last executing test programs: 1.7434918s ago: executing program 3 (id=12370): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, 0x0) 1.586482519s ago: executing program 3 (id=12373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbf469235200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) 1.431506537s ago: executing program 3 (id=12376): socket(0xa, 0x3, 0x3b) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, r0, 0x9c, 0x0, 0x1, @relative_fd=r0, 0x80}, 0x96) 1.213333212s ago: executing program 3 (id=12379): futex_wait$auto(0x0, 0x4002, 0xb, 0x2, &(0x7f0000000080)={0x80000000005, 0x8000007fff}, 0x1) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) 1.016425259s ago: executing program 1 (id=12384): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4a", 0xfdef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r1, &(0x7f00000000c0)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0xb) 853.33378ms ago: executing program 0 (id=12387): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x47, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 747.009972ms ago: executing program 0 (id=12389): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye6\x00', 0x40202, 0x0) ioctl$auto(0x3, 0x5410, 0xffffffffffffffff) 696.28782ms ago: executing program 2 (id=12390): close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) socket(0x22, 0x2, 0x1) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 683.221484ms ago: executing program 1 (id=12391): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 639.170351ms ago: executing program 0 (id=12392): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$auto_tracing_buffers_fops_trace(r0, 0x5220, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xde4) close_range$auto(0x2, 0x8, 0x0) 586.852079ms ago: executing program 2 (id=12393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 568.250401ms ago: executing program 1 (id=12394): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 533.816507ms ago: executing program 0 (id=12395): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x7f1) 455.392649ms ago: executing program 2 (id=12396): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 433.62814ms ago: executing program 1 (id=12397): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r0 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) close_range$auto(0x2, 0x8, 0x0) 312.565014ms ago: executing program 2 (id=12398): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5760, 0x100000101) 305.736685ms ago: executing program 1 (id=12399): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r0, 0x0, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r1, 0x0, 0x2) 272.850829ms ago: executing program 3 (id=12400): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x6, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 186.790878ms ago: executing program 2 (id=12401): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) 178.882657ms ago: executing program 1 (id=12402): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x29d) 161.022952ms ago: executing program 0 (id=12403): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xb, 0x7fffffff, 0x100, 0xfef, 0x101, 0x4000006, 0x2000}, {0x100, 0x3, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 112.40132ms ago: executing program 3 (id=12404): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) sysfs$auto(0x2, 0x4, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) 19.884526ms ago: executing program 2 (id=12405): r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0xb06, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x206, 0x10007, 0x8, 0xffffffffffffffff, [], {0x27, 0x6, 0x21bb9432, 0x4, 0xffffffff, 0x7f, 0x40101, 0x6, 0x2}, {0x100, 0x10000008, 0x7, 0x1, 0x1, 0x3f, 0x76c4, 0x80008, 0x2}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="130027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 0s ago: executing program 0 (id=12406): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) kernel console output (not intermixed with test programs): G U I L syzkaller #0 PREEMPT(full) [ 455.233059][T23831] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 455.233066][T23831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.233076][T23831] Call Trace: [ 455.233081][T23831] [ 455.233087][T23831] dump_stack_lvl+0x100/0x190 [ 455.233116][T23831] should_fail_ex.cold+0x5/0xa [ 455.233135][T23831] should_failslab+0xc2/0x120 [ 455.233151][T23831] __kvmalloc_node_noprof+0xfa/0xa00 [ 455.233172][T23831] ? io_alloc_cache_init+0x38/0x170 [ 455.233300][T23831] ? lockdep_init_map_type+0x5c/0x250 [ 455.233323][T23831] io_alloc_cache_init+0x38/0x170 [ 455.233346][T23831] io_uring_setup.cold+0x3cd/0x1d09 [ 455.233370][T23831] ? __pfx_io_uring_setup+0x10/0x10 [ 455.233421][T23831] ? do_futex+0x192/0x350 [ 455.233448][T23831] ? __pfx_do_futex+0x10/0x10 [ 455.233477][T23831] ? xfd_validate_state+0x129/0x190 [ 455.233504][T23831] __x64_sys_io_uring_setup+0xc2/0x170 [ 455.233522][T23831] do_syscall_64+0x106/0xf80 [ 455.233540][T23831] ? clear_bhb_loop+0x40/0x90 [ 455.233558][T23831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.233573][T23831] RIP: 0033:0x7f81ac79c799 [ 455.233587][T23831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.233600][T23831] RSP: 002b:00007f81ad585028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 455.233615][T23831] RAX: ffffffffffffffda RBX: 00007f81aca15fa0 RCX: 00007f81ac79c799 [ 455.233625][T23831] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 455.233634][T23831] RBP: 00007f81ac832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 455.233644][T23831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.233652][T23831] R13: 00007f81aca16038 R14: 00007f81aca15fa0 R15: 00007ffd69627698 [ 455.233672][T23831] [ 455.858549][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8417'. [ 456.145999][T23860] openvswitch: netlink: Missing valid actions attribute. [ 456.216066][T23863] netlink: 'syz.1.8424': attribute type 2 has an invalid length. [ 456.255085][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8424'. [ 456.884288][T23884] synth uevent: /bus/usb/drivers/cdc_mbim: unknown uevent action string [ 457.089887][T23891] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 457.913677][T23918] netlink: 'syz.2.8449': attribute type 2 has an invalid length. [ 458.059122][T23922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 458.979759][T23954] NFSD: Failed to start, no listeners configured. [ 459.389777][T23981] bonding: no command found in bonding_masters - use +ifname or -ifname [ 459.548162][T23989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.214597][T24015] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 460.673329][T24030] sctp: [Deprecated]: syz.2.8496 (pid 24030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.673329][T24030] Use struct sctp_sack_info instead [ 461.927688][T24086] netlink: 'syz.1.8521': attribute type 11 has an invalid length. [ 461.996118][T24088] FAULT_INJECTION: forcing a failure. [ 461.996118][T24088] name failslab, interval 1, probability 0, space 0, times 0 [ 462.083722][T24088] CPU: 0 UID: 0 PID: 24088 Comm: syz.3.8522 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 462.083753][T24088] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 462.083760][T24088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.083770][T24088] Call Trace: [ 462.083775][T24088] [ 462.083780][T24088] dump_stack_lvl+0x100/0x190 [ 462.083809][T24088] should_fail_ex.cold+0x5/0xa [ 462.083828][T24088] should_failslab+0xc2/0x120 [ 462.083844][T24088] __kmalloc_cache_noprof+0x7a/0x6f0 [ 462.083863][T24088] ? watch_queue_init+0x45/0x170 [ 462.083884][T24088] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 462.083910][T24088] watch_queue_init+0x45/0x170 [ 462.083950][T24088] create_pipe_files+0x672/0x970 [ 462.083975][T24088] do_pipe2+0xbd/0x1e0 [ 462.083990][T24088] ? __pfx_do_pipe2+0x10/0x10 [ 462.084004][T24088] ? xfd_validate_state+0x129/0x190 [ 462.084033][T24088] __x64_sys_pipe2+0x54/0x80 [ 462.084048][T24088] do_syscall_64+0x106/0xf80 [ 462.084065][T24088] ? clear_bhb_loop+0x40/0x90 [ 462.084083][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.084097][T24088] RIP: 0033:0x7f81ac79c799 [ 462.084110][T24088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.084124][T24088] RSP: 002b:00007f81ad585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 462.084138][T24088] RAX: ffffffffffffffda RBX: 00007f81aca15fa0 RCX: 00007f81ac79c799 [ 462.084147][T24088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 462.084156][T24088] RBP: 00007f81ac832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 462.084164][T24088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.084172][T24088] R13: 00007f81aca16038 R14: 00007f81aca15fa0 R15: 00007ffd69627698 [ 462.084191][T24088] [ 462.685717][T24099] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 463.244434][T24123] netlink: zone id is out of range [ 463.267185][T24123] netlink: zone id is out of range [ 463.492637][T24136] NFSD: Failed to start, no listeners configured. [ 465.134346][T24220] : entered promiscuous mode [ 465.352501][T24231] openvswitch: netlink: Message has 20 unknown bytes. [ 465.382678][T24233] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 465.436933][T24233] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 466.363813][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8606'. [ 466.630415][T24293] netlink: Setting conntrack mark requires 'commit' flag. [ 468.040945][T24356] netlink: 'syz.1.8644': attribute type 11 has an invalid length. [ 468.437570][T24374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8652'. [ 468.913894][T24399] FAULT_INJECTION: forcing a failure. [ 468.913894][T24399] name fail_futex, interval 1, probability 0, space 0, times 1 [ 468.978908][T24399] CPU: 0 UID: 0 PID: 24399 Comm: syz.1.8661 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 468.978939][T24399] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 468.978946][T24399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.978955][T24399] Call Trace: [ 468.978960][T24399] [ 468.978966][T24399] dump_stack_lvl+0x100/0x190 [ 468.978996][T24399] should_fail_ex.cold+0x5/0xa [ 468.979014][T24399] get_futex_key+0x107c/0x1620 [ 468.979035][T24399] ? __pfx_get_futex_key+0x10/0x10 [ 468.979058][T24399] futex_wait_setup+0x83/0x510 [ 468.979084][T24399] __futex_wait+0x19f/0x300 [ 468.979108][T24399] ? __pfx___futex_wait+0x10/0x10 [ 468.979133][T24399] ? __pfx_futex_wake_mark+0x10/0x10 [ 468.979158][T24399] ? __hrtimer_setup+0x178/0x280 [ 468.979178][T24399] ? ktime_add_safe+0x60/0x70 [ 468.979199][T24399] futex_wait+0xed/0x380 [ 468.979220][T24399] ? __pfx_futex_wait+0x10/0x10 [ 468.979239][T24399] ? __lock_acquire+0x4a5/0x2630 [ 468.979259][T24399] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 468.979284][T24399] do_futex+0x1ef/0x350 [ 468.979303][T24399] ? __pfx_do_futex+0x10/0x10 [ 468.979320][T24399] ? ktime_get+0x200/0x300 [ 468.979334][T24399] ? lockdep_hardirqs_on+0x78/0x100 [ 468.979352][T24399] ? read_tsc+0x9/0x20 [ 468.979370][T24399] __x64_sys_futex+0x34f/0x4d0 [ 468.979391][T24399] ? __pfx___x64_sys_futex+0x10/0x10 [ 468.979417][T24399] do_syscall_64+0x106/0xf80 [ 468.979433][T24399] ? clear_bhb_loop+0x40/0x90 [ 468.979452][T24399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.979467][T24399] RIP: 0033:0x7f822019c799 [ 468.979479][T24399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.979500][T24399] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.979515][T24399] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 468.979526][T24399] RDX: 0000000000000eec RSI: 0000000000000000 RDI: 0000200000000000 [ 468.979535][T24399] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000006 [ 468.979545][T24399] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 468.979554][T24399] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 468.979573][T24399] [ 469.227793][T24403] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 469.255445][T24403] CIFS mount error: No usable UNC path provided in device string! [ 469.255445][T24403] [ 469.265525][T24403] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 469.850264][T24433] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 470.406165][T24462] program syz.1.8688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.725553][T24569] netlink: 'syz.0.8731': attribute type 11 has an invalid length. [ 472.772794][T24569] netlink: 'syz.0.8731': attribute type 11 has an invalid length. [ 472.820034][T24569] netlink: 'syz.0.8731': attribute type 11 has an invalid length. [ 473.105011][T24585] .^: entered promiscuous mode [ 473.438657][T24606] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 473.657988][T24618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 473.832372][T24625] vhci_hcd vhci_hcd.2: invalid port number 135 [ 473.862268][T24625] vhci_hcd vhci_hcd.2: invalid port number 135 [ 475.292383][T24703] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 475.538111][T24717] nbd: must specify a device to reconfigure [ 475.846094][T24730] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 477.023959][T24787] NFSD: Failed to start, no listeners configured. [ 477.303514][T24811] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 478.229267][T24860] Invalid ELF header magic: != ELF [ 478.850593][T24881] netlink: Failed to add  helper -22 [ 479.089916][T24897] FAULT_INJECTION: forcing a failure. [ 479.089916][T24897] name failslab, interval 1, probability 0, space 0, times 0 [ 479.125639][T24900] netlink: 'syz.2.8880': attribute type 3 has an invalid length. [ 479.138688][T24897] CPU: 0 UID: 0 PID: 24897 Comm: syz.3.8878 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 479.138718][T24897] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 479.138725][T24897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.138735][T24897] Call Trace: [ 479.138740][T24897] [ 479.138746][T24897] dump_stack_lvl+0x100/0x190 [ 479.138774][T24897] should_fail_ex.cold+0x5/0xa [ 479.138799][T24897] should_failslab+0xc2/0x120 [ 479.138816][T24897] __kmalloc_cache_noprof+0x7a/0x6f0 [ 479.138834][T24897] ? proc_self_get_link+0x189/0x1f0 [ 479.138899][T24897] proc_self_get_link+0x189/0x1f0 [ 479.138921][T24897] pick_link+0xac2/0x13c0 [ 479.138942][T24897] ? __pfx_proc_self_get_link+0x10/0x10 [ 479.138965][T24897] step_into_slowpath+0x9ba/0xf90 [ 479.138990][T24897] ? __pfx_step_into_slowpath+0x10/0x10 [ 479.139014][T24897] ? lookup_fast+0x2da/0x600 [ 479.139032][T24897] ? inode_permission+0x374/0x620 [ 479.139053][T24897] link_path_walk+0xf28/0x1cc0 [ 479.139080][T24897] path_openat+0x1be/0x31a0 [ 479.139093][T24897] ? kasan_save_stack+0x3f/0x50 [ 479.139114][T24897] ? kasan_save_stack+0x30/0x50 [ 479.139133][T24897] ? kasan_save_track+0x14/0x30 [ 479.139153][T24897] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 479.139179][T24897] ? __pfx_path_openat+0x10/0x10 [ 479.139200][T24897] do_file_open+0x20e/0x430 [ 479.139217][T24897] ? __pfx_do_file_open+0x10/0x10 [ 479.139245][T24897] ? alloc_fd+0x476/0x790 [ 479.139261][T24897] ? do_getname+0x191/0x390 [ 479.139280][T24897] do_sys_openat2+0x10d/0x1e0 [ 479.139299][T24897] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.139325][T24897] __x64_sys_openat+0x12d/0x210 [ 479.139344][T24897] ? __pfx___x64_sys_openat+0x10/0x10 [ 479.139370][T24897] do_syscall_64+0x106/0xf80 [ 479.139387][T24897] ? clear_bhb_loop+0x40/0x90 [ 479.139405][T24897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.139421][T24897] RIP: 0033:0x7f81ac75cfce [ 479.139435][T24897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.139448][T24897] RSP: 002b:00007f81ad584ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.139463][T24897] RAX: ffffffffffffffda RBX: 00007f81ad5856c0 RCX: 00007f81ac75cfce [ 479.139472][T24897] RDX: 0000000000000002 RSI: 00007f81ad584f90 RDI: ffffffffffffff9c [ 479.139481][T24897] RBP: 00007f81ac832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 479.139490][T24897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.139498][T24897] R13: 00007f81aca16038 R14: 00007f81aca15fa0 R15: 00007ffd69627698 [ 479.139518][T24897] [ 480.504378][T24960] Invalid ELF header magic: != ELF [ 481.282488][T24994] tc_dump_action: action bad kind [ 481.320154][T24999] Invalid ELF header magic: != ELF [ 482.404112][T25045] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 482.527883][T25053] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 482.869354][T25070] Invalid ELF header magic: != ELF [ 483.059392][T25078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8959'. [ 483.232565][T25087] openvswitch: netlink: Duplicate key (type 15). [ 483.289707][T25089] netlink: 'syz.3.8965': attribute type 1 has an invalid length. [ 483.386481][T25093] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.393257][T25093] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.921380][T25123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8982'. [ 483.972073][T25123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8982'. [ 484.487813][T25152] nbd: couldn't find a device at index 35644 [ 487.303281][T25282] netlink: 'syz.2.9057': attribute type 11 has an invalid length. [ 487.335268][T25282] netlink: 'syz.2.9057': attribute type 11 has an invalid length. [ 487.360090][T25284] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.366541][T25284] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.385196][T25282] netlink: 'syz.2.9057': attribute type 11 has an invalid length. [ 487.994658][T25318] nbd: couldn't find device at index 33904 [ 490.302019][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9117'. [ 491.740545][T25475] openvswitch: netlink: Flow key attr not present in new flow. [ 492.197194][T25500] netlink: 'syz.3.9156': attribute type 1 has an invalid length. [ 492.754947][T25520] netlink: zone id is out of range [ 492.767531][T25520] netlink: zone id is out of range [ 492.792731][T25520] netlink: zone id is out of range [ 492.822793][T25520] netlink: zone id is out of range [ 492.838832][T25520] netlink: zone id is out of range [ 492.874628][T25520] netlink: zone id is out of range [ 492.898533][T25520] netlink: zone id is out of range [ 492.918634][T25520] netlink: zone id is out of range [ 492.948360][T25520] netlink: zone id is out of range [ 492.971892][T25520] netlink: zone id is out of range [ 493.192546][T25539] perf: Dynamic interrupt throttling disabled, can hang your system! [ 493.944621][T25569] netlink: 'syz.2.9189': attribute type 1 has an invalid length. [ 494.507544][ T5819] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 494.566843][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 494.566871][ T5819] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 494.566878][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.566886][ T5819] Call Trace: [ 494.566892][ T5819] [ 494.566898][ T5819] dump_stack_lvl+0x100/0x190 [ 494.566924][ T5819] dump_header+0xfb/0x606 [ 494.566941][ T5819] oom_kill_process.cold+0xd/0x330 [ 494.566957][ T5819] out_of_memory+0x340/0x14f0 [ 494.566983][ T5819] ? __pfx_out_of_memory+0x10/0x10 [ 494.567008][ T5819] mem_cgroup_out_of_memory+0xc6/0x130 [ 494.567028][ T5819] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 494.567045][ T5819] ? find_held_lock+0x2b/0x80 [ 494.567063][ T5819] ? do_raw_spin_unlock+0x145/0x1e0 [ 494.567083][ T5819] ? _raw_spin_unlock+0x28/0x50 [ 494.567100][ T5819] try_charge_memcg+0x652/0xc90 [ 494.567119][ T5819] ? __pfx_try_charge_memcg+0x10/0x10 [ 494.567137][ T5819] ? find_held_lock+0x2b/0x80 [ 494.567149][ T5819] ? rcu_read_unlock+0x17/0x60 [ 494.567163][ T5819] ? rcu_read_unlock+0x17/0x60 [ 494.567180][ T5819] charge_memcg+0xa6/0x280 [ 494.567194][ T5819] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 494.567214][ T5819] __swap_cache_prepare_and_add+0x528/0x9e0 [ 494.567241][ T5819] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 494.567260][ T5819] ? __pfx_swap_entry_swapped+0x10/0x10 [ 494.567279][ T5819] swap_cache_alloc_folio+0x1cb/0x300 [ 494.567299][ T5819] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 494.567319][ T5819] ? lockdep_hardirqs_on+0x78/0x100 [ 494.567336][ T5819] ? finish_task_switch.isra.0+0x205/0xb80 [ 494.567354][ T5819] swap_cluster_readahead+0x411/0x770 [ 494.567378][ T5819] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 494.567401][ T5819] ? update_cfs_rq_load_avg+0x51/0x550 [ 494.567421][ T5819] ? __lock_acquire+0x4a5/0x2630 [ 494.567440][ T5819] ? get_vma_policy+0x23f/0x3b0 [ 494.567457][ T5819] swapin_readahead+0x160/0x12c0 [ 494.567482][ T5819] ? __pfx_swapin_readahead+0x10/0x10 [ 494.567500][ T5819] ? find_held_lock+0x2b/0x80 [ 494.567512][ T5819] ? swap_table_get+0x103/0x2c0 [ 494.567529][ T5819] ? swap_table_get+0x103/0x2c0 [ 494.567550][ T5819] ? swap_table_get+0x10d/0x2c0 [ 494.567567][ T5819] ? swap_cache_get_folio+0x1ae/0x600 [ 494.567587][ T5819] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 494.567604][ T5819] ? __pfx_get_swap_device+0x10/0x10 [ 494.567629][ T5819] ? do_swap_page+0xb2e/0x68e0 [ 494.567647][ T5819] do_swap_page+0xb2e/0x68e0 [ 494.567675][ T5819] ? __pfx_do_swap_page+0x10/0x10 [ 494.567700][ T5819] ? __free_object+0x2a8/0x400 [ 494.567782][ T5819] ? lockdep_hardirqs_on+0x78/0x100 [ 494.567800][ T5819] ? rcu_is_watching+0x12/0xc0 [ 494.567821][ T5819] ? __pte_offset_map+0x179/0x310 [ 494.567837][ T5819] __handle_mm_fault+0x18c1/0x2b60 [ 494.567861][ T5819] ? reacquire_held_locks+0xce/0x1e0 [ 494.567880][ T5819] ? __pfx___handle_mm_fault+0x10/0x10 [ 494.567902][ T5819] ? lock_vma_under_rcu+0x17c/0x590 [ 494.567932][ T5819] handle_mm_fault+0x36d/0xa20 [ 494.567954][ T5819] do_user_addr_fault+0x5a3/0x12f0 [ 494.567983][ T5819] exc_page_fault+0x6f/0xd0 [ 494.568000][ T5819] asm_exc_page_fault+0x26/0x30 [ 494.568014][ T5819] RIP: 0033:0x7f53da75cfce [ 494.568028][ T5819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.568041][ T5819] RSP: 002b:00007ffe1ce8d688 EFLAGS: 00010246 [ 494.568053][ T5819] RAX: 0000000000000000 RBX: 000055558316a500 RCX: 00007f53da75cfce [ 494.568062][ T5819] RDX: 00007ffe1ce8d6e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.568071][ T5819] RBP: 00007ffe1ce8d74c R08: 0000000000000000 R09: 0000000000000000 [ 494.568079][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 494.568087][ T5819] R13: 00000000000927c0 R14: 00000000000791bc R15: 00007ffe1ce8d7a0 [ 494.568106][ T5819] [ 494.570985][ T5819] memory: usage 3072kB, limit 3072kB, failcnt 70910 [ 495.876690][ T5819] memory+swap: usage 3492kB, limit 9007199254740988kB, failcnt 0 [ 495.926071][ T5819] kmem: usage 3044kB, limit 9007199254740988kB, failcnt 0 [ 495.959560][ T5819] Memory cgroup stats for /syz0: [ 495.959857][ T5819] cache 0 [ 495.998060][ T5819] rss 32768 [ 496.007262][ T5819] rss_huge 0 [ 496.020108][ T5819] shmem 0 [ 496.023093][ T5819] mapped_file 0 [ 496.066365][ T5819] dirty 0 [ 496.076562][ T5819] writeback 0 [ 496.094835][ T5819] workingset_refault_anon 2400 [ 496.110093][ T5819] workingset_refault_file 44458 [ 496.114979][ T5819] swap 425984 [ 496.151991][ T5819] swapcached 142901248 [ 496.182580][ T5819] pgpgin 260659 [ 496.186067][ T5819] pgpgout 260652 [ 496.217304][ T5819] pgfault 298808 [ 496.220939][ T5819] pgmajfault 1412 [ 496.224566][ T5819] inactive_anon 32768 [ 496.255372][ T5819] active_anon 0 [ 496.269033][ T5819] inactive_file 0 [ 496.286998][ T5819] active_file 0 [ 496.312660][ T5819] unevictable 0 [ 496.321707][ T5819] hierarchical_memory_limit 3145728 [ 496.346389][ T5819] hierarchical_memsw_limit 9223372036854771712 [ 496.408872][ T5819] total_cache 0 [ 496.412366][ T5819] total_rss 32768 [ 496.439743][ T5819] total_rss_huge 0 [ 496.443483][ T5819] total_shmem 0 [ 496.468773][ T5819] total_mapped_file 0 [ 496.490152][ T5819] total_dirty 0 [ 496.493870][ T5819] total_writeback 0 [ 496.511085][T25648] : entered promiscuous mode [ 496.531723][ T5819] total_workingset_refault_anon 2400 [ 496.556066][ T5819] total_workingset_refault_file 44458 [ 496.585438][ T5819] total_swap 425984 [ 496.589263][ T5819] total_swapcached 142901248 [ 496.593830][ T5819] total_pgpgin 260659 [ 496.637274][ T5819] total_pgpgout 260652 [ 496.642952][ T5819] total_pgfault 298808 [ 496.673277][ T5819] total_pgmajfault 1412 [ 496.692222][ T5819] total_inactive_anon 32768 [ 496.716638][ T5819] total_active_anon 0 [ 496.741580][ T5819] total_inactive_file 0 [ 496.754973][ T5819] total_active_file 0 [ 496.759392][ T5819] total_unevictable 0 [ 496.763356][ T5819] anon_cost 192 [ 496.806828][ T5819] file_cost 0 [ 496.810140][ T5819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7983,pid=22774,uid=0 [ 496.896404][ T5819] Memory cgroup out of memory: Killed process 22774 (syz.0.7983) total-vm:102224kB, anon-rss:1236kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 497.034553][T25580] syz.0.9194 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=0 [ 497.098075][T25580] CPU: 0 UID: 0 PID: 25580 Comm: syz.0.9194 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 497.098104][T25580] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 497.098110][T25580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.098119][T25580] Call Trace: [ 497.098124][T25580] [ 497.098130][T25580] dump_stack_lvl+0x100/0x190 [ 497.098158][T25580] dump_header+0xfb/0x606 [ 497.098175][T25580] oom_kill_process.cold+0xd/0x330 [ 497.098192][T25580] out_of_memory+0x340/0x14f0 [ 497.098217][T25580] ? __pfx_out_of_memory+0x10/0x10 [ 497.098243][T25580] mem_cgroup_out_of_memory+0xc6/0x130 [ 497.098264][T25580] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 497.098282][T25580] ? find_held_lock+0x2b/0x80 [ 497.098300][T25580] ? do_raw_spin_unlock+0x145/0x1e0 [ 497.098321][T25580] ? _raw_spin_unlock+0x28/0x50 [ 497.098339][T25580] try_charge_memcg+0x652/0xc90 [ 497.098358][T25580] ? __pfx_try_charge_memcg+0x10/0x10 [ 497.098372][T25580] ? rcu_read_unlock+0x17/0x60 [ 497.098387][T25580] ? rcu_read_unlock+0x17/0x60 [ 497.098406][T25580] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 497.098429][T25580] __memcg_kmem_charge_page+0xd0/0x530 [ 497.098447][T25580] __alloc_frozen_pages_noprof+0x328/0x2ba0 [ 497.098475][T25580] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 497.098501][T25580] ? __split_page_owner+0x1f9/0x350 [ 497.098517][T25580] ? alloc_pages_bulk_noprof+0x811/0x1490 [ 497.098546][T25580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 497.098570][T25580] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 497.098591][T25580] ? __vmalloc_node_range_noprof+0x11eb/0x1530 [ 497.098609][T25580] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 497.098632][T25580] ? __lock_acquire+0x4a5/0x2630 [ 497.098651][T25580] ? __lock_acquire+0x4a5/0x2630 [ 497.098670][T25580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.098695][T25580] ? policy_nodemask+0xed/0x4f0 [ 497.098712][T25580] alloc_pages_mpol+0x48a/0x550 [ 497.098728][T25580] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 497.098744][T25580] ? rcu_read_unlock+0x17/0x60 [ 497.098762][T25580] alloc_pages_noprof+0x131/0x390 [ 497.098778][T25580] __vmalloc_node_range_noprof+0xa1d/0x1530 [ 497.098801][T25580] ? __do_sys_listmount+0x289/0xee0 [ 497.098829][T25580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 497.098850][T25580] ? rcu_is_watching+0x12/0xc0 [ 497.098876][T25580] __kvmalloc_node_noprof+0x3de/0xa00 [ 497.098899][T25580] ? __do_sys_listmount+0x289/0xee0 [ 497.098918][T25580] ? __do_sys_listmount+0x289/0xee0 [ 497.098938][T25580] ? _copy_from_user+0x59/0xd0 [ 497.099052][T25580] ? copy_mnt_id_req+0x1b1/0x350 [ 497.099072][T25580] __do_sys_listmount+0x289/0xee0 [ 497.099093][T25580] ? __pfx_do_futex+0x10/0x10 [ 497.099112][T25580] ? do_set_mempolicy+0x20a/0x3e0 [ 497.099126][T25580] ? __pfx_do_set_mempolicy+0x10/0x10 [ 497.099141][T25580] ? __pfx___do_sys_listmount+0x10/0x10 [ 497.099175][T25580] do_syscall_64+0x106/0xf80 [ 497.099192][T25580] ? clear_bhb_loop+0x40/0x90 [ 497.099210][T25580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.099225][T25580] RIP: 0033:0x7f53da79c799 [ 497.099239][T25580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.099253][T25580] RSP: 002b:00007f53db743028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 497.099267][T25580] RAX: ffffffffffffffda RBX: 00007f53daa15fa0 RCX: 00007f53da79c799 [ 497.099277][T25580] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 497.099286][T25580] RBP: 00007f53da832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 497.099295][T25580] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 497.099304][T25580] R13: 00007f53daa16038 R14: 00007f53daa15fa0 R15: 00007ffe1ce8d3a8 [ 497.099323][T25580] [ 497.492311][T25580] memory: usage 3072kB, limit 3072kB, failcnt 70929 [ 497.498979][T25580] memory+swap: usage 3380kB, limit 9007199254740988kB, failcnt 0 [ 497.506803][T25580] kmem: usage 2860kB, limit 9007199254740988kB, failcnt 0 [ 497.513959][T25580] Memory cgroup stats for /syz0: [ 497.514156][T25580] cache 0 [ 497.522076][T25580] rss 28672 [ 497.525205][T25580] rss_huge 0 [ 497.528416][T25580] shmem 0 [ 497.531491][T25580] mapped_file 0 [ 497.534975][T25580] dirty 0 [ 497.537925][T25580] writeback 0 [ 497.541262][T25580] workingset_refault_anon 2400 [ 497.546041][T25580] workingset_refault_file 44458 [ 497.550934][T25580] swap 430080 [ 497.554985][T25580] swapcached 142901248 [ 497.559661][T25580] pgpgin 260659 [ 497.563271][T25580] pgpgout 260653 [ 497.566840][T25580] pgfault 298808 [ 497.570450][T25580] pgmajfault 1412 [ 497.574101][T25580] inactive_anon 0 [ 497.577750][T25580] active_anon 28672 [ 497.581695][T25580] inactive_file 0 [ 497.585352][T25580] active_file 0 [ 497.588827][T25580] unevictable 0 [ 497.592389][T25580] hierarchical_memory_limit 3145728 [ 497.597715][T25580] hierarchical_memsw_limit 9223372036854771712 [ 497.603954][T25580] total_cache 0 [ 497.607444][T25580] total_rss 28672 [ 497.611136][T25580] total_rss_huge 0 [ 497.614892][T25580] total_shmem 0 [ 497.618373][T25580] total_mapped_file 0 [ 497.622456][T25580] total_dirty 0 [ 497.625938][T25580] total_writeback 0 [ 497.629824][T25580] total_workingset_refault_anon 2400 [ 497.635135][T25580] total_workingset_refault_file 44458 [ 497.640631][T25580] total_swap 430080 [ 497.644500][T25580] total_swapcached 142901248 [ 497.649172][T25580] total_pgpgin 260659 [ 497.653229][T25580] total_pgpgout 260653 [ 497.658156][T25580] total_pgfault 298808 [ 497.662924][T25580] total_pgmajfault 1412 [ 497.667117][T25580] total_inactive_anon 0 [ 497.671329][T25580] total_active_anon 28672 [ 497.675685][T25580] total_inactive_file 0 [ 497.679936][T25580] total_active_file 0 [ 497.683949][T25580] total_unevictable 0 [ 497.687949][T25580] anon_cost 196 [ 497.691454][T25580] file_cost 0 [ 497.694754][T25580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9194,pid=25579,uid=0 [ 497.710010][T25580] Memory cgroup out of memory: Killed process 25580 (syz.0.9194) total-vm:104276kB, anon-rss:1260kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 498.881115][T25714] netlink: 'syz.2.9253': attribute type 1 has an invalid length. [ 499.653000][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.672498][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.148195][T25783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9282'. [ 503.616026][T25941] net_ratelimit: 20 callbacks suppressed [ 503.616042][T25941] openvswitch: netlink: Key type 261 is out of range max 32 [ 505.022128][T25989] netlink: Unknown NAT attribute (type=262, max=9) [ 506.865322][T26059] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 509.528180][ T5819] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 509.631414][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 509.631443][ T5819] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 509.631449][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.631457][ T5819] Call Trace: [ 509.631463][ T5819] [ 509.631468][ T5819] dump_stack_lvl+0x100/0x190 [ 509.631494][ T5819] dump_header+0xfb/0x606 [ 509.631511][ T5819] oom_kill_process.cold+0xd/0x330 [ 509.631528][ T5819] out_of_memory+0x340/0x14f0 [ 509.631553][ T5819] ? __pfx_out_of_memory+0x10/0x10 [ 509.631579][ T5819] mem_cgroup_out_of_memory+0xc6/0x130 [ 509.631598][ T5819] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 509.631616][ T5819] ? find_held_lock+0x2b/0x80 [ 509.631633][ T5819] ? do_raw_spin_unlock+0x145/0x1e0 [ 509.631653][ T5819] ? _raw_spin_unlock+0x28/0x50 [ 509.631671][ T5819] try_charge_memcg+0x652/0xc90 [ 509.631696][ T5819] ? __pfx_try_charge_memcg+0x10/0x10 [ 509.631715][ T5819] ? find_held_lock+0x2b/0x80 [ 509.631727][ T5819] ? rcu_read_unlock+0x17/0x60 [ 509.631741][ T5819] ? rcu_read_unlock+0x17/0x60 [ 509.631758][ T5819] charge_memcg+0xa6/0x280 [ 509.631772][ T5819] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 509.631792][ T5819] __swap_cache_prepare_and_add+0x528/0x9e0 [ 509.631820][ T5819] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 509.631839][ T5819] ? __pfx_swap_entry_swapped+0x10/0x10 [ 509.631858][ T5819] swap_cache_alloc_folio+0x1cb/0x300 [ 509.631879][ T5819] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 509.631900][ T5819] ? rcu_is_watching+0x12/0xc0 [ 509.631921][ T5819] ? trace_pelt_se_tp+0x159/0x1b0 [ 509.631941][ T5819] swap_cluster_readahead+0x411/0x770 [ 509.631967][ T5819] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 509.631989][ T5819] ? update_cfs_rq_load_avg+0x51/0x550 [ 509.632010][ T5819] ? __lock_acquire+0x4a5/0x2630 [ 509.632029][ T5819] ? get_vma_policy+0x23f/0x3b0 [ 509.632046][ T5819] swapin_readahead+0x160/0x12c0 [ 509.632072][ T5819] ? __pfx_swapin_readahead+0x10/0x10 [ 509.632090][ T5819] ? find_held_lock+0x2b/0x80 [ 509.632102][ T5819] ? swap_table_get+0x103/0x2c0 [ 509.632119][ T5819] ? swap_table_get+0x103/0x2c0 [ 509.632140][ T5819] ? swap_table_get+0x10d/0x2c0 [ 509.632158][ T5819] ? swap_cache_get_folio+0x1ae/0x600 [ 509.632177][ T5819] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 509.632194][ T5819] ? __pfx_get_swap_device+0x10/0x10 [ 509.632220][ T5819] ? do_swap_page+0xb2e/0x68e0 [ 509.632238][ T5819] do_swap_page+0xb2e/0x68e0 [ 509.632266][ T5819] ? __pfx_do_swap_page+0x10/0x10 [ 509.632284][ T5819] ? __free_object+0x2a8/0x400 [ 509.632302][ T5819] ? lockdep_hardirqs_on+0x78/0x100 [ 509.632321][ T5819] ? rcu_is_watching+0x12/0xc0 [ 509.632341][ T5819] ? __pte_offset_map+0x179/0x310 [ 509.632357][ T5819] __handle_mm_fault+0x18c1/0x2b60 [ 509.632380][ T5819] ? reacquire_held_locks+0xce/0x1e0 [ 509.632397][ T5819] ? __pfx___handle_mm_fault+0x10/0x10 [ 509.632419][ T5819] ? lock_vma_under_rcu+0x17c/0x590 [ 509.632449][ T5819] handle_mm_fault+0x36d/0xa20 [ 509.632472][ T5819] do_user_addr_fault+0x5a3/0x12f0 [ 509.632502][ T5819] exc_page_fault+0x6f/0xd0 [ 509.632519][ T5819] asm_exc_page_fault+0x26/0x30 [ 509.632533][ T5819] RIP: 0033:0x7f53da75cfce [ 509.632546][ T5819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.632560][ T5819] RSP: 002b:00007ffe1ce8d688 EFLAGS: 00010246 [ 509.632572][ T5819] RAX: 0000000000000000 RBX: 000055558316a500 RCX: 00007f53da75cfce [ 509.632581][ T5819] RDX: 00007ffe1ce8d6e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.632590][ T5819] RBP: 00007ffe1ce8d74c R08: 0000000000000000 R09: 0000000000000000 [ 509.632598][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 509.632607][ T5819] R13: 00000000000927c0 R14: 000000000007cc72 R15: 00007ffe1ce8d7a0 [ 509.632626][ T5819] [ 509.632654][ T5819] memory: usage 3072kB, limit 3072kB, failcnt 75212 [ 510.566173][T26185] openvswitch: netlink: IPv4 tunnel dst address is zero [ 511.131613][ T5819] memory+swap: usage 4744kB, limit 9007199254740988kB, failcnt 0 [ 511.139355][ T5819] kmem: usage 548kB, limit 9007199254740988kB, failcnt 0 [ 511.204529][T26209] netlink: Unknown conntrack attr (type=257, max=9) [ 511.220459][ T5819] Memory cgroup stats for /syz0: [ 511.220568][ T5819] cache 0 [ 511.239499][ T5819] rss 0 [ 511.242332][ T5819] rss_huge 0 [ 511.245516][ T5819] shmem 0 [ 511.248433][ T5819] mapped_file 0 [ 511.305799][ T5819] dirty 0 [ 511.326733][ T5819] writeback 0 [ 511.338680][ T5819] workingset_refault_anon 2772 [ 511.363682][ T5819] workingset_refault_file 44458 [ 511.383892][ T5819] swap 225280 [ 511.387198][ T5819] swapcached 175190016 [ 511.436424][ T5819] pgpgin 272362 [ 511.448027][ T5819] pgpgout 274428 [ 511.451587][ T5819] pgfault 314532 [ 511.455110][ T5819] pgmajfault 1502 [ 511.492301][ T5819] inactive_anon 0 [ 511.512181][ T5819] active_anon 0 [ 511.515680][ T5819] inactive_file 0 [ 511.544756][ T5819] active_file 0 [ 511.566574][ T5819] unevictable 0 [ 511.589259][ T5819] hierarchical_memory_limit 3145728 [ 511.595268][ T5819] hierarchical_memsw_limit 9223372036854771712 [ 511.641368][ T5819] total_cache 0 [ 511.650676][ T5819] total_rss 0 [ 511.653974][ T5819] total_rss_huge 0 [ 511.679533][ T5819] total_shmem 0 [ 511.683044][ T5819] total_mapped_file 0 [ 511.716157][ T5819] total_dirty 0 [ 511.739023][ T5819] total_writeback 0 [ 511.742850][ T5819] total_workingset_refault_anon 2772 [ 511.773432][ T5819] total_workingset_refault_file 44458 [ 511.798182][ T5819] total_swap 225280 [ 511.812894][ T5819] total_swapcached 175190016 [ 511.839425][ T5819] total_pgpgin 272362 [ 511.843448][ T5819] total_pgpgout 274428 [ 511.877294][ T5819] total_pgfault 314532 [ 511.881438][ T5819] total_pgmajfault 1502 [ 511.885574][ T5819] total_inactive_anon 0 [ 511.930436][ T5819] total_active_anon 0 [ 511.934441][ T5819] total_inactive_file 0 [ 511.976964][ T5819] total_active_file 0 [ 511.995280][ T5819] total_unevictable 0 [ 511.999280][ T5819] anon_cost 314 [ 512.033736][ T5819] file_cost 0 [ 512.047542][ T5819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9424,pid=26102,uid=0 [ 512.114809][ T5819] Memory cgroup out of memory: OOM victim 26102 (syz.0.9424) is already exiting. Skip killing the task [ 512.504422][T26261] netlink: zone id is out of range [ 512.806222][T26275] netlink: 'syz.2.9505': attribute type 1 has an invalid length. [ 512.844191][T26275] netlink: 'syz.2.9505': attribute type 1 has an invalid length. [ 512.878053][T26275] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9505'. [ 512.934606][T26275] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9505'. [ 513.455664][T26295] &#$@\]\-: entered promiscuous mode [ 513.647163][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9518'. [ 515.842585][T26396] netlink: 'syz.0.9559': attribute type 11 has an invalid length. [ 515.878047][T26396] netlink: 'syz.0.9559': attribute type 11 has an invalid length. [ 515.912884][T26396] netlink: 'syz.0.9559': attribute type 11 has an invalid length. [ 515.953019][T26396] netlink: 'syz.0.9559': attribute type 11 has an invalid length. [ 516.353665][T26417] tc_dump_action: action bad kind [ 516.574610][T26431] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 517.544822][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9598'. [ 517.723380][T26489] netlink: 'syz.1.9602': attribute type 1 has an invalid length. [ 518.056375][T26501] FAULT_INJECTION: forcing a failure. [ 518.056375][T26501] name failslab, interval 1, probability 0, space 0, times 0 [ 518.106193][T26501] CPU: 0 UID: 0 PID: 26501 Comm: syz.1.9610 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 518.106225][T26501] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 518.106232][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.106242][T26501] Call Trace: [ 518.106247][T26501] [ 518.106254][T26501] dump_stack_lvl+0x100/0x190 [ 518.106283][T26501] should_fail_ex.cold+0x5/0xa [ 518.106300][T26501] should_failslab+0xc2/0x120 [ 518.106316][T26501] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 518.106337][T26501] ? __pmd_alloc+0xbf/0x9c0 [ 518.106357][T26501] __pmd_alloc+0xbf/0x9c0 [ 518.106375][T26501] move_page_tables+0x3224/0x4500 [ 518.106397][T26501] ? __pfx_copy_vma+0x10/0x10 [ 518.106424][T26501] ? __pfx_move_page_tables+0x10/0x10 [ 518.106455][T26501] ? finish_task_switch.isra.0+0x200/0xb80 [ 518.106474][T26501] copy_vma_and_data+0x25c/0x7c0 [ 518.106496][T26501] ? __pfx_copy_vma_and_data+0x10/0x10 [ 518.106525][T26501] ? __vma_start_write+0x17f/0x280 [ 518.106543][T26501] ? __pfx___vma_start_write+0x10/0x10 [ 518.106566][T26501] move_vma+0x51b/0x1890 [ 518.106589][T26501] ? __pfx_move_vma+0x10/0x10 [ 518.106611][T26501] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 518.106628][T26501] ? cap_mmap_addr+0x4b/0x120 [ 518.106684][T26501] ? bpf_lsm_mmap_addr+0x9/0x30 [ 518.106706][T26501] ? security_mmap_addr+0x71/0x1e0 [ 518.106771][T26501] ? __get_unmapped_area+0x255/0x3e0 [ 518.106790][T26501] ? vrm_set_new_addr+0x204/0x290 [ 518.106812][T26501] mremap_to+0x1b7/0x450 [ 518.106834][T26501] do_mremap+0xb76/0x2130 [ 518.106865][T26501] ? __pfx_do_mremap+0x10/0x10 [ 518.106890][T26501] ? ksys_write+0x190/0x250 [ 518.106917][T26501] __do_sys_mremap+0x126/0x170 [ 518.106939][T26501] ? __pfx___do_sys_mremap+0x10/0x10 [ 518.106964][T26501] ? __x64_sys_futex+0x34f/0x4d0 [ 518.106995][T26501] do_syscall_64+0x106/0xf80 [ 518.107012][T26501] ? clear_bhb_loop+0x40/0x90 [ 518.107031][T26501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.107047][T26501] RIP: 0033:0x7f822019c799 [ 518.107070][T26501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.107086][T26501] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 518.107101][T26501] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 518.107113][T26501] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 518.107122][T26501] RBP: 00007f8220232bd9 R08: 0000000100000000 R09: 0000000000000000 [ 518.107132][T26501] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 518.107141][T26501] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 518.107161][T26501] [ 522.804338][T26651] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 522.911806][T26654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9674'. [ 523.559276][T26676] netlink: 'syz.3.9685': attribute type 3 has an invalid length. [ 523.718939][T26683] HfR: entered promiscuous mode [ 526.232600][T26811] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 527.103902][T26848] netlink: 'syz.1.9740': attribute type 2 has an invalid length. [ 527.546079][T26870] netlink: 'syz.0.9752': attribute type 1 has an invalid length. [ 528.111698][T26901] netlink: 'syz.1.9765': attribute type 1 has an invalid length. [ 528.285110][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9769'. [ 529.280379][T26957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 529.495767][T26960] NFSD: Failed to start, no listeners configured. [ 530.171268][T27004] netlink: 'syz.1.9814': attribute type 2 has an invalid length. [ 530.258616][ T29] audit: type=1800 audit(4294967334.604:33): pid=27006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9816" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 530.375302][T27012] netlink: zone id is out of range [ 530.394896][T27012] netlink: zone id is out of range [ 530.420312][T27012] netlink: zone id is out of range [ 530.448018][T27012] netlink: zone id is out of range [ 530.477861][T27012] netlink: zone id is out of range [ 530.529609][T27012] netlink: set zone limit has 8 unknown bytes [ 530.707119][T27023] __vm_enough_memory: pid: 27023, comm: syz.3.9823, bytes: 4398046511104 not enough memory for the allocation [ 532.038027][T27081] netlink: 'syz.3.9851': attribute type 1 has an invalid length. [ 532.197243][T27086] netlink: 'syz.3.9852': attribute type 11 has an invalid length. [ 532.554442][T27101] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 533.365885][T27126] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.527685][T27131] netlink: 'syz.2.9871': attribute type 1 has an invalid length. [ 534.528590][T27175] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 535.232007][T27209] netlink: 206 bytes leftover after parsing attributes in process `syz.2.9907'. [ 537.117896][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9939'. [ 537.547018][T27295] netlink: zone id is out of range [ 537.571028][T27295] netlink: zone id is out of range [ 537.591151][T27295] netlink: zone id is out of range [ 537.609668][T27295] netlink: zone id is out of range [ 537.634196][T27295] netlink: zone id is out of range [ 537.703082][T27295] netlink: set zone limit has 8 unknown bytes [ 538.169383][T27314] netlink: 'syz.1.9954': attribute type 11 has an invalid length. [ 538.239855][T27314] netlink: 'syz.1.9954': attribute type 11 has an invalid length. [ 538.314194][T27314] netlink: 'syz.1.9954': attribute type 11 has an invalid length. [ 538.380821][T27314] netlink: 'syz.1.9954': attribute type 11 has an invalid length. [ 538.462264][T27312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.632113][T27330] openvswitch: netlink: Multiple metadata blocks provided [ 539.167377][T27358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 539.208122][T27360] netlink: NAT attribute has 4 unknown bytes [ 539.341620][T27369] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 541.835549][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10011'. [ 542.317801][T27453] syz.2.10016 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 543.052296][T27482] net_ratelimit: 1 callbacks suppressed [ 543.052312][T27482] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 543.350616][T27498] FAULT_INJECTION: forcing a failure. [ 543.350616][T27498] name failslab, interval 1, probability 0, space 0, times 0 [ 543.401297][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10037'. [ 543.419350][T27498] CPU: 0 UID: 0 PID: 27498 Comm: syz.2.10035 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 543.419381][T27498] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 543.419388][T27498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.419397][T27498] Call Trace: [ 543.419403][T27498] [ 543.419409][T27498] dump_stack_lvl+0x100/0x190 [ 543.419438][T27498] should_fail_ex.cold+0x5/0xa [ 543.419458][T27498] should_failslab+0xc2/0x120 [ 543.419475][T27498] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 543.419498][T27498] ? security_file_alloc+0x34/0x2c0 [ 543.419515][T27498] ? trace_kmem_cache_alloc+0xf3/0x120 [ 543.419533][T27498] security_file_alloc+0x34/0x2c0 [ 543.419549][T27498] init_file+0x95/0x480 [ 543.419568][T27498] alloc_empty_file+0x73/0x1c0 [ 543.419585][T27498] alloc_file_pseudo+0x13a/0x230 [ 543.419604][T27498] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 543.419622][T27498] ? security_inode_init_security_anon+0x7b/0x230 [ 543.419648][T27498] __do_sys_memfd_secret+0x11d/0x3d0 [ 543.419665][T27498] do_syscall_64+0x106/0xf80 [ 543.419685][T27498] ? clear_bhb_loop+0x40/0x90 [ 543.419704][T27498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.419719][T27498] RIP: 0033:0x7f252a79c799 [ 543.419732][T27498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.419747][T27498] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 543.419762][T27498] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 543.419771][T27498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.419780][T27498] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 543.419788][T27498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.419797][T27498] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 543.419816][T27498] [ 544.016910][T18183] Bluetooth: hci1: ACL packet too small [ 544.369069][T27521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 545.501024][T27562] openvswitch: netlink: IP tunnel dst address not specified [ 546.414241][T27606] nbd: illegal input index -1073741824 [ 549.430438][T27746] netlink: del zone limit has 8 unknown bytes [ 550.622355][T27789] netlink: 'syz.1.10158': attribute type 1 has an invalid length. [ 551.129812][T18183] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 551.397606][T27824] ksmbd: Unknown IPC event: 14, ignore. [ 551.407925][T27822] netlink: ct_mark mask cannot be 0 [ 551.643569][T27832] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 551.980125][T27852] nbd: must specify a size in bytes for the device [ 552.575128][T27877] sd 0:0:1:0: PR command failed: 1026 [ 552.580538][T27877] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 552.629878][T27877] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 553.006029][T27889] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 553.676737][T27919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10212'. [ 553.818390][T27925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10215'. [ 553.984866][T27932] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10218'. [ 554.111264][T27949] netlink: 'syz.1.10222': attribute type 1 has an invalid length. [ 554.308743][T27968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 554.328335][T27970] FAULT_INJECTION: forcing a failure. [ 554.328335][T27970] name failslab, interval 1, probability 0, space 0, times 0 [ 554.384207][T27970] CPU: 0 UID: 0 PID: 27970 Comm: syz.2.10226 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 554.384252][T27970] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 554.384259][T27970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.384268][T27970] Call Trace: [ 554.384273][T27970] [ 554.384279][T27970] dump_stack_lvl+0x100/0x190 [ 554.384308][T27970] should_fail_ex.cold+0x5/0xa [ 554.384326][T27970] should_failslab+0xc2/0x120 [ 554.384342][T27970] __kmalloc_cache_noprof+0x7a/0x6f0 [ 554.384360][T27970] ? sctp_endpoint_new+0xfc/0xb20 [ 554.384498][T27970] sctp_endpoint_new+0xfc/0xb20 [ 554.384519][T27970] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 554.384537][T27970] ? lockdep_init_map_type+0x5c/0x250 [ 554.384559][T27970] ? lockdep_init_map_type+0x5c/0x250 [ 554.384576][T27970] ? lockdep_init_map_type+0x5c/0x250 [ 554.384603][T27970] ? lockdep_init_map_type+0x5c/0x250 [ 554.384628][T27970] sctp_init_sock+0xe2b/0x1300 [ 554.384668][T27970] ? __pfx_sctp_init_sock+0x10/0x10 [ 554.384686][T27970] inet_create+0x94c/0x1060 [ 554.384712][T27970] ? inet_create+0x94/0x1060 [ 554.384737][T27970] __sock_create+0x339/0x860 [ 554.384764][T27970] __sys_socket+0x14d/0x260 [ 554.384787][T27970] ? __pfx___sys_socket+0x10/0x10 [ 554.384815][T27970] __x64_sys_socket+0x72/0xb0 [ 554.384836][T27970] ? lockdep_hardirqs_on+0x78/0x100 [ 554.384854][T27970] do_syscall_64+0x106/0xf80 [ 554.384871][T27970] ? clear_bhb_loop+0x40/0x90 [ 554.384889][T27970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.384905][T27970] RIP: 0033:0x7f252a79c799 [ 554.384918][T27970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.384934][T27970] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 554.384949][T27970] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 554.384959][T27970] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 554.384968][T27970] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 554.384977][T27970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.384987][T27970] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 554.385006][T27970] [ 555.717506][T28023] netlink: 'syz.2.10251': attribute type 2 has an invalid length. [ 555.751083][T28024] netlink: 'syz.3.10252': attribute type 1 has an invalid length. [ 555.769160][T28024] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10252'. [ 556.065261][T28034] netlink: set zone limit has 8 unknown bytes [ 556.374070][T28050] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 556.619755][T28057] dump_stack_lvl+0x100/0x190 [ 556.619784][T28057] should_fail_ex.cold+0x5/0xa [ 556.619799][T28057] ? prepare_alloc_pages+0x16d/0x5f0 [ 556.619818][T28057] should_fail_alloc_page+0xeb/0x140 [ 556.619835][T28057] prepare_alloc_pages+0x1f0/0x5f0 [ 556.619854][T28057] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 556.619879][T28057] ? rcu_is_watching+0x12/0xc0 [ 556.619901][T28057] ? trace_mm_page_alloc+0x17a/0x1d0 [ 556.619918][T28057] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 556.619943][T28057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.619967][T28057] ? find_held_lock+0x2b/0x80 [ 556.619981][T28057] ? is_bpf_text_address+0x8a/0x1a0 [ 556.620046][T28057] ? is_bpf_text_address+0x8a/0x1a0 [ 556.620070][T28057] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.620087][T28057] ? is_bpf_text_address+0x94/0x1a0 [ 556.620109][T28057] ? kernel_text_address+0x8d/0x100 [ 556.620131][T28057] ? __kernel_text_address+0xd/0x30 [ 556.620152][T28057] ? unwind_get_return_address+0x59/0xa0 [ 556.620182][T28057] alloc_pages_bulk_noprof+0x782/0x1490 [ 556.620211][T28057] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 556.620234][T28057] ? kasan_save_stack+0x30/0x50 [ 556.620260][T28057] ? alloc_pages_noprof+0x233/0x390 [ 556.620277][T28057] __kasan_populate_vmalloc+0xf0/0x210 [ 556.620302][T28057] alloc_vmap_area+0x95d/0x2bd0 [ 556.620325][T28057] ? __pfx_alloc_vmap_area+0x10/0x10 [ 556.620346][T28057] __get_vm_area_node+0x1ca/0x330 [ 556.620372][T28057] __vmalloc_node_range_noprof+0x213/0x1530 [ 556.620392][T28057] ? kernel_clone+0xfc/0x9a0 [ 556.620409][T28057] ? local_lock_release+0x99/0x130 [ 556.620431][T28057] ? kernel_clone+0xfc/0x9a0 [ 556.620453][T28057] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.620473][T28057] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 556.620493][T28057] ? rcu_is_watching+0x12/0xc0 [ 556.620514][T28057] ? trace_kmem_cache_alloc+0xf3/0x120 [ 556.620530][T28057] ? kernel_clone+0xfc/0x9a0 [ 556.620546][T28057] __vmalloc_node_noprof+0xad/0xf0 [ 556.620564][T28057] ? kernel_clone+0xfc/0x9a0 [ 556.620582][T28057] copy_process+0x5ec/0x7a10 [ 556.620597][T28057] ? futex_unqueue+0x133/0x2c0 [ 556.620623][T28057] ? __pfx_copy_process+0x10/0x10 [ 556.620645][T28057] ? _copy_from_user+0x59/0xd0 [ 556.620672][T28057] kernel_clone+0xfc/0x9a0 [ 556.620690][T28057] ? __pfx_kernel_clone+0x10/0x10 [ 556.620710][T28057] ? __pfx_futex_wait+0x10/0x10 [ 556.620736][T28057] __do_sys_clone3+0x214/0x290 [ 556.620753][T28057] ? __pfx___do_sys_clone3+0x10/0x10 [ 556.620795][T28057] do_syscall_64+0x106/0xf80 [ 556.620813][T28057] ? clear_bhb_loop+0x40/0x90 [ 556.620832][T28057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.620847][T28057] RIP: 0033:0x7f252a79c799 [ 556.620861][T28057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.620875][T28057] RSP: 002b:00007f252b722ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 556.620891][T28057] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f252a79c799 [ 556.620901][T28057] RDX: 00007f252b722f10 RSI: 0000000000000058 RDI: 00007f252b722f10 [ 556.620911][T28057] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000058 [ 556.620920][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.620929][T28057] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 556.620949][T28057] [ 556.621006][T28057] syz.2.10268: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 557.115543][T28067] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 557.134716][T28067] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 557.700665][T28094] netlink: 346 bytes leftover after parsing attributes in process `syz.3.10282'. [ 557.819348][T28057] ,cpuset=/,mems_allowed=0-1 [ 557.838017][T28057] CPU: 0 UID: 0 PID: 28057 Comm: syz.2.10268 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 557.838046][T28057] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 557.838053][T28057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.838062][T28057] Call Trace: [ 557.838067][T28057] [ 557.838073][T28057] dump_stack_lvl+0x100/0x190 [ 557.838099][T28057] warn_alloc.cold+0x95/0x1c1 [ 557.838124][T28057] ? __pfx_warn_alloc+0x10/0x10 [ 557.838144][T28057] ? lockdep_hardirqs_on+0x78/0x100 [ 557.838164][T28057] ? __get_vm_area_node+0x2c5/0x330 [ 557.838185][T28057] ? __get_vm_area_node+0x208/0x330 [ 557.838204][T28057] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 557.838222][T28057] ? local_lock_release+0x99/0x130 [ 557.838244][T28057] ? kernel_clone+0xfc/0x9a0 [ 557.838266][T28057] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 557.838285][T28057] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 557.838305][T28057] ? rcu_is_watching+0x12/0xc0 [ 557.838326][T28057] ? trace_kmem_cache_alloc+0xf3/0x120 [ 557.838343][T28057] ? kernel_clone+0xfc/0x9a0 [ 557.838358][T28057] __vmalloc_node_noprof+0xad/0xf0 [ 557.838375][T28057] ? kernel_clone+0xfc/0x9a0 [ 557.838393][T28057] copy_process+0x5ec/0x7a10 [ 557.838408][T28057] ? futex_unqueue+0x133/0x2c0 [ 557.838441][T28057] ? __pfx_copy_process+0x10/0x10 [ 557.838463][T28057] ? _copy_from_user+0x59/0xd0 [ 557.838489][T28057] kernel_clone+0xfc/0x9a0 [ 557.838506][T28057] ? __pfx_kernel_clone+0x10/0x10 [ 557.838527][T28057] ? __pfx_futex_wait+0x10/0x10 [ 557.838553][T28057] __do_sys_clone3+0x214/0x290 [ 557.838569][T28057] ? __pfx___do_sys_clone3+0x10/0x10 [ 557.838610][T28057] do_syscall_64+0x106/0xf80 [ 557.838627][T28057] ? clear_bhb_loop+0x40/0x90 [ 557.838645][T28057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.838660][T28057] RIP: 0033:0x7f252a79c799 [ 557.838673][T28057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.838687][T28057] RSP: 002b:00007f252b722ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 557.838701][T28057] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f252a79c799 [ 557.838711][T28057] RDX: 00007f252b722f10 RSI: 0000000000000058 RDI: 00007f252b722f10 [ 557.838720][T28057] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000058 [ 557.838729][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.838737][T28057] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 557.838756][T28057] [ 557.838789][T28057] Mem-Info: [ 558.879156][T28057] active_anon:3211 inactive_anon:18719 isolated_anon:0 [ 558.879156][T28057] active_file:18479 inactive_file:37787 isolated_file:0 [ 558.879156][T28057] unevictable:768 dirty:8 writeback:0 [ 558.879156][T28057] slab_reclaimable:11861 slab_unreclaimable:94405 [ 558.879156][T28057] mapped:34686 shmem:17975 pagetables:1611 [ 558.879156][T28057] sec_pagetables:0 bounce:0 [ 558.879156][T28057] kernel_misc_reclaimable:0 [ 558.879156][T28057] free:1302261 free_pcp:12033 free_cma:0 [ 559.100365][T28057] Node 0 active_anon:12844kB inactive_anon:76384kB active_file:73912kB inactive_file:151016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128968kB dirty:32kB writeback:0kB shmem:71616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11008kB pagetables:6200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.253021][T28057] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.384489][T28057] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.528040][T28057] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 559.533814][T28057] Node 0 DMA32 free:1262904kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12844kB inactive_anon:71392kB active_file:73912kB inactive_file:151016kB unevictable:1536kB writepending:32kB zspages:0kB present:3129332kB managed:2537404kB mlocked:0kB bounce:0kB free_pcp:43720kB local_pcp:43720kB free_cma:0kB [ 559.711804][T28057] lowmem_reserve[]: 0 0 1 1 1 [ 559.716534][T28057] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.876637][T28057] lowmem_reserve[]: 0 0 0 0 0 [ 559.900684][T28057] Node 1 Normal free:3929268kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10184kB local_pcp:10184kB free_cma:0kB [ 559.994341][T28167] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 560.044636][T28057] lowmem_reserve[]: 0 0 0 0 0 [ 560.068007][T28057] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 560.122713][T28057] Node 0 DMA32: 5126*4kB (U) 3776*8kB (UE) 2133*16kB (U) 102*32kB (UME) 250*64kB (UE) 407*128kB (UME) 349*256kB (UME) 185*512kB (UM) 95*1024kB (UM) 19*2048kB (U) 192*4096kB (UM) = 1262888kB [ 560.212933][T28057] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 560.261056][T28057] Node 1 Normal: 9*4kB (U) 2*8kB (UE) 6*16kB (UME) 11*32kB (UE) 5*64kB (UME) 7*128kB (UM) 6*256kB (U) 4*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 955*4096kB (UM) = 3929268kB [ 560.344729][T28057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.385909][T28057] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 560.413504][T28182] netlink: get zone limit has 8 unknown bytes [ 560.433562][T28057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.444537][T28184] openvswitch: netlink: IP tunnel dst address not specified [ 560.477496][T28057] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 560.527487][T28057] 65298 total pagecache pages [ 560.576542][T28057] 12 pages in swap cache [ 560.595363][T28057] Free swap = 124688kB [ 560.616420][T28057] Total swap = 124996kB [ 560.630896][T28186] netlink: 'syz.1.10325': attribute type 1 has an invalid length. [ 560.640872][T28057] 2097051 pages RAM [ 560.652233][T28057] 0 pages HighMem/MovableOnly [ 560.679455][T28057] 430820 pages reserved [ 560.697500][T28057] 0 pages cma reserved [ 560.777341][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.783750][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.931599][T28254] netlink: 342 bytes leftover after parsing attributes in process `syz.3.10357'. [ 562.758732][T28299] openvswitch: netlink: IP tunnel dst address not specified [ 563.079251][T28314] CIFS: VFS: Invalid SecurityFlags: [ 563.251729][T28324] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 563.487906][T28335] openvswitch: netlink: Flow key attribute not present in set flow. [ 564.060179][T28363] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 564.694340][T28390] netlink: 'syz.0.10419': attribute type 12 has an invalid length. [ 564.877882][T28401] netlink: 'syz.1.10424': attribute type 11 has an invalid length. [ 564.915736][T28401] netlink: 'syz.1.10424': attribute type 11 has an invalid length. [ 564.957711][T28401] netlink: 'syz.1.10424': attribute type 11 has an invalid length. [ 565.376295][T28425] netlink: zone id is out of range [ 565.395600][T28425] netlink: zone id is out of range [ 565.419260][T28425] netlink: zone id is out of range [ 565.445476][T28425] netlink: zone id is out of range [ 565.478075][T28425] netlink: zone id is out of range [ 565.497569][T28425] netlink: zone id is out of range [ 565.522987][T28425] netlink: zone id is out of range [ 565.763605][T28440] program syz.2.10442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.119070][T28451] NFSD: Failed to start, no listeners configured. [ 566.255894][T28463] dyndbg: expected <4096 bytes into control [ 566.414304][T28471] netlink: 'syz.1.10453': attribute type 2 has an invalid length. [ 567.364299][T18183] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 567.364334][T18183] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 567.379706][T18183] Bluetooth: hci3: Dropping invalid advertising data [ 567.386426][T18183] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 567.386446][T18183] Bluetooth: hci3: Dropping invalid advertising data [ 567.401426][T18183] Bluetooth: hci3: Malformed LE Event: 0x02 [ 567.683548][ T29] audit: type=1326 audit(4295051253.225:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28562 comm="syz.2.10485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f252a79c799 code=0x0 [ 567.737682][T18183] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 567.967738][T28571] netlink: 'syz.0.10489': attribute type 1 has an invalid length. [ 569.901724][T28670] nbd: must specify an index to disconnect [ 570.610444][T28707] net_ratelimit: 50 callbacks suppressed [ 570.610459][T28707] openvswitch: netlink: IP tunnel dst address not specified [ 572.515855][T28794] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.165546][T28924] netlink: 'syz.3.10650': attribute type 11 has an invalid length. [ 576.425451][T28981] openvswitch: netlink: IPv6 tunnel dst address is zero [ 577.148358][T29011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 577.310032][T28947] kexec: Could not allocate control_code_buffer [ 578.271277][T29061] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 578.303248][T29062] delete_channel: no stack [ 578.538909][T29075] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 578.998580][T18183] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 578.998605][T18183] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 579.017338][T18183] Bluetooth: hci0: Dropping invalid advertising data [ 579.024078][T18183] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 579.024098][T18183] Bluetooth: hci0: Dropping invalid advertising data [ 579.038189][T18183] Bluetooth: hci0: Malformed LE Event: 0x02 [ 579.860143][T29156] netlink: 'syz.1.10747': attribute type 11 has an invalid length. [ 579.914955][T29156] netlink: 'syz.1.10747': attribute type 11 has an invalid length. [ 579.945172][T29156] netlink: 'syz.1.10747': attribute type 11 has an invalid length. [ 580.405309][T29178] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 580.682628][T29192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 580.719312][T29186] Ignoring unsupported numa_zonelist_order value: [ 581.384475][T29224] netlink: 'syz.3.10779': attribute type 23 has an invalid length. [ 582.135600][ T5819] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 582.242768][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 582.242797][ T5819] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 582.242803][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.242812][ T5819] Call Trace: [ 582.242817][ T5819] [ 582.242823][ T5819] dump_stack_lvl+0x100/0x190 [ 582.242851][ T5819] dump_header+0xfb/0x606 [ 582.242867][ T5819] oom_kill_process.cold+0xd/0x330 [ 582.242884][ T5819] out_of_memory+0x340/0x14f0 [ 582.242909][ T5819] ? __pfx_out_of_memory+0x10/0x10 [ 582.242935][ T5819] mem_cgroup_out_of_memory+0xc6/0x130 [ 582.242955][ T5819] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 582.242972][ T5819] ? find_held_lock+0x2b/0x80 [ 582.242990][ T5819] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.243011][ T5819] ? _raw_spin_unlock+0x28/0x50 [ 582.243028][ T5819] try_charge_memcg+0x652/0xc90 [ 582.243047][ T5819] ? __pfx_try_charge_memcg+0x10/0x10 [ 582.243066][ T5819] ? find_held_lock+0x2b/0x80 [ 582.243078][ T5819] ? rcu_read_unlock+0x17/0x60 [ 582.243092][ T5819] ? rcu_read_unlock+0x17/0x60 [ 582.243109][ T5819] charge_memcg+0xa6/0x280 [ 582.243123][ T5819] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 582.243143][ T5819] __swap_cache_prepare_and_add+0x528/0x9e0 [ 582.243171][ T5819] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 582.243190][ T5819] ? __pfx_swap_entry_swapped+0x10/0x10 [ 582.243209][ T5819] swap_cache_alloc_folio+0x1cb/0x300 [ 582.243229][ T5819] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 582.243250][ T5819] ? rcu_is_watching+0x12/0xc0 [ 582.243275][ T5819] swap_cluster_readahead+0x411/0x770 [ 582.243299][ T5819] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 582.243322][ T5819] ? update_cfs_rq_load_avg+0x51/0x550 [ 582.243342][ T5819] ? __lock_acquire+0x4a5/0x2630 [ 582.243361][ T5819] ? get_vma_policy+0x23f/0x3b0 [ 582.243378][ T5819] swapin_readahead+0x160/0x12c0 [ 582.243404][ T5819] ? __pfx_swapin_readahead+0x10/0x10 [ 582.243423][ T5819] ? find_held_lock+0x2b/0x80 [ 582.243435][ T5819] ? swap_table_get+0x103/0x2c0 [ 582.243452][ T5819] ? swap_table_get+0x103/0x2c0 [ 582.243472][ T5819] ? swap_table_get+0x10d/0x2c0 [ 582.243490][ T5819] ? swap_cache_get_folio+0x1ae/0x600 [ 582.243535][ T5819] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 582.243553][ T5819] ? __pfx_get_swap_device+0x10/0x10 [ 582.243578][ T5819] ? do_swap_page+0xb2e/0x68e0 [ 582.243596][ T5819] do_swap_page+0xb2e/0x68e0 [ 582.243624][ T5819] ? __pfx_do_swap_page+0x10/0x10 [ 582.243643][ T5819] ? __free_object+0x2a8/0x400 [ 582.243662][ T5819] ? lockdep_hardirqs_on+0x78/0x100 [ 582.243681][ T5819] ? rcu_is_watching+0x12/0xc0 [ 582.243701][ T5819] ? __pte_offset_map+0x179/0x310 [ 582.243717][ T5819] __handle_mm_fault+0x18c1/0x2b60 [ 582.243739][ T5819] ? reacquire_held_locks+0xce/0x1e0 [ 582.243757][ T5819] ? __pfx___handle_mm_fault+0x10/0x10 [ 582.243779][ T5819] ? lock_vma_under_rcu+0x17c/0x590 [ 582.243809][ T5819] handle_mm_fault+0x36d/0xa20 [ 582.243831][ T5819] do_user_addr_fault+0x5a3/0x12f0 [ 582.243860][ T5819] exc_page_fault+0x6f/0xd0 [ 582.243877][ T5819] asm_exc_page_fault+0x26/0x30 [ 582.243890][ T5819] RIP: 0033:0x7f53da75cfce [ 582.243904][ T5819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.243918][ T5819] RSP: 002b:00007ffe1ce8d688 EFLAGS: 00010246 [ 582.243929][ T5819] RAX: 0000000000000000 RBX: 000055558316a500 RCX: 00007f53da75cfce [ 582.243938][ T5819] RDX: 00007ffe1ce8d6e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.243947][ T5819] RBP: 00007ffe1ce8d74c R08: 0000000000000000 R09: 0000000000000000 [ 582.243955][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 582.243963][ T5819] R13: 00000000000927c0 R14: 000000000008ea51 R15: 00007ffe1ce8d7a0 [ 582.243982][ T5819] [ 582.623673][ T5819] memory: usage 1252kB, limit 3072kB, failcnt 114702 [ 582.631988][ T5819] memory+swap: usage 1716kB, limit 9007199254740988kB, failcnt 0 [ 582.640056][ T5819] kmem: usage 1152kB, limit 9007199254740988kB, failcnt 0 [ 582.647421][ T5819] Memory cgroup stats for /syz0: [ 582.647530][ T5819] cache 0 [ 582.655608][ T5819] rss 20480 [ 582.658806][ T5819] rss_huge 0 [ 582.661980][ T5819] shmem 0 [ 582.664894][ T5819] mapped_file 0 [ 582.668365][ T5819] dirty 0 [ 582.671280][ T5819] writeback 0 [ 582.674545][ T5819] workingset_refault_anon 6959 [ 582.679328][ T5819] workingset_refault_file 51682 [ 582.684154][ T5819] swap 466944 [ 582.687414][ T5819] swapcached 312987648 [ 582.691494][ T5819] pgpgin 339568 [ 582.695000][ T5819] pgpgout 342613 [ 582.698573][ T5819] pgfault 381768 [ 582.702123][ T5819] pgmajfault 2268 [ 582.705737][ T5819] inactive_anon 12288 [ 582.709726][ T5819] active_anon 0 [ 582.713177][ T5819] inactive_file 0 [ 582.716791][ T5819] active_file 0 [ 582.721709][ T5819] unevictable 0 [ 582.725191][ T5819] hierarchical_memory_limit 3145728 [ 582.730438][ T5819] hierarchical_memsw_limit 9223372036854771712 [ 582.736588][ T5819] total_cache 0 [ 582.740103][ T5819] total_rss 20480 [ 582.743713][ T5819] total_rss_huge 0 [ 582.747435][ T5819] total_shmem 0 [ 582.750870][ T5819] total_mapped_file 0 [ 582.754825][ T5819] total_dirty 0 [ 582.758304][ T5819] total_writeback 0 [ 582.762089][ T5819] total_workingset_refault_anon 6959 [ 582.767370][ T5819] total_workingset_refault_file 51682 [ 582.772715][ T5819] total_swap 466944 [ 582.776500][ T5819] total_swapcached 312987648 [ 582.781115][ T5819] total_pgpgin 339568 [ 582.785074][ T5819] total_pgpgout 342613 [ 582.789136][ T5819] total_pgfault 381768 [ 582.793179][ T5819] total_pgmajfault 2268 [ 582.797346][ T5819] total_inactive_anon 12288 [ 582.801855][ T5819] total_active_anon 0 [ 582.805812][ T5819] total_inactive_file 0 [ 582.810019][ T5819] total_active_file 0 [ 582.814260][ T5819] total_unevictable 0 [ 582.818330][ T5819] anon_cost 170 [ 582.823243][ T5819] file_cost 0 [ 582.826552][ T5819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10794,pid=29256,uid=0 [ 582.841702][ T5819] Memory cgroup out of memory: Killed process 29256 (syz.0.10794) total-vm:104404kB, anon-rss:1256kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 584.429508][T29336] delete_channel: no stack [ 585.538732][T29384] openvswitch: HfR: Dropping previously announced user features [ 585.678733][T29386] binder_alloc: binder_alloc_mmap_handler: 29385 0-1000 already mapped failed -16 [ 585.868580][T29335] kexec: Could not allocate control_code_buffer [ 586.005939][T29397] netlink: 'syz.3.10856': attribute type 1 has an invalid length. [ 586.038151][T29397] nbd: error processing sock list [ 586.344716][T29409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10861'. [ 586.749612][T29425] FAULT_INJECTION: forcing a failure. [ 586.749612][T29425] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 586.794534][T29425] CPU: 0 UID: 0 PID: 29425 Comm: syz.2.10868 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 586.794565][T29425] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 586.794572][T29425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.794582][T29425] Call Trace: [ 586.794587][T29425] [ 586.794594][T29425] dump_stack_lvl+0x100/0x190 [ 586.794622][T29425] should_fail_ex.cold+0x5/0xa [ 586.794641][T29425] core_sys_select+0x938/0xbb0 [ 586.794668][T29425] ? __pfx_core_sys_select+0x10/0x10 [ 586.794709][T29425] ? ktime_get_ts64+0x2d2/0x3f0 [ 586.794727][T29425] ? read_tsc+0x9/0x20 [ 586.794743][T29425] ? ktime_get_ts64+0x256/0x3f0 [ 586.794760][T29425] kern_select+0x20c/0x270 [ 586.794784][T29425] ? __pfx_kern_select+0x10/0x10 [ 586.794813][T29425] __x64_sys_select+0xbd/0x160 [ 586.794834][T29425] ? do_syscall_64+0x95/0xf80 [ 586.794852][T29425] ? lockdep_hardirqs_on+0x78/0x100 [ 586.794869][T29425] do_syscall_64+0x106/0xf80 [ 586.794886][T29425] ? clear_bhb_loop+0x40/0x90 [ 586.794903][T29425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.794918][T29425] RIP: 0033:0x7f252a79c799 [ 586.794932][T29425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.794946][T29425] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 586.794960][T29425] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 586.794970][T29425] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 586.794979][T29425] RBP: 00007f252a832bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 586.794988][T29425] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 586.794997][T29425] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 586.795017][T29425] [ 587.041182][T29430] openvswitch: netlink: IP tunnel dst address not specified [ 587.204131][T29459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10875'. [ 591.478134][T29647] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 591.961314][T29670] nfs: Unknown parameter 'nl802154' [ 592.394853][T29696] netlink: ct family unspecified [ 592.654822][T29708] nbd: illegal input index 37139 [ 594.760778][T29811] FAULT_INJECTION: forcing a failure. [ 594.760778][T29811] name failslab, interval 1, probability 0, space 0, times 0 [ 594.806592][T29811] CPU: 0 UID: 0 PID: 29811 Comm: syz.1.11031 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 594.806624][T29811] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 594.806631][T29811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.806641][T29811] Call Trace: [ 594.806646][T29811] [ 594.806652][T29811] dump_stack_lvl+0x100/0x190 [ 594.806681][T29811] should_fail_ex.cold+0x5/0xa [ 594.806699][T29811] should_failslab+0xc2/0x120 [ 594.806716][T29811] __kmalloc_cache_noprof+0x7a/0x6f0 [ 594.806735][T29811] ? alloc_ldt_struct+0x5d/0x1b0 [ 594.806765][T29811] ? __pfx_down_write_killable+0x10/0x10 [ 594.806791][T29811] alloc_ldt_struct+0x5d/0x1b0 [ 594.806814][T29811] write_ldt+0x62b/0xd40 [ 594.806832][T29811] ? __pfx_write_ldt+0x10/0x10 [ 594.806848][T29811] ? xfd_validate_state+0x129/0x190 [ 594.806875][T29811] __x64_sys_modify_ldt+0xb1/0x170 [ 594.806891][T29811] do_syscall_64+0x106/0xf80 [ 594.806907][T29811] ? clear_bhb_loop+0x40/0x90 [ 594.806925][T29811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.806940][T29811] RIP: 0033:0x7f822019c799 [ 594.806953][T29811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.806967][T29811] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 594.806982][T29811] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 594.806992][T29811] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 594.807000][T29811] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 594.807009][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.807017][T29811] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 594.807038][T29811] [ 595.337507][T29818] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 599.178904][T29971] syz.0.11095 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=0 [ 599.293186][T29971] CPU: 0 UID: 0 PID: 29971 Comm: syz.0.11095 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 599.293215][T29971] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 599.293221][T29971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.293230][T29971] Call Trace: [ 599.293235][T29971] [ 599.293241][T29971] dump_stack_lvl+0x100/0x190 [ 599.293268][T29971] dump_header+0xfb/0x606 [ 599.293285][T29971] oom_kill_process.cold+0xd/0x330 [ 599.293303][T29971] out_of_memory+0x340/0x14f0 [ 599.293329][T29971] ? __pfx_out_of_memory+0x10/0x10 [ 599.293355][T29971] mem_cgroup_out_of_memory+0xc6/0x130 [ 599.293375][T29971] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 599.293434][T29971] ? find_held_lock+0x2b/0x80 [ 599.293452][T29971] ? do_raw_spin_unlock+0x145/0x1e0 [ 599.293473][T29971] ? _raw_spin_unlock+0x28/0x50 [ 599.293491][T29971] try_charge_memcg+0x652/0xc90 [ 599.293514][T29971] ? __pfx_try_charge_memcg+0x10/0x10 [ 599.293528][T29971] ? rcu_read_unlock+0x17/0x60 [ 599.293543][T29971] ? rcu_read_unlock+0x17/0x60 [ 599.293562][T29971] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 599.293585][T29971] __memcg_kmem_charge_page+0xd0/0x530 [ 599.293604][T29971] __alloc_frozen_pages_noprof+0x328/0x2ba0 [ 599.293632][T29971] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 599.293658][T29971] ? __split_page_owner+0x1f9/0x350 [ 599.293674][T29971] ? alloc_pages_bulk_noprof+0x811/0x1490 [ 599.293696][T29971] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 599.293720][T29971] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 599.293742][T29971] ? __vmalloc_node_range_noprof+0x11eb/0x1530 [ 599.293760][T29971] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 599.293783][T29971] ? __lock_acquire+0x4a5/0x2630 [ 599.293802][T29971] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.293827][T29971] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.293852][T29971] ? policy_nodemask+0xed/0x4f0 [ 599.293868][T29971] alloc_pages_mpol+0x1fb/0x550 [ 599.293885][T29971] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 599.293902][T29971] ? rcu_read_unlock+0x17/0x60 [ 599.293919][T29971] alloc_pages_noprof+0x131/0x390 [ 599.293935][T29971] __vmalloc_node_range_noprof+0xa1d/0x1530 [ 599.293958][T29971] ? __do_sys_listmount+0x289/0xee0 [ 599.293986][T29971] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.294008][T29971] ? rcu_is_watching+0x12/0xc0 [ 599.294034][T29971] __kvmalloc_node_noprof+0x3de/0xa00 [ 599.294057][T29971] ? __do_sys_listmount+0x289/0xee0 [ 599.294077][T29971] ? __do_sys_listmount+0x289/0xee0 [ 599.294097][T29971] ? _copy_from_user+0x59/0xd0 [ 599.294121][T29971] ? copy_mnt_id_req+0x1b1/0x350 [ 599.294141][T29971] __do_sys_listmount+0x289/0xee0 [ 599.294162][T29971] ? __pfx_do_futex+0x10/0x10 [ 599.294182][T29971] ? __pfx___might_resched+0x10/0x10 [ 599.294202][T29971] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 599.294288][T29971] ? __pfx___do_sys_listmount+0x10/0x10 [ 599.294323][T29971] do_syscall_64+0x106/0xf80 [ 599.294340][T29971] ? clear_bhb_loop+0x40/0x90 [ 599.294359][T29971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.294374][T29971] RIP: 0033:0x7f53da79c799 [ 599.294394][T29971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.294408][T29971] RSP: 002b:00007f53db743028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 599.294423][T29971] RAX: ffffffffffffffda RBX: 00007f53daa15fa0 RCX: 00007f53da79c799 [ 599.294436][T29971] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 599.294445][T29971] RBP: 00007f53da832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 599.294454][T29971] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 599.294462][T29971] R13: 00007f53daa16038 R14: 00007f53daa15fa0 R15: 00007ffe1ce8d3a8 [ 599.294482][T29971] [ 599.672432][T29971] memory: usage 3072kB, limit 3072kB, failcnt 118167 [ 599.679156][T29971] memory+swap: usage 3596kB, limit 9007199254740988kB, failcnt 0 [ 599.686926][T29971] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 599.694592][T29971] Memory cgroup stats for /syz0: [ 599.694800][T29971] cache 0 [ 599.702732][T29971] rss 0 [ 599.705479][T29971] rss_huge 0 [ 599.708656][T29971] shmem 0 [ 599.711668][T29971] mapped_file 0 [ 599.715191][T29971] dirty 0 [ 599.718111][T29971] writeback 0 [ 599.721423][T29971] workingset_refault_anon 7231 [ 599.726217][T29971] workingset_refault_file 51682 [ 599.732447][T29971] swap 536576 [ 599.735722][T29971] swapcached 325980160 [ 599.739893][T29971] pgpgin 347864 [ 599.743330][T29971] pgpgout 350916 [ 599.746851][T29971] pgfault 395950 [ 599.750468][T29971] pgmajfault 2396 [ 599.754080][T29971] inactive_anon 0 [ 599.757693][T29971] active_anon 0 [ 599.761203][T29971] inactive_file 0 [ 599.764814][T29971] active_file 0 [ 599.768256][T29971] unevictable 0 [ 599.771798][T29971] hierarchical_memory_limit 3145728 [ 599.776992][T29971] hierarchical_memsw_limit 9223372036854771712 [ 599.783242][T29971] total_cache 0 [ 599.786693][T29971] total_rss 0 [ 599.790023][T29971] total_rss_huge 0 [ 599.793785][T29971] total_shmem 0 [ 599.797229][T29971] total_mapped_file 0 [ 599.801246][T29971] total_dirty 0 [ 599.804732][T29971] total_writeback 0 [ 599.808555][T29971] total_workingset_refault_anon 7231 [ 599.813814][T29971] total_workingset_refault_file 51682 [ 599.819235][T29971] total_swap 536576 [ 599.823021][T29971] total_swapcached 325980160 [ 599.827585][T29971] total_pgpgin 347864 [ 599.831667][T29971] total_pgpgout 350916 [ 599.837085][T29971] total_pgfault 395950 [ 599.841170][T29971] total_pgmajfault 2396 [ 599.845370][T29971] total_inactive_anon 0 [ 599.849564][T29971] total_active_anon 0 [ 599.853520][T29971] total_inactive_file 0 [ 599.857702][T29971] total_active_file 0 [ 599.861688][T29971] total_unevictable 0 [ 599.865646][T29971] anon_cost 170 [ 599.869176][T29971] file_cost 0 [ 599.872448][T29971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11095,pid=29970,uid=0 [ 599.889902][T29971] Memory cgroup out of memory: Killed process 29970 (syz.0.11095) total-vm:104404kB, anon-rss:1232kB, file-rss:22672kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 600.252310][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11102'. [ 601.358610][T30016] bridge0: port 3(hsr0) entered blocking state [ 601.419478][T30016] bridge0: port 3(hsr0) entered disabled state [ 601.492738][T30016] hsr0: entered allmulticast mode [ 601.552339][T30016] hsr_slave_0: entered allmulticast mode [ 601.603785][T30016] hsr_slave_1: entered allmulticast mode [ 601.682016][T30016] hsr0: entered promiscuous mode [ 601.727375][T30016] bridge0: port 3(hsr0) entered blocking state [ 601.733927][T30016] bridge0: port 3(hsr0) entered forwarding state [ 601.812263][T30023] zswap: compressor  not available [ 602.257447][T30044] FAULT_INJECTION: forcing a failure. [ 602.257447][T30044] name failslab, interval 1, probability 0, space 0, times 0 [ 602.323438][T30044] CPU: 0 UID: 0 PID: 30044 Comm: syz.2.11127 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 602.323468][T30044] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 602.323475][T30044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.323485][T30044] Call Trace: [ 602.323490][T30044] [ 602.323496][T30044] dump_stack_lvl+0x100/0x190 [ 602.323525][T30044] should_fail_ex.cold+0x5/0xa [ 602.323543][T30044] should_failslab+0xc2/0x120 [ 602.323559][T30044] __kmalloc_cache_noprof+0x7a/0x6f0 [ 602.323578][T30044] ? vkms_plane_duplicate_state+0x87/0x130 [ 602.323714][T30044] vkms_plane_duplicate_state+0x87/0x130 [ 602.323737][T30044] drm_atomic_get_plane_state+0x279/0x760 [ 602.323823][T30044] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 602.323869][T30044] ? trace_contention_end+0x140/0x180 [ 602.323894][T30044] ? __mutex_lock+0x26a/0x1b90 [ 602.323913][T30044] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 602.323932][T30044] ? drm_master_internal_acquire+0x21/0x80 [ 602.323967][T30044] drm_client_modeset_commit_locked+0x14d/0x580 [ 602.323989][T30044] drm_client_modeset_commit+0x4f/0x80 [ 602.324008][T30044] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 602.324056][T30044] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 602.324097][T30044] drm_fbdev_client_restore+0x1b/0x30 [ 602.324121][T30044] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 602.324143][T30044] drm_client_dev_restore+0x205/0x2a0 [ 602.324173][T30044] drm_release+0x2c6/0x360 [ 602.324213][T30044] ? __pfx_drm_release+0x10/0x10 [ 602.324229][T30044] __fput+0x3ff/0xb40 [ 602.324252][T30044] task_work_run+0x150/0x240 [ 602.324275][T30044] ? __pfx_task_work_run+0x10/0x10 [ 602.324301][T30044] exit_to_user_mode_loop+0x100/0x4a0 [ 602.324322][T30044] do_syscall_64+0x668/0xf80 [ 602.324339][T30044] ? clear_bhb_loop+0x40/0x90 [ 602.324358][T30044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.324373][T30044] RIP: 0033:0x7f252a79c799 [ 602.324388][T30044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.324403][T30044] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 602.324417][T30044] RAX: 0000000000000000 RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 602.324428][T30044] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 602.324438][T30044] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 602.324447][T30044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.324455][T30044] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 602.324476][T30044] [ 604.335731][T30113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11145'. [ 604.755566][T30129] netlink: 'syz.3.11153': attribute type 2 has an invalid length. [ 605.275065][T30156] bridge0: port 3(hsr0) entered blocking state [ 605.304463][T30156] bridge0: port 3(hsr0) entered disabled state [ 605.346590][T30156] hsr0: entered allmulticast mode [ 605.379682][T30156] hsr_slave_0: entered allmulticast mode [ 605.414386][T30156] hsr_slave_1: entered allmulticast mode [ 605.434343][T30156] hsr0: entered promiscuous mode [ 605.459707][T30156] bridge0: port 3(hsr0) entered blocking state [ 605.465974][T30156] bridge0: port 3(hsr0) entered forwarding state [ 607.629564][T30217] netlink: 'syz.1.11188': attribute type 2 has an invalid length. [ 607.790520][T30224] FAULT_INJECTION: forcing a failure. [ 607.790520][T30224] name failslab, interval 1, probability 0, space 0, times 0 [ 607.848158][T30224] CPU: 0 UID: 0 PID: 30224 Comm: syz.1.11191 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 607.848190][T30224] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 607.848197][T30224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.848207][T30224] Call Trace: [ 607.848212][T30224] [ 607.848218][T30224] dump_stack_lvl+0x100/0x190 [ 607.848247][T30224] should_fail_ex.cold+0x5/0xa [ 607.848264][T30224] ? lsm_blob_alloc+0x68/0x90 [ 607.848282][T30224] should_failslab+0xc2/0x120 [ 607.848298][T30224] __kmalloc_noprof+0xe0/0x850 [ 607.848320][T30224] ? trace_kmem_cache_alloc+0xf3/0x120 [ 607.848338][T30224] lsm_blob_alloc+0x68/0x90 [ 607.848356][T30224] security_prepare_creds+0x2d/0x290 [ 607.848373][T30224] prepare_creds+0x5d6/0x950 [ 607.848396][T30224] lookup_user_key+0x8e9/0x1300 [ 607.848499][T30224] ? __pfx_lookup_user_key+0x10/0x10 [ 607.848523][T30224] ? find_held_lock+0x2b/0x80 [ 607.848538][T30224] ? setid_policy_lookup+0x10c/0x350 [ 607.848585][T30224] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 607.848612][T30224] ? bpf_lsm_capable+0x9/0x10 [ 607.848628][T30224] ? security_capable+0x80/0x260 [ 607.848650][T30224] keyctl_get_persistent+0x197/0x8b0 [ 607.848669][T30224] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 607.848688][T30224] ? __x64_sys_futex+0x34f/0x4d0 [ 607.848706][T30224] ? __x64_sys_futex+0x358/0x4d0 [ 607.848727][T30224] ? xfd_validate_state+0x129/0x190 [ 607.848751][T30224] __do_sys_keyctl+0x3b2/0x5a0 [ 607.848781][T30224] do_syscall_64+0x106/0xf80 [ 607.848800][T30224] ? clear_bhb_loop+0x40/0x90 [ 607.848819][T30224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.848835][T30224] RIP: 0033:0x7f822019c799 [ 607.848849][T30224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.848863][T30224] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 607.848878][T30224] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 607.848888][T30224] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 607.848898][T30224] RBP: 00007f8220232bd9 R08: 000000000000000c R09: 0000000000000000 [ 607.848907][T30224] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 607.848917][T30224] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 607.848936][T30224] [ 608.198528][T30230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11194'. [ 609.079941][T30281] netlink: 29 bytes leftover after parsing attributes in process `syz.2.11207'. [ 609.151851][T30284] sctp: [Deprecated]: syz.1.11208 (pid 30284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.151851][T30284] Use struct sctp_sack_info instead [ 610.244548][T30328] bridge0: port 4(ipvlan0) entered blocking state [ 610.273611][T30328] bridge0: port 4(ipvlan0) entered disabled state [ 610.314590][T30328] ipvlan0: entered allmulticast mode [ 610.319903][T30328] veth0_vlan: entered allmulticast mode [ 610.385953][T30328] ipvlan0: left allmulticast mode [ 610.412958][T30328] veth0_vlan: left allmulticast mode [ 614.328551][T30467] tunl0: entered allmulticast mode [ 616.480834][T30529] FAULT_INJECTION: forcing a failure. [ 616.480834][T30529] name failslab, interval 1, probability 0, space 0, times 0 [ 616.562317][T30529] CPU: 0 UID: 0 PID: 30529 Comm: syz.2.11319 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 616.562348][T30529] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 616.562356][T30529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.562365][T30529] Call Trace: [ 616.562370][T30529] [ 616.562376][T30529] dump_stack_lvl+0x100/0x190 [ 616.562406][T30529] should_fail_ex.cold+0x5/0xa [ 616.562423][T30529] ? lsm_blob_alloc+0x68/0x90 [ 616.562441][T30529] should_failslab+0xc2/0x120 [ 616.562456][T30529] __kmalloc_noprof+0xe0/0x850 [ 616.562477][T30529] ? trace_kmalloc+0x101/0x130 [ 616.562495][T30529] lsm_blob_alloc+0x68/0x90 [ 616.562513][T30529] security_sk_alloc+0x2d/0x290 [ 616.562534][T30529] sk_prot_alloc+0x12a/0x2a0 [ 616.562628][T30529] sk_alloc+0x36/0xe80 [ 616.562646][T30529] __netlink_create+0x5e/0x2c0 [ 616.562696][T30529] ? __wake_up+0x3f/0x60 [ 616.562714][T30529] netlink_create+0x293/0x610 [ 616.562731][T30529] ? __pfx_genl_bind+0x10/0x10 [ 616.562750][T30529] ? __pfx_genl_unbind+0x10/0x10 [ 616.562768][T30529] ? __pfx_genl_release+0x10/0x10 [ 616.562813][T30529] __sock_create+0x339/0x860 [ 616.562840][T30529] __sys_socket+0x14d/0x260 [ 616.562862][T30529] ? exc_page_fault+0x6f/0xd0 [ 616.562880][T30529] ? __pfx___sys_socket+0x10/0x10 [ 616.562904][T30529] ? do_user_addr_fault+0x8d6/0x12f0 [ 616.562930][T30529] __x64_sys_socket+0x72/0xb0 [ 616.562953][T30529] ? lockdep_hardirqs_on+0x78/0x100 [ 616.562970][T30529] do_syscall_64+0x106/0xf80 [ 616.562988][T30529] ? clear_bhb_loop+0x40/0x90 [ 616.563006][T30529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.563021][T30529] RIP: 0033:0x7f252a79e007 [ 616.563036][T30529] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.563051][T30529] RSP: 002b:00007f252b721f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 616.563066][T30529] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79e007 [ 616.563076][T30529] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 616.563085][T30529] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 616.563094][T30529] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 616.563103][T30529] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 616.563123][T30529] [ 616.929042][T30533] sd 0:0:1:0: PR command failed: 1026 [ 616.934733][T30533] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 616.941479][T30533] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 617.810213][T30561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11331'. [ 617.838248][T30563] tunl0: entered allmulticast mode [ 619.094842][T30558] kexec: Could not allocate control_code_buffer [ 619.103465][T30594] loop6: detected capacity change from 0 to 8 [ 620.541435][T30646] FAULT_INJECTION: forcing a failure. [ 620.541435][T30646] name failslab, interval 1, probability 0, space 0, times 0 [ 620.584140][T30646] CPU: 0 UID: 0 PID: 30646 Comm: syz.2.11368 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 620.584172][T30646] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 620.584178][T30646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.584187][T30646] Call Trace: [ 620.584193][T30646] [ 620.584198][T30646] dump_stack_lvl+0x100/0x190 [ 620.584227][T30646] should_fail_ex.cold+0x5/0xa [ 620.584245][T30646] should_failslab+0xc2/0x120 [ 620.584261][T30646] __kmalloc_cache_noprof+0x7a/0x6f0 [ 620.584280][T30646] ? io_uring_setup.cold+0x6c/0x1d09 [ 620.584306][T30646] io_uring_setup.cold+0x6c/0x1d09 [ 620.584331][T30646] ? __pfx_io_uring_setup+0x10/0x10 [ 620.584350][T30646] ? do_futex+0x192/0x350 [ 620.584370][T30646] ? __pfx_do_futex+0x10/0x10 [ 620.584398][T30646] ? xfd_validate_state+0x129/0x190 [ 620.584430][T30646] __x64_sys_io_uring_setup+0xc2/0x170 [ 620.584449][T30646] do_syscall_64+0x106/0xf80 [ 620.584466][T30646] ? clear_bhb_loop+0x40/0x90 [ 620.584484][T30646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.584500][T30646] RIP: 0033:0x7f252a79c799 [ 620.584514][T30646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.584529][T30646] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 620.584544][T30646] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 620.584554][T30646] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 620.584562][T30646] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.584571][T30646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.584580][T30646] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 620.584599][T30646] [ 621.868953][T30613] kexec: Could not allocate control_code_buffer [ 621.908853][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.915242][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.340633][T30753] FAULT_INJECTION: forcing a failure. [ 624.340633][T30753] name failslab, interval 1, probability 0, space 0, times 0 [ 624.416242][T30753] CPU: 0 UID: 0 PID: 30753 Comm: syz.1.11410 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 624.416274][T30753] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 624.416281][T30753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.416291][T30753] Call Trace: [ 624.416297][T30753] [ 624.416303][T30753] dump_stack_lvl+0x100/0x190 [ 624.416331][T30753] should_fail_ex.cold+0x5/0xa [ 624.416350][T30753] should_failslab+0xc2/0x120 [ 624.416366][T30753] __kmalloc_cache_noprof+0x7a/0x6f0 [ 624.416384][T30753] ? assoc_array_delete+0x101/0xd10 [ 624.416404][T30753] ? __lock_acquire+0x4a5/0x2630 [ 624.416426][T30753] assoc_array_delete+0x101/0xd10 [ 624.416450][T30753] ? __pfx_assoc_array_delete+0x10/0x10 [ 624.416477][T30753] ? __pfx_down_write+0x10/0x10 [ 624.416497][T30753] ? __sys_bind+0x1c7/0x260 [ 624.416516][T30753] key_unlink+0xbc/0x310 [ 624.416533][T30753] ? __pfx_key_unlink+0x10/0x10 [ 624.416551][T30753] ? xfd_validate_state+0x129/0x190 [ 624.416575][T30753] keyctl_keyring_unlink+0xdc/0x1b0 [ 624.416596][T30753] __do_sys_keyctl+0x3dd/0x5a0 [ 624.416618][T30753] do_syscall_64+0x106/0xf80 [ 624.416635][T30753] ? clear_bhb_loop+0x40/0x90 [ 624.416653][T30753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.416668][T30753] RIP: 0033:0x7f822019c799 [ 624.416681][T30753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.416695][T30753] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 624.416709][T30753] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 624.416719][T30753] RDX: 7ffffffffffffffb RSI: fffffffffffffffd RDI: 0000000000000009 [ 624.416729][T30753] RBP: 00007f8220232bd9 R08: 8000000000000000 R09: 0000000000000000 [ 624.416738][T30753] R10: 080000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 624.416746][T30753] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 624.416766][T30753] [ 625.787789][T30807] overlayfs: missing 'lowerdir' [ 625.833924][T30806] NFSD: Failed to start, no listeners configured. [ 625.870857][T30814] Invalid ELF header magic: != ELF [ 627.143245][T30861] zswap: compressor not available [ 627.675162][T30875] overlayfs: missing 'lowerdir' [ 629.082062][T30937] Invalid ELF header magic: != ELF [ 630.338400][T30993] bridge0: port 4(dummy0) entered blocking state [ 630.370232][T30993] bridge0: port 4(dummy0) entered disabled state [ 630.403957][T30993] dummy0: entered allmulticast mode [ 630.451056][T30993] dummy0: entered promiscuous mode [ 630.469731][T30993] bridge0: port 4(dummy0) entered blocking state [ 630.476171][T30993] bridge0: port 4(dummy0) entered forwarding state [ 630.718435][T31012] futex_wake_op: syz.2.11519 tries to shift op by -2048; fix this program [ 630.767914][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11523'. [ 630.805482][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11523'. [ 630.900531][T31005] 0x000000000001-0x000000020000 : "" [ 630.996961][T31005] ftl_cs: FTL header corrupt! [ 632.747539][T31095] FAULT_INJECTION: forcing a failure. [ 632.747539][T31095] name failslab, interval 1, probability 0, space 0, times 0 [ 632.817155][T31095] CPU: 0 UID: 0 PID: 31095 Comm: syz.2.11552 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 632.817187][T31095] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 632.817194][T31095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.817204][T31095] Call Trace: [ 632.817209][T31095] [ 632.817215][T31095] dump_stack_lvl+0x100/0x190 [ 632.817272][T31095] should_fail_ex.cold+0x5/0xa [ 632.817290][T31095] should_failslab+0xc2/0x120 [ 632.817306][T31095] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 632.817327][T31095] ? copy_net_ns+0xe8/0x7c0 [ 632.817352][T31095] copy_net_ns+0xe8/0x7c0 [ 632.817370][T31095] ? copy_cgroup_ns+0x71/0x970 [ 632.817390][T31095] create_new_namespaces+0x3ea/0xac0 [ 632.817410][T31095] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 632.817427][T31095] ksys_unshare+0x473/0xad0 [ 632.817447][T31095] ? __pfx_ksys_unshare+0x10/0x10 [ 632.817473][T31095] __x64_sys_unshare+0x31/0x40 [ 632.817490][T31095] do_syscall_64+0x106/0xf80 [ 632.817508][T31095] ? clear_bhb_loop+0x40/0x90 [ 632.817526][T31095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.817541][T31095] RIP: 0033:0x7f252a79c799 [ 632.817555][T31095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.817569][T31095] RSP: 002b:00007f252b723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 632.817584][T31095] RAX: ffffffffffffffda RBX: 00007f252aa15fa0 RCX: 00007f252a79c799 [ 632.817597][T31095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 632.817606][T31095] RBP: 00007f252a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 632.817615][T31095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.817623][T31095] R13: 00007f252aa16038 R14: 00007f252aa15fa0 R15: 00007fff2abae078 [ 632.817644][T31095] [ 633.147772][T31102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11557'. [ 633.191780][T31104] ovs_: entered promiscuous mode [ 633.469507][T31118] netlink: 342 bytes leftover after parsing attributes in process `syz.1.11562'. [ 635.030101][T31177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11588'. [ 637.979455][T31265] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 639.151466][T31299] netlink: 334 bytes leftover after parsing attributes in process `syz.3.11639'. [ 639.443097][T18183] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 639.443124][T18183] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 639.458988][T18183] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 639.459009][T18183] Bluetooth: hci0: adv larger than maximum supported [ 639.469085][T18183] Bluetooth: hci0: adv larger than maximum supported [ 639.476493][T18183] Bluetooth: hci0: Malformed LE Event: 0x0d [ 639.725828][T31323] bridge0: port 4(veth0_to_bridge) entered blocking state [ 639.798188][T31323] bridge0: port 4(veth0_to_bridge) entered disabled state [ 639.875936][T31323] veth0_to_bridge: entered allmulticast mode [ 639.956339][T31323] veth0_to_bridge: entered promiscuous mode [ 640.021786][T31323] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.167649][T31323] bridge0: port 4(veth0_to_bridge) entered blocking state [ 640.174938][T31323] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 641.374029][T31374] ovs_: entered promiscuous mode [ 641.847445][T31385] Invalid ELF header magic: != ELF [ 642.119652][T18183] Bluetooth: hci3: Malformed Event: 0x13 [ 643.090565][T31436] FAULT_INJECTION: forcing a failure. [ 643.090565][T31436] name failslab, interval 1, probability 0, space 0, times 0 [ 643.151754][T31436] CPU: 0 UID: 0 PID: 31436 Comm: syz.1.11689 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 643.151786][T31436] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 643.151793][T31436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.151802][T31436] Call Trace: [ 643.151808][T31436] [ 643.151814][T31436] dump_stack_lvl+0x100/0x190 [ 643.151843][T31436] should_fail_ex.cold+0x5/0xa [ 643.151862][T31436] should_failslab+0xc2/0x120 [ 643.151878][T31436] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 643.151900][T31436] ? alloc_empty_file+0x55/0x1c0 [ 643.151923][T31436] alloc_empty_file+0x55/0x1c0 [ 643.151942][T31436] alloc_file_pseudo+0x13a/0x230 [ 643.151962][T31436] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.151980][T31436] ? alloc_fd+0x476/0x790 [ 643.151995][T31436] ? do_raw_spin_unlock+0x145/0x1e0 [ 643.152018][T31436] __anon_inode_getfile+0xe8/0x280 [ 643.152071][T31436] anon_inode_getfile_fmode+0x37/0xa0 [ 643.152091][T31436] do_eventfd+0x159/0x2b0 [ 643.152113][T31436] __x64_sys_eventfd+0x32/0x50 [ 643.152132][T31436] do_syscall_64+0x106/0xf80 [ 643.152153][T31436] ? clear_bhb_loop+0x40/0x90 [ 643.152170][T31436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.152185][T31436] RIP: 0033:0x7f822019c799 [ 643.152199][T31436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.152214][T31436] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 643.152228][T31436] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 643.152238][T31436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.152247][T31436] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 643.152256][T31436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.152265][T31436] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 643.152284][T31436] [ 645.302152][T31489] FAULT_INJECTION: forcing a failure. [ 645.302152][T31489] name failslab, interval 1, probability 0, space 0, times 0 [ 645.361736][T31489] CPU: 0 UID: 0 PID: 31489 Comm: syz.1.11710 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 645.361768][T31489] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 645.361776][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.361785][T31489] Call Trace: [ 645.361790][T31489] [ 645.361796][T31489] dump_stack_lvl+0x100/0x190 [ 645.361828][T31489] should_fail_ex.cold+0x5/0xa [ 645.361848][T31489] should_failslab+0xc2/0x120 [ 645.361865][T31489] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 645.361888][T31489] ? prepare_creds+0x2c/0x950 [ 645.361914][T31489] ? __x64_sys_futex+0x34f/0x4d0 [ 645.361933][T31489] ? __x64_sys_futex+0x358/0x4d0 [ 645.361955][T31489] prepare_creds+0x2c/0x950 [ 645.361979][T31489] __sys_setreuid+0x109/0xb00 [ 645.362000][T31489] do_syscall_64+0x106/0xf80 [ 645.362020][T31489] ? clear_bhb_loop+0x40/0x90 [ 645.362040][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.362055][T31489] RIP: 0033:0x7f822019c799 [ 645.362069][T31489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.362084][T31489] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 645.362098][T31489] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 645.362108][T31489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.362116][T31489] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 645.362125][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.362133][T31489] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 645.362153][T31489] [ 645.806768][T31494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11713'. [ 646.379352][T31511] Invalid ELF header magic: != ELF [ 647.162805][T31543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11734'. [ 647.411109][T31551] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 647.463268][T31551] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 647.521350][T31556] netlink: 186 bytes leftover after parsing attributes in process `syz.1.11740'. [ 648.915218][T31626] sd 0:0:1:0: PR command failed: 1026 [ 648.981518][T31626] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 649.027648][T31626] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 650.312210][T31682] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11797'. [ 653.934325][T31795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11848'. [ 654.469403][T31809] sctp: [Deprecated]: syz.2.11854 (pid 31809) Use of int in maxseg socket option. [ 654.469403][T31809] Use struct sctp_assoc_value instead [ 655.347054][T31836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11862'. [ 660.329346][T31985] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 660.704664][T31998] netlink: 'syz.3.11930': attribute type 1 has an invalid length. [ 661.942222][T32038] bridge0: port 3(bond0) entered blocking state [ 661.976743][T32038] bridge0: port 3(bond0) entered disabled state [ 661.983259][T32038] bond0: entered allmulticast mode [ 662.025089][T32038] bond_slave_0: entered allmulticast mode [ 662.040472][T32038] bond_slave_1: entered allmulticast mode [ 662.065076][T32038] bond0: entered promiscuous mode [ 662.080379][T32038] bond_slave_0: entered promiscuous mode [ 662.104765][T32038] bond_slave_1: entered promiscuous mode [ 662.126650][T32038] bridge0: port 3(bond0) entered blocking state [ 662.133063][T32038] bridge0: port 3(bond0) entered listening state [ 662.455196][T32057] netlink: 'syz.3.11959': attribute type 2 has an invalid length. [ 663.220549][T32107] netlink: 334 bytes leftover after parsing attributes in process `syz.1.11972'. [ 668.139120][T32304] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 668.433843][T32313] __vm_enough_memory: pid: 32313, comm: syz.3.12065, bytes: 4398046511104 not enough memory for the allocation [ 668.480159][T32317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12067'. [ 668.697227][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12070'. [ 668.708619][T32327] bridge0: port 5(veth1_macvtap) entered blocking state [ 668.734615][T32327] bridge0: port 5(veth1_macvtap) entered disabled state [ 668.766458][T32327] veth1_macvtap: entered allmulticast mode [ 668.791807][T32327] veth1_macvtap: left allmulticast mode [ 668.853481][T32322] could not allocate digest TFM handle  [ 669.113740][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12077'. [ 669.269371][T32350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12081'. [ 669.707615][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12091'. [ 670.059380][T32384] FAULT_INJECTION: forcing a failure. [ 670.059380][T32384] name failslab, interval 1, probability 0, space 0, times 0 [ 670.120591][T32384] CPU: 0 UID: 0 PID: 32384 Comm: syz.1.12097 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 670.120628][T32384] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 670.120635][T32384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.120644][T32384] Call Trace: [ 670.120650][T32384] [ 670.120656][T32384] dump_stack_lvl+0x100/0x190 [ 670.120684][T32384] should_fail_ex.cold+0x5/0xa [ 670.120703][T32384] should_failslab+0xc2/0x120 [ 670.120719][T32384] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 670.120743][T32384] ? snd_timer_instance_new+0x65/0x2e0 [ 670.120860][T32384] kstrdup+0x51/0xe0 [ 670.120885][T32384] snd_timer_instance_new+0x65/0x2e0 [ 670.120909][T32384] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 670.120950][T32384] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 670.120972][T32384] ? rcu_is_watching+0x12/0xc0 [ 670.121001][T32384] ? snd_timer_user_ioctl+0x4a/0xd0 [ 670.121017][T32384] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 670.121040][T32384] ? __pfx___mutex_lock+0x10/0x10 [ 670.121061][T32384] ? find_held_lock+0x2b/0x80 [ 670.121086][T32384] snd_timer_user_ioctl+0x76/0xd0 [ 670.121100][T32384] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 670.121116][T32384] __x64_sys_ioctl+0x18e/0x210 [ 670.121138][T32384] do_syscall_64+0x106/0xf80 [ 670.121154][T32384] ? clear_bhb_loop+0x40/0x90 [ 670.121173][T32384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.121188][T32384] RIP: 0033:0x7f822019c799 [ 670.121202][T32384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.121216][T32384] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.121231][T32384] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 670.121240][T32384] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000003 [ 670.121250][T32384] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 670.121260][T32384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.121269][T32384] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 670.121289][T32384] [ 670.433183][T32390] FAULT_INJECTION: forcing a failure. [ 670.433183][T32390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.446333][T32390] CPU: 0 UID: 0 PID: 32390 Comm: syz.1.12099 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 670.446363][T32390] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 670.446370][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.446379][T32390] Call Trace: [ 670.446386][T32390] [ 670.446393][T32390] dump_stack_lvl+0x100/0x190 [ 670.446425][T32390] should_fail_ex.cold+0x5/0xa [ 670.446445][T32390] _copy_from_user+0x2e/0xd0 [ 670.446474][T32390] get_itimerspec64+0x16c/0x2f0 [ 670.446494][T32390] ? __pfx_get_itimerspec64+0x10/0x10 [ 670.446510][T32390] ? __pfx_do_futex+0x10/0x10 [ 670.446532][T32390] __x64_sys_timerfd_settime+0x15f/0x280 [ 670.446555][T32390] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 670.446577][T32390] ? xfd_validate_state+0x129/0x190 [ 670.446612][T32390] do_syscall_64+0x106/0xf80 [ 670.446630][T32390] ? clear_bhb_loop+0x40/0x90 [ 670.446649][T32390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.446664][T32390] RIP: 0033:0x7f822019c799 [ 670.446677][T32390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.446692][T32390] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 670.446707][T32390] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 670.446717][T32390] RDX: 0000200000000040 RSI: 0000000000000003 RDI: ffffffffffffffff [ 670.446726][T32390] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 670.446735][T32390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.446744][T32390] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 670.446764][T32390] [ 671.128671][T32415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12111'. [ 673.380225][T32354] kexec: Could not allocate control_code_buffer [ 673.519296][T32492] FAULT_INJECTION: forcing a failure. [ 673.519296][T32492] name failslab, interval 1, probability 0, space 0, times 0 [ 673.566662][T32492] CPU: 0 UID: 0 PID: 32492 Comm: syz.1.12145 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 673.566695][T32492] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 673.566702][T32492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.566712][T32492] Call Trace: [ 673.566717][T32492] [ 673.566723][T32492] dump_stack_lvl+0x100/0x190 [ 673.566755][T32492] should_fail_ex.cold+0x5/0xa [ 673.566774][T32492] should_failslab+0xc2/0x120 [ 673.566790][T32492] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 673.566812][T32492] ? security_file_alloc+0x34/0x2c0 [ 673.566828][T32492] ? trace_kmem_cache_alloc+0xf3/0x120 [ 673.566846][T32492] security_file_alloc+0x34/0x2c0 [ 673.566862][T32492] init_file+0x95/0x480 [ 673.566879][T32492] alloc_empty_file+0x73/0x1c0 [ 673.566896][T32492] alloc_file_pseudo+0x13a/0x230 [ 673.566915][T32492] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 673.566934][T32492] ? _raw_spin_unlock+0x28/0x50 [ 673.566949][T32492] ? alloc_fd+0x476/0x790 [ 673.566965][T32492] __anon_inode_getfile+0xe8/0x280 [ 673.566985][T32492] __anon_inode_getfd+0x5c/0xe0 [ 673.567005][T32492] do_inotify_init+0x483/0x5e0 [ 673.567037][T32492] __x64_sys_inotify_init1+0x30/0x40 [ 673.567061][T32492] do_syscall_64+0x106/0xf80 [ 673.567079][T32492] ? clear_bhb_loop+0x40/0x90 [ 673.567098][T32492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.567113][T32492] RIP: 0033:0x7f822019c799 [ 673.567126][T32492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.567140][T32492] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 673.567155][T32492] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 673.567164][T32492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 673.567173][T32492] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 673.567182][T32492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.567190][T32492] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 673.567209][T32492] [ 674.231457][T32515] Invalid ELF header magic: != ELF [ 674.825128][T32542] sctp: [Deprecated]: syz.3.12167 (pid 32542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.825128][T32542] Use struct sctp_sack_info instead [ 676.148303][T32615] aoe: could not set interface list: too many interfaces [ 677.115050][T32656] netlink: 338 bytes leftover after parsing attributes in process `syz.2.12206'. [ 677.288292][ C0] bridge0: port 3(bond0) entered learning state [ 678.222010][T32704] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 679.263637][T32752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12245'. [ 679.283231][ T29] audit: type=1804 audit(4294967308.318:35): pid=32755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.12247" name="/newroot/3095/file0" dev="tmpfs" ino=15578 res=1 errno=0 [ 679.820979][ T306] FAULT_INJECTION: forcing a failure. [ 679.820979][ T306] name failslab, interval 1, probability 0, space 0, times 0 [ 679.847115][ T306] CPU: 0 UID: 0 PID: 306 Comm: syz.1.12256 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 679.847147][ T306] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 679.847154][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.847164][ T306] Call Trace: [ 679.847169][ T306] [ 679.847175][ T306] dump_stack_lvl+0x100/0x190 [ 679.847202][ T306] should_fail_ex.cold+0x5/0xa [ 679.847221][ T306] should_failslab+0xc2/0x120 [ 679.847237][ T306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 679.847257][ T306] ? prepare_creds+0x2c/0x950 [ 679.847278][ T306] ? __sys_socket+0xac/0x260 [ 679.847305][ T306] prepare_creds+0x2c/0x950 [ 679.847334][ T306] __sys_setuid+0x9c/0x440 [ 679.847351][ T306] do_syscall_64+0x106/0xf80 [ 679.847369][ T306] ? clear_bhb_loop+0x40/0x90 [ 679.847387][ T306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.847402][ T306] RIP: 0033:0x7f822019c799 [ 679.847416][ T306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.847430][ T306] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 679.847445][ T306] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 679.847455][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 679.847463][ T306] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 679.847472][ T306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.847480][ T306] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 679.847500][ T306] [ 681.809176][ T371] bridge0: port 3(batadv0) entered blocking state [ 681.852039][ T371] bridge0: port 3(batadv0) entered disabled state [ 681.883630][ T371] batadv0: entered allmulticast mode [ 681.902578][ T371] batadv0: entered promiscuous mode [ 681.942494][ T371] bridge0: port 3(batadv0) entered blocking state [ 681.949052][ T371] bridge0: port 3(batadv0) entered forwarding state [ 682.304270][T22519] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 682.313979][T22519] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 682.878067][ T402] zswap: compressor not available [ 683.020582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.028830][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.070614][ T420] FAULT_INJECTION: forcing a failure. [ 683.070614][ T420] name failslab, interval 1, probability 0, space 0, times 0 [ 683.083639][ T419] netlink: Unknown conntrack attr (0) [ 683.134474][ T420] CPU: 0 UID: 0 PID: 420 Comm: syz.1.12303 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 683.134505][ T420] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 683.134513][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.134522][ T420] Call Trace: [ 683.134527][ T420] [ 683.134533][ T420] dump_stack_lvl+0x100/0x190 [ 683.134561][ T420] should_fail_ex.cold+0x5/0xa [ 683.134579][ T420] should_failslab+0xc2/0x120 [ 683.134595][ T420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 683.134616][ T420] ? alloc_uid+0x13d/0x4c0 [ 683.134633][ T420] ? rcu_is_watching+0x12/0xc0 [ 683.134658][ T420] alloc_uid+0x13d/0x4c0 [ 683.134679][ T420] ? __pfx_alloc_uid+0x10/0x10 [ 683.134696][ T420] ? bpf_lsm_cred_prepare+0x9/0x10 [ 683.134711][ T420] ? security_prepare_creds+0xa8/0x290 [ 683.134733][ T420] __sys_setresuid+0x4f2/0x1280 [ 683.134751][ T420] do_syscall_64+0x106/0xf80 [ 683.134769][ T420] ? clear_bhb_loop+0x40/0x90 [ 683.134787][ T420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.134802][ T420] RIP: 0033:0x7f822019c799 [ 683.134815][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.134830][ T420] RSP: 002b:00007f82210d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 683.134844][ T420] RAX: ffffffffffffffda RBX: 00007f8220415fa0 RCX: 00007f822019c799 [ 683.134854][ T420] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 683.134862][ T420] RBP: 00007f8220232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 683.134871][ T420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.134879][ T420] R13: 00007f8220416038 R14: 00007f8220415fa0 R15: 00007fff06760808 [ 683.134898][ T420] [ 686.178111][ T581] netlink: 206 bytes leftover after parsing attributes in process `syz.2.12365'. [ 686.684933][ T29] audit: type=1800 audit(4294967315.757:36): pid=604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12374" name="lu_gp_id" dev="configfs" ino=90270 res=0 errno=0 [ 686.840022][ T604] ALUA LU Group already has a valid ID, ignoring request [ 687.121823][ T622] IPVS: length: 7562853 != 24 [ 692.570106][ C0] bridge0: port 3(bond0) entered forwarding state [ 692.576612][ C0] bridge0: topology change detected, propagating [ 744.249404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.802789][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 802.809867][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5190/1:b..l P5179/1:b..l P5821/1:b..l [ 802.820744][ C0] rcu: (detected by 0, t=10502 jiffies, g=172801, q=1028 ncpus=1) [ 802.828648][ C0] task:syz-executor state:R running task stack:22952 pid:5821 tgid:5821 ppid:5816 task_flags:0x400140 flags:0x00080000 [ 802.843627][ C0] Call Trace: [ 802.846913][ C0] [ 802.849837][ C0] __schedule+0xfee/0x6120 [ 802.854270][ C0] ? __pfx___schedule+0x10/0x10 [ 802.859115][ C0] ? mark_held_locks+0x40/0x70 [ 802.863901][ C0] preempt_schedule_irq+0x50/0x90 [ 802.868941][ C0] irqentry_exit+0x17b/0x670 [ 802.873721][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.879716][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 802.885995][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 82 54 4c 05 85 c0 74 20 8b 05 60 87 4c 05 85 c0 74 16 65 48 8b 05 88 e0 7f 08 8b 80 54 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 3d 2c 03 00 66 2e 0f 1f 84 00 00 00 00 [ 802.905613][ C0] RSP: 0018:ffffc90003af73f8 EFLAGS: 00000202 [ 802.911680][ C0] RAX: 0000000000000000 RBX: 00007fff2abae290 RCX: ffffffff916eac9a [ 802.919731][ C0] RDX: 1ffff9200075ee90 RSI: 0000000000000006 RDI: ffffc90003af7480 [ 802.927694][ C0] RBP: 0000000000000001 R08: ffffffff916eac9e R09: 0000000000000007 [ 802.935655][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffffc90003af74c0 [ 802.943616][ C0] R13: ffffc90003af7470 R14: ffffc90003af7f48 R15: 0000000003af8001 [ 802.951617][ C0] unwind_next_frame+0x3a8/0x1ea0 [ 802.956640][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.962696][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.968840][ C0] arch_stack_walk+0x94/0xf0 [ 802.973429][ C0] stack_trace_save+0x8e/0xc0 [ 802.978095][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 802.983452][ C0] ? __lock_acquire+0x4a5/0x2630 [ 802.988379][ C0] ? __lock_acquire+0x4a5/0x2630 [ 802.993311][ C0] save_stack+0x162/0x1e0 [ 802.997638][ C0] ? __pfx_save_stack+0x10/0x10 [ 803.002483][ C0] ? __free_frozen_pages+0x7e1/0x10d0 [ 803.007934][ C0] ? qlist_free_all+0x47/0xe0 [ 803.012602][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 803.018233][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 803.023245][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 803.028874][ C0] ? vm_area_dup+0x27/0x8e0 [ 803.033367][ C0] ? dup_mmap+0x6f6/0x2180 [ 803.037771][ C0] ? copy_process+0x73d7/0x7a10 [ 803.042634][ C0] ? kernel_clone+0xfc/0x9a0 [ 803.047215][ C0] ? __do_sys_clone+0xd9/0x120 [ 803.051966][ C0] ? do_syscall_64+0x106/0xf80 [ 803.056876][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.062959][ C0] ? page_ext_put+0x3e/0xd0 [ 803.067493][ C0] __reset_page_owner+0x84/0x190 [ 803.072433][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 803.077646][ C0] qlist_free_all+0x47/0xe0 [ 803.082177][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 803.087665][ C0] __kasan_slab_alloc+0x69/0x90 [ 803.092532][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 803.098016][ C0] ? vm_area_dup+0x27/0x8e0 [ 803.102537][ C0] vm_area_dup+0x27/0x8e0 [ 803.106861][ C0] dup_mmap+0x6f6/0x2180 [ 803.111123][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 803.115867][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 803.121790][ C0] ? __lock_acquire+0x4a5/0x2630 [ 803.126750][ C0] ? find_held_lock+0x2b/0x80 [ 803.131436][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 803.137441][ C0] copy_process+0x73d7/0x7a10 [ 803.142127][ C0] ? __pfx_copy_process+0x10/0x10 [ 803.147145][ C0] ? do_raw_spin_lock+0x128/0x260 [ 803.152184][ C0] kernel_clone+0xfc/0x9a0 [ 803.156604][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 803.161628][ C0] ? __lock_acquire+0x4a5/0x2630 [ 803.166570][ C0] ? find_held_lock+0x2b/0x80 [ 803.171234][ C0] ? __might_fault+0xc5/0x140 [ 803.175907][ C0] __do_sys_clone+0xd9/0x120 [ 803.180489][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 803.185698][ C0] do_syscall_64+0x106/0xf80 [ 803.190305][ C0] ? clear_bhb_loop+0x40/0x90 [ 803.195072][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.200972][ C0] RIP: 0033:0x7f252a7c5212 [ 803.205382][ C0] RSP: 002b:00007fff2abae290 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 803.213788][ C0] RAX: ffffffffffffffda RBX: 00007fff2abae290 RCX: 00007f252a7c5212 [ 803.221754][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 803.229767][ C0] RBP: 00007fff2abae41c R08: 0000000000000000 R09: 0000000000000001 [ 803.238104][ C0] R10: 0000555584d4a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 803.246110][ C0] R13: 00000000000927c0 R14: 00000000000a8a7e R15: 00007fff2abae470 [ 803.254113][ C0] [ 803.257135][ C0] task:klogd state:R running task stack:24664 pid:5179 tgid:5179 ppid:1 task_flags:0x400100 flags:0x00080000 [ 803.270609][ C0] Call Trace: [ 803.273970][ C0] [ 803.277251][ C0] __schedule+0xfee/0x6120 [ 803.281675][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 803.286882][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 803.292073][ C0] ? __pfx___schedule+0x10/0x10 [ 803.296958][ C0] ? autoremove_wake_function+0x3d/0x150 [ 803.302586][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 803.307966][ C0] preempt_schedule_common+0x42/0xc0 [ 803.313412][ C0] preempt_schedule_thunk+0x16/0x30 [ 803.318639][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 803.324362][ C0] sock_def_readable+0x154/0x630 [ 803.329342][ C0] unix_dgram_sendmsg+0xccd/0x1820 [ 803.334573][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 803.340143][ C0] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 803.345845][ C0] __sys_sendto+0x4aa/0x520 [ 803.350342][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 803.355368][ C0] ? do_syslog+0x18c/0x6d0 [ 803.359808][ C0] ? xfd_validate_state+0x129/0x190 [ 803.365039][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 803.369794][ C0] ? do_syscall_64+0x95/0xf80 [ 803.374486][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 803.379691][ C0] do_syscall_64+0x106/0xf80 [ 803.384275][ C0] ? clear_bhb_loop+0x40/0x90 [ 803.388945][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.394826][ C0] RIP: 0033:0x7f4c45113407 [ 803.399228][ C0] RSP: 002b:00007fff93b94c40 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 803.407627][ C0] RAX: ffffffffffffffda RBX: 00007f4c44fc3c80 RCX: 00007f4c45113407 [ 803.415587][ C0] RDX: 0000000000000060 RSI: 00007fff93b94d80 RDI: 0000000000000003 [ 803.423560][ C0] RBP: 00007fff93b951b0 R08: 0000000000000000 R09: 0000000000000000 [ 803.431519][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff93b951c8 [ 803.439477][ C0] R13: 00007fff93b94d80 R14: 0000000000000045 R15: 00007fff93b94d80 [ 803.447450][ C0] [ 803.450458][ C0] task:udevd state:R running task stack:23800 pid:5190 tgid:5190 ppid:1 task_flags:0x400140 flags:0x00080000 [ 803.463929][ C0] Call Trace: [ 803.467196][ C0] [ 803.470114][ C0] __schedule+0xfee/0x6120 [ 803.474532][ C0] ? __lock_acquire+0x4a5/0x2630 [ 803.479460][ C0] ? __pfx___schedule+0x10/0x10 [ 803.484304][ C0] ? mark_held_locks+0x40/0x70 [ 803.489083][ C0] preempt_schedule_irq+0x50/0x90 [ 803.494120][ C0] irqentry_exit+0x17b/0x670 [ 803.498705][ C0] asm_common_interrupt+0x26/0x40 [ 803.503810][ C0] RIP: 0010:lock_release+0x1b1/0x320 [ 803.509094][ C0] Code: 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 48 8b 44 24 10 65 48 2b 05 dd e1 28 12 0f 85 63 01 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5e 41 5f c3 cc cc cc cc 65 8b 05 eb e1 [ 803.528689][ C0] RSP: 0018:ffffc90003cf7550 EFLAGS: 00000246 [ 803.534777][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e9220 RCX: ffffc90003cf755c [ 803.542761][ C0] RDX: 0000000000000001 RSI: ffffffff8de55a23 RDI: ffffffff8c1af720 [ 803.550855][ C0] RBP: ffffffff81b7adde R08: 0000000000000001 R09: 0000000000000007 [ 803.558829][ C0] R10: 0000000000000200 R11: 000000000000f2bc R12: ffff88807cb7db80 [ 803.566788][ C0] R13: ffffc90003cf7608 R14: 0000000000000202 R15: 0000000000000002 [ 803.574757][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 803.579964][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 803.584979][ C0] ? stack_trace_save+0x8e/0xc0 [ 803.589829][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 803.594612][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 803.600759][ C0] arch_stack_walk+0x94/0xf0 [ 803.605345][ C0] ? kasan_save_stack+0x30/0x50 [ 803.610211][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 803.616035][ C0] stack_trace_save+0x8e/0xc0 [ 803.620703][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 803.626071][ C0] ? __lock_acquire+0x4a5/0x2630 [ 803.631004][ C0] kasan_save_stack+0x30/0x50 [ 803.635707][ C0] kasan_save_track+0x14/0x30 [ 803.640380][ C0] __kasan_kmalloc+0xaa/0xb0 [ 803.644967][ C0] __kmalloc_noprof+0x301/0x850 [ 803.649815][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 803.655380][ C0] tomoyo_path_perm+0x276/0x460 [ 803.660316][ C0] ? tomoyo_path_perm+0x262/0x460 [ 803.665353][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 803.670750][ C0] ? find_held_lock+0x2b/0x80 [ 803.675445][ C0] ? __might_fault+0xc5/0x140 [ 803.680136][ C0] ? __might_fault+0xc5/0x140 [ 803.684830][ C0] security_inode_getattr+0x116/0x280 [ 803.690207][ C0] vfs_statx+0x11f/0x3f0 [ 803.694448][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 803.699202][ C0] ? do_getname+0x191/0x390 [ 803.703702][ C0] vfs_fstatat+0x77/0xe0 [ 803.707945][ C0] __do_sys_newfstatat+0x9d/0x120 [ 803.712964][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 803.718586][ C0] ? kill_proc_info+0xa6/0x1b0 [ 803.723357][ C0] do_syscall_64+0x106/0xf80 [ 803.727936][ C0] ? clear_bhb_loop+0x40/0x90 [ 803.732605][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.738485][ C0] RIP: 0033:0x7fd87c311b0a [ 803.742887][ C0] RSP: 002b:00007ffdb54db7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 803.751301][ C0] RAX: ffffffffffffffda RBX: 0000561ef1e87418 RCX: 00007fd87c311b0a [ 803.759277][ C0] RDX: 00007ffdb54db800 RSI: 0000561ef1e75ef3 RDI: 00000000ffffff9c [ 803.767234][ C0] RBP: 0000561f12915148 R08: 00064c4571ff1b6e R09: 0000000000000000 [ 803.775198][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.783155][ C0] R13: 00007ffdb54db800 R14: 0000000000000000 R15: 00064c4571ff1b6e [ 803.791148][ C0]