last executing test programs: 10m53.533466815s ago: executing program 3 (id=2061): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0xc0304d18, 0x8) 10m53.306833545s ago: executing program 3 (id=2065): openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 10m53.151984211s ago: executing program 3 (id=2069): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 10m52.932033791s ago: executing program 3 (id=2072): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) preadv2$auto(r0, &(0x7f00000011c0)={0x0, 0x8}, 0x10, 0x2, 0x3, 0xa2) 10m52.819842269s ago: executing program 3 (id=2074): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 10m51.860543688s ago: executing program 3 (id=2084): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x29, 0xd1, 0x0, 0x14) 10m51.432798454s ago: executing program 32 (id=2084): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x29, 0xd1, 0x0, 0x14) 2.901250511s ago: executing program 1 (id=10976): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) 2.721414186s ago: executing program 1 (id=10977): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(r0, 0x401, 0xf) 2.720303092s ago: executing program 4 (id=10978): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x20400, 0x56e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) 2.5016106s ago: executing program 4 (id=10980): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 2.33368909s ago: executing program 4 (id=10982): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto(0x4, 0x6, 0x3, 0x5) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) 2.208497543s ago: executing program 0 (id=10983): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') 2.151614582s ago: executing program 4 (id=10984): ioperm$auto(0x2, 0x7fc, 0x200000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1) 1.944886678s ago: executing program 0 (id=10985): sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008031, 0xffffffffffffffff, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0) 1.718215264s ago: executing program 1 (id=10988): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 1.314735397s ago: executing program 0 (id=10991): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400004, 0xdb, 0x9b72, 0x7, 0x800008000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.293898286s ago: executing program 1 (id=10992): madvise$auto(0x0, 0x7ffefffffffbffff, 0xa) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1.142724625s ago: executing program 4 (id=10993): mprotect$auto(0x200000000000, 0x806121, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x8, &(0x7f0000000040), 0x1) 929.208952ms ago: executing program 4 (id=10995): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 913.682216ms ago: executing program 1 (id=10996): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x10, r0, 0x4, 0x100000000) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0xffffffff00000204, 0x2) 801.430309ms ago: executing program 0 (id=10998): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40026f33, 0x0) 642.491581ms ago: executing program 2 (id=10999): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0) 608.691286ms ago: executing program 0 (id=11000): close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)='+') select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) 562.892777ms ago: executing program 1 (id=11001): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) poll$auto(0x0, 0x5, 0xb) 442.734198ms ago: executing program 0 (id=11002): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 411.855855ms ago: executing program 2 (id=11003): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0x24, 0x0, 0x0) 330.883018ms ago: executing program 2 (id=11004): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 230.556985ms ago: executing program 2 (id=11005): madvise$auto(0x0, 0x7ffefffffffbffff, 0xa) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) 78.498266ms ago: executing program 2 (id=11006): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 0s ago: executing program 2 (id=11007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002fbd7000fddbdf250c00000014000380100003800c00058008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x34}}, 0x0) kernel console output (not intermixed with test programs): ort 2(bridge_slave_1) entered blocking state [ 526.851362][T20236] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.874292][T20236] bridge_slave_1: entered allmulticast mode [ 526.897743][T20236] bridge_slave_1: entered promiscuous mode [ 526.989399][T20236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.024662][T20236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.100247][T20236] team0: Port device team_slave_0 added [ 527.121360][T20236] team0: Port device team_slave_1 added [ 527.162289][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 527.191443][T20236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.198934][T14855] Bluetooth: hci1: command tx timeout [ 527.207174][T20236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.234280][T20236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.255511][T20236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.276782][T20236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.332225][T20236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.458846][T20236] hsr_slave_0: entered promiscuous mode [ 527.476448][T20236] hsr_slave_1: entered promiscuous mode [ 528.621850][T20236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.649491][T20236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.668032][T20236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.692903][T20236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.715281][T20236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.739718][T20236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.757040][T20236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.788268][T20236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.967995][T20236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.007670][T20236] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.044777][T14244] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.051992][T14244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.091184][T14244] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.098430][T14244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.277233][T14855] Bluetooth: hci1: command tx timeout [ 530.095871][T20236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.192807][T20236] veth0_vlan: entered promiscuous mode [ 530.224428][T20236] veth1_vlan: entered promiscuous mode [ 530.310111][T20236] veth0_macvtap: entered promiscuous mode [ 530.349394][T20236] veth1_macvtap: entered promiscuous mode [ 530.403636][T20236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.439728][T20236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.488586][T14246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.518121][T14246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.603353][T14299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.662003][T14299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.813698][T14299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.845247][T14299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.929621][T14299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.945246][T14299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.107658][T20501] usbcore.quirks: string doesn't fit in 127 chars. [ 534.979834][T20562] FAULT_INJECTION: forcing a failure. [ 534.979834][T20562] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 535.048778][T20562] CPU: 0 UID: 0 PID: 20562 Comm: syz.0.7015 Tainted: G U L syzkaller #0 PREEMPT(full) [ 535.048821][T20562] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 535.048830][T20562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.048844][T20562] Call Trace: [ 535.048852][T20562] [ 535.048862][T20562] dump_stack_lvl+0x100/0x190 [ 535.048894][T20562] should_fail_ex.cold+0x5/0xa [ 535.048924][T20562] ? prepare_alloc_pages+0x16d/0x5f0 [ 535.048963][T20562] should_fail_alloc_page+0xeb/0x140 [ 535.049000][T20562] prepare_alloc_pages+0x1f0/0x5f0 [ 535.049036][T20562] ? rcu_is_watching+0x12/0xc0 [ 535.049069][T20562] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 535.049112][T20562] ? find_held_lock+0x2b/0x80 [ 535.049142][T20562] ? rcu_read_unlock+0x17/0x60 [ 535.049180][T20562] ? rcu_read_unlock+0x17/0x60 [ 535.049217][T20562] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 535.049245][T20562] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 535.049278][T20562] ? rcu_is_watching+0x12/0xc0 [ 535.049306][T20562] ? trace_mm_page_alloc+0x164/0x1c0 [ 535.049343][T20562] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 535.049378][T20562] ? __lock_acquire+0x49f/0x1a40 [ 535.049417][T20562] ? __css_rstat_updated+0x1ce/0x5a0 [ 535.049485][T20562] ? __lock_acquire+0x49f/0x1a40 [ 535.049530][T20562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.049569][T20562] ? policy_nodemask+0xed/0x4f0 [ 535.049608][T20562] alloc_pages_mpol+0x1fb/0x540 [ 535.049646][T20562] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 535.049682][T20562] ? find_held_lock+0x2b/0x80 [ 535.049711][T20562] ? __pud_alloc+0x4f6/0x690 [ 535.049747][T20562] ? __pud_alloc+0x4f6/0x690 [ 535.049785][T20562] alloc_pages_noprof+0x1a/0x160 [ 535.049809][T20562] __pmd_alloc+0x3b/0x950 [ 535.049843][T20562] ? __pud_alloc+0x4fb/0x690 [ 535.049881][T20562] walk_to_pmd+0x3a3/0x4c0 [ 535.049926][T20562] get_locked_pte+0x25/0xc0 [ 535.049964][T20562] map_ldt_struct+0x3c1/0xa70 [ 535.050007][T20562] ? __pfx_map_ldt_struct+0x10/0x10 [ 535.050043][T20562] ? alloc_pages_noprof+0xf9/0x160 [ 535.050071][T20562] write_ldt+0x6d3/0xd40 [ 535.050110][T20562] ? __pfx_write_ldt+0x10/0x10 [ 535.050146][T20562] ? xfd_validate_state+0x129/0x190 [ 535.050182][T20562] __x64_sys_modify_ldt+0xb1/0x170 [ 535.050219][T20562] do_syscall_64+0x115/0x840 [ 535.050253][T20562] ? clear_bhb_loop+0x70/0xc0 [ 535.050283][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.050308][T20562] RIP: 0033:0x7f224db9e0d9 [ 535.050328][T20562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.050351][T20562] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 535.050374][T20562] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 535.050390][T20562] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 535.050404][T20562] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 535.050418][T20562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.050432][T20562] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 535.050462][T20562] [ 537.058442][T20610] netlink: 'syz.0.7036': attribute type 1 has an invalid length. [ 537.481619][T20613] NFSD: Failed to start, no listeners configured. [ 538.695105][T20660] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 539.350083][T20677] netlink: 'syz.2.7069': attribute type 1 has an invalid length. [ 539.390436][T20677] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7069'. [ 540.900544][T20727] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 543.803180][T20806] NFSD: Failed to start, no listeners configured. [ 544.225114][T20815] netlink: ct_mark mask cannot be 0 [ 545.452080][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7153'. [ 545.561239][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7154'. [ 546.093588][T20878] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 546.343724][T20881] sctp: [Deprecated]: syz.4.7164 (pid 20881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.343724][T20881] Use struct sctp_sack_info instead [ 547.375476][T20918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7181'. [ 550.565607][T20989] Process accounting paused [ 550.873611][T20998] netlink: 'syz.4.7218': attribute type 11 has an invalid length. [ 556.564819][T21129] netlink: 'syz.1.7283': attribute type 1 has an invalid length. [ 556.991292][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7286'. [ 559.011604][T21186] netlink: 'syz.1.7309': attribute type 1 has an invalid length. [ 559.284028][T21196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 559.591254][T21201] netlink: 'syz.2.7315': attribute type 1 has an invalid length. [ 560.431469][T21226] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 568.363473][T21423] dump_stack_lvl+0x100/0x190 [ 568.363508][T21423] should_fail_ex.cold+0x5/0xa [ 568.363537][T21423] should_failslab+0xc2/0x120 [ 568.363573][T21423] __kvmalloc_node_noprof+0x116/0x970 [ 568.363607][T21423] ? percpu_ref_init+0xec/0x3f0 [ 568.363695][T21423] ? io_alloc_cache_init+0x38/0x170 [ 568.363772][T21423] io_alloc_cache_init+0x38/0x170 [ 568.363807][T21423] io_uring_setup.cold+0x46e/0x1c2e [ 568.363844][T21423] ? ksys_write+0x190/0x250 [ 568.363876][T21423] ? ksys_write+0x190/0x250 [ 568.363898][T21423] ? __pfx_io_uring_setup+0x10/0x10 [ 568.363941][T21423] ? do_futex+0x190/0x440 [ 568.363970][T21423] ? __pfx_do_futex+0x10/0x10 [ 568.364010][T21423] ? xfd_validate_state+0x129/0x190 [ 568.364047][T21423] __x64_sys_io_uring_setup+0xc2/0x170 [ 568.364076][T21423] do_syscall_64+0x115/0x840 [ 568.364109][T21423] ? clear_bhb_loop+0x70/0xc0 [ 568.364139][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.364164][T21423] RIP: 0033:0x7fcaddd9e0d9 [ 568.364184][T21423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.364207][T21423] RSP: 002b:00007fcaded31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 568.364236][T21423] RAX: ffffffffffffffda RBX: 00007fcade025fa0 RCX: 00007fcaddd9e0d9 [ 568.364252][T21423] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 568.364267][T21423] RBP: 00007fcadde35024 R08: 0000000000000000 R09: 0000000000000000 [ 568.364281][T21423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.364295][T21423] R13: 00007fcade026038 R14: 00007fcade025fa0 R15: 00007ffffd67c738 [ 568.364325][T21423] [ 568.905079][T21434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7425'. [ 569.065705][T21437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7426'. [ 569.127170][T21437] netlink: 29 bytes leftover after parsing attributes in process `syz.1.7426'. [ 571.104089][T21494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7454'. [ 571.150708][T21494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7454'. [ 572.978252][T21560] program syz.4.7484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.125407][T21601] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 575.307171][T21630] netlink: 'syz.1.7517': attribute type 2 has an invalid length. [ 576.168880][T21658] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 576.991570][T21677] unsupported nla_type 113 [ 577.859460][T21701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7551'. [ 577.923123][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7552'. [ 579.414958][T21737] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 579.491437][T21733] .^: entered promiscuous mode [ 579.767762][T21742] tipc: Started in network mode [ 579.792120][T21742] tipc: Node identity ee00, cluster identity 4711 [ 579.824391][T21742] tipc: Node number set to 60928 [ 580.735433][T21766] Process accounting resumed [ 582.001050][T21780] binder: 21779:21780 ioctl c018620c 200000000040 returned -22 [ 583.837946][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7617'. [ 584.123718][T21853] ucma_write: process 2628 (syz.4.7620) changed security contexts after opening file descriptor, this is not allowed. [ 590.052548][T21997] netlink: 'syz.1.7691': attribute type 1 has an invalid length. [ 590.096409][T21997] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7691'. [ 590.392076][T22005] netlink: ct family unspecified [ 591.563312][T22025] syz.4.7705 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 591.684363][T22025] CPU: 0 UID: 0 PID: 22025 Comm: syz.4.7705 Tainted: G U L syzkaller #0 PREEMPT(full) [ 591.684403][T22025] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 591.684412][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.684425][T22025] Call Trace: [ 591.684433][T22025] [ 591.684443][T22025] dump_stack_lvl+0x100/0x190 [ 591.684476][T22025] dump_header+0xfb/0x606 [ 591.684503][T22025] oom_kill_process.cold+0xd/0x330 [ 591.684531][T22025] out_of_memory+0x340/0x14f0 [ 591.684603][T22025] ? __pfx_out_of_memory+0x10/0x10 [ 591.684649][T22025] mem_cgroup_out_of_memory+0xc6/0x130 [ 591.684677][T22025] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 591.684703][T22025] ? find_held_lock+0x2b/0x80 [ 591.684739][T22025] ? do_raw_spin_unlock+0x145/0x1e0 [ 591.684766][T22025] ? _raw_spin_unlock+0x28/0x50 [ 591.684799][T22025] try_charge_memcg+0x6e5/0xdf0 [ 591.684840][T22025] ? __pfx_try_charge_memcg+0x10/0x10 [ 591.684874][T22025] ? find_held_lock+0x2b/0x80 [ 591.684902][T22025] ? rcu_read_unlock+0x17/0x60 [ 591.684938][T22025] ? rcu_read_unlock+0x17/0x60 [ 591.684980][T22025] ? find_held_lock+0x2b/0x80 [ 591.685010][T22025] ? rcu_read_unlock+0x17/0x60 [ 591.685052][T22025] charge_memcg+0x187/0x1e0 [ 591.685089][T22025] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 591.685116][T22025] swap_cache_alloc_folio+0x548/0xc50 [ 591.685150][T22025] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 591.685177][T22025] ? swap_cache_get_folio+0x28d/0x360 [ 591.685204][T22025] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 591.685229][T22025] ? lockdep_hardirqs_on+0x78/0x100 [ 591.685268][T22025] swap_cache_read_folio+0x47/0x140 [ 591.685299][T22025] swap_cluster_readahead+0x387/0x5f0 [ 591.685333][T22025] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 591.685360][T22025] ? debug_object_activate+0x343/0x4b0 [ 591.685475][T22025] ? lock_acquire+0x1b9/0x370 [ 591.685519][T22025] ? __lock_acquire+0x49f/0x1a40 [ 591.685555][T22025] ? get_vma_policy+0x23d/0x3b0 [ 591.685594][T22025] swapin_readahead+0x159/0x1200 [ 591.685621][T22025] ? lapic_next_event+0x10/0x20 [ 591.685664][T22025] ? __pfx_swapin_readahead+0x10/0x10 [ 591.685699][T22025] ? swap_table_get+0x10d/0x2c0 [ 591.685724][T22025] ? swap_cache_get_folio+0x28d/0x360 [ 591.685750][T22025] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 591.685776][T22025] ? __pfx_softleaf_type+0x10/0x10 [ 591.685808][T22025] ? do_swap_page+0xf98/0x5780 [ 591.685836][T22025] do_swap_page+0xf98/0x5780 [ 591.685875][T22025] ? __pfx_do_swap_page+0x10/0x10 [ 591.685899][T22025] ? __lock_acquire+0x49f/0x1a40 [ 591.685936][T22025] ? lockdep_hardirqs_on+0x78/0x100 [ 591.685975][T22025] ? rcu_is_watching+0x12/0xc0 [ 591.686004][T22025] ? __pte_offset_map+0x179/0x310 [ 591.686039][T22025] __handle_mm_fault+0x192f/0x2a00 [ 591.686069][T22025] ? reacquire_held_locks+0xce/0x1e0 [ 591.686108][T22025] ? __pfx___handle_mm_fault+0x10/0x10 [ 591.686137][T22025] ? lock_vma_under_rcu+0x17c/0x590 [ 591.686177][T22025] handle_mm_fault+0x37b/0xa30 [ 591.686211][T22025] do_user_addr_fault+0x5a3/0x12f0 [ 591.686253][T22025] exc_page_fault+0x6f/0xd0 [ 591.686285][T22025] asm_exc_page_fault+0x26/0x30 [ 591.686308][T22025] RIP: 0033:0x7f4655959238 [ 591.686327][T22025] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 591.686348][T22025] RSP: 002b:00007ffcf75aa1d0 EFLAGS: 00010246 [ 591.686367][T22025] RAX: 0000000000000000 RBX: 000055556a28b500 RCX: 00007f465595e90e [ 591.686382][T22025] RDX: 00007ffcf75aa220 RSI: 0000000000000000 RDI: 0000000000000000 [ 591.686395][T22025] RBP: 00007f4655c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 591.686409][T22025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000090799 [ 591.686423][T22025] R13: 00007f4655c25fac R14: 00000000000904a3 R15: 00007ffcf75aa350 [ 591.686453][T22025] [ 592.688231][T22036] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7710'. [ 593.491511][T22025] memory: usage 1252kB, limit 3072kB, failcnt 4751 [ 593.568689][T22025] memory+swap: usage 1380kB, limit 9007199254740988kB, failcnt 0 [ 593.615287][T22025] kmem: usage 972kB, limit 9007199254740988kB, failcnt 0 [ 593.678433][T22025] Memory cgroup stats for /syz4: [ 593.678922][T22025] cache 0 [ 593.735367][T22025] rss 28672 [ 593.758344][T22025] rss_huge 0 [ 593.773761][T22025] shmem 0 [ 593.790816][T22025] mapped_file 0 [ 593.804502][T22025] dirty 0 [ 593.817580][T22025] writeback 0 [ 593.838883][T22025] workingset_refault_anon 630 [ 593.869551][T22025] workingset_refault_file 197 [ 593.884246][T22025] swap 131072 [ 593.898750][T22025] swapcached 22618112 [ 593.935326][T22025] pgpgin 69776 [ 593.953792][T22025] pgpgout 79978 [ 593.973586][T22025] pgfault 156962 [ 593.993974][T22025] pgmajfault 265 [ 594.011328][T22025] inactive_anon 49152 [ 594.032730][T22025] active_anon 24576 [ 594.059074][T22025] inactive_file 0 [ 594.081807][T22025] active_file 0 [ 594.096764][T22025] unevictable 0 [ 594.112634][T22025] hierarchical_memory_limit 3145728 [ 594.138550][T22025] hierarchical_memsw_limit 9223372036854771712 [ 594.163391][T22025] total_cache 0 [ 594.183114][T22025] total_rss 28672 [ 594.203235][T22025] total_rss_huge 0 [ 594.217960][T22025] total_shmem 0 [ 594.232530][T22025] total_mapped_file 0 [ 594.260655][T22025] total_dirty 0 [ 594.289822][T22025] total_writeback 0 [ 594.307322][T22025] total_workingset_refault_anon 630 [ 594.322461][T22025] total_workingset_refault_file 197 [ 594.357959][T22025] total_swap 131072 [ 594.369835][T22025] total_swapcached 22618112 [ 594.386986][T22025] total_pgpgin 69776 [ 594.408869][T22025] total_pgpgout 79978 [ 594.426254][T22025] total_pgfault 156962 [ 594.450079][T22025] total_pgmajfault 265 [ 594.469069][T22025] total_inactive_anon 49152 [ 594.494962][T22025] total_active_anon 24576 [ 594.516267][T22025] total_inactive_file 0 [ 594.538533][T22025] total_active_file 0 [ 594.567180][T22025] total_unevictable 0 [ 594.584211][T22025] anon_cost 64 [ 594.598501][T22025] file_cost 1 [ 594.613298][T22025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7705,pid=22025,uid=0 [ 594.739561][T22025] Memory cgroup out of memory: Killed process 22025 (syz.4.7705) total-vm:104300kB, anon-rss:1268kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 600.005179][T22241] netlink: 'syz.4.7807': attribute type 1 has an invalid length. [ 600.455509][T22257] netlink: 'syz.0.7815': attribute type 2 has an invalid length. [ 600.743754][T22261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 602.261645][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7838'. [ 602.597898][T22315] IPVS: length: 131 != 8 [ 602.817785][T22317] FAULT_INJECTION: forcing a failure. [ 602.817785][T22317] name failslab, interval 1, probability 0, space 0, times 0 [ 602.852480][T22317] CPU: 0 UID: 0 PID: 22317 Comm: syz.1.7843 Tainted: G U L syzkaller #0 PREEMPT(full) [ 602.852523][T22317] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 602.852535][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.852549][T22317] Call Trace: [ 602.852557][T22317] [ 602.852566][T22317] dump_stack_lvl+0x100/0x190 [ 602.852600][T22317] should_fail_ex.cold+0x5/0xa [ 602.852628][T22317] should_failslab+0xc2/0x120 [ 602.852663][T22317] __kmalloc_cache_noprof+0x91/0x6c0 [ 602.852691][T22317] ? proc_self_get_link+0x189/0x1f0 [ 602.852816][T22317] proc_self_get_link+0x189/0x1f0 [ 602.852856][T22317] pick_link+0xac2/0x13c0 [ 602.852897][T22317] ? __pfx_proc_self_get_link+0x10/0x10 [ 602.852940][T22317] step_into_slowpath+0x9ba/0xf90 [ 602.852983][T22317] ? __pfx_step_into_slowpath+0x10/0x10 [ 602.853026][T22317] ? lookup_fast+0x2da/0x600 [ 602.853059][T22317] ? inode_permission+0x374/0x620 [ 602.853096][T22317] link_path_walk+0xf28/0x1cc0 [ 602.853143][T22317] path_openat+0x1c9/0x4280 [ 602.853167][T22317] ? __kasan_slab_alloc+0x89/0x90 [ 602.853199][T22317] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 602.853228][T22317] ? do_getname+0x35/0x390 [ 602.853277][T22317] ? __x64_sys_openat+0x12d/0x210 [ 602.853324][T22317] ? __pfx_path_openat+0x10/0x10 [ 602.853358][T22317] do_file_open+0x20e/0x430 [ 602.853385][T22317] ? __pfx_do_file_open+0x10/0x10 [ 602.853434][T22317] ? alloc_fd+0x471/0x7a0 [ 602.853514][T22317] ? do_getname+0x191/0x390 [ 602.853547][T22317] do_sys_openat2+0x10f/0x1e0 [ 602.853581][T22317] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.853615][T22317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.853660][T22317] __x64_sys_openat+0x12d/0x210 [ 602.853694][T22317] ? __pfx___x64_sys_openat+0x10/0x10 [ 602.853739][T22317] do_syscall_64+0x115/0x840 [ 602.853772][T22317] ? clear_bhb_loop+0x70/0xc0 [ 602.853801][T22317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.853833][T22317] RIP: 0033:0x7fa72f99e0d9 [ 602.853853][T22317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.853876][T22317] RSP: 002b:00007fa73081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.853899][T22317] RAX: ffffffffffffffda RBX: 00007fa72fc25fa0 RCX: 00007fa72f99e0d9 [ 602.853915][T22317] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 602.853930][T22317] RBP: 00007fa72fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 602.853944][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.853958][T22317] R13: 00007fa72fc26038 R14: 00007fa72fc25fa0 R15: 00007fff2943e9a8 [ 602.853988][T22317] [ 604.148600][T22352] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 604.617619][T22366] netlink: 'syz.1.7867': attribute type 1 has an invalid length. [ 607.344769][T22447] openvswitch: netlink: Multiple metadata blocks provided [ 608.410944][T14855] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 609.538782][T22507] netlink: 334 bytes leftover after parsing attributes in process `syz.2.7933'. [ 611.841699][T22534] Process accounting paused [ 614.795598][T22621] openvswitch: netlink: Multiple metadata blocks provided [ 614.951169][T22624] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 615.889775][T22654] openvswitch: netlink: IP tunnel dst address not specified [ 616.165107][T22661] netlink: 'syz.0.8001': attribute type 1 has an invalid length. [ 616.595016][T22669] FAULT_INJECTION: forcing a failure. [ 616.595016][T22669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.659262][T22669] CPU: 0 UID: 0 PID: 22669 Comm: syz.4.8006 Tainted: G U L syzkaller #0 PREEMPT(full) [ 616.659304][T22669] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 616.659314][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.659328][T22669] Call Trace: [ 616.659335][T22669] [ 616.659344][T22669] dump_stack_lvl+0x100/0x190 [ 616.659379][T22669] should_fail_ex.cold+0x5/0xa [ 616.659402][T22669] ? prepare_alloc_pages+0x16d/0x5f0 [ 616.659442][T22669] should_fail_alloc_page+0xeb/0x140 [ 616.659479][T22669] prepare_alloc_pages+0x1f0/0x5f0 [ 616.659520][T22669] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 616.659552][T22669] ? is_bpf_text_address+0x94/0x1a0 [ 616.659619][T22669] ? kernel_text_address+0x8d/0x100 [ 616.659658][T22669] ? __kernel_text_address+0xd/0x30 [ 616.659695][T22669] ? unwind_get_return_address+0x59/0xa0 [ 616.659733][T22669] ? arch_stack_walk+0xa6/0xf0 [ 616.659772][T22669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 616.659805][T22669] ? stack_trace_save+0x8e/0xc0 [ 616.659838][T22669] ? __pfx_stack_trace_save+0x10/0x10 [ 616.659873][T22669] ? stack_depot_save_flags+0x27/0x9d0 [ 616.659965][T22669] ? kasan_save_track+0x14/0x30 [ 616.659995][T22669] ? __kasan_kmalloc+0xaa/0xb0 [ 616.660024][T22669] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 616.660049][T22669] ? do_kimage_alloc_init+0x40/0x320 [ 616.660085][T22669] ? do_kexec_load+0x11b/0x810 [ 616.660121][T22669] ? __x64_sys_kexec_load+0x1bf/0x230 [ 616.660158][T22669] ? do_syscall_64+0x115/0x840 [ 616.660192][T22669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.660220][T22669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 616.660258][T22669] ? policy_nodemask+0xed/0x4f0 [ 616.660296][T22669] alloc_pages_mpol+0x1fb/0x540 [ 616.660333][T22669] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 616.660377][T22669] alloc_pages_noprof+0x1a/0x160 [ 616.660401][T22669] kimage_alloc_pages+0x72/0x380 [ 616.660439][T22669] kimage_alloc_control_pages+0x157/0xa20 [ 616.660482][T22669] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 616.660507][T22669] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 616.660552][T22669] do_kexec_load+0x6c1/0x810 [ 616.660592][T22669] ? __pfx_do_kexec_load+0x10/0x10 [ 616.660633][T22669] ? _copy_from_user+0x59/0xd0 [ 616.660675][T22669] __x64_sys_kexec_load+0x1bf/0x230 [ 616.660716][T22669] do_syscall_64+0x115/0x840 [ 616.660749][T22669] ? clear_bhb_loop+0x70/0xc0 [ 616.660778][T22669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.660803][T22669] RIP: 0033:0x7f465599e0d9 [ 616.660823][T22669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.660846][T22669] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 616.660868][T22669] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 616.660883][T22669] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 616.660898][T22669] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 616.660918][T22669] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 616.660932][T22669] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 616.660962][T22669] [ 617.308263][T22669] kexec: Could not allocate swap buffer [ 617.765395][T22683] HfR: entered promiscuous mode [ 618.342847][T22693] netlink: Conntrack attr has 5 unknown bytes [ 618.543037][T22699] nbd: couldn't find device at index 158 [ 619.097929][T22715] netlink: 'syz.2.8027': attribute type 3 has an invalid length. [ 619.363393][T22719] netlink: zone id is out of range [ 620.922494][T22758] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.8046:22758 [ 624.124391][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8081'. [ 624.721447][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.729277][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.883710][T22887] syz.4.8105(22887): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 625.917872][T22885] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 627.007773][T22918] netlink: 'syz.2.8119': attribute type 1 has an invalid length. [ 627.447934][T22933] netlink: 'syz.0.8127': attribute type 8 has an invalid length. [ 627.547353][ T29] audit: type=1107 audit(4294967414.380:36): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 627.600024][ T29] audit: type=1107 audit(4294967414.440:37): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 627.874753][T22944] dyndbg: expected <4096 bytes into control [ 628.060267][T22948] netlink: 'syz.2.8134': attribute type 1 has an invalid length. [ 632.671109][T23063] netlink: 'syz.1.8188': attribute type 1 has an invalid length. [ 633.369108][T23083] netlink: 'syz.1.8197': attribute type 11 has an invalid length. [ 633.414675][T23083] netlink: 'syz.1.8197': attribute type 11 has an invalid length. [ 633.451666][T23083] netlink: 'syz.1.8197': attribute type 11 has an invalid length. [ 634.639877][T23114] netlink: NAT attribute has 5 unknown bytes [ 635.555403][T23139] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 636.052531][T23150] openvswitch: netlink: IP tunnel dst address not specified [ 636.848811][T23175] netlink: 'syz.1.8240': attribute type 11 has an invalid length. [ 636.859514][T23175] netlink: 'syz.1.8240': attribute type 11 has an invalid length. [ 636.880328][T23175] netlink: 'syz.1.8240': attribute type 11 has an invalid length. [ 637.325611][T23189] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 637.373774][T23189] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 637.643940][T23198] netlink: 'syz.2.8251': attribute type 11 has an invalid length. [ 637.668852][T23199] FAULT_INJECTION: forcing a failure. [ 637.668852][T23199] name failslab, interval 1, probability 0, space 0, times 0 [ 637.696253][T23198] netlink: 'syz.2.8251': attribute type 11 has an invalid length. [ 637.723637][T23198] netlink: 'syz.2.8251': attribute type 11 has an invalid length. [ 637.736392][T23199] CPU: 0 UID: 0 PID: 23199 Comm: syz.4.8249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 637.736435][T23199] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 637.736444][T23199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.736459][T23199] Call Trace: [ 637.736467][T23199] [ 637.736476][T23199] dump_stack_lvl+0x100/0x190 [ 637.736535][T23199] should_fail_ex.cold+0x5/0xa [ 637.736563][T23199] should_failslab+0xc2/0x120 [ 637.736598][T23199] kmem_cache_alloc_noprof+0x91/0x6a0 [ 637.736635][T23199] ? d_instantiate+0x8a/0xb0 [ 637.736664][T23199] ? d_instantiate+0x8a/0xb0 [ 637.736691][T23199] ? alloc_empty_file+0x5b/0x1c0 [ 637.736731][T23199] alloc_empty_file+0x5b/0x1c0 [ 637.736763][T23199] alloc_file_pseudo+0x183/0x290 [ 637.736796][T23199] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 637.736826][T23199] ? alloc_fd+0x471/0x7a0 [ 637.736851][T23199] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.736882][T23199] __anon_inode_getfile+0xe8/0x280 [ 637.737000][T23199] anon_inode_getfile_fmode+0x37/0xa0 [ 637.737034][T23199] __do_sys_fanotify_init+0xa0d/0xe30 [ 637.737097][T23199] do_syscall_64+0x115/0x840 [ 637.737130][T23199] ? clear_bhb_loop+0x70/0xc0 [ 637.737160][T23199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.737185][T23199] RIP: 0033:0x7f465599e0d9 [ 637.737205][T23199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.737228][T23199] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 637.737250][T23199] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 637.737265][T23199] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 637.737279][T23199] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 637.737293][T23199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.737307][T23199] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 637.737337][T23199] [ 638.899553][T23230] openvswitch: netlink: IPv4 tunnel dst address is zero [ 641.967564][T23325] Process accounting resumed [ 643.052792][T23358] openvswitch: netlink: IP tunnel dst address not specified [ 644.492010][T23409] sd 0:0:1:0: PR command failed: 1026 [ 644.524520][T23409] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 644.552394][T23409] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 645.400425][T23435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 647.284872][T19456] Bluetooth: hci1: command 0x0406 tx timeout [ 648.272687][T23523] netlink: 'syz.1.8403': attribute type 2 has an invalid length. [ 649.315463][T23557] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 650.544474][T23592] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 650.973417][T23606] netlink: 'syz.4.8445': attribute type 23 has an invalid length. [ 652.031411][T23621] syz.4.8452 (23621) used greatest stack depth: 19768 bytes left [ 652.350552][T23640] netlink: Unknown NAT attribute (type=262, max=9) [ 653.064369][T14855] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 653.064402][T14855] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 653.079618][T14855] Bluetooth: hci3: Dropping invalid advertising data [ 653.086419][T14855] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 653.086451][T14855] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 653.093585][T14855] Bluetooth: hci3: unknown advertising packet type: 0xee [ 653.773535][T23683] netlink: 'syz.1.8481': attribute type 2 has an invalid length. [ 654.606374][T23703] netlink: 'syz.2.8489': attribute type 12 has an invalid length. [ 655.806268][T23738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8507'. [ 656.011312][T23744] netlink: set zone limit has 4 unknown bytes [ 656.581090][T23762] netlink: 178 bytes leftover after parsing attributes in process `syz.2.8516'. [ 659.541319][T23840] openvswitch: netlink: Key type 261 is out of range max 32 [ 659.652828][T23842] netlink: 'syz.0.8556': attribute type 12 has an invalid length. [ 660.193111][T23856] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 661.575810][T23894] netlink: zone id is out of range [ 661.605543][T23894] netlink: zone id is out of range [ 661.642197][T23894] netlink: zone id is out of range [ 661.669251][T23894] netlink: zone id is out of range [ 661.693666][T23894] netlink: zone id is out of range [ 661.717977][T23894] netlink: zone id is out of range [ 661.737300][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8583'. [ 661.760675][T23894] netlink: zone id is out of range [ 661.779848][T23894] netlink: zone id is out of range [ 661.809988][T23894] netlink: zone id is out of range [ 661.836493][T23894] netlink: zone id is out of range [ 661.883954][T23890] could not allocate digest TFM handle [ 663.129958][T23942] netlink: 'syz.1.8602': attribute type 1 has an invalid length. [ 664.018883][T23965] netlink: 'syz.4.8614': attribute type 1 has an invalid length. [ 664.449788][T23979] HSR: entered promiscuous mode [ 670.550356][T24174] netlink: 'syz.2.8713': attribute type 11 has an invalid length. [ 670.589650][T24174] netlink: 'syz.2.8713': attribute type 11 has an invalid length. [ 670.625186][T24174] netlink: 'syz.2.8713': attribute type 11 has an invalid length. [ 670.652747][T14855] Bluetooth: hci0: ACL packet too small [ 671.750888][T14855] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 671.810192][T14855] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 671.818237][T14855] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 671.831086][T14855] CPU: 0 UID: 0 PID: 14855 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 671.831128][T14855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 671.831137][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.831154][T14855] Workqueue: hci1 hci_rx_work [ 671.831189][T14855] Call Trace: [ 671.831197][T14855] [ 671.831207][T14855] dump_stack_lvl+0x100/0x190 [ 671.831237][T14855] sysfs_warn_dup.cold+0x1c/0x28 [ 671.831273][T14855] sysfs_create_dir_ns+0x24b/0x2b0 [ 671.831315][T14855] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 671.831350][T14855] ? find_held_lock+0x2b/0x80 [ 671.831380][T14855] ? kobject_add_internal+0x25f/0x930 [ 671.831405][T14855] ? kobject_add_internal+0x25f/0x930 [ 671.831432][T14855] ? do_raw_spin_unlock+0x145/0x1e0 [ 671.831461][T14855] kobject_add_internal+0x2c8/0x930 [ 671.831490][T14855] kobject_add+0x16a/0x1e0 [ 671.831514][T14855] ? __pfx_kobject_add+0x10/0x10 [ 671.831536][T14855] ? class_to_subsys+0x10f/0x150 [ 671.831567][T14855] ? kobject_put+0xb9/0x640 [ 671.831587][T14855] ? _raw_spin_unlock+0x28/0x50 [ 671.831626][T14855] device_add+0x294/0x1970 [ 671.831652][T14855] ? __pfx_dev_set_name+0x10/0x10 [ 671.831680][T14855] ? __pfx_device_add+0x10/0x10 [ 671.831705][T14855] ? mgmt_send_event_skb+0x2fb/0x460 [ 671.831747][T14855] hci_conn_add_sysfs+0x1a3/0x260 [ 671.831786][T14855] le_conn_complete_evt+0x11eb/0x1f60 [ 671.831831][T14855] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 671.831862][T14855] ? __pfx_bt_warn+0x10/0x10 [ 671.831884][T14855] ? hci_event_packet+0x186/0xcd0 [ 671.831921][T14855] hci_le_conn_complete_evt+0x23c/0x3a0 [ 671.831955][T14855] ? skb_pull_data+0x15f/0x1e0 [ 671.831985][T14855] hci_le_meta_evt+0x34a/0x5f0 [ 671.832020][T14855] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 671.832056][T14855] hci_event_packet+0x51c/0xcd0 [ 671.832088][T14855] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 671.832123][T14855] ? __pfx_hci_event_packet+0x10/0x10 [ 671.832158][T14855] ? kcov_remote_start+0x384/0x670 [ 671.832192][T14855] ? lockdep_hardirqs_on+0x78/0x100 [ 671.832232][T14855] hci_rx_work+0x451/0xfc0 [ 671.832268][T14855] process_one_work+0xa23/0x1940 [ 671.832316][T14855] ? __pfx_process_one_work+0x10/0x10 [ 671.832361][T14855] ? __pfx_hci_rx_work+0x10/0x10 [ 671.832394][T14855] worker_thread+0x5ef/0xe50 [ 671.832437][T14855] ? __pfx_worker_thread+0x10/0x10 [ 671.832474][T14855] ? kthread+0x13a/0x450 [ 671.832504][T14855] ? __pfx_worker_thread+0x10/0x10 [ 671.832539][T14855] kthread+0x370/0x450 [ 671.832570][T14855] ? __pfx_kthread+0x10/0x10 [ 671.832604][T14855] ret_from_fork+0x72b/0xd50 [ 671.832636][T14855] ? __pfx_ret_from_fork+0x10/0x10 [ 671.832667][T14855] ? __switch_to+0x800/0x10f0 [ 671.832704][T14855] ? __switch_to_asm+0x39/0x70 [ 671.832736][T14855] ? __pfx_kthread+0x10/0x10 [ 671.832771][T14855] ret_from_fork_asm+0x1a/0x30 [ 671.832819][T14855] [ 671.833777][T14855] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 672.172301][T14855] Bluetooth: hci1: failed to register connection device [ 672.263347][T24212] Process accounting paused [ 673.116212][T24238] net_ratelimit: 104 callbacks suppressed [ 673.116237][T24238] openvswitch: netlink: Flow key attr not present in new flow. [ 673.837168][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 674.824608][T24291] netlink: 'syz.1.8767': attribute type 11 has an invalid length. [ 674.865365][T24291] netlink: 'syz.1.8767': attribute type 11 has an invalid length. [ 674.894524][T24291] netlink: 'syz.1.8767': attribute type 11 has an invalid length. [ 674.919685][T24291] netlink: 'syz.1.8767': attribute type 11 has an invalid length. [ 675.194598][T24307] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 675.508664][T24314] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 675.918138][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 676.453312][T24347] openvswitch: netlink: IP tunnel TTL not specified. [ 677.010753][T24363] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 677.671401][T24384] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 677.712941][T14855] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 677.890541][T24390] netlink: 'syz.2.8813': attribute type 1 has an invalid length. [ 677.996364][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 678.291034][T24405] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 679.523998][T24443] openvswitch: netlink: Flow actions attr not present in new flow. [ 680.027567][T24455] FAULT_INJECTION: forcing a failure. [ 680.027567][T24455] name failslab, interval 1, probability 0, space 0, times 0 [ 680.077691][T19456] Bluetooth: hci1: command 0x0406 tx timeout [ 680.098315][T24455] CPU: 0 UID: 0 PID: 24455 Comm: syz.1.8845 Tainted: G U L syzkaller #0 PREEMPT(full) [ 680.098369][T24455] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 680.098381][T24455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.098401][T24455] Call Trace: [ 680.098409][T24455] [ 680.098419][T24455] dump_stack_lvl+0x100/0x190 [ 680.098454][T24455] should_fail_ex.cold+0x5/0xa [ 680.098483][T24455] should_failslab+0xc2/0x120 [ 680.098520][T24455] __kmalloc_noprof+0xfc/0x820 [ 680.098552][T24455] ? aa_label_asxprint+0x75/0x130 [ 680.098675][T24455] aa_label_asxprint+0x75/0x130 [ 680.098708][T24455] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 680.098767][T24455] security_lsmprop_to_secctx+0x146/0x1a0 [ 680.098827][T24455] audit_log_subj_ctx+0x34f/0x460 [ 680.098861][T24455] ? map_id_range_up+0x2ce/0x3b0 [ 680.098897][T24455] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 680.098931][T24455] ? audit_log_format+0xe8/0x130 [ 680.098960][T24455] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 680.098999][T24455] audit_log_task_context+0x88/0xb0 [ 680.099030][T24455] ? __pfx_audit_log_task_context+0x10/0x10 [ 680.099077][T24455] audit_log_task+0x1b7/0x3a0 [ 680.099116][T24455] ? __pfx_audit_log_task+0x10/0x10 [ 680.099162][T24455] audit_seccomp+0x79/0x190 [ 680.099187][T24455] ? exc_general_protection+0x120/0x240 [ 680.099231][T24455] __secure_computing+0x26d/0x2c0 [ 680.099262][T24455] do_syscall_64+0x5ce/0x840 [ 680.099294][T24455] ? clear_bhb_loop+0x70/0xc0 [ 680.099325][T24455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.099353][T24455] RIP: 0033:0x7fa72f99e0d9 [ 680.099373][T24455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.099397][T24455] RSP: 002b:00007fa73081c9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 680.099420][T24455] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa72f99e0d9 [ 680.099436][T24455] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 680.099450][T24455] RBP: 00007fa73081d030 R08: 0000000000000001 R09: 000000000000000b [ 680.099465][T24455] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 680.099480][T24455] R13: 00007fa72fc26038 R14: 00007fa72fc25fa0 R15: 00007fff2943e9a8 [ 680.099510][T24455] [ 680.100274][T24455] audit: error in audit_log_subj_ctx [ 680.473622][T24462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8850'. [ 680.514580][T24462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 680.994572][ T29] audit: type=1326 audit(4294967466.870:38): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24454 comm="syz.1.8845" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa72f99e0d9 code=0x0 [ 681.454913][T19456] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 681.454956][T19456] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 681.472998][T19456] Bluetooth: hci1: Dropping invalid advertising data [ 681.480735][T19456] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 681.480758][T19456] Bluetooth: hci1: Dropping invalid advertising data [ 681.499061][T19456] Bluetooth: hci1: unknown advertising packet type: 0x79 [ 681.499106][T19456] Bluetooth: hci1: Malformed LE Event: 0x02 [ 681.515050][T24492] netlink: 'syz.4.8861': attribute type 1 has an invalid length. [ 681.562330][T24492] nbd: error processing sock list [ 682.759572][T24534] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 684.226449][T24587] ksmbd: Unknown IPC event: 14, ignore. [ 686.166583][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.174598][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.897887][T24726] FAULT_INJECTION: forcing a failure. [ 688.897887][T24726] name failslab, interval 1, probability 0, space 0, times 0 [ 688.953995][T24726] CPU: 0 UID: 0 PID: 24726 Comm: syz.4.8973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.954038][T24726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.954047][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.954062][T24726] Call Trace: [ 688.954069][T24726] [ 688.954078][T24726] dump_stack_lvl+0x100/0x190 [ 688.954111][T24726] should_fail_ex.cold+0x5/0xa [ 688.954140][T24726] should_failslab+0xc2/0x120 [ 688.954175][T24726] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 688.954211][T24726] ? __alloc_skb+0x5b7/0x710 [ 688.954245][T24726] ? __alloc_skb+0x140/0x710 [ 688.954283][T24726] __alloc_skb+0x140/0x710 [ 688.954321][T24726] ? __alloc_skb+0x5b7/0x710 [ 688.954355][T24726] ? __pfx___alloc_skb+0x10/0x10 [ 688.954391][T24726] ? lockdep_init_map_type+0x5c/0x250 [ 688.954421][T24726] audit_log_start+0x350/0x930 [ 688.954454][T24726] ? __pfx_audit_log_start+0x10/0x10 [ 688.954486][T24726] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 688.954514][T24726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 688.954563][T24726] audit_seccomp+0x60/0x190 [ 688.954588][T24726] ? exc_general_protection+0x120/0x240 [ 688.954632][T24726] __secure_computing+0x26d/0x2c0 [ 688.954664][T24726] do_syscall_64+0x5ce/0x840 [ 688.954696][T24726] ? clear_bhb_loop+0x70/0xc0 [ 688.954726][T24726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.954751][T24726] RIP: 0033:0x7f465599e0d9 [ 688.954771][T24726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.954795][T24726] RSP: 002b:00007f46568109f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 688.954827][T24726] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f465599e0d9 [ 688.954843][T24726] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 688.954857][T24726] RBP: 00007f4656811030 R08: 0000000000000001 R09: 000000000000000b [ 688.954872][T24726] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 688.954886][T24726] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 688.954917][T24726] [ 688.954952][T24726] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 689.559989][T19456] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 689.628420][T19456] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 689.640633][T19456] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 689.650397][T19456] CPU: 0 UID: 0 PID: 19456 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 689.650443][T19456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 689.650452][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.650470][T19456] Workqueue: hci0 hci_rx_work [ 689.650504][T19456] Call Trace: [ 689.650511][T19456] [ 689.650520][T19456] dump_stack_lvl+0x100/0x190 [ 689.650549][T19456] sysfs_warn_dup.cold+0x1c/0x28 [ 689.650586][T19456] sysfs_create_dir_ns+0x24b/0x2b0 [ 689.650625][T19456] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 689.650661][T19456] ? find_held_lock+0x2b/0x80 [ 689.650693][T19456] ? kobject_add_internal+0x25f/0x930 [ 689.650717][T19456] ? kobject_add_internal+0x25f/0x930 [ 689.650745][T19456] ? do_raw_spin_unlock+0x145/0x1e0 [ 689.650775][T19456] kobject_add_internal+0x2c8/0x930 [ 689.650805][T19456] kobject_add+0x16a/0x1e0 [ 689.650829][T19456] ? __pfx_kobject_add+0x10/0x10 [ 689.650853][T19456] ? class_to_subsys+0x10f/0x150 [ 689.650884][T19456] ? kobject_put+0xb9/0x640 [ 689.650905][T19456] ? _raw_spin_unlock+0x28/0x50 [ 689.650944][T19456] device_add+0x294/0x1970 [ 689.650970][T19456] ? __pfx_dev_set_name+0x10/0x10 [ 689.650998][T19456] ? __pfx_device_add+0x10/0x10 [ 689.651022][T19456] ? mgmt_send_event_skb+0x2fb/0x460 [ 689.651063][T19456] hci_conn_add_sysfs+0x1a3/0x260 [ 689.651101][T19456] le_conn_complete_evt+0x11eb/0x1f60 [ 689.651140][T19456] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 689.651170][T19456] ? __pfx_bt_warn+0x10/0x10 [ 689.651191][T19456] ? hci_event_packet+0x186/0xcd0 [ 689.651228][T19456] hci_le_conn_complete_evt+0x23c/0x3a0 [ 689.651261][T19456] ? skb_pull_data+0x15f/0x1e0 [ 689.651291][T19456] hci_le_meta_evt+0x34a/0x5f0 [ 689.651325][T19456] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 689.651361][T19456] hci_event_packet+0x51c/0xcd0 [ 689.651392][T19456] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 689.651427][T19456] ? __pfx_hci_event_packet+0x10/0x10 [ 689.651472][T19456] ? kcov_remote_start+0x384/0x670 [ 689.651507][T19456] ? lockdep_hardirqs_on+0x78/0x100 [ 689.651547][T19456] hci_rx_work+0x451/0xfc0 [ 689.651583][T19456] process_one_work+0xa23/0x1940 [ 689.651632][T19456] ? __pfx_process_one_work+0x10/0x10 [ 689.651677][T19456] ? __pfx_hci_rx_work+0x10/0x10 [ 689.651710][T19456] worker_thread+0x5ef/0xe50 [ 689.651754][T19456] ? __pfx_worker_thread+0x10/0x10 [ 689.651790][T19456] ? kthread+0x13a/0x450 [ 689.651821][T19456] ? __pfx_worker_thread+0x10/0x10 [ 689.651856][T19456] kthread+0x370/0x450 [ 689.651887][T19456] ? __pfx_kthread+0x10/0x10 [ 689.651922][T19456] ret_from_fork+0x72b/0xd50 [ 689.651954][T19456] ? __pfx_ret_from_fork+0x10/0x10 [ 689.651984][T19456] ? rcu_is_watching+0x12/0xc0 [ 689.652014][T19456] ? __switch_to+0x800/0x10f0 [ 689.652051][T19456] ? __switch_to_asm+0x39/0x70 [ 689.652084][T19456] ? __pfx_kthread+0x10/0x10 [ 689.652118][T19456] ret_from_fork_asm+0x1a/0x30 [ 689.652166][T19456] [ 689.652216][T19456] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 689.982348][T19456] Bluetooth: hci0: failed to register connection device [ 690.259624][T24726] audit: out of memory in audit_log_start [ 691.192967][T24767] netlink: 'syz.2.8993': attribute type 1 has an invalid length. [ 691.548146][T19456] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 691.599704][T19456] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 691.608180][T19456] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 691.617947][T19456] CPU: 0 UID: 0 PID: 19456 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.617987][T19456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.617996][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 691.618012][T19456] Workqueue: hci2 hci_rx_work [ 691.618047][T19456] Call Trace: [ 691.618056][T19456] [ 691.618064][T19456] dump_stack_lvl+0x100/0x190 [ 691.618094][T19456] sysfs_warn_dup.cold+0x1c/0x28 [ 691.618131][T19456] sysfs_create_dir_ns+0x24b/0x2b0 [ 691.618170][T19456] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 691.618213][T19456] ? find_held_lock+0x2b/0x80 [ 691.618244][T19456] ? kobject_add_internal+0x25f/0x930 [ 691.618270][T19456] ? kobject_add_internal+0x25f/0x930 [ 691.618298][T19456] ? do_raw_spin_unlock+0x145/0x1e0 [ 691.618327][T19456] kobject_add_internal+0x2c8/0x930 [ 691.618357][T19456] kobject_add+0x16a/0x1e0 [ 691.618382][T19456] ? __pfx_kobject_add+0x10/0x10 [ 691.618405][T19456] ? class_to_subsys+0x10f/0x150 [ 691.618437][T19456] ? kobject_put+0xb9/0x640 [ 691.618457][T19456] ? _raw_spin_unlock+0x28/0x50 [ 691.618493][T19456] device_add+0x294/0x1970 [ 691.618518][T19456] ? __pfx_dev_set_name+0x10/0x10 [ 691.618547][T19456] ? __pfx_device_add+0x10/0x10 [ 691.618572][T19456] ? mgmt_send_event_skb+0x2fb/0x460 [ 691.618613][T19456] hci_conn_add_sysfs+0x1a3/0x260 [ 691.618652][T19456] le_conn_complete_evt+0x11eb/0x1f60 [ 691.618692][T19456] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 691.618723][T19456] ? __pfx_bt_warn+0x10/0x10 [ 691.618744][T19456] ? hci_event_packet+0x186/0xcd0 [ 691.618782][T19456] hci_le_conn_complete_evt+0x23c/0x3a0 [ 691.618816][T19456] ? skb_pull_data+0x15f/0x1e0 [ 691.618846][T19456] hci_le_meta_evt+0x34a/0x5f0 [ 691.618881][T19456] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 691.618918][T19456] hci_event_packet+0x51c/0xcd0 [ 691.618950][T19456] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 691.618986][T19456] ? __pfx_hci_event_packet+0x10/0x10 [ 691.619025][T19456] ? kcov_remote_start+0x384/0x670 [ 691.619060][T19456] ? lockdep_hardirqs_on+0x78/0x100 [ 691.619101][T19456] hci_rx_work+0x451/0xfc0 [ 691.619137][T19456] process_one_work+0xa23/0x1940 [ 691.619186][T19456] ? __pfx_process_one_work+0x10/0x10 [ 691.619237][T19456] ? __pfx_hci_rx_work+0x10/0x10 [ 691.619272][T19456] worker_thread+0x5ef/0xe50 [ 691.619316][T19456] ? __pfx_worker_thread+0x10/0x10 [ 691.619354][T19456] ? kthread+0x13a/0x450 [ 691.619385][T19456] ? __pfx_worker_thread+0x10/0x10 [ 691.619420][T19456] kthread+0x370/0x450 [ 691.619452][T19456] ? __pfx_kthread+0x10/0x10 [ 691.619486][T19456] ret_from_fork+0x72b/0xd50 [ 691.619519][T19456] ? __pfx_ret_from_fork+0x10/0x10 [ 691.619549][T19456] ? rcu_is_watching+0x12/0xc0 [ 691.619579][T19456] ? __switch_to+0x800/0x10f0 [ 691.619616][T19456] ? __switch_to_asm+0x39/0x70 [ 691.619649][T19456] ? __pfx_kthread+0x10/0x10 [ 691.619684][T19456] ret_from_fork_asm+0x1a/0x30 [ 691.619732][T19456] [ 691.619780][T19456] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 691.955635][T19456] Bluetooth: hci2: failed to register connection device [ 691.997248][T19456] Bluetooth: hci0: command 0x0406 tx timeout [ 692.097959][T24782] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 692.136834][T24782] audit: out of memory in audit_log_start [ 692.582160][T24790] netlink: 342 bytes leftover after parsing attributes in process `syz.1.9010'. [ 692.837913][T24798] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 693.598777][T19456] Bluetooth: hci2: command 0x0406 tx timeout [ 693.832770][ T29] audit: type=1326 audit(4294967297.790:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.9017" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaddd9e0d9 code=0x0 [ 694.077872][T19456] Bluetooth: hci0: command 0x0406 tx timeout [ 695.468711][T24877] netlink: Invalid conntrack timeout [ 695.677642][T19456] Bluetooth: hci2: command 0x0406 tx timeout [ 696.156506][T19456] Bluetooth: hci0: command 0x0406 tx timeout [ 696.681119][T24915] openvswitch: netlink: IP tunnel dst address not specified [ 697.647964][T24948] openvswitch: netlink: IP tunnel dst address not specified [ 697.756561][T14855] Bluetooth: hci2: command 0x0406 tx timeout [ 697.804739][T24953] openvswitch: netlink: Missing valid actions attribute. [ 698.010104][T24955] NFSD: Failed to start, no listeners configured. [ 698.237563][T19540] Bluetooth: hci0: command 0x0406 tx timeout [ 699.675373][T25017] netlink: 'syz.0.9111': attribute type 2 has an invalid length. [ 699.836114][T19540] Bluetooth: hci2: command 0x0406 tx timeout [ 701.210320][T25071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9136'. [ 702.352063][T25101] Process accounting resumed [ 702.642746][T25111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9154'. [ 704.716852][T25180] NFSD: Failed to start, no listeners configured. [ 706.612361][T25239] netlink: Invalid conntrack helper [ 707.798270][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9225'. [ 708.790831][T25295] NFSD: Failed to start, no listeners configured. [ 710.354412][T25335] netlink: 'syz.2.9255': attribute type 1 has an invalid length. [ 710.641861][T25342] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 711.303172][T19540] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 711.360771][T19540] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 711.368775][T19540] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 711.378341][T19540] CPU: 0 UID: 0 PID: 19540 Comm: kworker/u12:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 711.378382][T19540] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 711.378392][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.378409][T19540] Workqueue: hci3 hci_rx_work [ 711.378446][T19540] Call Trace: [ 711.378454][T19540] [ 711.378464][T19540] dump_stack_lvl+0x100/0x190 [ 711.378499][T19540] sysfs_warn_dup.cold+0x1c/0x28 [ 711.378537][T19540] sysfs_create_dir_ns+0x24b/0x2b0 [ 711.378576][T19540] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.378612][T19540] ? find_held_lock+0x2b/0x80 [ 711.378643][T19540] ? kobject_add_internal+0x25f/0x930 [ 711.378669][T19540] ? kobject_add_internal+0x25f/0x930 [ 711.378697][T19540] ? do_raw_spin_unlock+0x145/0x1e0 [ 711.378726][T19540] kobject_add_internal+0x2c8/0x930 [ 711.378756][T19540] kobject_add+0x16a/0x1e0 [ 711.378780][T19540] ? __pfx_kobject_add+0x10/0x10 [ 711.378804][T19540] ? class_to_subsys+0x10f/0x150 [ 711.378834][T19540] ? kobject_put+0xb9/0x640 [ 711.378855][T19540] ? _raw_spin_unlock+0x28/0x50 [ 711.378891][T19540] device_add+0x294/0x1970 [ 711.378915][T19540] ? __pfx_dev_set_name+0x10/0x10 [ 711.378944][T19540] ? __pfx_device_add+0x10/0x10 [ 711.378969][T19540] ? mgmt_send_event_skb+0x2fb/0x460 [ 711.379011][T19540] hci_conn_add_sysfs+0x1a3/0x260 [ 711.379050][T19540] le_conn_complete_evt+0x11eb/0x1f60 [ 711.379089][T19540] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.379120][T19540] ? __pfx_bt_warn+0x10/0x10 [ 711.379140][T19540] ? hci_event_packet+0x186/0xcd0 [ 711.379178][T19540] hci_le_conn_complete_evt+0x23c/0x3a0 [ 711.379212][T19540] ? skb_pull_data+0x15f/0x1e0 [ 711.379243][T19540] hci_le_meta_evt+0x34a/0x5f0 [ 711.379277][T19540] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 711.379314][T19540] hci_event_packet+0x51c/0xcd0 [ 711.379346][T19540] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.379381][T19540] ? __pfx_hci_event_packet+0x10/0x10 [ 711.379417][T19540] ? kcov_remote_start+0x384/0x670 [ 711.379452][T19540] ? lockdep_hardirqs_on+0x78/0x100 [ 711.379499][T19540] hci_rx_work+0x451/0xfc0 [ 711.379539][T19540] process_one_work+0xa23/0x1940 [ 711.379587][T19540] ? __pfx_process_one_work+0x10/0x10 [ 711.379632][T19540] ? __pfx_hci_rx_work+0x10/0x10 [ 711.379666][T19540] worker_thread+0x5ef/0xe50 [ 711.379710][T19540] ? __pfx_worker_thread+0x10/0x10 [ 711.379747][T19540] ? kthread+0x13a/0x450 [ 711.379779][T19540] ? __pfx_worker_thread+0x10/0x10 [ 711.379813][T19540] kthread+0x370/0x450 [ 711.379845][T19540] ? __pfx_kthread+0x10/0x10 [ 711.379880][T19540] ret_from_fork+0x72b/0xd50 [ 711.379911][T19540] ? __pfx_ret_from_fork+0x10/0x10 [ 711.379943][T19540] ? __switch_to+0x800/0x10f0 [ 711.379981][T19540] ? __switch_to_asm+0x39/0x70 [ 711.380014][T19540] ? __pfx_kthread+0x10/0x10 [ 711.380048][T19540] ret_from_fork_asm+0x1a/0x30 [ 711.380096][T19540] [ 711.381793][T19540] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.710658][T19540] Bluetooth: hci3: failed to register connection device [ 713.356343][T19540] Bluetooth: hci3: command 0x0406 tx timeout [ 715.436335][T19540] Bluetooth: hci3: command 0x0406 tx timeout [ 716.529378][T25453] No such timeout policy "" [ 716.567196][T25453] netlink: Failed to associated timeout policy '' [ 717.446319][T25482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9324'. [ 717.516152][T19540] Bluetooth: hci3: command 0x0406 tx timeout [ 718.073777][T25497] NFSD: Failed to start, no listeners configured. [ 719.538758][T25531] NFSD: Failed to start, no listeners configured. [ 719.596640][T14855] Bluetooth: hci3: command 0x0406 tx timeout [ 721.958023][T25607] NFSD: Failed to start, no listeners configured. [ 725.932085][ T29] audit: type=1800 audit(4294967329.880:40): pid=25735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9446" name="lu_gp_id" dev="configfs" ino=76899 res=0 errno=0 [ 727.294765][T25779] netlink: 'syz.4.9466': attribute type 4 has an invalid length. [ 727.331791][T25779] netlink: 'syz.4.9466': attribute type 1 has an invalid length. [ 729.471196][T25839] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 730.305152][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9507'. [ 731.040623][T25891] netlink: 'syz.2.9519': attribute type 1 has an invalid length. [ 731.792257][ T29] audit: type=1800 audit(4294967335.750:41): pid=25914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9530" name="lu_gp_id" dev="configfs" ino=77554 res=0 errno=0 [ 731.921304][T25919] ALUA LU Group already has a valid ID, ignoring request [ 732.216905][T25926] program syz.1.9536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.384614][T25929] Process accounting paused [ 733.294675][T25959] FAULT_INJECTION: forcing a failure. [ 733.294675][T25959] name failslab, interval 1, probability 0, space 0, times 0 [ 733.345370][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9551'. [ 733.369710][T25959] CPU: 0 UID: 0 PID: 25959 Comm: syz.1.9552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 733.369759][T25959] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 733.369768][T25959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.369783][T25959] Call Trace: [ 733.369791][T25959] [ 733.369801][T25959] dump_stack_lvl+0x100/0x190 [ 733.369833][T25959] should_fail_ex.cold+0x5/0xa [ 733.369860][T25959] should_failslab+0xc2/0x120 [ 733.369899][T25959] kmem_cache_alloc_noprof+0x91/0x6a0 [ 733.369931][T25959] ? __pfx_map_id_range_down+0x10/0x10 [ 733.369967][T25959] ? security_inode_alloc+0x3b/0x2c0 [ 733.370070][T25959] security_inode_alloc+0x3b/0x2c0 [ 733.370102][T25959] inode_init_always_gfp+0xc77/0xfb0 [ 733.370132][T25959] alloc_inode+0x8e/0x250 [ 733.370164][T25959] sock_alloc+0x44/0x280 [ 733.370202][T25959] ? security_socket_create+0x7f/0x250 [ 733.370236][T25959] __sock_create+0xc2/0x860 [ 733.370268][T25959] __sys_socket+0x14d/0x260 [ 733.370295][T25959] ? exc_page_fault+0x6f/0xd0 [ 733.370328][T25959] ? __pfx___sys_socket+0x10/0x10 [ 733.370364][T25959] __x64_sys_socket+0x72/0xb0 [ 733.370392][T25959] ? lockdep_hardirqs_on+0x78/0x100 [ 733.370425][T25959] do_syscall_64+0x115/0x840 [ 733.370457][T25959] ? clear_bhb_loop+0x70/0xc0 [ 733.370486][T25959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.370511][T25959] RIP: 0033:0x7fa72f99f947 [ 733.370531][T25959] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.370554][T25959] RSP: 002b:00007fa73081bf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 733.370577][T25959] RAX: ffffffffffffffda RBX: 00007fa72fc25fa0 RCX: 00007fa72f99f947 [ 733.370593][T25959] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 733.370608][T25959] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 733.370623][T25959] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 733.370638][T25959] R13: 00007fa72fc26038 R14: 00007fa72fc25fa0 R15: 00007fff2943e9a8 [ 733.370668][T25959] [ 733.372626][T25959] socket: no more sockets [ 734.516878][T25987] netlink: 5316 bytes leftover after parsing attributes in process `syz.1.9564'. [ 735.345417][T26009] FAULT_INJECTION: forcing a failure. [ 735.345417][T26009] name failslab, interval 1, probability 0, space 0, times 0 [ 735.363403][T26010] sctp: [Deprecated]: syz.4.9575 (pid 26010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.363403][T26010] Use struct sctp_sack_info instead [ 735.393734][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9576'. [ 735.413591][T26009] CPU: 0 UID: 0 PID: 26009 Comm: syz.1.9574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 735.413634][T26009] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 735.413643][T26009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.413658][T26009] Call Trace: [ 735.413666][T26009] [ 735.413675][T26009] dump_stack_lvl+0x100/0x190 [ 735.413715][T26009] should_fail_ex.cold+0x5/0xa [ 735.413742][T26009] should_failslab+0xc2/0x120 [ 735.413778][T26009] kmem_cache_alloc_noprof+0x91/0x6a0 [ 735.413812][T26009] ? key_alloc+0x3c5/0x1310 [ 735.413915][T26009] key_alloc+0x3c5/0x1310 [ 735.413959][T26009] ? __pfx_key_alloc+0x10/0x10 [ 735.413994][T26009] ? lsm_blob_alloc+0x68/0x90 [ 735.414022][T26009] keyring_alloc+0x44/0xc0 [ 735.414063][T26009] install_thread_keyring_to_cred+0xc1/0x140 [ 735.414117][T26009] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 735.414151][T26009] __do_sys_keyctl+0x316/0x5a0 [ 735.414183][T26009] do_syscall_64+0x115/0x840 [ 735.414218][T26009] ? clear_bhb_loop+0x70/0xc0 [ 735.414248][T26009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.414273][T26009] RIP: 0033:0x7fa72f99e0d9 [ 735.414294][T26009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.414318][T26009] RSP: 002b:00007fa73081d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 735.414341][T26009] RAX: ffffffffffffffda RBX: 00007fa72fc25fa0 RCX: 00007fa72f99e0d9 [ 735.414357][T26009] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 735.414372][T26009] RBP: 00007fa72fa35024 R08: 0000000000000008 R09: 0000000000000000 [ 735.414386][T26009] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 735.414402][T26009] R13: 00007fa72fc26038 R14: 00007fa72fc25fa0 R15: 00007fff2943e9a8 [ 735.414432][T26009] [ 735.885418][T26025] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 735.893854][T26025] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 736.514647][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9591'. [ 736.833239][T26051] overlayfs: missing 'lowerdir' [ 737.802165][T26078] NFSD: Failed to start, no listeners configured. [ 738.062652][ T29] audit: type=1800 audit(4294967342.020:42): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9614" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 739.690523][T26141] kAFS: No cell specified [ 740.029261][T26143] zswap: compressor not available [ 741.993129][T26208] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 742.047096][T26210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9666'. [ 743.806967][T26253] NFSD: Failed to start, no listeners configured. [ 745.534665][ T29] audit: type=1800 audit(4294967349.490:43): pid=26296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9701" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 746.520859][T26320] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by "u9XH/Kx&F\x09l{qXYMM-`Df5_|M.\x22@pK!KOΜpiuB++%p,q&hg2X귃K^ec68LUD;U9{SMa^Btʓ1~{R\x0d1Mh-[=oq\x22xWyXJZo=ksƆ$Ni܍r] T7я1o& } Z*\x0b$p\x0aN\x07!}}.zpBfuYh94|׏:O$`]d̴x-vzH+!L0\x1b57꒕\x0a_W0-7,\x224l\x0dfHT,hPDZ2h&fyMz#E3#q;\x22j\x07Cʨ\x0d_FG7mmPP;~=O{I1w@s/𛚮\x0c)z*JO#SOˆ21=Lpdְ1+,5.?AF;2~_Xgbz2p$P\x0d\x0a~[~_@4ϤFɢJ/_s~5~W5O\x5c|RX!4G]vpdBMl(4N[KWGV Tp2^>Gs\x0aaS}=x?`m16 3ㆧK {/}uv\x0c(-H\x1b\x0bS?\x09q7YdwcC4^%xRs̚Lw=jaH\x0c+L{\x07l<2r\x0c(7ZRQ?qAYA1k_Wk4\x0b [ 747.604626][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.732214][T26347] FAULT_INJECTION: forcing a failure. [ 747.732214][T26347] name failslab, interval 1, probability 0, space 0, times 0 [ 747.780185][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.853826][T26347] CPU: 0 UID: 0 PID: 26347 Comm: syz.4.9721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.853869][T26347] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.853878][T26347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.853892][T26347] Call Trace: [ 747.853900][T26347] [ 747.853909][T26347] dump_stack_lvl+0x100/0x190 [ 747.853942][T26347] should_fail_ex.cold+0x5/0xa [ 747.853969][T26347] should_failslab+0xc2/0x120 [ 747.854005][T26347] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 747.854038][T26347] ? __d_alloc+0x35/0xa50 [ 747.854071][T26347] __d_alloc+0x35/0xa50 [ 747.854101][T26347] d_alloc+0x4a/0x1e0 [ 747.854130][T26347] lookup_one_qstr_excl+0x171/0x250 [ 747.854161][T26347] ? mnt_want_write+0x161/0x410 [ 747.854201][T26347] filename_create+0x1cf/0x400 [ 747.854239][T26347] ? __pfx_filename_create+0x10/0x10 [ 747.854288][T26347] filename_mknodat+0x190/0x7f0 [ 747.854319][T26347] ? __pfx_filename_mknodat+0x10/0x10 [ 747.854346][T26347] ? strncpy_from_user+0x19d/0x2d0 [ 747.854464][T26347] ? do_getname+0x191/0x390 [ 747.854505][T26347] __x64_sys_mknod+0x8f/0xc0 [ 747.854533][T26347] do_syscall_64+0x115/0x840 [ 747.854567][T26347] ? clear_bhb_loop+0x70/0xc0 [ 747.854598][T26347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.854624][T26347] RIP: 0033:0x7f465599e0d9 [ 747.854643][T26347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.854667][T26347] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 747.854690][T26347] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 747.854706][T26347] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 747.854722][T26347] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 747.854737][T26347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.854751][T26347] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 747.854783][T26347] [ 748.895504][T26370] sctp: [Deprecated]: syz.0.9733 (pid 26370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.895504][T26370] Use struct sctp_sack_info instead [ 749.018877][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9735'. [ 749.335152][T26382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9739'. [ 749.933265][T26404] netlink: 'syz.4.9749': attribute type 1 has an invalid length. [ 751.847470][T26467] tunl0: entered allmulticast mode [ 753.813541][T26501] FAULT_INJECTION: forcing a failure. [ 753.813541][T26501] name failslab, interval 1, probability 0, space 0, times 0 [ 753.873367][T26501] CPU: 0 UID: 0 PID: 26501 Comm: syz.1.9793 Tainted: G U L syzkaller #0 PREEMPT(full) [ 753.873409][T26501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 753.873419][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.873434][T26501] Call Trace: [ 753.873442][T26501] [ 753.873452][T26501] dump_stack_lvl+0x100/0x190 [ 753.873485][T26501] should_fail_ex.cold+0x5/0xa [ 753.873513][T26501] should_failslab+0xc2/0x120 [ 753.873548][T26501] __kmalloc_noprof+0xfc/0x820 [ 753.873578][T26501] ? trace_kmalloc+0xeb/0x110 [ 753.873612][T26501] ? lsm_blob_alloc+0x68/0x90 [ 753.873641][T26501] lsm_blob_alloc+0x68/0x90 [ 753.873665][T26501] security_sk_alloc+0x2d/0x290 [ 753.873695][T26501] sk_prot_alloc+0x12a/0x2a0 [ 753.873725][T26501] sk_alloc+0x36/0xe80 [ 753.873763][T26501] __netlink_create+0x5e/0x2c0 [ 753.873867][T26501] ? __wake_up+0x3f/0x60 [ 753.873902][T26501] netlink_create+0x29b/0x610 [ 753.873926][T26501] ? __pfx_genl_bind+0x10/0x10 [ 753.873955][T26501] ? __pfx_genl_unbind+0x10/0x10 [ 753.873984][T26501] ? __pfx_genl_release+0x10/0x10 [ 753.874020][T26501] __sock_create+0x339/0x860 [ 753.874053][T26501] __sys_socket+0x14d/0x260 [ 753.874088][T26501] ? exc_page_fault+0x6f/0xd0 [ 753.874120][T26501] ? __pfx___sys_socket+0x10/0x10 [ 753.874158][T26501] __x64_sys_socket+0x72/0xb0 [ 753.874187][T26501] ? lockdep_hardirqs_on+0x78/0x100 [ 753.874220][T26501] do_syscall_64+0x115/0x840 [ 753.874253][T26501] ? clear_bhb_loop+0x70/0xc0 [ 753.874283][T26501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.874308][T26501] RIP: 0033:0x7fa72f99f947 [ 753.874328][T26501] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.874353][T26501] RSP: 002b:00007fa73081bf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 753.874376][T26501] RAX: ffffffffffffffda RBX: 00007fa72fc25fa0 RCX: 00007fa72f99f947 [ 753.874392][T26501] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 753.874407][T26501] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 753.874421][T26501] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 753.874436][T26501] R13: 00007fa72fc26038 R14: 00007fa72fc25fa0 R15: 00007fff2943e9a8 [ 753.874467][T26501] [ 756.608398][T26544] FAULT_INJECTION: forcing a failure. [ 756.608398][T26544] name failslab, interval 1, probability 0, space 0, times 0 [ 756.686138][T26544] CPU: 0 UID: 0 PID: 26544 Comm: syz.4.9811 Tainted: G U L syzkaller #0 PREEMPT(full) [ 756.686181][T26544] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 756.686190][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.686205][T26544] Call Trace: [ 756.686213][T26544] [ 756.686222][T26544] dump_stack_lvl+0x100/0x190 [ 756.686259][T26544] should_fail_ex.cold+0x5/0xa [ 756.686292][T26544] should_failslab+0xc2/0x120 [ 756.686328][T26544] __kmalloc_noprof+0xfc/0x820 [ 756.686357][T26544] ? __lock_acquire+0x49f/0x1a40 [ 756.686396][T26544] ? sk_prot_alloc+0x10b/0x2a0 [ 756.686427][T26544] sk_prot_alloc+0x10b/0x2a0 [ 756.686454][T26544] sk_alloc+0x36/0xe80 [ 756.686489][T26544] pptp_create+0x32/0x340 [ 756.686518][T26544] pppox_create+0x15c/0x2c0 [ 756.686545][T26544] __sock_create+0x339/0x860 [ 756.686583][T26544] __sys_socket+0x14d/0x260 [ 756.686613][T26544] ? __pfx___sys_socket+0x10/0x10 [ 756.686650][T26544] __x64_sys_socket+0x72/0xb0 [ 756.686678][T26544] ? lockdep_hardirqs_on+0x78/0x100 [ 756.686712][T26544] do_syscall_64+0x115/0x840 [ 756.686745][T26544] ? clear_bhb_loop+0x70/0xc0 [ 756.686775][T26544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.686800][T26544] RIP: 0033:0x7f465599e0d9 [ 756.686826][T26544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.686850][T26544] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 756.686874][T26544] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 756.686891][T26544] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 0000000000000018 [ 756.686906][T26544] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 756.686921][T26544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.686936][T26544] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 756.686966][T26544] [ 758.179367][T26582] netlink: 'syz.0.9827': attribute type 23 has an invalid length. [ 759.498695][T26616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9845'. [ 760.424580][T26640] FAULT_INJECTION: forcing a failure. [ 760.424580][T26640] name failslab, interval 1, probability 0, space 0, times 0 [ 760.513004][T26640] CPU: 0 UID: 0 PID: 26640 Comm: syz.4.9858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.513046][T26640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.513056][T26640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.513070][T26640] Call Trace: [ 760.513078][T26640] [ 760.513087][T26640] dump_stack_lvl+0x100/0x190 [ 760.513119][T26640] should_fail_ex.cold+0x5/0xa [ 760.513147][T26640] should_failslab+0xc2/0x120 [ 760.513182][T26640] __kmalloc_noprof+0xfc/0x820 [ 760.513211][T26640] ? __lock_acquire+0x49f/0x1a40 [ 760.513251][T26640] ? tomoyo_encode2+0x2f6/0x3c0 [ 760.513370][T26640] tomoyo_encode2+0x2f6/0x3c0 [ 760.513415][T26640] tomoyo_encode+0x29/0x50 [ 760.513452][T26640] tomoyo_mount_acl+0x14c/0x8b0 [ 760.513488][T26640] ? is_bpf_text_address+0x8a/0x1a0 [ 760.513525][T26640] ? bpf_ksym_find+0x124/0x1c0 [ 760.513552][T26640] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.513598][T26640] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 760.513632][T26640] ? kernel_text_address+0x8d/0x100 [ 760.513669][T26640] ? __lock_acquire+0x49f/0x1a40 [ 760.513708][T26640] ? unwind_get_return_address+0x59/0xa0 [ 760.513773][T26640] ? tomoyo_domain+0xb2/0x150 [ 760.513798][T26640] ? tomoyo_profile+0x47/0x60 [ 760.513826][T26640] tomoyo_mount_permission+0x214/0x460 [ 760.513862][T26640] ? tomoyo_mount_permission+0x1f6/0x460 [ 760.513900][T26640] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 760.513954][T26640] security_sb_mount+0xdd/0x270 [ 760.513986][T26640] path_mount+0x158/0x23d0 [ 760.514044][T26640] ? __pfx_path_mount+0x10/0x10 [ 760.514071][T26640] ? lockdep_hardirqs_on+0x78/0x100 [ 760.514108][T26640] ? putname+0xb1/0x110 [ 760.514134][T26640] ? kmem_cache_free+0x127/0x6b0 [ 760.514170][T26640] ? __x64_sys_mount+0x293/0x310 [ 760.514198][T26640] __x64_sys_mount+0x293/0x310 [ 760.514228][T26640] ? __pfx___x64_sys_mount+0x10/0x10 [ 760.514267][T26640] do_syscall_64+0x115/0x840 [ 760.514300][T26640] ? clear_bhb_loop+0x70/0xc0 [ 760.514336][T26640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.514361][T26640] RIP: 0033:0x7f465599e0d9 [ 760.514382][T26640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.514406][T26640] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.514430][T26640] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 760.514446][T26640] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 760.514462][T26640] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 760.514477][T26640] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 760.514492][T26640] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 760.514522][T26640] [ 761.539996][T26658] netlink: 'syz.4.9866': attribute type 33 has an invalid length. [ 761.982622][T26641] NFSD: Failed to start, no listeners configured. [ 762.716398][T26668] Process accounting resumed [ 763.818105][T26712] NFSD: Failed to start, no listeners configured. [ 765.524830][T26750] FAULT_INJECTION: forcing a failure. [ 765.524830][T26750] name failslab, interval 1, probability 0, space 0, times 0 [ 765.596502][T26750] CPU: 0 UID: 0 PID: 26750 Comm: syz.4.9904 Tainted: G U L syzkaller #0 PREEMPT(full) [ 765.596544][T26750] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 765.596553][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.596569][T26750] Call Trace: [ 765.596577][T26750] [ 765.596586][T26750] dump_stack_lvl+0x100/0x190 [ 765.596619][T26750] should_fail_ex.cold+0x5/0xa [ 765.596646][T26750] should_failslab+0xc2/0x120 [ 765.596682][T26750] __kmalloc_noprof+0xfc/0x820 [ 765.596715][T26750] ? security_inode_alloc+0x3b/0x2c0 [ 765.596761][T26750] ? sk_prot_alloc+0x10b/0x2a0 [ 765.596792][T26750] sk_prot_alloc+0x10b/0x2a0 [ 765.596820][T26750] sk_alloc+0x36/0xe80 [ 765.596856][T26750] packet_create+0x127/0x8e0 [ 765.596891][T26750] __sock_create+0x339/0x860 [ 765.596925][T26750] __sys_socket+0x14d/0x260 [ 765.596955][T26750] ? __pfx___sys_socket+0x10/0x10 [ 765.596992][T26750] __x64_sys_socket+0x72/0xb0 [ 765.597021][T26750] ? lockdep_hardirqs_on+0x78/0x100 [ 765.597055][T26750] do_syscall_64+0x115/0x840 [ 765.597087][T26750] ? clear_bhb_loop+0x70/0xc0 [ 765.597117][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.597143][T26750] RIP: 0033:0x7f465599e0d9 [ 765.597162][T26750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.597187][T26750] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 765.597215][T26750] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 765.597231][T26750] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 765.597246][T26750] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 765.597261][T26750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.597275][T26750] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 765.597306][T26750] [ 768.374356][T26836] openvswitch: netlink: IPv4 tunnel dst address is zero [ 768.677776][T26840] ovs_?: entered promiscuous mode [ 769.877566][T26872] ovs_?: entered promiscuous mode [ 771.258145][T26912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9976'. [ 772.974130][T26969] netlink: 334 bytes leftover after parsing attributes in process `syz.4.10003'. [ 774.444286][T27015] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 774.911834][T27026] NFSD: Failed to start, no listeners configured. [ 775.430636][ T29] audit: type=1800 audit(4294967379.390:44): pid=27041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10032" name=04 dev="tmpfs" ino=4207 res=0 errno=0 [ 775.820244][T27055] NFSD: Failed to start, no listeners configured. [ 776.113350][T14855] Bluetooth: hci2: Malformed HCI Event [ 777.562548][T27101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10063'. [ 779.255523][T27138] NFSD: Failed to start, no listeners configured. [ 780.797725][T27169] sctp: [Deprecated]: syz.1.10094 (pid 27169) Use of int in maxseg socket option. [ 780.797725][T27169] Use struct sctp_assoc_value instead [ 781.054809][T27171] nbd: socks must be embedded in a SOCK_ITEM attr [ 782.814745][T27211] NFSD: Failed to start, no listeners configured. [ 783.675772][T27238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10123'. [ 783.727354][T27238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10123'. [ 784.153119][T27247] NFSD: Failed to start, no listeners configured. [ 785.685218][T27288] netlink: 342 bytes leftover after parsing attributes in process `syz.2.10146'. [ 785.731940][T27287] netlink: 'syz.0.10145': attribute type 1 has an invalid length. [ 786.131596][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10150'. [ 789.283079][T27351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10175'. [ 791.942660][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10198'. [ 793.298992][T27440] Device name cannot be null; rc = [-22] [ 793.314894][T27433] Process accounting paused [ 793.543547][T27447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10219'. [ 794.002692][T27456] vivid-007: ================= START STATUS ================= [ 794.047536][T27456] vivid-007: Generate PTS: true [ 794.087532][T27456] vivid-007: Generate SCR: true [ 794.126991][T27456] tpg source WxH: 320x240 (Y'CbCr) [ 794.150654][T27456] tpg field: 1 [ 794.173898][T27456] tpg crop: (0,0)/320x240 [ 794.191095][T27456] tpg compose: (0,0)/320x240 [ 794.203921][T27456] tpg colorspace: 8 [ 794.219868][T27456] tpg transfer function: 0/0 [ 794.243082][T27456] tpg Y'CbCr encoding: 0/0 [ 794.261646][T27456] tpg quantization: 0/0 [ 794.278017][T27456] tpg RGB range: 0/2 [ 794.293626][T27456] vivid-007: ================== END STATUS ================== [ 794.993323][T27474] NFSD: Failed to start, no listeners configured. [ 795.488562][T27485] futex_wake_op: syz.2.10234 tries to shift op by -2048; fix this program [ 795.533619][T27485] futex_wake_op: syz.2.10234 tries to shift op by -2048; fix this program [ 799.255207][T27567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10274'. [ 801.071955][T27617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10296'. [ 802.921555][T14855] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 802.921594][T14855] Bluetooth: hci1: unexpected event for opcode 0x647c [ 805.597859][T14855] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 805.597899][T14855] Bluetooth: hci0: unexpected event for opcode 0x647c [ 806.994655][T27771] FAULT_INJECTION: forcing a failure. [ 806.994655][T27771] name failslab, interval 1, probability 0, space 0, times 0 [ 807.034661][T27771] CPU: 0 UID: 0 PID: 27771 Comm: syz.0.10366 Tainted: G U L syzkaller #0 PREEMPT(full) [ 807.034703][T27771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 807.034713][T27771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 807.034727][T27771] Call Trace: [ 807.034736][T27771] [ 807.034745][T27771] dump_stack_lvl+0x100/0x190 [ 807.034780][T27771] should_fail_ex.cold+0x5/0xa [ 807.034808][T27771] should_failslab+0xc2/0x120 [ 807.034845][T27771] kmem_cache_alloc_noprof+0x91/0x6a0 [ 807.034877][T27771] ? __pfx_map_id_range_down+0x10/0x10 [ 807.034914][T27771] ? security_inode_alloc+0x3b/0x2c0 [ 807.034951][T27771] security_inode_alloc+0x3b/0x2c0 [ 807.034983][T27771] inode_init_always_gfp+0xc77/0xfb0 [ 807.035013][T27771] alloc_inode+0x8e/0x250 [ 807.035046][T27771] new_inode+0x22/0x1c0 [ 807.035080][T27771] hugetlbfs_get_inode+0x39a/0x700 [ 807.035228][T27771] hugetlb_file_setup+0x15b/0x5b0 [ 807.035263][T27771] ksys_mmap_pgoff+0x242/0x610 [ 807.035301][T27771] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 807.035336][T27771] ? xfd_validate_state+0x129/0x190 [ 807.035370][T27771] __x64_sys_mmap+0x125/0x190 [ 807.035404][T27771] do_syscall_64+0x115/0x840 [ 807.035438][T27771] ? clear_bhb_loop+0x70/0xc0 [ 807.035469][T27771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.035494][T27771] RIP: 0033:0x7f224db9e0d9 [ 807.035514][T27771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.035540][T27771] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 807.035563][T27771] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 807.035579][T27771] RDX: 00000000003ffffe RSI: 0000000000a00006 RDI: 0000000000000000 [ 807.035594][T27771] RBP: 00007f224dc35024 R08: 0000000000000602 R09: 0000300000000000 [ 807.035609][T27771] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 807.035624][T27771] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 807.035660][T27771] [ 807.488123][T14855] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 807.488163][T14855] Bluetooth: hci2: unexpected event for opcode 0x647c [ 809.039504][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.045914][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.896369][T27845] IPVS: length: 537396514 != 24 [ 810.165860][T27853] FAULT_INJECTION: forcing a failure. [ 810.165860][T27853] name failslab, interval 1, probability 0, space 0, times 0 [ 810.234518][T27853] CPU: 0 UID: 0 PID: 27853 Comm: syz.0.10405 Tainted: G U L syzkaller #0 PREEMPT(full) [ 810.234562][T27853] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 810.234572][T27853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 810.234587][T27853] Call Trace: [ 810.234596][T27853] [ 810.234605][T27853] dump_stack_lvl+0x100/0x190 [ 810.234639][T27853] should_fail_ex.cold+0x5/0xa [ 810.234667][T27853] should_failslab+0xc2/0x120 [ 810.234703][T27853] __kmalloc_noprof+0xfc/0x820 [ 810.234732][T27853] ? __lock_acquire+0x49f/0x1a40 [ 810.234773][T27853] ? sk_prot_alloc+0x10b/0x2a0 [ 810.234804][T27853] sk_prot_alloc+0x10b/0x2a0 [ 810.234832][T27853] sk_alloc+0x36/0xe80 [ 810.234871][T27853] pppol2tp_create+0x32/0x250 [ 810.234964][T27853] pppox_create+0x15c/0x2c0 [ 810.234992][T27853] __sock_create+0x339/0x860 [ 810.235026][T27853] __sys_socket+0x14d/0x260 [ 810.235056][T27853] ? __pfx___sys_socket+0x10/0x10 [ 810.235094][T27853] __x64_sys_socket+0x72/0xb0 [ 810.235122][T27853] ? lockdep_hardirqs_on+0x78/0x100 [ 810.235156][T27853] do_syscall_64+0x115/0x840 [ 810.235188][T27853] ? clear_bhb_loop+0x70/0xc0 [ 810.235218][T27853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.235243][T27853] RIP: 0033:0x7f224db9e0d9 [ 810.235263][T27853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.235287][T27853] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 810.235311][T27853] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 810.235327][T27853] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 810.235348][T27853] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 810.235363][T27853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.235377][T27853] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 810.235408][T27853] [ 811.341759][T14855] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 811.341796][T14855] Bluetooth: hci3: unexpected event for opcode 0x647c [ 811.630072][T27886] netlink: 350 bytes leftover after parsing attributes in process `syz.2.10418'. [ 812.852527][T14855] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 812.852564][T14855] Bluetooth: hci1: unexpected event for opcode 0x647c [ 812.952685][T27913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10433'. [ 813.829748][T27936] bridge0: port 3(dummy0) entered blocking state [ 813.856548][T27936] bridge0: port 3(dummy0) entered disabled state [ 813.880374][T27936] dummy0: entered allmulticast mode [ 813.913548][T27936] dummy0: entered promiscuous mode [ 813.937270][T27936] bridge0: port 3(dummy0) entered blocking state [ 813.945845][T27936] bridge0: port 3(dummy0) entered forwarding state [ 814.725144][T27955] FAULT_INJECTION: forcing a failure. [ 814.725144][T27955] name failslab, interval 1, probability 0, space 0, times 0 [ 814.783435][T27955] CPU: 0 UID: 0 PID: 27955 Comm: syz.0.10450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 814.783477][T27955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 814.783487][T27955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 814.783501][T27955] Call Trace: [ 814.783509][T27955] [ 814.783518][T27955] dump_stack_lvl+0x100/0x190 [ 814.783550][T27955] should_fail_ex.cold+0x5/0xa [ 814.783578][T27955] should_failslab+0xc2/0x120 [ 814.783614][T27955] kmem_cache_alloc_noprof+0x91/0x6a0 [ 814.783647][T27955] ? dup_fd+0x4d/0xd10 [ 814.783676][T27955] dup_fd+0x4d/0xd10 [ 814.783698][T27955] ? __pfx_get_nodes+0x10/0x10 [ 814.783747][T27955] __x64_sys_close_range+0x405/0x5d0 [ 814.783777][T27955] ? __pfx___x64_sys_close_range+0x10/0x10 [ 814.783813][T27955] do_syscall_64+0x115/0x840 [ 814.783847][T27955] ? clear_bhb_loop+0x70/0xc0 [ 814.783877][T27955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.783902][T27955] RIP: 0033:0x7f224db9e0d9 [ 814.783921][T27955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.783946][T27955] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 814.783969][T27955] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 814.783985][T27955] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 814.784001][T27955] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 814.784015][T27955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.784029][T27955] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 814.784059][T27955] [ 816.962819][T28025] bridge0: port 3(batadv0) entered blocking state [ 816.986732][T28025] bridge0: port 3(batadv0) entered disabled state [ 817.009480][T28025] batadv0: entered allmulticast mode [ 817.042006][T28025] batadv0: entered promiscuous mode [ 817.065453][T28025] bridge0: port 3(batadv0) entered blocking state [ 817.072086][T28025] bridge0: port 3(batadv0) entered forwarding state [ 817.239526][T28033] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10486'. [ 817.316359][T20347] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 817.326114][T20347] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 818.071637][T28049] FAULT_INJECTION: forcing a failure. [ 818.071637][T28049] name failslab, interval 1, probability 0, space 0, times 0 [ 818.131118][T28049] CPU: 0 UID: 0 PID: 28049 Comm: syz.0.10493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 818.131161][T28049] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 818.131170][T28049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.131185][T28049] Call Trace: [ 818.131192][T28049] [ 818.131202][T28049] dump_stack_lvl+0x100/0x190 [ 818.131236][T28049] should_fail_ex.cold+0x5/0xa [ 818.131263][T28049] should_failslab+0xc2/0x120 [ 818.131298][T28049] kmem_cache_alloc_noprof+0x91/0x6a0 [ 818.131330][T28049] ? sk_prot_alloc+0x60/0x2a0 [ 818.131363][T28049] sk_prot_alloc+0x60/0x2a0 [ 818.131390][T28049] sk_alloc+0x36/0xe80 [ 818.131425][T28049] rds_create+0x9e/0x5e0 [ 818.131530][T28049] __sock_create+0x339/0x860 [ 818.131568][T28049] __sys_socket+0x14d/0x260 [ 818.131597][T28049] ? __pfx___sys_socket+0x10/0x10 [ 818.131635][T28049] __x64_sys_socket+0x72/0xb0 [ 818.131663][T28049] ? lockdep_hardirqs_on+0x78/0x100 [ 818.131697][T28049] do_syscall_64+0x115/0x840 [ 818.131736][T28049] ? clear_bhb_loop+0x70/0xc0 [ 818.131766][T28049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.131791][T28049] RIP: 0033:0x7f224db9e0d9 [ 818.131810][T28049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.131834][T28049] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 818.131857][T28049] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 818.131876][T28049] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 818.131890][T28049] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 818.131905][T28049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.131919][T28049] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 818.131950][T28049] [ 819.350882][T28083] netlink: 82 bytes leftover after parsing attributes in process `syz.2.10509'. [ 823.211654][T28197] random: crng reseeded on system resumption [ 823.669609][T28199] zswap: compressor not available [ 823.839687][T28198] Process accounting resumed [ 824.413083][T28235] FAULT_INJECTION: forcing a failure. [ 824.413083][T28235] name failslab, interval 1, probability 0, space 0, times 0 [ 824.471501][T28235] CPU: 0 UID: 0 PID: 28235 Comm: syz.4.10575 Tainted: G U L syzkaller #0 PREEMPT(full) [ 824.471547][T28235] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 824.471557][T28235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.471571][T28235] Call Trace: [ 824.471579][T28235] [ 824.471588][T28235] dump_stack_lvl+0x100/0x190 [ 824.471619][T28235] should_fail_ex.cold+0x5/0xa [ 824.471647][T28235] should_failslab+0xc2/0x120 [ 824.471683][T28235] kmem_cache_alloc_noprof+0x91/0x6a0 [ 824.471714][T28235] ? sk_prot_alloc+0x60/0x2a0 [ 824.471751][T28235] sk_prot_alloc+0x60/0x2a0 [ 824.471779][T28235] sk_alloc+0x36/0xe80 [ 824.471814][T28235] rds_create+0x9e/0x5e0 [ 824.471845][T28235] __sock_create+0x339/0x860 [ 824.471878][T28235] __sys_socket+0x14d/0x260 [ 824.471907][T28235] ? __pfx___sys_socket+0x10/0x10 [ 824.471959][T28235] __x64_sys_socket+0x72/0xb0 [ 824.471988][T28235] ? lockdep_hardirqs_on+0x78/0x100 [ 824.472021][T28235] do_syscall_64+0x115/0x840 [ 824.472053][T28235] ? clear_bhb_loop+0x70/0xc0 [ 824.472082][T28235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.472107][T28235] RIP: 0033:0x7f465599e0d9 [ 824.472127][T28235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.472151][T28235] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 824.472173][T28235] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 824.472190][T28235] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 824.472204][T28235] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 824.472218][T28235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.472239][T28235] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 824.472270][T28235] [ 829.539564][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10626'. [ 831.190689][T28393] bridge0: port 4(syz_tun) entered blocking state [ 831.228625][T28393] bridge0: port 4(syz_tun) entered disabled state [ 831.257456][T28393] syz_tun: entered allmulticast mode [ 831.289035][T28393] syz_tun: entered promiscuous mode [ 831.328663][T28393] bridge0: port 4(syz_tun) entered blocking state [ 831.335258][T28393] bridge0: port 4(syz_tun) entered forwarding state [ 831.684984][T28405] netlink: 29 bytes leftover after parsing attributes in process `syz.2.10647'. [ 832.206615][T28424] sock: sock_timestamping_bind_phc: sock not bind to device [ 834.207060][T28466] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 834.234182][T28466] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 834.506857][T28466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 834.529889][T28466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 834.608144][T28466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 834.639860][T28466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 834.689864][T28466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 834.737518][T28466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 834.765117][T28466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 836.236385][T14855] Bluetooth: hci0: command 0x0406 tx timeout [ 836.556480][T14855] Bluetooth: hci2: command 0x0406 tx timeout [ 836.716260][T14855] Bluetooth: hci3: command 0x0406 tx timeout [ 836.778411][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10698'. [ 836.798485][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 837.308809][T28544] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by ""[28544] [ 838.127140][T28565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10715'. [ 838.147004][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10714'. [ 838.316223][T14855] Bluetooth: hci0: command 0x0406 tx timeout [ 838.640663][T14855] Bluetooth: hci2: command 0x0406 tx timeout [ 838.796345][T14855] Bluetooth: hci3: command 0x0406 tx timeout [ 838.876099][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 839.314995][T28591] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.10725'. [ 839.603875][T28585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 839.634888][T28585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 839.667924][T28585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 839.707529][T28585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 839.736399][T28585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 840.522650][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10738'. [ 841.438346][T14855] Bluetooth: hci0: command 0x0406 tx timeout [ 841.676288][T14855] Bluetooth: hci2: command 0x0406 tx timeout [ 841.758489][T14855] Bluetooth: hci1: command 0x0406 tx timeout [ 841.764636][T19540] Bluetooth: hci3: command 0x0406 tx timeout [ 843.756149][T14855] Bluetooth: hci2: command 0x0406 tx timeout [ 849.187512][T28835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10831'. [ 850.615655][T28877] bridge0: port 3(ipvlan1) entered blocking state [ 850.651837][T28877] bridge0: port 3(ipvlan1) entered disabled state [ 850.684752][T28877] ipvlan1: entered allmulticast mode [ 850.711932][T28877] veth0_vlan: entered allmulticast mode [ 850.778970][T28877] ipvlan1: left allmulticast mode [ 850.804801][T28877] veth0_vlan: left allmulticast mode [ 851.136450][T28887] ovs_: entered promiscuous mode [ 851.748886][T28905] FAULT_INJECTION: forcing a failure. [ 851.748886][T28905] name failslab, interval 1, probability 0, space 0, times 0 [ 851.814498][T28905] CPU: 0 UID: 0 PID: 28905 Comm: syz.0.10864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 851.814541][T28905] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 851.814550][T28905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.814565][T28905] Call Trace: [ 851.814573][T28905] [ 851.814582][T28905] dump_stack_lvl+0x100/0x190 [ 851.814614][T28905] should_fail_ex.cold+0x5/0xa [ 851.814642][T28905] should_failslab+0xc2/0x120 [ 851.814677][T28905] __kmalloc_noprof+0xfc/0x820 [ 851.814707][T28905] ? trace_kmalloc+0xeb/0x110 [ 851.814741][T28905] ? lsm_blob_alloc+0x68/0x90 [ 851.814770][T28905] lsm_blob_alloc+0x68/0x90 [ 851.814793][T28905] security_sk_alloc+0x2d/0x290 [ 851.814824][T28905] sk_prot_alloc+0x12a/0x2a0 [ 851.814852][T28905] sk_alloc+0x36/0xe80 [ 851.814890][T28905] alg_create+0x9e/0x150 [ 851.814992][T28905] __sock_create+0x339/0x860 [ 851.815027][T28905] __sys_socket+0x14d/0x260 [ 851.815057][T28905] ? __pfx___sys_socket+0x10/0x10 [ 851.815094][T28905] __x64_sys_socket+0x72/0xb0 [ 851.815122][T28905] ? lockdep_hardirqs_on+0x78/0x100 [ 851.815163][T28905] do_syscall_64+0x115/0x840 [ 851.815196][T28905] ? clear_bhb_loop+0x70/0xc0 [ 851.815226][T28905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.815252][T28905] RIP: 0033:0x7f224db9e0d9 [ 851.815272][T28905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.815296][T28905] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 851.815318][T28905] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 851.815335][T28905] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 851.815350][T28905] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 851.815364][T28905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.815379][T28905] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 851.815409][T28905] [ 853.962073][T28963] Process accounting paused [ 854.474162][T28979] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10895'. [ 855.859140][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 855.880181][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10913'. [ 857.043180][T14855] Bluetooth: hci2: Malformed Event: 0x13 [ 859.258377][T29087] syz.4.10943 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 859.418936][T29118] netlink: 206 bytes leftover after parsing attributes in process `syz.1.10957'. [ 859.456447][T29087] CPU: 0 UID: 0 PID: 29087 Comm: syz.4.10943 Tainted: G U L syzkaller #0 PREEMPT(full) [ 859.456490][T29087] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 859.456499][T29087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.456513][T29087] Call Trace: [ 859.456521][T29087] [ 859.456530][T29087] dump_stack_lvl+0x100/0x190 [ 859.456563][T29087] dump_header+0xfb/0x606 [ 859.456591][T29087] oom_kill_process.cold+0xd/0x330 [ 859.456620][T29087] out_of_memory+0x340/0x14f0 [ 859.456666][T29087] ? __pfx_out_of_memory+0x10/0x10 [ 859.456714][T29087] mem_cgroup_out_of_memory+0xc6/0x130 [ 859.456743][T29087] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 859.456769][T29087] ? find_held_lock+0x2b/0x80 [ 859.456805][T29087] ? do_raw_spin_unlock+0x145/0x1e0 [ 859.456834][T29087] ? _raw_spin_unlock+0x28/0x50 [ 859.456866][T29087] try_charge_memcg+0x6e5/0xdf0 [ 859.456908][T29087] ? __pfx_try_charge_memcg+0x10/0x10 [ 859.456945][T29087] ? find_held_lock+0x2b/0x80 [ 859.456974][T29087] ? rcu_read_unlock+0x17/0x60 [ 859.457011][T29087] ? rcu_read_unlock+0x17/0x60 [ 859.457057][T29087] obj_cgroup_charge_pages+0x22/0x1d0 [ 859.457096][T29087] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 859.457140][T29087] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 859.457171][T29087] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.457204][T29087] ? stack_depot_save_flags+0x479/0x9d0 [ 859.457236][T29087] ? kasan_save_stack+0x3f/0x50 [ 859.457265][T29087] ? kasan_save_stack+0x30/0x50 [ 859.457294][T29087] ? kasan_save_track+0x14/0x30 [ 859.457328][T29087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 859.457390][T29087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.457426][T29087] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 859.457466][T29087] ? __lock_acquire+0x49f/0x1a40 [ 859.457503][T29087] ? __css_rstat_updated+0x1ce/0x5a0 [ 859.457543][T29087] ? __pfx___css_rstat_updated+0x10/0x10 [ 859.457584][T29087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 859.457623][T29087] ? policy_nodemask+0xed/0x4f0 [ 859.457661][T29087] alloc_pages_mpol+0x1fb/0x540 [ 859.457697][T29087] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 859.457733][T29087] ? find_held_lock+0x2b/0x80 [ 859.457762][T29087] ? rcu_read_unlock+0x17/0x60 [ 859.457798][T29087] ? rcu_read_unlock+0x17/0x60 [ 859.457838][T29087] alloc_pages_noprof+0x1a/0x160 [ 859.457861][T29087] __vmalloc_node_range_noprof+0xaec/0x1630 [ 859.457911][T29087] ? newary+0x185/0xc30 [ 859.458009][T29087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 859.458049][T29087] ? __lock_acquire+0x49f/0x1a40 [ 859.458089][T29087] ? rcu_is_watching+0x12/0xc0 [ 859.458125][T29087] __kvmalloc_node_noprof+0x3d3/0x970 [ 859.458157][T29087] ? newary+0x185/0xc30 [ 859.458184][T29087] ? __pfx___might_resched+0x10/0x10 [ 859.458222][T29087] ? newary+0x185/0xc30 [ 859.458253][T29087] newary+0x185/0xc30 [ 859.458278][T29087] ? __pfx_down_write+0x10/0x10 [ 859.458322][T29087] ipcget+0xee/0xf50 [ 859.458385][T29087] ? do_futex+0x190/0x440 [ 859.458413][T29087] ? __pfx_do_futex+0x10/0x10 [ 859.458448][T29087] ? ksys_unshare+0x69b/0xab0 [ 859.458480][T29087] ? __pfx_ipcget+0x10/0x10 [ 859.458519][T29087] ? __x64_sys_futex+0x34f/0x4d0 [ 859.458549][T29087] __x64_sys_semget+0x1cb/0x260 [ 859.458580][T29087] ? __pfx___x64_sys_semget+0x10/0x10 [ 859.458609][T29087] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 859.458650][T29087] ? syscall_user_dispatch+0x76/0x130 [ 859.458681][T29087] do_syscall_64+0x115/0x840 [ 859.458713][T29087] ? clear_bhb_loop+0x70/0xc0 [ 859.458744][T29087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.458768][T29087] RIP: 0033:0x7f465599e0d9 [ 859.458788][T29087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.458812][T29087] RSP: 002b:00007f4656811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 859.458835][T29087] RAX: ffffffffffffffda RBX: 00007f4655c25fa0 RCX: 00007f465599e0d9 [ 859.458851][T29087] RDX: 0000000000008000 RSI: 0000000000002e4a RDI: 0000000000000000 [ 859.458865][T29087] RBP: 00007f4655a35024 R08: 0000000000000000 R09: 0000000000000000 [ 859.458880][T29087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.458894][T29087] R13: 00007f4655c26038 R14: 00007f4655c25fa0 R15: 00007ffcf75aa0e8 [ 859.458924][T29087] [ 859.460957][T29087] memory: usage 3072kB, limit 3072kB, failcnt 34344 [ 860.412040][T29131] FAULT_INJECTION: forcing a failure. [ 860.412040][T29131] name fail_futex, interval 1, probability 0, space 0, times 1 [ 860.424982][T29131] CPU: 0 UID: 0 PID: 29131 Comm: syz.0.10964 Tainted: G U L syzkaller #0 PREEMPT(full) [ 860.425023][T29131] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 860.425032][T29131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.425047][T29131] Call Trace: [ 860.425057][T29131] [ 860.425066][T29131] dump_stack_lvl+0x100/0x190 [ 860.425099][T29131] should_fail_ex.cold+0x5/0xa [ 860.425127][T29131] should_fail_futex+0x4c/0x60 [ 860.425152][T29131] futex_lock_pi_atomic+0xe7/0xaf0 [ 860.425190][T29131] futex_lock_pi+0x278/0x7f0 [ 860.425227][T29131] ? __pfx_futex_lock_pi+0x10/0x10 [ 860.425262][T29131] ? __pfx___futex_wait+0x10/0x10 [ 860.425292][T29131] ? __pfx_try_to_wake_up+0x10/0x10 [ 860.425363][T29131] ? __pfx_futex_wake_mark+0x10/0x10 [ 860.425405][T29131] ? rcu_read_lock_any_held+0x6a/0xa0 [ 860.425438][T29131] ? find_held_lock+0x2b/0x80 [ 860.425468][T29131] ? ksys_write+0x190/0x250 [ 860.425495][T29131] do_futex+0x371/0x440 [ 860.425524][T29131] ? __pfx_do_futex+0x10/0x10 [ 860.425552][T29131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.425594][T29131] __x64_sys_futex+0x34f/0x4d0 [ 860.425624][T29131] ? __pfx___x64_sys_futex+0x10/0x10 [ 860.425663][T29131] do_syscall_64+0x115/0x840 [ 860.425696][T29131] ? clear_bhb_loop+0x70/0xc0 [ 860.425726][T29131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.425751][T29131] RIP: 0033:0x7f224db9e0d9 [ 860.425772][T29131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.425796][T29131] RSP: 002b:00007f224eab3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 860.425819][T29131] RAX: ffffffffffffffda RBX: 00007f224de25fa0 RCX: 00007f224db9e0d9 [ 860.425835][T29131] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 860.425849][T29131] RBP: 00007f224dc35024 R08: 0000000000000000 R09: 000000008000fff5 [ 860.425864][T29131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.425879][T29131] R13: 00007f224de26038 R14: 00007f224de25fa0 R15: 00007ffed2fa09e8 [ 860.425912][T29131] [ 860.874627][T29143] bridge0: port 5(veth0_to_bridge) entered blocking state [ 860.882389][T29143] bridge0: port 5(veth0_to_bridge) entered disabled state [ 860.895412][T29143] veth0_to_bridge: entered allmulticast mode [ 860.903361][T29143] veth0_to_bridge: entered promiscuous mode [ 860.909713][T29143] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.925674][T29143] bridge0: port 5(veth0_to_bridge) entered blocking state [ 860.933024][T29143] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 860.941319][T29087] memory+swap: usage 3364kB, limit 9007199254740988kB, failcnt 0 [ 860.950924][T29087] kmem: usage 2980kB, limit 9007199254740988kB, failcnt 0 [ 860.986131][T29087] Memory cgroup stats for /syz4: [ 860.986432][T29087] cache 0 [ 861.011679][T29087] rss 0 [ 861.023350][T29087] rss_huge 0 [ 861.036470][T29087] shmem 0 [ 861.049267][T29087] mapped_file 0 [ 861.059900][T29087] dirty 0 [ 861.072730][T29087] writeback 0 [ 861.084124][T29087] workingset_refault_anon 5992 [ 861.105459][T29087] workingset_refault_file 216 [ 861.125626][T29087] swap 303104 [ 861.138212][T29087] swapcached 168095744 [ 861.151128][T29087] pgpgin 145304 [ 861.163656][T29087] pgpgout 158280 [ 861.180538][T29087] pgfault 286521 [ 861.194157][T29087] pgmajfault 2180 [ 861.211347][T29087] inactive_anon 77824 [ 861.225679][T29087] active_anon 0 [ 861.245227][T29087] inactive_file 0 [ 861.260501][T29087] active_file 0 [ 861.272322][T29087] unevictable 0 [ 861.283829][T29087] hierarchical_memory_limit 3145728 [ 861.304943][T29087] hierarchical_memsw_limit 9223372036854771712 [ 861.329497][T29087] total_cache 0 [ 861.341482][T29087] total_rss 0 [ 861.351466][T29087] total_rss_huge 0 [ 861.364052][T29087] total_shmem 0 [ 861.376334][T29087] total_mapped_file 0 [ 861.394017][T29087] total_dirty 0 [ 861.410894][T29087] total_writeback 0 [ 861.423233][T29087] total_workingset_refault_anon 5992 [ 861.442321][T29087] total_workingset_refault_file 216 [ 861.461743][T29087] total_swap 303104 [ 861.474035][T29087] total_swapcached 168095744 [ 861.489693][T29087] total_pgpgin 145304 [ 861.501633][T29087] total_pgpgout 158280 [ 861.522211][T29087] total_pgfault 286521 [ 861.536833][T29087] total_pgmajfault 2180 [ 861.552457][T29087] total_inactive_anon 77824 [ 861.569103][T29087] total_active_anon 0 [ 861.583020][T29087] total_inactive_file 0 [ 861.595771][T29087] total_active_file 0 [ 861.613113][T29087] total_unevictable 0 [ 861.632467][T29087] anon_cost 20 [ 861.650841][T29087] file_cost 1 [ 861.667967][T29087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10943,pid=29086,uid=0 [ 861.746561][T29087] Memory cgroup out of memory: Killed process 29086 (syz.4.10943) total-vm:102312kB, anon-rss:1244kB, file-rss:22604kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 863.076829][T29187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10988'. [ 870.589052][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.597336][ C0] sched: DL replenish lagged too much [ 969.529804][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.729225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.743773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.757585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.770339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.784377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.796985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.810784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.823485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.839242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.852018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.736121][ C0] net_ratelimit: 4616 callbacks suppressed [ 1013.736194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.754587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.768280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.781533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.795229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.807873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.821552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.834222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.847941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.860550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.745952][ C0] net_ratelimit: 3943 callbacks suppressed [ 1018.745973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.764971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1018.779259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.791873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.804975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1018.819181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.831783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.844957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1018.859219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.871792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.756371][ C0] net_ratelimit: 3940 callbacks suppressed [ 1023.756399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.774914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.788131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1023.802715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.815379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.828647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1023.843237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.855949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.869084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1023.883361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.766209][ C0] net_ratelimit: 3889 callbacks suppressed [ 1028.766230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1028.786312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.799077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.812209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1028.826431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.839060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.852130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1028.866467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.879088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.892169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.776533][ C0] net_ratelimit: 3911 callbacks suppressed [ 1033.776554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.797298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.810062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.823340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.837587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.850315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.863433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.877865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.890445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.904078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.786121][ C0] net_ratelimit: 3904 callbacks suppressed [ 1038.786143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.805159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.819373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.832043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.845227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.859902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.872498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.885605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.899873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.912484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.795964][ C0] net_ratelimit: 3971 callbacks suppressed [ 1043.795987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.815208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.829412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.842071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.855347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.869592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.882275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.895393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.910079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.922866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.395832][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1046.402980][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10034/1:b..l P5287/1:b..l [ 1046.412809][ C0] rcu: (detected by 0, t=10502 jiffies, g=299829, q=573 ncpus=1) [ 1046.420671][ C0] task:dhcpcd state:R running task stack:24632 pid:5287 tgid:5287 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1046.435546][ C0] Call Trace: [ 1046.438851][ C0] [ 1046.441812][ C0] __schedule+0x125c/0x6730 [ 1046.446516][ C0] ? __pfx___schedule+0x10/0x10 [ 1046.451405][ C0] ? mark_held_locks+0x40/0x70 [ 1046.456285][ C0] preempt_schedule_irq+0x50/0x90 [ 1046.461347][ C0] irqentry_exit+0x205/0xa00 [ 1046.465976][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1046.472013][ C0] RIP: 0010:unwind_next_frame+0x2c2/0x2090 [ 1046.477871][ C0] Code: cf 8b 14 95 3c 79 83 92 48 8d 04 7f 48 8d 84 00 e4 00 bb 91 83 c2 01 48 3d 3c 79 83 92 0f 83 ab 08 00 00 41 89 d0 4f 8d 04 40 <4f> 8d 84 00 e4 00 bb 91 49 81 f8 3c 79 83 92 0f 87 8f 08 00 00 29 [ 1046.497501][ C0] RSP: 0018:ffffc900036af6a8 EFLAGS: 00000293 [ 1046.503614][ C0] RAX: ffffffff91c4809a RBX: 0000000000000001 RCX: 0000000000019549 [ 1046.511606][ C0] RDX: 000000000001955a RSI: 00000000000abcd2 RDI: 0000000000019549 [ 1046.519673][ C0] RBP: ffffc900036af7b0 R08: 000000000004c00e R09: 0000000000000007 [ 1046.527660][ C0] R10: 0000000000000200 R11: 000000000000b826 R12: ffffc900036af7b8 [ 1046.535665][ C0] R13: ffffc900036af768 R14: ffffc900036af79d R15: ffffffff81b82696 [ 1046.543673][ C0] ? __unwind_start+0x2f6/0x7e0 [ 1046.548597][ C0] ? unwind_next_frame+0x6fa/0x2090 [ 1046.553828][ C0] ? __unwind_start+0x2f7/0x7e0 [ 1046.558705][ C0] ? get_stack_info_noinstr+0x18/0x130 [ 1046.564188][ C0] __unwind_start+0x3cd/0x7e0 [ 1046.568889][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1046.575117][ C0] arch_stack_walk+0x73/0xf0 [ 1046.579787][ C0] ? __unwind_start+0x2f7/0x7e0 [ 1046.584668][ C0] stack_trace_save+0x8e/0xc0 [ 1046.589383][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1046.594779][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1046.599778][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1046.604773][ C0] save_stack+0x162/0x1e0 [ 1046.609212][ C0] ? __pfx_save_stack+0x10/0x10 [ 1046.614107][ C0] ? page_ext_put+0x3e/0xd0 [ 1046.618774][ C0] __reset_page_owner+0x84/0x190 [ 1046.623760][ C0] __free_frozen_pages+0x79f/0x1090 [ 1046.629049][ C0] ? __free_slab+0xd0/0x220 [ 1046.633853][ C0] qlist_free_all+0x47/0xf0 [ 1046.638389][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1046.643879][ C0] __kasan_slab_alloc+0x69/0x90 [ 1046.648770][ C0] __kmalloc_noprof+0x2bf/0x820 [ 1046.653861][ C0] ? __pfx_dynamic_dname+0x10/0x10 [ 1046.659132][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 1046.663992][ C0] tomoyo_encode2+0xfb/0x3c0 [ 1046.668615][ C0] tomoyo_encode+0x29/0x50 [ 1046.673118][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 1046.678788][ C0] tomoyo_path_number_perm+0x23c/0x580 [ 1046.684306][ C0] ? tomoyo_path_number_perm+0x22e/0x580 [ 1046.689962][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1046.696002][ C0] ? __seccomp_filter+0x89d/0x1140 [ 1046.701196][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 1046.706817][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 1046.712219][ C0] ? xfd_validate_state+0x129/0x190 [ 1046.717452][ C0] security_file_ioctl+0xd3/0x230 [ 1046.722514][ C0] __x64_sys_ioctl+0xb7/0x210 [ 1046.727242][ C0] do_syscall_64+0x115/0x840 [ 1046.731868][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1046.736589][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.742514][ C0] RIP: 0033:0x7f17e872a378 [ 1046.746956][ C0] RSP: 002b:00007ffe05dfb068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.755384][ C0] RAX: ffffffffffffffda RBX: 00005573b11deed0 RCX: 00007f17e872a378 [ 1046.763365][ C0] RDX: 00007ffe05dfb070 RSI: 0000000000008921 RDI: 000000000000000f [ 1046.771346][ C0] RBP: 00007ffe05dfb070 R08: 0000000000000000 R09: 0000000000000000 [ 1046.779326][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00005573b110ea10 [ 1046.787304][ C0] R13: 00005573b11deed0 R14: 00005573b110ea10 R15: 00007ffe05dfb2c0 [ 1046.795435][ C0] [ 1046.798460][ C0] task:syz-executor state:R running task stack:22984 pid:10034 tgid:10034 ppid:10021 task_flags:0x400140 flags:0x00080000 [ 1046.811973][ C0] Call Trace: [ 1046.815266][ C0] [ 1046.818244][ C0] __schedule+0x125c/0x6730 [ 1046.822781][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1046.828897][ C0] ? free_pids+0x45/0x80 [ 1046.833208][ C0] ? release_task+0xd63/0x1ab0 [ 1046.837999][ C0] ? wait_consider_task+0x1791/0x3e00 [ 1046.843409][ C0] ? __pfx___schedule+0x10/0x10 [ 1046.848294][ C0] ? mark_held_locks+0x40/0x70 [ 1046.853107][ C0] preempt_schedule_irq+0x50/0x90 [ 1046.858169][ C0] irqentry_exit+0x205/0xa00 [ 1046.862785][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1046.868786][ C0] RIP: 0010:unwind_next_frame+0x740/0x2090 [ 1046.874620][ C0] Code: 0f 85 c3 f9 ff ff 48 c7 c2 40 c3 cb 8b be 49 03 00 00 48 c7 c7 a0 c3 cb 8b c6 05 8a 5a 52 0f 01 e8 65 fd 2c 00 e9 9f f9 ff ff 3b c4 35 00 84 c0 0f 85 63 fc ff ff e8 3e 98 00 0a 85 c0 0f 84 [ 1046.894243][ C0] RSP: 0018:ffffc900044ef8d0 EFLAGS: 00000202 [ 1046.900320][ C0] RAX: 0000000000000001 RBX: ffffc900044efca0 RCX: ffffffff91d3be01 [ 1046.908310][ C0] RDX: ffffc900044efca8 RSI: ffffc900044efc90 RDI: ffffc900044ef950 [ 1046.916315][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 1046.924299][ C0] R10: 0000000000000200 R11: 0000000000017958 R12: ffffc900044ef990 [ 1046.932296][ C0] R13: ffffc900044ef940 R14: ffffc900044efca0 R15: ffffc900044ef974 [ 1046.940319][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 1046.946006][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1046.952214][ C0] arch_stack_walk+0x94/0xf0 [ 1046.956836][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1046.961888][ C0] stack_trace_save+0x8e/0xc0 [ 1046.966599][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1046.971999][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1046.976964][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1046.981923][ C0] save_stack+0x162/0x1e0 [ 1046.986270][ C0] ? __pfx_save_stack+0x10/0x10 [ 1046.991139][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 1046.996636][ C0] ? qlist_free_all+0x47/0xf0 [ 1047.001328][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 1047.007002][ C0] ? page_ext_put+0x3e/0xd0 [ 1047.011533][ C0] __reset_page_owner+0x84/0x190 [ 1047.016503][ C0] __free_frozen_pages+0x79f/0x1090 [ 1047.021736][ C0] qlist_free_all+0x47/0xf0 [ 1047.026255][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1047.031735][ C0] __kasan_slab_alloc+0x69/0x90 [ 1047.036697][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1047.042176][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.047146][ C0] ? do_getname+0x35/0x390 [ 1047.051605][ C0] do_getname+0x35/0x390 [ 1047.055880][ C0] do_sys_openat2+0xc7/0x1e0 [ 1047.060505][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1047.065730][ C0] __x64_sys_openat+0x12d/0x210 [ 1047.070606][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1047.076036][ C0] do_syscall_64+0x115/0x840 [ 1047.080665][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1047.085376][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.091315][ C0] RIP: 0033:0x7f465599d3fc [ 1047.095751][ C0] RSP: 002b:00007ffcf75a92f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1047.104192][ C0] RAX: ffffffffffffffda RBX: 00007f4655a34474 RCX: 00007f465599d3fc [ 1047.112336][ C0] RDX: 0000000000090800 RSI: 00007ffcf75aa4a0 RDI: 00000000ffffff9c [ 1047.120422][ C0] RBP: 00007ffcf75aa48c R08: 0000000000000000 R09: 0000000000000000 [ 1047.128415][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffcf75aa4a0 [ 1047.136415][ C0] R13: 00007f4655a34474 R14: 00000000000d30dd R15: 00007ffcf75aa4e0 [ 1047.144413][ C0] [ 1047.147471][ C0] rcu: rcu_preempt kthread starved for 354 jiffies! g299829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1047.158605][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1047.168579][ C0] rcu: RCU grace-period kthread stack dump: [ 1047.174474][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1047.188138][ C0] Call Trace: [ 1047.191427][ C0] [ 1047.194370][ C0] __schedule+0x125c/0x6730 [ 1047.198911][ C0] ? __pfx___schedule+0x10/0x10 [ 1047.203801][ C0] ? find_held_lock+0x2b/0x80 [ 1047.208518][ C0] ? schedule+0x225/0x2c0 [ 1047.212865][ C0] schedule+0xdd/0x2c0 [ 1047.217040][ C0] schedule_timeout+0x127/0x280 [ 1047.221902][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1047.227290][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1047.232602][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1047.238444][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1047.243994][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1047.248788][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1047.254100][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1047.259065][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1047.264377][ C0] ? rcu_is_watching+0x12/0xc0 [ 1047.269156][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.275166][ C0] rcu_gp_kthread+0x179/0x230 [ 1047.279876][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1047.285188][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.291014][ C0] ? __kthread_parkme+0x18c/0x230 [ 1047.296070][ C0] ? kthread+0x13a/0x450 [ 1047.300331][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1047.305560][ C0] kthread+0x370/0x450 [ 1047.309649][ C0] ? __pfx_kthread+0x10/0x10 [ 1047.314264][ C0] ret_from_fork+0x72b/0xd50 [ 1047.318876][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.324002][ C0] ? __switch_to+0x800/0x10f0 [ 1047.328744][ C0] ? __switch_to_asm+0x39/0x70 [ 1047.333564][ C0] ? __pfx_kthread+0x10/0x10 [ 1047.338183][ C0] ret_from_fork_asm+0x1a/0x30 [ 1047.342980][ C0] [ 1047.346047][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1047.352443][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 1047.363757][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1047.368956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1047.379036][ C0] Workqueue: bat_events batadv_tt_purge [ 1047.384689][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x170 [ 1047.390956][ C0] Code: e8 a5 d7 15 00 e9 36 ff ff ff 49 c7 c4 ea ff ff ff eb c7 e8 72 c2 c4 09 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 [ 1047.410590][ C0] RSP: 0018:ffffc900000069c0 EFLAGS: 00000286 [ 1047.416697][ C0] RAX: ffffffff89846774 RBX: ffffc900000069c8 RCX: ffffc9000000691c [ 1047.424677][ C0] RDX: 1ffff92000000d42 RSI: ffffffff89846774 RDI: ffffc90000006a88 [ 1047.432656][ C0] RBP: ffffc90000006a58 R08: 0000000000000001 R09: 0000000000000007 [ 1047.440641][ C0] R10: 0000000000000200 R11: 0000000000088383 R12: ffffffff81f3d980 [ 1047.448634][ C0] R13: ffffc90000006a88 R14: 0000000000000000 R15: ffff888033a5dd00 [ 1047.456630][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1047.465573][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.472184][ C0] CR2: 00007f529c13c4ed CR3: 0000000074810000 CR4: 00000000003526f0 [ 1047.480258][ C0] Call Trace: [ 1047.483559][ C0] [ 1047.486425][ C0] arch_stack_walk+0x88/0xf0 [ 1047.491047][ C0] ? consume_skb+0xc4/0x110 [ 1047.495665][ C0] ? skb_free_head+0xb9/0x160 [ 1047.500365][ C0] stack_trace_save+0x8e/0xc0 [ 1047.505081][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1047.510474][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 1047.515641][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.520622][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1047.525839][ C0] kasan_save_stack+0x30/0x50 [ 1047.530536][ C0] ? kasan_save_stack+0x30/0x50 [ 1047.535404][ C0] ? kasan_save_track+0x14/0x30 [ 1047.540266][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1047.545473][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1047.550504][ C0] ? kfree+0x22b/0x6c0 [ 1047.554625][ C0] ? skb_free_head+0xb9/0x160 [ 1047.559331][ C0] ? skb_release_data+0x6c5/0x8e0 [ 1047.564439][ C0] kasan_save_track+0x14/0x30 [ 1047.569143][ C0] kasan_save_free_info+0x3b/0x70 [ 1047.574178][ C0] __kasan_slab_free+0x5f/0x80 [ 1047.579049][ C0] ? skb_free_head+0x20/0x160 [ 1047.583743][ C0] kfree+0x22b/0x6c0 [ 1047.587651][ C0] skb_free_head+0xb9/0x160 [ 1047.592175][ C0] skb_release_data+0x6c5/0x8e0 [ 1047.597138][ C0] ? rcu_is_watching+0x12/0xc0 [ 1047.601935][ C0] consume_skb+0xc4/0x110 [ 1047.606290][ C0] batadv_interface_tx+0x186d/0x1d00 [ 1047.611777][ C0] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1047.617441][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1047.623026][ C0] ? validate_xmit_xfrm+0x457/0x13c0 [ 1047.628445][ C0] dev_hard_start_xmit+0x121/0x760 [ 1047.633684][ C0] __dev_queue_xmit+0x1bbf/0x4970 [ 1047.638759][ C0] ? lock_acquire+0x1b9/0x370 [ 1047.643469][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1047.648855][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1047.654172][ C0] ? local_clock_noinstr+0xf0/0x100 [ 1047.659390][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1047.664691][ C0] ? ebt_do_table+0x1938/0x2250 [ 1047.669654][ C0] ? br_nf_post_routing+0x5f9/0x16a0 [ 1047.674949][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.679912][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1047.685472][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 1047.690535][ C0] ? lock_acquire+0x1b9/0x370 [ 1047.695253][ C0] ? find_held_lock+0x2b/0x80 [ 1047.699967][ C0] br_dev_queue_push_xmit+0x361/0x530 [ 1047.705466][ C0] br_forward_finish+0x102/0x4d0 [ 1047.710460][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1047.715955][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1047.721877][ C0] ? nf_hook_slow+0x167/0x220 [ 1047.726655][ C0] br_nf_hook_thresh+0x30d/0x420 [ 1047.731627][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1047.737124][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1047.742595][ C0] ? nf_hook+0x330/0x7a0 [ 1047.746858][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1047.752339][ C0] ? lock_acquire+0x1b9/0x370 [ 1047.757069][ C0] br_nf_forward_finish+0x693/0xb30 [ 1047.762289][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1047.767778][ C0] br_nf_forward+0x157a/0x19f0 [ 1047.772574][ C0] nf_hook_slow+0xbf/0x220 [ 1047.777019][ C0] __br_forward+0x2f7/0x970 [ 1047.781568][ C0] ? __pfx___br_forward+0x10/0x10 [ 1047.786623][ C0] ? __asan_memcpy+0x3c/0x60 [ 1047.791246][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1047.796733][ C0] ? __skb_clone+0x570/0x760 [ 1047.801351][ C0] maybe_deliver+0xf0/0x180 [ 1047.805911][ C0] br_flood+0x29b/0x7b0 [ 1047.810100][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 1047.815687][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1047.821620][ C0] ? find_held_lock+0x2b/0x80 [ 1047.826316][ C0] ? net_generic+0xea/0x2a0 [ 1047.830900][ C0] ? net_generic+0xea/0x2a0 [ 1047.835448][ C0] ? net_generic+0xf4/0x2a0 [ 1047.839999][ C0] ? br_nf_pre_routing+0x771/0x1560 [ 1047.845215][ C0] br_handle_frame+0x97f/0x1540 [ 1047.850103][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1047.855598][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1047.861519][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1047.866914][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1047.872231][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 1047.878937][ C0] ? skb_release_data+0x6ca/0x8e0 [ 1047.883993][ C0] ? kfree_skbmem+0x19f/0x210 [ 1047.888686][ C0] ? dst_release+0x9a/0x330 [ 1047.893213][ C0] ? arp_process+0x237/0x2440 [ 1047.897958][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1047.905098][ C0] ? __pfx_arp_process+0x10/0x10 [ 1047.910082][ C0] ? __pfx_arp_process+0x10/0x10 [ 1047.915074][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1047.920738][ C0] ? __pfx_arp_process+0x10/0x10 [ 1047.925698][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.930664][ C0] ? process_backlog+0x32a/0x1580 [ 1047.935708][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1047.941535][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1047.947988][ C0] ? lock_acquire+0x1b9/0x370 [ 1047.952710][ C0] ? process_backlog+0x32a/0x1580 [ 1047.957754][ C0] ? process_backlog+0x32a/0x1580 [ 1047.962882][ C0] __netif_receive_skb+0x1f/0x120 [ 1047.967927][ C0] process_backlog+0x37a/0x1580 [ 1047.972825][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1047.978220][ C0] net_rx_action+0xa40/0xf20 [ 1047.982852][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1047.987989][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1047.993820][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1047.999040][ C0] ? sched_clock+0x38/0x60 [ 1048.003560][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1048.008451][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1048.013820][ C0] ? mark_held_locks+0x40/0x70 [ 1048.018689][ C0] handle_softirqs+0x1ea/0x9b0 [ 1048.023496][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1048.028797][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1048.034098][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1048.039776][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 1048.044756][ C0] do_softirq+0xac/0xe0 [ 1048.048947][ C0] [ 1048.051914][ C0] [ 1048.054852][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1048.060005][ C0] batadv_tt_purge+0x25d/0xbd0 [ 1048.064797][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1048.070110][ C0] ? rcu_is_watching+0x12/0xc0 [ 1048.074924][ C0] process_one_work+0xa23/0x1940 [ 1048.079919][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1048.085324][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1048.090646][ C0] rescuer_thread+0x905/0x14a0 [ 1048.095465][ C0] ? rescuer_thread+0x240/0x14a0 [ 1048.100446][ C0] ? rescuer_thread+0x118/0x14a0 [ 1048.105464][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1048.110882][ C0] ? __kthread_parkme+0x18c/0x230 [ 1048.115931][ C0] ? kthread+0x13a/0x450 [ 1048.120194][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1048.125419][ C0] kthread+0x370/0x450 [ 1048.129513][ C0] ? __pfx_kthread+0x10/0x10 [ 1048.134128][ C0] ret_from_fork+0x72b/0xd50 [ 1048.138743][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.143877][ C0] ? __switch_to+0x800/0x10f0 [ 1048.148580][ C0] ? __switch_to_asm+0x39/0x70 [ 1048.153373][ C0] ? __pfx_kthread+0x10/0x10 [ 1048.157987][ C0] ret_from_fork_asm+0x1a/0x30 [ 1048.162792][ C0] [ 1048.806179][ C0] net_ratelimit: 2475 callbacks suppressed [ 1048.806202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.826592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.839232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.852658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.867310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.880006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.893457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.908816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.921464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.934706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1050.978807][T29222] Process accounting resumed [ 1053.816421][ C0] net_ratelimit: 2927 callbacks suppressed [ 1053.816443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.837155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.849897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.863270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.878159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.890917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.904289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.919119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.931839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.945385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1055.773815][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.794773][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.260638][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.282031][ T1316] ieee802154 phy1 wpan1: encryption failed: -22