last executing test programs: 6m51.857590745s ago: executing program 1 (id=6624): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) 6m51.64814442s ago: executing program 1 (id=6629): socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) 6m51.508607993s ago: executing program 1 (id=6631): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) write$auto(r0, &(0x7f0000000800)='/:,^]@\x00', 0x5) 6m51.338407248s ago: executing program 1 (id=6635): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 6m51.16495646s ago: executing program 1 (id=6639): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 6m50.329737846s ago: executing program 1 (id=6654): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) 6m49.904459376s ago: executing program 32 (id=6654): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) 3.438012444s ago: executing program 3 (id=12286): mmap$auto(0x0, 0x400, 0x647a, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x4, 0x40000006, 0x0, 0x0, 0x80000001) 2.471321974s ago: executing program 0 (id=12297): r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto_TIOCGICOUNT2(0xffffffffffffffff, 0x545d, &(0x7f0000000180)="1554e7bbb1167137bc0fe018b053f09c864bdf47a5ddd35708eb05671011f84224e0f820600d3016e8bcd68ae54bde896d8eb59ed7135feb62f9") write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) 2.303514556s ago: executing program 0 (id=12299): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9) ppoll$auto(&(0x7f0000000180)={r0, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x1a3342, 0x24) 2.259118106s ago: executing program 3 (id=12300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) 1.936571768s ago: executing program 2 (id=12303): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) 1.840362685s ago: executing program 2 (id=12304): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.657894389s ago: executing program 2 (id=12307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200408a0) 1.462307401s ago: executing program 2 (id=12309): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x1, 0x0, 0x0) 1.339359614s ago: executing program 0 (id=12311): mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.157791375s ago: executing program 0 (id=12312): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 1.152168909s ago: executing program 4 (id=12313): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x0, 0x1e02c17c, 0x401, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x0, 0x80, 0x4, @inferred, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x1f}, 0x5, &(0x7f00000003c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) 1.064681002s ago: executing program 2 (id=12314): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) 959.536953ms ago: executing program 4 (id=12315): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4bfb, r1) 932.107126ms ago: executing program 0 (id=12316): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, &(0x7f00000002c0), 0x5) 843.150156ms ago: executing program 2 (id=12317): r0 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf250200140008000300", @ANYRES32=r2, @ANYBLOB="08000b01"], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) 198.021822ms ago: executing program 4 (id=12322): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x3a) setreuid$auto(0xffffffffffffffff, 0x8) ioctl$auto(r0, 0x890c, 0x1) 119.433449ms ago: executing program 3 (id=12323): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mprotect$auto(0x0, 0x806121, 0x6) 54.584278ms ago: executing program 4 (id=12324): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x12, 0x8000000000000000, 0x8000) 30.722144ms ago: executing program 0 (id=12325): socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 0s ago: executing program 3 (id=12326): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x0, 0x1e02c17c, 0x401, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x0, 0x80, 0x4, @inferred, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x1f}, 0x5, &(0x7f00000003c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) kernel console output (not intermixed with test programs): 81][T21058] vhci_hcd: not connected 4 [ 456.857605][T21059] block loop4: the capability attribute has been deprecated. [ 458.359768][T13782] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 460.887773][T21199] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 461.276114][T21216] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.521938][T21222] openvswitch: netlink: IPv4 tunnel dst address is zero [ 461.585021][T21228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 463.022396][T21281] netlink: 'syz.0.7485': attribute type 1 has an invalid length. [ 463.838386][T21305] openvswitch: netlink: IP tunnel dst address not specified [ 464.667851][T21333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 464.894205][T21342] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 467.162321][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 467.690412][T21428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7557'. [ 469.076425][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7580'. [ 469.957112][T21501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7591'. [ 470.351623][T21514] aoe: could not set interface list: too many interfaces [ 471.158639][T21538] netlink: 'syz.4.7617': attribute type 23 has an invalid length. [ 473.242640][ T29] audit: type=1326 audit(4295004159.016:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21603 comm="syz.4.7641" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325e79de99 code=0x0 [ 473.866936][T21629] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 474.363065][T13782] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 474.475990][T21647] netlink: 'syz.3.7662': attribute type 1 has an invalid length. [ 476.771550][T21726] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7700'. [ 478.127625][T21767] netlink: Invalid conntrack helper [ 478.503163][T21778] Zero length message leads to an empty skb [ 478.752844][T21790] netlink: zone id is out of range [ 478.785507][T21790] netlink: zone id is out of range [ 478.813218][T21790] netlink: zone id is out of range [ 478.845776][T21790] netlink: get zone limit has 4 unknown bytes [ 478.922765][T21795] openvswitch: netlink: Duplicate or invalid key (type 0). [ 478.956272][T21797] netlink: zone id is out of range [ 480.035047][T21836] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 480.775609][T21854] HfR: entered promiscuous mode [ 482.223755][ T5789] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 482.344489][ T5789] CPU: 0 UID: 0 PID: 5789 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 482.344522][ T5789] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 482.344528][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 482.344539][ T5789] Call Trace: [ 482.344545][ T5789] [ 482.344552][ T5789] dump_stack_lvl+0x100/0x190 [ 482.344577][ T5789] dump_header+0xfb/0x606 [ 482.344598][ T5789] oom_kill_process.cold+0xd/0x330 [ 482.344620][ T5789] out_of_memory+0x340/0x14f0 [ 482.344655][ T5789] ? __pfx_out_of_memory+0x10/0x10 [ 482.344691][ T5789] mem_cgroup_out_of_memory+0xc6/0x130 [ 482.344711][ T5789] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 482.344731][ T5789] ? find_held_lock+0x2b/0x80 [ 482.344764][ T5789] ? do_raw_spin_unlock+0x145/0x1e0 [ 482.344796][ T5789] ? _raw_spin_unlock+0x28/0x50 [ 482.344817][ T5789] try_charge_memcg+0x6e5/0xdf0 [ 482.344849][ T5789] ? __pfx_try_charge_memcg+0x10/0x10 [ 482.344876][ T5789] ? find_held_lock+0x2b/0x80 [ 482.344902][ T5789] ? rcu_read_unlock+0x17/0x60 [ 482.344929][ T5789] ? rcu_read_unlock+0x17/0x60 [ 482.344956][ T5789] ? find_held_lock+0x2b/0x80 [ 482.344979][ T5789] ? rcu_read_unlock+0x17/0x60 [ 482.345012][ T5789] charge_memcg+0x187/0x1e0 [ 482.345040][ T5789] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 482.345075][ T5789] swap_cache_alloc_folio+0x548/0xc50 [ 482.345101][ T5789] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 482.345122][ T5789] ? swap_cache_get_folio+0x28d/0x360 [ 482.345143][ T5789] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 482.345161][ T5789] ? pick_eevdf+0x121/0x860 [ 482.345190][ T5789] swap_cache_read_folio+0x47/0x140 [ 482.345213][ T5789] swap_cluster_readahead+0x479/0x5f0 [ 482.345240][ T5789] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 482.345260][ T5789] ? debug_object_activate+0x343/0x4b0 [ 482.345294][ T5789] ? lock_acquire+0x1b9/0x370 [ 482.345332][ T5789] ? __lock_acquire+0x49f/0x1a40 [ 482.345360][ T5789] ? get_vma_policy+0x23d/0x3b0 [ 482.345390][ T5789] swapin_readahead+0x159/0x1200 [ 482.345411][ T5789] ? lapic_next_event+0x10/0x20 [ 482.345440][ T5789] ? __pfx_swapin_readahead+0x10/0x10 [ 482.345466][ T5789] ? swap_table_get+0x10d/0x2c0 [ 482.345485][ T5789] ? swap_cache_get_folio+0x28d/0x360 [ 482.345506][ T5789] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 482.345526][ T5789] ? __pfx_softleaf_type+0x10/0x10 [ 482.345550][ T5789] ? do_swap_page+0xf98/0x5780 [ 482.345566][ T5789] do_swap_page+0xf98/0x5780 [ 482.345594][ T5789] ? __pfx_do_swap_page+0x10/0x10 [ 482.345612][ T5789] ? __lock_acquire+0x49f/0x1a40 [ 482.345641][ T5789] ? lockdep_hardirqs_on+0x78/0x100 [ 482.345664][ T5789] ? rcu_is_watching+0x12/0xc0 [ 482.345686][ T5789] ? __pte_offset_map+0x179/0x310 [ 482.345713][ T5789] __handle_mm_fault+0x192f/0x2a00 [ 482.345736][ T5789] ? reacquire_held_locks+0xce/0x1e0 [ 482.345766][ T5789] ? __pfx___handle_mm_fault+0x10/0x10 [ 482.345794][ T5789] ? lock_vma_under_rcu+0x17c/0x590 [ 482.345825][ T5789] handle_mm_fault+0x37b/0xa30 [ 482.345848][ T5789] do_user_addr_fault+0x5a3/0x12f0 [ 482.345880][ T5789] exc_page_fault+0x6f/0xd0 [ 482.345901][ T5789] asm_exc_page_fault+0x26/0x30 [ 482.345919][ T5789] RIP: 0033:0x7f303655e6ce [ 482.345935][ T5789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.345952][ T5789] RSP: 002b:00007ffc65d525b8 EFLAGS: 00010246 [ 482.345967][ T5789] RAX: 0000000000000000 RBX: 000055557a74c500 RCX: 00007f303655e6ce [ 482.345978][ T5789] RDX: 00007ffc65d52610 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.345988][ T5789] RBP: 00007ffc65d5267c R08: 0000000000000000 R09: 0000000000000000 [ 482.345998][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 482.346009][ T5789] R13: 00000000000927c0 R14: 0000000000075f65 R15: 00007ffc65d526d0 [ 482.346032][ T5789] [ 482.765066][ T5789] memory: usage 3072kB, limit 3072kB, failcnt 7464 [ 482.771714][ T5789] memory+swap: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 482.779504][ T5789] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 482.787985][ T5789] Memory cgroup stats for /syz0: [ 482.788149][ T5789] cache 0 [ 482.796015][ T5789] rss 0 [ 482.798830][ T5789] rss_huge 0 [ 482.802024][ T5789] shmem 0 [ 482.804952][ T5789] mapped_file 0 [ 482.808429][ T5789] dirty 0 [ 482.811368][ T5789] writeback 0 [ 482.814670][ T5789] workingset_refault_anon 438 [ 482.819453][ T5789] workingset_refault_file 4804 [ 482.824238][ T5789] swap 204800 [ 482.827586][ T5789] swapcached 20303872 [ 482.831565][ T5789] pgpgin 105480 [ 482.835127][ T5789] pgpgout 108034 [ 482.838706][ T5789] pgfault 300062 [ 482.842249][ T5789] pgmajfault 281 [ 482.846785][ T5789] inactive_anon 0 [ 482.851047][ T5789] active_anon 4096 [ 482.854769][ T5789] inactive_file 0 [ 482.858455][ T5789] active_file 0 [ 482.861913][ T5789] unevictable 0 [ 482.865384][ T5789] hierarchical_memory_limit 3145728 [ 482.870605][ T5789] hierarchical_memsw_limit 9223372036854771712 [ 482.876788][ T5789] total_cache 0 [ 482.880244][ T5789] total_rss 0 [ 482.883540][ T5789] total_rss_huge 0 [ 482.887278][ T5789] total_shmem 0 [ 482.890734][ T5789] total_mapped_file 0 [ 482.894706][ T5789] total_dirty 0 [ 482.898590][ T5789] total_writeback 0 [ 482.902395][ T5789] total_workingset_refault_anon 438 [ 482.907655][ T5789] total_workingset_refault_file 4804 [ 482.913000][ T5789] total_swap 204800 [ 482.916918][ T5789] total_swapcached 20303872 [ 482.921430][ T5789] total_pgpgin 105480 [ 482.925413][ T5789] total_pgpgout 108034 [ 482.929522][ T5789] total_pgfault 300062 [ 482.933723][ T5789] total_pgmajfault 281 [ 482.937886][ T5789] total_inactive_anon 0 [ 482.942067][ T5789] total_active_anon 4096 [ 482.947887][ T5789] total_inactive_file 0 [ 482.952049][ T5789] total_active_file 0 [ 482.956070][ T5789] total_unevictable 0 [ 482.960057][ T5789] anon_cost 0 [ 482.963350][ T5789] file_cost 0 [ 482.966738][ T5789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7775,pid=21880,uid=0 [ 482.984906][ T5789] Memory cgroup out of memory: Killed process 21880 (syz.0.7775) total-vm:102244kB, anon-rss:1248kB, file-rss:20872kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 484.839589][T21968] ======================================================= [ 484.839589][T21968] WARNING: The mand mount option has been deprecated and [ 484.839589][T21968] and is ignored by this kernel. Remove the mand [ 484.839589][T21968] option from the mount to silence this warning. [ 484.839589][T21968] ======================================================= [ 485.889072][T22001] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.108809][T22008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7834'. [ 486.857521][T22035] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 488.017820][T22079] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 489.537328][T22138] HfR: entered promiscuous mode [ 490.778279][T22185] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 490.812030][T22185] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 491.866105][T22222] FAULT_INJECTION: forcing a failure. [ 491.866105][T22222] name failslab, interval 1, probability 0, space 0, times 1 [ 491.940944][T22222] CPU: 0 UID: 0 PID: 22222 Comm: syz.3.7936 Tainted: G U L syzkaller #0 PREEMPT(full) [ 491.940979][T22222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 491.940986][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 491.940996][T22222] Call Trace: [ 491.941003][T22222] [ 491.941010][T22222] dump_stack_lvl+0x100/0x190 [ 491.941036][T22222] should_fail_ex.cold+0x5/0xa [ 491.941079][T22222] should_failslab+0xc2/0x120 [ 491.941107][T22222] __kmalloc_cache_noprof+0x91/0x6c0 [ 491.941126][T22222] ? __debug_object_init+0x2de/0x3d0 [ 491.941153][T22222] ? sctp_endpoint_new+0xfc/0xb20 [ 491.941184][T22222] sctp_endpoint_new+0xfc/0xb20 [ 491.941212][T22222] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 491.941237][T22222] ? lockdep_init_map_type+0x5c/0x250 [ 491.941268][T22222] ? lockdep_init_map_type+0x5c/0x250 [ 491.941297][T22222] ? lockdep_init_map_type+0x5c/0x250 [ 491.941325][T22222] ? lockdep_init_map_type+0x5c/0x250 [ 491.941361][T22222] sctp_init_sock+0xe2b/0x1300 [ 491.941385][T22222] ? __pfx_sctp_init_sock+0x10/0x10 [ 491.941411][T22222] inet_create+0x94c/0x1060 [ 491.941435][T22222] ? inet_create+0x94/0x1060 [ 491.941461][T22222] __sock_create+0x339/0x860 [ 491.941484][T22222] __sys_socket+0x14d/0x260 [ 491.941503][T22222] ? __pfx___sys_socket+0x10/0x10 [ 491.941528][T22222] __x64_sys_socket+0x72/0xb0 [ 491.941546][T22222] ? lockdep_hardirqs_on+0x78/0x100 [ 491.941568][T22222] do_syscall_64+0x115/0x840 [ 491.941588][T22222] ? clear_bhb_loop+0x40/0x90 [ 491.941610][T22222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.941638][T22222] RIP: 0033:0x7f55ff19de99 [ 491.941655][T22222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.941672][T22222] RSP: 002b:00007f56000d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 491.941690][T22222] RAX: ffffffffffffffda RBX: 00007f55ff425fa0 RCX: 00007f55ff19de99 [ 491.941702][T22222] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 491.941712][T22222] RBP: 00007f55ff233eaf R08: 0000000000000000 R09: 0000000000000000 [ 491.941722][T22222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.941733][T22222] R13: 00007f55ff426038 R14: 00007f55ff425fa0 R15: 00007ffec7f1c278 [ 491.941755][T22222] [ 492.212005][T22224] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 507.241549][T22718] dump_stack_lvl+0x100/0x190 [ 507.241578][T22718] should_fail_ex.cold+0x5/0xa [ 507.241600][T22718] should_failslab+0xc2/0x120 [ 507.241636][T22718] __kmalloc_noprof+0xfc/0x820 [ 507.241657][T22718] ? string_escape_mem+0x746/0xe00 [ 507.241727][T22718] ? kstrdup_quotable+0xc2/0x190 [ 507.241749][T22718] kstrdup_quotable+0xc2/0x190 [ 507.241769][T22718] ? __pfx_kstrdup_quotable+0x10/0x10 [ 507.241789][T22718] ? get_cmdline+0x86/0x360 [ 507.241818][T22718] kstrdup_quotable_cmdline+0x127/0x210 [ 507.241841][T22718] __report_access+0x77/0x230 [ 507.241886][T22718] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.241912][T22718] task_work_run+0x150/0x240 [ 507.241941][T22718] ? __pfx_task_work_run+0x10/0x10 [ 507.241973][T22718] exit_to_user_mode_loop+0x1d8/0x6f0 [ 507.241992][T22718] ? rcu_is_watching+0x12/0xc0 [ 507.242017][T22718] do_syscall_64+0x652/0x840 [ 507.242038][T22718] ? clear_bhb_loop+0x40/0x90 [ 507.242059][T22718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.242077][T22718] RIP: 0033:0x7f303659de99 [ 507.242092][T22718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.242109][T22718] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 507.242126][T22718] RAX: ffffffffffffffff RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 507.242137][T22718] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 507.242147][T22718] RBP: 00007f3036633eaf R08: 0000000000000004 R09: 0000000000000000 [ 507.242157][T22718] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 507.242167][T22718] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 507.242189][T22718] [ 507.242206][T22718] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5789] was attempted by "(null)"[22718] [ 507.956625][T22737] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8176'. [ 510.336728][T22824] netlink: 'syz.3.8218': attribute type 1 has an invalid length. [ 511.530299][T19369] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 512.614470][T22905] FAULT_INJECTION: forcing a failure. [ 512.614470][T22905] name failslab, interval 1, probability 0, space 0, times 0 [ 512.685071][T22905] CPU: 0 UID: 0 PID: 22905 Comm: syz.2.8255 Tainted: G U L syzkaller #0 PREEMPT(full) [ 512.685104][T22905] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 512.685111][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 512.685121][T22905] Call Trace: [ 512.685128][T22905] [ 512.685135][T22905] dump_stack_lvl+0x100/0x190 [ 512.685161][T22905] should_fail_ex.cold+0x5/0xa [ 512.685181][T22905] should_failslab+0xc2/0x120 [ 512.685207][T22905] kmem_cache_alloc_noprof+0x91/0x6a0 [ 512.685230][T22905] ? __pmd_alloc+0xbf/0x950 [ 512.685260][T22905] __pmd_alloc+0xbf/0x950 [ 512.685288][T22905] move_page_tables+0x2f7c/0x4610 [ 512.685310][T22905] ? __pfx_copy_vma+0x10/0x10 [ 512.685338][T22905] ? __pfx_move_page_tables+0x10/0x10 [ 512.685373][T22905] copy_vma_and_data+0x25c/0x7c0 [ 512.685395][T22905] ? __pfx_copy_vma_and_data+0x10/0x10 [ 512.685424][T22905] ? __vma_start_write+0x17f/0x280 [ 512.685453][T22905] ? __pfx___vma_start_write+0x10/0x10 [ 512.685487][T22905] move_vma+0x574/0x1920 [ 512.685510][T22905] ? __pfx_move_vma+0x10/0x10 [ 512.685531][T22905] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 512.685565][T22905] ? cap_mmap_addr+0x4b/0x120 [ 512.685584][T22905] ? bpf_lsm_mmap_addr+0x9/0x30 [ 512.685601][T22905] ? security_mmap_addr+0x71/0x1e0 [ 512.685625][T22905] ? __get_unmapped_area+0x255/0x3e0 [ 512.685653][T22905] ? vrm_set_new_addr+0x204/0x290 [ 512.685673][T22905] mremap_to+0x234/0x4c0 [ 512.685691][T22905] ? mas_walk+0x6ef/0x9b0 [ 512.685713][T22905] ? __pfx_mremap_to+0x10/0x10 [ 512.685738][T22905] __do_sys_mremap+0x88c/0x1850 [ 512.685766][T22905] ? __pfx___do_sys_mremap+0x10/0x10 [ 512.685784][T22905] ? ksys_write+0x190/0x250 [ 512.685807][T22905] ? __pfx_do_futex+0x10/0x10 [ 512.685834][T22905] ? __x64_sys_futex+0x34f/0x4d0 [ 512.685866][T22905] do_syscall_64+0x115/0x840 [ 512.685886][T22905] ? clear_bhb_loop+0x40/0x90 [ 512.685908][T22905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.685926][T22905] RIP: 0033:0x7f54f659de99 [ 512.685941][T22905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.685958][T22905] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 512.685976][T22905] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 512.685987][T22905] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 512.685997][T22905] RBP: 00007f54f6633eaf R08: 0000000100000000 R09: 0000000000000000 [ 512.686007][T22905] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 512.686017][T22905] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 512.686040][T22905] [ 513.159063][T22913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8259'. [ 513.489402][T22924] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 513.523268][T22924] audit: out of memory in audit_log_start [ 513.923134][T22943] netlink: 178 bytes leftover after parsing attributes in process `syz.2.8275'. [ 514.107768][T22951] netlink: 'syz.2.8278': attribute type 1 has an invalid length. [ 514.272441][T22956] binder: 22954:22956 ioctl c0306201 2000000000c0 returned -14 [ 515.056581][T22974] netlink: 206 bytes leftover after parsing attributes in process `syz.3.8290'. [ 516.059868][T13782] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 517.182932][T13782] Bluetooth: hci1: SCO packet too small [ 517.442793][T23047] netlink: 'syz.2.8325': attribute type 3 has an invalid length. [ 518.450322][T23079] NFSD: Failed to start, no listeners configured. [ 519.977230][T23134] netlink: 'syz.3.8367': attribute type 1 has an invalid length. [ 520.141241][T23138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8369'. [ 520.677850][T23157] openvswitch: netlink: Multiple metadata blocks provided [ 520.961030][T23166] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 521.975504][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8404'. [ 522.006527][T23211] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 522.413380][T23229] netlink: 'syz.2.8412': attribute type 1 has an invalid length. [ 522.450825][T23229] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8412'. [ 523.078427][T23244] binder: 23242:23244 ioctl 400c620e 200000001f40 returned -22 [ 523.471433][T23254] nbd: must specify a size in bytes for the device [ 523.710366][T23267] netlink: 'syz.4.8428': attribute type 11 has an invalid length. [ 523.754296][T23267] netlink: 'syz.4.8428': attribute type 11 has an invalid length. [ 523.789224][T23267] netlink: 'syz.4.8428': attribute type 11 has an invalid length. [ 523.832697][T23267] netlink: 'syz.4.8428': attribute type 11 has an invalid length. [ 524.743234][T23294] can: request_module (can-proto-3) failed. [ 525.086964][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8446'. [ 525.571247][T23316] : entered promiscuous mode [ 527.816979][T23393] can: request_module (can-proto-3) failed. [ 530.346868][T23488] netlink: 'syz.0.8533': attribute type 1 has an invalid length. [ 532.562724][T13782] Bluetooth: hci1: command 0x0406 tx timeout [ 533.054173][T23569] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 533.958023][T23592] FAULT_INJECTION: forcing a failure. [ 533.958023][T23592] name failslab, interval 1, probability 0, space 0, times 0 [ 534.032195][T23592] CPU: 0 UID: 0 PID: 23592 Comm: syz.0.8582 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.032235][T23592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.032242][T23592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 534.032252][T23592] Call Trace: [ 534.032259][T23592] [ 534.032266][T23592] dump_stack_lvl+0x100/0x190 [ 534.032291][T23592] should_fail_ex.cold+0x5/0xa [ 534.032312][T23592] should_failslab+0xc2/0x120 [ 534.032337][T23592] __kmalloc_cache_noprof+0x91/0x6c0 [ 534.032355][T23592] ? sget_fc+0x120/0x1d80 [ 534.032380][T23592] ? sget_fc+0x120/0x1d80 [ 534.032405][T23592] ? sget_fc+0x1c3/0x1d80 [ 534.032435][T23592] sget_fc+0x1c3/0x1d80 [ 534.032467][T23592] ? __pfx_set_anon_super_fc+0x10/0x10 [ 534.032493][T23592] ? __pfx_sget_fc+0x10/0x10 [ 534.032518][T23592] ? refcount_dec_not_one+0x136/0x1c0 [ 534.032545][T23592] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 534.032573][T23592] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 534.032590][T23592] ? __kasan_kmalloc+0xaa/0xb0 [ 534.032615][T23592] ? __pfx_mqueue_fill_super+0x10/0x10 [ 534.032644][T23592] get_tree_nodev+0x28/0x190 [ 534.032673][T23592] mqueue_get_tree+0xf1/0x130 [ 534.032702][T23592] vfs_get_tree+0x92/0x320 [ 534.032727][T23592] fc_mount_longterm+0x1a/0x270 [ 534.032755][T23592] mq_init_ns+0x482/0x820 [ 534.032777][T23592] copy_ipcs+0x3dd/0x7e0 [ 534.032799][T23592] create_new_namespaces+0x20a/0xac0 [ 534.032818][T23592] ? security_capable+0x80/0x260 [ 534.032839][T23592] unshare_nsproxy_namespaces+0xf2/0x220 [ 534.032860][T23592] ksys_unshare+0x438/0xab0 [ 534.032885][T23592] ? __pfx_ksys_unshare+0x10/0x10 [ 534.032915][T23592] __x64_sys_unshare+0x31/0x40 [ 534.032937][T23592] do_syscall_64+0x115/0x840 [ 534.032958][T23592] ? clear_bhb_loop+0x40/0x90 [ 534.032979][T23592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.032997][T23592] RIP: 0033:0x7f303659de99 [ 534.033013][T23592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.033029][T23592] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 534.033046][T23592] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 534.033057][T23592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 534.033067][T23592] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 534.033077][T23592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.033087][T23592] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 534.033108][T23592] [ 535.078881][T23614] netlink: 'syz.3.8591': attribute type 1 has an invalid length. [ 535.965017][T13242] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 535.965047][T13242] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 535.984068][T13242] Bluetooth: hci3: Dropping invalid advertising data [ 535.993034][T13242] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 535.993063][T13242] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 536.000446][T13242] Bluetooth: hci3: unknown advertising packet type: 0xee [ 536.436418][T23652] openvswitch: netlink: Multiple metadata blocks provided [ 536.831849][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8611'. [ 542.912170][T23842] netlink: 'syz.2.8697': attribute type 11 has an invalid length. [ 542.986458][T23845] FAULT_INJECTION: forcing a failure. [ 542.986458][T23845] name failslab, interval 1, probability 0, space 0, times 0 [ 543.044877][T23845] CPU: 0 UID: 0 PID: 23845 Comm: syz.0.8699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.044910][T23845] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.044917][T23845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.044927][T23845] Call Trace: [ 543.044933][T23845] [ 543.044941][T23845] dump_stack_lvl+0x100/0x190 [ 543.044966][T23845] should_fail_ex.cold+0x5/0xa [ 543.044986][T23845] should_failslab+0xc2/0x120 [ 543.045012][T23845] __kmalloc_node_noprof+0x101/0x830 [ 543.045033][T23845] ? __kmalloc_noprof+0x251/0x820 [ 543.045056][T23845] ? get_callchain_buffers+0x1e5/0x380 [ 543.045085][T23845] get_callchain_buffers+0x1e5/0x380 [ 543.045108][T23845] ? security_capable+0x80/0x260 [ 543.045129][T23845] stack_map_alloc+0x316/0x610 [ 543.045152][T23845] map_create+0x874/0x3120 [ 543.045184][T23845] ? __lock_acquire+0x49f/0x1a40 [ 543.045218][T23845] ? __pfx_map_create+0x10/0x10 [ 543.045251][T23845] ? __might_fault+0xc5/0x140 [ 543.045280][T23845] __sys_bpf+0x2a6e/0x4e80 [ 543.045314][T23845] ? __pfx___sys_bpf+0x10/0x10 [ 543.045332][T23845] ? __pfx_futex_hash+0x10/0x10 [ 543.045350][T23845] ? get_pid_task+0xfc/0x250 [ 543.045372][T23845] ? get_pid_task+0xfc/0x250 [ 543.045398][T23845] ? futex_wait+0x11e/0x370 [ 543.045422][T23845] ? __pfx_futex_wait+0x10/0x10 [ 543.045445][T23845] ? find_held_lock+0x2b/0x80 [ 543.045472][T23845] ? rcu_read_lock_any_held+0x6a/0xa0 [ 543.045496][T23845] ? find_held_lock+0x2b/0x80 [ 543.045518][T23845] ? ksys_write+0x190/0x250 [ 543.045534][T23845] ? ksys_write+0x190/0x250 [ 543.045563][T23845] ? __x64_sys_futex+0x34f/0x4d0 [ 543.045582][T23845] ? __x64_sys_futex+0x358/0x4d0 [ 543.045603][T23845] ? xfd_validate_state+0x129/0x190 [ 543.045628][T23845] ? __x64_sys_bpf+0xce/0x140 [ 543.045646][T23845] __x64_sys_bpf+0xce/0x140 [ 543.045666][T23845] ? do_syscall_64+0x90/0x840 [ 543.045689][T23845] do_syscall_64+0x115/0x840 [ 543.045709][T23845] ? clear_bhb_loop+0x40/0x90 [ 543.045731][T23845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.045750][T23845] RIP: 0033:0x7f303659de99 [ 543.045766][T23845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.045783][T23845] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.045800][T23845] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 543.045811][T23845] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 543.045822][T23845] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 543.045833][T23845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.045842][T23845] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 543.045865][T23845] [ 545.073496][T23914] Invalid ELF header magic: != ELF [ 545.636685][T23932] HSR: entered promiscuous mode [ 547.815860][T24003] tipc: Started in network mode [ 547.830253][T24003] tipc: Node identity ee00, cluster identity 4711 [ 547.838905][T24005] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 547.852695][T24003] tipc: Node number set to 60928 [ 547.857822][T24005] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 548.458831][T24024] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.416646][T24058] HSR: entered promiscuous mode [ 549.929595][T24064] could not allocate digest TFM handle [ 550.097992][T24084] openvswitch: netlink: Key type 29 is not supported [ 550.337547][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8822'. [ 550.385940][T24094] HSR: entered promiscuous mode [ 551.261118][T24130] nbd: must specify a device to reconfigure [ 553.007841][T24179] nfsd: Unknown parameter '' [ 558.065506][T24332] openvswitch: netlink: Message has 4 unknown bytes. [ 558.132407][T24334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 558.475791][T24343] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 558.854664][T19369] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 558.892855][T24342] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 561.062820][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.074332][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.663116][T24475] netlink: 342 bytes leftover after parsing attributes in process `syz.0.8987'. [ 562.869008][T24479] &#$@\]\-: entered promiscuous mode [ 563.256260][T24467] binder: 24466:24467 ioctl c018620c 200000000040 returned -22 [ 563.938054][T24511] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 564.422571][T24524] netlink: 'syz.0.9009': attribute type 4 has an invalid length. [ 564.470003][T24524] netlink: 'syz.0.9009': attribute type 1 has an invalid length. [ 567.704317][T24631] XFS: Clearing xfsstats [ 572.124133][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9119'. [ 572.195465][ T29] audit: type=1326 audit(4294967293.833:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24758 comm="syz.4.9117" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325e79de99 code=0x0 [ 572.914874][T24779] openvswitch: netlink: IP tunnel dst address not specified [ 573.220960][T24784] NFSD: Failed to start, no listeners configured. [ 574.387038][T24816] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 575.151648][T24847] netlink: zone id is out of range [ 575.179463][T24847] netlink: zone id is out of range [ 575.205143][T24847] netlink: zone id is out of range [ 575.227719][T24847] netlink: zone id is out of range [ 575.249740][T24847] netlink: zone id is out of range [ 575.274567][T24847] netlink: zone id is out of range [ 575.306607][T24847] netlink: zone id is out of range [ 575.332000][T24847] netlink: zone id is out of range [ 575.368164][T24847] netlink: zone id is out of range [ 577.746158][T24919] netlink: 'syz.2.9195': attribute type 2 has an invalid length. [ 577.930407][T24924] net_ratelimit: 315 callbacks suppressed [ 577.930425][T24924] netlink: Invalid conntrack timeout [ 578.347352][T24936] NFSD: Failed to start, no listeners configured. [ 578.355514][T24938] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 578.726584][T24949] netlink: del zone limit has 4 unknown bytes [ 579.748160][T24986] netlink: NAT attribute has 5 unknown bytes [ 580.900059][T25030] FAULT_INJECTION: forcing a failure. [ 580.900059][T25030] name failslab, interval 1, probability 0, space 0, times 0 [ 580.946408][T13242] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 580.974493][T25030] CPU: 0 UID: 0 PID: 25030 Comm: syz.0.9249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 580.974528][T25030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 580.974535][T25030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 580.974545][T25030] Call Trace: [ 580.974551][T25030] [ 580.974558][T25030] dump_stack_lvl+0x100/0x190 [ 580.974584][T25030] should_fail_ex.cold+0x5/0xa [ 580.974605][T25030] should_failslab+0xc2/0x120 [ 580.974631][T25030] __kvmalloc_node_noprof+0x116/0x970 [ 580.974655][T25030] ? percpu_ref_init+0xec/0x3f0 [ 580.974677][T25030] ? io_alloc_cache_init+0x38/0x170 [ 580.974704][T25030] io_alloc_cache_init+0x38/0x170 [ 580.974728][T25030] io_uring_setup.cold+0x450/0x1c2e [ 580.974755][T25030] ? ksys_write+0x190/0x250 [ 580.974770][T25030] ? ksys_write+0x190/0x250 [ 580.974786][T25030] ? __pfx_io_uring_setup+0x10/0x10 [ 580.974858][T25030] ? do_futex+0x190/0x440 [ 580.974880][T25030] ? __pfx_do_futex+0x10/0x10 [ 580.974910][T25030] ? xfd_validate_state+0x129/0x190 [ 580.974936][T25030] __x64_sys_io_uring_setup+0xc2/0x170 [ 580.974957][T25030] do_syscall_64+0x115/0x840 [ 580.974978][T25030] ? clear_bhb_loop+0x40/0x90 [ 580.975007][T25030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.975026][T25030] RIP: 0033:0x7f303659de99 [ 580.975041][T25030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.975058][T25030] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 580.975076][T25030] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 580.975087][T25030] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 580.975097][T25030] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 580.975107][T25030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.975117][T25030] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 580.975140][T25030] [ 581.880342][T25062] netlink: 'syz.3.9264': attribute type 1 has an invalid length. [ 582.415869][T25082] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 582.925308][T25097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 584.136603][T25143] netlink: 'syz.4.9303': attribute type 1 has an invalid length. [ 584.377944][T13242] Bluetooth: hci1: ACL packet too small [ 584.740835][T25162] netlink: Unknown nat attribute (0) [ 587.085172][T25257] aoe: copy from user failed [ 587.106268][T25257] aoe: could not set interface list: too many interfaces [ 587.380440][T25267] netlink: ct family unspecified [ 587.726868][T25278] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 588.164855][T25293] netlink: 'syz.4.9375': attribute type 12 has an invalid length. [ 588.411587][T25302] openvswitch: netlink: IP tunnel TTL not specified. [ 589.687606][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9396'. [ 589.739190][T25336] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.789025][T25363] MTRR 1 not used [ 592.419291][T25403] sd 0:0:1:0: PR command failed: 1026 [ 592.459288][T25403] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 592.509770][T25403] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 594.084098][T13242] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 594.084127][T13242] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 594.100265][T13242] Bluetooth: hci2: Dropping invalid advertising data [ 594.116451][T13242] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 594.116475][T13242] Bluetooth: hci2: Dropping invalid advertising data [ 594.130490][T13242] Bluetooth: hci2: unknown advertising packet type: 0x79 [ 594.130522][T13242] Bluetooth: hci2: Malformed LE Event: 0x02 [ 594.707861][T25459] netlink: 'syz.2.9454': attribute type 1 has an invalid length. [ 596.239113][T25502] dyndbg: expected <4096 bytes into control [ 597.362233][T25525] netlink: 'syz.3.9484': attribute type 11 has an invalid length. [ 601.272514][T25617] netlink: 'syz.4.9526': attribute type 1 has an invalid length. [ 602.501834][T25641] openvswitch: netlink: IP tunnel dst address not specified [ 606.708882][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9582'. [ 607.716807][T25726] kexec: Could not allocate control_code_buffer [ 607.969772][T25752] .^: entered promiscuous mode [ 608.975349][T25783] mmap: syz.2.9605 (25783): VmData 45879296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 611.761543][T25858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9641'. [ 611.857761][T25858] netlink: 29 bytes leftover after parsing attributes in process `syz.2.9641'. [ 612.456897][T25875] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 614.296073][T25928] nbd: illegal input index -1024 [ 615.600250][T25911] kexec: Could not allocate control_code_buffer [ 615.695367][T25962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9691'. [ 615.741356][T25962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9691'. [ 618.697028][T26053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9734'. [ 619.067702][T26064] openvswitch: netlink: IP tunnel dst address not specified [ 619.719570][T26086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 620.326147][T26106] netlink: 'syz.3.9758': attribute type 2 has an invalid length. [ 620.368273][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9758'. [ 620.942658][T26124] netlink: set zone limit has 4 unknown bytes [ 622.111348][T26169] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 622.216187][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.225723][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.722005][T26273] netlink: Conntrack attr has 5 unknown bytes [ 625.942093][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9843'. [ 628.510926][T25533] syz.0.9482 (25533) used greatest stack depth: 16776 bytes left [ 628.975049][T26376] netlink: 'syz.3.9890': attribute type 1 has an invalid length. [ 629.125276][T26382] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 630.227648][T26418] FAULT_INJECTION: forcing a failure. [ 630.227648][T26418] name failslab, interval 1, probability 0, space 0, times 0 [ 630.281915][T26418] CPU: 0 UID: 0 PID: 26418 Comm: syz.0.9909 Tainted: G U L syzkaller #0 PREEMPT(full) [ 630.281948][T26418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 630.281955][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 630.281965][T26418] Call Trace: [ 630.281971][T26418] [ 630.281978][T26418] dump_stack_lvl+0x100/0x190 [ 630.282007][T26418] should_fail_ex.cold+0x5/0xa [ 630.282029][T26418] should_failslab+0xc2/0x120 [ 630.282057][T26418] __kmalloc_cache_noprof+0x91/0x6c0 [ 630.282076][T26418] ? rcu_is_watching+0x12/0xc0 [ 630.282105][T26418] ? __request_module+0x2b7/0x6a0 [ 630.282129][T26418] __request_module+0x2b7/0x6a0 [ 630.282148][T26418] ? __pfx___request_module+0x10/0x10 [ 630.282178][T26418] ? find_held_lock+0x2b/0x80 [ 630.282201][T26418] ? inet6_create+0xb9f/0x12b0 [ 630.282227][T26418] inet6_create+0xbdc/0x12b0 [ 630.282246][T26418] ? inet6_create+0x7f/0x12b0 [ 630.282266][T26418] __sock_create+0x339/0x860 [ 630.282289][T26418] __sys_socket+0x14d/0x260 [ 630.282308][T26418] ? __pfx___sys_socket+0x10/0x10 [ 630.282333][T26418] __x64_sys_socket+0x72/0xb0 [ 630.282350][T26418] ? lockdep_hardirqs_on+0x78/0x100 [ 630.282376][T26418] do_syscall_64+0x115/0x840 [ 630.282398][T26418] ? clear_bhb_loop+0x40/0x90 [ 630.282420][T26418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.282439][T26418] RIP: 0033:0x7f303659de99 [ 630.282455][T26418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.282472][T26418] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 630.282491][T26418] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 630.282503][T26418] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 630.282514][T26418] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 630.282525][T26418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.282536][T26418] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 630.282560][T26418] [ 631.020067][T26449] netlink: 'syz.4.9924': attribute type 3 has an invalid length. [ 631.782806][T26479] nbd: couldn't find a device at index 2147483647 [ 631.947352][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9940'. [ 632.166530][T26493] netlink: 'syz.4.9944': attribute type 1 has an invalid length. [ 632.297442][T26485] phram: parameter too long [ 632.359242][ T29] audit: type=1800 audit(4294967354.276:45): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9946" name="lu_gp_id" dev="configfs" ino=77963 res=0 errno=0 [ 634.193398][T26550] netlink: ct_mark mask cannot be 0 [ 634.805234][T26565] netlink: 'syz.0.9975': attribute type 2 has an invalid length. [ 635.863117][T26600] netlink: 'syz.2.9993': attribute type 11 has an invalid length. [ 635.922515][T26600] netlink: 'syz.2.9993': attribute type 11 has an invalid length. [ 635.969239][T26600] netlink: 'syz.2.9993': attribute type 11 has an invalid length. [ 637.583908][T26654] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 639.336270][T26704] openvswitch: netlink: IP tunnel dst address not specified [ 639.794418][T26717] FAULT_INJECTION: forcing a failure. [ 639.794418][T26717] name failslab, interval 1, probability 0, space 0, times 0 [ 639.868085][T26717] CPU: 0 UID: 0 PID: 26717 Comm: syz.2.10049 Tainted: G U L syzkaller #0 PREEMPT(full) [ 639.868118][T26717] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 639.868125][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 639.868135][T26717] Call Trace: [ 639.868141][T26717] [ 639.868148][T26717] dump_stack_lvl+0x100/0x190 [ 639.868174][T26717] should_fail_ex.cold+0x5/0xa [ 639.868195][T26717] should_failslab+0xc2/0x120 [ 639.868221][T26717] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 639.868244][T26717] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 639.868265][T26717] ? sock_alloc_inode+0x26/0x2c0 [ 639.868296][T26717] ? __pfx_sock_alloc_inode+0x10/0x10 [ 639.868324][T26717] sock_alloc_inode+0x26/0x2c0 [ 639.868351][T26717] ? __pfx_sock_alloc_inode+0x10/0x10 [ 639.868378][T26717] alloc_inode+0x68/0x250 [ 639.868402][T26717] sock_alloc+0x44/0x280 [ 639.868426][T26717] ? security_socket_create+0x7f/0x250 [ 639.868450][T26717] __sock_create+0xc2/0x860 [ 639.868468][T26717] ? lockdep_init_map_type+0x5c/0x250 [ 639.868501][T26717] smc_create+0x163/0x290 [ 639.868525][T26717] __sock_create+0x339/0x860 [ 639.868546][T26717] __sys_socket+0x14d/0x260 [ 639.868565][T26717] ? __pfx___sys_socket+0x10/0x10 [ 639.868591][T26717] __x64_sys_socket+0x72/0xb0 [ 639.868610][T26717] ? lockdep_hardirqs_on+0x78/0x100 [ 639.868630][T26717] do_syscall_64+0x115/0x840 [ 639.868651][T26717] ? clear_bhb_loop+0x40/0x90 [ 639.868672][T26717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.868691][T26717] RIP: 0033:0x7f54f659de99 [ 639.868706][T26717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.868724][T26717] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 639.868742][T26717] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 639.868757][T26717] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 639.868767][T26717] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 639.868777][T26717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.868788][T26717] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 639.868810][T26717] [ 640.962156][T26717] socket: no more sockets [ 641.653709][T26758] block nbd2: not configured, cannot reconfigure [ 641.909087][T26767] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 642.331561][T26782] IPVS: length: 131 != 8 [ 644.380514][T26841] input: f as /devices/virtual/input/input23 [ 646.692526][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10140'. [ 648.431338][T26955] openvswitch: netlink: Flow key attribute not present in set flow. [ 649.263067][T26981] netlink: 'syz.2.10173': attribute type 1 has an invalid length. [ 651.524422][T27053] netlink: 'syz.3.10208': attribute type 11 has an invalid length. [ 651.566483][T27053] netlink: 'syz.3.10208': attribute type 11 has an invalid length. [ 651.604035][T27053] netlink: 'syz.3.10208': attribute type 11 has an invalid length. [ 651.818023][T27060] No such timeout policy "" [ 651.834754][T27060] netlink: Failed to associated timeout policy '' [ 652.940567][T27085] netlink: 'syz.4.10218': attribute type 1 has an invalid length. [ 653.249473][T27092] FAULT_INJECTION: forcing a failure. [ 653.249473][T27092] name failslab, interval 1, probability 0, space 0, times 0 [ 653.331952][T27092] CPU: 0 UID: 0 PID: 27092 Comm: syz.4.10222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 653.331987][T27092] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 653.331994][T27092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 653.332005][T27092] Call Trace: [ 653.332011][T27092] [ 653.332018][T27092] dump_stack_lvl+0x100/0x190 [ 653.332043][T27092] should_fail_ex.cold+0x5/0xa [ 653.332063][T27092] should_failslab+0xc2/0x120 [ 653.332089][T27092] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 653.332113][T27092] ? lockdep_hardirqs_on+0x78/0x100 [ 653.332135][T27092] ? sock_alloc_inode+0x26/0x2c0 [ 653.332165][T27092] ? __pfx_sock_alloc_inode+0x10/0x10 [ 653.332193][T27092] sock_alloc_inode+0x26/0x2c0 [ 653.332221][T27092] ? __pfx_sock_alloc_inode+0x10/0x10 [ 653.332247][T27092] alloc_inode+0x68/0x250 [ 653.332271][T27092] sock_alloc+0x44/0x280 [ 653.332295][T27092] ? security_socket_create+0x7f/0x250 [ 653.332326][T27092] __sock_create+0xc2/0x860 [ 653.332348][T27092] smc_create_clcsk+0x37/0xd0 [ 653.332370][T27092] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 653.332398][T27092] inet6_create+0xb1a/0x12b0 [ 653.332419][T27092] ? inet6_create+0x7f/0x12b0 [ 653.332440][T27092] __sock_create+0x339/0x860 [ 653.332463][T27092] __sys_socket+0x14d/0x260 [ 653.332482][T27092] ? __pfx___sys_socket+0x10/0x10 [ 653.332506][T27092] __x64_sys_socket+0x72/0xb0 [ 653.332531][T27092] ? lockdep_hardirqs_on+0x78/0x100 [ 653.332552][T27092] do_syscall_64+0x115/0x840 [ 653.332572][T27092] ? clear_bhb_loop+0x40/0x90 [ 653.332595][T27092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.332614][T27092] RIP: 0033:0x7f325e79de99 [ 653.332630][T27092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.332648][T27092] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 653.332667][T27092] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 653.332679][T27092] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 653.332690][T27092] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 653.332701][T27092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.332714][T27092] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 653.332737][T27092] [ 653.332766][T27092] socket: no more sockets [ 653.795084][T27102] netlink: 'syz.3.10227': attribute type 2 has an invalid length. [ 654.028270][T27109] unsupported nla_type 113 [ 655.068058][T27141] FAULT_INJECTION: forcing a failure. [ 655.068058][T27141] name failslab, interval 1, probability 0, space 0, times 0 [ 655.146674][T27141] CPU: 0 UID: 0 PID: 27141 Comm: syz.2.10246 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.146710][T27141] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.146717][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 655.146727][T27141] Call Trace: [ 655.146734][T27141] [ 655.146741][T27141] dump_stack_lvl+0x100/0x190 [ 655.146767][T27141] should_fail_ex.cold+0x5/0xa [ 655.146788][T27141] should_failslab+0xc2/0x120 [ 655.146815][T27141] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 655.146838][T27141] ? __lock_acquire+0x49f/0x1a40 [ 655.146867][T27141] ? __d_alloc+0x35/0xa50 [ 655.146890][T27141] __d_alloc+0x35/0xa50 [ 655.146932][T27141] ? bpf_lsm_inode_permission+0x9/0x10 [ 655.146965][T27141] d_alloc+0x4a/0x1e0 [ 655.146986][T27141] vfs_tmpfile+0x317/0xbb0 [ 655.147010][T27141] path_openat+0x10b6/0x4280 [ 655.147028][T27141] ? kasan_save_track+0x14/0x30 [ 655.147051][T27141] ? __kasan_slab_alloc+0x89/0x90 [ 655.147074][T27141] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 655.147095][T27141] ? do_sys_openat2+0xc7/0x1e0 [ 655.147117][T27141] ? __x64_sys_open+0xfe/0x1d0 [ 655.147140][T27141] ? do_syscall_64+0x115/0x840 [ 655.147168][T27141] ? __pfx_path_openat+0x10/0x10 [ 655.147193][T27141] do_file_open+0x20e/0x430 [ 655.147210][T27141] ? __lock_acquire+0x49f/0x1a40 [ 655.147240][T27141] ? __pfx_do_file_open+0x10/0x10 [ 655.147274][T27141] ? _raw_spin_unlock+0x28/0x50 [ 655.147291][T27141] ? alloc_fd+0x471/0x7a0 [ 655.147316][T27141] do_sys_openat2+0x10f/0x1e0 [ 655.147348][T27141] ? __pfx_do_sys_openat2+0x10/0x10 [ 655.147381][T27141] __x64_sys_open+0xfe/0x1d0 [ 655.147404][T27141] ? __pfx___x64_sys_open+0x10/0x10 [ 655.147436][T27141] do_syscall_64+0x115/0x840 [ 655.147457][T27141] ? clear_bhb_loop+0x40/0x90 [ 655.147479][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.147498][T27141] RIP: 0033:0x7f54f659de99 [ 655.147513][T27141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.147531][T27141] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 655.147550][T27141] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 655.147562][T27141] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 655.147572][T27141] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 655.147583][T27141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.147594][T27141] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 655.147616][T27141] [ 656.319588][T27170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10260'. [ 656.558548][T27177] netlink: 'syz.3.10263': attribute type 1 has an invalid length. [ 656.604466][T27177] nbd: error processing sock list [ 658.563758][T26488] syz.0.9941 (26488) used greatest stack depth: 16760 bytes left [ 661.271517][T27342] netlink: zone id is out of range [ 661.295912][T27342] netlink: get zone limit has 8 unknown bytes [ 661.306672][T27344] nbd: must specify an index to disconnect [ 665.146084][T27478] netlink: 206 bytes leftover after parsing attributes in process `syz.0.10409'. [ 668.849723][T27599] capability: warning: `syz.2.10463' uses 32-bit capabilities (legacy support in use) [ 669.065630][T27605] sctp: [Deprecated]: syz.3.10466 (pid 27605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.065630][T27605] Use struct sctp_sack_info instead [ 669.198655][T27609] FAULT_INJECTION: forcing a failure. [ 669.198655][T27609] name failslab, interval 1, probability 0, space 0, times 0 [ 669.262123][T27609] CPU: 0 UID: 0 PID: 27609 Comm: syz.0.10468 Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.262156][T27609] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.262162][T27609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 669.262172][T27609] Call Trace: [ 669.262179][T27609] [ 669.262186][T27609] dump_stack_lvl+0x100/0x190 [ 669.262211][T27609] should_fail_ex.cold+0x5/0xa [ 669.262235][T27609] should_failslab+0xc2/0x120 [ 669.262262][T27609] kmem_cache_alloc_noprof+0x91/0x6a0 [ 669.262285][T27609] ? anon_vma_clone+0x2ba/0xcd0 [ 669.262317][T27609] anon_vma_clone+0x2ba/0xcd0 [ 669.262352][T27609] __split_vma+0x51f/0xda0 [ 669.262373][T27609] ? __pfx___split_vma+0x10/0x10 [ 669.262389][T27609] ? vma_link+0x5ee/0x8d0 [ 669.262417][T27609] vms_gather_munmap_vmas+0x1d2/0x1720 [ 669.262442][T27609] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 669.262468][T27609] ? alloc_new_pud+0x217/0x320 [ 669.262485][T27609] ? get_old_pud+0xd8/0x360 [ 669.262504][T27609] ? move_page_tables+0x11c/0x4610 [ 669.262524][T27609] ? __pfx_copy_vma+0x10/0x10 [ 669.262552][T27609] do_vmi_align_munmap+0x287/0x5f0 [ 669.262574][T27609] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 669.262632][T27609] do_vmi_munmap+0x1f8/0x3e0 [ 669.262655][T27609] move_vma+0xe5b/0x1920 [ 669.262679][T27609] ? __pfx_move_vma+0x10/0x10 [ 669.262701][T27609] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 669.262736][T27609] ? vrm_set_new_addr+0x204/0x290 [ 669.262757][T27609] mremap_to+0x234/0x4c0 [ 669.262775][T27609] ? mas_walk+0x6ef/0x9b0 [ 669.262797][T27609] ? __pfx_mremap_to+0x10/0x10 [ 669.262815][T27609] ? check_prep_vma+0x912/0xe60 [ 669.262844][T27609] __do_sys_mremap+0x88c/0x1850 [ 669.262871][T27609] ? __pfx___do_sys_mremap+0x10/0x10 [ 669.262890][T27609] ? ksys_write+0x190/0x250 [ 669.262912][T27609] ? __pfx_do_futex+0x10/0x10 [ 669.262938][T27609] ? __x64_sys_futex+0x34f/0x4d0 [ 669.262971][T27609] do_syscall_64+0x115/0x840 [ 669.262991][T27609] ? clear_bhb_loop+0x40/0x90 [ 669.263013][T27609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.263032][T27609] RIP: 0033:0x7f303659de99 [ 669.263047][T27609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.263073][T27609] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 669.263092][T27609] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 669.263103][T27609] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 669.263113][T27609] RBP: 00007f3036633eaf R08: 0000000100000000 R09: 0000000000000000 [ 669.263124][T27609] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 669.263135][T27609] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 669.263159][T27609] [ 672.540334][T27693] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 672.603141][T27696] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 673.942784][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10527'. [ 675.878528][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10555'. [ 676.886769][T27836] FAULT_INJECTION: forcing a failure. [ 676.886769][T27836] name failslab, interval 1, probability 0, space 0, times 0 [ 676.933141][T27836] CPU: 0 UID: 0 PID: 27836 Comm: syz.0.10573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 676.933176][T27836] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 676.933184][T27836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 676.933195][T27836] Call Trace: [ 676.933201][T27836] [ 676.933211][T27836] dump_stack_lvl+0x100/0x190 [ 676.933238][T27836] should_fail_ex.cold+0x5/0xa [ 676.933259][T27836] should_failslab+0xc2/0x120 [ 676.933285][T27836] kmem_cache_alloc_noprof+0x91/0x6a0 [ 676.933308][T27836] ? dup_fd+0x4d/0xd10 [ 676.933329][T27836] dup_fd+0x4d/0xd10 [ 676.933345][T27836] ? __pfx_get_nodes+0x10/0x10 [ 676.933379][T27836] __x64_sys_close_range+0x405/0x5d0 [ 676.933401][T27836] ? __pfx___x64_sys_close_range+0x10/0x10 [ 676.933427][T27836] do_syscall_64+0x115/0x840 [ 676.933448][T27836] ? clear_bhb_loop+0x40/0x90 [ 676.933469][T27836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.933488][T27836] RIP: 0033:0x7f303659de99 [ 676.933503][T27836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.933520][T27836] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 676.933540][T27836] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 676.933557][T27836] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 676.933571][T27836] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 676.933581][T27836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.933592][T27836] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 676.933614][T27836] [ 677.717330][T27859] FAULT_INJECTION: forcing a failure. [ 677.717330][T27859] name failslab, interval 1, probability 0, space 0, times 0 [ 677.768733][T27859] CPU: 0 UID: 0 PID: 27859 Comm: syz.0.10583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 677.768766][T27859] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 677.768772][T27859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 677.768784][T27859] Call Trace: [ 677.768790][T27859] [ 677.768797][T27859] dump_stack_lvl+0x100/0x190 [ 677.768823][T27859] should_fail_ex.cold+0x5/0xa [ 677.768844][T27859] should_failslab+0xc2/0x120 [ 677.768870][T27859] __kmalloc_noprof+0xfc/0x820 [ 677.768892][T27859] ? trace_kmalloc+0xeb/0x110 [ 677.768917][T27859] ? lsm_blob_alloc+0x68/0x90 [ 677.768950][T27859] lsm_blob_alloc+0x68/0x90 [ 677.768979][T27859] security_sk_alloc+0x2d/0x290 [ 677.769000][T27859] sk_prot_alloc+0x12a/0x2a0 [ 677.769031][T27859] sk_alloc+0x36/0xe80 [ 677.769054][T27859] mctp_pf_create+0xe8/0x360 [ 677.769090][T27859] __sock_create+0x339/0x860 [ 677.769112][T27859] __sys_socket+0x14d/0x260 [ 677.769132][T27859] ? __pfx___sys_socket+0x10/0x10 [ 677.769158][T27859] __x64_sys_socket+0x72/0xb0 [ 677.769176][T27859] ? lockdep_hardirqs_on+0x78/0x100 [ 677.769197][T27859] do_syscall_64+0x115/0x840 [ 677.769217][T27859] ? clear_bhb_loop+0x40/0x90 [ 677.769239][T27859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.769259][T27859] RIP: 0033:0x7f303659de99 [ 677.769275][T27859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.769293][T27859] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 677.769310][T27859] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 677.769325][T27859] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 677.769335][T27859] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 677.769346][T27859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.769356][T27859] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 677.769378][T27859] [ 678.147015][T27865] FAULT_INJECTION: forcing a failure. [ 678.147015][T27865] name failslab, interval 1, probability 0, space 0, times 0 [ 678.159773][T27865] CPU: 0 UID: 0 PID: 27865 Comm: syz.4.10587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.159806][T27865] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.159812][T27865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 678.159823][T27865] Call Trace: [ 678.159830][T27865] [ 678.159838][T27865] dump_stack_lvl+0x100/0x190 [ 678.159863][T27865] should_fail_ex.cold+0x5/0xa [ 678.159884][T27865] should_failslab+0xc2/0x120 [ 678.159910][T27865] kmem_cache_alloc_noprof+0x91/0x6a0 [ 678.159932][T27865] ? security_inode_alloc+0x3b/0x2c0 [ 678.159962][T27865] ? sk_prot_alloc+0x60/0x2a0 [ 678.159996][T27865] sk_prot_alloc+0x60/0x2a0 [ 678.160026][T27865] sk_alloc+0x36/0xe80 [ 678.160052][T27865] smc_create+0x11a/0x290 [ 678.160091][T27865] __sock_create+0x339/0x860 [ 678.160114][T27865] __sys_socket+0x14d/0x260 [ 678.160134][T27865] ? __pfx___sys_socket+0x10/0x10 [ 678.160161][T27865] __x64_sys_socket+0x72/0xb0 [ 678.160178][T27865] ? lockdep_hardirqs_on+0x78/0x100 [ 678.160200][T27865] do_syscall_64+0x115/0x840 [ 678.160221][T27865] ? clear_bhb_loop+0x40/0x90 [ 678.160243][T27865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.160262][T27865] RIP: 0033:0x7f325e79de99 [ 678.160279][T27865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.160296][T27865] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 678.160314][T27865] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 678.160326][T27865] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 678.160336][T27865] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 678.160346][T27865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.160356][T27865] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 678.160378][T27865] [ 678.487459][T27869] FAULT_INJECTION: forcing a failure. [ 678.487459][T27869] name failslab, interval 1, probability 0, space 0, times 0 [ 678.500220][T27869] CPU: 0 UID: 0 PID: 27869 Comm: syz.2.10589 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.500253][T27869] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.500260][T27869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 678.500271][T27869] Call Trace: [ 678.500277][T27869] [ 678.500283][T27869] dump_stack_lvl+0x100/0x190 [ 678.500308][T27869] should_fail_ex.cold+0x5/0xa [ 678.500328][T27869] should_failslab+0xc2/0x120 [ 678.500354][T27869] kmem_cache_alloc_noprof+0x91/0x6a0 [ 678.500376][T27869] ? d_instantiate+0x8a/0xb0 [ 678.500397][T27869] ? d_instantiate+0x8a/0xb0 [ 678.500417][T27869] ? alloc_empty_file+0x5b/0x1c0 [ 678.500444][T27869] alloc_empty_file+0x5b/0x1c0 [ 678.500468][T27869] alloc_file_pseudo+0x183/0x290 [ 678.500493][T27869] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 678.500515][T27869] ? alloc_fd+0x471/0x7a0 [ 678.500533][T27869] ? do_raw_spin_unlock+0x145/0x1e0 [ 678.500557][T27869] __anon_inode_getfile+0xe8/0x280 [ 678.500583][T27869] anon_inode_getfile_fmode+0x37/0xa0 [ 678.500608][T27869] do_eventfd+0x159/0x2b0 [ 678.500637][T27869] __x64_sys_eventfd+0x32/0x50 [ 678.500664][T27869] do_syscall_64+0x115/0x840 [ 678.500685][T27869] ? clear_bhb_loop+0x40/0x90 [ 678.500706][T27869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.500725][T27869] RIP: 0033:0x7f54f659de99 [ 678.500741][T27869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.500759][T27869] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 678.500776][T27869] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 678.500788][T27869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 678.500798][T27869] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 678.500808][T27869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.500818][T27869] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 678.500841][T27869] [ 680.283213][T27923] kAFS: No cell specified [ 680.338856][T27926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10615'. [ 681.860497][T27971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10636'. [ 683.017796][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10658'. [ 683.371399][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.382929][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.496335][T28095] netlink: 13 bytes leftover after parsing attributes in process `syz.2.10691'. [ 685.751831][T28099] bridge0: port 3(dummy0) entered blocking state [ 685.779729][T28099] bridge0: port 3(dummy0) entered disabled state [ 685.808131][T28099] dummy0: entered allmulticast mode [ 685.862233][T28099] dummy0: entered promiscuous mode [ 685.904134][T28099] bridge0: port 3(dummy0) entered blocking state [ 685.912210][T28099] bridge0: port 3(dummy0) entered forwarding state [ 685.954093][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10694'. [ 686.683838][T28088] kexec: Could not allocate control_code_buffer [ 687.239824][T28133] bridge0: port 4(batadv0) entered blocking state [ 687.270271][T28133] bridge0: port 4(batadv0) entered disabled state [ 687.298939][T28133] batadv0: entered allmulticast mode [ 687.323434][T28133] batadv0: entered promiscuous mode [ 687.345065][T28133] bridge0: port 4(batadv0) entered blocking state [ 687.351686][T28133] bridge0: port 4(batadv0) entered forwarding state [ 687.405585][T26671] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 687.416616][T26671] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 687.598043][T28143] sctp: [Deprecated]: syz.4.10712 (pid 28143) Use of int in maxseg socket option. [ 687.598043][T28143] Use struct sctp_assoc_value instead [ 688.914436][T28181] bridge0: port 3(dummy0) entered blocking state [ 688.952782][T28181] bridge0: port 3(dummy0) entered disabled state [ 688.986000][T28181] dummy0: entered allmulticast mode [ 689.029577][T28181] dummy0: entered promiscuous mode [ 689.060989][T28181] bridge0: port 3(dummy0) entered blocking state [ 689.067472][T28181] bridge0: port 3(dummy0) entered forwarding state [ 689.224766][T28189] bridge0: port 3(ipvlan1) entered blocking state [ 689.261540][T28189] bridge0: port 3(ipvlan1) entered disabled state [ 689.293732][T28189] ipvlan1: entered allmulticast mode [ 689.314025][T28189] veth0_vlan: entered allmulticast mode [ 689.349162][T28189] ipvlan1: left allmulticast mode [ 689.378672][T28189] veth0_vlan: left allmulticast mode [ 690.843259][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10752'. [ 691.559933][T28246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10756'. [ 692.301309][T28264] overlayfs: missing 'lowerdir' [ 694.290295][T28318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10793'. [ 699.453179][T28455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10850'. [ 699.952337][T28470] netlink: 'syz.4.10857': attribute type 2 has an invalid length. [ 702.359118][T28536] netlink: 82 bytes leftover after parsing attributes in process `syz.4.10888'. [ 704.019046][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10909'. [ 705.404734][T28614] netlink: Unknown conntrack attr (0) [ 705.758671][T28620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10926'. [ 706.418512][T28598] kexec: Could not allocate control_code_buffer [ 706.823655][T28641] bridge0: port 4(syz_tun) entered blocking state [ 706.862897][T28641] bridge0: port 4(syz_tun) entered disabled state [ 706.890235][T28641] syz_tun: entered allmulticast mode [ 706.911695][T28641] syz_tun: entered promiscuous mode [ 706.937082][T28641] bridge0: port 4(syz_tun) entered blocking state [ 706.943692][T28641] bridge0: port 4(syz_tun) entered forwarding state [ 707.062306][ T29] audit: type=1800 audit(4294967429.327:46): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10939" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 708.567650][T28694] netlink: 206 bytes leftover after parsing attributes in process `syz.4.10958'. [ 708.708000][T28696] vmstat_refresh: nr_hugetlb -512 [ 709.009529][T28704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10963'. [ 709.133120][T28706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10964'. [ 709.768741][T28721] FAULT_INJECTION: forcing a failure. [ 709.768741][T28721] name failslab, interval 1, probability 0, space 0, times 0 [ 709.833783][T28721] CPU: 0 UID: 0 PID: 28721 Comm: syz.4.10971 Tainted: G U L syzkaller #0 PREEMPT(full) [ 709.833819][T28721] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 709.833826][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 709.833843][T28721] Call Trace: [ 709.833850][T28721] [ 709.833857][T28721] dump_stack_lvl+0x100/0x190 [ 709.833883][T28721] should_fail_ex.cold+0x5/0xa [ 709.833903][T28721] should_failslab+0xc2/0x120 [ 709.833930][T28721] __kmalloc_cache_noprof+0x91/0x6c0 [ 709.833948][T28721] ? trace_kmalloc+0xeb/0x110 [ 709.833973][T28721] ? __kasan_kmalloc+0xaa/0xb0 [ 709.833994][T28721] ? vb2_vmalloc_alloc+0xf9/0x410 [ 709.834020][T28721] vb2_vmalloc_alloc+0xf9/0x410 [ 709.834038][T28721] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 709.834059][T28721] __vb2_queue_alloc+0x8d5/0x1160 [ 709.834088][T28721] vb2_core_reqbufs+0x899/0xf30 [ 709.834110][T28721] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 709.834129][T28721] ? kasan_save_track+0x14/0x30 [ 709.834151][T28721] ? __kasan_kmalloc+0xaa/0xb0 [ 709.834176][T28721] ? __vb2_init_fileio+0x18f/0x1000 [ 709.834198][T28721] __vb2_init_fileio+0x32d/0x1000 [ 709.834217][T28721] ? aa_file_perm+0x7f3/0x14d0 [ 709.834310][T28721] __vb2_perform_fileio+0x9ba/0x1380 [ 709.834337][T28721] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 709.834356][T28721] ? __pfx___might_resched+0x10/0x10 [ 709.834391][T28721] vb2_fop_read+0x211/0x520 [ 709.834424][T28721] v4l2_read+0x229/0x2c0 [ 709.834450][T28721] ? __pfx_v4l2_read+0x10/0x10 [ 709.834477][T28721] vfs_read+0x1e4/0xb40 [ 709.834509][T28721] ? __pfx_vfs_read+0x10/0x10 [ 709.834536][T28721] ? find_held_lock+0x2b/0x80 [ 709.834558][T28721] ? __fget_files+0x215/0x3d0 [ 709.834574][T28721] ? __fget_files+0x215/0x3d0 [ 709.834593][T28721] ? __fget_files+0x21f/0x3d0 [ 709.834615][T28721] ksys_read+0x12a/0x250 [ 709.834631][T28721] ? __pfx_ksys_read+0x10/0x10 [ 709.834654][T28721] do_syscall_64+0x115/0x840 [ 709.834676][T28721] ? clear_bhb_loop+0x40/0x90 [ 709.834697][T28721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.834716][T28721] RIP: 0033:0x7f325e79de99 [ 709.834733][T28721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.834751][T28721] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 709.834769][T28721] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 709.834781][T28721] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 709.834792][T28721] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 709.834802][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.834812][T28721] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 709.834842][T28721] [ 713.067917][T28793] sock: sock_timestamping_bind_phc: sock not bind to device [ 714.262602][T28823] NFSD: Failed to start, no listeners configured. [ 715.505544][T28871] vmstat_refresh: nr_hugetlb -512 [ 717.563219][T28931] netlink: 'syz.2.11065': attribute type 23 has an invalid length. [ 718.322496][T28956] FAULT_INJECTION: forcing a failure. [ 718.322496][T28956] name failslab, interval 1, probability 0, space 0, times 0 [ 718.386204][T28956] CPU: 0 UID: 0 PID: 28956 Comm: syz.0.11075 Tainted: G U L syzkaller #0 PREEMPT(full) [ 718.386242][T28956] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 718.386249][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 718.386260][T28956] Call Trace: [ 718.386266][T28956] [ 718.386273][T28956] dump_stack_lvl+0x100/0x190 [ 718.386299][T28956] should_fail_ex.cold+0x5/0xa [ 718.386321][T28956] should_failslab+0xc2/0x120 [ 718.386347][T28956] kmem_cache_alloc_noprof+0x91/0x6a0 [ 718.386388][T28956] ? prepare_creds+0x2c/0x950 [ 718.386421][T28956] prepare_creds+0x2c/0x950 [ 718.386454][T28956] cap_task_prctl+0x449/0xa50 [ 718.386478][T28956] security_task_prctl+0xc2/0x160 [ 718.386510][T28956] __do_sys_prctl+0x9b/0x2270 [ 718.386538][T28956] ? __pfx___do_sys_prctl+0x10/0x10 [ 718.386571][T28956] do_syscall_64+0x115/0x840 [ 718.386592][T28956] ? clear_bhb_loop+0x40/0x90 [ 718.386614][T28956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.386633][T28956] RIP: 0033:0x7f303659de99 [ 718.386648][T28956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.386665][T28956] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 718.386683][T28956] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 718.386695][T28956] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 718.386705][T28956] RBP: 00007f3036633eaf R08: 0000000000000007 R09: 0000000000000000 [ 718.386715][T28956] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 718.386726][T28956] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 718.386755][T28956] [ 718.604074][T28961] FAULT_INJECTION: forcing a failure. [ 718.604074][T28961] name failslab, interval 1, probability 0, space 0, times 0 [ 718.616792][T28961] CPU: 0 UID: 0 PID: 28961 Comm: syz.2.11078 Tainted: G U L syzkaller #0 PREEMPT(full) [ 718.616824][T28961] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 718.616831][T28961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 718.616841][T28961] Call Trace: [ 718.616848][T28961] [ 718.616856][T28961] dump_stack_lvl+0x100/0x190 [ 718.616881][T28961] should_fail_ex.cold+0x5/0xa [ 718.616902][T28961] should_failslab+0xc2/0x120 [ 718.616929][T28961] __kmalloc_noprof+0xfc/0x820 [ 718.616950][T28961] ? __lock_acquire+0x49f/0x1a40 [ 718.616979][T28961] ? sk_prot_alloc+0x10b/0x2a0 [ 718.617012][T28961] sk_prot_alloc+0x10b/0x2a0 [ 718.617042][T28961] sk_alloc+0x36/0xe80 [ 718.617066][T28961] pptp_create+0x32/0x340 [ 718.617088][T28961] pppox_create+0x15c/0x2c0 [ 718.617178][T28961] __sock_create+0x339/0x860 [ 718.617200][T28961] __sys_socket+0x14d/0x260 [ 718.617219][T28961] ? __pfx___sys_socket+0x10/0x10 [ 718.617246][T28961] __x64_sys_socket+0x72/0xb0 [ 718.617264][T28961] ? lockdep_hardirqs_on+0x78/0x100 [ 718.617287][T28961] do_syscall_64+0x115/0x840 [ 718.617307][T28961] ? clear_bhb_loop+0x40/0x90 [ 718.617329][T28961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.617348][T28961] RIP: 0033:0x7f54f659de99 [ 718.617365][T28961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.617382][T28961] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 718.617401][T28961] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 718.617412][T28961] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 0000000000000018 [ 718.617423][T28961] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 718.617434][T28961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.617444][T28961] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 718.617467][T28961] [ 721.801190][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11122'. [ 722.290387][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11133'. [ 723.940569][T29136] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 723.948408][T29136] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 730.060526][T29306] zswap: compressor not available [ 731.967970][T29369] GUP no longer grows the stack in syz.3.11262 (29369): 5000-401000 (4000) [ 732.017309][T29369] CPU: 0 UID: 0 PID: 29369 Comm: syz.3.11262 Tainted: G U L syzkaller #0 PREEMPT(full) [ 732.017342][T29369] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 732.017350][T29369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 732.017361][T29369] Call Trace: [ 732.017367][T29369] [ 732.017374][T29369] dump_stack_lvl+0x100/0x190 [ 732.017401][T29369] gup_vma_lookup.cold+0x83/0x96 [ 732.017428][T29369] __get_user_pages+0x241/0x32a0 [ 732.017462][T29369] ? down_read_killable+0x35e/0x520 [ 732.017489][T29369] ? __pfx___get_user_pages+0x10/0x10 [ 732.017521][T29369] __gup_longterm_locked+0x87d/0x16f0 [ 732.017554][T29369] ? __pfx___gup_longterm_locked+0x10/0x10 [ 732.017581][T29369] ? lock_acquire+0x1b9/0x370 [ 732.017627][T29369] gup_fast_fallback+0x16dc/0x2790 [ 732.017669][T29369] ? __pfx_gup_fast_fallback+0x10/0x10 [ 732.017699][T29369] ? __lock_acquire+0x49f/0x1a40 [ 732.017730][T29369] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 732.017751][T29369] ? lockdep_hardirqs_on+0x78/0x100 [ 732.017778][T29369] get_user_pages_fast+0xa7/0xf0 [ 732.017805][T29369] ? __pfx_get_user_pages_fast+0x10/0x10 [ 732.017839][T29369] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 732.017873][T29369] ? pipe_lock+0x69/0x80 [ 732.017891][T29369] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 732.017920][T29369] ? __pfx___mutex_lock+0x10/0x10 [ 732.017944][T29369] ? iovec_from_user+0xda/0x140 [ 732.017976][T29369] iov_iter_get_pages2+0xa3/0x100 [ 732.018004][T29369] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 732.018031][T29369] ? wait_for_space+0x2ca/0x3b0 [ 732.018054][T29369] __do_sys_vmsplice+0x7dd/0x13c0 [ 732.018083][T29369] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 732.018109][T29369] ? __pfx_futex_wait+0x10/0x10 [ 732.018141][T29369] ? __pfx___do_sys_mremap+0x10/0x10 [ 732.018190][T29369] ? do_syscall_64+0x115/0x840 [ 732.018210][T29369] do_syscall_64+0x115/0x840 [ 732.018230][T29369] ? clear_bhb_loop+0x40/0x90 [ 732.018252][T29369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.018270][T29369] RIP: 0033:0x7f55ff19de99 [ 732.018286][T29369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.018304][T29369] RSP: 002b:00007f56000d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 732.018322][T29369] RAX: ffffffffffffffda RBX: 00007f55ff425fa0 RCX: 00007f55ff19de99 [ 732.018333][T29369] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 732.018344][T29369] RBP: 00007f55ff233eaf R08: 0000000000000000 R09: 0000000000000000 [ 732.018354][T29369] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 732.018364][T29369] R13: 00007f55ff426038 R14: 00007f55ff425fa0 R15: 00007ffec7f1c278 [ 732.018387][T29369] [ 734.744926][T29436] FAULT_INJECTION: forcing a failure. [ 734.744926][T29436] name failslab, interval 1, probability 0, space 0, times 0 [ 734.809973][T29436] CPU: 0 UID: 0 PID: 29436 Comm: syz.2.11291 Tainted: G U L syzkaller #0 PREEMPT(full) [ 734.810007][T29436] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 734.810014][T29436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 734.810024][T29436] Call Trace: [ 734.810030][T29436] [ 734.810038][T29436] dump_stack_lvl+0x100/0x190 [ 734.810063][T29436] should_fail_ex.cold+0x5/0xa [ 734.810083][T29436] should_failslab+0xc2/0x120 [ 734.810110][T29436] kmem_cache_alloc_noprof+0x91/0x6a0 [ 734.810133][T29436] ? __pfx___might_resched+0x10/0x10 [ 734.810162][T29436] ? alloc_vfsmnt+0x23/0x710 [ 734.810188][T29436] alloc_vfsmnt+0x23/0x710 [ 734.810212][T29436] clone_mnt+0x4b/0x930 [ 734.810241][T29436] copy_mnt_ns+0x8a1/0x1180 [ 734.810268][T29436] ? __pfx_copy_mnt_ns+0x10/0x10 [ 734.810290][T29436] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 734.810313][T29436] ? create_new_namespaces+0x30/0xac0 [ 734.810336][T29436] create_new_namespaces+0xd3/0xac0 [ 734.810355][T29436] ? bpf_lsm_capable+0x9/0x10 [ 734.810374][T29436] ? security_capable+0x80/0x260 [ 734.810396][T29436] unshare_nsproxy_namespaces+0xf2/0x220 [ 734.810418][T29436] ksys_unshare+0x438/0xab0 [ 734.810442][T29436] ? __pfx_ksys_unshare+0x10/0x10 [ 734.810473][T29436] __x64_sys_unshare+0x31/0x40 [ 734.810496][T29436] do_syscall_64+0x115/0x840 [ 734.810517][T29436] ? clear_bhb_loop+0x40/0x90 [ 734.810546][T29436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.810564][T29436] RIP: 0033:0x7f54f659de99 [ 734.810580][T29436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.810597][T29436] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 734.810615][T29436] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 734.810626][T29436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 734.810637][T29436] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 734.810647][T29436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.810658][T29436] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 734.810680][T29436] [ 738.217239][ T29] audit: type=1804 audit(4294967460.634:47): pid=29513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11323" name="file0" dev="tmpfs" ino=14891 res=1 errno=0 [ 738.565209][T29514] syz.0.11326 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 738.713334][T29514] CPU: 0 UID: 0 PID: 29514 Comm: syz.0.11326 Tainted: G U L syzkaller #0 PREEMPT(full) [ 738.713367][T29514] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 738.713374][T29514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 738.713385][T29514] Call Trace: [ 738.713391][T29514] [ 738.713399][T29514] dump_stack_lvl+0x100/0x190 [ 738.713424][T29514] dump_header+0xfb/0x606 [ 738.713445][T29514] oom_kill_process.cold+0xd/0x330 [ 738.713468][T29514] out_of_memory+0x340/0x14f0 [ 738.713504][T29514] ? __pfx_out_of_memory+0x10/0x10 [ 738.713540][T29514] mem_cgroup_out_of_memory+0xc6/0x130 [ 738.713561][T29514] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 738.713581][T29514] ? find_held_lock+0x2b/0x80 [ 738.713608][T29514] ? do_raw_spin_unlock+0x145/0x1e0 [ 738.713630][T29514] ? _raw_spin_unlock+0x28/0x50 [ 738.713651][T29514] try_charge_memcg+0x6e5/0xdf0 [ 738.713689][T29514] ? __pfx_try_charge_memcg+0x10/0x10 [ 738.713716][T29514] ? find_held_lock+0x2b/0x80 [ 738.713738][T29514] ? rcu_read_unlock+0x17/0x60 [ 738.713765][T29514] ? rcu_read_unlock+0x17/0x60 [ 738.713792][T29514] ? find_held_lock+0x2b/0x80 [ 738.713815][T29514] ? rcu_read_unlock+0x17/0x60 [ 738.713848][T29514] charge_memcg+0x187/0x1e0 [ 738.713877][T29514] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 738.713911][T29514] swap_cache_alloc_folio+0x548/0xc50 [ 738.713938][T29514] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 738.713959][T29514] ? swap_cache_get_folio+0x28d/0x360 [ 738.713980][T29514] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 738.713999][T29514] ? lockdep_hardirqs_on+0x78/0x100 [ 738.714020][T29514] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 738.714046][T29514] swap_cache_read_folio+0x47/0x140 [ 738.714069][T29514] swap_cluster_readahead+0x387/0x5f0 [ 738.714096][T29514] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 738.714129][T29514] ? __lock_acquire+0x49f/0x1a40 [ 738.714160][T29514] ? get_vma_policy+0x23d/0x3b0 [ 738.714190][T29514] swapin_readahead+0x159/0x1200 [ 738.714219][T29514] ? __pfx_swapin_readahead+0x10/0x10 [ 738.714245][T29514] ? swap_table_get+0x10d/0x2c0 [ 738.714264][T29514] ? swap_cache_get_folio+0x28d/0x360 [ 738.714285][T29514] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 738.714305][T29514] ? __pfx_softleaf_type+0x10/0x10 [ 738.714330][T29514] ? do_swap_page+0xf98/0x5780 [ 738.714346][T29514] do_swap_page+0xf98/0x5780 [ 738.714374][T29514] ? __pfx_do_swap_page+0x10/0x10 [ 738.714393][T29514] ? __lock_acquire+0x49f/0x1a40 [ 738.714425][T29514] ? rcu_is_watching+0x12/0xc0 [ 738.714447][T29514] ? __pte_offset_map+0x179/0x310 [ 738.714474][T29514] __handle_mm_fault+0x192f/0x2a00 [ 738.714497][T29514] ? reacquire_held_locks+0xce/0x1e0 [ 738.714527][T29514] ? __pfx___handle_mm_fault+0x10/0x10 [ 738.714550][T29514] ? lock_vma_under_rcu+0x17c/0x590 [ 738.714581][T29514] handle_mm_fault+0x37b/0xa30 [ 738.714604][T29514] do_user_addr_fault+0x5a3/0x12f0 [ 738.714641][T29514] exc_page_fault+0x6f/0xd0 [ 738.714667][T29514] asm_exc_page_fault+0x26/0x30 [ 738.714690][T29514] RIP: 0033:0x7f303655a814 [ 738.714707][T29514] Code: 0f 92 c7 72 b0 48 8b 44 24 08 48 8d 84 06 00 08 00 00 4c 01 f0 48 21 d8 49 39 c2 72 98 8b 1d 9b 6f 29 00 31 c0 b9 01 00 00 00 0f b1 0d 04 2d e0 00 0f 85 ae 09 00 00 c1 e3 02 48 8b 05 14 2d [ 738.714725][T29514] RSP: 002b:00007ffc65d52280 EFLAGS: 00010246 [ 738.714740][T29514] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000001 [ 738.714751][T29514] RDX: 000000000000003f RSI: 0000000000000fff RDI: 00007ffc65d523c8 [ 738.714762][T29514] RBP: 0000000000000000 R08: 0000000000000007 R09: 00007f3036825fb0 [ 738.714772][T29514] R10: 0000000000021000 R11: 0000000000020000 R12: 00007ffc65d523d0 [ 738.714783][T29514] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 738.714810][T29514] [ 739.755096][T29514] memory: usage 3072kB, limit 3072kB, failcnt 99200 [ 739.787709][T29514] memory+swap: usage 3268kB, limit 9007199254740988kB, failcnt 0 [ 739.797529][T29514] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 739.836751][T29514] Memory cgroup stats for /syz0: [ 739.836875][T29514] cache 0 [ 739.857560][T29514] rss 0 [ 739.874136][T29514] rss_huge 0 [ 739.877385][T29514] shmem 0 [ 739.880949][T29514] mapped_file 0 [ 739.884460][T29514] dirty 0 [ 739.887390][T29514] writeback 0 [ 739.891334][T29514] workingset_refault_anon 7389 [ 739.896119][T29514] workingset_refault_file 35026 [ 739.901647][T29514] swap 200704 [ 739.904976][T29514] swapcached 402722816 [ 739.911716][T29514] pgpgin 268974 [ 739.915278][T29514] pgpgout 279285 [ 739.919184][T29514] pgfault 520855 [ 739.922744][T29514] pgmajfault 3441 [ 739.926368][T29514] inactive_anon 0 [ 739.930498][T29514] active_anon 4096 [ 739.934239][T29514] inactive_file 0 [ 739.937863][T29514] active_file 0 [ 739.943968][T29514] unevictable 0 [ 739.947456][T29514] hierarchical_memory_limit 3145728 [ 739.952986][T29514] hierarchical_memsw_limit 9223372036854771712 [ 739.959413][T29514] total_cache 0 [ 739.964868][T29514] total_rss 0 [ 739.968207][T29514] total_rss_huge 0 [ 739.972506][T29514] total_shmem 0 [ 739.976029][T29514] total_mapped_file 0 [ 739.981280][T29514] total_dirty 0 [ 739.984768][T29514] total_writeback 0 [ 739.988964][T29514] total_workingset_refault_anon 7389 [ 739.994271][T29514] total_workingset_refault_file 35026 [ 740.000101][T29514] total_swap 200704 [ 740.003924][T29514] total_swapcached 402722816 [ 740.008847][T29514] total_pgpgin 268974 [ 740.012842][T29514] total_pgpgout 279285 [ 740.016901][T29514] total_pgfault 520855 [ 740.021685][T29514] total_pgmajfault 3441 [ 740.025879][T29514] total_inactive_anon 0 [ 740.030491][T29514] total_active_anon 4096 [ 740.034865][T29514] total_inactive_file 0 [ 740.039607][T29514] total_active_file 0 [ 740.043648][T29514] total_unevictable 0 [ 740.047631][T29514] anon_cost 0 [ 740.054074][T29514] file_cost 0 [ 740.057394][T29514] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11326,pid=29514,uid=0 [ 740.077340][T29514] Memory cgroup out of memory: Killed process 29514 (syz.0.11326) total-vm:104292kB, anon-rss:1248kB, file-rss:20896kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 740.386543][T29542] FAULT_INJECTION: forcing a failure. [ 740.386543][T29542] name failslab, interval 1, probability 0, space 0, times 0 [ 740.449312][T29542] CPU: 0 UID: 0 PID: 29542 Comm: syz.2.11337 Tainted: G U L syzkaller #0 PREEMPT(full) [ 740.449346][T29542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 740.449354][T29542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 740.449364][T29542] Call Trace: [ 740.449370][T29542] [ 740.449377][T29542] dump_stack_lvl+0x100/0x190 [ 740.449406][T29542] should_fail_ex.cold+0x5/0xa [ 740.449427][T29542] should_failslab+0xc2/0x120 [ 740.449456][T29542] __kmalloc_noprof+0xfc/0x820 [ 740.449479][T29542] ? sk_prot_alloc+0x10b/0x2a0 [ 740.449523][T29542] sk_prot_alloc+0x10b/0x2a0 [ 740.449554][T29542] sk_alloc+0x36/0xe80 [ 740.449577][T29542] __netlink_create+0x5e/0x2c0 [ 740.449606][T29542] ? __wake_up+0x3f/0x60 [ 740.449632][T29542] netlink_create+0x29b/0x610 [ 740.449659][T29542] ? __pfx_rtnetlink_bind+0x10/0x10 [ 740.449684][T29542] __sock_create+0x339/0x860 [ 740.449705][T29542] __sys_socket+0x14d/0x260 [ 740.449724][T29542] ? __pfx___sys_socket+0x10/0x10 [ 740.449750][T29542] __x64_sys_socket+0x72/0xb0 [ 740.449767][T29542] ? lockdep_hardirqs_on+0x78/0x100 [ 740.449791][T29542] do_syscall_64+0x115/0x840 [ 740.449811][T29542] ? clear_bhb_loop+0x40/0x90 [ 740.449834][T29542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.449853][T29542] RIP: 0033:0x7f54f659de99 [ 740.449868][T29542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.449885][T29542] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 740.449903][T29542] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 740.449914][T29542] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 740.449925][T29542] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 740.449936][T29542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.449947][T29542] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 740.449969][T29542] [ 742.179823][T29592] FAULT_INJECTION: forcing a failure. [ 742.179823][T29592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 742.228989][T29592] CPU: 0 UID: 0 PID: 29592 Comm: syz.2.11359 Tainted: G U L syzkaller #0 PREEMPT(full) [ 742.229031][T29592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 742.229039][T29592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 742.229049][T29592] Call Trace: [ 742.229056][T29592] [ 742.229063][T29592] dump_stack_lvl+0x100/0x190 [ 742.229087][T29592] should_fail_ex.cold+0x5/0xa [ 742.229104][T29592] ? prepare_alloc_pages+0x16d/0x5f0 [ 742.229133][T29592] should_fail_alloc_page+0xeb/0x140 [ 742.229161][T29592] prepare_alloc_pages+0x1f0/0x5f0 [ 742.229191][T29592] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 742.229218][T29592] ? __lock_acquire+0x49f/0x1a40 [ 742.229247][T29592] ? find_held_lock+0x2b/0x80 [ 742.229269][T29592] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 742.229288][T29592] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 742.229310][T29592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 742.229334][T29592] ? find_held_lock+0x2b/0x80 [ 742.229356][T29592] ? filemap_get_entry+0x22d/0x450 [ 742.229379][T29592] ? lock_acquire+0x1b9/0x370 [ 742.229408][T29592] ? page_table_check_set+0x48f/0x930 [ 742.229433][T29592] ? page_table_check_set+0x48f/0x930 [ 742.229460][T29592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.229489][T29592] ? policy_nodemask+0xed/0x4f0 [ 742.229517][T29592] alloc_pages_mpol+0x1fb/0x540 [ 742.229543][T29592] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 742.229576][T29592] folio_alloc_mpol_noprof+0x36/0x260 [ 742.229607][T29592] vma_alloc_folio_noprof+0xed/0x1d0 [ 742.229636][T29592] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 742.229672][T29592] do_anonymous_page+0xb2b/0x2080 [ 742.229691][T29592] ? rcu_read_unlock+0x2d/0xb0 [ 742.229714][T29592] __handle_mm_fault+0x1d2c/0x2a00 [ 742.229737][T29592] ? reacquire_held_locks+0xce/0x1e0 [ 742.229766][T29592] ? __pfx___handle_mm_fault+0x10/0x10 [ 742.229788][T29592] ? lock_vma_under_rcu+0x17c/0x590 [ 742.229818][T29592] handle_mm_fault+0x37b/0xa30 [ 742.229840][T29592] do_user_addr_fault+0x5a3/0x12f0 [ 742.229873][T29592] exc_page_fault+0x6f/0xd0 [ 742.229894][T29592] asm_exc_page_fault+0x26/0x30 [ 742.229912][T29592] RIP: 0033:0x7f54f645f60b [ 742.229928][T29592] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 742.229945][T29592] RSP: 002b:00007f54f7483fa0 EFLAGS: 00010206 [ 742.229960][T29592] RAX: 0000000000000000 RBX: 00007f54f6825fa0 RCX: 0000000000000000 [ 742.229972][T29592] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 742.229983][T29592] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 742.229993][T29592] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 742.230013][T29592] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 742.230036][T29592] [ 742.231475][T29592] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 743.280179][T29606] zswap: compressor not available [ 743.800946][T29627] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.11373'. [ 744.518329][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.526621][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.962763][T29686] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.11399'. [ 746.158324][T29689] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 746.450925][T29696] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 746.457374][T29696] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 746.721432][T13242] Bluetooth: hci2: Malformed Event: 0x13 [ 747.499023][T29730] NFSD: Failed to start, no listeners configured. [ 748.016743][T29747] sctp: [Deprecated]: syz.3.11429 (pid 29747) Use of int in max_burst socket option. [ 748.016743][T29747] Use struct sctp_assoc_value instead [ 748.968750][T29779] sd 0:0:1:0: PR command failed: 1026 [ 748.992710][T29779] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 749.024438][T29779] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 752.476997][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11486'. [ 752.725984][ T29] audit: type=1800 audit(4294967475.212:48): pid=29879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11488" name=22050820 dev="tmpfs" ino=5956 res=0 errno=0 [ 753.475848][ T29] audit: type=1800 audit(4294967475.965:49): pid=29898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11496" name=04 dev="tmpfs" ino=5972 res=0 errno=0 [ 753.974726][T29912] FAULT_INJECTION: forcing a failure. [ 753.974726][T29912] name failslab, interval 1, probability 0, space 0, times 0 [ 754.024107][T29910] NFSD: Failed to start, no listeners configured. [ 754.052957][T29912] CPU: 0 UID: 0 PID: 29912 Comm: syz.4.11503 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.052992][T29912] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.052999][T29912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 754.053009][T29912] Call Trace: [ 754.053015][T29912] [ 754.053022][T29912] dump_stack_lvl+0x100/0x190 [ 754.053047][T29912] should_fail_ex.cold+0x5/0xa [ 754.053069][T29912] should_failslab+0xc2/0x120 [ 754.053095][T29912] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 754.053120][T29912] ? __d_alloc+0x35/0xa50 [ 754.053145][T29912] __d_alloc+0x35/0xa50 [ 754.053167][T29912] d_alloc+0x4a/0x1e0 [ 754.053188][T29912] lookup_one_qstr_excl+0x171/0x250 [ 754.053212][T29912] ? mnt_want_write+0x161/0x410 [ 754.053240][T29912] filename_create+0x1cf/0x400 [ 754.053268][T29912] ? __pfx_filename_create+0x10/0x10 [ 754.053304][T29912] filename_mknodat+0x190/0x7f0 [ 754.053328][T29912] ? __pfx_filename_mknodat+0x10/0x10 [ 754.053355][T29912] ? strncpy_from_user+0x19d/0x2d0 [ 754.053387][T29912] ? do_getname+0x191/0x390 [ 754.053411][T29912] __x64_sys_mknod+0x8f/0xc0 [ 754.053431][T29912] do_syscall_64+0x115/0x840 [ 754.053454][T29912] ? clear_bhb_loop+0x40/0x90 [ 754.053476][T29912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.053495][T29912] RIP: 0033:0x7f325e79de99 [ 754.053511][T29912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.053528][T29912] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 754.053546][T29912] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 754.053558][T29912] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 754.053568][T29912] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 754.053579][T29912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.053589][T29912] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 754.053613][T29912] [ 755.517755][T29941] FAULT_INJECTION: forcing a failure. [ 755.517755][T29941] name failslab, interval 1, probability 0, space 0, times 0 [ 755.589068][T29941] CPU: 0 UID: 0 PID: 29941 Comm: syz.0.11517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 755.589103][T29941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 755.589110][T29941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 755.589121][T29941] Call Trace: [ 755.589127][T29941] [ 755.589135][T29941] dump_stack_lvl+0x100/0x190 [ 755.589160][T29941] should_fail_ex.cold+0x5/0xa [ 755.589180][T29941] should_failslab+0xc2/0x120 [ 755.589207][T29941] __kmalloc_noprof+0xfc/0x820 [ 755.589228][T29941] ? __lock_acquire+0x49f/0x1a40 [ 755.589257][T29941] ? tomoyo_encode2+0x2f6/0x3c0 [ 755.589289][T29941] tomoyo_encode2+0x2f6/0x3c0 [ 755.589319][T29941] tomoyo_encode+0x29/0x50 [ 755.589345][T29941] tomoyo_mount_acl+0x14c/0x8b0 [ 755.589372][T29941] ? is_bpf_text_address+0x8a/0x1a0 [ 755.589408][T29941] ? bpf_ksym_find+0x124/0x1c0 [ 755.589429][T29941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 755.589459][T29941] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 755.589483][T29941] ? kernel_text_address+0x8d/0x100 [ 755.589510][T29941] ? __lock_acquire+0x49f/0x1a40 [ 755.589540][T29941] ? unwind_get_return_address+0x59/0xa0 [ 755.589589][T29941] ? tomoyo_domain+0xb2/0x150 [ 755.589607][T29941] ? tomoyo_profile+0x47/0x60 [ 755.589627][T29941] tomoyo_mount_permission+0x214/0x460 [ 755.589653][T29941] ? tomoyo_mount_permission+0x1f6/0x460 [ 755.589681][T29941] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 755.589720][T29941] security_sb_mount+0xdd/0x270 [ 755.589742][T29941] path_mount+0x158/0x23d0 [ 755.589769][T29941] ? __pfx_path_mount+0x10/0x10 [ 755.589789][T29941] ? lockdep_hardirqs_on+0x78/0x100 [ 755.589815][T29941] ? putname+0xb1/0x110 [ 755.589833][T29941] ? kmem_cache_free+0x127/0x6b0 [ 755.589860][T29941] ? __x64_sys_mount+0x293/0x310 [ 755.589881][T29941] __x64_sys_mount+0x293/0x310 [ 755.589904][T29941] ? __pfx___x64_sys_mount+0x10/0x10 [ 755.589934][T29941] do_syscall_64+0x115/0x840 [ 755.589955][T29941] ? clear_bhb_loop+0x40/0x90 [ 755.589977][T29941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.589996][T29941] RIP: 0033:0x7f303659de99 [ 755.590013][T29941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.590032][T29941] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.590050][T29941] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 755.590063][T29941] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 755.590074][T29941] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 755.590085][T29941] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 755.590097][T29941] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 755.590120][T29941] [ 757.370682][T29988] netlink: 334 bytes leftover after parsing attributes in process `syz.3.11539'. [ 757.800538][T30004] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 758.978685][T30041] ovs_?: entered promiscuous mode [ 761.399000][T30113] bridge0: port 3(veth0_to_bridge) entered blocking state [ 761.422301][T30113] bridge0: port 3(veth0_to_bridge) entered disabled state [ 761.451319][T30113] veth0_to_bridge: entered allmulticast mode [ 761.480572][T30113] veth0_to_bridge: entered promiscuous mode [ 761.511844][T30113] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.560991][T30113] bridge0: port 3(veth0_to_bridge) entered blocking state [ 761.568305][T30113] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 761.769485][T30124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11599'. [ 763.042356][T30175] ovs_?: entered promiscuous mode [ 763.437535][ T29] audit: type=1800 audit(4294967485.972:50): pid=30186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11627" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 764.196794][T30210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11638'. [ 764.673057][T30228] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 766.601489][T30276] FAULT_INJECTION: forcing a failure. [ 766.601489][T30276] name failslab, interval 1, probability 0, space 0, times 0 [ 766.663416][T30276] CPU: 0 UID: 0 PID: 30276 Comm: syz.2.11669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.663455][T30276] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.663461][T30276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 766.663472][T30276] Call Trace: [ 766.663478][T30276] [ 766.663485][T30276] dump_stack_lvl+0x100/0x190 [ 766.663512][T30276] should_fail_ex.cold+0x5/0xa [ 766.663533][T30276] should_failslab+0xc2/0x120 [ 766.663558][T30276] __kmalloc_noprof+0xfc/0x820 [ 766.663580][T30276] ? trace_kmem_cache_alloc+0xdd/0x100 [ 766.663606][T30276] ? lsm_blob_alloc+0x68/0x90 [ 766.663638][T30276] lsm_blob_alloc+0x68/0x90 [ 766.663665][T30276] security_sk_alloc+0x2d/0x290 [ 766.663687][T30276] sk_prot_alloc+0x1d1/0x2a0 [ 766.663719][T30276] sk_alloc+0x36/0xe80 [ 766.663742][T30276] rds_create+0x9e/0x5e0 [ 766.663763][T30276] __sock_create+0x339/0x860 [ 766.663786][T30276] __sys_socket+0x14d/0x260 [ 766.663805][T30276] ? __pfx___sys_socket+0x10/0x10 [ 766.663833][T30276] __x64_sys_socket+0x72/0xb0 [ 766.663851][T30276] ? lockdep_hardirqs_on+0x78/0x100 [ 766.663874][T30276] do_syscall_64+0x115/0x840 [ 766.663894][T30276] ? clear_bhb_loop+0x40/0x90 [ 766.663916][T30276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.663935][T30276] RIP: 0033:0x7f54f659de99 [ 766.663950][T30276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.663967][T30276] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 766.663985][T30276] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 766.663998][T30276] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 766.664008][T30276] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 766.664019][T30276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.664029][T30276] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 766.664052][T30276] [ 767.625600][T30296] bridge0: port 5(veth1_macvtap) entered blocking state [ 767.684265][T30296] bridge0: port 5(veth1_macvtap) entered disabled state [ 767.717622][T30296] veth1_macvtap: entered allmulticast mode [ 767.751564][T30296] veth1_macvtap: left allmulticast mode [ 769.871326][T30358] netlink: 350 bytes leftover after parsing attributes in process `syz.4.11709'. [ 770.350490][T30374] sctp: [Deprecated]: syz.3.11717 (pid 30374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.350490][T30374] Use struct sctp_sack_info instead [ 770.876945][T30389] netlink: 342 bytes leftover after parsing attributes in process `syz.4.11723'. [ 772.346432][T30434] IPVS: length: 537396514 != 24 [ 773.271009][T30470] Device name cannot be null; rc = [-22] [ 775.472321][T30533] FAULT_INJECTION: forcing a failure. [ 775.472321][T30533] name fail_futex, interval 1, probability 0, space 0, times 1 [ 775.528958][T30533] CPU: 0 UID: 0 PID: 30533 Comm: syz.2.11786 Tainted: G U L syzkaller #0 PREEMPT(full) [ 775.528992][T30533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 775.528999][T30533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 775.529009][T30533] Call Trace: [ 775.529016][T30533] [ 775.529023][T30533] dump_stack_lvl+0x100/0x190 [ 775.529049][T30533] should_fail_ex.cold+0x5/0xa [ 775.529070][T30533] get_futex_key+0x1d2/0x14f0 [ 775.529093][T30533] ? __pfx_get_futex_key+0x10/0x10 [ 775.529118][T30533] futex_wake+0xf4/0x5e0 [ 775.529145][T30533] ? __pfx_futex_wake+0x10/0x10 [ 775.529171][T30533] ? __lock_acquire+0x49f/0x1a40 [ 775.529204][T30533] do_futex+0x2b2/0x440 [ 775.529225][T30533] ? __pfx_do_futex+0x10/0x10 [ 775.529242][T30533] ? __pfx__setid_policy_lookup+0x10/0x10 [ 775.529273][T30533] ? find_held_lock+0x2b/0x80 [ 775.529294][T30533] ? setid_policy_lookup+0x10c/0x350 [ 775.529324][T30533] __x64_sys_futex+0x34f/0x4d0 [ 775.529355][T30533] ? __pfx___x64_sys_futex+0x10/0x10 [ 775.529384][T30533] do_syscall_64+0x115/0x840 [ 775.529405][T30533] ? clear_bhb_loop+0x40/0x90 [ 775.529427][T30533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.529446][T30533] RIP: 0033:0x7f54f659de99 [ 775.529463][T30533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.529480][T30533] RSP: 002b:00007f54f74850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 775.529502][T30533] RAX: ffffffffffffffda RBX: 00007f54f6825fa8 RCX: 00007f54f659de99 [ 775.529513][T30533] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54f6825fac [ 775.529524][T30533] RBP: 00007f54f6825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 775.529534][T30533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.529545][T30533] R13: 00007f54f6826038 R14: 00007ffdb0a0c2e0 R15: 00007ffdb0a0c3c8 [ 775.529571][T30533] [ 776.835572][T30573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11806'. [ 777.061472][T30579] netlink: 'syz.3.11809': attribute type 1 has an invalid length. [ 778.311078][T30612] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11824'. [ 779.335319][T30640] netlink: 334 bytes leftover after parsing attributes in process `syz.3.11835'. [ 780.935818][T13242] Bluetooth: hci1: Malformed HCI Event [ 781.268575][T30687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11859'. [ 783.729303][T30734] FAULT_INJECTION: forcing a failure. [ 783.729303][T30734] name failslab, interval 1, probability 0, space 0, times 0 [ 783.790897][T30734] CPU: 0 UID: 0 PID: 30734 Comm: syz.4.11880 Tainted: G U L syzkaller #0 PREEMPT(full) [ 783.790931][T30734] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 783.790938][T30734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 783.790948][T30734] Call Trace: [ 783.790955][T30734] [ 783.790962][T30734] dump_stack_lvl+0x100/0x190 [ 783.790987][T30734] should_fail_ex.cold+0x5/0xa [ 783.791008][T30734] should_failslab+0xc2/0x120 [ 783.791034][T30734] __kmalloc_cache_noprof+0x91/0x6c0 [ 783.791056][T30734] ? create_filter_start.constprop.0+0x1c4/0x310 [ 783.791088][T30734] create_filter_start.constprop.0+0x1c4/0x310 [ 783.791118][T30734] apply_subsystem_event_filter+0x188/0x17a0 [ 783.791149][T30734] ? __might_fault+0xc5/0x140 [ 783.791170][T30734] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 783.791201][T30734] ? _copy_from_user+0x59/0xd0 [ 783.791234][T30734] subsystem_filter_write+0x95/0x120 [ 783.791261][T30734] vfs_write+0x2aa/0x1050 [ 783.791278][T30734] ? __pfx_subsystem_filter_write+0x10/0x10 [ 783.791307][T30734] ? __pfx_vfs_write+0x10/0x10 [ 783.791322][T30734] ? __fget_files+0x215/0x3d0 [ 783.791344][T30734] ? __fget_files+0x21f/0x3d0 [ 783.791366][T30734] ksys_write+0x12a/0x250 [ 783.791383][T30734] ? __pfx_ksys_write+0x10/0x10 [ 783.791406][T30734] do_syscall_64+0x115/0x840 [ 783.791427][T30734] ? clear_bhb_loop+0x40/0x90 [ 783.791448][T30734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.791467][T30734] RIP: 0033:0x7f325e79de99 [ 783.791483][T30734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.791500][T30734] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.791518][T30734] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 783.791530][T30734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 783.791540][T30734] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 783.791550][T30734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.791561][T30734] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 783.791583][T30734] [ 786.002359][T30780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11902'. [ 786.247091][T30791] netlink: 'syz.3.11907': attribute type 1 has an invalid length. [ 786.707544][T30812] netlink: 'syz.0.11917': attribute type 33 has an invalid length. [ 787.632656][T30843] netlink: 21 bytes leftover after parsing attributes in process `syz.4.11932'. [ 789.888165][T30911] zswap: compressor not available [ 790.739024][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11976'. [ 790.787932][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11976'. [ 791.271880][ T29] audit: type=1800 audit(4294967513.954:51): pid=30955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11982" name="lu_gp_id" dev="configfs" ino=92857 res=0 errno=0 [ 791.340989][T30955] ALUA LU Group already has a valid ID, ignoring request [ 791.910554][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11988'. [ 793.681313][T31012] zswap: compressor F not available [ 794.662897][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12019'. [ 796.331276][T31094] netlink: 186 bytes leftover after parsing attributes in process `syz.2.12038'. [ 797.148428][T31116] netlink: 342 bytes leftover after parsing attributes in process `syz.4.12048'. [ 799.437197][T31191] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5789] was attempted by "A\x1bM ^H\x22:K4U[2E+WjFڨkm8fTwgO,.yIjX=l6W4\x0a۟BpiښR8ֆVTs^bs0Vsܙ@z{\x22;ƾe`}țC4B<3Q5LؼW-KZ\x0d3.mGi5U.^T@H?ov\x0cfL\x1b@o`\x07pX!ɘiE!%\x222 v!qz)Ljx#Itʧ9瓹ߪ8Ubsl&5Ȫ\x09gB,\x0d~pyi?OJw#\x09ZgE\x07!##s\x22K%dvީU7+ߡԧmQď!掔zXE\x5c\x07n?ik\x5cn wm4\x0cMtFDb='I=4UKS*:\x0aaxEw>uF`iTqAlr¨iȺåzLa{ymU]p|[2s iεEQݕЉC/7ZC}Uoj lKAƫ2KW\x5c' /(;Uܓd&?u,g零\x0coLO:$Q\x07\x5c,qI\x09NL\x0cU\x0c'J [ 799.743833][T31184] nbd: socks must be embedded in a SOCK_ITEM attr [ 800.226192][T31213] FAULT_INJECTION: forcing a failure. [ 800.226192][T31213] name failslab, interval 1, probability 0, space 0, times 0 [ 800.285012][T31213] CPU: 0 UID: 0 PID: 31213 Comm: syz.4.12090 Tainted: G U L syzkaller #0 PREEMPT(full) [ 800.285046][T31213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 800.285053][T31213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.285063][T31213] Call Trace: [ 800.285070][T31213] [ 800.285077][T31213] dump_stack_lvl+0x100/0x190 [ 800.285101][T31213] should_fail_ex.cold+0x5/0xa [ 800.285122][T31213] should_failslab+0xc2/0x120 [ 800.285147][T31213] kmem_cache_alloc_noprof+0x91/0x6a0 [ 800.285177][T31213] ? stack_trace_save+0x8e/0xc0 [ 800.285202][T31213] ? alloc_empty_file+0x5b/0x1c0 [ 800.285228][T31213] alloc_empty_file+0x5b/0x1c0 [ 800.285252][T31213] path_openat+0xe7/0x4280 [ 800.285269][T31213] ? __kasan_slab_alloc+0x89/0x90 [ 800.285292][T31213] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 800.285313][T31213] ? do_getname+0x35/0x390 [ 800.285333][T31213] ? do_sys_openat2+0xc7/0x1e0 [ 800.285355][T31213] ? __x64_sys_openat+0x12d/0x210 [ 800.285376][T31213] ? do_syscall_64+0x115/0x840 [ 800.285397][T31213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.285422][T31213] ? __pfx_path_openat+0x10/0x10 [ 800.285446][T31213] do_file_open+0x20e/0x430 [ 800.285466][T31213] ? __pfx_do_file_open+0x10/0x10 [ 800.285499][T31213] ? alloc_fd+0x471/0x7a0 [ 800.285518][T31213] ? do_getname+0x191/0x390 [ 800.285542][T31213] do_sys_openat2+0x10f/0x1e0 [ 800.285569][T31213] ? __pfx_do_sys_openat2+0x10/0x10 [ 800.285594][T31213] ? find_held_lock+0x2b/0x80 [ 800.285622][T31213] __x64_sys_openat+0x12d/0x210 [ 800.285647][T31213] ? __pfx___x64_sys_openat+0x10/0x10 [ 800.285705][T31213] do_syscall_64+0x115/0x840 [ 800.285726][T31213] ? clear_bhb_loop+0x40/0x90 [ 800.285748][T31213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.285766][T31213] RIP: 0033:0x7f325e75e6ce [ 800.285782][T31213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.285800][T31213] RSP: 002b:00007f325f58eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.285818][T31213] RAX: ffffffffffffffda RBX: 00007f325f58f6c0 RCX: 00007f325e75e6ce [ 800.285830][T31213] RDX: 0000000000000002 RSI: 00007f325f58ef90 RDI: ffffffffffffff9c [ 800.285841][T31213] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 800.285852][T31213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.285863][T31213] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 800.285886][T31213] [ 801.988322][T31246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12106'. [ 802.210780][T31254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12110'. [ 802.501676][T31265] ovs_: entered promiscuous mode [ 802.669378][T31274] netlink: 'syz.3.12120': attribute type 2 has an invalid length. [ 803.764913][T31313] netlink: 350 bytes leftover after parsing attributes in process `syz.2.12139'. [ 803.893529][T31319] FAULT_INJECTION: forcing a failure. [ 803.893529][T31319] name failslab, interval 1, probability 0, space 0, times 0 [ 803.945424][T31319] CPU: 0 UID: 0 PID: 31319 Comm: syz.0.12141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 803.945458][T31319] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 803.945469][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 803.945480][T31319] Call Trace: [ 803.945486][T31319] [ 803.945493][T31319] dump_stack_lvl+0x100/0x190 [ 803.945519][T31319] should_fail_ex.cold+0x5/0xa [ 803.945541][T31319] should_failslab+0xc2/0x120 [ 803.945567][T31319] __kmalloc_noprof+0xfc/0x820 [ 803.945591][T31319] ? sk_prot_alloc+0x10b/0x2a0 [ 803.945624][T31319] sk_prot_alloc+0x10b/0x2a0 [ 803.945678][T31319] sk_alloc+0x36/0xe80 [ 803.945702][T31319] alg_create+0x9e/0x150 [ 803.945724][T31319] __sock_create+0x339/0x860 [ 803.945747][T31319] __sys_socket+0x14d/0x260 [ 803.945766][T31319] ? __pfx___sys_socket+0x10/0x10 [ 803.945792][T31319] __x64_sys_socket+0x72/0xb0 [ 803.945811][T31319] ? lockdep_hardirqs_on+0x78/0x100 [ 803.945832][T31319] do_syscall_64+0x115/0x840 [ 803.945853][T31319] ? clear_bhb_loop+0x40/0x90 [ 803.945875][T31319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.945894][T31319] RIP: 0033:0x7f303659de99 [ 803.945910][T31319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.945935][T31319] RSP: 002b:00007f303738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 803.945955][T31319] RAX: ffffffffffffffda RBX: 00007f3036825fa0 RCX: 00007f303659de99 [ 803.945967][T31319] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 803.945977][T31319] RBP: 00007f3036633eaf R08: 0000000000000000 R09: 0000000000000000 [ 803.945988][T31319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.945999][T31319] R13: 00007f3036826038 R14: 00007f3036825fa0 R15: 00007ffc65d522d8 [ 803.946022][T31319] [ 804.269509][T31326] program syz.0.12145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.513430][T31334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12149'. [ 805.651464][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.661291][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.144278][T31528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12233'. [ 811.655207][T31541] futex_wake_op: syz.2.12239 tries to shift op by -2048; fix this program [ 811.695694][T31541] futex_wake_op: syz.2.12239 tries to shift op by -2048; fix this program [ 812.322945][T31558] ovs_: entered promiscuous mode [ 812.593728][T31566] FAULT_INJECTION: forcing a failure. [ 812.593728][T31566] name failslab, interval 1, probability 0, space 0, times 0 [ 812.651818][T31566] CPU: 0 UID: 0 PID: 31566 Comm: syz.2.12251 Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.651852][T31566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.651859][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 812.651873][T31566] Call Trace: [ 812.651879][T31566] [ 812.651886][T31566] dump_stack_lvl+0x100/0x190 [ 812.651912][T31566] should_fail_ex.cold+0x5/0xa [ 812.651931][T31566] should_failslab+0xc2/0x120 [ 812.651957][T31566] __kmalloc_noprof+0xfc/0x820 [ 812.651984][T31566] ? __lock_acquire+0x49f/0x1a40 [ 812.652015][T31566] ? sk_prot_alloc+0x10b/0x2a0 [ 812.652049][T31566] sk_prot_alloc+0x10b/0x2a0 [ 812.652079][T31566] sk_alloc+0x36/0xe80 [ 812.652103][T31566] pppol2tp_create+0x32/0x250 [ 812.652124][T31566] pppox_create+0x15c/0x2c0 [ 812.652156][T31566] __sock_create+0x339/0x860 [ 812.652178][T31566] __sys_socket+0x14d/0x260 [ 812.652197][T31566] ? __pfx___sys_socket+0x10/0x10 [ 812.652224][T31566] __x64_sys_socket+0x72/0xb0 [ 812.652242][T31566] ? lockdep_hardirqs_on+0x78/0x100 [ 812.652263][T31566] do_syscall_64+0x115/0x840 [ 812.652284][T31566] ? clear_bhb_loop+0x40/0x90 [ 812.652306][T31566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.652354][T31566] RIP: 0033:0x7f54f659de99 [ 812.652370][T31566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.652389][T31566] RSP: 002b:00007f54f7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 812.652408][T31566] RAX: ffffffffffffffda RBX: 00007f54f6825fa0 RCX: 00007f54f659de99 [ 812.652420][T31566] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 812.652430][T31566] RBP: 00007f54f6633eaf R08: 0000000000000000 R09: 0000000000000000 [ 812.652441][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.652452][T31566] R13: 00007f54f6826038 R14: 00007f54f6825fa0 R15: 00007ffdb0a0c3c8 [ 812.652475][T31566] [ 814.041297][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12261'. [ 814.514287][T31604] FAULT_INJECTION: forcing a failure. [ 814.514287][T31604] name failslab, interval 1, probability 0, space 0, times 0 [ 814.636670][T31604] CPU: 0 UID: 0 PID: 31604 Comm: syz.4.12268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 814.636705][T31604] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 814.636712][T31604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 814.636722][T31604] Call Trace: [ 814.636728][T31604] [ 814.636735][T31604] dump_stack_lvl+0x100/0x190 [ 814.636764][T31604] should_fail_ex.cold+0x5/0xa [ 814.636785][T31604] should_failslab+0xc2/0x120 [ 814.636812][T31604] __kmalloc_noprof+0xfc/0x820 [ 814.636833][T31604] ? trace_kmem_cache_alloc+0xdd/0x100 [ 814.636859][T31604] ? lsm_blob_alloc+0x68/0x90 [ 814.636892][T31604] lsm_blob_alloc+0x68/0x90 [ 814.636920][T31604] security_prepare_creds+0x2d/0x290 [ 814.636948][T31604] prepare_creds+0x5d6/0x950 [ 814.636978][T31604] __sys_setregid+0x109/0x910 [ 814.636999][T31604] do_syscall_64+0x115/0x840 [ 814.637020][T31604] ? clear_bhb_loop+0x40/0x90 [ 814.637041][T31604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.637092][T31604] RIP: 0033:0x7f325e79de99 [ 814.637108][T31604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.637126][T31604] RSP: 002b:00007f325f58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 814.637145][T31604] RAX: ffffffffffffffda RBX: 00007f325ea25fa0 RCX: 00007f325e79de99 [ 814.637157][T31604] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 814.637168][T31604] RBP: 00007f325e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 814.637179][T31604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.637189][T31604] R13: 00007f325ea26038 R14: 00007f325ea25fa0 R15: 00007ffe7f1d53e8 [ 814.637212][T31604] [ 815.193610][T31616] tunl0: entered allmulticast mode [ 817.678739][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12302'. [ 817.698711][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12302'. [ 817.953281][T31683] netlink: 346 bytes leftover after parsing attributes in process `syz.2.12304'. [ 818.130863][T31689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12307'. [ 818.650527][T31700] netlink: 334 bytes leftover after parsing attributes in process `syz.0.12312'. [ 819.192819][T31714] bridge0: port 5(team0) entered blocking state [ 819.213721][T31714] bridge0: port 5(team0) entered disabled state [ 819.237629][T31714] team0: entered allmulticast mode [ 819.256546][T31714] team_slave_0: entered allmulticast mode [ 819.277163][T31714] team_slave_1: entered allmulticast mode [ 819.299890][T31714] team0: entered promiscuous mode [ 819.313795][T31714] team_slave_0: entered promiscuous mode [ 819.336267][T31714] team_slave_1: entered promiscuous mode [ 819.357780][T31714] bridge0: port 5(team0) entered blocking state [ 819.364193][T31714] bridge0: port 5(team0) entered forwarding state [ 888.231802][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.854836][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 925.861826][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31724/1:b..l P5879/1:b..l [ 925.871506][ C0] rcu: (detected by 0, t=10502 jiffies, g=267449, q=635 ncpus=1) [ 925.879302][ C0] task:kworker/0:4 state:R running task stack:24648 pid:5879 tgid:5879 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 925.893756][ C0] Workqueue: events_power_efficient gc_worker [ 925.899848][ C0] Call Trace: [ 925.903145][ C0] [ 925.906080][ C0] __schedule+0x125c/0x6730 [ 925.910603][ C0] ? debug_object_activate+0x343/0x4b0 [ 925.916090][ C0] ? debug_object_activate+0x343/0x4b0 [ 925.921567][ C0] ? __pfx___schedule+0x10/0x10 [ 925.926426][ C0] ? mark_held_locks+0x40/0x70 [ 925.931217][ C0] preempt_schedule_irq+0x50/0x90 [ 925.936254][ C0] irqentry_exit+0x205/0xa00 [ 925.940849][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 925.946912][ C0] RIP: 0010:lock_release+0x38/0x310 [ 925.952111][ C0] Code: fb 48 83 ec 18 65 48 8b 2d bd 4f 7e 12 48 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 d5 4f 7e 12 83 f8 07 0f 87 07 02 00 00 <48> 0f a3 05 60 36 3d 0f 0f 82 02 02 00 00 44 8b 05 07 6a 3d 0f 45 [ 925.971729][ C0] RSP: 0018:ffffc90003387b00 EFLAGS: 00000297 [ 925.977792][ C0] RAX: 0000000000000000 RBX: ffffffff8ebe7f80 RCX: ffffffff89d97b31 [ 925.985757][ C0] RDX: ffff88803089be00 RSI: ffffffff89d973a1 RDI: ffffffff8ebe7f80 [ 925.993720][ C0] RBP: ffffffff89d973a1 R08: 0000000000000001 R09: 0000000000000000 [ 926.001692][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 926.009654][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: 0000000000001932 [ 926.017619][ C0] ? gc_worker+0xc71/0x1a10 [ 926.022124][ C0] ? gc_worker+0x1401/0x1a10 [ 926.026708][ C0] ? gc_worker+0xc71/0x1a10 [ 926.031212][ C0] gc_worker+0xc76/0x1a10 [ 926.035543][ C0] ? __pfx_gc_worker+0x10/0x10 [ 926.040301][ C0] ? rcu_is_watching+0x12/0xc0 [ 926.045068][ C0] process_one_work+0xa23/0x1940 [ 926.050015][ C0] ? __pfx_process_one_work+0x10/0x10 [ 926.055395][ C0] ? __pfx_gc_worker+0x10/0x10 [ 926.060157][ C0] worker_thread+0x5ef/0xe50 [ 926.064754][ C0] ? kthread+0x13a/0x450 [ 926.069011][ C0] ? __pfx_worker_thread+0x10/0x10 [ 926.074138][ C0] kthread+0x370/0x450 [ 926.078220][ C0] ? __pfx_kthread+0x10/0x10 [ 926.082919][ C0] ret_from_fork+0x72b/0xd50 [ 926.087541][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 926.092666][ C0] ? __switch_to+0x800/0x10f0 [ 926.097371][ C0] ? __switch_to_asm+0x39/0x70 [ 926.102137][ C0] ? __pfx_kthread+0x10/0x10 [ 926.106734][ C0] ret_from_fork_asm+0x1a/0x30 [ 926.111517][ C0] [ 926.114565][ C0] task:syz.4.12324 state:R running task stack:27144 pid:31724 tgid:31724 ppid:19411 task_flags:0x40004c flags:0x00080001 [ 926.128156][ C0] Call Trace: [ 926.131433][ C0] [ 926.134361][ C0] __schedule+0x125c/0x6730 [ 926.138870][ C0] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 926.145023][ C0] ? rcu_is_watching+0x12/0xc0 [ 926.149795][ C0] ? __pfx___schedule+0x10/0x10 [ 926.154644][ C0] ? irqentry_exit+0x24d/0xa00 [ 926.159511][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 926.165584][ C0] preempt_schedule_notrace+0x5f/0xd0 [ 926.170958][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 926.176874][ C0] rcu_is_watching+0x8e/0xc0 [ 926.181460][ C0] rcu_read_unlock+0x26/0x60 [ 926.186057][ C0] mem_cgroup_exit+0xe0/0x1f0 [ 926.190747][ C0] cgroup_task_exit+0xc5/0x150 [ 926.195533][ C0] do_exit+0x961/0x2ae0 [ 926.199705][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 926.205079][ C0] ? __pfx_do_exit+0x10/0x10 [ 926.209668][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 926.215045][ C0] do_group_exit+0xd5/0x2a0 [ 926.219560][ C0] __x64_sys_exit_group+0x3e/0x50 [ 926.224582][ C0] x64_sys_call+0x102c/0x1530 [ 926.229279][ C0] do_syscall_64+0x115/0x840 [ 926.233865][ C0] ? clear_bhb_loop+0x40/0x90 [ 926.238555][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.244442][ C0] RIP: 0033:0x7f325e79de99 [ 926.248856][ C0] RSP: 002b:00007ffe7f1d5728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 926.257262][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f325e79de99 [ 926.265226][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.273190][ C0] RBP: 00007ffe7f1d578c R08: 0000000000000000 R09: 00000000000927c0 [ 926.281154][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000576 [ 926.289117][ C0] R13: 00000000000927c0 R14: 00000000000c8ead R15: 00007ffe7f1d57e0 [ 926.297108][ C0]