last executing test programs: 5m12.113633271s ago: executing program 2 (id=5675): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpuidle/available_governors\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/247, 0xf7) 5m11.856227136s ago: executing program 2 (id=5677): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devspec\x00', 0x40440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003f40)=""/156, 0x9c) 5m11.665224861s ago: executing program 2 (id=5680): r0 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) 5m11.531891463s ago: executing program 2 (id=5682): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 5m11.342352577s ago: executing program 2 (id=5685): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x1, 0x800006}, 0x0) 5m11.224016107s ago: executing program 2 (id=5686): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0xb80, 0x0) read$auto_tracing_pipe_fops_trace(r0, &(0x7f0000000240)=""/134, 0x86) 4m56.207635524s ago: executing program 32 (id=5686): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0xb80, 0x0) read$auto_tracing_pipe_fops_trace(r0, &(0x7f0000000240)=""/134, 0x86) 2.587324835s ago: executing program 1 (id=9534): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x801}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) 1.884896871s ago: executing program 1 (id=9544): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) 1.812038348s ago: executing program 4 (id=9546): socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x14) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) 1.653399405s ago: executing program 1 (id=9548): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x9, 0x800000000000000, 0x0, 0x0, 0x3) r0 = socket(0xa, 0x5, 0x0) ioctl$auto(r0, 0x8903, 0x8) 1.582443963s ago: executing program 4 (id=9550): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfffffffe, &(0x7f0000000080)={0x7fffffff, 0x7, 0x2000, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x2, 0x8c48, 0x29f, 0x102, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x9, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) readv$auto(r0, &(0x7f0000000080)={0x0, 0xc}, 0x4) 1.535689039s ago: executing program 0 (id=9551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2730d200000c00018008000100", @ANYRES32=r2], 0x20}}, 0x40000) 1.393892507s ago: executing program 3 (id=9552): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0xb, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4610, 0x0) 1.324281921s ago: executing program 0 (id=9553): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x801}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) 1.32038474s ago: executing program 4 (id=9554): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfff, 0x8, 0x40d, 0xffffffffffffffff, 0x5f, 0x7ff}, 0x6f4) 1.155937518s ago: executing program 3 (id=9555): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0xa8}) 1.096007039s ago: executing program 0 (id=9556): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 1.078203815s ago: executing program 4 (id=9557): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7488) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 862.339512ms ago: executing program 0 (id=9558): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') 860.668291ms ago: executing program 3 (id=9559): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x9, 0x43, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x401, 0xf8, 0x7, 0x5, 0x61, 0x102}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 860.036521ms ago: executing program 1 (id=9560): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x33c0, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x20007, 0x2}, 0x10) bpf$auto(0x2, 0x0, 0xb) 791.415167ms ago: executing program 4 (id=9561): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000005f6bba441810", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) 652.542086ms ago: executing program 3 (id=9562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) 638.742967ms ago: executing program 0 (id=9563): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000064}, 0x4) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1b, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0x3fe, 0x8, 0x2, 0xffffffff7ffffffb, 0x800a, 0x1, 0x200000100107}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 557.285805ms ago: executing program 4 (id=9564): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x801}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) 430.737779ms ago: executing program 3 (id=9565): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_FIONREAD(r0, 0x541b, 0x8) 420.651488ms ago: executing program 1 (id=9566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r1, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) close_range$auto(0x2, 0x8000, 0x0) 189.245439ms ago: executing program 3 (id=9567): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) 45.140235ms ago: executing program 0 (id=9568): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x1, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xd, 0x0, 0x0) 0s ago: executing program 1 (id=9569): mmap$auto(0x0, 0x84dd, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740471c000000007e973d778cb0026ab17c9fe9252ff86e659e", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) kernel console output (not intermixed with test programs): 00007ffe55821e60 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.265131][ T5664] RBP: 00007ffe55821ecc R08: 0000000000000000 R09: 0000000000000000 [ 269.265148][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 269.265164][ T5664] R13: 00000000000927c0 R14: 0000000000041a6c R15: 00007ffe55821f20 [ 269.265205][ T5664] [ 269.267202][ T5664] memory: usage 3072kB, limit 3072kB, failcnt 6219 [ 269.671799][ T5664] memory+swap: usage 3080kB, limit 9007199254740988kB, failcnt 0 [ 269.682872][ T5664] kmem: usage 432kB, limit 9007199254740988kB, failcnt 0 [ 269.690725][ T5664] Memory cgroup stats for /syz1: [ 269.691208][ T5664] cache 2383872 [ 269.701912][ T5664] rss 299008 [ 269.705984][ T5664] rss_huge 0 [ 269.709324][ T5664] shmem 0 [ 269.712290][ T5664] mapped_file 2383872 [ 269.723376][ T5664] dirty 4096 [ 269.741928][ T5664] writeback 0 [ 269.745458][ T5664] workingset_refault_anon 137 [ 269.754505][ T5664] workingset_refault_file 1924 [ 269.764418][ T5664] swap 8192 [ 269.777327][ T5664] swapcached 12271616 [ 269.781839][ T5664] pgpgin 69410 [ 269.794215][ T5664] pgpgout 68750 [ 269.799314][ T5664] pgfault 87736 [ 269.805026][ T5664] pgmajfault 108 [ 269.812676][ T5664] inactive_anon 16384 [ 269.829000][ T5664] active_anon 4096 [ 269.834622][ T5664] inactive_file 0 [ 269.843754][ T5664] active_file 0 [ 269.847972][ T5664] unevictable 2682880 [ 269.855440][ T5664] hierarchical_memory_limit 3145728 [ 269.862608][ T5664] hierarchical_memsw_limit 9223372036854771712 [ 269.869992][ T5664] total_cache 2383872 [ 269.874370][ T5664] total_rss 299008 [ 269.878158][ T5664] total_rss_huge 0 [ 269.881947][ T5664] total_shmem 0 [ 269.889744][ T5664] total_mapped_file 2383872 [ 269.923698][ T5664] total_dirty 4096 [ 269.927575][ T5664] total_writeback 0 [ 269.931459][ T5664] total_workingset_refault_anon 137 [ 269.943047][ T5664] total_workingset_refault_file 1924 [ 269.953077][ T5664] total_swap 8192 [ 269.963206][ T5664] total_swapcached 12271616 [ 269.973331][ T5664] total_pgpgin 69410 [ 269.977755][ T5664] total_pgpgout 68750 [ 269.982078][ T5664] total_pgfault 87736 [ 269.986557][ T5664] total_pgmajfault 108 [ 269.990685][ T5664] total_inactive_anon 16384 [ 269.997076][ T5664] total_active_anon 4096 [ 270.003772][ T5664] total_inactive_file 0 [ 270.009685][ T5664] total_active_file 0 [ 270.017059][ T5664] total_unevictable 2682880 [ 270.028055][ T5664] anon_cost 0 [ 270.034723][ T5664] file_cost 0 [ 270.042772][ T5664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3311,pid=12612,uid=0 [ 270.076390][ T5664] Memory cgroup out of memory: Killed process 12612 (syz.1.3311) total-vm:104432kB, anon-rss:1544kB, file-rss:24480kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 270.113266][T12664] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 270.512351][T12683] bond0: invalid ARP target specified [ 272.838989][T12785] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 273.688936][T12815] vhci_hcd vhci_hcd.0: invalid port number 13 [ 273.708519][T12815] vhci_hcd vhci_hcd.0: invalid port number 13 [ 274.326036][T12837] vhci_hcd: not connected 4 [ 278.802103][T13044] Sensor B: ================= START STATUS ================= [ 278.809975][T13044] Sensor B: Test Pattern: 75% Colorbar [ 278.817927][T13044] Sensor B: Show Information: All [ 278.824429][T13044] Sensor B: Vertical Flip: false [ 278.830607][T13044] Sensor B: Horizontal Flip: false [ 278.836508][T13044] Sensor B: Brightness: 128 [ 278.841125][T13044] Sensor B: Contrast: 128 [ 278.846487][T13044] Sensor B: Hue: 0 [ 278.858835][T13044] Sensor B: Saturation: 128 [ 278.868882][T13044] Sensor B: Pixel Rate: 160000000 [ 278.878590][T13044] Sensor B: Horizontal Blanking: 800 [ 278.891252][T13044] Sensor B: Vertical Blanking: 3223 [ 278.898250][T13044] Sensor B: ================== END STATUS ================== [ 280.142213][T13106] Process accounting paused [ 280.684504][T13135] i2c i2c-0: new_device: Missing parameters [ 280.699124][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.710249][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.922174][T13150] kafs: addr_prefs: Invalid Command [ 282.231265][T13217] Invalid input. Must be >= 4608 [ 282.907089][T13253] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 284.274614][T13318] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 285.232485][T13366] Invalid input. Must be >= 4608 [ 286.046230][T13411] program syz.3.3701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.987668][T13456] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 287.073767][T13460] kernel read not supported for file /\*)A (pid: 13460 comm: syz.1.3723) [ 287.106484][ T29] audit: type=1800 audit(1843107713.822:15): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3723" name="\*)A" dev="mqueue" ino=31468 res=0 errno=0 [ 288.399497][T13512] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 288.954952][T13532] block2mtd: illegal erase size [ 289.447568][T13554] nvme_fcloop: unknown parameter or missing value '7' [ 291.258571][T13630] futex_wake_op: syz.1.3805 tries to shift op by -1; fix this program [ 291.455444][T13642] warning: `syz.1.3808' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 291.756319][T13653] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 291.772072][T13653] Call Trace: [ 291.775386][T13653] [ 291.778339][T13653] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 291.785160][T13653] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 291.791691][T13653] ? debug_object_deactivate+0x2e4/0x3b0 [ 291.797357][T13653] ? smp_call_function+0x1/0x90 [ 291.802235][T13653] mce_cpu_restart+0xd5/0x1f0 [ 291.806942][T13653] ? __pfx_mce_cpu_restart+0x10/0x10 [ 291.812264][T13653] smp_call_function_many_cond+0x153b/0x1870 [ 291.818288][T13653] ? __pfx_mce_cpu_restart+0x10/0x10 [ 291.823613][T13653] ? lockdep_hardirqs_on+0x78/0x100 [ 291.828850][T13653] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.834677][T13653] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 291.841036][T13653] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 291.847069][T13653] ? __timer_delete_sync+0x151/0x1c0 [ 291.852449][T13653] ? __pfx_mce_cpu_restart+0x10/0x10 [ 291.857773][T13653] on_each_cpu_cond_mask+0x40/0x90 [ 291.862932][T13653] set_bank+0x240/0x3a0 [ 291.867117][T13653] ? __pfx_set_bank+0x10/0x10 [ 291.871870][T13653] ? find_held_lock+0x2b/0x80 [ 291.876583][T13653] ? sysfs_file_kobj+0xe4/0x290 [ 291.881471][T13653] ? sysfs_file_kobj+0xe4/0x290 [ 291.886349][T13653] ? __pfx_set_bank+0x10/0x10 [ 291.891051][T13653] dev_attr_store+0x58/0x80 [ 291.895582][T13653] ? __pfx_dev_attr_store+0x10/0x10 [ 291.900813][T13653] sysfs_kf_write+0xf2/0x150 [ 291.905564][T13653] kernfs_fop_write_iter+0x3e0/0x5f0 [ 291.910876][T13653] ? __pfx_sysfs_kf_write+0x10/0x10 [ 291.916113][T13653] vfs_write+0x6ac/0x1050 [ 291.920476][T13653] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 291.926316][T13653] ? __pfx_vfs_write+0x10/0x10 [ 291.931120][T13653] ksys_write+0x12a/0x250 [ 291.935484][T13653] ? __pfx_ksys_write+0x10/0x10 [ 291.940361][T13653] do_syscall_64+0x115/0x840 [ 291.944977][T13653] ? clear_bhb_loop+0x40/0x90 [ 291.949677][T13653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.955593][T13653] RIP: 0033:0x7fd53a59e0d9 [ 291.960026][T13653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.979658][T13653] RSP: 002b:00007fd53b3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.988105][T13653] RAX: ffffffffffffffda RBX: 00007fd53a825fa0 RCX: 00007fd53a59e0d9 [ 291.996100][T13653] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 292.004103][T13653] RBP: 00007fd53a635024 R08: 0000000000000000 R09: 0000000000000000 [ 292.012100][T13653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.020094][T13653] R13: 00007fd53a826038 R14: 00007fd53a825fa0 R15: 00007fff7fb4cc48 [ 292.028115][T13653] [ 292.420151][T13665] [ 293.005442][T13695] rnbd_client L213: map_device: Parameters missing [ 296.120600][T13841] vhci_hcd vhci_hcd.2: invalid port number 194 [ 296.150260][T13841] vhci_hcd vhci_hcd.2: invalid port number 194 [ 298.577867][T13916] syz.2.3940 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 298.615507][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.2.3940 Not tainted syzkaller #0 PREEMPT(full) [ 298.615548][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.615564][T13916] Call Trace: [ 298.615578][T13916] [ 298.615589][T13916] dump_stack_lvl+0x100/0x190 [ 298.615630][T13916] dump_header+0xfb/0x606 [ 298.615676][T13916] oom_kill_process.cold+0xd/0x330 [ 298.615714][T13916] out_of_memory+0x340/0x14f0 [ 298.615772][T13916] ? __pfx_out_of_memory+0x10/0x10 [ 298.615833][T13916] mem_cgroup_out_of_memory+0xc6/0x130 [ 298.615868][T13916] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 298.615900][T13916] ? find_held_lock+0x2b/0x80 [ 298.615947][T13916] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.615981][T13916] ? _raw_spin_unlock+0x28/0x50 [ 298.616017][T13916] try_charge_memcg+0x6e5/0xdf0 [ 298.616067][T13916] ? __pfx_try_charge_memcg+0x10/0x10 [ 298.616107][T13916] ? find_held_lock+0x2b/0x80 [ 298.616140][T13916] ? rcu_read_unlock+0x17/0x60 [ 298.616182][T13916] ? rcu_read_unlock+0x17/0x60 [ 298.616223][T13916] ? find_held_lock+0x2b/0x80 [ 298.616266][T13916] ? rcu_read_unlock+0x17/0x60 [ 298.616318][T13916] charge_memcg+0x187/0x1e0 [ 298.616365][T13916] __mem_cgroup_charge+0x2b/0x1c0 [ 298.616397][T13916] filemap_add_folio+0xe7/0x630 [ 298.616430][T13916] ? __pfx_filemap_add_folio+0x10/0x10 [ 298.616475][T13916] __filemap_get_folio_mpol+0x584/0x1320 [ 298.616519][T13916] filemap_fault+0x879/0x3130 [ 298.616562][T13916] ? __pfx_filemap_fault+0x10/0x10 [ 298.616614][T13916] ? __pfx_filemap_map_pages+0x10/0x10 [ 298.616650][T13916] __do_fault+0x10b/0x440 [ 298.616686][T13916] ? find_held_lock+0x2b/0x80 [ 298.616726][T13916] do_fault+0xa99/0x1750 [ 298.616777][T13916] __handle_mm_fault+0x187d/0x2a00 [ 298.616814][T13916] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.616853][T13916] ? __pfx___handle_mm_fault+0x10/0x10 [ 298.616887][T13916] ? pte_offset_map_lock+0x174/0x320 [ 298.616928][T13916] ? find_held_lock+0x2b/0x80 [ 298.616977][T13916] ? follow_page_pte+0x4d0/0x13f0 [ 298.617029][T13916] handle_mm_fault+0x37b/0xa30 [ 298.617070][T13916] __get_user_pages+0x1178/0x32a0 [ 298.617130][T13916] ? __pfx___get_user_pages+0x10/0x10 [ 298.617185][T13916] populate_vma_page_range+0x267/0x3f0 [ 298.617233][T13916] ? __pfx_populate_vma_page_range+0x10/0x10 [ 298.617277][T13916] ? __pfx_find_vma_intersection+0x10/0x10 [ 298.617321][T13916] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 298.617365][T13916] __mm_populate+0x107/0x3a0 [ 298.617412][T13916] ? __pfx___mm_populate+0x10/0x10 [ 298.617461][T13916] ? up_write+0x2e5/0x5c0 [ 298.617497][T13916] __do_sys_mlockall+0x4f4/0x5d0 [ 298.617537][T13916] do_syscall_64+0x115/0x840 [ 298.617577][T13916] ? clear_bhb_loop+0x40/0x90 [ 298.617614][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.617653][T13916] RIP: 0033:0x7fa22599e0d9 [ 298.617680][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.617707][T13916] RSP: 002b:00007fa226934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 298.617736][T13916] RAX: ffffffffffffffda RBX: 00007fa225c25fa0 RCX: 00007fa22599e0d9 [ 298.617755][T13916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 298.617772][T13916] RBP: 00007fa225a35024 R08: 0000000000000000 R09: 0000000000000000 [ 298.617789][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.617805][T13916] R13: 00007fa225c26038 R14: 00007fa225c25fa0 R15: 00007ffdaec4ea48 [ 298.617848][T13916] [ 298.618005][T13916] memory: usage 3072kB, limit 3072kB, failcnt 7252 [ 299.040705][T13916] memory+swap: usage 3108kB, limit 9007199254740988kB, failcnt 0 [ 299.056430][T13916] kmem: usage 416kB, limit 9007199254740988kB, failcnt 0 [ 299.070805][T13916] Memory cgroup stats for /syz2: [ 299.071052][T13916] cache 2543616 [ 299.087435][T13916] rss 172032 [ 299.092216][T13916] rss_huge 0 [ 299.106354][T13916] shmem 0 [ 299.109384][T13916] mapped_file 2486272 [ 299.113402][T13916] dirty 0 [ 299.122954][T13916] writeback 0 [ 299.132142][T13916] workingset_refault_anon 210 [ 299.146032][T13916] workingset_refault_file 2761 [ 299.154458][T13916] swap 36864 [ 299.160533][T13916] swapcached 15323136 [ 299.175933][T13916] pgpgin 81943 [ 299.179989][T13916] pgpgout 81791 [ 299.183520][T13916] pgfault 112406 [ 299.187768][T13916] pgmajfault 138 [ 299.196476][T13916] inactive_anon 0 [ 299.206012][T13916] active_anon 0 [ 299.211067][T13916] inactive_file 20480 [ 299.225687][T13916] active_file 36864 [ 299.246122][T13916] unevictable 2658304 [ 299.256580][T13916] hierarchical_memory_limit 3145728 [ 299.265803][T13916] hierarchical_memsw_limit 9223372036854771712 [ 299.287096][T13916] total_cache 2543616 [ 299.295514][T13916] total_rss 172032 [ 299.300898][T13916] total_rss_huge 0 [ 299.316752][T13916] total_shmem 0 [ 299.321869][T13916] total_mapped_file 2486272 [ 299.334636][T13916] total_dirty 0 [ 299.340444][T13916] total_writeback 0 [ 299.342047][ T4946] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 299.344331][T13916] total_workingset_refault_anon 210 [ 299.344331][ T4946] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 299.344364][ T4946] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 299.351777][T13916] total_workingset_refault_file 2761 [ 299.391716][T13916] total_swap 36864 [ 299.396172][T13916] total_swapcached 15323136 [ 299.400929][T13916] total_pgpgin 81943 [ 299.405359][T13916] total_pgpgout 81791 [ 299.409404][T13916] total_pgfault 112406 [ 299.413672][T13916] total_pgmajfault 138 [ 299.418459][T13916] total_inactive_anon 0 [ 299.422680][T13916] total_active_anon 0 [ 299.427626][T13916] total_inactive_file 20480 [ 299.432200][T13916] total_active_file 36864 [ 299.438475][T13916] total_unevictable 2658304 [ 299.443063][T13916] anon_cost 0 [ 299.446857][T13916] file_cost 0 [ 299.450291][T13916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3940,pid=13914,uid=0 [ 299.469695][T13916] Memory cgroup out of memory: Killed process 13914 (syz.2.3940) total-vm:104432kB, anon-rss:1416kB, file-rss:23784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 301.417596][T14043] wlan1: mtu less than device minimum [ 301.609227][T14051] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 301.611581][T14050] ima: policy update failed [ 301.649650][ T29] audit: type=1802 audit(1843107728.431:16): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4005" res=0 errno=0 [ 301.853556][T14061] block2mtd: device name too long [ 306.470646][T14304] qrtr: Invalid version 13 [ 307.414569][T14351] ICMPv6: process `syz.2.4150' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 307.567371][T14353] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 308.677961][T14410] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 310.202169][T14480] Process accounting resumed [ 310.923432][T14522] kAFS: Invalid Command on /proc/fs/afs/cells file [ 311.024517][T14526] ICMPv6: process `syz.0.4236' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 312.987971][ T29] audit: type=1806 audit(1843107739.824:17): xattr="." res=0 [ 314.920618][T14726] : Can't lookup blockdev [ 316.317912][T14805] kAFS: Invalid Command on /proc/fs/afs/cells file [ 316.857065][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.866002][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.656409][ T29] audit: type=1807 audit(1843107749.529:18): UNKNOWN=nl80211 res=0 [ 322.658309][T15120] ima: policy update failed [ 322.681226][ T29] audit: type=1802 audit(1843107749.550:19): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.4524" res=0 errno=0 [ 322.722978][ T29] audit: type=1802 audit(1843107749.560:20): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4524" res=0 errno=0 [ 323.004998][ T29] audit: type=1400 audit(1843107749.881:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15139 comm="syz.0.4532" Ijn9_VQ8j@:U%Ux0 [ 323.452893][T15164] CIFS mount error: No usable UNC path provided in device string! [ 323.452893][T15164] [ 323.463232][T15164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 324.144483][T15199] Line length is too long: Should be less than 4094 [ 324.268704][T15207] tipc: Can't bind to reserved service type 63 [ 325.058672][T14991] Bluetooth: hci2: unexpected event 0x04 length: 125 > 10 [ 325.058718][T14991] Bluetooth: unknown link type 101 [ 325.075060][T14991] Bluetooth: hci2: connection err: -111 [ 325.605742][T15271] kernel profiling enabled (shift: 7) [ 326.669055][T15327] i2c i2c-0: delete_device: Can't find device in list [ 327.608333][T15375] phram: not enough arguments [ 330.329376][T15519] kAFS: Invalid Command on /proc/fs/afs/cells file [ 335.353399][T15726] blkio.reset_stats is deprecated [ 336.688600][T15798] ptp ptp0: only physical clock in use now [ 339.179843][T15921] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 340.147447][T15960] Process accounting paused [ 341.164784][T16023] ima: policy update failed [ 341.184596][ T29] audit: type=1802 audit(1843107768.157:22): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4944" res=0 errno=0 [ 341.565854][T16044] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 341.590010][T16044] net gretap0: uevent: failed to send synthetic uevent: -22 [ 343.799683][T16168] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 343.848331][T16172] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 344.559945][T16210] i2c i2c-0: delete_device: Extra parameters [ 344.928354][T16230] sd 0:0:1:0: PR command failed: 1026 [ 344.954653][T16230] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 344.965707][T14991] Bluetooth: hci3: unexpected event 0x35 length: 725 > 6 [ 344.977145][T16230] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 347.962909][T16348] bond0: invalid ARP target specified [ 348.481805][T16359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.553574][T16369] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 348.733150][T16359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.983531][T16359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.187236][T16359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.285837][T16474] CIFS mount error: No usable UNC path provided in device string! [ 351.285837][T16474] [ 351.319705][T16474] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.400641][T16478] zram: Added device: zram1 [ 352.143193][ T5664] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 352.210403][ T5664] CPU: 0 UID: 0 PID: 5664 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 352.210444][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.210468][ T5664] Call Trace: [ 352.210477][ T5664] [ 352.210488][ T5664] dump_stack_lvl+0x100/0x190 [ 352.210528][ T5664] dump_header+0xfb/0x606 [ 352.210563][ T5664] oom_kill_process.cold+0xd/0x330 [ 352.210599][ T5664] out_of_memory+0x340/0x14f0 [ 352.210654][ T5664] ? __pfx_out_of_memory+0x10/0x10 [ 352.210716][ T5664] mem_cgroup_out_of_memory+0xc6/0x130 [ 352.210751][ T5664] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 352.210782][ T5664] ? find_held_lock+0x2b/0x80 [ 352.210827][ T5664] ? do_raw_spin_unlock+0x145/0x1e0 [ 352.210862][ T5664] ? _raw_spin_unlock+0x28/0x50 [ 352.210900][ T5664] try_charge_memcg+0x6e5/0xdf0 [ 352.210951][ T5664] ? __pfx_try_charge_memcg+0x10/0x10 [ 352.210991][ T5664] ? find_held_lock+0x2b/0x80 [ 352.211027][ T5664] ? rcu_read_unlock+0x17/0x60 [ 352.211069][ T5664] ? rcu_read_unlock+0x17/0x60 [ 352.211113][ T5664] ? find_held_lock+0x2b/0x80 [ 352.211149][ T5664] ? rcu_read_unlock+0x17/0x60 [ 352.211201][ T5664] charge_memcg+0x187/0x1e0 [ 352.211246][ T5664] __mem_cgroup_charge+0x2b/0x1c0 [ 352.211277][ T5664] filemap_add_folio+0xe7/0x630 [ 352.211310][ T5664] ? __pfx_filemap_add_folio+0x10/0x10 [ 352.211352][ T5664] __filemap_get_folio_mpol+0x584/0x1320 [ 352.211394][ T5664] filemap_fault+0x879/0x3130 [ 352.211434][ T5664] ? __pfx_filemap_fault+0x10/0x10 [ 352.211494][ T5664] ? __pfx_filemap_map_pages+0x10/0x10 [ 352.211521][ T5664] __do_fault+0x10b/0x440 [ 352.211555][ T5664] ? find_held_lock+0x2b/0x80 [ 352.211595][ T5664] do_fault+0xa99/0x1750 [ 352.211645][ T5664] __handle_mm_fault+0x187d/0x2a00 [ 352.211685][ T5664] ? reacquire_held_locks+0xce/0x1e0 [ 352.211733][ T5664] ? __pfx___handle_mm_fault+0x10/0x10 [ 352.211772][ T5664] ? lock_vma_under_rcu+0x17c/0x590 [ 352.211826][ T5664] handle_mm_fault+0x37b/0xa30 [ 352.211866][ T5664] do_user_addr_fault+0x5a3/0x12f0 [ 352.211918][ T5664] exc_page_fault+0x6f/0xd0 [ 352.211957][ T5664] asm_exc_page_fault+0x26/0x30 [ 352.211984][ T5664] RIP: 0033:0x7fb2d7c6bf94 [ 352.212006][ T5664] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 20 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 97 ee 00 48 01 d1 [ 352.212032][ T5664] RSP: 002b:00007ffe55821e90 EFLAGS: 00010206 [ 352.212056][ T5664] RAX: 0000001b2de24000 RBX: 0000000000000a4e RCX: 0000000000055f00 [ 352.212074][ T5664] RDX: 000000000c07a399 RSI: 00007ffe55821f20 RDI: 00007fb2d8c62010 [ 352.212092][ T5664] RBP: 00007ffe55821ecc R08: 002d3a4f0bd5b305 R09: 0000000000000001 [ 352.212110][ T5664] R10: 000000000001058c R11: 0000000000000246 R12: 0000000000001388 [ 352.212127][ T5664] R13: 00000000000927c0 R14: 0000000000056111 R15: 00007ffe55821f20 [ 352.212167][ T5664] [ 352.288643][ T5664] memory: usage 472kB, limit 3072kB, failcnt 13244 [ 352.574883][ T5664] memory+swap: usage 580kB, limit 9007199254740988kB, failcnt 0 [ 352.582628][ T5664] kmem: usage 420kB, limit 9007199254740988kB, failcnt 0 [ 352.593541][ T5664] Memory cgroup stats for /syz1: [ 352.593744][ T5664] cache 4096 [ 352.634635][ T5664] rss 24576 [ 352.637866][ T5664] rss_huge 0 [ 352.641097][ T5664] shmem 0 [ 352.644055][ T5664] mapped_file 0 [ 352.652185][ T5664] dirty 0 [ 352.664337][ T5664] writeback 0 [ 352.674440][ T5664] workingset_refault_anon 561 [ 352.679198][ T5664] workingset_refault_file 5179 [ 352.683994][ T5664] swap 110592 [ 352.695393][ T5664] swapcached 27799552 [ 352.707626][ T5664] pgpgin 95737 [ 352.711082][ T5664] pgpgout 97772 [ 352.714651][ T5664] pgfault 178922 [ 352.718237][ T5664] pgmajfault 421 [ 352.721811][ T5664] inactive_anon 32768 [ 352.754056][ T5664] active_anon 0 [ 352.757607][ T5664] inactive_file 4096 [ 352.763123][ T5664] active_file 0 [ 352.769364][ T5664] unevictable 0 [ 352.772895][ T5664] hierarchical_memory_limit 3145728 [ 352.783761][ T5664] hierarchical_memsw_limit 9223372036854771712 [ 352.790695][ T5664] total_cache 4096 [ 352.795617][ T5664] total_rss 24576 [ 352.800317][ T5664] total_rss_huge 0 [ 352.807012][ T5664] total_shmem 0 [ 352.810545][ T5664] total_mapped_file 0 [ 352.810733][T16522] usb usb4: usbfs: process 16522 (syz.0.5185) did not claim interface 0 before use [ 352.814714][ T5664] total_dirty 0 [ 352.814731][ T5664] total_writeback 0 [ 352.814743][ T5664] total_workingset_refault_anon 561 [ 352.814755][ T5664] total_workingset_refault_file 5179 [ 352.814823][ T5664] total_swap 110592 [ 352.814836][ T5664] total_swapcached 27799552 [ 352.814847][ T5664] total_pgpgin 95737 [ 352.814859][ T5664] total_pgpgout 97772 [ 352.814870][ T5664] total_pgfault 178922 [ 352.814882][ T5664] total_pgmajfault 421 [ 352.814894][ T5664] total_inactive_anon 32768 [ 352.814907][ T5664] total_active_anon 0 [ 352.814918][ T5664] total_inactive_file 4096 [ 352.814930][ T5664] total_active_file 0 [ 352.814942][ T5664] total_unevictable 0 [ 352.814953][ T5664] anon_cost 0 [ 352.814964][ T5664] file_cost 1 [ 352.814985][ T5664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5173,pid=16495,uid=0 [ 352.935041][ T5664] Memory cgroup out of memory: Killed process 16495 (syz.1.5173) total-vm:104432kB, anon-rss:1276kB, file-rss:20772kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 353.003942][ T5739] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 353.015004][T14991] Bluetooth: hci1: command 0x0406 tx timeout [ 353.023218][ T5739] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 353.667024][T16549] synth uevent: /bus/mei: unknown uevent action string [ 354.419824][T16583] bond0: invalid ARP target specified [ 355.073784][T14991] Bluetooth: hci1: command 0x0406 tx timeout [ 355.970689][T16654] bond0: option slaves: interface -]=,Do does not exist! [ 356.417079][T16668] kafs: addr_prefs: Invalid Command [ 357.210423][T16703] block2mtd: illegal erase size [ 357.452767][T14835] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 357.452818][T14835] Bluetooth: hci0: unexpected event for opcode 0x647c [ 358.149207][T14835] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 361.061732][ T29] audit: type=1800 audit(1843107788.120:23): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5360" name="discovery_nqn" dev="configfs" ino=43685 res=0 errno=0 [ 364.428993][T17012] syz.1.5429 (17012): drop_caches: 0 [ 364.669470][T17021] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 365.737659][T17064] syz.2.5453 (17064): drop_caches: 0 [ 366.054212][T17076] nvme_fcloop: unknown parameter or missing value '' [ 366.719053][T17104] sd 0:0:1:0: PR command failed: 1026 [ 366.736362][T17104] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 366.743939][T17104] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 367.683572][T17138] kAFS: Invalid Command on /proc/fs/afs/cells file [ 367.967778][T17150] CIFS: VFS: Invalid SecurityFlags: [ 370.125322][T17245] Process accounting resumed [ 370.418611][T17258] syz.1.5549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 372.643201][ T29] audit: type=1400 audit(1843107799.764:24): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17337 comm="syz.3.5588" [ 374.088516][T16256] syz.2.5057 (16256) used greatest stack depth: 18008 bytes left [ 375.967129][T17464] TCP: TCP_TX_DELAY enabled [ 376.524180][T17486] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 378.017495][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.024003][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.417226][ T29] audit: type=1800 audit(1843107807.571:25): pid=17597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5710" name="members" dev="configfs" ino=46394 res=0 errno=0 [ 380.598948][T17601] i2c i2c-0: new_device: Can't parse I2C address [ 380.673865][T17605] ceph: Failed to parse sending metrics switch value 'P^' [ 384.794600][ T5732] Process accounting resumed [ 388.537993][T17836] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 393.791806][T17989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.810111][T17989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.822202][T17989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.837833][T17989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.845734][T17989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.689826][ T29] audit: type=1326 audit(1843107822.913:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.5922" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9179e0d9 code=0x0 [ 395.921424][T17989] Bluetooth: hci4: command tx timeout [ 396.236757][T17988] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.261550][T17988] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.278245][T17988] bridge_slave_0: entered allmulticast mode [ 396.302427][T17988] bridge_slave_0: entered promiscuous mode [ 396.324309][T17988] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.338852][T17988] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.356477][T17988] bridge_slave_1: entered allmulticast mode [ 396.379582][T17988] bridge_slave_1: entered promiscuous mode [ 396.493011][T17988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.561528][T17988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.749289][T17988] team0: Port device team_slave_0 added [ 396.779788][T17988] team0: Port device team_slave_1 added [ 396.904105][T17988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.925963][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.976438][T18062] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 396.999718][T17988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.047290][T17988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.073674][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.141362][T17988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.398956][T17988] hsr_slave_0: entered promiscuous mode [ 397.409472][T17988] hsr_slave_1: entered promiscuous mode [ 397.410455][T17988] debugfs: 'hsr0' already exists in 'hsr' [ 397.410482][T17988] Cannot create hsr debugfs directory [ 398.002958][T17989] Bluetooth: hci4: command tx timeout [ 398.323342][T17988] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.376614][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.407503][T17988] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.451664][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.465984][T17988] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.492604][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.511911][T17988] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.576572][T17988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.864746][T17988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.934579][T17988] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.986290][T14833] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.993567][T14833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.026961][T18111] kAFS: Invalid Command on /proc/fs/afs/cells file [ 399.057501][T14867] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.065147][T14867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.072437][T17989] Bluetooth: hci4: command tx timeout [ 400.354050][T18148] Process accounting paused [ 400.397207][T17988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.210561][T17988] veth0_vlan: entered promiscuous mode [ 401.243430][T17988] veth1_vlan: entered promiscuous mode [ 401.358643][T17988] veth0_macvtap: entered promiscuous mode [ 401.402559][T17988] veth1_macvtap: entered promiscuous mode [ 401.482229][T17988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.516109][T17988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.594708][T14867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.633654][T14867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.735606][T14833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.771146][T14833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.006781][T14833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.045665][T14833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.132866][T17989] Bluetooth: hci4: command tx timeout [ 402.163166][T15363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.174463][T15363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.358963][T17988] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 402.647790][T18212] kafs: addr_prefs: Too many elements in string [ 407.881884][T18346] Setting dangerous option i915.mitigations - tainting kernel [ 413.284825][T18481] synth uevent: /module/null_blk: unknown uevent action string [ 414.589231][T18518] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 414.865095][T18526] ======================================================= [ 414.865095][T18526] WARNING: The mand mount option has been deprecated and [ 414.865095][T18526] and is ignored by this kernel. Remove the mand [ 414.865095][T18526] option from the mount to silence this warning. [ 414.865095][T18526] ======================================================= [ 414.939276][T18530] block2mtd: Using custom MTD label '' for dev [ 414.961697][T18530] block2mtd: error: cannot open device [ 415.655135][T18554] block2mtd: Using custom MTD label '' for dev [ 415.680692][T18554] block2mtd: error: cannot open device [ 415.723178][T18556] warning: `syz.3.6159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 417.086474][ T29] audit: type=1807 audit(1843107844.413:27): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 417.104980][T18599] ima: policy update failed [ 417.125145][ T29] audit: type=1802 audit(1843107844.433:28): pid=18601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.6181" res=0 errno=0 [ 417.190700][ T29] audit: type=1802 audit(1843107844.443:29): pid=18599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6181" res=0 errno=0 [ 417.790145][T18623] usb usb13: usbfs: process 18623 (syz.0.6190) did not claim interface 0 before use [ 418.277402][T18636] : Can't lookup blockdev [ 419.988774][T18704] syz.1.6233 (18704): /proc/18703/oom_adj is deprecated, please use /proc/18703/oom_score_adj instead. [ 421.076928][T18748] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 421.245038][T18756] cougar: G6 mapped to space [ 421.809528][T18780] syz.3.6270: vm.laptop_mode is deprecated. Ignoring setting. [ 422.131560][T18792] block2mtd: illegal erase size [ 422.357394][T18801] random: crng reseeded on system resumption [ 422.971679][T18825] vhci_hcd: not connected 4 [ 423.468141][T18843] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 423.501633][T18843] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 424.593840][T18878] smpboot: CPU 1 is now offline [ 424.967853][T17989] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 424.975529][T17989] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 426.597958][T18929] could not allocate digest TFM handle [ 427.933284][T18990] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 430.034656][T19054] Invalid ELF header magic: != ELF [ 430.338127][T19061] Process accounting resumed [ 430.378634][T17989] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 430.386859][T17989] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 430.734690][T19076] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 430.782831][T19076] vhci_hcd vhci_hcd.3: invalid port number 0 [ 431.125270][T19083] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 431.189771][T19083] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 431.259308][T19083] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 431.321932][T19083] page_type: f5(slab) [ 431.365450][T19083] raw: 00fff00000000040 ffff88813fe21dc0 dead000000000100 dead000000000122 [ 431.429321][T19083] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 431.478762][T19083] head: 00fff00000000040 ffff88813fe21dc0 dead000000000100 dead000000000122 [ 431.528851][T19083] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 431.590209][T19083] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 431.645335][T19083] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 431.700504][T19083] page dumped because: unmovable page [ 431.731963][T19083] page_owner tracks the page as allocated [ 431.767036][T19083] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5320, tgid 5320 (dhcpcd), ts 58529486321, free_ts 58502152138 [ 431.923966][T19083] post_alloc_hook+0xfd/0x120 [ 431.971630][T19083] get_page_from_freelist+0xf48/0x3530 [ 432.016343][T19083] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 432.056787][T19083] new_slab+0xa2/0x640 [ 432.087351][T19083] refill_objects+0xe3/0x410 [ 432.113413][T19083] __pcs_replace_empty_main+0x376/0x680 [ 432.145287][T19083] __kmalloc_noprof+0x66d/0x820 [ 432.171958][T19083] load_elf_phdrs+0x102/0x210 [ 432.190233][T19083] load_elf_binary+0x15b8/0x51c0 [ 432.212363][T19083] bprm_execve+0x8fb/0x1730 [ 432.232479][T19083] do_execveat_common.isra.0+0x4a5/0x580 [ 432.265047][T19083] __x64_sys_execve+0x93/0xd0 [ 432.287084][T19083] do_syscall_64+0x115/0x840 [ 432.307724][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.332618][T19083] page last free pid 5319 tgid 5319 stack trace: [ 432.363421][T19083] __free_frozen_pages+0x79f/0x1090 [ 432.386186][T19083] qlist_free_all+0x47/0xf0 [ 432.411600][T19083] kasan_quarantine_reduce+0x1a0/0x1f0 [ 432.436588][T19083] __kasan_slab_alloc+0x69/0x90 [ 432.458685][T19083] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 432.488483][T19083] do_getname+0x35/0x390 [ 432.510272][T19083] do_sys_openat2+0xc7/0x1e0 [ 432.529456][T19083] __x64_sys_openat+0x12d/0x210 [ 432.548609][T19083] do_syscall_64+0x115/0x840 [ 432.574477][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.468470][T19148] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 433.757649][T19159] bond0: no command found in slaves file - use +ifname or -ifname [ 433.870480][T19161] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 436.320032][T19238] ima: policy update failed [ 436.358228][ T29] audit: type=1802 audit(1843126207.770:30): pid=19238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6490" res=0 errno=0 [ 436.455278][T19243] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 437.178348][T19266] batman_adv: Routing algorithm '' is not supported [ 439.164150][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.173956][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.883246][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 441.550805][T19394] Setting dangerous option i915.mitigations - tainting kernel [ 441.603810][T19394] Bad "i915.mitigations=,^", '^' is unknown [ 443.656248][T19436] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 444.262104][T19436] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 444.380118][T19436] pci 0000:00:01.3: PCI INT A: no GSI [ 444.685817][T19471] hub 1-0:1.0: USB hub found [ 444.731279][T19471] hub 1-0:1.0: 1 port detected [ 447.863908][T17989] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 447.872389][T17989] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 447.912417][T19572] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 449.759462][T19610] syz.3.6668 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 449.836277][T19610] CPU: 0 UID: 0 PID: 19610 Comm: syz.3.6668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 449.836309][T19610] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 449.836316][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.836326][T19610] Call Trace: [ 449.836332][T19610] [ 449.836339][T19610] dump_stack_lvl+0x100/0x190 [ 449.836365][T19610] dump_header+0xfb/0x606 [ 449.836386][T19610] oom_kill_process.cold+0xd/0x330 [ 449.836408][T19610] out_of_memory+0x340/0x14f0 [ 449.836452][T19610] ? __pfx_out_of_memory+0x10/0x10 [ 449.836488][T19610] mem_cgroup_out_of_memory+0xc6/0x130 [ 449.836510][T19610] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 449.836530][T19610] ? find_held_lock+0x2b/0x80 [ 449.836557][T19610] ? do_raw_spin_unlock+0x145/0x1e0 [ 449.836579][T19610] ? _raw_spin_unlock+0x28/0x50 [ 449.836603][T19610] try_charge_memcg+0x6e5/0xdf0 [ 449.836635][T19610] ? __pfx_try_charge_memcg+0x10/0x10 [ 449.836662][T19610] ? find_held_lock+0x2b/0x80 [ 449.836683][T19610] ? rcu_read_unlock+0x17/0x60 [ 449.836711][T19610] ? rcu_read_unlock+0x17/0x60 [ 449.836739][T19610] ? find_held_lock+0x2b/0x80 [ 449.836762][T19610] ? rcu_read_unlock+0x17/0x60 [ 449.836794][T19610] charge_memcg+0x187/0x1e0 [ 449.836823][T19610] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 449.836845][T19610] swap_cache_alloc_folio+0x548/0xc50 [ 449.836872][T19610] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 449.836902][T19610] ? swap_cache_get_folio+0x28d/0x360 [ 449.836923][T19610] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 449.836944][T19610] ? find_held_lock+0x2b/0x80 [ 449.836966][T19610] ? mlock_drain_local+0x254/0x4e0 [ 449.836987][T19610] ? mlock_drain_local+0x254/0x4e0 [ 449.837010][T19610] swap_cache_read_folio+0x47/0x140 [ 449.837034][T19610] swap_cluster_readahead+0x387/0x5f0 [ 449.837060][T19610] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 449.837093][T19610] ? __lock_acquire+0x49f/0x1a40 [ 449.837121][T19610] ? get_vma_policy+0x23d/0x3b0 [ 449.837152][T19610] swapin_readahead+0x159/0x1200 [ 449.837184][T19610] ? __pfx_swapin_readahead+0x10/0x10 [ 449.837211][T19610] ? swap_table_get+0x10d/0x2c0 [ 449.837230][T19610] ? swap_cache_get_folio+0x28d/0x360 [ 449.837251][T19610] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 449.837271][T19610] ? __pfx_softleaf_type+0x10/0x10 [ 449.837302][T19610] ? do_swap_page+0xf98/0x5780 [ 449.837321][T19610] do_swap_page+0xf98/0x5780 [ 449.837350][T19610] ? __pfx_do_swap_page+0x10/0x10 [ 449.837369][T19610] ? __lock_acquire+0x49f/0x1a40 [ 449.837400][T19610] ? rcu_is_watching+0x12/0xc0 [ 449.837422][T19610] ? __pte_offset_map+0x179/0x310 [ 449.837449][T19610] __handle_mm_fault+0x192f/0x2a00 [ 449.837476][T19610] ? reacquire_held_locks+0xce/0x1e0 [ 449.837506][T19610] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.837529][T19610] ? lock_vma_under_rcu+0x17c/0x590 [ 449.837565][T19610] handle_mm_fault+0x37b/0xa30 [ 449.837589][T19610] do_user_addr_fault+0x5a3/0x12f0 [ 449.837621][T19610] exc_page_fault+0x6f/0xd0 [ 449.837645][T19610] asm_exc_page_fault+0x26/0x30 [ 449.837664][T19610] RIP: 0033:0x7f1b9166b901 [ 449.837680][T19610] Code: ff e8 b3 7f fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 9e 9d ee 00 e8 03 00 00 48 8d 1d 9f a6 3b 00 ea 32 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 449.837697][T19610] RSP: 002b:00007ffece7a80b0 EFLAGS: 00010206 [ 449.837716][T19610] RAX: 000000000006e12a RBX: 00007f1b91a25fa0 RCX: 000000000006ddd0 [ 449.837727][T19610] RDX: 000000000000035a RSI: 00007ffece7a8090 RDI: 00000000000003e8 [ 449.837738][T19610] RBP: 00007f1b91a27da0 R08: 0032329bb200fbc9 R09: 0000000000000001 [ 449.837749][T19610] R10: 0000000000015156 R11: 0000000000000246 R12: 000000000006e280 [ 449.837760][T19610] R13: 00007f1b91a25fac R14: 000000000006df93 R15: 00007ffece7a81b0 [ 449.837783][T19610] [ 450.605008][T19624] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 452.055739][T19610] memory: usage 3072kB, limit 3072kB, failcnt 15428 [ 452.094355][T19610] memory+swap: usage 3264kB, limit 9007199254740988kB, failcnt 0 [ 452.141104][T19610] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 452.182848][T19610] Memory cgroup stats for /syz3: [ 452.182983][T19610] cache 0 [ 452.224356][T19610] rss 4096 [ 452.244072][T19610] rss_huge 0 [ 452.263669][T19610] shmem 0 [ 452.282068][T19610] mapped_file 0 [ 452.305095][T19610] dirty 0 [ 452.325575][T19610] writeback 4096 [ 452.354538][T19610] workingset_refault_anon 1629 [ 452.385374][T19610] workingset_refault_file 6701 [ 452.416172][T19610] swap 196608 [ 452.433980][T19610] swapcached 46514176 [ 452.459973][T19610] pgpgin 108824 [ 452.483173][T19610] pgpgout 113420 [ 452.506715][T19610] pgfault 267549 [ 452.525170][T19610] pgmajfault 692 [ 452.550323][T19610] inactive_anon 0 [ 452.576174][T19610] active_anon 8192 [ 452.598669][T19610] inactive_file 0 [ 452.620588][T19610] active_file 0 [ 452.637335][T19610] unevictable 0 [ 452.663198][T19610] hierarchical_memory_limit 3145728 [ 452.688889][T19610] hierarchical_memsw_limit 9223372036854771712 [ 452.724723][T19610] total_cache 0 [ 452.749550][T19610] total_rss 4096 [ 452.780881][T19610] total_rss_huge 0 [ 452.803880][T19610] total_shmem 0 [ 452.833051][T19610] total_mapped_file 0 [ 452.855758][T19610] total_dirty 0 [ 452.874304][T19610] total_writeback 4096 [ 452.895553][T19610] total_workingset_refault_anon 1629 [ 452.926598][T19610] total_workingset_refault_file 6701 [ 452.963332][T19610] total_swap 196608 [ 452.983916][T19610] total_swapcached 46514176 [ 453.009365][T19610] total_pgpgin 108824 [ 453.033864][T19610] total_pgpgout 113420 [ 453.055708][T19610] total_pgfault 267549 [ 453.078121][T19610] total_pgmajfault 692 [ 453.102939][T19610] total_inactive_anon 0 [ 453.125550][T19610] total_active_anon 8192 [ 453.147269][T19610] total_inactive_file 0 [ 453.170854][T19610] total_active_file 0 [ 453.198331][T19610] total_unevictable 0 [ 453.224857][T19610] anon_cost 22 [ 453.260380][T19610] file_cost 0 [ 453.290946][T19610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6668,pid=19610,uid=0 [ 453.390294][T19610] Memory cgroup out of memory: Killed process 19610 (syz.3.6668) total-vm:102252kB, anon-rss:1248kB, file-rss:20852kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 453.914222][T19690] hub 1-0:1.0: USB hub found [ 453.942314][T19690] hub 1-0:1.0: 1 port detected [ 454.044632][T19692] vmstat_refresh: nr_hugetlb -4096 [ 455.171097][T19716] Zero length message leads to an empty skb [ 455.221840][T19718] No such timeout policy "" [ 455.247779][T19718] netlink: Failed to associated timeout policy '' [ 455.508036][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6722'. [ 456.274988][T17989] Bluetooth: hci4: unexpected subevent 0x18 length: 123 > 19 [ 456.282589][T17989] Bluetooth: hci4: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 457.655408][T19767] openvswitch: netlink: Multiple metadata blocks provided [ 457.775846][T17989] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 457.775874][T17989] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 457.792081][T17989] Bluetooth: hci0: Dropping invalid advertising data [ 457.800239][T17989] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 457.800259][T17989] Bluetooth: hci0: Dropping invalid advertising data [ 457.814427][T17989] Bluetooth: hci0: unknown advertising packet type: 0x79 [ 457.814466][T17989] Bluetooth: hci0: Malformed LE Event: 0x02 [ 458.943417][T19806] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 459.639413][T19820] netlink: 'syz.3.6767': attribute type 3 has an invalid length. [ 460.274121][T19836] netlink: 'syz.0.6774': attribute type 2 has an invalid length. [ 460.569546][T19845] mmap: syz.0.6778 (19845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 460.920512][T19851] tipc: Started in network mode [ 460.950210][T19851] tipc: Node identity ee00, cluster identity 4711 [ 460.997027][T19851] tipc: Node number set to 60928 [ 461.656419][T19852] Process accounting paused [ 462.572459][T19884] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.605191][T19884] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 462.719346][T19889] hub 1-0:1.0: USB hub found [ 462.787568][T19889] hub 1-0:1.0: 1 port detected [ 463.150317][T19902] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 463.433274][T19905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 463.831713][T19913] sd 0:0:1:0: PR command failed: 1026 [ 463.874841][T19913] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 463.912306][T19913] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 466.810683][T19987] aoe: copy from user failed [ 466.842382][T19987] aoe: could not set interface list: too many interfaces [ 467.328988][T19999] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 468.272165][T20027] netlink: 'syz.1.6863': attribute type 11 has an invalid length. [ 468.333937][T20027] netlink: 'syz.1.6863': attribute type 11 has an invalid length. [ 468.391077][T20027] netlink: 'syz.1.6863': attribute type 11 has an invalid length. [ 468.499507][T20033] netlink: Unknown nat attribute (0) [ 468.674003][ T29] audit: type=1107 audit(4294967333.971:31): pid=20036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 468.757193][ T29] audit: type=1107 audit(4294967334.021:32): pid=20036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 469.452429][T20059] netlink: 'syz.0.6878': attribute type 1 has an invalid length. [ 470.372893][T20093] netlink: 'syz.1.6893': attribute type 1 has an invalid length. [ 472.090808][T20128] FAULT_INJECTION: forcing a failure. [ 472.090808][T20128] name failslab, interval 1, probability 0, space 0, times 1 [ 472.148851][T20128] CPU: 0 UID: 0 PID: 20128 Comm: syz.1.6908 Tainted: G U L syzkaller #0 PREEMPT(full) [ 472.148884][T20128] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 472.148891][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.148908][T20128] Call Trace: [ 472.148936][T20128] [ 472.148944][T20128] dump_stack_lvl+0x100/0x190 [ 472.149049][T20128] should_fail_ex.cold+0x5/0xa [ 472.149092][T20128] should_failslab+0xc2/0x120 [ 472.149142][T20128] __kvmalloc_node_noprof+0x116/0x970 [ 472.149172][T20128] ? percpu_ref_init+0xec/0x3f0 [ 472.149260][T20128] ? io_alloc_cache_init+0x38/0x170 [ 472.149304][T20128] io_alloc_cache_init+0x38/0x170 [ 472.149330][T20128] io_uring_setup.cold+0x450/0x1c2e [ 472.149358][T20128] ? ksys_write+0x190/0x250 [ 472.149388][T20128] ? ksys_write+0x190/0x250 [ 472.149404][T20128] ? __pfx_io_uring_setup+0x10/0x10 [ 472.149440][T20128] ? do_futex+0x190/0x440 [ 472.149477][T20128] ? __pfx_do_futex+0x10/0x10 [ 472.149506][T20128] ? xfd_validate_state+0x129/0x190 [ 472.149547][T20128] __x64_sys_io_uring_setup+0xc2/0x170 [ 472.149569][T20128] do_syscall_64+0x115/0x840 [ 472.149661][T20128] ? clear_bhb_loop+0x40/0x90 [ 472.149694][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.149713][T20128] RIP: 0033:0x7fb2d7d9e0d9 [ 472.149729][T20128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.149753][T20128] RSP: 002b:00007fb2d8c61028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 472.149795][T20128] RAX: ffffffffffffffda RBX: 00007fb2d8025fa0 RCX: 00007fb2d7d9e0d9 [ 472.149806][T20128] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 472.149818][T20128] RBP: 00007fb2d7e35024 R08: 0000000000000000 R09: 0000000000000000 [ 472.149829][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.149839][T20128] R13: 00007fb2d8026038 R14: 00007fb2d8025fa0 R15: 00007ffe55821b28 [ 472.149861][T20128] [ 472.883234][T20132] FAULT_INJECTION: forcing a failure. [ 472.883234][T20132] name failslab, interval 1, probability 0, space 0, times 0 [ 473.006525][T20132] CPU: 0 UID: 0 PID: 20132 Comm: syz.4.6910 Tainted: G U L syzkaller #0 PREEMPT(full) [ 473.006559][T20132] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 473.006566][T20132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.006576][T20132] Call Trace: [ 473.006583][T20132] [ 473.006590][T20132] dump_stack_lvl+0x100/0x190 [ 473.006616][T20132] should_fail_ex.cold+0x5/0xa [ 473.006636][T20132] should_failslab+0xc2/0x120 [ 473.006663][T20132] kmem_cache_alloc_noprof+0x91/0x6a0 [ 473.006686][T20132] ? __pud_alloc+0x4f6/0x690 [ 473.006713][T20132] ? __pmd_alloc+0xbf/0x950 [ 473.006749][T20132] __pmd_alloc+0xbf/0x950 [ 473.006773][T20132] ? __pud_alloc+0x4fb/0x690 [ 473.006800][T20132] walk_to_pmd+0x3a3/0x4c0 [ 473.006829][T20132] get_locked_pte+0x25/0xc0 [ 473.006857][T20132] map_ldt_struct+0x3c1/0xa70 [ 473.006911][T20132] ? __pfx_map_ldt_struct+0x10/0x10 [ 473.006938][T20132] ? alloc_pages_noprof+0xf9/0x160 [ 473.006962][T20132] write_ldt+0x6d3/0xd40 [ 473.006991][T20132] ? __pfx_write_ldt+0x10/0x10 [ 473.007019][T20132] ? xfd_validate_state+0x129/0x190 [ 473.007046][T20132] __x64_sys_modify_ldt+0xb1/0x170 [ 473.007073][T20132] do_syscall_64+0x115/0x840 [ 473.007097][T20132] ? clear_bhb_loop+0x40/0x90 [ 473.007119][T20132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.007137][T20132] RIP: 0033:0x7fbdb059e0d9 [ 473.007152][T20132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.007169][T20132] RSP: 002b:00007fbdb1469028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 473.007187][T20132] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059e0d9 [ 473.007198][T20132] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 473.007209][T20132] RBP: 00007fbdb0635024 R08: 0000000000000000 R09: 0000000000000000 [ 473.007220][T20132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.007231][T20132] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 473.007258][T20132] [ 474.897571][T20157] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 475.863436][T20188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 476.813525][T20214] netlink: 'syz.1.6949': attribute type 2 has an invalid length. [ 476.862432][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6949'. [ 478.250326][T20246] sctp: [Deprecated]: syz.4.6962 (pid 20246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.250326][T20246] Use struct sctp_sack_info instead [ 481.840379][T20329] &#$@\]\-: entered promiscuous mode [ 482.179807][ T29] audit: type=1800 audit(4294967347.544:33): pid=20343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7010" name="lu_gp_id" dev="configfs" ino=56538 res=0 errno=0 [ 482.813221][T20362] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.150662][T20397] netlink: 'syz.1.7034': attribute type 1 has an invalid length. [ 484.826747][T20417] .^: entered promiscuous mode [ 485.091423][T17989] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 485.582834][T20443] netlink: 'syz.3.7057': attribute type 11 has an invalid length. [ 485.668205][T20443] netlink: 'syz.3.7057': attribute type 11 has an invalid length. [ 485.705642][T20443] netlink: 'syz.3.7057': attribute type 11 has an invalid length. [ 486.100476][T20458] syz.0.7064 uses obsolete (PF_INET,SOCK_PACKET) [ 486.210878][T20464] netlink: 'syz.4.7065': attribute type 1 has an invalid length. [ 486.391392][T20467] netlink: 'syz.0.7068': attribute type 1 has an invalid length. [ 488.650573][T20531] netlink: 'syz.4.7099': attribute type 11 has an invalid length. [ 489.707634][T20566] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 490.000039][T20573] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 491.055744][T20602] FAULT_INJECTION: forcing a failure. [ 491.055744][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 491.090306][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7131'. [ 491.143619][T20602] CPU: 0 UID: 0 PID: 20602 Comm: syz.0.7130 Tainted: G U L syzkaller #0 PREEMPT(full) [ 491.143652][T20602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 491.143659][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.143669][T20602] Call Trace: [ 491.143676][T20602] [ 491.143683][T20602] dump_stack_lvl+0x100/0x190 [ 491.143709][T20602] should_fail_ex.cold+0x5/0xa [ 491.143729][T20602] should_failslab+0xc2/0x120 [ 491.143755][T20602] kmem_cache_alloc_noprof+0x91/0x6a0 [ 491.143779][T20602] ? __pmd_alloc+0xbf/0x950 [ 491.143809][T20602] __pmd_alloc+0xbf/0x950 [ 491.143837][T20602] move_page_tables+0x2f7c/0x4610 [ 491.143859][T20602] ? __pfx_copy_vma+0x10/0x10 [ 491.143886][T20602] ? __pfx_move_page_tables+0x10/0x10 [ 491.143922][T20602] copy_vma_and_data+0x25c/0x7c0 [ 491.143944][T20602] ? __pfx_copy_vma_and_data+0x10/0x10 [ 491.143973][T20602] ? __vma_start_write+0x17f/0x280 [ 491.144012][T20602] ? __pfx___vma_start_write+0x10/0x10 [ 491.144048][T20602] move_vma+0x574/0x1920 [ 491.144075][T20602] ? __pfx_move_vma+0x10/0x10 [ 491.144097][T20602] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 491.144124][T20602] ? cap_mmap_addr+0x4b/0x120 [ 491.144234][T20602] ? bpf_lsm_mmap_addr+0x9/0x30 [ 491.144256][T20602] ? security_mmap_addr+0x71/0x1e0 [ 491.144314][T20602] ? __get_unmapped_area+0x255/0x3e0 [ 491.144343][T20602] ? vrm_set_new_addr+0x204/0x290 [ 491.144365][T20602] mremap_to+0x234/0x4c0 [ 491.144383][T20602] ? mas_walk+0x6ef/0x9b0 [ 491.144439][T20602] ? __pfx_mremap_to+0x10/0x10 [ 491.144465][T20602] __do_sys_mremap+0x88c/0x1850 [ 491.144493][T20602] ? __pfx___do_sys_mremap+0x10/0x10 [ 491.144512][T20602] ? ksys_write+0x190/0x250 [ 491.144535][T20602] ? __pfx_do_futex+0x10/0x10 [ 491.144562][T20602] ? __x64_sys_futex+0x34f/0x4d0 [ 491.144602][T20602] do_syscall_64+0x115/0x840 [ 491.144624][T20602] ? clear_bhb_loop+0x40/0x90 [ 491.144646][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.144666][T20602] RIP: 0033:0x7fd53a59e0d9 [ 491.144682][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.144699][T20602] RSP: 002b:00007fd53b3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 491.144717][T20602] RAX: ffffffffffffffda RBX: 00007fd53a825fa0 RCX: 00007fd53a59e0d9 [ 491.144729][T20602] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 491.144739][T20602] RBP: 00007fd53a635024 R08: 0000000100000000 R09: 0000000000000000 [ 491.144749][T20602] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 491.144759][T20602] R13: 00007fd53a826038 R14: 00007fd53a825fa0 R15: 00007fff7fb4cc48 [ 491.144783][T20602] [ 491.144888][T20603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 492.684731][T20603] Process accounting resumed [ 493.262559][T20633] netlink: 'syz.1.7145': attribute type 2 has an invalid length. [ 493.581621][T20643] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 493.630951][T20643] audit: out of memory in audit_log_start [ 494.164047][T20651] futex_wake_op: syz.3.7155 tries to shift op by -2048; fix this program [ 494.202005][T20651] futex_wake_op: syz.3.7155 tries to shift op by -2048; fix this program [ 494.470168][T20661] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 497.772256][T20731] netlink: Failed to add  helper -22 [ 498.732777][T20768] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 499.163890][T20780] netlink: 'syz.3.7213': attribute type 1 has an invalid length. [ 499.179985][T20783] netlink: 'syz.0.7214': attribute type 11 has an invalid length. [ 499.207802][T20780] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7213'. [ 499.230537][T20783] netlink: 'syz.0.7214': attribute type 11 has an invalid length. [ 499.273155][T20783] netlink: 'syz.0.7214': attribute type 11 has an invalid length. [ 499.319985][T20783] netlink: 'syz.0.7214': attribute type 11 has an invalid length. [ 499.652848][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7218'. [ 500.317851][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.328279][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.425971][T17989] Bluetooth: hci0: ACL packet too small [ 502.881725][T17989] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 502.919024][T17989] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 502.935604][T17989] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 502.945284][T17989] CPU: 0 UID: 0 PID: 17989 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.945319][T17989] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.945326][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.945354][T17989] Workqueue: hci2 hci_rx_work [ 502.945439][T17989] Call Trace: [ 502.945445][T17989] [ 502.945453][T17989] dump_stack_lvl+0x100/0x190 [ 502.945476][T17989] sysfs_warn_dup.cold+0x1c/0x28 [ 502.945504][T17989] sysfs_create_dir_ns+0x24b/0x2b0 [ 502.945577][T17989] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.945603][T17989] ? find_held_lock+0x2b/0x80 [ 502.945635][T17989] ? kobject_add_internal+0x25f/0x930 [ 502.945663][T17989] ? kobject_add_internal+0x25f/0x930 [ 502.945683][T17989] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.945706][T17989] kobject_add_internal+0x2c8/0x930 [ 502.945727][T17989] kobject_add+0x16a/0x1e0 [ 502.945746][T17989] ? __pfx_kobject_add+0x10/0x10 [ 502.945762][T17989] ? class_to_subsys+0x10f/0x150 [ 502.945830][T17989] ? kobject_put+0xb9/0x640 [ 502.945846][T17989] ? _raw_spin_unlock+0x28/0x50 [ 502.945892][T17989] device_add+0x294/0x1970 [ 502.945924][T17989] ? __pfx_dev_set_name+0x10/0x10 [ 502.945960][T17989] ? __pfx_device_add+0x10/0x10 [ 502.945978][T17989] ? mgmt_send_event_skb+0x2fb/0x460 [ 502.946031][T17989] hci_conn_add_sysfs+0x1a3/0x260 [ 502.946086][T17989] le_conn_complete_evt+0x11eb/0x1f60 [ 502.946140][T17989] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.946161][T17989] ? __pfx_bt_warn+0x10/0x10 [ 502.946182][T17989] ? hci_event_packet+0x186/0xcd0 [ 502.946209][T17989] hci_le_conn_complete_evt+0x23c/0x3a0 [ 502.946233][T17989] ? skb_pull_data+0x15f/0x1e0 [ 502.946292][T17989] hci_le_meta_evt+0x34a/0x5f0 [ 502.946334][T17989] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 502.946361][T17989] hci_event_packet+0x51c/0xcd0 [ 502.946384][T17989] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.946410][T17989] ? __pfx_hci_event_packet+0x10/0x10 [ 502.946436][T17989] ? kcov_remote_start+0x384/0x670 [ 502.946462][T17989] ? lockdep_hardirqs_on+0x78/0x100 [ 502.946495][T17989] hci_rx_work+0x451/0xfc0 [ 502.946522][T17989] process_one_work+0xa23/0x1940 [ 502.946564][T17989] ? __pfx_process_one_work+0x10/0x10 [ 502.946597][T17989] ? __pfx_hci_rx_work+0x10/0x10 [ 502.946621][T17989] worker_thread+0x5ef/0xe50 [ 502.946657][T17989] ? __pfx_worker_thread+0x10/0x10 [ 502.946683][T17989] ? kthread+0x13a/0x450 [ 502.946705][T17989] ? __pfx_worker_thread+0x10/0x10 [ 502.946729][T17989] kthread+0x370/0x450 [ 502.946752][T17989] ? __pfx_kthread+0x10/0x10 [ 502.946777][T17989] ret_from_fork+0x72b/0xd50 [ 502.946800][T17989] ? __pfx_ret_from_fork+0x10/0x10 [ 502.946831][T17989] ? __switch_to+0x800/0x10f0 [ 502.946858][T17989] ? __switch_to_asm+0x39/0x70 [ 502.946882][T17989] ? __pfx_kthread+0x10/0x10 [ 502.946908][T17989] ret_from_fork_asm+0x1a/0x30 [ 502.946945][T17989] [ 502.947000][T17989] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 503.273003][T17989] Bluetooth: hci2: failed to register connection device [ 503.348518][T20898] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 504.704639][T20931] nbd: couldn't find device at index 158 [ 504.929664][T17989] Bluetooth: hci2: command 0x0406 tx timeout [ 505.458761][T20954] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7294'. [ 505.599767][T20958] netlink: 'syz.3.7296': attribute type 23 has an invalid length. [ 506.498783][T20937] kexec: Could not allocate control_code_buffer [ 506.542377][T20979] random: crng reseeded on system resumption [ 507.003535][T17989] Bluetooth: hci2: command 0x0406 tx timeout [ 507.500426][T21005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7318'. [ 507.543237][T21007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.200229][T21029] netlink: 'syz.1.7328': attribute type 1 has an invalid length. [ 509.069552][T17989] Bluetooth: hci2: command 0x0406 tx timeout [ 511.140138][T14835] Bluetooth: hci2: command 0x0406 tx timeout [ 514.544404][T21226] HfR: entered promiscuous mode [ 514.625315][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7422'. [ 515.573918][T14835] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 515.650159][T21260] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 515.657889][T21260] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 515.667314][T21260] CPU: 0 UID: 0 PID: 21260 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 515.667344][T21260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 515.667351][T21260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.667363][T21260] Workqueue: hci3 hci_rx_work [ 515.667389][T21260] Call Trace: [ 515.667395][T21260] [ 515.667402][T21260] dump_stack_lvl+0x100/0x190 [ 515.667426][T21260] sysfs_warn_dup.cold+0x1c/0x28 [ 515.667454][T21260] sysfs_create_dir_ns+0x24b/0x2b0 [ 515.667482][T21260] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 515.667508][T21260] ? find_held_lock+0x2b/0x80 [ 515.667532][T21260] ? kobject_add_internal+0x25f/0x930 [ 515.667549][T21260] ? kobject_add_internal+0x25f/0x930 [ 515.667569][T21260] ? do_raw_spin_unlock+0x145/0x1e0 [ 515.667591][T21260] kobject_add_internal+0x2c8/0x930 [ 515.667614][T21260] kobject_add+0x16a/0x1e0 [ 515.667632][T21260] ? __pfx_kobject_add+0x10/0x10 [ 515.667649][T21260] ? class_to_subsys+0x10f/0x150 [ 515.667671][T21260] ? kobject_put+0xb9/0x640 [ 515.667686][T21260] ? _raw_spin_unlock+0x28/0x50 [ 515.667711][T21260] device_add+0x294/0x1970 [ 515.667729][T21260] ? __pfx_dev_set_name+0x10/0x10 [ 515.667750][T21260] ? __pfx_device_add+0x10/0x10 [ 515.667768][T21260] ? mgmt_send_event_skb+0x2fb/0x460 [ 515.667797][T21260] hci_conn_add_sysfs+0x1a3/0x260 [ 515.667824][T21260] le_conn_complete_evt+0x11eb/0x1f60 [ 515.667853][T21260] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 515.667874][T21260] ? __pfx_bt_warn+0x10/0x10 [ 515.667890][T21260] ? hci_event_packet+0x186/0xcd0 [ 515.667917][T21260] hci_le_conn_complete_evt+0x23c/0x3a0 [ 515.667941][T21260] ? skb_pull_data+0x15f/0x1e0 [ 515.667963][T21260] hci_le_meta_evt+0x34a/0x5f0 [ 515.667987][T21260] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 515.668013][T21260] hci_event_packet+0x51c/0xcd0 [ 515.668036][T21260] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 515.668061][T21260] ? __pfx_hci_event_packet+0x10/0x10 [ 515.668086][T21260] ? kcov_remote_start+0x384/0x670 [ 515.668112][T21260] ? lockdep_hardirqs_on+0x78/0x100 [ 515.668144][T21260] hci_rx_work+0x451/0xfc0 [ 515.668179][T21260] process_one_work+0xa23/0x1940 [ 515.668216][T21260] ? __pfx_process_one_work+0x10/0x10 [ 515.668250][T21260] ? __pfx_hci_rx_work+0x10/0x10 [ 515.668274][T21260] worker_thread+0x5ef/0xe50 [ 515.668306][T21260] ? __pfx_worker_thread+0x10/0x10 [ 515.668333][T21260] ? kthread+0x13a/0x450 [ 515.668356][T21260] ? __pfx_worker_thread+0x10/0x10 [ 515.668380][T21260] kthread+0x370/0x450 [ 515.668404][T21260] ? __pfx_kthread+0x10/0x10 [ 515.668430][T21260] ret_from_fork+0x72b/0xd50 [ 515.668453][T21260] ? __pfx_ret_from_fork+0x10/0x10 [ 515.668475][T21260] ? rcu_is_watching+0x12/0xc0 [ 515.668514][T21260] ? __switch_to+0x800/0x10f0 [ 515.668541][T21260] ? __switch_to_asm+0x39/0x70 [ 515.668565][T21260] ? __pfx_kthread+0x10/0x10 [ 515.668591][T21260] ret_from_fork_asm+0x1a/0x30 [ 515.668627][T21260] [ 516.272074][T21260] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.286078][T21260] Bluetooth: hci3: failed to register connection device [ 516.527370][T21235] CIFS: VFS: Invalid SecurityFlags: [ 517.589592][T21260] Bluetooth: hci3: command 0x0406 tx timeout [ 517.671841][T21260] Bluetooth: hci4: command 0x0406 tx timeout [ 518.531212][T21313] netlink: 'syz.4.7460': attribute type 2 has an invalid length. [ 519.368118][T21339] netlink: 'syz.0.7473': attribute type 1 has an invalid length. [ 519.647297][T21347] netlink: Unknown NAT attribute (type=262, max=9) [ 519.664076][T14835] Bluetooth: hci3: command 0x0406 tx timeout [ 519.847613][T21351] netlink: Invalid conntrack helper [ 520.289684][T21364] netlink: 'syz.1.7485': attribute type 1 has an invalid length. [ 520.409849][T21367] netlink: 'syz.3.7487': attribute type 2 has an invalid length. [ 520.753862][T21378] process 'syz.1.7492' launched '/dev/fd/3' with NULL argv: empty string added [ 521.395818][T21395] netlink: 'syz.0.7499': attribute type 2 has an invalid length. [ 521.730006][T14835] Bluetooth: hci3: command 0x0406 tx timeout [ 522.377289][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7512'. [ 522.706455][T21425] Process accounting paused [ 523.119749][ T9] Process accounting resumed [ 523.389288][T17989] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 523.460354][T14835] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 523.470363][T14835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 523.484825][T14835] CPU: 0 UID: 0 PID: 14835 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 523.484858][T14835] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 523.484865][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.484878][T14835] Workqueue: hci4 hci_rx_work [ 523.484906][T14835] Call Trace: [ 523.484913][T14835] [ 523.484920][T14835] dump_stack_lvl+0x100/0x190 [ 523.484943][T14835] sysfs_warn_dup.cold+0x1c/0x28 [ 523.484970][T14835] sysfs_create_dir_ns+0x24b/0x2b0 [ 523.484998][T14835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.485024][T14835] ? find_held_lock+0x2b/0x80 [ 523.485046][T14835] ? kobject_add_internal+0x25f/0x930 [ 523.485064][T14835] ? kobject_add_internal+0x25f/0x930 [ 523.485084][T14835] ? do_raw_spin_unlock+0x145/0x1e0 [ 523.485106][T14835] kobject_add_internal+0x2c8/0x930 [ 523.485128][T14835] kobject_add+0x16a/0x1e0 [ 523.485146][T14835] ? __pfx_kobject_add+0x10/0x10 [ 523.485164][T14835] ? class_to_subsys+0x10f/0x150 [ 523.485222][T14835] ? kobject_put+0xb9/0x640 [ 523.485237][T14835] ? _raw_spin_unlock+0x28/0x50 [ 523.485264][T14835] device_add+0x294/0x1970 [ 523.485283][T14835] ? __pfx_dev_set_name+0x10/0x10 [ 523.485304][T14835] ? __pfx_device_add+0x10/0x10 [ 523.485322][T14835] ? mgmt_send_event_skb+0x2fb/0x460 [ 523.485353][T14835] hci_conn_add_sysfs+0x1a3/0x260 [ 523.485381][T14835] le_conn_complete_evt+0x11eb/0x1f60 [ 523.485409][T14835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.485430][T14835] ? __pfx_bt_warn+0x10/0x10 [ 523.485445][T14835] ? hci_event_packet+0x186/0xcd0 [ 523.485473][T14835] hci_le_conn_complete_evt+0x23c/0x3a0 [ 523.485497][T14835] ? skb_pull_data+0x15f/0x1e0 [ 523.485519][T14835] hci_le_meta_evt+0x34a/0x5f0 [ 523.485543][T14835] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 523.485570][T14835] hci_event_packet+0x51c/0xcd0 [ 523.485593][T14835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.485618][T14835] ? __pfx_hci_event_packet+0x10/0x10 [ 523.485643][T14835] ? kcov_remote_start+0x384/0x670 [ 523.485669][T14835] ? lockdep_hardirqs_on+0x78/0x100 [ 523.485697][T14835] hci_rx_work+0x451/0xfc0 [ 523.485723][T14835] process_one_work+0xa23/0x1940 [ 523.485758][T14835] ? __pfx_process_one_work+0x10/0x10 [ 523.485791][T14835] ? __pfx_hci_rx_work+0x10/0x10 [ 523.485815][T14835] worker_thread+0x5ef/0xe50 [ 523.485850][T14835] ? kthread+0x13a/0x450 [ 523.485872][T14835] ? __pfx_worker_thread+0x10/0x10 [ 523.485896][T14835] kthread+0x370/0x450 [ 523.485918][T14835] ? __pfx_kthread+0x10/0x10 [ 523.485944][T14835] ret_from_fork+0x72b/0xd50 [ 523.485973][T14835] ? __pfx_ret_from_fork+0x10/0x10 [ 523.485996][T14835] ? __switch_to+0x800/0x10f0 [ 523.486023][T14835] ? __switch_to_asm+0x39/0x70 [ 523.486046][T14835] ? __pfx_kthread+0x10/0x10 [ 523.486071][T14835] ret_from_fork_asm+0x1a/0x30 [ 523.486106][T14835] [ 523.486128][T14835] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.811365][T21260] Bluetooth: hci3: command 0x0406 tx timeout [ 523.821602][T14835] Bluetooth: hci4: failed to register connection device [ 524.643269][T21472] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 524.980730][T21480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7541'. [ 525.080015][T21480] netlink: 29 bytes leftover after parsing attributes in process `syz.3.7541'. [ 525.393570][T14835] Bluetooth: hci4: command 0x0406 tx timeout [ 525.967506][ T5790] Process accounting resumed [ 526.963057][T21540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7570'. [ 527.462915][T17989] Bluetooth: hci4: command 0x0406 tx timeout [ 527.495438][T21556] netlink: NAT attribute type 0 has unexpected length (4 != 0) syzkaller syzkaller login: [ 527.721877][T21561] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 529.420255][T21617] netlink: 'syz.3.7607': attribute type 8 has an invalid length. [ 529.533493][T17989] Bluetooth: hci4: command 0x0406 tx timeout [ 529.727335][T21625] block nbd2: not configured, cannot reconfigure [ 529.754447][T21628] FAULT_INJECTION: forcing a failure. [ 529.754447][T21628] name failslab, interval 1, probability 0, space 0, times 0 [ 529.826904][T21628] CPU: 0 UID: 0 PID: 21628 Comm: syz.1.7613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 529.826939][T21628] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 529.826945][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.826955][T21628] Call Trace: [ 529.826961][T21628] [ 529.826968][T21628] dump_stack_lvl+0x100/0x190 [ 529.826994][T21628] should_fail_ex.cold+0x5/0xa [ 529.827014][T21628] should_failslab+0xc2/0x120 [ 529.827048][T21628] kmem_cache_alloc_noprof+0x91/0x6a0 [ 529.827070][T21628] ? d_instantiate+0x8a/0xb0 [ 529.827091][T21628] ? d_instantiate+0x8a/0xb0 [ 529.827112][T21628] ? alloc_empty_file+0x5b/0x1c0 [ 529.827139][T21628] alloc_empty_file+0x5b/0x1c0 [ 529.827162][T21628] alloc_file_pseudo+0x183/0x290 [ 529.827187][T21628] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 529.827209][T21628] ? alloc_fd+0x471/0x7a0 [ 529.827249][T21628] ? do_raw_spin_unlock+0x145/0x1e0 [ 529.827273][T21628] __anon_inode_getfile+0xe8/0x280 [ 529.827341][T21628] anon_inode_getfile_fmode+0x37/0xa0 [ 529.827367][T21628] __do_sys_fanotify_init+0xa0d/0xe30 [ 529.827416][T21628] do_syscall_64+0x115/0x840 [ 529.827440][T21628] ? clear_bhb_loop+0x40/0x90 [ 529.827465][T21628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.827483][T21628] RIP: 0033:0x7fb2d7d9e0d9 [ 529.827499][T21628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.827516][T21628] RSP: 002b:00007fb2d8c61028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 529.827534][T21628] RAX: ffffffffffffffda RBX: 00007fb2d8025fa0 RCX: 00007fb2d7d9e0d9 [ 529.827545][T21628] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 529.827556][T21628] RBP: 00007fb2d7e35024 R08: 0000000000000000 R09: 0000000000000000 [ 529.827566][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.827576][T21628] R13: 00007fb2d8026038 R14: 00007fb2d8025fa0 R15: 00007ffe55821b28 [ 529.827599][T21628] [ 531.603728][T14835] Bluetooth: hci4: command 0x0406 tx timeout [ 531.816887][T21700] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 532.405667][T21718] netlink: 'syz.3.7654': attribute type 1 has an invalid length. [ 532.818358][T21732] netlink: zone id is out of range [ 532.851054][T21732] netlink: zone id is out of range [ 532.880413][T21732] netlink: zone id is out of range [ 532.902267][T21732] netlink: zone id is out of range [ 532.931068][T21732] netlink: zone id is out of range [ 532.952720][T21732] netlink: zone id is out of range [ 532.983939][T21732] netlink: zone id is out of range [ 533.018588][T21732] netlink: zone id is out of range [ 533.055251][T21732] netlink: get zone limit has 4 unknown bytes [ 537.865669][T21886] aoe: could not set interface list: too many interfaces [ 538.264171][T21897] FAULT_INJECTION: forcing a failure. [ 538.264171][T21897] name failslab, interval 1, probability 0, space 0, times 0 [ 538.334852][T21897] CPU: 0 UID: 0 PID: 21897 Comm: syz.4.7741 Tainted: G U L syzkaller #0 PREEMPT(full) [ 538.334885][T21897] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 538.334892][T21897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.334903][T21897] Call Trace: [ 538.334909][T21897] [ 538.334916][T21897] dump_stack_lvl+0x100/0x190 [ 538.334942][T21897] should_fail_ex.cold+0x5/0xa [ 538.334963][T21897] should_failslab+0xc2/0x120 [ 538.335034][T21897] __kmalloc_cache_noprof+0x91/0x6c0 [ 538.335055][T21897] ? sctp_auth_shkey_create+0x9e/0x210 [ 538.335155][T21897] sctp_auth_shkey_create+0x9e/0x210 [ 538.335185][T21897] sctp_endpoint_new+0x589/0xb20 [ 538.335243][T21897] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 538.335274][T21897] ? lockdep_init_map_type+0x5c/0x250 [ 538.335292][T21897] ? lockdep_init_map_type+0x5c/0x250 [ 538.335313][T21897] sctp_init_sock+0xe2b/0x1300 [ 538.335355][T21897] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 538.335383][T21897] sctp_v6_init_sock+0x16/0x70 [ 538.335410][T21897] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 538.335437][T21897] inet6_create+0xb1a/0x12b0 [ 538.335487][T21897] ? inet6_create+0x7f/0x12b0 [ 538.335511][T21897] __sock_create+0x339/0x860 [ 538.335554][T21897] __sys_socket+0x14d/0x260 [ 538.335575][T21897] ? __pfx___sys_socket+0x10/0x10 [ 538.335602][T21897] __x64_sys_socket+0x72/0xb0 [ 538.335622][T21897] ? lockdep_hardirqs_on+0x78/0x100 [ 538.335647][T21897] do_syscall_64+0x115/0x840 [ 538.335671][T21897] ? clear_bhb_loop+0x40/0x90 [ 538.335693][T21897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.335712][T21897] RIP: 0033:0x7fbdb059e0d9 [ 538.335729][T21897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.335746][T21897] RSP: 002b:00007fbdb1469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 538.335764][T21897] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059e0d9 [ 538.335775][T21897] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 538.335785][T21897] RBP: 00007fbdb0635024 R08: 0000000000000000 R09: 0000000000000000 [ 538.335795][T21897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.335805][T21897] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 538.335829][T21897] [ 538.864304][T21905] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 539.188588][T21913] FAULT_INJECTION: forcing a failure. [ 539.188588][T21913] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 539.234268][T21913] CPU: 0 UID: 0 PID: 21913 Comm: syz.3.7748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.234302][T21913] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.234309][T21913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.234319][T21913] Call Trace: [ 539.234325][T21913] [ 539.234333][T21913] dump_stack_lvl+0x100/0x190 [ 539.234359][T21913] should_fail_ex.cold+0x5/0xa [ 539.234376][T21913] ? prepare_alloc_pages+0x16d/0x5f0 [ 539.234405][T21913] should_fail_alloc_page+0xeb/0x140 [ 539.234432][T21913] prepare_alloc_pages+0x1f0/0x5f0 [ 539.234462][T21913] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 539.234487][T21913] ? is_bpf_text_address+0x94/0x1a0 [ 539.234513][T21913] ? kernel_text_address+0x8d/0x100 [ 539.234540][T21913] ? __kernel_text_address+0xd/0x30 [ 539.234566][T21913] ? unwind_get_return_address+0x59/0xa0 [ 539.234594][T21913] ? arch_stack_walk+0xa6/0xf0 [ 539.234622][T21913] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.234646][T21913] ? stack_trace_save+0x8e/0xc0 [ 539.234671][T21913] ? __pfx_stack_trace_save+0x10/0x10 [ 539.234696][T21913] ? stack_depot_save_flags+0x27/0x9d0 [ 539.234807][T21913] ? kasan_save_track+0x14/0x30 [ 539.234829][T21913] ? __kasan_kmalloc+0xaa/0xb0 [ 539.234849][T21913] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 539.234867][T21913] ? do_kimage_alloc_init+0x40/0x320 [ 539.234899][T21913] ? do_kexec_load+0x11b/0x810 [ 539.234924][T21913] ? __x64_sys_kexec_load+0x1bf/0x230 [ 539.234951][T21913] ? do_syscall_64+0x115/0x840 [ 539.234975][T21913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.234996][T21913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.235024][T21913] ? policy_nodemask+0xed/0x4f0 [ 539.235052][T21913] alloc_pages_mpol+0x1fb/0x540 [ 539.235079][T21913] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 539.235111][T21913] alloc_pages_noprof+0x1a/0x160 [ 539.235129][T21913] kimage_alloc_pages+0x72/0x380 [ 539.235157][T21913] kimage_alloc_control_pages+0x157/0xa20 [ 539.235188][T21913] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 539.235206][T21913] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 539.235239][T21913] do_kexec_load+0x6c1/0x810 [ 539.235268][T21913] ? __pfx_do_kexec_load+0x10/0x10 [ 539.235297][T21913] ? _copy_from_user+0x59/0xd0 [ 539.235327][T21913] __x64_sys_kexec_load+0x1bf/0x230 [ 539.235357][T21913] do_syscall_64+0x115/0x840 [ 539.235379][T21913] ? clear_bhb_loop+0x40/0x90 [ 539.235400][T21913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.235419][T21913] RIP: 0033:0x7f1b9179e0d9 [ 539.235435][T21913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.235451][T21913] RSP: 002b:00007f1b92671028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 539.235470][T21913] RAX: ffffffffffffffda RBX: 00007f1b91a25fa0 RCX: 00007f1b9179e0d9 [ 539.235481][T21913] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 539.235492][T21913] RBP: 00007f1b91835024 R08: 0000000000000000 R09: 0000000000000000 [ 539.235502][T21913] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 539.235512][T21913] R13: 00007f1b91a26038 R14: 00007f1b91a25fa0 R15: 00007ffece7a7f48 [ 539.235535][T21913] [ 539.235543][T21913] kexec: Could not allocate swap buffer [ 540.016582][T21927] net_ratelimit: 1 callbacks suppressed [ 540.016600][T21927] openvswitch: netlink: Flow key attr not present in new flow. [ 540.135629][T21929] netlink: 178 bytes leftover after parsing attributes in process `syz.0.7756'. [ 540.391743][T21938] netlink: Setting conntrack mark requires 'commit' flag. [ 543.025720][T22010] unsupported nla_type 113 [ 543.715919][T22032] netlink: 'syz.3.7805': attribute type 1 has an invalid length. [ 544.233374][T22049] sd 0:0:1:0: PR command failed: 1026 [ 544.247836][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 544.273905][T22049] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 544.308308][T22049] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 544.539378][T22058] netlink: 'syz.0.7818': attribute type 1 has an invalid length. [ 544.600719][T22058] netlink: 33 bytes leftover after parsing attributes in process `syz.0.7818'. [ 545.863766][T14835] Bluetooth: hci4: SCO packet too small [ 547.187241][T22121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7847'. [ 551.453993][T22226] IPVS: length: 131 != 8 [ 553.132792][T22261] HSR: entered promiscuous mode [ 553.472294][T22275] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7920'. [ 554.260078][T22299] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7932'. [ 555.044530][T22318] HSR: entered promiscuous mode [ 558.053221][T22395] FAULT_INJECTION: forcing a failure. [ 558.053221][T22395] name failslab, interval 1, probability 0, space 0, times 0 [ 558.125390][T22395] CPU: 0 UID: 0 PID: 22395 Comm: syz.3.7978 Tainted: G U L syzkaller #0 PREEMPT(full) [ 558.125424][T22395] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 558.125431][T22395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.125442][T22395] Call Trace: [ 558.125449][T22395] [ 558.125456][T22395] dump_stack_lvl+0x100/0x190 [ 558.125482][T22395] should_fail_ex.cold+0x5/0xa [ 558.125504][T22395] should_failslab+0xc2/0x120 [ 558.125529][T22395] __kmalloc_cache_noprof+0x91/0x6c0 [ 558.125550][T22395] ? call_usermodehelper_setup+0xaf/0x360 [ 558.125582][T22395] ? __pfx_free_modprobe_argv+0x10/0x10 [ 558.125603][T22395] call_usermodehelper_setup+0xaf/0x360 [ 558.125636][T22395] __request_module+0x3c7/0x6a0 [ 558.125657][T22395] ? __pfx___request_module+0x10/0x10 [ 558.125686][T22395] ? find_held_lock+0x2b/0x80 [ 558.125707][T22395] ? inet6_create+0xb9f/0x12b0 [ 558.125734][T22395] inet6_create+0xd65/0x12b0 [ 558.125755][T22395] ? inet6_create+0x7f/0x12b0 [ 558.125778][T22395] __sock_create+0x339/0x860 [ 558.125802][T22395] __sys_socket+0x14d/0x260 [ 558.125824][T22395] ? __pfx___sys_socket+0x10/0x10 [ 558.125880][T22395] __x64_sys_socket+0x72/0xb0 [ 558.125900][T22395] ? lockdep_hardirqs_on+0x78/0x100 [ 558.125926][T22395] do_syscall_64+0x115/0x840 [ 558.125949][T22395] ? clear_bhb_loop+0x40/0x90 [ 558.125971][T22395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.125991][T22395] RIP: 0033:0x7f1b9179e0d9 [ 558.126006][T22395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.126023][T22395] RSP: 002b:00007f1b92671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 558.126042][T22395] RAX: ffffffffffffffda RBX: 00007f1b91a25fa0 RCX: 00007f1b9179e0d9 [ 558.126053][T22395] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 558.126063][T22395] RBP: 00007f1b91835024 R08: 0000000000000000 R09: 0000000000000000 [ 558.126073][T22395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.126084][T22395] R13: 00007f1b91a26038 R14: 00007f1b91a25fa0 R15: 00007ffece7a7f48 [ 558.126106][T22395] [ 558.638345][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7981'. [ 559.043194][T22410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.109394][T22410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.468105][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.477353][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.173391][T22498] : entered promiscuous mode [ 563.013403][T22527] netlink: 'syz.1.8041': attribute type 1 has an invalid length. [ 564.884175][T22570] NFSD: Failed to start, no listeners configured. [ 567.482475][T22644] netlink: 'syz.3.8094': attribute type 1 has an invalid length. [ 567.736562][T22652] : entered promiscuous mode [ 569.070694][T22696] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 570.384963][T22737] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 570.444564][T22737] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 570.585761][T22740] : entered promiscuous mode [ 571.370416][T14835] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 571.370446][T14835] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 571.386844][T14835] Bluetooth: hci4: Dropping invalid advertising data [ 571.393629][T14835] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 571.393661][T14835] Bluetooth: hci4: unknown advertising packet type: 0x8b [ 571.400961][T14835] Bluetooth: hci4: unknown advertising packet type: 0xee [ 571.440092][T22756] NFSD: Failed to start, no listeners configured. [ 571.675394][T22769] netlink: ct_mark mask cannot be 0 [ 572.246964][T14835] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 572.247005][T14835] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 572.262315][T14835] Bluetooth: hci0: Dropping invalid advertising data [ 572.270695][T14835] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 572.270723][T14835] Bluetooth: hci0: unknown advertising packet type: 0x8b [ 572.278018][T14835] Bluetooth: hci0: unknown advertising packet type: 0xee [ 574.051912][T22850] openvswitch: netlink: Flow key attribute not present in set flow. [ 575.018895][T22871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8202'. [ 575.509672][T22881] program syz.4.8206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.292978][T22902] openvswitch: netlink: Flow actions attr not present in new flow. [ 576.689646][T22913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8222'. [ 577.326849][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8232'. [ 577.422559][T22935] openvswitch: netlink: IP tunnel dst address not specified [ 578.559968][T22963] usbcore.quirks: string doesn't fit in 127 chars. [ 581.883488][T23060] MTRR 1 not used [ 583.060913][T23098] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 586.682949][T23189] netlink: 'syz.0.8345': attribute type 1 has an invalid length. [ 588.264202][T23215] netlink: 'syz.4.8358': attribute type 1 has an invalid length. [ 588.692261][T23228] nfsd: Unknown parameter 'batadv' [ 590.167461][T23256] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 594.133676][T23376] capability: warning: `syz.4.8434' uses 32-bit capabilities (legacy support in use) [ 598.335030][T23493] nbd: illegal input index -1024 [ 600.172725][T23548] sd 0:0:1:0: PR command failed: 1026 [ 600.204861][T23548] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 600.251050][T23548] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 601.888431][T23590] openvswitch: netlink: IPv4 tunnel dst address is zero [ 603.166670][T23633] ucma_write: process 4270 (syz.1.8559) changed security contexts after opening file descriptor, this is not allowed. [ 604.306575][T23664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8573'. [ 605.400169][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8589'. [ 606.544551][T23729] netlink: NAT attribute has 5 unknown bytes [ 606.954499][T14835] Bluetooth: hci0: ISO packet for unknown connection handle 4095 [ 609.460220][T23802] openvswitch: netlink: IP tunnel dst address not specified [ 611.519089][T23854] openvswitch: netlink: IP tunnel dst address not specified [ 612.018915][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8672'. [ 612.505524][T23885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8680'. [ 612.909704][T23897] netlink: 'syz.1.8685': attribute type 2 has an invalid length. [ 615.313032][T23958] openvswitch: netlink: Missing valid actions attribute. [ 616.598802][T23985] NFSD: Failed to start, no listeners configured. [ 618.772835][T24044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8752'. [ 622.321779][T24138] netlink: 'syz.1.8793': attribute type 1 has an invalid length. [ 622.418729][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8794'. [ 622.609492][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.620696][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.971573][T24180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8813'. [ 624.021699][T24180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8813'. [ 625.231398][T24215] netlink: 'syz.0.8829': attribute type 12 has an invalid length. [ 628.214284][T24280] phram: parameter too long [ 629.827164][T24336] netlink: 'syz.0.8892': attribute type 11 has an invalid length. [ 630.571735][T24357] openvswitch: netlink: Message has 4 unknown bytes. [ 630.977164][T24363] NFSD: Failed to start, no listeners configured. [ 631.330232][T24371] netlink: zone id is out of range [ 631.402178][T24371] netlink: zone id is out of range [ 631.464848][T24371] netlink: zone id is out of range [ 631.525350][T24371] netlink: zone id is out of range [ 631.591340][T24371] netlink: zone id is out of range [ 631.670398][T24371] netlink: zone id is out of range [ 631.736578][T24371] netlink: zone id is out of range [ 631.799117][T24371] netlink: zone id is out of range [ 631.886847][T24371] netlink: zone id is out of range [ 632.620098][T24396] NFSD: Failed to start, no listeners configured. [ 633.666377][T24410] could not allocate digest TFM handle [ 635.728802][T24491] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 639.511080][T14835] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 640.678399][ T29] audit: type=1326 audit(4294967322.019:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24610 comm="syz.4.9012" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdb059e0d9 code=0x0 [ 641.405166][T24629] netlink: 'syz.1.9019': attribute type 2 has an invalid length. [ 641.881181][T24642] net_ratelimit: 52 callbacks suppressed [ 641.881199][T24642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 641.927714][T24643] nbd: must specify an index to disconnect [ 643.144204][T24679] netlink: 'syz.3.9044': attribute type 1 has an invalid length. [ 643.199555][T24679] nbd: error processing sock list [ 643.423578][T24688] netlink: ct family unspecified [ 643.967144][T24706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9057'. [ 646.526730][T24785] netlink: 338 bytes leftover after parsing attributes in process `syz.3.9093'. [ 646.690883][T24787] netlink: 13 bytes leftover after parsing attributes in process `syz.0.9094'. [ 648.461395][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9115'. [ 650.329160][T24869] syz.3.9134 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 650.426542][T24869] CPU: 0 UID: 0 PID: 24869 Comm: syz.3.9134 Tainted: G U L syzkaller #0 PREEMPT(full) [ 650.426577][T24869] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 650.426584][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.426595][T24869] Call Trace: [ 650.426601][T24869] [ 650.426608][T24869] dump_stack_lvl+0x100/0x190 [ 650.426638][T24869] dump_header+0xfb/0x606 [ 650.426661][T24869] oom_kill_process.cold+0xd/0x330 [ 650.426684][T24869] out_of_memory+0x340/0x14f0 [ 650.426779][T24869] ? __pfx_out_of_memory+0x10/0x10 [ 650.426816][T24869] mem_cgroup_out_of_memory+0xc6/0x130 [ 650.426839][T24869] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 650.426862][T24869] ? find_held_lock+0x2b/0x80 [ 650.426891][T24869] ? do_raw_spin_unlock+0x145/0x1e0 [ 650.426913][T24869] ? _raw_spin_unlock+0x28/0x50 [ 650.426942][T24869] try_charge_memcg+0x6e5/0xdf0 [ 650.426975][T24869] ? __pfx_try_charge_memcg+0x10/0x10 [ 650.427003][T24869] ? find_held_lock+0x2b/0x80 [ 650.427025][T24869] ? rcu_read_unlock+0x17/0x60 [ 650.427054][T24869] ? rcu_read_unlock+0x17/0x60 [ 650.427083][T24869] ? find_held_lock+0x2b/0x80 [ 650.427106][T24869] ? rcu_read_unlock+0x17/0x60 [ 650.427140][T24869] charge_memcg+0x187/0x1e0 [ 650.427170][T24869] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 650.427193][T24869] swap_cache_alloc_folio+0x548/0xc50 [ 650.427220][T24869] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 650.427243][T24869] ? swap_cache_get_folio+0x28d/0x360 [ 650.427265][T24869] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 650.427285][T24869] ? lockdep_hardirqs_on+0x78/0x100 [ 650.427310][T24869] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 650.427337][T24869] swap_cache_read_folio+0x47/0x140 [ 650.427362][T24869] swap_cluster_readahead+0x387/0x5f0 [ 650.427390][T24869] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 650.427414][T24869] ? psi_memstall_leave+0x19c/0x360 [ 650.427448][T24869] ? __lock_acquire+0x49f/0x1a40 [ 650.427478][T24869] ? get_vma_policy+0x23d/0x3b0 [ 650.427509][T24869] swapin_readahead+0x159/0x1200 [ 650.427538][T24869] ? __pfx_swapin_readahead+0x10/0x10 [ 650.427566][T24869] ? swap_table_get+0x10d/0x2c0 [ 650.427585][T24869] ? swap_cache_get_folio+0x28d/0x360 [ 650.427607][T24869] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 650.427628][T24869] ? __pfx_softleaf_type+0x10/0x10 [ 650.427652][T24869] ? do_swap_page+0xf98/0x5780 [ 650.427670][T24869] do_swap_page+0xf98/0x5780 [ 650.427729][T24869] ? __pfx_do_swap_page+0x10/0x10 [ 650.427748][T24869] ? __lock_acquire+0x49f/0x1a40 [ 650.427781][T24869] ? rcu_is_watching+0x12/0xc0 [ 650.427803][T24869] ? __pte_offset_map+0x179/0x310 [ 650.427831][T24869] __handle_mm_fault+0x192f/0x2a00 [ 650.427855][T24869] ? reacquire_held_locks+0xce/0x1e0 [ 650.427885][T24869] ? __pfx___handle_mm_fault+0x10/0x10 [ 650.427908][T24869] ? lock_vma_under_rcu+0x17c/0x590 [ 650.427940][T24869] handle_mm_fault+0x37b/0xa30 [ 650.427963][T24869] do_user_addr_fault+0x5a3/0x12f0 [ 650.427996][T24869] exc_page_fault+0x6f/0xd0 [ 650.428021][T24869] asm_exc_page_fault+0x26/0x30 [ 650.428040][T24869] RIP: 0033:0x7f1b9175923e [ 650.428057][T24869] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 650.428074][T24869] RSP: 002b:00007ffece7a8030 EFLAGS: 00010246 [ 650.428090][T24869] RAX: 0000000000000000 RBX: 000055557470b500 RCX: 00007f1b9175e90e [ 650.428102][T24869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.428112][T24869] RBP: 00007f1b91a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 650.428123][T24869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000009f57e [ 650.428134][T24869] R13: 00007f1b91a25fac R14: 000000000009f290 R15: 00007ffece7a81b0 [ 650.428157][T24869] [ 650.804735][T24869] memory: usage 3072kB, limit 3072kB, failcnt 44881 [ 650.813082][T24869] memory+swap: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 650.821371][T24869] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 650.828543][T24869] Memory cgroup stats for /syz3: [ 650.828683][T24869] cache 0 [ 650.836673][T24869] rss 4096 [ 650.839711][T24869] rss_huge 0 [ 650.842935][T24869] shmem 0 [ 650.845893][T24869] mapped_file 0 [ 650.850512][T24869] dirty 0 [ 650.854253][T24869] writeback 0 [ 650.857548][T24869] workingset_refault_anon 3566 [ 650.862558][T24869] workingset_refault_file 12268 [ 650.867453][T24869] swap 200704 [ 650.870732][T24869] swapcached 160772096 [ 650.874903][T24869] pgpgin 175513 [ 650.878363][T24869] pgpgout 184200 [ 650.881940][T24869] pgfault 421521 [ 650.885647][T24869] pgmajfault 1704 [ 650.889276][T24869] inactive_anon 8192 [ 650.893162][T24869] active_anon 0 [ 650.896705][T24869] inactive_file 0 [ 650.900529][T24869] active_file 0 [ 650.904024][T24869] unevictable 0 [ 650.907535][T24869] hierarchical_memory_limit 3145728 [ 650.912729][T24869] hierarchical_memsw_limit 9223372036854771712 [ 650.918970][T24869] total_cache 0 [ 650.922438][T24869] total_rss 4096 [ 650.926030][T24869] total_rss_huge 0 [ 650.929792][T24869] total_shmem 0 [ 650.933262][T24869] total_mapped_file 0 [ 650.937964][T24869] total_dirty 0 [ 650.941483][T24869] total_writeback 0 [ 650.945348][T24869] total_workingset_refault_anon 3566 [ 650.950642][T24869] total_workingset_refault_file 12268 [ 650.957276][T24869] total_swap 200704 [ 650.961203][T24869] total_swapcached 160772096 [ 650.966656][T24869] total_pgpgin 175513 [ 650.970766][T24869] total_pgpgout 184200 [ 650.974879][T24869] total_pgfault 421521 [ 650.978949][T24869] total_pgmajfault 1704 [ 650.983204][T24869] total_inactive_anon 8192 [ 650.987683][T24869] total_active_anon 0 [ 650.991750][T24869] total_inactive_file 0 [ 650.995979][T24869] total_active_file 0 [ 650.999956][T24869] total_unevictable 0 [ 651.003968][T24869] anon_cost 11 [ 651.007444][T24869] file_cost 0 [ 651.010753][T24869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9134,pid=24869,uid=0 [ 651.026164][T24869] Memory cgroup out of memory: Killed process 24869 (syz.3.9134) total-vm:102252kB, anon-rss:1248kB, file-rss:20984kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 651.926467][ T29] audit: type=1800 audit(4294967333.237:35): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9147" name=22050820 dev="tmpfs" ino=12599 res=0 errno=0 [ 652.056260][T24902] netlink: 342 bytes leftover after parsing attributes in process `syz.3.9151'. [ 653.234543][T24932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9163'. [ 654.220203][ T29] audit: type=1804 audit(4294967335.639:36): pid=24960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9173" name="/newroot/2217/file0" dev="tmpfs" ino=11155 res=1 errno=0 [ 654.397177][T24964] sctp: [Deprecated]: syz.1.9177 (pid 24964) Use of int in maxseg socket option. [ 654.397177][T24964] Use struct sctp_assoc_value instead [ 655.378302][T24989] futex_wake_op: syz.4.9189 tries to shift op by -2048; fix this program [ 655.437099][T24989] futex_wake_op: syz.4.9189 tries to shift op by -2048; fix this program [ 657.726905][T25045] Device name cannot be null; rc = [-22] [ 658.164389][T25051] netlink: 'syz.4.9216': attribute type 23 has an invalid length. [ 658.449438][T25059] random: crng reseeded on system resumption [ 659.903578][T25095] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.9235'. [ 662.610011][T25171] program syz.1.9269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.836156][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9281'. [ 664.240899][T25206] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 664.671351][T25212] FAULT_INJECTION: forcing a failure. [ 664.671351][T25212] name failslab, interval 1, probability 0, space 0, times 0 [ 664.752144][T25212] CPU: 0 UID: 0 PID: 25212 Comm: syz.4.9287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 664.752179][T25212] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 664.752186][T25212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.752196][T25212] Call Trace: [ 664.752203][T25212] [ 664.752211][T25212] dump_stack_lvl+0x100/0x190 [ 664.752236][T25212] should_fail_ex.cold+0x5/0xa [ 664.752257][T25212] should_failslab+0xc2/0x120 [ 664.752284][T25212] __kmalloc_noprof+0xfc/0x820 [ 664.752306][T25212] ? trace_kmalloc+0xeb/0x110 [ 664.752331][T25212] ? lsm_blob_alloc+0x68/0x90 [ 664.752354][T25212] lsm_blob_alloc+0x68/0x90 [ 664.752371][T25212] security_sk_alloc+0x2d/0x290 [ 664.752395][T25212] sk_prot_alloc+0x12a/0x2a0 [ 664.752469][T25212] sk_alloc+0x36/0xe80 [ 664.752495][T25212] __netlink_create+0x5e/0x2c0 [ 664.752563][T25212] ? __wake_up+0x3f/0x60 [ 664.752590][T25212] netlink_create+0x29b/0x610 [ 664.752623][T25212] ? __pfx_genl_bind+0x10/0x10 [ 664.752644][T25212] ? __pfx_genl_unbind+0x10/0x10 [ 664.752664][T25212] ? __pfx_genl_release+0x10/0x10 [ 664.752689][T25212] __sock_create+0x339/0x860 [ 664.752713][T25212] __sys_socket+0x14d/0x260 [ 664.752736][T25212] ? exc_page_fault+0x6f/0xd0 [ 664.752759][T25212] ? __pfx___sys_socket+0x10/0x10 [ 664.752787][T25212] __x64_sys_socket+0x72/0xb0 [ 664.752807][T25212] ? lockdep_hardirqs_on+0x78/0x100 [ 664.752831][T25212] do_syscall_64+0x115/0x840 [ 664.752854][T25212] ? clear_bhb_loop+0x40/0x90 [ 664.752876][T25212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.752894][T25212] RIP: 0033:0x7fbdb059f947 [ 664.752910][T25212] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.752927][T25212] RSP: 002b:00007fbdb1467f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 664.752945][T25212] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059f947 [ 664.752958][T25212] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 664.752972][T25212] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 664.752982][T25212] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 664.752993][T25212] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 664.753015][T25212] [ 665.805806][T25226] netlink: 'syz.1.9293': attribute type 2 has an invalid length. [ 666.888726][T25259] FAULT_INJECTION: forcing a failure. [ 666.888726][T25259] name failslab, interval 1, probability 0, space 0, times 0 [ 666.905242][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9309'. [ 666.964795][T25259] CPU: 0 UID: 0 PID: 25259 Comm: syz.1.9310 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.964827][T25259] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.964834][T25259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.964845][T25259] Call Trace: [ 666.964851][T25259] [ 666.964859][T25259] dump_stack_lvl+0x100/0x190 [ 666.964885][T25259] should_fail_ex.cold+0x5/0xa [ 666.964905][T25259] should_failslab+0xc2/0x120 [ 666.964931][T25259] kmem_cache_alloc_noprof+0x91/0x6a0 [ 666.964955][T25259] ? mas_preallocate+0x1105/0x14a0 [ 666.964978][T25259] mas_preallocate+0x1105/0x14a0 [ 666.964999][T25259] ? __pfx_mas_preallocate+0x10/0x10 [ 666.965024][T25259] ? anon_vma_name+0x5a/0x250 [ 666.965065][T25259] __split_vma+0x33d/0xda0 [ 666.965088][T25259] ? __pfx___split_vma+0x10/0x10 [ 666.965109][T25259] ? vma_link+0x5ee/0x8d0 [ 666.965140][T25259] vms_gather_munmap_vmas+0x1d2/0x1720 [ 666.965165][T25259] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 666.965186][T25259] ? alloc_new_pud+0x217/0x320 [ 666.965204][T25259] ? get_old_pud+0xd8/0x360 [ 666.965224][T25259] ? move_page_tables+0x11c/0x4610 [ 666.965246][T25259] ? __pfx_copy_vma+0x10/0x10 [ 666.965275][T25259] do_vmi_align_munmap+0x287/0x5f0 [ 666.965298][T25259] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 666.965351][T25259] do_vmi_munmap+0x1f8/0x3e0 [ 666.965375][T25259] move_vma+0xe5b/0x1920 [ 666.965399][T25259] ? __pfx_move_vma+0x10/0x10 [ 666.965421][T25259] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 666.965455][T25259] ? vrm_set_new_addr+0x204/0x290 [ 666.965477][T25259] mremap_to+0x234/0x4c0 [ 666.965501][T25259] ? mas_walk+0x6ef/0x9b0 [ 666.965525][T25259] ? __pfx_mremap_to+0x10/0x10 [ 666.965544][T25259] ? check_prep_vma+0x912/0xe60 [ 666.965568][T25259] __do_sys_mremap+0x88c/0x1850 [ 666.965595][T25259] ? __pfx___do_sys_mremap+0x10/0x10 [ 666.965614][T25259] ? ksys_write+0x190/0x250 [ 666.965638][T25259] ? __pfx_do_futex+0x10/0x10 [ 666.965667][T25259] ? __x64_sys_futex+0x34f/0x4d0 [ 666.965701][T25259] do_syscall_64+0x115/0x840 [ 666.965728][T25259] ? clear_bhb_loop+0x40/0x90 [ 666.965750][T25259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.965769][T25259] RIP: 0033:0x7fb2d7d9e0d9 [ 666.965786][T25259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.965804][T25259] RSP: 002b:00007fb2d8c61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 666.965822][T25259] RAX: ffffffffffffffda RBX: 00007fb2d8025fa0 RCX: 00007fb2d7d9e0d9 [ 666.965834][T25259] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 666.965845][T25259] RBP: 00007fb2d7e35024 R08: 0000000100000000 R09: 0000000000000000 [ 666.965856][T25259] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 666.965866][T25259] R13: 00007fb2d8026038 R14: 00007fb2d8025fa0 R15: 00007ffe55821b28 [ 666.965889][T25259] [ 668.680338][T25297] FAULT_INJECTION: forcing a failure. [ 668.680338][T25297] name failslab, interval 1, probability 0, space 0, times 0 [ 668.766930][T25297] CPU: 0 UID: 0 PID: 25297 Comm: syz.4.9327 Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.766963][T25297] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.766970][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.766981][T25297] Call Trace: [ 668.766987][T25297] [ 668.766996][T25297] dump_stack_lvl+0x100/0x190 [ 668.767021][T25297] should_fail_ex.cold+0x5/0xa [ 668.767042][T25297] should_failslab+0xc2/0x120 [ 668.767069][T25297] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 668.767093][T25297] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 668.767169][T25297] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 668.767191][T25297] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 668.767213][T25297] alloc_inode+0x68/0x250 [ 668.767237][T25297] new_inode+0x22/0x1c0 [ 668.767263][T25297] hugetlbfs_get_inode+0x39a/0x700 [ 668.767293][T25297] hugetlb_file_setup+0x15b/0x5b0 [ 668.767318][T25297] ksys_mmap_pgoff+0x242/0x610 [ 668.767347][T25297] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 668.767373][T25297] ? xfd_validate_state+0x129/0x190 [ 668.767399][T25297] __x64_sys_mmap+0x125/0x190 [ 668.767423][T25297] do_syscall_64+0x115/0x840 [ 668.767447][T25297] ? clear_bhb_loop+0x40/0x90 [ 668.767468][T25297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.767487][T25297] RIP: 0033:0x7fbdb059e0d9 [ 668.767552][T25297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.767570][T25297] RSP: 002b:00007fbdb1469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 668.767589][T25297] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059e0d9 [ 668.767601][T25297] RDX: 00000000003ffffe RSI: 0000000000a00006 RDI: 0000000000000000 [ 668.767612][T25297] RBP: 00007fbdb0635024 R08: 0000000000000602 R09: 0000300000000000 [ 668.767624][T25297] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 668.767635][T25297] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 668.767658][T25297] [ 670.633590][T25348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9347'. [ 672.854733][T25389] FAULT_INJECTION: forcing a failure. [ 672.854733][T25389] name failslab, interval 1, probability 0, space 0, times 0 [ 672.935231][T25389] CPU: 0 UID: 0 PID: 25389 Comm: syz.3.9365 Tainted: G U L syzkaller #0 PREEMPT(full) [ 672.935265][T25389] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 672.935272][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.935284][T25389] Call Trace: [ 672.935290][T25389] [ 672.935297][T25389] dump_stack_lvl+0x100/0x190 [ 672.935326][T25389] should_fail_ex.cold+0x5/0xa [ 672.935348][T25389] should_failslab+0xc2/0x120 [ 672.935375][T25389] __kmalloc_noprof+0xfc/0x820 [ 672.935396][T25389] ? __lock_acquire+0x49f/0x1a40 [ 672.935425][T25389] ? tomoyo_encode2+0x2f6/0x3c0 [ 672.935536][T25389] tomoyo_encode2+0x2f6/0x3c0 [ 672.935567][T25389] tomoyo_encode+0x29/0x50 [ 672.935593][T25389] tomoyo_mount_acl+0x14c/0x8b0 [ 672.935625][T25389] ? is_bpf_text_address+0x8a/0x1a0 [ 672.935653][T25389] ? bpf_ksym_find+0x124/0x1c0 [ 672.935673][T25389] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 672.935701][T25389] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 672.935725][T25389] ? kernel_text_address+0x8d/0x100 [ 672.935753][T25389] ? __lock_acquire+0x49f/0x1a40 [ 672.935782][T25389] ? unwind_get_return_address+0x59/0xa0 [ 672.935832][T25389] ? tomoyo_domain+0xb2/0x150 [ 672.935849][T25389] ? tomoyo_profile+0x47/0x60 [ 672.935869][T25389] tomoyo_mount_permission+0x214/0x460 [ 672.935895][T25389] ? tomoyo_mount_permission+0x1f6/0x460 [ 672.935922][T25389] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 672.935962][T25389] security_sb_mount+0xdd/0x270 [ 672.935985][T25389] path_mount+0x158/0x23d0 [ 672.936033][T25389] ? __pfx_path_mount+0x10/0x10 [ 672.936053][T25389] ? lockdep_hardirqs_on+0x78/0x100 [ 672.936081][T25389] ? putname+0xb1/0x110 [ 672.936099][T25389] ? kmem_cache_free+0x127/0x6b0 [ 672.936127][T25389] ? __x64_sys_mount+0x293/0x310 [ 672.936148][T25389] __x64_sys_mount+0x293/0x310 [ 672.936171][T25389] ? __pfx___x64_sys_mount+0x10/0x10 [ 672.936200][T25389] do_syscall_64+0x115/0x840 [ 672.936223][T25389] ? clear_bhb_loop+0x40/0x90 [ 672.936245][T25389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.936264][T25389] RIP: 0033:0x7f1b9179e0d9 [ 672.936280][T25389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.936298][T25389] RSP: 002b:00007f1b92671028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 672.936317][T25389] RAX: ffffffffffffffda RBX: 00007f1b91a25fa0 RCX: 00007f1b9179e0d9 [ 672.936328][T25389] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 672.936339][T25389] RBP: 00007f1b91835024 R08: 0000000000000000 R09: 0000000000000000 [ 672.936350][T25389] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 672.936360][T25389] R13: 00007f1b91a26038 R14: 00007f1b91a25fa0 R15: 00007ffece7a7f48 [ 672.936383][T25389] [ 674.031458][T25410] netlink: 186 bytes leftover after parsing attributes in process `syz.0.9375'. [ 674.626960][T25430] bridge0: port 3(batadv0) entered blocking state [ 674.673632][T25430] bridge0: port 3(batadv0) entered disabled state [ 674.711481][T25430] batadv0: entered allmulticast mode [ 674.758317][T25430] batadv0: entered promiscuous mode [ 674.807337][T25430] bridge0: port 3(batadv0) entered blocking state [ 674.815522][T25430] bridge0: port 3(batadv0) entered forwarding state [ 675.163340][T25440] ovs_?: entered promiscuous mode [ 675.187840][T15363] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 675.198406][T15363] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 676.310605][T25474] ovs_: entered promiscuous mode [ 676.755463][T25478] zswap: compressor not available [ 677.629335][T25516] FAULT_INJECTION: forcing a failure. [ 677.629335][T25516] name failslab, interval 1, probability 0, space 0, times 0 [ 677.791579][T25516] CPU: 0 UID: 0 PID: 25516 Comm: syz.4.9422 Tainted: G U L syzkaller #0 PREEMPT(full) [ 677.791613][T25516] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 677.791620][T25516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.791631][T25516] Call Trace: [ 677.791637][T25516] [ 677.791644][T25516] dump_stack_lvl+0x100/0x190 [ 677.791669][T25516] should_fail_ex.cold+0x5/0xa [ 677.791690][T25516] should_failslab+0xc2/0x120 [ 677.791717][T25516] __kmalloc_cache_noprof+0x91/0x6c0 [ 677.791736][T25516] ? find_held_lock+0x2b/0x80 [ 677.791758][T25516] ? rcu_read_unlock+0x17/0x60 [ 677.791785][T25516] ? alloc_mnt_ns+0xce/0x520 [ 677.791815][T25516] alloc_mnt_ns+0xce/0x520 [ 677.791843][T25516] copy_mnt_ns+0x308/0x1180 [ 677.791867][T25516] ? rcu_is_watching+0x12/0xc0 [ 677.791889][T25516] ? __pfx_copy_mnt_ns+0x10/0x10 [ 677.791912][T25516] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 677.791935][T25516] ? create_new_namespaces+0x30/0xac0 [ 677.791958][T25516] create_new_namespaces+0xd3/0xac0 [ 677.791976][T25516] ? bpf_lsm_capable+0x9/0x10 [ 677.792006][T25516] ? security_capable+0x80/0x260 [ 677.792029][T25516] unshare_nsproxy_namespaces+0xf2/0x220 [ 677.792051][T25516] ksys_unshare+0x438/0xab0 [ 677.792076][T25516] ? __pfx_ksys_unshare+0x10/0x10 [ 677.792107][T25516] __x64_sys_unshare+0x31/0x40 [ 677.792131][T25516] do_syscall_64+0x115/0x840 [ 677.792156][T25516] ? clear_bhb_loop+0x40/0x90 [ 677.792177][T25516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.792196][T25516] RIP: 0033:0x7fbdb059e0d9 [ 677.792211][T25516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.792229][T25516] RSP: 002b:00007fbdb1469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 677.792247][T25516] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059e0d9 [ 677.792259][T25516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 677.792270][T25516] RBP: 00007fbdb0635024 R08: 0000000000000000 R09: 0000000000000000 [ 677.792281][T25516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.792292][T25516] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 677.792315][T25516] [ 678.788249][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9433'. [ 681.114561][T25602] FAULT_INJECTION: forcing a failure. [ 681.114561][T25602] name failslab, interval 1, probability 0, space 0, times 0 [ 681.188975][T25602] CPU: 0 UID: 0 PID: 25602 Comm: syz.4.9465 Tainted: G U L syzkaller #0 PREEMPT(full) [ 681.189008][T25602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 681.189016][T25602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.189026][T25602] Call Trace: [ 681.189032][T25602] [ 681.189039][T25602] dump_stack_lvl+0x100/0x190 [ 681.189066][T25602] should_fail_ex.cold+0x5/0xa [ 681.189087][T25602] should_failslab+0xc2/0x120 [ 681.189113][T25602] kmem_cache_alloc_noprof+0x91/0x6a0 [ 681.189136][T25602] ? sk_prot_alloc+0x60/0x2a0 [ 681.189159][T25602] sk_prot_alloc+0x60/0x2a0 [ 681.189179][T25602] sk_alloc+0x36/0xe80 [ 681.189205][T25602] rds_create+0x9e/0x5e0 [ 681.189303][T25602] __sock_create+0x339/0x860 [ 681.189332][T25602] __sys_socket+0x14d/0x260 [ 681.189354][T25602] ? __pfx___sys_socket+0x10/0x10 [ 681.189382][T25602] __x64_sys_socket+0x72/0xb0 [ 681.189402][T25602] ? lockdep_hardirqs_on+0x78/0x100 [ 681.189426][T25602] do_syscall_64+0x115/0x840 [ 681.189449][T25602] ? clear_bhb_loop+0x40/0x90 [ 681.189471][T25602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.189491][T25602] RIP: 0033:0x7fbdb059e0d9 [ 681.189507][T25602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.189525][T25602] RSP: 002b:00007fbdb1469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 681.189543][T25602] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059e0d9 [ 681.189555][T25602] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 681.189566][T25602] RBP: 00007fbdb0635024 R08: 0000000000000000 R09: 0000000000000000 [ 681.189576][T25602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.189587][T25602] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffe993bb278 [ 681.189610][T25602] [ 682.476390][T14835] Bluetooth: hci3: Malformed Event: 0x13 [ 682.806695][T25644] bridge0: port 3(batadv0) entered blocking state [ 682.847064][T25644] bridge0: port 3(batadv0) entered disabled state [ 682.888866][T25644] batadv0: entered allmulticast mode [ 682.926437][T25644] batadv0: entered promiscuous mode [ 682.981968][T25644] bridge0: port 3(batadv0) entered blocking state [ 682.988560][T25644] bridge0: port 3(batadv0) entered forwarding state [ 683.226292][T14842] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 683.237087][T14842] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 683.726806][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.737725][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.492316][T25693] FAULT_INJECTION: forcing a failure. [ 684.492316][T25693] name failslab, interval 1, probability 0, space 0, times 0 [ 684.557446][T25693] CPU: 0 UID: 0 PID: 25693 Comm: syz.3.9506 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.557479][T25693] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.557486][T25693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.557497][T25693] Call Trace: [ 684.557504][T25693] [ 684.557511][T25693] dump_stack_lvl+0x100/0x190 [ 684.557537][T25693] should_fail_ex.cold+0x5/0xa [ 684.557557][T25693] should_failslab+0xc2/0x120 [ 684.557584][T25693] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 684.557609][T25693] ? __d_alloc+0x35/0xa50 [ 684.557633][T25693] __d_alloc+0x35/0xa50 [ 684.557656][T25693] d_alloc+0x4a/0x1e0 [ 684.557677][T25693] lookup_one_qstr_excl+0x171/0x250 [ 684.557700][T25693] ? mnt_want_write+0x161/0x410 [ 684.557729][T25693] filename_create+0x1cf/0x400 [ 684.557757][T25693] ? __pfx_filename_create+0x10/0x10 [ 684.557793][T25693] filename_mknodat+0x190/0x7f0 [ 684.557816][T25693] ? __pfx_filename_mknodat+0x10/0x10 [ 684.557836][T25693] ? strncpy_from_user+0x19d/0x2d0 [ 684.557867][T25693] ? do_getname+0x191/0x390 [ 684.557892][T25693] __x64_sys_mknod+0x8f/0xc0 [ 684.557912][T25693] do_syscall_64+0x115/0x840 [ 684.557936][T25693] ? clear_bhb_loop+0x40/0x90 [ 684.557958][T25693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.557976][T25693] RIP: 0033:0x7f1b9179e0d9 [ 684.557992][T25693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.558010][T25693] RSP: 002b:00007f1b92671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 684.558029][T25693] RAX: ffffffffffffffda RBX: 00007f1b91a25fa0 RCX: 00007f1b9179e0d9 [ 684.558041][T25693] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 684.558051][T25693] RBP: 00007f1b91835024 R08: 0000000000000000 R09: 0000000000000000 [ 684.558062][T25693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.558072][T25693] R13: 00007f1b91a26038 R14: 00007f1b91a25fa0 R15: 00007ffece7a7f48 [ 684.558095][T25693] [ 685.896334][T25721] netlink: 82 bytes leftover after parsing attributes in process `syz.1.9519'. [ 686.529909][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9525'. [ 686.971575][T25752] vivid-007: ================= START STATUS ================= [ 687.030828][T25752] vivid-007: Generate PTS: true [ 687.085970][T25752] vivid-007: Generate SCR: true [ 687.126042][T25752] tpg source WxH: 320x240 (Y'CbCr) [ 687.162027][T25752] tpg field: 1 [ 687.195390][T25752] tpg crop: (0,0)/320x240 [ 687.227894][T25752] tpg compose: (0,0)/320x240 [ 687.254364][T25752] tpg colorspace: 8 [ 687.278835][T25752] tpg transfer function: 0/0 [ 687.302821][T25752] tpg Y'CbCr encoding: 0/0 [ 687.330210][T25752] tpg quantization: 0/0 [ 687.355230][T25752] tpg RGB range: 0/2 [ 687.377390][T25752] vivid-007: ================== END STATUS ================== [ 687.998362][T25786] dlm: non-version read from control device 2147479540 [ 688.939015][T25814] bridge0: port 4(veth0_to_bridge) entered blocking state [ 688.992238][T25814] bridge0: port 4(veth0_to_bridge) entered disabled state [ 689.030184][T25816] vivid-007: ================= START STATUS ================= [ 689.042726][T25814] veth0_to_bridge: entered allmulticast mode [ 689.074727][T25814] veth0_to_bridge: entered promiscuous mode [ 689.082236][T25816] vivid-007: Generate PTS: true [ 689.116244][T25814] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.131285][T25816] vivid-007: Generate SCR: true [ 689.159343][T25816] tpg source WxH: 320x240 (Y'CbCr) [ 689.186663][T25816] tpg field: 1 [ 689.193523][T25814] bridge0: port 4(veth0_to_bridge) entered blocking state [ 689.200774][T25814] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 689.222180][T25816] tpg crop: (0,0)/320x240 [ 689.248836][T25816] tpg compose: (0,0)/320x240 [ 689.267700][T25816] tpg colorspace: 8 [ 689.287149][T25816] tpg transfer function: 0/0 [ 689.311126][T25816] tpg Y'CbCr encoding: 0/0 [ 689.337794][T25816] tpg quantization: 0/0 [ 689.361521][T25816] tpg RGB range: 0/2 [ 689.380978][T25816] vivid-007: ================== END STATUS ================== [ 746.402889][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.920184][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 793.927220][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5664/1:b..l [ 793.935621][ C0] rcu: (detected by 0, t=10502 jiffies, g=181077, q=526 ncpus=1) [ 793.943432][ C0] task:syz-executor state:R running task stack:20184 pid:5664 tgid:5664 ppid:5650 task_flags:0x400140 flags:0x00080000 [ 793.957877][ C0] Call Trace: [ 793.961163][ C0] [ 793.964177][ C0] __schedule+0x125c/0x6730 [ 793.968714][ C0] ? __pfx___schedule+0x10/0x10 [ 793.973658][ C0] ? mark_held_locks+0x40/0x70 [ 793.978427][ C0] preempt_schedule_irq+0x50/0x90 [ 793.983448][ C0] irqentry_exit+0x205/0xa00 [ 793.988129][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.994110][ C0] RIP: 0010:unwind_next_frame+0x1500/0x2090 [ 794.000004][ C0] Code: ff 48 ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 0f b6 34 10 48 8d 41 03 49 89 c0 49 c1 e8 03 41 0f b6 14 10 <49> 89 f8 41 83 e0 07 44 38 c6 41 0f 9e c0 40 84 f6 40 0f 95 c6 41 [ 794.019628][ C0] RSP: 0018:ffffc9000436f600 EFLAGS: 00000a07 [ 794.025721][ C0] RAX: ffffffff91d3a917 RBX: 0000000000000001 RCX: ffffffff91d3a914 [ 794.033725][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91d3a916 [ 794.041720][ C0] RBP: ffffc9000436f6b8 R08: 1ffffffff23a7522 R09: 0000000000000007 [ 794.049709][ C0] R10: 0000000000000200 R11: 0000000000017912 R12: ffffc9000436f6c0 [ 794.057776][ C0] R13: ffffc9000436f670 R14: ffffc9000436f9c0 R15: ffffc9000436f6a4 [ 794.065762][ C0] ? kasan_save_stack+0x30/0x50 [ 794.070641][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 794.076821][ C0] arch_stack_walk+0x94/0xf0 [ 794.081439][ C0] ? kasan_save_track+0x14/0x30 [ 794.086308][ C0] ? tomoyo_path_perm+0x29c/0x460 [ 794.091345][ C0] stack_trace_save+0x8e/0xc0 [ 794.096062][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 794.101438][ C0] ? __lock_acquire+0x49f/0x1a40 [ 794.106404][ C0] kasan_save_stack+0x30/0x50 [ 794.111100][ C0] ? kasan_save_stack+0x30/0x50 [ 794.115993][ C0] kasan_save_track+0x14/0x30 [ 794.120685][ C0] kasan_save_free_info+0x3b/0x70 [ 794.125794][ C0] __kasan_slab_free+0x5f/0x80 [ 794.130644][ C0] ? tomoyo_path_perm+0x1d0/0x460 [ 794.135680][ C0] kfree+0x22b/0x6c0 [ 794.139659][ C0] ? tomoyo_path_permission+0x28e/0x3b0 [ 794.145206][ C0] tomoyo_path_perm+0x29c/0x460 [ 794.150073][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 794.155559][ C0] ? find_held_lock+0x2b/0x80 [ 794.160241][ C0] ? __might_fault+0xc5/0x140 [ 794.164926][ C0] ? __might_fault+0xc5/0x140 [ 794.169600][ C0] security_inode_getattr+0x116/0x280 [ 794.174969][ C0] vfs_statx+0x11f/0x3f0 [ 794.179240][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 794.184004][ C0] ? do_getname+0x191/0x390 [ 794.188522][ C0] vfs_fstatat+0x77/0xe0 [ 794.192763][ C0] __do_sys_newfstatat+0x9d/0x120 [ 794.197788][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 794.203425][ C0] ? __x64_sys_umount+0x124/0x1a0 [ 794.208440][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 794.213811][ C0] do_syscall_64+0x115/0x840 [ 794.218400][ C0] ? clear_bhb_loop+0x40/0x90 [ 794.223125][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.229012][ C0] RIP: 0033:0x7fb2d7d9c71a [ 794.233428][ C0] RSP: 002b:00007ffe55820d98 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 794.241833][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2d7d9c71a [ 794.249893][ C0] RDX: 00007ffe55820dc0 RSI: 00007ffe55820e50 RDI: 00000000ffffff9c [ 794.257876][ C0] RBP: 00007ffe55820e50 R08: 00007ffe55821e50 R09: 00000000ffffffff [ 794.265927][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe55821ee0 [ 794.273983][ C0] R13: 00007fb2d7e34474 R14: 00000000000a8dcc R15: 00007ffe55821f20 [ 794.282026][ C0]