last executing test programs: 4m30.169309178s ago: executing program 3 (id=5329): timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) 4m30.076550908s ago: executing program 3 (id=5331): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) 4m29.936605698s ago: executing program 3 (id=5336): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x32, 0x0, 0xa) 4m29.805923061s ago: executing program 3 (id=5341): r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000080), 0x82642, 0x0) write$auto_lowpan_control_fops_6lowpan(r0, 0x0, 0x40) 4m29.73725413s ago: executing program 3 (id=5344): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m29.227070038s ago: executing program 3 (id=5358): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x2040, 0x0) ioctl$auto_EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000280)=0x10000) 4m28.986119595s ago: executing program 32 (id=5358): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x2040, 0x0) ioctl$auto_EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000280)=0x10000) 2.962350612s ago: executing program 0 (id=10053): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2d00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.798605653s ago: executing program 0 (id=10057): mmap$auto(0x0, 0x4020009, 0x2d2b, 0xeb1, 0x401, 0x8000) semctl$auto(0x2, 0x5, 0x13, 0x9) sysfs$auto(0x2, 0x43, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffc) 2.628175601s ago: executing program 0 (id=10061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="57e72cbd700003dcdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x8010) 2.481830824s ago: executing program 0 (id=10064): r0 = socket(0xa, 0x1, 0x84) ioctl$auto(0x3, 0x80108907, r0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.155568907s ago: executing program 0 (id=10069): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) 2.049655885s ago: executing program 1 (id=10071): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) r1 = gettid() read$auto(r0, 0x0, 0x2) rt_sigqueueinfo$auto(r1, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={0x0, 0xd, @sival_int=0x3, 0x61}}}) 2.043720604s ago: executing program 0 (id=10072): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 1.906900722s ago: executing program 1 (id=10074): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xa, 0x0) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0x1, 0x0, 0x8) 1.787829922s ago: executing program 1 (id=10076): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffb, 0x8000200008011, r1, 0x3000) 1.29384191s ago: executing program 1 (id=10078): sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="210028bd7000fedbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="14"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x3ff}, 0x2, &(0x7f0000000140), 0x7, 0x5}, 0x800}, 0x7, 0x4008) 1.194199944s ago: executing program 1 (id=10080): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x400, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x1, 0x1, 0x3, 0x40, 0x1000, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) 790.879373ms ago: executing program 4 (id=10090): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x80802, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x4, 0x20000000) 773.795001ms ago: executing program 1 (id=10091): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x0) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) 683.397944ms ago: executing program 4 (id=10093): mmap$auto(0x0, 0x40009, 0xffffffffffffffff, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) 616.901713ms ago: executing program 2 (id=10094): r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) close_range$auto(0x0, 0x5, 0x0) 533.561357ms ago: executing program 2 (id=10095): mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = epoll_create$auto(0x4) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio4\x00', 0x18a041, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) 454.108852ms ago: executing program 4 (id=10096): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) 416.721664ms ago: executing program 2 (id=10097): mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000) socket(0xa, 0x5, 0x0) prctl$auto(0x41555856, 0x24, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890b, 0x38) 307.109024ms ago: executing program 4 (id=10098): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x28, &(0x7f0000000000)='\x00', 0xbb) 263.905503ms ago: executing program 2 (id=10099): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) 158.584897ms ago: executing program 4 (id=10100): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1d, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 115.832823ms ago: executing program 2 (id=10101): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0x5, 0x10) mlock$auto(0x7c88, 0x7fff) 33.008281ms ago: executing program 4 (id=10102): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0xbc}) 0s ago: executing program 2 (id=10103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000380)={0x14, r1, 0x20d85c5ac86847d5, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): [ 370.702310][T19826] netlink: Invalid conntrack timeout [ 371.228770][T19848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 372.830441][T19906] netlink: zone id is out of range [ 374.346779][T19971] netlink: ct family unspecified [ 376.516533][T20059] netlink: 'syz.1.6840': attribute type 11 has an invalid length. [ 376.918752][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6848'. [ 377.235666][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.246649][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.739036][T20220] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 381.746564][T20264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 382.104863][T20279] FAULT_INJECTION: forcing a failure. [ 382.104863][T20279] name failslab, interval 1, probability 0, space 0, times 1 [ 382.157346][T20279] CPU: 0 UID: 0 PID: 20279 Comm: syz.2.6940 Tainted: G U L syzkaller #0 PREEMPT(full) [ 382.157374][T20279] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 382.157379][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.157388][T20279] Call Trace: [ 382.157393][T20279] [ 382.157399][T20279] dump_stack_lvl+0x100/0x190 [ 382.157421][T20279] should_fail_ex.cold+0x5/0xa [ 382.157438][T20279] should_failslab+0xc2/0x120 [ 382.157459][T20279] kmem_cache_alloc_noprof+0x91/0x6a0 [ 382.157476][T20279] ? d_instantiate+0x8a/0xb0 [ 382.157492][T20279] ? d_instantiate+0x8a/0xb0 [ 382.157508][T20279] ? alloc_empty_file+0x5b/0x1c0 [ 382.157529][T20279] alloc_empty_file+0x5b/0x1c0 [ 382.157547][T20279] alloc_file_pseudo+0x183/0x290 [ 382.157567][T20279] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 382.157586][T20279] ? alloc_fd+0x471/0x7a0 [ 382.157611][T20279] sock_alloc_file+0x50/0x210 [ 382.157635][T20279] __sys_socket+0x1c0/0x260 [ 382.157653][T20279] ? __pfx___sys_socket+0x10/0x10 [ 382.157675][T20279] __x64_sys_socket+0x72/0xb0 [ 382.157691][T20279] ? lockdep_hardirqs_on+0x78/0x100 [ 382.157709][T20279] do_syscall_64+0x115/0x840 [ 382.157727][T20279] ? clear_bhb_loop+0x40/0x90 [ 382.157745][T20279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.157760][T20279] RIP: 0033:0x7f4862f9e019 [ 382.157773][T20279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.157786][T20279] RSP: 002b:00007f4863ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 382.157800][T20279] RAX: ffffffffffffffda RBX: 00007f4863225fa0 RCX: 00007f4862f9e019 [ 382.157809][T20279] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 382.157818][T20279] RBP: 00007f486303500c R08: 0000000000000000 R09: 0000000000000000 [ 382.157826][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.157834][T20279] R13: 00007f4863226038 R14: 00007f4863225fa0 R15: 00007ffdae341968 [ 382.157852][T20279] [ 382.741226][T20302] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 383.880663][T20350] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 384.617211][T20381] netlink: 'syz.0.6988': attribute type 1 has an invalid length. [ 384.736577][T20387] : entered promiscuous mode [ 386.019896][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7016'. [ 387.416667][T20487] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 387.607220][T20493] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 388.482061][T20526] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 389.786766][T20570] program syz.4.7077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.141881][T20591] netlink: 'syz.2.7087': attribute type 1 has an invalid length. [ 390.750946][T20616] vmstat_refresh: nr_hugetlb -4096 [ 392.158130][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7121'. [ 392.169482][T20668] netlink: 178 bytes leftover after parsing attributes in process `syz.4.7122'. [ 392.346478][T20676] sd 0:0:1:0: PR command failed: 1026 [ 392.368621][T20676] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 392.397267][T20656] CIFS: VFS: Invalid SecurityFlags: [ 392.407394][T20676] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 392.507025][T20679] block nbd2: not configured, cannot reconfigure [ 392.954800][T20691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7133'. [ 394.116871][T20726] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 394.469473][T20740] futex_wake_op: syz.1.7155 tries to shift op by -2048; fix this program [ 395.441071][T20774] netlink: 'syz.0.7172': attribute type 11 has an invalid length. [ 395.951622][T20790] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.676260][T20820] block nbd2: not configured, cannot reconfigure [ 396.956511][T20827] Process accounting resumed [ 397.698137][ T29] audit: type=1326 audit(4294967320.743:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20859 comm="syz.0.7213" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe99999e019 code=0x0 [ 397.885088][T20867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7216'. [ 397.917905][T20867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.235675][T20879] MTRR 1 not used [ 398.341163][T20881] netlink: 'syz.4.7225': attribute type 11 has an invalid length. [ 398.361890][T20881] netlink: 'syz.4.7225': attribute type 11 has an invalid length. [ 398.385559][T20881] netlink: 'syz.4.7225': attribute type 11 has an invalid length. [ 398.419974][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7224'. [ 399.428417][T20921] netlink: 'syz.4.7243': attribute type 1 has an invalid length. [ 400.101966][T20941] FAULT_INJECTION: forcing a failure. [ 400.101966][T20941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.167509][T20941] CPU: 0 UID: 0 PID: 20941 Comm: syz.4.7252 Tainted: G U L syzkaller #0 PREEMPT(full) [ 400.167540][T20941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 400.167546][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.167554][T20941] Call Trace: [ 400.167560][T20941] [ 400.167566][T20941] dump_stack_lvl+0x100/0x190 [ 400.167587][T20941] should_fail_ex.cold+0x5/0xa [ 400.167602][T20941] ? prepare_alloc_pages+0x16d/0x5f0 [ 400.167625][T20941] should_fail_alloc_page+0xeb/0x140 [ 400.167647][T20941] prepare_alloc_pages+0x1f0/0x5f0 [ 400.167668][T20941] ? rcu_is_watching+0x12/0xc0 [ 400.167688][T20941] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 400.167713][T20941] ? find_held_lock+0x2b/0x80 [ 400.167730][T20941] ? rcu_read_unlock+0x17/0x60 [ 400.167752][T20941] ? rcu_read_unlock+0x17/0x60 [ 400.167774][T20941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.167790][T20941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.167808][T20941] ? rcu_is_watching+0x12/0xc0 [ 400.167825][T20941] ? trace_mm_page_alloc+0x164/0x1c0 [ 400.167845][T20941] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 400.167866][T20941] ? __lock_acquire+0x49f/0x1a40 [ 400.167886][T20941] ? __css_rstat_updated+0x1ce/0x5a0 [ 400.167910][T20941] ? __lock_acquire+0x49f/0x1a40 [ 400.167930][T20941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.167959][T20941] ? policy_nodemask+0xed/0x4f0 [ 400.167983][T20941] alloc_pages_mpol+0x1fb/0x540 [ 400.168005][T20941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 400.168026][T20941] ? find_held_lock+0x2b/0x80 [ 400.168044][T20941] ? __pud_alloc+0x4f6/0x690 [ 400.168064][T20941] ? __pud_alloc+0x4f6/0x690 [ 400.168085][T20941] alloc_pages_noprof+0x1a/0x160 [ 400.168100][T20941] __pmd_alloc+0x3b/0x950 [ 400.168119][T20941] ? __pud_alloc+0x4fb/0x690 [ 400.168140][T20941] walk_to_pmd+0x3a3/0x4c0 [ 400.168162][T20941] get_locked_pte+0x25/0xc0 [ 400.168183][T20941] map_ldt_struct+0x3c1/0xa70 [ 400.168208][T20941] ? __pfx_map_ldt_struct+0x10/0x10 [ 400.168228][T20941] ? alloc_pages_noprof+0xf9/0x160 [ 400.168244][T20941] write_ldt+0x6d3/0xd40 [ 400.168267][T20941] ? __pfx_write_ldt+0x10/0x10 [ 400.168287][T20941] ? xfd_validate_state+0x129/0x190 [ 400.168309][T20941] __x64_sys_modify_ldt+0xb1/0x170 [ 400.168329][T20941] do_syscall_64+0x115/0x840 [ 400.168348][T20941] ? clear_bhb_loop+0x40/0x90 [ 400.168367][T20941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.168382][T20941] RIP: 0033:0x7fb21679e019 [ 400.168396][T20941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.168409][T20941] RSP: 002b:00007fb2175fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 400.168424][T20941] RAX: ffffffffffffffda RBX: 00007fb216a25fa0 RCX: 00007fb21679e019 [ 400.168434][T20941] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 400.168443][T20941] RBP: 00007fb21683500c R08: 0000000000000000 R09: 0000000000000000 [ 400.168452][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.168461][T20941] R13: 00007fb216a26038 R14: 00007fb216a25fa0 R15: 00007ffd39217f58 [ 400.168481][T20941] [ 401.746470][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7273'. [ 401.785085][T20982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.598967][T21019] IPVS: length: 131 != 8 [ 402.945165][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7298'. [ 403.466223][T21054] openvswitch: netlink: IP tunnel dst address not specified [ 403.611565][T21060] netlink: 'syz.1.7311': attribute type 12 has an invalid length. [ 405.788400][T21137] netlink: 'syz.2.7347': attribute type 2 has an invalid length. [ 405.855640][T21141] syz_tun: tun_chr_ioctl cmd 2147767519 [ 408.207833][T21232] openvswitch: netlink: Message has 4 unknown bytes. [ 408.526045][T21240] netlink: 'syz.0.7395': attribute type 2 has an invalid length. [ 409.152505][T21266] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 409.896257][T21299] netlink: 'syz.2.7423': attribute type 2 has an invalid length. [ 410.281927][T21310] netlink: NAT attribute has 5 unknown bytes [ 410.339204][T21312] FAULT_INJECTION: forcing a failure. [ 410.339204][T21312] name failslab, interval 1, probability 0, space 0, times 0 [ 410.403465][T21312] CPU: 0 UID: 0 PID: 21312 Comm: syz.2.7429 Tainted: G U L syzkaller #0 PREEMPT(full) [ 410.403493][T21312] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 410.403499][T21312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.403507][T21312] Call Trace: [ 410.403512][T21312] [ 410.403518][T21312] dump_stack_lvl+0x100/0x190 [ 410.403539][T21312] should_fail_ex.cold+0x5/0xa [ 410.403559][T21312] should_failslab+0xc2/0x120 [ 410.403580][T21312] __kvmalloc_node_noprof+0x116/0x970 [ 410.403600][T21312] ? percpu_ref_init+0xec/0x3f0 [ 410.403618][T21312] ? io_alloc_cache_init+0x38/0x170 [ 410.403639][T21312] io_alloc_cache_init+0x38/0x170 [ 410.403659][T21312] io_uring_setup.cold+0x450/0x1c2e [ 410.403681][T21312] ? ksys_write+0x190/0x250 [ 410.403694][T21312] ? ksys_write+0x190/0x250 [ 410.403706][T21312] ? __pfx_io_uring_setup+0x10/0x10 [ 410.403722][T21312] ? do_futex+0x190/0x440 [ 410.403738][T21312] ? __pfx_do_futex+0x10/0x10 [ 410.403762][T21312] ? xfd_validate_state+0x129/0x190 [ 410.403783][T21312] __x64_sys_io_uring_setup+0xc2/0x170 [ 410.403800][T21312] do_syscall_64+0x115/0x840 [ 410.403818][T21312] ? clear_bhb_loop+0x40/0x90 [ 410.403836][T21312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.403852][T21312] RIP: 0033:0x7f4862f9e019 [ 410.403864][T21312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.403886][T21312] RSP: 002b:00007f4863ee6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 410.403901][T21312] RAX: ffffffffffffffda RBX: 00007f4863225fa0 RCX: 00007f4862f9e019 [ 410.403911][T21312] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 410.403920][T21312] RBP: 00007f486303500c R08: 0000000000000000 R09: 0000000000000000 [ 410.403929][T21312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.403938][T21312] R13: 00007f4863226038 R14: 00007f4863225fa0 R15: 00007ffdae341968 [ 410.403957][T21312] [ 412.669903][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7462'. [ 413.755097][T21423] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 414.375785][T21434] netlink: 'syz.2.7487': attribute type 1 has an invalid length. [ 414.431125][T21434] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7487'. [ 416.732939][T21512] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 422.516916][T21713] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 423.498203][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7629'. [ 424.699326][T21773] openvswitch: netlink: IP tunnel dst address not specified [ 425.356259][T21795] FAULT_INJECTION: forcing a failure. [ 425.356259][T21795] name failslab, interval 1, probability 0, space 0, times 0 [ 425.499762][T21795] CPU: 0 UID: 0 PID: 21795 Comm: syz.0.7653 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.499790][T21795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.499796][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.499807][T21795] Call Trace: [ 425.499812][T21795] [ 425.499818][T21795] dump_stack_lvl+0x100/0x190 [ 425.499840][T21795] should_fail_ex.cold+0x5/0xa [ 425.499857][T21795] should_failslab+0xc2/0x120 [ 425.499878][T21795] __kmalloc_cache_noprof+0x91/0x6c0 [ 425.499895][T21795] ? proc_self_get_link+0x189/0x1f0 [ 425.499920][T21795] proc_self_get_link+0x189/0x1f0 [ 425.499942][T21795] pick_link+0xac2/0x13c0 [ 425.499963][T21795] ? __pfx_proc_self_get_link+0x10/0x10 [ 425.499986][T21795] step_into_slowpath+0x9ba/0xf90 [ 425.500011][T21795] ? __pfx_step_into_slowpath+0x10/0x10 [ 425.500034][T21795] ? lookup_fast+0x2da/0x600 [ 425.500053][T21795] ? inode_permission+0x374/0x620 [ 425.500073][T21795] link_path_walk+0xf28/0x1cc0 [ 425.500101][T21795] path_openat+0x1c9/0x4280 [ 425.500114][T21795] ? __kasan_slab_alloc+0x89/0x90 [ 425.500132][T21795] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 425.500148][T21795] ? do_getname+0x35/0x390 [ 425.500165][T21795] ? __x64_sys_openat+0x12d/0x210 [ 425.500192][T21795] ? __pfx_path_openat+0x10/0x10 [ 425.500212][T21795] do_file_open+0x20e/0x430 [ 425.500228][T21795] ? __pfx_do_file_open+0x10/0x10 [ 425.500256][T21795] ? alloc_fd+0x471/0x7a0 [ 425.500272][T21795] ? do_getname+0x191/0x390 [ 425.500291][T21795] do_sys_openat2+0x10f/0x1e0 [ 425.500319][T21795] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.500340][T21795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.500366][T21795] __x64_sys_openat+0x12d/0x210 [ 425.500386][T21795] ? __pfx___x64_sys_openat+0x10/0x10 [ 425.500412][T21795] do_syscall_64+0x115/0x840 [ 425.500430][T21795] ? clear_bhb_loop+0x40/0x90 [ 425.500447][T21795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.500462][T21795] RIP: 0033:0x7fe99999e019 [ 425.500475][T21795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.500489][T21795] RSP: 002b:00007fe99a828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 425.500507][T21795] RAX: ffffffffffffffda RBX: 00007fe999c25fa0 RCX: 00007fe99999e019 [ 425.500517][T21795] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 425.500526][T21795] RBP: 00007fe999a3500c R08: 0000000000000000 R09: 0000000000000000 [ 425.500534][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.500543][T21795] R13: 00007fe999c26038 R14: 00007fe999c25fa0 R15: 00007ffc68686ef8 [ 425.500562][T21795] [ 425.777811][T21804] No such timeout policy "" [ 425.782746][T21804] netlink: Failed to associated timeout policy '' [ 427.666411][T21850] Process accounting paused [ 429.757302][T21926] netlink: 'syz.2.7718': attribute type 1 has an invalid length. [ 430.240369][T12053] Bluetooth: hci1: command 0x0406 tx timeout [ 430.436450][T21944] openvswitch: netlink: Flow key attr not present in new flow. [ 431.070299][T21963] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 431.910026][T21985] FAULT_INJECTION: forcing a failure. [ 431.910026][T21985] name failslab, interval 1, probability 0, space 0, times 0 [ 431.964964][T21985] CPU: 0 UID: 0 PID: 21985 Comm: syz.4.7746 Tainted: G U L syzkaller #0 PREEMPT(full) [ 431.964995][T21985] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 431.965001][T21985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.965010][T21985] Call Trace: [ 431.965015][T21985] [ 431.965021][T21985] dump_stack_lvl+0x100/0x190 [ 431.965042][T21985] should_fail_ex.cold+0x5/0xa [ 431.965060][T21985] should_failslab+0xc2/0x120 [ 431.965080][T21985] __kmalloc_cache_noprof+0x91/0x6c0 [ 431.965096][T21985] ? call_usermodehelper_setup+0xaf/0x360 [ 431.965121][T21985] ? __pfx_free_modprobe_argv+0x10/0x10 [ 431.965138][T21985] call_usermodehelper_setup+0xaf/0x360 [ 431.965163][T21985] __request_module+0x3c7/0x6a0 [ 431.965180][T21985] ? __pfx___request_module+0x10/0x10 [ 431.965203][T21985] ? find_held_lock+0x2b/0x80 [ 431.965221][T21985] ? inet6_create+0xb9f/0x12b0 [ 431.965241][T21985] inet6_create+0xd65/0x12b0 [ 431.965257][T21985] ? inet6_create+0x7f/0x12b0 [ 431.965275][T21985] __sock_create+0x339/0x860 [ 431.965296][T21985] __sys_socket+0x14d/0x260 [ 431.965312][T21985] ? __pfx___sys_socket+0x10/0x10 [ 431.965333][T21985] __x64_sys_socket+0x72/0xb0 [ 431.965348][T21985] ? lockdep_hardirqs_on+0x78/0x100 [ 431.965368][T21985] do_syscall_64+0x115/0x840 [ 431.965385][T21985] ? clear_bhb_loop+0x40/0x90 [ 431.965404][T21985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.965419][T21985] RIP: 0033:0x7fb21679e019 [ 431.965432][T21985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.965445][T21985] RSP: 002b:00007fb2175fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 431.965459][T21985] RAX: ffffffffffffffda RBX: 00007fb216a25fa0 RCX: 00007fb21679e019 [ 431.965468][T21985] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 431.965477][T21985] RBP: 00007fb21683500c R08: 0000000000000000 R09: 0000000000000000 [ 431.965486][T21985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.965495][T21985] R13: 00007fb216a26038 R14: 00007fb216a25fa0 R15: 00007ffd39217f58 [ 431.965514][T21985] [ 433.774057][T22013] netlink: 'syz.4.7759': attribute type 1 has an invalid length. [ 434.432011][T21978] kexec: Could not allocate control_code_buffer [ 435.335136][T22051] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 438.230052][T22129] dump_stack_lvl+0x100/0x190 [ 438.230072][T22129] should_fail_ex.cold+0x5/0xa [ 438.230090][T22129] should_failslab+0xc2/0x120 [ 438.230110][T22129] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 438.230128][T22129] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.230146][T22129] ? sock_alloc_inode+0x26/0x2c0 [ 438.230169][T22129] ? __pfx_sock_alloc_inode+0x10/0x10 [ 438.230184][T22129] sock_alloc_inode+0x26/0x2c0 [ 438.230199][T22129] ? __pfx_sock_alloc_inode+0x10/0x10 [ 438.230212][T22129] alloc_inode+0x68/0x250 [ 438.230232][T22129] sock_alloc+0x44/0x280 [ 438.230253][T22129] ? security_socket_create+0x7f/0x250 [ 438.230271][T22129] __sock_create+0xc2/0x860 [ 438.230286][T22129] ? lockdep_init_map_type+0x5c/0x250 [ 438.230303][T22129] smc_create+0x163/0x290 [ 438.230323][T22129] __sock_create+0x339/0x860 [ 438.230342][T22129] __sys_socket+0x14d/0x260 [ 438.230359][T22129] ? __pfx___sys_socket+0x10/0x10 [ 438.230380][T22129] __x64_sys_socket+0x72/0xb0 [ 438.230395][T22129] ? lockdep_hardirqs_on+0x78/0x100 [ 438.230414][T22129] do_syscall_64+0x115/0x840 [ 438.230431][T22129] ? clear_bhb_loop+0x40/0x90 [ 438.230448][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.230463][T22129] RIP: 0033:0x7fb410b9e019 [ 438.230476][T22129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.230489][T22129] RSP: 002b:00007fb411b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 438.230503][T22129] RAX: ffffffffffffffda RBX: 00007fb410e25fa0 RCX: 00007fb410b9e019 [ 438.230512][T22129] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 438.230520][T22129] RBP: 00007fb410c3500c R08: 0000000000000000 R09: 0000000000000000 [ 438.230528][T22129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.230536][T22129] R13: 00007fb410e26038 R14: 00007fb410e25fa0 R15: 00007fff3b0a66f8 [ 438.230554][T22129] [ 438.230580][T22129] socket: no more sockets [ 438.498589][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.510722][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.223839][T22157] netlink: 'syz.2.7827': attribute type 2 has an invalid length. [ 439.622458][T22171] nbd: must specify a size in bytes for the device [ 439.859770][T22177] netlink: 'syz.2.7837': attribute type 1 has an invalid length. [ 440.889573][T22208] openvswitch: netlink: IP tunnel dst address not specified [ 440.929459][T22210] netlink: 'syz.4.7853': attribute type 1 has an invalid length. [ 442.166427][ T10] Process accounting resumed [ 443.570421][T22294] FAULT_INJECTION: forcing a failure. [ 443.570421][T22294] name failslab, interval 1, probability 0, space 0, times 0 [ 443.629115][T22294] CPU: 0 UID: 0 PID: 22294 Comm: syz.0.7893 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.629143][T22294] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.629148][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.629157][T22294] Call Trace: [ 443.629162][T22294] [ 443.629168][T22294] dump_stack_lvl+0x100/0x190 [ 443.629190][T22294] should_fail_ex.cold+0x5/0xa [ 443.629208][T22294] should_failslab+0xc2/0x120 [ 443.629229][T22294] kmem_cache_alloc_noprof+0x91/0x6a0 [ 443.629248][T22294] ? __pmd_alloc+0xbf/0x950 [ 443.629271][T22294] __pmd_alloc+0xbf/0x950 [ 443.629293][T22294] move_page_tables+0x2f7c/0x4610 [ 443.629310][T22294] ? __pfx_copy_vma+0x10/0x10 [ 443.629332][T22294] ? __pfx_move_page_tables+0x10/0x10 [ 443.629361][T22294] copy_vma_and_data+0x25c/0x7c0 [ 443.629379][T22294] ? __pfx_copy_vma_and_data+0x10/0x10 [ 443.629402][T22294] ? __vma_start_write+0x17f/0x280 [ 443.629416][T22294] ? __pfx___vma_start_write+0x10/0x10 [ 443.629444][T22294] move_vma+0x574/0x1920 [ 443.629462][T22294] ? __pfx_move_vma+0x10/0x10 [ 443.629479][T22294] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 443.629500][T22294] ? cap_mmap_addr+0x4b/0x120 [ 443.629516][T22294] ? bpf_lsm_mmap_addr+0x9/0x30 [ 443.629529][T22294] ? security_mmap_addr+0x71/0x1e0 [ 443.629548][T22294] ? __get_unmapped_area+0x255/0x3e0 [ 443.629570][T22294] ? vrm_set_new_addr+0x204/0x290 [ 443.629587][T22294] mremap_to+0x234/0x4c0 [ 443.629609][T22294] ? mas_walk+0x6ef/0x9b0 [ 443.629629][T22294] ? __pfx_mremap_to+0x10/0x10 [ 443.629650][T22294] __do_sys_mremap+0x88c/0x1850 [ 443.629673][T22294] ? __pfx___do_sys_mremap+0x10/0x10 [ 443.629688][T22294] ? ksys_write+0x190/0x250 [ 443.629706][T22294] ? __pfx_do_futex+0x10/0x10 [ 443.629727][T22294] ? __x64_sys_futex+0x34f/0x4d0 [ 443.629754][T22294] do_syscall_64+0x115/0x840 [ 443.629772][T22294] ? clear_bhb_loop+0x40/0x90 [ 443.629789][T22294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.629803][T22294] RIP: 0033:0x7fe99999e019 [ 443.629816][T22294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.629829][T22294] RSP: 002b:00007fe99a828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 443.629843][T22294] RAX: ffffffffffffffda RBX: 00007fe999c25fa0 RCX: 00007fe99999e019 [ 443.629853][T22294] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 443.629861][T22294] RBP: 00007fe999a3500c R08: 0000000100000000 R09: 0000000000000000 [ 443.629869][T22294] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 443.629878][T22294] R13: 00007fe999c26038 R14: 00007fe999c25fa0 R15: 00007ffc68686ef8 [ 443.629897][T22294] [ 444.943972][T22323] HSR: entered promiscuous mode [ 446.122696][T22360] .^: entered promiscuous mode [ 446.667301][T22373] NFSD: Failed to start, no listeners configured. [ 447.432464][T22389] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 447.747902][T22402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.810013][T22404] FAULT_INJECTION: forcing a failure. [ 447.810013][T22404] name failslab, interval 1, probability 0, space 0, times 0 [ 447.887014][T22404] CPU: 0 UID: 0 PID: 22404 Comm: syz.2.7944 Tainted: G U L syzkaller #0 PREEMPT(full) [ 447.887042][T22404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 447.887048][T22404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.887056][T22404] Call Trace: [ 447.887061][T22404] [ 447.887068][T22404] dump_stack_lvl+0x100/0x190 [ 447.887090][T22404] should_fail_ex.cold+0x5/0xa [ 447.887107][T22404] should_failslab+0xc2/0x120 [ 447.887127][T22404] kmem_cache_alloc_noprof+0x91/0x6a0 [ 447.887147][T22404] ? __pmd_alloc+0xbf/0x950 [ 447.887171][T22404] __pmd_alloc+0xbf/0x950 [ 447.887238][T22404] move_page_tables+0x2f7c/0x4610 [ 447.887256][T22404] ? __pfx_copy_vma+0x10/0x10 [ 447.887280][T22404] ? __pfx_move_page_tables+0x10/0x10 [ 447.887309][T22404] copy_vma_and_data+0x25c/0x7c0 [ 447.887327][T22404] ? __pfx_copy_vma_and_data+0x10/0x10 [ 447.887351][T22404] ? __vma_start_write+0x17f/0x280 [ 447.887364][T22404] ? __pfx___vma_start_write+0x10/0x10 [ 447.887391][T22404] move_vma+0x574/0x1920 [ 447.887410][T22404] ? __pfx_move_vma+0x10/0x10 [ 447.887427][T22404] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 447.887448][T22404] ? cap_mmap_addr+0x4b/0x120 [ 447.887462][T22404] ? bpf_lsm_mmap_addr+0x9/0x30 [ 447.887475][T22404] ? security_mmap_addr+0x71/0x1e0 [ 447.887495][T22404] ? __get_unmapped_area+0x255/0x3e0 [ 447.887517][T22404] ? vrm_set_new_addr+0x204/0x290 [ 447.887533][T22404] mremap_to+0x234/0x4c0 [ 447.887548][T22404] ? mas_walk+0x6ef/0x9b0 [ 447.887567][T22404] ? __pfx_mremap_to+0x10/0x10 [ 447.887586][T22404] __do_sys_mremap+0x88c/0x1850 [ 447.887608][T22404] ? __pfx___do_sys_mremap+0x10/0x10 [ 447.887623][T22404] ? ksys_write+0x190/0x250 [ 447.887641][T22404] ? __pfx_do_futex+0x10/0x10 [ 447.887664][T22404] ? __x64_sys_futex+0x34f/0x4d0 [ 447.887691][T22404] do_syscall_64+0x115/0x840 [ 447.887709][T22404] ? clear_bhb_loop+0x40/0x90 [ 447.887726][T22404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.887740][T22404] RIP: 0033:0x7f4862f9e019 [ 447.887754][T22404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.887767][T22404] RSP: 002b:00007f4863ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 447.887781][T22404] RAX: ffffffffffffffda RBX: 00007f4863225fa0 RCX: 00007f4862f9e019 [ 447.887791][T22404] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 447.887799][T22404] RBP: 00007f486303500c R08: 0000000100000000 R09: 0000000000000000 [ 447.887808][T22404] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 447.887816][T22404] R13: 00007f4863226038 R14: 00007f4863225fa0 R15: 00007ffdae341968 [ 447.887837][T22404] [ 448.816331][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7951'. [ 449.405173][T22443] netlink: 'syz.0.7961': attribute type 1 has an invalid length. [ 449.903059][T22460] syz.2.7969(22460): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 450.774491][T22488] netlink: 'syz.2.7982': attribute type 1 has an invalid length. [ 451.017157][T22500] netlink: 'syz.0.7988': attribute type 1 has an invalid length. [ 451.406090][T22516] netlink: 'syz.4.7996': attribute type 1 has an invalid length. [ 451.912854][T22534] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 453.058765][T22583] netlink: Setting conntrack mark requires 'commit' flag. [ 453.648586][T22611] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 454.981622][T22655] NFSD: Failed to start, no listeners configured. [ 455.565855][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 456.607848][T22735] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 457.176741][T22759] netlink: Setting conntrack mark requires 'commit' flag. [ 457.540994][T22772] Process accounting resumed [ 457.830965][T22792] openvswitch: netlink: Multiple metadata blocks provided [ 458.363840][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8140'. [ 458.469205][T22823] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 459.744548][T22868] netlink: 'syz.4.8164': attribute type 2 has an invalid length. [ 493.030898][T12053] Bluetooth: hci0: command 0x0406 tx timeout [ 493.320439][T24311] &#$@\]\-: entered promiscuous mode [ 493.549781][T24319] usbcore.quirks: string doesn't fit in 127 chars. [ 494.073501][T24350] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 494.116357][T24355] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 494.665834][T24380] openvswitch: netlink: Missing valid actions attribute. [ 495.099214][T12026] Bluetooth: hci0: command 0x0406 tx timeout [ 495.387607][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8810'. [ 495.531548][T24423] netlink: 'syz.4.8811': attribute type 2 has an invalid length. [ 495.845322][T24440] netlink: 'syz.2.8818': attribute type 1 has an invalid length. [ 495.856198][T24439] netlink: Unknown NAT attribute (type=262, max=9) [ 497.182938][T24523] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.970155][T24560] netlink: Failed to add  helper -22 [ 498.557143][T24592] nbd: must specify a device to reconfigure [ 499.398795][T24634] nbd: couldn't find device at index 158 [ 499.479887][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.486364][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.579194][T24642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.900818][ T29] audit: type=1107 audit(4294967305.514:38): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 499.933637][T24663] openvswitch: netlink: Flow key attribute not present in set flow. [ 499.966818][ T29] audit: type=1107 audit(4294967305.574:39): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.817751][T12026] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 500.867324][T12026] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 500.881330][T12026] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 500.891945][T12026] CPU: 0 UID: 0 PID: 12026 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.891978][T12026] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.891984][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.891995][T12026] Workqueue: hci3 hci_rx_work [ 500.892018][T12026] Call Trace: [ 500.892024][T12026] [ 500.892031][T12026] dump_stack_lvl+0x100/0x190 [ 500.892051][T12026] sysfs_warn_dup.cold+0x1c/0x28 [ 500.892074][T12026] sysfs_create_dir_ns+0x24b/0x2b0 [ 500.892096][T12026] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 500.892115][T12026] ? find_held_lock+0x2b/0x80 [ 500.892133][T12026] ? kobject_add_internal+0x25f/0x930 [ 500.892148][T12026] ? kobject_add_internal+0x25f/0x930 [ 500.892164][T12026] ? do_raw_spin_unlock+0x145/0x1e0 [ 500.892183][T12026] kobject_add_internal+0x2c8/0x930 [ 500.892201][T12026] kobject_add+0x16a/0x1e0 [ 500.892215][T12026] ? __pfx_kobject_add+0x10/0x10 [ 500.892228][T12026] ? class_to_subsys+0x10f/0x150 [ 500.892246][T12026] ? kobject_put+0xb9/0x640 [ 500.892267][T12026] ? _raw_spin_unlock+0x28/0x50 [ 500.892288][T12026] device_add+0x294/0x1970 [ 500.892303][T12026] ? __pfx_dev_set_name+0x10/0x10 [ 500.892319][T12026] ? __pfx_device_add+0x10/0x10 [ 500.892333][T12026] ? mgmt_send_event_skb+0x2fb/0x460 [ 500.892357][T12026] hci_conn_add_sysfs+0x1a3/0x260 [ 500.892379][T12026] le_conn_complete_evt+0x11eb/0x1f60 [ 500.892402][T12026] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 500.892419][T12026] ? __pfx_bt_warn+0x10/0x10 [ 500.892432][T12026] ? hci_event_packet+0x186/0xcd0 [ 500.892454][T12026] hci_le_conn_complete_evt+0x23c/0x3a0 [ 500.892477][T12026] ? skb_pull_data+0x15f/0x1e0 [ 500.892494][T12026] hci_le_meta_evt+0x34a/0x5f0 [ 500.892513][T12026] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 500.892534][T12026] hci_event_packet+0x51c/0xcd0 [ 500.892552][T12026] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 500.892572][T12026] ? __pfx_hci_event_packet+0x10/0x10 [ 500.892592][T12026] ? kcov_remote_start+0x384/0x670 [ 500.892611][T12026] ? lockdep_hardirqs_on+0x78/0x100 [ 500.892634][T12026] hci_rx_work+0x451/0xfc0 [ 500.892655][T12026] process_one_work+0xa23/0x1940 [ 500.892686][T12026] ? __pfx_process_one_work+0x10/0x10 [ 500.892712][T12026] ? __pfx_hci_rx_work+0x10/0x10 [ 500.892731][T12026] worker_thread+0x5ef/0xe50 [ 500.892760][T12026] ? kthread+0x13a/0x450 [ 500.892777][T12026] ? __pfx_worker_thread+0x10/0x10 [ 500.892798][T12026] kthread+0x370/0x450 [ 500.892815][T12026] ? __pfx_kthread+0x10/0x10 [ 500.892835][T12026] ret_from_fork+0x72b/0xd50 [ 500.892854][T12026] ? __pfx_ret_from_fork+0x10/0x10 [ 500.892871][T12026] ? rcu_is_watching+0x12/0xc0 [ 500.892888][T12026] ? __switch_to+0x800/0x10f0 [ 500.892908][T12026] ? __switch_to_asm+0x39/0x70 [ 500.892926][T12026] ? __pfx_kthread+0x10/0x10 [ 500.892946][T12026] ret_from_fork_asm+0x1a/0x30 [ 500.892981][T12026] [ 500.893038][T12026] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.208755][T12026] Bluetooth: hci3: failed to register connection device [ 501.269390][T24725] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.8930:24725 [ 501.673322][T24754] openvswitch: netlink: IP tunnel TTL not specified. [ 502.223367][T24774] syz_tun: tun_chr_ioctl cmd 1074025681 [ 502.453670][T12026] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 502.493060][T12026] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 502.500999][T12026] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 502.511615][T12026] CPU: 0 UID: 0 PID: 12026 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.511643][T12026] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.511648][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.511659][T12026] Workqueue: hci1 hci_rx_work [ 502.511683][T12026] Call Trace: [ 502.511688][T12026] [ 502.511694][T12026] dump_stack_lvl+0x100/0x190 [ 502.511714][T12026] sysfs_warn_dup.cold+0x1c/0x28 [ 502.511736][T12026] sysfs_create_dir_ns+0x24b/0x2b0 [ 502.511759][T12026] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.511794][T12026] ? find_held_lock+0x2b/0x80 [ 502.511812][T12026] ? kobject_add_internal+0x25f/0x930 [ 502.511827][T12026] ? kobject_add_internal+0x25f/0x930 [ 502.511843][T12026] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.511860][T12026] kobject_add_internal+0x2c8/0x930 [ 502.511877][T12026] kobject_add+0x16a/0x1e0 [ 502.511891][T12026] ? __pfx_kobject_add+0x10/0x10 [ 502.511904][T12026] ? class_to_subsys+0x10f/0x150 [ 502.511923][T12026] ? kobject_put+0xb9/0x640 [ 502.511948][T12026] ? _raw_spin_unlock+0x28/0x50 [ 502.511970][T12026] device_add+0x294/0x1970 [ 502.511986][T12026] ? __pfx_dev_set_name+0x10/0x10 [ 502.512002][T12026] ? __pfx_device_add+0x10/0x10 [ 502.512017][T12026] ? mgmt_send_event_skb+0x2fb/0x460 [ 502.512040][T12026] hci_conn_add_sysfs+0x1a3/0x260 [ 502.512062][T12026] le_conn_complete_evt+0x11eb/0x1f60 [ 502.512085][T12026] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.512102][T12026] ? __pfx_bt_warn+0x10/0x10 [ 502.512114][T12026] ? hci_event_packet+0x186/0xcd0 [ 502.512136][T12026] hci_le_conn_complete_evt+0x23c/0x3a0 [ 502.512155][T12026] ? skb_pull_data+0x15f/0x1e0 [ 502.512173][T12026] hci_le_meta_evt+0x34a/0x5f0 [ 502.512192][T12026] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 502.512212][T12026] hci_event_packet+0x51c/0xcd0 [ 502.512230][T12026] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.512250][T12026] ? __pfx_hci_event_packet+0x10/0x10 [ 502.512270][T12026] ? kcov_remote_start+0x384/0x670 [ 502.512290][T12026] ? lockdep_hardirqs_on+0x78/0x100 [ 502.512313][T12026] hci_rx_work+0x451/0xfc0 [ 502.512334][T12026] process_one_work+0xa23/0x1940 [ 502.512363][T12026] ? __pfx_process_one_work+0x10/0x10 [ 502.512389][T12026] ? __pfx_hci_rx_work+0x10/0x10 [ 502.512408][T12026] worker_thread+0x5ef/0xe50 [ 502.512435][T12026] ? kthread+0x13a/0x450 [ 502.512453][T12026] ? __pfx_worker_thread+0x10/0x10 [ 502.512471][T12026] kthread+0x370/0x450 [ 502.512489][T12026] ? __pfx_kthread+0x10/0x10 [ 502.512509][T12026] ret_from_fork+0x72b/0xd50 [ 502.512527][T12026] ? __pfx_ret_from_fork+0x10/0x10 [ 502.512544][T12026] ? rcu_is_watching+0x12/0xc0 [ 502.512561][T12026] ? __switch_to+0x800/0x10f0 [ 502.512582][T12026] ? __switch_to_asm+0x39/0x70 [ 502.512601][T12026] ? __pfx_kthread+0x10/0x10 [ 502.512620][T12026] ret_from_fork_asm+0x1a/0x30 [ 502.512649][T12026] [ 502.512667][T12026] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.831419][T12026] Bluetooth: hci1: failed to register connection device [ 502.899172][T12026] Bluetooth: hci3: command 0x0406 tx timeout [ 503.511994][ T5623] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 503.574078][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 503.574105][ T5623] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 503.574111][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.574119][ T5623] Call Trace: [ 503.574124][ T5623] [ 503.574130][ T5623] dump_stack_lvl+0x100/0x190 [ 503.574152][ T5623] dump_header+0xfb/0x606 [ 503.574169][ T5623] oom_kill_process.cold+0xd/0x330 [ 503.574186][ T5623] out_of_memory+0x340/0x14f0 [ 503.574213][ T5623] ? __pfx_out_of_memory+0x10/0x10 [ 503.574241][ T5623] mem_cgroup_out_of_memory+0xc6/0x130 [ 503.574259][ T5623] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 503.574274][ T5623] ? find_held_lock+0x2b/0x80 [ 503.574296][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.574312][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 503.574331][ T5623] try_charge_memcg+0x6e5/0xdf0 [ 503.574356][ T5623] ? __pfx_try_charge_memcg+0x10/0x10 [ 503.574375][ T5623] ? find_held_lock+0x2b/0x80 [ 503.574392][ T5623] ? rcu_read_unlock+0x17/0x60 [ 503.574418][ T5623] ? rcu_read_unlock+0x17/0x60 [ 503.574439][ T5623] ? find_held_lock+0x2b/0x80 [ 503.574456][ T5623] ? rcu_read_unlock+0x17/0x60 [ 503.574481][ T5623] charge_memcg+0x187/0x1e0 [ 503.574502][ T5623] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 503.574526][ T5623] swap_cache_alloc_folio+0x548/0xc50 [ 503.574547][ T5623] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 503.574564][ T5623] ? swap_cache_get_folio+0x28d/0x360 [ 503.574580][ T5623] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 503.574595][ T5623] ? find_held_lock+0x2b/0x80 [ 503.574611][ T5623] ? get_info+0x413/0x5f0 [ 503.574722][ T5623] ? get_info+0x413/0x5f0 [ 503.574751][ T5623] swap_cache_read_folio+0x47/0x140 [ 503.574770][ T5623] swap_cluster_readahead+0x387/0x5f0 [ 503.574791][ T5623] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 503.574810][ T5623] ? get_info+0x489/0x5f0 [ 503.574835][ T5623] ? __lock_acquire+0x49f/0x1a40 [ 503.574856][ T5623] ? get_vma_policy+0x23d/0x3b0 [ 503.574879][ T5623] swapin_readahead+0x159/0x1200 [ 503.574902][ T5623] ? __pfx_swapin_readahead+0x10/0x10 [ 503.574930][ T5623] ? swap_table_get+0x10d/0x2c0 [ 503.574945][ T5623] ? swap_cache_get_folio+0x28d/0x360 [ 503.574961][ T5623] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 503.574977][ T5623] ? __pfx_softleaf_type+0x10/0x10 [ 503.574996][ T5623] ? do_swap_page+0xf98/0x5780 [ 503.575012][ T5623] do_swap_page+0xf98/0x5780 [ 503.575028][ T5623] ? __might_fault+0xc5/0x140 [ 503.575048][ T5623] ? __pfx_do_swap_page+0x10/0x10 [ 503.575063][ T5623] ? __lock_acquire+0x49f/0x1a40 [ 503.575084][ T5623] ? _copy_from_user+0x59/0xd0 [ 503.575153][ T5623] ? rcu_is_watching+0x12/0xc0 [ 503.575171][ T5623] ? __pte_offset_map+0x179/0x310 [ 503.575192][ T5623] __handle_mm_fault+0x192f/0x2a00 [ 503.575211][ T5623] ? reacquire_held_locks+0xce/0x1e0 [ 503.575233][ T5623] ? __pfx___handle_mm_fault+0x10/0x10 [ 503.575251][ T5623] ? lock_vma_under_rcu+0x17c/0x590 [ 503.575277][ T5623] handle_mm_fault+0x37b/0xa30 [ 503.575295][ T5623] do_user_addr_fault+0x5a3/0x12f0 [ 503.575320][ T5623] exc_page_fault+0x6f/0xd0 [ 503.575339][ T5623] asm_exc_page_fault+0x26/0x30 [ 503.575354][ T5623] RIP: 0033:0x7fb410b6bc6d [ 503.575367][ T5623] Code: 20 0f 82 d6 02 00 00 c5 fe 6f 0e c5 f5 74 0f c5 fd d7 c1 ff c0 0f 85 b2 00 00 00 48 83 fa 40 0f 86 3c 02 00 00 c5 fe 6f 56 20 ed 74 57 20 c5 fd d7 c2 ff c0 0f 85 b2 00 00 00 48 81 fa 80 00 [ 503.575381][ T5623] RSP: 002b:00007fff3b0a6368 EFLAGS: 00010206 [ 503.575417][ T5623] RAX: 0000000000000000 RBX: 00007fff3b0a6390 RCX: 00007fb410b9f7ea [ 503.575426][ T5623] RDX: 0000000000000054 RSI: 00007fff3b0a6390 RDI: 00007fb410deffc8 [ 503.575435][ T5623] RBP: 0000000000000003 R08: 00007fff3b0a638c R09: 0000000000000000 [ 503.575444][ T5623] R10: 00007fff3b0a6390 R11: 0000000000000246 R12: 00007fb410deffc0 [ 503.575453][ T5623] R13: 00007fff3b0a638c R14: 0000000000000000 R15: 00007fb410df2180 [ 503.575472][ T5623] [ 504.159469][ T5623] memory: usage 3072kB, limit 3072kB, failcnt 53880 [ 504.353147][ T5623] memory+swap: usage 3464kB, limit 9007199254740988kB, failcnt 0 [ 504.362961][ T5623] kmem: usage 3064kB, limit 9007199254740988kB, failcnt 0 [ 504.372740][ T5623] Memory cgroup stats for /syz0: [ 504.372852][ T5623] cache 0 [ 504.385277][ T5623] rss 4096 [ 504.388357][ T5623] rss_huge 0 [ 504.391852][ T5623] shmem 0 [ 504.394887][ T5623] mapped_file 0 [ 504.398397][ T5623] dirty 0 [ 504.402319][ T5623] writeback 8192 [ 504.406026][ T5623] workingset_refault_anon 5303 [ 504.411106][ T5623] workingset_refault_file 12048 [ 504.416129][ T5623] swap 368640 [ 504.419497][ T5623] swapcached 206077952 [ 504.424038][ T5623] pgpgin 164683 [ 504.427751][ T5623] pgpgout 172339 [ 504.431649][ T5623] pgfault 412130 [ 504.435294][ T5623] pgmajfault 1876 [ 504.439164][ T5623] inactive_anon 4096 [ 504.443511][ T5623] active_anon 0 [ 504.447120][ T5623] inactive_file 0 [ 504.451261][ T5623] active_file 0 [ 504.454790][ T5623] unevictable 0 [ 504.458324][ T5623] hierarchical_memory_limit 3145728 [ 504.464140][ T5623] hierarchical_memsw_limit 9223372036854771712 [ 504.471083][ T5623] total_cache 0 [ 504.474694][ T5623] total_rss 4096 [ 504.478307][ T5623] total_rss_huge 0 [ 504.489937][ T5623] total_shmem 0 [ 504.499824][T12026] Bluetooth: hci1: command 0x0406 tx timeout [ 504.522810][ T5623] total_mapped_file 0 [ 504.531193][ T5623] total_dirty 0 [ 504.538880][ T5623] total_writeback 8192 [ 504.547603][ T5623] total_workingset_refault_anon 5303 [ 504.560099][ T5623] total_workingset_refault_file 12048 [ 504.572711][ T5623] total_swap 368640 [ 504.582177][ T5623] total_swapcached 206077952 [ 504.597946][ T5623] total_pgpgin 164683 [ 504.607055][ T5623] total_pgpgout 172339 [ 504.617119][ T5623] total_pgfault 412130 [ 504.624093][ T5623] total_pgmajfault 1876 [ 504.628335][ T5623] total_inactive_anon 4096 [ 504.633311][ T5623] total_active_anon 0 [ 504.637340][ T5623] total_inactive_file 0 [ 504.641859][ T5623] total_active_file 0 [ 504.645979][ T5623] total_unevictable 0 [ 504.650508][ T5623] anon_cost 0 [ 504.653852][ T5623] file_cost 0 [ 504.657271][ T5623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8953,pid=24811,uid=0 [ 504.673248][ T5623] Memory cgroup out of memory: Killed process 24811 (syz.0.8953) total-vm:104432kB, anon-rss:1248kB, file-rss:20964kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 504.981241][T16067] Bluetooth: hci3: command 0x0406 tx timeout [ 505.933274][T24915] syz.0.8983 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 505.991868][T24915] CPU: 0 UID: 0 PID: 24915 Comm: syz.0.8983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 505.991896][T24915] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 505.991901][T24915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.991911][T24915] Call Trace: [ 505.991916][T24915] [ 505.991921][T24915] dump_stack_lvl+0x100/0x190 [ 505.991949][T24915] dump_header+0xfb/0x606 [ 505.991966][T24915] oom_kill_process.cold+0xd/0x330 [ 505.991983][T24915] out_of_memory+0x340/0x14f0 [ 505.992010][T24915] ? __pfx_out_of_memory+0x10/0x10 [ 505.992038][T24915] mem_cgroup_out_of_memory+0xc6/0x130 [ 505.992055][T24915] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 505.992070][T24915] ? find_held_lock+0x2b/0x80 [ 505.992092][T24915] ? do_raw_spin_unlock+0x145/0x1e0 [ 505.992108][T24915] ? _raw_spin_unlock+0x28/0x50 [ 505.992127][T24915] try_charge_memcg+0x6e5/0xdf0 [ 505.992152][T24915] ? __pfx_try_charge_memcg+0x10/0x10 [ 505.992172][T24915] ? find_held_lock+0x2b/0x80 [ 505.992188][T24915] ? rcu_read_unlock+0x17/0x60 [ 505.992210][T24915] ? rcu_read_unlock+0x17/0x60 [ 505.992231][T24915] ? find_held_lock+0x2b/0x80 [ 505.992251][T24915] ? rcu_read_unlock+0x17/0x60 [ 505.992276][T24915] charge_memcg+0x187/0x1e0 [ 505.992298][T24915] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 505.992315][T24915] swap_cache_alloc_folio+0x548/0xc50 [ 505.992336][T24915] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 505.992353][T24915] ? swap_cache_get_folio+0x28d/0x360 [ 505.992369][T24915] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 505.992385][T24915] ? find_held_lock+0x2b/0x80 [ 505.992401][T24915] ? mlock_drain_local+0x254/0x4e0 [ 505.992417][T24915] ? mlock_drain_local+0x254/0x4e0 [ 505.992434][T24915] swap_cache_read_folio+0x47/0x140 [ 505.992453][T24915] swap_cluster_readahead+0x387/0x5f0 [ 505.992474][T24915] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 505.992491][T24915] ? trace_sched_exit_tp+0x120/0x160 [ 505.992509][T24915] ? __schedule+0x126e/0x6730 [ 505.992524][T24915] ? balance_dirty_pages+0xfd4/0x2100 [ 505.992545][T24915] ? __lock_acquire+0x49f/0x1a40 [ 505.992566][T24915] ? get_vma_policy+0x23d/0x3b0 [ 505.992590][T24915] swapin_readahead+0x159/0x1200 [ 505.992612][T24915] ? __pfx_swapin_readahead+0x10/0x10 [ 505.992633][T24915] ? swap_table_get+0x10d/0x2c0 [ 505.992648][T24915] ? swap_cache_get_folio+0x28d/0x360 [ 505.992664][T24915] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 505.992680][T24915] ? __pfx_softleaf_type+0x10/0x10 [ 505.992699][T24915] ? do_swap_page+0xf98/0x5780 [ 505.992715][T24915] do_swap_page+0xf98/0x5780 [ 505.992738][T24915] ? __pfx_do_swap_page+0x10/0x10 [ 505.992753][T24915] ? __lock_acquire+0x49f/0x1a40 [ 505.992774][T24915] ? do_raw_spin_lock+0x128/0x260 [ 505.992791][T24915] ? rcu_is_watching+0x12/0xc0 [ 505.992808][T24915] ? __pte_offset_map+0x179/0x310 [ 505.992829][T24915] __handle_mm_fault+0x192f/0x2a00 [ 505.992847][T24915] ? reacquire_held_locks+0xce/0x1e0 [ 505.992870][T24915] ? __pfx___handle_mm_fault+0x10/0x10 [ 505.992888][T24915] ? lock_vma_under_rcu+0x17c/0x590 [ 505.992912][T24915] handle_mm_fault+0x37b/0xa30 [ 505.992931][T24915] do_user_addr_fault+0x5a3/0x12f0 [ 505.992962][T24915] exc_page_fault+0x6f/0xd0 [ 505.992981][T24915] asm_exc_page_fault+0x26/0x30 [ 505.992996][T24915] RIP: 0033:0x7fe999872637 [ 505.993009][T24915] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 89 d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 <80> 3d 0a fa 3a 00 00 0f 84 1c 01 00 00 4c 89 f6 48 8b 0d ea f9 3a [ 505.993022][T24915] RSP: 002b:00007ffc68686f40 EFLAGS: 00010286 [ 505.993034][T24915] RAX: 000000000000a060 RBX: ffffffff826243fa RCX: 0000001b34522328 [ 505.993044][T24915] RDX: ffffffff82624c7c RSI: 0000000000000008 RDI: 00007fe998ffd008 [ 505.993052][T24915] RBP: 0000000000000001 R08: 00007fe999c10000 R09: 00007fe999c12000 [ 505.993061][T24915] R10: 000000008262539f R11: 0000000000000002 R12: 00007fe999c26128 [ 505.993069][T24915] R13: 0000000000000001 R14: ffffffff82624c7c R15: 00007fe99a755720 [ 505.993079][T24915] ? do_mprotect_pkey+0x9c/0xef0 [ 505.993094][T24915] ? mprotect_fixup+0x65a/0xe30 [ 505.993109][T24915] ? do_mprotect_pkey+0x9c/0xef0 [ 505.993126][T24915] [ 506.883277][T16067] Bluetooth: hci1: command 0x0406 tx timeout [ 507.086348][T16067] Bluetooth: hci3: command 0x0406 tx timeout [ 507.438836][T24915] memory: usage 3072kB, limit 3072kB, failcnt 54194 [ 507.468362][T24915] memory+swap: usage 3436kB, limit 9007199254740988kB, failcnt 0 [ 507.502085][T24915] kmem: usage 2508kB, limit 9007199254740988kB, failcnt 0 [ 507.544179][T24915] Memory cgroup stats for /syz0: [ 507.546925][T24915] cache 0 [ 507.581265][T24915] rss 544768 [ 507.601937][T24915] rss_huge 0 [ 507.619654][T24915] shmem 0 [ 507.625536][T24998] netlink: 'syz.2.9021': attribute type 2 has an invalid length. [ 507.640289][T24915] mapped_file 0 [ 507.649538][T24915] dirty 0 [ 507.658609][T24915] writeback 8192 [ 507.670698][T25001] unsupported nla_type 113 [ 507.679461][T24915] workingset_refault_anon 5397 [ 507.699719][T24915] workingset_refault_file 12059 [ 507.721202][T24915] swap 372736 [ 507.739434][T24915] swapcached 206573568 [ 507.765563][T24915] pgpgin 164954 [ 507.792023][T24915] pgpgout 172483 [ 507.808595][T24915] pgfault 412500 [ 507.825234][T24915] pgmajfault 1957 [ 507.845242][T24915] inactive_anon 0 [ 507.861708][T24915] active_anon 0 [ 507.878191][T24915] inactive_file 0 [ 507.894625][T24915] active_file 0 [ 507.908956][T24915] unevictable 528384 [ 507.931135][T24915] hierarchical_memory_limit 3145728 [ 507.959578][T24915] hierarchical_memsw_limit 9223372036854771712 [ 507.986621][T24915] total_cache 0 [ 508.014572][T24915] total_rss 544768 [ 508.027532][T24915] total_rss_huge 0 [ 508.041173][T24915] total_shmem 0 [ 508.066474][T24915] total_mapped_file 0 [ 508.086510][T24915] total_dirty 0 [ 508.097291][T24915] total_writeback 8192 [ 508.112030][T24915] total_workingset_refault_anon 5397 [ 508.127951][T24915] total_workingset_refault_file 12059 [ 508.158102][T24915] total_swap 372736 [ 508.178978][T24915] total_swapcached 206573568 [ 508.202200][T24915] total_pgpgin 164954 [ 508.222252][T24915] total_pgpgout 172483 [ 508.240852][T24915] total_pgfault 412500 [ 508.259973][T24915] total_pgmajfault 1957 [ 508.280050][T24915] total_inactive_anon 0 [ 508.311848][T24915] total_active_anon 0 [ 508.326732][T24915] total_inactive_file 0 [ 508.348820][T24915] total_active_file 0 [ 508.364979][T24915] total_unevictable 528384 [ 508.391051][T24915] anon_cost 45 [ 508.405023][T24915] file_cost 0 [ 508.426755][T24915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8983,pid=24915,uid=0 [ 508.494143][T24915] Memory cgroup out of memory: Killed process 24915 (syz.0.8983) total-vm:104432kB, anon-rss:1780kB, file-rss:20784kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 508.948492][T16067] Bluetooth: hci1: command 0x0406 tx timeout [ 509.108011][T12026] Bluetooth: hci3: command 0x0406 tx timeout [ 509.440057][T25076] netlink: 'syz.4.9058': attribute type 1 has an invalid length. [ 510.002030][T25108] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 510.728124][T25153] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 510.999918][T25167] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 511.016437][T12026] Bluetooth: hci1: command 0x0406 tx timeout [ 511.971557][T25219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9117'. [ 512.016243][T25223] netlink: 'syz.1.9118': attribute type 8 has an invalid length. [ 512.341428][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9127'. [ 512.519537][T25245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9130'. [ 513.293079][T25260] could not allocate digest TFM handle [ 514.582505][T25336] openvswitch: netlink: Key type 261 is out of range max 32 [ 515.631019][T25375] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9189'. [ 516.238785][T25409] netlink: 'syz.4.9202': attribute type 11 has an invalid length. [ 516.277309][T25409] netlink: 'syz.4.9202': attribute type 11 has an invalid length. [ 516.322966][T25409] netlink: 'syz.4.9202': attribute type 11 has an invalid length. [ 517.086558][T25442] openvswitch: netlink: IPv4 tunnel dst address is zero [ 517.600028][T25470] Process accounting resumed [ 518.037724][T25489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9239'. [ 518.321775][ T29] audit: type=1800 audit(4294967324.039:40): pid=25502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9248" name=22050820 dev="tmpfs" ino=11033 res=0 errno=0 [ 518.381123][T25505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9249'. [ 519.012159][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9259'. [ 519.650075][T25574] syz_tun: tun_chr_ioctl cmd 1074025688 [ 521.476904][T25637] netlink: 206 bytes leftover after parsing attributes in process `syz.0.9299'. [ 521.703642][T25640] mac80211.ieee80211_default_rc_algo: string parameter too long [ 521.848876][T25649] netlink: 'syz.2.9304': attribute type 1 has an invalid length. [ 521.967052][ T29] audit: type=1326 audit(4294967327.698:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.4.9307" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb21679e019 code=0x0 [ 523.339861][T25701] ovs_?: entered promiscuous mode [ 523.494230][T25705] ovs_?: entered promiscuous mode [ 524.066531][T25710] syz.0.9333 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 524.119002][T25710] CPU: 0 UID: 0 PID: 25710 Comm: syz.0.9333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 524.119029][T25710] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 524.119034][T25710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.119043][T25710] Call Trace: [ 524.119048][T25710] [ 524.119054][T25710] dump_stack_lvl+0x100/0x190 [ 524.119075][T25710] dump_header+0xfb/0x606 [ 524.119092][T25710] oom_kill_process.cold+0xd/0x330 [ 524.119109][T25710] out_of_memory+0x340/0x14f0 [ 524.119137][T25710] ? __pfx_out_of_memory+0x10/0x10 [ 524.119164][T25710] mem_cgroup_out_of_memory+0xc6/0x130 [ 524.119182][T25710] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 524.119197][T25710] ? find_held_lock+0x2b/0x80 [ 524.119219][T25710] ? do_raw_spin_unlock+0x145/0x1e0 [ 524.119236][T25710] ? _raw_spin_unlock+0x28/0x50 [ 524.119254][T25710] try_charge_memcg+0x6e5/0xdf0 [ 524.119279][T25710] ? __pfx_try_charge_memcg+0x10/0x10 [ 524.119301][T25710] ? find_held_lock+0x2b/0x80 [ 524.119318][T25710] ? rcu_read_unlock+0x17/0x60 [ 524.119340][T25710] ? rcu_read_unlock+0x17/0x60 [ 524.119360][T25710] ? find_held_lock+0x2b/0x80 [ 524.119378][T25710] ? rcu_read_unlock+0x17/0x60 [ 524.119402][T25710] charge_memcg+0x187/0x1e0 [ 524.119424][T25710] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 524.119441][T25710] swap_cache_alloc_folio+0x548/0xc50 [ 524.119461][T25710] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 524.119478][T25710] ? swap_cache_get_folio+0x28d/0x360 [ 524.119494][T25710] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 524.119509][T25710] ? lockdep_hardirqs_on+0x78/0x100 [ 524.119527][T25710] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 524.119547][T25710] swap_cache_read_folio+0x47/0x140 [ 524.119566][T25710] swap_cluster_readahead+0x387/0x5f0 [ 524.119587][T25710] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 524.119612][T25710] ? __lock_acquire+0x49f/0x1a40 [ 524.119634][T25710] ? get_vma_policy+0x23d/0x3b0 [ 524.119657][T25710] swapin_readahead+0x159/0x1200 [ 524.119680][T25710] ? __pfx_swapin_readahead+0x10/0x10 [ 524.119705][T25710] ? swap_table_get+0x10d/0x2c0 [ 524.119721][T25710] ? swap_cache_get_folio+0x28d/0x360 [ 524.119737][T25710] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 524.119753][T25710] ? __pfx_softleaf_type+0x10/0x10 [ 524.119772][T25710] ? do_swap_page+0xf98/0x5780 [ 524.119785][T25710] do_swap_page+0xf98/0x5780 [ 524.119809][T25710] ? __pfx_do_swap_page+0x10/0x10 [ 524.119823][T25710] ? __lock_acquire+0x49f/0x1a40 [ 524.119847][T25710] ? rcu_is_watching+0x12/0xc0 [ 524.119865][T25710] ? __pte_offset_map+0x179/0x310 [ 524.119885][T25710] __handle_mm_fault+0x192f/0x2a00 [ 524.119904][T25710] ? reacquire_held_locks+0xce/0x1e0 [ 524.119926][T25710] ? __pfx___handle_mm_fault+0x10/0x10 [ 524.119944][T25710] ? lock_vma_under_rcu+0x17c/0x590 [ 524.119969][T25710] handle_mm_fault+0x37b/0xa30 [ 524.119994][T25710] do_user_addr_fault+0x5a3/0x12f0 [ 524.120019][T25710] exc_page_fault+0x6f/0xd0 [ 524.120037][T25710] asm_exc_page_fault+0x26/0x30 [ 524.120051][T25710] RIP: 0033:0x7fe999872637 [ 524.120065][T25710] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 89 d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 <80> 3d 0a fa 3a 00 00 0f 84 1c 01 00 00 4c 89 f6 48 8b 0d ea f9 3a [ 524.120078][T25710] RSP: 002b:00007ffc68686f40 EFLAGS: 00010286 [ 524.120090][T25710] RAX: 000000000001238d RBX: ffffffff8296eb24 RCX: 0000001b345219e0 [ 524.120100][T25710] RDX: ffffffff8296e0bb RSI: 0000000000000008 RDI: 00007fe998ffd008 [ 524.120109][T25710] RBP: 000000000000002d R08: 00007fe999c10000 R09: 00007fe999c12000 [ 524.120118][T25710] R10: 000000008296d2b0 R11: 0000000000000002 R12: 00007fe999c26128 [ 524.120126][T25710] R13: 000000000000002d R14: ffffffff8296e0bb R15: 00007fe99a755720 [ 524.120136][T25710] ? __fget_files+0x23b/0x3d0 [ 524.120151][T25710] ? expand_files+0x34/0xb10 [ 524.120166][T25710] ? __fget_files+0x23b/0x3d0 [ 524.120182][T25710] [ 524.121334][T25710] memory: usage 3072kB, limit 3072kB, failcnt 57710 [ 525.288189][T25773] kAFS: No cell specified [ 525.338537][T25775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9354'. [ 525.420709][T25710] memory+swap: usage 3684kB, limit 9007199254740988kB, failcnt 0 [ 525.453352][T25710] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 525.477572][T25710] Memory cgroup stats for /syz0: [ 525.477679][T25710] cache 0 [ 525.509795][T25710] rss 4096 [ 525.522233][T25710] rss_huge 0 [ 525.532907][T25710] shmem 0 [ 525.543497][T25710] mapped_file 0 [ 525.555464][T25710] dirty 0 [ 525.572622][T25710] writeback 4096 [ 525.587966][T25710] workingset_refault_anon 5751 [ 525.604425][T25710] workingset_refault_file 12071 [ 525.623915][T25710] swap 626688 [ 525.633450][T25710] swapcached 220508160 [ 525.647951][T25710] pgpgin 171113 [ 525.663585][T25710] pgpgout 178849 [ 525.677184][T25710] pgfault 433887 [ 525.689149][T25710] pgmajfault 2151 [ 525.702849][T25710] inactive_anon 4096 [ 525.717098][T25710] active_anon 0 [ 525.732509][T25710] inactive_file 0 [ 525.745230][T25710] active_file 0 [ 525.757401][T25710] unevictable 0 [ 525.768821][T25710] hierarchical_memory_limit 3145728 [ 525.794970][T25710] hierarchical_memsw_limit 9223372036854771712 [ 525.816299][T25710] total_cache 0 [ 525.830961][T25710] total_rss 4096 [ 525.845088][T25710] total_rss_huge 0 [ 525.858423][T25710] total_shmem 0 [ 525.871771][T25710] total_mapped_file 0 [ 525.889123][T25710] total_dirty 0 [ 525.903085][T25710] total_writeback 4096 [ 525.914484][T25710] total_workingset_refault_anon 5751 [ 525.936302][T25710] total_workingset_refault_file 12071 [ 525.953741][T25710] total_swap 626688 [ 525.970367][T25710] total_swapcached 220508160 [ 525.986894][T25710] total_pgpgin 171113 [ 526.000794][T25710] total_pgpgout 178849 [ 526.019209][T25710] total_pgfault 433887 [ 526.035945][T25710] total_pgmajfault 2151 [ 526.048103][T25710] total_inactive_anon 4096 [ 526.064043][T25710] total_active_anon 0 [ 526.080047][T25710] total_inactive_file 0 [ 526.098533][T25710] total_active_file 0 [ 526.117140][T25710] total_unevictable 0 [ 526.127121][T25710] anon_cost 1 [ 526.138799][T25710] file_cost 0 [ 526.149288][T25710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9333,pid=25710,uid=0 [ 526.186188][T25710] Memory cgroup out of memory: Killed process 25710 (syz.0.9333) total-vm:104432kB, anon-rss:1248kB, file-rss:20908kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 527.304541][T25868] ovs_?: entered promiscuous mode [ 528.296758][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9405'. [ 530.280703][T25990] IPVS: length: 537396514 != 24 [ 530.972624][T26015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9455'. [ 531.210135][T26020] IPVS: length: 537396514 != 24 [ 531.240349][T26002] vmstat_refresh: nr_hugetlb -3584 [ 535.011009][T26183] syz.0.9520 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 535.088164][T26183] CPU: 0 UID: 0 PID: 26183 Comm: syz.0.9520 Tainted: G U L syzkaller #0 PREEMPT(full) [ 535.088192][T26183] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 535.088202][T26183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.088210][T26183] Call Trace: [ 535.088216][T26183] [ 535.088222][T26183] dump_stack_lvl+0x100/0x190 [ 535.088244][T26183] dump_header+0xfb/0x606 [ 535.088261][T26183] oom_kill_process.cold+0xd/0x330 [ 535.088278][T26183] out_of_memory+0x340/0x14f0 [ 535.088306][T26183] ? __pfx_out_of_memory+0x10/0x10 [ 535.088333][T26183] mem_cgroup_out_of_memory+0xc6/0x130 [ 535.088350][T26183] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 535.088366][T26183] ? find_held_lock+0x2b/0x80 [ 535.088388][T26183] ? do_raw_spin_unlock+0x145/0x1e0 [ 535.088404][T26183] ? _raw_spin_unlock+0x28/0x50 [ 535.088422][T26183] try_charge_memcg+0x6e5/0xdf0 [ 535.088448][T26183] ? __pfx_try_charge_memcg+0x10/0x10 [ 535.088467][T26183] ? find_held_lock+0x2b/0x80 [ 535.088484][T26183] ? rcu_read_unlock+0x17/0x60 [ 535.088506][T26183] ? rcu_read_unlock+0x17/0x60 [ 535.088526][T26183] ? find_held_lock+0x2b/0x80 [ 535.088544][T26183] ? rcu_read_unlock+0x17/0x60 [ 535.088569][T26183] charge_memcg+0x187/0x1e0 [ 535.088606][T26183] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 535.088623][T26183] swap_cache_alloc_folio+0x548/0xc50 [ 535.088644][T26183] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 535.088660][T26183] ? swap_cache_get_folio+0x28d/0x360 [ 535.088676][T26183] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 535.088691][T26183] ? lockdep_hardirqs_on+0x78/0x100 [ 535.088729][T26183] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 535.088752][T26183] swap_cache_read_folio+0x47/0x140 [ 535.088771][T26183] swap_cluster_readahead+0x479/0x5f0 [ 535.088791][T26183] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 535.088817][T26183] ? __lock_acquire+0x49f/0x1a40 [ 535.088838][T26183] ? get_vma_policy+0x23d/0x3b0 [ 535.088862][T26183] swapin_readahead+0x159/0x1200 [ 535.088884][T26183] ? __pfx_swapin_readahead+0x10/0x10 [ 535.088905][T26183] ? swap_table_get+0x10d/0x2c0 [ 535.088920][T26183] ? swap_cache_get_folio+0x28d/0x360 [ 535.088936][T26183] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 535.088952][T26183] ? __pfx_softleaf_type+0x10/0x10 [ 535.088971][T26183] ? do_swap_page+0xf98/0x5780 [ 535.088984][T26183] do_swap_page+0xf98/0x5780 [ 535.089008][T26183] ? __pfx_do_swap_page+0x10/0x10 [ 535.089022][T26183] ? __lock_acquire+0x49f/0x1a40 [ 535.089046][T26183] ? rcu_is_watching+0x12/0xc0 [ 535.089064][T26183] ? __pte_offset_map+0x179/0x310 [ 535.089085][T26183] __handle_mm_fault+0x192f/0x2a00 [ 535.089103][T26183] ? reacquire_held_locks+0xce/0x1e0 [ 535.089126][T26183] ? __pfx___handle_mm_fault+0x10/0x10 [ 535.089144][T26183] ? lock_vma_under_rcu+0x17c/0x590 [ 535.089169][T26183] handle_mm_fault+0x37b/0xa30 [ 535.089187][T26183] do_user_addr_fault+0x5a3/0x12f0 [ 535.089212][T26183] exc_page_fault+0x6f/0xd0 [ 535.089231][T26183] asm_exc_page_fault+0x26/0x30 [ 535.089245][T26183] RIP: 0033:0x7fe999978246 [ 535.089258][T26183] Code: 01 00 00 c5 fe 6f 17 c5 fd 74 da c5 f5 74 d2 c5 ed eb db c5 fd d7 c3 85 c0 74 59 f3 0f bc c0 48 01 f8 0f 01 d6 75 04 c5 f8 77 c5 fc 77 c3 0f 1f 44 00 00 0f bc c0 48 ff c7 48 01 f8 eb e3 0f [ 535.089272][T26183] RSP: 002b:00007fe99a8069f8 EFLAGS: 00010242 [ 535.089286][T26183] RAX: 00007fe999a51778 RBX: 00007fe99a806f30 RCX: 0000000000000000 [ 535.089295][T26183] RDX: 00007fe99a806ff0 RSI: 0000000000000025 RDI: 00007fe999a51761 [ 535.089304][T26183] RBP: 00007fe99a7e8000 R08: 00007fe99a8070f3 R09: 00007ffc68686ef7 [ 535.089313][T26183] R10: 0000000000000008 R11: 0000000000000206 R12: 00007fe99a8070d0 [ 535.089322][T26183] R13: 0000000000000000 R14: 00007fe999a51761 R15: 00007fe99a806ff0 [ 535.089341][T26183] [ 535.089356][T26183] memory: usage 2812kB, limit 3072kB, failcnt 62712 [ 535.979582][ T29] audit: type=1800 audit(4294967341.721:42): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9532" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 536.315492][T26183] memory+swap: usage 3116kB, limit 9007199254740988kB, failcnt 0 [ 536.353309][T26183] kmem: usage 2568kB, limit 9007199254740988kB, failcnt 0 [ 536.387426][T26183] Memory cgroup stats for /syz0: [ 536.387528][T26183] cache 0 [ 536.438912][T26183] rss 0 [ 536.450831][T26183] rss_huge 0 [ 536.463675][T26183] shmem 0 [ 536.480538][T26183] mapped_file 0 [ 536.495137][T26183] dirty 0 [ 536.508660][T26183] writeback 0 [ 536.527664][T26183] workingset_refault_anon 6673 [ 536.561726][T26183] workingset_refault_file 12072 [ 536.583583][T26183] swap 327680 [ 536.593685][T26183] swapcached 240332800 [ 536.614966][T26183] pgpgin 177147 [ 536.634479][T26183] pgpgout 184884 [ 536.648791][T26183] pgfault 444160 [ 536.665216][T26183] pgmajfault 2427 [ 536.681461][T26183] inactive_anon 8192 [ 536.704811][T26183] active_anon 0 [ 536.721405][T26183] inactive_file 0 [ 536.735901][T26183] active_file 0 [ 536.749806][ T29] audit: type=1800 audit(4294967342.555:43): pid=26228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9542" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 536.779005][T26183] unevictable 0 [ 536.795133][T26183] hierarchical_memory_limit 3145728 [ 536.818092][T26183] hierarchical_memsw_limit 9223372036854771712 [ 536.846389][T26183] total_cache 0 [ 536.861679][T26183] total_rss 0 [ 536.885136][T26183] total_rss_huge 0 [ 536.904266][T26183] total_shmem 0 [ 536.919629][T26183] total_mapped_file 0 [ 536.938561][T26183] total_dirty 0 [ 536.954171][T26183] total_writeback 0 [ 536.972375][T26183] total_workingset_refault_anon 6673 [ 537.005738][T26183] total_workingset_refault_file 12072 [ 537.031085][T26183] total_swap 327680 [ 537.068168][T26183] total_swapcached 240332800 [ 537.091794][T26183] total_pgpgin 177147 [ 537.114190][T26183] total_pgpgout 184884 [ 537.132235][T26183] total_pgfault 444160 [ 537.151773][T26183] total_pgmajfault 2427 [ 537.172745][T26183] total_inactive_anon 8192 [ 537.201770][T26183] total_active_anon 0 [ 537.219047][T26183] total_inactive_file 0 [ 537.237302][T26183] total_active_file 0 [ 537.242606][T26240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9548'. [ 537.258844][T26183] total_unevictable 0 [ 537.272898][T26183] anon_cost 27 [ 537.285060][T26183] file_cost 0 [ 537.307906][T26183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9520,pid=26179,uid=0 [ 537.379283][T26183] Memory cgroup out of memory: Killed process 26179 (syz.0.9520) total-vm:102384kB, anon-rss:1276kB, file-rss:20752kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 538.761191][T26296] bridge0: port 3(ipvlan1) entered blocking state [ 538.786031][T26296] bridge0: port 3(ipvlan1) entered disabled state [ 538.803000][T26296] ipvlan1: entered allmulticast mode [ 538.818840][T26296] veth0_vlan: entered allmulticast mode [ 538.838483][T26296] ipvlan1: left allmulticast mode [ 538.849457][T26296] veth0_vlan: left allmulticast mode [ 539.009480][T26308] TCP: TCP_TX_DELAY enabled [ 540.118114][ T5626] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 540.175933][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 540.175960][ T5626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 540.175965][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.175974][ T5626] Call Trace: [ 540.175979][ T5626] [ 540.175984][ T5626] dump_stack_lvl+0x100/0x190 [ 540.176006][ T5626] dump_header+0xfb/0x606 [ 540.176022][ T5626] oom_kill_process.cold+0xd/0x330 [ 540.176040][ T5626] out_of_memory+0x340/0x14f0 [ 540.176067][ T5626] ? __pfx_out_of_memory+0x10/0x10 [ 540.176095][ T5626] mem_cgroup_out_of_memory+0xc6/0x130 [ 540.176112][ T5626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 540.176128][ T5626] ? find_held_lock+0x2b/0x80 [ 540.176157][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 540.176173][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 540.176192][ T5626] try_charge_memcg+0x6e5/0xdf0 [ 540.176217][ T5626] ? __pfx_try_charge_memcg+0x10/0x10 [ 540.176237][ T5626] ? find_held_lock+0x2b/0x80 [ 540.176253][ T5626] ? rcu_read_unlock+0x17/0x60 [ 540.176274][ T5626] ? rcu_read_unlock+0x17/0x60 [ 540.176295][ T5626] ? find_held_lock+0x2b/0x80 [ 540.176315][ T5626] ? rcu_read_unlock+0x17/0x60 [ 540.176340][ T5626] charge_memcg+0x187/0x1e0 [ 540.176361][ T5626] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 540.176379][ T5626] swap_cache_alloc_folio+0x548/0xc50 [ 540.176400][ T5626] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 540.176416][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 540.176432][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 540.176454][ T5626] swap_cache_read_folio+0x47/0x140 [ 540.176472][ T5626] swap_cluster_readahead+0x387/0x5f0 [ 540.176493][ T5626] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 540.176509][ T5626] ? debug_object_activate+0x343/0x4b0 [ 540.176620][ T5626] ? lock_acquire+0x1b9/0x370 [ 540.176646][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 540.176666][ T5626] ? get_vma_policy+0x23d/0x3b0 [ 540.176691][ T5626] swapin_readahead+0x159/0x1200 [ 540.176707][ T5626] ? lapic_next_event+0x10/0x20 [ 540.176730][ T5626] ? __pfx_swapin_readahead+0x10/0x10 [ 540.176750][ T5626] ? swap_table_get+0x10d/0x2c0 [ 540.176766][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 540.176782][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 540.176798][ T5626] ? __pfx_softleaf_type+0x10/0x10 [ 540.176817][ T5626] ? do_swap_page+0xf98/0x5780 [ 540.176830][ T5626] do_swap_page+0xf98/0x5780 [ 540.176853][ T5626] ? __pfx_do_swap_page+0x10/0x10 [ 540.176867][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 540.176889][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 540.176909][ T5626] ? rcu_is_watching+0x12/0xc0 [ 540.176926][ T5626] ? __pte_offset_map+0x179/0x310 [ 540.176947][ T5626] __handle_mm_fault+0x192f/0x2a00 [ 540.176965][ T5626] ? reacquire_held_locks+0xce/0x1e0 [ 540.176988][ T5626] ? __pfx___handle_mm_fault+0x10/0x10 [ 540.177005][ T5626] ? lock_vma_under_rcu+0x17c/0x590 [ 540.177030][ T5626] handle_mm_fault+0x37b/0xa30 [ 540.177048][ T5626] do_user_addr_fault+0x5a3/0x12f0 [ 540.177073][ T5626] exc_page_fault+0x6f/0xd0 [ 540.177091][ T5626] asm_exc_page_fault+0x26/0x30 [ 540.177106][ T5626] RIP: 0033:0x7fe99995e84e [ 540.177119][ T5626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.177132][ T5626] RSP: 002b:00007ffc686871d8 EFLAGS: 00010246 [ 540.177150][ T5626] RAX: 0000000000000000 RBX: 000055555a09c500 RCX: 00007fe99995e84e [ 540.177160][ T5626] RDX: 00007ffc68687230 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.177168][ T5626] RBP: 00007ffc6868729c R08: 0000000000000000 R09: 0000000000000000 [ 540.177176][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 540.177185][ T5626] R13: 00000000000927c0 R14: 0000000000084564 R15: 00007ffc686872f0 [ 540.177204][ T5626] [ 540.177266][ T5626] memory: usage 3072kB, limit 3072kB, failcnt 63760 [ 540.820346][ T5626] memory+swap: usage 3440kB, limit 9007199254740988kB, failcnt 0 [ 540.830869][ T5626] kmem: usage 3036kB, limit 9007199254740988kB, failcnt 0 [ 540.838656][ T5626] Memory cgroup stats for /syz0: [ 540.838753][ T5626] cache 0 [ 540.847434][ T5626] rss 32768 [ 540.853230][ T5626] rss_huge 0 [ 540.856498][ T5626] shmem 0 [ 540.859537][ T5626] mapped_file 0 [ 540.864310][ T5626] dirty 0 [ 540.867323][ T5626] writeback 32768 [ 540.871394][ T5626] workingset_refault_anon 6757 [ 540.876251][ T5626] workingset_refault_file 12072 [ 540.881548][ T5626] swap 376832 [ 540.885015][ T5626] swapcached 244846592 [ 540.889419][ T5626] pgpgin 178546 [ 540.893376][ T5626] pgpgout 186276 [ 540.896981][ T5626] pgfault 446979 [ 540.900566][ T5626] pgmajfault 2458 [ 540.904660][ T5626] inactive_anon 0 [ 540.909179][ T5626] active_anon 0 [ 540.913295][ T5626] inactive_file 0 [ 540.917067][ T5626] active_file 0 [ 540.920575][ T5626] unevictable 0 [ 540.925123][ T5626] hierarchical_memory_limit 3145728 [ 540.930460][ T5626] hierarchical_memsw_limit 9223372036854771712 [ 540.938699][ T5626] total_cache 0 [ 540.942850][ T5626] total_rss 32768 [ 540.946558][ T5626] total_rss_huge 0 [ 540.952621][ T5626] total_shmem 0 [ 540.956148][ T5626] total_mapped_file 0 [ 540.960206][ T5626] total_dirty 0 [ 540.964171][ T5626] total_writeback 32768 [ 540.968398][ T5626] total_workingset_refault_anon 6757 [ 540.974988][ T5626] total_workingset_refault_file 12072 [ 540.980747][ T5626] total_swap 376832 [ 540.984930][ T5626] total_swapcached 244846592 [ 540.989598][ T5626] total_pgpgin 178546 [ 540.994134][ T5626] total_pgpgout 186276 [ 540.998355][ T5626] total_pgfault 446979 [ 541.003307][ T5626] total_pgmajfault 2458 [ 541.008409][ T5626] total_inactive_anon 0 [ 541.013224][ T5626] total_active_anon 0 [ 541.017732][ T5626] total_inactive_file 0 [ 541.024275][ T5626] total_active_file 0 [ 541.028828][ T5626] total_unevictable 0 [ 541.034265][ T5626] anon_cost 9 [ 541.038023][ T5626] file_cost 0 [ 541.045602][ T5626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9591,pid=26332,uid=0 [ 541.066233][ T5626] Memory cgroup out of memory: Killed process 26332 (syz.0.9591) total-vm:137332kB, anon-rss:1280kB, file-rss:21012kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 543.128498][T26471] FAULT_INJECTION: forcing a failure. [ 543.128498][T26471] name failslab, interval 1, probability 0, space 0, times 0 [ 543.192830][T26471] CPU: 0 UID: 0 PID: 26471 Comm: syz.0.9640 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.192864][T26471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.192870][T26471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.192879][T26471] Call Trace: [ 543.192884][T26471] [ 543.192890][T26471] dump_stack_lvl+0x100/0x190 [ 543.192911][T26471] should_fail_ex.cold+0x5/0xa [ 543.192929][T26471] should_failslab+0xc2/0x120 [ 543.192950][T26471] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 543.192969][T26471] ? __d_alloc+0x35/0xa50 [ 543.192988][T26471] __d_alloc+0x35/0xa50 [ 543.193006][T26471] d_alloc_pseudo+0x1c/0xc0 [ 543.193025][T26471] alloc_file_pseudo+0x118/0x290 [ 543.193045][T26471] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 543.193063][T26471] ? hugetlbfs_get_inode+0x3f5/0x700 [ 543.193155][T26471] hugetlb_file_setup+0x2a8/0x5b0 [ 543.193177][T26471] ksys_mmap_pgoff+0x242/0x610 [ 543.193200][T26471] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 543.193219][T26471] ? xfd_validate_state+0x129/0x190 [ 543.193245][T26471] __x64_sys_mmap+0x125/0x190 [ 543.193265][T26471] do_syscall_64+0x115/0x840 [ 543.193317][T26471] ? clear_bhb_loop+0x40/0x90 [ 543.193336][T26471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.193351][T26471] RIP: 0033:0x7fe99999e019 [ 543.193364][T26471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.193378][T26471] RSP: 002b:00007fe99a828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 543.193392][T26471] RAX: ffffffffffffffda RBX: 00007fe999c25fa0 RCX: 00007fe99999e019 [ 543.193402][T26471] RDX: 000000000000000b RSI: 0000000000004005 RDI: 0000000000000000 [ 543.193411][T26471] RBP: 00007fe999a3500c R08: 0000000000000401 R09: 0000300000000000 [ 543.193422][T26471] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 543.193431][T26471] R13: 00007fe999c26038 R14: 00007fe999c25fa0 R15: 00007ffc68686ef8 [ 543.193450][T26471] [ 543.541419][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9644'. [ 544.576057][T26532] bridge0: port 3(ipvlan1) entered blocking state [ 544.602783][T26532] bridge0: port 3(ipvlan1) entered disabled state [ 544.632567][T26532] ipvlan1: entered allmulticast mode [ 544.657724][T26532] veth0_vlan: entered allmulticast mode [ 544.705212][T26532] ipvlan1: left allmulticast mode [ 544.732067][T26532] veth0_vlan: left allmulticast mode [ 545.312390][T26542] syz.1.9666 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 545.385885][T26542] CPU: 0 UID: 0 PID: 26542 Comm: syz.1.9666 Tainted: G U L syzkaller #0 PREEMPT(full) [ 545.385912][T26542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 545.385917][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.385925][T26542] Call Trace: [ 545.385930][T26542] [ 545.385936][T26542] dump_stack_lvl+0x100/0x190 [ 545.385957][T26542] dump_header+0xfb/0x606 [ 545.385977][T26542] oom_kill_process.cold+0xd/0x330 [ 545.385994][T26542] out_of_memory+0x340/0x14f0 [ 545.386022][T26542] ? __pfx_out_of_memory+0x10/0x10 [ 545.386049][T26542] mem_cgroup_out_of_memory+0xc6/0x130 [ 545.386066][T26542] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 545.386081][T26542] ? find_held_lock+0x2b/0x80 [ 545.386103][T26542] ? do_raw_spin_unlock+0x145/0x1e0 [ 545.386119][T26542] ? _raw_spin_unlock+0x28/0x50 [ 545.386138][T26542] try_charge_memcg+0x6e5/0xdf0 [ 545.386163][T26542] ? __pfx_try_charge_memcg+0x10/0x10 [ 545.386182][T26542] ? find_held_lock+0x2b/0x80 [ 545.386199][T26542] ? rcu_read_unlock+0x17/0x60 [ 545.386220][T26542] ? rcu_read_unlock+0x17/0x60 [ 545.386240][T26542] ? find_held_lock+0x2b/0x80 [ 545.386258][T26542] ? rcu_read_unlock+0x17/0x60 [ 545.386283][T26542] charge_memcg+0x187/0x1e0 [ 545.386304][T26542] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 545.386321][T26542] swap_cache_alloc_folio+0x548/0xc50 [ 545.386342][T26542] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 545.386358][T26542] ? swap_cache_get_folio+0x28d/0x360 [ 545.386374][T26542] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 545.386390][T26542] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 545.386411][T26542] swap_cache_read_folio+0x47/0x140 [ 545.386429][T26542] swap_cluster_readahead+0x387/0x5f0 [ 545.386450][T26542] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 545.386475][T26542] ? __lock_acquire+0x49f/0x1a40 [ 545.386496][T26542] ? get_vma_policy+0x23d/0x3b0 [ 545.386520][T26542] swapin_readahead+0x159/0x1200 [ 545.386542][T26542] ? __pfx_swapin_readahead+0x10/0x10 [ 545.386563][T26542] ? swap_table_get+0x10d/0x2c0 [ 545.386578][T26542] ? swap_cache_get_folio+0x28d/0x360 [ 545.386595][T26542] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 545.386610][T26542] ? __pfx_softleaf_type+0x10/0x10 [ 545.386636][T26542] ? do_swap_page+0xf98/0x5780 [ 545.386649][T26542] do_swap_page+0xf98/0x5780 [ 545.386672][T26542] ? __pfx_do_swap_page+0x10/0x10 [ 545.386687][T26542] ? __lock_acquire+0x49f/0x1a40 [ 545.386711][T26542] ? rcu_is_watching+0x12/0xc0 [ 545.386728][T26542] ? __pte_offset_map+0x179/0x310 [ 545.386749][T26542] __handle_mm_fault+0x192f/0x2a00 [ 545.386768][T26542] ? reacquire_held_locks+0xce/0x1e0 [ 545.386790][T26542] ? __pfx___handle_mm_fault+0x10/0x10 [ 545.386808][T26542] ? lock_vma_under_rcu+0x17c/0x590 [ 545.386833][T26542] handle_mm_fault+0x37b/0xa30 [ 545.386851][T26542] do_user_addr_fault+0x5a3/0x12f0 [ 545.386877][T26542] exc_page_fault+0x6f/0xd0 [ 545.386896][T26542] asm_exc_page_fault+0x26/0x30 [ 545.386911][T26542] RIP: 0033:0x7fb410a6b8b0 [ 545.386923][T26542] Code: c4 4c 0f 42 e0 83 3d 1a c5 3b 00 00 0f 8e d9 fd ff ff e8 f3 7f fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d de 9d ee 00 e8 03 00 00 48 8d 1d df a6 3b 00 e8 6a 32 13 00 [ 545.386937][T26542] RSP: 002b:00007fff3b0a6860 EFLAGS: 00010202 [ 545.386949][T26542] RAX: 0000000000085a58 RBX: 00007fb410e27da0 RCX: 00000000000858b8 [ 545.386958][T26542] RDX: 00000000000001a0 RSI: 00007fff3b0a6840 RDI: 00007fb411b0b010 [ 545.386967][T26542] RBP: 00007fb410e27da0 R08: 0018175566cc690f R09: 0000000000000001 [ 545.386976][T26542] R10: 0000000000019840 R11: 0000000000000246 R12: 0000000000085c5a [ 545.386984][T26542] R13: 00007fb410e2609c R14: 00000000000859e1 R15: 00007fb410e26090 [ 545.387003][T26542] [ 545.743210][T26542] memory: usage 3072kB, limit 3072kB, failcnt 117028 [ 545.751128][T26542] memory+swap: usage 3468kB, limit 9007199254740988kB, failcnt 0 [ 545.758882][T26542] kmem: usage 3056kB, limit 9007199254740988kB, failcnt 0 [ 545.766012][T26542] Memory cgroup stats for /syz1: [ 545.766106][T26542] cache 8192 [ 545.774274][T26542] rss 0 [ 545.777043][T26542] rss_huge 0 [ 545.780233][T26542] shmem 0 [ 545.783154][T26542] mapped_file 8192 [ 545.786892][T26542] dirty 0 [ 545.789805][T26542] writeback 4096 [ 545.793326][T26542] workingset_refault_anon 8707 [ 545.798181][T26542] workingset_refault_file 47670 [ 545.803009][T26542] swap 405504 [ 545.806312][T26542] swapcached 355418112 [ 545.810382][T26542] pgpgin 275971 [ 545.813815][T26542] pgpgout 279152 [ 545.817396][T26542] pgfault 478293 [ 545.820921][T26542] pgmajfault 3470 [ 545.824545][T26542] inactive_anon 0 [ 545.828188][T26542] active_anon 0 [ 545.831621][T26542] inactive_file 0 [ 545.835272][T26542] active_file 0 [ 545.838711][T26542] unevictable 8192 [ 545.843861][T26542] hierarchical_memory_limit 3145728 [ 545.849115][T26542] hierarchical_memsw_limit 9223372036854771712 [ 545.855281][T26542] total_cache 8192 [ 545.858982][T26542] total_rss 0 [ 545.862241][T26542] total_rss_huge 0 [ 545.865966][T26542] total_shmem 0 [ 545.869400][T26542] total_mapped_file 8192 [ 545.873614][T26542] total_dirty 0 [ 545.877115][T26542] total_writeback 4096 [ 545.881180][T26542] total_workingset_refault_anon 8707 [ 545.886490][T26542] total_workingset_refault_file 47670 [ 545.891840][T26542] total_swap 405504 [ 545.895663][T26542] total_swapcached 355418112 [ 545.900228][T26542] total_pgpgin 275971 [ 545.904180][T26542] total_pgpgout 279152 [ 545.908291][T26542] total_pgfault 478293 [ 545.912338][T26542] total_pgmajfault 3470 [ 545.916511][T26542] total_inactive_anon 0 [ 545.920641][T26542] total_active_anon 0 [ 545.924611][T26542] total_inactive_file 0 [ 545.928773][T26542] total_active_file 0 [ 545.932734][T26542] total_unevictable 8192 [ 545.936976][T26542] anon_cost 22 [ 545.940332][T26542] file_cost 0 [ 545.945029][T26542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9666,pid=26542,uid=0 [ 545.960035][T26542] Memory cgroup out of memory: Killed process 26542 (syz.1.9666) total-vm:104432kB, anon-rss:1252kB, file-rss:21064kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 547.410140][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9692'. [ 547.467781][T26623] Process accounting paused [ 548.775483][T26627] kexec: Could not allocate control_code_buffer [ 549.041672][T26672] syz.1.9702 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 549.092795][T26672] CPU: 0 UID: 0 PID: 26672 Comm: syz.1.9702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 549.092825][T26672] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 549.092831][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.092839][T26672] Call Trace: [ 549.092845][T26672] [ 549.092850][T26672] dump_stack_lvl+0x100/0x190 [ 549.092872][T26672] dump_header+0xfb/0x606 [ 549.092889][T26672] oom_kill_process.cold+0xd/0x330 [ 549.092911][T26672] out_of_memory+0x340/0x14f0 [ 549.092939][T26672] ? __pfx_out_of_memory+0x10/0x10 [ 549.092967][T26672] mem_cgroup_out_of_memory+0xc6/0x130 [ 549.092984][T26672] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 549.093000][T26672] ? find_held_lock+0x2b/0x80 [ 549.093021][T26672] ? do_raw_spin_unlock+0x145/0x1e0 [ 549.093038][T26672] ? _raw_spin_unlock+0x28/0x50 [ 549.093057][T26672] try_charge_memcg+0x6e5/0xdf0 [ 549.093081][T26672] ? __pfx_try_charge_memcg+0x10/0x10 [ 549.093101][T26672] ? find_held_lock+0x2b/0x80 [ 549.093118][T26672] ? rcu_read_unlock+0x17/0x60 [ 549.093139][T26672] ? rcu_read_unlock+0x17/0x60 [ 549.093159][T26672] ? find_held_lock+0x2b/0x80 [ 549.093177][T26672] ? rcu_read_unlock+0x17/0x60 [ 549.093201][T26672] charge_memcg+0x187/0x1e0 [ 549.093223][T26672] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 549.093240][T26672] swap_cache_alloc_folio+0x548/0xc50 [ 549.093261][T26672] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 549.093277][T26672] ? swap_cache_get_folio+0x28d/0x360 [ 549.093293][T26672] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 549.093308][T26672] ? lockdep_hardirqs_on+0x78/0x100 [ 549.093334][T26672] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 549.093361][T26672] swap_cache_read_folio+0x47/0x140 [ 549.093388][T26672] swap_cluster_readahead+0x387/0x5f0 [ 549.093409][T26672] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 549.093436][T26672] ? __lock_acquire+0x49f/0x1a40 [ 549.093460][T26672] ? get_vma_policy+0x23d/0x3b0 [ 549.093483][T26672] swapin_readahead+0x159/0x1200 [ 549.093505][T26672] ? __pfx_swapin_readahead+0x10/0x10 [ 549.093526][T26672] ? swap_table_get+0x10d/0x2c0 [ 549.093541][T26672] ? swap_cache_get_folio+0x28d/0x360 [ 549.093564][T26672] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 549.093580][T26672] ? __pfx_softleaf_type+0x10/0x10 [ 549.093600][T26672] ? do_swap_page+0xf98/0x5780 [ 549.093613][T26672] do_swap_page+0xf98/0x5780 [ 549.093636][T26672] ? __pfx_do_swap_page+0x10/0x10 [ 549.093651][T26672] ? __lock_acquire+0x49f/0x1a40 [ 549.093679][T26672] ? rcu_is_watching+0x12/0xc0 [ 549.093696][T26672] ? __pte_offset_map+0x179/0x310 [ 549.093717][T26672] __handle_mm_fault+0x192f/0x2a00 [ 549.093736][T26672] ? reacquire_held_locks+0xce/0x1e0 [ 549.093758][T26672] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.093776][T26672] ? lock_vma_under_rcu+0x17c/0x590 [ 549.093801][T26672] handle_mm_fault+0x37b/0xa30 [ 549.093822][T26672] do_user_addr_fault+0x5a3/0x12f0 [ 549.093847][T26672] exc_page_fault+0x6f/0xd0 [ 549.093866][T26672] asm_exc_page_fault+0x26/0x30 [ 549.093880][T26672] RIP: 0033:0x7fb410a517bf [ 549.093893][T26672] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 549.093907][T26672] RSP: 002b:00007fff3b0a6738 EFLAGS: 00010202 [ 549.093919][T26672] RAX: 0000000081d2dcda RBX: ffffffff81d2dcda RCX: 0000001b3461d288 [ 549.093929][T26672] RDX: 0000000000001cda RSI: ffffffff81d2dcda RDI: 0000000000000002 [ 549.093938][T26672] RBP: 0000000000000011 R08: 00007fb410e10000 R09: 00007fb410e12000 [ 549.093946][T26672] R10: 0000000081d2dcde R11: 0000000000000002 R12: 00007fb410e26128 [ 549.093955][T26672] R13: 000000000000001c R14: ffffffff81d2d303 R15: 00007fb411955720 [ 549.093965][T26672] ? prepare_creds+0x13/0x950 [ 549.093987][T26672] ? exit_creds+0x8a/0x210 [ 549.094009][T26672] ? exit_creds+0x8a/0x210 [ 549.094032][T26672] [ 549.094038][T26672] memory: usage 3072kB, limit 3072kB, failcnt 117272 [ 549.676335][T26672] memory+swap: usage 3392kB, limit 9007199254740988kB, failcnt 0 [ 549.684635][T26672] kmem: usage 2984kB, limit 9007199254740988kB, failcnt 0 [ 549.692203][T26672] Memory cgroup stats for /syz1: [ 549.692305][T26672] cache 8192 [ 549.701053][T26672] rss 28672 [ 549.704219][T26672] rss_huge 0 [ 549.707754][T26672] shmem 0 [ 549.710689][T26672] mapped_file 8192 [ 549.716646][T26672] dirty 4096 [ 549.719859][T26672] writeback 24576 [ 549.723466][T26672] workingset_refault_anon 8745 [ 549.728751][T26672] workingset_refault_file 47670 [ 549.733609][T26672] swap 327680 [ 549.737256][T26672] swapcached 355708928 [ 549.754586][T26672] pgpgin 276430 [ 549.759746][T26672] pgpgout 279593 [ 549.775585][T26672] pgfault 480759 [ 549.789253][T26672] pgmajfault 3487 [ 549.801620][T26672] inactive_anon 0 [ 549.817338][T26672] active_anon 0 [ 549.828228][T26672] inactive_file 0 [ 549.840648][T26672] active_file 0 [ 549.850592][T26672] unevictable 8192 [ 549.892953][T26672] hierarchical_memory_limit 3145728 [ 549.920194][T26672] hierarchical_memsw_limit 9223372036854771712 [ 549.948122][T26672] total_cache 8192 [ 549.966577][T26672] total_rss 28672 [ 549.985607][T26672] total_rss_huge 0 [ 549.999506][T26672] total_shmem 0 [ 550.011132][T26693] FAULT_INJECTION: forcing a failure. [ 550.011132][T26693] name failslab, interval 1, probability 0, space 0, times 0 [ 550.035788][T26672] total_mapped_file 8192 [ 550.053377][T26672] total_dirty 4096 [ 550.071302][T26672] total_writeback 24576 [ 550.084652][T26672] total_workingset_refault_anon 8745 [ 550.090145][T26693] CPU: 0 UID: 0 PID: 26693 Comm: syz.0.9711 Tainted: G U L syzkaller #0 PREEMPT(full) [ 550.090172][T26693] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 550.090177][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.090187][T26693] Call Trace: [ 550.090193][T26693] [ 550.090201][T26693] dump_stack_lvl+0x100/0x190 [ 550.090223][T26693] should_fail_ex.cold+0x5/0xa [ 550.090241][T26693] should_failslab+0xc2/0x120 [ 550.090261][T26693] kmem_cache_alloc_noprof+0x91/0x6a0 [ 550.090278][T26693] ? security_inode_alloc+0x3b/0x2c0 [ 550.090366][T26693] ? sk_prot_alloc+0x60/0x2a0 [ 550.090414][T26693] sk_prot_alloc+0x60/0x2a0 [ 550.090431][T26693] sk_alloc+0x36/0xe80 [ 550.090451][T26693] smc_create+0x11a/0x290 [ 550.090509][T26693] __sock_create+0x339/0x860 [ 550.090551][T26693] __sys_socket+0x14d/0x260 [ 550.090568][T26693] ? __pfx___sys_socket+0x10/0x10 [ 550.090590][T26693] __x64_sys_socket+0x72/0xb0 [ 550.090605][T26693] ? lockdep_hardirqs_on+0x78/0x100 [ 550.090626][T26693] do_syscall_64+0x115/0x840 [ 550.090644][T26693] ? clear_bhb_loop+0x40/0x90 [ 550.090661][T26693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.090676][T26693] RIP: 0033:0x7fe99999e019 [ 550.090689][T26693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.090703][T26693] RSP: 002b:00007fe99a828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 550.090718][T26693] RAX: ffffffffffffffda RBX: 00007fe999c25fa0 RCX: 00007fe99999e019 [ 550.090728][T26693] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 550.090736][T26693] RBP: 00007fe999a3500c R08: 0000000000000000 R09: 0000000000000000 [ 550.090745][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.090754][T26693] R13: 00007fe999c26038 R14: 00007fe999c25fa0 R15: 00007ffc68686ef8 [ 550.090772][T26693] [ 550.301645][T26672] total_workingset_refault_file 47670 [ 550.307085][T26672] total_swap 327680 [ 550.310911][T26672] total_swapcached 355708928 [ 550.315680][T26672] total_pgpgin 276430 [ 550.319658][T26672] total_pgpgout 279593 [ 550.325149][T26672] total_pgfault 480759 [ 550.329306][T26672] total_pgmajfault 3487 [ 550.333490][T26672] total_inactive_anon 0 [ 550.337642][T26672] total_active_anon 0 [ 550.341681][T26672] total_inactive_file 0 [ 550.345819][T26672] total_active_file 0 [ 550.349788][T26672] total_unevictable 8192 [ 550.354087][T26672] anon_cost 96 [ 550.357456][T26672] file_cost 0 [ 550.360736][T26672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9702,pid=26672,uid=0 [ 550.375666][T26672] Memory cgroup out of memory: Killed process 26672 (syz.1.9702) total-vm:104432kB, anon-rss:1276kB, file-rss:20992kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 552.599481][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9741'. [ 553.003545][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9744'. [ 553.474586][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9754'. [ 555.159957][T26895] tunl0: entered allmulticast mode [ 556.084065][T26924] nbd: socks must be embedded in a SOCK_ITEM attr [ 556.703926][T26956] sctp: [Deprecated]: syz.4.9796 (pid 26956) Use of int in max_burst socket option. [ 556.703926][T26956] Use struct sctp_assoc_value instead [ 556.744949][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9797'. [ 556.755375][T26959] sctp: [Deprecated]: syz.2.9798 (pid 26959) Use of int in maxseg socket option. [ 556.755375][T26959] Use struct sctp_assoc_value instead [ 557.196716][T26975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9804'. [ 559.797787][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9847'. [ 559.970367][T12026] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 559.970503][T12026] Bluetooth: hci1: unexpected event for opcode 0x647c [ 560.560283][T27129] FAULT_INJECTION: forcing a failure. [ 560.560283][T27129] name failslab, interval 1, probability 0, space 0, times 0 [ 560.602891][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.609963][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.631279][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.0.9856 Tainted: G U L syzkaller #0 PREEMPT(full) [ 560.631307][T27129] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 560.631313][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.631322][T27129] Call Trace: [ 560.631327][T27129] [ 560.631332][T27129] dump_stack_lvl+0x100/0x190 [ 560.631355][T27129] should_fail_ex.cold+0x5/0xa [ 560.631373][T27129] should_failslab+0xc2/0x120 [ 560.631395][T27129] __kmalloc_noprof+0xfc/0x820 [ 560.631413][T27129] ? trace_kmem_cache_alloc+0xdd/0x100 [ 560.631434][T27129] ? lsm_blob_alloc+0x68/0x90 [ 560.631452][T27129] lsm_blob_alloc+0x68/0x90 [ 560.631465][T27129] security_prepare_creds+0x2d/0x290 [ 560.631564][T27129] prepare_creds+0x5d6/0x950 [ 560.631589][T27129] __sys_setregid+0x109/0x910 [ 560.631607][T27129] do_syscall_64+0x115/0x840 [ 560.631627][T27129] ? clear_bhb_loop+0x40/0x90 [ 560.631646][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.631662][T27129] RIP: 0033:0x7fe99999e019 [ 560.631676][T27129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.631689][T27129] RSP: 002b:00007fe99a828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 560.631703][T27129] RAX: ffffffffffffffda RBX: 00007fe999c25fa0 RCX: 00007fe99999e019 [ 560.631713][T27129] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 560.631721][T27129] RBP: 00007fe999a3500c R08: 0000000000000000 R09: 0000000000000000 [ 560.631736][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.631745][T27129] R13: 00007fe999c26038 R14: 00007fe999c25fa0 R15: 00007ffc68686ef8 [ 560.631764][T27129] [ 560.882840][T27139] netlink: 82 bytes leftover after parsing attributes in process `syz.1.9863'. [ 561.064238][T27140] syz.1.9864 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 561.108633][T27140] CPU: 0 UID: 0 PID: 27140 Comm: syz.1.9864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 561.108660][T27140] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 561.108666][T27140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.108675][T27140] Call Trace: [ 561.108680][T27140] [ 561.108686][T27140] dump_stack_lvl+0x100/0x190 [ 561.108708][T27140] dump_header+0xfb/0x606 [ 561.108725][T27140] oom_kill_process.cold+0xd/0x330 [ 561.108742][T27140] out_of_memory+0x340/0x14f0 [ 561.108769][T27140] ? __pfx_out_of_memory+0x10/0x10 [ 561.108797][T27140] mem_cgroup_out_of_memory+0xc6/0x130 [ 561.108815][T27140] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 561.108830][T27140] ? find_held_lock+0x2b/0x80 [ 561.108851][T27140] ? do_raw_spin_unlock+0x145/0x1e0 [ 561.108868][T27140] ? _raw_spin_unlock+0x28/0x50 [ 561.108887][T27140] try_charge_memcg+0x6e5/0xdf0 [ 561.108912][T27140] ? __pfx_try_charge_memcg+0x10/0x10 [ 561.108932][T27140] ? find_held_lock+0x2b/0x80 [ 561.108948][T27140] ? rcu_read_unlock+0x17/0x60 [ 561.108969][T27140] ? rcu_read_unlock+0x17/0x60 [ 561.108990][T27140] ? find_held_lock+0x2b/0x80 [ 561.109008][T27140] ? rcu_read_unlock+0x17/0x60 [ 561.109032][T27140] charge_memcg+0x187/0x1e0 [ 561.109054][T27140] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 561.109071][T27140] swap_cache_alloc_folio+0x548/0xc50 [ 561.109092][T27140] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 561.109108][T27140] ? swap_cache_get_folio+0x28d/0x360 [ 561.109130][T27140] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 561.109145][T27140] ? do_user_addr_fault+0x5a3/0x12f0 [ 561.109165][T27140] ? asm_exc_page_fault+0x26/0x30 [ 561.109184][T27140] swap_cache_read_folio+0x47/0x140 [ 561.109203][T27140] swap_cluster_readahead+0x387/0x5f0 [ 561.109223][T27140] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 561.109242][T27140] ? __lock_acquire+0x49f/0x1a40 [ 561.109269][T27140] ? __lock_acquire+0x49f/0x1a40 [ 561.109290][T27140] ? get_vma_policy+0x23d/0x3b0 [ 561.109314][T27140] swapin_readahead+0x159/0x1200 [ 561.109336][T27140] ? __pfx_swapin_readahead+0x10/0x10 [ 561.109357][T27140] ? swap_table_get+0x10d/0x2c0 [ 561.109372][T27140] ? swap_cache_get_folio+0x28d/0x360 [ 561.109388][T27140] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 561.109404][T27140] ? __pfx_softleaf_type+0x10/0x10 [ 561.109424][T27140] ? do_swap_page+0xf98/0x5780 [ 561.109437][T27140] do_swap_page+0xf98/0x5780 [ 561.109456][T27140] ? do_raw_spin_unlock+0x145/0x1e0 [ 561.109475][T27140] ? __pfx_do_swap_page+0x10/0x10 [ 561.109489][T27140] ? __lock_acquire+0x49f/0x1a40 [ 561.109510][T27140] ? fault_dirty_shared_page+0x16e/0x5a0 [ 561.109530][T27140] ? rcu_is_watching+0x12/0xc0 [ 561.109554][T27140] ? __pte_offset_map+0x179/0x310 [ 561.109580][T27140] __handle_mm_fault+0x192f/0x2a00 [ 561.109599][T27140] ? reacquire_held_locks+0xce/0x1e0 [ 561.109621][T27140] ? __pfx___handle_mm_fault+0x10/0x10 [ 561.109638][T27140] ? lock_vma_under_rcu+0x17c/0x590 [ 561.109668][T27140] handle_mm_fault+0x37b/0xa30 [ 561.109687][T27140] do_user_addr_fault+0x5a3/0x12f0 [ 561.109711][T27140] exc_page_fault+0x6f/0xd0 [ 561.109730][T27140] asm_exc_page_fault+0x26/0x30 [ 561.109744][T27140] RIP: 0033:0x7fb410a726e8 [ 561.109757][T27140] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 561.109771][T27140] RSP: 002b:00007fff3b0a6740 EFLAGS: 00010202 [ 561.109783][T27140] RAX: 0000001b34624000 RBX: ffffffff81b9040c RCX: 0000001b34623ff8 [ 561.109793][T27140] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fb411955700 [ 561.109801][T27140] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fb410e12000 [ 561.109810][T27140] R10: 00007fb411955700 R11: 0000000000000000 R12: 00007fb410e26038 [ 561.109819][T27140] R13: 0000000000000001 R14: ffffffff81b90d66 R15: 00007fb411955720 [ 561.109828][T27140] ? trace_page_fault_user+0x16/0x1f0 [ 561.109847][T27140] ? perf_trace_exceptions+0x10c/0x520 [ 561.109872][T27140] [ 561.109878][T27140] memory: usage 3072kB, limit 3072kB, failcnt 72995 [ 561.671748][T27140] memory+swap: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 561.680940][T27140] kmem: usage 2696kB, limit 9007199254740988kB, failcnt 0 [ 561.688868][T27140] Memory cgroup stats for /syz0: [ 561.688973][T27140] cache 0 [ 561.759219][T27140] rss 0 [ 561.769279][T27140] rss_huge 0 [ 561.779336][T27140] shmem 0 [ 561.788319][T27140] mapped_file 0 [ 561.800284][T27140] dirty 0 [ 561.816307][T27140] writeback 0 [ 561.827956][T27140] workingset_refault_anon 9640 [ 561.844468][T27140] workingset_refault_file 13397 [ 561.860708][T27140] swap 471040 [ 561.870757][T27140] swapcached 282271744 [ 561.885398][T27140] pgpgin 190023 [ 561.899716][T27140] pgpgout 198794 [ 561.913999][T27140] pgfault 463410 [ 561.950687][T27140] pgmajfault 2917 [ 561.977435][T27140] inactive_anon 16384 [ 561.992978][T27140] active_anon 0 [ 562.004463][T27140] inactive_file 0 [ 562.017219][T27140] active_file 0 [ 562.028056][T27140] unevictable 0 [ 562.051194][T27140] hierarchical_memory_limit 3145728 [ 562.069137][T27140] hierarchical_memsw_limit 9223372036854771712 [ 562.088851][T27140] total_cache 0 [ 562.107208][T27140] total_rss 0 [ 562.116632][T27140] total_rss_huge 0 [ 562.130648][T27140] total_shmem 0 [ 562.140222][T27140] total_mapped_file 0 [ 562.156541][T27140] total_dirty 0 [ 562.166262][T27140] total_writeback 0 [ 562.181144][T27140] total_workingset_refault_anon 9640 [ 562.203034][T27140] total_workingset_refault_file 13397 [ 562.234762][T27140] total_swap 471040 [ 562.268941][T27140] total_swapcached 282271744 [ 562.276278][T27171] NFSD: Failed to start, no listeners configured. [ 562.293457][T27140] total_pgpgin 190023 [ 562.316067][T27140] total_pgpgout 198794 [ 562.335601][T27140] total_pgfault 463410 [ 562.349448][T27140] total_pgmajfault 2917 [ 562.357650][T27140] total_inactive_anon 16384 [ 562.370877][T27140] total_active_anon 0 [ 562.379825][T27140] total_inactive_file 0 [ 562.390502][T27140] total_active_file 0 [ 562.414576][T27140] total_unevictable 0 [ 562.434627][T27140] anon_cost 3 [ 562.447667][T27140] file_cost 0 [ 562.458471][T27140] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9862,pid=27143,uid=0 [ 562.514883][T27140] Memory cgroup out of memory: Killed process 27143 (syz.0.9862) total-vm:102252kB, anon-rss:1260kB, file-rss:20724kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 562.659992][T27208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9882'. [ 563.890816][T27257] netlink: 'syz.2.9903': attribute type 2 has an invalid length. [ 564.075805][T27263] netlink: 21 bytes leftover after parsing attributes in process `syz.2.9906'. [ 564.270768][T27273] bridge0: port 3(team0) entered blocking state [ 564.311563][T27273] bridge0: port 3(team0) entered disabled state [ 564.342407][T27273] team0: entered allmulticast mode [ 564.366527][T27273] team_slave_0: entered allmulticast mode [ 564.393104][T27273] team_slave_1: entered allmulticast mode [ 564.475246][T27273] team0: entered promiscuous mode [ 564.506424][T27273] team_slave_0: entered promiscuous mode [ 564.522383][T27277] NFSD: Failed to start, no listeners configured. [ 564.531389][T27273] team_slave_1: entered promiscuous mode [ 564.552192][T27273] bridge0: port 3(team0) entered blocking state [ 564.560333][T27273] bridge0: port 3(team0) entered forwarding state [ 564.620720][T27284] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 565.658409][T27327] random: crng reseeded on system resumption [ 566.582110][T27362] Device name cannot be null; rc = [-22] [ 569.060166][T27437] NFSD: Failed to start, no listeners configured. [ 569.100416][T27446] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by "y)JOƱ\x0bLY_B㐌]yQ!ȹ_z\x0a:)[F +Β_-׆~ퟝ/vc.7ij\x1b/܋PE\x0ck\x0c)HO\x22}ӓ|T\x077B_ 84Ϣ6fM\x225T q\x0b2ޗ\x0d q\x22nF˘)(ŞZ1;B3v*,ܪ7Tp ~\x22wp3?-7*Ȼ\x0d-U٭$09Ʀ[\x09͢o)5A)>`!m<ac1#&~\x0b3>:\x0bGWfȍ\x0aU] e^y\x1bTEpi-]Z]ʥD.ip1;'~\x22FHa:_]7OUvY0:Uet#Ǎ̑[ZX96WS3Cx8 a1k _sm\x0a:p0uT`ƭ\x220E踣\x07/lQ=oGpc\x07C-t\x0b]x,xA2,rWy+۲F]2%xL}0]K\x0d\x09dY!zENm_ ѿS\x0aX!ŽVY<&H8Ze;\x09]B2yq#N7fẀs7)mI\x0cUw3а !%\x0aNQ6ؔ!4h[gq~̙K/$8+FθB#!6lv\x0c\x093;8YXXJo\x5cm1\x09*g2!΂dhީRʷƴ%yG*=t [ 574.132765][ T5626] dump_stack_lvl+0x100/0x190 [ 574.132786][ T5626] dump_header+0xfb/0x606 [ 574.132810][ T5626] oom_kill_process.cold+0xd/0x330 [ 574.132828][ T5626] out_of_memory+0x340/0x14f0 [ 574.132855][ T5626] ? __pfx_out_of_memory+0x10/0x10 [ 574.132882][ T5626] mem_cgroup_out_of_memory+0xc6/0x130 [ 574.132904][ T5626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 574.132919][ T5626] ? find_held_lock+0x2b/0x80 [ 574.132941][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 574.132957][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 574.132978][ T5626] try_charge_memcg+0x6e5/0xdf0 [ 574.133003][ T5626] ? __pfx_try_charge_memcg+0x10/0x10 [ 574.133022][ T5626] ? find_held_lock+0x2b/0x80 [ 574.133039][ T5626] ? rcu_read_unlock+0x17/0x60 [ 574.133060][ T5626] ? rcu_read_unlock+0x17/0x60 [ 574.133081][ T5626] ? find_held_lock+0x2b/0x80 [ 574.133098][ T5626] ? rcu_read_unlock+0x17/0x60 [ 574.133123][ T5626] charge_memcg+0x187/0x1e0 [ 574.133144][ T5626] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 574.133161][ T5626] swap_cache_alloc_folio+0x548/0xc50 [ 574.133182][ T5626] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 574.133199][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 574.133214][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 574.133236][ T5626] swap_cache_read_folio+0x47/0x140 [ 574.133255][ T5626] swap_cluster_readahead+0x479/0x5f0 [ 574.133272][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 574.133295][ T5626] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 574.133321][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 574.133342][ T5626] ? get_vma_policy+0x23d/0x3b0 [ 574.133365][ T5626] swapin_readahead+0x159/0x1200 [ 574.133381][ T5626] ? debug_object_assert_init+0x1c4/0x310 [ 574.133409][ T5626] ? __pfx_swapin_readahead+0x10/0x10 [ 574.133430][ T5626] ? swap_table_get+0x10d/0x2c0 [ 574.133445][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 574.133461][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 574.133479][ T5626] ? __pfx_softleaf_type+0x10/0x10 [ 574.133498][ T5626] ? do_swap_page+0xf98/0x5780 [ 574.133511][ T5626] do_swap_page+0xf98/0x5780 [ 574.133534][ T5626] ? __pfx_do_swap_page+0x10/0x10 [ 574.133549][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 574.133570][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 574.133590][ T5626] ? rcu_is_watching+0x12/0xc0 [ 574.133607][ T5626] ? __pte_offset_map+0x179/0x310 [ 574.133628][ T5626] __handle_mm_fault+0x192f/0x2a00 [ 574.133646][ T5626] ? reacquire_held_locks+0xce/0x1e0 [ 574.133669][ T5626] ? __pfx___handle_mm_fault+0x10/0x10 [ 574.133686][ T5626] ? lock_vma_under_rcu+0x17c/0x590 [ 574.133711][ T5626] handle_mm_fault+0x37b/0xa30 [ 574.133729][ T5626] do_user_addr_fault+0x5a3/0x12f0 [ 574.133754][ T5626] exc_page_fault+0x6f/0xd0 [ 574.133773][ T5626] asm_exc_page_fault+0x26/0x30 [ 574.133787][ T5626] RIP: 0033:0x7fe99995e84e [ 574.133804][ T5626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.133818][ T5626] RSP: 002b:00007ffc686871d8 EFLAGS: 00010246 [ 574.133831][ T5626] RAX: 0000000000000000 RBX: 000055555a09c500 RCX: 00007fe99995e84e [ 574.133840][ T5626] RDX: 00007ffc68687230 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.133848][ T5626] RBP: 00007ffc6868729c R08: 0000000000000000 R09: 0000000000000000 [ 574.133857][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 574.133865][ T5626] R13: 00000000000927c0 R14: 000000000008caee R15: 00007ffc686872f0 [ 574.133884][ T5626] [ 574.611877][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10078'. [ 574.621047][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10078'. [ 575.417923][ T5626] memory: usage 3072kB, limit 3072kB, failcnt 77992 [ 575.445393][ T5626] memory+swap: usage 3652kB, limit 9007199254740988kB, failcnt 0 [ 575.482253][ T5626] kmem: usage 3064kB, limit 9007199254740988kB, failcnt 0 [ 575.515593][ T5626] Memory cgroup stats for /syz0: [ 575.515697][ T5626] cache 4096 [ 575.553324][ T5626] rss 0 [ 575.566609][ T5626] rss_huge 0 [ 575.596024][ T5626] shmem 4096 [ 575.605384][ T5626] mapped_file 4096 [ 575.620570][ T5626] dirty 0 [ 575.633137][ T5626] writeback 0 [ 575.652560][ T5626] workingset_refault_anon 10182 [ 575.673732][ T5626] workingset_refault_file 13397 [ 575.709927][ T5626] swap 593920 [ 575.718190][ T5626] swapcached 327315456 [ 575.734901][ T5626] pgpgin 198648 [ 575.752781][ T5626] pgpgout 210858 [ 575.768140][ T5626] pgfault 478388 [ 575.782632][ T5626] pgmajfault 3150 [ 575.801476][ T5626] inactive_anon 8192 [ 575.816466][ T5626] active_anon 0 [ 575.826478][ T5626] inactive_file 0 [ 575.839893][ T5626] active_file 0 [ 575.851118][ T5626] unevictable 0 [ 575.863074][ T5626] hierarchical_memory_limit 3145728 [ 627.735730][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.916253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.928864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.942456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.954849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.968465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.980748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.994277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.006518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.020109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.032552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.892325][ C0] net_ratelimit: 5414 callbacks suppressed [ 636.892343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.910535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.924196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.936549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.950246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.962519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.976282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.988660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.002687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.016076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.876833][ C0] net_ratelimit: 5398 callbacks suppressed [ 641.876849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.894984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.908694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.921181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.934777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.947148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.960654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.972921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.986470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.998734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.860633][ C0] net_ratelimit: 8366 callbacks suppressed [ 646.860650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.878766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.891089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 646.903457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.917098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.929390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.941703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 646.954106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.967585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.979873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.844775][ C0] net_ratelimit: 8454 callbacks suppressed [ 651.844791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.862972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.875497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 651.887891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.901466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.913776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.926118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 651.938527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.952457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.964720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.827962][ C0] net_ratelimit: 8403 callbacks suppressed [ 656.827979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.846179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 656.858460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.871969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.884429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.896846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 656.909185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.922710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.934984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.947343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 661.812693][ C0] net_ratelimit: 8345 callbacks suppressed [ 661.812709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.830902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.843292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 661.855624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.869129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.881416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.893748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 661.906461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.919949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.932383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.796362][ C0] net_ratelimit: 8399 callbacks suppressed [ 666.796379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.814494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 666.826911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.840529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.852844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.865230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 666.877464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.891000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.903306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.915648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 671.781501][ C0] net_ratelimit: 8485 callbacks suppressed [ 671.781519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.799691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.812052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 671.824316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.837822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.850102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.862413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 671.874666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.888123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.900390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.764698][ C0] net_ratelimit: 8458 callbacks suppressed [ 676.764715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.782882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.795265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 676.807550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.821414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.833736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.846035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 676.858486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.872410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.884682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.022483][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 679.029451][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27641/2:b..l [ 679.037974][ C0] rcu: (detected by 0, t=10502 jiffies, g=172349, q=3807 ncpus=1) [ 679.045971][ C0] task:syz.0.10072 state:R running task stack:22104 pid:27641 tgid:27637 ppid:5626 task_flags:0x400840 flags:0x00080000 [ 679.061028][ C0] Call Trace: [ 679.064318][ C0] [ 679.067239][ C0] __schedule+0x125c/0x6730 [ 679.071741][ C0] ? do_user_addr_fault+0x74c/0x12f0 [ 679.077015][ C0] ? unwind_get_return_address+0x59/0xa0 [ 679.082647][ C0] ? arch_stack_walk+0x88/0xf0 [ 679.087400][ C0] ? __pfx___schedule+0x10/0x10 [ 679.092239][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.096994][ C0] preempt_schedule_irq+0x50/0x90 [ 679.102006][ C0] irqentry_exit+0x205/0xa00 [ 679.106584][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.112552][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 679.118177][ C0] Code: ff ff ff ff 65 0f c1 15 19 d5 ab 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 fc 40 03 00 c3 cc cc cc cc 31 c0 [ 679.137767][ C0] RSP: 0018:ffffc900068f6be0 EFLAGS: 00000292 [ 679.143817][ C0] RAX: 0000000000000001 RBX: ffffffff8ebe8000 RCX: 0000000000000001 [ 679.151768][ C0] RDX: 0000000000000046 RSI: ffffffff8e183b9b RDI: ffffffff8c400a80 [ 679.159719][ C0] RBP: ffff888033ddbe00 R08: 0000000000000005 R09: 0000000000000000 [ 679.167673][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 679.175624][ C0] R13: 0000000000000246 R14: ffff888033ddc9a0 R15: 0000000000000000 [ 679.183596][ C0] xas_start+0x478/0x790 [ 679.187834][ C0] xas_load+0x1e/0x5c0 [ 679.191910][ C0] xa_load+0xf8/0x2c0 [ 679.195884][ C0] ? __pfx_xa_load+0x10/0x10 [ 679.200464][ C0] ? list_lru_count_one+0x147/0x320 [ 679.205647][ C0] list_lru_count_one+0x1b7/0x320 [ 679.210741][ C0] super_cache_count+0x1dc/0x290 [ 679.215666][ C0] do_shrink_slab+0x83/0x1200 [ 679.220338][ C0] ? find_held_lock+0x2b/0x80 [ 679.224998][ C0] ? shrink_slab+0xa52/0x12e0 [ 679.229655][ C0] ? shrink_slab+0xa52/0x12e0 [ 679.234317][ C0] shrink_slab+0xa7d/0x12e0 [ 679.238816][ C0] ? shrink_slab+0x690/0x12e0 [ 679.243479][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 679.248418][ C0] ? __pfx___might_resched+0x10/0x10 [ 679.253708][ C0] ? page_counter_calculate_protection+0x344/0x730 [ 679.260298][ C0] shrink_node+0x7ea/0x3e90 [ 679.264813][ C0] ? __pfx_shrink_node+0x10/0x10 [ 679.269759][ C0] ? __lock_acquire+0x49f/0x1a40 [ 679.274695][ C0] ? do_try_to_free_pages+0x33e/0x16d0 [ 679.280148][ C0] do_try_to_free_pages+0x33e/0x16d0 [ 679.285436][ C0] ? __lock_acquire+0x49f/0x1a40 [ 679.290367][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 679.296098][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 679.301286][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 679.307165][ C0] ? psi_group_change+0x457/0xa20 [ 679.312175][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 679.318580][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 679.323763][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 679.328945][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 679.334127][ C0] try_charge_memcg+0x47f/0xdf0 [ 679.338981][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 679.344342][ C0] ? find_held_lock+0x2b/0x80 [ 679.349006][ C0] ? rcu_read_unlock+0x17/0x60 [ 679.353934][ C0] ? rcu_read_unlock+0x17/0x60 [ 679.358690][ C0] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 679.364664][ C0] ? kasan_unpoison+0x27/0x60 [ 679.369324][ C0] __kmalloc_node_track_caller_noprof+0x64f/0x830 [ 679.375737][ C0] ? __alloc_skb+0x185/0x710 [ 679.380318][ C0] kmalloc_reserve+0xe8/0x350 [ 679.384979][ C0] __alloc_skb+0x185/0x710 [ 679.389382][ C0] ? __alloc_skb+0x5b7/0x710 [ 679.393956][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 679.398885][ C0] alloc_skb_with_frags+0xdd/0x760 [ 679.403991][ C0] sock_alloc_send_pskb+0x801/0x980 [ 679.409188][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 679.414904][ C0] ? find_held_lock+0x2b/0x80 [ 679.419568][ C0] ? sock_def_readable+0x1d2/0x600 [ 679.424661][ C0] ? sock_def_readable+0x1d2/0x600 [ 679.429761][ C0] unix_dgram_sendmsg+0x3c7/0x1810 [ 679.434965][ C0] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 679.441427][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 679.448180][ C0] ? iovec_from_user+0xda/0x140 [ 679.453063][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 679.458596][ C0] ? __import_iovec+0x1d2/0x640 [ 679.463430][ C0] ? apparmor_socket_sendmsg+0x15b/0x270 [ 679.469111][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 679.473859][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 679.479389][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.484665][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.489425][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 679.494258][ C0] ? kfree+0x1e5/0x6c0 [ 679.498341][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 679.504767][ C0] ___sys_sendmsg+0x190/0x1e0 [ 679.509470][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.514656][ C0] ? do_user_addr_fault+0x7de/0x12f0 [ 679.519958][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 679.525164][ C0] ? __pfx___might_resched+0x10/0x10 [ 679.530477][ C0] __sys_sendmmsg+0x20c/0x440 [ 679.535151][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.540337][ C0] ? __lock_acquire+0x49f/0x1a40 [ 679.545277][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.551087][ C0] ? kcov_ioctl+0x17a/0x750 [ 679.555589][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 679.560518][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 679.565714][ C0] do_syscall_64+0x115/0x840 [ 679.570293][ C0] ? clear_bhb_loop+0x40/0x90 [ 679.574955][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.580829][ C0] RIP: 0033:0x7fe99999e019 [ 679.585224][ C0] RSP: 002b:00007fe99a807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.593790][ C0] RAX: ffffffffffffffda RBX: 00007fe999c26090 RCX: 00007fe99999e019 [ 679.601741][ C0] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 679.609691][ C0] RBP: 00007fe999a3500c R08: 0000000000000000 R09: 0000000000000000 [ 679.617643][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 679.625596][ C0] R13: 00007fe999c26128 R14: 00007fe999c26090 R15: 00007ffc68686ef8 [ 679.633576][ C0] [ 679.636589][ C0] rcu: rcu_preempt kthread starved for 1025 jiffies! g172349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 679.647794][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 679.657751][ C0] rcu: RCU grace-period kthread stack dump: [ 679.663622][ C0] task:rcu_preempt state:R running task stack:28888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 679.677234][ C0] Call Trace: [ 679.680504][ C0] [ 679.683423][ C0] __schedule+0x125c/0x6730 [ 679.687926][ C0] ? __pfx___schedule+0x10/0x10 [ 679.692768][ C0] ? find_held_lock+0x2b/0x80 [ 679.697431][ C0] ? schedule+0x225/0x2c0 [ 679.701748][ C0] schedule+0xdd/0x2c0 [ 679.705799][ C0] schedule_timeout+0x127/0x280 [ 679.710647][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 679.716022][ C0] ? __pfx_process_timeout+0x10/0x10 [ 679.721312][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 679.727120][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 679.732571][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 679.737325][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 679.742607][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 679.747535][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 679.752720][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.757475][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.763271][ C0] rcu_gp_kthread+0x179/0x230 [ 679.767940][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 679.773140][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.778933][ C0] ? __kthread_parkme+0x18c/0x230 [ 679.783946][ C0] ? kthread+0x13a/0x450 [ 679.788191][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 679.793377][ C0] kthread+0x370/0x450 [ 679.797446][ C0] ? __pfx_kthread+0x10/0x10 [ 679.802037][ C0] ret_from_fork+0x72b/0xd50 [ 679.806613][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 679.811712][ C0] ? __switch_to+0x800/0x10f0 [ 679.816387][ C0] ? __switch_to_asm+0x39/0x70 [ 679.821138][ C0] ? __pfx_kthread+0x10/0x10 [ 679.825729][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.830492][ C0] [ 679.833506][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 679.839828][ C0] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 679.851100][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 679.856269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.866393][ C0] Workqueue: bat_events batadv_dat_purge [ 679.872099][ C0] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 679.877991][ C0] Code: 20 48 c7 c7 c0 09 40 8c e8 7d af 69 f5 e8 08 47 bc f5 eb ac 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c6 00 0a 40 8c 48 c7 c7 40 0a 40 8c e9 f9 fe ff [ 679.897619][ C0] RSP: 0018:ffffc90000006c50 EFLAGS: 00000283 [ 679.903684][ C0] RAX: 0000000000000000 RBX: ffffffff8ebe8000 RCX: ffffffff91c35201 [ 679.911820][ C0] RDX: 0000000000000000 RSI: ffffffff81b806be RDI: ffffffff8ebe8000 [ 679.919783][ C0] RBP: ffffffff81b806be R08: 0000000000000001 R09: 0000000000000007 [ 679.927733][ C0] R10: 0000000000000200 R11: 000000000000ad8d R12: ffffc90000006d78 [ 679.935683][ C0] R13: ffffc90000006d28 R14: ffffc9000e2f7f48 R15: ffffc90000006d5c [ 679.943633][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 679.952549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.959120][ C0] CR2: 00007fdcd65e6e34 CR3: 000000007743a000 CR4: 00000000003526f0 [ 679.967071][ C0] Call Trace: [ 679.970332][ C0] [ 679.973155][ C0] rcu_is_watching+0x12/0xc0 [ 679.977735][ C0] ? unwind_next_frame+0x3be/0x2090 [ 679.982919][ C0] lock_release+0x24d/0x310 [ 679.987409][ C0] unwind_next_frame+0x3c3/0x2090 [ 679.992455][ C0] ? ret_from_fork+0x72b/0xd50 [ 679.997204][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 680.002387][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 680.008540][ C0] arch_stack_walk+0x94/0xf0 [ 680.013120][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 680.018047][ C0] stack_trace_save+0x8e/0xc0 [ 680.022707][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 680.028064][ C0] ? lock_acquire+0x1b9/0x370 [ 680.032728][ C0] kasan_save_stack+0x30/0x50 [ 680.037390][ C0] ? kasan_save_stack+0x30/0x50 [ 680.042240][ C0] ? kasan_save_track+0x14/0x30 [ 680.047074][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 680.052084][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 680.057701][ C0] ? skb_ext_add+0xfa/0x810 [ 680.062259][ C0] ? br_nf_forward_ip.part.0+0x28/0x820 [ 680.067923][ C0] ? br_nf_forward+0xfe5/0x19f0 [ 680.072752][ C0] ? nf_hook_slow+0xbf/0x220 [ 680.077375][ C0] ? __br_forward+0x2f7/0x970 [ 680.082095][ C0] ? maybe_deliver+0xf0/0x180 [ 680.086755][ C0] ? br_flood+0x29b/0x7b0 [ 680.091085][ C0] ? br_handle_frame_finish+0x1014/0x1fa0 [ 680.096803][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 680.101913][ C0] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 680.108081][ C0] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 680.113610][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 680.118792][ C0] ? br_handle_frame+0xce9/0x1540 [ 680.123807][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 680.130746][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 680.136712][ C0] ? __netif_receive_skb+0x1f/0x120 [ 680.141897][ C0] ? process_backlog+0x37a/0x1580 [ 680.146902][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 680.152428][ C0] ? net_rx_action+0xa40/0xf20 [ 680.157197][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 680.162133][ C0] ? do_softirq+0xac/0xe0 [ 680.166450][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 680.171716][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 680.177505][ C0] ? batadv_dat_purge+0x4b/0xa0 [ 680.182348][ C0] ? process_one_work+0xa23/0x1940 [ 680.187447][ C0] ? rescuer_thread+0x905/0x14a0 [ 680.192383][ C0] ? kthread+0x370/0x450 [ 680.196622][ C0] ? ret_from_fork+0x72b/0xd50 [ 680.201383][ C0] kasan_save_track+0x14/0x30 [ 680.206042][ C0] __kasan_slab_alloc+0x89/0x90 [ 680.210874][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 680.216313][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 680.221495][ C0] ? skb_ext_add+0xfa/0x810 [ 680.225982][ C0] skb_ext_add+0xfa/0x810 [ 680.230298][ C0] ? lock_acquire+0x1b9/0x370 [ 680.234965][ C0] ? find_held_lock+0x2b/0x80 [ 680.239623][ C0] ? net_generic+0xea/0x2a0 [ 680.244266][ C0] br_nf_forward_ip.part.0+0x28/0x820 [ 680.249629][ C0] br_nf_forward+0xfe5/0x19f0 [ 680.254303][ C0] nf_hook_slow+0xbf/0x220 [ 680.258720][ C0] __br_forward+0x2f7/0x970 [ 680.263210][ C0] ? __pfx___br_forward+0x10/0x10 [ 680.268237][ C0] ? __asan_memcpy+0x3c/0x60 [ 680.272903][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 680.278358][ C0] ? __skb_clone+0x570/0x760 [ 680.282939][ C0] maybe_deliver+0xf0/0x180 [ 680.287435][ C0] br_flood+0x29b/0x7b0 [ 680.291580][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 680.297116][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 680.303016][ C0] ? __lock_acquire+0x49f/0x1a40 [ 680.307940][ C0] ? nf_hook_slow+0x167/0x220 [ 680.312600][ C0] br_nf_hook_thresh+0x30d/0x420 [ 680.317515][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 680.323394][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 680.328835][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 680.334720][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.340710][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.346602][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 680.352585][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 680.358479][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 680.363857][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 680.369747][ C0] ? lock_acquire+0x1b9/0x370 [ 680.374416][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 680.380898][ C0] ? net_generic+0xea/0x2a0 [ 680.385394][ C0] br_nf_pre_routing+0x90f/0x1560 [ 680.390403][ C0] br_handle_frame+0xce9/0x1540 [ 680.395254][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 680.400554][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 680.406438][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 680.411716][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 680.418382][ C0] ? kmem_cache_free+0x127/0x6b0 [ 680.423300][ C0] ? skb_release_data+0x6ca/0x8e0 [ 680.428307][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 680.435400][ C0] ? kfree_skbmem+0x19f/0x210 [ 680.440059][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 680.445244][ C0] ? ip6_mc_input+0x51a/0xf50 [ 680.449980][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 680.454993][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 680.460965][ C0] ? __lock_acquire+0x49f/0x1a40 [ 680.465898][ C0] ? process_backlog+0x32a/0x1580 [ 680.470905][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 680.476711][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 680.483109][ C0] ? lock_acquire+0x1b9/0x370 [ 680.487777][ C0] ? process_backlog+0x32a/0x1580 [ 680.492785][ C0] ? process_backlog+0x32a/0x1580 [ 680.497789][ C0] __netif_receive_skb+0x1f/0x120 [ 680.502797][ C0] process_backlog+0x37a/0x1580 [ 680.507636][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 680.512993][ C0] net_rx_action+0xa40/0xf20 [ 680.517571][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 680.522663][ C0] ? mark_held_locks+0x40/0x70 [ 680.527430][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 680.532613][ C0] ? tmigr_handle_remote+0x132/0x380 [ 680.537908][ C0] ? run_timer_base+0x121/0x190 [ 680.542762][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 680.547970][ C0] handle_softirqs+0x1ea/0x9b0 [ 680.552751][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 680.558031][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 680.563302][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 680.569090][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 680.574702][ C0] do_softirq+0xac/0xe0 [ 680.579016][ C0] [ 680.581925][ C0] [ 680.584834][ C0] __local_bh_enable_ip+0xf8/0x120 [ 680.589924][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 680.595664][ C0] batadv_dat_purge+0x4b/0xa0 [ 680.600341][ C0] process_one_work+0xa23/0x1940 [ 680.605279][ C0] ? __pfx_process_one_work+0x10/0x10 [ 680.610674][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 680.616032][ C0] rescuer_thread+0x905/0x14a0 [ 680.620787][ C0] ? rescuer_thread+0x240/0x14a0 [ 680.625731][ C0] ? rescuer_thread+0x118/0x14a0 [ 680.630656][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 680.635841][ C0] ? __kthread_parkme+0x18c/0x230 [ 680.640850][ C0] ? kthread+0x13a/0x450 [ 680.645077][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 680.650274][ C0] kthread+0x370/0x450 [ 680.654341][ C0] ? __pfx_kthread+0x10/0x10 [ 680.658926][ C0] ret_from_fork+0x72b/0xd50 [ 680.663519][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 680.668657][ C0] ? __switch_to+0x800/0x10f0 [ 680.673337][ C0] ? __switch_to_asm+0x39/0x70 [ 680.678181][ C0] ? __pfx_kthread+0x10/0x10 [ 680.682762][ C0] ret_from_fork_asm+0x1a/0x30 [ 680.687529][ C0] [ 680.722057][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.748749][ C0] net_ratelimit: 5370 callbacks suppressed [ 681.748764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.766947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.779327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 681.791770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.805481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.817903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.830215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 681.842519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.856320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.868671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.732397][ C0] net_ratelimit: 7756 callbacks suppressed [ 686.732413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 686.750692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.764446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.776792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.789394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 686.801996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.815734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.828051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.840398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:b7:f0:03:ff:fe, vlan:0) [ 686.852698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)