last executing test programs: 10m22.787342312s ago: executing program 3 (id=2947): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0xc0105502, r0) 10m22.624170864s ago: executing program 3 (id=2950): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) 10m22.434181961s ago: executing program 3 (id=2953): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\"', 0x3) 10m22.224411056s ago: executing program 3 (id=2956): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/15/effective_affinity_list\x00', 0x280, 0x0) pread64$auto(r0, 0x0, 0x840003, 0x2e6c) 10m22.115082727s ago: executing program 3 (id=2958): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 10m21.619994744s ago: executing program 3 (id=2966): clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x7, 0x7f, 0x860, 0x0, 0x1, 0x45079941, 0x8, {0x47a8, 0x8}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9}) 10m21.106552072s ago: executing program 32 (id=2966): clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x7, 0x7f, 0x860, 0x0, 0x1, 0x45079941, 0x8, {0x47a8, 0x8}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9}) 2.160607717s ago: executing program 2 (id=11664): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x33c0, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x20007, 0x2}, 0x10) bpf$auto(0x2, 0x0, 0xb) 2.134809515s ago: executing program 1 (id=11665): mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r0, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) 1.955635721s ago: executing program 1 (id=11666): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x0) 1.86022256s ago: executing program 2 (id=11668): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) tkill$auto(0x0, 0x7) swapoff$auto(0x0) 1.719331254s ago: executing program 1 (id=11671): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.378086485s ago: executing program 4 (id=11674): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) ioctl$auto(r0, 0x8916, 0x1) 1.377374016s ago: executing program 2 (id=11675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8, 0x1b, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 1.193345164s ago: executing program 4 (id=11677): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x0) 1.176108659s ago: executing program 0 (id=11678): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) 978.198869ms ago: executing program 4 (id=11679): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 941.860404ms ago: executing program 0 (id=11680): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf250200140008000300", @ANYRES32=r2, @ANYBLOB="08000b01"], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) 750.261806ms ago: executing program 2 (id=11681): statx$auto(0xffffffffffffffff, 0x0, 0x4, 0x7fffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) 736.85229ms ago: executing program 0 (id=11682): r0 = socket(0xa, 0x1, 0x84) ioctl$auto(0x3, 0x80108907, r0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 492.678269ms ago: executing program 2 (id=11683): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x1, 0x2, 0x0, 0x3) getsockopt$auto(r0, 0x6, 0x2, 0x0, 0x0) 492.040438ms ago: executing program 1 (id=11691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffffff9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d0}, 0x44892) 461.145046ms ago: executing program 0 (id=11684): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) tkill$auto(0x0, 0x7) swapoff$auto(0x0) 459.950875ms ago: executing program 4 (id=11693): r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="018125bde1"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc00e0000, &(0x7f0000000100)={&(0x7f0000000340), 0xfc2}, 0x2, &(0x7f0000000440), 0x7, 0xa505}, 0x860}, 0x7, 0x4008) 319.031078ms ago: executing program 1 (id=11685): socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) 279.644131ms ago: executing program 0 (id=11686): mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r0, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) 232.1638ms ago: executing program 4 (id=11687): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 152.550204ms ago: executing program 1 (id=11688): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) 58.880134ms ago: executing program 0 (id=11689): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x0, 0x1e02c17c, 0x401, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x0, 0x80, 0x4, @inferred, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x1f}, 0x5, &(0x7f00000003c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) 54.698884ms ago: executing program 2 (id=11699): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0xfffff039}}) 0s ago: executing program 4 (id=11690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8, 0x1b, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) kernel console output (not intermixed with test programs): /0x10 [ 529.017957][T20986] ? lookup_fast+0x2da/0x600 [ 529.017982][T20986] ? inode_permission+0x374/0x620 [ 529.018010][T20986] link_path_walk+0xf28/0x1cc0 [ 529.018046][T20986] path_openat+0x1c9/0x4280 [ 529.018065][T20986] ? __kasan_slab_alloc+0x89/0x90 [ 529.018089][T20986] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 529.018111][T20986] ? do_getname+0x35/0x390 [ 529.018133][T20986] ? __x64_sys_openat+0x12d/0x210 [ 529.018165][T20986] ? __pfx_path_openat+0x10/0x10 [ 529.018191][T20986] do_file_open+0x20e/0x430 [ 529.018212][T20986] ? __pfx_do_file_open+0x10/0x10 [ 529.018247][T20986] ? alloc_fd+0x471/0x7a0 [ 529.018267][T20986] ? do_getname+0x191/0x390 [ 529.018292][T20986] do_sys_openat2+0x10f/0x1e0 [ 529.018317][T20986] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.018343][T20986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 529.018386][T20986] __x64_sys_openat+0x12d/0x210 [ 529.018412][T20986] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.018445][T20986] do_syscall_64+0x115/0x840 [ 529.018470][T20986] ? clear_bhb_loop+0x70/0xc0 [ 529.018493][T20986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.018512][T20986] RIP: 0033:0x7fcf4159e0d9 [ 529.018528][T20986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.018545][T20986] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.018563][T20986] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 529.018577][T20986] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 529.018587][T20986] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 529.018603][T20986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.018613][T20986] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 529.018635][T20986] [ 529.368079][ T9866] Bluetooth: hci2: command 0x0406 tx timeout [ 532.193585][T21071] netlink: NAT attribute has 5 unknown bytes [ 534.189443][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7310'. [ 534.552383][T21142] netlink: 'syz.0.7314': attribute type 23 has an invalid length. [ 536.550127][T21202] HSR: entered promiscuous mode [ 536.829046][T21214] ======================================================= [ 536.829046][T21214] WARNING: The mand mount option has been deprecated and [ 536.829046][T21214] and is ignored by this kernel. Remove the mand [ 536.829046][T21214] option from the mount to silence this warning. [ 536.829046][T21214] ======================================================= [ 537.247994][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7354'. [ 538.463808][T21266] unsupported nla_type 113 [ 539.535567][T21307] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 544.160290][ T9866] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 544.178259][ T9866] Bluetooth: hci2: Dropping invalid advertising data [ 544.185057][ T9866] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 544.185076][ T9866] Bluetooth: hci2: Dropping invalid advertising data [ 544.198889][ T9866] Bluetooth: hci2: unknown advertising packet type: 0x79 [ 544.198920][ T9866] Bluetooth: hci2: Malformed LE Event: 0x02 [ 544.418382][T21467] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 544.813899][T21481] dyndbg: expected <4096 bytes into control [ 545.277787][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7479'. [ 547.421740][T21563] netlink: ct family unspecified [ 547.707122][T21573] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7512'. [ 548.171362][T21586] netlink: 'syz.1.7518': attribute type 12 has an invalid length. [ 548.893970][T21615] openvswitch: netlink: Key type 29 is not supported [ 549.227284][T21623] netlink: 'syz.1.7533': attribute type 1 has an invalid length. [ 549.755563][T21634] netlink: 'syz.4.7539': attribute type 1 has an invalid length. [ 550.106793][T21646] netlink: 'syz.0.7543': attribute type 1 has an invalid length. [ 550.463234][T21658] openvswitch: netlink: Flow actions attr not present in new flow. [ 551.536130][T21680] netlink: Failed to add  helper -22 [ 551.573128][T21683] netlink: 'syz.2.7560': attribute type 1 has an invalid length. [ 551.605834][T21683] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7560'. [ 551.719896][T21685] netlink: 'syz.4.7561': attribute type 1 has an invalid length. [ 552.417780][T21709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 553.585735][T21749] netlink: 'syz.1.7590': attribute type 1 has an invalid length. [ 553.599190][T21742] phram: parameter too long [ 557.310540][T21845] program syz.2.7633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.552271][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7637'. [ 557.592304][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7637'. [ 559.226223][T21890] nfsd: Unknown parameter 'batadv' [ 559.964546][T21903] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 561.040492][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.050905][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.626371][T21931] could not allocate digest TFM handle [ 561.665550][T21949] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 563.232163][T21743] syz.0.7587 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 563.291275][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.0.7587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.291307][T21743] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.291313][T21743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.291325][T21743] Call Trace: [ 563.291331][T21743] [ 563.291338][T21743] dump_stack_lvl+0x100/0x190 [ 563.291363][T21743] dump_header+0xfb/0x606 [ 563.291383][T21743] oom_kill_process.cold+0xd/0x330 [ 563.291404][T21743] out_of_memory+0x340/0x14f0 [ 563.291428][T21743] ? __pfx_out_of_memory+0x10/0x10 [ 563.291451][T21743] mem_cgroup_out_of_memory+0xc6/0x130 [ 563.291472][T21743] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 563.291491][T21743] ? find_held_lock+0x2b/0x80 [ 563.291519][T21743] ? do_raw_spin_unlock+0x145/0x1e0 [ 563.291540][T21743] ? _raw_spin_unlock+0x28/0x50 [ 563.291564][T21743] try_charge_memcg+0x6e5/0xdf0 [ 563.291594][T21743] ? __pfx_try_charge_memcg+0x10/0x10 [ 563.291619][T21743] ? find_held_lock+0x2b/0x80 [ 563.291640][T21743] ? rcu_read_unlock+0x17/0x60 [ 563.291667][T21743] ? rcu_read_unlock+0x17/0x60 [ 563.291701][T21743] ? find_held_lock+0x2b/0x80 [ 563.291723][T21743] ? rcu_read_unlock+0x17/0x60 [ 563.291773][T21743] charge_memcg+0x187/0x1e0 [ 563.291801][T21743] __mem_cgroup_charge+0x2b/0x1c0 [ 563.291820][T21743] filemap_add_folio+0xe7/0x630 [ 563.291840][T21743] ? __pfx_filemap_add_folio+0x10/0x10 [ 563.291865][T21743] __filemap_get_folio_mpol+0x584/0x1320 [ 563.291890][T21743] filemap_fault+0x879/0x3130 [ 563.291914][T21743] ? __pfx_filemap_fault+0x10/0x10 [ 563.291939][T21743] ? find_held_lock+0x2b/0x80 [ 563.291963][T21743] __do_fault+0x10b/0x440 [ 563.291988][T21743] do_fault+0xa99/0x1750 [ 563.292017][T21743] __handle_mm_fault+0x187d/0x2a00 [ 563.292038][T21743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.292061][T21743] ? __pfx___handle_mm_fault+0x10/0x10 [ 563.292080][T21743] ? pte_offset_map_lock+0x174/0x320 [ 563.292104][T21743] ? find_held_lock+0x2b/0x80 [ 563.292133][T21743] ? follow_page_pte+0x4d0/0x13f0 [ 563.292163][T21743] handle_mm_fault+0x37b/0xa30 [ 563.292185][T21743] __get_user_pages+0x1178/0x32a0 [ 563.292219][T21743] ? __pfx___get_user_pages+0x10/0x10 [ 563.292256][T21743] get_dump_page+0x27e/0x3d0 [ 563.292283][T21743] ? __pfx_get_dump_page+0x10/0x10 [ 563.292309][T21743] ? dump_user_range+0x65e/0xad0 [ 563.292389][T21743] dump_user_range+0x18d/0xad0 [ 563.292417][T21743] ? __pfx_dump_user_range+0x10/0x10 [ 563.292450][T21743] ? __pfx_writenote+0x10/0x10 [ 563.292490][T21743] ? elf_core_dump+0x1f25/0x3d20 [ 563.292518][T21743] elf_core_dump+0x2d68/0x3d20 [ 563.292555][T21743] ? __pfx_elf_core_dump+0x10/0x10 [ 563.292577][T21743] ? lockdep_hardirqs_on+0x78/0x100 [ 563.292602][T21743] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 563.292626][T21743] ? trace_sched_exit_tp+0x120/0x160 [ 563.292648][T21743] ? __schedule+0x126e/0x6730 [ 563.292669][T21743] ? 0xffffffffff600000 [ 563.292728][T21743] ? vfs_coredump+0x294b/0x56f0 [ 563.292749][T21743] vfs_coredump+0x294b/0x56f0 [ 563.292780][T21743] ? __pfx_vfs_coredump+0x10/0x10 [ 563.292805][T21743] ? __lock_acquire+0x49f/0x1a40 [ 563.292844][T21743] ? bpf_ksym_find+0x124/0x1c0 [ 563.292886][T21743] ? unwind_get_return_address+0x59/0xa0 [ 563.292918][T21743] ? arch_stack_walk+0xa6/0xf0 [ 563.292952][T21743] ? __sigqueue_free+0xbe/0x2a0 [ 563.292977][T21743] ? stack_trace_save+0x8e/0xc0 [ 563.293001][T21743] ? __pfx_stack_trace_save+0x10/0x10 [ 563.293026][T21743] ? stack_depot_save_flags+0x27/0x9d0 [ 563.293130][T21743] ? proc_coredump_connector+0x2d3/0x4f0 [ 563.293155][T21743] ? __pfx_proc_coredump_connector+0x10/0x10 [ 563.293181][T21743] ? rcu_is_watching+0x12/0xc0 [ 563.293207][T21743] get_signal+0x1f2a/0x21e0 [ 563.293236][T21743] ? __pfx_get_signal+0x10/0x10 [ 563.293263][T21743] arch_do_signal_or_restart+0x91/0x7a0 [ 563.293284][T21743] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 563.293308][T21743] ? cond_local_irq_disable.part.0+0x38/0x40 [ 563.293327][T21743] ? exc_general_protection+0x120/0x240 [ 563.293351][T21743] irqentry_exit+0x402/0xa00 [ 563.293379][T21743] asm_exc_general_protection+0x26/0x30 [ 563.293397][T21743] RIP: 0033:0x7fcf4159e0e1 [ 563.293413][T21743] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 563.293429][T21743] RSP: 002b:00002000000000b0 EFLAGS: 00010217 [ 563.293443][T21743] RAX: 0000000000000000 RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 563.293454][T21743] RDX: 0000000000000000 RSI: 00002000000000b0 RDI: 0000000001000000 [ 563.293465][T21743] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 563.293475][T21743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.293484][T21743] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 563.293508][T21743] [ 565.780522][T22019] IPVS: length: 131 != 8 [ 565.819826][T22021] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 565.938742][T21743] memory: usage 2280kB, limit 3072kB, failcnt 47668 [ 565.983847][T21743] memory+swap: usage 38420kB, limit 9007199254740988kB, failcnt 0 [ 566.032067][T21743] kmem: usage 2096kB, limit 9007199254740988kB, failcnt 0 [ 566.073554][T21743] Memory cgroup stats for /syz0: [ 566.073949][T21743] cache 0 [ 566.120817][T21743] rss 28672 [ 566.144429][T21743] rss_huge 0 [ 566.151954][T21994] kexec: Could not allocate control_code_buffer [ 566.168553][T21743] shmem 0 [ 566.184562][T21743] mapped_file 0 [ 566.237283][T21743] dirty 0 [ 566.300873][T21743] writeback 0 [ 566.337101][T21743] workingset_refault_anon 2176 [ 566.384968][T21743] workingset_refault_file 17510 [ 566.428324][T21743] swap 37015552 [ 566.463481][T21743] swapcached 194457600 [ 566.502478][T21743] pgpgin 179218 [ 566.541083][T21743] pgpgout 179208 [ 566.580376][T21743] pgfault 273524 [ 566.608238][T21743] pgmajfault 1282 [ 566.641700][T21743] inactive_anon 0 [ 566.677260][T21743] active_anon 40960 [ 566.694194][T21743] inactive_file 0 [ 566.715941][T21743] active_file 0 [ 566.736841][T21743] unevictable 0 [ 566.755680][T21743] hierarchical_memory_limit 3145728 [ 566.790673][T21743] hierarchical_memsw_limit 9223372036854771712 [ 566.825745][T21743] total_cache 0 [ 566.839439][T21743] total_rss 28672 [ 566.857214][T21743] total_rss_huge 0 [ 566.879846][T21743] total_shmem 0 [ 566.891035][T21743] total_mapped_file 0 [ 566.911128][T21743] total_dirty 0 [ 566.932962][T21743] total_writeback 0 [ 566.962157][T21743] total_workingset_refault_anon 2176 [ 566.976895][T22049] openvswitch: netlink: Key type 261 is out of range max 32 [ 566.991626][T21743] total_workingset_refault_file 17510 [ 567.018810][T21743] total_swap 37015552 [ 567.037291][T21743] total_swapcached 194457600 [ 567.058546][T21743] total_pgpgin 179218 [ 567.075210][T21743] total_pgpgout 179208 [ 567.099854][T21743] total_pgfault 273524 [ 567.120176][T21743] total_pgmajfault 1282 [ 567.147525][T21743] total_inactive_anon 0 [ 567.169908][T21743] total_active_anon 40960 [ 567.193137][T21743] total_inactive_file 0 [ 567.209188][T21743] total_active_file 0 [ 567.226659][T21743] total_unevictable 0 [ 567.250628][T21743] anon_cost 0 [ 567.265285][T21743] file_cost 31 [ 567.282421][T21743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7587,pid=21743,uid=0 [ 567.367085][T21743] Memory cgroup out of memory: Killed process 21743 (syz.0.7587) total-vm:104300kB, anon-rss:1248kB, file-rss:53776kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 568.785309][T22111] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 568.920162][T22115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 570.911036][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7788'. [ 571.153195][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 571.728937][T22209] netlink: 'syz.4.7797': attribute type 4 has an invalid length. [ 571.778243][T22209] netlink: 'syz.4.7797': attribute type 1 has an invalid length. [ 573.659308][T22280] netlink: 'syz.4.7828': attribute type 2 has an invalid length. [ 574.623903][ T29] audit: type=1326 audit(4294967417.735:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22314 comm="syz.2.7846" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf5f39e0d9 code=0x0 [ 574.976736][T22331] netlink: 'syz.0.7853': attribute type 1 has an invalid length. [ 575.168079][T22337] netlink: 'syz.0.7856': attribute type 1 has an invalid length. [ 576.813738][T22394] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 577.693832][T22422] nbd: must specify a device to reconfigure [ 579.009758][T22465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7916'. [ 580.480379][T22517] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 580.498366][T22519] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.052737][T22538] netlink: 206 bytes leftover after parsing attributes in process `syz.1.7949'. [ 582.379839][T22573] netlink: ct_mark mask cannot be 0 [ 583.201767][T22598] HfR: entered promiscuous mode [ 584.618110][T22644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 585.555523][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8015'. [ 585.797861][T22692] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8021'. [ 585.997418][ T9866] Bluetooth: hci1: SCO packet too small [ 586.796461][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8040'. [ 588.510842][T22783] syz.4.8064 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 589.021805][T22800] block nbd2: not configured, cannot reconfigure [ 590.912964][T22873] netlink: 'syz.0.8107': attribute type 1 has an invalid length. [ 592.167192][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8132'. [ 593.174468][T22958] openvswitch: netlink: IP tunnel dst address not specified [ 594.767192][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8177'. [ 595.579424][T23047] netlink: 'syz.2.8190': attribute type 1 has an invalid length. [ 595.808395][T23055] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.8194:23055 [ 596.740317][T23088] netlink: 'syz.2.8209': attribute type 2 has an invalid length. [ 596.973011][T23095] netlink: 'syz.2.8212': attribute type 1 has an invalid length. [ 598.377641][T23137] nbd: must specify an index to disconnect [ 599.898265][T23180] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 600.274556][T23191] openvswitch: netlink: Multiple metadata blocks provided [ 603.084476][T23295] openvswitch: netlink: IP tunnel dst address not specified [ 603.890438][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8321'. [ 604.214857][T23332] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 606.362004][T23415] ucma_write: process 4050 (syz.0.8368) changed security contexts after opening file descriptor, this is not allowed. [ 607.637466][T23449] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 607.660886][T23452] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8384'. [ 609.573975][T23511] GUP no longer grows the stack in syz.1.8411 (23511): 5000-401000 (4000) [ 609.614359][T23511] CPU: 0 UID: 0 PID: 23511 Comm: syz.1.8411 Tainted: G U L syzkaller #0 PREEMPT(full) [ 609.614391][T23511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 609.614398][T23511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.614409][T23511] Call Trace: [ 609.614415][T23511] [ 609.614422][T23511] dump_stack_lvl+0x100/0x190 [ 609.614447][T23511] gup_vma_lookup.cold+0x83/0x96 [ 609.614475][T23511] __get_user_pages+0x241/0x32a0 [ 609.614507][T23511] ? down_read_killable+0x35e/0x520 [ 609.614537][T23511] ? __pfx___get_user_pages+0x10/0x10 [ 609.614563][T23511] ? __pfx_validate_mm+0x10/0x10 [ 609.614585][T23511] __gup_longterm_locked+0x87d/0x16f0 [ 609.614618][T23511] ? __pfx___gup_longterm_locked+0x10/0x10 [ 609.614645][T23511] ? lock_acquire+0x1b9/0x370 [ 609.614669][T23511] gup_fast_fallback+0x16dc/0x2790 [ 609.614713][T23511] ? __pfx_gup_fast_fallback+0x10/0x10 [ 609.614742][T23511] ? __lock_acquire+0x49f/0x1a40 [ 609.614758][T23511] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 609.614779][T23511] ? lockdep_hardirqs_on+0x78/0x100 [ 609.614807][T23511] get_user_pages_fast+0xa7/0xf0 [ 609.614833][T23511] ? __pfx_get_user_pages_fast+0x10/0x10 [ 609.614866][T23511] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 609.614983][T23511] ? pipe_lock+0x69/0x80 [ 609.615003][T23511] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 609.615031][T23511] ? __pfx___mutex_lock+0x10/0x10 [ 609.615059][T23511] ? iovec_from_user+0xda/0x140 [ 609.615096][T23511] iov_iter_get_pages2+0xa3/0x100 [ 609.615124][T23511] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 609.615151][T23511] ? wait_for_space+0x2ca/0x3b0 [ 609.615174][T23511] __do_sys_vmsplice+0x7dd/0x13c0 [ 609.615204][T23511] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 609.615230][T23511] ? __pfx_futex_wait+0x10/0x10 [ 609.615253][T23511] ? __do_sys_mremap+0x9a5/0x1850 [ 609.615278][T23511] ? vm_mmap_pgoff+0x103/0x470 [ 609.615303][T23511] ? __pfx___do_sys_mremap+0x10/0x10 [ 609.615352][T23511] ? do_syscall_64+0x115/0x840 [ 609.615376][T23511] do_syscall_64+0x115/0x840 [ 609.615400][T23511] ? clear_bhb_loop+0x70/0xc0 [ 609.615422][T23511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.615440][T23511] RIP: 0033:0x7fb06039e0d9 [ 609.615457][T23511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.615473][T23511] RSP: 002b:00007fb061306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 609.615491][T23511] RAX: ffffffffffffffda RBX: 00007fb060625fa0 RCX: 00007fb06039e0d9 [ 609.615502][T23511] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 609.615512][T23511] RBP: 00007fb060435024 R08: 0000000000000000 R09: 0000000000000000 [ 609.615522][T23511] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 609.615532][T23511] R13: 00007fb060626038 R14: 00007fb060625fa0 R15: 00007ffe826a5f08 [ 609.615555][T23511] [ 610.369354][T23530] ovs_?: entered promiscuous mode [ 611.196555][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8433'. [ 611.618428][ T29] audit: type=1800 audit(4294967454.917:37): pid=23577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8440" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 613.297185][T23641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8471'. [ 613.808897][T23658] futex_wake_op: syz.4.8479 tries to shift op by -2048; fix this program [ 613.875215][T23658] futex_wake_op: syz.4.8479 tries to shift op by -2048; fix this program [ 615.763065][T23726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8511'. [ 617.552174][T23777] nbd: socks must be embedded in a SOCK_ITEM attr [ 618.061125][T23795] netlink: 334 bytes leftover after parsing attributes in process `syz.2.8540'. [ 618.296887][T23802] FAULT_INJECTION: forcing a failure. [ 618.296887][T23802] name failslab, interval 1, probability 0, space 0, times 0 [ 618.360630][T23802] CPU: 0 UID: 0 PID: 23802 Comm: syz.4.8543 Tainted: G U L syzkaller #0 PREEMPT(full) [ 618.360663][T23802] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 618.360670][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.360680][T23802] Call Trace: [ 618.360686][T23802] [ 618.360693][T23802] dump_stack_lvl+0x100/0x190 [ 618.360719][T23802] should_fail_ex.cold+0x5/0xa [ 618.360739][T23802] should_failslab+0xc2/0x120 [ 618.360765][T23802] __kmalloc_noprof+0xfc/0x820 [ 618.360794][T23802] ? __lock_acquire+0x49f/0x1a40 [ 618.360812][T23802] ? sk_prot_alloc+0x10b/0x2a0 [ 618.360833][T23802] sk_prot_alloc+0x10b/0x2a0 [ 618.360853][T23802] sk_alloc+0x36/0xe80 [ 618.360879][T23802] pppol2tp_create+0x32/0x250 [ 618.360952][T23802] pppox_create+0x15c/0x2c0 [ 618.360973][T23802] __sock_create+0x339/0x860 [ 618.360997][T23802] __sys_socket+0x14d/0x260 [ 618.361017][T23802] ? __pfx___sys_socket+0x10/0x10 [ 618.361043][T23802] __x64_sys_socket+0x72/0xb0 [ 618.361062][T23802] ? lockdep_hardirqs_on+0x78/0x100 [ 618.361089][T23802] do_syscall_64+0x115/0x840 [ 618.361113][T23802] ? clear_bhb_loop+0x70/0xc0 [ 618.361135][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.361154][T23802] RIP: 0033:0x7f7662d9e0d9 [ 618.361170][T23802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.361186][T23802] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 618.361204][T23802] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 618.361215][T23802] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 618.361225][T23802] RBP: 00007f7662e35024 R08: 0000000000000000 R09: 0000000000000000 [ 618.361235][T23802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.361245][T23802] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 618.361267][T23802] [ 618.983928][T23820] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8551'. [ 619.160705][ T29] audit: type=1804 audit(4294967462.496:38): pid=23823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8545" name="/newroot/2156/file0" dev="tmpfs" ino=10847 res=1 errno=0 [ 622.161956][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.171787][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.728241][ T29] audit: type=1804 audit(4294967466.095:39): pid=23921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8594" name="/newroot/1401/file0" dev="tmpfs" ino=7072 res=1 errno=0 [ 624.211611][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8616'. [ 624.598300][T23978] bridge0: port 3(batadv0) entered blocking state [ 624.626880][T23978] bridge0: port 3(batadv0) entered disabled state [ 624.643617][T23978] batadv0: entered allmulticast mode [ 624.683080][T23978] batadv0: entered promiscuous mode [ 624.729682][T23978] bridge0: port 3(batadv0) entered blocking state [ 624.737716][T23978] bridge0: port 3(batadv0) entered forwarding state [ 624.921244][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8625'. [ 624.953282][ T9043] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 624.962927][ T9043] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 625.449504][ T29] audit: type=1804 audit(4294967468.819:40): pid=24000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8630" name="file0" dev="tmpfs" ino=11432 res=1 errno=0 [ 625.560962][T24008] netlink: 342 bytes leftover after parsing attributes in process `syz.4.8634'. [ 629.626321][T24112] sctp: [Deprecated]: syz.4.8680 (pid 24112) Use of int in max_burst socket option. [ 629.626321][T24112] Use struct sctp_assoc_value instead [ 630.714277][T24139] sctp: [Deprecated]: syz.4.8692 (pid 24139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.714277][T24139] Use struct sctp_sack_info instead [ 631.279721][ T29] audit: type=1800 audit(4294967474.679:41): pid=24158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8709" name="SYSVff7fffff" dev="tmpfs" ino=0 res=0 errno=0 [ 632.447849][T24185] bridge0: port 3(syz_tun) entered blocking state [ 632.478389][T24185] bridge0: port 3(syz_tun) entered disabled state [ 632.507534][T24185] syz_tun: entered allmulticast mode [ 632.540217][T24185] syz_tun: entered promiscuous mode [ 632.557957][T24185] bridge0: port 3(syz_tun) entered blocking state [ 632.564546][T24185] bridge0: port 3(syz_tun) entered forwarding state [ 632.723090][ T29] audit: type=1804 audit(4294967476.137:42): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8711" name="/newroot/2055/file0" dev="tmpfs" ino=10347 res=1 errno=0 [ 632.935557][T24200] netlink: 342 bytes leftover after parsing attributes in process `syz.4.8719'. [ 633.139476][ T29] audit: type=1800 audit(4294967476.549:43): pid=24207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8721" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 636.107349][T24283] netlink: 'syz.0.8752': attribute type 23 has an invalid length. [ 636.130862][T24279] NFSD: Failed to start, no listeners configured. [ 638.599179][ T29] audit: type=1804 audit(4294967482.037:44): pid=24348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8777" name="/newroot/2205/file0" dev="tmpfs" ino=11099 res=1 errno=0 [ 639.513127][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8797'. [ 640.147795][T24399] ovs_: entered promiscuous mode [ 640.251536][T24405] netlink: 13 bytes leftover after parsing attributes in process `syz.4.8806'. [ 640.401576][ T29] audit: type=1804 audit(4294967483.847:45): pid=24408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8805" name="/newroot/2073/file0" dev="tmpfs" ino=10440 res=1 errno=0 [ 640.907063][T24424] netlink: 350 bytes leftover after parsing attributes in process `syz.1.8814'. [ 641.977650][T24454] bridge0: port 3(team0) entered blocking state [ 642.009137][T24454] bridge0: port 3(team0) entered disabled state [ 642.033969][T24454] team0: entered allmulticast mode [ 642.053601][T24454] team_slave_0: entered allmulticast mode [ 642.074691][T24454] team_slave_1: entered allmulticast mode [ 642.115529][T24454] team0: entered promiscuous mode [ 642.139069][T24454] team_slave_0: entered promiscuous mode [ 642.160750][T24454] team_slave_1: entered promiscuous mode [ 642.189414][T24454] bridge0: port 3(team0) entered blocking state [ 642.195946][T24454] bridge0: port 3(team0) entered forwarding state [ 643.001058][T24489] Device name cannot be null; rc = [-22] [ 643.030134][T24477] zswap: compressor not available [ 643.176399][T24492] netlink: 206 bytes leftover after parsing attributes in process `syz.4.8842'. [ 643.410759][T24499] sock: sock_timestamping_bind_phc: sock not bind to device [ 644.605371][T24542] netlink: 338 bytes leftover after parsing attributes in process `syz.1.8867'. [ 645.071463][T24549] zswap: compressor not available [ 645.216505][T24564] kAFS: No cell specified [ 645.948228][ T29] audit: type=1800 audit(4294967489.426:46): pid=24584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8883" name="lu_gp_id" dev="configfs" ino=71399 res=0 errno=0 [ 646.019109][T24584] ALUA LU Group already has a valid ID, ignoring request [ 646.463755][T24597] FAULT_INJECTION: forcing a failure. [ 646.463755][T24597] name failslab, interval 1, probability 0, space 0, times 0 [ 646.522862][T24597] CPU: 0 UID: 0 PID: 24597 Comm: syz.0.8887 Tainted: G U L syzkaller #0 PREEMPT(full) [ 646.522896][T24597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 646.522903][T24597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.522914][T24597] Call Trace: [ 646.522920][T24597] [ 646.522928][T24597] dump_stack_lvl+0x100/0x190 [ 646.522957][T24597] should_fail_ex.cold+0x5/0xa [ 646.522978][T24597] should_failslab+0xc2/0x120 [ 646.523005][T24597] __kmalloc_noprof+0xfc/0x820 [ 646.523030][T24597] ? sk_prot_alloc+0x10b/0x2a0 [ 646.523055][T24597] sk_prot_alloc+0x10b/0x2a0 [ 646.523075][T24597] sk_alloc+0x36/0xe80 [ 646.523101][T24597] mctp_pf_create+0xe8/0x360 [ 646.523175][T24597] __sock_create+0x339/0x860 [ 646.523198][T24597] __sys_socket+0x14d/0x260 [ 646.523219][T24597] ? __pfx___sys_socket+0x10/0x10 [ 646.523251][T24597] __x64_sys_socket+0x72/0xb0 [ 646.523270][T24597] ? lockdep_hardirqs_on+0x78/0x100 [ 646.523298][T24597] do_syscall_64+0x115/0x840 [ 646.523322][T24597] ? clear_bhb_loop+0x70/0xc0 [ 646.523344][T24597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.523363][T24597] RIP: 0033:0x7fcf4159e0d9 [ 646.523378][T24597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.523396][T24597] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 646.523414][T24597] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 646.523426][T24597] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 646.523437][T24597] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 646.523447][T24597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.523457][T24597] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 646.523480][T24597] [ 648.551333][ T29] audit: type=1800 audit(4294967492.039:47): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8910" name="lu_gp_id" dev="configfs" ino=71600 res=0 errno=0 [ 648.597309][T24649] ALUA LU Group already has a valid ID, ignoring request [ 649.522174][T24680] FAULT_INJECTION: forcing a failure. [ 649.522174][T24680] name failslab, interval 1, probability 0, space 0, times 0 [ 649.588373][T24680] CPU: 0 UID: 0 PID: 24680 Comm: syz.2.8926 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.588406][T24680] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.588413][T24680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.588423][T24680] Call Trace: [ 649.588430][T24680] [ 649.588437][T24680] dump_stack_lvl+0x100/0x190 [ 649.588462][T24680] should_fail_ex.cold+0x5/0xa [ 649.588483][T24680] should_failslab+0xc2/0x120 [ 649.588508][T24680] __kmalloc_noprof+0xfc/0x820 [ 649.588530][T24680] ? trace_kmem_cache_alloc+0xdd/0x100 [ 649.588556][T24680] ? lsm_blob_alloc+0x68/0x90 [ 649.588590][T24680] lsm_blob_alloc+0x68/0x90 [ 649.588624][T24680] security_sk_alloc+0x2d/0x290 [ 649.588645][T24680] sk_prot_alloc+0x1d1/0x2a0 [ 649.588669][T24680] sk_alloc+0x36/0xe80 [ 649.588693][T24680] rds_create+0x9e/0x5e0 [ 649.588768][T24680] __sock_create+0x339/0x860 [ 649.588792][T24680] __sys_socket+0x14d/0x260 [ 649.588813][T24680] ? __pfx___sys_socket+0x10/0x10 [ 649.588840][T24680] __x64_sys_socket+0x72/0xb0 [ 649.588860][T24680] ? lockdep_hardirqs_on+0x78/0x100 [ 649.588886][T24680] do_syscall_64+0x115/0x840 [ 649.588911][T24680] ? clear_bhb_loop+0x70/0xc0 [ 649.588932][T24680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.588950][T24680] RIP: 0033:0x7fdf5f39e0d9 [ 649.588966][T24680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.588983][T24680] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 649.589002][T24680] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 649.589013][T24680] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 649.589024][T24680] RBP: 00007fdf5f435024 R08: 0000000000000000 R09: 0000000000000000 [ 649.589034][T24680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.589044][T24680] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 649.589066][T24680] [ 650.010587][T24692] ovs_?: entered promiscuous mode [ 650.197770][T24700] FAULT_INJECTION: forcing a failure. [ 650.197770][T24700] name failslab, interval 1, probability 0, space 0, times 0 [ 650.227569][T24701] FAULT_INJECTION: forcing a failure. [ 650.227569][T24701] name failslab, interval 1, probability 0, space 0, times 0 [ 650.247991][T24700] CPU: 0 UID: 0 PID: 24700 Comm: syz.0.8935 Tainted: G U L syzkaller #0 PREEMPT(full) [ 650.248028][T24700] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 650.248034][T24700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.248045][T24700] Call Trace: [ 650.248052][T24700] [ 650.248059][T24700] dump_stack_lvl+0x100/0x190 [ 650.248085][T24700] should_fail_ex.cold+0x5/0xa [ 650.248105][T24700] should_failslab+0xc2/0x120 [ 650.248132][T24700] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 650.248157][T24700] ? __d_alloc+0x35/0xa50 [ 650.248182][T24700] __d_alloc+0x35/0xa50 [ 650.248200][T24700] ? __ns_ref_active_get+0x9f/0x1b0 [ 650.248227][T24700] path_from_stashed+0x427/0x750 [ 650.248254][T24700] open_namespace+0x93/0x1c0 [ 650.248274][T24700] ? __pfx_open_namespace+0x10/0x10 [ 650.248293][T24700] ? apparmor_capable+0x1d7/0x4d0 [ 650.248387][T24700] open_related_ns+0x41/0x70 [ 650.248407][T24700] __tun_chr_ioctl+0x2e55/0x47c0 [ 650.248465][T24700] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 650.248495][T24700] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 650.248518][T24700] ? hook_file_ioctl_common+0x140/0x440 [ 650.248561][T24700] ? __fget_files+0x21f/0x3d0 [ 650.248582][T24700] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 650.248604][T24700] __x64_sys_ioctl+0x18e/0x210 [ 650.248632][T24700] do_syscall_64+0x115/0x840 [ 650.248670][T24700] ? clear_bhb_loop+0x70/0xc0 [ 650.248692][T24700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.248711][T24700] RIP: 0033:0x7fcf4159e0d9 [ 650.248727][T24700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.248745][T24700] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.248764][T24700] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 650.248776][T24700] RDX: 0000000000000073 RSI: 00000000000054e3 RDI: 00000000000000c8 [ 650.248787][T24700] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 650.248798][T24700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.248808][T24700] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 650.248831][T24700] [ 650.490727][T24701] CPU: 0 UID: 0 PID: 24701 Comm: syz.2.8936 Tainted: G U L syzkaller #0 PREEMPT(full) [ 650.490760][T24701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 650.490767][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.490778][T24701] Call Trace: [ 650.490784][T24701] [ 650.490791][T24701] dump_stack_lvl+0x100/0x190 [ 650.490817][T24701] should_fail_ex.cold+0x5/0xa [ 650.490838][T24701] should_failslab+0xc2/0x120 [ 650.490864][T24701] kmem_cache_alloc_noprof+0x91/0x6a0 [ 650.490887][T24701] ? __fget_files+0x215/0x3d0 [ 650.490904][T24701] ? create_new_namespaces+0x30/0xac0 [ 650.490928][T24701] create_new_namespaces+0x30/0xac0 [ 650.490952][T24701] __do_sys_setns+0x213/0x1f30 [ 650.490973][T24701] ? __pfx___do_sys_setns+0x10/0x10 [ 650.491001][T24701] do_syscall_64+0x115/0x840 [ 650.491025][T24701] ? clear_bhb_loop+0x70/0xc0 [ 650.491047][T24701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.491066][T24701] RIP: 0033:0x7fdf5f39e0d9 [ 650.491085][T24701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.491106][T24701] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 650.491124][T24701] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 650.491136][T24701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 650.491146][T24701] RBP: 00007fdf5f435024 R08: 0000000000000000 R09: 0000000000000000 [ 650.491156][T24701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.491166][T24701] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 650.491189][T24701] [ 653.379255][T24786] ovs_?: entered promiscuous mode [ 653.889241][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8979'. [ 654.106057][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8982'. [ 655.303592][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8995'. [ 655.499839][T24846] netlink: 'syz.1.8998': attribute type 2 has an invalid length. [ 657.534306][T24910] sctp: [Deprecated]: syz.2.9026 (pid 24910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 657.534306][T24910] Use struct sctp_sack_info instead [ 657.676349][T24912] FAULT_INJECTION: forcing a failure. [ 657.676349][T24912] name failslab, interval 1, probability 0, space 0, times 0 [ 657.726842][T24912] CPU: 0 UID: 0 PID: 24912 Comm: syz.4.9027 Tainted: G U L syzkaller #0 PREEMPT(full) [ 657.726876][T24912] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 657.726883][T24912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.726893][T24912] Call Trace: [ 657.726900][T24912] [ 657.726907][T24912] dump_stack_lvl+0x100/0x190 [ 657.726932][T24912] should_fail_ex.cold+0x5/0xa [ 657.726952][T24912] should_failslab+0xc2/0x120 [ 657.726979][T24912] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 657.727004][T24912] ? __d_alloc+0x35/0xa50 [ 657.727028][T24912] __d_alloc+0x35/0xa50 [ 657.727049][T24912] d_alloc_pseudo+0x1c/0xc0 [ 657.727074][T24912] alloc_file_pseudo+0x118/0x290 [ 657.727100][T24912] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 657.727123][T24912] ? alloc_fd+0x471/0x7a0 [ 657.727144][T24912] sock_alloc_file+0x50/0x210 [ 657.727172][T24912] __sys_socket+0x1c0/0x260 [ 657.727191][T24912] ? exc_page_fault+0x6f/0xd0 [ 657.727215][T24912] ? __pfx___sys_socket+0x10/0x10 [ 657.727241][T24912] __x64_sys_socket+0x72/0xb0 [ 657.727260][T24912] ? lockdep_hardirqs_on+0x78/0x100 [ 657.727286][T24912] do_syscall_64+0x115/0x840 [ 657.727310][T24912] ? clear_bhb_loop+0x70/0xc0 [ 657.727331][T24912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.727349][T24912] RIP: 0033:0x7f7662d9f947 [ 657.727364][T24912] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.727382][T24912] RSP: 002b:00007f7663d2ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 657.727400][T24912] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9f947 [ 657.727412][T24912] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 657.727422][T24912] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 657.727433][T24912] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 657.727443][T24912] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 657.727474][T24912] [ 658.219278][ T29] audit: type=1800 audit(4294967501.749:48): pid=24925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9033" name=04 dev="tmpfs" ino=11448 res=0 errno=0 [ 659.050487][T24953] bridge0: port 3(ipvlan1) entered blocking state [ 659.079756][T24953] bridge0: port 3(ipvlan1) entered disabled state [ 659.088769][T24956] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.9043'. [ 659.105155][T24953] ipvlan1: entered allmulticast mode [ 659.115290][T24953] veth0_vlan: entered allmulticast mode [ 659.132504][T24953] ipvlan1: left allmulticast mode [ 659.147414][T24953] veth0_vlan: left allmulticast mode [ 659.338360][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9044'. [ 660.017223][T24981] netlink: 'syz.4.9057': attribute type 2 has an invalid length. [ 660.892259][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9067'. [ 660.934652][T25013] netlink: 'syz.0.9068': attribute type 2 has an invalid length. [ 662.020448][T25042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9079'. [ 663.896000][T25098] program syz.0.9102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.165704][T25106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9106'. [ 664.307308][T25109] FAULT_INJECTION: forcing a failure. [ 664.307308][T25109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 664.371213][T25109] CPU: 0 UID: 0 PID: 25109 Comm: syz.0.9107 Tainted: G U L syzkaller #0 PREEMPT(full) [ 664.371251][T25109] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 664.371258][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.371273][T25109] Call Trace: [ 664.371279][T25109] [ 664.371286][T25109] dump_stack_lvl+0x100/0x190 [ 664.371315][T25109] should_fail_ex.cold+0x5/0xa [ 664.371336][T25109] ? prepare_alloc_pages+0x16d/0x5f0 [ 664.371369][T25109] should_fail_alloc_page+0xeb/0x140 [ 664.371397][T25109] prepare_alloc_pages+0x1f0/0x5f0 [ 664.371427][T25109] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 664.371450][T25109] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 664.371482][T25109] ? lock_acquire+0x1b9/0x370 [ 664.371500][T25109] ? find_held_lock+0x2b/0x80 [ 664.371523][T25109] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 664.371550][T25109] ? page_table_check_set+0x30f/0x580 [ 664.371578][T25109] ? page_table_check_set+0x31e/0x580 [ 664.371606][T25109] ? __page_table_check_ptes_set+0x1d5/0x530 [ 664.371634][T25109] ? xas_find+0x32c/0x8e0 [ 664.371665][T25109] ? find_held_lock+0x2b/0x80 [ 664.371686][T25109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.371714][T25109] ? policy_nodemask+0xed/0x4f0 [ 664.371741][T25109] alloc_pages_mpol+0x1fb/0x540 [ 664.371768][T25109] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 664.371800][T25109] folio_alloc_mpol_noprof+0x36/0x260 [ 664.371819][T25109] vma_alloc_folio_noprof+0xed/0x1d0 [ 664.371837][T25109] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 664.371862][T25109] do_anonymous_page+0xb2b/0x2080 [ 664.371881][T25109] ? rcu_read_unlock+0x2d/0xb0 [ 664.371905][T25109] __handle_mm_fault+0x1d2c/0x2a00 [ 664.371928][T25109] ? reacquire_held_locks+0xce/0x1e0 [ 664.371946][T25109] ? __pfx___handle_mm_fault+0x10/0x10 [ 664.371968][T25109] ? lock_vma_under_rcu+0x17c/0x590 [ 664.371998][T25109] handle_mm_fault+0x37b/0xa30 [ 664.372024][T25109] do_user_addr_fault+0x5a3/0x12f0 [ 664.372056][T25109] exc_page_fault+0x6f/0xd0 [ 664.372081][T25109] asm_exc_page_fault+0x26/0x30 [ 664.372098][T25109] RIP: 0033:0x7fcf4145f6cb [ 664.372114][T25109] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 664.372131][T25109] RSP: 002b:00007fcf4240afa0 EFLAGS: 00010206 [ 664.372146][T25109] RAX: 0000000000000000 RBX: 00007fcf41825fa0 RCX: 0000000000000000 [ 664.372157][T25109] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 664.372167][T25109] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 664.372178][T25109] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 664.372188][T25109] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 664.372211][T25109] [ 664.372371][T25109] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 665.490004][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9118'. [ 666.564793][T25168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9133'. [ 667.009215][T25183] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 667.353824][T25192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9144'. [ 667.426151][T25196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9146'. [ 670.438550][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9182'. [ 671.155756][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9187'. [ 672.437938][T25336] netlink: 'syz.2.9208': attribute type 1 has an invalid length. [ 672.921034][T25351] FAULT_INJECTION: forcing a failure. [ 672.921034][T25351] name failslab, interval 1, probability 0, space 0, times 0 [ 672.958382][T25351] CPU: 0 UID: 0 PID: 25351 Comm: syz.4.9213 Tainted: G U L syzkaller #0 PREEMPT(full) [ 672.958416][T25351] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 672.958423][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.958434][T25351] Call Trace: [ 672.958441][T25351] [ 672.958447][T25351] dump_stack_lvl+0x100/0x190 [ 672.958473][T25351] should_fail_ex.cold+0x5/0xa [ 672.958493][T25351] should_failslab+0xc2/0x120 [ 672.958520][T25351] kmem_cache_alloc_noprof+0x91/0x6a0 [ 672.958543][T25351] ? trace_kmem_cache_alloc+0xdd/0x100 [ 672.958569][T25351] ? security_file_alloc+0x34/0x2c0 [ 672.958598][T25351] security_file_alloc+0x34/0x2c0 [ 672.958622][T25351] init_file+0x95/0x480 [ 672.958644][T25351] alloc_empty_file+0x79/0x1c0 [ 672.958673][T25351] path_openat+0xe7/0x4280 [ 672.958690][T25351] ? __kasan_slab_alloc+0x89/0x90 [ 672.958713][T25351] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 672.958734][T25351] ? do_getname+0x35/0x390 [ 672.958755][T25351] ? do_sys_openat2+0xc7/0x1e0 [ 672.958777][T25351] ? __x64_sys_openat+0x12d/0x210 [ 672.958800][T25351] ? do_syscall_64+0x115/0x840 [ 672.958824][T25351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.958848][T25351] ? __pfx_path_openat+0x10/0x10 [ 672.958873][T25351] do_file_open+0x20e/0x430 [ 672.958893][T25351] ? __pfx_do_file_open+0x10/0x10 [ 672.958926][T25351] ? alloc_fd+0x471/0x7a0 [ 672.958945][T25351] ? do_getname+0x191/0x390 [ 672.958970][T25351] do_sys_openat2+0x10f/0x1e0 [ 672.958993][T25351] ? __pfx_do_sys_openat2+0x10/0x10 [ 672.959022][T25351] ? find_held_lock+0x2b/0x80 [ 672.959050][T25351] __x64_sys_openat+0x12d/0x210 [ 672.959075][T25351] ? __pfx___x64_sys_openat+0x10/0x10 [ 672.959108][T25351] do_syscall_64+0x115/0x840 [ 672.959131][T25351] ? clear_bhb_loop+0x70/0xc0 [ 672.959153][T25351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.959171][T25351] RIP: 0033:0x7f7662d5e90e [ 672.959186][T25351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.959204][T25351] RSP: 002b:00007f7663d2fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.959222][T25351] RAX: ffffffffffffffda RBX: 00007f7663d306c0 RCX: 00007f7662d5e90e [ 672.959234][T25351] RDX: 0000000000000002 RSI: 00007f7663d2ff90 RDI: ffffffffffffff9c [ 672.959245][T25351] RBP: 00007f7662e35024 R08: 0000000000000000 R09: 0000000000000000 [ 672.959256][T25351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.959266][T25351] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 672.959288][T25351] [ 676.189661][T25412] random: crng reseeded on system resumption [ 678.221541][T25461] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 678.428112][T25469] random: crng reseeded on system resumption [ 680.127564][T25518] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 680.207254][T25520] random: crng reseeded on system resumption [ 680.565647][T25533] NFSD: Failed to start, no listeners configured. [ 683.118193][T25611] tunl0: entered allmulticast mode [ 683.280786][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.287411][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.583632][T25627] netlink: 'syz.0.9337': attribute type 2 has an invalid length. [ 686.311373][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9359'. [ 686.360913][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9359'. [ 687.234218][T25717] NFSD: Failed to start, no listeners configured. [ 689.473770][T25777] bridge0: port 3(veth0_to_bridge) entered blocking state [ 689.510689][T25777] bridge0: port 3(veth0_to_bridge) entered disabled state [ 689.540348][T25777] veth0_to_bridge: entered allmulticast mode [ 689.601735][T25777] veth0_to_bridge: entered promiscuous mode [ 689.638832][T25777] bridge0: port 3(veth0_to_bridge) entered blocking state [ 689.646180][T25777] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 689.707796][T25781] openvswitch: netlink: IPv4 tunnel dst address is zero [ 693.653679][T25876] block nbd1: Unsupported socket: should be TCP or UNIX. [ 696.515668][ T9866] Bluetooth: hci2: Malformed Event: 0x13 [ 698.756401][T25987] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 698.848387][T25987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9479'. [ 698.947701][T25987] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 699.507085][T26003] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5616] was attempted by "7^dc=iiН2޷]}B3HyNVfK>edS^n&\x09\x0cpl2\x22=\x07\x07|N!OF>\x5cZAXEtU\x1bǀ)4s̅wfuR㬡ŬJDЀ [PiV9/ɳ8Ot7#hm,`f8Y\x0bmվ\x0d;wq^kSDd\x0b\x22.nuh$\x0a.VJ9{$c\x0cB}ypŦC)vŖHp:;e*Ks\x07A^l!\x0bP]Yc`ZGjW}~R\x07$>IJp!Q@'\x5cԢ`b>*>]?Y9!Ģ3lR#躨ld.5dq\x5c cP uFXts*veLqY֖`ڃS;mtDV7If`\x22<+rquS5 s.\x1b7g`=a7+ĩMKBmR^#jA}w&YON|..A~U*zGf걖֮*|J٭@0Xb|ۯ_6@2?}䲧)[u-a\x0a)~I2?R/u!\x0c.>x[Og˭S[\x0bUL_y;:?o1X\x0a_AXHlܝ^zzz_?\x0791C}1F}]\x0b~O~zgr482vx(N%E\x1bMA2=iP]'sc2C?e2flV_!PMkxzSug° [ 700.323215][T26030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9498'. [ 700.832157][T26048] netlink: 82 bytes leftover after parsing attributes in process `syz.1.9506'. [ 702.947132][ T29] audit: type=1800 audit(4294967546.732:49): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9533" name=22050820 dev="tmpfs" ino=11211 res=0 errno=0 [ 703.877278][ T9866] Bluetooth: hci0: Malformed HCI Event [ 704.349811][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9553'. [ 706.471813][T26207] netlink: 'syz.0.9574': attribute type 1 has an invalid length. [ 707.176200][T26231] NFSD: Failed to start, no listeners configured. [ 707.696743][T26254] sctp: [Deprecated]: syz.0.9597 (pid 26254) Use of int in maxseg socket option. [ 707.696743][T26254] Use struct sctp_assoc_value instead [ 707.860555][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9599'. [ 710.077876][T26341] sctp: [Deprecated]: syz.1.9637 (pid 26341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 710.077876][T26341] Use struct sctp_sack_info instead [ 710.316638][T26348] netlink: 342 bytes leftover after parsing attributes in process `syz.1.9640'. [ 710.565068][T26358] bridge0: port 4(veth1_macvtap) entered blocking state [ 710.604056][T26358] bridge0: port 4(veth1_macvtap) entered disabled state [ 710.640287][T26358] veth1_macvtap: entered allmulticast mode [ 710.675043][T26358] veth1_macvtap: left allmulticast mode [ 712.541554][T26421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 712.549895][T26421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 713.215350][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9681'. [ 717.428645][T26597] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 717.722903][T26610] vivid-007: ================= START STATUS ================= [ 717.746312][T26610] vivid-007: Generate PTS: true [ 717.789206][T26610] vivid-007: Generate SCR: true [ 717.814407][T26610] tpg source WxH: 320x240 (Y'CbCr) [ 717.841934][T26610] tpg field: 1 [ 717.870198][T26610] tpg crop: (0,0)/320x240 [ 717.895218][T26610] tpg compose: (0,0)/320x240 [ 717.933829][T26610] tpg colorspace: 8 [ 717.948478][T26610] tpg transfer function: 0/0 [ 717.968165][T26610] tpg Y'CbCr encoding: 0/0 [ 717.990733][T26610] tpg quantization: 0/0 [ 718.010368][T26610] tpg RGB range: 0/2 [ 718.040345][T26610] vivid-007: ================== END STATUS ================== [ 719.369134][T26670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9780'. [ 721.087325][ T9866] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 721.087438][ T9866] Bluetooth: hci3: unexpected event for opcode 0x647c [ 721.422282][T26745] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.428735][T26745] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.785266][T26757] netlink: 206 bytes leftover after parsing attributes in process `syz.0.9818'. [ 721.983690][T26764] overlayfs: missing 'lowerdir' [ 722.636861][T26792] netlink: 186 bytes leftover after parsing attributes in process `syz.4.9834'. [ 722.920608][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9840'. [ 723.363450][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9848'. [ 723.512217][T26827] netlink: 5324 bytes leftover after parsing attributes in process `syz.4.9850'. [ 724.750123][T26874] netlink: 29 bytes leftover after parsing attributes in process `syz.2.9873'. [ 726.995113][T26943] ovs_: entered promiscuous mode [ 729.129917][T27026] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5613] was attempted by ""[27026] [ 729.188667][T27028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9939'. [ 730.546759][T27072] FAULT_INJECTION: forcing a failure. [ 730.546759][T27072] name failslab, interval 1, probability 0, space 0, times 0 [ 730.627658][T27072] CPU: 0 UID: 0 PID: 27072 Comm: syz.4.9960 Tainted: G U L syzkaller #0 PREEMPT(full) [ 730.627691][T27072] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 730.627698][T27072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.627709][T27072] Call Trace: [ 730.627715][T27072] [ 730.627722][T27072] dump_stack_lvl+0x100/0x190 [ 730.627749][T27072] should_fail_ex.cold+0x5/0xa [ 730.627770][T27072] should_failslab+0xc2/0x120 [ 730.627796][T27072] kmem_cache_alloc_noprof+0x91/0x6a0 [ 730.627822][T27072] ? mas_preallocate+0x1105/0x14a0 [ 730.627846][T27072] mas_preallocate+0x1105/0x14a0 [ 730.627869][T27072] ? __pfx_mas_preallocate+0x10/0x10 [ 730.627894][T27072] ? anon_vma_name+0x5a/0x250 [ 730.627926][T27072] __split_vma+0x33d/0xda0 [ 730.627947][T27072] ? __pfx___split_vma+0x10/0x10 [ 730.627964][T27072] ? vma_link+0x5ee/0x8d0 [ 730.627994][T27072] vms_gather_munmap_vmas+0x1d2/0x1720 [ 730.628019][T27072] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 730.628040][T27072] ? alloc_new_pud+0x217/0x320 [ 730.628065][T27072] ? get_old_pud+0xd8/0x360 [ 730.628085][T27072] ? move_page_tables+0x11c/0x4610 [ 730.628106][T27072] ? __pfx_copy_vma+0x10/0x10 [ 730.628133][T27072] do_vmi_align_munmap+0x287/0x5f0 [ 730.628156][T27072] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 730.628205][T27072] do_vmi_munmap+0x1f8/0x3e0 [ 730.628229][T27072] move_vma+0xe5b/0x1920 [ 730.628252][T27072] ? __pfx_move_vma+0x10/0x10 [ 730.628274][T27072] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 730.628309][T27072] ? vrm_set_new_addr+0x204/0x290 [ 730.628330][T27072] mremap_to+0x234/0x4c0 [ 730.628349][T27072] ? mas_walk+0x6ef/0x9b0 [ 730.628374][T27072] ? __pfx_mremap_to+0x10/0x10 [ 730.628392][T27072] ? check_prep_vma+0x912/0xe60 [ 730.628416][T27072] __do_sys_mremap+0x88c/0x1850 [ 730.628443][T27072] ? __pfx___do_sys_mremap+0x10/0x10 [ 730.628462][T27072] ? ksys_write+0x190/0x250 [ 730.628484][T27072] ? __pfx_do_futex+0x10/0x10 [ 730.628511][T27072] ? __x64_sys_futex+0x34f/0x4d0 [ 730.628543][T27072] do_syscall_64+0x115/0x840 [ 730.628567][T27072] ? clear_bhb_loop+0x70/0xc0 [ 730.628589][T27072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.628607][T27072] RIP: 0033:0x7f7662d9e0d9 [ 730.628623][T27072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.628640][T27072] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 730.628658][T27072] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 730.628670][T27072] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 730.628680][T27072] RBP: 00007f7662e35024 R08: 0000000100000000 R09: 0000000000000000 [ 730.628696][T27072] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 730.628706][T27072] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 730.628729][T27072] [ 733.922406][T27167] bridge0: port 4(dummy0) entered blocking state [ 733.988245][T27167] bridge0: port 4(dummy0) entered disabled state [ 734.049969][T27167] dummy0: entered allmulticast mode [ 734.129784][T27167] dummy0: entered promiscuous mode [ 734.190942][T27167] bridge0: port 4(dummy0) entered blocking state [ 734.197461][T27167] bridge0: port 4(dummy0) entered forwarding state [ 736.972116][T27272] netlink: 350 bytes leftover after parsing attributes in process `syz.1.10052'. [ 737.861831][T27309] FAULT_INJECTION: forcing a failure. [ 737.861831][T27309] name failslab, interval 1, probability 0, space 0, times 0 [ 737.923449][T27309] CPU: 0 UID: 0 PID: 27309 Comm: syz.2.10070 Tainted: G U L syzkaller #0 PREEMPT(full) [ 737.923484][T27309] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 737.923491][T27309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.923502][T27309] Call Trace: [ 737.923508][T27309] [ 737.923516][T27309] dump_stack_lvl+0x100/0x190 [ 737.923542][T27309] should_fail_ex.cold+0x5/0xa [ 737.923562][T27309] should_failslab+0xc2/0x120 [ 737.923591][T27309] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 737.923613][T27309] ? lockdep_hardirqs_on+0x78/0x100 [ 737.923640][T27309] ? sock_alloc_inode+0x26/0x2c0 [ 737.923659][T27309] ? __pfx_sock_alloc_inode+0x10/0x10 [ 737.923677][T27309] sock_alloc_inode+0x26/0x2c0 [ 737.923694][T27309] ? __pfx_sock_alloc_inode+0x10/0x10 [ 737.923714][T27309] alloc_inode+0x68/0x250 [ 737.923738][T27309] sock_alloc+0x44/0x280 [ 737.923764][T27309] ? security_socket_create+0x7f/0x250 [ 737.923785][T27309] __sock_create+0xc2/0x860 [ 737.923808][T27309] smc_create_clcsk+0x37/0xd0 [ 737.923833][T27309] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 737.923903][T27309] inet6_create+0xb1a/0x12b0 [ 737.923928][T27309] ? inet6_create+0x7f/0x12b0 [ 737.923952][T27309] __sock_create+0x339/0x860 [ 737.923975][T27309] __sys_socket+0x14d/0x260 [ 737.923996][T27309] ? __pfx___sys_socket+0x10/0x10 [ 737.924022][T27309] __x64_sys_socket+0x72/0xb0 [ 737.924049][T27309] ? lockdep_hardirqs_on+0x78/0x100 [ 737.924074][T27309] do_syscall_64+0x115/0x840 [ 737.924098][T27309] ? clear_bhb_loop+0x70/0xc0 [ 737.924120][T27309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.924139][T27309] RIP: 0033:0x7fdf5f39e0d9 [ 737.924155][T27309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.924172][T27309] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 737.924191][T27309] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 737.924203][T27309] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 737.924213][T27309] RBP: 00007fdf5f435024 R08: 0000000000000000 R09: 0000000000000000 [ 737.924224][T27309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.924234][T27309] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 737.924255][T27309] [ 737.924265][T27309] socket: no more sockets [ 739.139074][T27343] mac80211.ieee80211_default_rc_algo: string parameter too long [ 739.351568][T27357] netlink: 21 bytes leftover after parsing attributes in process `syz.0.10091'. [ 739.942313][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10100'. [ 740.026848][T27378] FAULT_INJECTION: forcing a failure. [ 740.026848][T27378] name failslab, interval 1, probability 0, space 0, times 0 [ 740.103042][T27378] CPU: 0 UID: 0 PID: 27378 Comm: syz.2.10101 Tainted: G U L syzkaller #0 PREEMPT(full) [ 740.103075][T27378] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 740.103082][T27378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.103092][T27378] Call Trace: [ 740.103100][T27378] [ 740.103107][T27378] dump_stack_lvl+0x100/0x190 [ 740.103132][T27378] should_fail_ex.cold+0x5/0xa [ 740.103152][T27378] should_failslab+0xc2/0x120 [ 740.103178][T27378] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 740.103203][T27378] ? __d_alloc+0x35/0xa50 [ 740.103227][T27378] __d_alloc+0x35/0xa50 [ 740.103249][T27378] d_alloc_pseudo+0x1c/0xc0 [ 740.103275][T27378] alloc_file_pseudo+0x118/0x290 [ 740.103301][T27378] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 740.103326][T27378] ? alloc_fd+0x471/0x7a0 [ 740.103348][T27378] sock_alloc_file+0x50/0x210 [ 740.103376][T27378] __sys_socket+0x1c0/0x260 [ 740.103397][T27378] ? __pfx___sys_socket+0x10/0x10 [ 740.103423][T27378] __x64_sys_socket+0x72/0xb0 [ 740.103442][T27378] ? lockdep_hardirqs_on+0x78/0x100 [ 740.103467][T27378] do_syscall_64+0x115/0x840 [ 740.103491][T27378] ? clear_bhb_loop+0x70/0xc0 [ 740.103513][T27378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.103531][T27378] RIP: 0033:0x7fdf5f39e0d9 [ 740.103551][T27378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.103568][T27378] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 740.103587][T27378] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 740.103598][T27378] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 740.103608][T27378] RBP: 00007fdf5f435024 R08: 0000000000000000 R09: 0000000000000000 [ 740.103619][T27378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.103629][T27378] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 740.103651][T27378] [ 741.741866][T27413] zswap: compressor F not available [ 742.165047][T27434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10125'. [ 743.081816][T27448] zswap: compressor F not available [ 744.404005][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.410534][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.641480][T27491] zswap: compressor F not available [ 744.964423][T27506] input: f as /devices/virtual/input/input26 [ 747.809752][T27593] FAULT_INJECTION: forcing a failure. [ 747.809752][T27593] name failslab, interval 1, probability 0, space 0, times 0 [ 747.852680][T27593] CPU: 0 UID: 0 PID: 27593 Comm: syz.0.10190 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.852714][T27593] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.852722][T27593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.852732][T27593] Call Trace: [ 747.852738][T27593] [ 747.852745][T27593] dump_stack_lvl+0x100/0x190 [ 747.852776][T27593] should_fail_ex.cold+0x5/0xa [ 747.852796][T27593] should_failslab+0xc2/0x120 [ 747.852823][T27593] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 747.852849][T27593] ? __d_alloc+0x35/0xa50 [ 747.852873][T27593] __d_alloc+0x35/0xa50 [ 747.852896][T27593] d_alloc_pseudo+0x1c/0xc0 [ 747.852923][T27593] alloc_file_pseudo+0x118/0x290 [ 747.852960][T27593] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 747.852984][T27593] ? hugetlbfs_get_inode+0x3f5/0x700 [ 747.853068][T27593] hugetlb_file_setup+0x2a8/0x5b0 [ 747.853097][T27593] ksys_mmap_pgoff+0x242/0x610 [ 747.853126][T27593] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 747.853152][T27593] ? xfd_validate_state+0x129/0x190 [ 747.853180][T27593] __x64_sys_mmap+0x125/0x190 [ 747.853206][T27593] do_syscall_64+0x115/0x840 [ 747.853234][T27593] ? clear_bhb_loop+0x70/0xc0 [ 747.853259][T27593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.853277][T27593] RIP: 0033:0x7fcf4159e0d9 [ 747.853293][T27593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.853310][T27593] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 747.853329][T27593] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 747.853340][T27593] RDX: 000000000000000b RSI: 0000000000004005 RDI: 0000000000000000 [ 747.853351][T27593] RBP: 00007fcf41635024 R08: 0000000000000401 R09: 0000300000000000 [ 747.853362][T27593] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 747.853372][T27593] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 747.853395][T27593] [ 748.503331][T27597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10194'. [ 749.062965][T27620] openvswitch: netlink: IPv4 tunnel dst address is zero [ 749.879301][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10225'. [ 749.919163][T27649] openvswitch: netlink: IPv4 tunnel dst address is zero [ 751.173022][T27684] openvswitch: netlink: IPv4 tunnel dst address is zero [ 754.229876][T27775] FAULT_INJECTION: forcing a failure. [ 754.229876][T27775] name failslab, interval 1, probability 0, space 0, times 0 [ 754.293875][T27775] CPU: 0 UID: 0 PID: 27775 Comm: syz.0.10273 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.293909][T27775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.293916][T27775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.293927][T27775] Call Trace: [ 754.293933][T27775] [ 754.293940][T27775] dump_stack_lvl+0x100/0x190 [ 754.293967][T27775] should_fail_ex.cold+0x5/0xa [ 754.293987][T27775] should_failslab+0xc2/0x120 [ 754.294014][T27775] __kmalloc_noprof+0xfc/0x820 [ 754.294037][T27775] ? security_inode_alloc+0x3b/0x2c0 [ 754.294057][T27775] ? sk_prot_alloc+0x10b/0x2a0 [ 754.294081][T27775] sk_prot_alloc+0x10b/0x2a0 [ 754.294100][T27775] sk_alloc+0x36/0xe80 [ 754.294124][T27775] packet_create+0x127/0x8e0 [ 754.294213][T27775] __sock_create+0x339/0x860 [ 754.294241][T27775] __sys_socket+0x14d/0x260 [ 754.294262][T27775] ? __pfx___sys_socket+0x10/0x10 [ 754.294290][T27775] __x64_sys_socket+0x72/0xb0 [ 754.294310][T27775] ? lockdep_hardirqs_on+0x78/0x100 [ 754.294336][T27775] do_syscall_64+0x115/0x840 [ 754.294360][T27775] ? clear_bhb_loop+0x70/0xc0 [ 754.294382][T27775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.294400][T27775] RIP: 0033:0x7fcf4159e0d9 [ 754.294416][T27775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.294434][T27775] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 754.294452][T27775] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 754.294464][T27775] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 754.294475][T27775] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 754.294485][T27775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.294495][T27775] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 754.294524][T27775] [ 756.402143][T27817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10288'. [ 757.660707][T27857] bridge0: port 5(vlan1) entered blocking state [ 757.691527][T27857] bridge0: port 5(vlan1) entered disabled state [ 757.730370][T27857] vlan1: entered allmulticast mode [ 757.758964][T27857] veth0_vlan: entered allmulticast mode [ 757.799688][T27857] vlan1: entered promiscuous mode [ 757.835089][T27857] bridge0: port 5(vlan1) entered blocking state [ 757.841515][T27857] bridge0: port 5(vlan1) entered forwarding state [ 758.997939][T27890] block nbd1: Unsupported socket: should be TCP or UNIX. [ 760.165168][ T9866] Bluetooth: hci3: Malformed Event: 0x13 [ 760.941420][T27925] IPVS: length: 537396514 != 24 [ 761.183556][T27934] FAULT_INJECTION: forcing a failure. [ 761.183556][T27934] name failslab, interval 1, probability 0, space 0, times 0 [ 761.261753][T27934] CPU: 0 UID: 0 PID: 27934 Comm: syz.4.10341 Tainted: G U L syzkaller #0 PREEMPT(full) [ 761.261794][T27934] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 761.261801][T27934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.261813][T27934] Call Trace: [ 761.261819][T27934] [ 761.261826][T27934] dump_stack_lvl+0x100/0x190 [ 761.261855][T27934] should_fail_ex.cold+0x5/0xa [ 761.261876][T27934] should_failslab+0xc2/0x120 [ 761.261904][T27934] kmem_cache_alloc_noprof+0x91/0x6a0 [ 761.261929][T27934] ? key_alloc+0x3c5/0x1310 [ 761.262020][T27934] key_alloc+0x3c5/0x1310 [ 761.262052][T27934] ? __pfx_key_alloc+0x10/0x10 [ 761.262079][T27934] ? lsm_blob_alloc+0x68/0x90 [ 761.262112][T27934] keyring_alloc+0x44/0xc0 [ 761.262141][T27934] install_thread_keyring_to_cred+0xc1/0x140 [ 761.262165][T27934] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 761.262187][T27934] __do_sys_keyctl+0x316/0x5a0 [ 761.262209][T27934] do_syscall_64+0x115/0x840 [ 761.262235][T27934] ? clear_bhb_loop+0x70/0xc0 [ 761.262257][T27934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.262275][T27934] RIP: 0033:0x7f7662d9e0d9 [ 761.262290][T27934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.262307][T27934] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 761.262326][T27934] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 761.262337][T27934] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 761.262347][T27934] RBP: 00007f7662e35024 R08: 0000000000000008 R09: 0000000000000000 [ 761.262358][T27934] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 761.262369][T27934] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 761.262392][T27934] [ 763.668014][T28017] netlink: 'syz.2.10377': attribute type 33 has an invalid length. [ 763.876329][T28024] random: crng reseeded on system resumption [ 765.768179][T28085] netlink: 'syz.2.10406': attribute type 1 has an invalid length. [ 765.816039][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10406'. [ 765.850251][T28089] FAULT_INJECTION: forcing a failure. [ 765.850251][T28089] name failslab, interval 1, probability 0, space 0, times 0 [ 765.867727][T28085] netlink: 'syz.2.10406': attribute type 1 has an invalid length. [ 765.911903][T28089] CPU: 0 UID: 0 PID: 28089 Comm: syz.0.10408 Tainted: G U L syzkaller #0 PREEMPT(full) [ 765.911937][T28089] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 765.911944][T28089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.911955][T28089] Call Trace: [ 765.911961][T28089] [ 765.911968][T28089] dump_stack_lvl+0x100/0x190 [ 765.911994][T28089] should_fail_ex.cold+0x5/0xa [ 765.912014][T28089] should_failslab+0xc2/0x120 [ 765.912040][T28089] kmem_cache_alloc_noprof+0x91/0x6a0 [ 765.912061][T28089] ? security_inode_alloc+0x3b/0x2c0 [ 765.912083][T28089] ? sk_prot_alloc+0x60/0x2a0 [ 765.912105][T28089] sk_prot_alloc+0x60/0x2a0 [ 765.912124][T28089] sk_alloc+0x36/0xe80 [ 765.912148][T28089] smc_create+0x11a/0x290 [ 765.912174][T28089] __sock_create+0x339/0x860 [ 765.912197][T28089] __sys_socket+0x14d/0x260 [ 765.912218][T28089] ? __pfx___sys_socket+0x10/0x10 [ 765.912244][T28089] __x64_sys_socket+0x72/0xb0 [ 765.912263][T28089] ? lockdep_hardirqs_on+0x78/0x100 [ 765.912288][T28089] do_syscall_64+0x115/0x840 [ 765.912313][T28089] ? clear_bhb_loop+0x70/0xc0 [ 765.912335][T28089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.912353][T28089] RIP: 0033:0x7fcf4159e0d9 [ 765.912369][T28089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.912386][T28089] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 765.912405][T28089] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 765.912416][T28089] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 765.912426][T28089] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 765.912437][T28089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.912447][T28089] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 765.912469][T28089] [ 767.081687][T28110] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5613] was attempted by "-2y55HH4P rr!`坴Xm;؞r\x0cJFa̎c̾X#ÖM&RS_S:̀ϴ_+2j|{!+` ñn{^ikOyM[\x09.G_ʘ e 2O\x0bw뾎O@EMi-\x0c<Ɵ/\x09rZH9eGOgrݎ_ׁD$)jHv$#F7wCr :BRFo,?8to2PqKk&Uqe+“WرdO2ߧTFo2ɽ~sS;'Ҝng}_{Vys?Goi\x0c>(\x0aw0^OHⶶa ;P'Z-va+4rMSRD\x0dS+5u%l-ԀngKD+2N\x1b20\x1bke \x07<~;U<$:qCz(tTYP0\x09U_'e,)WZ7(% i5 X:mKKgdňtUI*?cp}qΜ1f\x07$!4:d ;ު;*% _`ީߩ~(,yu`\x0b\x07Ce~1. q}>ّ&wc{R7(Nl?x\x0cCY!\x0a3 :!1gӥZ\x5cϧ@ggڦ/\x07+\x0d\x0ah43-=~ˤ3o'\x07uzC\x1b>wYML [ 767.914773][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10441'. [ 768.925485][T28174] netlink: 82 bytes leftover after parsing attributes in process `syz.0.10448'. [ 770.660056][ T29] audit: type=1800 audit(4294967614.794:50): pid=28231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10474" name=22050820 dev="tmpfs" ino=13090 res=0 errno=0 [ 771.398044][ T9866] Bluetooth: hci1: Malformed HCI Event [ 772.038279][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10494'. [ 774.031252][T28330] netlink: 'syz.4.10518': attribute type 1 has an invalid length. [ 775.190958][T28364] NFSD: Failed to start, no listeners configured. [ 775.334996][T28374] sctp: [Deprecated]: syz.2.10539 (pid 28374) Use of int in maxseg socket option. [ 775.334996][T28374] Use struct sctp_assoc_value instead [ 775.540447][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10541'. [ 777.633528][T28455] sctp: [Deprecated]: syz.4.10577 (pid 28455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.633528][T28455] Use struct sctp_sack_info instead [ 777.815171][T28463] netlink: 342 bytes leftover after parsing attributes in process `syz.4.10581'. [ 778.123253][T28472] bridge0: port 4(veth1_macvtap) entered blocking state [ 778.159128][T28472] bridge0: port 4(veth1_macvtap) entered disabled state [ 778.183307][T28472] veth1_macvtap: entered allmulticast mode [ 778.218380][T28472] veth1_macvtap: left allmulticast mode [ 779.753117][T28513] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 779.759598][T28513] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 781.138449][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10622'. [ 781.633342][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10632'. [ 781.720571][T28585] FAULT_INJECTION: forcing a failure. [ 781.720571][T28585] name failslab, interval 1, probability 0, space 0, times 0 [ 781.774483][T28585] CPU: 0 UID: 0 PID: 28585 Comm: syz.2.10633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 781.774517][T28585] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 781.774524][T28585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.774535][T28585] Call Trace: [ 781.774542][T28585] [ 781.774549][T28585] dump_stack_lvl+0x100/0x190 [ 781.774575][T28585] should_fail_ex.cold+0x5/0xa [ 781.774596][T28585] should_failslab+0xc2/0x120 [ 781.774622][T28585] kmem_cache_alloc_noprof+0x91/0x6a0 [ 781.774648][T28585] ? dup_fd+0x4d/0xd10 [ 781.774669][T28585] dup_fd+0x4d/0xd10 [ 781.774686][T28585] ? __pfx_get_nodes+0x10/0x10 [ 781.774715][T28585] __x64_sys_close_range+0x405/0x5d0 [ 781.774738][T28585] ? __pfx___x64_sys_close_range+0x10/0x10 [ 781.774765][T28585] do_syscall_64+0x115/0x840 [ 781.774797][T28585] ? clear_bhb_loop+0x70/0xc0 [ 781.774819][T28585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.774838][T28585] RIP: 0033:0x7fdf5f39e0d9 [ 781.774853][T28585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.774870][T28585] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 781.774888][T28585] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 781.774900][T28585] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 781.774911][T28585] RBP: 00007fdf5f435024 R08: 0000000000000000 R09: 0000000000000000 [ 781.774921][T28585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.774932][T28585] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 781.774953][T28585] [ 782.459666][T28611] netlink: 206 bytes leftover after parsing attributes in process `syz.4.10644'. [ 782.701982][T28619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 782.708451][T28619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 784.814994][T28694] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 785.672294][ T29] audit: type=1800 audit(4294967629.882:51): pid=28717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10691" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 789.585780][T28843] bridge0: port 4(dummy0) entered blocking state [ 789.613499][T28843] bridge0: port 4(dummy0) entered disabled state [ 789.642958][T28843] dummy0: entered allmulticast mode [ 789.676799][T28843] dummy0: entered promiscuous mode [ 789.714964][T28843] bridge0: port 4(dummy0) entered blocking state [ 789.721526][T28843] bridge0: port 4(dummy0) entered forwarding state [ 792.136755][T28921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10778'. [ 793.412501][T28952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10794'. [ 793.993642][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10804'. [ 796.737461][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10840'. [ 796.807177][T29058] netlink: 'syz.2.10852': attribute type 1 has an invalid length. [ 797.826548][T29090] IPVS: length: 537396514 != 24 [ 798.008916][T29098] block nbd1: Unsupported socket: should be TCP or UNIX. [ 802.201578][ T29] audit: type=1800 audit(4294967646.498:52): pid=29194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10906" name=22050820 dev="tmpfs" ino=14605 res=0 errno=0 [ 805.518075][T29262] netlink: 'syz.4.10934': attribute type 33 has an invalid length. [ 805.536778][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.543206][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.088089][T29288] bridge0: port 5(vlan1) entered blocking state [ 807.117024][T29288] bridge0: port 5(vlan1) entered disabled state [ 807.161687][T29288] vlan1: entered allmulticast mode [ 807.182729][T29288] veth0_vlan: entered allmulticast mode [ 807.221764][T29288] vlan1: entered promiscuous mode [ 807.248772][T29288] bridge0: port 5(vlan1) entered blocking state [ 807.255181][T29288] bridge0: port 5(vlan1) entered forwarding state [ 808.562539][T29292] kexec: Could not allocate control_code_buffer [ 808.755585][T29307] NFSD: Failed to start, no listeners configured. [ 809.242059][T29324] FAULT_INJECTION: forcing a failure. [ 809.242059][T29324] name failslab, interval 1, probability 0, space 0, times 0 [ 809.304849][T29324] CPU: 0 UID: 0 PID: 29324 Comm: syz.4.10956 Tainted: G U L syzkaller #0 PREEMPT(full) [ 809.304884][T29324] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 809.304891][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.304902][T29324] Call Trace: [ 809.304908][T29324] [ 809.304914][T29324] dump_stack_lvl+0x100/0x190 [ 809.304941][T29324] should_fail_ex.cold+0x5/0xa [ 809.304961][T29324] should_failslab+0xc2/0x120 [ 809.304988][T29324] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 809.305013][T29324] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 809.305042][T29324] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 809.305065][T29324] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 809.305090][T29324] alloc_inode+0x68/0x250 [ 809.305115][T29324] new_inode+0x22/0x1c0 [ 809.305145][T29324] hugetlbfs_get_inode+0x39a/0x700 [ 809.305172][T29324] hugetlb_file_setup+0x15b/0x5b0 [ 809.305199][T29324] ksys_mmap_pgoff+0x242/0x610 [ 809.305228][T29324] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 809.305254][T29324] ? xfd_validate_state+0x129/0x190 [ 809.305281][T29324] __x64_sys_mmap+0x125/0x190 [ 809.305307][T29324] do_syscall_64+0x115/0x840 [ 809.305332][T29324] ? clear_bhb_loop+0x70/0xc0 [ 809.305355][T29324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.305374][T29324] RIP: 0033:0x7f7662d9e0d9 [ 809.305389][T29324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.305408][T29324] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 809.305426][T29324] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 809.305438][T29324] RDX: 00000000003ffffe RSI: 0000000000a00006 RDI: 0000000000000000 [ 809.305449][T29324] RBP: 00007f7662e35024 R08: 0000000000000602 R09: 0000300000000000 [ 809.305468][T29324] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 809.305478][T29324] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 809.305502][T29324] [ 812.833837][T29402] FAULT_INJECTION: forcing a failure. [ 812.833837][T29402] name failslab, interval 1, probability 0, space 0, times 0 [ 812.883406][T29402] CPU: 0 UID: 0 PID: 29402 Comm: syz.2.10990 Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.883440][T29402] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.883447][T29402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.883461][T29402] Call Trace: [ 812.883469][T29402] [ 812.883476][T29402] dump_stack_lvl+0x100/0x190 [ 812.883510][T29402] should_fail_ex.cold+0x5/0xa [ 812.883532][T29402] should_failslab+0xc2/0x120 [ 812.883558][T29402] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 812.883584][T29402] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 812.883611][T29402] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 812.883633][T29402] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 812.883657][T29402] alloc_inode+0x68/0x250 [ 812.883681][T29402] new_inode+0x22/0x1c0 [ 812.883707][T29402] hugetlbfs_get_inode+0x39a/0x700 [ 812.883732][T29402] hugetlb_file_setup+0x15b/0x5b0 [ 812.883759][T29402] ksys_mmap_pgoff+0x242/0x610 [ 812.883787][T29402] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 812.883813][T29402] ? xfd_validate_state+0x129/0x190 [ 812.883837][T29402] __x64_sys_mmap+0x125/0x190 [ 812.883862][T29402] do_syscall_64+0x115/0x840 [ 812.883890][T29402] ? clear_bhb_loop+0x70/0xc0 [ 812.883912][T29402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.883930][T29402] RIP: 0033:0x7fdf5f39e0d9 [ 812.883945][T29402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.883964][T29402] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 812.883982][T29402] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 812.883995][T29402] RDX: 00000000003ffffe RSI: 0000000000a00006 RDI: 0000000000000000 [ 812.884006][T29402] RBP: 00007fdf5f435024 R08: 0000000000000602 R09: 0000300000000000 [ 812.884018][T29402] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 812.884029][T29402] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 812.884051][T29402] [ 816.681144][T29456] NFSD: Failed to start, no listeners configured. [ 818.581288][T29468] bridge0: port 6(veth1_macvtap) entered blocking state [ 818.622610][T29468] bridge0: port 6(veth1_macvtap) entered disabled state [ 818.666539][T29468] veth1_macvtap: entered allmulticast mode [ 818.701132][T29468] veth1_macvtap: left allmulticast mode [ 821.111845][T29501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 821.118338][T29501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 821.808280][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11038'. [ 823.343613][T29540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 823.350189][T29540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 825.640967][T29578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11055'. [ 828.668586][T29653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11086'. [ 829.316737][T29673] NFSD: Failed to start, no listeners configured. [ 829.792557][T29680] NFSD: Failed to start, no listeners configured. [ 831.163154][T29715] NFSD: Failed to start, no listeners configured. [ 832.644205][T29751] NFSD: Failed to start, no listeners configured. [ 834.160999][T29780] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.198383][T29780] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.636839][T29788] NFSD: Failed to start, no listeners configured. [ 839.422675][T29876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11181'. [ 845.805058][ T9866] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 845.805094][ T9866] Bluetooth: hci1: unexpected event for opcode 0x647c [ 846.253681][T30033] netlink: 206 bytes leftover after parsing attributes in process `syz.2.11246'. [ 847.562744][T30048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 847.569235][T30048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 847.762675][ T9866] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 847.762709][ T9866] Bluetooth: hci0: unexpected event for opcode 0x647c [ 848.043412][T30061] netlink: 206 bytes leftover after parsing attributes in process `syz.1.11249'. [ 848.372805][T30072] netlink: 186 bytes leftover after parsing attributes in process `syz.2.11253'. [ 848.887723][T30082] FAULT_INJECTION: forcing a failure. [ 848.887723][T30082] name failslab, interval 1, probability 0, space 0, times 0 [ 848.947236][T30082] CPU: 0 UID: 0 PID: 30082 Comm: syz.4.11266 Tainted: G U L syzkaller #0 PREEMPT(full) [ 848.947269][T30082] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 848.947277][T30082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.947287][T30082] Call Trace: [ 848.947297][T30082] [ 848.947304][T30082] dump_stack_lvl+0x100/0x190 [ 848.947330][T30082] should_fail_ex.cold+0x5/0xa [ 848.947350][T30082] should_failslab+0xc2/0x120 [ 848.947376][T30082] kmem_cache_alloc_noprof+0x91/0x6a0 [ 848.947400][T30082] ? dup_fd+0x4d/0xd10 [ 848.947421][T30082] dup_fd+0x4d/0xd10 [ 848.947438][T30082] ? __pfx_get_nodes+0x10/0x10 [ 848.947468][T30082] __x64_sys_close_range+0x405/0x5d0 [ 848.947491][T30082] ? __pfx___x64_sys_close_range+0x10/0x10 [ 848.947518][T30082] do_syscall_64+0x115/0x840 [ 848.947543][T30082] ? clear_bhb_loop+0x70/0xc0 [ 848.947564][T30082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.947582][T30082] RIP: 0033:0x7f7662d9e0d9 [ 848.947598][T30082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.947615][T30082] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 848.947632][T30082] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 848.947644][T30082] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 848.947655][T30082] RBP: 00007f7662e35024 R08: 0000000000000000 R09: 0000000000000000 [ 848.947666][T30082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.947676][T30082] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 848.947699][T30082] [ 849.501200][ T9866] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 849.501234][ T9866] Bluetooth: hci2: unexpected event for opcode 0x647c [ 849.681676][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11270'. [ 851.242718][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11274'. [ 851.628668][ T9866] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 851.628705][ T9866] Bluetooth: hci2: unexpected event for opcode 0x647c [ 852.430675][T30159] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.11289'. [ 854.951840][T30209] netlink: 29 bytes leftover after parsing attributes in process `syz.0.11308'. [ 855.145986][T30213] FAULT_INJECTION: forcing a failure. [ 855.145986][T30213] name failslab, interval 1, probability 0, space 0, times 0 [ 855.192982][T30213] CPU: 0 UID: 0 PID: 30213 Comm: syz.0.11311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.193017][T30213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.193024][T30213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.193034][T30213] Call Trace: [ 855.193041][T30213] [ 855.193048][T30213] dump_stack_lvl+0x100/0x190 [ 855.193077][T30213] should_fail_ex.cold+0x5/0xa [ 855.193098][T30213] should_failslab+0xc2/0x120 [ 855.193125][T30213] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 855.193156][T30213] ? __d_alloc+0x35/0xa50 [ 855.193182][T30213] __d_alloc+0x35/0xa50 [ 855.193205][T30213] d_alloc+0x4a/0x1e0 [ 855.193231][T30213] lookup_one_qstr_excl+0x171/0x250 [ 855.193254][T30213] ? mnt_want_write+0x161/0x410 [ 855.193283][T30213] filename_create+0x1cf/0x400 [ 855.193310][T30213] ? __pfx_filename_create+0x10/0x10 [ 855.193347][T30213] filename_mknodat+0x190/0x7f0 [ 855.193371][T30213] ? __pfx_filename_mknodat+0x10/0x10 [ 855.193390][T30213] ? strncpy_from_user+0x19d/0x2d0 [ 855.193421][T30213] ? do_getname+0x191/0x390 [ 855.193447][T30213] __x64_sys_mknod+0x8f/0xc0 [ 855.193467][T30213] do_syscall_64+0x115/0x840 [ 855.193492][T30213] ? clear_bhb_loop+0x70/0xc0 [ 855.193514][T30213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.193532][T30213] RIP: 0033:0x7fcf4159e0d9 [ 855.193547][T30213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.193564][T30213] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 855.193583][T30213] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 855.193594][T30213] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 855.193605][T30213] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 855.193616][T30213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.193626][T30213] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 855.193649][T30213] [ 856.118518][T30234] netlink: 29 bytes leftover after parsing attributes in process `syz.4.11320'. [ 856.437004][T30243] FAULT_INJECTION: forcing a failure. [ 856.437004][T30243] name failslab, interval 1, probability 0, space 0, times 0 [ 856.491980][T30243] CPU: 0 UID: 0 PID: 30243 Comm: syz.4.11333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 856.492014][T30243] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 856.492021][T30243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.492032][T30243] Call Trace: [ 856.492039][T30243] [ 856.492046][T30243] dump_stack_lvl+0x100/0x190 [ 856.492072][T30243] should_fail_ex.cold+0x5/0xa [ 856.492093][T30243] should_failslab+0xc2/0x120 [ 856.492119][T30243] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 856.492151][T30243] ? __d_alloc+0x35/0xa50 [ 856.492175][T30243] __d_alloc+0x35/0xa50 [ 856.492197][T30243] d_alloc+0x4a/0x1e0 [ 856.492219][T30243] lookup_one_qstr_excl+0x171/0x250 [ 856.492243][T30243] ? mnt_want_write+0x161/0x410 [ 856.492272][T30243] filename_create+0x1cf/0x400 [ 856.492300][T30243] ? __pfx_filename_create+0x10/0x10 [ 856.492335][T30243] filename_mknodat+0x190/0x7f0 [ 856.492359][T30243] ? __pfx_filename_mknodat+0x10/0x10 [ 856.492378][T30243] ? strncpy_from_user+0x19d/0x2d0 [ 856.492406][T30243] ? do_getname+0x191/0x390 [ 856.492431][T30243] __x64_sys_mknod+0x8f/0xc0 [ 856.492451][T30243] do_syscall_64+0x115/0x840 [ 856.492480][T30243] ? clear_bhb_loop+0x70/0xc0 [ 856.492502][T30243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.492521][T30243] RIP: 0033:0x7f7662d9e0d9 [ 856.492536][T30243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.492554][T30243] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 856.492572][T30243] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 856.492584][T30243] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 856.492595][T30243] RBP: 00007f7662e35024 R08: 0000000000000000 R09: 0000000000000000 [ 856.492605][T30243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.492616][T30243] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 856.492640][T30243] [ 857.170888][T30258] vivid-008: ================= START STATUS ================= [ 857.228082][T30258] vivid-008: ================== END STATUS ================== [ 857.858302][T30256] syz.0.11335 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 857.972822][T30256] CPU: 0 UID: 0 PID: 30256 Comm: syz.0.11335 Tainted: G U L syzkaller #0 PREEMPT(full) [ 857.972853][T30256] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 857.972860][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.972871][T30256] Call Trace: [ 857.972877][T30256] [ 857.972884][T30256] dump_stack_lvl+0x100/0x190 [ 857.972910][T30256] dump_header+0xfb/0x606 [ 857.972931][T30256] oom_kill_process.cold+0xd/0x330 [ 857.972952][T30256] out_of_memory+0x340/0x14f0 [ 857.972976][T30256] ? __pfx_out_of_memory+0x10/0x10 [ 857.972999][T30256] mem_cgroup_out_of_memory+0xc6/0x130 [ 857.973021][T30256] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 857.973040][T30256] ? find_held_lock+0x2b/0x80 [ 857.973069][T30256] ? do_raw_spin_unlock+0x145/0x1e0 [ 857.973091][T30256] ? _raw_spin_unlock+0x28/0x50 [ 857.973117][T30256] try_charge_memcg+0x6e5/0xdf0 [ 857.973149][T30256] ? __pfx_try_charge_memcg+0x10/0x10 [ 857.973177][T30256] ? find_held_lock+0x2b/0x80 [ 857.973207][T30256] ? rcu_read_unlock+0x17/0x60 [ 857.973234][T30256] ? rcu_read_unlock+0x17/0x60 [ 857.973269][T30256] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 857.973305][T30256] ? kasan_unpoison+0x27/0x60 [ 857.973329][T30256] __kmalloc_node_track_caller_noprof+0x64f/0x830 [ 857.973356][T30256] ? find_held_lock+0x2b/0x80 [ 857.973378][T30256] ? neigh_sysctl_register+0xb4/0x660 [ 857.973458][T30256] kmemdup_noprof+0x29/0x60 [ 857.973481][T30256] neigh_sysctl_register+0xb4/0x660 [ 857.973510][T30256] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 857.973535][T30256] ? inetdev_init+0x245/0x570 [ 857.973558][T30256] ? inetdev_event+0x7fa/0x17f0 [ 857.973580][T30256] ? notifier_call_chain+0x99/0x3f0 [ 857.973608][T30256] ? setup_net+0x118/0x3a0 [ 857.973650][T30256] ? copy_net_ns+0x46f/0x7c0 [ 857.973666][T30256] ? create_new_namespaces+0x3ea/0xac0 [ 857.973685][T30256] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 857.973705][T30256] ? ksys_unshare+0x438/0xab0 [ 857.973728][T30256] ? __x64_sys_unshare+0x31/0x40 [ 857.973750][T30256] ? do_syscall_64+0x115/0x840 [ 857.973778][T30256] devinet_sysctl_register+0xb6/0x210 [ 857.973805][T30256] inetdev_init+0x2b8/0x570 [ 857.973830][T30256] inetdev_event+0x7fa/0x17f0 [ 857.973855][T30256] ? ib_netdevice_event+0xfc/0x330 [ 857.973908][T30256] ? __pfx_inetdev_event+0x10/0x10 [ 857.973934][T30256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.973964][T30256] notifier_call_chain+0x99/0x3f0 [ 857.973992][T30256] call_netdevice_notifiers_info+0xbe/0x110 [ 857.974013][T30256] register_netdevice+0x1998/0x25a0 [ 857.974045][T30256] ? __pfx_register_netdevice+0x10/0x10 [ 857.974079][T30256] __ip_tunnel_create+0x52b/0x670 [ 857.974136][T30256] ? __pfx___ip_tunnel_create+0x10/0x10 [ 857.974158][T30256] ? net_generic+0xea/0x2a0 [ 857.974223][T30256] ip_tunnel_init_net+0x230/0x780 [ 857.974254][T30256] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 857.974283][T30256] ? __kmalloc_noprof+0x343/0x820 [ 857.974308][T30256] ? __pfx_vti_init_net+0x10/0x10 [ 857.974359][T30256] vti_init_net+0x2e/0x140 [ 857.974383][T30256] ops_init+0x1e2/0x5f0 [ 857.974412][T30256] setup_net+0x118/0x3a0 [ 857.974439][T30256] ? __pfx_setup_net+0x10/0x10 [ 857.974465][T30256] ? mutex_init_lockdep+0xf1/0x120 [ 857.974488][T30256] copy_net_ns+0x46f/0x7c0 [ 857.974507][T30256] create_new_namespaces+0x3ea/0xac0 [ 857.974532][T30256] unshare_nsproxy_namespaces+0xf2/0x220 [ 857.974554][T30256] ksys_unshare+0x438/0xab0 [ 857.974579][T30256] ? __pfx_ksys_unshare+0x10/0x10 [ 857.974611][T30256] __x64_sys_unshare+0x31/0x40 [ 857.974634][T30256] do_syscall_64+0x115/0x840 [ 857.974657][T30256] ? clear_bhb_loop+0x70/0xc0 [ 857.974679][T30256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.974698][T30256] RIP: 0033:0x7fcf4159e0d9 [ 857.974714][T30256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.974731][T30256] RSP: 002b:00007fcf4240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 857.974750][T30256] RAX: ffffffffffffffda RBX: 00007fcf41825fa0 RCX: 00007fcf4159e0d9 [ 857.974762][T30256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 857.974772][T30256] RBP: 00007fcf41635024 R08: 0000000000000000 R09: 0000000000000000 [ 857.974782][T30256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.974793][T30256] R13: 00007fcf41826038 R14: 00007fcf41825fa0 R15: 00007ffeb2eca398 [ 857.974816][T30256] [ 858.412018][T30256] memory: usage 3072kB, limit 3072kB, failcnt 112966 [ 858.419925][T30256] memory+swap: usage 3796kB, limit 9007199254740988kB, failcnt 0 [ 858.429324][T30256] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 858.436440][T30256] Memory cgroup stats for /syz0: [ 858.436642][T30256] cache 0 [ 858.444525][T30256] rss 0 [ 858.447324][T30256] rss_huge 0 [ 858.450734][T30256] shmem 0 [ 858.453674][T30256] mapped_file 0 [ 858.457162][T30256] dirty 0 [ 858.460204][T30256] writeback 0 [ 858.463573][T30256] workingset_refault_anon 13421 [ 858.468480][T30256] workingset_refault_file 19002 [ 858.473344][T30256] swap 741376 [ 858.476629][T30256] swapcached 686661632 [ 858.480771][T30256] pgpgin 321564 [ 858.484241][T30256] pgpgout 344475 [ 858.488808][T30256] pgfault 481920 [ 858.492354][T30256] pgmajfault 5416 [ 858.495976][T30256] inactive_anon 4096 [ 858.500464][T30256] active_anon 8192 [ 858.504206][T30256] inactive_file 0 [ 858.507865][T30256] active_file 0 [ 858.511419][T30256] unevictable 0 [ 858.514870][T30256] hierarchical_memory_limit 3145728 [ 858.520198][T30256] hierarchical_memsw_limit 9223372036854771712 [ 858.526343][T30256] total_cache 0 [ 858.529829][T30256] total_rss 0 [ 858.533135][T30256] total_rss_huge 0 [ 858.536858][T30256] total_shmem 0 [ 858.540352][T30256] total_mapped_file 0 [ 858.544322][T30256] total_dirty 0 [ 858.547794][T30256] total_writeback 0 [ 858.551607][T30256] total_workingset_refault_anon 13421 [ 858.556968][T30256] total_workingset_refault_file 19002 [ 858.562656][T30256] total_swap 741376 [ 858.566524][T30256] total_swapcached 686661632 [ 858.571239][T30256] total_pgpgin 321564 [ 858.575234][T30256] total_pgpgout 344475 [ 858.579460][T30256] total_pgfault 481920 [ 858.583521][T30256] total_pgmajfault 5416 [ 858.587699][T30256] total_inactive_anon 4096 [ 858.593619][T30256] total_active_anon 8192 [ 858.597915][T30256] total_inactive_file 0 [ 858.602246][T30256] total_active_file 0 [ 858.606230][T30256] total_unevictable 0 [ 858.610280][T30256] anon_cost 0 [ 858.613558][T30256] file_cost 31 [ 858.616989][T30256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11335,pid=30255,uid=0 [ 858.636384][T30256] Memory cgroup out of memory: Killed process 30255 (syz.0.11335) total-vm:104564kB, anon-rss:1244kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 859.295682][T30283] ovs_: entered promiscuous mode [ 859.738596][T30298] vivid-008: ================= START STATUS ================= [ 859.838657][T30298] vivid-008: ================== END STATUS ================== [ 860.187059][T30314] ovs_: entered promiscuous mode [ 861.238120][T30338] ovs_: entered promiscuous mode [ 861.272783][T30343] vivid-008: ================= START STATUS ================= [ 861.362842][T30343] vivid-008: ================== END STATUS ================== [ 862.196562][ T5612] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 862.258442][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 862.258476][ T5612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 862.258483][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.258493][ T5612] Call Trace: [ 862.258502][ T5612] [ 862.258509][ T5612] dump_stack_lvl+0x100/0x190 [ 862.258534][ T5612] dump_header+0xfb/0x606 [ 862.258555][ T5612] oom_kill_process.cold+0xd/0x330 [ 862.258576][ T5612] out_of_memory+0x340/0x14f0 [ 862.258598][ T5612] ? __pfx_out_of_memory+0x10/0x10 [ 862.258622][ T5612] mem_cgroup_out_of_memory+0xc6/0x130 [ 862.258643][ T5612] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 862.258662][ T5612] ? find_held_lock+0x2b/0x80 [ 862.258689][ T5612] ? do_raw_spin_unlock+0x145/0x1e0 [ 862.258710][ T5612] ? _raw_spin_unlock+0x28/0x50 [ 862.258737][ T5612] try_charge_memcg+0x6e5/0xdf0 [ 862.258774][ T5612] ? __pfx_try_charge_memcg+0x10/0x10 [ 862.258799][ T5612] ? find_held_lock+0x2b/0x80 [ 862.258820][ T5612] ? rcu_read_unlock+0x17/0x60 [ 862.258846][ T5612] ? rcu_read_unlock+0x17/0x60 [ 862.258873][ T5612] ? find_held_lock+0x2b/0x80 [ 862.258895][ T5612] ? rcu_read_unlock+0x17/0x60 [ 862.258926][ T5612] charge_memcg+0x187/0x1e0 [ 862.258954][ T5612] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 862.258975][ T5612] swap_cache_alloc_folio+0x548/0xc50 [ 862.259001][ T5612] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 862.259022][ T5612] ? swap_cache_get_folio+0x28d/0x360 [ 862.259042][ T5612] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 862.259069][ T5612] swap_cache_read_folio+0x47/0x140 [ 862.259099][ T5612] swap_cluster_readahead+0x387/0x5f0 [ 862.259125][ T5612] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 862.259157][ T5612] ? __lock_acquire+0x49f/0x1a40 [ 862.259173][ T5612] ? get_vma_policy+0x23d/0x3b0 [ 862.259202][ T5612] swapin_readahead+0x159/0x1200 [ 862.259222][ T5612] ? debug_object_assert_init+0x1c4/0x310 [ 862.259257][ T5612] ? __pfx_swapin_readahead+0x10/0x10 [ 862.259283][ T5612] ? swap_table_get+0x10d/0x2c0 [ 862.259302][ T5612] ? swap_cache_get_folio+0x28d/0x360 [ 862.259323][ T5612] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 862.259342][ T5612] ? __pfx_softleaf_type+0x10/0x10 [ 862.259366][ T5612] ? do_swap_page+0xf98/0x5780 [ 862.259382][ T5612] do_swap_page+0xf98/0x5780 [ 862.259411][ T5612] ? __pfx_do_swap_page+0x10/0x10 [ 862.259429][ T5612] ? __lock_acquire+0x49f/0x1a40 [ 862.259446][ T5612] ? lockdep_hardirqs_on+0x78/0x100 [ 862.259471][ T5612] ? rcu_is_watching+0x12/0xc0 [ 862.259493][ T5612] ? __pte_offset_map+0x179/0x310 [ 862.259519][ T5612] __handle_mm_fault+0x192f/0x2a00 [ 862.259543][ T5612] ? reacquire_held_locks+0xce/0x1e0 [ 862.259560][ T5612] ? __pfx___handle_mm_fault+0x10/0x10 [ 862.259583][ T5612] ? lock_vma_under_rcu+0x17c/0x590 [ 862.259614][ T5612] handle_mm_fault+0x37b/0xa30 [ 862.259637][ T5612] do_user_addr_fault+0x5a3/0x12f0 [ 862.259668][ T5612] exc_page_fault+0x6f/0xd0 [ 862.259693][ T5612] asm_exc_page_fault+0x26/0x30 [ 862.259710][ T5612] RIP: 0033:0x7fcf4155e90e [ 862.259726][ T5612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.259743][ T5612] RSP: 002b:00007ffeb2eca678 EFLAGS: 00010246 [ 862.259758][ T5612] RAX: 0000000000000000 RBX: 00005555885fe500 RCX: 00007fcf4155e90e [ 862.259769][ T5612] RDX: 00007ffeb2eca6d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 862.259779][ T5612] RBP: 00007ffeb2eca73c R08: 0000000000000000 R09: 0000000000000000 [ 862.259789][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 862.259800][ T5612] R13: 00000000000927c0 R14: 00000000000d34ab R15: 00007ffeb2eca790 [ 862.259823][ T5612] [ 862.636934][ T5612] memory: usage 3072kB, limit 3072kB, failcnt 113876 [ 862.644714][ T5612] memory+swap: usage 3812kB, limit 9007199254740988kB, failcnt 0 [ 862.652598][ T5612] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 862.659738][ T5612] Memory cgroup stats for /syz0: [ 862.659943][ T5612] cache 0 [ 862.669181][ T5612] rss 0 [ 862.671942][ T5612] rss_huge 0 [ 862.675129][ T5612] shmem 0 [ 862.678243][ T5612] mapped_file 0 [ 862.681759][ T5612] dirty 0 [ 862.684686][ T5612] writeback 0 [ 862.688088][ T5612] workingset_refault_anon 13487 [ 862.692927][ T5612] workingset_refault_file 19002 [ 862.697795][ T5612] swap 757760 [ 862.701100][ T5612] swapcached 691240960 [ 862.705183][ T5612] pgpgin 322958 [ 862.708667][ T5612] pgpgout 345871 [ 862.712201][ T5612] pgfault 483975 [ 862.715750][ T5612] pgmajfault 5465 [ 862.719398][ T5612] inactive_anon 0 [ 862.723019][ T5612] active_anon 4096 [ 862.726760][ T5612] inactive_file 0 [ 862.730385][ T5612] active_file 0 [ 862.733830][ T5612] unevictable 0 [ 862.737320][ T5612] hierarchical_memory_limit 3145728 [ 862.742509][ T5612] hierarchical_memsw_limit 9223372036854771712 [ 862.748714][ T5612] total_cache 0 [ 862.752195][ T5612] total_rss 0 [ 862.755487][ T5612] total_rss_huge 0 [ 862.759254][ T5612] total_shmem 0 [ 862.762714][ T5612] total_mapped_file 0 [ 862.768050][ T5612] total_dirty 0 [ 862.771515][ T5612] total_writeback 0 [ 862.775311][ T5612] total_workingset_refault_anon 13487 [ 862.780800][ T5612] total_workingset_refault_file 19002 [ 862.786198][ T5612] total_swap 757760 [ 862.789998][ T5612] total_swapcached 691240960 [ 862.794576][ T5612] total_pgpgin 322958 [ 862.798570][ T5612] total_pgpgout 345871 [ 862.802635][ T5612] total_pgfault 483975 [ 862.806730][ T5612] total_pgmajfault 5465 [ 862.810894][ T5612] total_inactive_anon 0 [ 862.815036][ T5612] total_active_anon 4096 [ 862.819299][ T5612] total_inactive_file 0 [ 862.823443][ T5612] total_active_file 0 [ 862.827572][ T5612] total_unevictable 0 [ 862.831545][ T5612] anon_cost 0 [ 862.834818][ T5612] file_cost 31 [ 862.838305][ T5612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11366,pid=30353,uid=0 [ 862.857904][ T5612] Memory cgroup out of memory: Killed process 30353 (syz.0.11366) total-vm:104564kB, anon-rss:1244kB, file-rss:21620kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 863.827464][T30381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11387'. [ 864.072180][T30388] openvswitch: ovs_: Dropping previously announced user features [ 864.235935][T30393] vivid-008: ================= START STATUS ================= [ 864.327870][T30393] vivid-008: ================== END STATUS ================== [ 864.558257][T30401] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5612] was attempted by ""[30401] [ 865.242340][T30418] openvswitch: ovs_: Dropping previously announced user features [ 866.272245][T30453] FAULT_INJECTION: forcing a failure. [ 866.272245][T30453] name failslab, interval 1, probability 0, space 0, times 0 [ 866.342343][T30453] CPU: 0 UID: 0 PID: 30453 Comm: syz.2.11408 Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.342377][T30453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.342385][T30453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.342396][T30453] Call Trace: [ 866.342402][T30453] [ 866.342409][T30453] dump_stack_lvl+0x100/0x190 [ 866.342435][T30453] should_fail_ex.cold+0x5/0xa [ 866.342457][T30453] should_failslab+0xc2/0x120 [ 866.342485][T30453] kmem_cache_alloc_noprof+0x91/0x6a0 [ 866.342517][T30453] ? anon_vma_clone+0x2ba/0xcd0 [ 866.342552][T30453] anon_vma_clone+0x2ba/0xcd0 [ 866.342587][T30453] __split_vma+0x51f/0xda0 [ 866.342608][T30453] ? __pfx___split_vma+0x10/0x10 [ 866.342625][T30453] ? vma_link+0x5ee/0x8d0 [ 866.342654][T30453] vms_gather_munmap_vmas+0x1d2/0x1720 [ 866.342679][T30453] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 866.342700][T30453] ? alloc_new_pud+0x217/0x320 [ 866.342722][T30453] ? get_old_pud+0xd8/0x360 [ 866.342743][T30453] ? move_page_tables+0x11c/0x4610 [ 866.342764][T30453] ? __pfx_copy_vma+0x10/0x10 [ 866.342791][T30453] do_vmi_align_munmap+0x287/0x5f0 [ 866.342814][T30453] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 866.342863][T30453] do_vmi_munmap+0x1f8/0x3e0 [ 866.342886][T30453] move_vma+0xe5b/0x1920 [ 866.342910][T30453] ? __pfx_move_vma+0x10/0x10 [ 866.342931][T30453] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 866.342966][T30453] ? vrm_set_new_addr+0x204/0x290 [ 866.342987][T30453] mremap_to+0x234/0x4c0 [ 866.343006][T30453] ? mas_walk+0x6ef/0x9b0 [ 866.343038][T30453] ? __pfx_mremap_to+0x10/0x10 [ 866.343057][T30453] ? check_prep_vma+0x912/0xe60 [ 866.343081][T30453] __do_sys_mremap+0x88c/0x1850 [ 866.343108][T30453] ? __pfx___do_sys_mremap+0x10/0x10 [ 866.343128][T30453] ? ksys_write+0x190/0x250 [ 866.343150][T30453] ? __pfx_do_futex+0x10/0x10 [ 866.343181][T30453] ? __x64_sys_futex+0x34f/0x4d0 [ 866.343224][T30453] do_syscall_64+0x115/0x840 [ 866.343250][T30453] ? clear_bhb_loop+0x70/0xc0 [ 866.343274][T30453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.343293][T30453] RIP: 0033:0x7fdf5f39e0d9 [ 866.343309][T30453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.343328][T30453] RSP: 002b:00007fdf602fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 866.343347][T30453] RAX: ffffffffffffffda RBX: 00007fdf5f625fa0 RCX: 00007fdf5f39e0d9 [ 866.343359][T30453] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 866.343369][T30453] RBP: 00007fdf5f435024 R08: 0000000100000000 R09: 0000000000000000 [ 866.343380][T30453] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 866.343391][T30453] R13: 00007fdf5f626038 R14: 00007fdf5f625fa0 R15: 00007ffdb9577718 [ 866.343414][T30453] [ 866.685100][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.691462][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.447082][T30679] bridge0: port 4(dummy0) entered blocking state [ 873.475982][T30679] bridge0: port 4(dummy0) entered disabled state [ 873.528891][T30679] dummy0: entered allmulticast mode [ 873.556012][T30679] dummy0: entered promiscuous mode [ 873.577033][T30679] bridge0: port 4(dummy0) entered blocking state [ 873.583526][T30679] bridge0: port 4(dummy0) entered forwarding state [ 874.010303][T30693] dlm: non-version read from control device 2147479540 [ 874.676582][T30714] bridge0: port 4(dummy0) entered blocking state [ 874.711662][T30714] bridge0: port 4(dummy0) entered disabled state [ 874.739101][T30714] dummy0: entered allmulticast mode [ 874.766079][T30714] dummy0: entered promiscuous mode [ 874.795286][T30714] bridge0: port 4(dummy0) entered blocking state [ 874.801759][T30714] bridge0: port 4(dummy0) entered listening state [ 875.189454][T30726] dlm: non-version read from control device 2147479540 [ 876.378363][T30772] vivid-008: ================= START STATUS ================= [ 876.470578][T30772] vivid-008: ================== END STATUS ================== [ 877.105061][ T5612] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 877.177614][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 877.177650][ T5612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 877.177657][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.177667][ T5612] Call Trace: [ 877.177673][ T5612] [ 877.177680][ T5612] dump_stack_lvl+0x100/0x190 [ 877.177705][ T5612] dump_header+0xfb/0x606 [ 877.177725][ T5612] oom_kill_process.cold+0xd/0x330 [ 877.177746][ T5612] out_of_memory+0x340/0x14f0 [ 877.177769][ T5612] ? __pfx_out_of_memory+0x10/0x10 [ 877.177792][ T5612] mem_cgroup_out_of_memory+0xc6/0x130 [ 877.177813][ T5612] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 877.177833][ T5612] ? find_held_lock+0x2b/0x80 [ 877.177859][ T5612] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.177880][ T5612] ? _raw_spin_unlock+0x28/0x50 [ 877.177905][ T5612] try_charge_memcg+0x6e5/0xdf0 [ 877.177935][ T5612] ? __pfx_try_charge_memcg+0x10/0x10 [ 877.177967][ T5612] ? find_held_lock+0x2b/0x80 [ 877.177988][ T5612] ? rcu_read_unlock+0x17/0x60 [ 877.178015][ T5612] ? rcu_read_unlock+0x17/0x60 [ 877.178041][ T5612] ? find_held_lock+0x2b/0x80 [ 877.178063][ T5612] ? rcu_read_unlock+0x17/0x60 [ 877.178095][ T5612] charge_memcg+0x187/0x1e0 [ 877.178122][ T5612] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 877.178143][ T5612] swap_cache_alloc_folio+0x548/0xc50 [ 877.178170][ T5612] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 877.178191][ T5612] ? swap_cache_get_folio+0x28d/0x360 [ 877.178211][ T5612] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 877.178230][ T5612] ? lockdep_hardirqs_on+0x78/0x100 [ 877.178261][ T5612] swap_cache_read_folio+0x47/0x140 [ 877.178284][ T5612] swap_cluster_readahead+0x479/0x5f0 [ 877.178310][ T5612] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 877.178331][ T5612] ? debug_object_activate+0x343/0x4b0 [ 877.178361][ T5612] ? lock_acquire+0x1b9/0x370 [ 877.178382][ T5612] ? __lock_acquire+0x49f/0x1a40 [ 877.178398][ T5612] ? get_vma_policy+0x23d/0x3b0 [ 877.178427][ T5612] swapin_readahead+0x159/0x1200 [ 877.178447][ T5612] ? lapic_next_event+0x10/0x20 [ 877.178476][ T5612] ? __pfx_swapin_readahead+0x10/0x10 [ 877.178502][ T5612] ? swap_table_get+0x10d/0x2c0 [ 877.178522][ T5612] ? swap_cache_get_folio+0x28d/0x360 [ 877.178542][ T5612] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 877.178562][ T5612] ? __pfx_softleaf_type+0x10/0x10 [ 877.178586][ T5612] ? do_swap_page+0xf98/0x5780 [ 877.178603][ T5612] do_swap_page+0xf98/0x5780 [ 877.178631][ T5612] ? __pfx_do_swap_page+0x10/0x10 [ 877.178649][ T5612] ? __lock_acquire+0x49f/0x1a40 [ 877.178666][ T5612] ? lockdep_hardirqs_on+0x78/0x100 [ 877.178691][ T5612] ? rcu_is_watching+0x12/0xc0 [ 877.178713][ T5612] ? __pte_offset_map+0x179/0x310 [ 877.178739][ T5612] __handle_mm_fault+0x192f/0x2a00 [ 877.178762][ T5612] ? reacquire_held_locks+0xce/0x1e0 [ 877.178779][ T5612] ? __pfx___handle_mm_fault+0x10/0x10 [ 877.178802][ T5612] ? lock_vma_under_rcu+0x17c/0x590 [ 877.178833][ T5612] handle_mm_fault+0x37b/0xa30 [ 877.178856][ T5612] do_user_addr_fault+0x5a3/0x12f0 [ 877.178888][ T5612] exc_page_fault+0x6f/0xd0 [ 877.178912][ T5612] asm_exc_page_fault+0x26/0x30 [ 877.178929][ T5612] RIP: 0033:0x7fcf4155e90e [ 877.178944][ T5612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 877.178967][ T5612] RSP: 002b:00007ffeb2eca678 EFLAGS: 00010246 [ 877.178982][ T5612] RAX: 0000000000000000 RBX: 00005555885fe500 RCX: 00007fcf4155e90e [ 877.178993][ T5612] RDX: 00007ffeb2eca6d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.179003][ T5612] RBP: 00007ffeb2eca73c R08: 0000000000000000 R09: 0000000000000000 [ 877.179014][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 877.179024][ T5612] R13: 00000000000927c0 R14: 00000000000d6fac R15: 00007ffeb2eca790 [ 877.179046][ T5612] [ 877.561589][ T5612] memory: usage 3068kB, limit 3072kB, failcnt 115807 [ 877.568409][ T5612] memory+swap: usage 3812kB, limit 9007199254740988kB, failcnt 0 [ 877.576242][ T5612] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 877.583387][ T5612] Memory cgroup stats for /syz0: [ 877.583502][ T5612] cache 0 [ 877.591848][ T5612] rss 0 [ 877.594607][ T5612] rss_huge 0 [ 877.597809][ T5612] shmem 0 [ 877.600894][ T5612] mapped_file 0 [ 877.604376][ T5612] dirty 0 [ 877.607317][ T5612] writeback 0 [ 877.610653][ T5612] workingset_refault_anon 13880 [ 877.615504][ T5612] workingset_refault_file 19002 [ 877.620476][ T5612] swap 753664 [ 877.623762][ T5612] swapcached 697090048 [ 877.627910][ T5612] pgpgin 328450 [ 877.631782][ T5612] pgpgout 351362 [ 877.635337][ T5612] pgfault 492976 [ 877.640186][ T5612] pgmajfault 5704 [ 877.643843][ T5612] inactive_anon 4096 [ 877.647743][ T5612] active_anon 4096 [ 877.651498][ T5612] inactive_file 0 [ 877.655125][ T5612] active_file 0 [ 877.658735][ T5612] unevictable 0 [ 877.662249][ T5612] hierarchical_memory_limit 3145728 [ 877.667452][ T5612] hierarchical_memsw_limit 9223372036854771712 [ 877.673670][ T5612] total_cache 0 [ 877.677139][ T5612] total_rss 0 [ 877.680478][ T5612] total_rss_huge 0 [ 877.684199][ T5612] total_shmem 0 [ 877.687679][ T5612] total_mapped_file 0 [ 877.691702][ T5612] total_dirty 0 [ 877.695172][ T5612] total_writeback 0 [ 877.699011][ T5612] total_workingset_refault_anon 13880 [ 877.704389][ T5612] total_workingset_refault_file 19002 [ 877.709882][ T5612] total_swap 753664 [ 877.713700][ T5612] total_swapcached 697090048 [ 877.718310][ T5612] total_pgpgin 328450 [ 877.722283][ T5612] total_pgpgout 351362 [ 877.726357][ T5612] total_pgfault 492976 [ 877.730535][ T5612] total_pgmajfault 5704 [ 877.734694][ T5612] total_inactive_anon 4096 [ 877.739148][ T5612] total_active_anon 4096 [ 877.744670][ T5612] total_inactive_file 0 [ 877.748894][ T5612] total_active_file 0 [ 877.752958][ T5612] total_unevictable 0 [ 877.756932][ T5612] anon_cost 0 [ 877.760241][ T5612] file_cost 31 [ 877.763606][ T5612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11554,pid=30766,uid=0 [ 877.778640][ T5612] Memory cgroup out of memory: Killed process 30766 (syz.0.11554) total-vm:104564kB, anon-rss:1244kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 880.426497][T30848] mac80211.ieee80211_default_rc_algo: string parameter too long [ 880.649662][T30854] netlink: 21 bytes leftover after parsing attributes in process `syz.2.11590'. [ 880.735279][T30858] FAULT_INJECTION: forcing a failure. [ 880.735279][T30858] name failslab, interval 1, probability 0, space 0, times 0 [ 880.805185][T30858] CPU: 0 UID: 0 PID: 30858 Comm: syz.4.11592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 880.805219][T30858] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 880.805225][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.805237][T30858] Call Trace: [ 880.805243][T30858] [ 880.805250][T30858] dump_stack_lvl+0x100/0x190 [ 880.805276][T30858] should_fail_ex.cold+0x5/0xa [ 880.805296][T30858] should_failslab+0xc2/0x120 [ 880.805322][T30858] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 880.805345][T30858] ? lockdep_hardirqs_on+0x78/0x100 [ 880.805371][T30858] ? sock_alloc_inode+0x26/0x2c0 [ 880.805392][T30858] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.805411][T30858] sock_alloc_inode+0x26/0x2c0 [ 880.805427][T30858] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.805443][T30858] alloc_inode+0x68/0x250 [ 880.805466][T30858] sock_alloc+0x44/0x280 [ 880.805492][T30858] ? security_socket_create+0x7f/0x250 [ 880.805513][T30858] __sock_create+0xc2/0x860 [ 880.805536][T30858] smc_create_clcsk+0x37/0xd0 [ 880.805561][T30858] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 880.805579][T30858] inet6_create+0xb1a/0x12b0 [ 880.805604][T30858] ? inet6_create+0x7f/0x12b0 [ 880.805627][T30858] __sock_create+0x339/0x860 [ 880.805650][T30858] __sys_socket+0x14d/0x260 [ 880.805671][T30858] ? __pfx___sys_socket+0x10/0x10 [ 880.805697][T30858] __x64_sys_socket+0x72/0xb0 [ 880.805716][T30858] ? lockdep_hardirqs_on+0x78/0x100 [ 880.805740][T30858] do_syscall_64+0x115/0x840 [ 880.805767][T30858] ? clear_bhb_loop+0x70/0xc0 [ 880.805789][T30858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.805807][T30858] RIP: 0033:0x7f7662d9e0d9 [ 880.805822][T30858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.805840][T30858] RSP: 002b:00007f7663d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 880.805858][T30858] RAX: ffffffffffffffda RBX: 00007f7663025fa0 RCX: 00007f7662d9e0d9 [ 880.805869][T30858] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 880.805880][T30858] RBP: 00007f7662e35024 R08: 0000000000000000 R09: 0000000000000000 [ 880.805890][T30858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.805900][T30858] R13: 00007f7663026038 R14: 00007f7663025fa0 R15: 00007fff4db608d8 [ 880.805931][T30858] [ 880.805949][T30858] socket: no more sockets [ 881.935708][T30878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11610'. [ 882.233779][T30887] netlink: 21 bytes leftover after parsing attributes in process `syz.1.11604'. [ 883.490780][T30915] mac80211.ieee80211_default_rc_algo: string parameter too long [ 884.696198][T30938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11627'. [ 884.731054][T30939] mac80211.ieee80211_default_rc_algo: string parameter too long [ 886.212154][T30973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11639'. [ 887.002910][T31000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11656'. [ 887.697727][T31020] input: f as /devices/virtual/input/input27 [ 888.705798][T31050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11679'. [ 889.191880][T31060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11693'. [ 890.203955][ C0] bridge0: port 4(dummy0) entered learning state [ 905.484910][ C0] bridge0: port 4(dummy0) entered forwarding state [ 905.491465][ C0] bridge0: topology change detected, propagating [ 927.879409][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.890774][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.132544][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 994.139566][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5613/1:b..l [ 994.147998][ C0] rcu: (detected by 0, t=10502 jiffies, g=307877, q=458 ncpus=1) [ 994.155795][ C0] task:syz-executor state:R running task stack:22736 pid:5613 tgid:5613 ppid:5608 task_flags:0x400140 flags:0x00080000 [ 994.170279][ C0] Call Trace: [ 994.173669][ C0] [ 994.176598][ C0] __schedule+0x125c/0x6730 [ 994.181118][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 994.187366][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 994.192582][ C0] ? __pfx___schedule+0x10/0x10 [ 994.197434][ C0] ? rcu_is_watching+0x12/0xc0 [ 994.202204][ C0] preempt_schedule_irq+0x50/0x90 [ 994.207231][ C0] irqentry_exit+0x205/0xa00 [ 994.211826][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 994.217821][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 994.223459][ C0] Code: ff ff ff ff 65 0f c1 15 b9 04 ab 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e9 17 42 03 00 31 c0 [ 994.243065][ C0] RSP: 0018:ffffc900047af7e0 EFLAGS: 00000292 [ 994.249129][ C0] RAX: 0000000000000001 RBX: ffffffff8ebe8000 RCX: 0000000000000001 [ 994.257094][ C0] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 994.265058][ C0] RBP: ffff8880339dbe00 R08: 0000000000000006 R09: 0000000000001000 [ 994.273025][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 994.280992][ C0] R13: 0000000000000246 R14: ffff8880339dc9a0 R15: 0000000000000000 [ 994.288971][ C0] lookup_page_ext+0x6e/0x100 [ 994.293652][ C0] __update_page_owner_free_handle.isra.0+0xe6/0x4b0 [ 994.300330][ C0] ? page_ext_put+0x3e/0xd0 [ 994.304852][ C0] __reset_page_owner+0x93/0x190 [ 994.309792][ C0] free_pages_prepare+0x586/0xd80 [ 994.314824][ C0] __free_contig_range_common+0x14f/0x250 [ 994.320559][ C0] free_pages_bulk+0x12a/0x200 [ 994.325339][ C0] vm_area_free_pages+0xad/0x2b0 [ 994.330294][ C0] vfree+0x107/0x750 [ 994.334193][ C0] ? _copy_to_user+0xaf/0xd0 [ 994.338837][ C0] __do_replace+0x77a/0x980 [ 994.343364][ C0] ? __pfx___do_replace+0x10/0x10 [ 994.348414][ C0] do_ipt_set_ctl+0x95b/0xbc0 [ 994.353118][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 994.358699][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 994.364256][ C0] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 994.369464][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 994.375098][ C0] ? sockopt_release_sock+0x5c/0x70 [ 994.380299][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 994.386288][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 994.391848][ C0] nf_setsockopt+0x8d/0xf0 [ 994.396335][ C0] ip_setsockopt+0xcb/0xf0 [ 994.400899][ C0] tcp_setsockopt+0xa7/0x100 [ 994.405500][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 994.411831][ C0] do_sock_setsockopt+0xf3/0x1d0 [ 994.416784][ C0] __sys_setsockopt+0x119/0x190 [ 994.421645][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 994.426769][ C0] ? do_syscall_64+0x90/0x840 [ 994.431483][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 994.436721][ C0] do_syscall_64+0x115/0x840 [ 994.441327][ C0] ? clear_bhb_loop+0x70/0xc0 [ 994.446025][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.452103][ C0] RIP: 0033:0x7fb06039f91a [ 994.456526][ C0] RSP: 002b:00007ffe826a5b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 994.464935][ C0] RAX: ffffffffffffffda RBX: 00007ffe826a5c00 RCX: 00007fb06039f91a [ 994.472913][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 994.480877][ C0] RBP: 0000000000000003 R08: 00000000000002d8 R09: 0000000000000000 [ 994.488855][ C0] R10: 00007fb0605f1b20 R11: 0000000000000206 R12: 00007fb0605f1ac0 [ 994.496821][ C0] R13: 00007ffe826a5b9c R14: 0000000000000000 R15: 00007fb0605f2180 [ 994.504799][ C0] [ 994.507834][ C0] rcu: rcu_preempt kthread starved for 854 jiffies! g307877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 994.518949][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 994.528909][ C0] rcu: RCU grace-period kthread stack dump: [ 994.534787][ C0] task:rcu_preempt state:R running task stack:28840 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 994.548274][ C0] Call Trace: [ 994.551550][ C0] [ 994.554493][ C0] __schedule+0x125c/0x6730 [ 994.559011][ C0] ? __pfx___schedule+0x10/0x10 [ 994.563863][ C0] ? find_held_lock+0x2b/0x80 [ 994.568542][ C0] ? schedule+0x225/0x2c0 [ 994.572872][ C0] schedule+0xdd/0x2c0 [ 994.576941][ C0] schedule_timeout+0x127/0x280 [ 994.581789][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 994.587158][ C0] ? __pfx_process_timeout+0x10/0x10 [ 994.592446][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 994.598250][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 994.603716][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 994.608482][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 994.613786][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 994.618752][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 994.623968][ C0] ? rcu_is_watching+0x12/0xc0 [ 994.628739][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 994.634551][ C0] rcu_gp_kthread+0x179/0x230 [ 994.639236][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.644440][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 994.650252][ C0] ? __kthread_parkme+0x18c/0x230 [ 994.655303][ C0] ? kthread+0x13a/0x450 [ 994.659574][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.664795][ C0] kthread+0x370/0x450 [ 994.668878][ C0] ? __pfx_kthread+0x10/0x10 [ 994.673480][ C0] ret_from_fork+0x72b/0xd50 [ 994.678084][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 994.683202][ C0] ? __switch_to+0x800/0x10f0 [ 994.687876][ C0] ? __switch_to_asm+0x39/0x70 [ 994.692646][ C0] ? __pfx_kthread+0x10/0x10 [ 994.697252][ C0] ret_from_fork_asm+0x1a/0x30 [ 994.702025][ C0] [ 994.705039][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 994.711360][ C0] CPU: 0 UID: 0 PID: 3217 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 994.722657][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 994.727848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 994.737901][ C0] Workqueue: bat_events batadv_tt_purge [ 994.743517][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x35/0x70 [ 994.749680][ C0] Code: 48 8b 34 24 65 48 8b 15 61 00 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 91 84 b1 09 8b 82 24 17 00 00 <85> c0 74 f1 8b 82 f8 16 00 00 83 f8 02 75 e6 48 8b 8a 00 17 00 00 [ 994.769287][ C0] RSP: 0018:ffffc90000007140 EFLAGS: 00000246 [ 994.775354][ C0] RAX: 0000000000000000 RBX: ffff888159eb1000 RCX: ffffffff8a57f05d [ 994.783333][ C0] RDX: ffff888032775d00 RSI: ffffffff8a57f457 RDI: ffff888032775d00 [ 994.791297][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 994.799275][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888159eb1000 [ 994.807254][ C0] R13: 0000612e4fdd09e9 R14: ffff888159eb107f R15: 0000000000000001 [ 994.815234][ C0] FS: 0000000000000000(0000) GS:ffff888123df3000(0000) knlGS:0000000000000000 [ 994.824165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 994.830744][ C0] CR2: 00007fd4f2226bb5 CR3: 000000007761a000 CR4: 00000000003526f0 [ 994.838712][ C0] Call Trace: [ 994.841992][ C0] [ 994.844860][ C0] validate_xmit_xfrm+0x457/0x13c0 [ 994.850040][ C0] ? netdev_pick_tx+0x138/0xe50 [ 994.854957][ C0] validate_xmit_skb+0xade/0x15c0 [ 994.860011][ C0] __dev_queue_xmit+0x60c/0x4970 [ 994.864956][ C0] ? lock_acquire+0x1b9/0x370 [ 994.869637][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 994.875016][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 994.880303][ C0] ? local_clock_noinstr+0xf0/0x100 [ 994.885521][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 994.890815][ C0] ? ebt_do_table+0x1938/0x2250 [ 994.895677][ C0] ? br_nf_post_routing+0x5f9/0x16a0 [ 994.900964][ C0] ? __lock_acquire+0x49f/0x1a40 [ 994.905897][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 994.911442][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 994.916480][ C0] ? ebt_do_table+0x1ce6/0x2250 [ 994.921330][ C0] ? lock_acquire+0x1b9/0x370 [ 994.926002][ C0] ? find_held_lock+0x2b/0x80 [ 994.930679][ C0] br_dev_queue_push_xmit+0x361/0x530 [ 994.936103][ C0] br_forward_finish+0x102/0x4d0 [ 994.941044][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 994.946501][ C0] ? net_generic+0xf4/0x2a0 [ 994.950998][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 994.956889][ C0] ? __br_forward+0x326/0x970 [ 994.961567][ C0] ? __br_forward+0x326/0x970 [ 994.966245][ C0] __br_forward+0x6ba/0x970 [ 994.970755][ C0] ? __pfx___br_forward+0x10/0x10 [ 994.975793][ C0] ? __asan_memcpy+0x3c/0x60 [ 994.980402][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 994.985861][ C0] ? __skb_clone+0x570/0x760 [ 994.990453][ C0] br_flood+0x372/0x7b0 [ 994.994630][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 995.000275][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 995.006181][ C0] ? find_held_lock+0x2b/0x80 [ 995.010867][ C0] ? net_generic+0xea/0x2a0 [ 995.015374][ C0] ? net_generic+0xea/0x2a0 [ 995.019884][ C0] ? net_generic+0xf4/0x2a0 [ 995.024387][ C0] ? br_nf_pre_routing+0x771/0x1560 [ 995.029587][ C0] br_handle_frame+0x97f/0x1540 [ 995.034461][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 995.039769][ C0] ? do_softirq+0xac/0xe0 [ 995.044102][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 995.049399][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 995.054963][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 995.060874][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 995.066168][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 995.072876][ C0] ? kfree_skbmem+0x19a/0x210 [ 995.077569][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 995.084766][ C0] ? kasan_quarantine_put+0x104/0x240 [ 995.090141][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 995.095343][ C0] ? kfree_skbmem+0x19a/0x210 [ 995.100015][ C0] ? kmem_cache_free+0x127/0x6b0 [ 995.104950][ C0] ? skb_release_data+0x6ca/0x8e0 [ 995.109995][ C0] ? kfree_skbmem+0x19f/0x210 [ 995.114674][ C0] ? __lock_acquire+0x49f/0x1a40 [ 995.119623][ C0] ? process_backlog+0x32a/0x1580 [ 995.124649][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 995.130465][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 995.136887][ C0] ? lock_acquire+0x1b9/0x370 [ 995.141561][ C0] ? process_backlog+0x32a/0x1580 [ 995.146586][ C0] ? process_backlog+0x32a/0x1580 [ 995.151630][ C0] __netif_receive_skb+0x1f/0x120 [ 995.156659][ C0] process_backlog+0x37a/0x1580 [ 995.161515][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 995.166888][ C0] net_rx_action+0xa40/0xf20 [ 995.171483][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 995.176595][ C0] ? mark_held_locks+0x40/0x70 [ 995.181374][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 995.186573][ C0] ? tmigr_handle_remote+0x132/0x380 [ 995.191866][ C0] ? run_timer_base+0x121/0x190 [ 995.196718][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 995.201921][ C0] handle_softirqs+0x1ea/0x9b0 [ 995.206685][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 995.211969][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 995.217281][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 995.222940][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 995.228411][ C0] do_softirq+0xac/0xe0 [ 995.232575][ C0] [ 995.235502][ C0] [ 995.238441][ C0] __local_bh_enable_ip+0xf8/0x120 [ 995.243550][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 995.248833][ C0] ? look_up_lock_class+0x55/0x120 [ 995.253947][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 995.259749][ C0] batadv_tt_purge+0x8b/0xbd0 [ 995.264420][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 995.270226][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 995.275520][ C0] ? rcu_is_watching+0x12/0xc0 [ 995.280289][ C0] process_one_work+0xa23/0x1940 [ 995.285234][ C0] ? __pfx_process_one_work+0x10/0x10 [ 995.290617][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 995.295898][ C0] rescuer_thread+0x905/0x14a0 [ 995.300671][ C0] ? rescuer_thread+0x240/0x14a0 [ 995.305625][ C0] ? rescuer_thread+0x118/0x14a0 [ 995.310562][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 995.315761][ C0] ? __kthread_parkme+0x18c/0x230 [ 995.320785][ C0] ? kthread+0x13a/0x450 [ 995.325026][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 995.330223][ C0] kthread+0x370/0x450 [ 995.334295][ C0] ? __pfx_kthread+0x10/0x10 [ 995.338884][ C0] ret_from_fork+0x72b/0xd50 [ 995.343477][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 995.348584][ C0] ? __switch_to+0x800/0x10f0 [ 995.353257][ C0] ? __switch_to_asm+0x39/0x70 [ 995.358039][ C0] ? __pfx_kthread+0x10/0x10 [ 995.362630][ C0] ret_from_fork_asm+0x1a/0x30 [ 995.367409][ C0] [ 995.557005][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.571588][ T1306] ieee802154 phy1 wpan1: encryption failed: -22