last executing test programs: 4m37.512698995s ago: executing program 3 (id=5421): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101200, 0x0) ioctl$auto_FBIOGETCMAP(r0, 0x4604, &(0x7f00000002c0)="f300000000d2") 4m37.402919152s ago: executing program 3 (id=5425): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/trace_marker_raw\x00', 0x1, 0x0) write$auto_tracing_mark_raw_fops_trace(r0, &(0x7f0000000140)="b9d40054dada8b64ccb67b54416e270e39e6d4aa69f27b4018ffde16b7c93cfa3cc8638d29ae6d766eb99e16ed5e4a0e7f1cf2827e507ec7d99bbb472a22c23b978bec6aa7da01682690116f8a8f0f27c8864c05b72ef15a08aed03c2d4420294f40adc2047c3fc697966302", 0x6c) 4m37.301817431s ago: executing program 3 (id=5428): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x500, 0x0) pread64$auto(r0, 0x0, 0x200, 0x8800000000) 4m37.201181768s ago: executing program 3 (id=5432): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/config.gz\x00', 0x20000, 0x0) close_range$auto(0x2, 0xa, 0x0) 4m37.10423531s ago: executing program 3 (id=5435): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m36.504008048s ago: executing program 3 (id=5450): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4098, 0x1002) 4m36.176692036s ago: executing program 32 (id=5450): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4098, 0x1002) 4.112258416s ago: executing program 1 (id=10041): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) 3.958487434s ago: executing program 1 (id=10043): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x3, 0x1) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) 1.720584733s ago: executing program 4 (id=10079): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x890c, 0x1) 1.585139511s ago: executing program 2 (id=10081): mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1/file0\x00') 1.578750002s ago: executing program 4 (id=10082): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x20) 1.408575265s ago: executing program 4 (id=10083): r0 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x100000004, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x9, 0xffffffff80000000, 0xffffffff7fffffff, 0x65, 0x103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 1.325750415s ago: executing program 2 (id=10084): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.246514629s ago: executing program 4 (id=10086): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbc3c2985a00140008000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) 1.097573064s ago: executing program 2 (id=10088): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) setuid$auto(0xe) bpf$auto(0x5, 0x0, 0x6) 1.074233339s ago: executing program 0 (id=10089): socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 1.053422504s ago: executing program 4 (id=10090): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) 951.215845ms ago: executing program 1 (id=10091): open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xfffffffffffffffd) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 949.562552ms ago: executing program 2 (id=10092): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) 927.816844ms ago: executing program 0 (id=10093): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) fdatasync$auto(0xffffffffffffffff) write$auto(0x3, 0x0, 0x5c8) 877.132053ms ago: executing program 4 (id=10094): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) pkey_free$auto(0x7) 800.0851ms ago: executing program 2 (id=10095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 782.675007ms ago: executing program 0 (id=10096): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) 774.617994ms ago: executing program 1 (id=10097): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 639.408083ms ago: executing program 1 (id=10098): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1c, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0x3, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x7, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 633.451009ms ago: executing program 0 (id=10099): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) 598.140589ms ago: executing program 2 (id=10100): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 488.156376ms ago: executing program 0 (id=10101): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYBLOB='^\x00\'', @ANYRESOCT=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40890) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 407.270909ms ago: executing program 1 (id=10102): setns(0xc9, 0x0) socket(0x1f, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x8946, 0x7f) 0s ago: executing program 0 (id=10103): r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) kernel console output (not intermixed with test programs): 0 [ 416.372018][T21189] swap_cluster_readahead+0x387/0x5f0 [ 416.372038][T21189] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 416.372055][T21189] ? trace_sched_exit_tp+0x120/0x160 [ 416.372073][T21189] ? __schedule+0x126e/0x6730 [ 416.372095][T21189] ? __lock_acquire+0x49f/0x1a40 [ 416.372116][T21189] ? get_vma_policy+0x23d/0x3b0 [ 416.372138][T21189] swapin_readahead+0x159/0x1200 [ 416.372161][T21189] ? __pfx_swapin_readahead+0x10/0x10 [ 416.372181][T21189] ? swap_table_get+0x10d/0x2c0 [ 416.372196][T21189] ? swap_cache_get_folio+0x28d/0x360 [ 416.372212][T21189] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 416.372227][T21189] ? __pfx_softleaf_type+0x10/0x10 [ 416.372246][T21189] ? do_swap_page+0xf98/0x5780 [ 416.372259][T21189] do_swap_page+0xf98/0x5780 [ 416.372282][T21189] ? __pfx_do_swap_page+0x10/0x10 [ 416.372296][T21189] ? __lock_acquire+0x49f/0x1a40 [ 416.372331][T21189] ? rcu_is_watching+0x12/0xc0 [ 416.372348][T21189] ? __pte_offset_map+0x179/0x310 [ 416.372369][T21189] __handle_mm_fault+0x192f/0x2a00 [ 416.372388][T21189] ? reacquire_held_locks+0xce/0x1e0 [ 416.372410][T21189] ? __pfx___handle_mm_fault+0x10/0x10 [ 416.372428][T21189] ? lock_vma_under_rcu+0x17c/0x590 [ 416.372452][T21189] handle_mm_fault+0x37b/0xa30 [ 416.372470][T21189] do_user_addr_fault+0x5a3/0x12f0 [ 416.372496][T21189] exc_page_fault+0x6f/0xd0 [ 416.372514][T21189] asm_exc_page_fault+0x26/0x30 [ 416.372528][T21189] RIP: 0033:0x7f5f35067150 [ 416.372541][T21189] Code: 00 00 45 31 d2 48 83 b8 88 00 00 00 ff 41 b9 03 00 00 00 ba 01 00 00 00 0f 85 59 ff ff ff eb ca 66 2e 0f 1f 84 00 00 00 00 00 <80> 3d 8f e5 ee 00 00 74 40 80 3d 73 e5 ee 00 00 74 2e 80 3d 77 e5 [ 416.372554][T21189] RSP: 002b:00007fffe4c74588 EFLAGS: 00010246 [ 416.372566][T21189] RAX: 0000000000000000 RBX: 00007f5f35427da0 RCX: 00007f5f3519e019 [ 416.372575][T21189] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 416.372583][T21189] RBP: 00007f5f35427da0 R08: 0000000000000006 R09: 0000000000000000 [ 416.372592][T21189] R10: 00007f5f35427cb0 R11: 0000000000000246 R12: 0000000000065c91 [ 416.372600][T21189] R13: 00007f5f35425fac R14: 0000000000065c1c R15: 00007fffe4c74690 [ 416.372618][T21189] [ 416.372641][T21189] memory: usage 3072kB, limit 3072kB, failcnt 41258 [ 416.923642][T21189] memory+swap: usage 7400kB, limit 9007199254740988kB, failcnt 0 [ 416.933229][T21189] kmem: usage 2176kB, limit 9007199254740988kB, failcnt 0 [ 416.996498][T21189] Memory cgroup stats for /syz2: [ 416.996600][T21189] cache 0 [ 417.021938][T21189] rss 897024 [ 417.025725][T21189] rss_huge 0 [ 417.029147][T21189] shmem 0 [ 417.032222][T21189] mapped_file 0 [ 417.036962][T21189] dirty 0 [ 417.039985][T21189] writeback 8192 [ 417.045772][T21189] workingset_refault_anon 2843 [ 417.050736][T21189] workingset_refault_file 15246 [ 417.056313][T21189] swap 4431872 [ 417.059816][T21189] swapcached 121528320 [ 417.081027][T21189] pgpgin 164346 [ 417.090236][T21189] pgpgout 170256 [ 417.100089][T21189] pgfault 337069 [ 417.107131][T21189] pgmajfault 1137 [ 417.118893][T21189] inactive_anon 761856 [ 417.129684][T21189] active_anon 0 [ 417.136564][T21189] inactive_file 0 [ 417.145259][T21189] active_file 0 [ 417.151865][T21189] unevictable 0 [ 417.158209][T21189] hierarchical_memory_limit 3145728 [ 417.163823][T21189] hierarchical_memsw_limit 9223372036854771712 [ 417.170037][T21189] total_cache 0 [ 417.173767][T21189] total_rss 897024 [ 417.185069][T21189] total_rss_huge 0 [ 417.195984][T21189] total_shmem 0 [ 417.204973][T21189] total_mapped_file 0 [ 417.216386][T21189] total_dirty 0 [ 417.221479][T21189] total_writeback 8192 [ 417.230505][T21189] total_workingset_refault_anon 2843 [ 417.242261][T21189] total_workingset_refault_file 15246 [ 417.255795][T21189] total_swap 4431872 [ 417.264296][T21189] total_swapcached 121528320 [ 417.273787][T21189] total_pgpgin 164346 [ 417.283011][T21189] total_pgpgout 170256 [ 417.291781][T21189] total_pgfault 337069 [ 417.302025][T21189] total_pgmajfault 1137 [ 417.319277][T21189] total_inactive_anon 761856 [ 417.329651][T21189] total_active_anon 0 [ 417.339188][T21189] total_inactive_file 0 [ 417.347458][T21189] total_active_file 0 [ 417.372004][T21189] total_unevictable 0 [ 417.395483][T21189] anon_cost 28 [ 417.407061][T21189] file_cost 0 [ 417.415565][T21189] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7309,pid=21189,uid=0 [ 417.446703][T21189] Memory cgroup out of memory: Killed process 21189 (syz.2.7309) total-vm:108532kB, anon-rss:1252kB, file-rss:21068kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 421.456505][T21343] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 423.020357][T21382] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 423.037464][T21382] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 423.641516][T21401] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 424.403691][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7419'. [ 424.962471][T21453] FAULT_INJECTION: forcing a failure. [ 424.962471][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 425.026734][T21453] CPU: 0 UID: 0 PID: 21453 Comm: syz.0.7431 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.026763][T21453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.026768][T21453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.026777][T21453] Call Trace: [ 425.026783][T21453] [ 425.026789][T21453] dump_stack_lvl+0x100/0x190 [ 425.026810][T21453] should_fail_ex.cold+0x5/0xa [ 425.026828][T21453] should_failslab+0xc2/0x120 [ 425.026848][T21453] __kmalloc_cache_noprof+0x91/0x6c0 [ 425.026865][T21453] ? proc_self_get_link+0x189/0x1f0 [ 425.026898][T21453] proc_self_get_link+0x189/0x1f0 [ 425.026921][T21453] pick_link+0xac2/0x13c0 [ 425.026943][T21453] ? __pfx_proc_self_get_link+0x10/0x10 [ 425.026967][T21453] step_into_slowpath+0x9ba/0xf90 [ 425.026992][T21453] ? __pfx_step_into_slowpath+0x10/0x10 [ 425.027016][T21453] ? lookup_fast+0x2da/0x600 [ 425.027034][T21453] ? inode_permission+0x374/0x620 [ 425.027054][T21453] link_path_walk+0xf28/0x1cc0 [ 425.027082][T21453] path_openat+0x1c9/0x4280 [ 425.027095][T21453] ? __kasan_slab_alloc+0x89/0x90 [ 425.027113][T21453] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 425.027129][T21453] ? do_getname+0x35/0x390 [ 425.027146][T21453] ? __x64_sys_openat+0x12d/0x210 [ 425.027171][T21453] ? __pfx_path_openat+0x10/0x10 [ 425.027190][T21453] do_file_open+0x20e/0x430 [ 425.027206][T21453] ? __pfx_do_file_open+0x10/0x10 [ 425.027234][T21453] ? alloc_fd+0x471/0x7a0 [ 425.027250][T21453] ? do_getname+0x191/0x390 [ 425.027269][T21453] do_sys_openat2+0x10f/0x1e0 [ 425.027288][T21453] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.027307][T21453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.027332][T21453] __x64_sys_openat+0x12d/0x210 [ 425.027351][T21453] ? __pfx___x64_sys_openat+0x10/0x10 [ 425.027377][T21453] do_syscall_64+0x115/0x840 [ 425.027395][T21453] ? clear_bhb_loop+0x40/0x90 [ 425.027413][T21453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.027427][T21453] RIP: 0033:0x7f504879e019 [ 425.027440][T21453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.027453][T21453] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 425.027467][T21453] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 425.027476][T21453] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 425.027484][T21453] RBP: 00007f504883500c R08: 0000000000000000 R09: 0000000000000000 [ 425.027493][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.027501][T21453] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 425.027519][T21453] [ 426.845065][T21503] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.492201][T21559] No such timeout policy "" [ 428.523021][T21559] netlink: Failed to associated timeout policy '' [ 431.833243][T15865] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 432.574912][T21691] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7542'. [ 432.620997][T21639] kexec: Could not allocate control_code_buffer [ 432.971292][T21704] netlink: 'syz.1.7549': attribute type 1 has an invalid length. [ 433.074253][T21708] openvswitch: netlink: Flow key attr not present in new flow. [ 434.856073][T21776] openvswitch: netlink: Key type 29 is not supported [ 435.160436][T21788] openvswitch: netlink: IP tunnel dst address not specified [ 435.381923][T21783] syz.1.7585 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 435.423513][T15865] Bluetooth: hci3: command 0x0406 tx timeout [ 435.490682][T21783] CPU: 0 UID: 0 PID: 21783 Comm: syz.1.7585 Tainted: G U L syzkaller #0 PREEMPT(full) [ 435.490708][T21783] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 435.490716][T21783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.490724][T21783] Call Trace: [ 435.490729][T21783] [ 435.490735][T21783] dump_stack_lvl+0x100/0x190 [ 435.490756][T21783] dump_header+0xfb/0x606 [ 435.490773][T21783] oom_kill_process.cold+0xd/0x330 [ 435.490790][T21783] out_of_memory+0x340/0x14f0 [ 435.490822][T21783] ? __pfx_out_of_memory+0x10/0x10 [ 435.490850][T21783] mem_cgroup_out_of_memory+0xc6/0x130 [ 435.490867][T21783] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 435.490885][T21783] ? find_held_lock+0x2b/0x80 [ 435.490907][T21783] ? do_raw_spin_unlock+0x145/0x1e0 [ 435.490923][T21783] ? _raw_spin_unlock+0x28/0x50 [ 435.490942][T21783] try_charge_memcg+0x6e5/0xdf0 [ 435.490966][T21783] ? __pfx_try_charge_memcg+0x10/0x10 [ 435.490986][T21783] ? find_held_lock+0x2b/0x80 [ 435.491002][T21783] ? rcu_read_unlock+0x17/0x60 [ 435.491023][T21783] ? rcu_read_unlock+0x17/0x60 [ 435.491044][T21783] ? find_held_lock+0x2b/0x80 [ 435.491061][T21783] ? rcu_read_unlock+0x17/0x60 [ 435.491086][T21783] charge_memcg+0x187/0x1e0 [ 435.491107][T21783] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 435.491124][T21783] swap_cache_alloc_folio+0x548/0xc50 [ 435.491145][T21783] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 435.491161][T21783] ? swap_cache_get_folio+0x28d/0x360 [ 435.491177][T21783] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 435.491191][T21783] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 435.491215][T21783] swap_cache_read_folio+0x47/0x140 [ 435.491233][T21783] swap_cluster_readahead+0x479/0x5f0 [ 435.491254][T21783] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 435.491271][T21783] ? trace_sched_exit_tp+0x120/0x160 [ 435.491288][T21783] ? __schedule+0x126e/0x6730 [ 435.491310][T21783] ? __lock_acquire+0x49f/0x1a40 [ 435.491334][T21783] ? get_vma_policy+0x23d/0x3b0 [ 435.491357][T21783] swapin_readahead+0x159/0x1200 [ 435.491379][T21783] ? __pfx_swapin_readahead+0x10/0x10 [ 435.491400][T21783] ? swap_table_get+0x10d/0x2c0 [ 435.491415][T21783] ? swap_cache_get_folio+0x28d/0x360 [ 435.491430][T21783] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 435.491446][T21783] ? __pfx_softleaf_type+0x10/0x10 [ 435.491465][T21783] ? do_swap_page+0xf98/0x5780 [ 435.491478][T21783] do_swap_page+0xf98/0x5780 [ 435.491501][T21783] ? __pfx_do_swap_page+0x10/0x10 [ 435.491515][T21783] ? __lock_acquire+0x49f/0x1a40 [ 435.491538][T21783] ? rcu_is_watching+0x12/0xc0 [ 435.491556][T21783] ? __pte_offset_map+0x179/0x310 [ 435.491576][T21783] __handle_mm_fault+0x192f/0x2a00 [ 435.491595][T21783] ? reacquire_held_locks+0xce/0x1e0 [ 435.491617][T21783] ? __pfx___handle_mm_fault+0x10/0x10 [ 435.491634][T21783] ? lock_vma_under_rcu+0x17c/0x590 [ 435.491659][T21783] handle_mm_fault+0x37b/0xa30 [ 435.491677][T21783] do_user_addr_fault+0x5a3/0x12f0 [ 435.491702][T21783] exc_page_fault+0x6f/0xd0 [ 435.491721][T21783] asm_exc_page_fault+0x26/0x30 [ 435.491735][T21783] RIP: 0033:0x7efe81f9eb36 [ 435.491747][T21783] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 435.491760][T21783] RSP: 002b:00007ffdc2b04820 EFLAGS: 00010246 [ 435.491772][T21783] RAX: 000000000006aa88 RBX: 00007efe82225fa0 RCX: 000000000006a720 [ 435.491780][T21783] RDX: 0000000000000368 RSI: 0000000000000000 RDI: 00000000000003e8 [ 435.491789][T21783] RBP: 00007efe82227da0 R08: 003375fb9e7bda35 R09: 0000000000000001 [ 435.491798][T21783] R10: 0000000000014562 R11: 0000000000000246 R12: 000000000006acbc [ 435.491806][T21783] R13: 00007efe82225fac R14: 000000000006a9bd R15: 00007ffdc2b04950 [ 435.491829][T21783] [ 435.494063][T21783] memory: usage 1252kB, limit 3072kB, failcnt 53613 [ 436.315558][T21818] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 436.963167][T21783] memory+swap: usage 1440kB, limit 9007199254740988kB, failcnt 0 [ 436.993829][T21783] kmem: usage 972kB, limit 9007199254740988kB, failcnt 0 [ 437.054848][T21783] Memory cgroup stats for /syz1: [ 437.054951][T21783] cache 24576 [ 437.099515][T21783] rss 0 [ 437.109337][T21783] rss_huge 0 [ 437.124774][T21783] shmem 0 [ 437.136234][T21783] mapped_file 4096 [ 437.155629][T21783] dirty 0 [ 437.171067][T21783] writeback 0 [ 437.186118][T21783] workingset_refault_anon 3839 [ 437.216852][T21783] workingset_refault_file 18453 [ 437.242831][T21783] swap 196608 [ 437.260672][T21783] swapcached 154529792 [ 437.282189][T21783] pgpgin 175730 [ 437.305973][T21783] pgpgout 179811 [ 437.318830][T21783] pgfault 359321 [ 437.332107][T21783] pgmajfault 1410 [ 437.356542][T21783] inactive_anon 4096 [ 437.377999][T21783] active_anon 0 [ 437.404239][T21783] inactive_file 0 [ 437.420506][T21783] active_file 0 [ 437.435644][T21783] unevictable 24576 [ 437.451802][T21783] hierarchical_memory_limit 3145728 [ 437.479387][T21783] hierarchical_memsw_limit 9223372036854771712 [ 437.511510][T21783] total_cache 24576 [ 437.539183][T21783] total_rss 0 [ 437.555221][T21783] total_rss_huge 0 [ 437.572620][T21783] total_shmem 0 [ 437.590599][T21783] total_mapped_file 4096 [ 437.607153][T21870] FAULT_INJECTION: forcing a failure. [ 437.607153][T21870] name failslab, interval 1, probability 0, space 0, times 0 [ 437.621516][T21783] total_dirty 0 [ 437.632908][T21783] total_writeback 0 [ 437.658134][T21783] total_workingset_refault_anon 3839 [ 437.676574][T21870] CPU: 0 UID: 0 PID: 21870 Comm: syz.2.7624 Tainted: G U L syzkaller #0 PREEMPT(full) [ 437.676604][T21870] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 437.676609][T21870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.676618][T21870] Call Trace: [ 437.676623][T21870] [ 437.676629][T21870] dump_stack_lvl+0x100/0x190 [ 437.676651][T21870] should_fail_ex.cold+0x5/0xa [ 437.676668][T21870] should_failslab+0xc2/0x120 [ 437.676690][T21870] __kmalloc_cache_noprof+0x91/0x6c0 [ 437.676707][T21870] ? call_usermodehelper_setup+0xaf/0x360 [ 437.676731][T21870] ? __pfx_free_modprobe_argv+0x10/0x10 [ 437.676747][T21870] call_usermodehelper_setup+0xaf/0x360 [ 437.676772][T21870] __request_module+0x3c7/0x6a0 [ 437.676788][T21870] ? __pfx___request_module+0x10/0x10 [ 437.676811][T21870] ? find_held_lock+0x2b/0x80 [ 437.676829][T21870] ? inet6_create+0xb9f/0x12b0 [ 437.676849][T21870] inet6_create+0xd65/0x12b0 [ 437.676866][T21870] ? inet6_create+0x7f/0x12b0 [ 437.676884][T21870] __sock_create+0x339/0x860 [ 437.676904][T21870] __sys_socket+0x14d/0x260 [ 437.676921][T21870] ? __pfx___sys_socket+0x10/0x10 [ 437.676942][T21870] __x64_sys_socket+0x72/0xb0 [ 437.676957][T21870] ? lockdep_hardirqs_on+0x78/0x100 [ 437.676976][T21870] do_syscall_64+0x115/0x840 [ 437.676994][T21870] ? clear_bhb_loop+0x40/0x90 [ 437.677011][T21870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.677026][T21870] RIP: 0033:0x7f5f3519e019 [ 437.677039][T21870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.677052][T21870] RSP: 002b:00007f5f360e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 437.677066][T21870] RAX: ffffffffffffffda RBX: 00007f5f35425fa0 RCX: 00007f5f3519e019 [ 437.677075][T21870] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 437.677083][T21870] RBP: 00007f5f3523500c R08: 0000000000000000 R09: 0000000000000000 [ 437.677092][T21870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.677100][T21870] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 437.677118][T21870] [ 437.947595][T21783] total_workingset_refault_file 18453 [ 437.953066][T21783] total_swap 196608 [ 437.956942][T21783] total_swapcached 154529792 [ 437.961532][T21783] total_pgpgin 175730 [ 437.965868][T21783] total_pgpgout 179811 [ 437.969917][T21783] total_pgfault 359321 [ 437.973977][T21783] total_pgmajfault 1410 [ 437.978159][T21783] total_inactive_anon 4096 [ 437.983972][T21783] total_active_anon 0 [ 437.987979][T21783] total_inactive_file 0 [ 437.992111][T21783] total_active_file 0 [ 437.996129][T21783] total_unevictable 24576 [ 438.000461][T21783] anon_cost 19 [ 438.003849][T21783] file_cost 0 [ 438.007200][T21783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7585,pid=21783,uid=0 [ 438.026095][T21783] Memory cgroup out of memory: Killed process 21783 (syz.1.7585) total-vm:104300kB, anon-rss:1276kB, file-rss:20888kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 438.277101][T21874] NFSD: Failed to start, no listeners configured. [ 438.478106][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.489582][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.861926][T21904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7641'. [ 439.314426][T21923] netlink: 'syz.4.7649': attribute type 1 has an invalid length. [ 439.391239][T21919] FAULT_INJECTION: forcing a failure. [ 439.391239][T21919] name failslab, interval 1, probability 0, space 0, times 0 [ 439.447794][T21919] CPU: 0 UID: 0 PID: 21919 Comm: syz.0.7648 Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.447822][T21919] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.447828][T21919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.447837][T21919] Call Trace: [ 439.447842][T21919] [ 439.447848][T21919] dump_stack_lvl+0x100/0x190 [ 439.447869][T21919] should_fail_ex.cold+0x5/0xa [ 439.447887][T21919] should_failslab+0xc2/0x120 [ 439.447908][T21919] __kmalloc_cache_noprof+0x91/0x6c0 [ 439.447923][T21919] ? rcu_is_watching+0x12/0xc0 [ 439.447941][T21919] ? __request_module+0x2b7/0x6a0 [ 439.447960][T21919] __request_module+0x2b7/0x6a0 [ 439.447975][T21919] ? __pfx___request_module+0x10/0x10 [ 439.448000][T21919] ? find_held_lock+0x2b/0x80 [ 439.448018][T21919] ? inet6_create+0xb9f/0x12b0 [ 439.448038][T21919] inet6_create+0xbdc/0x12b0 [ 439.448056][T21919] ? inet6_create+0x7f/0x12b0 [ 439.448074][T21919] __sock_create+0x339/0x860 [ 439.448094][T21919] __sys_socket+0x14d/0x260 [ 439.448111][T21919] ? __pfx___sys_socket+0x10/0x10 [ 439.448135][T21919] __x64_sys_socket+0x72/0xb0 [ 439.448150][T21919] ? lockdep_hardirqs_on+0x78/0x100 [ 439.448169][T21919] do_syscall_64+0x115/0x840 [ 439.448187][T21919] ? clear_bhb_loop+0x40/0x90 [ 439.448205][T21919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.448220][T21919] RIP: 0033:0x7f504879e019 [ 439.448233][T21919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.448254][T21919] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 439.448269][T21919] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 439.448280][T21919] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 439.448289][T21919] RBP: 00007f504883500c R08: 0000000000000000 R09: 0000000000000000 [ 439.448298][T21919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.448307][T21919] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 439.448326][T21919] [ 440.178637][T21949] FAULT_INJECTION: forcing a failure. [ 440.178637][T21949] name failslab, interval 1, probability 0, space 0, times 0 [ 440.231118][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.4.7662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.231146][T21949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.231152][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.231161][T21949] Call Trace: [ 440.231166][T21949] [ 440.231172][T21949] dump_stack_lvl+0x100/0x190 [ 440.231195][T21949] should_fail_ex.cold+0x5/0xa [ 440.231212][T21949] should_failslab+0xc2/0x120 [ 440.231233][T21949] __kmalloc_cache_noprof+0x91/0x6c0 [ 440.231249][T21949] ? call_usermodehelper_setup+0xaf/0x360 [ 440.231275][T21949] ? __pfx_free_modprobe_argv+0x10/0x10 [ 440.231292][T21949] call_usermodehelper_setup+0xaf/0x360 [ 440.231326][T21949] __request_module+0x3c7/0x6a0 [ 440.231342][T21949] ? __pfx___request_module+0x10/0x10 [ 440.231367][T21949] ? find_held_lock+0x2b/0x80 [ 440.231385][T21949] ? inet6_create+0xb9f/0x12b0 [ 440.231405][T21949] inet6_create+0xd65/0x12b0 [ 440.231422][T21949] ? inet6_create+0x7f/0x12b0 [ 440.231440][T21949] __sock_create+0x339/0x860 [ 440.231461][T21949] __sys_socket+0x14d/0x260 [ 440.231477][T21949] ? __pfx___sys_socket+0x10/0x10 [ 440.231498][T21949] __x64_sys_socket+0x72/0xb0 [ 440.231514][T21949] ? lockdep_hardirqs_on+0x78/0x100 [ 440.231532][T21949] do_syscall_64+0x115/0x840 [ 440.231551][T21949] ? clear_bhb_loop+0x40/0x90 [ 440.231569][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.231585][T21949] RIP: 0033:0x7feea399e019 [ 440.231597][T21949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.231611][T21949] RSP: 002b:00007feea4949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 440.231625][T21949] RAX: ffffffffffffffda RBX: 00007feea3c25fa0 RCX: 00007feea399e019 [ 440.231635][T21949] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 440.231643][T21949] RBP: 00007feea3a3500c R08: 0000000000000000 R09: 0000000000000000 [ 440.231651][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.231659][T21949] R13: 00007feea3c26038 R14: 00007feea3c25fa0 R15: 00007ffe7b088218 [ 440.231677][T21949] [ 440.548679][T21953] netlink: 'syz.4.7664': attribute type 2 has an invalid length. [ 440.754142][T21960] netlink: 'syz.1.7667': attribute type 1 has an invalid length. [ 440.941630][T21963] netlink: 'syz.2.7668': attribute type 1 has an invalid length. [ 441.205987][T21973] netlink: 'syz.2.7673': attribute type 1 has an invalid length. [ 441.703294][T21996] netlink: set zone limit has 4 unknown bytes [ 442.068450][ T9] Process accounting resumed [ 442.355201][T22019] nbd: must specify a size in bytes for the device [ 443.117230][T22049] FAULT_INJECTION: forcing a failure. [ 443.117230][T22049] name failslab, interval 1, probability 0, space 0, times 0 [ 443.203779][T22049] CPU: 0 UID: 0 PID: 22049 Comm: syz.2.7709 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.203807][T22049] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.203813][T22049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.203824][T22049] Call Trace: [ 443.203829][T22049] [ 443.203836][T22049] dump_stack_lvl+0x100/0x190 [ 443.203857][T22049] should_fail_ex.cold+0x5/0xa [ 443.203878][T22049] should_failslab+0xc2/0x120 [ 443.203905][T22049] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 443.203924][T22049] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.203942][T22049] ? sock_alloc_inode+0x26/0x2c0 [ 443.203957][T22049] ? __pfx_sock_alloc_inode+0x10/0x10 [ 443.203973][T22049] sock_alloc_inode+0x26/0x2c0 [ 443.203987][T22049] ? __pfx_sock_alloc_inode+0x10/0x10 [ 443.204000][T22049] alloc_inode+0x68/0x250 [ 443.204019][T22049] sock_alloc+0x44/0x280 [ 443.204039][T22049] ? security_socket_create+0x7f/0x250 [ 443.204057][T22049] __sock_create+0xc2/0x860 [ 443.204072][T22049] ? lockdep_init_map_type+0x5c/0x250 [ 443.204089][T22049] smc_create+0x163/0x290 [ 443.204109][T22049] __sock_create+0x339/0x860 [ 443.204127][T22049] __sys_socket+0x14d/0x260 [ 443.204143][T22049] ? __pfx___sys_socket+0x10/0x10 [ 443.204165][T22049] __x64_sys_socket+0x72/0xb0 [ 443.204181][T22049] ? lockdep_hardirqs_on+0x78/0x100 [ 443.204199][T22049] do_syscall_64+0x115/0x840 [ 443.204217][T22049] ? clear_bhb_loop+0x40/0x90 [ 443.204234][T22049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.204249][T22049] RIP: 0033:0x7f5f3519e019 [ 443.204263][T22049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.204277][T22049] RSP: 002b:00007f5f360e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 443.204292][T22049] RAX: ffffffffffffffda RBX: 00007f5f35425fa0 RCX: 00007f5f3519e019 [ 443.204301][T22049] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 443.204309][T22049] RBP: 00007f5f3523500c R08: 0000000000000000 R09: 0000000000000000 [ 443.204318][T22049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.204326][T22049] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 443.204346][T22049] [ 443.206059][T22049] socket: no more sockets [ 443.562760][T22059] FAULT_INJECTION: forcing a failure. [ 443.562760][T22059] name failslab, interval 1, probability 0, space 0, times 0 [ 443.605137][T22059] CPU: 0 UID: 0 PID: 22059 Comm: syz.0.7713 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.605165][T22059] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.605171][T22059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.605180][T22059] Call Trace: [ 443.605185][T22059] [ 443.605190][T22059] dump_stack_lvl+0x100/0x190 [ 443.605212][T22059] should_fail_ex.cold+0x5/0xa [ 443.605230][T22059] should_failslab+0xc2/0x120 [ 443.605252][T22059] kmem_cache_alloc_noprof+0x91/0x6a0 [ 443.605271][T22059] ? __pmd_alloc+0xbf/0x950 [ 443.605296][T22059] __pmd_alloc+0xbf/0x950 [ 443.605318][T22059] move_page_tables+0x2f7c/0x4610 [ 443.605335][T22059] ? __pfx_copy_vma+0x10/0x10 [ 443.605358][T22059] ? __pfx_move_page_tables+0x10/0x10 [ 443.605387][T22059] copy_vma_and_data+0x25c/0x7c0 [ 443.605404][T22059] ? __pfx_copy_vma_and_data+0x10/0x10 [ 443.605428][T22059] ? __vma_start_write+0x17f/0x280 [ 443.605446][T22059] ? __pfx___vma_start_write+0x10/0x10 [ 443.605473][T22059] move_vma+0x574/0x1920 [ 443.605492][T22059] ? __pfx_move_vma+0x10/0x10 [ 443.605516][T22059] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 443.605537][T22059] ? cap_mmap_addr+0x4b/0x120 [ 443.605553][T22059] ? bpf_lsm_mmap_addr+0x9/0x30 [ 443.605567][T22059] ? security_mmap_addr+0x71/0x1e0 [ 443.605587][T22059] ? __get_unmapped_area+0x255/0x3e0 [ 443.605609][T22059] ? vrm_set_new_addr+0x204/0x290 [ 443.605627][T22059] mremap_to+0x234/0x4c0 [ 443.605641][T22059] ? mas_walk+0x6ef/0x9b0 [ 443.605660][T22059] ? __pfx_mremap_to+0x10/0x10 [ 443.605680][T22059] __do_sys_mremap+0x88c/0x1850 [ 443.605702][T22059] ? __pfx___do_sys_mremap+0x10/0x10 [ 443.605717][T22059] ? ksys_write+0x190/0x250 [ 443.605735][T22059] ? __pfx_do_futex+0x10/0x10 [ 443.605757][T22059] ? __x64_sys_futex+0x34f/0x4d0 [ 443.605786][T22059] do_syscall_64+0x115/0x840 [ 443.605804][T22059] ? clear_bhb_loop+0x40/0x90 [ 443.605822][T22059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.605837][T22059] RIP: 0033:0x7f504879e019 [ 443.605850][T22059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.605864][T22059] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 443.605878][T22059] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 443.605888][T22059] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 443.605898][T22059] RBP: 00007f504883500c R08: 0000000100000000 R09: 0000000000000000 [ 443.605907][T22059] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 443.605916][T22059] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 443.605935][T22059] [ 445.183502][T22090] HSR: entered promiscuous mode [ 445.501150][T22097] NFSD: Failed to start, no listeners configured. [ 446.603637][T22135] .^: entered promiscuous mode [ 446.672205][T22061] kexec: Could not allocate control_code_buffer [ 448.076588][T22187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 449.881474][T22258] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 450.819161][T22294] NFSD: Failed to start, no listeners configured. [ 451.596194][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7836'. [ 451.875068][T22328] netlink: 'syz.0.7842': attribute type 1 has an invalid length. [ 451.958858][T22333] netlink: 'syz.2.7844': attribute type 1 has an invalid length. [ 452.641318][T22355] NFSD: Failed to start, no listeners configured. [ 452.734881][T22360] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 455.631378][T22478] netlink: Setting conntrack mark requires 'commit' flag. [ 456.105140][T22500] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 458.064027][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7964'. [ 458.398428][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7968'. [ 458.805542][T22612] netlink: 'syz.2.7978': attribute type 3 has an invalid length. [ 458.993423][T22620] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 459.193291][T22627] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 460.215909][T22665] openvswitch: netlink: Multiple metadata blocks provided [ 461.706509][T22735] netlink: zone id is out of range [ 461.734430][T22735] netlink: get zone limit has 8 unknown bytes [ 461.979106][T22747] netlink: 'syz.1.8043': attribute type 3 has an invalid length. [ 462.129754][T22753] tipc: Started in network mode [ 462.171423][T22753] tipc: Node identity ee00, cluster identity 4711 [ 462.201004][T22753] tipc: Node number set to 60928 [ 462.682111][T22779] netlink: 'syz.1.8058': attribute type 2 has an invalid length. [ 463.692735][T22815] openvswitch: netlink: Multiple metadata blocks provided [ 463.819558][T16470] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 464.031353][T22831] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 465.248754][T22879] netlink: Conntrack attr has 5 unknown bytes [ 466.192989][T22923] sctp: [Deprecated]: syz.4.8128 (pid 22923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.192989][T22923] Use struct sctp_sack_info instead [ 466.253735][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8129'. [ 467.120475][T22968] capability: warning: `syz.4.8150' uses 32-bit capabilities (legacy support in use) [ 467.267169][T22974] FAULT_INJECTION: forcing a failure. [ 467.267169][T22974] name failslab, interval 1, probability 0, space 0, times 0 [ 467.359673][T22974] CPU: 0 UID: 0 PID: 22974 Comm: syz.1.8153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 467.359702][T22974] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 467.359707][T22974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.359716][T22974] Call Trace: [ 467.359788][T22974] [ 467.359794][T22974] dump_stack_lvl+0x100/0x190 [ 467.359883][T22974] should_fail_ex.cold+0x5/0xa [ 467.359918][T22974] should_failslab+0xc2/0x120 [ 467.359957][T22974] __kmalloc_node_noprof+0x101/0x830 [ 467.359979][T22974] ? __kmalloc_noprof+0x311/0x820 [ 467.359997][T22974] ? get_callchain_buffers+0x1e5/0x380 [ 467.360029][T22974] get_callchain_buffers+0x1e5/0x380 [ 467.360047][T22974] ? security_capable+0x80/0x260 [ 467.360112][T22974] stack_map_alloc+0x316/0x610 [ 467.360135][T22974] map_create+0x874/0x3120 [ 467.360172][T22974] ? __lock_acquire+0x49f/0x1a40 [ 467.360208][T22974] ? __pfx_map_create+0x10/0x10 [ 467.360234][T22974] ? __might_fault+0xc5/0x140 [ 467.360257][T22974] __sys_bpf+0x2a6e/0x4e80 [ 467.360279][T22974] ? __pfx___sys_bpf+0x10/0x10 [ 467.360293][T22974] ? __pfx_futex_hash+0x10/0x10 [ 467.360313][T22974] ? get_pid_task+0xfc/0x250 [ 467.360338][T22974] ? get_pid_task+0xfc/0x250 [ 467.360359][T22974] ? futex_wait+0x11e/0x370 [ 467.360377][T22974] ? __pfx_futex_wait+0x10/0x10 [ 467.360394][T22974] ? find_held_lock+0x2b/0x80 [ 467.360422][T22974] ? rcu_read_lock_any_held+0x6a/0xa0 [ 467.360450][T22974] ? find_held_lock+0x2b/0x80 [ 467.360467][T22974] ? ksys_write+0x190/0x250 [ 467.360489][T22974] ? ksys_write+0x190/0x250 [ 467.360513][T22974] ? __x64_sys_futex+0x34f/0x4d0 [ 467.360532][T22974] ? __x64_sys_futex+0x358/0x4d0 [ 467.360549][T22974] ? xfd_validate_state+0x129/0x190 [ 467.360577][T22974] ? __x64_sys_bpf+0xce/0x140 [ 467.360592][T22974] __x64_sys_bpf+0xce/0x140 [ 467.360609][T22974] ? do_syscall_64+0x90/0x840 [ 467.360705][T22974] do_syscall_64+0x115/0x840 [ 467.360724][T22974] ? clear_bhb_loop+0x40/0x90 [ 467.360749][T22974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.360764][T22974] RIP: 0033:0x7efe81f9e019 [ 467.360777][T22974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.360792][T22974] RSP: 002b:00007efe82dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.360831][T22974] RAX: ffffffffffffffda RBX: 00007efe82225fa0 RCX: 00007efe81f9e019 [ 467.360841][T22974] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 467.360850][T22974] RBP: 00007efe8203500c R08: 0000000000000000 R09: 0000000000000000 [ 467.360859][T22974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.360867][T22974] R13: 00007efe82226038 R14: 00007efe82225fa0 R15: 00007ffdc2b046e8 [ 467.360888][T22974] [ 470.398957][T23090] netlink: 'syz.0.8209': attribute type 23 has an invalid length. [ 471.022578][T23122] netlink: 'syz.1.8223': attribute type 1 has an invalid length. [ 471.261925][T23135] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.518320][T23248] netlink: ct_mark mask cannot be 0 [ 473.877020][T23266] sd 0:0:1:0: PR command failed: 1026 [ 473.877070][T23266] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 473.877101][T23266] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 474.183766][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8289'. [ 476.681774][T16470] Bluetooth: hci3: ACL packet too small [ 476.829647][T23399] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 477.149682][T23412] NFSD: Failed to start, no listeners configured. [ 479.951585][T23552] syz_tun: tun_chr_ioctl cmd 1074025684 [ 481.226774][T23611] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 481.258741][T23611] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 481.660504][T23634] ksmbd: Unknown IPC event: 14, ignore. [ 482.420009][T16470] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 482.420111][T16470] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 482.438900][T16470] Bluetooth: hci0: Dropping invalid advertising data [ 482.449724][T16470] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 482.449830][T16470] Bluetooth: hci0: unknown advertising packet type: 0x8b [ 482.458075][T16470] Bluetooth: hci0: unknown advertising packet type: 0xee [ 482.534830][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8447'. [ 482.615629][T23671] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 482.909488][T16470] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 482.965032][T16470] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 482.972788][T16470] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 482.983483][T16470] CPU: 0 UID: 0 PID: 16470 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 482.983509][T16470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 482.983514][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.983537][T16470] Workqueue: hci2 hci_rx_work [ 482.983633][T16470] Call Trace: [ 482.983639][T16470] [ 482.983645][T16470] dump_stack_lvl+0x100/0x190 [ 482.983664][T16470] sysfs_warn_dup.cold+0x1c/0x28 [ 482.983692][T16470] sysfs_create_dir_ns+0x24b/0x2b0 [ 482.983767][T16470] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 482.983787][T16470] ? find_held_lock+0x2b/0x80 [ 482.983806][T16470] ? kobject_add_internal+0x25f/0x930 [ 482.983860][T16470] ? kobject_add_internal+0x25f/0x930 [ 482.983876][T16470] ? do_raw_spin_unlock+0x145/0x1e0 [ 482.983895][T16470] kobject_add_internal+0x2c8/0x930 [ 482.983913][T16470] kobject_add+0x16a/0x1e0 [ 482.983928][T16470] ? __pfx_kobject_add+0x10/0x10 [ 482.983941][T16470] ? class_to_subsys+0x10f/0x150 [ 482.983994][T16470] ? kobject_put+0xb9/0x640 [ 482.984015][T16470] ? _raw_spin_unlock+0x28/0x50 [ 482.984058][T16470] device_add+0x294/0x1970 [ 482.984082][T16470] ? __pfx_dev_set_name+0x10/0x10 [ 482.984119][T16470] ? __pfx_device_add+0x10/0x10 [ 482.984134][T16470] ? mgmt_send_event_skb+0x2fb/0x460 [ 482.984184][T16470] hci_conn_add_sysfs+0x1a3/0x260 [ 482.984275][T16470] le_conn_complete_evt+0x11eb/0x1f60 [ 482.984337][T16470] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 482.984358][T16470] ? __pfx_bt_warn+0x10/0x10 [ 482.984376][T16470] ? hci_event_packet+0x186/0xcd0 [ 482.984398][T16470] hci_le_conn_complete_evt+0x23c/0x3a0 [ 482.984417][T16470] ? skb_pull_data+0x15f/0x1e0 [ 482.984472][T16470] hci_le_meta_evt+0x34a/0x5f0 [ 482.984512][T16470] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 482.984534][T16470] hci_event_packet+0x51c/0xcd0 [ 482.984553][T16470] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 482.984572][T16470] ? __pfx_hci_event_packet+0x10/0x10 [ 482.984593][T16470] ? kcov_remote_start+0x384/0x670 [ 482.984614][T16470] ? lockdep_hardirqs_on+0x78/0x100 [ 482.984662][T16470] hci_rx_work+0x451/0xfc0 [ 482.984685][T16470] process_one_work+0xa23/0x1940 [ 482.984714][T16470] ? __pfx_process_one_work+0x10/0x10 [ 482.984740][T16470] ? __pfx_hci_rx_work+0x10/0x10 [ 482.984759][T16470] worker_thread+0x5ef/0xe50 [ 482.984784][T16470] ? __pfx_worker_thread+0x10/0x10 [ 482.984805][T16470] ? kthread+0x13a/0x450 [ 482.984823][T16470] ? __pfx_worker_thread+0x10/0x10 [ 482.984848][T16470] kthread+0x370/0x450 [ 482.984867][T16470] ? __pfx_kthread+0x10/0x10 [ 482.984888][T16470] ret_from_fork+0x72b/0xd50 [ 482.984907][T16470] ? __pfx_ret_from_fork+0x10/0x10 [ 482.984925][T16470] ? __switch_to+0x800/0x10f0 [ 482.984953][T16470] ? __switch_to_asm+0x39/0x70 [ 482.984972][T16470] ? __pfx_kthread+0x10/0x10 [ 482.984992][T16470] ret_from_fork_asm+0x1a/0x30 [ 482.985021][T16470] [ 482.985075][T16470] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 483.312940][T16470] Bluetooth: hci2: failed to register connection device [ 484.203849][T23743] netlink: 'syz.2.8466': attribute type 1 has an invalid length. [ 484.231545][T23743] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8466'. [ 484.921709][T16470] Bluetooth: hci2: command 0x0406 tx timeout [ 485.196968][T23783] NFSD: Failed to start, no listeners configured. [ 486.305310][T23835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8503'. [ 486.347517][T23837] nfsd: Unknown parameter 'batadv' [ 486.486388][T16470] Bluetooth: hci1: SCO packet too small [ 486.624012][T23851] netlink: 'syz.0.8508': attribute type 4 has an invalid length. [ 486.663738][T23851] netlink: 'syz.0.8508': attribute type 1 has an invalid length. [ 486.992726][T16470] Bluetooth: hci2: command 0x0406 tx timeout [ 488.007493][T23904] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 489.059888][T16470] Bluetooth: hci2: command 0x0406 tx timeout [ 489.164553][T23935] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 489.904532][T23973] netlink: 'syz.1.8558': attribute type 1 has an invalid length. [ 490.219664][T15865] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 490.288068][T15865] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 490.295866][T15865] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 490.305989][T15865] CPU: 0 UID: 0 PID: 15865 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 490.306017][T15865] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 490.306023][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.306033][T15865] Workqueue: hci3 hci_rx_work [ 490.306055][T15865] Call Trace: [ 490.306069][T15865] [ 490.306074][T15865] dump_stack_lvl+0x100/0x190 [ 490.306095][T15865] sysfs_warn_dup.cold+0x1c/0x28 [ 490.306117][T15865] sysfs_create_dir_ns+0x24b/0x2b0 [ 490.306140][T15865] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 490.306160][T15865] ? find_held_lock+0x2b/0x80 [ 490.306178][T15865] ? kobject_add_internal+0x25f/0x930 [ 490.306193][T15865] ? kobject_add_internal+0x25f/0x930 [ 490.306209][T15865] ? do_raw_spin_unlock+0x145/0x1e0 [ 490.306226][T15865] kobject_add_internal+0x2c8/0x930 [ 490.306243][T15865] kobject_add+0x16a/0x1e0 [ 490.306258][T15865] ? __pfx_kobject_add+0x10/0x10 [ 490.306271][T15865] ? class_to_subsys+0x10f/0x150 [ 490.306289][T15865] ? kobject_put+0xb9/0x640 [ 490.306309][T15865] ? _raw_spin_unlock+0x28/0x50 [ 490.306330][T15865] device_add+0x294/0x1970 [ 490.306345][T15865] ? __pfx_dev_set_name+0x10/0x10 [ 490.306361][T15865] ? __pfx_device_add+0x10/0x10 [ 490.306375][T15865] ? mgmt_send_event_skb+0x2fb/0x460 [ 490.306399][T15865] hci_conn_add_sysfs+0x1a3/0x260 [ 490.306421][T15865] le_conn_complete_evt+0x11eb/0x1f60 [ 490.306445][T15865] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 490.306461][T15865] ? __pfx_bt_warn+0x10/0x10 [ 490.306473][T15865] ? hci_event_packet+0x186/0xcd0 [ 490.306495][T15865] hci_le_conn_complete_evt+0x23c/0x3a0 [ 490.306514][T15865] ? skb_pull_data+0x15f/0x1e0 [ 490.306532][T15865] hci_le_meta_evt+0x34a/0x5f0 [ 490.306565][T15865] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 490.306587][T15865] hci_event_packet+0x51c/0xcd0 [ 490.306611][T15865] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 490.306638][T15865] ? __pfx_hci_event_packet+0x10/0x10 [ 490.306659][T15865] ? kcov_remote_start+0x384/0x670 [ 490.306679][T15865] ? lockdep_hardirqs_on+0x78/0x100 [ 490.306702][T15865] hci_rx_work+0x451/0xfc0 [ 490.306723][T15865] process_one_work+0xa23/0x1940 [ 490.306751][T15865] ? __pfx_process_one_work+0x10/0x10 [ 490.306777][T15865] ? __pfx_hci_rx_work+0x10/0x10 [ 490.306796][T15865] worker_thread+0x5ef/0xe50 [ 490.306821][T15865] ? __pfx_worker_thread+0x10/0x10 [ 490.306844][T15865] ? kthread+0x13a/0x450 [ 490.306867][T15865] ? __pfx_worker_thread+0x10/0x10 [ 490.306886][T15865] kthread+0x370/0x450 [ 490.306908][T15865] ? __pfx_kthread+0x10/0x10 [ 490.306928][T15865] ret_from_fork+0x72b/0xd50 [ 490.306952][T15865] ? __pfx_ret_from_fork+0x10/0x10 [ 490.306971][T15865] ? __switch_to+0x800/0x10f0 [ 490.306998][T15865] ? __switch_to_asm+0x39/0x70 [ 490.307016][T15865] ? __pfx_kthread+0x10/0x10 [ 490.307040][T15865] ret_from_fork_asm+0x1a/0x30 [ 490.307078][T15865] [ 490.309250][T15865] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 490.632030][T15865] Bluetooth: hci3: failed to register connection device [ 491.123259][T24020] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 491.140031][T15865] Bluetooth: hci2: command 0x0406 tx timeout [ 491.196892][T24025] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 491.483177][T24035] netlink: Invalid conntrack helper [ 491.538217][T24038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8577'. [ 491.583467][T24038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8577'. [ 492.088710][T24055] FAULT_INJECTION: forcing a failure. [ 492.088710][T24055] name failslab, interval 1, probability 0, space 0, times 0 [ 492.149213][T24055] CPU: 0 UID: 0 PID: 24055 Comm: syz.0.8586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 492.149254][T24055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 492.149259][T24055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.149269][T24055] Call Trace: [ 492.149275][T24055] [ 492.149284][T24055] dump_stack_lvl+0x100/0x190 [ 492.149305][T24055] should_fail_ex.cold+0x5/0xa [ 492.149323][T24055] should_failslab+0xc2/0x120 [ 492.149344][T24055] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 492.149363][T24055] ? __alloc_skb+0x5b7/0x710 [ 492.149382][T24055] ? __alloc_skb+0x140/0x710 [ 492.149403][T24055] __alloc_skb+0x140/0x710 [ 492.149422][T24055] ? __alloc_skb+0x5b7/0x710 [ 492.149441][T24055] ? __pfx___alloc_skb+0x10/0x10 [ 492.149462][T24055] ? lockdep_init_map_type+0x5c/0x250 [ 492.149479][T24055] audit_log_start+0x350/0x930 [ 492.149499][T24055] ? __pfx_audit_log_start+0x10/0x10 [ 492.149517][T24055] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 492.149532][T24055] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.149560][T24055] audit_seccomp+0x60/0x190 [ 492.149575][T24055] ? exc_general_protection+0x120/0x240 [ 492.149600][T24055] __secure_computing+0x26d/0x2c0 [ 492.149618][T24055] do_syscall_64+0x5ce/0x840 [ 492.149636][T24055] ? clear_bhb_loop+0x40/0x90 [ 492.149655][T24055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.149670][T24055] RIP: 0033:0x7f504879e019 [ 492.149683][T24055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.149696][T24055] RSP: 002b:00007f50495829f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 492.149711][T24055] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f504879e019 [ 492.149720][T24055] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 492.149728][T24055] RBP: 00007f5049583030 R08: 0000000000000001 R09: 000000000000000b [ 492.149737][T24055] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 492.149745][T24055] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 492.149763][T24055] [ 492.149780][T24055] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 492.409840][T15865] Bluetooth: hci3: command 0x0406 tx timeout [ 492.843891][T24055] audit: out of memory in audit_log_start [ 492.998444][T15865] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 493.040243][T12053] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 493.048128][T12053] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 493.058782][T12053] CPU: 0 UID: 0 PID: 12053 Comm: kworker/u12:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 493.058808][T12053] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 493.058814][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.058828][T12053] Workqueue: hci0 hci_rx_work [ 493.058852][T12053] Call Trace: [ 493.058857][T12053] [ 493.058863][T12053] dump_stack_lvl+0x100/0x190 [ 493.058883][T12053] sysfs_warn_dup.cold+0x1c/0x28 [ 493.058906][T12053] sysfs_create_dir_ns+0x24b/0x2b0 [ 493.058928][T12053] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 493.058948][T12053] ? find_held_lock+0x2b/0x80 [ 493.058967][T12053] ? kobject_add_internal+0x25f/0x930 [ 493.058982][T12053] ? kobject_add_internal+0x25f/0x930 [ 493.058997][T12053] ? do_raw_spin_unlock+0x145/0x1e0 [ 493.059015][T12053] kobject_add_internal+0x2c8/0x930 [ 493.059032][T12053] kobject_add+0x16a/0x1e0 [ 493.059046][T12053] ? __pfx_kobject_add+0x10/0x10 [ 493.059060][T12053] ? class_to_subsys+0x10f/0x150 [ 493.059078][T12053] ? kobject_put+0xb9/0x640 [ 493.059099][T12053] ? _raw_spin_unlock+0x28/0x50 [ 493.059119][T12053] device_add+0x294/0x1970 [ 493.059134][T12053] ? __pfx_dev_set_name+0x10/0x10 [ 493.059151][T12053] ? __pfx_device_add+0x10/0x10 [ 493.059165][T12053] ? mgmt_send_event_skb+0x2fb/0x460 [ 493.059189][T12053] hci_conn_add_sysfs+0x1a3/0x260 [ 493.059211][T12053] le_conn_complete_evt+0x11eb/0x1f60 [ 493.059234][T12053] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 493.059251][T12053] ? __pfx_bt_warn+0x10/0x10 [ 493.059263][T12053] ? hci_event_packet+0x186/0xcd0 [ 493.059285][T12053] hci_le_conn_complete_evt+0x23c/0x3a0 [ 493.059304][T12053] ? skb_pull_data+0x15f/0x1e0 [ 493.059322][T12053] hci_le_meta_evt+0x34a/0x5f0 [ 493.059341][T12053] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 493.059362][T12053] hci_event_packet+0x51c/0xcd0 [ 493.059380][T12053] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 493.059408][T12053] ? __pfx_hci_event_packet+0x10/0x10 [ 493.059429][T12053] ? kcov_remote_start+0x384/0x670 [ 493.059450][T12053] ? lockdep_hardirqs_on+0x78/0x100 [ 493.059474][T12053] hci_rx_work+0x451/0xfc0 [ 493.059496][T12053] process_one_work+0xa23/0x1940 [ 493.059525][T12053] ? __pfx_process_one_work+0x10/0x10 [ 493.059554][T12053] ? __pfx_hci_rx_work+0x10/0x10 [ 493.059573][T12053] worker_thread+0x5ef/0xe50 [ 493.059601][T12053] ? kthread+0x13a/0x450 [ 493.059618][T12053] ? __pfx_worker_thread+0x10/0x10 [ 493.059637][T12053] kthread+0x370/0x450 [ 493.059655][T12053] ? __pfx_kthread+0x10/0x10 [ 493.059675][T12053] ret_from_fork+0x72b/0xd50 [ 493.059694][T12053] ? __pfx_ret_from_fork+0x10/0x10 [ 493.059712][T12053] ? __switch_to+0x800/0x10f0 [ 493.059733][T12053] ? __switch_to_asm+0x39/0x70 [ 493.059751][T12053] ? __pfx_kthread+0x10/0x10 [ 493.059771][T12053] ret_from_fork_asm+0x1a/0x30 [ 493.059799][T12053] [ 493.059974][T12053] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 493.367075][T12053] Bluetooth: hci0: failed to register connection device [ 494.472837][T12053] Bluetooth: hci3: command 0x0406 tx timeout [ 494.664222][T24149] &#$@\]\-: entered promiscuous mode [ 495.028846][T12053] Bluetooth: hci0: command 0x0406 tx timeout [ 495.395978][T12053] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 495.457307][T16576] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 495.464992][T16576] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 495.475446][T16576] CPU: 0 UID: 0 PID: 16576 Comm: kworker/u12:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 495.475478][T16576] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 495.475484][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.475494][T16576] Workqueue: hci1 hci_rx_work [ 495.475516][T16576] Call Trace: [ 495.475522][T16576] [ 495.475527][T16576] dump_stack_lvl+0x100/0x190 [ 495.475546][T16576] sysfs_warn_dup.cold+0x1c/0x28 [ 495.475606][T16576] sysfs_create_dir_ns+0x24b/0x2b0 [ 495.475629][T16576] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.475649][T16576] ? find_held_lock+0x2b/0x80 [ 495.475667][T16576] ? kobject_add_internal+0x25f/0x930 [ 495.475682][T16576] ? kobject_add_internal+0x25f/0x930 [ 495.475697][T16576] ? do_raw_spin_unlock+0x145/0x1e0 [ 495.475715][T16576] kobject_add_internal+0x2c8/0x930 [ 495.475732][T16576] kobject_add+0x16a/0x1e0 [ 495.475746][T16576] ? __pfx_kobject_add+0x10/0x10 [ 495.475759][T16576] ? class_to_subsys+0x10f/0x150 [ 495.475777][T16576] ? kobject_put+0xb9/0x640 [ 495.475797][T16576] ? _raw_spin_unlock+0x28/0x50 [ 495.475818][T16576] device_add+0x294/0x1970 [ 495.475833][T16576] ? __pfx_dev_set_name+0x10/0x10 [ 495.475850][T16576] ? __pfx_device_add+0x10/0x10 [ 495.475864][T16576] ? mgmt_send_event_skb+0x2fb/0x460 [ 495.475888][T16576] hci_conn_add_sysfs+0x1a3/0x260 [ 495.475909][T16576] le_conn_complete_evt+0x11eb/0x1f60 [ 495.475933][T16576] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.475949][T16576] ? __pfx_bt_warn+0x10/0x10 [ 495.475962][T16576] ? hci_event_packet+0x186/0xcd0 [ 495.475984][T16576] hci_le_conn_complete_evt+0x23c/0x3a0 [ 495.476002][T16576] ? skb_pull_data+0x15f/0x1e0 [ 495.476020][T16576] hci_le_meta_evt+0x34a/0x5f0 [ 495.476048][T16576] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 495.476074][T16576] hci_event_packet+0x51c/0xcd0 [ 495.476091][T16576] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.476110][T16576] ? __pfx_hci_event_packet+0x10/0x10 [ 495.476130][T16576] ? kcov_remote_start+0x384/0x670 [ 495.476150][T16576] ? lockdep_hardirqs_on+0x78/0x100 [ 495.476173][T16576] hci_rx_work+0x451/0xfc0 [ 495.476194][T16576] process_one_work+0xa23/0x1940 [ 495.476222][T16576] ? __pfx_process_one_work+0x10/0x10 [ 495.476248][T16576] ? __pfx_hci_rx_work+0x10/0x10 [ 495.476267][T16576] worker_thread+0x5ef/0xe50 [ 495.476292][T16576] ? __pfx_worker_thread+0x10/0x10 [ 495.476313][T16576] ? kthread+0x13a/0x450 [ 495.476330][T16576] ? __pfx_worker_thread+0x10/0x10 [ 495.476350][T16576] kthread+0x370/0x450 [ 495.476367][T16576] ? __pfx_kthread+0x10/0x10 [ 495.476387][T16576] ret_from_fork+0x72b/0xd50 [ 495.476405][T16576] ? __pfx_ret_from_fork+0x10/0x10 [ 495.476424][T16576] ? __switch_to+0x800/0x10f0 [ 495.476445][T16576] ? __switch_to_asm+0x39/0x70 [ 495.476463][T16576] ? __pfx_kthread+0x10/0x10 [ 495.476483][T16576] ret_from_fork_asm+0x1a/0x30 [ 495.476511][T16576] [ 495.955666][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8638'. [ 496.072001][T16576] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 496.091417][T16576] Bluetooth: hci1: failed to register connection device [ 496.543440][T24218] Bluetooth: hci3: command 0x0406 tx timeout [ 497.098390][T24218] Bluetooth: hci0: command 0x0406 tx timeout [ 497.416237][T24218] Bluetooth: hci1: command 0x2016 tx timeout [ 497.486792][T24277] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 497.703162][T24294] openvswitch: netlink: Missing valid actions attribute. [ 498.234176][T24318] netlink: Unknown NAT attribute (type=262, max=9) [ 498.599427][T24328] netlink: Failed to add  helper -22 [ 498.610006][T24218] Bluetooth: hci3: command 0x0406 tx timeout [ 499.167171][T24218] Bluetooth: hci0: command 0x0406 tx timeout [ 499.485809][T15865] Bluetooth: hci1: command 0x2016 tx timeout [ 499.571451][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.581295][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.857192][T24416] nbd: must specify a device to reconfigure [ 500.473732][ T29] audit: type=1107 audit(4294967423.334:39): pid=24446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.546720][ T29] audit: type=1107 audit(4294967423.354:40): pid=24446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.608260][T24452] random: crng reseeded on system resumption [ 501.034240][T24475] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 501.163020][T24474] netlink: Failed to add  helper -22 [ 501.236290][T15865] Bluetooth: hci0: command 0x0406 tx timeout [ 501.555295][T15865] Bluetooth: hci1: command 0x2016 tx timeout [ 501.687081][T24507] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.8749:24507 [ 502.127662][T24526] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.948563][T24564] openvswitch: netlink: Flow key attribute not present in set flow. [ 503.394322][T24589] syz_tun: tun_chr_ioctl cmd 1074025681 [ 503.625748][T12053] Bluetooth: hci1: command 0x2016 tx timeout [ 504.626113][T24645] openvswitch: netlink: Flow key attribute not present in set flow. [ 506.138977][T24722] netlink: 'syz.2.8850': attribute type 11 has an invalid length. [ 506.176535][T24722] netlink: 'syz.2.8850': attribute type 11 has an invalid length. [ 506.212757][T24722] netlink: 'syz.2.8850': attribute type 11 has an invalid length. [ 507.774106][T24810] netlink: 'syz.2.8893': attribute type 2 has an invalid length. [ 507.895803][T24815] ucma_write: process 4392 (syz.1.8894) changed security contexts after opening file descriptor, this is not allowed. [ 508.599441][T24850] unsupported nla_type 113 [ 509.819950][T24906] nbd: illegal input index -1024 [ 510.043436][T24918] netlink: 'syz.0.8945': attribute type 1 has an invalid length. [ 510.978415][T24963] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 511.225224][T24976] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 511.825227][T12053] Bluetooth: hci1: command 0x2016 tx timeout [ 512.282534][T25027] netlink: 'syz.0.8995': attribute type 8 has an invalid length. [ 512.471908][T25034] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 512.858269][T25035] could not allocate digest TFM handle [ 513.672444][T25108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9021'. [ 514.322448][T25146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9037'. [ 514.902616][T25176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9052'. [ 515.943196][T25212] openvswitch: netlink: Key type 261 is out of range max 32 [ 516.696160][T25231] phram: parameter too long [ 517.349702][T25274] syz.0.9096 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 518.292182][T25311] openvswitch: netlink: IPv4 tunnel dst address is zero [ 519.605609][ T5626] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 519.698979][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 519.699006][ T5626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 519.699012][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.699021][ T5626] Call Trace: [ 519.699026][ T5626] [ 519.699031][ T5626] dump_stack_lvl+0x100/0x190 [ 519.699053][ T5626] dump_header+0xfb/0x606 [ 519.699070][ T5626] oom_kill_process.cold+0xd/0x330 [ 519.699087][ T5626] out_of_memory+0x340/0x14f0 [ 519.699143][ T5626] ? __pfx_out_of_memory+0x10/0x10 [ 519.699171][ T5626] mem_cgroup_out_of_memory+0xc6/0x130 [ 519.699188][ T5626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 519.699204][ T5626] ? find_held_lock+0x2b/0x80 [ 519.699225][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 519.699242][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 519.699260][ T5626] try_charge_memcg+0x6e5/0xdf0 [ 519.699285][ T5626] ? __pfx_try_charge_memcg+0x10/0x10 [ 519.699305][ T5626] ? find_held_lock+0x2b/0x80 [ 519.699321][ T5626] ? rcu_read_unlock+0x17/0x60 [ 519.699342][ T5626] ? rcu_read_unlock+0x17/0x60 [ 519.699363][ T5626] ? find_held_lock+0x2b/0x80 [ 519.699380][ T5626] ? rcu_read_unlock+0x17/0x60 [ 519.699405][ T5626] charge_memcg+0x187/0x1e0 [ 519.699427][ T5626] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 519.699444][ T5626] swap_cache_alloc_folio+0x548/0xc50 [ 519.699465][ T5626] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 519.699482][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 519.699498][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 519.699519][ T5626] swap_cache_read_folio+0x47/0x140 [ 519.699538][ T5626] swap_cluster_readahead+0x387/0x5f0 [ 519.699559][ T5626] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 519.699575][ T5626] ? debug_object_activate+0x343/0x4b0 [ 519.699678][ T5626] ? debug_object_activate+0x343/0x4b0 [ 519.699707][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 519.699728][ T5626] ? get_vma_policy+0x23d/0x3b0 [ 519.699751][ T5626] swapin_readahead+0x159/0x1200 [ 519.699774][ T5626] ? __pfx_swapin_readahead+0x10/0x10 [ 519.699795][ T5626] ? swap_table_get+0x10d/0x2c0 [ 519.699810][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 519.699826][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 519.699842][ T5626] ? __pfx_softleaf_type+0x10/0x10 [ 519.699861][ T5626] ? do_swap_page+0xf98/0x5780 [ 519.699875][ T5626] do_swap_page+0xf98/0x5780 [ 519.699898][ T5626] ? __pfx_do_swap_page+0x10/0x10 [ 519.699912][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 519.699934][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 519.699954][ T5626] ? rcu_is_watching+0x12/0xc0 [ 519.699971][ T5626] ? __pte_offset_map+0x179/0x310 [ 519.699992][ T5626] __handle_mm_fault+0x192f/0x2a00 [ 519.700011][ T5626] ? reacquire_held_locks+0xce/0x1e0 [ 519.700033][ T5626] ? __pfx___handle_mm_fault+0x10/0x10 [ 519.700053][ T5626] ? lock_vma_under_rcu+0x17c/0x590 [ 519.700078][ T5626] handle_mm_fault+0x37b/0xa30 [ 519.700096][ T5626] do_user_addr_fault+0x5a3/0x12f0 [ 519.700132][ T5626] exc_page_fault+0x6f/0xd0 [ 519.700151][ T5626] asm_exc_page_fault+0x26/0x30 [ 519.700165][ T5626] RIP: 0033:0x7efe81f5e84e [ 519.700178][ T5626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.700191][ T5626] RSP: 002b:00007ffdc2b049c8 EFLAGS: 00010246 [ 519.700203][ T5626] RAX: 0000000000000000 RBX: 000055558d095500 RCX: 00007efe81f5e84e [ 519.700213][ T5626] RDX: 00007ffdc2b04a20 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.700221][ T5626] RBP: 00007ffdc2b04a8c R08: 0000000000000000 R09: 0000000000000000 [ 519.700230][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 519.700238][ T5626] R13: 00000000000927c0 R14: 000000000007f2d2 R15: 00007ffdc2b04ae0 [ 519.700257][ T5626] [ 521.253038][ T5626] memory: usage 1772kB, limit 3072kB, failcnt 68185 [ 521.273431][ T5626] memory+swap: usage 1960kB, limit 9007199254740988kB, failcnt 0 [ 521.310405][ T5626] kmem: usage 1540kB, limit 9007199254740988kB, failcnt 0 [ 521.330591][ T5626] Memory cgroup stats for /syz1: [ 521.330705][ T5626] cache 24576 [ 521.354205][ T5626] rss 4096 [ 521.357546][ T5626] rss_huge 0 [ 521.361080][ T5626] shmem 0 [ 521.365117][ T5626] mapped_file 4096 [ 521.370000][ T5626] dirty 0 [ 521.373931][ T5626] writeback 0 [ 521.399573][ T5626] workingset_refault_anon 5289 [ 521.419060][ T5626] workingset_refault_file 18489 [ 521.425010][ T5626] swap 192512 [ 521.428377][ T5626] swapcached 218116096 [ 521.432721][ T5626] pgpgin 210428 [ 521.436269][ T5626] pgpgout 214533 [ 521.439897][ T5626] pgfault 454006 [ 521.443874][ T5626] pgmajfault 2038 [ 521.447589][ T5626] inactive_anon 8192 [ 521.451795][ T5626] active_anon 0 [ 521.467425][ T5626] inactive_file 0 [ 521.474465][ T5626] active_file 0 [ 521.481331][ T5626] unevictable 24576 [ 521.490023][ T5626] hierarchical_memory_limit 3145728 [ 521.500097][ T5626] hierarchical_memsw_limit 9223372036854771712 [ 521.517715][ T5626] total_cache 24576 [ 521.522037][ T5626] total_rss 4096 [ 521.525593][ T5626] total_rss_huge 0 [ 521.531034][ T5626] total_shmem 0 [ 521.535823][ T5626] total_mapped_file 4096 [ 521.540272][ T5626] total_dirty 0 [ 521.544099][ T5626] total_writeback 0 [ 521.556412][ T5626] total_workingset_refault_anon 5289 [ 521.566663][ T5626] total_workingset_refault_file 18489 [ 521.578310][ T5626] total_swap 192512 [ 521.587090][ T5626] total_swapcached 218116096 [ 521.596719][ T5626] total_pgpgin 210428 [ 521.605635][ T5626] total_pgpgout 214533 [ 521.618667][ T5626] total_pgfault 454006 [ 521.627711][ T5626] total_pgmajfault 2038 [ 521.637948][ T5626] total_inactive_anon 8192 [ 521.646481][ T5626] total_active_anon 0 [ 521.653895][ T5626] total_inactive_file 0 [ 521.662816][ T5626] total_active_file 0 [ 521.671839][ T5626] total_unevictable 24576 [ 521.680997][ T5626] anon_cost 2 [ 521.687384][ T5626] file_cost 0 [ 521.696162][ T5626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9129,pid=25340,uid=0 [ 521.728799][ T5626] Memory cgroup out of memory: Killed process 25340 (syz.1.9129) total-vm:104300kB, anon-rss:1260kB, file-rss:20984kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 522.276944][ T29] audit: type=1800 audit(4294967445.247:41): pid=25411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9163" name=22050820 dev="tmpfs" ino=3024 res=0 errno=0 [ 522.386766][ T29] audit: type=1326 audit(4294967445.328:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.1.9164" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe81f9e019 code=0x0 [ 522.708977][T25428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9171'. [ 522.857087][T25433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9173'. [ 524.109554][T25472] ovs_?: entered promiscuous mode [ 524.598052][T25491] netlink: 'syz.4.9199': attribute type 1 has an invalid length. [ 525.744212][T25522] netlink: 206 bytes leftover after parsing attributes in process `syz.1.9214'. [ 526.617496][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9231'. [ 526.866462][T25570] ovs_?: entered promiscuous mode [ 527.956724][T25600] ovs_?: entered promiscuous mode [ 528.227917][T25610] kAFS: No cell specified [ 528.691264][T25630] ovs_?: entered promiscuous mode [ 529.324681][T25653] FAULT_INJECTION: forcing a failure. [ 529.324681][T25653] name failslab, interval 1, probability 0, space 0, times 0 [ 529.373981][T25653] CPU: 0 UID: 0 PID: 25653 Comm: syz.1.9269 Tainted: G U L syzkaller #0 PREEMPT(full) [ 529.374008][T25653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 529.374014][T25653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.374022][T25653] Call Trace: [ 529.374028][T25653] [ 529.374036][T25653] dump_stack_lvl+0x100/0x190 [ 529.374058][T25653] should_fail_ex.cold+0x5/0xa [ 529.374075][T25653] should_failslab+0xc2/0x120 [ 529.374096][T25653] __kmalloc_noprof+0xfc/0x820 [ 529.374113][T25653] ? trace_kmalloc+0xeb/0x110 [ 529.374133][T25653] ? lsm_blob_alloc+0x68/0x90 [ 529.374151][T25653] lsm_blob_alloc+0x68/0x90 [ 529.374164][T25653] security_sk_alloc+0x2d/0x290 [ 529.374260][T25653] sk_prot_alloc+0x12a/0x2a0 [ 529.374308][T25653] sk_alloc+0x36/0xe80 [ 529.374329][T25653] pppol2tp_create+0x32/0x250 [ 529.374386][T25653] pppox_create+0x15c/0x2c0 [ 529.374441][T25653] __sock_create+0x339/0x860 [ 529.374484][T25653] __sys_socket+0x14d/0x260 [ 529.374501][T25653] ? __pfx___sys_socket+0x10/0x10 [ 529.374524][T25653] __x64_sys_socket+0x72/0xb0 [ 529.374540][T25653] ? lockdep_hardirqs_on+0x78/0x100 [ 529.374560][T25653] do_syscall_64+0x115/0x840 [ 529.374578][T25653] ? clear_bhb_loop+0x40/0x90 [ 529.374596][T25653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.374611][T25653] RIP: 0033:0x7efe81f9e019 [ 529.374625][T25653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.374639][T25653] RSP: 002b:00007efe82dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 529.374654][T25653] RAX: ffffffffffffffda RBX: 00007efe82225fa0 RCX: 00007efe81f9e019 [ 529.374664][T25653] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 529.374673][T25653] RBP: 00007efe8203500c R08: 0000000000000000 R09: 0000000000000000 [ 529.374683][T25653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.374692][T25653] R13: 00007efe82226038 R14: 00007efe82225fa0 R15: 00007ffdc2b046e8 [ 529.374711][T25653] [ 530.820108][T25699] IPVS: length: 537396514 != 24 [ 531.025253][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9293'. [ 532.442897][T25753] FAULT_INJECTION: forcing a failure. [ 532.442897][T25753] name failslab, interval 1, probability 0, space 0, times 0 [ 532.507151][T25753] CPU: 0 UID: 0 PID: 25753 Comm: syz.1.9314 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.507179][T25753] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.507184][T25753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.507193][T25753] Call Trace: [ 532.507199][T25753] [ 532.507205][T25753] dump_stack_lvl+0x100/0x190 [ 532.507226][T25753] should_fail_ex.cold+0x5/0xa [ 532.507244][T25753] should_failslab+0xc2/0x120 [ 532.507265][T25753] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 532.507286][T25753] ? __d_alloc+0x35/0xa50 [ 532.507306][T25753] __d_alloc+0x35/0xa50 [ 532.507323][T25753] d_alloc+0x4a/0x1e0 [ 532.507340][T25753] lookup_one_qstr_excl+0x171/0x250 [ 532.507358][T25753] ? mnt_want_write+0x161/0x410 [ 532.507458][T25753] filename_create+0x1cf/0x400 [ 532.507480][T25753] ? __pfx_filename_create+0x10/0x10 [ 532.507509][T25753] filename_mknodat+0x190/0x7f0 [ 532.507528][T25753] ? __pfx_filename_mknodat+0x10/0x10 [ 532.507544][T25753] ? strncpy_from_user+0x19d/0x2d0 [ 532.507601][T25753] ? do_getname+0x191/0x390 [ 532.507621][T25753] __x64_sys_mknod+0x8f/0xc0 [ 532.507638][T25753] do_syscall_64+0x115/0x840 [ 532.507657][T25753] ? clear_bhb_loop+0x40/0x90 [ 532.507675][T25753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.507691][T25753] RIP: 0033:0x7efe81f9e019 [ 532.507704][T25753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.507717][T25753] RSP: 002b:00007efe82dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 532.507732][T25753] RAX: ffffffffffffffda RBX: 00007efe82225fa0 RCX: 00007efe81f9e019 [ 532.507741][T25753] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 532.507750][T25753] RBP: 00007efe8203500c R08: 0000000000000000 R09: 0000000000000000 [ 532.507759][T25753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.507767][T25753] R13: 00007efe82226038 R14: 00007efe82225fa0 R15: 00007ffdc2b046e8 [ 532.507787][T25753] [ 533.774563][T25790] IPVS: length: 537396514 != 24 [ 533.788969][T25795] FAULT_INJECTION: forcing a failure. [ 533.788969][T25795] name failslab, interval 1, probability 0, space 0, times 0 [ 533.851648][T25795] CPU: 0 UID: 0 PID: 25795 Comm: syz.2.9333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 533.851676][T25795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 533.851682][T25795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.851714][T25795] Call Trace: [ 533.851721][T25795] [ 533.851727][T25795] dump_stack_lvl+0x100/0x190 [ 533.851750][T25795] should_fail_ex.cold+0x5/0xa [ 533.851768][T25795] should_failslab+0xc2/0x120 [ 533.851789][T25795] kmem_cache_alloc_noprof+0x91/0x6a0 [ 533.851807][T25795] ? stack_trace_save+0x8e/0xc0 [ 533.851827][T25795] ? alloc_empty_file+0x5b/0x1c0 [ 533.851848][T25795] alloc_empty_file+0x5b/0x1c0 [ 533.851867][T25795] path_openat+0xe7/0x4280 [ 533.851881][T25795] ? __kasan_slab_alloc+0x89/0x90 [ 533.851899][T25795] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 533.851916][T25795] ? do_getname+0x35/0x390 [ 533.851932][T25795] ? do_sys_openat2+0xc7/0x1e0 [ 533.851950][T25795] ? __x64_sys_openat+0x12d/0x210 [ 533.851968][T25795] ? do_syscall_64+0x115/0x840 [ 533.851986][T25795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.852006][T25795] ? __pfx_path_openat+0x10/0x10 [ 533.852025][T25795] do_file_open+0x20e/0x430 [ 533.852041][T25795] ? __pfx_do_file_open+0x10/0x10 [ 533.852069][T25795] ? alloc_fd+0x471/0x7a0 [ 533.852085][T25795] ? do_getname+0x191/0x390 [ 533.852104][T25795] do_sys_openat2+0x10f/0x1e0 [ 533.852122][T25795] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.852142][T25795] ? find_held_lock+0x2b/0x80 [ 533.852164][T25795] __x64_sys_openat+0x12d/0x210 [ 533.852184][T25795] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.852214][T25795] do_syscall_64+0x115/0x840 [ 533.852232][T25795] ? clear_bhb_loop+0x40/0x90 [ 533.852248][T25795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.852263][T25795] RIP: 0033:0x7f5f3515e84e [ 533.852276][T25795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.852290][T25795] RSP: 002b:00007f5f360e4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.852304][T25795] RAX: ffffffffffffffda RBX: 00007f5f360e56c0 RCX: 00007f5f3515e84e [ 533.852314][T25795] RDX: 0000000000000002 RSI: 00007f5f360e4f90 RDI: ffffffffffffff9c [ 533.852322][T25795] RBP: 00007f5f3523500c R08: 0000000000000000 R09: 0000000000000000 [ 533.852331][T25795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.852339][T25795] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 533.852357][T25795] [ 534.304722][T25806] FAULT_INJECTION: forcing a failure. [ 534.304722][T25806] name failslab, interval 1, probability 0, space 0, times 0 [ 534.317446][T25806] CPU: 0 UID: 0 PID: 25806 Comm: syz.2.9340 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.317474][T25806] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.317479][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.317488][T25806] Call Trace: [ 534.317495][T25806] [ 534.317501][T25806] dump_stack_lvl+0x100/0x190 [ 534.317523][T25806] should_fail_ex.cold+0x5/0xa [ 534.317541][T25806] should_failslab+0xc2/0x120 [ 534.317562][T25806] kmem_cache_alloc_noprof+0x91/0x6a0 [ 534.317582][T25806] ? __fget_files+0x215/0x3d0 [ 534.317595][T25806] ? create_new_namespaces+0x30/0xac0 [ 534.317614][T25806] create_new_namespaces+0x30/0xac0 [ 534.317639][T25806] __do_sys_setns+0x213/0x1f30 [ 534.317657][T25806] ? __pfx___do_sys_setns+0x10/0x10 [ 534.317680][T25806] do_syscall_64+0x115/0x840 [ 534.317700][T25806] ? clear_bhb_loop+0x40/0x90 [ 534.317717][T25806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.317734][T25806] RIP: 0033:0x7f5f3519e019 [ 534.317747][T25806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.317761][T25806] RSP: 002b:00007f5f360e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 534.317776][T25806] RAX: ffffffffffffffda RBX: 00007f5f35425fa0 RCX: 00007f5f3519e019 [ 534.317785][T25806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 534.317794][T25806] RBP: 00007f5f3523500c R08: 0000000000000000 R09: 0000000000000000 [ 534.317802][T25806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.317810][T25806] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 534.317829][T25806] [ 534.502385][T25804] vmstat_refresh: nr_hugetlb -2048 [ 536.089616][T25892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.097878][T25892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.784304][T26264] bridge0: port 3(ipvlan1) entered blocking state [ 543.798296][ T5626] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 543.821077][T26264] bridge0: port 3(ipvlan1) entered disabled state [ 543.849233][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.849259][ T5626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.849265][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.849273][ T5626] Call Trace: [ 543.849278][ T5626] [ 543.849284][ T5626] dump_stack_lvl+0x100/0x190 [ 543.849305][ T5626] dump_header+0xfb/0x606 [ 543.849322][ T5626] oom_kill_process.cold+0xd/0x330 [ 543.849339][ T5626] out_of_memory+0x340/0x14f0 [ 543.849366][ T5626] ? __pfx_out_of_memory+0x10/0x10 [ 543.849393][ T5626] mem_cgroup_out_of_memory+0xc6/0x130 [ 543.849411][ T5626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 543.849426][ T5626] ? find_held_lock+0x2b/0x80 [ 543.849453][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 543.849469][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 543.849488][ T5626] try_charge_memcg+0x6e5/0xdf0 [ 543.849513][ T5626] ? __pfx_try_charge_memcg+0x10/0x10 [ 543.849533][ T5626] ? find_held_lock+0x2b/0x80 [ 543.849549][ T5626] ? rcu_read_unlock+0x17/0x60 [ 543.849570][ T5626] ? rcu_read_unlock+0x17/0x60 [ 543.849591][ T5626] ? find_held_lock+0x2b/0x80 [ 543.849608][ T5626] ? rcu_read_unlock+0x17/0x60 [ 543.849633][ T5626] charge_memcg+0x187/0x1e0 [ 543.849661][ T5626] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 543.849678][ T5626] swap_cache_alloc_folio+0x548/0xc50 [ 543.849698][ T5626] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 543.849715][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 543.849731][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 543.849752][ T5626] swap_cache_read_folio+0x47/0x140 [ 543.849771][ T5626] swap_cluster_readahead+0x387/0x5f0 [ 543.849791][ T5626] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 543.849808][ T5626] ? debug_object_activate+0x343/0x4b0 [ 543.849833][ T5626] ? lock_acquire+0x1b9/0x370 [ 543.849858][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 543.849879][ T5626] ? get_vma_policy+0x23d/0x3b0 [ 543.849903][ T5626] swapin_readahead+0x159/0x1200 [ 543.849918][ T5626] ? lapic_next_event+0x10/0x20 [ 543.849942][ T5626] ? __pfx_swapin_readahead+0x10/0x10 [ 543.849965][ T5626] ? swap_table_get+0x10d/0x2c0 [ 543.849981][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 543.849997][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 543.850012][ T5626] ? __pfx_softleaf_type+0x10/0x10 [ 543.850032][ T5626] ? do_swap_page+0xf98/0x5780 [ 543.850045][ T5626] do_swap_page+0xf98/0x5780 [ 543.850068][ T5626] ? __pfx_do_swap_page+0x10/0x10 [ 543.850082][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 543.850104][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 543.850124][ T5626] ? rcu_is_watching+0x12/0xc0 [ 543.850144][ T5626] ? __pte_offset_map+0x179/0x310 [ 543.850165][ T5626] __handle_mm_fault+0x192f/0x2a00 [ 543.850184][ T5626] ? reacquire_held_locks+0xce/0x1e0 [ 543.850206][ T5626] ? __pfx___handle_mm_fault+0x10/0x10 [ 543.850224][ T5626] ? lock_vma_under_rcu+0x17c/0x590 [ 543.850250][ T5626] handle_mm_fault+0x37b/0xa30 [ 543.850268][ T5626] do_user_addr_fault+0x5a3/0x12f0 [ 543.850293][ T5626] exc_page_fault+0x6f/0xd0 [ 543.850311][ T5626] asm_exc_page_fault+0x26/0x30 [ 543.850326][ T5626] RIP: 0033:0x7efe81f5e84e [ 543.850338][ T5626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.850352][ T5626] RSP: 002b:00007ffdc2b049c8 EFLAGS: 00010246 [ 543.850364][ T5626] RAX: 0000000000000000 RBX: 000055558d095500 RCX: 00007efe81f5e84e [ 543.850373][ T5626] RDX: 00007ffdc2b04a20 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.850382][ T5626] RBP: 00007ffdc2b04a8c R08: 0000000000000000 R09: 0000000000000000 [ 543.850390][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 543.850399][ T5626] R13: 00000000000927c0 R14: 0000000000085332 R15: 00007ffdc2b04ae0 [ 543.850418][ T5626] [ 543.850433][ T5626] memory: usage 3072kB, limit 3072kB, failcnt 73485 [ 544.247475][T26264] ipvlan1: entered allmulticast mode [ 544.265643][T26264] veth0_vlan: entered allmulticast mode [ 544.287265][T26264] ipvlan1: left allmulticast mode [ 544.302282][T26264] veth0_vlan: left allmulticast mode [ 544.849958][ T5626] memory+swap: usage 3268kB, limit 9007199254740988kB, failcnt 0 [ 544.887508][ T5626] kmem: usage 3032kB, limit 9007199254740988kB, failcnt 0 [ 544.927907][ T5626] Memory cgroup stats for /syz1: [ 544.928011][ T5626] cache 24576 [ 544.963155][ T5626] rss 0 [ 544.980252][ T5626] rss_huge 0 [ 544.992843][ T5626] shmem 0 [ 545.007411][ T5626] mapped_file 4096 [ 545.023089][ T5626] dirty 0 [ 545.037551][ T5626] writeback 0 [ 545.053179][ T5626] workingset_refault_anon 5686 [ 545.081137][ T5626] workingset_refault_file 18509 [ 545.099814][ T5626] swap 200704 [ 545.115310][ T5626] swapcached 241836032 [ 545.134011][ T5626] pgpgin 222157 [ 545.153074][ T5626] pgpgout 226262 [ 545.166399][ T5626] pgfault 483942 [ 545.183322][ T5626] pgmajfault 2301 [ 545.199157][ T5626] inactive_anon 8192 [ 545.218410][ T5626] active_anon 0 [ 545.239777][ T5626] inactive_file 0 [ 545.259781][ T5626] active_file 0 [ 545.274596][ T5626] unevictable 24576 [ 545.292053][ T5626] hierarchical_memory_limit 3145728 [ 545.317654][ T5626] hierarchical_memsw_limit 9223372036854771712 [ 545.362176][ T5626] total_cache 24576 [ 545.369338][ T5626] total_rss 0 [ 545.385198][ T5626] total_rss_huge 0 [ 545.414358][ T5626] total_shmem 0 [ 545.430069][ T5626] total_mapped_file 4096 [ 545.456469][ T5626] total_dirty 0 [ 545.470955][ T5626] total_writeback 0 [ 545.485054][ T5626] total_workingset_refault_anon 5686 [ 545.512165][ T5626] total_workingset_refault_file 18509 [ 545.537751][ T5626] total_swap 200704 [ 545.555003][ T5626] total_swapcached 241836032 [ 545.580877][ T5626] total_pgpgin 222157 [ 545.599316][ T5626] total_pgpgout 226262 [ 545.615420][ T5626] total_pgfault 483942 [ 545.638289][ T5626] total_pgmajfault 2301 [ 545.667011][ T5626] total_inactive_anon 8192 [ 545.677077][ T5626] total_active_anon 0 [ 545.699105][ T5626] total_inactive_file 0 [ 545.722695][ T5626] total_active_file 0 [ 545.727681][ T5626] total_unevictable 24576 [ 545.744202][ T5626] anon_cost 1 [ 545.769176][ T5626] file_cost 0 [ 545.776355][ T5626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9493,pid=26245,uid=0 [ 545.843468][ T5626] Memory cgroup out of memory: Killed process 26245 (syz.1.9493) total-vm:104432kB, anon-rss:1252kB, file-rss:21008kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 546.146755][T26342] FAULT_INJECTION: forcing a failure. [ 546.146755][T26342] name failslab, interval 1, probability 0, space 0, times 0 [ 546.199162][T26342] CPU: 0 UID: 0 PID: 26342 Comm: syz.0.9527 Tainted: G U L syzkaller #0 PREEMPT(full) [ 546.199191][T26342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 546.199197][T26342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.199206][T26342] Call Trace: [ 546.199211][T26342] [ 546.199217][T26342] dump_stack_lvl+0x100/0x190 [ 546.199249][T26342] should_fail_ex.cold+0x5/0xa [ 546.199272][T26342] should_failslab+0xc2/0x120 [ 546.199294][T26342] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 546.199318][T26342] ? __d_alloc+0x35/0xa50 [ 546.199344][T26342] __d_alloc+0x35/0xa50 [ 546.199362][T26342] d_alloc_pseudo+0x1c/0xc0 [ 546.199384][T26342] alloc_file_pseudo+0x118/0x290 [ 546.199409][T26342] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 546.199428][T26342] ? hugetlbfs_get_inode+0x3f5/0x700 [ 546.199546][T26342] hugetlb_file_setup+0x2a8/0x5b0 [ 546.199567][T26342] ksys_mmap_pgoff+0x242/0x610 [ 546.199589][T26342] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 546.199612][T26342] ? xfd_validate_state+0x129/0x190 [ 546.199632][T26342] __x64_sys_mmap+0x125/0x190 [ 546.199651][T26342] do_syscall_64+0x115/0x840 [ 546.199670][T26342] ? clear_bhb_loop+0x40/0x90 [ 546.199689][T26342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.199704][T26342] RIP: 0033:0x7f504879e019 [ 546.199718][T26342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.199732][T26342] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 546.199746][T26342] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 546.199756][T26342] RDX: 000000000000000b RSI: 0000000000004005 RDI: 0000000000000000 [ 546.199765][T26342] RBP: 00007f504883500c R08: 0000000000000401 R09: 0000300000000000 [ 546.199774][T26342] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 546.199783][T26342] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 546.199801][T26342] [ 546.438910][T26347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9529'. [ 549.782191][T26506] FAULT_INJECTION: forcing a failure. [ 549.782191][T26506] name failslab, interval 1, probability 0, space 0, times 0 [ 549.887773][T26506] CPU: 0 UID: 0 PID: 26506 Comm: syz.0.9574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 549.887801][T26506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 549.887807][T26506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.887816][T26506] Call Trace: [ 549.887822][T26506] [ 549.887827][T26506] dump_stack_lvl+0x100/0x190 [ 549.887849][T26506] should_fail_ex.cold+0x5/0xa [ 549.887868][T26506] should_failslab+0xc2/0x120 [ 549.887889][T26506] kmem_cache_alloc_noprof+0x91/0x6a0 [ 549.887907][T26506] ? security_inode_alloc+0x3b/0x2c0 [ 549.887925][T26506] ? sk_prot_alloc+0x60/0x2a0 [ 549.887944][T26506] sk_prot_alloc+0x60/0x2a0 [ 549.887961][T26506] sk_alloc+0x36/0xe80 [ 549.887981][T26506] smc_create+0x11a/0x290 [ 549.888085][T26506] __sock_create+0x339/0x860 [ 549.888105][T26506] __sys_socket+0x14d/0x260 [ 549.888122][T26506] ? __pfx___sys_socket+0x10/0x10 [ 549.888145][T26506] __x64_sys_socket+0x72/0xb0 [ 549.888161][T26506] ? lockdep_hardirqs_on+0x78/0x100 [ 549.888181][T26506] do_syscall_64+0x115/0x840 [ 549.888199][T26506] ? clear_bhb_loop+0x40/0x90 [ 549.888216][T26506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.888231][T26506] RIP: 0033:0x7f504879e019 [ 549.888245][T26506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.888259][T26506] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 549.888274][T26506] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 549.888284][T26506] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 549.888292][T26506] RBP: 00007f504883500c R08: 0000000000000000 R09: 0000000000000000 [ 549.888301][T26506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.888309][T26506] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 549.888328][T26506] [ 550.291792][T26517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9579'. [ 551.627780][T26583] FAULT_INJECTION: forcing a failure. [ 551.627780][T26583] name failslab, interval 1, probability 0, space 0, times 0 [ 551.712680][T26583] CPU: 0 UID: 0 PID: 26583 Comm: syz.0.9592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 551.712709][T26583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 551.712718][T26583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.712730][T26583] Call Trace: [ 551.712735][T26583] [ 551.712742][T26583] dump_stack_lvl+0x100/0x190 [ 551.712764][T26583] should_fail_ex.cold+0x5/0xa [ 551.712782][T26583] should_failslab+0xc2/0x120 [ 551.712802][T26583] kmem_cache_alloc_noprof+0x91/0x6a0 [ 551.712820][T26583] ? __pfx_map_id_range_down+0x10/0x10 [ 551.712852][T26583] ? security_inode_alloc+0x3b/0x2c0 [ 551.712874][T26583] security_inode_alloc+0x3b/0x2c0 [ 551.712892][T26583] inode_init_always_gfp+0xc77/0xfb0 [ 551.712911][T26583] alloc_inode+0x8e/0x250 [ 551.712931][T26583] sock_alloc+0x44/0x280 [ 551.713024][T26583] ? security_socket_create+0x7f/0x250 [ 551.713042][T26583] __sock_create+0xc2/0x860 [ 551.713061][T26583] smc_create_clcsk+0x37/0xd0 [ 551.713080][T26583] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 551.713155][T26583] inet6_create+0xb1a/0x12b0 [ 551.713206][T26583] ? inet6_create+0x7f/0x12b0 [ 551.713225][T26583] __sock_create+0x339/0x860 [ 551.713244][T26583] __sys_socket+0x14d/0x260 [ 551.713261][T26583] ? __pfx___sys_socket+0x10/0x10 [ 551.713282][T26583] __x64_sys_socket+0x72/0xb0 [ 551.713297][T26583] ? lockdep_hardirqs_on+0x78/0x100 [ 551.713316][T26583] do_syscall_64+0x115/0x840 [ 551.713334][T26583] ? clear_bhb_loop+0x40/0x90 [ 551.713351][T26583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.713366][T26583] RIP: 0033:0x7f504879e019 [ 551.713380][T26583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.713394][T26583] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 551.713410][T26583] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 551.713420][T26583] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 551.713428][T26583] RBP: 00007f504883500c R08: 0000000000000000 R09: 0000000000000000 [ 551.713437][T26583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.713446][T26583] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 551.713467][T26583] [ 551.713499][T26583] socket: no more sockets [ 552.995640][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9603'. [ 553.571336][T26636] sock: sock_timestamping_bind_phc: sock not bind to device [ 554.141857][T26603] kexec: Could not allocate control_code_buffer [ 554.777317][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9626'. [ 557.857611][T26819] sctp: [Deprecated]: syz.2.9666 (pid 26819) Use of int in max_burst socket option. [ 557.857611][T26819] Use struct sctp_assoc_value instead [ 558.976101][T26862] nbd: socks must be embedded in a SOCK_ITEM attr [ 560.692826][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.701726][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.868765][T15865] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 560.868911][T15865] Bluetooth: hci3: unexpected event for opcode 0x647c [ 561.316000][T27014] FAULT_INJECTION: forcing a failure. [ 561.316000][T27014] name fail_futex, interval 1, probability 0, space 0, times 1 [ 561.329174][T27014] CPU: 0 UID: 0 PID: 27014 Comm: syz.1.9710 Tainted: G U L syzkaller #0 PREEMPT(full) [ 561.329201][T27014] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 561.329206][T27014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.329215][T27014] Call Trace: [ 561.329220][T27014] [ 561.329225][T27014] dump_stack_lvl+0x100/0x190 [ 561.329247][T27014] should_fail_ex.cold+0x5/0xa [ 561.329265][T27014] should_fail_futex+0x4c/0x60 [ 561.329281][T27014] futex_lock_pi_atomic+0xe7/0xaf0 [ 561.329304][T27014] futex_lock_pi+0x278/0x7f0 [ 561.329326][T27014] ? __pfx_futex_lock_pi+0x10/0x10 [ 561.329345][T27014] ? __pfx___futex_wait+0x10/0x10 [ 561.329362][T27014] ? __pfx_try_to_wake_up+0x10/0x10 [ 561.329393][T27014] ? __pfx_futex_wake_mark+0x10/0x10 [ 561.329416][T27014] ? rcu_read_lock_any_held+0x6a/0xa0 [ 561.329435][T27014] ? find_held_lock+0x2b/0x80 [ 561.329451][T27014] ? ksys_write+0x190/0x250 [ 561.329468][T27014] do_futex+0x371/0x440 [ 561.329484][T27014] ? __pfx_do_futex+0x10/0x10 [ 561.329500][T27014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.329524][T27014] __x64_sys_futex+0x34f/0x4d0 [ 561.329542][T27014] ? __pfx___x64_sys_futex+0x10/0x10 [ 561.329565][T27014] do_syscall_64+0x115/0x840 [ 561.329582][T27014] ? clear_bhb_loop+0x40/0x90 [ 561.329599][T27014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.329614][T27014] RIP: 0033:0x7efe81f9e019 [ 561.329628][T27014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.329641][T27014] RSP: 002b:00007efe82dd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.329656][T27014] RAX: ffffffffffffffda RBX: 00007efe82225fa0 RCX: 00007efe81f9e019 [ 561.329670][T27014] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 561.329722][T27014] RBP: 00007efe8203500c R08: 0000000000000000 R09: 000000008000fff5 [ 561.329731][T27014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.329740][T27014] R13: 00007efe82226038 R14: 00007efe82225fa0 R15: 00007ffdc2b046e8 [ 561.329760][T27014] [ 562.133136][T27034] netlink: 82 bytes leftover after parsing attributes in process `syz.4.9719'. [ 562.605732][T27046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9724'. [ 562.693952][T27044] NFSD: Failed to start, no listeners configured. [ 564.301862][T27162] netlink: 21 bytes leftover after parsing attributes in process `syz.0.9747'. [ 564.554453][T27153] NFSD: Failed to start, no listeners configured. [ 564.752961][T27185] FAULT_INJECTION: forcing a failure. [ 564.752961][T27185] name failslab, interval 1, probability 0, space 0, times 0 [ 564.822563][T27185] CPU: 0 UID: 0 PID: 27185 Comm: syz.2.9755 Tainted: G U L syzkaller #0 PREEMPT(full) [ 564.822591][T27185] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 564.822597][T27185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.822607][T27185] Call Trace: [ 564.822613][T27185] [ 564.822619][T27185] dump_stack_lvl+0x100/0x190 [ 564.822641][T27185] should_fail_ex.cold+0x5/0xa [ 564.822658][T27185] should_failslab+0xc2/0x120 [ 564.822731][T27185] __kmalloc_noprof+0xfc/0x820 [ 564.822751][T27185] ? trace_kmem_cache_alloc+0xdd/0x100 [ 564.822772][T27185] ? lsm_blob_alloc+0x68/0x90 [ 564.822789][T27185] lsm_blob_alloc+0x68/0x90 [ 564.822803][T27185] security_prepare_creds+0x2d/0x290 [ 564.822825][T27185] prepare_creds+0x5d6/0x950 [ 564.822848][T27185] __sys_setregid+0x109/0x910 [ 564.822865][T27185] do_syscall_64+0x115/0x840 [ 564.822884][T27185] ? clear_bhb_loop+0x40/0x90 [ 564.822901][T27185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.822915][T27185] RIP: 0033:0x7f5f3519e019 [ 564.822929][T27185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.822943][T27185] RSP: 002b:00007f5f360e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 564.822958][T27185] RAX: ffffffffffffffda RBX: 00007f5f35425fa0 RCX: 00007f5f3519e019 [ 564.822968][T27185] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 564.822976][T27185] RBP: 00007f5f3523500c R08: 0000000000000000 R09: 0000000000000000 [ 564.822985][T27185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.822993][T27185] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 564.823013][T27185] [ 565.082450][T27188] netlink: 'syz.1.9756': attribute type 2 has an invalid length. [ 565.228175][T15865] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 565.228203][T15865] Bluetooth: hci0: unexpected event for opcode 0x647c [ 565.259086][T27198] bridge0: port 3(team0) entered blocking state [ 565.288856][T27198] bridge0: port 3(team0) entered disabled state [ 565.310261][T27198] team0: entered allmulticast mode [ 565.334163][T27198] team_slave_0: entered allmulticast mode [ 565.355837][T27198] team_slave_1: entered allmulticast mode [ 565.385676][T27198] team0: entered promiscuous mode [ 565.402731][T27198] team_slave_0: entered promiscuous mode [ 565.432687][T27198] team_slave_1: entered promiscuous mode [ 565.449911][T27198] bridge0: port 3(team0) entered blocking state [ 565.458792][T27198] bridge0: port 3(team0) entered forwarding state [ 566.479653][T27248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9784'. [ 567.037441][T27271] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 567.610592][T27296] netlink: 'syz.0.9805': attribute type 2 has an invalid length. [ 568.196409][T27318] NFSD: Failed to start, no listeners configured. [ 568.728395][T27358] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17036] was attempted by "{LEOkfz7]JFrf3!k\x22Jܧ_Bc%MfEYkvslvPO ,.\x1b0(9B4_0ILR\x1b\x0a6<]95\x07ڼʄy:JJf'L\x0b -9e|Lt+TiŹ[\x1b\x0aʄio{`\x0c>E9}T!bFHvECİ4\x0b\x5c{kI%_\x5c/SERYgAv!n\x0de 7F\x09x|vq@ᕠ' ٳt䨏%@-ՠ1Zo`UQ <Zx3,YW:BC\x0c픔^ʁ:d o3}i{\x09E_2Ґ^xB̧+EV'=Gccyn\x07&y])l.D\x22\x5cy83;WH]:v\x0bzL*8k;Q‘\x0cRQxEM㥒S)T䀹̑(Ċ7νc;':*pzjd!@IOĹRQ [ 568.976650][T27370] Device name cannot be null; rc = [-22] [ 570.843672][T27447] FAULT_INJECTION: forcing a failure. [ 570.843672][T27447] name failslab, interval 1, probability 0, space 0, times 0 [ 570.909913][T27447] CPU: 0 UID: 0 PID: 27447 Comm: syz.2.9866 Tainted: G U L syzkaller #0 PREEMPT(full) [ 570.909940][T27447] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 570.909946][T27447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.909955][T27447] Call Trace: [ 570.909961][T27447] [ 570.909968][T27447] dump_stack_lvl+0x100/0x190 [ 570.909990][T27447] should_fail_ex.cold+0x5/0xa [ 570.910007][T27447] should_failslab+0xc2/0x120 [ 570.910029][T27447] kmem_cache_alloc_noprof+0x91/0x6a0 [ 570.910049][T27447] ? mas_preallocate+0x1105/0x14a0 [ 570.910150][T27447] mas_preallocate+0x1105/0x14a0 [ 570.910170][T27447] ? __pfx_mas_preallocate+0x10/0x10 [ 570.910191][T27447] ? anon_vma_name+0x5a/0x250 [ 570.910216][T27447] __split_vma+0x33d/0xda0 [ 570.910233][T27447] ? __pfx___split_vma+0x10/0x10 [ 570.910246][T27447] ? vma_link+0x5ee/0x8d0 [ 570.910271][T27447] vms_gather_munmap_vmas+0x1d2/0x1720 [ 570.910291][T27447] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 570.910307][T27447] ? alloc_new_pud+0x217/0x320 [ 570.910321][T27447] ? get_old_pud+0xd8/0x360 [ 570.910336][T27447] ? move_page_tables+0x11c/0x4610 [ 570.910353][T27447] ? __pfx_copy_vma+0x10/0x10 [ 570.910375][T27447] do_vmi_align_munmap+0x287/0x5f0 [ 570.910393][T27447] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 570.910435][T27447] do_vmi_munmap+0x1f8/0x3e0 [ 570.910453][T27447] move_vma+0xe5b/0x1920 [ 570.910472][T27447] ? __pfx_move_vma+0x10/0x10 [ 570.910489][T27447] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 570.910516][T27447] ? vrm_set_new_addr+0x204/0x290 [ 570.910533][T27447] mremap_to+0x234/0x4c0 [ 570.910547][T27447] ? mas_walk+0x6ef/0x9b0 [ 570.910565][T27447] ? __pfx_mremap_to+0x10/0x10 [ 570.910580][T27447] ? check_prep_vma+0x912/0xe60 [ 570.910599][T27447] __do_sys_mremap+0x88c/0x1850 [ 570.910620][T27447] ? __pfx___do_sys_mremap+0x10/0x10 [ 570.910635][T27447] ? ksys_write+0x190/0x250 [ 570.910653][T27447] ? __pfx_do_futex+0x10/0x10 [ 570.910675][T27447] ? __x64_sys_futex+0x34f/0x4d0 [ 570.910702][T27447] do_syscall_64+0x115/0x840 [ 570.910721][T27447] ? clear_bhb_loop+0x40/0x90 [ 570.910739][T27447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.910754][T27447] RIP: 0033:0x7f5f3519e019 [ 570.910768][T27447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.910782][T27447] RSP: 002b:00007f5f360e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 570.910796][T27447] RAX: ffffffffffffffda RBX: 00007f5f35425fa0 RCX: 00007f5f3519e019 [ 570.910806][T27447] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 570.910816][T27447] RBP: 00007f5f3523500c R08: 0000000100000000 R09: 0000000000000000 [ 570.910825][T27447] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 570.910834][T27447] R13: 00007f5f35426038 R14: 00007f5f35425fa0 R15: 00007fffe4c74428 [ 570.910854][T27447] [ 572.021743][T27486] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20401] was attempted by "_X)إth;wn\x0bT|Q{\x09MǾUC\x07`i/\x0b\x07o+G@5\x09!Nز4Yӌ4ؔ,@ \x0bs~ιR)s]a_y##-!8W+0r\x5c8cw䱧W;4mv/qg*\x09Dt\x1b͊qo/\x5c\x0d쳹rx/T,Dy֜l00BtƮ\x22%ݵ1$(!\x0dC\x0abB\x09@ѾjQP_֡>L.֧#\x1bCL\x07b\x0dF+S6|ƺB]s=BL]@3F{~,uxt6ݎX*=Һg pab\x0cwc.ű\x09۰UyXNmC;OUpx`Jϊe/VY律LIO'?ʐBcPR]9ЮK\x5cH~j[3#ZeZO\x0cZW'jh\x0a [\x07I\x09E`]Ɵ(5R}eUV>Xex0 16E)],H\x0dD{Cu#&5;!ӓ MOBͶ.o]\x0c0K{&Ch| vKySvlmG,JCa;GJ5\x0c@\x226\x5c*;\x5cz1[}'n\x22WI;zhtd䗇6u8WG)z̰\x1bl+εF$lc㲼d##GS\x1bC{zNpވm\x0ac8\x0b [ 573.707020][T27542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.913314][T27557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9914'. [ 574.108266][T27542] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 574.335116][T27542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 574.355272][T27542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 574.388034][T27542] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 574.418003][T27542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 574.451126][T27542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 574.479455][T27542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.503332][T27542] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 574.819175][T27595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9930'. [ 575.408896][T27618] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9940'. [ 575.649402][T15865] Bluetooth: hci2: command 0x0406 tx timeout [ 576.365622][T15865] Bluetooth: hci0: command 0x0406 tx timeout [ 576.446073][T15865] Bluetooth: hci3: command 0x0406 tx timeout [ 576.524692][T15865] Bluetooth: hci1: command 0x2016 tx timeout [ 577.069752][T27660] bridge0: port 4(veth0_to_bridge) entered blocking state [ 577.104576][T27660] bridge0: port 4(veth0_to_bridge) entered disabled state [ 577.125892][T27660] veth0_to_bridge: entered allmulticast mode [ 577.155034][T27660] veth0_to_bridge: entered promiscuous mode [ 577.175438][T27660] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.225398][T27660] bridge0: port 4(veth0_to_bridge) entered blocking state [ 577.232661][T27660] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 577.719156][T15865] Bluetooth: hci2: command 0x0406 tx timeout [ 578.353202][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9983'. [ 578.399651][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9983'. [ 578.434738][T15865] Bluetooth: hci0: command 0x0406 tx timeout [ 578.514653][T15865] Bluetooth: hci3: command 0x0406 tx timeout [ 578.594440][T15865] Bluetooth: hci1: command 0x2016 tx timeout [ 578.707673][T27726] FAULT_INJECTION: forcing a failure. [ 578.707673][T27726] name failslab, interval 1, probability 0, space 0, times 0 [ 578.762632][T27726] CPU: 0 UID: 0 PID: 27726 Comm: syz.0.9987 Tainted: G U L syzkaller #0 PREEMPT(full) [ 578.762660][T27726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 578.762666][T27726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.762674][T27726] Call Trace: [ 578.762680][T27726] [ 578.762685][T27726] dump_stack_lvl+0x100/0x190 [ 578.762708][T27726] should_fail_ex.cold+0x5/0xa [ 578.762726][T27726] should_failslab+0xc2/0x120 [ 578.762747][T27726] __kmalloc_noprof+0xfc/0x820 [ 578.762765][T27726] ? __lock_acquire+0x49f/0x1a40 [ 578.762788][T27726] ? sk_prot_alloc+0x10b/0x2a0 [ 578.762808][T27726] sk_prot_alloc+0x10b/0x2a0 [ 578.762823][T27726] sk_alloc+0x36/0xe80 [ 578.762843][T27726] pptp_create+0x32/0x340 [ 578.762975][T27726] pppox_create+0x15c/0x2c0 [ 578.762991][T27726] __sock_create+0x339/0x860 [ 578.763011][T27726] __sys_socket+0x14d/0x260 [ 578.763028][T27726] ? __pfx___sys_socket+0x10/0x10 [ 578.763049][T27726] __x64_sys_socket+0x72/0xb0 [ 578.763064][T27726] ? lockdep_hardirqs_on+0x78/0x100 [ 578.763085][T27726] do_syscall_64+0x115/0x840 [ 578.763110][T27726] ? clear_bhb_loop+0x40/0x90 [ 578.763128][T27726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.763144][T27726] RIP: 0033:0x7f504879e019 [ 578.763157][T27726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.763171][T27726] RSP: 002b:00007f5049583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 578.763186][T27726] RAX: ffffffffffffffda RBX: 00007f5048a25fa0 RCX: 00007f504879e019 [ 578.763196][T27726] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 0000000000000018 [ 578.763204][T27726] RBP: 00007f504883500c R08: 0000000000000000 R09: 0000000000000000 [ 578.763213][T27726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.763222][T27726] R13: 00007f5048a26038 R14: 00007f5048a25fa0 R15: 00007ffd3fc90518 [ 578.763241][T27726] [ 579.510234][T27752] futex_wake_op: syz.2.9999 tries to shift op by -2048; fix this program [ 579.551899][T27752] futex_wake_op: syz.2.9999 tries to shift op by -2048; fix this program [ 579.788238][T15865] Bluetooth: hci2: command 0x0406 tx timeout [ 579.855049][T27762] NFSD: Failed to start, no listeners configured. [ 580.900133][T27812] sctp: [Deprecated]: syz.4.10024 (pid 27812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.900133][T27812] Use struct sctp_sack_info instead [ 581.574477][T27841] netlink: 346 bytes leftover after parsing attributes in process `syz.4.10037'. [ 581.625596][T27843] bridge0: port 5(batadv0) entered blocking state [ 581.654024][T27843] bridge0: port 5(batadv0) entered disabled state [ 581.707413][T27843] batadv0: entered allmulticast mode [ 581.743750][T27843] batadv0: entered promiscuous mode [ 581.767956][T27843] bridge0: port 5(batadv0) entered blocking state [ 581.774485][T27843] bridge0: port 5(batadv0) entered forwarding state [ 581.804018][ T29] audit: type=1800 audit(4294967505.087:43): pid=27848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10040" name=04 dev="tmpfs" ino=6036 res=0 errno=0 [ 582.096455][T12028] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 582.107506][T12028] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 582.390927][ T5626] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 582.467726][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.467794][ T5626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.467799][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.467808][ T5626] Call Trace: [ 582.467813][ T5626] [ 582.467819][ T5626] dump_stack_lvl+0x100/0x190 [ 582.467842][ T5626] dump_header+0xfb/0x606 [ 582.467859][ T5626] oom_kill_process.cold+0xd/0x330 [ 582.467876][ T5626] out_of_memory+0x340/0x14f0 [ 582.467904][ T5626] ? __pfx_out_of_memory+0x10/0x10 [ 582.467931][ T5626] mem_cgroup_out_of_memory+0xc6/0x130 [ 582.467949][ T5626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 582.467964][ T5626] ? find_held_lock+0x2b/0x80 [ 582.467986][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.468002][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 582.468021][ T5626] try_charge_memcg+0x6e5/0xdf0 [ 582.468045][ T5626] ? __pfx_try_charge_memcg+0x10/0x10 [ 582.468065][ T5626] ? find_held_lock+0x2b/0x80 [ 582.468081][ T5626] ? rcu_read_unlock+0x17/0x60 [ 582.468104][ T5626] ? rcu_read_unlock+0x17/0x60 [ 582.468125][ T5626] ? find_held_lock+0x2b/0x80 [ 582.468143][ T5626] ? rcu_read_unlock+0x17/0x60 [ 582.468167][ T5626] charge_memcg+0x187/0x1e0 [ 582.468189][ T5626] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 582.468206][ T5626] swap_cache_alloc_folio+0x548/0xc50 [ 582.468227][ T5626] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 582.468244][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 582.468259][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 582.468275][ T5626] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 582.468296][ T5626] swap_cache_read_folio+0x47/0x140 [ 582.468314][ T5626] swap_cluster_readahead+0x387/0x5f0 [ 582.468335][ T5626] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 582.468361][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 582.468382][ T5626] ? get_vma_policy+0x23d/0x3b0 [ 582.468406][ T5626] swapin_readahead+0x159/0x1200 [ 582.468421][ T5626] ? debug_object_assert_init+0x1c4/0x310 [ 582.468450][ T5626] ? __pfx_swapin_readahead+0x10/0x10 [ 582.468471][ T5626] ? swap_table_get+0x10d/0x2c0 [ 582.468486][ T5626] ? swap_cache_get_folio+0x28d/0x360 [ 582.468502][ T5626] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 582.468518][ T5626] ? __pfx_softleaf_type+0x10/0x10 [ 582.468537][ T5626] ? do_swap_page+0xf98/0x5780 [ 582.468550][ T5626] do_swap_page+0xf98/0x5780 [ 582.468573][ T5626] ? __pfx_do_swap_page+0x10/0x10 [ 582.468587][ T5626] ? __lock_acquire+0x49f/0x1a40 [ 582.468609][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 582.468629][ T5626] ? rcu_is_watching+0x12/0xc0 [ 582.468646][ T5626] ? __pte_offset_map+0x179/0x310 [ 582.468667][ T5626] __handle_mm_fault+0x192f/0x2a00 [ 582.468686][ T5626] ? reacquire_held_locks+0xce/0x1e0 [ 582.468708][ T5626] ? __pfx___handle_mm_fault+0x10/0x10 [ 582.468726][ T5626] ? lock_vma_under_rcu+0x17c/0x590 [ 582.468756][ T5626] handle_mm_fault+0x37b/0xa30 [ 582.468774][ T5626] do_user_addr_fault+0x5a3/0x12f0 [ 582.468800][ T5626] exc_page_fault+0x6f/0xd0 [ 582.468818][ T5626] asm_exc_page_fault+0x26/0x30 [ 582.468832][ T5626] RIP: 0033:0x7efe81f5e84e [ 582.468845][ T5626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.468859][ T5626] RSP: 002b:00007ffdc2b049c8 EFLAGS: 00010246 [ 582.468871][ T5626] RAX: 0000000000000000 RBX: 000055558d095500 RCX: 00007efe81f5e84e [ 582.468880][ T5626] RDX: 00007ffdc2b04a20 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.468889][ T5626] RBP: 00007ffdc2b04a8c R08: 0000000000000000 R09: 0000000000000000 [ 582.468897][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 582.468906][ T5626] R13: 00000000000927c0 R14: 000000000008eafd R15: 00007ffdc2b04ae0 [ 582.468924][ T5626] [ 582.471516][ T5626] memory: usage 3072kB, limit 3072kB, failcnt 80406 [ 583.236113][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10061'. [ 583.513952][ T5626] memory+swap: usage 3248kB, limit 9007199254740988kB, failcnt 0 [ 583.557158][ T5626] kmem: usage 3020kB, limit 9007199254740988kB, failcnt 0 [ 583.596121][ T5626] Memory cgroup stats for /syz1: [ 583.596261][ T5626] cache 24576 [ 583.637356][ T5626] rss 20480 [ 583.669117][ T5626] rss_huge 0 [ 583.688974][ T5626] shmem 0 [ 583.706803][ T5626] mapped_file 4096 [ 583.741855][ T5626] dirty 0 [ 583.758357][ T5626] writeback 0 [ 583.775964][ T5626] workingset_refault_anon 7481 [ 583.796206][ T5626] workingset_refault_file 18539 [ 583.828172][ T5626] swap 180224 [ 583.842972][ T5626] swapcached 287002624 [ 583.871112][ T5626] pgpgin 238661 [ 583.895113][ T5626] pgpgout 244541 [ 583.912293][ T5626] pgfault 517632 [ 583.940464][ T5626] pgmajfault 2850 [ 583.957152][ T5626] inactive_anon 28672 [ 583.983133][ T5626] active_anon 0 [ 584.009092][ T5626] inactive_file 0 [ 584.032642][ T5626] active_file 0 [ 584.049650][ T5626] unevictable 24576 [ 584.068398][ T5626] hierarchical_memory_limit 3145728 [ 584.091212][ T5626] hierarchical_memsw_limit 9223372036854771712 [ 584.134532][ T5626] total_cache 24576 [ 584.154293][ T5626] total_rss 20480 [ 584.173420][ T5626] total_rss_huge 0 [ 584.193547][ T5626] total_shmem 0 [ 584.228812][ T5626] total_mapped_file 4096 [ 584.252373][ T5626] total_dirty 0 [ 584.271722][ T5626] total_writeback 0 [ 584.289916][ T5626] total_workingset_refault_anon 7481 [ 584.319317][ T5626] total_workingset_refault_file 18539 [ 584.351226][ T5626] total_swap 180224 [ 584.382774][ T5626] total_swapcached 287002624 [ 584.408171][ T5626] total_pgpgin 238661 [ 584.430676][ T5626] total_pgpgout 244541 [ 584.441625][T27941] zswap: compressor not available [ 584.464440][ T5626] total_pgfault 517632 [ 584.494451][ T5626] total_pgmajfault 2850 [ 584.516239][ T5626] total_inactive_anon 28672 [ 584.531659][T27950] netlink: 13 bytes leftover after parsing attributes in process `syz.4.10083'. [ 584.543012][ T5626] total_active_anon 0 [ 584.560774][ T5626] total_inactive_file 0 [ 584.571121][ T5626] total_active_file 0 [ 584.586506][ T5626] total_unevictable 24576 [ 584.603892][ T5626] anon_cost 34 [ 584.624060][ T5626] file_cost 0 [ 584.641436][ T5626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10043,pid=27853,uid=0 [ 584.702636][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10086'. [ 584.718528][ T5626] Memory cgroup out of memory: Killed process 27853 (syz.1.10043) total-vm:106480kB, anon-rss:1272kB, file-rss:21032kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 585.158048][T27975] ovs_: entered promiscuous mode [ 585.295414][T27985] bridge_slave_0: left allmulticast mode [ 585.323896][T27985] bridge_slave_0: left promiscuous mode [ 585.343530][T27985] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.377741][T27988] bridge0: port 3(syz_tun) entered blocking state [ 585.398012][T27988] bridge0: port 3(syz_tun) entered disabled state [ 585.424833][T27988] syz_tun: entered allmulticast mode [ 585.460997][T27988] syz_tun: entered promiscuous mode [ 647.282703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.295190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.309230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.321763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.335521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.347976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.361748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.374186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.388013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.400514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.261826][ C0] net_ratelimit: 4842 callbacks suppressed [ 652.261842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.280084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.293758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.306134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.320020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.332474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.346260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.358673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.373432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.385825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.245060][ C0] net_ratelimit: 6083 callbacks suppressed [ 657.245078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.264285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 657.277229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.289721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.303096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 657.316004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.328451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.341834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 657.354761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.367146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.229249][ C0] net_ratelimit: 4510 callbacks suppressed [ 662.229268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.247583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.260923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 662.274631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.287051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.300622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 662.314345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.326766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.340149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 662.353872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.711340][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.213723][ C0] net_ratelimit: 5300 callbacks suppressed [ 667.213740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.232218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.245674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 667.259045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.272345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.284748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.298086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 667.311102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.324334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.336724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.197900][ C0] net_ratelimit: 5362 callbacks suppressed [ 672.197918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.216207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.230622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 672.243496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.256733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.269242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.282626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 672.295559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.308832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.321383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.181445][ C0] net_ratelimit: 5356 callbacks suppressed [ 677.181462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 677.200319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.213651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.226117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.239565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 677.252422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.265667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.278196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.292447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 677.305302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.165388][ C0] net_ratelimit: 5382 callbacks suppressed [ 682.165407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 682.184132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.197403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.209998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.223423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 682.236355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.249702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.262123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.275521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 682.288452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.150049][ C0] net_ratelimit: 4543 callbacks suppressed [ 687.150075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.170131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.182545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.196014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 687.209055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.223248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.235701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.249151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 687.262057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.276106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.994511][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 690.001913][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27972/1:b..l [ 690.010547][ C0] rcu: (detected by 0, t=10502 jiffies, g=179629, q=1034 ncpus=1) [ 690.018426][ C0] task:syz.4.10094 state:R running task stack:25832 pid:27972 tgid:27971 ppid:17036 task_flags:0x400140 flags:0x00080000 [ 690.033157][ C0] Call Trace: [ 690.036461][ C0] [ 690.039385][ C0] __schedule+0x125c/0x6730 [ 690.043891][ C0] ? __up_read+0x333/0x980 [ 690.048323][ C0] ? __pfx___up_read+0x10/0x10 [ 690.053168][ C0] ? fault_dirty_shared_page+0x496/0x5a0 [ 690.058785][ C0] ? inode_to_bdi+0x9e/0x160 [ 690.063370][ C0] ? fault_dirty_shared_page+0x496/0x5a0 [ 690.068988][ C0] ? __pfx___schedule+0x10/0x10 [ 690.073821][ C0] ? mark_held_locks+0x40/0x70 [ 690.078595][ C0] preempt_schedule_irq+0x50/0x90 [ 690.083605][ C0] irqentry_exit+0x205/0xa00 [ 690.088205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.094189][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 690.099484][ C0] Code: ff 65 0f c1 05 e3 f2 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed ab 7e 12 0f 85 4d 01 00 00 48 83 c4 [ 690.119113][ C0] RSP: 0018:ffffc90006257940 EFLAGS: 00000206 [ 690.125180][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8000 RCX: ffffc9000625794c [ 690.133144][ C0] RDX: 0000000000000001 RSI: ffffffff8e183b9b RDI: ffffffff8c400a80 [ 690.141106][ C0] RBP: ffffffff8bb06991 R08: 0000000000000001 R09: 0000000000000000 [ 690.149062][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026ae0000 [ 690.157111][ C0] R13: 000000000000000f R14: 0000000000000202 R15: 0000000000000002 [ 690.165085][ C0] ? mtree_load+0x311/0xa90 [ 690.169862][ C0] mtree_load+0x316/0xa90 [ 690.174275][ C0] ? __pfx_mtree_load+0x10/0x10 [ 690.179143][ C0] ? __pfx___might_resched+0x10/0x10 [ 690.184446][ C0] __get_user_pages+0x875/0x32a0 [ 690.189433][ C0] ? down_read_killable+0x35e/0x520 [ 690.194627][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 690.200080][ C0] faultin_page_range+0x1f1/0x9e0 [ 690.205128][ C0] madvise_do_behavior+0x354/0x510 [ 690.210237][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 690.215873][ C0] ? __pfx_futex_wait+0x10/0x10 [ 690.220739][ C0] do_madvise+0x238/0x290 [ 690.225058][ C0] ? __pfx_do_madvise+0x10/0x10 [ 690.229929][ C0] ? do_futex+0x190/0x440 [ 690.234258][ C0] __x64_sys_madvise+0xa9/0x110 [ 690.239119][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 690.244310][ C0] do_syscall_64+0x115/0x840 [ 690.248917][ C0] ? clear_bhb_loop+0x40/0x90 [ 690.253604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.259498][ C0] RIP: 0033:0x7feea399e019 [ 690.263925][ C0] RSP: 002b:00007feea4949028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 690.272323][ C0] RAX: ffffffffffffffda RBX: 00007feea3c25fa0 RCX: 00007feea399e019 [ 690.280293][ C0] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 690.288262][ C0] RBP: 00007feea3a3500c R08: 0000000000000000 R09: 0000000000000000 [ 690.296318][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.304296][ C0] R13: 00007feea3c26038 R14: 00007feea3c25fa0 R15: 00007ffe7b088218 [ 690.312265][ C0] [ 690.315358][ C0] rcu: rcu_preempt kthread starved for 262 jiffies! g179629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 690.326489][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 690.336468][ C0] rcu: RCU grace-period kthread stack dump: [ 690.342339][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 690.355810][ C0] Call Trace: [ 690.359100][ C0] [ 690.362024][ C0] __schedule+0x125c/0x6730 [ 690.366532][ C0] ? __pfx___schedule+0x10/0x10 [ 690.371366][ C0] ? find_held_lock+0x2b/0x80 [ 690.376028][ C0] ? schedule+0x225/0x2c0 [ 690.380342][ C0] schedule+0xdd/0x2c0 [ 690.384396][ C0] schedule_timeout+0x127/0x280 [ 690.389241][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 690.394594][ C0] ? __pfx_process_timeout+0x10/0x10 [ 690.399867][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.405655][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 690.411123][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 690.415877][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.421155][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 690.426095][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.430867][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.436673][ C0] rcu_gp_kthread+0x179/0x230 [ 690.441361][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.446551][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.452345][ C0] ? __kthread_parkme+0x18c/0x230 [ 690.457359][ C0] ? kthread+0x13a/0x450 [ 690.461611][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.466824][ C0] kthread+0x370/0x450 [ 690.470883][ C0] ? __pfx_kthread+0x10/0x10 [ 690.475503][ C0] ret_from_fork+0x72b/0xd50 [ 690.480092][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 690.485207][ C0] ? __switch_to+0x800/0x10f0 [ 690.489910][ C0] ? __switch_to_asm+0x39/0x70 [ 690.494678][ C0] ? __pfx_kthread+0x10/0x10 [ 690.499263][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.504022][ C0] [ 690.507026][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 690.513428][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 690.524811][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 690.529982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.540034][ C0] Workqueue: bat_events batadv_tt_purge [ 690.545653][ C0] RIP: 0010:kasan_check_range+0x170/0x1e0 [ 690.551375][ C0] Code: 48 85 c0 75 9d 48 89 da 4c 89 d8 4c 29 da e9 32 ff ff ff 48 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 83 c0 01 48 39 d0 0f 84 79 ff ff ff 80 38 00 74 ee e9 57 ff ff [ 690.571073][ C0] RSP: 0018:ffffc900000070f0 EFLAGS: 00000246 [ 690.577145][ C0] RAX: ffffed102b873921 RBX: ffffed102b873926 RCX: ffffffff89859e4c [ 690.585107][ C0] RDX: ffffed102b873926 RSI: 0000000000000030 RDI: ffff88815c39c900 [ 690.593060][ C0] RBP: ffffed102b873920 R08: 0000000000000000 R09: ffffed102b873925 [ 690.601017][ C0] R10: ffff88815c39c92f R11: 000000000000756b R12: ffff88815c39c800 [ 690.609063][ C0] R13: 0000000000000001 R14: ffff88815c39c900 R15: ffff88815c39943f [ 690.617116][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 690.626040][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.632630][ C0] CR2: 00007f1bf1929fa5 CR3: 000000007fe62000 CR4: 00000000003526f0 [ 690.640697][ C0] Call Trace: [ 690.643967][ C0] [ 690.646810][ C0] __asan_memcpy+0x23/0x60 [ 690.651215][ C0] skb_ext_add+0x14c/0x810 [ 690.655678][ C0] ? lock_acquire+0x1b9/0x370 [ 690.660346][ C0] ? find_held_lock+0x2b/0x80 [ 690.665009][ C0] ? net_generic+0xea/0x2a0 [ 690.669683][ C0] br_nf_forward_ip.part.0+0x28/0x820 [ 690.675041][ C0] br_nf_forward+0xfe5/0x19f0 [ 690.679705][ C0] nf_hook_slow+0xbf/0x220 [ 690.684255][ C0] __br_forward+0x2f7/0x970 [ 690.688805][ C0] ? __pfx___br_forward+0x10/0x10 [ 690.693818][ C0] ? __asan_memcpy+0x3c/0x60 [ 690.698391][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 690.703920][ C0] ? __skb_clone+0x570/0x760 [ 690.708502][ C0] maybe_deliver+0xf0/0x180 [ 690.713005][ C0] br_flood+0x29b/0x7b0 [ 690.717165][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 690.722705][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 690.728586][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 690.733870][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 690.738809][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 690.743921][ C0] ? nf_hook_slow+0x167/0x220 [ 690.748599][ C0] br_nf_hook_thresh+0x30d/0x420 [ 690.753549][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 690.759528][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 690.764975][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 690.770863][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 690.776135][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 690.782018][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 690.787906][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 690.793873][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 690.799779][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 690.805146][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 690.811111][ C0] ? lock_acquire+0x1b9/0x370 [ 690.815789][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 690.822286][ C0] ? net_generic+0xea/0x2a0 [ 690.826800][ C0] br_nf_pre_routing+0x90f/0x1560 [ 690.831813][ C0] br_handle_frame+0xce9/0x1540 [ 690.836657][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 690.841935][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 690.847993][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 690.853267][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 690.860030][ C0] ? kmem_cache_free+0x127/0x6b0 [ 690.864972][ C0] ? skb_release_data+0x6ca/0x8e0 [ 690.869989][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 690.877085][ C0] ? kfree_skbmem+0x19f/0x210 [ 690.881746][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 690.886933][ C0] ? ip6_mc_input+0x51a/0xf50 [ 690.891656][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 690.896686][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 690.902682][ C0] ? __lock_acquire+0x49f/0x1a40 [ 690.907712][ C0] ? process_backlog+0x32a/0x1580 [ 690.912764][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 690.918555][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 690.924957][ C0] ? lock_acquire+0x1b9/0x370 [ 690.929627][ C0] ? process_backlog+0x32a/0x1580 [ 690.934641][ C0] ? process_backlog+0x32a/0x1580 [ 690.939666][ C0] __netif_receive_skb+0x1f/0x120 [ 690.944679][ C0] process_backlog+0x37a/0x1580 [ 690.949517][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 690.954888][ C0] net_rx_action+0xa40/0xf20 [ 690.959481][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 690.964578][ C0] ? mark_held_locks+0x40/0x70 [ 690.969429][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 690.974616][ C0] ? tmigr_handle_remote+0x132/0x380 [ 690.979893][ C0] ? run_timer_base+0x121/0x190 [ 690.984732][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 690.989940][ C0] handle_softirqs+0x1ea/0x9b0 [ 690.994693][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 690.999960][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 691.004878][ C0] do_softirq+0xac/0xe0 [ 691.009022][ C0] [ 691.011931][ C0] [ 691.014854][ C0] __local_bh_enable_ip+0xf8/0x120 [ 691.019971][ C0] batadv_tt_purge+0x25d/0xbd0 [ 691.024732][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 691.030024][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.034780][ C0] process_one_work+0xa23/0x1940 [ 691.039715][ C0] ? __pfx_process_one_work+0x10/0x10 [ 691.045095][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 691.050366][ C0] rescuer_thread+0x905/0x14a0 [ 691.055120][ C0] ? rescuer_thread+0x240/0x14a0 [ 691.060131][ C0] ? rescuer_thread+0x118/0x14a0 [ 691.065067][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 691.070264][ C0] ? __kthread_parkme+0x18c/0x230 [ 691.075279][ C0] ? kthread+0x13a/0x450 [ 691.079513][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 691.084721][ C0] kthread+0x370/0x450 [ 691.088821][ C0] ? __pfx_kthread+0x10/0x10 [ 691.093414][ C0] ret_from_fork+0x72b/0xd50 [ 691.098005][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 691.103110][ C0] ? __switch_to+0x800/0x10f0 [ 691.107777][ C0] ? __switch_to_asm+0x39/0x70 [ 691.112569][ C0] ? __pfx_kthread+0x10/0x10 [ 691.117145][ C0] ret_from_fork_asm+0x1a/0x30 [ 691.121904][ C0] [ 692.133686][ C0] net_ratelimit: 3295 callbacks suppressed [ 692.133702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.152063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.165764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 692.178760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.192985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.205429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.218862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 692.231930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.246188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.258643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.119457][ C0] net_ratelimit: 4022 callbacks suppressed [ 697.119473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.137800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.151229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 697.164240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.178443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.190997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.204397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:1c:66:a6:43:da, vlan:0) [ 697.217366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.231669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.244258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)