last executing test programs: 3m27.311581795s ago: executing program 2 (id=4411): r0 = set_tid_address$auto(0x0) prlimit64$auto(r0, 0x0, 0x0, 0x0) 3m27.168508999s ago: executing program 2 (id=4415): openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 3m27.006823753s ago: executing program 2 (id=4418): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/tracing_cpumask\x00', 0x12b000, 0x0) preadv$auto(r0, &(0x7f0000000480)={0x0, 0x1}, 0x6, 0xc, 0x1000) 3m26.821182733s ago: executing program 2 (id=4422): setresgid$auto(0x800, 0x0, 0xffffffffffffffff) setresgid$auto(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 3m26.676800352s ago: executing program 2 (id=4425): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 3m26.205106267s ago: executing program 2 (id=4435): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/udp6\x00', 0x48280, 0x0) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) 3m25.834817656s ago: executing program 32 (id=4435): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/udp6\x00', 0x48280, 0x0) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) 3.349138333s ago: executing program 4 (id=7441): timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) exit$auto(0x6) timer_delete$auto(0x0) 2.369249992s ago: executing program 4 (id=7456): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r0, 0x8, &(0x7f0000001100), 0x3) 2.155133579s ago: executing program 4 (id=7458): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x1b0) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000180), 0x2, 0x0) 1.638363654s ago: executing program 4 (id=7466): setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x8, 0x10564, 0x568d1aef) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 1.38239795s ago: executing program 0 (id=7478): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto_VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 1.379516954s ago: executing program 4 (id=7472): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0x1, 0x0, 0x8) 1.221573517s ago: executing program 4 (id=7474): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 1.19181916s ago: executing program 0 (id=7475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0) sendmsg$auto_OVS_DP_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1.018099679s ago: executing program 3 (id=7477): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d8, 0x3) 960.095059ms ago: executing program 0 (id=7479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c004) 832.924154ms ago: executing program 3 (id=7480): r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x10000000084, 0x23, 0x0, 0x8) 781.821667ms ago: executing program 0 (id=7481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x20044050) 737.303651ms ago: executing program 1 (id=7482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x14, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0xffffffff80000001}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 649.164636ms ago: executing program 3 (id=7483): sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0xa9deeaafb59e0e44) r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, 0x0) 612.417109ms ago: executing program 0 (id=7484): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r0, 0x0, 0x100000002) 563.506204ms ago: executing program 1 (id=7485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 515.376702ms ago: executing program 3 (id=7486): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r0, 0x8, &(0x7f0000001100), 0x3) 437.677589ms ago: executing program 0 (id=7487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250600000014000180100001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 414.101311ms ago: executing program 1 (id=7488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 275.007311ms ago: executing program 1 (id=7489): setns(0xc9, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw6\x00', 0x40000, 0x0) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) 167.901917ms ago: executing program 3 (id=7490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008054) 150.844079ms ago: executing program 1 (id=7491): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) mseal$auto(0x0, 0x7dda, 0x0) mseal$auto(0x0, 0x7dda, 0x0) 28.900344ms ago: executing program 3 (id=7492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 0s ago: executing program 1 (id=7493): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 90.410959][ T5613] cgroup: Unknown subsys name 'net' [ 90.556489][ T5613] cgroup: Unknown subsys name 'cpuset' [ 90.565208][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.239542][ T10] cfg80211: failed to load regulatory.db [ 92.400273][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.863783][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.873063][ T5659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.881470][ T5659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.889770][ T5659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.907727][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.918338][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.920202][ T5658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.941250][ T5658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.950131][ T5656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.951011][ T5658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.961737][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.971864][ T5658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.980580][ T5658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.982383][ T5666] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.999328][ T5658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.008603][ T5666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.016660][ T5666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.025055][ T5666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.033306][ T5666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.043694][ T5666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.967917][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.975255][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.982535][ T5665] bridge_slave_0: entered allmulticast mode [ 101.989717][ T5665] bridge_slave_0: entered promiscuous mode [ 102.035588][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.043031][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.050213][ T5665] bridge_slave_1: entered allmulticast mode [ 102.057660][ T5665] bridge_slave_1: entered promiscuous mode [ 102.065183][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.073181][ T5659] Bluetooth: hci2: command tx timeout [ 102.073271][ T5658] Bluetooth: hci0: command tx timeout [ 102.079432][ T5659] Bluetooth: hci1: command tx timeout [ 102.085758][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.091360][ T5666] Bluetooth: hci3: command tx timeout [ 102.097809][ T5662] bridge_slave_0: entered allmulticast mode [ 102.111008][ T5662] bridge_slave_0: entered promiscuous mode [ 102.146775][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.154157][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.161302][ T5662] bridge_slave_1: entered allmulticast mode [ 102.169073][ T5662] bridge_slave_1: entered promiscuous mode [ 102.183432][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.190587][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.198661][ T5655] bridge_slave_0: entered allmulticast mode [ 102.206150][ T5655] bridge_slave_0: entered promiscuous mode [ 102.243508][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.250793][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.258500][ T5655] bridge_slave_1: entered allmulticast mode [ 102.266296][ T5655] bridge_slave_1: entered promiscuous mode [ 102.276241][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.320723][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.333161][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.376751][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.386173][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.394644][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.402767][ T5654] bridge_slave_0: entered allmulticast mode [ 102.409954][ T5654] bridge_slave_0: entered promiscuous mode [ 102.424448][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.468724][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.476519][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.484606][ T5654] bridge_slave_1: entered allmulticast mode [ 102.491906][ T5654] bridge_slave_1: entered promiscuous mode [ 102.501805][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.513498][ T5665] team0: Port device team_slave_0 added [ 102.521634][ T5662] team0: Port device team_slave_0 added [ 102.553082][ T5665] team0: Port device team_slave_1 added [ 102.560658][ T5662] team0: Port device team_slave_1 added [ 102.622479][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.634266][ T5655] team0: Port device team_slave_0 added [ 102.650713][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.657823][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.683872][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.698265][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.709729][ T5655] team0: Port device team_slave_1 added [ 102.728682][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.736160][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.762770][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.775958][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.783015][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.809188][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.840196][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.847591][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.873944][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.903176][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.910266][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.936315][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.971368][ T5654] team0: Port device team_slave_0 added [ 102.977793][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.984919][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.011162][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.042027][ T5654] team0: Port device team_slave_1 added [ 103.075687][ T5665] hsr_slave_0: entered promiscuous mode [ 103.082547][ T5665] hsr_slave_1: entered promiscuous mode [ 103.115631][ T5662] hsr_slave_0: entered promiscuous mode [ 103.122331][ T5662] hsr_slave_1: entered promiscuous mode [ 103.128451][ T5662] debugfs: 'hsr0' already exists in 'hsr' [ 103.134519][ T5662] Cannot create hsr debugfs directory [ 103.155369][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.162507][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.188516][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.201467][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.208621][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.234674][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.294013][ T5655] hsr_slave_0: entered promiscuous mode [ 103.300477][ T5655] hsr_slave_1: entered promiscuous mode [ 103.307048][ T5655] debugfs: 'hsr0' already exists in 'hsr' [ 103.312869][ T5655] Cannot create hsr debugfs directory [ 103.452738][ T5654] hsr_slave_0: entered promiscuous mode [ 103.459122][ T5654] hsr_slave_1: entered promiscuous mode [ 103.465818][ T5654] debugfs: 'hsr0' already exists in 'hsr' [ 103.471624][ T5654] Cannot create hsr debugfs directory [ 103.856219][ T5662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.871097][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.879547][ T5662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.891106][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.900525][ T5662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.911336][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.919611][ T5662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.930563][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.017864][ T5665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.029174][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.039089][ T5665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.050147][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.058338][ T5665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.068959][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.078350][ T5665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.088538][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.151934][ T5659] Bluetooth: hci1: command tx timeout [ 104.157675][ T5666] Bluetooth: hci3: command tx timeout [ 104.162242][ T5663] Bluetooth: hci2: command tx timeout [ 104.168768][ T5658] Bluetooth: hci0: command tx timeout [ 104.224585][ T5655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.240313][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.250094][ T5655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.260292][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.269069][ T5655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.279110][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.287321][ T5655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.298980][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.407677][ T5654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.417840][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.434599][ T5654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.444860][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.462047][ T5654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.473806][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.493792][ T5654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.505908][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.521302][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.588389][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.608555][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.649608][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.657408][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.673581][ T5665] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.695184][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.702372][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.724420][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.731710][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.773866][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.781220][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.828059][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.908421][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.939747][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.946924][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.989901][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.997326][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.087056][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.194730][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.248090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.255429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.320018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.327281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.114861][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.161321][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.232056][ T5663] Bluetooth: hci1: command tx timeout [ 106.237554][ T5658] Bluetooth: hci3: command tx timeout [ 106.244163][ T5666] Bluetooth: hci0: command tx timeout [ 106.244214][ T5666] Bluetooth: hci2: command tx timeout [ 106.338515][ T5662] veth0_vlan: entered promiscuous mode [ 106.385688][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.427081][ T5662] veth1_vlan: entered promiscuous mode [ 106.477684][ T5665] veth0_vlan: entered promiscuous mode [ 106.504229][ T5665] veth1_vlan: entered promiscuous mode [ 106.596677][ T5662] veth0_macvtap: entered promiscuous mode [ 106.609718][ T5655] veth0_vlan: entered promiscuous mode [ 106.619735][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.630090][ T5662] veth1_macvtap: entered promiscuous mode [ 106.674223][ T5655] veth1_vlan: entered promiscuous mode [ 106.683100][ T5665] veth0_macvtap: entered promiscuous mode [ 106.699498][ T5665] veth1_macvtap: entered promiscuous mode [ 106.720382][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.744547][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.782558][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.809717][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.908060][ T5655] veth0_macvtap: entered promiscuous mode [ 106.937225][ T5654] veth0_vlan: entered promiscuous mode [ 106.945736][ T5655] veth1_macvtap: entered promiscuous mode [ 106.957588][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.993191][ T1032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.018371][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.029471][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.077521][ T5654] veth1_vlan: entered promiscuous mode [ 107.092978][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.122373][ T1032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.134418][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.143543][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.174293][ T1032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.186100][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.200247][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.204587][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.242933][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.277852][ T5662] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.302032][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.314011][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.372375][ T5654] veth0_macvtap: entered promiscuous mode [ 107.420046][ T5654] veth1_macvtap: entered promiscuous mode [ 107.548893][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.617991][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.644451][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.668303][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.723646][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.838689][ T891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.876767][ T891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.895583][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.947717][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.991211][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.132313][ T891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.180048][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.182235][ T891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.205490][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.315864][ T5663] Bluetooth: hci1: command tx timeout [ 108.315892][ T5659] Bluetooth: hci2: command tx timeout [ 108.321447][ T5663] Bluetooth: hci0: command tx timeout [ 108.332369][ T5658] Bluetooth: hci3: command tx timeout [ 108.407856][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.434705][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.537587][ T1032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.579143][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.636152][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.677546][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.735203][ T1032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.027079][ T5835] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.267604][ T5844] capability: warning: `syz.3.33' uses deprecated v2 capabilities in a way that may be insecure [ 111.934253][ T5941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.440135][ T6001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.107703][ T29] audit: type=1800 audit(1785882149.146:2): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.231" name="members" dev="configfs" ino=8865 res=0 errno=0 [ 123.190110][ T29] audit: type=1800 audit(4294967299.000:3): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.290" name="trace_pipe" dev="tracefs" ino=3730 res=0 errno=0 [ 123.452871][ T29] audit: type=1800 audit(4294967299.260:4): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.296" name="members" dev="configfs" ino=9064 res=0 errno=0 [ 123.604444][ T6386] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.626991][ T29] audit: type=1800 audit(4294967299.440:5): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.298" name="trace_pipe" dev="tracefs" ino=3692 res=0 errno=0 [ 126.361336][ T29] audit: type=1800 audit(4294967302.170:6): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.346" name="dbroot" dev="configfs" ino=9203 res=0 errno=0 [ 127.508900][ T29] audit: type=1326 audit(4294967303.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.0.368" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd72ab9e019 code=0x0 [ 127.685657][ T6544] Invalid ELF header magic: != ELF [ 129.763938][ T6629] Invalid ELF header magic: != ELF [ 132.456298][ T6737] Process accounting resumed [ 133.082289][ T29] audit: type=1800 audit(4294967308.900:8): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.476" name="features" dev="configfs" ino=10697 res=0 errno=0 [ 133.203142][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211028][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.717690][ T6784] Process accounting resumed [ 137.905975][ T29] audit: type=1800 audit(1843104519.970:9): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.570" name="lu_gp_id" dev="configfs" ino=10975 res=0 errno=0 [ 139.832124][ T7026] syz.3.604 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.917476][ T7305] nfs: Bad value for 'source' [ 147.181690][ T29] audit: type=1800 audit(1843106577.258:10): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.750" name="features" dev="configfs" ino=13364 res=0 errno=0 [ 147.351571][ T7325] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5654] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7325] [ 150.177224][ T29] audit: type=1800 audit(1843106580.264:11): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.801" name="features" dev="configfs" ino=12711 res=0 errno=0 [ 150.746214][ T5663] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 152.297732][ T29] audit: type=1800 audit(1843107605.395:12): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.843" name="features" dev="configfs" ino=13655 res=0 errno=0 [ 158.325647][ T5663] Bluetooth: hci3: unexpected event 0x01 length: 124 > 1 [ 159.395729][ T7824] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5665] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7824] [ 159.538010][ T7828] mmap: syz.1.1001 (7828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.611093][ T7833] capability: warning: `syz.0.1002' uses 32-bit capabilities (legacy support in use) [ 159.680495][ T7830] can: request_module (can-proto-5) failed. [ 160.020995][ T5663] Bluetooth: hci3: unexpected event 0x3c length: 124 > 7 [ 160.561977][ T5663] Bluetooth: hci0: unexpected subevent 0x03 length: 123 > 9 [ 160.897715][ T29] audit: type=1800 audit(1843107614.025:13): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1031" name="dummy_udc" dev="gadgetfs" ino=7001 res=0 errno=0 [ 162.565509][ T7950] Process accounting paused [ 163.381334][ T7990] __vm_enough_memory: pid: 7990, comm: syz.3.1080, bytes: 4398046511104 not enough memory for the allocation [ 163.783733][ T8003] Process accounting paused [ 165.913716][ T8104] syz_tun: tun_chr_ioctl cmd 1074025680 [ 166.596751][ T8134] futex_wake_op: syz.3.1153 tries to shift op by -2048; fix this program [ 167.584730][ T8178] syz.2.1175 (8178): attempted to duplicate a private mapping with mremap. This is not supported. [ 167.609699][ T8174] ima: policy update failed [ 167.626395][ T29] audit: type=1802 audit(1843107620.797:14): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1174" res=0 errno=0 [ 168.767644][ T5663] Bluetooth: hci1: unexpected subevent 0x12 length: 123 > 5 [ 169.453844][ T8254] syz.1.1211(8254): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 171.657716][ T8343] random: crng reseeded on system resumption [ 174.458089][ T8395] kexec: Could not allocate control_code_buffer [ 175.611415][ T5663] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 176.900085][ T8546] random: crng reseeded on system resumption [ 180.728034][ T29] audit: type=1800 audit(1843107633.968:15): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1428" name="version" dev="configfs" ino=16673 res=0 errno=0 [ 186.491015][ T5663] Bluetooth: hci0: unexpected event 0x2c length: 1019 > 17 [ 186.491057][ T5663] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 188.207716][ T9004] ICMPv6: process `syz.3.1581' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 188.306862][ T9006] block nbd0: NBD_DISCONNECT [ 188.746874][ T9025] ecryptfs_miscdev_write: Error while inspecting packet size [ 189.149259][ T9039] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 191.395726][ T29] audit: type=1807 audit(1843107644.692:16): UNKNOWN=nl80211 res=0 [ 191.406964][ T9120] ima: policy update failed [ 191.425107][ T29] audit: type=1802 audit(1843107644.692:17): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1638" res=0 errno=0 [ 191.463036][ T29] audit: type=1802 audit(1843107644.743:18): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1638" res=0 errno=0 [ 192.392486][ T9166] block2mtd: illegal erase size [ 192.572122][ T9173] Process accounting resumed [ 192.947934][ T29] audit: type=1806 audit(1843107646.250:19): xattr="." res=0 [ 193.099935][ T9202] Scaler: ================= START STATUS ================= [ 193.135635][ T9202] Scaler: ================== END STATUS ================== [ 193.687127][ T9229] warning: `syz.0.1688' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.736085][ T9229] Process accounting resumed [ 194.390760][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397642][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794678][ T9270] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.954316][ T9389] ecryptfs_parse_packet_length: Error parsing packet length [ 197.973684][ T9389] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 200.010226][ T9479] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 200.826104][ T9517] rnbd_client L213: map_device: Parameters missing [ 201.565836][ T9550] kAFS: Invalid Command on /proc/fs/afs/cells file [ 201.979901][ T9571] kAFS: Invalid Command on /proc/fs/afs/cells file [ 203.107619][ T9626] binder: 9625:9626 ioctl c0046209 ffffffffffffffff returned -22 [ 205.116840][ T29] audit: type=1800 audit(1843107658.474:20): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1932" name="dbroot" dev="configfs" ino=19437 res=0 errno=0 [ 205.151071][ T9725] db_root: cannot open: /sy] [ 208.081413][ T9849] ima: policy update failed [ 208.092966][ T29] audit: type=1802 audit(1843107661.469:21): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1992" res=0 errno=0 [ 209.055319][ T9834] kexec: Could not allocate control_code_buffer [ 209.332988][ T9891] bond0: invalid ARP target specified [ 209.578998][ T9903] vhci_hcd vhci_hcd.2: invalid port number 16 [ 209.591773][ T9903] vhci_hcd vhci_hcd.2: invalid port number 16 [ 210.337153][ T29] audit: type=1804 audit(1843107663.731:22): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2034" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=37 res=1 errno=0 [ 210.874089][ T9955] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 211.348457][ T9980] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 211.633660][ T9994] phram: not enough arguments [ 211.691929][ T9993] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 211.725430][ T9993] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 211.741926][ T9993] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 211.761037][ T9993] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 211.780776][ T9993] page dumped because: unmovable page [ 211.797033][ T9993] page_owner tracks the page as allocated [ 211.817695][ T9993] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1777925578, free_ts 0 [ 211.866573][ T9993] register_early_stack+0x74/0xaf [ 211.882567][ T9993] init_page_owner+0x4c/0xa10 [ 211.901147][ T9993] page_ext_init+0x71d/0x780 [ 211.908450][ T9993] mm_core_init+0x229/0x270 [ 211.924792][ T9993] page_owner free stack trace missing [ 212.259711][T10022] futex_wake_op: syz.0.2077 tries to shift op by -1; fix this program [ 215.779021][T10188] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 215.797341][T10188] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 215.816427][T10188] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 215.832597][T10188] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 215.844083][T10188] page dumped because: unmovable page [ 215.853733][T10188] page_owner tracks the page as allocated [ 215.864091][T10188] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1777925578, free_ts 0 [ 215.889137][T10188] register_early_stack+0x74/0xaf [ 215.894860][T10188] init_page_owner+0x4c/0xa10 [ 215.899845][T10188] page_ext_init+0x71d/0x780 [ 215.906327][T10188] mm_core_init+0x229/0x270 [ 215.911100][T10188] page_owner free stack trace missing [ 217.108614][T10251] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 217.129867][T10251] pci 0000:00:01.3: PCI INT A: no GSI [ 218.081364][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.088243][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.593851][T10328] syz.1.2228 uses obsolete (PF_INET,SOCK_PACKET) [ 218.746243][T10332] cougar: G6 mapped to space [ 220.782723][ T29] audit: type=1400 audit(1843126018.228:23): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10434 comm="syz.2.2281" [ 221.929223][ T4941] Bluetooth: hci0: command 0x0406 tx timeout [ 221.931930][ T5656] Bluetooth: hci3: command 0x0406 tx timeout [ 221.935867][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 221.942995][ T5656] Bluetooth: hci2: command 0x0406 tx timeout [ 222.473622][T10522] Process accounting paused [ 222.685454][T10537] kafs: addr_prefs: Invalid Command [ 223.309783][T10571] qrtr: Invalid version 13 [ 223.657316][T10589] Process accounting paused [ 225.826586][T10711] zram0: detected capacity change from 0 to 16 [ 226.744310][T10753] smpboot: CPU 1 is now offline [ 227.560885][T10792] kAFS: Invalid Command on /proc/fs/afs/cells file [ 230.153671][T10907] bond0: invalid ARP target specified [ 230.357883][T10914] i2c i2c-0: new_device: Invalid device name [ 231.020963][T10945] ICMPv6: process `syz.0.2531' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 231.064579][T10947] overlayfs: "check_copy_up" module option is obsolete [ 231.415246][T10967] program syz.2.2540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.223500][T11001] overlayfs: "check_copy_up" module option is obsolete [ 232.260914][T11004] ptp ptp0: only physical clock in use now [ 233.684638][T11070] bond0: option packets_per_slave: invalid value ( Xnp) [ 233.726624][T11070] bond0: option packets_per_slave: allowed values 0 - 65535 [ 233.844681][T11079] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 234.652822][ T5659] Bluetooth: hci1: unexpected event 0x35 length: 725 > 6 [ 235.468695][T11157] sd 0:0:1:0: PR command failed: 1026 [ 235.530373][T11157] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 235.559322][T11157] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 236.012553][T11181] block2mtd: Using custom MTD label '' for dev [ 236.053001][T11181] block2mtd: error: cannot open device [ 237.143703][T11222] < [ 238.461601][T11272] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 238.480186][T11272] Call Trace: [ 238.483492][T11272] [ 238.486439][T11272] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 238.493137][T11272] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 238.498992][T11272] ? debug_object_deactivate+0x2e4/0x3b0 [ 238.504687][T11272] mce_cpu_restart+0xd5/0x1f0 [ 238.509384][T11272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 238.514698][T11272] smp_call_function_many_cond+0x153b/0x1870 [ 238.520729][T11272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 238.526232][T11272] ? mark_held_locks+0x40/0x70 [ 238.531108][T11272] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 238.536941][T11272] ? lockdep_hardirqs_on+0x78/0x100 [ 238.542156][T11272] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 238.547998][T11272] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 238.554515][T11272] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 238.560544][T11272] ? __timer_delete_sync+0x151/0x1c0 [ 238.565958][T11272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 238.571356][T11272] on_each_cpu_cond_mask+0x40/0x90 [ 238.576530][T11272] set_bank+0x240/0x3a0 [ 238.580705][T11272] ? __pfx_set_bank+0x10/0x10 [ 238.585396][T11272] ? find_held_lock+0x2b/0x80 [ 238.590085][T11272] ? sysfs_file_kobj+0xe4/0x290 [ 238.594940][T11272] ? sysfs_file_kobj+0xe4/0x290 [ 238.599807][T11272] ? __pfx_set_bank+0x10/0x10 [ 238.604510][T11272] dev_attr_store+0x58/0x80 [ 238.609023][T11272] ? __pfx_dev_attr_store+0x10/0x10 [ 238.614224][T11272] sysfs_kf_write+0xf2/0x150 [ 238.618836][T11272] kernfs_fop_write_iter+0x3e0/0x5f0 [ 238.624223][T11272] ? __pfx_sysfs_kf_write+0x10/0x10 [ 238.629521][T11272] vfs_write+0x6ac/0x1050 [ 238.633870][T11272] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 238.639711][T11272] ? __pfx_vfs_write+0x10/0x10 [ 238.644521][T11272] ksys_write+0x12a/0x250 [ 238.648994][T11272] ? __pfx_ksys_write+0x10/0x10 [ 238.653869][T11272] do_syscall_64+0x115/0x840 [ 238.658481][T11272] ? clear_bhb_loop+0x40/0x90 [ 238.663400][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.669431][T11272] RIP: 0033:0x7fd72ab9e019 [ 238.673888][T11272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.693519][T11272] RSP: 002b:00007fd72ba84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.702046][T11272] RAX: ffffffffffffffda RBX: 00007fd72ae25fa0 RCX: 00007fd72ab9e019 [ 238.710065][T11272] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 238.718057][T11272] RBP: 00007fd72ac3500c R08: 0000000000000000 R09: 0000000000000000 [ 238.726318][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.734347][T11272] R13: 00007fd72ae26038 R14: 00007fd72ae25fa0 R15: 00007ffe095bda68 [ 238.742511][T11272] [ 239.858005][T11307] syz_tun: tun_chr_ioctl cmd 1074025698 [ 240.949034][T11354] binder: 11353:11354 ioctl 40046210 9 returned -14 [ 241.322361][T11371] ecryptfs_miscdev_write: Invalid packet size [6080] [ 241.731006][T11390] binder: binder_mmap: 11389 0-1000 bad vm_flags failed -1 [ 242.947386][T11451] Setting dangerous option i915.mitigations - tainting kernel [ 243.154927][ T29] audit: type=1326 audit(1843126040.715:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.3.2784" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f524ed9e019 code=0x0 [ 243.252179][T11267] Bluetooth: hci1: command 0x0406 tx timeout [ 243.258775][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 243.673333][T11482] program syz.1.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.324857][T11267] Bluetooth: hci1: command 0x0406 tx timeout [ 245.332946][ T10] Bluetooth: hci1: Opcode 0x0406 failed: -110 Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 248.007691][T11676] zram0: detected capacity change from 16 to 0 [ 249.039575][T11725] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 251.298279][T11827] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 252.045993][T11850] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 252.438368][T11866] Process accounting resumed [ 253.581010][T11923] Process accounting resumed [ 253.721911][T11932] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 255.510050][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.518030][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.343251][T12099] vhci_hcd: not connected 4 [ 258.211341][T12142] nvme_fcloop: unknown parameter or missing value '7' [ 258.287475][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 259.850137][T12217] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 265.276971][T12449] Invalid input. Must be >= 4608 [ 266.244455][T12494] Invalid ELF header magic: != ELF [ 266.327475][T12497] block nbd14: the capability attribute has been deprecated. [ 266.629847][T12510] Line length is too long: Should be less than 4094 [ 270.300495][T12681] usb usb13: usbfs: process 12681 (syz.0.3363) did not claim interface 0 before use [ 271.192575][T12718] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 271.247543][T12718] net gretap0: uevent: failed to send synthetic uevent: -22 [ 272.913319][T12778] could not allocate digest TFM handle [ 273.443204][T12810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 273.483120][T12810] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 273.522830][T12810] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 273.557455][T12810] page_type: f5(slab) [ 273.578385][T12810] raw: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 273.617850][T12810] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 273.665772][T12810] head: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 273.701596][T12810] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 273.741629][T12810] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 273.779511][T12810] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 273.820136][T12810] page dumped because: unmovable page [ 273.845732][T12810] page_owner tracks the page as allocated [ 273.877618][T12810] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 37971531716, free_ts 29778218875 [ 273.977414][T12810] post_alloc_hook+0xfd/0x120 [ 274.002962][T12810] get_page_from_freelist+0xf48/0x3530 [ 274.033423][T12810] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 274.073554][T12810] new_slab+0xa2/0x640 [ 274.098438][T12810] refill_objects+0xe3/0x410 [ 274.124158][T12810] __pcs_replace_empty_main+0x376/0x680 [ 274.163334][T12810] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 274.191659][T12810] __d_alloc+0x35/0xa50 [ 274.214646][T12810] d_alloc_parallel+0x105/0x14b0 [ 274.246237][T12810] __lookup_slow+0x98/0x320 [ 274.274468][T12810] lookup_slow+0x50/0x70 [ 274.299220][T12810] link_path_walk+0x1377/0x1cc0 [ 274.324201][T12810] path_lookupat+0x74/0xc40 [ 274.350780][T12810] filename_lookup+0x202/0x590 [ 274.378042][T12810] vfs_statx+0xff/0x3f0 [ 274.385289][T12845] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 274.405006][T12810] vfs_fstatat+0x77/0xe0 [ 274.426486][T12810] page last free pid 1 tgid 1 stack trace: [ 274.459231][T12810] free_pages_prepare+0x586/0xd80 [ 274.486402][T12810] __free_contig_range_common+0x14f/0x250 [ 274.519891][T12810] destroy_args+0xa8/0x7a0 [ 274.545447][T12810] debug_vm_pgtable+0x1d69/0x3490 [ 274.571832][T12810] do_one_initcall+0x11d/0x700 [ 274.604507][T12810] kernel_init_freeable+0x6ea/0x7b0 [ 274.679816][T12810] kernel_init+0x1f/0x1e0 [ 274.728134][T12810] ret_from_fork+0x72b/0xd50 [ 274.783562][T12810] ret_from_fork_asm+0x1a/0x30 [ 275.562364][T12889] kAFS: No cell specified [ 276.666621][T12936] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 276.802648][T12942] Setting dangerous option i915.mitigations - tainting kernel [ 278.365826][T13013] kfence: disabled [ 278.371981][T13014] program syz.0.3526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.553003][T13021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 280.775645][ T29] audit: type=1400 audit(4294967333.966:25): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13115 comm="syz.1.3573" [ 282.017240][T13170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 282.047681][T13170] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 282.090766][T13170] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 282.127466][T13170] page_type: f5(slab) [ 282.147556][T13170] raw: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 282.189213][T13170] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 282.225803][T13170] head: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 282.263863][T13170] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 282.309145][T13170] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 282.354104][T13170] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 282.393055][T13170] page dumped because: unmovable page [ 282.420535][T13170] page_owner tracks the page as allocated [ 282.445742][T13186] Process accounting paused [ 282.450565][T13170] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 37971531716, free_ts 29778218875 [ 282.555158][T13170] post_alloc_hook+0xfd/0x120 [ 282.572124][T13170] get_page_from_freelist+0xf48/0x3530 [ 282.601694][T13170] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 282.628637][T13170] new_slab+0xa2/0x640 [ 282.644417][T13170] refill_objects+0xe3/0x410 [ 282.669470][T13170] __pcs_replace_empty_main+0x376/0x680 [ 282.692879][T13170] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 282.719334][T13170] __d_alloc+0x35/0xa50 [ 282.739470][T13170] d_alloc_parallel+0x105/0x14b0 [ 282.760884][T13170] __lookup_slow+0x98/0x320 [ 282.779031][T13170] lookup_slow+0x50/0x70 [ 282.798527][T13170] link_path_walk+0x1377/0x1cc0 [ 282.828485][T13170] path_lookupat+0x74/0xc40 [ 282.866167][T13170] filename_lookup+0x202/0x590 [ 282.914666][T13170] vfs_statx+0xff/0x3f0 [ 282.950914][T13170] vfs_fstatat+0x77/0xe0 [ 282.971129][T13170] page last free pid 1 tgid 1 stack trace: [ 283.008952][T13170] free_pages_prepare+0x586/0xd80 [ 283.026517][T13170] __free_contig_range_common+0x14f/0x250 [ 283.050472][T13170] destroy_args+0xa8/0x7a0 [ 283.069113][T13170] debug_vm_pgtable+0x1d69/0x3490 [ 283.087323][T13170] do_one_initcall+0x11d/0x700 [ 283.103414][T13170] kernel_init_freeable+0x6ea/0x7b0 [ 283.119795][T13170] kernel_init+0x1f/0x1e0 [ 283.134225][T13170] ret_from_fork+0x72b/0xd50 [ 283.150338][T13170] ret_from_fork_asm+0x1a/0x30 [ 283.597996][T13226] Process accounting paused [ 283.906023][T13246] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 284.122938][T13254] WARNING! power/level is deprecated; use power/control instead [ 285.635832][T13324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 285.683377][T13324] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 285.722634][T13324] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 285.760019][T13324] page_type: f5(slab) [ 285.778771][T13324] raw: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 285.822562][T13324] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 285.862931][T13324] head: 00fff00000000040 ffff88801d2e1640 dead000000000122 0000000000000000 [ 285.902901][T13324] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 285.944060][T13324] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 285.987700][T13324] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 286.031945][T13324] page dumped because: unmovable page [ 286.053677][T13324] page_owner tracks the page as allocated [ 286.084323][T13324] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 37971531716, free_ts 29778218875 [ 286.179654][T13324] post_alloc_hook+0xfd/0x120 [ 286.199121][T13324] get_page_from_freelist+0xf48/0x3530 [ 286.223958][T13324] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 286.251888][T13324] new_slab+0xa2/0x640 [ 286.273504][T13324] refill_objects+0xe3/0x410 [ 286.298012][T13324] __pcs_replace_empty_main+0x376/0x680 [ 286.320795][T13324] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 286.347046][T13324] __d_alloc+0x35/0xa50 [ 286.367182][T13324] d_alloc_parallel+0x105/0x14b0 [ 286.388746][T13324] __lookup_slow+0x98/0x320 [ 286.407436][T13324] lookup_slow+0x50/0x70 [ 286.426046][T13324] link_path_walk+0x1377/0x1cc0 [ 286.459670][T13324] path_lookupat+0x74/0xc40 [ 286.512336][T13324] filename_lookup+0x202/0x590 [ 286.544158][T13324] vfs_statx+0xff/0x3f0 [ 286.578823][T13324] vfs_fstatat+0x77/0xe0 [ 286.592036][T13324] page last free pid 1 tgid 1 stack trace: [ 286.612318][T13324] free_pages_prepare+0x586/0xd80 [ 286.630150][T13324] __free_contig_range_common+0x14f/0x250 [ 286.648781][T13324] destroy_args+0xa8/0x7a0 [ 286.667782][T13324] debug_vm_pgtable+0x1d69/0x3490 [ 286.686925][T13324] do_one_initcall+0x11d/0x700 [ 286.702719][T13324] kernel_init_freeable+0x6ea/0x7b0 [ 286.721486][T13324] kernel_init+0x1f/0x1e0 [ 286.735940][T13324] ret_from_fork+0x72b/0xd50 [ 286.750422][T13324] ret_from_fork_asm+0x1a/0x30 [ 287.733940][T13414] block2mtd: device name too long [ 288.480536][T13443] phram: not enough arguments [ 288.941117][T13462] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 288.988097][T13467] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 289.027715][T13466] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 290.591137][T13525] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 290.591137][T13525] [ 295.247482][T13678] i2c i2c-0: delete_device: Extra parameters [ 296.838042][T13728] mmap: syz.3.3874 (13728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 297.405502][T13744] : Can't lookup blockdev [ 298.670038][T13784] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 298.748959][T13784] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.742857][T13816] i2c i2c-0: delete_device: Can't find device in list [ 300.020548][T13822] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 303.093287][T13923] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 303.475807][T13941] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 303.593387][T13941] CIFS mount error: No usable UNC path provided in device string! [ 303.593387][T13941] [ 303.636703][T13941] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.076832][T13968] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 304.522416][T13989] aoe: can't write to that file. [ 304.570142][T13992] warning: `syz.1.4004' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.867138][T14006] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 305.919692][ T29] audit: type=1800 audit(4294967359.247:26): pid=14051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4033" name="members" dev="configfs" ino=34515 res=0 errno=0 [ 305.992373][T14056] bond0: invalid ARP target specified [ 309.220350][T14199] ======================================================= [ 309.220350][T14199] WARNING: The mand mount option has been deprecated and [ 309.220350][T14199] and is ignored by this kernel. Remove the mand [ 309.220350][T14199] option from the mount to silence this warning. [ 309.220350][T14199] ======================================================= [ 309.603098][T14212] queue_state_write: operation too long [ 309.626465][T14212] queue_state_write: use 'run', 'start' or 'kick' [ 309.761887][T14217] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 310.859778][T14256] ceph: Failed to parse sending metrics switch value 'P^' [ 312.464165][T14321] Process accounting resumed [ 313.487052][T14359] Process accounting resumed [ 314.022119][T14376] kafs: addr_prefs: Too many elements in string [ 314.512983][T14397] syz_tun: tun_chr_ioctl cmd 2147767519 [ 316.634518][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.645222][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.114214][T14489] dyndbg: expected <4096 bytes into control [ 318.183764][T14491] sysfs_service_op_store: Client not running :-5: [ 318.264096][T14495] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 318.871550][T14521] batman_adv: Routing algorithm '' is not supported [ 324.358215][T14758] block2mtd: parameter too long [ 325.161294][T14794] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 325.968175][T14822] syz.2.4398 (14822): /proc/14821/oom_adj is deprecated, please use /proc/14821/oom_score_adj instead. [ 326.253558][T11267] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 326.291645][T14834] aoe: invalid device specification [ 327.899949][T11208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.017071][T11208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.229766][T11208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.411628][T11208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.565280][T14917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.577969][T14917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.588988][T14917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.603560][T14917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.611276][T14917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.055808][T14931] cougar: G6 mapped to F18 [ 329.154195][T11208] bridge_slave_1: left allmulticast mode [ 329.184576][T11208] bridge_slave_1: left promiscuous mode [ 329.225567][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.291034][T11208] bridge_slave_0: left allmulticast mode [ 329.321699][T11208] bridge_slave_0: left promiscuous mode [ 329.364513][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.994679][T11208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.059769][T11208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.104898][T11208] bond0 (unregistering): Released all slaves [ 330.638779][T14917] Bluetooth: hci2: command tx timeout [ 331.087550][T11208] hsr_slave_0: left promiscuous mode [ 331.121479][T11208] hsr_slave_1: left promiscuous mode [ 331.148930][T11208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.194117][T11208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.243754][T11208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.299508][T11208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.414279][T14989] zswap: compressor F(_ not available [ 331.452307][T11208] veth1_macvtap: left promiscuous mode [ 331.478386][T11208] veth0_macvtap: left promiscuous mode [ 331.511121][T11208] veth1_vlan: left promiscuous mode [ 331.550595][T11208] veth0_vlan: left promiscuous mode [ 332.684741][T11208] team0 (unregistering): Port device team_slave_1 removed [ 332.713220][T14917] Bluetooth: hci2: command tx timeout [ 332.765161][T11208] team0 (unregistering): Port device team_slave_0 removed [ 333.299444][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 333.753745][T15058] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5655] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15058] [ 334.709494][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.761549][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.775899][T14917] Bluetooth: hci2: command tx timeout [ 334.814961][T14916] bridge_slave_0: entered allmulticast mode [ 334.878554][T14916] bridge_slave_0: entered promiscuous mode [ 334.933935][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.981044][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.030343][T14916] bridge_slave_1: entered allmulticast mode [ 335.090716][T14916] bridge_slave_1: entered promiscuous mode [ 335.293990][T15115] synth uevent: /module/null_blk: unknown uevent action string [ 335.318699][T14916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.400662][T14916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.620656][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 335.665016][T14916] team0: Port device team_slave_0 added [ 335.709010][T14916] team0: Port device team_slave_1 added [ 335.848955][T14916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.892828][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.033296][T14916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.108284][T14916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.141146][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.264033][T14916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.523540][T14916] hsr_slave_0: entered promiscuous mode [ 336.561607][T14916] hsr_slave_1: entered promiscuous mode [ 336.599937][T14916] debugfs: 'hsr0' already exists in 'hsr' [ 336.634883][T14916] Cannot create hsr debugfs directory [ 336.845482][T14917] Bluetooth: hci2: command tx timeout [ 336.899651][T15168] syz.1.4540 uses obsolete (PF_INET,SOCK_PACKET) [ 337.649502][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.867123][T14916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.909312][T14916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.943825][T14916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.993630][T14916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.036573][T14916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.096665][T14916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.141128][T14916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.203144][T14916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.656426][T14916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.778422][T14916] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.865111][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.872382][T11318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.959761][T15227] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 339.045476][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.052647][T11318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.013371][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 341.278644][T14916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.426465][T14916] veth0_vlan: entered promiscuous mode [ 342.501667][T14916] veth1_vlan: entered promiscuous mode [ 342.628258][T14916] veth0_macvtap: entered promiscuous mode [ 342.674011][T14916] veth1_macvtap: entered promiscuous mode [ 342.760708][T14916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.809246][T14916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.874039][T11147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.917983][T11147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.952632][T11147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.013931][T11208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.189912][T15329] kafs: addr_prefs: Invalid Command [ 343.214468][T11318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.257134][T11318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.375295][T11147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.407281][T11147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.430294][T15330] Process accounting paused [ 343.555920][T14916] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 346.870768][ T29] audit: type=1800 audit(4294967400.400:27): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4646" name="members" dev="configfs" ino=39819 res=0 errno=0 [ 352.603971][T15628] vhci_hcd vhci_hcd.2: invalid port number 135 [ 352.645302][T15628] vhci_hcd vhci_hcd.2: invalid port number 135 [ 352.749427][T15633] process 'syz.0.4738' launched './file0' with NULL argv: empty string added [ 354.236363][T14917] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 354.245643][T14917] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 354.820221][T15698] ICMPv6: process `syz.3.4753' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 355.986362][T14917] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 355.994143][T14917] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 356.052725][T15743] syz.0.4770 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 358.244571][T15821] kAFS: Invalid Command on /proc/fs/afs/cells file [ 358.946714][T14917] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 358.954370][T14917] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 360.280847][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 361.225337][T15920] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.586233][T15937] vhci_hcd: not connected 4 [ 362.240331][T15960] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 362.573399][T14917] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 362.583337][T14917] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 363.661022][T14917] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 363.671218][T14917] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 365.785653][T16067] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.839445][T16067] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 365.911570][T16072] syz_tun: tun_chr_ioctl cmd 21731 [ 366.074212][T14917] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 366.081881][T14917] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 366.649539][T16097] [ 366.863111][T16103] kernel read not supported for file /\*)A (pid: 16103 comm: syz.0.4934) [ 366.936612][ T29] audit: type=1800 audit(4294967420.574:28): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4934" name="\*)A" dev="mqueue" ino=42077 res=0 errno=0 [ 369.306639][ T29] audit: type=1800 audit(4294967422.956:29): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4978" name="discovery_nqn" dev="configfs" ino=42368 res=0 errno=0 [ 369.995730][T14917] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 370.003367][T14917] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 370.080458][T14917] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 370.088046][T14917] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 372.067842][T16266] bond0: no command found in slaves file - use +ifname or -ifname [ 372.396683][T16276] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 372.445059][T16276] cec cec26: uevent: failed to send synthetic uevent: -22 [ 372.704451][T14917] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 372.714804][T14917] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 373.447346][T16299] Process accounting resumed [ 374.725082][T16342] blkio.reset_stats is deprecated [ 375.243714][T16358] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 375.334069][T16362] CIFS: VFS: Invalid SecurityFlags: [ 377.730507][T16427] Setting dangerous option i915.mitigations - tainting kernel [ 377.759548][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.770092][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.795137][T16427] Bad "i915.mitigations=,^", '^' is unknown [ 381.113374][T16523] syz.4.5137 (16523): attempted to duplicate a private mapping with mremap. This is not supported. [ 385.755031][T16696] vhci_hcd vhci_hcd.2: invalid port number 194 [ 385.786916][T16696] vhci_hcd vhci_hcd.2: invalid port number 194 [ 385.835721][T16701] usbip-vudc usbip-vudc.0: gadget not bound [ 386.527528][T16723] i2c i2c-0: delete_device: Can't find device in list [ 387.196312][T16746] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 388.817691][T16809] program syz.4.5276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.835181][T16811] bond0: no command found in slaves file - use +ifname or -ifname [ 391.715983][T16919] nvme_fcloop: unknown parameter or missing value '' [ 391.728730][T16920] : Can't lookup blockdev [ 392.185402][T16931] hub 1-0:1.0: USB hub found [ 392.221228][T16931] hub 1-0:1.0: 1 port detected [ 393.494033][T16984] writing to auto_msgmni has no effect [ 398.740227][T17152] serial 00:02: in use; can't configure [ 400.626420][T17220] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 400.626913][T17219] ima: policy update failed [ 400.704287][ T29] audit: type=1802 audit(4294967454.530:30): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5458" res=0 errno=0 [ 401.438753][T17254] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 401.439070][T17252] ima: policy update failed [ 401.522763][ T29] audit: type=1802 audit(4294967455.344:31): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5471" res=0 errno=0 [ 402.067059][T17273] hub 1-0:1.0: USB hub found [ 402.099228][T17273] hub 1-0:1.0: 1 port detected [ 403.129980][T17312] hub 1-0:1.0: USB hub found [ 403.166693][T17312] hub 1-0:1.0: 1 port detected [ 403.378130][T17312] Process accounting paused [ 406.544682][T17447] CIFS: VFS: UNC: path must begin with // or \\ [ 406.608543][T17447] Malformed UNC in devname [ 406.608543][T17447] [ 406.652893][T17447] CIFS: VFS: Malformed UNC in devname [ 406.735472][T17453] sd 0:0:1:0: PR command failed: 1026 [ 406.774494][T17453] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 406.827051][T17453] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 408.392781][T17517] CIFS: VFS: UNC: path must begin with // or \\ [ 408.426420][T17517] Malformed UNC in devname [ 408.426420][T17517] [ 408.454858][T17517] CIFS: VFS: Malformed UNC in devname [ 409.277445][T17548] synth uevent: /bus/mei: unknown uevent action string [ 412.603887][T17672] ima: policy update failed [ 412.610074][ T29] audit: type=1807 audit(4294967466.481:32): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 412.709393][ T29] audit: type=1802 audit(4294967466.481:33): pid=17673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.5637" res=0 errno=0 [ 412.830626][ T29] audit: type=1802 audit(4294967466.542:34): pid=17672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5637" res=0 errno=0 [ 415.768858][T17755] bond0: no command found in slaves file - use +ifname or -ifname [ 416.115950][T17725] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 417.811110][T17828] usb usb36: usbfs: process 17828 (syz.0.5695) did not claim interface 0 before use [ 422.274792][T17998] deleting an unspecified loop device is not supported. [ 422.940530][T18022] bond0: invalid ARP target specified [ 428.089754][T18217] CIFS mount error: No usable UNC path provided in device string! [ 428.089754][T18217] [ 428.136879][T18217] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 428.412553][T18230] capability: warning: `syz.4.5888' uses deprecated v2 capabilities in a way that may be insecure [ 429.259584][T18263] block2mtd: too many arguments [ 431.688534][T18348] kAFS: unparsable volume name [ 432.142412][T18330] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 432.998516][T18386] rnbd_client L213: map_device: Parameters missing [ 433.418921][T18398] Process accounting resumed [ 433.510954][T18407] syz_tun: tun_chr_ioctl cmd 1074025680 [ 433.954570][T18423] : Can't lookup blockdev [ 435.362334][T18473] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 435.362334][T18473] M' is too long [ 435.420852][T18473] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 435.420852][T18473] W ' is too long [ 436.381145][T14917] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 436.381260][T14917] Bluetooth: hci1: unexpected event for opcode 0x647c [ 437.644285][T18550] kernel profiling enabled (shift: 7) [ 438.358798][T18573] CIFS mount error: No usable UNC path provided in device string! [ 438.358798][T18573] [ 438.426393][T18573] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 438.883354][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.897360][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.002422][T14917] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 439.002454][T14917] Bluetooth: hci3: unexpected event for opcode 0x647c [ 440.826315][T14917] Bluetooth: hci2: unexpected event 0x04 length: 125 > 10 [ 440.826400][T14917] Bluetooth: unknown link type 101 [ 440.839082][T14917] Bluetooth: hci2: connection err: -111 [ 440.929409][T14917] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 440.929441][T14917] Bluetooth: hci0: unexpected event for opcode 0x647c [ 443.183089][T14917] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 443.937079][T14917] Bluetooth: hci1: unexpected event 0x04 length: 125 > 10 [ 443.944446][T14917] Bluetooth: unknown link type 101 [ 443.958266][T14917] Bluetooth: hci1: connection err: -111 [ 444.294694][T14917] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 445.547892][ T29] audit: type=1400 audit(4294967499.593:35): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18835 comm="syz.0.6167" [ 446.336407][T14917] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 446.336437][T14917] Bluetooth: hci0: unexpected event for opcode 0x647c [ 446.356519][T11267] Bluetooth: hci1: command 0x0406 tx timeout [ 448.390950][T18931] hub 3-0:1.0: USB hub found [ 448.410642][T18931] hub 3-0:1.0: 1 port detected [ 448.428661][T14917] Bluetooth: hci1: command 0x0406 tx timeout [ 448.513977][T18931] usb usb3: authorized to connect [ 448.964989][T18923] syz.4.6208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 449.035282][T18923] CPU: 0 UID: 0 PID: 18923 Comm: syz.4.6208 Tainted: G U L syzkaller #0 PREEMPT(full) [ 449.035314][T18923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 449.035321][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.035331][T18923] Call Trace: [ 449.035337][T18923] [ 449.035344][T18923] dump_stack_lvl+0x100/0x190 [ 449.035369][T18923] dump_header+0xfb/0x606 [ 449.035405][T18923] oom_kill_process.cold+0xd/0x330 [ 449.035429][T18923] out_of_memory+0x340/0x14f0 [ 449.035464][T18923] ? __pfx_out_of_memory+0x10/0x10 [ 449.035501][T18923] mem_cgroup_out_of_memory+0xc6/0x130 [ 449.035522][T18923] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 449.035542][T18923] ? find_held_lock+0x2b/0x80 [ 449.035574][T18923] ? do_raw_spin_unlock+0x145/0x1e0 [ 449.035595][T18923] ? _raw_spin_unlock+0x28/0x50 [ 449.035671][T18923] try_charge_memcg+0x6e5/0xdf0 [ 449.035703][T18923] ? __pfx_try_charge_memcg+0x10/0x10 [ 449.035737][T18923] ? find_held_lock+0x2b/0x80 [ 449.035759][T18923] ? rcu_read_unlock+0x17/0x60 [ 449.035787][T18923] ? rcu_read_unlock+0x17/0x60 [ 449.035816][T18923] ? find_held_lock+0x2b/0x80 [ 449.035839][T18923] ? rcu_read_unlock+0x17/0x60 [ 449.035872][T18923] charge_memcg+0x187/0x1e0 [ 449.035901][T18923] __mem_cgroup_charge+0x2b/0x1c0 [ 449.035921][T18923] do_anonymous_page+0xb53/0x2080 [ 449.035940][T18923] ? rcu_read_unlock+0x2d/0xb0 [ 449.035966][T18923] __handle_mm_fault+0x1d2c/0x2a00 [ 449.035988][T18923] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 449.036011][T18923] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.036032][T18923] ? pte_offset_map_lock+0x174/0x320 [ 449.036057][T18923] ? find_held_lock+0x2b/0x80 [ 449.036088][T18923] ? follow_page_pte+0x4d0/0x13f0 [ 449.036118][T18923] handle_mm_fault+0x37b/0xa30 [ 449.036142][T18923] __get_user_pages+0x1178/0x32a0 [ 449.036177][T18923] ? __pfx___get_user_pages+0x10/0x10 [ 449.036210][T18923] populate_vma_page_range+0x267/0x3f0 [ 449.036240][T18923] ? __pfx_populate_vma_page_range+0x10/0x10 [ 449.036268][T18923] ? __pfx_find_vma_intersection+0x10/0x10 [ 449.036295][T18923] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 449.036321][T18923] __mm_populate+0x107/0x3a0 [ 449.036350][T18923] ? __pfx___mm_populate+0x10/0x10 [ 449.036380][T18923] ? up_write+0x2e5/0x5c0 [ 449.036401][T18923] __do_sys_mlockall+0x4f4/0x5d0 [ 449.036424][T18923] do_syscall_64+0x115/0x840 [ 449.036449][T18923] ? clear_bhb_loop+0x40/0x90 [ 449.036472][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.036491][T18923] RIP: 0033:0x7f333819e019 [ 449.036506][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.036524][T18923] RSP: 002b:00007f33390cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 449.036542][T18923] RAX: ffffffffffffffda RBX: 00007f3338425fa0 RCX: 00007f333819e019 [ 449.036554][T18923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 449.036564][T18923] RBP: 00007f333823500c R08: 0000000000000000 R09: 0000000000000000 [ 449.036574][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.036585][T18923] R13: 00007f3338426038 R14: 00007f3338425fa0 R15: 00007ffd21eccce8 [ 449.036608][T18923] [ 449.360203][T18923] memory: usage 3072kB, limit 3072kB, failcnt 94 [ 449.367870][T18923] memory+swap: usage 3096kB, limit 9007199254740988kB, failcnt 0 [ 449.375660][T18923] kmem: usage 460kB, limit 9007199254740988kB, failcnt 0 [ 449.383028][T18923] Memory cgroup stats for /syz4: [ 449.383387][T18923] cache 0 [ 449.391289][T18923] rss 2674688 [ 449.394591][T18923] rss_huge 2097152 [ 449.398309][T18923] shmem 0 [ 449.401354][T18923] mapped_file 0 [ 449.404810][T18923] dirty 0 [ 449.407745][T18923] writeback 0 [ 449.411120][T18923] workingset_refault_anon 4 [ 449.415631][T18923] workingset_refault_file 0 [ 449.420242][T18923] swap 24576 [ 449.423450][T18923] swapcached 40960 [ 449.427203][T18923] pgpgin 23808 [ 449.430643][T18923] pgpgout 25710 [ 449.434099][T18923] pgfault 119522 [ 449.437641][T18923] pgmajfault 3 [ 449.441127][T18923] inactive_anon 0 [ 449.444772][T18923] active_anon 0 [ 449.448244][T18923] inactive_file 0 [ 449.453414][T18923] active_file 0 [ 449.456893][T18923] unevictable 2674688 [ 449.460941][T18923] hierarchical_memory_limit 3145728 [ 449.466146][T18923] hierarchical_memsw_limit 9223372036854771712 [ 449.472322][T18923] total_cache 0 [ 449.475850][T18923] total_rss 2674688 [ 449.479689][T18923] total_rss_huge 2097152 [ 449.483937][T18923] total_shmem 0 [ 449.487385][T18923] total_mapped_file 0 [ 449.491412][T18923] total_dirty 0 [ 449.494900][T18923] total_writeback 0 [ 449.498703][T18923] total_workingset_refault_anon 4 [ 449.503788][T18923] total_workingset_refault_file 0 [ 449.508810][T18923] total_swap 24576 [ 449.512576][T18923] total_swapcached 40960 [ 449.516811][T18923] total_pgpgin 23808 [ 449.520743][T18923] total_pgpgout 25710 [ 449.524740][T18923] total_pgfault 119522 [ 449.528834][T18923] total_pgmajfault 3 [ 449.532760][T18923] total_inactive_anon 0 [ 449.536913][T18923] total_active_anon 0 [ 449.540975][T18923] total_inactive_file 0 [ 449.545142][T18923] total_active_file 0 [ 449.549138][T18923] total_unevictable 2674688 [ 449.555230][T18923] anon_cost 0 [ 449.558521][T18923] file_cost 0 [ 449.561858][T18923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6208,pid=18921,uid=0 [ 449.579707][T18923] Memory cgroup out of memory: Killed process 18921 (syz.4.6208) total-vm:104228kB, anon-rss:5896kB, file-rss:63744kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 450.159828][T14917] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 450.159868][T14917] Bluetooth: hci3: unexpected event for opcode 0x647c [ 450.941084][T18996] TCP: TCP_TX_DELAY enabled [ 451.657864][T14917] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 451.657895][T14917] Bluetooth: hci1: unexpected event for opcode 0x647c [ 451.850951][T11267] Bluetooth: hci2: command 0x0406 tx timeout [ 451.943817][T11267] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 453.996281][T14917] Bluetooth: hci0: command 0x0406 tx timeout [ 454.508376][T11267] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 456.067812][T19122] Bluetooth: hci0: command 0x0406 tx timeout [ 456.365033][T14917] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 456.543453][T11267] Bluetooth: hci2: command 0x0406 tx timeout [ 458.237391][T19237] syz.0.6360: vm.laptop_mode is deprecated. Ignoring setting. [ 458.313477][T19241] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 458.374557][T19122] Bluetooth: hci3: command 0x0406 tx timeout [ 458.612443][T14917] Bluetooth: hci2: command 0x0406 tx timeout [ 458.798150][T19259] i2c i2c-0: delete_device: Can't parse I2C address [ 459.536297][T19289] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 460.442840][T11267] Bluetooth: hci3: command 0x0406 tx timeout [ 462.159537][T19390] bond0: invalid ARP target specified [ 462.780559][T19411] kAFS: Invalid Command on /proc/fs/afs/cells file [ 463.393214][T19434] bond0: option slaves: interface -]=,Do does not exist! [ 463.471408][T19435] Process accounting paused [ 463.984112][T19460] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 464.010508][T19461] wlan1: mtu less than device minimum [ 465.184991][T19505] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 465.232284][T19505] ep_00: uevent: failed to send synthetic uevent: -22 [ 467.286218][T19579] ima: policy update failed [ 467.324747][ T29] audit: type=1802 audit(4294967521.476:36): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6526" res=0 errno=0 [ 467.410075][T19122] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 467.410102][T19122] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 467.425979][T19122] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 467.749456][ T29] audit: type=1800 audit(4294967521.918:37): pid=19597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6534" name="sr0" dev="devtmpfs" ino=2848 res=0 errno=0 [ 468.674914][T19633] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5654] was attempted by ""[19633] [ 468.859088][T19638] futex_wake_op: syz.1.6553 tries to shift op by -2048; fix this program [ 468.902376][T19638] futex_wake_op: syz.1.6553 tries to shift op by -2048; fix this program [ 470.309586][T19697] phram: not enough arguments [ 470.436284][T19703] Format for deleting device is "id" (uint). [ 470.539255][T19706] [U]  [ 470.582277][T19122] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 470.945682][T19723] futex_wake_op: syz.0.6592 tries to shift op by -2048; fix this program [ 471.000392][T19723] futex_wake_op: syz.0.6592 tries to shift op by -2048; fix this program [ 472.289903][T19766] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 472.619890][T11267] Bluetooth: hci3: command 0x0406 tx timeout [ 472.729805][T19776] cifs: Unknown parameter 'knjeRaBt$Mi' [ 474.273502][ T191] Process accounting resumed [ 474.691800][T19122] Bluetooth: hci3: command 0x0406 tx timeout [ 477.293354][T19936] openvswitch: netlink: Missing valid actions attribute. [ 477.949896][T19954] sctp: [Deprecated]: syz.4.6705 (pid 19954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.949896][T19954] Use struct sctp_sack_info instead [ 478.878699][T19963] zram: Added device: zram1 [ 481.124232][ T29] audit: type=1326 audit(4294967535.358:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20016 comm="syz.1.6734" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f089939e019 code=0x0 [ 482.944286][T20062] netlink: 'syz.4.6757': attribute type 11 has an invalid length. [ 482.989291][T20062] netlink: 'syz.4.6757': attribute type 11 has an invalid length. [ 483.025843][T20062] netlink: 'syz.4.6757': attribute type 11 has an invalid length. [ 483.065905][T20062] netlink: 'syz.4.6757': attribute type 11 has an invalid length. [ 483.340064][T20074] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 484.827957][T20117] netlink: 'syz.3.6783': attribute type 1 has an invalid length. [ 486.059270][T20160] netlink: 'syz.0.6804': attribute type 1 has an invalid length. [ 486.096147][T20160] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6804'. [ 487.516843][T20213] FAULT_INJECTION: forcing a failure. [ 487.516843][T20213] name failslab, interval 1, probability 0, space 0, times 1 [ 487.585006][T20213] CPU: 0 UID: 0 PID: 20213 Comm: syz.3.6830 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.585039][T20213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.585046][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.585056][T20213] Call Trace: [ 487.585062][T20213] [ 487.585069][T20213] dump_stack_lvl+0x100/0x190 [ 487.585094][T20213] should_fail_ex.cold+0x5/0xa [ 487.585114][T20213] should_failslab+0xc2/0x120 [ 487.585140][T20213] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 487.585165][T20213] ? __alloc_skb+0x5b7/0x710 [ 487.585189][T20213] ? __alloc_skb+0x140/0x710 [ 487.585216][T20213] __alloc_skb+0x140/0x710 [ 487.585238][T20213] ? __alloc_skb+0x5b7/0x710 [ 487.585261][T20213] ? __pfx___alloc_skb+0x10/0x10 [ 487.585286][T20213] ? lockdep_init_map_type+0x5c/0x250 [ 487.585307][T20213] audit_log_start+0x350/0x930 [ 487.585339][T20213] ? __pfx_audit_log_start+0x10/0x10 [ 487.585361][T20213] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 487.585381][T20213] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 487.585415][T20213] audit_seccomp+0x60/0x190 [ 487.585434][T20213] ? exc_general_protection+0x120/0x240 [ 487.585465][T20213] __secure_computing+0x26d/0x2c0 [ 487.585488][T20213] do_syscall_64+0x5ce/0x840 [ 487.585511][T20213] ? clear_bhb_loop+0x40/0x90 [ 487.585532][T20213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.585551][T20213] RIP: 0033:0x7f524ed9e019 [ 487.585567][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.585584][T20213] RSP: 002b:00007f524cff59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 487.585602][T20213] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f524ed9e019 [ 487.585614][T20213] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 487.585624][T20213] RBP: 00007f524cff6030 R08: 0000000000000001 R09: 000000000000000b [ 487.585635][T20213] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 487.585645][T20213] R13: 00007f524f026038 R14: 00007f524f025fa0 R15: 00007ffed0d8b6e8 [ 487.585666][T20213] [ 487.585685][T20213] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 488.361994][T20213] audit: out of memory in audit_log_start [ 489.150442][T20264] netlink: ct family unspecified [ 489.370213][T20272] FAULT_INJECTION: forcing a failure. [ 489.370213][T20272] name failslab, interval 1, probability 0, space 0, times 0 [ 489.432896][T20272] CPU: 0 UID: 0 PID: 20272 Comm: syz.1.6858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 489.432929][T20272] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 489.432936][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.432946][T20272] Call Trace: [ 489.432952][T20272] [ 489.432960][T20272] dump_stack_lvl+0x100/0x190 [ 489.432983][T20272] should_fail_ex.cold+0x5/0xa [ 489.433003][T20272] should_failslab+0xc2/0x120 [ 489.433029][T20272] __kmalloc_cache_noprof+0x91/0x6c0 [ 489.433049][T20272] ? proc_self_get_link+0x189/0x1f0 [ 489.433131][T20272] proc_self_get_link+0x189/0x1f0 [ 489.433161][T20272] pick_link+0xac2/0x13c0 [ 489.433190][T20272] ? __pfx_proc_self_get_link+0x10/0x10 [ 489.433221][T20272] step_into_slowpath+0x9ba/0xf90 [ 489.433253][T20272] ? __pfx_step_into_slowpath+0x10/0x10 [ 489.433291][T20272] ? lookup_fast+0x2da/0x600 [ 489.433315][T20272] ? inode_permission+0x374/0x620 [ 489.433342][T20272] link_path_walk+0xf28/0x1cc0 [ 489.433377][T20272] path_openat+0x1c9/0x4280 [ 489.433395][T20272] ? __kasan_slab_alloc+0x89/0x90 [ 489.433418][T20272] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 489.433439][T20272] ? do_getname+0x35/0x390 [ 489.433461][T20272] ? __x64_sys_openat+0x12d/0x210 [ 489.433493][T20272] ? __pfx_path_openat+0x10/0x10 [ 489.433519][T20272] do_file_open+0x20e/0x430 [ 489.433539][T20272] ? __pfx_do_file_open+0x10/0x10 [ 489.433574][T20272] ? alloc_fd+0x471/0x7a0 [ 489.433593][T20272] ? do_getname+0x191/0x390 [ 489.433618][T20272] do_sys_openat2+0x10f/0x1e0 [ 489.433642][T20272] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.433666][T20272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.433699][T20272] __x64_sys_openat+0x12d/0x210 [ 489.433724][T20272] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.433758][T20272] do_syscall_64+0x115/0x840 [ 489.433781][T20272] ? clear_bhb_loop+0x40/0x90 [ 489.433803][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.433822][T20272] RIP: 0033:0x7f089939e019 [ 489.433837][T20272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.433854][T20272] RSP: 002b:00007f089a19e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.433871][T20272] RAX: ffffffffffffffda RBX: 00007f0899625fa0 RCX: 00007f089939e019 [ 489.433883][T20272] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 489.433893][T20272] RBP: 00007f089943500c R08: 0000000000000000 R09: 0000000000000000 [ 489.433903][T20272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.433913][T20272] R13: 00007f0899626038 R14: 00007f0899625fa0 R15: 00007fffcea72468 [ 489.433936][T20272] [ 490.041854][ T191] Process accounting resumed [ 492.441242][T20373] netlink: ct family unspecified [ 492.912370][T20388] FAULT_INJECTION: forcing a failure. [ 492.912370][T20388] name failslab, interval 1, probability 0, space 0, times 0 [ 492.989553][T20388] CPU: 0 UID: 0 PID: 20388 Comm: syz.1.6911 Tainted: G U L syzkaller #0 PREEMPT(full) [ 492.989584][T20388] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 492.989591][T20388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.989601][T20388] Call Trace: [ 492.989608][T20388] [ 492.989614][T20388] dump_stack_lvl+0x100/0x190 [ 492.989641][T20388] should_fail_ex.cold+0x5/0xa [ 492.989661][T20388] should_failslab+0xc2/0x120 [ 492.989691][T20388] kmem_cache_alloc_noprof+0x91/0x6a0 [ 492.989715][T20388] ? __pud_alloc+0x4f6/0x690 [ 492.989742][T20388] ? __pmd_alloc+0xbf/0x950 [ 492.989774][T20388] __pmd_alloc+0xbf/0x950 [ 492.989798][T20388] ? __pud_alloc+0x4fb/0x690 [ 492.989830][T20388] walk_to_pmd+0x3a3/0x4c0 [ 492.989859][T20388] get_locked_pte+0x25/0xc0 [ 492.989890][T20388] map_ldt_struct+0x3c1/0xa70 [ 492.989921][T20388] ? __pfx_map_ldt_struct+0x10/0x10 [ 492.989947][T20388] ? alloc_pages_noprof+0xf9/0x160 [ 492.989968][T20388] write_ldt+0x6d3/0xd40 [ 492.990001][T20388] ? __pfx_write_ldt+0x10/0x10 [ 492.990028][T20388] ? xfd_validate_state+0x129/0x190 [ 492.990055][T20388] __x64_sys_modify_ldt+0xb1/0x170 [ 492.990081][T20388] do_syscall_64+0x115/0x840 [ 492.990105][T20388] ? clear_bhb_loop+0x40/0x90 [ 492.990127][T20388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.990145][T20388] RIP: 0033:0x7f089939e019 [ 492.990163][T20388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.990179][T20388] RSP: 002b:00007f089a19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 492.990197][T20388] RAX: ffffffffffffffda RBX: 00007f0899625fa0 RCX: 00007f089939e019 [ 492.990208][T20388] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 492.990218][T20388] RBP: 00007f089943500c R08: 0000000000000000 R09: 0000000000000000 [ 492.990229][T20388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.990239][T20388] R13: 00007f0899626038 R14: 00007f0899625fa0 R15: 00007fffcea72468 [ 492.990262][T20388] [ 493.372199][T20399] Process accounting resumed [ 494.819158][T20456] netlink: 'syz.1.6943': attribute type 2 has an invalid length. [ 494.857441][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 495.214059][T20473] openvswitch: netlink: Key type 29 is not supported [ 495.531883][T20485] openvswitch: netlink: Key type 261 is out of range max 32 [ 495.850464][T20492] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 496.064752][T20498] Zero length message leads to an empty skb [ 497.572675][T20541] nbd: must specify a device to reconfigure [ 498.871955][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7001'. [ 498.918840][T20580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.080788][T20583] HfR: entered promiscuous mode [ 499.999364][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.012159][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.296107][T20627] FAULT_INJECTION: forcing a failure. [ 500.296107][T20627] name failslab, interval 1, probability 0, space 0, times 0 [ 500.343379][T20627] CPU: 0 UID: 0 PID: 20627 Comm: syz.0.7023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.343412][T20627] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.343419][T20627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.343429][T20627] Call Trace: [ 500.343436][T20627] [ 500.343443][T20627] dump_stack_lvl+0x100/0x190 [ 500.343468][T20627] should_fail_ex.cold+0x5/0xa [ 500.343488][T20627] should_failslab+0xc2/0x120 [ 500.343514][T20627] __kmalloc_cache_noprof+0x91/0x6c0 [ 500.343538][T20627] ? proc_self_get_link+0x189/0x1f0 [ 500.343576][T20627] proc_self_get_link+0x189/0x1f0 [ 500.343606][T20627] pick_link+0xac2/0x13c0 [ 500.343632][T20627] ? __pfx_proc_self_get_link+0x10/0x10 [ 500.343663][T20627] step_into_slowpath+0x9ba/0xf90 [ 500.343695][T20627] ? __pfx_step_into_slowpath+0x10/0x10 [ 500.343726][T20627] ? lookup_fast+0x2da/0x600 [ 500.343754][T20627] ? inode_permission+0x374/0x620 [ 500.343781][T20627] link_path_walk+0xf28/0x1cc0 [ 500.343816][T20627] path_openat+0x1c9/0x4280 [ 500.343833][T20627] ? __kasan_slab_alloc+0x89/0x90 [ 500.343856][T20627] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 500.343877][T20627] ? do_getname+0x35/0x390 [ 500.343899][T20627] ? __x64_sys_openat+0x12d/0x210 [ 500.343930][T20627] ? __pfx_path_openat+0x10/0x10 [ 500.343955][T20627] do_file_open+0x20e/0x430 [ 500.343976][T20627] ? __pfx_do_file_open+0x10/0x10 [ 500.344011][T20627] ? alloc_fd+0x471/0x7a0 [ 500.344030][T20627] ? do_getname+0x191/0x390 [ 500.344055][T20627] do_sys_openat2+0x10f/0x1e0 [ 500.344079][T20627] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.344104][T20627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.344143][T20627] __x64_sys_openat+0x12d/0x210 [ 500.344169][T20627] ? __pfx___x64_sys_openat+0x10/0x10 [ 500.344202][T20627] do_syscall_64+0x115/0x840 [ 500.344225][T20627] ? clear_bhb_loop+0x40/0x90 [ 500.344247][T20627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.344266][T20627] RIP: 0033:0x7fd72ab9e019 [ 500.344282][T20627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.344299][T20627] RSP: 002b:00007fd72ba84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.344316][T20627] RAX: ffffffffffffffda RBX: 00007fd72ae25fa0 RCX: 00007fd72ab9e019 [ 500.344328][T20627] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 500.344339][T20627] RBP: 00007fd72ac3500c R08: 0000000000000000 R09: 0000000000000000 [ 500.344349][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.344359][T20627] R13: 00007fd72ae26038 R14: 00007fd72ae25fa0 R15: 00007ffe095bda68 [ 500.344382][T20627] [ 501.139399][T20649] FAULT_INJECTION: forcing a failure. [ 501.139399][T20649] name failslab, interval 1, probability 0, space 0, times 0 [ 501.169894][T20649] CPU: 0 UID: 0 PID: 20649 Comm: syz.3.7035 Tainted: G U L syzkaller #0 PREEMPT(full) [ 501.169927][T20649] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 501.169934][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.169944][T20649] Call Trace: [ 501.169950][T20649] [ 501.169958][T20649] dump_stack_lvl+0x100/0x190 [ 501.169982][T20649] should_fail_ex.cold+0x5/0xa [ 501.170002][T20649] should_failslab+0xc2/0x120 [ 501.170027][T20649] __kmalloc_cache_noprof+0x91/0x6c0 [ 501.170048][T20649] ? proc_self_get_link+0x189/0x1f0 [ 501.170080][T20649] proc_self_get_link+0x189/0x1f0 [ 501.170108][T20649] pick_link+0xac2/0x13c0 [ 501.170134][T20649] ? __pfx_proc_self_get_link+0x10/0x10 [ 501.170174][T20649] step_into_slowpath+0x9ba/0xf90 [ 501.170208][T20649] ? __pfx_step_into_slowpath+0x10/0x10 [ 501.170242][T20649] ? lookup_fast+0x2da/0x600 [ 501.170267][T20649] ? inode_permission+0x374/0x620 [ 501.170293][T20649] link_path_walk+0xf28/0x1cc0 [ 501.170328][T20649] path_openat+0x1c9/0x4280 [ 501.170345][T20649] ? __kasan_slab_alloc+0x89/0x90 [ 501.170368][T20649] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 501.170389][T20649] ? do_getname+0x35/0x390 [ 501.170414][T20649] ? __x64_sys_openat+0x12d/0x210 [ 501.170445][T20649] ? __pfx_path_openat+0x10/0x10 [ 501.170470][T20649] do_file_open+0x20e/0x430 [ 501.170491][T20649] ? __pfx_do_file_open+0x10/0x10 [ 501.170526][T20649] ? alloc_fd+0x471/0x7a0 [ 501.170545][T20649] ? do_getname+0x191/0x390 [ 501.170573][T20649] do_sys_openat2+0x10f/0x1e0 [ 501.170597][T20649] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.170622][T20649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.170654][T20649] __x64_sys_openat+0x12d/0x210 [ 501.170679][T20649] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.170712][T20649] do_syscall_64+0x115/0x840 [ 501.170736][T20649] ? clear_bhb_loop+0x40/0x90 [ 501.170758][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.170776][T20649] RIP: 0033:0x7f524ed9e019 [ 501.170792][T20649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.170809][T20649] RSP: 002b:00007f524cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.170827][T20649] RAX: ffffffffffffffda RBX: 00007f524f025fa0 RCX: 00007f524ed9e019 [ 501.170838][T20649] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 501.170848][T20649] RBP: 00007f524ee3500c R08: 0000000000000000 R09: 0000000000000000 [ 501.170858][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.170868][T20649] R13: 00007f524f026038 R14: 00007f524f025fa0 R15: 00007ffed0d8b6e8 [ 501.170891][T20649] [ 501.446801][T20651] input: f as /devices/virtual/input/input23 [ 501.765122][T20661] openvswitch: netlink: Key type 261 is out of range max 32 [ 501.887107][T20665] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 509.624366][T11267] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 509.640131][T11267] Bluetooth: hci2: Dropping invalid advertising data [ 509.647234][T11267] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 509.647253][T11267] Bluetooth: hci2: Dropping invalid advertising data [ 509.663545][T11267] Bluetooth: hci2: unknown advertising packet type: 0x79 [ 509.663580][T11267] Bluetooth: hci2: Malformed LE Event: 0x02 [ 509.879464][T20915] NFSD: Failed to start, no listeners configured. [ 510.868359][T20958] No such timeout policy "" [ 510.894001][T20958] netlink: Failed to associated timeout policy '' [ 513.909604][T21063] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 513.970424][T21060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.140428][T11267] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 514.228147][T19122] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 514.236016][T19122] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 514.247003][T19122] CPU: 0 UID: 0 PID: 19122 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 514.247037][T19122] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 514.247043][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.247055][T19122] Workqueue: hci3 hci_rx_work [ 514.247129][T19122] Call Trace: [ 514.247135][T19122] [ 514.247142][T19122] dump_stack_lvl+0x100/0x190 [ 514.247166][T19122] sysfs_warn_dup.cold+0x1c/0x28 [ 514.247193][T19122] sysfs_create_dir_ns+0x24b/0x2b0 [ 514.247222][T19122] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 514.247248][T19122] ? find_held_lock+0x2b/0x80 [ 514.247271][T19122] ? kobject_add_internal+0x25f/0x930 [ 514.247290][T19122] ? kobject_add_internal+0x25f/0x930 [ 514.247313][T19122] ? do_raw_spin_unlock+0x145/0x1e0 [ 514.247335][T19122] kobject_add_internal+0x2c8/0x930 [ 514.247357][T19122] kobject_add+0x16a/0x1e0 [ 514.247375][T19122] ? __pfx_kobject_add+0x10/0x10 [ 514.247392][T19122] ? class_to_subsys+0x10f/0x150 [ 514.247415][T19122] ? kobject_put+0xb9/0x640 [ 514.247429][T19122] ? _raw_spin_unlock+0x28/0x50 [ 514.247456][T19122] device_add+0x294/0x1970 [ 514.247473][T19122] ? __pfx_dev_set_name+0x10/0x10 [ 514.247515][T19122] ? __pfx_device_add+0x10/0x10 [ 514.247534][T19122] ? mgmt_send_event_skb+0x2fb/0x460 [ 514.247579][T19122] hci_conn_add_sysfs+0x1a3/0x260 [ 514.247634][T19122] le_conn_complete_evt+0x11eb/0x1f60 [ 514.247689][T19122] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 514.247711][T19122] ? __pfx_bt_warn+0x10/0x10 [ 514.247726][T19122] ? hci_event_packet+0x186/0xcd0 [ 514.247754][T19122] hci_le_conn_complete_evt+0x23c/0x3a0 [ 514.247805][T19122] ? skb_pull_data+0x15f/0x1e0 [ 514.247828][T19122] hci_le_meta_evt+0x34a/0x5f0 [ 514.247869][T19122] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 514.247896][T19122] hci_event_packet+0x51c/0xcd0 [ 514.247927][T19122] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 514.247952][T19122] ? __pfx_hci_event_packet+0x10/0x10 [ 514.247977][T19122] ? kcov_remote_start+0x384/0x670 [ 514.248003][T19122] ? lockdep_hardirqs_on+0x78/0x100 [ 514.248033][T19122] hci_rx_work+0x451/0xfc0 [ 514.248060][T19122] process_one_work+0xa23/0x1940 [ 514.248098][T19122] ? __pfx_process_one_work+0x10/0x10 [ 514.248131][T19122] ? __pfx_hci_rx_work+0x10/0x10 [ 514.248155][T19122] worker_thread+0x5ef/0xe50 [ 514.248188][T19122] ? __pfx_worker_thread+0x10/0x10 [ 514.248215][T19122] ? kthread+0x13a/0x450 [ 514.248237][T19122] ? __pfx_worker_thread+0x10/0x10 [ 514.248261][T19122] kthread+0x370/0x450 [ 514.248284][T19122] ? __pfx_kthread+0x10/0x10 [ 514.248310][T19122] ret_from_fork+0x72b/0xd50 [ 514.248333][T19122] ? __pfx_ret_from_fork+0x10/0x10 [ 514.248356][T19122] ? __switch_to+0x800/0x10f0 [ 514.248383][T19122] ? __switch_to_asm+0x39/0x70 [ 514.248407][T19122] ? __pfx_kthread+0x10/0x10 [ 514.248433][T19122] ret_from_fork_asm+0x1a/0x30 [ 514.248469][T19122] [ 514.248513][T19122] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 514.567972][T19122] Bluetooth: hci3: failed to register connection device [ 515.213954][T21087] netlink: 'syz.0.7241': attribute type 12 has an invalid length. [ 515.783343][T21100] openvswitch: netlink: Message has 4 unknown bytes. [ 516.153130][T19122] Bluetooth: hci3: command 0x0406 tx timeout [ 516.538094][T21122] netlink: 'syz.4.7258': attribute type 3 has an invalid length. [ 518.222162][T19122] Bluetooth: hci3: command 0x0406 tx timeout [ 519.187784][T19122] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 519.235024][T19122] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 519.243358][T19122] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 519.253032][T19122] CPU: 0 UID: 0 PID: 19122 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 519.253065][T19122] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 519.253072][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.253084][T19122] Workqueue: hci2 hci_rx_work [ 519.253111][T19122] Call Trace: [ 519.253118][T19122] [ 519.253125][T19122] dump_stack_lvl+0x100/0x190 [ 519.253148][T19122] sysfs_warn_dup.cold+0x1c/0x28 [ 519.253175][T19122] sysfs_create_dir_ns+0x24b/0x2b0 [ 519.253203][T19122] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 519.253228][T19122] ? find_held_lock+0x2b/0x80 [ 519.253251][T19122] ? kobject_add_internal+0x25f/0x930 [ 519.253269][T19122] ? kobject_add_internal+0x25f/0x930 [ 519.253289][T19122] ? do_raw_spin_unlock+0x145/0x1e0 [ 519.253310][T19122] kobject_add_internal+0x2c8/0x930 [ 519.253332][T19122] kobject_add+0x16a/0x1e0 [ 519.253350][T19122] ? __pfx_kobject_add+0x10/0x10 [ 519.253367][T19122] ? class_to_subsys+0x10f/0x150 [ 519.253389][T19122] ? kobject_put+0xb9/0x640 [ 519.253404][T19122] ? _raw_spin_unlock+0x28/0x50 [ 519.253430][T19122] device_add+0x294/0x1970 [ 519.253448][T19122] ? __pfx_dev_set_name+0x10/0x10 [ 519.253468][T19122] ? __pfx_device_add+0x10/0x10 [ 519.253486][T19122] ? mgmt_send_event_skb+0x2fb/0x460 [ 519.253515][T19122] hci_conn_add_sysfs+0x1a3/0x260 [ 519.253543][T19122] le_conn_complete_evt+0x11eb/0x1f60 [ 519.253573][T19122] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 519.253595][T19122] ? __pfx_bt_warn+0x10/0x10 [ 519.253611][T19122] ? hci_event_packet+0x186/0xcd0 [ 519.253638][T19122] hci_le_conn_complete_evt+0x23c/0x3a0 [ 519.253662][T19122] ? skb_pull_data+0x15f/0x1e0 [ 519.253684][T19122] hci_le_meta_evt+0x34a/0x5f0 [ 519.253708][T19122] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 519.253735][T19122] hci_event_packet+0x51c/0xcd0 [ 519.253758][T19122] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 519.253791][T19122] ? __pfx_hci_event_packet+0x10/0x10 [ 519.253816][T19122] ? kcov_remote_start+0x384/0x670 [ 519.253843][T19122] ? lockdep_hardirqs_on+0x78/0x100 [ 519.253872][T19122] hci_rx_work+0x451/0xfc0 [ 519.253899][T19122] process_one_work+0xa23/0x1940 [ 519.253942][T19122] ? __pfx_process_one_work+0x10/0x10 [ 519.253975][T19122] ? __pfx_hci_rx_work+0x10/0x10 [ 519.253999][T19122] worker_thread+0x5ef/0xe50 [ 519.254036][T19122] ? __pfx_worker_thread+0x10/0x10 [ 519.254064][T19122] ? kthread+0x13a/0x450 [ 519.254087][T19122] ? __pfx_worker_thread+0x10/0x10 [ 519.254112][T19122] kthread+0x370/0x450 [ 519.254135][T19122] ? __pfx_kthread+0x10/0x10 [ 519.254160][T19122] ret_from_fork+0x72b/0xd50 [ 519.254183][T19122] ? __pfx_ret_from_fork+0x10/0x10 [ 519.254207][T19122] ? __switch_to+0x800/0x10f0 [ 519.254234][T19122] ? __switch_to_asm+0x39/0x70 [ 519.254257][T19122] ? __pfx_kthread+0x10/0x10 [ 519.254283][T19122] ret_from_fork_asm+0x1a/0x30 [ 519.254319][T19122] [ 519.254387][T19122] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 519.581214][T19122] Bluetooth: hci2: failed to register connection device [ 520.291320][T19122] Bluetooth: hci3: command 0x0406 tx timeout [ 520.537582][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7304'. [ 521.249005][T11267] Bluetooth: hci2: command 0x0406 tx timeout [ 522.078090][T21258] could not allocate digest TFM handle [ 522.360394][T14917] Bluetooth: hci3: command 0x0406 tx timeout [ 522.927010][T21289] NFSD: Failed to start, no listeners configured. [ 523.039252][T21294] netlink: zone id is out of range [ 523.058777][T21294] netlink: zone id is out of range [ 523.074777][T21294] netlink: zone id is out of range [ 523.112472][T21294] netlink: zone id is out of range [ 523.143036][T21294] netlink: zone id is out of range [ 523.174756][T21294] netlink: zone id is out of range [ 523.207231][T21294] netlink: zone id is out of range [ 523.231236][T21294] netlink: zone id is out of range [ 523.239004][T21289] Process accounting paused [ 523.253800][T21294] netlink: zone id is out of range [ 523.284112][T21294] netlink: zone id is out of range [ 523.315675][T14917] Bluetooth: hci2: command 0x0406 tx timeout [ 524.046838][T21325] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 524.142718][T21328] syz_tun: tun_chr_ioctl cmd 1074025681 [ 525.386459][T14917] Bluetooth: hci2: command 0x0406 tx timeout [ 526.066544][T21393] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7375'. [ 526.391313][T21404] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 526.596928][T21410] sd 0:0:1:0: PR command failed: 1026 [ 526.624863][T21410] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 526.653222][T21410] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 527.393191][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7392'. [ 527.454297][T11267] Bluetooth: hci2: command 0x0406 tx timeout [ 529.497918][T21502] nbd: couldn't find device at index 158 [ 530.047101][T21519] sd 0:0:1:0: PR command failed: 1026 [ 530.072983][T21519] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 530.103871][T21519] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 531.849959][T21572] netlink: 'syz.0.7459': attribute type 1 has an invalid length. [ 532.790080][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7475'. [ 532.877075][T21605] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x26661 [ 532.947294][T21605] memcg:ffff88807e39b100 [ 532.969471][T21605] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 533.010077][T21605] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 533.061655][T21605] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88807e39b100 [ 533.102767][T21605] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 533.152845][T21605] page_owner tracks the page as allocated [ 533.178798][T21605] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 21605, tgid 21602 (syz.4.7474), ts 532877052317, free_ts 532866448013 [ 533.280694][T21605] post_alloc_hook+0xfd/0x120 [ 533.303327][T21605] get_page_from_freelist+0xf48/0x3530 [ 533.332389][T21605] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 533.363994][T21605] alloc_pages_mpol+0x1fb/0x540 [ 533.388241][T21605] folio_alloc_noprof+0x22/0x250 [ 533.412623][T21605] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 533.442756][T21605] filemap_alloc_folio_noprof+0x5e/0x80 [ 533.472614][T21605] page_cache_ra_order+0x539/0xed0 [ 533.485790][T21605] filemap_fault+0x1943/0x3130 [ 533.503610][T21605] __do_fault+0x10b/0x440 [ 533.516682][T21605] do_fault+0xeb2/0x1750 [ 533.535132][T21605] __handle_mm_fault+0x187d/0x2a00 [ 533.559938][T21605] handle_mm_fault+0x37b/0xa30 [ 533.606807][T21605] __get_user_pages+0x1178/0x32a0 [ 533.635324][T21605] populate_vma_page_range+0x267/0x3f0 [ 533.675201][T21605] __mm_populate+0x107/0x3a0 [ 533.711510][T21605] page last free pid 15 tgid 15 stack trace: [ 533.751109][T21605] __free_frozen_pages+0x79f/0x1090 [ 533.783496][T21605] tlb_remove_table_rcu+0x2cf/0x380 [ 533.802249][T21605] rcu_core+0x5a2/0x10d0 [ 533.819352][T21605] handle_softirqs+0x1ea/0x9b0 [ 533.834167][T21605] run_ksoftirqd+0x38/0x60 [ 533.850576][T21605] smpboot_thread_fn+0x3d3/0xaa0 [ 533.870305][T21605] kthread+0x370/0x450 [ 533.884109][T21605] ret_from_fork+0x72b/0xd50 [ 533.902118][T21605] ret_from_fork_asm+0x1a/0x30 [ 533.917344][T21605] ------------[ cut here ]------------ [ 533.923278][T21605] kernel BUG at mm/filemap.c:858! [ 534.009245][T21605] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 534.015534][T21605] CPU: 0 UID: 0 PID: 21605 Comm: syz.4.7474 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.026472][T21605] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.031690][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.041749][T21605] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 534.047758][T21605] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 534.067540][T21605] RSP: 0018:ffffc900035ef3f8 EFLAGS: 00010246 [ 534.073604][T21605] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90013a8e000 [ 534.081577][T21605] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff88807753e1c4 [ 534.089552][T21605] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 534.097778][T21605] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 534.105750][T21605] R13: ffffea0000999840 R14: 00000000000000f0 R15: 0000000000000000 [ 534.113740][T21605] FS: 00007f33390cf6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 534.122668][T21605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.129247][T21605] CR2: 0000001b2e40aff8 CR3: 0000000079caa000 CR4: 00000000003526f0 [ 534.137218][T21605] Call Trace: [ 534.140493][T21605] [ 534.143424][T21605] ? __pfx___filemap_add_folio+0x10/0x10 [ 534.149075][T21605] filemap_add_folio+0x1d3/0x630 [ 534.154025][T21605] ? __lock_acquire+0x49f/0x1a40 [ 534.158970][T21605] ? __pfx_filemap_add_folio+0x10/0x10 [ 534.164428][T21605] ? __pfx___css_rstat_updated+0x10/0x10 [ 534.170069][T21605] page_cache_ra_order+0x602/0xed0 [ 534.175194][T21605] filemap_fault+0x1943/0x3130 [ 534.180142][T21605] ? __pfx_filemap_fault+0x10/0x10 [ 534.185281][T21605] ? blk_cgroup_congested+0x136/0x270 [ 534.190739][T21605] ? blk_cgroup_congested+0x136/0x270 [ 534.196397][T21605] ? __pfx_filemap_map_pages+0x10/0x10 [ 534.201857][T21605] __do_fault+0x10b/0x440 [ 534.206197][T21605] do_fault+0xeb2/0x1750 [ 534.210450][T21605] __handle_mm_fault+0x187d/0x2a00 [ 534.215574][T21605] ? __pfx_clockevents_program_event+0x10/0x10 [ 534.221729][T21605] ? find_held_lock+0x2b/0x80 [ 534.226405][T21605] ? __pfx___handle_mm_fault+0x10/0x10 [ 534.231859][T21605] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 534.237588][T21605] handle_mm_fault+0x37b/0xa30 [ 534.242369][T21605] __get_user_pages+0x1178/0x32a0 [ 534.247401][T21605] ? __pfx___get_user_pages+0x10/0x10 [ 534.252801][T21605] populate_vma_page_range+0x267/0x3f0 [ 534.258283][T21605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 534.264274][T21605] ? __pfx_find_vma_intersection+0x10/0x10 [ 534.270085][T21605] ? do_mmap+0x93f/0x12f0 [ 534.274419][T21605] __mm_populate+0x107/0x3a0 [ 534.279023][T21605] ? __pfx___mm_populate+0x10/0x10 [ 534.284231][T21605] ? up_write+0x2e5/0x5c0 [ 534.288577][T21605] vm_mmap_pgoff+0x37f/0x470 [ 534.293178][T21605] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 534.298293][T21605] ? __fget_files+0x215/0x3d0 [ 534.302981][T21605] ? __fget_files+0x21f/0x3d0 [ 534.307678][T21605] ksys_mmap_pgoff+0x3cb/0x610 [ 534.312472][T21605] ? __x64_sys_futex+0x358/0x4d0 [ 534.317447][T21605] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 534.322750][T21605] ? xfd_validate_state+0x129/0x190 [ 534.327966][T21605] __x64_sys_mmap+0x125/0x190 [ 534.332657][T21605] do_syscall_64+0x115/0x840 [ 534.337264][T21605] ? clear_bhb_loop+0x40/0x90 [ 534.341960][T21605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.347853][T21605] RIP: 0033:0x7f333819e019 [ 534.352268][T21605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.371889][T21605] RSP: 002b:00007f33390cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 534.380334][T21605] RAX: ffffffffffffffda RBX: 00007f3338425fa0 RCX: 00007f333819e019 [ 534.388306][T21605] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 534.396283][T21605] RBP: 00007f333823500c R08: 0000000000000003 R09: 0000000000008000 [ 534.404253][T21605] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 534.412240][T21605] R13: 00007f3338426038 R14: 00007f3338425fa0 R15: 00007ffd21eccce8 [ 534.420232][T21605] [ 534.423252][T21605] Modules linked in: [ 534.428984][T21605] ---[ end trace 0000000000000000 ]--- [ 534.503824][T21605] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 534.516127][T21605] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 534.536633][T21605] RSP: 0018:ffffc900035ef3f8 EFLAGS: 00010246 [ 534.543033][T21605] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90013a8e000 [ 534.552584][T21605] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff88807753e1c4 [ 534.561985][T21605] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 534.570191][T21605] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 534.578512][T21605] R13: ffffea0000999840 R14: 00000000000000f0 R15: 0000000000000000 [ 534.586564][T21605] FS: 00007f33390cf6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 534.595729][T21605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.602753][T21605] CR2: 00007f524efed158 CR3: 0000000079caa000 CR4: 00000000003526f0 [ 534.612415][T21605] Kernel panic - not syncing: Fatal exception [ 534.618537][T21605] Kernel Offset: disabled [ 534.622861][T21605] Rebooting in 86400 seconds..