last executing test programs: 5m51.779454372s ago: executing program 0 (id=3643): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 5m51.608928062s ago: executing program 0 (id=3648): mprotect$auto(0x200000000000, 0x806124, 0x8) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x7, 0x9}, 0xfffff000) 5m51.503924342s ago: executing program 0 (id=3651): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000004140)='/sys/kernel/mm/ksm/stable_node_chains\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68) 5m51.443989146s ago: executing program 0 (id=3652): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000180)="0a1b9a5c7d00006e16886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x34) 5m51.315357949s ago: executing program 0 (id=3656): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 5m50.671100389s ago: executing program 0 (id=3670): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptyr5\x00', 0x8640, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000480)) 5m50.408770303s ago: executing program 32 (id=3670): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptyr5\x00', 0x8640, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000480)) 2.005269044s ago: executing program 4 (id=9369): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7488) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 1.79342813s ago: executing program 4 (id=9373): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b40, r1) 1.74481847s ago: executing program 1 (id=9374): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) 1.601795553s ago: executing program 4 (id=9377): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) 1.518217355s ago: executing program 1 (id=9378): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, 0x0, 0x2004081) 1.371482761s ago: executing program 4 (id=9380): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x94) 1.107871061s ago: executing program 2 (id=9383): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 1.106595439s ago: executing program 4 (id=9391): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r0, 0x0, 0x1000, 0x2, 0x0, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)=@bpf_attr_0={0x3, 0x0, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x4, "3300feffffffffffff00000000002000", 0x0, 0xffffffffffffffff, 0x6, 0x5, 0x9, 0x8}, 0x9) 956.16273ms ago: executing program 3 (id=9385): close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r0, 0x0, 0xa8) 887.490984ms ago: executing program 2 (id=9386): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readahead$auto(r0, 0x2, 0xfd24) 875.281489ms ago: executing program 3 (id=9387): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x2) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 795.309761ms ago: executing program 2 (id=9388): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x20, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) 787.33726ms ago: executing program 3 (id=9389): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x1, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8e) gettimeofday$auto(0x0, 0x0) 699.722483ms ago: executing program 3 (id=9390): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x9) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) 503.503792ms ago: executing program 1 (id=9392): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) 446.452203ms ago: executing program 2 (id=9393): socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) 330.362584ms ago: executing program 3 (id=9394): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000280)={0x7fffffff, 0x10, 0x2, 0x6, 0x9, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x2, 0xfffffff8, 0x100, 0x83, 0x101, 0x6, 0x8}, {0x100, 0x1, 0x4f, 0x1, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) 313.448205ms ago: executing program 1 (id=9395): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) sysfs$auto(0x2, 0x1e, 0x0) getsockopt$auto(r0, 0x84, 0x84, 0x0, 0x0) 150.013996ms ago: executing program 3 (id=9396): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 149.427707ms ago: executing program 4 (id=9404): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 148.923724ms ago: executing program 2 (id=9397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70b927, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4008000) 142.878928ms ago: executing program 1 (id=9398): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cd, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x5}) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) 13.129251ms ago: executing program 2 (id=9399): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) 0s ago: executing program 1 (id=9400): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x8b8, 0x10, 0x104, 0x8, 0xffffffffffffffff, 0xe, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x200000006}, 0xf) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0xffffffff, 0x200800}, 0x92) kernel console output (not intermixed with test programs): 54][T10564] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 192.742269][T10564] page dumped because: unmovable page [ 192.742282][T10564] page_owner tracks the page as allocated [ 192.742290][T10564] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1481515539 [ 192.742321][T10564] register_early_stack+0x74/0xaf [ 192.742480][T10564] init_page_owner+0x4c/0xa40 [ 192.742505][T10564] page_ext_init+0x71d/0x780 [ 192.742532][T10564] mm_core_init+0x229/0x270 [ 192.742563][T10564] page_owner free stack trace missing [ 192.839094][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 193.961489][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.961575][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.383995][T10645] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 194.384053][T10645] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 194.384084][T10645] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 194.384104][T10645] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 194.384117][T10645] page dumped because: unmovable page [ 194.384128][T10645] page_owner tracks the page as allocated [ 194.384136][T10645] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1481515539 [ 194.384165][T10645] register_early_stack+0x74/0xaf [ 194.384198][T10645] init_page_owner+0x4c/0xa40 [ 194.384221][T10645] page_ext_init+0x71d/0x780 [ 194.384246][T10645] mm_core_init+0x229/0x270 [ 194.384275][T10645] page_owner free stack trace missing [ 194.671146][ T52] Bluetooth: hci3: command 0x2016 tx timeout [ 195.156945][T10676] phram: not enough arguments [ 195.330666][T10680] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 195.330729][T10680] cec cec26: uevent: failed to send synthetic uevent: -22 [ 195.858242][T10708] deleting an unspecified loop device is not supported. [ 197.318477][T10792] synth uevent: /bus/mei: unknown uevent action string [ 198.160339][T10836] kAFS: Invalid Command on /proc/fs/afs/cells file [ 199.008907][T10884] usb usb13: usbfs: process 10884 (syz.3.2492) did not claim interface 0 before use [ 199.741749][ T31] audit: type=1807 audit(1843107671.399:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 199.755051][ T31] audit: type=1802 audit(1843107671.419:17): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2509" res=0 errno=0 [ 199.773843][T10922] ima: policy update failed [ 199.778681][ T31] audit: type=1802 audit(1843107671.439:18): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2509" res=0 errno=0 [ 201.121949][ T5614] Bluetooth: hci1: command 0x2016 tx timeout [ 201.122006][ T5614] Bluetooth: hci2: command 0x2016 tx timeout [ 201.122032][ T5614] Bluetooth: hci3: command 0x2016 tx timeout [ 201.122092][ T5616] Bluetooth: hci0: command 0x2016 tx timeout [ 201.139634][T10982] sd 0:0:1:0: PR command failed: 1026 [ 201.139700][T10982] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 201.139746][T10982] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 202.462126][T11030] binder: 11028:11030 ioctl c0306201 200000000000 returned -14 [ 202.860928][T11045] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 202.878430][T11045] pci 0000:00:01.3: PCI INT A: no GSI [ 203.249717][T11070] WARNING! power/level is deprecated; use power/control instead [ 203.847808][T11102] Process accounting paused [ 205.501260][T11142] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 205.629499][T11166] usb usb36: usbfs: process 11166 (syz.3.2627) did not claim interface 0 before use [ 208.771984][T11320] random: crng reseeded on system resumption [ 210.227310][T11358] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 211.667977][T11453] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 212.067637][T11472] futex_wake_op: syz.3.2778 tries to shift op by -2048; fix this program [ 212.077989][T11472] futex_wake_op: syz.3.2778 tries to shift op by -2048; fix this program [ 212.459769][T11473] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 212.755582][T11502] ptp ptp0: only physical clock in use now [ 216.324194][T11644] block nbd0: NBD_DISCONNECT [ 219.004043][T11773] kafs: addr_prefs: Invalid Command [ 220.605312][T11849] kfence: disabled [ 221.579937][T11902] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2]. [ 223.544407][T11990] bond0: no command found in slaves file - use +ifname or -ifname [ 224.249777][ T52] Bluetooth: hci2: unexpected event 0x12 length: 13 > 8 [ 225.094886][T12057] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 226.017089][T12090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.362298][T12090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.489688][T12090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.645061][T12090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.242550][T12150] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 227.948789][ T31] audit: type=1400 audit(1843107699.765:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12184 comm="syz.0.3125" [ 228.187875][T12199] bond0: option packets_per_slave: invalid value ( Xnp) [ 228.201836][T12199] bond0: option packets_per_slave: allowed values 0 - 65535 [ 231.264689][T12347] cougar: G6 mapped to F18 [ 231.362434][T12343] zram: Added device: zram1 [ 231.466920][T12355] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 232.357747][T12406] ICMPv6: process `syz.2.3232' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 233.028082][T12442] process 'syz.3.3249' launched '/dev/fd/3' with NULL argv: empty string added [ 233.379914][T12461] block2mtd: parameter too long [ 233.735882][T12479] Process accounting resumed [ 233.757701][T12481] block2mtd: illegal erase size [ 234.063483][T12499] ecryptfs_miscdev_write: Error while inspecting packet size [ 234.757729][T12530] zram: Added device: zram2 [ 236.407369][T12610] could not allocate digest TFM handle [ 237.056048][T12656] aoe: invalid device specification [ 240.012800][T12800] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 240.523983][T12822] i2c i2c-0: new_device: Invalid device name [ 241.627418][ T52] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 241.627467][ T52] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 243.185184][T12945] : Can't lookup blockdev [ 243.666024][T12967] kAFS: Invalid Command on /proc/fs/afs/cells file [ 243.927756][T12976] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 243.927824][T12976] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 243.927859][T12976] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 243.927877][T12976] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 243.927889][T12976] page dumped because: unmovable page [ 243.927900][T12976] page_owner info is not present (never set?) [ 244.060522][T12984] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 244.637462][T13015] program syz.1.3508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.715582][T13019] i2c i2c-0: new_device: Missing parameters [ 245.510688][T13063] hub 1-0:1.0: USB hub found [ 245.517149][T13063] hub 1-0:1.0: 1 port detected [ 245.803891][T13079] nvme_fcloop: unknown parameter or missing value '7' [ 246.710542][T13131] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 246.722762][T13131] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 247.411252][ T52] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 247.411303][ T52] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 248.841262][T13243] random: crng reseeded on system resumption [ 248.983405][T13250] sunrpc: the pool_mode module parameter is deprecated and no longer has any effect; the pool mode is always 'pernode' [ 249.432046][ T52] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 250.332835][ T52] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 250.332905][ T52] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 250.541714][T13328] hub 1-0:1.0: USB hub found [ 250.542088][T13328] hub 1-0:1.0: 1 port detected [ 250.830965][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.959487][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.110337][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.415475][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.419416][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.426221][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.445166][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.452715][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.560830][T13373] bdi 7:8: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 251.738840][ T59] bridge_slave_1: left allmulticast mode [ 251.738914][ T59] bridge_slave_1: left promiscuous mode [ 251.741447][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.776858][ T59] bridge_slave_0: left allmulticast mode [ 251.776912][ T59] bridge_slave_0: left promiscuous mode [ 251.777164][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.814863][T13382] hub 1-0:1.0: USB hub found [ 251.833225][T13382] hub 1-0:1.0: 1 port detected [ 252.142024][T13392] ima: policy update failed [ 252.144069][ T31] audit: type=1802 audit(1843107724.081:20): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3689" res=0 errno=0 [ 252.271034][T13402] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 252.656841][ T52] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 252.656892][ T52] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 252.701365][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.756673][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.793381][ T59] bond0 (unregistering): Released all slaves [ 252.848816][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 253.484833][ T52] Bluetooth: hci0: command tx timeout [ 253.506412][T13455] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 253.859720][ T59] hsr_slave_0: left promiscuous mode [ 253.867512][ T59] hsr_slave_1: left promiscuous mode [ 253.868575][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.868609][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.877148][T13471] vhci_hcd: not connected 4 [ 253.886569][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.886592][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.983881][ T59] veth1_macvtap: left promiscuous mode [ 253.983966][ T59] veth0_macvtap: left promiscuous mode [ 253.984075][ T59] veth1_vlan: left promiscuous mode [ 253.984160][ T59] veth0_vlan: left promiscuous mode [ 254.503080][ T59] team0 (unregistering): Port device team_slave_1 removed [ 254.516544][ T59] team0 (unregistering): Port device team_slave_0 removed [ 254.629174][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 254.880933][T13499] hub 1-0:1.0: USB hub found [ 254.895130][T13499] hub 1-0:1.0: 1 port detected [ 255.081811][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.081901][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.562929][ T52] Bluetooth: hci0: command tx timeout [ 255.833758][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.833882][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.834030][T13367] bridge_slave_0: entered allmulticast mode [ 255.842768][T13367] bridge_slave_0: entered promiscuous mode [ 255.863358][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.867701][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.867865][T13367] bridge_slave_1: entered allmulticast mode [ 255.875805][T13367] bridge_slave_1: entered promiscuous mode [ 256.146426][T13367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.157715][T13367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.317743][T13367] team0: Port device team_slave_0 added [ 256.326602][T13367] team0: Port device team_slave_1 added [ 256.338318][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 256.382832][T13367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.391076][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.417556][T13367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.430676][T13367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.437738][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.463762][T13367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.529182][T13367] hsr_slave_0: entered promiscuous mode [ 256.537303][T13367] hsr_slave_1: entered promiscuous mode [ 257.204409][T13601] writing to auto_msgmni has no effect [ 257.289173][T13367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.333915][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.337364][T13367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.404688][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.409559][T13367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.431100][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.449559][T13367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.478611][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.633646][ T52] Bluetooth: hci0: command tx timeout [ 257.671021][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 257.869068][ T31] audit: type=1806 audit(1843107729.831:21): xattr="." res=0 [ 257.935230][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.997056][T13638] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5612] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13638] [ 258.024842][T13367] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.045464][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.045612][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.084447][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.084583][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.250085][T13367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.693557][ T52] Bluetooth: hci0: command tx timeout [ 259.942107][T13367] veth0_vlan: entered promiscuous mode [ 259.957872][T13367] veth1_vlan: entered promiscuous mode [ 260.034854][T13367] veth0_macvtap: entered promiscuous mode [ 260.053001][T13367] veth1_macvtap: entered promiscuous mode [ 260.122285][T13367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.150506][T13367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.180397][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.220299][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.230382][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.230554][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.391326][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.391377][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.467759][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.467810][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.655893][T13763] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.616147][T13817] kAFS: Invalid Command on /proc/fs/afs/cells file [ 262.088181][T13842] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 263.072280][T13899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 263.590358][T13926] Process accounting paused [ 264.587160][T13976] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 265.725408][T14038] : Can't lookup blockdev [ 267.541715][ T31] audit: type=1800 audit(1843107739.561:22): pid=14135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4005" name="discovery_nqn" dev="configfs" ino=35481 res=0 errno=0 [ 268.121136][T14165] program syz.4.4017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.466378][ T31] audit: type=1400 audit(1843107740.486:23): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=14181 comm="syz.4.4022" [ 271.603673][T14336] program syz.1.4082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.892287][T14348] vhci_hcd vhci_hcd.0: invalid port number 13 [ 271.892336][T14348] vhci_hcd vhci_hcd.0: invalid port number 13 [ 272.025296][T14355] bond0: invalid ARP target specified [ 274.387530][T14471] nvme_fcloop: unknown parameter or missing value '' [ 274.653786][T14487] vmstat_refresh: nr_hugetlb -4096 [ 276.763038][T14600] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 276.763117][T14600] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 277.024146][ T52] Bluetooth: hci1: unexpected event 0x35 length: 725 > 6 [ 277.322385][T14628] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 277.322465][T14628] vhci_hcd vhci_hcd.3: invalid port number 0 [ 282.128341][T14843] syz.3.4316 (14843): drop_caches: 0 [ 283.255532][T14895] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 283.257633][T14892] ima: policy update failed [ 283.258578][ T31] audit: type=1802 audit(1843107755.353:24): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4339" res=0 errno=0 [ 284.204845][T14945] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 284.655699][T14970] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 284.704278][T14974] Scaler: ================= START STATUS ================= [ 284.704324][T14974] Scaler: ================== END STATUS ================== [ 284.758987][T14973] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 284.759051][T14973] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 284.759090][T14973] memcg:ffff88805e45ef41 [ 284.759104][T14973] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 284.759131][T14973] page_type: f5(slab) [ 284.759157][T14973] raw: 00fff00000000040 ffff88801c035500 dead000000000100 dead000000000122 [ 284.759185][T14973] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff88805e45ef41 [ 284.759210][T14973] head: 00fff00000000040 ffff88801c035500 dead000000000100 dead000000000122 [ 284.759237][T14973] head: 0000000000000000 0000000200040004 00000000f5000000 ffff88805e45ef41 [ 284.759264][T14973] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 284.759288][T14973] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 284.759306][T14973] page dumped because: unmovable page [ 284.759322][T14973] page_owner tracks the page as allocated [ 284.759335][T14973] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4985, tgid 4985 (udevd), ts 45032321078 [ 284.794427][T14973] post_alloc_hook+0xfd/0x120 [ 284.794474][T14973] get_page_from_freelist+0x110d/0x35b0 [ 284.794789][T14973] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 284.794828][T14973] new_slab+0xa9/0x6e0 [ 284.794862][T14973] refill_objects+0xe3/0x410 [ 284.794898][T14973] __pcs_replace_empty_main+0x35e/0x650 [ 284.794930][T14973] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 284.794954][T14973] seq_read_iter+0x819/0x1270 [ 284.794988][T14973] kernfs_fop_read_iter+0x46c/0x610 [ 284.795019][T14973] vfs_read+0x82e/0xb40 [ 284.795052][T14973] ksys_read+0x12a/0x250 [ 284.795084][T14973] do_syscall_64+0x121/0x770 [ 284.795116][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.796323][T14973] page last free pid 4989 tgid 4989 ts 45009995837 stack trace: [ 284.796356][T14973] __free_frozen_pages+0x79f/0x10f0 [ 284.796391][T14973] qlist_free_all+0x47/0xf0 [ 284.796413][T14973] kasan_quarantine_reduce+0x1a0/0x1f0 [ 284.796437][T14973] __kasan_slab_alloc+0x69/0x90 [ 284.796464][T14973] __kmalloc_noprof+0x2cc/0x840 [ 284.796488][T14973] tomoyo_realpath_from_path+0xb6/0x690 [ 284.796519][T14973] tomoyo_path2_perm+0x366/0x700 [ 284.796545][T14973] tomoyo_path_rename+0xfc/0x1a0 [ 284.796576][T14973] security_path_rename+0x18e/0x3c0 [ 284.796606][T14973] filename_renameat2+0x731/0xa60 [ 284.796634][T14973] __x64_sys_rename+0x81/0xb0 [ 284.796661][T14973] do_syscall_64+0x121/0x770 [ 284.796683][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.510323][T15004] kernel profiling enabled (shift: 7) [ 285.704678][T15016] binder: 15015:15016 ioctl c018620b 0 returned -14 [ 286.330664][T15050] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 287.549757][T15113] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 287.650288][T15119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 287.871378][T15130] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 288.009861][ T30] Process accounting resumed [ 289.082924][ T31] audit: type=1800 audit(1843107761.213:25): pid=15191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4487" name="members" dev="configfs" ino=39034 res=0 errno=0 [ 289.940560][ T31] audit: type=1800 audit(1843107762.068:26): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4506" name="SYSVff7fffff" dev="tmpfs" ino=0 res=0 errno=0 [ 290.508224][T15260] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 291.878771][T15336] [ 292.702706][T15381] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 292.718509][T15381] ep_00: uevent: failed to send synthetic uevent: -22 [ 293.493800][T15423] i2c i2c-0: delete_device: Can't find device in list [ 293.560779][T15423] Process accounting resumed [ 294.444561][T15468] blkio.reset_stats is deprecated [ 294.652270][T15481] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 295.123751][ T31] audit: type=1804 audit(1843107767.285:27): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4641" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=467 res=1 errno=0 [ 297.764427][T15625] kAFS: Invalid Command on /proc/fs/afs/cells file [ 299.498572][T15720] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b28faa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 299.498648][T15720] Call Trace: [ 299.498658][T15720] [ 299.498674][T15720] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 299.498707][T15720] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 299.498737][T15720] mce_cpu_restart+0xd5/0x1f0 [ 299.498751][T15720] ? __pfx_mce_cpu_restart+0x10/0x10 [ 299.498765][T15720] smp_call_function_many_cond+0x1449/0x18c0 [ 299.498790][T15720] ? __pfx_mce_cpu_restart+0x10/0x10 [ 299.498807][T15720] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 299.498828][T15720] ? __timer_delete_sync+0x10f/0x1c0 [ 299.498849][T15720] set_bank+0x240/0x3a0 [ 299.498869][T15720] ? __pfx_set_bank+0x10/0x10 [ 299.498889][T15720] ? find_held_lock+0x2b/0x80 [ 299.498903][T15720] ? sysfs_file_kobj+0xe4/0x290 [ 299.498923][T15720] ? sysfs_file_kobj+0xe4/0x290 [ 299.498944][T15720] ? __pfx_set_bank+0x10/0x10 [ 299.498963][T15720] dev_attr_store+0x58/0x80 [ 299.498979][T15720] ? __pfx_dev_attr_store+0x10/0x10 [ 299.498994][T15720] sysfs_kf_write+0xf2/0x150 [ 299.499016][T15720] kernfs_fop_write_iter+0x3e0/0x5f0 [ 299.499050][T15720] ? __pfx_sysfs_kf_write+0x10/0x10 [ 299.499073][T15720] vfs_write+0x6af/0x1050 [ 299.499097][T15720] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 299.499119][T15720] ? __pfx_vfs_write+0x10/0x10 [ 299.499138][T15720] ? find_held_lock+0x2b/0x80 [ 299.499165][T15720] ksys_write+0x12a/0x250 [ 299.499185][T15720] ? __pfx_ksys_write+0x10/0x10 [ 299.499210][T15720] do_syscall_64+0x121/0x770 [ 299.499227][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.499242][T15720] RIP: 0033:0x7f650a19e0d9 [ 299.499259][T15720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.499273][T15720] RSP: 002b:00007f650b037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.499292][T15720] RAX: ffffffffffffffda RBX: 00007f650a425fa0 RCX: 00007f650a19e0d9 [ 299.499301][T15720] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 299.499310][T15720] RBP: 00007f650a235024 R08: 0000000000000000 R09: 0000000000000000 [ 299.499318][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.499326][T15720] R13: 00007f650a426038 R14: 00007f650a425fa0 R15: 00007ffd9066a068 [ 299.499346][T15720] [ 299.871579][T15715] smpboot: CPU 1 is now offline [ 299.972171][T15726] : Can't lookup blockdev [ 308.136947][T16062] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 308.150055][T14855] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 308.150198][T14855] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 308.743294][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.750747][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.933091][T16118] zswap: compressor F(_ not available [ 310.476059][T16147] Setting dangerous option i915.mitigations - tainting kernel [ 310.476111][T16147] Bad "i915.mitigations=,!];", '];' is unknown [ 312.311812][T16230] i2c i2c-0: delete_device: Extra parameters [ 313.761783][T16296] serial 00:02: in use; can't configure [ 314.111093][T16312] binder: 16310:16312 ioctl c018620c 9 returned -14 [ 315.760080][T14770] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 315.760172][T14770] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 316.210260][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.218278][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.028164][T14855] Bluetooth: hci1: command 0x2016 tx timeout [ 318.034334][ T5692] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 318.226853][T16486] syz.3.5116 uses obsolete (PF_INET,SOCK_PACKET) [ 318.786771][T14855] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 318.795258][T14855] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 320.097815][T16381] Bluetooth: hci1: command 0x2016 tx timeout [ 320.105092][ T5692] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 321.452960][T16605] ubi0: attaching mtd0 [ 321.485358][T16605] ubi0: scanning is finished [ 321.514905][T16605] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 321.832025][T16605] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 322.154353][T16632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 322.657150][T16654] tipc: Can't bind to reserved service type 63 [ 323.018483][T16381] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 323.018576][T16381] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 323.478203][T16672] Process accounting paused [ 323.563127][T16693] Setting dangerous option i915.mitigations - tainting kernel [ 324.476945][ T31] audit: type=1800 audit(4294967308.594:28): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5234" name="lu_gp_id" dev="configfs" ino=44156 res=0 errno=0 [ 325.306267][T16764] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 326.395994][T14855] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 326.405454][T14855] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 329.860521][T16939] ima: policy update failed [ 329.865372][ T31] audit: type=1802 audit(4294967314.002:29): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5334" res=0 errno=0 [ 330.792441][T16980] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 333.003667][T17096] mmap: syz.4.5394 (17096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.536691][T17124] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 333.899805][T17140] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 334.554945][T17176] bond0: option fail_over_mac: invalid value () [ 337.908267][T17357] cifs: Unknown parameter 'knjeRaBt$Mi' [ 338.091239][T17365] vhci_hcd: not connected 4 [ 338.611734][T17393] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 339.654343][T17450] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 341.736201][T17583] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 344.126177][T17681] kafs: addr_prefs: Invalid Command [ 345.497887][T17746] TCP: TCP_TX_DELAY enabled [ 345.921600][T17768] Invalid input. Must be >= 4608 [ 346.172090][T17784] process 'syz.1.5658' launched '/dev/fd/3' with NULL argv: empty string added [ 346.767612][T17813] vhci_hcd vhci_hcd.1: invalid port number 16 [ 346.767644][T17813] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 347.888900][T17878] sysfs_service_op_store: Client not running :-5: [ 348.377127][T17904] cougar: G6 mapped to space [ 348.600491][T17918] block2mtd: device name too long [ 349.205174][T17950] wlan1: mtu less than device minimum [ 349.565534][T17972] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 349.565647][T17972] net gretap0: uevent: failed to send synthetic uevent: -22 [ 351.145363][T18052] Format for deleting device is "id" (uint). [ 351.592239][T18070] bond0: invalid ARP target specified [ 353.309143][T18158] kAFS: No cell specified [ 353.368474][T18158] Process accounting resumed [ 357.892518][T16381] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 358.779219][T18432] ecryptfs_miscdev_write: Invalid packet size [102] [ 360.368942][T18515] netlink: NAT attribute has 5 unknown bytes [ 360.713064][T18529] syz_tun: tun_chr_ioctl cmd 1074025681 [ 361.106941][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5958'. [ 361.324542][T18562] zero sized request [ 361.539830][T18574] Unsupported ieee802154 address type: 0 [ 361.710861][T18584] netlink: 206 bytes leftover after parsing attributes in process `syz.3.5972'. [ 361.710957][T18584] Zero length message leads to an empty skb [ 362.025188][T18600] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.779805][T18634] FAULT_INJECTION: forcing a failure. [ 362.779805][T18634] name failslab, interval 1, probability 0, space 0, times 1 [ 362.781102][T18634] CPU: 0 UID: 0 PID: 18634 Comm: syz.4.5991 Tainted: G U L syzkaller #0 PREEMPT(full) [ 362.781129][T18634] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 362.781135][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.781151][T18634] Call Trace: [ 362.781207][T18634] [ 362.781213][T18634] dump_stack_lvl+0x100/0x190 [ 362.781299][T18634] should_fail_ex.cold+0x5/0xa [ 362.781326][T18634] should_failslab+0xc2/0x120 [ 362.781395][T18634] __kmalloc_cache_noprof+0x91/0x6d0 [ 362.781454][T18634] ? assoc_array_insert+0x10b/0x32c0 [ 362.781508][T18634] assoc_array_insert+0x10b/0x32c0 [ 362.781531][T18634] ? __mutex_lock+0x26c/0x1bc0 [ 362.781577][T18634] ? key_link+0x2bb/0x390 [ 362.781661][T18634] ? __pfx___mutex_lock+0x10/0x10 [ 362.781678][T18634] ? __pfx_assoc_array_insert+0x10/0x10 [ 362.781699][T18634] ? __pfx___might_resched+0x10/0x10 [ 362.781731][T18634] ? down_write+0x146/0x1f0 [ 362.781746][T18634] ? __pfx_down_write+0x10/0x10 [ 362.781763][T18634] __key_link_begin+0xf5/0x260 [ 362.781783][T18634] key_link+0x103/0x390 [ 362.781801][T18634] ? __up_read+0x333/0x980 [ 362.781823][T18634] ? __pfx_key_link+0x10/0x10 [ 362.781840][T18634] ? bpf_lsm_key_permission+0x9/0x10 [ 362.781883][T18634] ? key_task_permission+0x2c7/0x3c0 [ 362.781901][T18634] keyctl_get_persistent+0x5e2/0x8b0 [ 362.781922][T18634] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 362.781949][T18634] ? __x64_sys_futex+0x34f/0x4d0 [ 362.781970][T18634] ? __x64_sys_futex+0x358/0x4d0 [ 362.781985][T18634] ? xfd_validate_state+0x129/0x190 [ 362.782015][T18634] __do_sys_keyctl+0x3b2/0x5a0 [ 362.782032][T18634] do_syscall_64+0x121/0x770 [ 362.782073][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.782097][T18634] RIP: 0033:0x7f43da39e0d9 [ 362.782115][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.782129][T18634] RSP: 002b:00007f43db2ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 362.782198][T18634] RAX: ffffffffffffffda RBX: 00007f43da625fa0 RCX: 00007f43da39e0d9 [ 362.782209][T18634] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 362.782218][T18634] RBP: 00007f43da435024 R08: 0000000000001000 R09: 0000000000000000 [ 362.782227][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.782235][T18634] R13: 00007f43da626038 R14: 00007f43da625fa0 R15: 00007ffd2db1f538 [ 362.782255][T18634] [ 364.184139][T18687] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6011'. [ 364.866777][T18723] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.935805][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6042'. [ 366.117255][T18796] binder: 18795:18796 ioctl c0306201 2000000000c0 returned -14 [ 367.824682][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6074'. [ 367.824737][T18869] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 368.124784][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6079'. [ 369.053810][T18915] netlink: 'syz.4.6094': attribute type 2 has an invalid length. [ 369.250279][T18921] netlink: 'syz.4.6096': attribute type 1 has an invalid length. [ 369.406341][T18923] FAULT_INJECTION: forcing a failure. [ 369.406341][T18923] name failslab, interval 1, probability 0, space 0, times 0 [ 369.406381][T18923] CPU: 0 UID: 0 PID: 18923 Comm: syz.1.6097 Tainted: G U L syzkaller #0 PREEMPT(full) [ 369.406404][T18923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 369.406410][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.406420][T18923] Call Trace: [ 369.406425][T18923] [ 369.406431][T18923] dump_stack_lvl+0x100/0x190 [ 369.406455][T18923] should_fail_ex.cold+0x5/0xa [ 369.406474][T18923] should_failslab+0xc2/0x120 [ 369.406491][T18923] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 369.406507][T18923] ? __alloc_skb+0x140/0x710 [ 369.406615][T18923] __alloc_skb+0x140/0x710 [ 369.406635][T18923] ? __alloc_skb+0x5b7/0x710 [ 369.406656][T18923] ? __pfx___alloc_skb+0x10/0x10 [ 369.406683][T18923] inet_netconf_notify_devconf+0x9d/0x170 [ 369.406734][T18923] __devinet_sysctl_register+0x227/0x360 [ 369.406750][T18923] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 369.406791][T18923] ? inetdev_init+0x245/0x570 [ 369.406805][T18923] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 369.406821][T18923] ? copy_net_ns+0x46f/0x7c0 [ 369.406857][T18923] ? create_new_namespaces+0x3ea/0xac0 [ 369.406889][T18923] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 369.406909][T18923] ? ksys_unshare+0x4a2/0xa70 [ 369.406923][T18923] ? __x64_sys_unshare+0x31/0x40 [ 369.406936][T18923] ? do_syscall_64+0x121/0x770 [ 369.406951][T18923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.406968][T18923] devinet_sysctl_register+0x17b/0x210 [ 369.406984][T18923] inetdev_init+0x2b8/0x570 [ 369.406999][T18923] inetdev_event+0x827/0x17f0 [ 369.407014][T18923] ? ib_netdevice_event+0xfc/0x330 [ 369.407073][T18923] ? __pfx_inetdev_event+0x10/0x10 [ 369.407089][T18923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.407112][T18923] notifier_call_chain+0x99/0x3f0 [ 369.407132][T18923] call_netdevice_notifiers_info+0xbe/0x110 [ 369.407172][T18923] register_netdevice+0x1998/0x25a0 [ 369.407213][T18923] ? __pfx_register_netdevice+0x10/0x10 [ 369.407230][T18923] ? alloc_netdev_mqs+0x120a/0x15c0 [ 369.407246][T18923] ? __pfx_loopback_net_init+0x10/0x10 [ 369.407325][T18923] register_netdev+0x34/0x50 [ 369.407340][T18923] loopback_net_init+0x7a/0x170 [ 369.407359][T18923] ? __pfx_loopback_net_init+0x10/0x10 [ 369.407378][T18923] ops_init+0x1e2/0x5f0 [ 369.407394][T18923] setup_net+0x118/0x3a0 [ 369.407409][T18923] ? __pfx_setup_net+0x10/0x10 [ 369.407423][T18923] ? mutex_init_lockdep+0xf1/0x120 [ 369.407446][T18923] copy_net_ns+0x46f/0x7c0 [ 369.407464][T18923] create_new_namespaces+0x3ea/0xac0 [ 369.407488][T18923] unshare_nsproxy_namespaces+0xf2/0x220 [ 369.407510][T18923] ksys_unshare+0x4a2/0xa70 [ 369.407524][T18923] ? __pfx_ksys_unshare+0x10/0x10 [ 369.407544][T18923] __x64_sys_unshare+0x31/0x40 [ 369.407557][T18923] do_syscall_64+0x121/0x770 [ 369.407574][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.407588][T18923] RIP: 0033:0x7fd004f9e0d9 [ 369.407602][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.407615][T18923] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 369.407630][T18923] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 369.407639][T18923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 369.407648][T18923] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 369.407656][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.407665][T18923] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 369.407685][T18923] [ 369.812996][T18928] openvswitch: netlink: Message has 4 unknown bytes. [ 371.554371][T19024] netlink: 'syz.3.6116': attribute type 1 has an invalid length. [ 372.598660][T19067] netlink: 'syz.4.6135': attribute type 1 has an invalid length. [ 374.080452][T19130] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 375.128367][T19190] dump_stack_lvl+0x100/0x190 [ 375.128392][T19190] should_fail_ex.cold+0x5/0xa [ 375.128408][T19190] ? prepare_alloc_pages+0x16d/0x5b0 [ 375.128427][T19190] should_fail_alloc_page+0xeb/0x140 [ 375.128445][T19190] prepare_alloc_pages+0x1f0/0x5b0 [ 375.128465][T19190] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 375.128560][T19190] ? find_held_lock+0x2b/0x80 [ 375.128576][T19190] ? is_bpf_text_address+0x8a/0x1a0 [ 375.128595][T19190] ? is_bpf_text_address+0x8a/0x1a0 [ 375.128613][T19190] ? bpf_ksym_find+0x124/0x1c0 [ 375.128627][T19190] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 375.128647][T19190] ? is_bpf_text_address+0x94/0x1a0 [ 375.128666][T19190] ? kernel_text_address+0x8d/0x100 [ 375.128684][T19190] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 375.128705][T19190] ? arch_stack_walk+0xa6/0xf0 [ 375.128728][T19190] ? stack_trace_save+0x8e/0xc0 [ 375.128743][T19190] ? __pfx_stack_trace_save+0x10/0x10 [ 375.128765][T19190] ? kasan_save_stack+0x3f/0x50 [ 375.128803][T19190] ? kasan_save_stack+0x30/0x50 [ 375.128817][T19190] ? kasan_save_track+0x14/0x30 [ 375.128832][T19190] ? __kasan_slab_alloc+0x89/0x90 [ 375.128847][T19190] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 375.128861][T19190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.128883][T19190] ? policy_nodemask+0xed/0x4f0 [ 375.128924][T19190] alloc_pages_mpol+0x201/0x550 [ 375.128943][T19190] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 375.128967][T19190] alloc_pages_noprof+0x1a/0x160 [ 375.128987][T19190] pte_alloc_one+0x1c/0x3d0 [ 375.129006][T19190] __pte_alloc+0x6d/0x380 [ 375.129041][T19190] ? __pfx___pte_alloc+0x10/0x10 [ 375.129062][T19190] do_anonymous_page+0x1307/0x2050 [ 375.129084][T19190] ? find_held_lock+0x2b/0x80 [ 375.129098][T19190] ? __pmd_alloc+0x3f6/0x950 [ 375.129115][T19190] ? __pmd_alloc+0x3f6/0x950 [ 375.129133][T19190] ? __pfx_do_anonymous_page+0x10/0x10 [ 375.129153][T19190] ? do_raw_spin_unlock+0x145/0x1e0 [ 375.129174][T19190] ? _raw_spin_unlock+0x28/0x50 [ 375.129194][T19190] ? __pmd_alloc+0x3fb/0x950 [ 375.129212][T19190] __handle_mm_fault+0x1ff3/0x2f60 [ 375.129247][T19190] ? __pfx___handle_mm_fault+0x10/0x10 [ 375.129266][T19190] ? __pfx_mt_find+0x10/0x10 [ 375.129312][T19190] ? validate_mm+0x261/0x4e0 [ 375.129348][T19190] handle_mm_fault+0x37b/0xa30 [ 375.129372][T19190] __get_user_pages+0x1169/0x3280 [ 375.129414][T19190] ? __pfx_mt_find+0x10/0x10 [ 375.129431][T19190] ? __pfx___get_user_pages+0x10/0x10 [ 375.129454][T19190] populate_vma_page_range+0x267/0x3f0 [ 375.129473][T19190] ? __pfx_populate_vma_page_range+0x10/0x10 [ 375.129490][T19190] ? __pfx_find_vma_intersection+0x10/0x10 [ 375.129534][T19190] __mm_populate+0x107/0x3a0 [ 375.129553][T19190] ? __pfx___mm_populate+0x10/0x10 [ 375.129572][T19190] ? up_write+0x2dc/0x5b0 [ 375.129596][T19190] vm_mmap_pgoff+0x441/0x470 [ 375.129614][T19190] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 375.129632][T19190] ? __pfx_do_futex+0x10/0x10 [ 375.129649][T19190] ksys_mmap_pgoff+0xe4/0x610 [ 375.129665][T19190] ? __x64_sys_futex+0x358/0x4d0 [ 375.129678][T19190] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 375.129694][T19190] ? xfd_validate_state+0x129/0x190 [ 375.129718][T19190] __x64_sys_mmap+0x125/0x190 [ 375.129733][T19190] do_syscall_64+0x121/0x770 [ 375.129749][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.129764][T19190] RIP: 0033:0x7f16dc99e0d9 [ 375.129778][T19190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.129791][T19190] RSP: 002b:00007f16dd78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 375.129806][T19190] RAX: ffffffffffffffda RBX: 00007f16dcc25fa0 RCX: 00007f16dc99e0d9 [ 375.129816][T19190] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 375.129824][T19190] RBP: 00007f16dca35024 R08: 0000000000000007 R09: 0000000000028000 [ 375.129833][T19190] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 375.129842][T19190] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 375.129862][T19190] [ 376.212228][T19236] FAULT_INJECTION: forcing a failure. [ 376.212228][T19236] name failslab, interval 1, probability 0, space 0, times 0 [ 376.212271][T19236] CPU: 0 UID: 0 PID: 19236 Comm: syz.1.6191 Tainted: G U L syzkaller #0 PREEMPT(full) [ 376.212294][T19236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 376.212300][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.212308][T19236] Call Trace: [ 376.212314][T19236] [ 376.212319][T19236] dump_stack_lvl+0x100/0x190 [ 376.212343][T19236] should_fail_ex.cold+0x5/0xa [ 376.212362][T19236] should_failslab+0xc2/0x120 [ 376.212380][T19236] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 376.212396][T19236] ? __d_alloc+0x35/0xa50 [ 376.212477][T19236] __d_alloc+0x35/0xa50 [ 376.212498][T19236] d_alloc_pseudo+0x1c/0xc0 [ 376.212518][T19236] alloc_file_pseudo+0x118/0x290 [ 376.212560][T19236] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 376.212578][T19236] ? alloc_fd+0x471/0x7a0 [ 376.212624][T19236] sock_alloc_file+0x50/0x210 [ 376.212668][T19236] __sys_socket+0x1c0/0x260 [ 376.212707][T19236] ? __pfx___sys_socket+0x10/0x10 [ 376.212730][T19236] __x64_sys_socket+0x72/0xb0 [ 376.212748][T19236] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.212763][T19236] do_syscall_64+0x121/0x770 [ 376.212787][T19236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.212803][T19236] RIP: 0033:0x7fd004f9e0d9 [ 376.212816][T19236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.212829][T19236] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 376.212843][T19236] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 376.212852][T19236] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 376.212860][T19236] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 376.212868][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.212876][T19236] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 376.212894][T19236] [ 376.868269][T19253] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 377.325345][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.325396][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.563607][T19339] FAULT_INJECTION: forcing a failure. [ 378.563607][T19339] name failslab, interval 1, probability 0, space 0, times 0 [ 378.563648][T19339] CPU: 0 UID: 0 PID: 19339 Comm: syz.2.6219 Tainted: G U L syzkaller #0 PREEMPT(full) [ 378.563672][T19339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 378.563677][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.563686][T19339] Call Trace: [ 378.563692][T19339] [ 378.563698][T19339] dump_stack_lvl+0x100/0x190 [ 378.563721][T19339] should_fail_ex.cold+0x5/0xa [ 378.563741][T19339] should_failslab+0xc2/0x120 [ 378.563759][T19339] __kmalloc_noprof+0xfc/0x840 [ 378.563772][T19339] ? __register_sysctl_table+0xbc8/0x1650 [ 378.563872][T19339] ? __register_sysctl_table+0xbe4/0x1650 [ 378.563894][T19339] __register_sysctl_table+0xbe4/0x1650 [ 378.563917][T19339] ? __pfx___register_sysctl_table+0x10/0x10 [ 378.563934][T19339] ? is_module_address+0x5f/0xf0 [ 378.563954][T19339] ? is_module_address+0x5f/0xf0 [ 378.563979][T19339] register_net_sysctl_sz+0x325/0x420 [ 378.564042][T19339] neigh_sysctl_register+0x326/0x660 [ 378.564057][T19339] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 378.564078][T19339] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 378.564091][T19339] ? inetdev_init+0x245/0x570 [ 378.564104][T19339] ? inetdev_event+0x827/0x17f0 [ 378.564117][T19339] ? notifier_call_chain+0x99/0x3f0 [ 378.564134][T19339] ? copy_net_ns+0x46f/0x7c0 [ 378.564148][T19339] ? create_new_namespaces+0x3ea/0xac0 [ 378.564167][T19339] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 378.564185][T19339] ? ksys_unshare+0x4a2/0xa70 [ 378.564198][T19339] ? __x64_sys_unshare+0x31/0x40 [ 378.564211][T19339] ? do_syscall_64+0x121/0x770 [ 378.564224][T19339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.564241][T19339] devinet_sysctl_register+0xb6/0x210 [ 378.564256][T19339] inetdev_init+0x2b8/0x570 [ 378.564271][T19339] inetdev_event+0x827/0x17f0 [ 378.564286][T19339] ? ib_netdevice_event+0xfc/0x330 [ 378.564301][T19339] ? __pfx_inetdev_event+0x10/0x10 [ 378.564316][T19339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.564337][T19339] notifier_call_chain+0x99/0x3f0 [ 378.564355][T19339] call_netdevice_notifiers_info+0xbe/0x110 [ 378.564374][T19339] register_netdevice+0x1998/0x25a0 [ 378.564393][T19339] ? __pfx_register_netdevice+0x10/0x10 [ 378.564412][T19339] ? alloc_netdev_mqs+0x120a/0x15c0 [ 378.564427][T19339] ? __pfx_loopback_net_init+0x10/0x10 [ 378.564447][T19339] register_netdev+0x34/0x50 [ 378.564461][T19339] loopback_net_init+0x7a/0x170 [ 378.564480][T19339] ? __pfx_loopback_net_init+0x10/0x10 [ 378.564497][T19339] ops_init+0x1e2/0x5f0 [ 378.564514][T19339] setup_net+0x118/0x3a0 [ 378.564528][T19339] ? __pfx_setup_net+0x10/0x10 [ 378.564543][T19339] ? mutex_init_lockdep+0xf1/0x120 [ 378.564566][T19339] copy_net_ns+0x46f/0x7c0 [ 378.564583][T19339] create_new_namespaces+0x3ea/0xac0 [ 378.564607][T19339] unshare_nsproxy_namespaces+0xf2/0x220 [ 378.564628][T19339] ksys_unshare+0x4a2/0xa70 [ 378.564642][T19339] ? __pfx_ksys_unshare+0x10/0x10 [ 378.564663][T19339] __x64_sys_unshare+0x31/0x40 [ 378.564676][T19339] do_syscall_64+0x121/0x770 [ 378.564692][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.564707][T19339] RIP: 0033:0x7f16dc99e0d9 [ 378.564720][T19339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.564734][T19339] RSP: 002b:00007f16dd78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 378.564749][T19339] RAX: ffffffffffffffda RBX: 00007f16dcc25fa0 RCX: 00007f16dc99e0d9 [ 378.564759][T19339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 378.564767][T19339] RBP: 00007f16dca35024 R08: 0000000000000000 R09: 0000000000000000 [ 378.564776][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.564785][T19339] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 378.564805][T19339] [ 378.564938][T19339] sysctl could not get directory: /net/ipv4/neigh/lo -12 [ 379.248323][T19356] syz.3.6224 uses obsolete (PF_INET,SOCK_PACKET) [ 380.082946][T19391] netlink: 'syz.4.6238': attribute type 1 has an invalid length. [ 380.123925][T19381] syz_tun: tun_chr_ioctl cmd 1074812117 [ 380.438007][T19409] dyndbg: bad flag-op , at start of [ 380.457530][T19409] dyndbg: flags parse failed [ 381.019785][T19435] syz_tun: tun_chr_ioctl cmd 1074025684 [ 382.157078][T19491] netlink: 'syz.3.6274': attribute type 1 has an invalid length. [ 382.690160][T19526] Unsupported ieee802154 address type: 0 [ 383.150119][T19555] netlink: 'syz.4.6289': attribute type 2 has an invalid length. [ 383.286628][T19560] FAULT_INJECTION: forcing a failure. [ 383.286628][T19560] name failslab, interval 1, probability 0, space 0, times 0 [ 383.286670][T19560] CPU: 0 UID: 0 PID: 19560 Comm: syz.3.6290 Tainted: G U L syzkaller #0 PREEMPT(full) [ 383.286694][T19560] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 383.286699][T19560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.286708][T19560] Call Trace: [ 383.286713][T19560] [ 383.286719][T19560] dump_stack_lvl+0x100/0x190 [ 383.286742][T19560] should_fail_ex.cold+0x5/0xa [ 383.286762][T19560] should_failslab+0xc2/0x120 [ 383.286780][T19560] kmem_cache_alloc_noprof+0x92/0x6a0 [ 383.286803][T19560] ? __kernfs_new_node+0xd2/0xa10 [ 383.286888][T19560] __kernfs_new_node+0xd2/0xa10 [ 383.286908][T19560] ? __pfx___kernfs_new_node+0x10/0x10 [ 383.286930][T19560] ? find_held_lock+0x2b/0x80 [ 383.286946][T19560] ? kernfs_root+0xee/0x2a0 [ 383.286962][T19560] ? kernfs_root+0xee/0x2a0 [ 383.286980][T19560] kernfs_new_node+0x117/0x150 [ 383.286999][T19560] __kernfs_create_file+0x53/0x350 [ 383.287021][T19560] sysfs_add_file_mode_ns+0x207/0x3c0 [ 383.287071][T19560] internal_create_group+0x593/0xfb0 [ 383.287092][T19560] ? __pfx_internal_create_group+0x10/0x10 [ 383.287111][T19560] ? kernfs_create_link+0x1bd/0x240 [ 383.287135][T19560] internal_create_groups+0x9d/0x150 [ 383.287153][T19560] device_add+0x71a/0x1970 [ 383.287215][T19560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 383.287235][T19560] ? __pfx_device_add+0x10/0x10 [ 383.287251][T19560] ? lockdep_init_map_type+0x5c/0x250 [ 383.287272][T19560] ? __init_waitqueue_head+0xca/0x150 [ 383.287297][T19560] netdev_register_kobject+0x1df/0x410 [ 383.287346][T19560] register_netdevice+0x15b6/0x25a0 [ 383.287367][T19560] ? __pfx_register_netdevice+0x10/0x10 [ 383.287384][T19560] ? alloc_netdev_mqs+0x120a/0x15c0 [ 383.287401][T19560] ? __pfx_loopback_net_init+0x10/0x10 [ 383.287421][T19560] register_netdev+0x34/0x50 [ 383.287435][T19560] loopback_net_init+0x7a/0x170 [ 383.287454][T19560] ? __pfx_loopback_net_init+0x10/0x10 [ 383.287472][T19560] ops_init+0x1e2/0x5f0 [ 383.287547][T19560] setup_net+0x118/0x3a0 [ 383.287562][T19560] ? __pfx_setup_net+0x10/0x10 [ 383.287577][T19560] ? mutex_init_lockdep+0xf1/0x120 [ 383.287601][T19560] copy_net_ns+0x46f/0x7c0 [ 383.287619][T19560] create_new_namespaces+0x3ea/0xac0 [ 383.287644][T19560] unshare_nsproxy_namespaces+0xf2/0x220 [ 383.287665][T19560] ksys_unshare+0x4a2/0xa70 [ 383.287679][T19560] ? __pfx_ksys_unshare+0x10/0x10 [ 383.287700][T19560] __x64_sys_unshare+0x31/0x40 [ 383.287714][T19560] do_syscall_64+0x121/0x770 [ 383.287730][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.287745][T19560] RIP: 0033:0x7f650a19e0d9 [ 383.287759][T19560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.287772][T19560] RSP: 002b:00007f650b037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 383.287788][T19560] RAX: ffffffffffffffda RBX: 00007f650a425fa0 RCX: 00007f650a19e0d9 [ 383.287797][T19560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 383.287806][T19560] RBP: 00007f650a235024 R08: 0000000000000000 R09: 0000000000000000 [ 383.287815][T19560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.287823][T19560] R13: 00007f650a426038 R14: 00007f650a425fa0 R15: 00007ffd9066a068 [ 383.287843][T19560] [ 383.480680][T19549] Process accounting paused [ 383.950218][T19574] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.716319][T19701] ucma_write: process 3280 (syz.1.6336) changed security contexts after opening file descriptor, this is not allowed. [ 387.090322][T19712] nbd: illegal input index -1024 [ 387.461981][T19734] openvswitch: netlink: Missing valid actions attribute. [ 387.896228][T19739] .^: entered promiscuous mode [ 388.339358][T19771] capability: warning: `syz.3.6360' uses 32-bit capabilities (legacy support in use) [ 388.726924][T19789] usb usb15: usbfs: process 19789 (syz.3.6367) did not claim interface 0 before use [ 389.503614][T19830] netlink: Setting conntrack mark requires 'commit' flag. [ 390.101096][T19859] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 390.101210][T19859] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 394.229923][T20067] nfsd: Unknown parameter 'batadv' [ 395.557390][T20125] netlink: Failed to add  helper -22 [ 395.918930][T20140] aoe: copy from user failed [ 395.918982][T20140] aoe: could not set interface list: too many interfaces [ 396.973504][T20179] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 397.150670][T20191] FAULT_INJECTION: forcing a failure. [ 397.150670][T20191] name failslab, interval 1, probability 0, space 0, times 0 [ 397.150712][T20191] CPU: 0 UID: 0 PID: 20191 Comm: syz.3.6495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 397.150735][T20191] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 397.150741][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.150749][T20191] Call Trace: [ 397.150755][T20191] [ 397.150761][T20191] dump_stack_lvl+0x100/0x190 [ 397.150785][T20191] should_fail_ex.cold+0x5/0xa [ 397.150804][T20191] should_failslab+0xc2/0x120 [ 397.150822][T20191] __kmalloc_noprof+0xfc/0x840 [ 397.150836][T20191] ? udp_init_sock+0x24e/0x450 [ 397.150950][T20191] udp_init_sock+0x24e/0x450 [ 397.150968][T20191] ? __pfx_udp_init_sock+0x10/0x10 [ 397.151030][T20191] inet_create+0x94c/0x1060 [ 397.151049][T20191] ? inet_create+0x94/0x1060 [ 397.151068][T20191] __sock_create+0x339/0x860 [ 397.151091][T20191] __sys_socket+0x14d/0x260 [ 397.151110][T20191] ? __pfx___sys_socket+0x10/0x10 [ 397.151133][T20191] __x64_sys_socket+0x72/0xb0 [ 397.151150][T20191] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.151165][T20191] do_syscall_64+0x121/0x770 [ 397.151181][T20191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.151196][T20191] RIP: 0033:0x7f650a19e0d9 [ 397.151208][T20191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.151222][T20191] RSP: 002b:00007f650b037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 397.151237][T20191] RAX: ffffffffffffffda RBX: 00007f650a425fa0 RCX: 00007f650a19e0d9 [ 397.151246][T20191] RDX: 0000000000000000 RSI: 0000000000080802 RDI: 0000000000000002 [ 397.151255][T20191] RBP: 00007f650a235024 R08: 0000000000000000 R09: 0000000000000000 [ 397.151263][T20191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.151271][T20191] R13: 00007f650a426038 R14: 00007f650a425fa0 R15: 00007ffd9066a068 [ 397.151290][T20191] [ 397.553186][T20200] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 399.187199][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6531'. [ 399.708871][T20308] HfR: entered promiscuous mode [ 399.979363][T20326] sd 0:0:1:0: PR command failed: 1026 [ 399.979410][T20326] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 399.979450][T20326] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 401.961530][T20415] netlink: 'syz.2.6578': attribute type 1 has an invalid length. [ 403.057336][T20467] openvswitch: netlink: Flow key attr not present in new flow. [ 404.495132][T20530] FAULT_INJECTION: forcing a failure. [ 404.495132][T20530] name failslab, interval 1, probability 0, space 0, times 0 [ 404.495176][T20530] CPU: 0 UID: 0 PID: 20530 Comm: syz.4.6619 Tainted: G U L syzkaller #0 PREEMPT(full) [ 404.495211][T20530] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 404.495217][T20530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.495229][T20530] Call Trace: [ 404.495234][T20530] [ 404.495240][T20530] dump_stack_lvl+0x100/0x190 [ 404.495272][T20530] should_fail_ex.cold+0x5/0xa [ 404.495292][T20530] should_failslab+0xc2/0x120 [ 404.495311][T20530] __kmalloc_cache_noprof+0x91/0x6d0 [ 404.495337][T20530] ? sctp_endpoint_new+0xfc/0xb20 [ 404.495467][T20530] sctp_endpoint_new+0xfc/0xb20 [ 404.495487][T20530] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 404.495505][T20530] ? lockdep_init_map_type+0x5c/0x250 [ 404.495527][T20530] ? lockdep_init_map_type+0x5c/0x250 [ 404.495545][T20530] ? lockdep_init_map_type+0x5c/0x250 [ 404.495566][T20530] sctp_init_sock+0xe2b/0x1300 [ 404.495626][T20530] ? __pfx_sctp_init_sock+0x10/0x10 [ 404.495644][T20530] inet_create+0x94c/0x1060 [ 404.495663][T20530] ? inet_create+0x94/0x1060 [ 404.495681][T20530] __sock_create+0x339/0x860 [ 404.495703][T20530] __sys_socket+0x14d/0x260 [ 404.495721][T20530] ? __pfx___sys_socket+0x10/0x10 [ 404.495744][T20530] __x64_sys_socket+0x72/0xb0 [ 404.495761][T20530] ? lockdep_hardirqs_on+0x7d/0x110 [ 404.495777][T20530] do_syscall_64+0x121/0x770 [ 404.495793][T20530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.495808][T20530] RIP: 0033:0x7f43da39e0d9 [ 404.495821][T20530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.495834][T20530] RSP: 002b:00007f43db2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 404.495848][T20530] RAX: ffffffffffffffda RBX: 00007f43da625fa0 RCX: 00007f43da39e0d9 [ 404.495857][T20530] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 404.495866][T20530] RBP: 00007f43da435024 R08: 0000000000000000 R09: 0000000000000000 [ 404.495874][T20530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.495883][T20530] R13: 00007f43da626038 R14: 00007f43da625fa0 R15: 00007ffd2db1f538 [ 404.495901][T20530] [ 405.664884][T20571] openvswitch: netlink: Tunnel attr 138 out of range max 16 [ 405.932336][T20577] openvswitch: netlink: IP tunnel dst address not specified [ 407.793212][T20659] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 408.099813][T20674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.390593][T20690] netlink: 'syz.1.6681': attribute type 3 has an invalid length. [ 409.047748][T20729] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 409.594598][T20756] IPVS: length: 131 != 8 [ 409.675561][T20759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.400380][T20773] could not allocate digest TFM handle [ 410.471473][T20788] openvswitch: netlink: IP tunnel dst address not specified [ 410.597763][T20793] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 411.077843][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6734'. [ 412.554885][T20860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6743'. [ 412.741765][T20865] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.383078][T20852] Process accounting resumed [ 414.475047][T20934] sctp: [Deprecated]: syz.1.6774 (pid 20934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.475047][T20934] Use struct sctp_sack_info instead [ 415.329180][T20972] netlink: Unknown NAT attribute (type=262, max=9) [ 416.434732][T21014] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 417.197792][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6814'. [ 418.102222][T21059] netlink: Conntrack attr has 5 unknown bytes [ 418.580218][T21081] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 419.419297][T21113] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 420.288769][T21149] openvswitch: netlink: Key type 261 is out of range max 32 [ 420.923930][T21173] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 421.606648][T21203] syz.2.6877 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 424.400863][T21305] ======================================================= [ 424.400863][T21305] WARNING: The mand mount option has been deprecated and [ 424.400863][T21305] and is ignored by this kernel. Remove the mand [ 424.400863][T21305] option from the mount to silence this warning. [ 424.400863][T21305] ======================================================= [ 424.635205][T21310] MTRR 1 not used [ 425.076524][T21327] openvswitch: netlink: IP tunnel dst address not specified [ 428.088723][T21465] FAULT_INJECTION: forcing a failure. [ 428.088723][T21465] name failslab, interval 1, probability 0, space 0, times 0 [ 428.088765][T21465] CPU: 0 UID: 0 PID: 21465 Comm: syz.4.6974 Tainted: G U L syzkaller #0 PREEMPT(full) [ 428.088788][T21465] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 428.088794][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.088802][T21465] Call Trace: [ 428.088808][T21465] [ 428.088814][T21465] dump_stack_lvl+0x100/0x190 [ 428.088845][T21465] should_fail_ex.cold+0x5/0xa [ 428.088865][T21465] should_failslab+0xc2/0x120 [ 428.088883][T21465] __kmalloc_cache_noprof+0x91/0x6d0 [ 428.088904][T21465] ? proc_self_get_link+0x189/0x1f0 [ 428.088924][T21465] proc_self_get_link+0x189/0x1f0 [ 428.088940][T21465] pick_link+0xac2/0x13c0 [ 428.089045][T21465] ? __pfx_proc_self_get_link+0x10/0x10 [ 428.089063][T21465] step_into_slowpath+0x9ba/0xf90 [ 428.089088][T21465] ? __pfx_step_into_slowpath+0x10/0x10 [ 428.089112][T21465] ? lookup_fast+0x2da/0x600 [ 428.089130][T21465] ? inode_permission+0x374/0x620 [ 428.089152][T21465] link_path_walk+0xf28/0x1cc0 [ 428.089179][T21465] path_openat+0x1ac/0x2440 [ 428.089196][T21465] ? __pfx_path_openat+0x10/0x10 [ 428.089216][T21465] do_file_open+0x20e/0x430 [ 428.089231][T21465] ? __pfx_do_file_open+0x10/0x10 [ 428.089258][T21465] ? _raw_spin_unlock+0x28/0x50 [ 428.089279][T21465] ? alloc_fd+0x471/0x7a0 [ 428.089298][T21465] do_sys_openat2+0x10f/0x1e0 [ 428.089317][T21465] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.089335][T21465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.089356][T21465] __x64_sys_openat+0x12d/0x210 [ 428.089373][T21465] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.089398][T21465] do_syscall_64+0x121/0x770 [ 428.089414][T21465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.089428][T21465] RIP: 0033:0x7f43da39e0d9 [ 428.089441][T21465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.089455][T21465] RSP: 002b:00007f43db2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.089469][T21465] RAX: ffffffffffffffda RBX: 00007f43da625fa0 RCX: 00007f43da39e0d9 [ 428.089478][T21465] RDX: 8f3b7a51b80ebd01 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 428.089488][T21465] RBP: 00007f43da435024 R08: 0000000000000000 R09: 0000000000000000 [ 428.089496][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.089504][T21465] R13: 00007f43da626038 R14: 00007f43da625fa0 R15: 00007ffd2db1f538 [ 428.089524][T21465] [ 428.765104][T21478] netlink: 'syz.4.6979': attribute type 1 has an invalid length. [ 431.103987][T21590] ksmbd: Unknown IPC event: 14, ignore. [ 431.197753][T21592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 431.752855][T21622] FAULT_INJECTION: forcing a failure. [ 431.752855][T21622] name failslab, interval 1, probability 0, space 0, times 0 [ 431.752897][T21622] CPU: 0 UID: 0 PID: 21622 Comm: syz.1.7029 Tainted: G U L syzkaller #0 PREEMPT(full) [ 431.752920][T21622] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 431.752926][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.752935][T21622] Call Trace: [ 431.752940][T21622] [ 431.752947][T21622] dump_stack_lvl+0x100/0x190 [ 431.752973][T21622] should_fail_ex.cold+0x5/0xa [ 431.752992][T21622] should_failslab+0xc2/0x120 [ 431.753011][T21622] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 431.753028][T21622] ? __d_alloc+0x35/0xa50 [ 431.753047][T21622] __d_alloc+0x35/0xa50 [ 431.753064][T21622] d_alloc_pseudo+0x1c/0xc0 [ 431.753083][T21622] alloc_file_pseudo+0x118/0x290 [ 431.753101][T21622] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 431.753118][T21622] ? hugetlbfs_get_inode+0x3f5/0x700 [ 431.753210][T21622] hugetlb_file_setup+0x2a8/0x5b0 [ 431.753234][T21622] ksys_mmap_pgoff+0x242/0x610 [ 431.753253][T21622] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 431.753269][T21622] ? xfd_validate_state+0x129/0x190 [ 431.753294][T21622] __x64_sys_mmap+0x125/0x190 [ 431.753309][T21622] do_syscall_64+0x121/0x770 [ 431.753326][T21622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.753340][T21622] RIP: 0033:0x7fd004f9e0d9 [ 431.753361][T21622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.753375][T21622] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 431.753390][T21622] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 431.753399][T21622] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 431.753408][T21622] RBP: 00007fd005035024 R08: 000000000000000d R09: 0000300000000000 [ 431.753417][T21622] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 431.753426][T21622] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 431.753445][T21622] [ 434.334611][T21735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 434.524833][T21743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7071'. [ 435.443436][T21783] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 435.443465][T21783] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 436.064874][T21815] netlink: 'syz.4.7098': attribute type 1 has an invalid length. [ 436.360758][T21830] netlink: 'syz.2.7103': attribute type 12 has an invalid length. [ 436.689026][T21846] netlink: 'syz.3.7109': attribute type 1 has an invalid length. [ 437.413723][T21873] netlink: 'syz.2.7119': attribute type 2 has an invalid length. [ 437.974790][T21895] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.445048][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.451378][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.533584][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7153'. [ 439.780933][T21981] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 440.961778][T22023] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 441.904760][T16381] Bluetooth: hci3: unexpected event 0x3e length: 508 > 255 [ 441.904789][T16381] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 441.904837][T16381] Bluetooth: hci3: Dropping invalid advertising data [ 441.905056][T16381] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 441.905078][T16381] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 441.905090][T16381] Bluetooth: hci3: unknown advertising packet type: 0xee [ 441.980850][T22077] nbd: couldn't find a device at index 4096 [ 443.334618][T22136] Process accounting paused [ 443.741652][T22158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7226'. [ 444.259076][T22179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7234'. [ 445.441920][ T31] audit: type=1800 audit(4294967296.045:30): pid=22229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7242" name="lu_gp_id" dev="configfs" ino=59615 res=0 errno=0 [ 446.067147][T16381] Bluetooth: hci3: unexpected event 0x3e length: 508 > 255 [ 446.067179][T16381] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 446.067206][T16381] Bluetooth: hci3: Dropping invalid advertising data [ 446.067217][T16381] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 446.067228][T16381] Bluetooth: hci3: Dropping invalid advertising data [ 446.067238][T16381] Bluetooth: hci3: unknown advertising packet type: 0x79 [ 446.067259][T16381] Bluetooth: hci3: Malformed LE Event: 0x02 [ 447.258671][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7270'. [ 447.346692][T22302] unsupported nla_type 113 [ 448.256465][T22348] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 448.560575][T22360] syz_tun: tun_chr_ioctl cmd 1074025681 [ 448.820271][T22376] No such timeout policy "" [ 448.820303][T22376] netlink: Failed to associated timeout policy '' [ 451.040767][T22491] netlink: ct_mark mask cannot be 0 [ 451.752912][T22523] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 452.053452][T22531] openvswitch: netlink: IP tunnel TTL not specified. [ 452.103869][T22534] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.668197][T22588] netlink: 'syz.2.7380': attribute type 2 has an invalid length. [ 453.677339][T22589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.576412][T22626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.887639][T22643] netlink: 'syz.4.7393': attribute type 1 has an invalid length. [ 455.153311][T22657] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 455.531276][T22677] syz.1.7406(22677): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 455.877952][T22704] openvswitch: netlink: Multiple metadata blocks provided [ 458.262388][T22814] netlink: 'syz.1.7446': attribute type 2 has an invalid length. [ 459.270749][T22860] nbd: must specify a size in bytes for the device [ 460.985822][T22948] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 463.205921][T23046] netlink: 'syz.1.7520': attribute type 1 has an invalid length. [ 464.485122][T23117] : entered promiscuous mode [ 466.135948][T23202] netlink: 'syz.3.7568': attribute type 1 has an invalid length. [ 467.597167][T23280] netlink: set zone limit has 4 unknown bytes [ 467.609010][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7597'. [ 467.609039][T23287] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 470.980496][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7658'. [ 471.024870][T23488] $!NW: entered promiscuous mode [ 471.760981][T23533] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 471.936171][T23540] openvswitch: netlink: Multiple metadata blocks provided [ 473.188083][T23607] Process accounting resumed [ 473.671080][T23638] netlink: 'syz.4.7713': attribute type 11 has an invalid length. [ 473.686725][T23638] netlink: 'syz.4.7713': attribute type 11 has an invalid length. [ 473.686759][T23638] netlink: 'syz.4.7713': attribute type 11 has an invalid length. [ 475.656765][T23737] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 476.131960][T23721] syz.4.7745 (23721) used greatest stack depth: 19912 bytes left [ 477.000489][T16381] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 477.063726][T16381] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 477.071567][T16381] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 477.071588][T16381] CPU: 0 UID: 0 PID: 16381 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 477.071612][T16381] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 477.071617][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.071636][T16381] Workqueue: hci0 hci_rx_work [ 477.071727][T16381] Call Trace: [ 477.071733][T16381] [ 477.071739][T16381] dump_stack_lvl+0x100/0x190 [ 477.071762][T16381] sysfs_warn_dup.cold+0x1c/0x28 [ 477.071784][T16381] sysfs_create_dir_ns+0x24b/0x2b0 [ 477.071800][T16381] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.071813][T16381] ? find_held_lock+0x2b/0x80 [ 477.071827][T16381] ? kobject_add_internal+0x25f/0x930 [ 477.071923][T16381] ? kobject_add_internal+0x25f/0x930 [ 477.071947][T16381] ? do_raw_spin_unlock+0x145/0x1e0 [ 477.072003][T16381] kobject_add_internal+0x2c8/0x930 [ 477.072026][T16381] kobject_add+0x16a/0x1e0 [ 477.072044][T16381] ? __pfx_kobject_add+0x10/0x10 [ 477.072062][T16381] ? class_to_subsys+0x10f/0x150 [ 477.072107][T16381] ? kobject_put+0xb9/0x640 [ 477.072123][T16381] ? _raw_spin_unlock+0x28/0x50 [ 477.072149][T16381] device_add+0x294/0x1970 [ 477.072166][T16381] ? __pfx_dev_set_name+0x10/0x10 [ 477.072210][T16381] ? __pfx_device_add+0x10/0x10 [ 477.072227][T16381] ? mgmt_send_event_skb+0x2fb/0x460 [ 477.072280][T16381] hci_conn_add_sysfs+0x1a3/0x260 [ 477.072316][T16381] le_conn_complete_evt+0x121b/0x2120 [ 477.072381][T16381] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.072400][T16381] ? __pfx_bt_warn+0x10/0x10 [ 477.072424][T16381] ? hci_event_packet+0x186/0xcd0 [ 477.072450][T16381] hci_le_conn_complete_evt+0x23c/0x3a0 [ 477.072472][T16381] ? skb_pull_data+0x15f/0x1e0 [ 477.072492][T16381] hci_le_meta_evt+0x34a/0x5f0 [ 477.072506][T16381] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 477.072529][T16381] hci_event_packet+0x51c/0xcd0 [ 477.072550][T16381] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.072564][T16381] ? __pfx_hci_event_packet+0x10/0x10 [ 477.072588][T16381] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.072606][T16381] hci_rx_work+0x451/0xfc0 [ 477.072629][T16381] process_one_work+0xac7/0x1b10 [ 477.072655][T16381] ? __pfx_process_one_work+0x10/0x10 [ 477.072689][T16381] ? __pfx_hci_rx_work+0x10/0x10 [ 477.072713][T16381] worker_thread+0x5ef/0xe50 [ 477.072735][T16381] ? __pfx_worker_thread+0x10/0x10 [ 477.072753][T16381] ? kthread+0x13a/0x450 [ 477.072768][T16381] ? __pfx_worker_thread+0x10/0x10 [ 477.072784][T16381] kthread+0x373/0x450 [ 477.072799][T16381] ? __pfx_kthread+0x10/0x10 [ 477.072814][T16381] ret_from_fork+0x730/0xd60 [ 477.072837][T16381] ? __pfx_ret_from_fork+0x10/0x10 [ 477.072858][T16381] ? __switch_to+0x800/0x10f0 [ 477.072875][T16381] ? __switch_to_asm+0x39/0x70 [ 477.072887][T16381] ? __pfx_kthread+0x10/0x10 [ 477.072903][T16381] ret_from_fork_asm+0x1a/0x30 [ 477.072926][T16381] [ 477.072972][T16381] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.072997][T16381] Bluetooth: hci0: failed to register connection device [ 478.111219][T23853] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 479.035651][T16381] Bluetooth: hci0: command 0x0406 tx timeout [ 479.162270][T23898] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 480.403649][T23954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7825'. [ 480.432352][T23954] netlink: 29 bytes leftover after parsing attributes in process `syz.2.7825'. [ 480.788845][T23971] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 480.975396][T23980] netlink: Unknown conntrack attr (type=332, max=9) [ 481.100209][T16381] Bluetooth: hci0: command 0x0406 tx timeout [ 481.607789][T24002] openvswitch: netlink: Flow key attribute not present in set flow. [ 482.802557][T24045] FAULT_INJECTION: forcing a failure. [ 482.802557][T24045] name failslab, interval 1, probability 0, space 0, times 0 [ 482.802610][T24045] CPU: 0 UID: 0 PID: 24045 Comm: syz.4.7855 Tainted: G U L syzkaller #0 PREEMPT(full) [ 482.802633][T24045] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 482.802639][T24045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.802648][T24045] Call Trace: [ 482.802654][T24045] [ 482.802660][T24045] dump_stack_lvl+0x100/0x190 [ 482.802684][T24045] should_fail_ex.cold+0x5/0xa [ 482.802703][T24045] should_failslab+0xc2/0x120 [ 482.802727][T24045] kmem_cache_alloc_noprof+0x92/0x6a0 [ 482.802745][T24045] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 482.802772][T24045] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 482.802797][T24045] idr_get_free+0x52e/0xa00 [ 482.802884][T24045] idr_alloc_u32+0x1ac/0x320 [ 482.802901][T24045] ? __pfx_idr_alloc_u32+0x10/0x10 [ 482.802918][T24045] ? lock_acquire+0x1b9/0x370 [ 482.802940][T24045] idr_alloc_cyclic+0x10b/0x230 [ 482.802956][T24045] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 482.802970][T24045] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 482.802991][T24045] ? kfree+0x1e5/0x6d0 [ 482.803012][T24045] map_create+0x1698/0x30d0 [ 482.803067][T24045] ? __lock_acquire+0x4c5/0x1ec0 [ 482.803094][T24045] ? __pfx_map_create+0x10/0x10 [ 482.803122][T24045] ? __might_fault+0xc5/0x140 [ 482.803151][T24045] __sys_bpf+0x12a0/0x4a30 [ 482.803192][T24045] ? __pfx___sys_bpf+0x10/0x10 [ 482.803205][T24045] ? find_held_lock+0x2b/0x80 [ 482.803219][T24045] ? futex_wake+0x4ea/0x5e0 [ 482.803249][T24045] ? rcu_read_lock_any_held+0x6a/0x90 [ 482.803270][T24045] ? find_held_lock+0x2b/0x80 [ 482.803284][T24045] ? ksys_write+0x190/0x250 [ 482.803305][T24045] ? ksys_write+0x190/0x250 [ 482.803337][T24045] ? __x64_sys_futex+0x34f/0x4d0 [ 482.803350][T24045] ? __x64_sys_futex+0x358/0x4d0 [ 482.803366][T24045] ? xfd_validate_state+0x129/0x190 [ 482.803389][T24045] ? __x64_sys_bpf+0xce/0x140 [ 482.803402][T24045] __x64_sys_bpf+0xce/0x140 [ 482.803417][T24045] ? do_syscall_64+0xae/0x770 [ 482.803432][T24045] do_syscall_64+0x121/0x770 [ 482.803448][T24045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.803463][T24045] RIP: 0033:0x7f43da39e0d9 [ 482.803476][T24045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.803490][T24045] RSP: 002b:00007f43db2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.803504][T24045] RAX: ffffffffffffffda RBX: 00007f43da625fa0 RCX: 00007f43da39e0d9 [ 482.803513][T24045] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 482.803522][T24045] RBP: 00007f43da435024 R08: 0000000000000000 R09: 0000000000000000 [ 482.803530][T24045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.803538][T24045] R13: 00007f43da626038 R14: 00007f43da625fa0 R15: 00007ffd2db1f538 [ 482.803557][T24045] [ 483.169136][T16381] Bluetooth: hci0: command 0x0406 tx timeout [ 485.238260][T14855] Bluetooth: hci0: command 0x0406 tx timeout [ 485.403508][T24109] FAULT_INJECTION: forcing a failure. [ 485.403508][T24109] name failslab, interval 1, probability 0, space 0, times 0 [ 485.403550][T24109] CPU: 0 UID: 0 PID: 24109 Comm: syz.1.7878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 485.403574][T24109] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 485.403580][T24109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.403589][T24109] Call Trace: [ 485.403594][T24109] [ 485.403600][T24109] dump_stack_lvl+0x100/0x190 [ 485.403624][T24109] should_fail_ex.cold+0x5/0xa [ 485.403649][T24109] should_failslab+0xc2/0x120 [ 485.403668][T24109] __kmalloc_cache_noprof+0x91/0x6d0 [ 485.403691][T24109] ? call_usermodehelper_setup+0xaf/0x360 [ 485.403713][T24109] ? __pfx_free_modprobe_argv+0x10/0x10 [ 485.403734][T24109] call_usermodehelper_setup+0xaf/0x360 [ 485.403755][T24109] __request_module+0x3c7/0x6a0 [ 485.403777][T24109] ? __pfx___request_module+0x10/0x10 [ 485.403798][T24109] ? rcu_is_watching+0x13/0xc0 [ 485.403818][T24109] ? find_held_lock+0x2b/0x80 [ 485.403841][T24109] ? inet6_create+0xb9f/0x12b0 [ 485.403944][T24109] inet6_create+0xd65/0x12b0 [ 485.403963][T24109] ? inet6_create+0x7f/0x12b0 [ 485.403983][T24109] __sock_create+0x339/0x860 [ 485.404008][T24109] __sys_socket+0x14d/0x260 [ 485.404026][T24109] ? __pfx___sys_socket+0x10/0x10 [ 485.404049][T24109] __x64_sys_socket+0x72/0xb0 [ 485.404066][T24109] ? lockdep_hardirqs_on+0x7d/0x110 [ 485.404081][T24109] do_syscall_64+0x121/0x770 [ 485.404097][T24109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.404113][T24109] RIP: 0033:0x7fd004f9e0d9 [ 485.404125][T24109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.404138][T24109] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 485.404153][T24109] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 485.404162][T24109] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 485.404170][T24109] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 485.404178][T24109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.404186][T24109] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 485.404207][T24109] [ 486.369408][T24128] netlink: 'syz.3.7886': attribute type 1 has an invalid length. [ 486.885254][T24147] openvswitch: netlink: IPv4 tunnel dst address is zero [ 487.699579][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7902'. [ 488.762194][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7919'. [ 489.186862][T24239] openvswitch: netlink: Key type 29 is not supported [ 489.195127][T24238] nbd: must specify an index to disconnect [ 489.385193][T24246] netlink: 'syz.3.7933': attribute type 1 has an invalid length. [ 491.136844][ T31] audit: type=1326 audit(4294967341.973:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24322 comm="syz.1.7962" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd004f9e0d9 code=0x0 [ 492.080482][T14855] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 492.080509][T14855] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 492.509301][T24387] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 492.970921][T24413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.526904][T14855] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 493.658594][T14855] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 495.269823][T24533] netlink: 'syz.2.8037': attribute type 11 has an invalid length. [ 495.269865][T24533] netlink: 'syz.2.8037': attribute type 11 has an invalid length. [ 495.269883][T24533] netlink: 'syz.2.8037': attribute type 11 has an invalid length. [ 495.269894][T24533] netlink: 'syz.2.8037': attribute type 11 has an invalid length. [ 496.225503][T24583] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 496.416671][T24580] mac80211.ieee80211_default_rc_algo: string parameter too long [ 497.012347][T24623] netlink: 'syz.3.8071': attribute type 1 has an invalid length. [ 497.048298][T24623] nbd: error processing sock list [ 497.171161][T24611] NFSD: Failed to start, no listeners configured. [ 497.813826][T24659] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8084'. [ 498.572283][T24692] NFSD: Failed to start, no listeners configured. [ 499.080398][T14855] Bluetooth: hci3: ACL packet too small [ 499.568102][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.574518][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.515970][T24802] NFSD: Failed to start, no listeners configured. [ 501.089865][T24840] netlink: 'syz.2.8141': attribute type 11 has an invalid length. [ 501.089896][T24840] netlink: 'syz.2.8141': attribute type 11 has an invalid length. [ 501.089915][T24840] netlink: 'syz.2.8141': attribute type 11 has an invalid length. [ 501.506105][T24856] NFSD: Failed to start, no listeners configured. [ 503.181915][T24946] Process accounting paused [ 503.593112][T24971] syz_tun: tun_chr_ioctl cmd 1074025681 [ 503.636238][T24970] HSR: entered promiscuous mode [ 504.020640][T24992] MTRR 1 not used [ 504.195898][T24998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8199'. [ 504.583186][T25015] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.992339][T25042] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 507.049082][T25167] netlink: Invalid conntrack timeout [ 507.280678][T25179] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8247'. [ 510.014320][T20141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.194828][T20141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.510636][T20141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.690096][T16381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.707321][T16381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.715549][T16381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.729120][T16381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.744981][T16381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.856892][T20141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.602522][T20141] bridge_slave_1: left allmulticast mode [ 511.602555][T20141] bridge_slave_1: left promiscuous mode [ 511.602787][T20141] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.643897][T20141] bridge_slave_0: left allmulticast mode [ 511.643929][T20141] bridge_slave_0: left promiscuous mode [ 511.644077][T20141] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.400842][T20141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.419981][T20141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.432276][T20141] bond0 (unregistering): Released all slaves [ 512.537859][T20141] : left promiscuous mode [ 512.775255][T16381] Bluetooth: hci0: command tx timeout [ 513.528272][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 514.533128][T25599] program syz.1.8334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.816313][T25332] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.816390][T25332] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.816508][T25332] bridge_slave_0: entered allmulticast mode [ 514.817543][T25332] bridge_slave_0: entered promiscuous mode [ 514.851091][T16381] Bluetooth: hci0: command tx timeout [ 514.984329][T25332] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.984408][T25332] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.984542][T25332] bridge_slave_1: entered allmulticast mode [ 514.985599][T25332] bridge_slave_1: entered promiscuous mode [ 515.027522][T25645] netlink: 342 bytes leftover after parsing attributes in process `syz.3.8337'. [ 515.246296][T25332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.332327][T25332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.564856][T20141] hsr_slave_0: left promiscuous mode [ 515.573756][T20141] hsr_slave_1: left promiscuous mode [ 515.574336][T20141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.574413][T20141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.601636][T20141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.611034][T20141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.667858][T20141] veth1_macvtap: left promiscuous mode [ 515.676557][T20141] veth0_macvtap: left promiscuous mode [ 515.676646][T20141] veth1_vlan: left promiscuous mode [ 515.676757][T20141] veth0_vlan: left promiscuous mode [ 516.175485][T20141] team0 (unregistering): Port device team_slave_1 removed [ 516.195697][T20141] team0 (unregistering): Port device team_slave_0 removed [ 516.299779][T25332] team0: Port device team_slave_0 added [ 516.306437][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 516.324137][T25332] team0: Port device team_slave_1 added [ 516.398095][T25332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.398121][T25332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.398149][T25332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.465082][T25332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.465107][T25332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.465135][T25332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.601496][T25332] hsr_slave_0: entered promiscuous mode [ 516.619664][T25332] hsr_slave_1: entered promiscuous mode [ 516.916621][T16381] Bluetooth: hci0: command tx timeout [ 517.691982][T25332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.707135][T25332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.720383][T25332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.736730][T25332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.746604][T25332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.759209][T25332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.771414][T25332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.790181][T25332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.925950][T25332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.953339][T25332] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.966874][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.966959][T14778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.994454][T20141] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.994541][T20141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.077147][T25332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.675409][T25332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.982902][T16381] Bluetooth: hci0: command tx timeout [ 519.055716][T25332] veth0_vlan: entered promiscuous mode [ 519.080116][T25332] veth1_vlan: entered promiscuous mode [ 519.128885][T25332] veth0_macvtap: entered promiscuous mode [ 519.141829][T25332] veth1_macvtap: entered promiscuous mode [ 519.173677][T25332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.205056][T25332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.281581][T14774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.281628][T14774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.281662][T14774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.281687][T14774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.488149][T14778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.488184][T14778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.551728][T14765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.551757][T14765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.847854][T25945] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8351'. [ 520.765894][T25998] netlink: 'syz.4.8358': attribute type 1 has an invalid length. [ 520.990126][T26003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8359'. [ 521.959723][T26051] FAULT_INJECTION: forcing a failure. [ 521.959723][T26051] name failslab, interval 1, probability 0, space 0, times 0 [ 521.959764][T26051] CPU: 0 UID: 0 PID: 26051 Comm: syz.1.8366 Tainted: G U L syzkaller #0 PREEMPT(full) [ 521.959788][T26051] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 521.959794][T26051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.959836][T26051] Call Trace: [ 521.959843][T26051] [ 521.959849][T26051] dump_stack_lvl+0x100/0x190 [ 521.959877][T26051] should_fail_ex.cold+0x5/0xa [ 521.959897][T26051] should_failslab+0xc2/0x120 [ 521.959916][T26051] __kmalloc_noprof+0xfc/0x840 [ 521.959932][T26051] ? lsm_blob_alloc+0x68/0x90 [ 521.960021][T26051] lsm_blob_alloc+0x68/0x90 [ 521.960042][T26051] security_prepare_creds+0x2d/0x290 [ 521.960086][T26051] prepare_creds+0x5d6/0x950 [ 521.960108][T26051] __sys_setregid+0x109/0x910 [ 521.960130][T26051] do_syscall_64+0x121/0x770 [ 521.960158][T26051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.960173][T26051] RIP: 0033:0x7fd004f9e0d9 [ 521.960187][T26051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.960201][T26051] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 521.960215][T26051] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 521.960225][T26051] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 521.960234][T26051] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 521.960244][T26051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.960252][T26051] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 521.960272][T26051] [ 522.380395][T26059] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 522.906858][T26075] dump_stack_lvl+0x100/0x190 [ 522.906882][T26075] should_fail_ex.cold+0x5/0xa [ 522.906898][T26075] ? prepare_alloc_pages+0x16d/0x5b0 [ 522.906919][T26075] should_fail_alloc_page+0xeb/0x140 [ 522.906936][T26075] prepare_alloc_pages+0x1f0/0x5b0 [ 522.906957][T26075] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 522.906994][T26075] ? __mmap_region+0xc67/0x30b0 [ 522.907019][T26075] ? __pfx___mmap_region+0x10/0x10 [ 522.907041][T26075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 522.907066][T26075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.907087][T26075] ? mas_next_node+0x29c/0x1020 [ 522.907113][T26075] ? __pfx_mt_validate_nulls+0x10/0x10 [ 522.907130][T26075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.907149][T26075] ? policy_nodemask+0xed/0x4f0 [ 522.907168][T26075] alloc_pages_mpol+0x201/0x550 [ 522.907186][T26075] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 522.907209][T26075] alloc_pages_noprof+0x1a/0x160 [ 522.907228][T26075] __pmd_alloc+0x3b/0x950 [ 522.907250][T26075] __handle_mm_fault+0xa9d/0x2f60 [ 522.907273][T26075] ? __pfx___handle_mm_fault+0x10/0x10 [ 522.907291][T26075] ? __pfx_mt_find+0x10/0x10 [ 522.907306][T26075] ? validate_mm+0x261/0x4e0 [ 522.907338][T26075] handle_mm_fault+0x37b/0xa30 [ 522.907361][T26075] __get_user_pages+0x1169/0x3280 [ 522.907384][T26075] ? __pfx_mt_find+0x10/0x10 [ 522.907400][T26075] ? __pfx___get_user_pages+0x10/0x10 [ 522.907423][T26075] populate_vma_page_range+0x267/0x3f0 [ 522.907441][T26075] ? __pfx_populate_vma_page_range+0x10/0x10 [ 522.907457][T26075] ? __pfx_find_vma_intersection+0x10/0x10 [ 522.907478][T26075] __mm_populate+0x107/0x3a0 [ 522.907495][T26075] ? __pfx___mm_populate+0x10/0x10 [ 522.907513][T26075] ? up_write+0x2dc/0x5b0 [ 522.907536][T26075] vm_mmap_pgoff+0x441/0x470 [ 522.907554][T26075] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 522.907572][T26075] ? __pfx_do_futex+0x10/0x10 [ 522.907590][T26075] ksys_mmap_pgoff+0xe4/0x610 [ 522.907606][T26075] ? __x64_sys_futex+0x358/0x4d0 [ 522.907620][T26075] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 522.907636][T26075] ? xfd_validate_state+0x129/0x190 [ 522.907660][T26075] __x64_sys_mmap+0x125/0x190 [ 522.907676][T26075] do_syscall_64+0x121/0x770 [ 522.907692][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.907707][T26075] RIP: 0033:0x7fd004f9e0d9 [ 522.907720][T26075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.907734][T26075] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 522.907748][T26075] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 522.907758][T26075] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 522.907767][T26075] RBP: 00007fd005035024 R08: 0000000000000002 R09: 0000000000008000 [ 522.907776][T26075] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 522.907785][T26075] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 522.907805][T26075] [ 524.148769][T26116] bridge0: port 3(batadv0) entered blocking state [ 524.157847][T26116] bridge0: port 3(batadv0) entered disabled state [ 524.165344][T26116] batadv0: entered allmulticast mode [ 524.181138][T26116] batadv0: entered promiscuous mode [ 524.222427][T26116] bridge0: port 3(batadv0) entered blocking state [ 524.222507][T26116] bridge0: port 3(batadv0) entered forwarding state [ 524.368840][T26118] FAULT_INJECTION: forcing a failure. [ 524.368840][T26118] name failslab, interval 1, probability 0, space 0, times 0 [ 524.368880][T26118] CPU: 0 UID: 0 PID: 26118 Comm: syz.1.8388 Tainted: G U L syzkaller #0 PREEMPT(full) [ 524.368903][T26118] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 524.368909][T26118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.368918][T26118] Call Trace: [ 524.368923][T26118] [ 524.368929][T26118] dump_stack_lvl+0x100/0x190 [ 524.368953][T26118] should_fail_ex.cold+0x5/0xa [ 524.368971][T26118] should_failslab+0xc2/0x120 [ 524.368989][T26118] __kmalloc_noprof+0xfc/0x840 [ 524.369003][T26118] ? security_inode_alloc+0x3b/0x2c0 [ 524.369018][T26118] ? sk_prot_alloc+0x10b/0x2a0 [ 524.369040][T26118] sk_prot_alloc+0x10b/0x2a0 [ 524.369058][T26118] sk_alloc+0x36/0xe80 [ 524.369079][T26118] packet_create+0x127/0x8e0 [ 524.369188][T26118] __sock_create+0x339/0x860 [ 524.369210][T26118] __sys_socket+0x14d/0x260 [ 524.369230][T26118] ? __pfx___sys_socket+0x10/0x10 [ 524.369253][T26118] __x64_sys_socket+0x72/0xb0 [ 524.369270][T26118] ? lockdep_hardirqs_on+0x7d/0x110 [ 524.369285][T26118] do_syscall_64+0x121/0x770 [ 524.369301][T26118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.369315][T26118] RIP: 0033:0x7fd004f9e0d9 [ 524.369329][T26118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.369342][T26118] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 524.369356][T26118] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 524.369366][T26118] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 524.369374][T26118] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 524.369383][T26118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.369391][T26118] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 524.369410][T26118] [ 524.496790][T20141] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 524.496805][T20141] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 525.969728][T26175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8408'. [ 529.138901][T26349] sock: sock_timestamping_bind_phc: sock not bind to device [ 529.548563][T26363] FAULT_INJECTION: forcing a failure. [ 529.548563][T26363] name failslab, interval 1, probability 0, space 0, times 0 [ 529.548606][T26363] CPU: 0 UID: 0 PID: 26363 Comm: syz.1.8450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 529.548630][T26363] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 529.548635][T26363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.548644][T26363] Call Trace: [ 529.548649][T26363] [ 529.548655][T26363] dump_stack_lvl+0x100/0x190 [ 529.548680][T26363] should_fail_ex.cold+0x5/0xa [ 529.548699][T26363] should_failslab+0xc2/0x120 [ 529.548717][T26363] kmem_cache_alloc_noprof+0x92/0x6a0 [ 529.548733][T26363] ? alloc_uid+0x13d/0x4c0 [ 529.548760][T26363] alloc_uid+0x13d/0x4c0 [ 529.548775][T26363] ? __pfx_alloc_uid+0x10/0x10 [ 529.548789][T26363] ? bpf_lsm_cred_prepare+0x9/0x10 [ 529.548874][T26363] ? security_prepare_creds+0xa8/0x290 [ 529.548899][T26363] __sys_setresuid+0x4f2/0x1280 [ 529.548922][T26363] do_syscall_64+0x121/0x770 [ 529.548938][T26363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.548953][T26363] RIP: 0033:0x7fd004f9e0d9 [ 529.548966][T26363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.548980][T26363] RSP: 002b:00007fd005ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 529.548996][T26363] RAX: ffffffffffffffda RBX: 00007fd005225fa0 RCX: 00007fd004f9e0d9 [ 529.549005][T26363] RDX: 0000000000008080 RSI: 0000000000000007 RDI: 0000000000000002 [ 529.549013][T26363] RBP: 00007fd005035024 R08: 0000000000000000 R09: 0000000000000000 [ 529.549022][T26363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.549031][T26363] R13: 00007fd005226038 R14: 00007fd005225fa0 R15: 00007ffdd3aa1528 [ 529.549050][T26363] [ 531.614616][T26453] netlink: 350 bytes leftover after parsing attributes in process `syz.4.8482'. [ 532.938904][T26503] netlink: 'syz.2.8490': attribute type 23 has an invalid length. [ 533.181310][T26509] Process accounting resumed [ 533.305307][T26515] FAULT_INJECTION: forcing a failure. [ 533.305307][T26515] name failslab, interval 1, probability 0, space 0, times 0 [ 533.305348][T26515] CPU: 0 UID: 0 PID: 26515 Comm: syz.2.8494 Tainted: G U L syzkaller #0 PREEMPT(full) [ 533.305371][T26515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 533.305377][T26515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.305386][T26515] Call Trace: [ 533.305391][T26515] [ 533.305397][T26515] dump_stack_lvl+0x100/0x190 [ 533.305422][T26515] should_fail_ex.cold+0x5/0xa [ 533.305441][T26515] should_failslab+0xc2/0x120 [ 533.305459][T26515] kmem_cache_alloc_noprof+0x92/0x6a0 [ 533.305474][T26515] ? dup_fd+0x4d/0xd10 [ 533.305492][T26515] dup_fd+0x4d/0xd10 [ 533.305506][T26515] ? __pfx_get_nodes+0x10/0x10 [ 533.305526][T26515] __x64_sys_close_range+0x405/0x5d0 [ 533.305543][T26515] ? __pfx___x64_sys_close_range+0x10/0x10 [ 533.305564][T26515] do_syscall_64+0x121/0x770 [ 533.305581][T26515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.305596][T26515] RIP: 0033:0x7f16dc99e0d9 [ 533.305608][T26515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.305622][T26515] RSP: 002b:00007f16dd78b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 533.305637][T26515] RAX: ffffffffffffffda RBX: 00007f16dcc25fa0 RCX: 00007f16dc99e0d9 [ 533.305647][T26515] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 533.305656][T26515] RBP: 00007f16dca35024 R08: 0000000000000000 R09: 0000000000000000 [ 533.305664][T26515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.305672][T26515] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 533.305690][T26515] [ 535.090996][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8510'. [ 536.910636][T26658] FAULT_INJECTION: forcing a failure. [ 536.910636][T26658] name failslab, interval 1, probability 0, space 0, times 0 [ 536.910685][T26658] CPU: 0 UID: 0 PID: 26658 Comm: syz.4.8536 Tainted: G U L syzkaller #0 PREEMPT(full) [ 536.910708][T26658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 536.910714][T26658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.910723][T26658] Call Trace: [ 536.910728][T26658] [ 536.910734][T26658] dump_stack_lvl+0x100/0x190 [ 536.910763][T26658] should_fail_ex.cold+0x5/0xa [ 536.910781][T26658] should_failslab+0xc2/0x120 [ 536.910798][T26658] __kmalloc_cache_noprof+0x91/0x6d0 [ 536.910820][T26658] ? do_kimage_alloc_init+0x40/0x320 [ 536.910841][T26658] do_kimage_alloc_init+0x40/0x320 [ 536.910858][T26658] do_kexec_load+0x11b/0x810 [ 536.910878][T26658] ? __pfx_do_kexec_load+0x10/0x10 [ 536.910899][T26658] ? _copy_from_user+0x59/0xd0 [ 536.911010][T26658] __x64_sys_kexec_load+0x1bf/0x230 [ 536.911032][T26658] do_syscall_64+0x121/0x770 [ 536.911049][T26658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.911064][T26658] RIP: 0033:0x7fd03839e0d9 [ 536.911076][T26658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.911090][T26658] RSP: 002b:00007fd039259028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 536.911105][T26658] RAX: ffffffffffffffda RBX: 00007fd038625fa0 RCX: 00007fd03839e0d9 [ 536.911114][T26658] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 536.911123][T26658] RBP: 00007fd038435024 R08: 0000000000000000 R09: 0000000000000000 [ 536.911132][T26658] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 536.911141][T26658] R13: 00007fd038626038 R14: 00007fd038625fa0 R15: 00007ffe249924f8 [ 536.911160][T26658] [ 537.145618][T26665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8537'. [ 537.323755][ T31] audit: type=1800 audit(4294967388.403:32): pid=26682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8540" name=04 dev="tmpfs" ino=10725 res=0 errno=0 [ 537.712103][T26707] bridge0: port 3(dummy0) entered blocking state [ 537.712170][T26707] bridge0: port 3(dummy0) entered disabled state [ 537.712312][T26707] dummy0: entered allmulticast mode [ 537.739723][T26707] dummy0: entered promiscuous mode [ 537.740190][T26707] bridge0: port 3(dummy0) entered blocking state [ 537.740262][T26707] bridge0: port 3(dummy0) entered forwarding state [ 539.637449][T26801] lo: entered allmulticast mode [ 539.644280][T26799] lo: left allmulticast mode [ 543.532976][T26981] tunl0: entered allmulticast mode [ 545.558393][ T31] audit: type=1800 audit(4294967396.666:33): pid=27082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8667" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 545.811762][T27094] sctp: [Deprecated]: syz.2.8672 (pid 27094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.811762][T27094] Use struct sctp_sack_info instead [ 547.192281][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8692'. [ 548.576219][T27209] netlink: 5316 bytes leftover after parsing attributes in process `syz.4.8705'. [ 552.415050][T27366] FAULT_INJECTION: forcing a failure. [ 552.415050][T27366] name failslab, interval 1, probability 0, space 0, times 0 [ 552.415093][T27366] CPU: 0 UID: 0 PID: 27366 Comm: syz.2.8751 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.415118][T27366] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.415124][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.415133][T27366] Call Trace: [ 552.415138][T27366] [ 552.415145][T27366] dump_stack_lvl+0x100/0x190 [ 552.415168][T27366] should_fail_ex.cold+0x5/0xa [ 552.415187][T27366] should_failslab+0xc2/0x120 [ 552.415205][T27366] kmem_cache_alloc_noprof+0x92/0x6a0 [ 552.415220][T27366] ? sk_prot_alloc+0x60/0x2a0 [ 552.415241][T27366] sk_prot_alloc+0x60/0x2a0 [ 552.415259][T27366] sk_alloc+0x36/0xe80 [ 552.415280][T27366] smc_create+0x11a/0x290 [ 552.415375][T27366] __sock_create+0x339/0x860 [ 552.415397][T27366] __sys_socket+0x14d/0x260 [ 552.415417][T27366] ? __pfx___sys_socket+0x10/0x10 [ 552.415440][T27366] __x64_sys_socket+0x72/0xb0 [ 552.415457][T27366] ? lockdep_hardirqs_on+0x7d/0x110 [ 552.415472][T27366] do_syscall_64+0x121/0x770 [ 552.415488][T27366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.415509][T27366] RIP: 0033:0x7f16dc99e0d9 [ 552.415522][T27366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.415537][T27366] RSP: 002b:00007f16dd78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 552.415553][T27366] RAX: ffffffffffffffda RBX: 00007f16dcc25fa0 RCX: 00007f16dc99e0d9 [ 552.415562][T27366] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 552.415571][T27366] RBP: 00007f16dca35024 R08: 0000000000000000 R09: 0000000000000000 [ 552.415579][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.415587][T27366] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 552.415607][T27366] [ 553.097084][T27386] netlink: 82 bytes leftover after parsing attributes in process `syz.2.8759'. [ 554.898259][T27466] random: crng reseeded on system resumption [ 555.719998][T27498] hub 1-0:1.0: USB hub found [ 555.727238][T27498] hub 1-0:1.0: 1 port detected [ 559.300696][T27625] NFSD: Failed to start, no listeners configured. [ 559.652685][T27644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8846'. [ 560.689218][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.696147][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.122968][T27797] Process accounting paused [ 564.211637][T27850] bridge0: port 3(veth1_macvtap) entered blocking state [ 564.211715][T27850] bridge0: port 3(veth1_macvtap) entered disabled state [ 564.211854][T27850] veth1_macvtap: entered allmulticast mode [ 564.254031][T27850] veth1_macvtap: left allmulticast mode [ 564.327617][T16381] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 564.327662][T16381] Bluetooth: hci1: unexpected event for opcode 0x647c [ 565.163471][T27888] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 565.223532][T27888] NFSD: Failed to start, no listeners configured. [ 566.951479][T27982] NFSD: Failed to start, no listeners configured. [ 567.747687][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8960'. [ 569.174166][T28093] NFSD: Failed to start, no listeners configured. [ 569.727651][T28140] FAULT_INJECTION: forcing a failure. [ 569.727651][T28140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.771271][T28140] CPU: 0 UID: 0 PID: 28140 Comm: syz.2.8984 Tainted: G U L syzkaller #0 PREEMPT(full) [ 569.771301][T28140] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 569.771307][T28140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.771316][T28140] Call Trace: [ 569.771321][T28140] [ 569.771327][T28140] dump_stack_lvl+0x100/0x190 [ 569.771353][T28140] should_fail_ex.cold+0x5/0xa [ 569.771368][T28140] ? prepare_alloc_pages+0x16d/0x5b0 [ 569.771388][T28140] should_fail_alloc_page+0xeb/0x140 [ 569.771406][T28140] prepare_alloc_pages+0x1f0/0x5b0 [ 569.771423][T28140] ? __lock_acquire+0x4c5/0x1ec0 [ 569.771444][T28140] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 569.771470][T28140] ? lock_acquire+0x1b9/0x370 [ 569.771489][T28140] ? find_held_lock+0x2b/0x80 [ 569.771502][T28140] ? page_table_check_set+0x30f/0x580 [ 569.771585][T28140] ? page_table_check_set+0x30f/0x580 [ 569.771605][T28140] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.771628][T28140] ? page_table_check_set+0x31e/0x580 [ 569.771649][T28140] ? __page_table_check_ptes_set+0x1d5/0x530 [ 569.771668][T28140] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 569.771689][T28140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 569.771713][T28140] ? xas_find+0x32c/0x8e0 [ 569.771732][T28140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.771752][T28140] ? policy_nodemask+0xed/0x4f0 [ 569.771771][T28140] alloc_pages_mpol+0x201/0x550 [ 569.771791][T28140] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 569.771813][T28140] folio_alloc_mpol_noprof+0x36/0x260 [ 569.771834][T28140] vma_alloc_folio_noprof+0xed/0x1d0 [ 569.771853][T28140] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 569.771878][T28140] do_anonymous_page+0xac9/0x2050 [ 569.771903][T28140] ? __pfx_do_anonymous_page+0x10/0x10 [ 569.771921][T28140] ? rcu_read_unlock+0x2d/0xb0 [ 569.771945][T28140] ? rcu_read_unlock+0x2d/0xb0 [ 569.771965][T28140] ? __pte_offset_map+0x179/0x310 [ 569.771982][T28140] __handle_mm_fault+0x1ff3/0x2f60 [ 569.772004][T28140] ? reacquire_held_locks+0xce/0x1e0 [ 569.772023][T28140] ? __pfx___handle_mm_fault+0x10/0x10 [ 569.772045][T28140] ? lock_vma_under_rcu+0x17c/0x590 [ 569.772079][T28140] handle_mm_fault+0x37b/0xa30 [ 569.772103][T28140] do_user_addr_fault+0x59c/0x12f0 [ 569.772125][T28140] exc_page_fault+0x6f/0xd0 [ 569.772141][T28140] asm_exc_page_fault+0x26/0x30 [ 569.772163][T28140] RIP: 0033:0x7f16dc85f6cb [ 569.772176][T28140] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 569.772190][T28140] RSP: 002b:00007f16dd789fa0 EFLAGS: 00010206 [ 569.772203][T28140] RAX: 0000000000000000 RBX: 00007f16dcc25fa0 RCX: 0000000000000000 [ 569.772213][T28140] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 569.772224][T28140] RBP: 00007f16dca35024 R08: 0000000000000000 R09: 0000000000000000 [ 569.772233][T28140] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 569.772242][T28140] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 569.772261][T28140] [ 569.841128][T28140] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 570.267814][T28147] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 570.354921][T28147] NFSD: Failed to start, no listeners configured. [ 570.577918][T28162] NFSD: Failed to start, no listeners configured. [ 570.640730][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8992'. [ 572.680610][T16381] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 572.680643][T16381] Bluetooth: hci3: unexpected event for opcode 0x647c [ 573.032068][T28278] netlink: 'syz.2.9026': attribute type 2 has an invalid length. [ 573.298387][T28284] NFSD: Failed to start, no listeners configured. [ 573.632252][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9033'. [ 574.248276][T28320] FAULT_INJECTION: forcing a failure. [ 574.248276][T28320] name failslab, interval 1, probability 0, space 0, times 0 [ 574.248316][T28320] CPU: 0 UID: 0 PID: 28320 Comm: syz.2.9040 Tainted: G U L syzkaller #0 PREEMPT(full) [ 574.248345][T28320] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 574.248351][T28320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.248360][T28320] Call Trace: [ 574.248366][T28320] [ 574.248372][T28320] dump_stack_lvl+0x100/0x190 [ 574.248396][T28320] should_fail_ex.cold+0x5/0xa [ 574.248415][T28320] should_failslab+0xc2/0x120 [ 574.248433][T28320] __kmalloc_cache_noprof+0x91/0x6d0 [ 574.248456][T28320] ? resv_map_alloc+0x7e/0x400 [ 574.248539][T28320] resv_map_alloc+0x7e/0x400 [ 574.248556][T28320] hugetlbfs_get_inode+0x385/0x700 [ 574.248582][T28320] hugetlb_file_setup+0x15b/0x5b0 [ 574.248612][T28320] ksys_mmap_pgoff+0x242/0x610 [ 574.248632][T28320] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 574.248649][T28320] ? xfd_validate_state+0x129/0x190 [ 574.248679][T28320] __x64_sys_mmap+0x125/0x190 [ 574.248695][T28320] do_syscall_64+0x121/0x770 [ 574.248713][T28320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.248728][T28320] RIP: 0033:0x7f16dc99e0d9 [ 574.248742][T28320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.248756][T28320] RSP: 002b:00007f16dd78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 574.248775][T28320] RAX: ffffffffffffffda RBX: 00007f16dcc25fa0 RCX: 00007f16dc99e0d9 [ 574.248786][T28320] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 574.248795][T28320] RBP: 00007f16dca35024 R08: 000000000000000d R09: 0000300000000000 [ 574.248804][T28320] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 574.248814][T28320] R13: 00007f16dcc26038 R14: 00007f16dcc25fa0 R15: 00007ffef484a1c8 [ 574.248832][T28320] [ 574.971302][T28343] bridge0: port 4(ipvlan1) entered blocking state [ 574.971370][T28343] bridge0: port 4(ipvlan1) entered disabled state [ 574.971524][T28343] ipvlan1: entered allmulticast mode [ 574.971546][T28343] veth0_vlan: entered allmulticast mode [ 575.009980][T28343] ipvlan1: left allmulticast mode [ 575.018985][T28343] veth0_vlan: left allmulticast mode [ 576.016680][T28385] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5613] was attempted by ""[28385] [ 576.990579][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9082'. [ 577.244753][T28445] sctp: [Deprecated]: syz.3.9086 (pid 28445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.244753][T28445] Use struct sctp_sack_info instead [ 577.356578][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9089'. [ 577.366717][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9089'. [ 578.424111][T28488] bridge0: port 4(team0) entered blocking state [ 578.424198][T28488] bridge0: port 4(team0) entered disabled state [ 578.424321][T28488] team0: entered allmulticast mode [ 578.424335][T28488] team_slave_0: entered allmulticast mode [ 578.424351][T28488] team_slave_1: entered allmulticast mode [ 578.467171][T28488] team0: entered promiscuous mode [ 578.467211][T28488] team_slave_0: entered promiscuous mode [ 578.467352][T28488] team_slave_1: entered promiscuous mode [ 578.488962][T28488] bridge0: port 4(team0) entered blocking state [ 578.489034][T28488] bridge0: port 4(team0) entered forwarding state [ 580.131332][T28548] nbd: socks must be embedded in a SOCK_ITEM attr [ 581.725262][T28614] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.725323][T28614] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.058106][T28627] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 582.072258][T28627] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 582.185863][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9145'. [ 582.540074][T28646] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.191249][T28667] ovs_?: entered promiscuous mode [ 583.557934][T28689] netlink: 186 bytes leftover after parsing attributes in process `syz.3.9165'. [ 584.476845][T28723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9176'. [ 586.272228][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9197'. [ 589.469090][T28902] random: crng reseeded on system resumption [ 591.383757][T28977] ovs_?: entered promiscuous mode [ 592.489261][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9265'. [ 593.377367][T29047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9278'. [ 594.081608][T29073] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 594.081673][T29073] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 594.608888][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9297'. [ 594.784356][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9299'. [ 594.944331][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9302'. [ 595.380201][T29131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9307'. [ 595.567252][T29145] netlink: 334 bytes leftover after parsing attributes in process `syz.3.9313'. [ 595.579332][T29144] sctp: [Deprecated]: syz.2.9311 (pid 29144) Use of int in maxseg socket option. [ 595.579332][T29144] Use struct sctp_assoc_value instead [ 595.928883][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9317'. [ 597.665217][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9342'. [ 598.723158][T29323] netlink: 342 bytes leftover after parsing attributes in process `syz.1.9359'. [ 599.315628][T29348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9368'. [ 599.315677][T29348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9368'. [ 600.013666][T29381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9379'. [ 600.349709][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9383'. [ 601.330559][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9396'. [ 601.435477][ C0] ------------[ cut here ]------------ [ 601.435506][ C0] cpu_t != t [ 601.435543][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#0: syz.4.9404/29458 [ 601.456038][ C0] Modules linked in: [ 601.461315][ C0] CPU: 0 UID: 0 PID: 29458 Comm: syz.4.9404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 601.472314][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 601.477513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.487607][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 601.492884][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 cb a4 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 18 aa 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 60 ee bf 8e e8 40 3a 85 [ 601.512547][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 601.518629][ C0] RAX: 0000000000000000 RBX: ffff8880b8423440 RCX: 0000000000000101 [ 601.526618][ C0] RDX: ffff88803776be80 RSI: ffffffff81b277f8 RDI: ffffffff8e6b7920 [ 601.534700][ C0] RBP: ffff8880b8523440 R08: 0000000000000001 R09: 0000000000000000 [ 601.542657][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 601.550653][ C0] R13: 8000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b27570 [ 601.558643][ C0] FS: 0000000000000000(0000) GS:ffff888123b70000(0000) knlGS:0000000000000000 [ 601.567586][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.574177][ C0] CR2: 00007f16dc86c151 CR3: 0000000036650000 CR4: 00000000003526f0 [ 601.582152][ C0] Call Trace: [ 601.585457][ C0] [ 601.588292][ C0] call_timer_fn+0x198/0x5f0 [ 601.592891][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 601.598030][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 601.603070][ C0] ? mark_held_locks+0x40/0x70 [ 601.607832][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 601.612851][ C0] __run_timers+0x757/0xb00 [ 601.617387][ C0] ? __pfx___run_timers+0x10/0x10 [ 601.622414][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 601.627461][ C0] run_timer_base+0x114/0x190 [ 601.632136][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 601.637356][ C0] run_timer_softirq+0x10/0x50 [ 601.642131][ C0] handle_softirqs+0x1e6/0x9d0 [ 601.646926][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 601.652220][ C0] ? _raw_spin_unlock+0x28/0x50 [ 601.657101][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 601.662761][ C0] __irq_exit_rcu+0x194/0x210 [ 601.667439][ C0] irq_exit_rcu+0x9/0x30 [ 601.671677][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 601.677349][ C0] [ 601.680267][ C0] [ 601.683259][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.689253][ C0] RIP: 0010:lock_acquire+0x39/0x370 [ 601.694512][ C0] Code: c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 4c 8b 3d 70 89 a4 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 8f 89 a4 12 <83> f8 07 0f 87 da 00 00 00 48 0f a3 05 9e aa 5e 0f 0f 82 b1 02 00 [ 601.714154][ C0] RSP: 0018:ffffc90005b073e8 EFLAGS: 00000296 [ 601.720211][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 601.728199][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8edebe60 [ 601.736200][ C0] RBP: ffffffff8edebe60 R08: 0000000000000000 R09: 0000000000000000 [ 601.744192][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 601.752155][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.760163][ C0] page_table_check_clear+0x12e/0x540 [ 601.765581][ C0] ? page_table_check_clear+0x119/0x540 [ 601.771125][ C0] __page_table_check_pte_clear+0x10f/0x120 [ 601.777044][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 601.783467][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 601.789008][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 601.795792][ C0] __zap_vma_range+0x2c36/0x48c0 [ 601.800738][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 601.806068][ C0] ? mas_next_slot+0x10a3/0x1960 [ 601.811006][ C0] unmap_vmas+0x299/0x5f0 [ 601.815354][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 601.820205][ C0] exit_mmap+0x1ef/0xa00 [ 601.824460][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 601.829209][ C0] ? rcu_is_watching+0x13/0xc0 [ 601.833993][ C0] ? find_held_lock+0x2b/0x80 [ 601.838659][ C0] ? uprobe_clear_state+0x5f/0x250 [ 601.843904][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 601.849537][ C0] __mmput+0x12a/0x410 [ 601.853630][ C0] mmput+0x67/0x80 [ 601.857345][ C0] do_exit+0x8b1/0x2ae0 [ 601.861490][ C0] ? __pfx_do_exit+0x10/0x10 [ 601.866098][ C0] ? do_raw_spin_lock+0x128/0x260 [ 601.871118][ C0] ? find_held_lock+0x2b/0x80 [ 601.875849][ C0] ? get_signal+0x7e0/0x21e0 [ 601.880441][ C0] do_group_exit+0xd5/0x2a0 [ 601.884973][ C0] get_signal+0x1ec7/0x21e0 [ 601.889479][ C0] ? __pfx_get_signal+0x10/0x10 [ 601.894341][ C0] ? do_futex+0x190/0x440 [ 601.898674][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 601.904255][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 601.910434][ C0] exit_to_user_mode_loop+0x139/0x700 [ 601.915844][ C0] ? rcu_is_watching+0x13/0xc0 [ 601.920602][ C0] do_syscall_64+0x603/0x770 [ 601.925240][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.931130][ C0] RIP: 0033:0x7fd03839e0d9 [ 601.935562][ C0] Code: Unable to access opcode bytes at 0x7fd03839e0af. [ 601.942582][ C0] RSP: 002b:00007fd0392590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 601.950982][ C0] RAX: fffffffffffffe00 RBX: 00007fd038625fa8 RCX: 00007fd03839e0d9 [ 601.958974][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd038625fa8 [ 601.966990][ C0] RBP: 00007fd038625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 601.974984][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.982993][ C0] R13: 00007fd038626038 R14: 00007ffe24992410 R15: 00007ffe249924f8 [ 601.991007][ C0] [ 601.994033][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 602.001335][ C0] CPU: 0 UID: 0 PID: 29458 Comm: syz.4.9404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 602.012269][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 602.017448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.027506][ C0] Call Trace: [ 602.030802][ C0] [ 602.033650][ C0] dump_stack_lvl+0x100/0x190 [ 602.038349][ C0] vpanic+0x553/0x970 [ 602.042463][ C0] ? __pfx_vpanic+0x10/0x10 [ 602.047121][ C0] panic+0xd1/0xe0 [ 602.050846][ C0] ? __pfx_panic+0x10/0x10 [ 602.055273][ C0] check_panic_on_warn.cold+0x19/0x34 [ 602.060645][ C0] ? mce_timer_fn+0x289/0x2e0 [ 602.065319][ C0] __warn.cold+0x191/0x318 [ 602.069733][ C0] __report_bug+0x30f/0x440 [ 602.074324][ C0] ? mce_timer_fn+0x289/0x2e0 [ 602.078996][ C0] ? __pfx___report_bug+0x10/0x10 [ 602.084030][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 602.089773][ C0] ? mark_held_locks+0x40/0x70 [ 602.094618][ C0] ? irqentry_exit+0x24d/0xa10 [ 602.099463][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 602.104670][ C0] ? mce_timer_fn+0x289/0x2e0 [ 602.109358][ C0] report_bug+0xb3/0x220 [ 602.113620][ C0] ? mce_timer_fn+0x289/0x2e0 [ 602.118301][ C0] handle_bug+0x16a/0x2a0 [ 602.122662][ C0] exc_invalid_op+0x17/0x50 [ 602.127190][ C0] asm_exc_invalid_op+0x1a/0x20 [ 602.132034][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 602.137315][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 cb a4 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 18 aa 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 60 ee bf 8e e8 40 3a 85 [ 602.156948][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 602.163046][ C0] RAX: 0000000000000000 RBX: ffff8880b8423440 RCX: 0000000000000101 [ 602.171017][ C0] RDX: ffff88803776be80 RSI: ffffffff81b277f8 RDI: ffffffff8e6b7920 [ 602.178983][ C0] RBP: ffff8880b8523440 R08: 0000000000000001 R09: 0000000000000000 [ 602.186950][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 602.194906][ C0] R13: 8000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b27570 [ 602.202874][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 602.207898][ C0] ? mce_timer_fn+0x288/0x2e0 [ 602.212569][ C0] call_timer_fn+0x198/0x5f0 [ 602.217150][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 602.222252][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 602.227259][ C0] ? mark_held_locks+0x40/0x70 [ 602.232015][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 602.237022][ C0] __run_timers+0x757/0xb00 [ 602.241523][ C0] ? __pfx___run_timers+0x10/0x10 [ 602.246545][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 602.251566][ C0] run_timer_base+0x114/0x190 [ 602.256240][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 602.261430][ C0] run_timer_softirq+0x10/0x50 [ 602.266183][ C0] handle_softirqs+0x1e6/0x9d0 [ 602.270948][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 602.276228][ C0] ? _raw_spin_unlock+0x28/0x50 [ 602.281073][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 602.286696][ C0] __irq_exit_rcu+0x194/0x210 [ 602.291376][ C0] irq_exit_rcu+0x9/0x30 [ 602.295614][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 602.301246][ C0] [ 602.304163][ C0] [ 602.307081][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.313051][ C0] RIP: 0010:lock_acquire+0x39/0x370 [ 602.318418][ C0] Code: c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 4c 8b 3d 70 89 a4 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 8f 89 a4 12 <83> f8 07 0f 87 da 00 00 00 48 0f a3 05 9e aa 5e 0f 0f 82 b1 02 00 [ 602.338035][ C0] RSP: 0018:ffffc90005b073e8 EFLAGS: 00000296 [ 602.344101][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 602.352065][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8edebe60 [ 602.360033][ C0] RBP: ffffffff8edebe60 R08: 0000000000000000 R09: 0000000000000000 [ 602.368002][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 602.375965][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.383971][ C0] page_table_check_clear+0x12e/0x540 [ 602.389351][ C0] ? page_table_check_clear+0x119/0x540 [ 602.394913][ C0] __page_table_check_pte_clear+0x10f/0x120 [ 602.400802][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 602.407204][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 602.412745][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 602.419505][ C0] __zap_vma_range+0x2c36/0x48c0 [ 602.424453][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 602.429740][ C0] ? mas_next_slot+0x10a3/0x1960 [ 602.434733][ C0] unmap_vmas+0x299/0x5f0 [ 602.439099][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 602.443976][ C0] exit_mmap+0x1ef/0xa00 [ 602.448223][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 602.453001][ C0] ? rcu_is_watching+0x13/0xc0 [ 602.457771][ C0] ? find_held_lock+0x2b/0x80 [ 602.462437][ C0] ? uprobe_clear_state+0x5f/0x250 [ 602.467545][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 602.473263][ C0] __mmput+0x12a/0x410 [ 602.477371][ C0] mmput+0x67/0x80 [ 602.481118][ C0] do_exit+0x8b1/0x2ae0 [ 602.485274][ C0] ? __pfx_do_exit+0x10/0x10 [ 602.489853][ C0] ? do_raw_spin_lock+0x128/0x260 [ 602.494895][ C0] ? find_held_lock+0x2b/0x80 [ 602.499559][ C0] ? get_signal+0x7e0/0x21e0 [ 602.504151][ C0] do_group_exit+0xd5/0x2a0 [ 602.508651][ C0] get_signal+0x1ec7/0x21e0 [ 602.513162][ C0] ? __pfx_get_signal+0x10/0x10 [ 602.518010][ C0] ? do_futex+0x190/0x440 [ 602.522328][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 602.527883][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 602.534063][ C0] exit_to_user_mode_loop+0x139/0x700 [ 602.539439][ C0] ? rcu_is_watching+0x13/0xc0 [ 602.544213][ C0] do_syscall_64+0x603/0x770 [ 602.548802][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.554701][ C0] RIP: 0033:0x7fd03839e0d9 [ 602.559104][ C0] Code: Unable to access opcode bytes at 0x7fd03839e0af. [ 602.566108][ C0] RSP: 002b:00007fd0392590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 602.574510][ C0] RAX: fffffffffffffe00 RBX: 00007fd038625fa8 RCX: 00007fd03839e0d9 [ 602.582488][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd038625fa8 [ 602.590445][ C0] RBP: 00007fd038625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 602.598425][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.606403][ C0] R13: 00007fd038626038 R14: 00007ffe24992410 R15: 00007ffe249924f8 [ 602.614386][ C0] [ 602.617461][ C0] Kernel Offset: disabled [ 602.621773][ C0] Rebooting in 86400 seconds..