last executing test programs: 3.315100675s ago: executing program 3 (id=10808): socket(0x25, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 2.804363168s ago: executing program 0 (id=10814): prctl$auto(0x35, 0x8, 0x10, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x3) 2.760506909s ago: executing program 3 (id=10815): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf256700000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) 2.417137364s ago: executing program 0 (id=10818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0x103) 2.35511584s ago: executing program 3 (id=10820): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x7, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffd, 0x4000000000009, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.978608809s ago: executing program 0 (id=10824): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) 1.638412419s ago: executing program 2 (id=10826): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 1.571460607s ago: executing program 1 (id=10827): r0 = socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop3/queue/write_same_max_bytes\x00', 0x800, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) 1.552332346s ago: executing program 3 (id=10828): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0)="ba908b95dbceaad43fff4646a4bc807b814a00c5", 0x1) 1.502403051s ago: executing program 0 (id=10829): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r0 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 1.417622197s ago: executing program 2 (id=10830): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sysfs$auto(0x2, 0x47, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) 1.295458348s ago: executing program 1 (id=10831): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002b, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 1.203143659s ago: executing program 2 (id=10832): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0x2, 0x801, 0x6) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xa4) 1.13238013s ago: executing program 3 (id=10833): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) 1.081354164s ago: executing program 1 (id=10834): mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) 995.111866ms ago: executing program 0 (id=10835): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) unshare$auto(0xffffffffffffffff) socket(0x28, 0x5, 0x0) 989.184195ms ago: executing program 2 (id=10836): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/inflight\x00', 0x2240, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/12, 0xc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x5) 884.446306ms ago: executing program 1 (id=10837): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, r0, 0x5, 0x1, 0x1, 0x40006, 0xffffffffffffffff, 0x5, 0x42}, 0x9) 725.748771ms ago: executing program 3 (id=10838): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x98) 701.776826ms ago: executing program 2 (id=10839): r0 = socket(0x2, 0x1, 0x106) setreuid$auto(0xffffffffffffffff, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4) 630.443983ms ago: executing program 1 (id=10840): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x1, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e1ca6300ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1, 0x0) 46.084406ms ago: executing program 0 (id=10841): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 260 [ 457.825660][T14402] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 457.846622][T14402] Bluetooth: hci1: Dropping invalid advertising data [ 457.853959][T14402] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 457.920244][T20443] bond0: option slaves: interface - does not exist! [ 458.358614][T20458] ima: policy update failed [ 458.406965][ T30] audit: type=1802 audit(4294967386.956:34): pid=20458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6729" res=0 errno=0 [ 458.586746][T20465] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 461.392854][T20559] Malformed UNC in devname [ 461.392854][T20559] [ 461.420915][T20559] CIFS: VFS: Malformed UNC in devname [ 461.467640][T20562] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 468.354903][T20784] cougar: G6 mapped to space [ 469.879191][T20827] deleting an unspecified loop device is not supported. [ 472.550267][T20934] zswap: compressor d_ not available [ 474.967304][T21023] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 475.182609][T21029] mmap: syz.3.6981 (21029): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 478.747923][T21150] Line length is too long: Should be less than 4094 [ 479.872763][T21186] mmap: syz.3.7059 (21186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 482.952291][T21287] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 483.090180][T21295] vhci_hcd: not connected 4 [ 487.393353][T21440] usbcore.quirks: string doesn't fit in 127 chars. [ 491.556239][T21584] bonding: no command found in bonding_masters - use +ifname or -ifname [ 494.614156][T21671] batman_adv: Routing algorithm '7' is not supported [ 494.987153][ T30] audit: type=1806 audit(4294967423.726:35): xattr="." res=0 [ 495.772452][ T30] audit: type=1800 audit(4294967424.510:36): pid=21706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7298" name="members" dev="configfs" ino=55957 res=0 errno=0 [ 496.069823][T21714] vivid-003: ================= START STATUS ================= [ 496.110071][T21714] vivid-003: Radio HW Seek Mode: Bounded [ 496.116214][T21714] vivid-003: Radio Programmable HW Seek: false [ 496.172743][T21714] vivid-003: RDS Rx I/O Mode: Block I/O [ 496.195625][T21714] vivid-003: Generate RBDS Instead of RDS: false [ 496.223259][T21714] vivid-003: RDS Reception: true [ 496.243444][T21714] vivid-003: RDS Program Type: 0 inactive [ 496.277911][T21714] vivid-003: RDS PS Name: inactive [ 496.296344][T21714] vivid-003: RDS Radio Text: inactive [ 496.332890][T21714] vivid-003: RDS Traffic Announcement: false inactive [ 496.363279][T21714] vivid-003: RDS Traffic Program: false inactive [ 496.398441][T21714] vivid-003: RDS Music: false inactive [ 496.426538][T21714] vivid-003: ================== END STATUS ================== [ 497.285033][ T30] audit: type=1800 audit(4294967426.048:37): pid=21750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7319" name="members" dev="configfs" ino=56095 res=0 errno=0 [ 498.630966][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.638419][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.102214][T21805] netlink: 'syz.0.7346': attribute type 11 has an invalid length. [ 499.143321][T21805] netlink: 'syz.0.7346': attribute type 11 has an invalid length. [ 499.165988][T21805] netlink: 'syz.0.7346': attribute type 11 has an invalid length. [ 499.198331][T21805] netlink: 'syz.0.7346': attribute type 11 has an invalid length. [ 499.885962][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.892653][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.930732][T21897] netlink: Setting conntrack mark requires 'commit' flag. [ 503.325436][T21927] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 505.361363][T21998] netlink: 'syz.1.7433': attribute type 11 has an invalid length. [ 505.383989][T21997] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 505.401358][T21998] netlink: 'syz.1.7433': attribute type 11 has an invalid length. [ 505.423186][T21997] vhci_hcd vhci_hcd.1: invalid port number 47 [ 505.429398][T21997] vhci_hcd vhci_hcd.1: default hub control req: 2f64 v7665 i002f l25710 [ 505.460870][T21998] netlink: 'syz.1.7433': attribute type 11 has an invalid length. [ 505.482161][T21998] netlink: 'syz.1.7433': attribute type 11 has an invalid length. [ 506.316703][T22023] netlink: 'syz.0.7442': attribute type 2 has an invalid length. [ 506.347110][T22027] syz.3.7444: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 506.409118][T22027] CPU: 0 UID: 0 PID: 22027 Comm: syz.3.7444 Tainted: G U I syzkaller #0 PREEMPT(full) [ 506.409161][T22027] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 506.409171][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.409205][T22027] Call Trace: [ 506.409213][T22027] [ 506.409222][T22027] dump_stack_lvl+0x100/0x190 [ 506.409284][T22027] warn_alloc.cold+0x95/0x1c1 [ 506.409330][T22027] ? __pfx_warn_alloc+0x10/0x10 [ 506.409371][T22027] ? __lock_acquire+0x4a5/0x2630 [ 506.409429][T22027] __vmalloc_node_range_noprof+0x1252/0x1530 [ 506.409465][T22027] ? rcu_is_watching+0x12/0xc0 [ 506.409508][T22027] ? trace_contention_end+0x140/0x180 [ 506.409543][T22027] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 506.409661][T22027] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 506.409695][T22027] ? tomoyo_path_number_perm+0x28f/0x580 [ 506.409778][T22027] ? tomoyo_path_number_perm+0x28f/0x580 [ 506.409826][T22027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 506.409858][T22027] ? __pfx___mutex_lock+0x10/0x10 [ 506.409931][T22027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.409976][T22027] ? futex_wake+0x1ad/0x530 [ 506.410017][T22027] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 506.410054][T22027] __vmalloc_node_noprof+0xad/0xf0 [ 506.410084][T22027] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 506.410125][T22027] dvb_dvr_do_ioctl+0x15d/0x270 [ 506.410165][T22027] dvb_usercopy+0x167/0x340 [ 506.410198][T22027] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 506.410235][T22027] ? __pfx_dvb_usercopy+0x10/0x10 [ 506.410280][T22027] ? __fget_files+0x21f/0x3d0 [ 506.410324][T22027] dvb_dvr_ioctl+0x29/0x40 [ 506.410361][T22027] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 506.410396][T22027] __x64_sys_ioctl+0x18e/0x210 [ 506.410439][T22027] do_syscall_64+0x106/0xf80 [ 506.410467][T22027] ? clear_bhb_loop+0x40/0x90 [ 506.410497][T22027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.410523][T22027] RIP: 0033:0x7f777999c799 [ 506.410543][T22027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.410567][T22027] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.410596][T22027] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 506.410612][T22027] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 506.410627][T22027] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 506.410642][T22027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.410656][T22027] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 506.410687][T22027] [ 506.690427][T22027] Mem-Info: [ 506.693923][T22027] active_anon:8500 inactive_anon:0 isolated_anon:0 [ 506.693923][T22027] active_file:14934 inactive_file:38938 isolated_file:0 [ 506.693923][T22027] unevictable:768 dirty:26 writeback:0 [ 506.693923][T22027] slab_reclaimable:11572 slab_unreclaimable:91564 [ 506.693923][T22027] mapped:25610 shmem:4303 pagetables:1128 [ 506.693923][T22027] sec_pagetables:0 bounce:0 [ 506.693923][T22027] kernel_misc_reclaimable:0 [ 506.693923][T22027] free:1328792 free_pcp:8038 free_cma:0 [ 506.740483][T22027] Node 0 active_anon:34000kB inactive_anon:0kB active_file:59736kB inactive_file:155620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102440kB dirty:104kB writeback:0kB shmem:15676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:10720kB pagetables:4352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.773627][T22027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.803790][T22027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.834867][T22027] lowmem_reserve[]: 0 2477 2479 2479 2479 [ 506.841395][T22027] Node 0 DMA32 free:1361588kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34000kB inactive_anon:0kB active_file:59736kB inactive_file:155620kB unevictable:1536kB writepending:104kB zspages:4kB present:3129332kB managed:2537444kB mlocked:0kB bounce:0kB free_pcp:31820kB local_pcp:31820kB free_cma:0kB [ 506.874995][T22027] lowmem_reserve[]: 0 0 1 1 1 [ 506.879806][T22027] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.909684][T22027] lowmem_reserve[]: 0 0 0 0 0 [ 506.914581][T22027] Node 1 Normal free:3938216kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:332kB local_pcp:332kB free_cma:0kB [ 506.953661][T22027] lowmem_reserve[]: 0 0 0 0 0 [ 506.962916][T22027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.992803][T22027] Node 0 DMA32: 5492*4kB (UME) 3327*8kB (UM) 2143*16kB (UME) 686*32kB (UM) 557*64kB (UME) 406*128kB (UME) 308*256kB (UME) 260*512kB (UME) 162*1024kB (UME) 50*2048kB (U) 168*4096kB (UM) = 1360824kB [ 507.032593][T22027] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 507.095362][T22027] Node 1 Normal: 13*4kB (UE) 14*8kB (U) 13*16kB (UME) 15*32kB (UME) 10*64kB (UE) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 957*4096kB (UM) = 3938260kB [ 507.132091][T22027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.172299][T22027] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 507.224755][T22027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.251869][T22027] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 507.271348][T22027] 61305 total pagecache pages [ 507.276063][T22027] 1 pages in swap cache [ 507.280246][T22027] Free swap = 124988kB [ 507.301460][T22027] Total swap = 124996kB [ 507.305685][T22027] 2097051 pages RAM [ 507.309501][T22027] 0 pages HighMem/MovableOnly [ 507.331029][T22027] 430810 pages reserved [ 507.335243][T22027] 0 pages cma reserved [ 507.765584][T22035] netlink: 'syz.2.7447': attribute type 11 has an invalid length. [ 507.765632][T22035] netlink: 'syz.2.7447': attribute type 11 has an invalid length. [ 507.765648][T22035] netlink: 'syz.2.7447': attribute type 11 has an invalid length. [ 507.765663][T22035] netlink: 'syz.2.7447': attribute type 11 has an invalid length. [ 508.019029][T22049] Zero length message leads to an empty skb [ 508.595562][T22065] bond0: option arp_validate: invalid value () [ 508.958549][T22076] syz_tun: tun_chr_ioctl cmd 1074025684 [ 509.131372][T22078] netlink: 'syz.3.7466': attribute type 11 has an invalid length. [ 509.158971][T22078] netlink: 'syz.3.7466': attribute type 11 has an invalid length. [ 510.116553][T22110] sd 0:0:1:0: PR command failed: 1026 [ 510.139530][T22110] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 510.176446][T22110] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 510.729414][T22130] netlink: zone id is out of range [ 510.794736][T22134] openvswitch: netlink: Message has 4 unknown bytes. [ 511.107275][T22133] NFSD: Failed to start, no listeners configured. [ 512.086765][T22168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 513.010523][T22195] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 513.516629][T22214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.301390][T22236] process 'syz.3.7531' launched '/dev/fd/0' with NULL argv: empty string added [ 514.742124][T22248] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7537'. [ 516.210627][T22286] nla_validate_range_unsigned: 2 callbacks suppressed [ 516.210650][T22286] netlink: 'syz.2.7554': attribute type 11 has an invalid length. [ 516.302759][T22286] netlink: 'syz.2.7554': attribute type 11 has an invalid length. [ 516.364928][T22286] netlink: 'syz.2.7554': attribute type 11 has an invalid length. [ 519.125456][T22363] : entered promiscuous mode [ 521.815806][T22456] vhci_hcd vhci_hcd.1: invalid port number 19 [ 521.845716][T22456] vhci_hcd vhci_hcd.1: default hub control req: c902 v76bf i0013 l46 [ 522.572148][T22481] netlink: 'syz.3.7634': attribute type 1 has an invalid length. [ 522.777472][T22487] &#$@\]\-: entered promiscuous mode [ 522.851546][T22491] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 525.080465][T22564] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 525.638018][T14402] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 526.115089][T22600] FAULT_INJECTION: forcing a failure. [ 526.115089][T22600] name failslab, interval 1, probability 0, space 0, times 1 [ 526.213603][T22600] CPU: 0 UID: 0 PID: 22600 Comm: syz.1.7689 Tainted: G U I syzkaller #0 PREEMPT(full) [ 526.213646][T22600] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 526.213656][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.213671][T22600] Call Trace: [ 526.213678][T22600] [ 526.213688][T22600] dump_stack_lvl+0x100/0x190 [ 526.213731][T22600] should_fail_ex.cold+0x5/0xa [ 526.213771][T22600] should_failslab+0xc2/0x120 [ 526.213797][T22600] __kmalloc_cache_noprof+0x7a/0x6f0 [ 526.213829][T22600] ? watch_queue_init+0x45/0x170 [ 526.213874][T22600] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 526.213920][T22600] watch_queue_init+0x45/0x170 [ 526.213959][T22600] create_pipe_files+0x672/0x970 [ 526.213988][T22600] do_pipe2+0xbd/0x1e0 [ 526.214012][T22600] ? __pfx_do_pipe2+0x10/0x10 [ 526.214036][T22600] ? xfd_validate_state+0x129/0x190 [ 526.214087][T22600] __x64_sys_pipe2+0x54/0x80 [ 526.214112][T22600] do_syscall_64+0x106/0xf80 [ 526.214141][T22600] ? clear_bhb_loop+0x40/0x90 [ 526.214178][T22600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.214203][T22600] RIP: 0033:0x7fa5cbb9c799 [ 526.214226][T22600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.214249][T22600] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 526.214272][T22600] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 526.214289][T22600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 526.214303][T22600] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 526.214318][T22600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.214332][T22600] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 526.214363][T22600] [ 526.915584][T22636] FAULT_INJECTION: forcing a failure. [ 526.915584][T22636] name failslab, interval 1, probability 0, space 0, times 0 [ 526.962423][T22636] CPU: 0 UID: 0 PID: 22636 Comm: syz.2.7699 Tainted: G U I syzkaller #0 PREEMPT(full) [ 526.962465][T22636] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 526.962482][T22636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.962496][T22636] Call Trace: [ 526.962504][T22636] [ 526.962512][T22636] dump_stack_lvl+0x100/0x190 [ 526.962555][T22636] should_fail_ex.cold+0x5/0xa [ 526.962583][T22636] should_failslab+0xc2/0x120 [ 526.962609][T22636] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 526.962652][T22636] ? __d_alloc+0x34/0xa80 [ 526.962685][T22636] __d_alloc+0x34/0xa80 [ 526.962714][T22636] d_alloc_parallel+0x111/0x14e0 [ 526.962756][T22636] ? __lock_acquire+0x4a5/0x2630 [ 526.962792][T22636] ? __pfx_d_alloc_parallel+0x10/0x10 [ 526.962835][T22636] ? lockdep_init_map_type+0x5c/0x250 [ 526.962869][T22636] ? lockdep_init_map_type+0x5c/0x250 [ 526.962907][T22636] __lookup_slow+0x193/0x460 [ 526.962940][T22636] ? __pfx___lookup_slow+0x10/0x10 [ 526.962986][T22636] ? __d_lookup+0x266/0x4a0 [ 526.963034][T22636] lookup_slow+0x50/0x70 [ 526.963066][T22636] link_path_walk+0x1377/0x1cc0 [ 526.963115][T22636] path_openat+0x1be/0x31a0 [ 526.963138][T22636] ? kasan_save_stack+0x3f/0x50 [ 526.963176][T22636] ? kasan_save_stack+0x30/0x50 [ 526.963213][T22636] ? kasan_save_track+0x14/0x30 [ 526.963250][T22636] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 526.963305][T22636] ? __pfx_path_openat+0x10/0x10 [ 526.963341][T22636] do_file_open+0x20e/0x430 [ 526.963369][T22636] ? __pfx_do_file_open+0x10/0x10 [ 526.963415][T22636] ? alloc_fd+0x476/0x790 [ 526.963440][T22636] ? do_getname+0x191/0x390 [ 526.963474][T22636] do_sys_openat2+0x10d/0x1e0 [ 526.963506][T22636] ? __pfx_do_sys_openat2+0x10/0x10 [ 526.963550][T22636] __x64_sys_openat+0x12d/0x210 [ 526.963583][T22636] ? __pfx___x64_sys_openat+0x10/0x10 [ 526.963628][T22636] do_syscall_64+0x106/0xf80 [ 526.963657][T22636] ? clear_bhb_loop+0x40/0x90 [ 526.963687][T22636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.963712][T22636] RIP: 0033:0x7f197bd9c799 [ 526.963732][T22636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.963755][T22636] RSP: 002b:00007f197cd41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.963778][T22636] RAX: ffffffffffffffda RBX: 00007f197c015fa0 RCX: 00007f197bd9c799 [ 526.963794][T22636] RDX: 0000000000000202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 526.963810][T22636] RBP: 00007f197be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 526.963824][T22636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.963839][T22636] R13: 00007f197c016038 R14: 00007f197c015fa0 R15: 00007ffc43437e58 [ 526.963870][T22636] [ 527.365525][T22646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 528.066123][T22668] netlink: 'syz.3.7711': attribute type 1 has an invalid length. [ 528.822350][T22711] netlink: 'syz.1.7721': attribute type 11 has an invalid length. [ 529.248722][T22722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.316117][T22722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.526464][T22817] netlink: set zone limit has 8 unknown bytes [ 531.824675][T22827] MTRR 1 not used [ 532.871362][T22856] openvswitch: netlink: Key type 29 is not supported [ 533.565106][T22882] bonding: no command found in bonding_masters - use +ifname or -ifname [ 533.822132][T22897] ptp ptp0: only physical clock in use now [ 534.088806][T22919] FAULT_INJECTION: forcing a failure. [ 534.088806][T22919] name fail_futex, interval 1, probability 0, space 0, times 1 [ 534.147295][T22919] CPU: 0 UID: 0 PID: 22919 Comm: syz.0.7798 Tainted: G U I syzkaller #0 PREEMPT(full) [ 534.147338][T22919] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 534.147348][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.147362][T22919] Call Trace: [ 534.147371][T22919] [ 534.147380][T22919] dump_stack_lvl+0x100/0x190 [ 534.147431][T22919] should_fail_ex.cold+0x5/0xa [ 534.147460][T22919] get_futex_key+0x107c/0x1620 [ 534.147493][T22919] ? __pfx_get_futex_key+0x10/0x10 [ 534.147532][T22919] futex_wait_setup+0x83/0x510 [ 534.147579][T22919] __futex_wait+0x19f/0x300 [ 534.147619][T22919] ? __pfx___futex_wait+0x10/0x10 [ 534.147669][T22919] ? __pfx_futex_wake_mark+0x10/0x10 [ 534.147712][T22919] ? __hrtimer_setup+0x178/0x280 [ 534.147748][T22919] ? ktime_add_safe+0x60/0x70 [ 534.147783][T22919] futex_wait+0xed/0x380 [ 534.147822][T22919] ? __pfx_futex_wait+0x10/0x10 [ 534.147857][T22919] ? __lock_acquire+0x4a5/0x2630 [ 534.147892][T22919] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 534.147935][T22919] do_futex+0x1ef/0x350 [ 534.147966][T22919] ? __pfx_do_futex+0x10/0x10 [ 534.147997][T22919] ? ktime_get+0x200/0x300 [ 534.148021][T22919] ? lockdep_hardirqs_on+0x78/0x100 [ 534.148052][T22919] ? read_tsc+0x9/0x20 [ 534.148082][T22919] __x64_sys_futex+0x34f/0x4d0 [ 534.148119][T22919] ? __pfx___x64_sys_futex+0x10/0x10 [ 534.148163][T22919] do_syscall_64+0x106/0xf80 [ 534.148192][T22919] ? clear_bhb_loop+0x40/0x90 [ 534.148221][T22919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.148246][T22919] RIP: 0033:0x7f03ed79c799 [ 534.148267][T22919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.148290][T22919] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.148312][T22919] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 534.148328][T22919] RDX: 0000000000000eec RSI: 0000000000000000 RDI: 0000200000000000 [ 534.148343][T22919] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000006 [ 534.148358][T22919] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 534.148373][T22919] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 534.148408][T22919] [ 534.694729][T22935] random: crng reseeded on system resumption [ 534.739215][T22935] Restarting kernel threads ... [ 534.772519][T22935] Done restarting kernel threads. [ 535.303949][T22949] delete_channel: no stack [ 535.402284][T22953] nbd: must specify a size in bytes for the device [ 536.633227][T22996] netlink: 'syz.2.7835': attribute type 11 has an invalid length. [ 537.568055][T23028] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 541.275196][T23171] netlink: 'syz.2.7914': attribute type 23 has an invalid length. [ 542.658871][T23219] FAULT_INJECTION: forcing a failure. [ 542.658871][T23219] name failslab, interval 1, probability 0, space 0, times 0 [ 542.730922][T23219] CPU: 0 UID: 0 PID: 23219 Comm: syz.0.7936 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 542.730967][T23219] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 542.730978][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.730993][T23219] Call Trace: [ 542.731000][T23219] [ 542.731009][T23219] dump_stack_lvl+0x100/0x190 [ 542.731052][T23219] should_fail_ex.cold+0x5/0xa [ 542.731081][T23219] should_failslab+0xc2/0x120 [ 542.731107][T23219] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 542.731145][T23219] ? __d_alloc+0x34/0xa80 [ 542.731171][T23219] ? make_vfsgid+0xf1/0x140 [ 542.731209][T23219] __d_alloc+0x34/0xa80 [ 542.731234][T23219] ? bpf_lsm_inode_permission+0x9/0x10 [ 542.731274][T23219] d_alloc+0x4a/0x1e0 [ 542.731302][T23219] vfs_tmpfile+0x148/0x9a0 [ 542.731333][T23219] path_openat+0x164e/0x31a0 [ 542.731356][T23219] ? kasan_save_stack+0x3f/0x50 [ 542.731393][T23219] ? kasan_save_stack+0x30/0x50 [ 542.731431][T23219] ? __kasan_slab_alloc+0x89/0x90 [ 542.731452][T23219] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 542.731488][T23219] ? do_getname+0x35/0x390 [ 542.731518][T23219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.731547][T23219] ? __pfx_path_openat+0x10/0x10 [ 542.731583][T23219] do_file_open+0x20e/0x430 [ 542.731609][T23219] ? __pfx_do_file_open+0x10/0x10 [ 542.731663][T23219] ? _raw_spin_unlock+0x28/0x50 [ 542.731689][T23219] ? alloc_fd+0x476/0x790 [ 542.731720][T23219] do_sys_openat2+0x10d/0x1e0 [ 542.731754][T23219] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.731797][T23219] __x64_sys_open+0xfe/0x1d0 [ 542.731829][T23219] ? __pfx___x64_sys_open+0x10/0x10 [ 542.731873][T23219] do_syscall_64+0x106/0xf80 [ 542.731902][T23219] ? clear_bhb_loop+0x40/0x90 [ 542.731931][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.731957][T23219] RIP: 0033:0x7f03ed79c799 [ 542.731977][T23219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.732000][T23219] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 542.732023][T23219] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 542.732039][T23219] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 542.732055][T23219] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 542.732069][T23219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.732083][T23219] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 542.732114][T23219] [ 543.079818][T23224] HfR: entered promiscuous mode [ 543.913319][T23257] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 547.230327][T23370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8007'. [ 548.393299][T23411] nbd: illegal input index 37139 [ 550.752631][T23496] FAULT_INJECTION: forcing a failure. [ 550.752631][T23496] name failslab, interval 1, probability 0, space 0, times 0 [ 550.805136][T23496] CPU: 0 UID: 0 PID: 23496 Comm: syz.3.8068 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 550.805181][T23496] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 550.805192][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.805207][T23496] Call Trace: [ 550.805215][T23496] [ 550.805224][T23496] dump_stack_lvl+0x100/0x190 [ 550.805266][T23496] should_fail_ex.cold+0x5/0xa [ 550.805295][T23496] should_failslab+0xc2/0x120 [ 550.805320][T23496] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 550.805358][T23496] ? security_file_alloc+0x34/0x2c0 [ 550.805445][T23496] ? trace_kmem_cache_alloc+0xf3/0x120 [ 550.805476][T23496] security_file_alloc+0x34/0x2c0 [ 550.805502][T23496] init_file+0x95/0x480 [ 550.805532][T23496] alloc_empty_file+0x73/0x1c0 [ 550.805563][T23496] alloc_file_pseudo+0x13a/0x230 [ 550.805596][T23496] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 550.805625][T23496] ? alloc_fd+0x476/0x790 [ 550.805650][T23496] ? do_raw_spin_unlock+0x145/0x1e0 [ 550.805691][T23496] __anon_inode_getfile+0xe8/0x280 [ 550.805732][T23496] anon_inode_getfile_fmode+0x37/0xa0 [ 550.805763][T23496] do_signalfd4+0x1ed/0x480 [ 550.805795][T23496] __x64_sys_signalfd+0x120/0x1a0 [ 550.805825][T23496] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 550.805865][T23496] do_syscall_64+0x106/0xf80 [ 550.805894][T23496] ? clear_bhb_loop+0x40/0x90 [ 550.805930][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.805956][T23496] RIP: 0033:0x7f777999c799 [ 550.805976][T23496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.805999][T23496] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 550.806022][T23496] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 550.806038][T23496] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 550.806054][T23496] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 550.806068][T23496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.806083][T23496] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 550.806114][T23496] [ 551.059977][T23498] tc_dump_action: action bad kind [ 552.764183][T23555] netlink: 'syz.3.8095': attribute type 1 has an invalid length. [ 553.580578][T14402] Bluetooth: hci0: ACL packet too small [ 553.959695][T23597] nbd: must specify a device to reconfigure [ 554.687899][T23623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8128'. [ 556.311522][T23676] NFSD: Failed to start, no listeners configured. [ 557.290655][T23714] netlink: 'syz.0.8169': attribute type 1 has an invalid length. [ 557.877836][T23735] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 558.181240][T23744] openvswitch: netlink: Flow key attribute not present in set flow. [ 558.225824][T23746] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 559.487884][T23791] netlink: 'syz.0.8205': attribute type 1 has an invalid length. [ 561.019420][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.025842][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.439971][T23860] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 563.464382][T23932] FAULT_INJECTION: forcing a failure. [ 563.464382][T23932] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 563.536619][T23932] CPU: 0 UID: 0 PID: 23932 Comm: syz.1.8271 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 563.536672][T23932] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 563.536683][T23932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.536697][T23932] Call Trace: [ 563.536705][T23932] [ 563.536714][T23932] dump_stack_lvl+0x100/0x190 [ 563.536757][T23932] should_fail_ex.cold+0x5/0xa [ 563.536781][T23932] ? prepare_alloc_pages+0x16d/0x5f0 [ 563.536811][T23932] should_fail_alloc_page+0xeb/0x140 [ 563.536846][T23932] prepare_alloc_pages+0x1f0/0x5f0 [ 563.536879][T23932] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 563.536917][T23932] ? do_syscall_64+0x81/0xf80 [ 563.536963][T23932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.537017][T23932] ? rcu_is_watching+0x12/0xc0 [ 563.537054][T23932] ? trace_kmalloc+0x101/0x130 [ 563.537078][T23932] ? __kasan_kmalloc+0xaa/0xb0 [ 563.537116][T23932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 563.537160][T23932] ? policy_nodemask+0xed/0x4f0 [ 563.537188][T23932] alloc_pages_mpol+0x1fb/0x550 [ 563.537214][T23932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 563.537239][T23932] ? __alloc_skb+0x5b7/0x710 [ 563.537267][T23932] ? __pfx___alloc_skb+0x10/0x10 [ 563.537293][T23932] ? finish_task_switch.isra.0+0x200/0xb80 [ 563.537349][T23932] alloc_pages_noprof+0x131/0x390 [ 563.537376][T23932] alloc_skb_with_frags+0x500/0x810 [ 563.537419][T23932] sock_alloc_send_pskb+0x801/0x980 [ 563.537501][T23932] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 563.537541][T23932] tun_get_user+0x8f7/0x3e10 [ 563.537640][T23932] ? __pfx_tun_get_user+0x10/0x10 [ 563.537679][T23932] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 563.537745][T23932] ? find_held_lock+0x2b/0x80 [ 563.537766][T23932] ? tun_get+0x191/0x370 [ 563.537798][T23932] ? tun_get+0x191/0x370 [ 563.537845][T23932] tun_chr_write_iter+0xdc/0x200 [ 563.537885][T23932] vfs_write+0x6ac/0x1070 [ 563.537926][T23932] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 563.537967][T23932] ? __pfx_vfs_write+0x10/0x10 [ 563.538005][T23932] ? find_held_lock+0x2b/0x80 [ 563.538045][T23932] __x64_sys_pwrite64+0x1eb/0x250 [ 563.538070][T23932] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 563.538102][T23932] do_syscall_64+0x106/0xf80 [ 563.538131][T23932] ? clear_bhb_loop+0x40/0x90 [ 563.538161][T23932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.538187][T23932] RIP: 0033:0x7fa5cbb9c799 [ 563.538208][T23932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.538231][T23932] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 563.538254][T23932] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 563.538270][T23932] RDX: 000000000000fdf0 RSI: 0000200000000140 RDI: 00000000000000c8 [ 563.538285][T23932] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 563.538300][T23932] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000000 [ 563.538314][T23932] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 563.538345][T23932] [ 565.914546][T24010] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 566.976471][T24041] capability: warning: `syz.2.8321' uses 32-bit capabilities (legacy support in use) [ 567.423063][T24005] kexec: Could not allocate control_code_buffer [ 567.684879][T24059] openvswitch: netlink: IP tunnel dst address not specified [ 567.890520][T24069] netlink: 'syz.3.8334': attribute type 1 has an invalid length. [ 568.914667][T24105] FAULT_INJECTION: forcing a failure. [ 568.914667][T24105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.976138][T24105] CPU: 0 UID: 0 PID: 24105 Comm: syz.0.8351 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 568.976184][T24105] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 568.976195][T24105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.976209][T24105] Call Trace: [ 568.976217][T24105] [ 568.976226][T24105] dump_stack_lvl+0x100/0x190 [ 568.976272][T24105] should_fail_ex.cold+0x5/0xa [ 568.976297][T24105] ? prepare_alloc_pages+0x16d/0x5f0 [ 568.976329][T24105] should_fail_alloc_page+0xeb/0x140 [ 568.976358][T24105] prepare_alloc_pages+0x1f0/0x5f0 [ 568.976390][T24105] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 568.976430][T24105] ? __pfx_css_rstat_updated+0x10/0x10 [ 568.976461][T24105] ? lock_acquire+0x1cf/0x380 [ 568.976506][T24105] ? rcu_is_watching+0x12/0xc0 [ 568.976545][T24105] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 568.976584][T24105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.976622][T24105] ? rcu_read_unlock+0x17/0x60 [ 568.976660][T24105] ? folio_remove_rmap_pmd+0x69c/0xed0 [ 568.976698][T24105] ? split_huge_pmd_locked+0x3ba/0x3cf0 [ 568.976732][T24105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.976775][T24105] ? policy_nodemask+0xed/0x4f0 [ 568.976802][T24105] alloc_pages_mpol+0x1fb/0x550 [ 568.976829][T24105] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 568.976852][T24105] ? __split_huge_pmd+0x203/0x350 [ 568.976883][T24105] ? __split_huge_pmd+0x203/0x350 [ 568.976922][T24105] alloc_pages_noprof+0x131/0x390 [ 568.976949][T24105] pte_alloc_one+0x1e/0x3e0 [ 568.977005][T24105] __pte_alloc+0x6d/0x3f0 [ 568.977030][T24105] ? __pfx___pte_alloc+0x10/0x10 [ 568.977055][T24105] ? _raw_spin_unlock+0x28/0x50 [ 568.977082][T24105] ? __pmd_alloc+0x6aa/0x9c0 [ 568.977113][T24105] move_page_tables+0x257e/0x4500 [ 568.977151][T24105] ? __pfx_copy_vma+0x10/0x10 [ 568.977198][T24105] ? __pfx_move_page_tables+0x10/0x10 [ 568.977251][T24105] ? finish_task_switch.isra.0+0x200/0xb80 [ 568.977281][T24105] copy_vma_and_data+0x25c/0x7c0 [ 568.977320][T24105] ? __pfx_copy_vma_and_data+0x10/0x10 [ 568.977369][T24105] ? __vma_start_write+0x17f/0x280 [ 568.977400][T24105] ? __pfx___vma_start_write+0x10/0x10 [ 568.977440][T24105] move_vma+0x51b/0x1890 [ 568.977480][T24105] ? __pfx_move_vma+0x10/0x10 [ 568.977526][T24105] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 568.977554][T24105] ? cap_mmap_addr+0x4b/0x120 [ 568.977651][T24105] ? bpf_lsm_mmap_addr+0x9/0x30 [ 568.977691][T24105] ? security_mmap_addr+0x71/0x1e0 [ 568.977717][T24105] ? __get_unmapped_area+0x255/0x3e0 [ 568.977747][T24105] ? vrm_set_new_addr+0x204/0x290 [ 568.977785][T24105] mremap_to+0x1b7/0x450 [ 568.977822][T24105] do_mremap+0xb76/0x2130 [ 568.977870][T24105] ? __pfx_do_mremap+0x10/0x10 [ 568.977912][T24105] ? ksys_write+0x190/0x250 [ 568.977941][T24105] __do_sys_mremap+0x126/0x170 [ 568.977978][T24105] ? __pfx___do_sys_mremap+0x10/0x10 [ 568.978022][T24105] ? __x64_sys_futex+0x34f/0x4d0 [ 568.978072][T24105] do_syscall_64+0x106/0xf80 [ 568.978101][T24105] ? clear_bhb_loop+0x40/0x90 [ 568.978132][T24105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.978157][T24105] RIP: 0033:0x7f03ed79c799 [ 568.978178][T24105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.978203][T24105] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 568.978258][T24105] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 568.978274][T24105] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 568.978290][T24105] RBP: 00007f03ed832bd9 R08: 0000000100000000 R09: 0000000000000000 [ 568.978304][T24105] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 568.978319][T24105] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 568.978350][T24105] [ 570.267661][T24138] ======================================================= [ 570.267661][T24138] WARNING: The mand mount option has been deprecated and [ 570.267661][T24138] and is ignored by this kernel. Remove the mand [ 570.267661][T24138] option from the mount to silence this warning. [ 570.267661][T24138] ======================================================= [ 574.570050][T24288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.314854][T24314] .^: entered promiscuous mode [ 577.610944][T24394] nfsd: Unknown parameter '*' [ 578.382566][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8498'. [ 578.863671][T24437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8506'. [ 579.138853][T24448] FAULT_INJECTION: forcing a failure. [ 579.138853][T24448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.208444][T24448] CPU: 0 UID: 0 PID: 24448 Comm: syz.3.8512 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 579.208489][T24448] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 579.208500][T24448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.208515][T24448] Call Trace: [ 579.208523][T24448] [ 579.208532][T24448] dump_stack_lvl+0x100/0x190 [ 579.208575][T24448] should_fail_ex.cold+0x5/0xa [ 579.208599][T24448] ? prepare_alloc_pages+0x16d/0x5f0 [ 579.208637][T24448] should_fail_alloc_page+0xeb/0x140 [ 579.208665][T24448] prepare_alloc_pages+0x1f0/0x5f0 [ 579.208699][T24448] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 579.208741][T24448] ? rcu_is_watching+0x12/0xc0 [ 579.208779][T24448] ? trace_mm_page_alloc+0x17a/0x1d0 [ 579.208807][T24448] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 579.208850][T24448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.208893][T24448] ? find_held_lock+0x2b/0x80 [ 579.208915][T24448] ? is_bpf_text_address+0x8a/0x1a0 [ 579.208990][T24448] ? is_bpf_text_address+0x8a/0x1a0 [ 579.209030][T24448] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 579.209057][T24448] ? is_bpf_text_address+0x94/0x1a0 [ 579.209095][T24448] ? kernel_text_address+0x8d/0x100 [ 579.209131][T24448] ? __kernel_text_address+0xd/0x30 [ 579.209167][T24448] ? unwind_get_return_address+0x59/0xa0 [ 579.209201][T24448] alloc_pages_bulk_noprof+0x782/0x1490 [ 579.209250][T24448] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 579.209291][T24448] ? kasan_save_stack+0x30/0x50 [ 579.209336][T24448] ? alloc_pages_noprof+0x233/0x390 [ 579.209364][T24448] __kasan_populate_vmalloc+0xf0/0x210 [ 579.209407][T24448] alloc_vmap_area+0x95d/0x2bd0 [ 579.209444][T24448] ? __pfx_alloc_vmap_area+0x10/0x10 [ 579.209477][T24448] __get_vm_area_node+0x1ca/0x330 [ 579.209510][T24448] __vmalloc_node_range_noprof+0x213/0x1530 [ 579.209541][T24448] ? kernel_clone+0xfc/0x9a0 [ 579.209576][T24448] ? kernel_clone+0xfc/0x9a0 [ 579.209617][T24448] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.209655][T24448] ? rcu_is_watching+0x12/0xc0 [ 579.209693][T24448] ? trace_kmem_cache_alloc+0xf3/0x120 [ 579.209721][T24448] ? kernel_clone+0xfc/0x9a0 [ 579.209748][T24448] __vmalloc_node_noprof+0xad/0xf0 [ 579.209778][T24448] ? kernel_clone+0xfc/0x9a0 [ 579.209809][T24448] copy_process+0x5ec/0x7a10 [ 579.209835][T24448] ? futex_unqueue+0x133/0x2c0 [ 579.209878][T24448] ? __pfx_copy_process+0x10/0x10 [ 579.209913][T24448] ? _copy_from_user+0x59/0xd0 [ 579.209996][T24448] kernel_clone+0xfc/0x9a0 [ 579.210026][T24448] ? __pfx_kernel_clone+0x10/0x10 [ 579.210061][T24448] ? __pfx_futex_wait+0x10/0x10 [ 579.210106][T24448] __do_sys_clone3+0x214/0x290 [ 579.210135][T24448] ? __pfx___do_sys_clone3+0x10/0x10 [ 579.210202][T24448] do_syscall_64+0x106/0xf80 [ 579.210231][T24448] ? clear_bhb_loop+0x40/0x90 [ 579.210262][T24448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.210287][T24448] RIP: 0033:0x7f777999c799 [ 579.210308][T24448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.210331][T24448] RSP: 002b:00007f777a7d5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 579.210354][T24448] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f777999c799 [ 579.210370][T24448] RDX: 00007f777a7d5f10 RSI: 0000000000000058 RDI: 00007f777a7d5f10 [ 579.210386][T24448] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 579.210401][T24448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.210415][T24448] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 579.210446][T24448] [ 579.210508][T24448] syz.3.8512: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 580.509457][T24448] CPU: 0 UID: 0 PID: 24448 Comm: syz.3.8512 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 580.509501][T24448] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 580.509512][T24448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.509529][T24448] Call Trace: [ 580.509542][T24448] [ 580.509551][T24448] dump_stack_lvl+0x100/0x190 [ 580.509592][T24448] warn_alloc.cold+0x95/0x1c1 [ 580.509635][T24448] ? __pfx_warn_alloc+0x10/0x10 [ 580.509668][T24448] ? lockdep_hardirqs_on+0x78/0x100 [ 580.509701][T24448] ? __get_vm_area_node+0x2c5/0x330 [ 580.509733][T24448] ? __get_vm_area_node+0x208/0x330 [ 580.509765][T24448] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 580.509809][T24448] ? kernel_clone+0xfc/0x9a0 [ 580.509844][T24448] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 580.509881][T24448] ? rcu_is_watching+0x12/0xc0 [ 580.509917][T24448] ? trace_kmem_cache_alloc+0xf3/0x120 [ 580.509945][T24448] ? kernel_clone+0xfc/0x9a0 [ 580.509970][T24448] __vmalloc_node_noprof+0xad/0xf0 [ 580.509999][T24448] ? kernel_clone+0xfc/0x9a0 [ 580.510028][T24448] copy_process+0x5ec/0x7a10 [ 580.510054][T24448] ? futex_unqueue+0x133/0x2c0 [ 580.510096][T24448] ? __pfx_copy_process+0x10/0x10 [ 580.510131][T24448] ? _copy_from_user+0x59/0xd0 [ 580.510157][T24448] kernel_clone+0xfc/0x9a0 [ 580.510186][T24448] ? __pfx_kernel_clone+0x10/0x10 [ 580.510220][T24448] ? __pfx_futex_wait+0x10/0x10 [ 580.510264][T24448] __do_sys_clone3+0x214/0x290 [ 580.510292][T24448] ? __pfx___do_sys_clone3+0x10/0x10 [ 580.510356][T24448] do_syscall_64+0x106/0xf80 [ 580.510384][T24448] ? clear_bhb_loop+0x40/0x90 [ 580.510413][T24448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.510438][T24448] RIP: 0033:0x7f777999c799 [ 580.510457][T24448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.510479][T24448] RSP: 002b:00007f777a7d5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 580.510501][T24448] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f777999c799 [ 580.510517][T24448] RDX: 00007f777a7d5f10 RSI: 0000000000000058 RDI: 00007f777a7d5f10 [ 580.510532][T24448] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 580.510553][T24448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.510566][T24448] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 580.510596][T24448] [ 580.828809][T24448] Mem-Info: [ 580.832063][T24448] active_anon:6744 inactive_anon:51 isolated_anon:0 [ 580.832063][T24448] active_file:15145 inactive_file:39010 isolated_file:0 [ 580.832063][T24448] unevictable:768 dirty:3 writeback:0 [ 580.832063][T24448] slab_reclaimable:11721 slab_unreclaimable:92880 [ 580.832063][T24448] mapped:24174 shmem:1354 pagetables:1245 [ 580.832063][T24448] sec_pagetables:0 bounce:0 [ 580.832063][T24448] kernel_misc_reclaimable:0 [ 580.832063][T24448] free:1327232 free_pcp:9205 free_cma:0 [ 580.882584][T24448] Node 0 active_anon:26976kB inactive_anon:204kB active_file:60580kB inactive_file:155908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96696kB dirty:12kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:10880kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.918040][T24448] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.948589][T24448] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.980172][T24448] lowmem_reserve[]: 0 2477 2479 2479 2479 [ 580.986084][T24448] Node 0 DMA32 free:1354972kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26976kB inactive_anon:204kB active_file:60580kB inactive_file:155908kB unevictable:1536kB writepending:0kB zspages:0kB present:3129332kB managed:2537444kB mlocked:0kB bounce:0kB free_pcp:36812kB local_pcp:36812kB free_cma:0kB [ 581.026962][T24448] lowmem_reserve[]: 0 0 1 1 1 [ 581.032205][T24448] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.099297][T24448] lowmem_reserve[]: 0 0 0 0 0 [ 581.111847][T24448] Node 1 Normal free:3938592kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.224954][T24448] lowmem_reserve[]: 0 0 0 0 0 [ 581.241992][T24448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 581.289974][T24448] Node 0 DMA32: 5911*4kB (UM) 4202*8kB (UM) 2419*16kB (UME) 460*32kB (UME) 512*64kB (UM) 409*128kB (UME) 370*256kB (UME) 279*512kB (UME) 158*1024kB (UME) 61*2048kB (U) 155*4096kB (UM) = 1354972kB [ 581.359776][T24448] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 581.431977][T24448] Node 1 Normal: 14*4kB (UME) 15*8kB (UM) 13*16kB (UME) 15*32kB (UME) 11*64kB (UME) 2*128kB (UM) 4*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 957*4096kB (UM) = 3938592kB [ 581.525193][T24448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.568733][T24448] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.649088][T24448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.701820][T24448] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 581.764405][T24448] 55505 total pagecache pages [ 581.769157][T24448] 0 pages in swap cache [ 581.773315][T24448] Free swap = 124996kB [ 581.840347][T24448] Total swap = 124996kB [ 581.863419][T24448] 2097051 pages RAM [ 581.883397][T24448] 0 pages HighMem/MovableOnly [ 581.921623][T24448] 430810 pages reserved [ 581.937453][T24448] 0 pages cma reserved [ 582.523912][T24520] nfs: Unknown parameter 'nl802154' [ 583.997972][T24574] zero sized request [ 584.100613][T24580] program syz.3.8572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.275682][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8575'. [ 584.380590][T24588] netlink: Unknown NAT attribute (type=262, max=9) [ 586.041730][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8604'. [ 586.087339][T24648] Invalid ELF header magic: != ELF [ 587.084526][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8622'. [ 587.319131][T24689] netlink: 'syz.3.8626': attribute type 2 has an invalid length. [ 587.485837][T24694] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 589.275158][T24748] FAULT_INJECTION: forcing a failure. [ 589.275158][T24748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.345648][T24748] CPU: 0 UID: 0 PID: 24748 Comm: syz.3.8653 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 589.345694][T24748] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 589.345705][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.345728][T24748] Call Trace: [ 589.345735][T24748] [ 589.345745][T24748] dump_stack_lvl+0x100/0x190 [ 589.345788][T24748] should_fail_ex.cold+0x5/0xa [ 589.345812][T24748] ? prepare_alloc_pages+0x16d/0x5f0 [ 589.345842][T24748] should_fail_alloc_page+0xeb/0x140 [ 589.345875][T24748] prepare_alloc_pages+0x1f0/0x5f0 [ 589.345902][T24748] ? rcu_is_watching+0x12/0xc0 [ 589.345944][T24748] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 589.345982][T24748] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 589.346023][T24748] ? get_page_from_freelist+0x111d/0x3140 [ 589.346067][T24748] ? __pfx___might_resched+0x10/0x10 [ 589.346103][T24748] ? prepare_alloc_pages+0x16d/0x5f0 [ 589.346130][T24748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.346167][T24748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.346209][T24748] ? rcu_is_watching+0x12/0xc0 [ 589.346246][T24748] ? trace_mm_page_alloc+0x17a/0x1d0 [ 589.346284][T24748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.346341][T24748] ? policy_nodemask+0xed/0x4f0 [ 589.346369][T24748] alloc_pages_mpol+0x1fb/0x550 [ 589.346395][T24748] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.346421][T24748] ? do_raw_spin_lock+0x128/0x260 [ 589.346458][T24748] ? find_held_lock+0x2b/0x80 [ 589.346479][T24748] ? __pud_alloc+0x575/0x760 [ 589.346509][T24748] alloc_pages_noprof+0x131/0x390 [ 589.346536][T24748] __pmd_alloc+0x3b/0x9c0 [ 589.346562][T24748] ? __pud_alloc+0x57a/0x760 [ 589.346592][T24748] walk_to_pmd+0x3a3/0x4c0 [ 589.346622][T24748] get_locked_pte+0x25/0xc0 [ 589.346652][T24748] map_ldt_struct+0x3c1/0xa70 [ 589.346684][T24748] ? __pfx_map_ldt_struct+0x10/0x10 [ 589.346708][T24748] ? alloc_pages_noprof+0x233/0x390 [ 589.346745][T24748] write_ldt+0x6d3/0xd40 [ 589.346773][T24748] ? __pfx_write_ldt+0x10/0x10 [ 589.346798][T24748] ? xfd_validate_state+0x129/0x190 [ 589.346842][T24748] __x64_sys_modify_ldt+0xb1/0x170 [ 589.346868][T24748] do_syscall_64+0x106/0xf80 [ 589.346897][T24748] ? clear_bhb_loop+0x40/0x90 [ 589.346927][T24748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.346957][T24748] RIP: 0033:0x7f777999c799 [ 589.346977][T24748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.347001][T24748] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 589.347024][T24748] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 589.347040][T24748] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 589.347055][T24748] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 589.347070][T24748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.347084][T24748] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 589.347115][T24748] [ 590.410874][T24774] sd 0:0:1:0: PR command failed: 1026 [ 590.438766][T24774] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 590.471158][T24774] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 591.068800][T24794] netlink: 'syz.3.8677': attribute type 1 has an invalid length. [ 591.281109][T24800] Invalid ELF header magic: != ELF [ 591.374250][T14402] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 592.029759][T24827] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 592.783048][T24845] netlink: NAT attribute has 4 unknown bytes [ 593.609814][T24870] openvswitch: netlink: Key type 261 is out of range max 32 [ 593.667507][T24873] netlink: ct_mark mask cannot be 0 [ 594.196990][T24889] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 596.090868][T24951] FAULT_INJECTION: forcing a failure. [ 596.090868][T24951] name failslab, interval 1, probability 0, space 0, times 0 [ 596.159166][T24951] CPU: 0 UID: 0 PID: 24951 Comm: syz.0.8751 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 596.159217][T24951] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 596.159231][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.159245][T24951] Call Trace: [ 596.159253][T24951] [ 596.159262][T24951] dump_stack_lvl+0x100/0x190 [ 596.159305][T24951] should_fail_ex.cold+0x5/0xa [ 596.159333][T24951] should_failslab+0xc2/0x120 [ 596.159359][T24951] __kmalloc_cache_noprof+0x7a/0x6f0 [ 596.159392][T24951] ? call_usermodehelper_setup+0xaf/0x360 [ 596.159435][T24951] ? __pfx_free_modprobe_argv+0x10/0x10 [ 596.159470][T24951] call_usermodehelper_setup+0xaf/0x360 [ 596.159513][T24951] __request_module+0x3c7/0x6c0 [ 596.159549][T24951] ? __pfx___request_module+0x10/0x10 [ 596.159596][T24951] ? find_held_lock+0x2b/0x80 [ 596.159617][T24951] ? inet_create+0xa72/0x1060 [ 596.159755][T24951] inet_create+0xd45/0x1060 [ 596.159794][T24951] ? inet_create+0x94/0x1060 [ 596.159836][T24951] __sock_create+0x339/0x860 [ 596.159903][T24951] __sys_socket+0x14d/0x260 [ 596.159943][T24951] ? __pfx___sys_socket+0x10/0x10 [ 596.159991][T24951] __x64_sys_socket+0x72/0xb0 [ 596.160029][T24951] ? lockdep_hardirqs_on+0x78/0x100 [ 596.160067][T24951] do_syscall_64+0x106/0xf80 [ 596.160096][T24951] ? clear_bhb_loop+0x40/0x90 [ 596.160127][T24951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.160152][T24951] RIP: 0033:0x7f03ed79c799 [ 596.160173][T24951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.160196][T24951] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 596.160219][T24951] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 596.160235][T24951] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000002 [ 596.160249][T24951] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 596.160264][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.160278][T24951] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 596.160309][T24951] [ 597.313547][T24977] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 597.552514][T24988] __vm_enough_memory: pid: 24988, comm: syz.3.8766, bytes: 4398046511104 not enough memory for the allocation [ 598.686033][T25025] netlink: 'syz.0.8781': attribute type 1 has an invalid length. [ 599.452896][T25050] netlink: 'syz.1.8793': attribute type 1 has an invalid length. [ 600.764879][T25093] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 601.493673][T25125] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 604.519591][T25215] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 604.903674][T25224] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8868'. [ 604.930480][T25226] FAULT_INJECTION: forcing a failure. [ 604.930480][T25226] name failslab, interval 1, probability 0, space 0, times 0 [ 604.994545][T25226] CPU: 0 UID: 0 PID: 25226 Comm: syz.1.8869 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 604.994590][T25226] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 604.994602][T25226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.994618][T25226] Call Trace: [ 604.994625][T25226] [ 604.994635][T25226] dump_stack_lvl+0x100/0x190 [ 604.994684][T25226] should_fail_ex.cold+0x5/0xa [ 604.994713][T25226] should_failslab+0xc2/0x120 [ 604.994738][T25226] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 604.994780][T25226] ? kstrdup_const+0x63/0x80 [ 604.994856][T25226] kstrdup+0x51/0xe0 [ 604.994896][T25226] kstrdup_const+0x63/0x80 [ 604.994935][T25226] alloc_vfsmnt+0xe5/0x6a0 [ 604.994965][T25226] ? __pfx___might_resched+0x10/0x10 [ 604.995004][T25226] clone_mnt+0x4b/0x930 [ 604.995043][T25226] copy_tree+0xfc/0xbf0 [ 604.995066][T25226] ? __pfx_down_write+0x10/0x10 [ 604.995107][T25226] copy_mnt_ns+0x2bd/0xc30 [ 604.995135][T25226] ? create_new_namespaces+0x30/0xac0 [ 604.995161][T25226] ? rcu_is_watching+0x12/0xc0 [ 604.995202][T25226] create_new_namespaces+0xd3/0xac0 [ 604.995227][T25226] ? bpf_lsm_capable+0x9/0x10 [ 604.995252][T25226] ? security_capable+0x80/0x260 [ 604.995338][T25226] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 604.995368][T25226] ksys_unshare+0x473/0xad0 [ 604.995400][T25226] ? __pfx_ksys_unshare+0x10/0x10 [ 604.995443][T25226] __x64_sys_unshare+0x31/0x40 [ 604.995473][T25226] do_syscall_64+0x106/0xf80 [ 604.995503][T25226] ? clear_bhb_loop+0x40/0x90 [ 604.995533][T25226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.995559][T25226] RIP: 0033:0x7fa5cbb9c799 [ 604.995581][T25226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.995606][T25226] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 604.995629][T25226] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 604.995646][T25226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 604.995661][T25226] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 604.995676][T25226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.995691][T25226] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 604.995722][T25226] [ 605.363696][T25230] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8868'. [ 605.660939][T25235] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 606.159556][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'. [ 607.089872][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8891'. [ 607.789057][T25300] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 607.844016][T25303] netlink: 'syz.1.8904': attribute type 11 has an invalid length. [ 607.875331][T25303] netlink: 'syz.1.8904': attribute type 11 has an invalid length. [ 607.916502][T25303] netlink: 'syz.1.8904': attribute type 11 has an invalid length. [ 607.940822][T25303] netlink: 'syz.1.8904': attribute type 11 has an invalid length. [ 610.008287][T25370] sctp: [Deprecated]: syz.2.8931 (pid 25370) Use of int in max_burst socket option deprecated. [ 610.008287][T25370] Use struct sctp_assoc_value instead [ 611.210412][T25408] syz.2.8948 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 611.479781][T25417] netlink: 'syz.2.8953': attribute type 1 has an invalid length. [ 611.729302][T25424] ucma_write: process 4422 (syz.2.8956) changed security contexts after opening file descriptor, this is not allowed. [ 613.157853][T25471] openvswitch: netlink: IP tunnel dst address not specified [ 613.431893][T25479] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 613.689688][T25490] netlink: Conntrack attr has 16 unknown bytes [ 615.162698][T25542] nbd: illegal input index -1073741824 [ 615.885130][T25568] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 615.958798][T25569] delete_channel: no stack [ 616.352568][T25582] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 618.266942][T25646] CIFS: VFS: Invalid SecurityFlags: [ 618.714842][T25650] syz.3.9062 (25650) used greatest stack depth: 19672 bytes left [ 618.843352][T25665] netlink: 'syz.1.9071': attribute type 2 has an invalid length. [ 620.305614][T25715] openvswitch: netlink: IP tunnel dst address not specified [ 620.579224][T25724] dyndbg: expected <4096 bytes into control [ 620.805884][T25733] FAULT_INJECTION: forcing a failure. [ 620.805884][T25733] name failslab, interval 1, probability 0, space 0, times 0 [ 620.842713][T25734] syz_tun: tun_chr_ioctl cmd 1074025681 [ 620.872335][T25733] CPU: 0 UID: 0 PID: 25733 Comm: syz.1.9103 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 620.872381][T25733] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 620.872392][T25733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.872408][T25733] Call Trace: [ 620.872415][T25733] [ 620.872425][T25733] dump_stack_lvl+0x100/0x190 [ 620.872467][T25733] should_fail_ex.cold+0x5/0xa [ 620.872496][T25733] should_failslab+0xc2/0x120 [ 620.872521][T25733] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 620.872563][T25733] ? security_file_alloc+0x34/0x2c0 [ 620.872589][T25733] ? trace_kmem_cache_alloc+0xf3/0x120 [ 620.872620][T25733] security_file_alloc+0x34/0x2c0 [ 620.872646][T25733] init_file+0x95/0x480 [ 620.872675][T25733] alloc_empty_file+0x73/0x1c0 [ 620.872712][T25733] dentry_open+0x46/0xd0 [ 620.872743][T25733] pidfs_alloc_file+0x18f/0x290 [ 620.872784][T25733] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 620.872831][T25733] pidfd_prepare+0x123/0x200 [ 620.872862][T25733] __x64_sys_pidfd_open+0x105/0x1a0 [ 620.872897][T25733] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 620.872946][T25733] do_syscall_64+0x106/0xf80 [ 620.872976][T25733] ? clear_bhb_loop+0x40/0x90 [ 620.873007][T25733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.873033][T25733] RIP: 0033:0x7fa5cbb9c799 [ 620.873059][T25733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.873084][T25733] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 620.873107][T25733] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 620.873124][T25733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 620.873139][T25733] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.873154][T25733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.873169][T25733] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 620.873200][T25733] [ 622.132627][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.141758][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.309217][T25809] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 623.432618][T25809] CIFS mount error: No usable UNC path provided in device string! [ 623.432618][T25809] [ 623.500761][T25809] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 624.551611][T25849] netlink: 'syz.2.9158': attribute type 11 has an invalid length. [ 624.594452][T25849] netlink: 'syz.2.9158': attribute type 11 has an invalid length. [ 624.641123][T25849] netlink: 'syz.2.9158': attribute type 11 has an invalid length. [ 624.734891][T25855] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 625.259817][T25871] HfR: entered promiscuous mode [ 625.992368][T25901] netlink: zone id is out of range [ 626.535372][ T30] audit: type=1800 audit(4295051263.633:38): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9191" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 628.703036][T14402] Bluetooth: hci1: SCO packet too small [ 629.625246][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9243'. [ 630.284566][T14402] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 630.701634][T26067] netlink: 'syz.3.9260': attribute type 1 has an invalid length. [ 630.781731][T26070] netlink: 'syz.1.9262': attribute type 1 has an invalid length. [ 631.267121][T26087] openvswitch: netlink: Flow actions attr not present in new flow. [ 633.784612][T26178] FAULT_INJECTION: forcing a failure. [ 633.784612][T26178] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 633.833296][T26178] CPU: 0 UID: 0 PID: 26178 Comm: syz.3.9311 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 633.833342][T26178] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 633.833353][T26178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.833368][T26178] Call Trace: [ 633.833376][T26178] [ 633.833385][T26178] dump_stack_lvl+0x100/0x190 [ 633.833427][T26178] should_fail_ex.cold+0x5/0xa [ 633.833457][T26178] _copy_to_user+0x32/0xd0 [ 633.833486][T26178] poll_select_finish+0x32f/0x670 [ 633.833528][T26178] ? __pfx_poll_select_finish+0x10/0x10 [ 633.833572][T26178] ? ktime_get_ts64+0x2d2/0x3f0 [ 633.833599][T26178] ? read_tsc+0x9/0x20 [ 633.833625][T26178] ? ktime_get_ts64+0x256/0x3f0 [ 633.833655][T26178] kern_select+0x21b/0x270 [ 633.833697][T26178] ? __pfx_kern_select+0x10/0x10 [ 633.833747][T26178] __x64_sys_select+0xbd/0x160 [ 633.833786][T26178] ? do_syscall_64+0x95/0xf80 [ 633.833816][T26178] ? lockdep_hardirqs_on+0x78/0x100 [ 633.833845][T26178] do_syscall_64+0x106/0xf80 [ 633.833881][T26178] ? clear_bhb_loop+0x40/0x90 [ 633.833912][T26178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.833938][T26178] RIP: 0033:0x7f777999c799 [ 633.833958][T26178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.833983][T26178] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 633.834006][T26178] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 633.834023][T26178] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000003 [ 633.834038][T26178] RBP: 00007f7779a32bd9 R08: 00002000000000c0 R09: 0000000000000000 [ 633.834053][T26178] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 633.834069][T26178] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 633.834100][T26178] [ 634.057659][T26180] netlink: 'syz.0.9312': attribute type 1 has an invalid length. [ 634.766815][T26200] NFSD: Failed to start, no listeners configured. [ 635.370308][T14402] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 635.370341][T14402] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 635.385691][T14402] Bluetooth: hci1: Dropping invalid advertising data [ 635.392487][T14402] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 635.392517][T14402] Bluetooth: hci1: Dropping invalid advertising data [ 635.409320][T14402] Bluetooth: hci1: Malformed LE Event: 0x02 [ 636.097317][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9341'. [ 636.201021][T26269] netlink: 29 bytes leftover after parsing attributes in process `syz.1.9341'. [ 636.420741][T26278] netlink: zone id is out of range [ 636.425900][T26278] netlink: zone id is out of range [ 636.469855][T26278] netlink: zone id is out of range [ 636.475034][T26278] netlink: zone id is out of range [ 636.509254][T26278] netlink: zone id is out of range [ 636.539571][T26278] netlink: zone id is out of range [ 636.558133][T26278] netlink: zone id is out of range [ 636.600024][T26278] netlink: zone id is out of range [ 636.628784][T26278] netlink: zone id is out of range [ 636.653662][T26278] netlink: zone id is out of range [ 636.692058][T26286] program syz.1.9348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.572791][T26314] NFSD: Failed to start, no listeners configured. [ 639.770985][T14402] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 639.771018][T14402] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 639.788453][T14402] Bluetooth: hci2: Dropping invalid advertising data [ 639.796394][T14402] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 639.796424][T14402] Bluetooth: hci2: Dropping invalid advertising data [ 639.810911][T14402] Bluetooth: hci2: Malformed LE Event: 0x02 [ 641.925726][T26487] net_ratelimit: 26 callbacks suppressed [ 641.925747][T26487] openvswitch: netlink: IPv4 tunnel dst address is zero [ 642.196245][T26494] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 642.226413][T26496] netlink: 'syz.3.9432': attribute type 1 has an invalid length. [ 642.836455][T26514] netlink: 'syz.3.9441': attribute type 11 has an invalid length. [ 642.886085][T26514] netlink: 'syz.3.9441': attribute type 11 has an invalid length. [ 642.926071][T26514] netlink: 'syz.3.9441': attribute type 11 has an invalid length. [ 644.150301][T26550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9455'. [ 644.480663][T26559] netlink: 'syz.3.9462': attribute type 1 has an invalid length. [ 646.234354][T26609] nbd: couldn't find device at index 33904 [ 646.617156][T26619] netlink: 'syz.3.9485': attribute type 2 has an invalid length. [ 646.625700][T26620] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 646.890214][T14402] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 646.890247][T14402] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 646.907957][T14402] Bluetooth: hci3: Dropping invalid advertising data [ 646.914733][T14402] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 646.914765][T14402] Bluetooth: hci3: Dropping invalid advertising data [ 646.929685][T14402] Bluetooth: hci3: Malformed LE Event: 0x02 [ 646.971816][T26628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9486'. [ 647.336108][T26649] netlink: 'syz.3.9490': attribute type 3 has an invalid length. [ 649.003723][T26698] netlink: NAT attribute has 4 unknown bytes [ 650.423190][T26738] openvswitch: netlink: Multiple metadata blocks provided [ 651.474176][T26762] netlink: del zone limit has 8 unknown bytes [ 651.751281][T26768] nbd: must specify an index to disconnect [ 652.990752][ T30] audit: type=1800 audit(4295051290.220:39): pid=26790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9540" name="dbroot" dev="configfs" ino=73182 res=0 errno=0 [ 653.706457][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9547'. [ 654.200685][T26816] openvswitch: netlink: Duplicate or invalid key (type 0). [ 655.059980][T14402] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 655.067596][T14402] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 657.520831][T26886] perf: Dynamic interrupt throttling disabled, can hang your system! [ 657.999817][T26895] netlink: 'syz.2.9589': attribute type 11 has an invalid length. [ 658.080819][T26895] netlink: 'syz.2.9589': attribute type 11 has an invalid length. [ 658.155626][T26895] netlink: 'syz.2.9589': attribute type 11 has an invalid length. [ 659.684946][T26931] delete_channel: no stack [ 659.698684][T26929] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9602'. [ 661.825271][T26972] openvswitch: netlink: IP tunnel TTL not specified. [ 664.707596][T27045] NFSD: Failed to start, no listeners configured. [ 664.764559][T27057] FAULT_INJECTION: forcing a failure. [ 664.764559][T27057] name failslab, interval 1, probability 0, space 0, times 0 [ 664.885932][T27057] CPU: 0 UID: 0 PID: 27057 Comm: syz.0.9646 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 664.885979][T27057] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 664.885991][T27057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.886006][T27057] Call Trace: [ 664.886014][T27057] [ 664.886023][T27057] dump_stack_lvl+0x100/0x190 [ 664.886067][T27057] should_fail_ex.cold+0x5/0xa [ 664.886095][T27057] should_failslab+0xc2/0x120 [ 664.886128][T27057] __kmalloc_cache_noprof+0x7a/0x6f0 [ 664.886161][T27057] ? sctp_endpoint_new+0xfc/0xb20 [ 664.886300][T27057] sctp_endpoint_new+0xfc/0xb20 [ 664.886335][T27057] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 664.886366][T27057] ? lockdep_init_map_type+0x5c/0x250 [ 664.886400][T27057] ? lockdep_init_map_type+0x5c/0x250 [ 664.886433][T27057] ? lockdep_init_map_type+0x5c/0x250 [ 664.886465][T27057] ? lockdep_init_map_type+0x5c/0x250 [ 664.886502][T27057] sctp_init_sock+0xe2b/0x1300 [ 664.886562][T27057] ? __pfx_sctp_init_sock+0x10/0x10 [ 664.886592][T27057] inet_create+0x94c/0x1060 [ 664.886633][T27057] ? inet_create+0x94/0x1060 [ 664.886675][T27057] __sock_create+0x339/0x860 [ 664.886720][T27057] __sys_socket+0x14d/0x260 [ 664.886760][T27057] ? __pfx___sys_socket+0x10/0x10 [ 664.886808][T27057] __x64_sys_socket+0x72/0xb0 [ 664.886847][T27057] ? lockdep_hardirqs_on+0x78/0x100 [ 664.886878][T27057] do_syscall_64+0x106/0xf80 [ 664.886906][T27057] ? clear_bhb_loop+0x40/0x90 [ 664.886939][T27057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.886964][T27057] RIP: 0033:0x7f03ed79c799 [ 664.886986][T27057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.887010][T27057] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 664.887034][T27057] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 664.887050][T27057] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 664.887065][T27057] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 664.887081][T27057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.887095][T27057] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 664.887133][T27057] [ 667.386775][T27112] No such timeout policy "" [ 667.402202][T27112] netlink: Failed to associated timeout policy '' [ 668.541612][T27146] netlink: 'syz.2.9689': attribute type 11 has an invalid length. [ 668.582493][T27146] netlink: 'syz.2.9689': attribute type 11 has an invalid length. [ 668.590358][T27146] netlink: 'syz.2.9689': attribute type 11 has an invalid length. [ 668.662122][T27146] netlink: 'syz.2.9689': attribute type 11 has an invalid length. [ 668.704363][T27145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.365315][T27254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9724'. [ 671.384581][T27256] netlink: 'syz.0.9725': attribute type 1 has an invalid length. [ 672.162873][T27293] FAULT_INJECTION: forcing a failure. [ 672.162873][T27293] name failslab, interval 1, probability 0, space 0, times 0 [ 672.217213][T27293] CPU: 0 UID: 0 PID: 27293 Comm: syz.3.9731 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 672.217260][T27293] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 672.217271][T27293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 672.217287][T27293] Call Trace: [ 672.217294][T27293] [ 672.217304][T27293] dump_stack_lvl+0x100/0x190 [ 672.217347][T27293] should_fail_ex.cold+0x5/0xa [ 672.217376][T27293] should_failslab+0xc2/0x120 [ 672.217401][T27293] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 672.217441][T27293] ? __d_alloc+0x34/0xa80 [ 672.217474][T27293] __d_alloc+0x34/0xa80 [ 672.217503][T27293] d_alloc+0x4a/0x1e0 [ 672.217532][T27293] lookup_one_qstr_excl+0x175/0x250 [ 672.217573][T27293] start_dirop+0x59/0xb0 [ 672.217613][T27293] simple_start_creating+0xf9/0x110 [ 672.217654][T27293] ? __pfx_simple_start_creating+0x10/0x10 [ 672.217695][T27293] ? mntput+0x70/0xa0 [ 672.217732][T27293] ? simple_pin_fs+0xa3/0x190 [ 672.217769][T27293] debugfs_start_creating.part.0+0x82/0x170 [ 672.217906][T27293] __debugfs_create_file+0xb3/0x4f0 [ 672.217949][T27293] debugfs_create_file_full+0x41/0x60 [ 672.217992][T27293] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 672.218022][T27293] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 672.218048][T27293] ? rcu_is_watching+0x12/0xc0 [ 672.218111][T27293] ? lockdep_init_map_type+0x5c/0x250 [ 672.218150][T27293] preinit_net.part.0+0x24e/0x8f0 [ 672.218208][T27293] copy_net_ns+0x339/0x7c0 [ 672.218246][T27293] create_new_namespaces+0x3ea/0xac0 [ 672.218279][T27293] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 672.218308][T27293] ksys_unshare+0x473/0xad0 [ 672.218341][T27293] ? __pfx_ksys_unshare+0x10/0x10 [ 672.218383][T27293] __x64_sys_unshare+0x31/0x40 [ 672.218414][T27293] do_syscall_64+0x106/0xf80 [ 672.218443][T27293] ? clear_bhb_loop+0x40/0x90 [ 672.218473][T27293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.218499][T27293] RIP: 0033:0x7f777999c799 [ 672.218519][T27293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.218550][T27293] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 672.218573][T27293] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 672.218590][T27293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 672.218605][T27293] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 672.218621][T27293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.218635][T27293] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 672.218667][T27293] [ 673.722093][T27370] usb usb26: usbfs: interface 0 claimed by hub while 'syz.1.9741' resets device [ 675.480394][T27444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9766'. [ 676.934203][T27502] netlink: 'syz.1.9784': attribute type 2 has an invalid length. [ 676.986430][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9784'. [ 677.599069][T27522] netlink: 'syz.0.9793': attribute type 2 has an invalid length. [ 679.471989][T27605] netlink: 'syz.2.9820': attribute type 11 has an invalid length. [ 679.516649][T27605] netlink: 'syz.2.9820': attribute type 11 has an invalid length. [ 679.524537][T27605] netlink: 'syz.2.9820': attribute type 11 has an invalid length. [ 679.595756][T27607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 679.666876][T27610] netlink: 'syz.0.9822': attribute type 4 has an invalid length. [ 679.704654][T27610] netlink: 'syz.0.9822': attribute type 1 has an invalid length. [ 681.699124][T27700] FAULT_INJECTION: forcing a failure. [ 681.699124][T27700] name failslab, interval 1, probability 0, space 0, times 0 [ 681.763917][T27700] CPU: 0 UID: 0 PID: 27700 Comm: syz.0.9855 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 681.763965][T27700] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 681.763976][T27700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.763991][T27700] Call Trace: [ 681.763999][T27700] [ 681.764008][T27700] dump_stack_lvl+0x100/0x190 [ 681.764052][T27700] should_fail_ex.cold+0x5/0xa [ 681.764081][T27700] should_failslab+0xc2/0x120 [ 681.764106][T27700] __kvmalloc_node_noprof+0xfa/0xa00 [ 681.764146][T27700] ? io_alloc_cache_init+0x38/0x170 [ 681.764268][T27700] ? lockdep_init_map_type+0x5c/0x250 [ 681.764306][T27700] io_alloc_cache_init+0x38/0x170 [ 681.764344][T27700] io_uring_setup.cold+0x3cd/0x1d09 [ 681.764385][T27700] ? __pfx_io_uring_setup+0x10/0x10 [ 681.764443][T27700] ? do_futex+0x192/0x350 [ 681.764475][T27700] ? __pfx_do_futex+0x10/0x10 [ 681.764522][T27700] ? xfd_validate_state+0x129/0x190 [ 681.764565][T27700] __x64_sys_io_uring_setup+0xc2/0x170 [ 681.764596][T27700] do_syscall_64+0x106/0xf80 [ 681.764626][T27700] ? clear_bhb_loop+0x40/0x90 [ 681.764656][T27700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.764682][T27700] RIP: 0033:0x7f03ed79c799 [ 681.764703][T27700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.764728][T27700] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 681.764751][T27700] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 681.764768][T27700] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 681.764790][T27700] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 681.764805][T27700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.764820][T27700] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 681.764851][T27700] [ 683.257693][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.264778][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.567144][ T30] audit: type=1326 audit(4295051320.959:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.2.9880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f197bd9c799 code=0x0 [ 683.620669][T14402] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 683.654416][T27760] netlink: 206 bytes leftover after parsing attributes in process `syz.1.9881'. [ 683.710104][T27762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9883'. [ 683.744649][T27762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9883'. [ 684.863934][T27805] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 685.043553][T27809] netlink: ct family unspecified [ 685.123625][T27813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 685.667629][ T30] audit: type=1326 audit(4295051323.070:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27828 comm="syz.0.9913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03ed79c799 code=0x0 [ 685.738161][T27833] netlink: 'syz.2.9915': attribute type 8 has an invalid length. [ 686.404072][T27859] openvswitch: netlink: Flow key attr not present in new flow. [ 686.658613][T27867] random: crng reseeded on system resumption [ 687.757040][T27905] netlink: 'syz.2.9945': attribute type 1 has an invalid length. [ 687.792287][T27905] nbd: error processing sock list [ 687.833047][T27909] netlink: zone id is out of range [ 687.867179][T27909] netlink: zone id is out of range [ 687.894635][T27909] netlink: zone id is out of range [ 687.920340][T27909] netlink: zone id is out of range [ 687.960260][T27909] netlink: zone id is out of range [ 688.032429][T27909] netlink: set zone limit has 8 unknown bytes [ 688.300374][T27922] FAULT_INJECTION: forcing a failure. [ 688.300374][T27922] name failslab, interval 1, probability 0, space 0, times 0 [ 688.344657][T27922] CPU: 0 UID: 0 PID: 27922 Comm: syz.2.9953 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 688.344702][T27922] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 688.344714][T27922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.344730][T27922] Call Trace: [ 688.344738][T27922] [ 688.344747][T27922] dump_stack_lvl+0x100/0x190 [ 688.344789][T27922] should_fail_ex.cold+0x5/0xa [ 688.344819][T27922] should_failslab+0xc2/0x120 [ 688.344844][T27922] __kmalloc_cache_noprof+0x7a/0x6f0 [ 688.344877][T27922] ? proc_self_get_link+0x189/0x1f0 [ 688.344965][T27922] proc_self_get_link+0x189/0x1f0 [ 688.345002][T27922] pick_link+0xac2/0x13c0 [ 688.345038][T27922] ? __pfx_proc_self_get_link+0x10/0x10 [ 688.345077][T27922] step_into_slowpath+0x9ba/0xf90 [ 688.345121][T27922] ? __pfx_step_into_slowpath+0x10/0x10 [ 688.345171][T27922] ? lookup_fast+0x2da/0x600 [ 688.345205][T27922] ? inode_permission+0x374/0x620 [ 688.345241][T27922] link_path_walk+0xf28/0x1cc0 [ 688.345289][T27922] path_openat+0x1be/0x31a0 [ 688.345313][T27922] ? kasan_save_stack+0x3f/0x50 [ 688.345350][T27922] ? kasan_save_stack+0x30/0x50 [ 688.345387][T27922] ? kasan_save_track+0x14/0x30 [ 688.345425][T27922] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 688.345470][T27922] ? __pfx_path_openat+0x10/0x10 [ 688.345506][T27922] do_file_open+0x20e/0x430 [ 688.345533][T27922] ? __pfx_do_file_open+0x10/0x10 [ 688.345579][T27922] ? alloc_fd+0x476/0x790 [ 688.345606][T27922] ? do_getname+0x191/0x390 [ 688.345639][T27922] do_sys_openat2+0x10d/0x1e0 [ 688.345672][T27922] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.345715][T27922] __x64_sys_openat+0x12d/0x210 [ 688.345748][T27922] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.345793][T27922] do_syscall_64+0x106/0xf80 [ 688.345823][T27922] ? clear_bhb_loop+0x40/0x90 [ 688.345853][T27922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.345879][T27922] RIP: 0033:0x7f197bd5cfce [ 688.345899][T27922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 688.345923][T27922] RSP: 002b:00007f197cd40ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.345947][T27922] RAX: ffffffffffffffda RBX: 00007f197cd416c0 RCX: 00007f197bd5cfce [ 688.345963][T27922] RDX: 0000000000000002 RSI: 00007f197cd40f90 RDI: ffffffffffffff9c [ 688.345979][T27922] RBP: 00007f197be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 688.345994][T27922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.346009][T27922] R13: 00007f197c016038 R14: 00007f197c015fa0 R15: 00007ffc43437e58 [ 688.346040][T27922] [ 689.128899][T27940] bond0: invalid ARP target specified [ 689.888518][T27968] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 690.245332][T27978] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 690.309930][T27982] openvswitch: netlink: IP tunnel dst address not specified [ 690.783171][T27996] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 691.498420][T28025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10003'. [ 693.022524][T28078] FAULT_INJECTION: forcing a failure. [ 693.022524][T28078] name failslab, interval 1, probability 0, space 0, times 0 [ 693.066428][T28081] openvswitch: netlink: Message has 20 unknown bytes. [ 693.085448][T28078] CPU: 0 UID: 0 PID: 28078 Comm: syz.1.10029 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 693.085500][T28078] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 693.085512][T28078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.085527][T28078] Call Trace: [ 693.085535][T28078] [ 693.085544][T28078] dump_stack_lvl+0x100/0x190 [ 693.085589][T28078] should_fail_ex.cold+0x5/0xa [ 693.085620][T28078] should_failslab+0xc2/0x120 [ 693.085646][T28078] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 693.085686][T28078] ? prepare_creds+0x2c/0x950 [ 693.085731][T28078] prepare_creds+0x2c/0x950 [ 693.085771][T28078] join_session_keyring+0x17/0x350 [ 693.085893][T28078] lookup_user_key+0xbf9/0x1300 [ 693.085936][T28078] ? __pfx_lookup_user_key+0x10/0x10 [ 693.085978][T28078] ? __pfx_do_futex+0x10/0x10 [ 693.086016][T28078] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 693.086064][T28078] ? xfd_validate_state+0x129/0x190 [ 693.086105][T28078] keyctl_keyring_link+0x57/0xe0 [ 693.086143][T28078] __do_sys_keyctl+0x1bf/0x5a0 [ 693.086182][T28078] do_syscall_64+0x106/0xf80 [ 693.086214][T28078] ? clear_bhb_loop+0x40/0x90 [ 693.086246][T28078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.086271][T28078] RIP: 0033:0x7fa5cbb9c799 [ 693.086292][T28078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.086316][T28078] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 693.086340][T28078] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 693.086356][T28078] RDX: ffffffffffffffff RSI: fffffffffffffffd RDI: 0000000000000008 [ 693.086372][T28078] RBP: 00007fa5cbc32bd9 R08: 0000000000000002 R09: 0000000000000000 [ 693.086388][T28078] R10: 0000000000005092 R11: 0000000000000246 R12: 0000000000000000 [ 693.086403][T28078] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 693.086434][T28078] [ 697.332193][T28215] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.593809][T28286] netlink: 'syz.2.10122': attribute type 3 has an invalid length. [ 700.343846][T28310] sd 0:0:1:0: PR command failed: 1026 [ 700.388443][T28310] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 700.410695][T28310] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 700.716969][T28324] netlink: 'syz.2.10141': attribute type 1 has an invalid length. [ 700.752328][T28324] netlink: 33 bytes leftover after parsing attributes in process `syz.2.10141'. [ 702.002914][T28366] sctp: [Deprecated]: syz.2.10161 (pid 28366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.002914][T28366] Use struct sctp_sack_info instead [ 702.557452][T28384] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 702.590035][T28384] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 703.236267][T28410] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 703.849645][T28430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 705.142632][T28466] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.149431][T28466] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 705.618520][T28480] openvswitch: netlink: IPv6 tunnel dst address is zero [ 706.466277][T28507] Invalid ELF header magic: != ELF [ 706.899991][T28524] syz.2.10235 (28524): /proc/28523/oom_adj is deprecated, please use /proc/28523/oom_score_adj instead. [ 708.608340][T28584] netlink: 29 bytes leftover after parsing attributes in process `syz.2.10257'. [ 710.134292][T28636] FAULT_INJECTION: forcing a failure. [ 710.134292][T28636] name failslab, interval 1, probability 0, space 0, times 0 [ 710.189497][T28636] CPU: 0 UID: 0 PID: 28636 Comm: syz.2.10276 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 710.189543][T28636] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 710.189555][T28636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.189571][T28636] Call Trace: [ 710.189579][T28636] [ 710.189588][T28636] dump_stack_lvl+0x100/0x190 [ 710.189631][T28636] should_fail_ex.cold+0x5/0xa [ 710.189660][T28636] should_failslab+0xc2/0x120 [ 710.189686][T28636] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 710.189723][T28636] ? sk_prot_alloc+0x60/0x2a0 [ 710.189768][T28636] sk_prot_alloc+0x60/0x2a0 [ 710.189805][T28636] sk_alloc+0x36/0xe80 [ 710.189835][T28636] tipc_sk_create+0xf9/0x2420 [ 710.189992][T28636] ? find_held_lock+0x2b/0x80 [ 710.190015][T28636] ? __sock_create+0x2f3/0x860 [ 710.190052][T28636] ? __sock_create+0x2f3/0x860 [ 710.190095][T28636] __sock_create+0x339/0x860 [ 710.190137][T28636] __sys_socket+0x14d/0x260 [ 710.190178][T28636] ? __pfx___sys_socket+0x10/0x10 [ 710.190226][T28636] __x64_sys_socket+0x72/0xb0 [ 710.190264][T28636] ? lockdep_hardirqs_on+0x78/0x100 [ 710.190295][T28636] do_syscall_64+0x106/0xf80 [ 710.190365][T28636] ? clear_bhb_loop+0x40/0x90 [ 710.190396][T28636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.190421][T28636] RIP: 0033:0x7f197bd9c799 [ 710.190442][T28636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.190470][T28636] RSP: 002b:00007f197cd41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 710.190494][T28636] RAX: ffffffffffffffda RBX: 00007f197c015fa0 RCX: 00007f197bd9c799 [ 710.190511][T28636] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 710.190526][T28636] RBP: 00007f197be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 710.190542][T28636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.190556][T28636] R13: 00007f197c016038 R14: 00007f197c015fa0 R15: 00007ffc43437e58 [ 710.190588][T28636] [ 710.552151][T28608] kexec: Could not allocate control_code_buffer [ 711.684120][T28669] zswap: compressor  not available [ 712.286349][T28700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10303'. [ 712.455204][T28704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10305'. [ 712.724408][T28711] FAULT_INJECTION: forcing a failure. [ 712.724408][T28711] name failslab, interval 1, probability 0, space 0, times 0 [ 712.786444][T28711] CPU: 0 UID: 0 PID: 28711 Comm: syz.2.10308 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 712.786492][T28711] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 712.786503][T28711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.786519][T28711] Call Trace: [ 712.786527][T28711] [ 712.786536][T28711] dump_stack_lvl+0x100/0x190 [ 712.786578][T28711] should_fail_ex.cold+0x5/0xa [ 712.786615][T28711] should_failslab+0xc2/0x120 [ 712.786642][T28711] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 712.786680][T28711] ? key_alloc+0x3c5/0x1310 [ 712.786704][T28711] ? rcu_is_watching+0x12/0xc0 [ 712.786748][T28711] key_alloc+0x3c5/0x1310 [ 712.786782][T28711] ? __pfx_key_alloc+0x10/0x10 [ 712.786814][T28711] keyring_alloc+0x44/0xc0 [ 712.786845][T28711] lookup_user_key+0x9b8/0x1300 [ 712.786890][T28711] ? __pfx_lookup_user_key+0x10/0x10 [ 712.786930][T28711] ? do_futex+0x192/0x350 [ 712.786962][T28711] ? __pfx_do_futex+0x10/0x10 [ 712.786996][T28711] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 712.787040][T28711] ? __x64_sys_futex+0x34f/0x4d0 [ 712.787071][T28711] ? __x64_sys_futex+0x358/0x4d0 [ 712.787110][T28711] keyctl_watch_key+0x52/0x500 [ 712.787150][T28711] __do_sys_keyctl+0x29f/0x5a0 [ 712.787189][T28711] do_syscall_64+0x106/0xf80 [ 712.787219][T28711] ? clear_bhb_loop+0x40/0x90 [ 712.787249][T28711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.787275][T28711] RIP: 0033:0x7f197bd9c799 [ 712.787295][T28711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.787319][T28711] RSP: 002b:00007f197cd41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 712.787343][T28711] RAX: ffffffffffffffda RBX: 00007f197c015fa0 RCX: 00007f197bd9c799 [ 712.787359][T28711] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 712.787375][T28711] RBP: 00007f197be32bd9 R08: 0000000000000008 R09: 0000000000000000 [ 712.787390][T28711] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 712.787405][T28711] R13: 00007f197c016038 R14: 00007f197c015fa0 R15: 00007ffc43437e58 [ 712.787436][T28711] [ 713.419363][T28713] could not allocate digest TFM handle  [ 713.764572][T28743] netlink: 'syz.3.10321': attribute type 2 has an invalid length. [ 715.203974][ T30] audit: type=1800 audit(4295051352.754:42): pid=28785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10339" name="dbroot" dev="configfs" ino=79917 res=0 errno=0 [ 718.307553][T28882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10381'. [ 719.770514][T28930] sctp: [Deprecated]: syz.0.10403 (pid 28930) Use of int in maxseg socket option. [ 719.770514][T28930] Use struct sctp_assoc_value instead [ 722.842018][T29018] FAULT_INJECTION: forcing a failure. [ 722.842018][T29018] name failslab, interval 1, probability 0, space 0, times 0 [ 722.960283][T29018] CPU: 0 UID: 0 PID: 29018 Comm: syz.0.10439 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 722.960331][T29018] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 722.960342][T29018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.960358][T29018] Call Trace: [ 722.960366][T29018] [ 722.960375][T29018] dump_stack_lvl+0x100/0x190 [ 722.960418][T29018] should_fail_ex.cold+0x5/0xa [ 722.960447][T29018] ? lsm_blob_alloc+0x68/0x90 [ 722.960477][T29018] should_failslab+0xc2/0x120 [ 722.960503][T29018] __kmalloc_noprof+0xe0/0x850 [ 722.960540][T29018] ? trace_kmem_cache_alloc+0xf3/0x120 [ 722.960571][T29018] lsm_blob_alloc+0x68/0x90 [ 722.960602][T29018] security_prepare_creds+0x2d/0x290 [ 722.960632][T29018] prepare_creds+0x5d6/0x950 [ 722.960673][T29018] lookup_user_key+0x8e9/0x1300 [ 722.960715][T29018] ? __pfx_lookup_user_key+0x10/0x10 [ 722.960756][T29018] ? find_held_lock+0x2b/0x80 [ 722.960779][T29018] ? setid_policy_lookup+0x10c/0x350 [ 722.960877][T29018] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 722.960924][T29018] ? bpf_lsm_capable+0x9/0x10 [ 722.960951][T29018] ? security_capable+0x80/0x260 [ 722.960988][T29018] keyctl_get_persistent+0x197/0x8b0 [ 722.961019][T29018] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 722.961052][T29018] ? __x64_sys_futex+0x34f/0x4d0 [ 722.961083][T29018] ? __x64_sys_futex+0x358/0x4d0 [ 722.961118][T29018] ? xfd_validate_state+0x129/0x190 [ 722.961160][T29018] __do_sys_keyctl+0x3b2/0x5a0 [ 722.961199][T29018] do_syscall_64+0x106/0xf80 [ 722.961236][T29018] ? clear_bhb_loop+0x40/0x90 [ 722.961267][T29018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.961292][T29018] RIP: 0033:0x7f03ed79c799 [ 722.961315][T29018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.961340][T29018] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 722.961364][T29018] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 722.961381][T29018] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 722.961396][T29018] RBP: 00007f03ed832bd9 R08: 000000000000000c R09: 0000000000000000 [ 722.961411][T29018] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 722.961426][T29018] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 722.961457][T29018] [ 723.626227][T29027] sd 0:0:1:0: PR command failed: 1026 [ 723.646115][T29027] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 723.652927][T29027] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 724.969695][T29060] FAULT_INJECTION: forcing a failure. [ 724.969695][T29060] name failslab, interval 1, probability 0, space 0, times 0 [ 725.055083][T29060] CPU: 0 UID: 0 PID: 29060 Comm: syz.0.10458 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 725.055131][T29060] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 725.055143][T29060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.055158][T29060] Call Trace: [ 725.055166][T29060] [ 725.055175][T29060] dump_stack_lvl+0x100/0x190 [ 725.055219][T29060] should_fail_ex.cold+0x5/0xa [ 725.055247][T29060] should_failslab+0xc2/0x120 [ 725.055273][T29060] __kvmalloc_node_noprof+0xfa/0xa00 [ 725.055313][T29060] ? keyctl_update_key+0xdf/0x160 [ 725.055354][T29060] keyctl_update_key+0xdf/0x160 [ 725.055391][T29060] __do_sys_keyctl+0x302/0x5a0 [ 725.055430][T29060] do_syscall_64+0x106/0xf80 [ 725.055459][T29060] ? clear_bhb_loop+0x40/0x90 [ 725.055490][T29060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.055516][T29060] RIP: 0033:0x7f03ed79c799 [ 725.055535][T29060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.055559][T29060] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 725.055584][T29060] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 725.055600][T29060] RDX: 0000000000000107 RSI: ffffeffffffffffe RDI: 0000000000000002 [ 725.055616][T29060] RBP: 00007f03ed832bd9 R08: 000800000000000c R09: 0000000000000000 [ 725.055631][T29060] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 725.055646][T29060] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 725.055680][T29060] [ 726.492200][T29094] bridge0: port 3(syz_tun) entered blocking state [ 726.529749][T29094] bridge0: port 3(syz_tun) entered disabled state [ 726.558186][T29094] syz_tun: entered allmulticast mode [ 726.591346][T29094] syz_tun: entered promiscuous mode [ 726.676693][T29096] netlink: 342 bytes leftover after parsing attributes in process `syz.1.10475'. [ 726.862876][T29099] UHID_CREATE from different security context by process 5233 (syz.2.10477), this is not allowed. [ 727.920156][T29116] bridge0: port 3(veth0_to_bridge) entered blocking state [ 727.984119][T29116] bridge0: port 3(veth0_to_bridge) entered disabled state [ 728.073289][T29116] veth0_to_bridge: entered allmulticast mode [ 728.113349][T29116] veth0_to_bridge: entered promiscuous mode [ 728.175423][T29116] bridge0: port 3(veth0_to_bridge) entered blocking state [ 728.183101][T29116] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 728.686320][T29134] FAULT_INJECTION: forcing a failure. [ 728.686320][T29134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.799777][T29136] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 728.837695][T29134] CPU: 0 UID: 0 PID: 29134 Comm: syz.3.10493 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 728.837741][T29134] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 728.837753][T29134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.837768][T29134] Call Trace: [ 728.837776][T29134] [ 728.837785][T29134] dump_stack_lvl+0x100/0x190 [ 728.837828][T29134] should_fail_ex.cold+0x5/0xa [ 728.837857][T29134] _copy_from_user+0x2e/0xd0 [ 728.837883][T29134] get_itimerspec64+0x16c/0x2f0 [ 728.837913][T29134] ? __pfx_get_itimerspec64+0x10/0x10 [ 728.837943][T29134] ? __pfx_do_futex+0x10/0x10 [ 728.837981][T29134] __x64_sys_timerfd_settime+0x15f/0x280 [ 728.838019][T29134] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 728.838057][T29134] ? xfd_validate_state+0x129/0x190 [ 728.838104][T29134] do_syscall_64+0x106/0xf80 [ 728.838134][T29134] ? clear_bhb_loop+0x40/0x90 [ 728.838163][T29134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.838189][T29134] RIP: 0033:0x7f777999c799 [ 728.838209][T29134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.838234][T29134] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 728.838257][T29134] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 728.838273][T29134] RDX: 0000200000000040 RSI: 0000000000000003 RDI: ffffffffffffffff [ 728.838289][T29134] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 728.838304][T29134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.838319][T29134] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 728.838350][T29134] [ 732.621513][T29234] FAULT_INJECTION: forcing a failure. [ 732.621513][T29234] name failslab, interval 1, probability 0, space 0, times 0 [ 732.729408][T29234] CPU: 0 UID: 0 PID: 29234 Comm: syz.0.10532 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 732.729454][T29234] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 732.729473][T29234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.729489][T29234] Call Trace: [ 732.729498][T29234] [ 732.729507][T29234] dump_stack_lvl+0x100/0x190 [ 732.729550][T29234] should_fail_ex.cold+0x5/0xa [ 732.729579][T29234] should_failslab+0xc2/0x120 [ 732.729604][T29234] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 732.729642][T29234] ? alloc_uid+0x13d/0x4c0 [ 732.729671][T29234] ? rcu_is_watching+0x12/0xc0 [ 732.729714][T29234] alloc_uid+0x13d/0x4c0 [ 732.729742][T29234] ? __pfx_alloc_uid+0x10/0x10 [ 732.729771][T29234] ? bpf_lsm_cred_prepare+0x9/0x10 [ 732.729795][T29234] ? security_prepare_creds+0xa8/0x290 [ 732.729830][T29234] __sys_setresuid+0x4f2/0x1280 [ 732.729860][T29234] do_syscall_64+0x106/0xf80 [ 732.729889][T29234] ? clear_bhb_loop+0x40/0x90 [ 732.729920][T29234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.729946][T29234] RIP: 0033:0x7f03ed79c799 [ 732.729966][T29234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.729991][T29234] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 732.730014][T29234] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 732.730031][T29234] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 732.730045][T29234] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 732.730060][T29234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.730075][T29234] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 732.730106][T29234] [ 734.155474][T29280] FAULT_INJECTION: forcing a failure. [ 734.155474][T29280] name failslab, interval 1, probability 0, space 0, times 0 [ 734.230227][T29282] sock: sock_timestamping_bind_phc: sock not bind to device [ 734.305341][T29280] CPU: 0 UID: 0 PID: 29280 Comm: syz.1.10542 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 734.305388][T29280] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 734.305399][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.305414][T29280] Call Trace: [ 734.305422][T29280] [ 734.305430][T29280] dump_stack_lvl+0x100/0x190 [ 734.305474][T29280] should_fail_ex.cold+0x5/0xa [ 734.305504][T29280] should_failslab+0xc2/0x120 [ 734.305529][T29280] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 734.305568][T29280] ? copy_net_ns+0xe8/0x7c0 [ 734.305609][T29280] copy_net_ns+0xe8/0x7c0 [ 734.305642][T29280] ? copy_cgroup_ns+0x71/0x970 [ 734.305673][T29280] create_new_namespaces+0x3ea/0xac0 [ 734.305705][T29280] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 734.305735][T29280] ksys_unshare+0x473/0xad0 [ 734.305767][T29280] ? __pfx_ksys_unshare+0x10/0x10 [ 734.305809][T29280] __x64_sys_unshare+0x31/0x40 [ 734.305839][T29280] do_syscall_64+0x106/0xf80 [ 734.305869][T29280] ? clear_bhb_loop+0x40/0x90 [ 734.305899][T29280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.305924][T29280] RIP: 0033:0x7fa5cbb9c799 [ 734.305944][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.305968][T29280] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 734.305993][T29280] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 734.306009][T29280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 734.306024][T29280] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 734.306039][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.306054][T29280] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 734.306085][T29280] [ 735.528540][T29304] bridge0: port 4(dummy0) entered blocking state [ 735.572756][T29304] bridge0: port 4(dummy0) entered disabled state [ 735.592487][T29307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10556'. [ 735.614060][T29304] dummy0: entered allmulticast mode [ 735.637207][T29304] dummy0: entered promiscuous mode [ 735.667809][T29304] bridge0: port 4(dummy0) entered blocking state [ 735.674351][T29304] bridge0: port 4(dummy0) entered forwarding state [ 736.760002][T29334] Invalid ELF header magic: != ELF [ 737.344544][T14402] Bluetooth: hci2: unexpected event 0x03 length: 43 > 11 [ 738.109899][T29381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10583'. [ 738.521793][T29406] netlink: 21 bytes leftover after parsing attributes in process `syz.0.10588'. [ 739.044657][T29423] FAULT_INJECTION: forcing a failure. [ 739.044657][T29423] name failslab, interval 1, probability 0, space 0, times 0 [ 739.108509][T29423] CPU: 0 UID: 0 PID: 29423 Comm: syz.2.10593 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 739.108556][T29423] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 739.108567][T29423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.108582][T29423] Call Trace: [ 739.108590][T29423] [ 739.108599][T29423] dump_stack_lvl+0x100/0x190 [ 739.108642][T29423] should_fail_ex.cold+0x5/0xa [ 739.108671][T29423] should_failslab+0xc2/0x120 [ 739.108697][T29423] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 739.108741][T29423] ? __anon_vma_prepare+0x344/0x5e0 [ 739.108781][T29423] __anon_vma_prepare+0x344/0x5e0 [ 739.108813][T29423] ? __pfx___pte_alloc+0x10/0x10 [ 739.108841][T29423] __vmf_anon_prepare+0x11f/0x250 [ 739.108871][T29423] do_anonymous_page+0x552/0x1fb0 [ 739.108906][T29423] ? do_huge_pmd_anonymous_page+0x7ee/0x1a60 [ 739.108951][T29423] __handle_mm_fault+0x1d42/0x2b60 [ 739.108989][T29423] ? mt_find+0x45e/0x8e0 [ 739.109101][T29423] ? __pfx___handle_mm_fault+0x10/0x10 [ 739.109134][T29423] ? __pfx_mt_find+0x10/0x10 [ 739.109190][T29423] handle_mm_fault+0x36d/0xa20 [ 739.109229][T29423] __get_user_pages+0xf9c/0x34d0 [ 739.109268][T29423] ? __pfx___get_user_pages+0x10/0x10 [ 739.109304][T29423] populate_vma_page_range+0x267/0x3f0 [ 739.109336][T29423] ? __pfx_populate_vma_page_range+0x10/0x10 [ 739.109365][T29423] ? __pfx_find_vma_intersection+0x10/0x10 [ 739.109393][T29423] ? do_mmap+0x93f/0x12f0 [ 739.109422][T29423] __mm_populate+0x107/0x3a0 [ 739.109453][T29423] ? __pfx___mm_populate+0x10/0x10 [ 739.109485][T29423] ? up_write+0x290/0x4f0 [ 739.109523][T29423] vm_mmap_pgoff+0x37f/0x470 [ 739.109554][T29423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 739.109584][T29423] ? do_futex+0x192/0x350 [ 739.109616][T29423] ? __pfx_do_futex+0x10/0x10 [ 739.109654][T29423] ksys_mmap_pgoff+0xe1/0x650 [ 739.109679][T29423] ? __x64_sys_futex+0x34f/0x4d0 [ 739.109710][T29423] ? __x64_sys_futex+0x358/0x4d0 [ 739.109748][T29423] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 739.109774][T29423] ? xfd_validate_state+0x129/0x190 [ 739.109816][T29423] __x64_sys_mmap+0x125/0x190 [ 739.109857][T29423] do_syscall_64+0x106/0xf80 [ 739.109886][T29423] ? clear_bhb_loop+0x40/0x90 [ 739.109917][T29423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.109943][T29423] RIP: 0033:0x7f197bd9c799 [ 739.109963][T29423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.109988][T29423] RSP: 002b:00007f197cd41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 739.110011][T29423] RAX: ffffffffffffffda RBX: 00007f197c015fa0 RCX: 00007f197bd9c799 [ 739.110028][T29423] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 739.110044][T29423] RBP: 00007f197be32bd9 R08: ffffffffffffffff R09: 0000000000008000 [ 739.110060][T29423] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 739.110075][T29423] R13: 00007f197c016038 R14: 00007f197c015fa0 R15: 00007ffc43437e58 [ 739.110106][T29423] [ 741.778794][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10626'. [ 742.381960][T29524] netlink: 'syz.1.10633': attribute type 4 has an invalid length. [ 742.436221][T29524] netlink: 62 bytes leftover after parsing attributes in process `syz.1.10633'. [ 742.771767][T29533] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 743.832372][T29579] random: crng reseeded on system resumption [ 744.373693][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.383872][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.216391][T29613] netlink: 186 bytes leftover after parsing attributes in process `syz.3.10663'. [ 746.477953][T29655] FAULT_INJECTION: forcing a failure. [ 746.477953][T29655] name failslab, interval 1, probability 0, space 0, times 0 [ 746.532402][T29655] CPU: 0 UID: 0 PID: 29655 Comm: syz.1.10679 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 746.532449][T29655] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 746.532460][T29655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.532475][T29655] Call Trace: [ 746.532483][T29655] [ 746.532492][T29655] dump_stack_lvl+0x100/0x190 [ 746.532535][T29655] should_fail_ex.cold+0x5/0xa [ 746.532565][T29655] should_failslab+0xc2/0x120 [ 746.532590][T29655] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 746.532632][T29655] ? register_pidns_sysctls+0x48/0x1c0 [ 746.532666][T29655] ? rcu_is_watching+0x12/0xc0 [ 746.532709][T29655] kmemdup_noprof+0x29/0x60 [ 746.532760][T29655] register_pidns_sysctls+0x48/0x1c0 [ 746.532808][T29655] ? __ns_common_init+0x299/0x4b0 [ 746.532840][T29655] copy_pid_ns+0x680/0x10a0 [ 746.532870][T29655] ? __pfx_copy_pid_ns+0x10/0x10 [ 746.532900][T29655] ? rcu_is_watching+0x12/0xc0 [ 746.532939][T29655] ? copy_mnt_ns+0x106/0xc30 [ 746.532968][T29655] ? create_new_namespaces+0x30/0xac0 [ 746.532999][T29655] create_new_namespaces+0x2aa/0xac0 [ 746.533030][T29655] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 746.533060][T29655] ksys_unshare+0x473/0xad0 [ 746.533099][T29655] ? __pfx_ksys_unshare+0x10/0x10 [ 746.533141][T29655] __x64_sys_unshare+0x31/0x40 [ 746.533172][T29655] do_syscall_64+0x106/0xf80 [ 746.533201][T29655] ? clear_bhb_loop+0x40/0x90 [ 746.533231][T29655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.533257][T29655] RIP: 0033:0x7fa5cbb9c799 [ 746.533277][T29655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.533301][T29655] RSP: 002b:00007fa5cca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 746.533325][T29655] RAX: ffffffffffffffda RBX: 00007fa5cbe15fa0 RCX: 00007fa5cbb9c799 [ 746.533341][T29655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 746.533356][T29655] RBP: 00007fa5cbc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 746.533371][T29655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.533386][T29655] R13: 00007fa5cbe16038 R14: 00007fa5cbe15fa0 R15: 00007ffe7eaa0d38 [ 746.533417][T29655] [ 749.410770][T29755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10711'. [ 750.907372][ T30] audit: type=1804 audit(4295051388.650:43): pid=29798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10731" name="/newroot/2749/file0" dev="tmpfs" ino=13824 res=1 errno=0 [ 751.180131][T29802] syz.1.10732 (29802) used obsolete PPPIOCDETACH ioctl [ 751.240850][T29810] FAULT_INJECTION: forcing a failure. [ 751.240850][T29810] name failslab, interval 1, probability 0, space 0, times 0 [ 751.342452][T29810] CPU: 0 UID: 0 PID: 29810 Comm: syz.3.10735 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 751.342499][T29810] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 751.342511][T29810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 751.342526][T29810] Call Trace: [ 751.342534][T29810] [ 751.342543][T29810] dump_stack_lvl+0x100/0x190 [ 751.342586][T29810] should_fail_ex.cold+0x5/0xa [ 751.342614][T29810] should_failslab+0xc2/0x120 [ 751.342641][T29810] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 751.342683][T29810] ? snd_timer_instance_new+0x65/0x2e0 [ 751.342838][T29810] kstrdup+0x51/0xe0 [ 751.342880][T29810] snd_timer_instance_new+0x65/0x2e0 [ 751.342921][T29810] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 751.342951][T29810] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 751.342985][T29810] ? rcu_is_watching+0x12/0xc0 [ 751.343031][T29810] ? snd_timer_user_ioctl+0x4a/0xd0 [ 751.343057][T29810] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 751.343095][T29810] ? __pfx___mutex_lock+0x10/0x10 [ 751.343133][T29810] ? find_held_lock+0x2b/0x80 [ 751.343171][T29810] snd_timer_user_ioctl+0x76/0xd0 [ 751.343195][T29810] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 751.343223][T29810] __x64_sys_ioctl+0x18e/0x210 [ 751.343261][T29810] do_syscall_64+0x106/0xf80 [ 751.343290][T29810] ? clear_bhb_loop+0x40/0x90 [ 751.343320][T29810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.343346][T29810] RIP: 0033:0x7f777999c799 [ 751.343366][T29810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.343391][T29810] RSP: 002b:00007f777a7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.343414][T29810] RAX: ffffffffffffffda RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 751.343431][T29810] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000003 [ 751.343446][T29810] RBP: 00007f7779a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 751.343462][T29810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.343477][T29810] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 751.343508][T29810] [ 751.425443][T29814] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.10737'. [ 752.294610][T29831] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 753.845548][T29873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10767'. [ 754.017368][T14402] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 754.017400][T14402] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 754.033205][T14402] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 754.033232][T14402] Bluetooth: hci1: adv larger than maximum supported [ 754.040555][T14402] Bluetooth: hci1: adv larger than maximum supported [ 754.047301][T14402] Bluetooth: hci1: Malformed LE Event: 0x0d [ 754.600668][T29912] random: crng reseeded on system resumption [ 757.518528][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10799'. [ 758.918249][T30026] netlink: 346 bytes leftover after parsing attributes in process `syz.1.10813'. [ 759.434775][T30041] bridge0: port 5(batadv0) entered blocking state [ 759.501447][T30041] bridge0: port 5(batadv0) entered disabled state [ 759.559470][T30041] batadv0: entered allmulticast mode [ 759.630170][T30041] batadv0: entered promiscuous mode [ 759.695279][T30041] bridge0: port 5(batadv0) entered blocking state [ 759.701913][T30041] bridge0: port 5(batadv0) entered forwarding state [ 759.889671][T30043] zswap: compressor not available [ 760.037551][T14723] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 760.047258][T14723] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 760.331107][T30062] netlink: 'syz.0.10829': attribute type 1 has an invalid length. [ 760.890132][T30076] FAULT_INJECTION: forcing a failure. [ 760.890132][T30076] name failslab, interval 1, probability 0, space 0, times 0 [ 761.015098][T30076] CPU: 0 UID: 0 PID: 30076 Comm: syz.0.10835 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 761.015144][T30076] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 761.015156][T30076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.015171][T30076] Call Trace: [ 761.015179][T30076] [ 761.015188][T30076] dump_stack_lvl+0x100/0x190 [ 761.015230][T30076] should_fail_ex.cold+0x5/0xa [ 761.015260][T30076] should_failslab+0xc2/0x120 [ 761.015286][T30076] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 761.015324][T30076] ? sk_prot_alloc+0x60/0x2a0 [ 761.015359][T30076] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 761.015396][T30076] ? security_inode_alloc+0x3b/0x2c0 [ 761.015439][T30076] sk_prot_alloc+0x60/0x2a0 [ 761.015478][T30076] sk_alloc+0x36/0xe80 [ 761.015505][T30076] __vsock_create.constprop.0+0x3c/0xba0 [ 761.015618][T30076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.015662][T30076] vsock_create+0x126/0x510 [ 761.015710][T30076] __sock_create+0x339/0x860 [ 761.015754][T30076] __sys_socket+0x14d/0x260 [ 761.015795][T30076] ? __pfx___sys_socket+0x10/0x10 [ 761.015844][T30076] __x64_sys_socket+0x72/0xb0 [ 761.015883][T30076] ? lockdep_hardirqs_on+0x78/0x100 [ 761.015913][T30076] do_syscall_64+0x106/0xf80 [ 761.015941][T30076] ? clear_bhb_loop+0x40/0x90 [ 761.015980][T30076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.016006][T30076] RIP: 0033:0x7f03ed79c799 [ 761.016026][T30076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.016050][T30076] RSP: 002b:00007f03ee689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 761.016073][T30076] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79c799 [ 761.016090][T30076] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 761.016105][T30076] RBP: 00007f03ed832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 761.016123][T30076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.016138][T30076] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007ffcb5e0f858 [ 761.016170][T30076] [ 822.972558][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.707199][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 865.714206][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29944/1:b..l [ 865.722836][ C0] rcu: (detected by 0, t=10502 jiffies, g=152129, q=1582 ncpus=1) [ 865.730765][ C0] task:syz.3.10787 state:R running task stack:23168 pid:29944 tgid:29944 ppid:5826 task_flags:0x400640 flags:0x00080000 [ 865.745579][ C0] Call Trace: [ 865.748944][ C0] [ 865.751892][ C0] __schedule+0xfee/0x6120 [ 865.756349][ C0] ? __pfx___schedule+0x10/0x10 [ 865.761211][ C0] ? mark_held_locks+0x40/0x70 [ 865.765994][ C0] preempt_schedule_irq+0x50/0x90 [ 865.771056][ C0] irqentry_exit+0x17b/0x670 [ 865.775665][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.781664][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 865.786892][ C0] Code: 05 fb d8 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 5f f5 0e 0f 82 c2 02 00 00 8b 35 8e 93 f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d d8 28 12 0f 85 02 03 00 00 48 83 c4 [ 865.806542][ C0] RSP: 0018:ffffc900073b6848 EFLAGS: 00000206 [ 865.812646][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002 [ 865.820657][ C0] RDX: 0000000000000000 RSI: ffffffff8de55dc8 RDI: ffffffff8c1af7a0 [ 865.828681][ C0] RBP: ffffffff8e7e9220 R08: 0000000005f465ea R09: 0000000000000007 [ 865.836676][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 865.844669][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.852680][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 865.858088][ C0] ? __pfx_xa_find+0x10/0x10 [ 865.862794][ C0] get_mem_cgroup_from_mm+0x53/0x600 [ 865.868128][ C0] ? get_mem_cgroup_from_mm+0x42/0x600 [ 865.873660][ C0] __mem_cgroup_charge+0x1a/0x1e0 [ 865.878710][ C0] shmem_alloc_and_add_folio+0x451/0xd40 [ 865.884398][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 865.890620][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 865.896646][ C0] shmem_get_folio_gfp+0xab1/0x1900 [ 865.901958][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 865.907630][ C0] ? filemap_map_pages+0xe69/0x2020 [ 865.912872][ C0] shmem_fault+0x1f9/0xa20 [ 865.917329][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 865.922301][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 865.927858][ C0] __do_fault+0x10d/0x550 [ 865.932227][ C0] do_fault+0xaf9/0x1950 [ 865.936489][ C0] __handle_mm_fault+0x180f/0x2b60 [ 865.941630][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 865.947111][ C0] ? pte_offset_map_lock+0x174/0x320 [ 865.952416][ C0] ? find_held_lock+0x2b/0x80 [ 865.957116][ C0] ? follow_page_pte+0x5b3/0x1400 [ 865.962161][ C0] handle_mm_fault+0x36d/0xa20 [ 865.966962][ C0] __get_user_pages+0xf9c/0x34d0 [ 865.971924][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 865.977331][ C0] get_dump_page+0x27e/0x3d0 [ 865.981939][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 865.987086][ C0] ? dump_user_range+0x73b/0xb50 [ 865.992054][ C0] dump_user_range+0x18d/0xb50 [ 865.996855][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 866.002180][ C0] ? __pfx_writenote+0x10/0x10 [ 866.006975][ C0] elf_core_dump+0x2d5f/0x3d10 [ 866.011778][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 866.016911][ C0] ? kasan_save_stack+0x3f/0x50 [ 866.021785][ C0] ? kasan_save_stack+0x30/0x50 [ 866.026660][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 866.031445][ C0] ? __kvmalloc_node_noprof+0x360/0xa00 [ 866.037086][ C0] ? vfs_coredump+0x2105/0x5570 [ 866.041977][ C0] ? asm_exc_page_fault+0x26/0x30 [ 866.047030][ C0] ? 0xffffffffff600000 [ 866.051240][ C0] ? vfs_coredump+0x27bc/0x5570 [ 866.056107][ C0] vfs_coredump+0x27bc/0x5570 [ 866.060835][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 866.065898][ C0] ? __lock_acquire+0x4a5/0x2630 [ 866.070891][ C0] ? lock_acquire+0x1cf/0x380 [ 866.075600][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 866.080910][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 866.085702][ C0] ? __kernel_text_address+0xd/0x30 [ 866.090923][ C0] ? unwind_get_return_address+0x59/0xa0 [ 866.096576][ C0] ? arch_stack_walk+0xa6/0xf0 [ 866.101408][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 866.106325][ C0] ? stack_trace_save+0x8e/0xc0 [ 866.111209][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 866.116603][ C0] ? __send_signal_locked+0x155/0x12d0 [ 866.122111][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 866.127713][ C0] ? __lock_acquire+0x4a5/0x2630 [ 866.132727][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 866.138526][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 866.144554][ C0] ? rcu_is_watching+0x12/0xc0 [ 866.149368][ C0] get_signal+0x1f2a/0x21e0 [ 866.153914][ C0] ? __pfx_get_signal+0x10/0x10 [ 866.158794][ C0] ? bad_area_access_error+0xab/0x1d0 [ 866.164214][ C0] ? fixup_vdso_exception+0x2d1/0x370 [ 866.169655][ C0] arch_do_signal_or_restart+0x91/0x770 [ 866.175271][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 866.181486][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 866.186907][ C0] irqentry_exit+0x1f8/0x670 [ 866.191568][ C0] asm_exc_page_fault+0x26/0x30 [ 866.196452][ C0] RIP: 0033:0x0 [ 866.199923][ C0] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 866.206005][ C0] RAX: 0000000000000000 RBX: 00007f7779c15fa0 RCX: 00007f777999c799 [ 866.214006][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 866.222028][ C0] RBP: 00007f7779a32bd9 R08: 0000000000000002 R09: 0000000000000000 [ 866.230021][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.238007][ C0] R13: 00007f7779c16038 R14: 00007f7779c15fa0 R15: 00007ffd3f500ea8 [ 866.246027][ C0] [ 869.123103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.357762][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.564108][ T1298] ieee802154 phy1 wpan1: encryption failed: -22