158.835412][ T4320] scsi host1: usb-storage 1-1:1.0 [ 158.939284][ T5578] CPU: 0 PID: 5578 Comm: syz.2.372 Not tainted syzkaller #0 [ 158.946669][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.956779][ T5578] Call Trace: [ 158.960108][ T5578] [ 158.963090][ T5578] dump_stack_lvl+0x188/0x24e [ 158.967859][ T5578] ? show_regs_print_info+0x12/0x12 [ 158.973123][ T5578] ? load_image+0x410/0x410 [ 158.977692][ T5578] ? __might_sleep+0xd0/0xd0 [ 158.982339][ T5578] ? __lock_acquire+0x7c40/0x7c40 [ 158.987483][ T5578] should_fail_ex+0x390/0x4c0 [ 158.992232][ T5578] should_failslab+0x5/0x20 [ 158.996787][ T5578] slab_pre_alloc_hook+0x59/0x300 [ 159.001955][ T5578] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 159.008260][ T5578] kmem_cache_alloc+0x56/0x2f0 [ 159.013079][ T5578] ? jbd2__journal_start+0x13c/0x5a0 [ 159.018422][ T5578] jbd2__journal_start+0x13c/0x5a0 [ 159.023949][ T5578] __ext4_journal_start_sb+0x187/0x3d0 [ 159.029482][ T5578] ext4_dirty_inode+0x8b/0x100 [ 159.034303][ T5578] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 159.040180][ T5578] __mark_inode_dirty+0x2e7/0xe80 [ 159.045277][ T5578] __file_update_time+0x21d/0x240 [ 159.050362][ T5578] file_update_time+0x2f3/0x370 [ 159.055276][ T5578] ? __file_remove_privs+0x5f0/0x5f0 [ 159.060631][ T5578] ext4_page_mkwrite+0x1a9/0x10d0 [ 159.065726][ T5578] ? ext4_change_inode_journal_flag+0x710/0x710 [ 159.072021][ T5578] ? count_memcg_event_mm+0x8a/0x3c0 [ 159.077356][ T5578] ? put_page+0x270/0x270 [ 159.081754][ T5578] do_page_mkwrite+0x16b/0x5c0 [ 159.086589][ T5578] handle_mm_fault+0x199c/0x3d40 [ 159.091587][ T5578] ? mt_find+0x157/0x830 [ 159.095902][ T5578] ? numa_migrate_prep+0x250/0x250 [ 159.101074][ T5578] ? lock_chain_count+0x20/0x20 [ 159.106031][ T5578] ? lock_mm_and_find_vma+0xae/0x2f0 [ 159.111647][ T5578] do_user_addr_fault+0x58e/0xb20 [ 159.116830][ T5578] exc_page_fault+0x60/0x100 [ 159.121649][ T5578] ? clear_bhb_loop+0x60/0xb0 [ 159.126421][ T5578] asm_exc_page_fault+0x22/0x30 [ 159.131347][ T5578] RIP: 0033:0x7f7b204725e0 [ 159.135831][ T5578] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 159.155674][ T5578] RSP: 002b:00007ffcaabe9a00 EFLAGS: 00010202 [ 159.161801][ T5578] RAX: 0000001b2ff1a000 RBX: ffffffff81e43647 RCX: 0000001b2ff19ff8 [ 159.169824][ T5578] RDX: 0000001b2f924220 RSI: 0000000000000008 RDI: 00007f7b21355720 [ 159.177942][ T5578] RBP: 0000000000000055 R08: 00007f7b20810000 R09: 00007f7b20812000 [ 159.185978][ T5578] R10: 0000000081e4364b R11: 0000000000000005 R12: 00007f7b20826038 [ 159.194017][ T5578] R13: 00000000000000a5 R14: ffffffff81e439a9 R15: 00007f7b21355720 [ 159.202078][ T5578] ? full_name_hash+0x19/0xe0 [ 159.206814][ T5578] ? follow_down+0x47/0x150 [ 159.211386][ T5578] [ 159.230260][ T5562] dummy_hcd dummy_hcd.0: remove, state 1 [ 159.236066][ T5562] usb usb1: USB disconnect, device number 1 [ 159.286296][ T5562] usb 1-1: USB disconnect, device number 2 [ 161.303561][ T5590] bridge0: port 3(wlan1) entered blocking state [ 161.338602][ T5590] bridge0: port 3(wlan1) entered disabled state [ 161.357956][ T5590] device wlan1 entered promiscuous mode [ 161.470873][ T5135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.657711][ T4802] tipc: Disabling bearer [ 161.667018][ T4802] tipc: Left network mode [ 161.872174][ T5593] ubi: mtd0 is already attached to ubi0 [ 162.990951][ T5562] dummy_hcd dummy_hcd.0: stopped [ 163.017529][ T5562] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 163.166922][ T5562] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 163.179008][ T5562] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 163.187636][ T5562] CPU: 1 PID: 5562 Comm: syz.0.366 Not tainted syzkaller #0 [ 163.194965][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.205084][ T5562] RIP: 0010:set_link_state+0x27/0x11d0 [ 163.210605][ T5562] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 90 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 3b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 163.230601][ T5562] RSP: 0018:ffffc9000557f640 EFLAGS: 00010046 [ 163.236718][ T5562] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888018f05a00 [ 163.244744][ T5562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.252761][ T5562] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 163.260787][ T5562] R10: dffffc0000000000 R11: fffff52000aafeb4 R12: 0000000000000a02 [ 163.268812][ T5562] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.276825][ T5562] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 163.285802][ T5562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.292423][ T5562] CR2: 00007f7b213556b8 CR3: 0000000061a67000 CR4: 00000000003506e0 [ 163.300426][ T5562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.308416][ T5562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.316410][ T5562] Call Trace: [ 163.319713][ T5562] [ 163.322669][ T5562] ? cancel_work_sync+0x20/0x20 [ 163.327579][ T5562] ? mutex_lock_nested+0x10/0x10 [ 163.332556][ T5562] dummy_pullup+0xbd/0x120 [ 163.337089][ T5562] ? dummy_set_selfpowered+0x150/0x150 [ 163.342582][ T5562] usb_gadget_disconnect_locked+0x123/0x4d0 [ 163.348505][ T5562] gadget_unbind_driver+0xbe/0x3d0 [ 163.353649][ T5562] ? gadget_bind_driver+0x760/0x760 [ 163.358882][ T5562] device_release_driver_internal+0x47d/0x7c0 [ 163.364982][ T5562] driver_detach+0x1ef/0x2d0 [ 163.369603][ T5562] bus_remove_driver+0x11c/0x230 [ 163.374557][ T5562] ? sysfs_remove_groups+0x8a/0xa0 [ 163.379700][ T5562] usb_gadget_unregister_driver+0x4a/0x70 [ 163.385449][ T5562] raw_release+0xd6/0x260 [ 163.389807][ T5562] ? raw_open+0x510/0x510 [ 163.394164][ T5562] __fput+0x20a/0x8b0 [ 163.398169][ T5562] task_work_run+0x1d0/0x260 [ 163.402784][ T5562] ? task_work_cancel+0x220/0x220 [ 163.407837][ T5562] ? do_raw_spin_unlock+0x11d/0x230 [ 163.413057][ T5562] do_exit+0x9d5/0x2570 [ 163.417251][ T5562] ? put_task_struct+0x80/0x80 [ 163.422048][ T5562] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.428064][ T5562] ? lock_chain_count+0x20/0x20 [ 163.432947][ T5562] ? _raw_spin_lock_irq+0xb7/0xf0 [ 163.438004][ T5562] do_group_exit+0x229/0x2e0 [ 163.442622][ T5562] ? lockdep_hardirqs_on+0x94/0x140 [ 163.447843][ T5562] get_signal+0x1259/0x1340 [ 163.452389][ T5562] arch_do_signal_or_restart+0xc4/0x1310 [ 163.458767][ T5562] ? kick_process+0xd4/0x140 [ 163.463488][ T5562] ? task_work_add+0x2cb/0x330 [ 163.468289][ T5562] ? get_sigframe_size+0x10/0x10 [ 163.473266][ T5562] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 163.478715][ T5562] ? ksys_write+0x1fd/0x260 [ 163.483254][ T5562] ? exit_to_user_mode_loop+0x3b/0x110 [ 163.488744][ T5562] exit_to_user_mode_loop+0x70/0x110 [ 163.494147][ T5562] exit_to_user_mode_prepare+0xee/0x180 [ 163.499727][ T5562] syscall_exit_to_user_mode+0x16/0x40 [ 163.505302][ T5562] do_syscall_64+0x58/0xa0 [ 163.509747][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 163.514452][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 163.519164][ T5562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.525095][ T5562] RIP: 0033:0x7f624db9de99 [ 163.529535][ T5562] Code: Unable to access opcode bytes at 0x7f624db9de6f. [ 163.536576][ T5562] RSP: 002b:00007f624eb2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.545013][ T5562] RAX: 000000000000000b RBX: 00007f624de25fa0 RCX: 00007f624db9de99 [ 163.553035][ T5562] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000004 [ 163.561118][ T5562] RBP: 00007f624dc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 163.569111][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.577110][ T5562] R13: 00007f624de26038 R14: 00007f624de25fa0 R15: 00007fff6fa566e8 [ 163.585284][ T5562] [ 163.588333][ T5562] Modules linked in: [ 163.592273][ T5562] ---[ end trace 0000000000000000 ]--- [ 163.597743][ T5562] RIP: 0010:set_link_state+0x27/0x11d0 [ 163.603325][ T5562] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 90 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 3b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 163.622968][ T5562] RSP: 0018:ffffc9000557f640 EFLAGS: 00010046 [ 163.629078][ T5562] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888018f05a00 [ 163.637073][ T5562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.645069][ T5562] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 163.653063][ T5562] R10: dffffc0000000000 R11: fffff52000aafeb4 R12: 0000000000000a02 [ 163.661055][ T5562] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.669048][ T5562] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 163.678003][ T5562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.684629][ T5562] CR2: 00007f7b213556b8 CR3: 0000000061a67000 CR4: 00000000003506e0 [ 163.692717][ T5562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.700714][ T5562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.708723][ T5562] Kernel panic - not syncing: Fatal exception [ 163.715366][ T5562] Kernel Offset: disabled [ 163.719791][ T5562] Rebooting in 86400 seconds..