last executing test programs: 2.005201575s ago: executing program 1 (id=7114): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) 1.833116844s ago: executing program 1 (id=7117): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) 1.793489677s ago: executing program 2 (id=7118): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x13, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0x400, 0x7ffffffb, 0x2, 0xffffffff7ffffffb, 0x800a, 0xe, 0x200000100106}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.594081569s ago: executing program 1 (id=7123): mmap$auto(0x0, 0x2020009, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x6, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 1.391676546s ago: executing program 1 (id=7124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r0, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 1.373771154s ago: executing program 2 (id=7126): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) bind$auto(0x3, 0x0, 0x68) setsockopt$auto(r0, 0x1, 0xc, 0x0, 0x9) 1.123976871s ago: executing program 2 (id=7129): socket(0x21, 0x2, 0xa) write$auto(0x3, 0x0, 0x100082) shmget$auto(0x0, 0x200000005, 0x7d) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.094557877s ago: executing program 1 (id=7130): socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) 943.898379ms ago: executing program 2 (id=7132): socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) ioctl$auto(0x4000000000000c8, 0x400454d0, r0) 898.462007ms ago: executing program 0 (id=7134): r0 = socket(0x2, 0x5, 0x0) listen$auto(r0, 0x4e35512e) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/sctp/eps\x00', 0x181800, 0x0) pread64$auto(r1, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) 793.487221ms ago: executing program 1 (id=7135): setns(0xc9, 0x0) socket(0x1f, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 749.422382ms ago: executing program 2 (id=7136): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) 623.633353ms ago: executing program 2 (id=7138): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r0, 0x0, 0x1000, 0x2, 0x0, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)=@bpf_attr_0={0x3, 0x0, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x4, "3300feffffffffffff00000000002000", 0x0, 0xffffffffffffffff, 0x6, 0x5, 0x9, 0x8}, 0x9) 505.29051ms ago: executing program 0 (id=7148): mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ad00, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r1, 0xc10c5541, r0) 441.45358ms ago: executing program 3 (id=7141): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201) close_range$auto(0x2, 0x8, 0x0) 385.833378ms ago: executing program 0 (id=7142): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) 332.235411ms ago: executing program 3 (id=7143): mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) 263.857542ms ago: executing program 3 (id=7144): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x80805, 0x0) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r0, 0x84, 0x22, 0x0, 0x0) 235.182216ms ago: executing program 0 (id=7145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) 186.703303ms ago: executing program 3 (id=7146): mmap$auto(0x0, 0x8000000, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) 135.841415ms ago: executing program 0 (id=7147): r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, 0x0) 98.394374ms ago: executing program 3 (id=7149): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 36.978616ms ago: executing program 0 (id=7150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x9) 0s ago: executing program 3 (id=7151): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 83.524057][ T5600] cgroup: Unknown subsys name 'net' [ 83.644729][ T5600] cgroup: Unknown subsys name 'cpuset' [ 83.653705][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.381523][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.494657][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.504374][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.513211][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.523907][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.540557][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.549964][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.557678][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.567589][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.575729][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.584488][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.591875][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.592104][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.607118][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.616639][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.626925][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.660496][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.671397][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.680618][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.690598][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.702263][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.374218][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.381606][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.388782][ T5610] bridge_slave_0: entered allmulticast mode [ 89.396638][ T5610] bridge_slave_0: entered promiscuous mode [ 89.416223][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.423507][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.430849][ T5614] bridge_slave_0: entered allmulticast mode [ 89.438210][ T5614] bridge_slave_0: entered promiscuous mode [ 89.457846][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.465075][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.472787][ T5610] bridge_slave_1: entered allmulticast mode [ 89.480117][ T5610] bridge_slave_1: entered promiscuous mode [ 89.498607][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.505815][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.513229][ T5614] bridge_slave_1: entered allmulticast mode [ 89.520635][ T5614] bridge_slave_1: entered promiscuous mode [ 89.566806][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.575367][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.582691][ T5618] bridge_slave_0: entered allmulticast mode [ 89.590168][ T5618] bridge_slave_0: entered promiscuous mode [ 89.628419][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.635977][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.643291][ T5618] bridge_slave_1: entered allmulticast mode [ 89.650535][ T5618] bridge_slave_1: entered promiscuous mode [ 89.661126][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.671445][ T4929] Bluetooth: hci0: command tx timeout [ 89.671962][ T5613] Bluetooth: hci2: command tx timeout [ 89.683355][ T5620] Bluetooth: hci1: command tx timeout [ 89.706948][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.719899][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.742105][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.751986][ T5620] Bluetooth: hci3: command tx timeout [ 89.830813][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.850869][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.858081][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.865415][ T5617] bridge_slave_0: entered allmulticast mode [ 89.873563][ T5617] bridge_slave_0: entered promiscuous mode [ 89.883262][ T5614] team0: Port device team_slave_0 added [ 89.891416][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.913906][ T5610] team0: Port device team_slave_0 added [ 89.919896][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.927535][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.935073][ T5617] bridge_slave_1: entered allmulticast mode [ 89.942703][ T5617] bridge_slave_1: entered promiscuous mode [ 89.952091][ T5614] team0: Port device team_slave_1 added [ 89.976247][ T5610] team0: Port device team_slave_1 added [ 90.007049][ T5618] team0: Port device team_slave_0 added [ 90.048907][ T5618] team0: Port device team_slave_1 added [ 90.069766][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.080060][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.088273][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.114532][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.139079][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.146458][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.172668][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.186301][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.196320][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.203579][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.229716][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.265046][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.272125][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.298225][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.322781][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.329826][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.356083][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.398991][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.406391][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.432587][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.453756][ T5617] team0: Port device team_slave_0 added [ 90.502351][ T5610] hsr_slave_0: entered promiscuous mode [ 90.508822][ T5610] hsr_slave_1: entered promiscuous mode [ 90.517588][ T5617] team0: Port device team_slave_1 added [ 90.529159][ T5614] hsr_slave_0: entered promiscuous mode [ 90.535792][ T5614] hsr_slave_1: entered promiscuous mode [ 90.542011][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 90.547808][ T5614] Cannot create hsr debugfs directory [ 90.614055][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.621256][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.647354][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.674952][ T5618] hsr_slave_0: entered promiscuous mode [ 90.681544][ T5618] hsr_slave_1: entered promiscuous mode [ 90.687700][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 90.693740][ T5618] Cannot create hsr debugfs directory [ 90.707422][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.714543][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.740723][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.886864][ T5617] hsr_slave_0: entered promiscuous mode [ 90.893489][ T5617] hsr_slave_1: entered promiscuous mode [ 90.899674][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 90.905991][ T5617] Cannot create hsr debugfs directory [ 91.295070][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.311961][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.322297][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.333778][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.341857][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.354563][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.371605][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.381365][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.460215][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.472020][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.480189][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.495845][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.512492][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.524054][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.547761][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.560108][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.642838][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.654773][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.665842][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.677419][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.687497][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.698197][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.708173][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.719873][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.750736][ T5620] Bluetooth: hci1: command tx timeout [ 91.761017][ T5620] Bluetooth: hci2: command tx timeout [ 91.765572][ T5613] Bluetooth: hci0: command tx timeout [ 91.831217][ T5613] Bluetooth: hci3: command tx timeout [ 91.861544][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.871494][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.883115][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.894413][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.905593][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.914202][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.924161][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.933190][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.944285][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.011429][ T986] cfg80211: failed to load regulatory.db [ 92.044807][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.077081][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.084661][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.135019][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.142220][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.178234][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.248056][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.270344][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.285045][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.292206][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.324880][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.332058][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.356823][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.398463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.405691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.436005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.443231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.530161][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.619077][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.674416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.681702][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.737061][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.744307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.589324][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.627489][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.799034][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.808051][ T5614] veth0_vlan: entered promiscuous mode [ 93.830909][ T5613] Bluetooth: hci2: command tx timeout [ 93.831606][ T5620] Bluetooth: hci1: command tx timeout [ 93.842095][ T5620] Bluetooth: hci0: command tx timeout [ 93.865212][ T5610] veth0_vlan: entered promiscuous mode [ 93.884429][ T5614] veth1_vlan: entered promiscuous mode [ 93.913117][ T5620] Bluetooth: hci3: command tx timeout [ 93.936178][ T5610] veth1_vlan: entered promiscuous mode [ 93.969396][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.031614][ T5614] veth0_macvtap: entered promiscuous mode [ 94.056420][ T5614] veth1_macvtap: entered promiscuous mode [ 94.067386][ T5617] veth0_vlan: entered promiscuous mode [ 94.107112][ T5617] veth1_vlan: entered promiscuous mode [ 94.135271][ T5610] veth0_macvtap: entered promiscuous mode [ 94.145253][ T5618] veth0_vlan: entered promiscuous mode [ 94.156361][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.167168][ T5610] veth1_macvtap: entered promiscuous mode [ 94.184893][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.221923][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233924][ T5618] veth1_vlan: entered promiscuous mode [ 94.263724][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.291584][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.299776][ T5617] veth0_macvtap: entered promiscuous mode [ 94.346197][ T5617] veth1_macvtap: entered promiscuous mode [ 94.401853][ T799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.477406][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.489563][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.507221][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.528566][ T5618] veth0_macvtap: entered promiscuous mode [ 94.559882][ T5618] veth1_macvtap: entered promiscuous mode [ 94.571932][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.607429][ T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.624180][ T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.660878][ T799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.672220][ T799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.683411][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.703995][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.733573][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.781061][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.807197][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.835327][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.850357][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.858765][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.882257][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893629][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.969526][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.993213][ T94] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.006891][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.153440][ T1034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186182][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.198852][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.310930][ T1034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.338892][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.366580][ T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.375348][ T94] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.408398][ T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.408473][ T94] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.473362][ T94] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.503471][ T94] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.621948][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.645306][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.687272][ T5778] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.707040][ T799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.916282][ T5620] Bluetooth: hci0: command tx timeout [ 95.916304][ T5613] Bluetooth: hci1: command tx timeout [ 95.925502][ T5620] Bluetooth: hci2: command tx timeout [ 95.991011][ T5620] Bluetooth: hci3: command tx timeout [ 100.268770][ T5951] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 100.268770][ T5951] [ 102.145258][ T6036] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.143389][ T6168] bonding: no command found in bonding_masters - use +ifname or -ifname [ 105.361860][ T6179] syz.1.202 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.814435][ T6199] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 106.252382][ T6216] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 106.263283][ T6216] net gretap0: uevent: failed to send synthetic uevent: -22 [ 106.408758][ T6225] bond0: no command found in slaves file - use +ifname or -ifname [ 107.754790][ T6282] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 107.780784][ T6282] pci 0000:00:01.3: PCI INT A: no GSI [ 108.195257][ T29] audit: type=1800 audit(1786656121.694:2): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.261" name="members" dev="configfs" ino=9645 res=0 errno=0 [ 108.337789][ T29] audit: type=1807 audit(1786656121.834:3): UNKNOWN=nl80211 res=0 [ 108.343832][ T6299] ima: policy update failed [ 108.371253][ T29] audit: type=1802 audit(1786656121.834:4): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.262" res=0 errno=0 [ 108.389716][ T29] audit: type=1802 audit(1786656121.864:5): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.262" res=0 errno=0 [ 108.464221][ T6304] hub 1-0:1.0: USB hub found [ 108.495147][ T6304] hub 1-0:1.0: 1 port detected [ 109.515338][ T6341] syz.0.278 (6341): attempted to duplicate a private mapping with mremap. This is not supported. [ 110.969325][ T6405] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.998045][ T6405] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.036275][ T6409] vhci_hcd vhci_hcd.0: invalid port number 13 [ 111.045369][ T6409] vhci_hcd vhci_hcd.0: invalid port number 13 [ 111.093148][ T6411] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.534012][ T6473] warning: `syz.0.346' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.009390][ T5620] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 113.017179][ T5620] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 114.129559][ T6536] block nbd0: NBD_DISCONNECT [ 114.953036][ T5620] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 117.031528][ T5620] Bluetooth: hci3: command 0x2016 tx timeout [ 117.146262][ T5613] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 117.205848][ T6649] nvme_fcloop: unknown parameter or missing value '' [ 117.452105][ T5613] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 117.459705][ T5613] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 117.727874][ T6669] mmap: syz.2.437 (6669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.785845][ T5613] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 119.127504][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 119.192325][ T4929] Bluetooth: hci0: command 0x2016 tx timeout [ 120.546717][ T6767] block2mtd: Using custom MTD label '' for dev [ 120.572070][ T6767] block2mtd: error: cannot open device [ 120.871879][ T5616] Bluetooth: hci1: command 0x2016 tx timeout [ 120.909935][ T6780] synth uevent: /module/null_blk: unknown uevent action string [ 120.945830][ T6782] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 120.946335][ T6781] ima: policy update failed [ 121.015955][ T29] audit: type=1802 audit(1786656134.514:6): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.491" res=0 errno=0 [ 121.272272][ T5616] Bluetooth: hci0: command 0x2016 tx timeout [ 122.964317][ T4929] Bluetooth: hci1: command 0x2016 tx timeout [ 124.069019][ T6898] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 127.548093][ T29] audit: type=1800 audit(1786656141.044:7): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="sr0" dev="devtmpfs" ino=2794 res=0 errno=0 [ 129.274745][ T7106] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 130.258273][ T7144] binder: binder_mmap: 7142 0-1000 bad vm_flags failed -1 [ 132.836832][ T7260] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 132.954415][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963890][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.227344][ T7277] bond0: invalid ARP target specified [ 134.230483][ T7321] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 134.446115][ T7331] i2c i2c-0: delete_device: Extra parameters [ 134.594601][ T7337] dyndbg: expected <4096 bytes into control [ 135.787486][ T7391] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 135.787486][ T7391] M' is too long [ 135.809479][ T7391] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 135.809479][ T7391] W ' is too long [ 136.386348][ T7418] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 136.520390][ T7424] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.476488][ T7469] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 138.148998][ T7500] program syz.1.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.302631][ T5620] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 138.603841][ T7516] aoe: can't write to that file. [ 139.865783][ T7575] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.915294][ T7575] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 141.354404][ T7643] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.691942][ T7657] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.699542][ T7657] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 142.189373][ T7683] : Can't lookup blockdev [ 145.193041][ T7817] batman_adv: Routing algorithm '' is not supported [ 149.278411][ T7993] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 149.297396][ T7993] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 149.799886][ T8016] serial 00:02: in use; can't configure [ 150.795727][ T8062] kAFS: Invalid Command on /proc/fs/afs/cells file [ 154.685059][ T8230] mmap: syz.1.1204 (8230): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 154.952353][ T8208] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 157.501659][ T8343] phram: not enough arguments [ 158.931068][ T8407] kAFS: unparsable volume name [ 159.384600][ T8427] ima: policy update failed [ 159.403702][ T29] audit: type=1802 audit(1786656172.904:8): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1302" res=0 errno=0 [ 160.958455][ T8498] kAFS: Invalid Command on /proc/fs/afs/cells file [ 161.526590][ T8526] Scaler: ================= START STATUS ================= [ 161.534259][ T8526] Scaler: ================== END STATUS ================== [ 163.092180][ T8595] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 163.118916][ T8595] CIFS mount error: No usable UNC path provided in device string! [ 163.118916][ T8595] [ 163.151327][ T8595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.529174][ T8653] queue_state_write: operation too long [ 164.535737][ T8653] queue_state_write: use 'run', 'start' or 'kick' [ 164.753999][ T8661] vhci_hcd vhci_hcd.2: invalid port number 16 [ 164.790669][ T8661] vhci_hcd vhci_hcd.2: invalid port number 16 [ 167.287972][ T8758] zram: Added device: zram1 [ 169.171232][ T8849] TCP: TCP_TX_DELAY enabled [ 170.427252][ T8906] bond0: invalid ARP target specified [ 170.871186][ T8927] bond0: invalid ARP target specified [ 170.962003][ T8930] smpboot: CPU 1 is now offline [ 173.957955][ T5620] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 173.967579][ T5620] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 175.414634][ T9071] ptp ptp0: only physical clock in use now [ 177.523301][ T9149] bond0: option arp_interval: invalid value () [ 177.554190][ T9149] bond0: option arp_interval: allowed values 0 - 2147483647 [ 178.139926][ T9167] kafs: addr_prefs: Invalid Command [ 179.116640][ T29] audit: type=1807 audit(1786656192.614:9): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 179.135522][ T9199] ima: policy update failed [ 179.200255][ T29] audit: type=1802 audit(1786656192.614:10): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1679" res=0 errno=0 [ 179.351625][ T29] audit: type=1802 audit(1786656192.674:11): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1679" res=0 errno=0 [ 180.854391][ T9258] Invalid input. Must be >= 4608 [ 182.464233][ T9309] block2mtd: device name too long [ 183.498659][ T9345] Invalid ELF header magic: != ELF [ 184.878522][ T9391] block2mtd: too many arguments [ 185.606244][ T9415] block2mtd: illegal erase size [ 186.086435][ T4929] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 186.094045][ T4929] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 187.138860][ T9409] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 187.174235][ T9452] kfence: disabled [ 188.421146][ T4929] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 188.428690][ T4929] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 189.777942][ T9531] aoe: invalid device specification [ 191.375279][ T9581] usbip-vudc usbip-vudc.0: gadget not bound [ 193.265824][ T4929] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 193.265855][ T4929] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 193.283433][ T4929] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 194.049841][ T9629] syz.0.1868 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 194.070962][ T9650] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 194.169566][ T9650] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 194.225138][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.0.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.225171][ T9629] Tainted: [L]=SOFTLOCKUP [ 194.225178][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.225194][ T9629] Call Trace: [ 194.225201][ T9629] [ 194.225208][ T9629] dump_stack_lvl+0x100/0x190 [ 194.225240][ T9629] dump_header+0xfb/0x606 [ 194.225263][ T9629] oom_kill_process.cold+0xd/0x330 [ 194.225297][ T9629] out_of_memory+0x340/0x14f0 [ 194.225323][ T9629] ? __pfx_out_of_memory+0x10/0x10 [ 194.225350][ T9629] mem_cgroup_out_of_memory+0xc6/0x130 [ 194.225375][ T9629] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 194.225405][ T9629] ? find_held_lock+0x2b/0x80 [ 194.225438][ T9629] ? do_raw_spin_unlock+0x145/0x1e0 [ 194.225486][ T9629] ? _raw_spin_unlock+0x28/0x50 [ 194.225519][ T9629] try_charge_memcg+0x6e5/0xdf0 [ 194.225560][ T9629] ? __pfx_try_charge_memcg+0x10/0x10 [ 194.225594][ T9629] ? find_held_lock+0x2b/0x80 [ 194.225622][ T9629] ? rcu_read_unlock+0x17/0x60 [ 194.225658][ T9629] ? rcu_read_unlock+0x17/0x60 [ 194.225694][ T9629] ? find_held_lock+0x2b/0x80 [ 194.225724][ T9629] ? rcu_read_unlock+0x17/0x60 [ 194.225766][ T9629] charge_memcg+0x187/0x1e0 [ 194.225802][ T9629] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 194.225830][ T9629] swap_cache_alloc_folio+0x548/0xc50 [ 194.225871][ T9629] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 194.225899][ T9629] ? swap_cache_get_folio+0x28d/0x360 [ 194.225926][ T9629] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 194.225953][ T9629] ? find_held_lock+0x2b/0x80 [ 194.225981][ T9629] ? mlock_drain_local+0x254/0x4e0 [ 194.226007][ T9629] ? mlock_drain_local+0x254/0x4e0 [ 194.226037][ T9629] swap_cache_read_folio+0x47/0x140 [ 194.226068][ T9629] swap_cluster_readahead+0x387/0x5f0 [ 194.226101][ T9629] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 194.226129][ T9629] ? __css_rstat_updated+0x1ce/0x5a0 [ 194.226180][ T9629] ? __lock_acquire+0x49f/0x1a40 [ 194.226201][ T9629] ? get_vma_policy+0x23d/0x3b0 [ 194.226240][ T9629] swapin_readahead+0x159/0x1200 [ 194.226284][ T9629] ? __pfx_swapin_readahead+0x10/0x10 [ 194.226319][ T9629] ? swap_table_get+0x10d/0x2c0 [ 194.226344][ T9629] ? swap_cache_get_folio+0x28d/0x360 [ 194.226371][ T9629] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 194.226397][ T9629] ? __pfx_softleaf_type+0x10/0x10 [ 194.226429][ T9629] ? do_swap_page+0xf98/0x5780 [ 194.226450][ T9629] do_swap_page+0xf98/0x5780 [ 194.226487][ T9629] ? __pfx_do_swap_page+0x10/0x10 [ 194.226510][ T9629] ? __lock_acquire+0x49f/0x1a40 [ 194.226535][ T9629] ? rcu_is_watching+0x12/0xc0 [ 194.226564][ T9629] ? __pte_offset_map+0x179/0x310 [ 194.226599][ T9629] __handle_mm_fault+0x192f/0x2a00 [ 194.226629][ T9629] ? reacquire_held_locks+0xce/0x1e0 [ 194.226651][ T9629] ? __pfx___handle_mm_fault+0x10/0x10 [ 194.226680][ T9629] ? lock_vma_under_rcu+0x17c/0x590 [ 194.226720][ T9629] handle_mm_fault+0x37b/0xa30 [ 194.226749][ T9629] do_user_addr_fault+0x5a3/0x12f0 [ 194.226792][ T9629] exc_page_fault+0x6f/0xd0 [ 194.226827][ T9629] asm_exc_page_fault+0x26/0x30 [ 194.226850][ T9629] RIP: 0033:0x7f0201f9ebf6 [ 194.226876][ T9629] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 194.226897][ T9629] RSP: 002b:00007ffc80dc3ff0 EFLAGS: 00010246 [ 194.226918][ T9629] RAX: 000000000002f424 RBX: 00007f0202225fa0 RCX: 000000000002f1e8 [ 194.226933][ T9629] RDX: 000000000000023c RSI: 0000000000000000 RDI: 00000000000003e8 [ 194.226947][ T9629] RBP: 00007f0202227da0 R08: 0021a261762464c4 R09: 0000000000000001 [ 194.226961][ T9629] R10: 000000000000912a R11: 0000000000000246 R12: 000000000002f4f0 [ 194.226975][ T9629] R13: 00007f020222609c R14: 000000000002f21c R15: 00007f0202226090 [ 194.227017][ T9629] [ 194.653581][ T9629] memory: usage 1772kB, limit 3072kB, failcnt 2093 [ 194.661033][ T9629] memory+swap: usage 1944kB, limit 9007199254740988kB, failcnt 0 [ 194.668768][ T9629] kmem: usage 1632kB, limit 9007199254740988kB, failcnt 0 [ 194.675997][ T9629] Memory cgroup stats for /syz0: [ 194.676366][ T9629] cache 0 [ 194.684311][ T9629] rss 8192 [ 194.687366][ T9629] rss_huge 0 [ 194.690619][ T9629] shmem 0 [ 194.693579][ T9629] mapped_file 0 [ 194.697041][ T9629] dirty 0 [ 194.699977][ T9629] writeback 0 [ 194.703321][ T9629] workingset_refault_anon 82 [ 194.707932][ T9629] workingset_refault_file 515 [ 194.712878][ T9629] swap 176128 [ 194.717322][ T9629] swapcached 5373952 [ 194.721944][ T9629] pgpgin 22540 [ 194.725320][ T9629] pgpgout 22532 [ 194.728792][ T9629] pgfault 85537 [ 194.732286][ T9629] pgmajfault 35 [ 194.735740][ T9629] inactive_anon 24576 [ 194.739713][ T9629] active_anon 8192 [ 194.743452][ T9629] inactive_file 0 [ 194.747085][ T9629] active_file 0 [ 194.750575][ T9629] unevictable 0 [ 194.754054][ T9629] hierarchical_memory_limit 3145728 [ 194.759255][ T9629] hierarchical_memsw_limit 9223372036854771712 [ 194.765455][ T9629] total_cache 0 [ 194.768917][ T9629] total_rss 8192 [ 194.772499][ T9629] total_rss_huge 0 [ 194.776241][ T9629] total_shmem 0 [ 194.781686][ T9629] total_mapped_file 0 [ 194.785684][ T9629] total_dirty 0 [ 194.789144][ T9629] total_writeback 0 [ 194.793099][ T9629] total_workingset_refault_anon 82 [ 194.798212][ T9629] total_workingset_refault_file 515 [ 194.803542][ T9629] total_swap 176128 [ 194.807353][ T9629] total_swapcached 5373952 [ 194.811823][ T9629] total_pgpgin 22540 [ 194.817598][ T9629] total_pgpgout 22532 [ 194.821624][ T9629] total_pgfault 85537 [ 194.825607][ T9629] total_pgmajfault 35 [ 194.829590][ T9629] total_inactive_anon 24576 [ 194.834138][ T9629] total_active_anon 8192 [ 194.838384][ T9629] total_inactive_file 0 [ 194.842680][ T9629] total_active_file 0 [ 194.846662][ T9629] total_unevictable 0 [ 194.850679][ T9629] anon_cost 0 [ 194.853964][ T9629] file_cost 0 [ 194.857325][ T9629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1868,pid=9629,uid=0 [ 194.874527][ T9629] Memory cgroup out of memory: Killed process 9629 (syz.0.1868) total-vm:104432kB, anon-rss:1252kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 194.981224][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.987552][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.067768][ T9650] raw: 00fff00000000000 dead000000000040 ffff888029af6000 0000000000000000 [ 196.127829][ T9650] raw: ffff888078000000 0000000000000002 00000001ffffffff 0000000000000000 [ 196.168997][ T9650] page dumped because: unmovable page [ 196.191206][ T9650] page_owner tracks the page as allocated [ 196.233506][ T9650] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5274, tgid 5274 (dhcpcd), ts 60289599129, free_ts 55021539158 [ 196.299123][ T9650] post_alloc_hook+0xfd/0x120 [ 196.317018][ T9650] get_page_from_freelist+0xf48/0x3530 [ 196.335061][ T9650] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 196.358678][ T9650] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 196.387020][ T9650] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 196.414719][ T9650] page_pool_alloc_netmems+0xc4/0x1a0 [ 196.433148][ T9650] page_pool_alloc_frag_netmem+0x21d/0xa10 [ 196.450431][ T9650] try_fill_recv+0x909/0x2950 [ 196.473351][ T9650] virtnet_open+0x2d5/0x9a0 [ 196.499226][ T9650] __dev_open+0x3ad/0x8f0 [ 196.518463][ T9650] __dev_change_flags+0x596/0x850 [ 196.548051][ T9650] netif_change_flags+0x8d/0x160 [ 196.578669][ T9650] dev_change_flags+0xba/0x260 [ 196.613755][ T9650] devinet_ioctl+0x110b/0x1f10 [ 196.640328][ T9650] inet_ioctl+0x3aa/0x3f0 [ 196.663936][ T9650] sock_do_ioctl+0x118/0x280 [ 196.682884][ T9650] page last free pid 4986 tgid 4986 stack trace: [ 196.714905][ T9650] __free_frozen_pages+0x79f/0x1090 [ 196.742243][ T9650] rcu_core+0x5a2/0x10d0 [ 196.765709][ T9650] handle_softirqs+0x1ea/0x9b0 [ 196.794639][ T9650] __irq_exit_rcu+0x162/0x210 [ 196.823924][ T9650] irq_exit_rcu+0x9/0x30 [ 196.851109][ T9650] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 196.875334][ T9650] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.884709][ T29] audit: type=1326 audit(1786656210.384:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.0.1908" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0201f9e0d9 code=0x0 [ 197.108984][ T9720] WARNING! power/level is deprecated; use power/control instead [ 199.955850][ T9810] capability: warning: `syz.0.1955' uses 32-bit capabilities (legacy support in use) [ 200.672786][ T4929] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 201.100264][ T4929] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 201.107975][ T4929] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 201.374396][ T9852] writes to the poll attribute are ignored. [ 201.412656][ T9852] please use driver specific parameters instead. [ 202.165503][ T9866] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 203.475070][ T9901] syz.3.1999: vm.laptop_mode is deprecated. Ignoring setting. [ 203.914816][ T9916] Setting dangerous option i915.mitigations - tainting kernel [ 205.445980][ T9959] kAFS: Invalid Command on /proc/fs/afs/cells file [ 208.142019][T10051] rnbd_client L213: map_device: Parameters missing [ 208.509779][T10063] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5614] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10063] [ 209.914523][ T5620] Bluetooth: hci1: command 0x2016 tx timeout [ 209.921010][ T5624] Bluetooth: hci3: command 0x2016 tx timeout [ 210.222228][T10110] ICMPv6: process `syz.1.2103' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 211.090362][ T5722] Process accounting resumed [ 211.836588][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 211.842707][ T5620] Bluetooth: hci0: command 0x2016 tx timeout [ 213.829856][T10226] bonding:  is being created... [ 215.458491][T10277] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 215.514765][T10277] cec cec26: uevent: failed to send synthetic uevent: -22 [ 216.452493][T10309] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 216.514267][T10309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 216.564303][T10309] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 216.620333][T10309] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 216.679112][ T5274] 8021q: adding VLAN 0 to HW filter on device  [ 216.687507][T10309] page dumped because: unmovable page [ 216.724664][T10309] page_owner tracks the page as allocated [ 216.768302][T10309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1557715286, free_ts 0 [ 216.858802][T10309] register_early_stack+0x74/0xaf [ 216.892016][T10309] init_page_owner+0x4c/0xa10 [ 216.916775][T10309] page_ext_init+0x71d/0x780 [ 216.949445][T10309] mm_core_init+0x229/0x270 [ 216.979962][T10309] page_owner free stack trace missing [ 217.381766][T10335] bonding:  is being created... [ 217.432896][T10335] bonding:  already exists [ 219.576512][ T29] audit: type=1800 audit(1786656233.074:13): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2237" name="discovery_nqn" dev="configfs" ino=22995 res=0 errno=0 [ 220.027728][T10420] writing to auto_msgmni has no effect [ 220.064819][T10395] syz.0.2230 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 220.176526][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.0.2230 Tainted: G U L syzkaller #0 PREEMPT(full) [ 220.176564][T10395] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 220.176572][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.176585][T10395] Call Trace: [ 220.176592][T10395] [ 220.176600][T10395] dump_stack_lvl+0x100/0x190 [ 220.176630][T10395] dump_header+0xfb/0x606 [ 220.176667][T10395] oom_kill_process.cold+0xd/0x330 [ 220.176693][T10395] out_of_memory+0x340/0x14f0 [ 220.176738][T10395] ? __pfx_out_of_memory+0x10/0x10 [ 220.176767][T10395] mem_cgroup_out_of_memory+0xc6/0x130 [ 220.176795][T10395] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 220.176820][T10395] ? find_held_lock+0x2b/0x80 [ 220.176859][T10395] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.176886][T10395] ? _raw_spin_unlock+0x28/0x50 [ 220.176918][T10395] try_charge_memcg+0x6e5/0xdf0 [ 220.176959][T10395] ? __pfx_try_charge_memcg+0x10/0x10 [ 220.176993][T10395] ? find_held_lock+0x2b/0x80 [ 220.177032][T10395] ? rcu_read_unlock+0x17/0x60 [ 220.177064][T10395] ? rcu_read_unlock+0x17/0x60 [ 220.177096][T10395] ? find_held_lock+0x2b/0x80 [ 220.177123][T10395] ? rcu_read_unlock+0x17/0x60 [ 220.177161][T10395] charge_memcg+0x187/0x1e0 [ 220.177214][T10395] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 220.177241][T10395] swap_cache_alloc_folio+0x548/0xc50 [ 220.177273][T10395] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 220.177306][T10395] ? swap_cache_get_folio+0x28d/0x360 [ 220.177332][T10395] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 220.177365][T10395] swap_cache_read_folio+0x47/0x140 [ 220.177414][T10395] swap_cluster_readahead+0x387/0x5f0 [ 220.177448][T10395] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 220.177478][T10395] ? clockevents_program_event+0x23e/0x820 [ 220.177517][T10395] ? __lock_acquire+0x49f/0x1a40 [ 220.177538][T10395] ? get_vma_policy+0x23d/0x3b0 [ 220.177577][T10395] swapin_readahead+0x159/0x1200 [ 220.177614][T10395] ? __pfx_swapin_readahead+0x10/0x10 [ 220.177648][T10395] ? swap_table_get+0x10d/0x2c0 [ 220.177673][T10395] ? swap_cache_get_folio+0x28d/0x360 [ 220.177700][T10395] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 220.177726][T10395] ? __pfx_softleaf_type+0x10/0x10 [ 220.177758][T10395] ? do_swap_page+0xf98/0x5780 [ 220.177779][T10395] do_swap_page+0xf98/0x5780 [ 220.177808][T10395] ? find_held_lock+0x2b/0x80 [ 220.177850][T10395] ? __pfx_do_swap_page+0x10/0x10 [ 220.177874][T10395] ? __lock_acquire+0x49f/0x1a40 [ 220.177899][T10395] ? rcu_is_watching+0x12/0xc0 [ 220.177929][T10395] ? __pte_offset_map+0x179/0x310 [ 220.177964][T10395] __handle_mm_fault+0x192f/0x2a00 [ 220.177994][T10395] ? reacquire_held_locks+0xce/0x1e0 [ 220.178017][T10395] ? __pfx___handle_mm_fault+0x10/0x10 [ 220.178046][T10395] ? lock_vma_under_rcu+0x17c/0x590 [ 220.178086][T10395] handle_mm_fault+0x37b/0xa30 [ 220.178115][T10395] do_user_addr_fault+0x5a3/0x12f0 [ 220.178157][T10395] exc_page_fault+0x6f/0xd0 [ 220.178191][T10395] asm_exc_page_fault+0x26/0x30 [ 220.178214][T10395] RIP: 0033:0x7f0201e6b92c [ 220.178233][T10395] Code: ea 32 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 220.178254][T10395] RSP: 002b:00007ffc80dc4020 EFLAGS: 00010206 [ 220.178273][T10395] RAX: 0000000000000000 RBX: 00007f0202225fa0 RCX: 0000555592864808 [ 220.178288][T10395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.178302][T10395] RBP: 00007f0202227da0 R08: 0000000000000000 R09: 0000000000000000 [ 220.178316][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000035ab5 [ 220.178329][T10395] R13: 00007f020222609c R14: 00000000000357de R15: 00007f0202226090 [ 220.178360][T10395] [ 220.586459][T10395] memory: usage 1228kB, limit 3072kB, failcnt 3044 [ 220.593290][T10395] memory+swap: usage 1408kB, limit 9007199254740988kB, failcnt 0 [ 220.601093][T10395] kmem: usage 476kB, limit 9007199254740988kB, failcnt 0 [ 220.608288][T10395] Memory cgroup stats for /syz0: [ 220.608451][T10395] cache 524288 [ 220.616804][T10395] rss 4096 [ 220.619876][T10395] rss_huge 0 [ 220.624965][T10395] shmem 0 [ 220.627922][T10395] mapped_file 4096 [ 220.631757][T10395] dirty 0 [ 220.634720][T10395] writeback 0 [ 220.638001][T10395] workingset_refault_anon 211 [ 220.642764][T10395] workingset_refault_file 1185 [ 220.647541][T10395] swap 184320 [ 220.651109][T10395] swapcached 6082560 [ 220.655057][T10395] pgpgin 26640 [ 220.658424][T10395] pgpgout 28550 [ 220.662016][T10395] pgfault 95579 [ 220.665516][T10395] pgmajfault 132 [ 220.669062][T10395] inactive_anon 8192 [ 220.672981][T10395] active_anon 16384 [ 220.676836][T10395] inactive_file 0 [ 220.680526][T10395] active_file 409600 [ 220.684429][T10395] unevictable 0 [ 220.687988][T10395] hierarchical_memory_limit 3145728 [ 220.693225][T10395] hierarchical_memsw_limit 9223372036854771712 [ 220.699445][T10395] total_cache 524288 [ 220.703416][T10395] total_rss 4096 [ 220.706966][T10395] total_rss_huge 0 [ 220.710793][T10395] total_shmem 0 [ 220.714267][T10395] total_mapped_file 4096 [ 220.718513][T10395] total_dirty 0 [ 220.722064][T10395] total_writeback 0 [ 220.727765][T10395] total_workingset_refault_anon 211 [ 220.733061][T10395] total_workingset_refault_file 1185 [ 220.738345][T10395] total_swap 184320 [ 220.742193][T10395] total_swapcached 6082560 [ 220.746653][T10395] total_pgpgin 26640 [ 220.750565][T10395] total_pgpgout 28550 [ 220.754539][T10395] total_pgfault 95579 [ 220.758566][T10395] total_pgmajfault 132 [ 220.762691][T10395] total_inactive_anon 8192 [ 220.767105][T10395] total_active_anon 16384 [ 220.771510][T10395] total_inactive_file 0 [ 220.775667][T10395] total_active_file 409600 [ 220.780085][T10395] total_unevictable 0 [ 220.784174][T10395] anon_cost 0 [ 220.787473][T10395] file_cost 0 [ 220.790845][T10395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2230,pid=10395,uid=0 [ 220.805820][T10395] Memory cgroup out of memory: Killed process 10395 (syz.0.2230) total-vm:104432kB, anon-rss:1244kB, file-rss:20788kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 222.035144][T10461] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.256286][T10533] Setting dangerous option i915.mitigations - tainting kernel [ 225.388362][T10571] [ 226.304034][T10604] ICMPv6: process `syz.0.2332' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 226.553827][T10612] kafs: addr_prefs: Too many elements in string [ 226.872757][T10616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.197684][T10616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.413818][T10616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.701870][T10616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.794696][T10687] i2c i2c-0: delete_device: Can't find device in list [ 230.029813][T10727] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 230.268948][T10733] synth uevent: /bus/mei: unknown uevent action string [ 230.630636][ T5613] Bluetooth: hci1: command 0x2016 tx timeout [ 230.639989][ T5697] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 230.668616][T10748] i2c i2c-0: delete_device: Can't parse I2C address [ 231.732183][T10784] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 232.711044][ T5613] Bluetooth: hci1: command 0x2016 tx timeout [ 232.720050][ T5697] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 232.893339][T10825] bond0: invalid ARP target specified [ 237.298997][T10975] bond0: no command found in slaves file - use +ifname or -ifname [ 241.244090][T11106] qrtr: Invalid version 13 [ 244.982820][T11237] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 245.882800][T11268] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 247.154851][T11314] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.202824][T11314] vhci_hcd vhci_hcd.3: invalid port number 0 [ 248.608154][T11361] usb usb36: usbfs: process 11361 (syz.3.2698) did not claim interface 0 before use [ 248.855693][ T29] audit: type=1400 audit(1786656262.344:14): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11368 comm="syz.1.2702" [ 249.920359][T11408] syz.3.2721 uses obsolete (PF_INET,SOCK_PACKET) [ 250.424674][T11422] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b188fa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 250.440342][T11422] Call Trace: [ 250.443638][T11422] [ 250.446578][T11422] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 250.453293][T11422] mce_cpu_restart+0xd5/0x1f0 [ 250.457993][T11422] ? __pfx_mce_cpu_restart+0x10/0x10 [ 250.463307][T11422] smp_call_function_many_cond+0x153b/0x1870 [ 250.469320][T11422] ? __pfx_mce_cpu_restart+0x10/0x10 [ 250.474635][T11422] ? preempt_schedule_thunk+0x16/0x40 [ 250.480046][T11422] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 250.485976][T11422] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 250.492334][T11422] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 250.498350][T11422] ? __timer_delete_sync+0x151/0x1c0 [ 250.503662][T11422] ? __pfx_mce_cpu_restart+0x10/0x10 [ 250.508984][T11422] on_each_cpu_cond_mask+0x40/0x90 [ 250.514130][T11422] set_bank+0x240/0x3a0 [ 250.518303][T11422] ? __pfx_set_bank+0x10/0x10 [ 250.522999][T11422] ? find_held_lock+0x2b/0x80 [ 250.527697][T11422] ? sysfs_file_kobj+0xe4/0x290 [ 250.532589][T11422] ? sysfs_file_kobj+0xe4/0x290 [ 250.537477][T11422] ? __pfx_set_bank+0x10/0x10 [ 250.542177][T11422] dev_attr_store+0x58/0x80 [ 250.546727][T11422] ? __pfx_dev_attr_store+0x10/0x10 [ 250.551957][T11422] sysfs_kf_write+0xf2/0x150 [ 250.556585][T11422] kernfs_fop_write_iter+0x3e0/0x5f0 [ 250.561902][T11422] ? __pfx_sysfs_kf_write+0x10/0x10 [ 250.567151][T11422] vfs_write+0x6ac/0x1050 [ 250.571501][T11422] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 250.577439][T11422] ? __pfx_vfs_write+0x10/0x10 [ 250.582251][T11422] ksys_write+0x12a/0x250 [ 250.586593][T11422] ? __pfx_ksys_write+0x10/0x10 [ 250.591489][T11422] do_syscall_64+0x115/0x840 [ 250.596110][T11422] ? clear_bhb_loop+0x70/0xc0 [ 250.600812][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.606723][T11422] RIP: 0033:0x7f910139e0d9 [ 250.611164][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.630779][T11422] RSP: 002b:00007f9102224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.639218][T11422] RAX: ffffffffffffffda RBX: 00007f9101625fa0 RCX: 00007f910139e0d9 [ 250.647205][T11422] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 250.655185][T11422] RBP: 00007f9101435024 R08: 0000000000000000 R09: 0000000000000000 [ 250.663167][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.671144][T11422] R13: 00007f9101626038 R14: 00007f9101625fa0 R15: 00007ffe96bb58c8 [ 250.679156][T11422] [ 250.908640][T11432] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 253.968248][T11534] ecryptfs_miscdev_write: Error while inspecting packet size [ 255.833350][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839696][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.908855][T11606] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2816'. [ 255.929455][T11606] Zero length message leads to an empty skb [ 256.907313][T11635] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2830'. [ 257.519613][T11656] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 260.957223][T11763] FAULT_INJECTION: forcing a failure. [ 260.957223][T11763] name failslab, interval 1, probability 0, space 0, times 1 [ 260.980629][T11764] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2887'. [ 261.016601][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.1.2888 Tainted: G U L syzkaller #0 PREEMPT(full) [ 261.016639][T11763] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 261.016647][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.016660][T11763] Call Trace: [ 261.016670][T11763] [ 261.016677][T11763] dump_stack_lvl+0x100/0x190 [ 261.016707][T11763] should_fail_ex.cold+0x5/0xa [ 261.016732][T11763] should_failslab+0xc2/0x120 [ 261.016765][T11763] __kmalloc_cache_noprof+0x91/0x6c0 [ 261.016790][T11763] ? proc_self_get_link+0x189/0x1f0 [ 261.016816][T11763] proc_self_get_link+0x189/0x1f0 [ 261.016839][T11763] pick_link+0xac2/0x13c0 [ 261.016872][T11763] ? __pfx_proc_self_get_link+0x10/0x10 [ 261.016897][T11763] step_into_slowpath+0x9ba/0xf90 [ 261.016938][T11763] ? __pfx_step_into_slowpath+0x10/0x10 [ 261.016977][T11763] ? lookup_fast+0x2da/0x600 [ 261.017009][T11763] ? inode_permission+0x374/0x620 [ 261.017049][T11763] link_path_walk+0xf28/0x1cc0 [ 261.017093][T11763] path_openat+0x1c9/0x4280 [ 261.017116][T11763] ? __kasan_slab_alloc+0x89/0x90 [ 261.017146][T11763] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 261.017174][T11763] ? do_getname+0x35/0x390 [ 261.017201][T11763] ? __x64_sys_openat+0x12d/0x210 [ 261.017241][T11763] ? __pfx_path_openat+0x10/0x10 [ 261.017272][T11763] do_file_open+0x20e/0x430 [ 261.017298][T11763] ? __pfx_do_file_open+0x10/0x10 [ 261.017340][T11763] ? alloc_fd+0x471/0x7a0 [ 261.017364][T11763] ? do_getname+0x191/0x390 [ 261.017396][T11763] do_sys_openat2+0x10f/0x1e0 [ 261.017427][T11763] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.017459][T11763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.017503][T11763] __x64_sys_openat+0x12d/0x210 [ 261.017535][T11763] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.017577][T11763] do_syscall_64+0x115/0x840 [ 261.017609][T11763] ? clear_bhb_loop+0x70/0xc0 [ 261.017636][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.017659][T11763] RIP: 0033:0x7f910139e0d9 [ 261.017677][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.017698][T11763] RSP: 002b:00007f9102224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.017719][T11763] RAX: ffffffffffffffda RBX: 00007f9101625fa0 RCX: 00007f910139e0d9 [ 261.017733][T11763] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 261.017747][T11763] RBP: 00007f9101435024 R08: 0000000000000000 R09: 0000000000000000 [ 261.017761][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.017774][T11763] R13: 00007f9101626038 R14: 00007f9101625fa0 R15: 00007ffe96bb58c8 [ 261.017802][T11763] [ 261.686555][T11780] netlink: zone id is out of range [ 261.707316][T11780] netlink: zone id is out of range [ 261.725995][T11780] netlink: zone id is out of range [ 261.746260][T11780] netlink: zone id is out of range [ 261.759427][T11780] netlink: zone id is out of range [ 261.776018][T11780] netlink: zone id is out of range [ 261.787708][T11780] netlink: zone id is out of range [ 261.801302][T11780] netlink: zone id is out of range [ 261.817105][T11780] netlink: zone id is out of range [ 263.301596][T11831] ksmbd: Unknown IPC event: 14, ignore. [ 264.213438][ T5613] Bluetooth: hci1: ISO packet for unknown connection handle 4095 [ 269.545700][T12025] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 272.851511][T12112] &#$@\]\-: entered promiscuous mode [ 273.263032][T12122] net_ratelimit: 48 callbacks suppressed [ 273.263050][T12122] netlink: Unknown nat attribute (0) [ 274.131560][T12153] netlink: 'syz.0.3073': attribute type 2 has an invalid length. [ 274.166970][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'. [ 274.465367][T12162] MTRR 1 not used [ 276.308605][T12197] netlink: 'syz.2.3093': attribute type 23 has an invalid length. [ 278.442992][T12260] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 278.970433][T12280] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 280.205405][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 280.634131][ T5613] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 280.634162][ T5613] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 280.649277][ T5613] Bluetooth: hci3: Dropping invalid advertising data [ 280.657842][ T5613] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 280.657873][ T5613] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 280.665082][ T5613] Bluetooth: hci3: unknown advertising packet type: 0xee [ 280.975613][T12338] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 281.019659][T12333] netlink: Failed to add  helper -22 [ 281.786272][T12360] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 283.918492][T12416] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 285.949024][T12471] netlink: 'syz.3.3223': attribute type 2 has an invalid length. [ 287.380106][T12519] netlink: 'syz.2.3246': attribute type 1 has an invalid length. [ 288.200402][T12543] nbd: illegal input index -1024 [ 290.090292][T12608] tipc: Started in network mode [ 290.117440][T12608] tipc: Node identity ee00, cluster identity 4711 [ 290.145383][T12608] tipc: Node number set to 60928 [ 291.455499][ T5613] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 291.498249][ T5613] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 291.506082][ T5613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 291.515555][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: kworker/u9:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 291.515593][ T5613] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 291.515602][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.515618][ T5613] Workqueue: hci3 hci_rx_work [ 291.515652][ T5613] Call Trace: [ 291.515659][ T5613] [ 291.515667][ T5613] dump_stack_lvl+0x100/0x190 [ 291.515696][ T5613] sysfs_warn_dup.cold+0x1c/0x28 [ 291.515734][ T5613] sysfs_create_dir_ns+0x24b/0x2b0 [ 291.515773][ T5613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 291.515811][ T5613] ? find_held_lock+0x2b/0x80 [ 291.515842][ T5613] ? kobject_add_internal+0x25f/0x930 [ 291.515869][ T5613] ? kobject_add_internal+0x25f/0x930 [ 291.515898][ T5613] ? do_raw_spin_unlock+0x145/0x1e0 [ 291.515928][ T5613] kobject_add_internal+0x2c8/0x930 [ 291.515960][ T5613] kobject_add+0x16a/0x1e0 [ 291.515989][ T5613] ? __pfx_kobject_add+0x10/0x10 [ 291.516015][ T5613] ? class_to_subsys+0x10f/0x150 [ 291.516044][ T5613] ? kobject_put+0xb9/0x640 [ 291.516069][ T5613] ? _raw_spin_unlock+0x28/0x50 [ 291.516106][ T5613] device_add+0x294/0x1970 [ 291.516128][ T5613] ? __pfx_dev_set_name+0x10/0x10 [ 291.516155][ T5613] ? __pfx_device_add+0x10/0x10 [ 291.516178][ T5613] ? mgmt_send_event_skb+0x2fb/0x460 [ 291.516245][ T5613] hci_conn_add_sysfs+0x1a3/0x260 [ 291.516287][ T5613] le_conn_complete_evt+0x11eb/0x1f60 [ 291.516331][ T5613] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 291.516364][ T5613] ? __pfx_bt_warn+0x10/0x10 [ 291.516386][ T5613] ? hci_event_packet+0x186/0xcd0 [ 291.516426][ T5613] hci_le_conn_complete_evt+0x23c/0x3a0 [ 291.516462][ T5613] ? skb_pull_data+0x15f/0x1e0 [ 291.516491][ T5613] hci_le_meta_evt+0x34a/0x5f0 [ 291.516528][ T5613] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 291.516567][ T5613] hci_event_packet+0x51c/0xcd0 [ 291.516601][ T5613] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 291.516641][ T5613] ? __pfx_hci_event_packet+0x10/0x10 [ 291.516678][ T5613] ? kcov_remote_start+0x384/0x670 [ 291.516715][ T5613] ? lockdep_hardirqs_on+0x78/0x100 [ 291.516758][ T5613] hci_rx_work+0x451/0xfc0 [ 291.516796][ T5613] process_one_work+0xa23/0x1940 [ 291.516846][ T5613] ? __pfx_process_one_work+0x10/0x10 [ 291.516901][ T5613] ? __pfx_hci_rx_work+0x10/0x10 [ 291.516936][ T5613] worker_thread+0x5ef/0xe50 [ 291.516982][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 291.517020][ T5613] ? kthread+0x13a/0x450 [ 291.517053][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 291.517088][ T5613] kthread+0x370/0x450 [ 291.517121][ T5613] ? __pfx_kthread+0x10/0x10 [ 291.517157][ T5613] ret_from_fork+0x72b/0xd50 [ 291.517190][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 291.517228][ T5613] ? __switch_to+0x800/0x10f0 [ 291.517250][ T5613] ? __switch_to_asm+0x39/0x70 [ 291.517285][ T5613] ? __pfx_kthread+0x10/0x10 [ 291.517322][ T5613] ret_from_fork_asm+0x1a/0x30 [ 291.517371][ T5613] [ 291.517415][ T5613] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 291.844981][ T5613] Bluetooth: hci3: failed to register connection device [ 293.499495][T12696] openvswitch: netlink: IP tunnel TTL not specified. [ 293.511473][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 295.590885][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 297.672158][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 297.839589][T12845] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.593650][T12903] nbd: must specify an index to disconnect [ 299.751126][ T5616] Bluetooth: hci3: command 0x2016 tx timeout [ 301.939830][T12973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.594083][T13002] netlink: zone id is out of range [ 305.386929][T13094] process 'syz.3.3519' launched '/dev/fd/3' with NULL argv: empty string added [ 305.542983][T13100] netlink: Invalid conntrack helper [ 306.449667][T13132] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3537'. [ 307.038566][T13145] openvswitch: netlink: Missing valid actions attribute. [ 307.522152][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 307.567009][T13157] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 311.122678][T13254] syz.2.3596 (13254) used greatest stack depth: 18680 bytes left [ 313.118173][T13340] openvswitch: netlink: Multiple metadata blocks provided [ 313.607122][ T5616] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 315.070712][T13408] netlink: 'syz.0.3668': attribute type 2 has an invalid length. [ 315.139133][T13412] : entered promiscuous mode [ 317.273855][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280229][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.210080][T13621] : entered promiscuous mode [ 321.627599][T13636] netlink: 'syz.0.3777': attribute type 11 has an invalid length. [ 321.666097][T13636] netlink: 'syz.0.3777': attribute type 11 has an invalid length. [ 321.703223][T13636] netlink: 'syz.0.3777': attribute type 11 has an invalid length. [ 325.523012][ T5616] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 325.568393][ T5616] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 325.576156][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 325.592599][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: kworker/u9:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 325.592639][ T5616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 325.592648][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.592664][ T5616] Workqueue: hci0 hci_rx_work [ 325.592700][ T5616] Call Trace: [ 325.592707][ T5616] [ 325.592716][ T5616] dump_stack_lvl+0x100/0x190 [ 325.592746][ T5616] sysfs_warn_dup.cold+0x1c/0x28 [ 325.592785][ T5616] sysfs_create_dir_ns+0x24b/0x2b0 [ 325.592826][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 325.592869][ T5616] ? find_held_lock+0x2b/0x80 [ 325.592901][ T5616] ? kobject_add_internal+0x25f/0x930 [ 325.592929][ T5616] ? kobject_add_internal+0x25f/0x930 [ 325.592960][ T5616] ? do_raw_spin_unlock+0x145/0x1e0 [ 325.592991][ T5616] kobject_add_internal+0x2c8/0x930 [ 325.593024][ T5616] kobject_add+0x16a/0x1e0 [ 325.593052][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 325.593086][ T5616] ? class_to_subsys+0x10f/0x150 [ 325.593116][ T5616] ? kobject_put+0xb9/0x640 [ 325.593140][ T5616] ? _raw_spin_unlock+0x28/0x50 [ 325.593179][ T5616] device_add+0x294/0x1970 [ 325.593202][ T5616] ? __pfx_dev_set_name+0x10/0x10 [ 325.593230][ T5616] ? __pfx_device_add+0x10/0x10 [ 325.593253][ T5616] ? mgmt_send_event_skb+0x2fb/0x460 [ 325.593297][ T5616] hci_conn_add_sysfs+0x1a3/0x260 [ 325.593338][ T5616] le_conn_complete_evt+0x11eb/0x1f60 [ 325.593381][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 325.593414][ T5616] ? __pfx_bt_warn+0x10/0x10 [ 325.593436][ T5616] ? hci_event_packet+0x186/0xcd0 [ 325.593476][ T5616] hci_le_conn_complete_evt+0x23c/0x3a0 [ 325.593513][ T5616] ? skb_pull_data+0x15f/0x1e0 [ 325.593542][ T5616] hci_le_meta_evt+0x34a/0x5f0 [ 325.593579][ T5616] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 325.593632][ T5616] hci_event_packet+0x51c/0xcd0 [ 325.593677][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 325.593711][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 325.593745][ T5616] ? kcov_remote_start+0x384/0x670 [ 325.593778][ T5616] ? lockdep_hardirqs_on+0x78/0x100 [ 325.593817][ T5616] hci_rx_work+0x451/0xfc0 [ 325.593852][ T5616] process_one_work+0xa23/0x1940 [ 325.593909][ T5616] ? __pfx_process_one_work+0x10/0x10 [ 325.593948][ T5616] ? __pfx_hci_rx_work+0x10/0x10 [ 325.593978][ T5616] worker_thread+0x5ef/0xe50 [ 325.594019][ T5616] ? kthread+0x13a/0x450 [ 325.594047][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 325.594082][ T5616] kthread+0x370/0x450 [ 325.594111][ T5616] ? __pfx_kthread+0x10/0x10 [ 325.594141][ T5616] ret_from_fork+0x72b/0xd50 [ 325.594192][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 325.594220][ T5616] ? rcu_is_watching+0x12/0xc0 [ 325.594248][ T5616] ? __switch_to+0x800/0x10f0 [ 325.594267][ T5616] ? __switch_to_asm+0x39/0x70 [ 325.594311][ T5616] ? __pfx_kthread+0x10/0x10 [ 325.594341][ T5616] ret_from_fork_asm+0x1a/0x30 [ 325.594383][ T5616] [ 325.594442][ T5616] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 325.920296][ T5616] Bluetooth: hci0: failed to register connection device [ 326.215431][T13780] sctp: [Deprecated]: syz.3.3844 (pid 13780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.215431][T13780] Use struct sctp_sack_info instead [ 327.264682][T13810] netlink: NAT attribute has 5 unknown bytes [ 327.591509][ T5616] Bluetooth: hci0: command 0x2016 tx timeout [ 328.350741][T13850] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 328.418852][T13854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.759994][T13846] could not allocate digest TFM handle [ 329.025810][T13874] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 329.670803][ T5613] Bluetooth: hci0: command 0x2016 tx timeout [ 329.868992][T13906] nfsd: Unknown parameter 'batadv' [ 330.606846][T13934] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 330.786592][T13940] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 330.883672][T13945] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3921'. [ 330.895912][T13946] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 331.750700][ T5613] Bluetooth: hci0: command 0x2016 tx timeout [ 332.287629][T13998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 332.609860][T14011] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 333.830813][ T5616] Bluetooth: hci0: command 0x2016 tx timeout [ 334.421531][T14066] netlink: ct family unspecified [ 335.036696][T14089] netlink: 'syz.3.3993': attribute type 4 has an invalid length. [ 335.065850][T14089] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 336.033014][T14130] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 337.745878][T14191] netlink: 'syz.1.4041': attribute type 1 has an invalid length. [ 339.309042][ T29] audit: type=1107 audit(1786656352.804:15): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 339.369848][ T29] audit: type=1107 audit(1786656352.834:16): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 340.053778][T14270] .^: entered promiscuous mode [ 340.168697][T14272] openvswitch: netlink: IP tunnel dst address not specified [ 340.596989][T14288] No such timeout policy "" [ 340.617697][T14288] netlink: Failed to associated timeout policy '' [ 341.194043][T14308] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 341.514859][T14322] netlink: set zone limit has 4 unknown bytes [ 342.586163][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4118'. [ 342.625390][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4119'. [ 343.009494][T14368] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 344.087538][ T29] audit: type=1326 audit(1786656357.584:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.0.4124" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0201f9e0d9 code=0x0 [ 344.993013][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4161'. [ 346.626996][T14494] netlink: 'syz.0.4183': attribute type 2 has an invalid length. [ 347.310688][T14519] ======================================================= [ 347.310688][T14519] WARNING: The mand mount option has been deprecated and [ 347.310688][T14519] and is ignored by this kernel. Remove the mand [ 347.310688][T14519] option from the mount to silence this warning. [ 347.310688][T14519] ======================================================= [ 347.924979][T14539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4205'. [ 350.325731][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4239'. [ 351.131655][T14652] netlink: 'syz.0.4255': attribute type 1 has an invalid length. [ 351.557377][T14666] netlink: 'syz.1.4262': attribute type 11 has an invalid length. [ 351.585066][T14666] netlink: 'syz.1.4262': attribute type 11 has an invalid length. [ 351.608050][T14666] netlink: 'syz.1.4262': attribute type 11 has an invalid length. [ 351.626574][T14666] netlink: 'syz.1.4262': attribute type 11 has an invalid length. [ 351.928185][T14681] netlink: 'syz.3.4269': attribute type 11 has an invalid length. [ 351.965387][T14681] netlink: 'syz.3.4269': attribute type 11 has an invalid length. [ 352.007700][T14681] netlink: 'syz.3.4269': attribute type 11 has an invalid length. [ 352.725993][T14703] openvswitch: netlink: IP tunnel dst address not specified [ 352.957269][T14711] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 353.498459][T14734] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 354.249658][T14759] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 355.649436][T14807] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.843148][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 355.858613][T14815] netlink: 'syz.1.4331': attribute type 2 has an invalid length. [ 356.510105][T14841] block nbd2: not configured, cannot reconfigure [ 357.914052][T14888] openvswitch: netlink: Flow key attribute not present in set flow. [ 359.310252][ T5616] Bluetooth: hci0: SCO packet too small [ 360.334524][T14970] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 360.371884][T14970] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 360.428626][T14970] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 360.817905][T14988] nbd: must specify a device to reconfigure [ 361.204406][T15002] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 364.331751][T15122] unsupported nla_type 113 [ 365.858040][T15169] netlink: Invalid conntrack timeout [ 367.074345][T15215] netlink: Unknown conntrack attr (type=7942, max=9) [ 367.643813][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4530'. [ 367.688109][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4531'. [ 368.492420][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 369.220227][T15300] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 371.890110][T15390] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 372.292711][ T5616] Bluetooth: hci1: ACL packet too small [ 372.394708][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4612'. [ 372.839100][ T29] audit: type=1326 audit(4294967319.100:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.3.4621" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f686bf9e0d9 code=0x0 [ 374.253289][T15481] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 375.240466][T15516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 376.139270][T15552] openvswitch: netlink: Message has 4 unknown bytes. [ 378.098233][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4711'. [ 378.712326][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.721776][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.200802][T15664] netlink: 'syz.1.4732': attribute type 1 has an invalid length. [ 381.061301][T15727] netlink: 'syz.3.4761': attribute type 1 has an invalid length. [ 381.537000][T15738] netlink: 'syz.3.4766': attribute type 11 has an invalid length. [ 383.008159][T15791] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 383.044280][T15791] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 384.099487][T15830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4810'. [ 384.150156][T15830] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4810'. [ 384.857177][T15857] netlink: Setting conntrack mark requires 'commit' flag. [ 385.710260][T15892] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 385.736161][T15892] nbd: error processing sock list [ 390.252225][ T5714] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 390.916601][T16057] netlink: 'syz.1.4918': attribute type 12 has an invalid length. [ 392.530614][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4939'. [ 392.574913][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4939'. [ 393.799601][T16148] IPVS: length: 131 != 8 [ 395.231426][ T5616] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 395.413733][T16190] HSR: entered promiscuous mode [ 396.140998][T16215] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.4994:16215 [ 396.326021][T16221] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 396.393047][T16225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4999'. [ 397.592845][T16261] openvswitch: netlink: Flow key attr not present in new flow. [ 397.686235][T16267] netlink: 'syz.2.5019': attribute type 1 has an invalid length. [ 397.765231][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5020'. [ 400.249295][T16361] openvswitch: netlink: Key type 261 is out of range max 32 [ 400.873191][T16381] NFSD: Failed to start, no listeners configured. [ 401.160117][T16390] netlink: 178 bytes leftover after parsing attributes in process `syz.3.5078'. [ 401.462437][T16403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.483609][T16406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.876844][T16463] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 404.048928][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5135'. [ 404.094645][T16510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.771539][T16582] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.042701][T16628] netlink: 'syz.0.5191': attribute type 2 has an invalid length. [ 407.400210][T16640] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 407.765388][T16652] openvswitch: netlink: Key type 29 is not supported [ 408.118725][T16666] nbd: must specify a size in bytes for the device [ 409.539203][T16722] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 410.912012][T16776] HfR: entered promiscuous mode [ 413.695037][T16889] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 413.784682][T16887] NFSD: Failed to start, no listeners configured. [ 417.599200][T17002] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 431.558913][ T5616] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 431.576534][ T5616] Bluetooth: hci3: Dropping invalid advertising data [ 431.583288][ T5616] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 431.583309][ T5616] Bluetooth: hci3: Dropping invalid advertising data [ 431.597165][ T5616] Bluetooth: hci3: unknown advertising packet type: 0x79 [ 431.597203][ T5616] Bluetooth: hci3: Malformed LE Event: 0x02 [ 432.729215][T17492] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.150132][T17538] netlink: Unknown NAT attribute (type=262, max=9) [ 435.393147][T17580] openvswitch: netlink: IPv4 tunnel dst address is zero [ 436.097547][T17597] netlink: 'syz.1.5651': attribute type 2 has an invalid length. [ 436.750077][T17616] netlink: 'syz.1.5660': attribute type 3 has an invalid length. [ 437.569255][T17645] netlink: 'syz.2.5673': attribute type 3 has an invalid length. [ 438.219832][T17658] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 439.284744][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5696'. [ 439.713922][ T5616] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 440.025132][T17718] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5709'. [ 440.154537][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.164336][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.368087][T17729] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 440.475247][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5716'. [ 441.922628][T17778] netlink: 'syz.3.5736': attribute type 11 has an invalid length. [ 442.076238][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5739'. [ 443.414383][T17822] netlink: 'syz.2.5758': attribute type 1 has an invalid length. [ 444.359838][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5770'. [ 444.999757][T17873] bridge0: port 3(syz_tun) entered blocking state [ 445.024949][T17873] bridge0: port 3(syz_tun) entered disabled state [ 445.052349][T17873] syz_tun: entered allmulticast mode [ 445.074245][T17873] syz_tun: entered promiscuous mode [ 445.096522][T17873] bridge0: port 3(syz_tun) entered blocking state [ 445.104498][T17873] bridge0: port 3(syz_tun) entered forwarding state [ 445.533550][T17889] openvswitch: netlink: Multiple metadata blocks provided [ 446.700014][T17927] sctp: [Deprecated]: syz.3.5806 (pid 17927) Use of int in max_burst socket option. [ 446.700014][T17927] Use struct sctp_assoc_value instead [ 447.141791][T17936] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 447.148954][T17936] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 447.970015][T17955] tunl0: entered allmulticast mode [ 448.048284][T17959] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.5820'. [ 452.728314][T18101] netlink: 'syz.1.5889': attribute type 23 has an invalid length. [ 452.897187][T18106] netlink: 'syz.1.5891': attribute type 33 has an invalid length. [ 454.515382][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5917'. [ 454.730703][ T29] audit: type=1800 audit(4294967322.110:20): pid=18166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5928" name=22050820 dev="tmpfs" ino=7793 res=0 errno=0 [ 456.522836][T18203] NFSD: Failed to start, no listeners configured. [ 464.815245][T17512] syz.0.5611 (17512) used greatest stack depth: 18440 bytes left [ 464.920013][T18342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.065392][T18419] netlink: 5316 bytes leftover after parsing attributes in process `syz.1.6034'. [ 468.017606][T18447] NFSD: Failed to start, no listeners configured. [ 468.102293][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6049'. [ 468.172384][T18456] netlink: 334 bytes leftover after parsing attributes in process `syz.1.6051'. [ 468.827612][ T29] audit: type=1800 audit(4294967336.210:21): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6061" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 469.012154][T18483] bridge0: port 3(syz_tun) entered blocking state [ 469.033822][T18483] bridge0: port 3(syz_tun) entered disabled state [ 469.058756][T18483] syz_tun: entered allmulticast mode [ 469.079843][T18483] syz_tun: entered promiscuous mode [ 469.102601][T18483] bridge0: port 3(syz_tun) entered blocking state [ 469.109155][T18483] bridge0: port 3(syz_tun) entered forwarding state [ 470.043641][T18507] sctp: [Deprecated]: syz.1.6075 (pid 18507) Use of int in maxseg socket option. [ 470.043641][T18507] Use struct sctp_assoc_value instead [ 470.484395][T18521] NFSD: Failed to start, no listeners configured. [ 470.689474][T18530] netlink: 206 bytes leftover after parsing attributes in process `syz.3.6086'. [ 472.165242][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6100'. [ 473.450874][T18610] tunl0: entered allmulticast mode [ 473.624037][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6122'. [ 476.209367][T18675] netlink: 29 bytes leftover after parsing attributes in process `syz.3.6147'. [ 480.237058][T18781] ovs_?: entered promiscuous mode [ 480.606736][T18788] nbd: socks must be embedded in a SOCK_ITEM attr [ 481.087679][T18810] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6206'. [ 483.816220][T18893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6243'. [ 484.428750][T18913] ovs_?: entered promiscuous mode [ 485.513383][T18944] ovs_?: entered promiscuous mode [ 486.550148][T18976] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6279'. [ 487.521093][T19004] ovs_?: entered promiscuous mode [ 488.098495][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6300'. [ 488.539557][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6306'. [ 489.006220][T19043] openvswitch: ovs_?: Dropping previously announced user features [ 489.675807][T19066] netlink: 'syz.0.6318': attribute type 1 has an invalid length. [ 489.720354][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6318'. [ 489.753230][T19066] netlink: 'syz.0.6318': attribute type 1 has an invalid length. [ 491.477214][ T5616] Bluetooth: hci0: Malformed HCI Event [ 492.146345][T19130] bridge0: port 4(dummy0) entered blocking state [ 492.177901][T19130] bridge0: port 4(dummy0) entered disabled state [ 492.209612][T19130] dummy0: entered allmulticast mode [ 492.244580][T19130] dummy0: entered promiscuous mode [ 492.279780][T19130] bridge0: port 4(dummy0) entered blocking state [ 492.286287][T19130] bridge0: port 4(dummy0) entered forwarding state [ 492.967002][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6360'. [ 493.041222][T19158] openvswitch: ovs_?: Dropping previously announced user features [ 494.023825][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6374'. [ 494.640222][T19208] openvswitch: ovs_?: Dropping previously announced user features [ 495.205288][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 497.725488][T19295] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 499.860978][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 501.593822][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.601702][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.428986][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 503.973900][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6499'. [ 505.230129][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6512'. [ 506.261998][T19527] NFSD: Failed to start, no listeners configured. [ 506.933395][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6533'. [ 507.157864][T19555] netlink: 82 bytes leftover after parsing attributes in process `syz.2.6536'. [ 509.493869][T19611] bridge0: port 5(veth0_to_bridge) entered blocking state [ 509.541469][T19611] bridge0: port 5(veth0_to_bridge) entered disabled state [ 509.578511][T19611] veth0_to_bridge: entered allmulticast mode [ 509.627675][T19611] veth0_to_bridge: entered promiscuous mode [ 509.649709][T19611] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 509.712046][T19611] bridge0: port 5(veth0_to_bridge) entered blocking state [ 509.720086][T19611] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 510.376925][T19636] netlink: 338 bytes leftover after parsing attributes in process `syz.1.6570'. [ 511.361889][T19652] NFSD: Failed to start, no listeners configured. [ 511.883250][T19668] sctp: [Deprecated]: syz.3.6583 (pid 19668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.883250][T19668] Use struct sctp_sack_info instead [ 513.905191][T19722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6614'. [ 514.876310][ T29] audit: type=1804 audit(4294967382.250:22): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6610" name="file0" dev="tmpfs" ino=9042 res=1 errno=0 [ 521.655160][ T29] audit: type=1804 audit(4294967389.030:23): pid=19878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6669" name="file0" dev="tmpfs" ino=8928 res=1 errno=0 [ 524.212962][ T29] audit: type=1804 audit(4294967391.590:24): pid=19922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6688" name="file0" dev="tmpfs" ino=9360 res=1 errno=0 [ 527.086318][T19991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6717'. [ 527.848562][T20006] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5610] was attempted by "i/(Dš uB `eQYYZׅ(i#;'SҚxs\x09[?o\x07r KIV4(>OhsƎ]ࢤ9y_@{wswN1e]\x0a5(j\x0cm5J%q^S1)~@d,\x0cYeGJUU{ \x0br*9x)fRr;8[<\x0cOIPy)ǜIGвL:Wf\x0bSL2mUyjxh3QI /곎gyޖXYf&3C=\x1bpRyI3\x07U#\x1bW::ْ;\x22N`yH>ku:jȐT\x5cU!_}x\x09l~\x5cSC$l&z sA\x0aJ?Dy't蘴k\x0aɀG>4M\x1bD?fD\x0aZؤf{)w}b>I3<\x09zDY˥U+jDgܚD\x07;\x5c\x0d`zj$lϕ9;c3}_pTn~ga4wn=Nq>`iG]Q1M.oR0@%Ḿq\x0bL\x22a9=\x22T\x5c5 ~Ywo2>@lK`C~/+=@Ǖ犐\x0c##ĴuB2/f!`%8ؿO{qn_^$kq \x0a,4qٌvss&<{b{ٵ՝FHFP~aWU\x0b(Igƨgә9^\x5czZW)h [ 528.529400][T20022] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.6730'. [ 531.523824][T20095] netlink: 342 bytes leftover after parsing attributes in process `syz.1.6761'. [ 537.811964][T20261] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 538.263286][T20279] netlink: 'syz.1.6838': attribute type 1 has an invalid length. [ 541.254331][T20387] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 543.678691][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6920'. [ 545.026897][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6935'. [ 545.424608][ T29] audit: type=1804 audit(4294967412.810:25): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6933" name="file0" dev="tmpfs" ino=6624 res=1 errno=0 [ 546.408018][ T29] audit: type=1804 audit(4294967413.790:26): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6953" name="file0" dev="tmpfs" ino=9514 res=1 errno=0 [ 546.659614][T20539] GUP no longer grows the stack in syz.1.6957 (20539): 5000-401000 (4000) [ 546.756515][T20539] CPU: 0 UID: 0 PID: 20539 Comm: syz.1.6957 Tainted: G U L syzkaller #0 PREEMPT(full) [ 546.756557][T20539] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 546.756566][T20539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.756596][T20539] Call Trace: [ 546.756650][T20539] [ 546.756658][T20539] dump_stack_lvl+0x100/0x190 [ 546.756748][T20539] gup_vma_lookup.cold+0x83/0x96 [ 546.756822][T20539] __get_user_pages+0x241/0x32a0 [ 546.756884][T20539] ? down_read_killable+0x35e/0x520 [ 546.756969][T20539] ? __pfx___get_user_pages+0x10/0x10 [ 546.757008][T20539] ? __pfx_validate_mm+0x10/0x10 [ 546.757048][T20539] __gup_longterm_locked+0x87d/0x16f0 [ 546.757094][T20539] ? __pfx___gup_longterm_locked+0x10/0x10 [ 546.757133][T20539] ? lock_acquire+0x1b9/0x370 [ 546.757180][T20539] gup_fast_fallback+0x16dc/0x2790 [ 546.757239][T20539] ? __pfx_gup_fast_fallback+0x10/0x10 [ 546.757280][T20539] ? __lock_acquire+0x49f/0x1a40 [ 546.757303][T20539] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 546.757331][T20539] ? lockdep_hardirqs_on+0x78/0x100 [ 546.757411][T20539] get_user_pages_fast+0xa7/0xf0 [ 546.757450][T20539] ? __pfx_get_user_pages_fast+0x10/0x10 [ 546.757496][T20539] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 546.757594][T20539] ? pipe_lock+0x69/0x80 [ 546.757630][T20539] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 546.757671][T20539] ? __pfx___mutex_lock+0x10/0x10 [ 546.757724][T20539] ? iovec_from_user+0xda/0x140 [ 546.757774][T20539] iov_iter_get_pages2+0xa3/0x100 [ 546.757812][T20539] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 546.757849][T20539] ? wait_for_space+0x2ca/0x3b0 [ 546.757884][T20539] __do_sys_vmsplice+0x7dd/0x13c0 [ 546.757923][T20539] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 546.757976][T20539] ? __pfx_futex_wait+0x10/0x10 [ 546.758031][T20539] ? __pfx___do_sys_mremap+0x10/0x10 [ 546.758097][T20539] ? do_syscall_64+0x115/0x840 [ 546.758132][T20539] do_syscall_64+0x115/0x840 [ 546.758169][T20539] ? clear_bhb_loop+0x70/0xc0 [ 546.758199][T20539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.758224][T20539] RIP: 0033:0x7f910139e0d9 [ 546.758244][T20539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.758268][T20539] RSP: 002b:00007f9102224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 546.758320][T20539] RAX: ffffffffffffffda RBX: 00007f9101625fa0 RCX: 00007f910139e0d9 [ 546.758336][T20539] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 546.758352][T20539] RBP: 00007f9101435024 R08: 0000000000000000 R09: 0000000000000000 [ 546.758366][T20539] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 546.758385][T20539] R13: 00007f9101626038 R14: 00007f9101625fa0 R15: 00007ffe96bb58c8 [ 546.758417][T20539] [ 548.218741][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6971'. [ 550.519970][T20644] netlink: 350 bytes leftover after parsing attributes in process `syz.0.7006'. [ 550.626986][T20647] ovs_?: entered promiscuous mode [ 553.017733][T20722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7044'. [ 557.318332][T20844] bridge0: port 6(veth1_macvtap) entered blocking state [ 557.356562][T20844] bridge0: port 6(veth1_macvtap) entered disabled state [ 557.382628][T20844] veth1_macvtap: entered allmulticast mode [ 557.432490][T20844] veth1_macvtap: left allmulticast mode [ 558.743682][T20894] bridge0: port 6(batadv0) entered blocking state [ 558.778378][T20894] bridge0: port 6(batadv0) entered disabled state [ 558.810953][T20894] batadv0: entered allmulticast mode [ 558.833073][T20894] batadv0: entered promiscuous mode [ 558.866712][T20894] bridge0: port 6(batadv0) entered blocking state [ 558.873294][T20894] bridge0: port 6(batadv0) entered forwarding state [ 559.151850][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 559.162412][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 559.780028][T20932] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 559.800710][T20932] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 564.529679][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.400457][ C0] sched: DL replenish lagged too much [ 565.445301][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.596162][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.070328][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 668.077326][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4979/1:b..l [ 668.085686][ C0] rcu: (detected by 0, t=10502 jiffies, g=187957, q=492 ncpus=1) [ 668.093491][ C0] task:udevd state:R running task stack:23480 pid:4979 tgid:4979 ppid:1 task_flags:0x400140 flags:0x00080000 [ 668.107860][ C0] Call Trace: [ 668.111152][ C0] [ 668.114086][ C0] __schedule+0x125c/0x6730 [ 668.118606][ C0] ? __lock_acquire+0x49f/0x1a40 [ 668.123560][ C0] ? __lock_acquire+0x49f/0x1a40 [ 668.128507][ C0] ? __pfx___schedule+0x10/0x10 [ 668.133379][ C0] ? mark_held_locks+0x40/0x70 [ 668.138163][ C0] preempt_schedule_irq+0x50/0x90 [ 668.143216][ C0] irqentry_exit+0x205/0xa00 [ 668.147828][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.153843][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 668.159057][ C0] Code: 05 fb 52 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 43 3c 0f 0f 82 ac 02 00 00 8b 35 2e 77 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 52 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 668.178675][ C0] RSP: 0018:ffffc900047cf4a0 EFLAGS: 00000206 [ 668.184772][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 668.192771][ C0] RDX: 0000000000000000 RSI: ffffffff8e17d6c6 RDI: ffffffff8c3fe580 [ 668.200850][ C0] RBP: ffffffff8ebe8000 R08: 00000000efae7af6 R09: 0000000000000007 [ 668.208828][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 668.216801][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.224800][ C0] ? unwind_next_frame+0x3be/0x2090 [ 668.230042][ C0] ? unwind_next_frame+0x3be/0x2090 [ 668.235253][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.241414][ C0] unwind_next_frame+0xd1/0x2090 [ 668.246359][ C0] ? unwind_next_frame+0xbd/0x2090 [ 668.251488][ C0] ? tomoyo_encode+0x29/0x50 [ 668.256161][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.262329][ C0] arch_stack_walk+0x94/0xf0 [ 668.266954][ C0] ? tomoyo_encode+0x29/0x50 [ 668.271571][ C0] stack_trace_save+0x8e/0xc0 [ 668.276296][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 668.281765][ C0] ? __lock_acquire+0x49f/0x1a40 [ 668.286719][ C0] ? __lock_acquire+0x49f/0x1a40 [ 668.291670][ C0] save_stack+0x162/0x1e0 [ 668.296033][ C0] ? __pfx_save_stack+0x10/0x10 [ 668.300898][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 668.306299][ C0] ? qlist_free_all+0x47/0xf0 [ 668.310993][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 668.316633][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 668.321407][ C0] ? __kmalloc_noprof+0x322/0x820 [ 668.326441][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 668.331232][ C0] ? tomoyo_encode+0x29/0x50 [ 668.335838][ C0] ? page_ext_put+0x3e/0xd0 [ 668.340350][ C0] __reset_page_owner+0x84/0x190 [ 668.345315][ C0] __free_frozen_pages+0x79f/0x1090 [ 668.350547][ C0] qlist_free_all+0x47/0xf0 [ 668.355062][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 668.360532][ C0] __kasan_kmalloc+0x8a/0xb0 [ 668.365132][ C0] __kmalloc_noprof+0x322/0x820 [ 668.369987][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 668.374761][ C0] tomoyo_encode2+0xfb/0x3c0 [ 668.379361][ C0] tomoyo_encode+0x29/0x50 [ 668.383810][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 668.389461][ C0] tomoyo_path_perm+0x276/0x460 [ 668.394346][ C0] ? tomoyo_path_perm+0x262/0x460 [ 668.399387][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 668.404784][ C0] ? find_held_lock+0x2b/0x80 [ 668.409466][ C0] ? __might_fault+0xc5/0x140 [ 668.414159][ C0] ? __might_fault+0xc5/0x140 [ 668.418858][ C0] security_inode_getattr+0x116/0x280 [ 668.424278][ C0] vfs_statx+0x11f/0x3f0 [ 668.428528][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 668.433304][ C0] ? do_getname+0x191/0x390 [ 668.437826][ C0] vfs_fstatat+0x77/0xe0 [ 668.442100][ C0] __do_sys_newfstatat+0x9d/0x120 [ 668.447138][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 668.452784][ C0] ? kill_proc_info+0xa6/0x1b0 [ 668.457594][ C0] do_syscall_64+0x115/0x840 [ 668.462194][ C0] ? clear_bhb_loop+0x70/0xc0 [ 668.466878][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.472773][ C0] RIP: 0033:0x7f3f3082eb0a [ 668.477193][ C0] RSP: 002b:00007fff171ee0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 668.485607][ C0] RAX: ffffffffffffffda RBX: 00005631534cc408 RCX: 00007f3f3082eb0a [ 668.493584][ C0] RDX: 00007fff171ee100 RSI: 00005631534baef3 RDI: 00000000ffffff9c [ 668.501557][ C0] RBP: 0000563166d37148 R08: 00063489548db180 R09: 0000000000000001 [ 668.509532][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.517502][ C0] R13: 00007fff171ee100 R14: 0000000000000000 R15: 00063489548db180 [ 668.525489][ C0] [ 668.528546][ C0] rcu: rcu_preempt kthread starved for 212 jiffies! g187957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 668.539657][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 668.549633][ C0] rcu: RCU grace-period kthread stack dump: [ 668.555518][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 668.569030][ C0] Call Trace: [ 668.572306][ C0] [ 668.575238][ C0] __schedule+0x125c/0x6730 [ 668.579769][ C0] ? __pfx___schedule+0x10/0x10 [ 668.584633][ C0] ? find_held_lock+0x2b/0x80 [ 668.589335][ C0] ? schedule+0x225/0x2c0 [ 668.593684][ C0] schedule+0xdd/0x2c0 [ 668.597781][ C0] schedule_timeout+0x127/0x280 [ 668.602664][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 668.608055][ C0] ? __pfx_process_timeout+0x10/0x10 [ 668.613361][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 668.619184][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 668.624689][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 668.629522][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 668.634835][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 668.639793][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 668.645000][ C0] ? rcu_is_watching+0x12/0xc0 [ 668.649773][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.655602][ C0] rcu_gp_kthread+0x179/0x230 [ 668.660321][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 668.665544][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.671364][ C0] ? __kthread_parkme+0x18c/0x230 [ 668.676409][ C0] ? kthread+0x13a/0x450 [ 668.680668][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 668.685876][ C0] kthread+0x370/0x450 [ 668.689956][ C0] ? __pfx_kthread+0x10/0x10 [ 668.694556][ C0] ret_from_fork+0x72b/0xd50 [ 668.699173][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 668.704293][ C0] ? __switch_to+0x800/0x10f0 [ 668.708986][ C0] ? __switch_to_asm+0x39/0x70 [ 668.713785][ C0] ? __pfx_kthread+0x10/0x10 [ 668.718414][ C0] ret_from_fork_asm+0x1a/0x30 [ 668.723203][ C0] [ 668.726223][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 668.732552][ C0] CPU: 0 UID: 0 PID: 3220 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.743867][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.749061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.759152][ C0] Workqueue: bat_events batadv_tt_purge [ 668.764866][ C0] RIP: 0010:unwind_next_frame+0x1565/0x2090 [ 668.770861][ C0] Code: 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee e8 cf e8 ff ff 84 c0 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 <48> 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c [ 668.790571][ C0] RSP: 0018:ffffc90000007028 EFLAGS: 00000202 [ 668.796658][ C0] RAX: ffffffff8b86e69d RBX: 0000000000000002 RCX: ffffffff91c4759e [ 668.804643][ C0] RDX: ffffc90000007f01 RSI: ffffc90000007fc8 RDI: ffffc900000070d8 [ 668.812733][ C0] RBP: ffffc90000007fc8 R08: 0000000000000001 R09: 0000000000000007 [ 668.820743][ C0] R10: 0000000000000200 R11: 000000000000c8a4 R12: ffffc900000070e8 [ 668.828747][ C0] R13: ffffc90000007098 R14: ffffc90000007ff8 R15: ffffc900000070cc [ 668.836735][ C0] FS: 0000000000000000(0000) GS:ffff888123df3000(0000) knlGS:0000000000000000 [ 668.845695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.852293][ C0] CR2: 00007f686be6fda0 CR3: 000000007bcfc000 CR4: 00000000003526f0 [ 668.860276][ C0] Call Trace: [ 668.863560][ C0] [ 668.866423][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 668.871384][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.877555][ C0] arch_stack_walk+0x94/0xf0 [ 668.882359][ C0] ? do_softirq+0xac/0xe0 [ 668.886701][ C0] ? skb_free_head+0xb9/0x160 [ 668.891475][ C0] stack_trace_save+0x8e/0xc0 [ 668.896168][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 668.901571][ C0] ? __lock_acquire+0x49f/0x1a40 [ 668.906530][ C0] kasan_save_stack+0x30/0x50 [ 668.911340][ C0] ? kasan_save_stack+0x30/0x50 [ 668.916239][ C0] ? kasan_save_track+0x14/0x30 [ 668.921116][ C0] ? kasan_save_free_info+0x3b/0x70 [ 668.926351][ C0] ? __kasan_slab_free+0x5f/0x80 [ 668.931316][ C0] ? kfree+0x22b/0x6c0 [ 668.935392][ C0] ? skb_free_head+0xb9/0x160 [ 668.940086][ C0] ? skb_release_data+0x6c5/0x8e0 [ 668.945125][ C0] ? consume_skb+0xc4/0x110 [ 668.949730][ C0] ? netlink_broadcast_filtered+0x368/0xf20 [ 668.955665][ C0] ? nlmsg_notify+0xb1/0x290 [ 668.960269][ C0] ? fdb_notify+0xfb/0x190 [ 668.965040][ C0] ? br_fdb_update+0x324/0x720 [ 668.970727][ C0] ? br_handle_frame_finish+0xeba/0x1fa0 [ 668.976381][ C0] ? br_handle_frame+0x97f/0x1540 [ 668.981416][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 668.988357][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 668.994372][ C0] ? __netif_receive_skb+0x1f/0x120 [ 668.999590][ C0] ? process_backlog+0x37a/0x1580 [ 669.004645][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 669.010227][ C0] ? net_rx_action+0xa40/0xf20 [ 669.015027][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 669.020010][ C0] kasan_save_track+0x14/0x30 [ 669.024705][ C0] kasan_save_free_info+0x3b/0x70 [ 669.029738][ C0] __kasan_slab_free+0x5f/0x80 [ 669.034515][ C0] ? skb_free_head+0x20/0x160 [ 669.039209][ C0] kfree+0x22b/0x6c0 [ 669.043121][ C0] skb_free_head+0xb9/0x160 [ 669.047663][ C0] skb_release_data+0x6c5/0x8e0 [ 669.052533][ C0] ? rcu_is_watching+0x12/0xc0 [ 669.057329][ C0] consume_skb+0xc4/0x110 [ 669.061677][ C0] netlink_broadcast_filtered+0x368/0xf20 [ 669.067427][ C0] ? __pfx_fdb_fill_info+0x10/0x10 [ 669.072561][ C0] ? __alloc_skb+0x4e9/0x710 [ 669.077168][ C0] nlmsg_notify+0xb1/0x290 [ 669.081597][ C0] fdb_notify+0xfb/0x190 [ 669.085857][ C0] br_fdb_update+0x324/0x720 [ 669.090485][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 669.095619][ C0] br_handle_frame_finish+0xeba/0x1fa0 [ 669.101093][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.107000][ C0] ? find_held_lock+0x2b/0x80 [ 669.111695][ C0] ? net_generic+0xea/0x2a0 [ 669.116248][ C0] ? net_generic+0xea/0x2a0 [ 669.120762][ C0] ? net_generic+0xf4/0x2a0 [ 669.125274][ C0] ? br_nf_pre_routing+0x771/0x1560 [ 669.130490][ C0] br_handle_frame+0x97f/0x1540 [ 669.135373][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 669.140703][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 669.146624][ C0] ? kasan_quarantine_put+0x104/0x240 [ 669.152015][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 669.157316][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 669.164022][ C0] ? skb_release_data+0x6ca/0x8e0 [ 669.169101][ C0] ? kfree_skbmem+0x19f/0x210 [ 669.173801][ C0] ? dst_release+0x9a/0x330 [ 669.178396][ C0] ? arp_process+0x237/0x2440 [ 669.183161][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 669.190299][ C0] ? __pfx_arp_process+0x10/0x10 [ 669.195264][ C0] ? __pfx_arp_process+0x10/0x10 [ 669.200226][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 669.205886][ C0] ? __pfx_arp_process+0x10/0x10 [ 669.210848][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 669.216678][ C0] ? __lock_acquire+0x49f/0x1a40 [ 669.221648][ C0] ? process_backlog+0x32a/0x1580 [ 669.226683][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 669.232509][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 669.238956][ C0] ? lock_acquire+0x1b9/0x370 [ 669.243646][ C0] ? process_backlog+0x32a/0x1580 [ 669.248689][ C0] ? process_backlog+0x32a/0x1580 [ 669.253725][ C0] __netif_receive_skb+0x1f/0x120 [ 669.258771][ C0] process_backlog+0x37a/0x1580 [ 669.263646][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 669.269050][ C0] net_rx_action+0xa40/0xf20 [ 669.273664][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 669.278790][ C0] ? mark_held_locks+0x40/0x70 [ 669.283585][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 669.288813][ C0] ? tmigr_handle_remote+0x132/0x380 [ 669.294139][ C0] ? run_timer_base+0x121/0x190 [ 669.299017][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 669.304240][ C0] handle_softirqs+0x1ea/0x9b0 [ 669.309025][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 669.314325][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 669.319632][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 669.325294][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 669.330252][ C0] do_softirq+0xac/0xe0 [ 669.334422][ C0] [ 669.337354][ C0] [ 669.340293][ C0] __local_bh_enable_ip+0xf8/0x120 [ 669.345418][ C0] batadv_tt_purge+0x25d/0xbd0 [ 669.350202][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 669.355506][ C0] ? rcu_is_watching+0x12/0xc0 [ 669.360299][ C0] process_one_work+0xa23/0x1940 [ 669.365286][ C0] ? __pfx_process_one_work+0x10/0x10 [ 669.370688][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 669.375985][ C0] rescuer_thread+0x905/0x14a0 [ 669.380788][ C0] ? rescuer_thread+0x240/0x14a0 [ 669.385762][ C0] ? rescuer_thread+0x118/0x14a0 [ 669.390722][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 669.395957][ C0] ? __kthread_parkme+0x18c/0x230 [ 669.401010][ C0] ? kthread+0x13a/0x450 [ 669.405268][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 669.410484][ C0] kthread+0x370/0x450 [ 669.414566][ C0] ? __pfx_kthread+0x10/0x10 [ 669.419179][ C0] ret_from_fork+0x72b/0xd50 [ 669.423789][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 669.428944][ C0] ? __switch_to+0x800/0x10f0 [ 669.433627][ C0] ? __switch_to_asm+0x39/0x70 [ 669.438410][ C0] ? __pfx_kthread+0x10/0x10 [ 669.443020][ C0] ret_from_fork_asm+0x1a/0x30 [ 669.447816][ C0]