last executing test programs: 3m6.116354524s ago: executing program 0 (id=4125): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) 3m5.234663196s ago: executing program 0 (id=4139): setfsuid$auto(0xee00) setfsuid$auto(0xee00) 3m5.085662084s ago: executing program 0 (id=4143): r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000300)="2101c273d975ae15d3c161d0a6c3e2e27d907fdc58906569e2e509db", 0x1c) 3m4.945720897s ago: executing program 0 (id=4145): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0xb21064a7, 0xffffffffffffffff) 3m4.804604498s ago: executing program 0 (id=4149): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 3m4.256125998s ago: executing program 0 (id=4160): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) 3m3.874707772s ago: executing program 32 (id=4160): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) 9.21717469s ago: executing program 2 (id=7749): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0) 8.510416867s ago: executing program 2 (id=7758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70ad29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) 2.841007108s ago: executing program 2 (id=7761): setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x8}}, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 2.353901236s ago: executing program 2 (id=7765): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3) 2.097768789s ago: executing program 4 (id=7769): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@mcast1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 1.866693601s ago: executing program 4 (id=7774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) 1.770626001s ago: executing program 4 (id=7775): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x1) 1.722065763s ago: executing program 3 (id=7776): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x28, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x2, 0x0, 0x9) 1.683867138s ago: executing program 4 (id=7778): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0xc, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100), 0x0) 1.574069226s ago: executing program 4 (id=7779): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r0, 0x40000000113, 0x3, 0xfffffffffffffffc, 0x0) 1.552734653s ago: executing program 3 (id=7780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)={0x14, r1, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x40d0) 1.466531949s ago: executing program 4 (id=7782): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x8ab1, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x8) 1.431616143s ago: executing program 3 (id=7783): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) 1.386841335s ago: executing program 2 (id=7785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001480)={0x14, r1, 0x949398432f28d783, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) 1.340715826s ago: executing program 3 (id=7786): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x7, 0x7, 0x400a, 0xffffffffffffffff, [], {0x340, 0x6, 0x8c48, 0x29b, 0x9, 0x7f, 0x0, 0x6, 0x1}, {0x100, 0x1, 0x100052, 0x8085, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x7}}) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1f) 1.300111708s ago: executing program 1 (id=7787): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\x8b\x04\x8c\x83k', 0x3) mremap$auto(0x200000000000, 0x4, 0x4, 0x7, 0x100000000) 1.249726241s ago: executing program 3 (id=7788): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) 754.894163ms ago: executing program 2 (id=7789): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 706.668106ms ago: executing program 1 (id=7790): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7ffffdfde000, 0x2020006, 0xa, 0x11, 0x8000000000000000, 0x8000) 525.54577ms ago: executing program 1 (id=7791): mmap$auto(0x200000000000, 0x5, 0x4, 0x40eb2, 0x401, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0x3) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) 282.504929ms ago: executing program 1 (id=7792): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0xf, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) 265.24386ms ago: executing program 3 (id=7793): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x24, 0x0, 0x8) 152.82304ms ago: executing program 1 (id=7794): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x80111500, 0x5c8d) madvise$auto(0x0, 0x200007, 0x19) 0s ago: executing program 1 (id=7795): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) setreuid$auto(0x0, 0x5) fcntl$auto(r0, 0x400, 0x1) kernel console output (not intermixed with test programs): id link type [ 123.527090][ T4943] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 125.074425][ T7108] nfs: Bad value for 'source' [ 126.172254][ T7158] Invalid ELF header magic: != ELF [ 126.840153][ T7186] Process accounting paused [ 127.685904][ T4943] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 129.020874][ T4943] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 131.596957][ T7401] syz.3.767 (7401): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.473199][ T29] audit: type=1800 audit(4294967311.640:5): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.789" name="dummy_udc" dev="gadgetfs" ino=7710 res=0 errno=0 [ 132.871217][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878701][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.715808][ T4943] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 134.206909][ T7524] can: request_module (can-proto-5) failed. [ 135.492287][ T29] audit: type=1800 audit(4294968337.649:6): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.855" name="features" dev="configfs" ino=14416 res=0 errno=0 [ 136.753952][ T4943] Bluetooth: hci0: unknown advertising packet type: 0xea [ 139.445385][ T29] audit: type=1800 audit(1843104522.268:7): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.945" name="version" dev="configfs" ino=15541 res=0 errno=0 [ 139.737007][ T7779] __vm_enough_memory: pid: 7779, comm: syz.1.951, bytes: 4398046511104 not enough memory for the allocation [ 139.908075][ T29] audit: type=1800 audit(1843104522.728:8): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.957" name="version" dev="configfs" ino=14689 res=0 errno=0 [ 141.383804][ T7857] ======================================================= [ 141.383804][ T7857] WARNING: The mand mount option has been deprecated and [ 141.383804][ T7857] and is ignored by this kernel. Remove the mand [ 141.383804][ T7857] option from the mount to silence this warning. [ 141.383804][ T7857] ======================================================= [ 141.681305][ T29] audit: type=1800 audit(1843104524.497:9): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1000" name="lu_gp_id" dev="configfs" ino=14830 res=0 errno=0 [ 143.506573][ T7967] Unable to find swap-space signature [ 144.920444][ T8035] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5775] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8035] [ 146.232948][ T4943] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 146.693053][ T4943] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 148.202903][ T29] audit: type=1800 audit(1843104531.023:10): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1163" name="trace_pipe" dev="tracefs" ino=900 res=0 errno=0 [ 149.442154][ T8250] ima: policy update failed [ 149.463609][ T29] audit: type=1802 audit(1843104532.283:11): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1186" res=0 errno=0 [ 151.608131][ T8360] syz.0.1240(8360): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 152.194453][ T4943] Bluetooth: hci0: unexpected event 0x3c length: 124 > 7 [ 152.565496][ T29] audit: type=1800 audit(1843104535.381:12): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1258" name="dbroot" dev="configfs" ino=16662 res=0 errno=0 [ 152.996907][ T8346] kexec: Could not allocate control_code_buffer [ 155.165267][ T8442] kexec: Could not allocate control_code_buffer [ 157.255895][ T8533] kexec: Could not allocate control_code_buffer [ 157.307816][ T8533] Process accounting resumed [ 157.506353][ T8611] capability: warning: `syz.3.1365' uses deprecated v2 capabilities in a way that may be insecure [ 164.887665][ T8993] random: crng reseeded on system resumption [ 168.502671][ T9133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.524172][ T9133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.570755][ T9133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.607293][ T9133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.625657][ T9133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.665729][ T9133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.707265][ T9133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.729763][ T9133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.749599][ T9133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.767518][ T9133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.781597][ T9133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.813113][ T9133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.730050][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.605429][ T4943] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.765285][ T4943] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.765492][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.437856][ T9314] process 'syz.2.1714' launched '/dev/fd/3' with NULL argv: empty string added [ 171.799923][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.679860][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.835157][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.844984][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.025960][ T9396] rnbd_client L213: map_device: Parameters missing [ 173.870308][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.754917][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.905409][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.911894][ T4943] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.081627][ T9542] ptp ptp0: only physical clock in use now [ 178.659400][ T9667] syz.1.1889 uses obsolete (PF_INET,SOCK_PACKET) [ 178.669871][ T9668] warning: `syz.3.1888' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.143594][ T9738] usbip-vudc usbip-vudc.0: gadget not bound [ 180.514784][ T9751] wlan1: mtu less than device minimum [ 181.274386][ T9779] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5775] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9779] [ 181.955944][ T9809] phram: not enough arguments [ 184.641891][ T9912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 186.496948][ T9996] ICMPv6: process `syz.3.2046' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 187.311374][T10029] Process accounting paused [ 187.637296][T10047] WARNING! power/level is deprecated; use power/control instead [ 189.647997][T10142] vhci_hcd vhci_hcd.2: invalid port number 16 [ 189.674999][T10142] vhci_hcd vhci_hcd.2: invalid port number 16 [ 190.246786][T10166] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 190.994586][ T50] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 191.285514][T10212] ecryptfs_parse_packet_length: Error parsing packet length [ 191.311151][T10212] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 192.192968][T10256] scsi_dev_info_list_add_str: bad dev info string '' '' '' syzkaller syzkaller login: [ 194.102604][T10351] writes to the poll attribute are ignored. [ 194.110752][T10351] please use driver specific parameters instead. [ 194.177155][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.185659][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.307265][T10360] : Can't lookup blockdev [ 195.003369][ T29] audit: type=1806 audit(1843106625.972:13): xattr="." res=0 [ 196.373152][T10469] block2mtd: illegal erase size [ 198.842070][T10605] kernel profiling enabled (shift: 7) [ 200.036416][T10669] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 201.575401][T10741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.794612][T10757] kAFS: Invalid Command on /proc/fs/afs/cells file [ 201.794655][T10741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.965592][T10741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.104641][T10741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.141254][T10771] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 202.415122][T10781] vhci_hcd vhci_hcd.2: invalid port number 135 [ 202.435854][T10781] vhci_hcd vhci_hcd.2: invalid port number 135 [ 203.198110][T10818] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 203.635616][T10843] vhci_hcd: not connected 4 [ 203.930247][T10860] block nbd0: NBD_DISCONNECT [ 204.531417][T10895] [U] 0="/ [ 204.535552][T10895] [U] [ 204.555870][T10895] [U] EeQ@ [ 204.572383][T10894] [U]  [ 205.178973][T10929] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 205.505712][T10946] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 205.532849][T10946] CIFS mount error: No usable UNC path provided in device string! [ 205.532849][T10946] [ 205.554787][T10946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.830440][T10955] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 205.851312][T10955] pci 0000:00:01.3: PCI INT A: no GSI [ 206.106090][T10973] syz_tun: tun_chr_ioctl cmd 2147767521 [ 206.497305][T10993] mmap: syz.0.2516 (10993): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 206.958521][T11015] block2mtd: Using custom MTD label '' for dev [ 206.971151][T11015] block2mtd: error: cannot open device [ 208.733854][T11106] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 210.464235][T11189] program syz.3.2612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.766627][T11476] kAFS: Invalid Command on /proc/fs/afs/cells file [ 215.985456][T11489] program syz.2.2759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.549923][T11521] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 216.780127][T11531] bond0: no command found in slaves file - use +ifname or -ifname [ 216.984414][ T50] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 217.227854][T11555] Process accounting resumed [ 218.062756][T11608] cifs: Unknown parameter 'knjeRaBt$Mi' [ 218.125857][T11611] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.158301][T11611] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.421583][T11629] usb usb13: usbfs: process 11629 (syz.1.2829) did not claim interface 0 before use [ 218.654475][T11637] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 218.682621][T11637] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 218.712827][T11637] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 218.729249][T11637] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 218.746923][T11637] page dumped because: unmovable page [ 218.763757][T11637] page_owner info is not present (never set?) [ 219.903838][T11714] cougar: G6 mapped to F18 [ 220.313402][T11735] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 220.314135][T11733] ima: policy update failed [ 220.355814][ T29] audit: type=1802 audit(4294967303.805:14): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2880" res=0 errno=0 [ 222.631344][T11867] i2c i2c-0: delete_device: Can't find device in list [ 223.002281][ T29] audit: type=1800 audit(4294967306.458:15): pid=11890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2955" name="sr0" dev="devtmpfs" ino=2817 res=0 errno=0 [ 223.540653][T11922] sd 0:0:1:0: PR command failed: 1026 [ 223.554876][T11922] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 223.580948][T11922] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 224.913457][T11991] phram: not enough arguments [ 224.957056][ T29] audit: type=1807 audit(4294967308.439:16): UNKNOWN=nl80211 res=0 [ 224.959781][T11994] zram0: detected capacity change from 0 to 16 [ 224.965740][T11993] ima: policy update failed [ 224.978538][ T29] audit: type=1802 audit(4294967308.439:17): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3007" res=0 errno=0 [ 225.006785][ T29] audit: type=1802 audit(4294967308.479:18): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3007" res=0 errno=0 [ 225.222700][T12005] program syz.0.3012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.371789][T12014] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 225.660553][T12032] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000008) at rIP: 0xffffffff81b1778a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 225.676511][T12032] Call Trace: [ 225.679807][T12032] [ 225.682799][T12032] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 225.689527][T12032] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 225.696106][T12032] ? debug_object_deactivate+0x2e4/0x3b0 [ 225.701777][T12032] ? smp_call_function+0x51/0x90 [ 225.706748][T12032] mce_cpu_restart+0xd5/0x1f0 [ 225.711464][T12032] ? __pfx_mce_cpu_restart+0x10/0x10 [ 225.716801][T12032] smp_call_function_many_cond+0x153b/0x1870 [ 225.722990][T12032] ? __pfx_mce_cpu_restart+0x10/0x10 [ 225.728304][T12032] ? lockdep_hardirqs_on+0x78/0x100 [ 225.733521][T12032] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 225.739346][T12032] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 225.745717][T12032] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 225.751769][T12032] ? __timer_delete_sync+0x151/0x1c0 [ 225.757086][T12032] ? __pfx_mce_cpu_restart+0x10/0x10 [ 225.762395][T12032] on_each_cpu_cond_mask+0x40/0x90 [ 225.767542][T12032] set_bank+0x240/0x3a0 [ 225.771735][T12032] ? __pfx_set_bank+0x10/0x10 [ 225.776432][T12032] ? find_held_lock+0x2b/0x80 [ 225.781148][T12032] ? sysfs_file_kobj+0xe4/0x290 [ 225.786027][T12032] ? sysfs_file_kobj+0xe4/0x290 [ 225.790923][T12032] ? __pfx_set_bank+0x10/0x10 [ 225.795617][T12032] dev_attr_store+0x58/0x80 [ 225.800269][T12032] ? __pfx_dev_attr_store+0x10/0x10 [ 225.805494][T12032] sysfs_kf_write+0xf2/0x150 [ 225.810464][T12032] kernfs_fop_write_iter+0x3e0/0x5f0 [ 225.815770][T12032] ? __pfx_sysfs_kf_write+0x10/0x10 [ 225.821091][T12032] vfs_write+0x6ac/0x1050 [ 225.825456][T12032] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 225.831291][T12032] ? __pfx_vfs_write+0x10/0x10 [ 225.836097][T12032] ksys_write+0x12a/0x250 [ 225.840531][T12032] ? __pfx_ksys_write+0x10/0x10 [ 225.845430][T12032] do_syscall_64+0x115/0x840 [ 225.850061][T12032] ? clear_bhb_loop+0x40/0x90 [ 225.854839][T12032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.860747][T12032] RIP: 0033:0x7fb2cbb9de99 [ 225.865204][T12032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.884997][T12032] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.893440][T12032] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 225.901525][T12032] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 225.909506][T12032] RBP: 00007fb2cbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 225.917484][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.925455][T12032] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 225.933486][T12032] [ 226.081878][T12041] zram: Cannot change disksize for initialized device [ 226.250925][T12051] bond0: invalid ARP target specified [ 226.786643][T12082] zram0: detected capacity change from 16 to 0 [ 227.350628][T12116] writing to auto_msgmni has no effect [ 228.245927][T12172] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 230.467502][T12301] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 231.156154][T12345] random: crng reseeded on system resumption [ 232.524367][T12425] sysfs_service_op_store: Client not running :-5: [ 233.027713][T12458] vhci_hcd vhci_hcd.2: invalid port number 253 [ 233.034346][T12458] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 233.334356][T12471] Invalid input. Must be >= 4608 [ 234.532896][T12543] Setting dangerous option i915.mitigations - tainting kernel [ 234.562094][T12543] Bad "i915.mitigations=,^", '^' is unknown [ 235.274234][T12547] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 236.306483][T12636] Setting dangerous option i915.mitigations - tainting kernel [ 236.328439][T12636] Bad "i915.mitigations=,^", '^' is unknown [ 236.683044][T12655] binder: binder_mmap: 12654 0-1000 bad vm_flags failed -1 [ 240.234472][ T50] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 240.234513][ T50] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 241.343491][T12921] binder: 12919:12921 ioctl c018620c 200000000040 returned -1 [ 241.517914][T12931] bond0: invalid ARP target specified [ 242.947946][T13001] hub 1-0:1.0: USB hub found [ 242.963092][T13001] hub 1-0:1.0: 1 port detected [ 246.757775][T13153] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 246.765854][ T50] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 246.765889][ T50] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 247.050687][T13187] hub 1-0:1.0: USB hub found [ 247.055881][T13187] hub 1-0:1.0: 1 port detected [ 247.294483][T13174] Process accounting paused [ 247.706899][T13212] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 247.877945][ T50] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 247.877987][ T50] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 248.722413][T13258] zram: Added device: zram1 [ 249.745728][T13302] binder: 13299:13302 ioctl 4018620d 9 returned -22 [ 249.872933][T13307] zram: Added device: zram2 [ 250.749559][T13353] i2c i2c-0: new_device: Can't parse I2C address [ 251.656621][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 251.667283][ T50] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 251.854211][T13415] hub 1-0:1.0: USB hub found [ 251.875664][T13415] hub 1-0:1.0: 1 port detected [ 252.729373][T13449] hub 1-0:1.0: USB hub found [ 252.750036][T13449] hub 1-0:1.0: 1 port detected [ 253.392008][T13485] random: crng reseeded on system resumption [ 254.671598][T13536] smpboot: CPU 1 is now offline [ 254.740370][T13542] bond0: option packets_per_slave: invalid value ( Xnp) [ 254.777166][T13542] bond0: option packets_per_slave: allowed values 0 - 65535 [ 255.310912][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.319026][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.407461][T13566] futex_wake_op: syz.2.3781 tries to shift op by -1; fix this program [ 255.547921][T13560] could not allocate digest TFM handle [ 256.491415][T13607] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5768] was attempted by ""[13607] [ 256.697426][T13615] Sensor B: ================= START STATUS ================= [ 256.732894][T13615] Sensor B: Test Pattern: 75% Colorbar [ 256.753645][T13606] zswap: compressor F(_ not available [ 256.777696][T13615] Sensor B: Show Information: All [ 256.810714][T13615] Sensor B: Vertical Flip: false [ 256.837269][T13615] Sensor B: Horizontal Flip: false [ 256.861939][T13615] Sensor B: Brightness: 128 [ 256.882589][T13615] Sensor B: Contrast: 128 [ 256.902902][T13615] Sensor B: Hue: 0 [ 256.926381][T13615] Sensor B: Saturation: 128 [ 256.966344][T13615] Sensor B: Pixel Rate: 160000000 [ 256.994155][T13615] Sensor B: Horizontal Blanking: 800 [ 257.018585][T13615] Sensor B: Vertical Blanking: 3223 [ 257.042424][T13615] Sensor B: ================== END STATUS ================== [ 258.654159][ T50] Bluetooth: hci0: unexpected event 0x04 length: 125 > 10 [ 258.654186][ T50] Bluetooth: unknown link type 101 [ 258.667135][ T50] Bluetooth: hci0: connection err: -111 [ 259.225096][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 259.232874][ T50] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 260.702079][T13789] kAFS: unparsable volume name [ 262.048826][T13854] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 262.397754][T13873] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 262.431406][T13873] vhci_hcd vhci_hcd.2: invalid port number 0 [ 263.331010][T13921] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 264.216984][T13965] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 264.277117][T13965] net gretap0: uevent: failed to send synthetic uevent: -22 [ 266.355665][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 266.364626][ T50] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 267.501185][T14063] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 267.597822][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 267.609072][ T50] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 268.019128][T14086] block2mtd: parameter too long [ 268.357879][T14101] CIFS: VFS: Invalid SecurityFlags: [ 271.192593][T14199] block loop4: the capability attribute has been deprecated. [ 271.547617][T14214] sd 0:0:1:0: PR command failed: 1026 [ 271.568683][T14214] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 271.599314][T14214] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 272.391778][T14251] kafs: addr_prefs: Too many elements in string [ 274.570212][T14339] binder: 14338:14339 ioctl c0046209 ffffffffffffffff returned -22 [ 274.939273][ T986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.134444][ T986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.383052][ T986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.500289][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.513549][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.525871][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.534420][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.544158][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.797092][ T986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.196536][T14387] vmstat_refresh: nr_hugetlb -2048 [ 276.452821][ T986] bridge_slave_1: left allmulticast mode [ 276.508439][ T986] bridge_slave_1: left promiscuous mode [ 276.538964][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.590538][ T986] bridge_slave_0: left allmulticast mode [ 276.631445][ T986] bridge_slave_0: left promiscuous mode [ 276.671536][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.407013][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.455183][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.500729][ T986] bond0 (unregistering): Released all slaves [ 277.591823][ T4943] Bluetooth: hci0: command tx timeout [ 277.664737][T14406] Process accounting resumed [ 277.841233][T14440] block2mtd: too many arguments [ 278.421494][T14458] Invalid ELF header magic: != ELF [ 278.481766][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 278.720598][ T986] hsr_slave_0: left promiscuous mode [ 278.757448][ T986] hsr_slave_1: left promiscuous mode [ 278.797166][ T986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.859496][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.901143][T14475] sd 0:0:1:0: PR command failed: 1026 [ 278.921987][ T986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.937887][T14475] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 278.959554][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.974666][T14475] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 279.068251][ T986] veth1_macvtap: left promiscuous mode [ 279.105076][ T986] veth0_macvtap: left promiscuous mode [ 279.143162][ T986] veth1_vlan: left promiscuous mode [ 279.175873][ T986] veth0_vlan: left promiscuous mode [ 279.430711][T14494] block2mtd: illegal erase size [ 279.659986][ T4943] Bluetooth: hci0: command tx timeout [ 280.278921][ T986] team0 (unregistering): Port device team_slave_1 removed [ 280.342071][ T986] team0 (unregistering): Port device team_slave_0 removed [ 280.791731][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 281.578604][T14568] ecryptfs_miscdev_write: Error while inspecting packet size [ 281.729180][ T4943] Bluetooth: hci0: command tx timeout [ 281.886115][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.949071][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.997353][T14363] bridge_slave_0: entered allmulticast mode [ 282.036645][T14363] bridge_slave_0: entered promiscuous mode [ 282.088550][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.141225][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.184419][T14363] bridge_slave_1: entered allmulticast mode [ 282.225461][T14363] bridge_slave_1: entered promiscuous mode [ 282.412829][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.487747][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.715759][T14363] team0: Port device team_slave_0 added [ 282.755695][T14363] team0: Port device team_slave_1 added [ 282.917193][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 283.013341][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.048205][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.180515][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.256011][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.256027][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.256045][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.393512][T14363] hsr_slave_0: entered promiscuous mode [ 283.443534][T14363] hsr_slave_1: entered promiscuous mode [ 283.799801][ T4943] Bluetooth: hci0: command tx timeout [ 283.922835][ T29] audit: type=1326 audit(4294967367.705:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.2.4288" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa5d79de99 code=0x0 [ 284.619816][T14363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.697894][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.700179][T14363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.727687][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.728304][T14363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.757654][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.766418][T14363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.778438][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.779918][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 285.155583][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.401280][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.585490][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.592683][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.816846][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.824049][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.506137][T14775] : Can't lookup blockdev [ 287.839390][ T5741] Process accounting resumed [ 288.014767][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.909049][T14363] veth0_vlan: entered promiscuous mode [ 288.969980][T14363] veth1_vlan: entered promiscuous mode [ 289.103514][T14363] veth0_macvtap: entered promiscuous mode [ 289.167147][T14363] veth1_macvtap: entered promiscuous mode [ 289.244093][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.266061][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.282039][ T986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.283368][ T986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.283399][ T986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.283423][ T986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.596488][ T3298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.640527][T14858] i2c i2c-0: delete_device: Can't parse I2C address [ 289.651143][ T3298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.773134][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.820335][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.000509][T15183] synth uevent: /module/null_blk: unknown uevent action string [ 298.391091][ T29] audit: type=1800 audit(4294967382.251:20): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4539" name="members" dev="configfs" ino=40107 res=0 errno=0 [ 300.760467][T15349] kafs: addr_prefs: Invalid Command [ 302.273961][T15416] bond0: invalid ARP target specified [ 302.746112][T15436] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 304.304248][T15499] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.616462][T15511] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 305.023299][T15528] dyndbg: expected <4096 bytes into control [ 305.882486][ T4943] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 307.703776][T15620] Process accounting paused [ 307.916171][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.986798][T15696] Bluetooth: hci2: command 0x0c1a tx timeout [ 312.126846][T15696] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 312.827475][T15863] vhci_hcd: not connected 4 [ 314.201968][T15696] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.877879][T15952] batman_adv: Routing algorithm '' is not supported [ 314.904768][T15941] syz.2.4848 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 314.967562][T15941] CPU: 0 UID: 0 PID: 15941 Comm: syz.2.4848 Tainted: G U L syzkaller #0 PREEMPT(full) [ 314.967590][T15941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 314.967596][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.967608][T15941] Call Trace: [ 314.967613][T15941] [ 314.967619][T15941] dump_stack_lvl+0x100/0x190 [ 314.967640][T15941] dump_header+0xfb/0x606 [ 314.967658][T15941] oom_kill_process.cold+0xd/0x330 [ 314.967675][T15941] out_of_memory+0x340/0x14f0 [ 314.967703][T15941] ? __pfx_out_of_memory+0x10/0x10 [ 314.967737][T15941] mem_cgroup_out_of_memory+0xc6/0x130 [ 314.967755][T15941] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 314.967770][T15941] ? find_held_lock+0x2b/0x80 [ 314.967793][T15941] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.967809][T15941] ? _raw_spin_unlock+0x28/0x50 [ 314.967827][T15941] try_charge_memcg+0x6e5/0xdf0 [ 314.967851][T15941] ? __pfx_try_charge_memcg+0x10/0x10 [ 314.967871][T15941] ? find_held_lock+0x2b/0x80 [ 314.967888][T15941] ? rcu_read_unlock+0x17/0x60 [ 314.967910][T15941] ? rcu_read_unlock+0x17/0x60 [ 314.967931][T15941] ? find_held_lock+0x2b/0x80 [ 314.967949][T15941] ? rcu_read_unlock+0x17/0x60 [ 314.967974][T15941] charge_memcg+0x187/0x1e0 [ 314.967996][T15941] __mem_cgroup_charge+0x2b/0x1c0 [ 314.968020][T15941] do_anonymous_page+0xb53/0x2080 [ 314.968037][T15941] ? rcu_read_unlock+0x2d/0xb0 [ 314.968057][T15941] __handle_mm_fault+0x1d2c/0x2a00 [ 314.968074][T15941] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.968093][T15941] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.968109][T15941] ? pte_offset_map_lock+0x174/0x320 [ 314.968128][T15941] ? find_held_lock+0x2b/0x80 [ 314.968152][T15941] ? follow_page_pte+0x4d0/0x13f0 [ 314.968176][T15941] handle_mm_fault+0x37b/0xa30 [ 314.968195][T15941] __get_user_pages+0x1178/0x32a0 [ 314.968223][T15941] ? __pfx___get_user_pages+0x10/0x10 [ 314.968248][T15941] populate_vma_page_range+0x267/0x3f0 [ 314.968271][T15941] ? __pfx_populate_vma_page_range+0x10/0x10 [ 314.968292][T15941] ? __pfx_find_vma_intersection+0x10/0x10 [ 314.968312][T15941] ? do_mmap+0x93f/0x12f0 [ 314.968334][T15941] __mm_populate+0x107/0x3a0 [ 314.968356][T15941] ? __pfx___mm_populate+0x10/0x10 [ 314.968379][T15941] ? up_write+0x2e5/0x5c0 [ 314.968396][T15941] vm_mmap_pgoff+0x37f/0x470 [ 314.968418][T15941] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 314.968447][T15941] ksys_mmap_pgoff+0xe4/0x610 [ 314.968467][T15941] ? kcov_ioctl+0x17a/0x750 [ 314.968488][T15941] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 314.968506][T15941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.968527][T15941] __x64_sys_mmap+0x125/0x190 [ 314.968551][T15941] do_syscall_64+0x115/0x840 [ 314.968574][T15941] ? clear_bhb_loop+0x40/0x90 [ 314.968593][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.968608][T15941] RIP: 0033:0x7faa5d79de99 [ 314.968624][T15941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.968638][T15941] RSP: 002b:00007faa5e650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.968653][T15941] RAX: ffffffffffffffda RBX: 00007faa5da25fa0 RCX: 00007faa5d79de99 [ 314.968662][T15941] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 314.968671][T15941] RBP: 00007faa5d833eaf R08: 0000000000000002 R09: 0000000000008000 [ 314.968679][T15941] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 314.968688][T15941] R13: 00007faa5da26038 R14: 00007faa5da25fa0 R15: 00007fff95628148 [ 314.968707][T15941] [ 314.968713][T15941] memory: usage 3072kB, limit 3072kB, failcnt 4364 [ 315.867854][T15985] CIFS mount error: No usable UNC path provided in device string! [ 315.867854][T15985] [ 315.902624][T15985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.939678][T15989] futex_wake_op: syz.4.4870 tries to shift op by -1; fix this program [ 316.221326][T15941] memory+swap: usage 3596kB, limit 9007199254740988kB, failcnt 0 [ 316.272885][T15837] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.281506][T15941] kmem: usage 376kB, limit 9007199254740988kB, failcnt 0 [ 316.313545][T16002] futex_wake_op: syz.1.4879 tries to shift op by -2048; fix this program [ 316.327405][T15941] Memory cgroup stats for /syz2: [ 316.327779][T15941] cache 0 [ 316.352273][T16002] futex_wake_op: syz.1.4879 tries to shift op by -2048; fix this program [ 316.363146][T15941] rss 2760704 [ 316.375699][T15941] rss_huge 0 [ 316.388382][T15941] shmem 0 [ 316.420963][T15941] mapped_file 0 [ 316.436235][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.445780][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.456994][T15941] dirty 0 [ 316.469587][T15941] writeback 0 [ 316.483546][T15941] workingset_refault_anon 66 [ 316.511048][T15941] workingset_refault_file 631 [ 316.530891][T15941] swap 536576 [ 316.545279][T15941] swapcached 3317760 [ 316.562632][T15941] pgpgin 86458 [ 316.578317][T15941] pgpgout 85784 [ 316.594864][T15941] pgfault 130880 [ 316.611012][T15941] pgmajfault 58 [ 316.626213][T15696] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 316.649103][T15941] inactive_anon 0 [ 316.668927][T15941] active_anon 2760704 [ 316.691847][T15941] inactive_file 0 [ 316.715089][T15941] active_file 0 [ 316.729172][T15941] unevictable 0 [ 316.744773][T15941] hierarchical_memory_limit 3145728 [ 316.766773][T15941] hierarchical_memsw_limit 9223372036854771712 [ 316.795788][T15941] total_cache 0 [ 316.820966][T15941] total_rss 2760704 [ 316.843666][T15941] total_rss_huge 0 [ 316.863287][T15941] total_shmem 0 [ 316.881007][T15941] total_mapped_file 0 [ 316.896254][T15941] total_dirty 0 [ 316.912675][T15941] total_writeback 0 [ 316.930942][T15941] total_workingset_refault_anon 66 [ 316.963985][T15941] total_workingset_refault_file 631 [ 316.993980][T15941] total_swap 536576 [ 317.014954][T15941] total_swapcached 3317760 [ 317.048491][T15941] total_pgpgin 86458 [ 317.078441][T15941] total_pgpgout 85784 [ 317.099895][T15941] total_pgfault 130880 [ 317.127717][T15941] total_pgmajfault 58 [ 317.157067][T15941] total_inactive_anon 0 [ 317.181722][T15941] total_active_anon 2760704 [ 317.223583][T15941] total_inactive_file 0 [ 317.250229][T15941] total_active_file 0 [ 317.283765][T15941] total_unevictable 0 [ 317.299678][T15941] anon_cost 41 [ 317.327026][T15941] file_cost 0 [ 317.343620][T15941] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4848,pid=15939,uid=0 [ 317.443022][T15941] Memory cgroup out of memory: Killed process 15939 (syz.2.4848) total-vm:108392kB, anon-rss:3944kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 317.962211][T16056] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 318.657065][T15837] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.305565][T16166] kAFS: Invalid Command on /proc/fs/afs/cells file [ 320.726396][T15696] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.990612][T16197] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 322.527752][T16269] random: crng reseeded on system resumption [ 324.200959][T16345] : Can't lookup blockdev [ 324.276684][T15837] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 324.400453][T16356] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 324.436188][T16356] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 324.640158][T16363] i2c i2c-0: delete_device: Extra parameters [ 325.118864][T16383] CIFS: VFS: UNC: path must begin with // or \\ [ 325.148804][T16383] Malformed UNC in devname [ 325.148804][T16383] [ 325.187392][T16383] CIFS: VFS: Malformed UNC in devname [ 325.389048][ T29] audit: type=1800 audit(4294985753.385:21): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5069" name="members" dev="configfs" ino=43858 res=0 errno=0 [ 326.300335][T15696] Bluetooth: hci0: command 0x2016 tx timeout [ 327.338914][T16477] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 328.370182][T15696] Bluetooth: hci0: command 0x2016 tx timeout [ 328.923342][T16550] binder: 16548:16550 ioctl 40046205 0 returned -22 [ 329.304576][T16561] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 331.397011][T16637] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 333.447627][T16729] ceph: Failed to parse sending metrics switch value 'P^' [ 334.323943][T16753] syz.2.5248 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 334.394807][T16753] CPU: 0 UID: 0 PID: 16753 Comm: syz.2.5248 Tainted: G U L syzkaller #0 PREEMPT(full) [ 334.394837][T16753] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 334.394844][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 334.394853][T16753] Call Trace: [ 334.394858][T16753] [ 334.394866][T16753] dump_stack_lvl+0x100/0x190 [ 334.394892][T16753] dump_header+0xfb/0x606 [ 334.394911][T16753] oom_kill_process.cold+0xd/0x330 [ 334.394933][T16753] out_of_memory+0x340/0x14f0 [ 334.394968][T16753] ? __pfx_out_of_memory+0x10/0x10 [ 334.395003][T16753] mem_cgroup_out_of_memory+0xc6/0x130 [ 334.395023][T16753] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 334.395039][T16753] ? find_held_lock+0x2b/0x80 [ 334.395064][T16753] ? do_raw_spin_unlock+0x145/0x1e0 [ 334.395082][T16753] ? _raw_spin_unlock+0x28/0x50 [ 334.395102][T16753] try_charge_memcg+0x6e5/0xdf0 [ 334.395127][T16753] ? __pfx_try_charge_memcg+0x10/0x10 [ 334.395150][T16753] ? find_held_lock+0x2b/0x80 [ 334.395170][T16753] ? rcu_read_unlock+0x17/0x60 [ 334.395196][T16753] ? rcu_read_unlock+0x17/0x60 [ 334.395223][T16753] ? find_held_lock+0x2b/0x80 [ 334.395245][T16753] ? rcu_read_unlock+0x17/0x60 [ 334.395271][T16753] charge_memcg+0x187/0x1e0 [ 334.395295][T16753] __mem_cgroup_charge+0x2b/0x1c0 [ 334.395319][T16753] do_anonymous_page+0xb53/0x2080 [ 334.395335][T16753] ? rcu_read_unlock+0x2d/0xb0 [ 334.395359][T16753] __handle_mm_fault+0x1d2c/0x2a00 [ 334.395377][T16753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.395395][T16753] ? __pfx___handle_mm_fault+0x10/0x10 [ 334.395412][T16753] ? pte_offset_map_lock+0x174/0x320 [ 334.395431][T16753] ? find_held_lock+0x2b/0x80 [ 334.395455][T16753] ? follow_page_pte+0x4d0/0x13f0 [ 334.395479][T16753] handle_mm_fault+0x37b/0xa30 [ 334.395498][T16753] __get_user_pages+0x1178/0x32a0 [ 334.395526][T16753] ? __pfx___get_user_pages+0x10/0x10 [ 334.395551][T16753] populate_vma_page_range+0x267/0x3f0 [ 334.395574][T16753] ? __pfx_populate_vma_page_range+0x10/0x10 [ 334.395595][T16753] ? __pfx_find_vma_intersection+0x10/0x10 [ 334.395643][T16753] ? do_mmap+0x93f/0x12f0 [ 334.395665][T16753] __mm_populate+0x107/0x3a0 [ 334.395687][T16753] ? __pfx___mm_populate+0x10/0x10 [ 334.395710][T16753] ? up_write+0x2e5/0x5c0 [ 334.395726][T16753] vm_mmap_pgoff+0x37f/0x470 [ 334.395749][T16753] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.395778][T16753] ksys_mmap_pgoff+0xe4/0x610 [ 334.395799][T16753] ? kcov_ioctl+0x17a/0x750 [ 334.395819][T16753] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 334.395837][T16753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 334.395858][T16753] __x64_sys_mmap+0x125/0x190 [ 334.395879][T16753] do_syscall_64+0x115/0x840 [ 334.395896][T16753] ? clear_bhb_loop+0x40/0x90 [ 334.395914][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.395929][T16753] RIP: 0033:0x7faa5d79de99 [ 334.395943][T16753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.395956][T16753] RSP: 002b:00007faa5e650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.395970][T16753] RAX: ffffffffffffffda RBX: 00007faa5da25fa0 RCX: 00007faa5d79de99 [ 334.395980][T16753] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 334.395988][T16753] RBP: 00007faa5d833eaf R08: 0000000000000002 R09: 0000000000008000 [ 334.395997][T16753] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 334.396005][T16753] R13: 00007faa5da26038 R14: 00007faa5da25fa0 R15: 00007fff95628148 [ 334.396024][T16753] [ 335.790519][T16819] overlayfs: "check_copy_up" module option is obsolete [ 335.798970][T16753] memory: usage 3072kB, limit 3072kB, failcnt 5135 [ 335.823123][T16753] memory+swap: usage 3504kB, limit 9007199254740988kB, failcnt 0 [ 335.855605][T16753] kmem: usage 388kB, limit 9007199254740988kB, failcnt 0 [ 335.914157][T16753] Memory cgroup stats for /syz2: [ 335.914269][T16753] cache 0 [ 335.957135][T16753] rss 2748416 [ 335.972927][T16753] rss_huge 0 [ 335.989325][T16753] shmem 0 [ 336.001865][T16753] mapped_file 0 [ 336.020690][T16753] dirty 0 [ 336.038884][T16753] writeback 0 [ 336.050302][T16753] workingset_refault_anon 117 [ 336.076987][T16753] workingset_refault_file 759 [ 336.100921][T16753] swap 442368 [ 336.118769][T16753] swapcached 5885952 [ 336.142127][T16753] pgpgin 91441 [ 336.161746][T16753] pgpgout 90770 [ 336.185054][T16753] pgfault 141577 [ 336.204787][T16753] pgmajfault 96 [ 336.226150][T16753] inactive_anon 0 [ 336.254717][T16753] active_anon 2748416 [ 336.278800][T16753] inactive_file 0 [ 336.296815][T16753] active_file 0 [ 336.307382][T16753] unevictable 0 [ 336.325838][T16753] hierarchical_memory_limit 3145728 [ 336.352878][T16753] hierarchical_memsw_limit 9223372036854771712 [ 336.374816][T16753] total_cache 0 [ 336.387344][T16753] total_rss 2748416 [ 336.399721][T16753] total_rss_huge 0 [ 336.413689][T16753] total_shmem 0 [ 336.427921][T16753] total_mapped_file 0 [ 336.434641][T16753] total_dirty 0 [ 336.446699][T16753] total_writeback 0 [ 336.465372][T16753] total_workingset_refault_anon 117 [ 336.492276][T16753] total_workingset_refault_file 759 [ 336.512679][T16753] total_swap 442368 [ 336.524660][T16753] total_swapcached 5885952 [ 336.538329][T16753] total_pgpgin 91441 [ 336.551958][T16753] total_pgpgout 90770 [ 336.566169][T16753] total_pgfault 141577 [ 336.580461][T16753] total_pgmajfault 96 [ 336.595170][T16753] total_inactive_anon 0 [ 336.609252][T16753] total_active_anon 2748416 [ 336.624618][T16753] total_inactive_file 0 [ 336.636199][T16753] total_active_file 0 [ 336.651909][T16753] total_unevictable 0 [ 336.664078][T16753] anon_cost 16 [ 336.682316][T16753] file_cost 0 [ 336.696347][T16753] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5248,pid=16752,uid=0 [ 336.745880][T16753] Memory cgroup out of memory: Killed process 16752 (syz.2.5248) total-vm:108392kB, anon-rss:3932kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 337.642783][T16873] Process accounting resumed [ 338.519814][ T5775] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 338.668208][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 338.668234][ T5775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 338.668239][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.668247][ T5775] Call Trace: [ 338.668252][ T5775] [ 338.668257][ T5775] dump_stack_lvl+0x100/0x190 [ 338.668278][ T5775] dump_header+0xfb/0x606 [ 338.668295][ T5775] oom_kill_process.cold+0xd/0x330 [ 338.668312][ T5775] out_of_memory+0x340/0x14f0 [ 338.668338][ T5775] ? __pfx_out_of_memory+0x10/0x10 [ 338.668365][ T5775] mem_cgroup_out_of_memory+0xc6/0x130 [ 338.668382][ T5775] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 338.668396][ T5775] ? find_held_lock+0x2b/0x80 [ 338.668418][ T5775] ? do_raw_spin_unlock+0x145/0x1e0 [ 338.668434][ T5775] ? _raw_spin_unlock+0x28/0x50 [ 338.668451][ T5775] try_charge_memcg+0x6e5/0xdf0 [ 338.668475][ T5775] ? __pfx_try_charge_memcg+0x10/0x10 [ 338.668493][ T5775] ? find_held_lock+0x2b/0x80 [ 338.668509][ T5775] ? rcu_read_unlock+0x17/0x60 [ 338.668529][ T5775] ? rcu_read_unlock+0x17/0x60 [ 338.668554][ T5775] ? find_held_lock+0x2b/0x80 [ 338.668571][ T5775] ? rcu_read_unlock+0x17/0x60 [ 338.668594][ T5775] charge_memcg+0x187/0x1e0 [ 338.668615][ T5775] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 338.668632][ T5775] swap_cache_alloc_folio+0x548/0xc50 [ 338.668652][ T5775] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 338.668668][ T5775] ? swap_cache_get_folio+0x28d/0x360 [ 338.668684][ T5775] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 338.668700][ T5775] ? tick_program_event+0xb0/0x140 [ 338.668724][ T5775] swap_cache_read_folio+0x47/0x140 [ 338.668743][ T5775] swap_cluster_readahead+0x479/0x5f0 [ 338.668759][ T5775] ? __lock_acquire+0x49f/0x1a40 [ 338.668782][ T5775] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 338.668807][ T5775] ? __lock_acquire+0x49f/0x1a40 [ 338.668828][ T5775] ? get_vma_policy+0x23d/0x3b0 [ 338.668850][ T5775] swapin_readahead+0x159/0x1200 [ 338.668865][ T5775] ? debug_object_assert_init+0x1c4/0x310 [ 338.668893][ T5775] ? __pfx_swapin_readahead+0x10/0x10 [ 338.668913][ T5775] ? swap_table_get+0x10d/0x2c0 [ 338.668928][ T5775] ? swap_cache_get_folio+0x28d/0x360 [ 338.668943][ T5775] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 338.668958][ T5775] ? __pfx_softleaf_type+0x10/0x10 [ 338.668978][ T5775] ? do_swap_page+0xf98/0x5780 [ 338.668990][ T5775] do_swap_page+0xf98/0x5780 [ 338.669013][ T5775] ? __pfx_do_swap_page+0x10/0x10 [ 338.669028][ T5775] ? __lock_acquire+0x49f/0x1a40 [ 338.669048][ T5775] ? lockdep_hardirqs_on+0x78/0x100 [ 338.669072][ T5775] ? rcu_is_watching+0x12/0xc0 [ 338.669089][ T5775] ? __pte_offset_map+0x179/0x310 [ 338.669110][ T5775] __handle_mm_fault+0x192f/0x2a00 [ 338.669128][ T5775] ? reacquire_held_locks+0xce/0x1e0 [ 338.669150][ T5775] ? __pfx___handle_mm_fault+0x10/0x10 [ 338.669167][ T5775] ? lock_vma_under_rcu+0x17c/0x590 [ 338.669193][ T5775] handle_mm_fault+0x37b/0xa30 [ 338.669211][ T5775] do_user_addr_fault+0x5a3/0x12f0 [ 338.669237][ T5775] exc_page_fault+0x6f/0xd0 [ 338.669253][ T5775] asm_exc_page_fault+0x26/0x30 [ 338.669267][ T5775] RIP: 0033:0x7faa5d75e6ce [ 338.669280][ T5775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.669293][ T5775] RSP: 002b:00007fff95628428 EFLAGS: 00010246 [ 338.669305][ T5775] RAX: 0000000000000000 RBX: 000055556e7cc500 RCX: 00007faa5d75e6ce [ 338.669314][ T5775] RDX: 00007fff95628480 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.669322][ T5775] RBP: 00007fff956284ec R08: 0000000000000000 R09: 0000000000000000 [ 338.669330][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 338.669338][ T5775] R13: 00000000000927c0 R14: 0000000000052b80 R15: 00007fff95628540 [ 338.669357][ T5775] [ 338.669363][ T5775] memory: usage 3072kB, limit 3072kB, failcnt 5297 [ 340.491281][ T5775] memory+swap: usage 3256kB, limit 9007199254740988kB, failcnt 0 [ 340.538601][ T5775] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 340.587817][ T5775] Memory cgroup stats for /syz2: [ 340.587992][ T5775] cache 0 [ 340.633719][ T5775] rss 0 [ 340.651748][ T5775] rss_huge 0 [ 340.674044][ T5775] shmem 0 [ 340.687037][ T5775] mapped_file 0 [ 340.709668][ T5775] dirty 0 [ 340.731353][ T5775] writeback 0 [ 340.754571][ T5775] workingset_refault_anon 195 [ 340.783875][ T5775] workingset_refault_file 759 [ 340.809270][ T5775] swap 188416 [ 340.825279][ T5775] swapcached 6529024 [ 340.862348][ T5775] pgpgin 91727 [ 340.889585][ T5775] pgpgout 92238 [ 340.910025][ T5775] pgfault 142240 [ 340.937060][ T5775] pgmajfault 142 [ 340.953901][ T5775] inactive_anon 0 [ 340.970202][ T5775] active_anon 0 [ 340.987210][ T5775] inactive_file 0 [ 341.003910][ T5775] active_file 0 [ 341.018847][ T5775] unevictable 0 [ 341.039431][ T5775] hierarchical_memory_limit 3145728 [ 341.078219][ T5775] hierarchical_memsw_limit 9223372036854771712 [ 341.093659][ T5775] total_cache 0 [ 341.108040][ T5775] total_rss 0 [ 341.123157][ T5775] total_rss_huge 0 [ 341.137867][ T5775] total_shmem 0 [ 341.159385][ T5775] total_mapped_file 0 [ 341.178046][ T5775] total_dirty 0 [ 341.205415][ T5775] total_writeback 0 [ 341.228764][ T5775] total_workingset_refault_anon 195 [ 341.256693][ T5775] total_workingset_refault_file 759 [ 341.293980][ T5775] total_swap 188416 [ 341.310763][ T5775] total_swapcached 6529024 [ 341.332798][ T5775] total_pgpgin 91727 [ 341.350743][ T5775] total_pgpgout 92238 [ 341.369968][ T5775] total_pgfault 142240 [ 341.390228][ T5775] total_pgmajfault 142 [ 341.405950][ T5775] total_inactive_anon 0 [ 341.428099][ T5775] total_active_anon 0 [ 341.445559][ T5775] total_inactive_file 0 [ 341.466506][ T5775] total_active_file 0 [ 341.486523][ T5775] total_unevictable 0 [ 341.505943][ T5775] anon_cost 18 [ 341.523896][ T5775] file_cost 0 [ 341.537083][ T5775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5312,pid=16887,uid=0 [ 341.618557][ T5775] Memory cgroup out of memory: Killed process 16887 (syz.2.5312) total-vm:104292kB, anon-rss:1248kB, file-rss:21648kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 342.505109][T17035] syz.3.5376 (17035): /proc/17033/oom_adj is deprecated, please use /proc/17033/oom_score_adj instead. [ 342.721422][ T29] audit: type=1400 audit(4294967307.299:22): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17042 comm="syz.3.5379" [ 342.824738][T15837] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 342.824762][T15837] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 342.839702][T15837] Bluetooth: hci1: Dropping invalid advertising data [ 342.846476][T15837] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 342.846501][T15837] Bluetooth: hci1: Dropping invalid advertising data [ 342.863904][T15837] Bluetooth: hci1: Malformed LE Event: 0x02 [ 343.463960][T17072] block2mtd: illegal erase size [ 344.680250][T17115] Format for deleting device is "id" (uint). [ 345.194906][T17132] kAFS: Invalid Command on /proc/fs/afs/cells file [ 347.497946][T15837] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 347.497970][T15837] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 347.512762][T15837] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 349.563707][T15837] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 349.563739][T15837] Bluetooth: hci3: unexpected event for opcode 0x647c [ 350.214583][T15837] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 350.214632][T15837] Bluetooth: hci2: unexpected event for opcode 0x647c [ 351.007862][T17352] syz.4.5529 (17352): drop_caches: 0 [ 351.073355][T17349] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 355.345536][ T5911] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 358.515728][T17695] sd 0:0:1:0: PR command failed: 1026 [ 358.524829][T17695] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 358.533119][T17695] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 358.736190][T17704] bond0: option fail_over_mac: invalid value () [ 362.337373][T17861] : Can't lookup blockdev [ 363.060418][T17902] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 365.901762][T18019] syz.3.5856 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 365.916142][T18019] CPU: 1 UID: 0 PID: 18019 Comm: syz.3.5856 Tainted: G U L syzkaller #0 PREEMPT(full) [ 365.916189][T18019] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 365.916198][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.916243][T18019] Call Trace: [ 365.916326][T18019] [ 365.916337][T18019] dump_stack_lvl+0x100/0x190 [ 365.916467][T18019] dump_header+0xfb/0x606 [ 365.916520][T18019] oom_kill_process.cold+0xd/0x330 [ 365.916554][T18019] out_of_memory+0x340/0x14f0 [ 365.916649][T18019] ? __pfx_out_of_memory+0x10/0x10 [ 365.916703][T18019] mem_cgroup_out_of_memory+0xc6/0x130 [ 365.916750][T18019] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 365.916781][T18019] ? find_held_lock+0x2b/0x80 [ 365.916847][T18019] ? do_raw_spin_unlock+0x145/0x1e0 [ 365.916875][T18019] ? _raw_spin_unlock+0x28/0x50 [ 365.917007][T18019] try_charge_memcg+0x6e5/0xdf0 [ 365.917056][T18019] ? __pfx_try_charge_memcg+0x10/0x10 [ 365.917093][T18019] ? find_held_lock+0x2b/0x80 [ 365.917128][T18019] ? rcu_read_unlock+0x17/0x60 [ 365.917167][T18019] ? rcu_read_unlock+0x17/0x60 [ 365.917205][T18019] ? find_held_lock+0x2b/0x80 [ 365.917240][T18019] ? rcu_read_unlock+0x17/0x60 [ 365.917289][T18019] charge_memcg+0x187/0x1e0 [ 365.917331][T18019] __mem_cgroup_charge+0x2b/0x1c0 [ 365.917372][T18019] filemap_add_folio+0xe7/0x630 [ 365.917400][T18019] ? __pfx_filemap_add_folio+0x10/0x10 [ 365.917420][T18019] __filemap_get_folio_mpol+0x584/0x1320 [ 365.917441][T18019] filemap_fault+0x879/0x3130 [ 365.917461][T18019] ? __pfx_filemap_fault+0x10/0x10 [ 365.917482][T18019] ? find_held_lock+0x2b/0x80 [ 365.917502][T18019] __do_fault+0x10b/0x440 [ 365.917527][T18019] do_fault+0xa99/0x1750 [ 365.917551][T18019] __handle_mm_fault+0x187d/0x2a00 [ 365.917568][T18019] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 365.917587][T18019] ? __pfx___handle_mm_fault+0x10/0x10 [ 365.917603][T18019] ? pte_offset_map_lock+0x174/0x320 [ 365.917623][T18019] ? find_held_lock+0x2b/0x80 [ 365.917647][T18019] ? follow_page_pte+0x4d0/0x13f0 [ 365.917671][T18019] handle_mm_fault+0x37b/0xa30 [ 365.917690][T18019] __get_user_pages+0x1178/0x32a0 [ 365.917718][T18019] ? __pfx___get_user_pages+0x10/0x10 [ 365.917745][T18019] populate_vma_page_range+0x267/0x3f0 [ 365.917785][T18019] ? __pfx_populate_vma_page_range+0x10/0x10 [ 365.917812][T18019] ? __pfx_find_vma_intersection+0x10/0x10 [ 365.917833][T18019] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 365.917853][T18019] __mm_populate+0x107/0x3a0 [ 365.917875][T18019] ? __pfx___mm_populate+0x10/0x10 [ 365.917897][T18019] ? up_write+0x2e5/0x5c0 [ 365.917914][T18019] __do_sys_mlockall+0x4f4/0x5d0 [ 365.917933][T18019] do_syscall_64+0x115/0x840 [ 365.918001][T18019] ? clear_bhb_loop+0x40/0x90 [ 365.918025][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.918041][T18019] RIP: 0033:0x7fae6639de99 [ 365.918056][T18019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.918069][T18019] RSP: 002b:00007fae672aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 365.918118][T18019] RAX: ffffffffffffffda RBX: 00007fae66625fa0 RCX: 00007fae6639de99 [ 365.918128][T18019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 365.918136][T18019] RBP: 00007fae66433eaf R08: 0000000000000000 R09: 0000000000000000 [ 365.918144][T18019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.918153][T18019] R13: 00007fae66626038 R14: 00007fae66625fa0 R15: 00007ffea7e56c98 [ 365.918173][T18019] [ 365.919175][T18019] memory: usage 3072kB, limit 3072kB, failcnt 7763 [ 366.277365][T18019] memory+swap: usage 3104kB, limit 9007199254740988kB, failcnt 0 [ 366.285279][T18019] kmem: usage 476kB, limit 9007199254740988kB, failcnt 0 [ 366.292431][T18019] Memory cgroup stats for /syz3: [ 366.292774][T18019] cache 2478080 [ 366.301389][T18019] rss 180224 [ 366.304644][T18019] rss_huge 0 [ 366.307947][T18019] shmem 0 [ 366.310931][T18019] mapped_file 2457600 [ 366.314928][T18019] dirty 4096 [ 366.318194][T18019] writeback 0 [ 366.326224][T18019] workingset_refault_anon 1351 [ 366.335353][T18019] workingset_refault_file 3739 [ 366.340588][T18019] swap 36864 [ 366.343831][T18019] swapcached 14987264 [ 366.347825][T18019] pgpgin 78253 [ 366.351584][T18019] pgpgout 79137 [ 366.355094][T18019] pgfault 163809 [ 366.358665][T18019] pgmajfault 388 [ 366.362568][T18019] inactive_anon 0 [ 366.366251][T18019] active_anon 0 [ 366.370000][T18019] inactive_file 20480 [ 366.374031][T18019] active_file 0 [ 366.377501][T18019] unevictable 2633728 [ 366.383285][T18019] hierarchical_memory_limit 3145728 [ 366.388543][T18019] hierarchical_memsw_limit 9223372036854771712 [ 366.395042][T18019] total_cache 2478080 [ 366.399218][T18019] total_rss 180224 [ 366.402949][T18019] total_rss_huge 0 [ 366.406654][T18019] total_shmem 0 [ 366.410184][T18019] total_mapped_file 2457600 [ 366.414698][T18019] total_dirty 4096 [ 366.418404][T18019] total_writeback 0 [ 366.422265][T18019] total_workingset_refault_anon 1351 [ 366.427669][T18019] total_workingset_refault_file 3739 [ 366.433036][T18019] total_swap 36864 [ 366.436782][T18019] total_swapcached 14987264 [ 366.441381][T18019] total_pgpgin 78253 [ 366.445279][T18019] total_pgpgout 79137 [ 366.449364][T18019] total_pgfault 163809 [ 366.453456][T18019] total_pgmajfault 388 [ 366.457509][T18019] total_inactive_anon 0 [ 366.461708][T18019] total_active_anon 0 [ 366.465697][T18019] total_inactive_file 20480 [ 366.470275][T18019] total_active_file 0 [ 366.474460][T18019] total_unevictable 2633728 [ 366.479186][T18019] anon_cost 0 [ 366.482507][T18019] file_cost 3 [ 366.485779][T18019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5856,pid=18018,uid=0 [ 366.503972][T18019] Memory cgroup out of memory: Killed process 18018 (syz.3.5856) total-vm:104424kB, anon-rss:1420kB, file-rss:57228kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 366.997441][T18052] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 367.385390][T18067] cougar: G6 mapped to space [ 367.579449][T18070] Process accounting paused [ 367.617734][T18054] syz.2.5871 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 367.631889][T18054] CPU: 0 UID: 0 PID: 18054 Comm: syz.2.5871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 367.631934][T18054] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 367.631944][T18054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 367.631960][T18054] Call Trace: [ 367.631969][T18054] [ 367.631979][T18054] dump_stack_lvl+0x100/0x190 [ 367.632018][T18054] dump_header+0xfb/0x606 [ 367.632050][T18054] oom_kill_process.cold+0xd/0x330 [ 367.632093][T18054] out_of_memory+0x340/0x14f0 [ 367.632143][T18054] ? __pfx_out_of_memory+0x10/0x10 [ 367.632196][T18054] mem_cgroup_out_of_memory+0xc6/0x130 [ 367.632227][T18054] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 367.632258][T18054] ? find_held_lock+0x2b/0x80 [ 367.632300][T18054] ? do_raw_spin_unlock+0x145/0x1e0 [ 367.632332][T18054] ? _raw_spin_unlock+0x28/0x50 [ 367.632376][T18054] try_charge_memcg+0x6e5/0xdf0 [ 367.632424][T18054] ? __pfx_try_charge_memcg+0x10/0x10 [ 367.632463][T18054] ? find_held_lock+0x2b/0x80 [ 367.632496][T18054] ? rcu_read_unlock+0x17/0x60 [ 367.632537][T18054] ? rcu_read_unlock+0x17/0x60 [ 367.632577][T18054] ? find_held_lock+0x2b/0x80 [ 367.632612][T18054] ? rcu_read_unlock+0x17/0x60 [ 367.632660][T18054] charge_memcg+0x187/0x1e0 [ 367.632702][T18054] __mem_cgroup_charge+0x2b/0x1c0 [ 367.632750][T18054] filemap_add_folio+0xe7/0x630 [ 367.632780][T18054] ? __pfx_filemap_add_folio+0x10/0x10 [ 367.632819][T18054] __filemap_get_folio_mpol+0x584/0x1320 [ 367.632860][T18054] filemap_fault+0x879/0x3130 [ 367.632897][T18054] ? __pfx_filemap_fault+0x10/0x10 [ 367.632938][T18054] ? find_held_lock+0x2b/0x80 [ 367.632974][T18054] __do_fault+0x10b/0x440 [ 367.633011][T18054] do_fault+0xa99/0x1750 [ 367.633063][T18054] __handle_mm_fault+0x187d/0x2a00 [ 367.633095][T18054] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.633130][T18054] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.633160][T18054] ? pte_offset_map_lock+0x174/0x320 [ 367.633196][T18054] ? find_held_lock+0x2b/0x80 [ 367.633242][T18054] ? follow_page_pte+0x4d0/0x13f0 [ 367.633288][T18054] handle_mm_fault+0x37b/0xa30 [ 367.633324][T18054] __get_user_pages+0x1178/0x32a0 [ 367.633378][T18054] ? __pfx___get_user_pages+0x10/0x10 [ 367.633429][T18054] populate_vma_page_range+0x267/0x3f0 [ 367.633472][T18054] ? __pfx_populate_vma_page_range+0x10/0x10 [ 367.633512][T18054] ? __pfx_find_vma_intersection+0x10/0x10 [ 367.633556][T18054] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 367.633594][T18054] __mm_populate+0x107/0x3a0 [ 367.633636][T18054] ? __pfx___mm_populate+0x10/0x10 [ 367.633680][T18054] ? up_write+0x2e5/0x5c0 [ 367.633710][T18054] __do_sys_mlockall+0x4f4/0x5d0 [ 367.633745][T18054] do_syscall_64+0x115/0x840 [ 367.633777][T18054] ? clear_bhb_loop+0x40/0x90 [ 367.633812][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.633841][T18054] RIP: 0033:0x7faa5d79de99 [ 367.633865][T18054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.633890][T18054] RSP: 002b:00007faa5e650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 367.633915][T18054] RAX: ffffffffffffffda RBX: 00007faa5da25fa0 RCX: 00007faa5d79de99 [ 367.633933][T18054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 367.633948][T18054] RBP: 00007faa5d833eaf R08: 0000000000000000 R09: 0000000000000000 [ 367.633965][T18054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.633980][T18054] R13: 00007faa5da26038 R14: 00007faa5da25fa0 R15: 00007fff95628148 [ 367.634018][T18054] [ 368.054001][T18054] memory: usage 3072kB, limit 3072kB, failcnt 6710 [ 368.063880][T18054] memory+swap: usage 3096kB, limit 9007199254740988kB, failcnt 0 [ 368.071766][T18054] kmem: usage 440kB, limit 9007199254740988kB, failcnt 0 [ 368.079021][T18054] Memory cgroup stats for /syz2: [ 368.079234][T18054] cache 2449408 [ 368.088384][T18054] rss 180224 [ 368.094896][T18054] rss_huge 0 [ 368.098141][T18054] shmem 0 [ 368.103451][T18054] mapped_file 2449408 [ 368.107652][T18054] dirty 0 [ 368.110703][T18054] writeback 0 [ 368.114139][T18054] workingset_refault_anon 343 [ 368.118877][T18054] workingset_refault_file 1601 [ 368.123740][T18054] swap 24576 [ 368.131355][T18054] swapcached 7131136 [ 368.135518][T18054] pgpgin 98452 [ 368.138914][T18054] pgpgout 100874 [ 368.142746][T18054] pgfault 160745 [ 368.146523][T18054] pgmajfault 219 [ 368.150224][T18054] inactive_anon 12288 [ 368.157988][T18054] active_anon 0 [ 368.167869][T18054] inactive_file 0 [ 368.171671][T18054] active_file 0 [ 368.175302][T18054] unevictable 2625536 [ 368.179310][T18054] hierarchical_memory_limit 3145728 [ 368.185014][T18054] hierarchical_memsw_limit 9223372036854771712 [ 368.191367][T18054] total_cache 2449408 [ 368.195513][T18054] total_rss 180224 [ 368.202747][T18054] total_rss_huge 0 [ 368.206522][T18054] total_shmem 0 [ 368.211906][T18054] total_mapped_file 2449408 [ 368.216465][T18054] total_dirty 0 [ 368.220178][T18054] total_writeback 0 [ 368.224195][T18054] total_workingset_refault_anon 343 [ 368.229713][T18054] total_workingset_refault_file 1601 [ 368.235222][T18054] total_swap 24576 [ 368.243035][T18054] total_swapcached 7131136 [ 368.247497][T18054] total_pgpgin 98452 [ 368.268979][T18054] total_pgpgout 100874 [ 368.273767][T18054] total_pgfault 160745 [ 368.277902][T18054] total_pgmajfault 219 [ 368.288855][T18054] total_inactive_anon 12288 [ 368.300019][T18054] total_active_anon 0 [ 368.307222][T18054] total_inactive_file 0 [ 368.313629][T18054] total_active_file 0 [ 368.327941][T18054] total_unevictable 2625536 [ 368.332862][T18054] anon_cost 11 [ 368.337912][T18054] file_cost 0 [ 368.342959][T18054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5871,pid=18051,uid=0 [ 368.398287][T18054] Memory cgroup out of memory: Killed process 18054 (syz.2.5871) total-vm:104424kB, anon-rss:1424kB, file-rss:57248kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 369.365155][T18139] kfence: disabled [ 369.529148][T18145] blkio.reset_stats is deprecated [ 369.879610][T18162] TCP: TCP_TX_DELAY enabled [ 372.514674][T18315] ICMPv6: process `syz.4.5999' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 373.053284][T18345] CIFS mount error: No usable UNC path provided in device string! [ 373.053284][T18345] [ 373.076233][T18345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.214886][T18354] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 373.234210][T18354] ep_00: uevent: failed to send synthetic uevent: -22 [ 374.632839][T18438] aoe: can't write to that file. [ 375.677279][T18501] bond0: no command found in slaves file - use +ifname or -ifname [ 377.563229][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.573294][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.861961][T18625] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 378.687376][T18656] bond0: invalid ARP target specified [ 380.804654][T18733] ICMPv6: process `syz.4.6203' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 381.337456][T18751] nvme_fcloop: unknown parameter or missing value '' [ 382.772645][T18826] kAFS: No cell specified [ 383.873208][T18869] qrtr: Invalid version 13 [ 384.462523][T18885] kernel read not supported for file /\*)A (pid: 18885 comm: syz.3.6275) [ 384.527114][ T29] audit: type=1800 audit(4294967349.326:23): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6275" name="\*)A" dev="mqueue" ino=50965 res=0 errno=0 [ 384.991038][T18897] nvme_fcloop: unknown parameter or missing value '' [ 385.672142][T18914] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 388.224740][ T29] audit: type=1400 audit(4294967353.035:24): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19018 comm="syz.1.6329" [ 390.455208][T19120] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 393.794278][T19244] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000cb0 pfn:0x78000 [ 393.816405][T19244] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 393.838624][T19244] raw: 00fff00000000000 dead000000000040 ffff888026385000 0000000000000000 [ 393.855112][T19244] raw: ffff888078000cb0 0000000000000001 00000001ffffffff 0000000000000000 [ 393.864415][T19244] page dumped because: unmovable page [ 393.870614][T19244] page_owner tracks the page as allocated [ 393.886680][T19244] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5288, tgid 5288 (dhcpcd), ts 54214787036, free_ts 48587569384 [ 393.941454][T19244] post_alloc_hook+0xfd/0x120 [ 393.953690][T19244] get_page_from_freelist+0xf48/0x3530 [ 393.961424][T19244] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 393.975315][T19244] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 393.985498][T19244] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 394.013754][T19244] page_pool_alloc_netmems+0xc4/0x1a0 [ 394.025639][T19244] page_pool_alloc_frag_netmem+0x21d/0xa10 [ 394.040184][T19244] try_fill_recv+0x909/0x2950 [ 394.046062][T19244] virtnet_open+0x2d5/0x9a0 [ 394.056524][T19244] __dev_open+0x3ad/0x8f0 [ 394.063749][T19244] __dev_change_flags+0x596/0x850 [ 394.063948][T19244] netif_change_flags+0x8d/0x160 [ 394.063986][T19244] dev_change_flags+0xba/0x260 [ 394.064069][T19244] devinet_ioctl+0x110b/0x1f10 [ 394.064177][T19244] inet_ioctl+0x3aa/0x3f0 [ 394.064237][T19244] sock_do_ioctl+0x118/0x280 [ 394.064346][T19244] page last free pid 5001 tgid 5001 stack trace: [ 394.064365][T19244] __free_frozen_pages+0x79f/0x1090 [ 394.064411][T19244] qlist_free_all+0x47/0xf0 [ 394.064443][T19244] kasan_quarantine_reduce+0x1a0/0x1f0 [ 394.064478][T19244] __kasan_slab_alloc+0x69/0x90 [ 394.064515][T19244] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 394.064550][T19244] do_getname+0x35/0x390 [ 394.064600][T19244] do_sys_openat2+0xc7/0x1e0 [ 394.064636][T19244] __x64_sys_openat+0x12d/0x210 [ 394.064673][T19244] do_syscall_64+0x115/0x840 [ 394.068275][T19244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.303207][T19264] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 395.812031][T19346] syz.1.6487: vm.laptop_mode is deprecated. Ignoring setting. [ 395.947131][T19354] syz_tun: tun_chr_ioctl cmd 2147767507 [ 397.140744][T19418] bond0: option slaves: interface -]=,Do does not exist! [ 397.450393][T19430] Process accounting resumed [ 397.608217][T19441] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 397.608682][T19440] ima: policy update failed [ 397.642458][ T29] audit: type=1802 audit(4294967362.504:25): pid=19440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.6535" res=0 errno=0 [ 399.693975][T19544] Setting dangerous option i915.mitigations - tainting kernel [ 400.002626][T15696] Bluetooth: hci0: command 0x2016 tx timeout [ 400.232875][T15837] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.233666][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 401.727948][T19661] synth uevent: /bus/mei: unknown uevent action string [ 403.013512][T19736] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 403.687011][T19754] syz.2.6691 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 403.746168][T19754] CPU: 0 UID: 0 PID: 19754 Comm: syz.2.6691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.746217][T19754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.746227][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 403.746242][T19754] Call Trace: [ 403.746250][T19754] [ 403.746260][T19754] dump_stack_lvl+0x100/0x190 [ 403.746296][T19754] dump_header+0xfb/0x606 [ 403.746326][T19754] oom_kill_process.cold+0xd/0x330 [ 403.746357][T19754] out_of_memory+0x340/0x14f0 [ 403.746408][T19754] ? __pfx_out_of_memory+0x10/0x10 [ 403.746459][T19754] mem_cgroup_out_of_memory+0xc6/0x130 [ 403.746490][T19754] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 403.746517][T19754] ? find_held_lock+0x2b/0x80 [ 403.746556][T19754] ? do_raw_spin_unlock+0x145/0x1e0 [ 403.746586][T19754] ? _raw_spin_unlock+0x28/0x50 [ 403.746618][T19754] try_charge_memcg+0x6e5/0xdf0 [ 403.746661][T19754] ? __pfx_try_charge_memcg+0x10/0x10 [ 403.746696][T19754] ? find_held_lock+0x2b/0x80 [ 403.746726][T19754] ? rcu_read_unlock+0x17/0x60 [ 403.746763][T19754] ? rcu_read_unlock+0x17/0x60 [ 403.746800][T19754] ? find_held_lock+0x2b/0x80 [ 403.746838][T19754] ? rcu_read_unlock+0x17/0x60 [ 403.746883][T19754] charge_memcg+0x187/0x1e0 [ 403.746921][T19754] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 403.746953][T19754] swap_cache_alloc_folio+0x548/0xc50 [ 403.746991][T19754] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 403.747021][T19754] ? swap_cache_get_folio+0x28d/0x360 [ 403.747050][T19754] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 403.747077][T19754] ? lockdep_hardirqs_on+0x78/0x100 [ 403.747118][T19754] swap_cache_read_folio+0x47/0x140 [ 403.747153][T19754] swap_cluster_readahead+0x479/0x5f0 [ 403.747191][T19754] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 403.747220][T19754] ? debug_object_activate+0x343/0x4b0 [ 403.747410][T19754] ? lock_acquire+0x1b9/0x370 [ 403.747455][T19754] ? __lock_acquire+0x49f/0x1a40 [ 403.747488][T19754] ? get_vma_policy+0x23d/0x3b0 [ 403.747529][T19754] swapin_readahead+0x159/0x1200 [ 403.747558][T19754] ? lapic_next_event+0x10/0x20 [ 403.747617][T19754] ? __pfx_swapin_readahead+0x10/0x10 [ 403.747656][T19754] ? swap_table_get+0x10d/0x2c0 [ 403.747683][T19754] ? swap_cache_get_folio+0x28d/0x360 [ 403.747712][T19754] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 403.747741][T19754] ? __pfx_softleaf_type+0x10/0x10 [ 403.747777][T19754] ? do_swap_page+0xf98/0x5780 [ 403.747801][T19754] do_swap_page+0xf98/0x5780 [ 403.747851][T19754] ? __pfx_do_swap_page+0x10/0x10 [ 403.747877][T19754] ? __lock_acquire+0x49f/0x1a40 [ 403.747916][T19754] ? lockdep_hardirqs_on+0x78/0x100 [ 403.747948][T19754] ? rcu_is_watching+0x12/0xc0 [ 403.747985][T19754] ? __pte_offset_map+0x179/0x310 [ 403.748024][T19754] __handle_mm_fault+0x192f/0x2a00 [ 403.748059][T19754] ? reacquire_held_locks+0xce/0x1e0 [ 403.748099][T19754] ? __pfx___handle_mm_fault+0x10/0x10 [ 403.748133][T19754] ? lock_vma_under_rcu+0x17c/0x590 [ 403.748177][T19754] handle_mm_fault+0x37b/0xa30 [ 403.748212][T19754] do_user_addr_fault+0x5a3/0x12f0 [ 403.748263][T19754] exc_page_fault+0x6f/0xd0 [ 403.748291][T19754] asm_exc_page_fault+0x26/0x30 [ 403.748315][T19754] RIP: 0033:0x7faa5d758ff8 [ 403.748337][T19754] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 403.748361][T19754] RSP: 002b:00007fff95628230 EFLAGS: 00010246 [ 403.748383][T19754] RAX: 0000000000000000 RBX: 000055556e7cc500 RCX: 00007faa5d75e6ce [ 403.748399][T19754] RDX: 00007fff95628280 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.748415][T19754] RBP: 00007faa5da27da0 R08: 0000000000000000 R09: 0000000000000000 [ 403.748430][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000062f4e [ 403.748455][T19754] R13: 00007faa5da25fac R14: 0000000000062c52 R15: 00007fff956283b0 [ 403.748493][T19754] [ 403.798090][T19754] memory: usage 472kB, limit 3072kB, failcnt 7976 [ 404.063859][ T29] audit: type=1800 audit(4294967368.897:26): pid=19778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6703" name="discovery_nqn" dev="configfs" ino=53686 res=0 errno=0 [ 404.064648][T19754] memory+swap: usage 648kB, limit 9007199254740988kB, failcnt 0 [ 404.188695][T19754] kmem: usage 396kB, limit 9007199254740988kB, failcnt 0 [ 404.223067][T19754] Memory cgroup stats for /syz2: [ 404.223259][T19754] cache 0 [ 404.235200][T19754] rss 28672 [ 404.238365][T19754] rss_huge 0 [ 404.242970][T19754] shmem 0 [ 404.245986][T19754] mapped_file 0 [ 404.249462][T19754] dirty 0 [ 404.253751][T19754] writeback 0 [ 404.257094][T19754] workingset_refault_anon 460 [ 404.263655][T19754] workingset_refault_file 1897 [ 404.268488][T19754] swap 180224 [ 404.272344][T19754] swapcached 8097792 [ 404.276430][T19754] pgpgin 105810 [ 404.279996][T19754] pgpgout 112446 [ 404.291393][T19754] pgfault 187580 [ 404.296052][T19754] pgmajfault 285 [ 404.299855][T19754] inactive_anon 0 [ 404.331046][T19754] active_anon 28672 [ 404.335174][T19754] inactive_file 0 [ 404.338821][T19754] active_file 0 [ 404.349476][T19754] unevictable 0 [ 404.358933][T19754] hierarchical_memory_limit 3145728 [ 404.388980][T19754] hierarchical_memsw_limit 9223372036854771712 [ 404.414610][T19754] total_cache 0 [ 404.431181][T19754] total_rss 28672 [ 404.443769][T19754] total_rss_huge 0 [ 404.456586][T19754] total_shmem 0 [ 404.465629][T19754] total_mapped_file 0 [ 404.470509][T19754] total_dirty 0 [ 404.474484][T19754] total_writeback 0 [ 404.478430][T19754] total_workingset_refault_anon 460 [ 404.485036][T19754] total_workingset_refault_file 1897 [ 404.490808][T19754] total_swap 180224 [ 404.494669][T19754] total_swapcached 8097792 [ 404.499228][T19754] total_pgpgin 105810 [ 404.503861][T19754] total_pgpgout 112446 [ 404.508225][T19754] total_pgfault 187580 [ 404.516664][T19754] total_pgmajfault 285 [ 404.524063][T19754] total_inactive_anon 0 [ 404.528956][T19754] total_active_anon 28672 [ 404.534024][T19754] total_inactive_file 0 [ 404.538323][T19754] total_active_file 0 [ 404.544210][T19754] total_unevictable 0 [ 404.549971][T19754] anon_cost 1195 [ 404.562179][T19754] file_cost 0 [ 404.565961][T19754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6691,pid=19754,uid=0 [ 404.583938][T19754] Memory cgroup out of memory: Killed process 19754 (syz.2.6691) total-vm:104292kB, anon-rss:1272kB, file-rss:20996kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 406.851719][T19924] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 406.872892][T19924] cec cec26: uevent: failed to send synthetic uevent: -22 [ 408.153364][T15837] Bluetooth: hci0: unexpected event 0x35 length: 725 > 6 [ 408.577903][T20021] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6823'. [ 409.318503][T20064] openvswitch: netlink: Flow key attribute not present in set flow. [ 409.755559][T20088] netlink: 'syz.1.6855': attribute type 1 has an invalid length. [ 409.814317][T20090] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 410.311517][T20110] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 410.996570][T20150] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 411.440222][ T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 411.468123][T20149] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 411.731888][T20180] netlink: 'syz.4.6899': attribute type 1 has an invalid length. [ 412.558318][T20221] FAULT_INJECTION: forcing a failure. [ 412.558318][T20221] name failslab, interval 1, probability 0, space 0, times 1 [ 412.584800][T20221] CPU: 0 UID: 0 PID: 20221 Comm: syz.3.6918 Tainted: G U L syzkaller #0 PREEMPT(full) [ 412.584847][T20221] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 412.584858][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.584874][T20221] Call Trace: [ 412.584881][T20221] [ 412.584891][T20221] dump_stack_lvl+0x100/0x190 [ 412.584927][T20221] should_fail_ex.cold+0x5/0xa [ 412.584974][T20221] should_failslab+0xc2/0x120 [ 412.585011][T20221] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 412.585044][T20221] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 412.585077][T20221] ? sock_alloc_inode+0x26/0x2c0 [ 412.585122][T20221] ? __pfx_sock_alloc_inode+0x10/0x10 [ 412.585164][T20221] sock_alloc_inode+0x26/0x2c0 [ 412.585204][T20221] ? __pfx_sock_alloc_inode+0x10/0x10 [ 412.585246][T20221] alloc_inode+0x68/0x250 [ 412.585281][T20221] sock_alloc+0x44/0x280 [ 412.585316][T20221] ? security_socket_create+0x7f/0x250 [ 412.585396][T20221] __sock_create+0xc2/0x860 [ 412.585425][T20221] ? lockdep_init_map_type+0x5c/0x250 [ 412.585457][T20221] smc_create+0x163/0x290 [ 412.585539][T20221] __sock_create+0x339/0x860 [ 412.585575][T20221] __sys_socket+0x14d/0x260 [ 412.585616][T20221] ? __pfx___sys_socket+0x10/0x10 [ 412.585657][T20221] __x64_sys_socket+0x72/0xb0 [ 412.585686][T20221] ? lockdep_hardirqs_on+0x78/0x100 [ 412.585719][T20221] do_syscall_64+0x115/0x840 [ 412.585750][T20221] ? clear_bhb_loop+0x40/0x90 [ 412.585785][T20221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.585814][T20221] RIP: 0033:0x7fae6639de99 [ 412.585838][T20221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.585864][T20221] RSP: 002b:00007fae672aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 412.585891][T20221] RAX: ffffffffffffffda RBX: 00007fae66625fa0 RCX: 00007fae6639de99 [ 412.585910][T20221] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 412.585926][T20221] RBP: 00007fae66433eaf R08: 0000000000000000 R09: 0000000000000000 [ 412.585942][T20221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.585958][T20221] R13: 00007fae66626038 R14: 00007fae66625fa0 R15: 00007ffea7e56c98 [ 412.585994][T20221] [ 412.586008][T20221] socket: no more sockets [ 412.833865][T20231] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6921'. [ 413.501036][T20260] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6935'. [ 414.408651][T20303] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 415.130786][ T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 415.999547][T20378] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 416.022532][T20378] CPU: 1 UID: 0 PID: 20378 Comm: syz.3.6993 Tainted: G U L syzkaller #0 PREEMPT(full) [ 416.022590][T20378] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 416.022602][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 416.022619][T20378] Call Trace: [ 416.022628][T20378] [ 416.022638][T20378] dump_stack_lvl+0x100/0x190 [ 416.022679][T20378] sysfs_warn_dup.cold+0x1c/0x28 [ 416.022750][T20378] sysfs_do_create_link_sd+0x113/0x140 [ 416.022801][T20378] sysfs_create_link+0x61/0xc0 [ 416.022843][T20378] device_add+0x675/0x1970 [ 416.022892][T20378] ? __pfx_device_add+0x10/0x10 [ 416.022939][T20378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.023001][T20378] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 416.023261][T20378] wiphy_register+0x2151/0x3110 [ 416.023313][T20378] ? __pfx_wiphy_register+0x10/0x10 [ 416.023345][T20378] ? __asan_memset+0x23/0x50 [ 416.023379][T20378] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 416.023509][T20378] ieee80211_register_hw+0x3053/0x4580 [ 416.023632][T20378] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 416.023673][T20378] ? __pfx___debug_object_init+0x10/0x10 [ 416.023723][T20378] ? find_held_lock+0x2b/0x80 [ 416.023761][T20378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.023806][T20378] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 416.023882][T20378] ? __hrtimer_setup+0x208/0x330 [ 416.023929][T20378] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 416.024032][T20378] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 416.024079][T20378] ? __asan_memcpy+0x3c/0x60 [ 416.024116][T20378] hwsim_new_radio_nl+0xc6b/0x13f0 [ 416.024161][T20378] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 416.024213][T20378] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 416.024260][T20378] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 416.024310][T20378] genl_family_rcv_msg_doit+0x214/0x300 [ 416.024354][T20378] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 416.024392][T20378] ? genl_get_cmd+0x3e7/0x760 [ 416.024437][T20378] ? bpf_lsm_capable+0x9/0x10 [ 416.024469][T20378] ? security_capable+0x80/0x260 [ 416.024540][T20378] ? ns_capable+0xd2/0xf0 [ 416.024575][T20378] genl_rcv_msg+0x560/0x800 [ 416.024620][T20378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.024658][T20378] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 416.024712][T20378] netlink_rcv_skb+0x159/0x420 [ 416.024743][T20378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.024782][T20378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.024831][T20378] ? netlink_deliver_tap+0x1ae/0xcc0 [ 416.024868][T20378] genl_rcv+0x28/0x40 [ 416.024899][T20378] netlink_unicast+0x585/0x850 [ 416.024937][T20378] ? __pfx_netlink_unicast+0x10/0x10 [ 416.024981][T20378] netlink_sendmsg+0x8b0/0xda0 [ 416.025020][T20378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.025057][T20378] ? apparmor_socket_sendmsg+0x15b/0x270 [ 416.025146][T20378] ____sys_sendmsg+0xa4d/0xbe0 [ 416.025175][T20378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.025212][T20378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.025267][T20378] ___sys_sendmsg+0x190/0x1e0 [ 416.025303][T20378] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.025333][T20378] ? __lock_acquire+0x49f/0x1a40 [ 416.025429][T20378] __sys_sendmsg+0x160/0x210 [ 416.025469][T20378] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.025531][T20378] do_syscall_64+0x115/0x840 [ 416.025565][T20378] ? clear_bhb_loop+0x40/0x90 [ 416.025601][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.025631][T20378] RIP: 0033:0x7fae6639de99 [ 416.025658][T20378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.025685][T20378] RSP: 002b:00007fae672aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.025713][T20378] RAX: ffffffffffffffda RBX: 00007fae66625fa0 RCX: 00007fae6639de99 [ 416.025733][T20378] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 416.025749][T20378] RBP: 00007fae66433eaf R08: 0000000000000000 R09: 0000000000000000 [ 416.025766][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.025782][T20378] R13: 00007fae66626038 R14: 00007fae66625fa0 R15: 00007ffea7e56c98 [ 416.025822][T20378] [ 416.800896][T20394] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 416.808751][T20394] audit: out of memory in audit_log_start [ 417.506294][T20439] FAULT_INJECTION: forcing a failure. [ 417.506294][T20439] name failslab, interval 1, probability 0, space 0, times 0 [ 417.519119][T20439] CPU: 1 UID: 0 PID: 20439 Comm: syz.2.7023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 417.519162][T20439] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 417.519172][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.519186][T20439] Call Trace: [ 417.519194][T20439] [ 417.519203][T20439] dump_stack_lvl+0x100/0x190 [ 417.519241][T20439] should_fail_ex.cold+0x5/0xa [ 417.519270][T20439] should_failslab+0xc2/0x120 [ 417.519307][T20439] __kmalloc_cache_noprof+0x91/0x6c0 [ 417.519333][T20439] ? call_usermodehelper_setup+0xaf/0x360 [ 417.519377][T20439] ? __pfx_free_modprobe_argv+0x10/0x10 [ 417.519408][T20439] call_usermodehelper_setup+0xaf/0x360 [ 417.519456][T20439] __request_module+0x3c7/0x6a0 [ 417.519487][T20439] ? __pfx___request_module+0x10/0x10 [ 417.519548][T20439] ? find_held_lock+0x2b/0x80 [ 417.519584][T20439] ? inet6_create+0xb9f/0x12b0 [ 417.519708][T20439] inet6_create+0xd65/0x12b0 [ 417.519738][T20439] ? inet6_create+0x7f/0x12b0 [ 417.519769][T20439] __sock_create+0x339/0x860 [ 417.519805][T20439] __sys_socket+0x14d/0x260 [ 417.519833][T20439] ? fput+0x79/0x100 [ 417.519864][T20439] ? __pfx___sys_socket+0x10/0x10 [ 417.519890][T20439] ? ksys_write+0x1ac/0x250 [ 417.519907][T20439] ? __pfx_ksys_write+0x10/0x10 [ 417.519924][T20439] __x64_sys_socket+0x72/0xb0 [ 417.519939][T20439] ? lockdep_hardirqs_on+0x78/0x100 [ 417.519958][T20439] do_syscall_64+0x115/0x840 [ 417.519974][T20439] ? clear_bhb_loop+0x40/0x90 [ 417.519996][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.520013][T20439] RIP: 0033:0x7faa5d79de99 [ 417.520028][T20439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.520043][T20439] RSP: 002b:00007faa5e650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 417.520058][T20439] RAX: ffffffffffffffda RBX: 00007faa5da25fa0 RCX: 00007faa5d79de99 [ 417.520068][T20439] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 417.520077][T20439] RBP: 00007faa5d833eaf R08: 0000000000000000 R09: 0000000000000000 [ 417.520085][T20439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.520094][T20439] R13: 00007faa5da26038 R14: 00007faa5da25fa0 R15: 00007fff95628148 [ 417.520114][T20439] [ 417.759266][T20440] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 418.958691][T20494] netlink: 'syz.3.7047': attribute type 1 has an invalid length. [ 419.059307][T20499] netlink: ct family unspecified [ 419.278585][T20512] FAULT_INJECTION: forcing a failure. [ 419.278585][T20512] name failslab, interval 1, probability 0, space 0, times 0 [ 419.323616][T20512] CPU: 0 UID: 0 PID: 20512 Comm: syz.4.7058 Tainted: G U L syzkaller #0 PREEMPT(full) [ 419.323663][T20512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 419.323674][T20512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 419.323688][T20512] Call Trace: [ 419.323696][T20512] [ 419.323705][T20512] dump_stack_lvl+0x100/0x190 [ 419.323743][T20512] should_fail_ex.cold+0x5/0xa [ 419.323774][T20512] should_failslab+0xc2/0x120 [ 419.323813][T20512] __kmalloc_noprof+0xfc/0x820 [ 419.323847][T20512] ? string_escape_mem+0x746/0xe00 [ 419.323959][T20512] ? kstrdup_quotable+0xc2/0x190 [ 419.323992][T20512] kstrdup_quotable+0xc2/0x190 [ 419.324019][T20512] ? __pfx_kstrdup_quotable+0x10/0x10 [ 419.324049][T20512] ? get_cmdline+0x86/0x360 [ 419.324090][T20512] kstrdup_quotable_cmdline+0x127/0x210 [ 419.324123][T20512] __report_access+0x77/0x230 [ 419.324161][T20512] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.324194][T20512] task_work_run+0x150/0x240 [ 419.324237][T20512] ? __pfx_task_work_run+0x10/0x10 [ 419.324298][T20512] exit_to_user_mode_loop+0x1d8/0x6f0 [ 419.324325][T20512] ? rcu_is_watching+0x12/0xc0 [ 419.324358][T20512] do_syscall_64+0x652/0x840 [ 419.324390][T20512] ? clear_bhb_loop+0x40/0x90 [ 419.324425][T20512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.324455][T20512] RIP: 0033:0x7f357719de99 [ 419.324479][T20512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.324505][T20512] RSP: 002b:00007f3577ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 419.324531][T20512] RAX: ffffffffffffffff RBX: 00007f3577425fa0 RCX: 00007f357719de99 [ 419.324550][T20512] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 419.324566][T20512] RBP: 00007f3577233eaf R08: 0000000000000004 R09: 0000000000000000 [ 419.324584][T20512] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 419.324599][T20512] R13: 00007f3577426038 R14: 00007f3577425fa0 R15: 00007ffd4d6afd58 [ 419.324634][T20512] [ 419.324658][T20512] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[14363] was attempted by "(null)"[20512] [ 419.795303][T20536] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7069'. [ 419.843101][T20536] Zero length message leads to an empty skb [ 421.126183][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7106'. [ 421.754280][T20634] input: f as /devices/virtual/input/input19 [ 421.943324][T20641] netlink: 'syz.4.7120': attribute type 1 has an invalid length. [ 421.964380][T20641] netlink: 33 bytes leftover after parsing attributes in process `syz.4.7120'. [ 422.366993][T20655] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 423.520609][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7151'. [ 424.302156][T20750] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 424.370283][T20757] nfsd: Unknown parameter '' [ 424.760715][T20775] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 424.777804][T20775] CPU: 0 UID: 0 PID: 20775 Comm: syz.1.7183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 424.777851][T20775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 424.777862][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 424.777892][T20775] Call Trace: [ 424.777902][T20775] [ 424.777913][T20775] dump_stack_lvl+0x100/0x190 [ 424.777954][T20775] sysfs_warn_dup.cold+0x1c/0x28 [ 424.777998][T20775] sysfs_do_create_link_sd+0x113/0x140 [ 424.778044][T20775] sysfs_create_link+0x61/0xc0 [ 424.778087][T20775] device_add+0x675/0x1970 [ 424.778138][T20775] ? __pfx_device_add+0x10/0x10 [ 424.778179][T20775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.778223][T20775] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 424.778270][T20775] wiphy_register+0x2151/0x3110 [ 424.778309][T20775] ? __pfx_wiphy_register+0x10/0x10 [ 424.778346][T20775] ? __asan_memset+0x23/0x50 [ 424.778378][T20775] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 424.778436][T20775] ieee80211_register_hw+0x3053/0x4580 [ 424.778494][T20775] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 424.778531][T20775] ? __pfx___debug_object_init+0x10/0x10 [ 424.778581][T20775] ? find_held_lock+0x2b/0x80 [ 424.778618][T20775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.778660][T20775] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 424.778692][T20775] ? __hrtimer_setup+0x208/0x330 [ 424.778728][T20775] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 424.778792][T20775] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 424.778835][T20775] ? __asan_memcpy+0x3c/0x60 [ 424.778873][T20775] hwsim_new_radio_nl+0xc6b/0x13f0 [ 424.778915][T20775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 424.778965][T20775] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 424.779003][T20775] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 424.779049][T20775] genl_family_rcv_msg_doit+0x214/0x300 [ 424.779086][T20775] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 424.779119][T20775] ? genl_get_cmd+0x3e7/0x760 [ 424.779161][T20775] ? bpf_lsm_capable+0x9/0x10 [ 424.779191][T20775] ? security_capable+0x80/0x260 [ 424.779221][T20775] ? ns_capable+0xd2/0xf0 [ 424.779255][T20775] genl_rcv_msg+0x560/0x800 [ 424.779296][T20775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.779341][T20775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 424.779395][T20775] netlink_rcv_skb+0x159/0x420 [ 424.779427][T20775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.779466][T20775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.779516][T20775] ? netlink_deliver_tap+0x1ae/0xcc0 [ 424.779551][T20775] genl_rcv+0x28/0x40 [ 424.779581][T20775] netlink_unicast+0x585/0x850 [ 424.779619][T20775] ? __pfx_netlink_unicast+0x10/0x10 [ 424.779662][T20775] netlink_sendmsg+0x8b0/0xda0 [ 424.779698][T20775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.779734][T20775] ? apparmor_socket_sendmsg+0x15b/0x270 [ 424.779773][T20775] ____sys_sendmsg+0xa4d/0xbe0 [ 424.779801][T20775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.779836][T20775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.779884][T20775] ___sys_sendmsg+0x190/0x1e0 [ 424.779919][T20775] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.779947][T20775] ? __lock_acquire+0x49f/0x1a40 [ 424.780045][T20775] __sys_sendmsg+0x160/0x210 [ 424.780087][T20775] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.780152][T20775] do_syscall_64+0x115/0x840 [ 424.780186][T20775] ? clear_bhb_loop+0x40/0x90 [ 424.780223][T20775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.780253][T20775] RIP: 0033:0x7fb2cbb9de99 [ 424.780279][T20775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.780307][T20775] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.780356][T20775] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 424.780376][T20775] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.780395][T20775] RBP: 00007fb2cbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 424.780414][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.780431][T20775] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 424.780473][T20775] [ 425.221841][T20778] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 425.566578][T20796] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 426.183739][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7210'. [ 427.038577][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7232'. [ 427.323366][T20894] Process accounting paused [ 427.865154][T20923] netlink: 'syz.1.7251': attribute type 1 has an invalid length. [ 427.924517][T20928] nfsd: Unknown parameter '' [ 429.724795][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7291'. [ 430.334490][ T29] audit: type=1800 audit(4294967308.016:27): pid=21031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7299" name="lu_gp_id" dev="configfs" ino=58000 res=0 errno=0 [ 431.456761][T21079] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 431.999877][T21107] sctp: [Deprecated]: syz.2.7337 (pid 21107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.999877][T21107] Use struct sctp_sack_info instead [ 432.391932][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7345'. [ 433.604623][T21168] netlink: 'syz.4.7366': attribute type 1 has an invalid length. [ 433.773922][T21178] FAULT_INJECTION: forcing a failure. [ 433.773922][T21178] name failslab, interval 1, probability 0, space 0, times 0 [ 433.787394][T21178] CPU: 1 UID: 0 PID: 21178 Comm: syz.1.7369 Tainted: G U L syzkaller #0 PREEMPT(full) [ 433.787444][T21178] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 433.787455][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 433.787472][T21178] Call Trace: [ 433.787482][T21178] [ 433.787492][T21178] dump_stack_lvl+0x100/0x190 [ 433.787532][T21178] should_fail_ex.cold+0x5/0xa [ 433.787567][T21178] should_failslab+0xc2/0x120 [ 433.787607][T21178] kmem_cache_alloc_noprof+0x91/0x6a0 [ 433.787638][T21178] ? __pud_alloc+0x4f6/0x690 [ 433.787672][T21178] ? __pmd_alloc+0xbf/0x950 [ 433.787711][T21178] __pmd_alloc+0xbf/0x950 [ 433.787744][T21178] ? __pud_alloc+0x4fb/0x690 [ 433.787780][T21178] walk_to_pmd+0x3a3/0x4c0 [ 433.787818][T21178] get_locked_pte+0x25/0xc0 [ 433.787854][T21178] map_ldt_struct+0x3c1/0xa70 [ 433.787917][T21178] ? __pfx_map_ldt_struct+0x10/0x10 [ 433.787954][T21178] ? alloc_pages_noprof+0xf9/0x160 [ 433.787984][T21178] write_ldt+0x6d3/0xd40 [ 433.788024][T21178] ? __pfx_write_ldt+0x10/0x10 [ 433.788059][T21178] ? xfd_validate_state+0x129/0x190 [ 433.788097][T21178] __x64_sys_modify_ldt+0xb1/0x170 [ 433.788135][T21178] do_syscall_64+0x115/0x840 [ 433.788165][T21178] ? clear_bhb_loop+0x40/0x90 [ 433.788196][T21178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.788232][T21178] RIP: 0033:0x7fb2cbb9de99 [ 433.788254][T21178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.788279][T21178] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 433.788303][T21178] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 433.788320][T21178] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 433.788336][T21178] RBP: 00007fb2cbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 433.788351][T21178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.788366][T21178] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 433.788400][T21178] [ 434.349319][T21199] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 434.924000][T21228] .^: entered promiscuous mode [ 436.862715][T21316] FAULT_INJECTION: forcing a failure. [ 436.862715][T21316] name failslab, interval 1, probability 0, space 0, times 0 [ 436.882146][T21316] CPU: 1 UID: 0 PID: 21316 Comm: syz.1.7441 Tainted: G U L syzkaller #0 PREEMPT(full) [ 436.882199][T21316] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 436.882211][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.882229][T21316] Call Trace: [ 436.882239][T21316] [ 436.882250][T21316] dump_stack_lvl+0x100/0x190 [ 436.882289][T21316] should_fail_ex.cold+0x5/0xa [ 436.882323][T21316] should_failslab+0xc2/0x120 [ 436.882364][T21316] __kmalloc_cache_noprof+0x91/0x6c0 [ 436.882395][T21316] ? sget_fc+0x120/0x1d80 [ 436.882436][T21316] ? sget_fc+0x120/0x1d80 [ 436.882476][T21316] ? sget_fc+0x1c3/0x1d80 [ 436.882523][T21316] sget_fc+0x1c3/0x1d80 [ 436.882575][T21316] ? __pfx_set_anon_super_fc+0x10/0x10 [ 436.882615][T21316] ? __pfx_sget_fc+0x10/0x10 [ 436.882654][T21316] ? refcount_dec_not_one+0x136/0x1c0 [ 436.882782][T21316] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 436.882828][T21316] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 436.882857][T21316] ? __kasan_kmalloc+0xaa/0xb0 [ 436.882908][T21316] ? __pfx_mqueue_fill_super+0x10/0x10 [ 436.882973][T21316] get_tree_nodev+0x28/0x190 [ 436.883020][T21316] mqueue_get_tree+0xf1/0x130 [ 436.883049][T21316] vfs_get_tree+0x92/0x320 [ 436.883089][T21316] fc_mount_longterm+0x1a/0x270 [ 436.883144][T21316] mq_init_ns+0x482/0x820 [ 436.883207][T21316] copy_ipcs+0x3dd/0x7e0 [ 436.883243][T21316] create_new_namespaces+0x20a/0xac0 [ 436.883275][T21316] ? security_capable+0x80/0x260 [ 436.883310][T21316] unshare_nsproxy_namespaces+0xf2/0x220 [ 436.883345][T21316] ksys_unshare+0x438/0xab0 [ 436.883384][T21316] ? __pfx_ksys_unshare+0x10/0x10 [ 436.883431][T21316] __x64_sys_unshare+0x31/0x40 [ 436.883464][T21316] do_syscall_64+0x115/0x840 [ 436.883499][T21316] ? clear_bhb_loop+0x40/0x90 [ 436.883531][T21316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.883558][T21316] RIP: 0033:0x7fb2cbb9de99 [ 436.883583][T21316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.883610][T21316] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 436.883640][T21316] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 436.883659][T21316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 436.883674][T21316] RBP: 00007fb2cbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 436.883689][T21316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.883704][T21316] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 436.883739][T21316] [ 438.676725][T21386] netlink: Unknown nat attribute (0) [ 438.680920][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.690525][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.499342][T21435] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 448.449031][T21938] dump_stack_lvl+0x100/0x190 [ 448.449071][T21938] should_fail_ex.cold+0x5/0xa [ 448.449102][T21938] should_failslab+0xc2/0x120 [ 448.449140][T21938] __kvmalloc_node_noprof+0x116/0x970 [ 448.449174][T21938] ? percpu_ref_init+0xec/0x3f0 [ 448.449212][T21938] ? io_alloc_cache_init+0x38/0x170 [ 448.449330][T21938] io_alloc_cache_init+0x38/0x170 [ 448.449366][T21938] io_uring_setup.cold+0x450/0x1c2e [ 448.449405][T21938] ? ksys_write+0x190/0x250 [ 448.449431][T21938] ? ksys_write+0x190/0x250 [ 448.449455][T21938] ? __pfx_io_uring_setup+0x10/0x10 [ 448.449519][T21938] ? do_futex+0x190/0x440 [ 448.449548][T21938] ? __pfx_do_futex+0x10/0x10 [ 448.449592][T21938] ? xfd_validate_state+0x129/0x190 [ 448.449634][T21938] __x64_sys_io_uring_setup+0xc2/0x170 [ 448.449667][T21938] do_syscall_64+0x115/0x840 [ 448.449700][T21938] ? clear_bhb_loop+0x40/0x90 [ 448.449734][T21938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.449761][T21938] RIP: 0033:0x7f357719de99 [ 448.449784][T21938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.449811][T21938] RSP: 002b:00007f3577ffd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 448.449836][T21938] RAX: ffffffffffffffda RBX: 00007f3577425fa0 RCX: 00007f357719de99 [ 448.449854][T21938] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 448.449870][T21938] RBP: 00007f3577233eaf R08: 0000000000000000 R09: 0000000000000000 [ 448.449887][T21938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.449901][T21938] R13: 00007f3577426038 R14: 00007f3577425fa0 R15: 00007ffd4d6afd58 [ 448.449939][T21938] [ 449.447817][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7746'. [ 449.633632][T15851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.759934][T21985] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 449.775211][T21985] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 449.846498][T15851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.995948][T15696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.022469][T15696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.031596][T15696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.047667][T15696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.066215][T15696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.176829][T15851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.406055][T15851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.751789][T15851] bridge_slave_1: left allmulticast mode [ 450.757538][T15851] bridge_slave_1: left promiscuous mode [ 450.766295][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.786016][T15851] bridge_slave_0: left allmulticast mode [ 450.792806][T15851] bridge_slave_0: left promiscuous mode [ 450.798705][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.103727][T15851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.137609][T15851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.161246][T15851] bond0 (unregistering): Released all slaves [ 451.250621][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 451.748897][T21989] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.758393][T21989] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.766185][T21989] bridge_slave_0: entered allmulticast mode [ 451.774204][T21989] bridge_slave_0: entered promiscuous mode [ 451.794297][T21989] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.801870][T21989] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.810780][T21989] bridge_slave_1: entered allmulticast mode [ 451.819185][T21989] bridge_slave_1: entered promiscuous mode [ 451.947104][T21989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.962933][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 451.978650][T21989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.020692][T21989] team0: Port device team_slave_0 added [ 452.029645][T21989] team0: Port device team_slave_1 added [ 452.065331][T21989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.072462][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.098887][T21989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.112397][T21989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.120202][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.133064][T15696] Bluetooth: hci0: command tx timeout [ 452.147134][T21989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.360653][T21989] hsr_slave_0: entered promiscuous mode [ 452.375075][T21989] hsr_slave_1: entered promiscuous mode [ 452.382849][T21989] debugfs: 'hsr0' already exists in 'hsr' [ 452.388663][T21989] Cannot create hsr debugfs directory [ 452.596851][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 452.719274][T15851] hsr_slave_0: left promiscuous mode [ 452.725498][T15851] hsr_slave_1: left promiscuous mode [ 452.731895][T15851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.739386][T15851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.747609][T15851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.756108][T15851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.773853][T15851] veth1_macvtap: left promiscuous mode [ 452.779466][T15851] veth0_macvtap: left promiscuous mode [ 452.785012][T15851] veth1_vlan: left promiscuous mode [ 452.791204][T15851] veth0_vlan: left promiscuous mode [ 452.998922][T15851] team0 (unregistering): Port device team_slave_1 removed [ 453.016662][T15851] team0 (unregistering): Port device team_slave_0 removed [ 453.984390][T21989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.014724][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.030475][T21989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.056780][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.067890][T21989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.088897][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.097371][T21989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.116305][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.192404][T15696] Bluetooth: hci0: command tx timeout [ 454.351312][T21989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.387793][T21989] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.409914][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.417142][T15703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.446190][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.453450][T15703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.051775][T21989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.413822][T21989] veth0_vlan: entered promiscuous mode [ 455.433238][T21989] veth1_vlan: entered promiscuous mode [ 455.499609][T21989] veth0_macvtap: entered promiscuous mode [ 455.511892][T21989] veth1_macvtap: entered promiscuous mode [ 455.541582][T21989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.571938][T21989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.591729][T15703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.617472][T15703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.654798][T15703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.700227][T15703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.827913][T15703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.841947][T15703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.907146][T15703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.916672][T15703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.155552][T22164] FAULT_INJECTION: forcing a failure. [ 456.155552][T22164] name failslab, interval 1, probability 0, space 0, times 0 [ 456.193056][T22164] CPU: 1 UID: 0 PID: 22164 Comm: syz.1.7760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 456.193110][T22164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 456.193122][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 456.193140][T22164] Call Trace: [ 456.193154][T22164] [ 456.193166][T22164] dump_stack_lvl+0x100/0x190 [ 456.193207][T22164] should_fail_ex.cold+0x5/0xa [ 456.193241][T22164] should_failslab+0xc2/0x120 [ 456.193281][T22164] __kmalloc_cache_noprof+0x91/0x6c0 [ 456.193313][T22164] ? sctp_auth_shkey_create+0x9e/0x210 [ 456.193487][T22164] sctp_auth_shkey_create+0x9e/0x210 [ 456.193533][T22164] sctp_endpoint_new+0x589/0xb20 [ 456.193607][T22164] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 456.193649][T22164] ? lockdep_init_map_type+0x5c/0x250 [ 456.193682][T22164] ? lockdep_init_map_type+0x5c/0x250 [ 456.193711][T22164] ? lockdep_init_map_type+0x5c/0x250 [ 456.193745][T22164] sctp_init_sock+0xe2b/0x1300 [ 456.193784][T22164] ? __pfx_sctp_init_sock+0x10/0x10 [ 456.193824][T22164] inet_create+0x94c/0x1060 [ 456.193864][T22164] ? inet_create+0x94/0x1060 [ 456.193903][T22164] __sock_create+0x339/0x860 [ 456.193939][T22164] __sys_socket+0x14d/0x260 [ 456.193972][T22164] ? __pfx___sys_socket+0x10/0x10 [ 456.194015][T22164] __x64_sys_socket+0x72/0xb0 [ 456.194046][T22164] ? lockdep_hardirqs_on+0x78/0x100 [ 456.194081][T22164] do_syscall_64+0x115/0x840 [ 456.194115][T22164] ? clear_bhb_loop+0x40/0x90 [ 456.194150][T22164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.194180][T22164] RIP: 0033:0x7fb2cbb9de99 [ 456.194206][T22164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.194232][T22164] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 456.194257][T22164] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 456.194273][T22164] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 456.194289][T22164] RBP: 00007fb2cbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 456.194305][T22164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.194322][T22164] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 456.194360][T22164] [ 456.262457][T15696] Bluetooth: hci0: command tx timeout [ 456.731383][T22183] net_ratelimit: 50 callbacks suppressed [ 456.731406][T22183] openvswitch: netlink: Key type 261 is out of range max 32 [ 456.939535][T22191] openvswitch: netlink: IP tunnel TTL not specified. [ 457.194243][T22198] Process accounting resumed [ 457.416724][T22181] syz_tun: tun_chr_ioctl cmd 1074025698 [ 457.660973][T22229] FAULT_INJECTION: forcing a failure. [ 457.660973][T22229] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 457.686107][T22229] CPU: 1 UID: 0 PID: 22229 Comm: syz.1.7787 Tainted: G U L syzkaller #0 PREEMPT(full) [ 457.686159][T22229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 457.686171][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 457.686189][T22229] Call Trace: [ 457.686197][T22229] [ 457.686207][T22229] dump_stack_lvl+0x100/0x190 [ 457.686247][T22229] should_fail_ex.cold+0x5/0xa [ 457.686272][T22229] ? prepare_alloc_pages+0x16d/0x5f0 [ 457.686314][T22229] should_fail_alloc_page+0xeb/0x140 [ 457.686354][T22229] prepare_alloc_pages+0x1f0/0x5f0 [ 457.686403][T22229] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 457.686440][T22229] ? __pfx___css_rstat_updated+0x10/0x10 [ 457.686498][T22229] ? rcu_is_watching+0x12/0xc0 [ 457.686533][T22229] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 457.686570][T22229] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.686608][T22229] ? find_held_lock+0x2b/0x80 [ 457.686642][T22229] ? rcu_read_unlock+0x17/0x60 [ 457.686683][T22229] ? rcu_read_unlock+0x17/0x60 [ 457.686729][T22229] ? __folio_mod_stat+0x1ce/0x250 [ 457.686788][T22229] ? split_huge_pmd_locked+0x31e/0x3040 [ 457.686820][T22229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.686862][T22229] ? policy_nodemask+0xed/0x4f0 [ 457.686905][T22229] alloc_pages_mpol+0x1fb/0x540 [ 457.686943][T22229] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 457.686985][T22229] ? do_raw_spin_unlock+0x145/0x1e0 [ 457.687018][T22229] alloc_pages_noprof+0x1a/0x160 [ 457.687043][T22229] pte_alloc_one+0x1c/0x3d0 [ 457.687084][T22229] __pte_alloc+0x6d/0x3e0 [ 457.687119][T22229] ? __pfx___pte_alloc+0x10/0x10 [ 457.687152][T22229] ? _raw_spin_unlock+0x28/0x50 [ 457.687180][T22229] ? __pmd_alloc+0x3fb/0x950 [ 457.687223][T22229] move_page_tables+0x2ec4/0x4610 [ 457.687255][T22229] ? __pfx_copy_vma+0x10/0x10 [ 457.687301][T22229] ? __pfx_move_page_tables+0x10/0x10 [ 457.687361][T22229] copy_vma_and_data+0x25c/0x7c0 [ 457.687400][T22229] ? __pfx_copy_vma_and_data+0x10/0x10 [ 457.687453][T22229] ? __vma_start_write+0x17f/0x280 [ 457.687520][T22229] ? __pfx___vma_start_write+0x10/0x10 [ 457.687570][T22229] move_vma+0x574/0x1920 [ 457.687603][T22229] ? __pfx_move_vma+0x10/0x10 [ 457.687638][T22229] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 457.687675][T22229] ? cap_mmap_addr+0x4b/0x120 [ 457.687700][T22229] ? bpf_lsm_mmap_addr+0x9/0x30 [ 457.687726][T22229] ? security_mmap_addr+0x71/0x1e0 [ 457.687775][T22229] ? __get_unmapped_area+0x255/0x3e0 [ 457.687817][T22229] ? vrm_set_new_addr+0x204/0x290 [ 457.687847][T22229] mremap_to+0x234/0x4c0 [ 457.687874][T22229] ? mas_walk+0x6ef/0x9b0 [ 457.687991][T22229] ? __pfx_mremap_to+0x10/0x10 [ 457.688033][T22229] __do_sys_mremap+0x88c/0x1850 [ 457.688079][T22229] ? __pfx___do_sys_mremap+0x10/0x10 [ 457.688110][T22229] ? ksys_write+0x190/0x250 [ 457.688148][T22229] ? __pfx_do_futex+0x10/0x10 [ 457.688191][T22229] ? __x64_sys_futex+0x34f/0x4d0 [ 457.688247][T22229] do_syscall_64+0x115/0x840 [ 457.688280][T22229] ? clear_bhb_loop+0x40/0x90 [ 457.688316][T22229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.688346][T22229] RIP: 0033:0x7fb2cbb9de99 [ 457.688372][T22229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.688401][T22229] RSP: 002b:00007fb2cca42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 457.688430][T22229] RAX: ffffffffffffffda RBX: 00007fb2cbe25fa0 RCX: 00007fb2cbb9de99 [ 457.688450][T22229] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 457.688468][T22229] RBP: 00007fb2cbc33eaf R08: 0000000100000000 R09: 0000000000000000 [ 457.688486][T22229] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 457.688504][T22229] R13: 00007fb2cbe26038 R14: 00007fb2cbe25fa0 R15: 00007ffc2eb994b8 [ 457.688551][T22229] [ 458.335146][T15696] Bluetooth: hci0: command tx timeout [ 458.357900][T22233] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e3a4 [ 458.422170][T22233] memcg:ffff888066d26c80 [ 458.443960][T22233] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 458.462301][T22233] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 458.483835][T22233] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888066d26c80 [ 458.499897][T22233] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 458.528299][T22233] page_owner tracks the page as allocated [ 458.547262][T22233] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 22233, tgid 22232 (syz.2.7789), ts 458357868010, free_ts 458272338863 [ 458.611751][T22233] post_alloc_hook+0xfd/0x120 [ 458.629135][T22233] get_page_from_freelist+0xf48/0x3530 [ 458.640237][T22233] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 458.649608][T22233] alloc_pages_mpol+0x1fb/0x540 [ 458.654836][T22233] folio_alloc_noprof+0x22/0x250 [ 458.660374][T22233] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 458.672623][T22233] filemap_alloc_folio_noprof+0x5e/0x80 [ 458.681727][T22233] page_cache_ra_order+0x539/0xed0 [ 458.690228][T22233] filemap_fault+0x1943/0x3130 [ 458.698493][T22233] __do_fault+0x10b/0x440 [ 458.708645][T22233] do_fault+0xeb2/0x1750 [ 458.722689][T22233] __handle_mm_fault+0x187d/0x2a00 [ 458.736992][T22233] handle_mm_fault+0x37b/0xa30 [ 458.742217][T22233] __get_user_pages+0x1178/0x32a0 [ 458.753866][T22233] populate_vma_page_range+0x267/0x3f0 [ 458.768315][T22233] __mm_populate+0x107/0x3a0 [ 458.778416][T22233] page last free pid 22233 tgid 22232 stack trace: [ 458.792592][T22233] free_unref_folios+0xa44/0x1710 [ 458.808181][T22233] shrink_folio_list+0x2fc5/0x60a0 [ 458.818380][T22233] evict_folios+0x327/0x1960 [ 458.828302][T22233] try_to_shrink_lruvec+0x249/0x6b0 [ 458.840019][T22233] shrink_lruvec+0x31e/0x25b0 [ 458.850084][T22233] shrink_node+0x778/0x3e90 [ 458.860167][T22233] do_try_to_free_pages+0x33e/0x16d0 [ 458.875828][T22233] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 458.885924][T22233] try_charge_memcg+0x47f/0xdf0 [ 458.896009][T22233] charge_memcg+0x187/0x1e0 [ 458.907601][T22233] __mem_cgroup_charge+0x2b/0x1c0 [ 458.917629][T22233] do_fault+0x211/0x1750 [ 458.926801][T22233] __handle_mm_fault+0x187d/0x2a00 [ 458.937463][T22233] handle_mm_fault+0x37b/0xa30 [ 458.949203][T22233] __get_user_pages+0x1178/0x32a0 [ 458.954804][T22233] populate_vma_page_range+0x267/0x3f0 [ 458.978909][T22233] ------------[ cut here ]------------ [ 458.984484][T22233] kernel BUG at mm/filemap.c:858! [ 458.998752][T22233] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 459.005076][T22233] CPU: 1 UID: 0 PID: 22233 Comm: syz.2.7789 Tainted: G U L syzkaller #0 PREEMPT(full) [ 459.013537][T22218] kexec: Could not allocate control_code_buffer [ 459.016738][T22233] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 459.016749][T22233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 459.016764][T22233] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 459.016798][T22233] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 66 ec 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 4f ec 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 38 ec 12 00 [ 459.016826][T22233] RSP: 0018:ffffc90003cbf3f8 EFLAGS: 00010246 [ 459.016850][T22233] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900130fe000 [ 459.016869][T22233] RDX: 0000000000080000 RSI: ffffffff825a5ba8 RDI: ffff88806a3c04c4 [ 459.016887][T22233] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 459.016902][T22233] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 459.016916][T22233] R13: ffffea000138e900 R14: 00000000000001e0 R15: 0000000000000000 [ 459.016932][T22233] FS: 00007faa5e6506c0(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 459.016958][T22233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.125983][T22233] CR2: 00007fb2cba57ad0 CR3: 000000006480c000 CR4: 00000000003526f0 [ 459.133985][T22233] Call Trace: [ 459.137279][T22233] [ 459.140222][T22233] ? __pfx___filemap_add_folio+0x10/0x10 [ 459.145872][T22233] filemap_add_folio+0x1d3/0x630 [ 459.150833][T22233] ? __lock_acquire+0x49f/0x1a40 [ 459.155964][T22233] ? __pfx_filemap_add_folio+0x10/0x10 [ 459.161450][T22233] ? __pfx___css_rstat_updated+0x10/0x10 [ 459.167106][T22233] page_cache_ra_order+0x602/0xed0 [ 459.172263][T22233] filemap_fault+0x1943/0x3130 [ 459.177068][T22233] ? __pfx_filemap_fault+0x10/0x10 [ 459.182197][T22233] ? blk_cgroup_congested+0x136/0x270 [ 459.187662][T22233] ? blk_cgroup_congested+0x136/0x270 [ 459.193046][T22233] ? __pfx_filemap_map_pages+0x10/0x10 [ 459.198511][T22233] __do_fault+0x10b/0x440 [ 459.202857][T22233] do_fault+0xeb2/0x1750 [ 459.207137][T22233] __handle_mm_fault+0x187d/0x2a00 [ 459.212253][T22233] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.217647][T22233] ? __pfx___handle_mm_fault+0x10/0x10 [ 459.223198][T22233] ? pte_offset_map_lock+0x174/0x320 [ 459.228500][T22233] ? find_held_lock+0x2b/0x80 [ 459.233317][T22233] ? follow_page_pte+0x4d0/0x13f0 [ 459.238374][T22233] handle_mm_fault+0x37b/0xa30 [ 459.243149][T22233] __get_user_pages+0x1178/0x32a0 [ 459.248256][T22233] ? __pfx___get_user_pages+0x10/0x10 [ 459.253757][T22233] populate_vma_page_range+0x267/0x3f0 [ 459.259361][T22233] ? __pfx_populate_vma_page_range+0x10/0x10 [ 459.265396][T22233] ? __pfx_find_vma_intersection+0x10/0x10 [ 459.271250][T22233] ? do_mmap+0x93f/0x12f0 [ 459.275618][T22233] __mm_populate+0x107/0x3a0 [ 459.280233][T22233] ? __pfx___mm_populate+0x10/0x10 [ 459.285366][T22233] ? up_write+0x2e5/0x5c0 [ 459.289728][T22233] vm_mmap_pgoff+0x37f/0x470 [ 459.294340][T22233] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 459.299463][T22233] ? __fget_files+0x215/0x3d0 [ 459.304145][T22233] ? __fget_files+0x21f/0x3d0 [ 459.308868][T22233] ksys_mmap_pgoff+0x3cb/0x610 [ 459.313651][T22233] ? __x64_sys_futex+0x358/0x4d0 [ 459.318597][T22233] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 459.323894][T22233] ? xfd_validate_state+0x129/0x190 [ 459.329103][T22233] __x64_sys_mmap+0x125/0x190 [ 459.333813][T22233] do_syscall_64+0x115/0x840 [ 459.338430][T22233] ? clear_bhb_loop+0x40/0x90 [ 459.343212][T22233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.349112][T22233] RIP: 0033:0x7faa5d79de99 [ 459.353637][T22233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.373496][T22233] RSP: 002b:00007faa5e650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 459.382099][T22233] RAX: ffffffffffffffda RBX: 00007faa5da25fa0 RCX: 00007faa5d79de99 [ 459.390105][T22233] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 459.398090][T22233] RBP: 00007faa5d833eaf R08: 0000000000000003 R09: 0000000000008000 [ 459.406067][T22233] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 459.414430][T22233] R13: 00007faa5da26038 R14: 00007faa5da25fa0 R15: 00007fff95628148 [ 459.422423][T22233] [ 459.425465][T22233] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 459.429762][T22233] ---[ end trace 0000000000000000 ]--- [ 459.466489][T22233] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 459.473166][T22233] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 66 ec 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 4f ec 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 38 ec 12 00 [ 459.555346][T22233] RSP: 0018:ffffc90003cbf3f8 EFLAGS: 00010246 [ 459.562548][T22233] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900130fe000 [ 459.571534][T22233] RDX: 0000000000080000 RSI: ffffffff825a5ba8 RDI: ffff88806a3c04c4 [ 459.580248][T22233] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 459.681372][T22233] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 459.704980][T22233] R13: ffffea000138e900 R14: 00000000000001e0 R15: 0000000000000000 [ 459.723419][T22233] FS: 00007faa5e6506c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 459.744413][T22233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.764470][T22233] CR2: 0000001b2d906ff8 CR3: 000000006480c000 CR4: 00000000003526f0 [ 459.783835][T22233] Kernel panic - not syncing: Fatal exception [ 459.790114][T22233] Kernel Offset: disabled [ 459.794441][T22233] Rebooting in 86400 seconds..