last executing test programs: 5m54.527243668s ago: executing program 3 (id=2690): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_VHOST_GET_FEATURES2(r0, 0x8008af00, &(0x7f0000000040)=0x1) 5m54.38372925s ago: executing program 3 (id=2695): socket(0xa, 0x2, 0x3a) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) 5m54.266597568s ago: executing program 3 (id=2698): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa) 5m54.20410448s ago: executing program 3 (id=2700): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sg0\x00', 0x40000, 0x0) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r0, 0x5386, &(0x7f0000000380)) 5m54.088170856s ago: executing program 3 (id=2704): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 5m53.65067405s ago: executing program 3 (id=2714): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4c, &(0x7f0000000180)='\x0ez1\xf02\xc6\n\xf2\x87\x1d\xfeD!\xa8^J9\xaab\x84\xf6\xf7\x93\xa2\x8f\x0e\x1b\xa4\x0fwG]\t\xcd7\f\t\x87\'%\xaf\x80\xdc\x90\x8c\x9cU\a\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x91[\vC\t\x00\x00\x00\x00\x00\x00\x00YA\x92\xed/\"\x92\xf7#{\xa3\xf0\xbe\xc2\xe5\xb5\xc4($\xa4\xfb\a\xe0;b\x16\xfb\xaa\xbf\xc9\xc3DfG\xe5\x00\x00\x00', 0x4) 5m53.376684658s ago: executing program 32 (id=2714): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4c, &(0x7f0000000180)='\x0ez1\xf02\xc6\n\xf2\x87\x1d\xfeD!\xa8^J9\xaab\x84\xf6\xf7\x93\xa2\x8f\x0e\x1b\xa4\x0fwG]\t\xcd7\f\t\x87\'%\xaf\x80\xdc\x90\x8c\x9cU\a\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x91[\vC\t\x00\x00\x00\x00\x00\x00\x00YA\x92\xed/\"\x92\xf7#{\xa3\xf0\xbe\xc2\xe5\xb5\xc4($\xa4\xfb\a\xe0;b\x16\xfb\xaa\xbf\xc9\xc3DfG\xe5\x00\x00\x00', 0x4) 3.851708555s ago: executing program 1 (id=10214): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) 2.956800154s ago: executing program 1 (id=10226): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000180)={0x0, 0xffc}, 0x5) 2.85883433s ago: executing program 1 (id=10228): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, [{0xb88, 0x2, 0x2}]}) 2.643642793s ago: executing program 1 (id=10232): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r1 = fcntl$auto_F_DUPFD(r0, 0x0, r0) listxattrat$auto(r1, &(0x7f00000000c0)='\x00', 0x1000, 0x0, 0x0) 2.39884463s ago: executing program 1 (id=10237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)={0x50, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x20, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x26}]}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 2.128578527s ago: executing program 1 (id=10242): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 1.051170284s ago: executing program 4 (id=10263): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) 912.555851ms ago: executing program 2 (id=10266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/enable\x00', 0x182b02, 0x0) sendfile$auto(r0, r1, 0x0, 0x5) 878.259312ms ago: executing program 4 (id=10267): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pidfd_open$auto(0x1, 0x0) 814.802619ms ago: executing program 0 (id=10268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000740)={0x20, r1, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0xc, 0x138, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_VHT_CAPABILITY={0x4}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) 812.937568ms ago: executing program 2 (id=10269): r0 = socket(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_ifindex=r1, 0x2e, 0x1, 0x9, 0x7f, @prog_cnt=0xffffffff, 0x0, 0xf, 0x8, 0x7, 0xfff}, 0x6) 619.103261ms ago: executing program 0 (id=10270): r0 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/short_retry_limit\x00', 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x0) 550.514741ms ago: executing program 2 (id=10271): sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0xa9deeaafb59e0e44) r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, 0x0) 462.9641ms ago: executing program 4 (id=10272): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x4, 0x0, 0x4) 451.301043ms ago: executing program 0 (id=10273): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x28, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x1, 0x0, 0x8) 400.138009ms ago: executing program 2 (id=10274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x29, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 315.897857ms ago: executing program 4 (id=10275): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0xe) getsockopt$auto(r0, 0x1, 0x38, 0x0, 0x0) 253.203962ms ago: executing program 0 (id=10276): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) 251.47615ms ago: executing program 2 (id=10277): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000340)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\x8f\x1aU\xbbG\x98\x9a\xd9\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xca%8\x94\xa66\xda\xbclm*\xe8]\xe1\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04\x1b\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd30L\xda^\xc9\xd5\xe3U/\xa5$*\xc9\x9cCGl\xb6+\xbf[>l\xc5\xeb\xe5\xfc\x1d\xec\xad\xd0\x89\x9d\v\xbc\xe5\x95\xc3\x18\xb49^\x91\x8b\xee\xa6Q\'\xd7\xf0\'\x16\x19\x13\x01\x17N\xf4yQ#c\xfa=\xc7\xd1\x02Lz&\x8f\x17\xd7\xb5\x86\xa5 \x80\xea\x06\xd6\xdaX\xc6|f\xbd\x7f\x19\x15\xb4\x17w\xbfT\xc7G\xf2\xc3C\x05\x9f9\x01\xe8U\xe5\x19\xaa=\xa8\xc2_\xeb\xa77T0\x9e\xb6\x93\'Ei\xd9\xd5\xbe`\xeb\x16#\xff\xd5\x7f%d\xc9HK>\xe2\xa1Du\r\r\xear\'i\x05\xd2\xf2\x00\xb0(\x928R\x16*\x13\xaa\x1c\xb2E-O\x9a\xe2\xce\x8b\x00\xe0\x06\xe7U\xae%%\xd2\xa8.?c\xc5QI\x00GM\xedn\xbd%\n\xe1\xf3D\xf8\x86\x92\x02B\x05\x16\xc2\x8b\xb4KZ\xa9P\x13\xe3jn\xfc\xec\xc2\x80\x82\x19\x18/\xf3Q\x9ec\xe5\x00\x00', 0x0, 0x0, 0x1) lchown$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 190.003828ms ago: executing program 4 (id=10278): mprotect$auto(0x200000000000, 0x806121, 0x4) r0 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x18000113) 119.800067ms ago: executing program 0 (id=10279): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r0, 0xc008561c, r0) 108.463368ms ago: executing program 2 (id=10280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b40)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "65481f2f20c135159f6e09d8488f73a40fa9c4eb18f1b96c99584a9919c9702885cc8e36"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x83}, 0x4880) 66.911182ms ago: executing program 4 (id=10281): r0 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x20008004) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 0s ago: executing program 0 (id=10282): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r0, 0x40000000113, 0x2, 0xfffffffffffffffc, 0x0) kernel console output (not intermixed with test programs): 81.229140][ T5635] Bluetooth: hci0: command tx timeout [ 81.235119][ T5628] Bluetooth: hci1: command tx timeout [ 81.292245][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.323157][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.330425][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.356561][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.371204][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.386214][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.393539][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.419468][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.432576][ T5626] team0: Port device team_slave_0 added [ 81.438969][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.445952][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.472074][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.494894][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.501965][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.527904][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.540696][ T5626] team0: Port device team_slave_1 added [ 81.595620][ T5627] team0: Port device team_slave_0 added [ 81.604240][ T5627] team0: Port device team_slave_1 added [ 81.619699][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.626744][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.652939][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.665421][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.672465][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.698810][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.758523][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.765526][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.791702][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.820029][ T5634] hsr_slave_0: entered promiscuous mode [ 81.826376][ T5634] hsr_slave_1: entered promiscuous mode [ 81.839277][ T5625] hsr_slave_0: entered promiscuous mode [ 81.845512][ T5625] hsr_slave_1: entered promiscuous mode [ 81.851866][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 81.858124][ T5625] Cannot create hsr debugfs directory [ 81.864419][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.871738][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.897822][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.966342][ T5626] hsr_slave_0: entered promiscuous mode [ 81.972718][ T5626] hsr_slave_1: entered promiscuous mode [ 81.979372][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 81.985159][ T5626] Cannot create hsr debugfs directory [ 82.061729][ T5627] hsr_slave_0: entered promiscuous mode [ 82.068543][ T5627] hsr_slave_1: entered promiscuous mode [ 82.074815][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 82.080726][ T5627] Cannot create hsr debugfs directory [ 82.469657][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.483612][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.491500][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.502659][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.512277][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.521927][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.530666][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.540891][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.618211][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.629320][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.639260][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.650397][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.658861][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.668693][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.688737][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.700025][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.792580][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.801813][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.819552][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.831002][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.839643][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.850149][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.864302][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.874550][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.964233][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.974143][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.983037][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.993305][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.001795][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.011751][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.019726][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.029755][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.064609][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.132351][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.156946][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.164739][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.198242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.205388][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.218484][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.267141][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.287589][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.294740][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.307922][ T5628] Bluetooth: hci0: command tx timeout [ 83.308176][ T5635] Bluetooth: hci2: command tx timeout [ 83.313791][ T4944] Bluetooth: hci1: command tx timeout [ 83.319711][ T5629] Bluetooth: hci3: command tx timeout [ 83.334798][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.358482][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.365616][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.404717][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.442506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.449642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.497927][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.514167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.521444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.593308][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.628203][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.635380][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.685426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.692657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.344549][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.506754][ T5634] veth0_vlan: entered promiscuous mode [ 84.542648][ T5634] veth1_vlan: entered promiscuous mode [ 84.626339][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.653761][ T5634] veth0_macvtap: entered promiscuous mode [ 84.692717][ T5634] veth1_macvtap: entered promiscuous mode [ 84.732313][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.770332][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.806797][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.836097][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.845660][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.874232][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.883833][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.896088][ T5625] veth0_vlan: entered promiscuous mode [ 84.937484][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.956598][ T5625] veth1_vlan: entered promiscuous mode [ 85.064183][ T5626] veth0_vlan: entered promiscuous mode [ 85.106765][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.119065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.124405][ T5625] veth0_macvtap: entered promiscuous mode [ 85.146255][ T5627] veth0_vlan: entered promiscuous mode [ 85.172841][ T5626] veth1_vlan: entered promiscuous mode [ 85.192485][ T5625] veth1_macvtap: entered promiscuous mode [ 85.207427][ T5627] veth1_vlan: entered promiscuous mode [ 85.216300][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.231763][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.288243][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.322199][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.325356][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.346385][ T5627] veth0_macvtap: entered promiscuous mode [ 85.362548][ T5626] veth0_macvtap: entered promiscuous mode [ 85.385071][ T5626] veth1_macvtap: entered promiscuous mode [ 85.392492][ T5635] Bluetooth: hci2: command tx timeout [ 85.392856][ T5629] Bluetooth: hci3: command tx timeout [ 85.398824][ T4944] Bluetooth: hci1: command tx timeout [ 85.404405][ T5629] Bluetooth: hci0: command tx timeout [ 85.415696][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.429028][ T1175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.440040][ T5627] veth1_macvtap: entered promiscuous mode [ 85.459358][ T1175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.505954][ T1175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.568819][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.591307][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.681687][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.691503][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706844][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.733111][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.744103][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.771786][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.846130][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857490][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.893611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.894015][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.909402][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.952488][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.055089][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.072250][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.181812][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.195131][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.245522][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.260602][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.332256][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.360546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.419996][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.442275][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.468276][ T5629] Bluetooth: hci1: command tx timeout [ 87.472598][ T5628] Bluetooth: hci0: command tx timeout [ 87.480761][ T5635] Bluetooth: hci3: command tx timeout [ 87.486871][ T4944] Bluetooth: hci2: command tx timeout [ 89.392125][ T5904] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.439139][ T29] audit: type=1800 audit(1785010133.449:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="trace_pipe" dev="tracefs" ino=3406 res=0 errno=0 [ 89.600496][ T29] audit: type=1800 audit(1785010133.619:3): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="version" dev="configfs" ino=7952 res=0 errno=0 [ 90.253063][ T5942] mmap: syz.0.83 (5942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.770936][ T4944] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 91.155062][ T29] audit: type=1800 audit(1785010135.169:4): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.102" name="trace_pipe" dev="tracefs" ino=3368 res=0 errno=0 [ 91.737512][ T6012] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.775878][ T29] audit: type=1800 audit(1785010135.789:5): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.116" name="trace_pipe" dev="tracefs" ino=3368 res=0 errno=0 [ 91.903172][ T10] cfg80211: failed to load regulatory.db [ 92.665128][ T29] audit: type=1800 audit(1785010136.679:6): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.134" name="version" dev="configfs" ino=8613 res=0 errno=0 [ 92.780453][ T6054] ======================================================= [ 92.780453][ T6054] WARNING: The mand mount option has been deprecated and [ 92.780453][ T6054] and is ignored by this kernel. Remove the mand [ 92.780453][ T6054] option from the mount to silence this warning. [ 92.780453][ T6054] ======================================================= [ 93.196204][ T6075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.458152][ T29] audit: type=1800 audit(1785010138.469:7): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.177" name="version" dev="configfs" ino=8804 res=0 errno=0 [ 99.315613][ T4944] Bluetooth: hci2: unexpected event 0x2c length: 1019 > 17 [ 99.315666][ T4944] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 99.467565][ T4944] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 101.370260][ T6475] Unable to find swap-space signature [ 106.475297][ T6716] capability: warning: `syz.0.475' uses 32-bit capabilities (legacy support in use) [ 109.702117][ T6873] Process accounting resumed [ 112.691610][ T7031] Invalid ELF header magic: != ELF [ 117.192795][ T4944] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 117.236508][ T29] audit: type=1800 audit(1785012209.299:8): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.736" name="members" dev="configfs" ino=12662 res=0 errno=0 [ 117.481380][ T4944] Bluetooth: hci3: unexpected event 0x23 length: 16 > 13 [ 119.314785][ T4944] Bluetooth: hci3: unexpected event 0x3b length: 1022 > 10 [ 120.007923][ T29] audit: type=1800 audit(1785012212.083:9): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.799" name="dummy_udc" dev="gadgetfs" ino=6086 res=0 errno=0 [ 122.095661][ T29] audit: type=1326 audit(1785012214.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.1.846" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb78299de99 code=0x0 [ 123.566089][ T29] audit: type=1800 audit(1785012215.651:11): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.873" name="features" dev="configfs" ino=13107 res=0 errno=0 [ 125.602959][ T7640] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7640] [ 126.440078][ T7641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.447112][ T7641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.492385][ T7641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.522472][ T7641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.542063][ T7641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.560929][ T7641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.583842][ T7641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.606762][ T7641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.653263][ T7641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.676188][ T7641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.698157][ T7641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.737706][ T7641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.684182][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.239994][ T7754] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.572406][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.639237][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.718925][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.351892][ T7806] can: request_module (can-proto-5) failed. [ 129.758583][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.640483][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.708819][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.798393][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.822633][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.633009][ T4944] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 132.699828][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.704101][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723981][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777648][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.857265][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.140455][ T4944] Bluetooth: hci3: unexpected event 0x3c length: 124 > 7 [ 135.967660][ T8093] kexec: Could not allocate control_code_buffer [ 137.378219][ T4944] Bluetooth: hci2: unexpected subevent 0x12 length: 123 > 5 [ 137.911938][ T8251] ima: policy update failed [ 137.916671][ T29] audit: type=1802 audit(1843104527.132:12): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1221" res=0 errno=0 [ 139.007149][ T29] audit: type=1800 audit(1843104528.217:13): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1248" name="dbroot" dev="configfs" ino=15668 res=0 errno=0 [ 139.776422][ T8339] Process accounting paused [ 140.629424][ T29] audit: type=1800 audit(1843104529.846:14): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1282" name="dbroot" dev="configfs" ino=15784 res=0 errno=0 [ 142.178929][ T29] audit: type=1800 audit(1843104531.414:15): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1317" name="features" dev="configfs" ino=15911 res=0 errno=0 [ 143.226350][ T4944] Bluetooth: hci1: unknown advertising packet type: 0xea [ 143.761660][ T8525] syz.1.1354(8525): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 143.941570][ T8531] syz.1.1357 (8531): attempted to duplicate a private mapping with mremap. This is not supported. [ 144.285892][ T8547] capability: warning: `syz.2.1366' uses deprecated v2 capabilities in a way that may be insecure [ 144.310789][ T4944] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 147.973596][ T8718] nfs: Bad value for 'source' [ 148.394704][ T8732] __vm_enough_memory: pid: 8732, comm: syz.1.1455, bytes: 4398046511104 not enough memory for the allocation [ 149.440701][ T8767] Unable to find swap-space signature [ 152.295892][ T29] audit: type=1800 audit(4294968320.535:16): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1537" name="lu_gp_id" dev="configfs" ino=17801 res=0 errno=0 [ 152.428257][ T4944] Bluetooth: hci3: unexpected event 0x16 length: 124 > 6 [ 155.986589][ T9009] kexec: Could not allocate control_code_buffer [ 156.670271][ T9107] random: crng reseeded on system resumption [ 156.727621][ T9111] tipc: Can't bind to reserved service type 63 [ 157.405581][ T9145] vhci_hcd vhci_hcd.2: invalid port number 253 [ 157.411889][ T9145] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 158.962017][ T29] audit: type=1800 audit(4294968327.237:17): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1690" name="sr0" dev="devtmpfs" ino=2799 res=0 errno=0 [ 161.005659][ T29] audit: type=1400 audit(4294968329.286:18): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9298 comm="syz.1.1729" [ 161.383845][ T9312] block loop4: the capability attribute has been deprecated. [ 163.211745][ T9384] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 164.712264][ T9452] cougar: G6 mapped to F18 [ 164.902001][ T9460] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 164.944360][ T9462] CIFS: VFS: Invalid SecurityFlags: [ 165.656478][ T9501] sd 0:0:1:0: PR command failed: 1026 [ 165.667513][ T9501] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.684646][ T9501] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 166.459922][ T9544] i2c i2c-0: delete_device: Can't find device in list [ 167.186640][ T9577] futex_wake_op: syz.3.1861 tries to shift op by -1; fix this program [ 168.395562][ T9633] usb usb13: usbfs: process 9633 (syz.2.1892) did not claim interface 0 before use [ 168.892023][ T9662] usb usb4: usbfs: process 9662 (syz.0.1907) did not claim interface 0 before use [ 168.979596][ T9663] hub 1-0:1.0: USB hub found [ 169.001749][ T9663] hub 1-0:1.0: 1 port detected [ 169.381171][ T9688] usb usb35: usbfs: process 9688 (syz.2.1920) did not claim interface 0 before use [ 169.412151][ T9691] kafs: addr_prefs: Invalid Command [ 169.757045][ T9704] Process accounting resumed [ 171.001899][ T9771] hub 1-0:1.0: USB hub found [ 171.019760][ T9771] hub 1-0:1.0: 1 port detected [ 171.613683][ T9806] usb usb4: usbfs: process 9806 (syz.1.1975) did not claim interface 0 before use [ 172.007343][ T9831] bond0: invalid ARP target specified [ 172.545522][ T9858] hub 1-0:1.0: USB hub found [ 172.558269][ T9858] hub 1-0:1.0: 1 port detected [ 172.588586][ T9861] kafs: addr_prefs: Invalid Command [ 173.283156][ T9898] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 173.309114][ T9904] syz.0.2023 uses obsolete (PF_INET,SOCK_PACKET) [ 173.699127][ T9926] Format for deleting device is "id" (uint). [ 173.770752][ T9930] bond0: invalid ARP target specified [ 174.329778][ T9958] writes to the poll attribute are ignored. [ 174.356852][ T9958] please use driver specific parameters instead. [ 175.149782][ T4944] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 175.149828][ T4944] Bluetooth: hci3: unexpected event for opcode 0x647c [ 175.464846][T10013] warning: `syz.1.2075' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.575767][T10063] hub 1-0:1.0: USB hub found [ 176.590030][T10063] hub 1-0:1.0: 1 port detected [ 177.213000][T10091] hub 1-0:1.0: USB hub found [ 177.220167][T10091] hub 1-0:1.0: 1 port detected [ 178.789300][T10175] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 179.409074][T10214] kAFS: No cell specified [ 179.746570][T10231] ACPI: Can not change Invalid GPE/Fixed Event status [ 179.871665][ T4944] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 180.431146][T10261] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 180.439691][T10261] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 180.553369][ T4944] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 180.553412][ T4944] Bluetooth: hci1: unexpected event for opcode 0x647c [ 181.852975][ T4944] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 181.853022][ T4944] Bluetooth: hci0: unexpected event for opcode 0x647c [ 181.916488][T10344] program syz.0.2237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.968264][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.770325][T10503] ICMPv6: process `syz.1.2315' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 184.910123][ T5635] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 184.910162][ T5635] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 185.159439][T10521] vhci_hcd vhci_hcd.2: invalid port number 135 [ 185.172384][T10521] vhci_hcd vhci_hcd.2: invalid port number 135 [ 186.020363][T10571] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 186.920769][ T5635] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.972221][ T4944] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 186.972257][ T4944] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 187.585548][T10644] vhci_hcd vhci_hcd.2: invalid port number 135 [ 187.600325][T10644] vhci_hcd vhci_hcd.2: invalid port number 135 [ 188.987057][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.015988][T10708] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 189.047800][T10711] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 189.416457][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 191.054636][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.206392][T10832] random: crng reseeded on system resumption [ 191.452523][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.973691][T10931] dyndbg: expected <4096 bytes into control [ 193.377036][T10949] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[10949] [ 193.522405][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.845821][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.863129][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.040752][T10981] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 194.272403][T10995] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 196.068846][T11081] usbip-vudc usbip-vudc.0: gadget not bound [ 196.247655][T11093] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.865218][T11128] kernel profiling enabled (shift: 7) [ 196.868301][ T29] audit: type=1400 audit(4294986709.318:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11127 comm="syz.1.2618" [ 197.369652][ T4944] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 197.508278][T11163] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 197.818857][T11181] program syz.0.2644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.735566][T11287] Process accounting paused [ 200.378574][ T139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.459232][ T139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.611968][ T139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.732154][T11337] i2c i2c-0: delete_device: Extra parameters [ 200.821768][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.832163][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.845417][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.856308][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.868787][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.878692][ T139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.189196][ T139] bridge_slave_1: left allmulticast mode [ 201.201414][ T139] bridge_slave_1: left promiscuous mode [ 201.212599][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.228378][ T139] bridge_slave_0: left allmulticast mode [ 201.235067][ T139] bridge_slave_0: left promiscuous mode [ 201.243396][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.477982][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.491716][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.514284][ T139] bond0 (unregistering): Released all slaves [ 201.797029][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 201.957842][ T139] hsr_slave_0: left promiscuous mode [ 201.965555][ T139] hsr_slave_1: left promiscuous mode [ 201.971811][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.980060][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.992155][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.999942][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.021625][ T139] veth1_macvtap: left promiscuous mode [ 202.028604][ T139] veth0_macvtap: left promiscuous mode [ 202.034682][ T139] veth1_vlan: left promiscuous mode [ 202.040164][ T139] veth0_vlan: left promiscuous mode [ 202.359437][ T139] team0 (unregistering): Port device team_slave_1 removed [ 202.379846][ T139] team0 (unregistering): Port device team_slave_0 removed [ 202.535263][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 202.867354][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.876766][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.884085][T11339] bridge_slave_0: entered allmulticast mode [ 202.893568][T11339] bridge_slave_0: entered promiscuous mode [ 202.909348][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.920757][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.929541][ T5635] Bluetooth: hci3: command tx timeout [ 202.930577][T11339] bridge_slave_1: entered allmulticast mode [ 202.943852][T11339] bridge_slave_1: entered promiscuous mode [ 202.984028][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.999172][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.046048][T11339] team0: Port device team_slave_0 added [ 203.055352][T11339] team0: Port device team_slave_1 added [ 203.091080][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.098151][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.124725][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.140555][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.147675][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.175004][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.238473][T11339] hsr_slave_0: entered promiscuous mode [ 203.245345][T11339] hsr_slave_1: entered promiscuous mode [ 203.311141][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.473322][T11339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.484474][T11339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.493443][T11339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.507990][T11339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.516725][T11339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.534001][T11339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.544889][T11339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.556414][T11339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.681586][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.711292][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.727304][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.734524][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.759592][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.766807][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.978977][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 204.296996][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.501959][T11339] veth0_vlan: entered promiscuous mode [ 204.518413][T11339] veth1_vlan: entered promiscuous mode [ 204.548236][T11339] veth0_macvtap: entered promiscuous mode [ 204.558451][T11339] veth1_macvtap: entered promiscuous mode [ 204.580855][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.596687][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.612590][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.622184][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.632658][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.642334][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.726093][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.735283][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.768871][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.777493][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.895370][T11450] : Can't lookup blockdev [ 204.989357][ T5635] Bluetooth: hci3: command tx timeout [ 207.059057][ T5635] Bluetooth: hci3: command tx timeout [ 207.129285][T11576] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 207.167760][T11580] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [88] [ 207.509491][T11598] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.127444][ T5635] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 208.127483][ T5635] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 208.143478][ T5635] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 208.269107][T11641] zram: Added device: zram1 [ 208.285946][ T29] audit: type=1800 audit(4294986720.791:20): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2820" name="dbroot" dev="configfs" ino=26781 res=0 errno=0 [ 208.326738][T11644] db_root: cannot open: /sy] [ 209.132905][ T5635] Bluetooth: hci3: command tx timeout [ 209.873665][T11725] zram: Added device: zram2 [ 210.438680][T11757] zram: Added device: zram3 [ 210.920414][T11787] zram: Added device: zram4 [ 211.313016][T11811] sd 0:0:1:0: PR command failed: 1026 [ 211.336254][T11811] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 211.363023][T11811] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 212.564231][T11862] zram: Added device: zram5 [ 212.727218][T11872] futex_wake_op: syz.0.2932 tries to shift op by -1; fix this program [ 212.883418][T11880] [ 213.035161][T11892] zram: Added device: zram6 [ 213.483651][T11915] Setting dangerous option i915.mitigations - tainting kernel [ 215.792815][T12017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 218.157998][T12088] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.175973][T12088] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 220.214354][T12161] Setting dangerous option i915.mitigations - tainting kernel [ 220.248218][T12161] Bad "i915.mitigations=,^", '^' is unknown [ 222.473263][T12250] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 222.725874][T12261] binder: 12259:12261 ioctl c0046209 ffffffffffffffff returned -22 [ 225.311376][T12384] process 'syz.1.3129' launched './file0' with NULL argv: empty string added [ 225.600301][T12399] WARNING! power/level is deprecated; use power/control instead [ 226.596033][ T5635] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 227.900991][T12495] smpboot: CPU 1 is now offline [ 229.603283][T12560] Process accounting resumed [ 230.023827][T12573] bond0: option slaves: interface -]=,Do does not exist! [ 231.294683][T12609] kafs: addr_prefs: Invalid Command [ 231.481471][ T10] Process accounting resumed [ 232.911913][T12670] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 234.003617][T12718] kAFS: Invalid Command on /proc/fs/afs/cells file [ 235.074530][T12770] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 237.182929][T12875] qrtr: Invalid version 13 [ 238.659246][T12928] aoe: invalid device specification [ 239.424590][T12960] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 241.313224][ T5635] Bluetooth: hci0: unexpected event 0x35 length: 725 > 6 [ 243.442918][ T5635] Bluetooth: hci3: unexpected event 0x04 length: 125 > 10 [ 243.450052][ T5635] Bluetooth: unknown link type 101 [ 243.462353][ T5635] Bluetooth: hci3: connection err: -111 [ 245.876375][T13261] ceph: Failed to parse sending metrics switch value 'P^' [ 246.013010][ T29] audit: type=1804 audit(4294986758.689:21): pid=13266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3547" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=24 res=1 errno=0 [ 247.097546][T13315] Scaler: ================= START STATUS ================= [ 247.135692][T13315] Scaler: ================== END STATUS ================== [ 248.149559][T13359] binder: 13358:13359 ioctl 40046205 0 returned -22 [ 248.332193][T13364] kafs: addr_prefs: Too many elements in string [ 249.580598][T13404] futex_wake_op: syz.0.3613 tries to shift op by -2048; fix this program [ 249.671227][T13404] futex_wake_op: syz.0.3613 tries to shift op by -2048; fix this program [ 250.851211][T13446] program syz.4.3633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.716560][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 252.725726][ T5635] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 253.722239][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.738447][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.772288][T13516] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 259.693905][T13705] block2mtd: illegal erase size [ 260.147186][T13714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.496928][T13714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.587001][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 260.596990][ T5635] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 260.759762][T13714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.913931][T13714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.695658][T13816] ICMPv6: process `syz.2.3811' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 263.060112][ T5635] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 263.069182][ T5635] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 263.142040][T13831] kAFS: unparsable volume name [ 264.952648][T13910] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 265.009766][T13910] net gretap0: uevent: failed to send synthetic uevent: -22 [ 266.601214][T13982] Sensor B: ================= START STATUS ================= [ 266.635130][T13982] Sensor B: Test Pattern: 75% Colorbar [ 266.673084][T13982] Sensor B: Show Information: All [ 266.713265][T13982] Sensor B: Vertical Flip: false [ 266.733101][T13982] Sensor B: Horizontal Flip: false [ 266.753834][T13982] Sensor B: Brightness: 128 [ 266.775169][T13982] Sensor B: Contrast: 128 [ 266.797678][T13982] Sensor B: Hue: 0 [ 266.816250][T13982] Sensor B: Saturation: 128 [ 266.841514][T13982] Sensor B: Pixel Rate: 160000000 [ 266.867714][T13982] Sensor B: Horizontal Blanking: 800 [ 266.887841][T13982] Sensor B: Vertical Blanking: 3223 [ 266.912609][T13982] Sensor B: ================== END STATUS ================== [ 267.503391][T14010] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 267.558174][T14010] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.599400][T14010] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.631303][T14010] page_type: f5(slab) [ 267.650288][T14010] raw: 00fff00000000040 ffff88801d2e0780 dead000000000100 dead000000000122 [ 267.689697][T14010] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 267.730630][T14010] head: 00fff00000000040 ffff88801d2e0780 dead000000000100 dead000000000122 [ 267.769175][T14010] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 267.790599][T14010] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 267.814406][T14010] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 267.831961][T14010] page dumped because: unmovable page [ 267.850140][T14010] page_owner tracks the page as allocated [ 267.869298][T14010] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 33575812356, free_ts 26713754300 [ 267.926506][T14010] post_alloc_hook+0xfd/0x120 [ 267.935862][T14010] get_page_from_freelist+0xf48/0x3530 [ 267.947602][T14010] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 267.967619][T14010] new_slab+0xa2/0x640 [ 267.981167][T14010] refill_objects+0xe3/0x410 [ 267.990752][T14010] __pcs_replace_empty_main+0x376/0x680 [ 268.002477][T14010] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 268.016126][T14010] alloc_inode+0x183/0x250 [ 268.030948][T14010] iget_locked+0x1d9/0x6d0 [ 268.038865][T14010] kernfs_get_inode+0x46/0x470 [ 268.048956][T14010] kernfs_iop_lookup+0x1a7/0x2d0 [ 268.067550][T14010] __lookup_slow+0x155/0x320 [ 268.077644][T14010] lookup_slow+0x50/0x70 [ 268.086180][T14010] path_lookupat+0x5e8/0xc40 [ 268.097458][T14010] filename_lookup+0x202/0x590 [ 268.110390][T14010] do_readlinkat+0xd3/0x370 [ 268.121089][T14010] page last free pid 1 tgid 1 stack trace: [ 268.136333][T14010] free_pages_prepare+0x586/0xd80 [ 268.148729][T14010] __free_contig_range_common+0x14f/0x250 [ 268.164635][T14010] destroy_args+0xa8/0x7a0 [ 268.172957][T14010] debug_vm_pgtable+0x1d69/0x3490 [ 268.183893][T14010] do_one_initcall+0x11d/0x700 [ 268.194410][T14010] kernel_init_freeable+0x6ea/0x7b0 [ 268.206042][T14010] kernel_init+0x1f/0x1e0 [ 268.215370][T14010] ret_from_fork+0x72b/0xd50 [ 268.225848][T14010] ret_from_fork_asm+0x1a/0x30 [ 268.693707][ T5635] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 268.703048][ T5635] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 272.509096][T14184] ima: policy update failed [ 272.534330][ T29] audit: type=1802 audit(4294986785.343:22): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3988" res=0 errno=0 [ 274.150744][T14253] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 274.340223][T14262] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 274.364943][ T29] audit: type=1807 audit(4294986787.182:23): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 274.380610][T14261] ima: policy update failed [ 274.424403][ T29] audit: type=1802 audit(4294986787.182:24): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.4027" res=0 errno=0 [ 274.527016][ T29] audit: type=1802 audit(4294986787.232:25): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4027" res=0 errno=0 [ 275.727876][T14319] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1778a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 275.743636][T14319] Call Trace: [ 275.746914][T14319] [ 275.749839][T14319] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 275.756540][T14319] ? __pfx_debug_object_deactivate+0x10/0x10 [ 275.762548][T14319] mce_cpu_restart+0xd5/0x1f0 [ 275.767238][T14319] ? __pfx_mce_cpu_restart+0x10/0x10 [ 275.772551][T14319] smp_call_function_many_cond+0x139d/0x16c0 [ 275.778534][T14319] ? __pfx_mce_cpu_restart+0x10/0x10 [ 275.783835][T14319] ? mark_held_locks+0x40/0x70 [ 275.788593][T14319] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 275.794393][T14319] ? lockdep_hardirqs_on+0x78/0x100 [ 275.799678][T14319] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 275.805470][T14319] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 275.811808][T14319] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 275.817786][T14319] ? __timer_delete_sync+0x151/0x1c0 [ 275.823079][T14319] ? __pfx_mce_cpu_restart+0x10/0x10 [ 275.828380][T14319] on_each_cpu_cond_mask+0x40/0x90 [ 275.833496][T14319] set_bank+0x240/0x3a0 [ 275.837639][T14319] ? __pfx_set_bank+0x10/0x10 [ 275.842307][T14319] ? find_held_lock+0x2b/0x80 [ 275.846988][T14319] ? sysfs_file_kobj+0xe4/0x290 [ 275.851852][T14319] ? sysfs_file_kobj+0xe4/0x290 [ 275.856707][T14319] ? __pfx_set_bank+0x10/0x10 [ 275.861378][T14319] dev_attr_store+0x58/0x80 [ 275.865880][T14319] ? __pfx_dev_attr_store+0x10/0x10 [ 275.871100][T14319] sysfs_kf_write+0xf2/0x150 [ 275.875722][T14319] kernfs_fop_write_iter+0x3e0/0x5f0 [ 275.881003][T14319] ? __pfx_sysfs_kf_write+0x10/0x10 [ 275.886199][T14319] vfs_write+0x6ac/0x1050 [ 275.890514][T14319] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 275.896316][T14319] ? __pfx_vfs_write+0x10/0x10 [ 275.901080][T14319] ksys_write+0x12a/0x250 [ 275.905411][T14319] ? __pfx_ksys_write+0x10/0x10 [ 275.910251][T14319] do_syscall_64+0x115/0x840 [ 275.914833][T14319] ? clear_bhb_loop+0x40/0x90 [ 275.919498][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.925383][T14319] RIP: 0033:0x7f24bcd9de99 [ 275.929800][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.949407][T14319] RSP: 002b:00007f24bdce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.957837][T14319] RAX: ffffffffffffffda RBX: 00007f24bd025fa0 RCX: 00007f24bcd9de99 [ 275.965814][T14319] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 275.973862][T14319] RBP: 00007f24bce33eaf R08: 0000000000000000 R09: 0000000000000000 [ 275.981910][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.989870][T14319] R13: 00007f24bd026038 R14: 00007f24bd025fa0 R15: 00007fff98fe9538 [ 275.997848][T14319] [ 276.426188][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 276.433721][ T5635] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 277.482958][T14373] sd 0:0:1:0: PR command failed: 1026 [ 277.507752][T14373] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 277.541775][T14373] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 278.791640][T14425] kAFS: Invalid Command on /proc/fs/afs/cells file [ 281.947446][ T4944] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 281.954905][ T4944] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 283.507909][T13115] syz.1.3473 (13115) used greatest stack depth: 16744 bytes left [ 283.676767][T14617] program syz.2.4197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.996281][T14635] rnbd_client L213: map_device: Parameters missing [ 284.238530][T14649] block2mtd: illegal erase size [ 284.495827][T14663] ICMPv6: process `syz.1.4220' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 285.040325][T14695] bond0: invalid ARP target specified [ 285.247300][T14706] wlan1: mtu less than device minimum [ 285.869614][T14734] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 285.870020][T14732] ima: policy update failed [ 285.936589][ T29] audit: type=1802 audit(4294986798.806:26): pid=14732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4255" res=0 errno=0 [ 286.780425][T14782] : Can't lookup blockdev [ 287.497508][T14823] cifs: Unknown parameter 'knjeRaBt$Mi' [ 287.972466][T14845] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 289.579446][T14923] binder: binder_mmap: 14921 0-1000 bad vm_flags failed -1 [ 290.181711][T14950] < [ 291.777945][T15014] mmap: syz.4.4390 (15014): VmData 45805568 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 292.800789][T15055] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 294.710016][T15147] block2mtd: device name too long [ 294.828582][T15150] vhci_hcd vhci_hcd.2: invalid port number 194 [ 294.849209][T15150] vhci_hcd vhci_hcd.2: invalid port number 194 [ 295.580892][T15182] bond0: no command found in slaves file - use +ifname or -ifname [ 299.951173][T15404] vhci_hcd: not connected 4 [ 300.393631][T15429] usb usb27: usbfs: interface 0 claimed by hub while 'syz.1.4593' sets config #2103451803 [ 303.973970][T15589] bond0: no command found in slaves file - use +ifname or -ifname [ 304.687151][T15615] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 307.969550][T15782] sd 0:0:1:0: PR command failed: 1026 [ 307.992121][T15782] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 308.028068][T15782] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 308.727128][T15814] bonding: no command found in bonding_masters - use +ifname or -ifname [ 313.228283][T15970] phram: not enough arguments [ 313.901412][T15999] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 313.963401][T15997] ima: policy update failed [ 314.023012][ T29] audit: type=1802 audit(4294986827.028:27): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4871" res=0 errno=0 [ 314.784301][T15990] syz.1.4867 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 314.905322][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.1.4867 Tainted: G U syzkaller #0 PREEMPT(full) [ 314.905364][T15990] Tainted: [U]=USER [ 314.905372][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.905388][T15990] Call Trace: [ 314.905397][T15990] [ 314.905407][T15990] dump_stack_lvl+0x100/0x190 [ 314.905442][T15990] dump_header+0xfb/0x606 [ 314.905475][T15990] oom_kill_process.cold+0xd/0x330 [ 314.905509][T15990] out_of_memory+0x340/0x14f0 [ 314.905563][T15990] ? __pfx_out_of_memory+0x10/0x10 [ 314.905619][T15990] mem_cgroup_out_of_memory+0xc6/0x130 [ 314.905651][T15990] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 314.905680][T15990] ? find_held_lock+0x2b/0x80 [ 314.905718][T15990] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.905735][T15990] ? _raw_spin_unlock+0x28/0x50 [ 314.905751][T15990] try_charge_memcg+0x6e5/0xdf0 [ 314.905776][T15990] ? __pfx_try_charge_memcg+0x10/0x10 [ 314.905795][T15990] ? find_held_lock+0x2b/0x80 [ 314.905812][T15990] ? rcu_read_unlock+0x17/0x60 [ 314.905835][T15990] ? rcu_read_unlock+0x17/0x60 [ 314.905856][T15990] ? find_held_lock+0x2b/0x80 [ 314.905873][T15990] ? rcu_read_unlock+0x17/0x60 [ 314.905899][T15990] charge_memcg+0x187/0x1e0 [ 314.905921][T15990] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 314.905947][T15990] swap_cache_alloc_folio+0x548/0xc50 [ 314.905968][T15990] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 314.905984][T15990] ? swap_cache_get_folio+0x28d/0x360 [ 314.906000][T15990] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 314.906016][T15990] ? find_held_lock+0x2b/0x80 [ 314.906032][T15990] ? mlock_drain_local+0x254/0x4e0 [ 314.906048][T15990] ? mlock_drain_local+0x254/0x4e0 [ 314.906065][T15990] swap_cache_read_folio+0x47/0x140 [ 314.906084][T15990] swap_cluster_readahead+0x387/0x5f0 [ 314.906105][T15990] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 314.906122][T15990] ? clockevents_program_event+0x23e/0x820 [ 314.906147][T15990] ? __lock_acquire+0x49f/0x1a40 [ 314.906168][T15990] ? get_vma_policy+0x23d/0x3b0 [ 314.906191][T15990] swapin_readahead+0x159/0x1200 [ 314.906214][T15990] ? __pfx_swapin_readahead+0x10/0x10 [ 314.906235][T15990] ? swap_table_get+0x10d/0x2c0 [ 314.906250][T15990] ? swap_cache_get_folio+0x28d/0x360 [ 314.906266][T15990] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 314.906281][T15990] ? __pfx_softleaf_type+0x10/0x10 [ 314.906300][T15990] ? do_swap_page+0xf98/0x5780 [ 314.906313][T15990] do_swap_page+0xf98/0x5780 [ 314.906336][T15990] ? __pfx_do_swap_page+0x10/0x10 [ 314.906350][T15990] ? __lock_acquire+0x49f/0x1a40 [ 314.906372][T15990] ? lockdep_hardirqs_on+0x78/0x100 [ 314.906390][T15990] ? rcu_is_watching+0x12/0xc0 [ 314.906407][T15990] ? __pte_offset_map+0x179/0x310 [ 314.906429][T15990] __handle_mm_fault+0x192f/0x2a00 [ 314.906448][T15990] ? reacquire_held_locks+0xce/0x1e0 [ 314.906470][T15990] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.906488][T15990] ? lock_vma_under_rcu+0x17c/0x590 [ 314.906514][T15990] handle_mm_fault+0x37b/0xa30 [ 314.906532][T15990] do_user_addr_fault+0x5a3/0x12f0 [ 314.906558][T15990] exc_page_fault+0x6f/0xd0 [ 314.906575][T15990] asm_exc_page_fault+0x26/0x30 [ 314.906589][T15990] RIP: 0033:0x7fb78286659e [ 314.906603][T15990] Code: e9 67 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ba 3b 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 314.906616][T15990] RSP: 002b:00007ffdbb920d70 EFLAGS: 00010202 [ 314.906628][T15990] RAX: 00007fb782c25fa0 RBX: 00007fb782c25fa0 RCX: 0000000000000026 [ 314.906637][T15990] RDX: 0000000000000001 RSI: 00007fb782c26038 RDI: 0000000000000001 [ 314.906646][T15990] RBP: 00007fb782c27da0 R08: 0000000000000000 R09: 0000000000000001 [ 314.906654][T15990] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000004d092 [ 314.906663][T15990] R13: 00007fb782c25fac R14: 000000000004cd94 R15: 00007ffdbb920ee0 [ 314.906682][T15990] [ 315.312857][T15990] memory: usage 3072kB, limit 3072kB, failcnt 29667 [ 315.320200][T15990] memory+swap: usage 3252kB, limit 9007199254740988kB, failcnt 0 [ 315.327913][T15990] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 315.335099][T15990] Memory cgroup stats for /syz1: [ 315.335461][T15990] cache 0 [ 315.344856][T15990] rss 0 [ 315.347613][T15990] rss_huge 0 [ 315.350935][T15990] shmem 0 [ 315.353858][T15990] mapped_file 0 [ 315.357298][T15990] dirty 0 [ 315.360257][T15990] writeback 0 [ 315.363525][T15990] workingset_refault_anon 1119 [ 315.368293][T15990] workingset_refault_file 15207 [ 315.373225][T15990] swap 184320 [ 315.376494][T15990] swapcached 87396352 [ 315.380499][T15990] pgpgin 94822 [ 315.383874][T15990] pgpgout 94816 [ 315.387313][T15990] pgfault 187356 [ 315.390908][T15990] pgmajfault 916 [ 315.394452][T15990] inactive_anon 16384 [ 315.398410][T15990] active_anon 8192 [ 315.402171][T15990] inactive_file 0 [ 315.405781][T15990] active_file 0 [ 315.409222][T15990] unevictable 0 [ 315.412693][T15990] hierarchical_memory_limit 3145728 [ 315.417903][T15990] hierarchical_memsw_limit 9223372036854771712 [ 315.424069][T15990] total_cache 0 [ 315.427848][T15990] total_rss 0 [ 315.431199][T15990] total_rss_huge 0 [ 315.434944][T15990] total_shmem 0 [ 315.438415][T15990] total_mapped_file 0 [ 315.442431][T15990] total_dirty 0 [ 315.447368][T15990] total_writeback 0 [ 315.451246][T15990] total_workingset_refault_anon 1119 [ 315.456516][T15990] total_workingset_refault_file 15207 [ 315.461921][T15990] total_swap 184320 [ 315.465735][T15990] total_swapcached 87396352 [ 315.470265][T15990] total_pgpgin 94822 [ 315.474166][T15990] total_pgpgout 94816 [ 315.478123][T15990] total_pgfault 187356 [ 315.482287][T15990] total_pgmajfault 916 [ 315.486349][T15990] total_inactive_anon 16384 [ 315.490887][T15990] total_active_anon 8192 [ 315.495132][T15990] total_inactive_file 0 [ 315.499366][T15990] total_active_file 0 [ 315.503327][T15990] total_unevictable 0 [ 315.507289][T15990] anon_cost 783 [ 315.510946][T15990] file_cost 0 [ 315.514220][T15990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4867,pid=15990,uid=0 [ 315.531778][T15990] Memory cgroup out of memory: Killed process 15990 (syz.1.4867) total-vm:102244kB, anon-rss:1248kB, file-rss:20852kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 316.222911][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.229499][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.020584][T16087] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 317.794768][T16117] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 317.821233][T16117] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 317.846863][T16117] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 317.879325][T16117] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 317.911013][T16117] page dumped because: unmovable page [ 317.929472][T16117] page_owner info is not present (never set?) [ 319.030718][T16161] could not allocate digest TFM handle [ 319.644958][T16184] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 319.845603][T16184] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 319.890738][T16184] pci 0000:00:01.3: PCI INT A: no GSI [ 320.658622][T16238] random: crng reseeded on system resumption [ 320.905453][T16253] ecryptfs_parse_packet_length: Error parsing packet length [ 320.937898][T16253] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 321.839748][T16304] random: crng reseeded on system resumption [ 322.605905][T16345] bond0: no command found in slaves file - use +ifname or -ifname [ 323.057897][T16369] random: crng reseeded on system resumption [ 323.314749][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 326.923823][T16538] sd 0:0:1:0: PR command failed: 1026 [ 326.949807][T16538] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 326.980056][T16538] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 327.228863][T16552] queue_state_write: operation too long [ 327.261644][T16552] queue_state_write: use 'run', 'start' or 'kick' [ 331.882653][T16754] CIFS: VFS: UNC: path must begin with // or \\ [ 331.917569][T16754] Malformed UNC in devname [ 331.917569][T16754] [ 331.958277][T16754] CIFS: VFS: Malformed UNC in devname [ 333.195074][T16820] block2mtd: too many arguments [ 333.793756][T16844] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 333.835653][T16844] vhci_hcd vhci_hcd.2: invalid port number 0 [ 336.445009][ T29] audit: type=1800 audit(4294986849.544:28): pid=16973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5342" name="discovery_nqn" dev="configfs" ino=44622 res=0 errno=0 [ 337.733722][T17024] zswap: compressor F(_ not available [ 339.107984][T17097] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 340.389417][T17159] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 343.380663][T17306] : Can't lookup blockdev [ 345.788103][T17428] phram: not enough arguments [ 346.401546][T17459] Invalid ELF header magic: != ELF [ 348.025474][T17547] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 348.055103][T17547] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 348.512454][T17575] syz.4.5630: vm.laptop_mode is deprecated. Ignoring setting. [ 348.721561][T17588] ima: policy update failed [ 348.751765][ T29] audit: type=1802 audit(4294986861.922:29): pid=17588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5638" res=0 errno=0 [ 349.229386][T17616] overlayfs: "check_copy_up" module option is obsolete [ 349.717307][T17643] syz.4.5662 (17643): drop_caches: 0 [ 350.121022][T17662] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 351.308713][T17716] i2c i2c-0: new_device: Can't parse I2C address [ 354.543819][ T29] audit: type=1800 audit(4294986867.739:30): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5778" name="members" dev="configfs" ino=47657 res=0 errno=0 [ 355.501641][T17937] i2c i2c-0: new_device: Invalid device name [ 355.886000][T17957] zram0: detected capacity change from 0 to 16 [ 356.241137][T17979] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 356.275929][T17979] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 356.325954][T17985] cougar: G6 mapped to space [ 356.756119][ T29] audit: type=1326 audit(4294986869.959:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18006 comm="syz.2.5838" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285079de99 code=0x0 [ 356.996317][T18018] kAFS: Invalid Command on /proc/fs/afs/cells file [ 358.845903][T18095] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 359.647232][T18119] blkio.reset_stats is deprecated [ 360.453080][T18159] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 362.320184][T18229] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 363.256239][T18319] block2mtd: illegal erase size [ 364.583480][T18395] hub 3-0:1.0: USB hub found [ 364.597313][T18395] hub 3-0:1.0: 1 port detected [ 364.629104][T18395] usb usb3: authorized to connect [ 365.934534][T18455] ecryptfs_miscdev_write: Error while inspecting packet size [ 366.144194][T18463] program syz.1.6059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.299234][T18470] bond0: option packets_per_slave: invalid value ( Xnp) [ 366.331952][T18470] bond0: option packets_per_slave: allowed values 0 - 65535 [ 367.957389][T18516] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 370.115672][ T29] audit: type=1806 audit(4294986883.392:32): xattr="" res=-22 [ 370.210014][T18649] kernel read not supported for file /\*)A (pid: 18649 comm: syz.2.6150) [ 370.227950][ T29] audit: type=1800 audit(4294986883.503:33): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6150" name="\*)A" dev="mqueue" ino=11585 res=0 errno=0 [ 370.981023][T18695] program syz.1.6172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.413230][T18717] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 371.730384][T18736] vhci_hcd vhci_hcd.2: invalid port number 16 [ 371.747257][T18736] vhci_hcd vhci_hcd.2: invalid port number 16 [ 371.990903][T18750] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 372.013169][T18750] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.313021][T18789] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 375.151744][T18841] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 375.549945][ T29] audit: type=1400 audit(4294986888.848:34): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18911 comm="syz.4.6277" [ 377.303271][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.309751][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.541534][T19161] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 380.557315][T19161] cec cec26: uevent: failed to send synthetic uevent: -22 [ 380.756797][T19172] syz.0.6404 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 381.260318][T19196] i2c i2c-0: delete_device: Can't find device in list [ 381.498071][T19204] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 381.529896][T19203] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 382.059441][T19227] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 384.262261][T19361] i2c i2c-0: delete_device: Can't find device in list [ 384.784152][T19390] ubi0: attaching mtd0 [ 384.804986][T19390] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 384.959864][ T29] audit: type=1806 audit(4294986898.302:35): xattr="." res=0 [ 385.795085][T19452] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 385.795085][T19452] [ 386.156731][T19471] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 386.802693][T19506] : Can't lookup blockdev [ 389.337417][T19653] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 389.368022][T19653] ep_00: uevent: failed to send synthetic uevent: -22 [ 390.008996][T19682] bond0: invalid ARP target specified [ 390.143671][T19688] synth uevent: /bus/mei: unknown uevent action string [ 391.238686][T19753] usbip-vudc usbip-vudc.0: gadget not bound [ 392.171122][T19800] TCP: TCP_TX_DELAY enabled [ 394.383843][T19902] [U] 0="/ [ 394.393224][T19902] [U] [ 394.398710][T19902] [U] EeQ@ [ 394.405774][T19901] [U]  [ 395.112426][T19942] ICMPv6: process `syz.2.6778' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 396.938228][ T24] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 402.047545][T20263] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 402.955018][T20304] phram: not enough arguments [ 404.167553][T20345] [U]  [ 404.249633][T20349] bond0: option fail_over_mac: invalid value () [ 404.741598][T20369] i2c i2c-0: delete_device: Can't parse I2C address [ 406.626609][T20445] kAFS: Invalid Command on /proc/fs/afs/cells file [ 406.948897][T20469] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 407.011589][T20469] CIFS mount error: No usable UNC path provided in device string! [ 407.011589][T20469] [ 407.019667][ T29] audit: type=1807 audit(4294967305.954:36): UNKNOWN=nl80211 res=0 [ 407.032469][T20470] ima: policy update failed [ 407.036589][T20469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 407.041543][ T29] audit: type=1802 audit(4294967305.964:37): pid=20472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.7038" res=0 errno=0 [ 407.095864][ T29] audit: type=1802 audit(4294967305.964:38): pid=20470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.7038" res=0 errno=0 [ 407.837884][T20514] CIFS mount error: No usable UNC path provided in device string! [ 407.837884][T20514] [ 407.891582][T20514] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 409.189714][T20583] Setting dangerous option i915.mitigations - tainting kernel [ 410.892102][T20687] sysfs_service_op_store: Client not running :-5: [ 411.536247][T20721] block nbd0: NBD_DISCONNECT [ 412.279704][T20765] serial 00:02: in use; can't configure [ 412.479906][T20780] writing to auto_msgmni has no effect [ 413.756361][T20853] netlink: 'syz.1.7222': attribute type 1 has an invalid length. [ 414.252852][T20885] binder: 20884:20885 ioctl c018620c 200000000040 returned -1 [ 414.493067][T20902] serial 00:02: in use; can't configure [ 414.749434][T20914] netlink: 'syz.2.7252': attribute type 1 has an invalid length. [ 414.791300][T20914] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7252'. syzkaller syzkaller login: [ 415.602649][T20960] FAULT_INJECTION: forcing a failure. [ 415.602649][T20960] name failslab, interval 1, probability 0, space 0, times 1 [ 415.628999][T20960] CPU: 1 UID: 0 PID: 20960 Comm: syz.1.7272 Tainted: G U syzkaller #0 PREEMPT(full) [ 415.629044][T20960] Tainted: [U]=USER [ 415.629053][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.629079][T20960] Call Trace: [ 415.629118][T20960] [ 415.629129][T20960] dump_stack_lvl+0x100/0x190 [ 415.629167][T20960] should_fail_ex.cold+0x5/0xa [ 415.629215][T20960] should_failslab+0xc2/0x120 [ 415.629273][T20960] __kvmalloc_node_noprof+0x116/0x970 [ 415.629319][T20960] ? percpu_ref_init+0xec/0x3f0 [ 415.629416][T20960] ? io_alloc_cache_init+0x38/0x170 [ 415.629482][T20960] io_alloc_cache_init+0x38/0x170 [ 415.629522][T20960] io_uring_setup.cold+0x450/0x1c2e [ 415.629565][T20960] ? ksys_write+0x190/0x250 [ 415.629605][T20960] ? ksys_write+0x190/0x250 [ 415.629631][T20960] ? __pfx_io_uring_setup+0x10/0x10 [ 415.629684][T20960] ? do_futex+0x190/0x440 [ 415.629717][T20960] ? __pfx_do_futex+0x10/0x10 [ 415.629767][T20960] ? xfd_validate_state+0x129/0x190 [ 415.629812][T20960] __x64_sys_io_uring_setup+0xc2/0x170 [ 415.629842][T20960] do_syscall_64+0x115/0x840 [ 415.629876][T20960] ? clear_bhb_loop+0x40/0x90 [ 415.629912][T20960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.629942][T20960] RIP: 0033:0x7fb78299de99 [ 415.629967][T20960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.629994][T20960] RSP: 002b:00007fb783781028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 415.630061][T20960] RAX: ffffffffffffffda RBX: 00007fb782c25fa0 RCX: 00007fb78299de99 [ 415.630080][T20960] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 415.630098][T20960] RBP: 00007fb782a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 415.630116][T20960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.630133][T20960] R13: 00007fb782c26038 R14: 00007fb782c25fa0 R15: 00007ffdbb920c78 [ 415.630172][T20960] [ 416.240429][T20984] openvswitch: netlink: IPv4 tunnel dst address is zero [ 416.586963][T21003] FAULT_INJECTION: forcing a failure. [ 416.586963][T21003] name failslab, interval 1, probability 0, space 0, times 0 [ 416.613591][T21003] CPU: 1 UID: 0 PID: 21003 Comm: syz.4.7293 Tainted: G U syzkaller #0 PREEMPT(full) [ 416.613633][T21003] Tainted: [U]=USER [ 416.613642][T21003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 416.613658][T21003] Call Trace: [ 416.613676][T21003] [ 416.613687][T21003] dump_stack_lvl+0x100/0x190 [ 416.613727][T21003] should_fail_ex.cold+0x5/0xa [ 416.613762][T21003] should_failslab+0xc2/0x120 [ 416.613797][T21003] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 416.613828][T21003] ? __lock_acquire+0x49f/0x1a40 [ 416.613899][T21003] ? __d_alloc+0x35/0xa50 [ 416.613943][T21003] __d_alloc+0x35/0xa50 [ 416.613971][T21003] ? bpf_lsm_inode_permission+0x9/0x10 [ 416.614028][T21003] d_alloc+0x4a/0x1e0 [ 416.614062][T21003] vfs_tmpfile+0x317/0xbb0 [ 416.614101][T21003] path_openat+0x10b6/0x4280 [ 416.614128][T21003] ? kasan_save_track+0x14/0x30 [ 416.614162][T21003] ? __kasan_slab_alloc+0x89/0x90 [ 416.614198][T21003] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 416.614236][T21003] ? do_sys_openat2+0xc7/0x1e0 [ 416.614271][T21003] ? __x64_sys_open+0xfe/0x1d0 [ 416.614305][T21003] ? do_syscall_64+0x115/0x840 [ 416.614350][T21003] ? __pfx_path_openat+0x10/0x10 [ 416.614395][T21003] do_file_open+0x20e/0x430 [ 416.614422][T21003] ? __lock_acquire+0x49f/0x1a40 [ 416.614469][T21003] ? __pfx_do_file_open+0x10/0x10 [ 416.614524][T21003] ? _raw_spin_unlock+0x28/0x50 [ 416.614603][T21003] ? alloc_fd+0x471/0x7a0 [ 416.614649][T21003] do_sys_openat2+0x10f/0x1e0 [ 416.614696][T21003] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.614746][T21003] __x64_sys_open+0xfe/0x1d0 [ 416.614780][T21003] ? __pfx___x64_sys_open+0x10/0x10 [ 416.614830][T21003] do_syscall_64+0x115/0x840 [ 416.614861][T21003] ? clear_bhb_loop+0x40/0x90 [ 416.614892][T21003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.614917][T21003] RIP: 0033:0x7f614879de99 [ 416.614938][T21003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.614961][T21003] RSP: 002b:00007f6149752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 416.614985][T21003] RAX: ffffffffffffffda RBX: 00007f6148a25fa0 RCX: 00007f614879de99 [ 416.615001][T21003] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 416.615015][T21003] RBP: 00007f6148833eaf R08: 0000000000000000 R09: 0000000000000000 [ 416.615030][T21003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.615044][T21003] R13: 00007f6148a26038 R14: 00007f6148a25fa0 R15: 00007ffcadc6aaf8 [ 416.615076][T21003] [ 416.899988][T21009] openvswitch: netlink: IPv4 tunnel dst address is zero [ 417.729760][T21061] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 417.931688][T21071] MTRR 1 not used [ 419.485784][T21160] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 419.706676][T21172] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 419.895976][T21186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 420.511555][T21216] Zero length message leads to an empty skb [ 420.770231][T21220] could not allocate digest TFM handle [ 421.051397][T21245] netlink: 'syz.0.7407': attribute type 1 has an invalid length. [ 422.388746][T21307] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 422.772069][T21325] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 423.311287][T21352] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 423.676366][T17360] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 423.676406][T17360] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 423.696157][T17360] Bluetooth: hci1: Dropping invalid advertising data [ 423.703254][T17360] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 423.703281][T17360] Bluetooth: hci1: Dropping invalid advertising data [ 423.717466][T17360] Bluetooth: hci1: unknown advertising packet type: 0x79 [ 423.717525][T17360] Bluetooth: hci1: Malformed LE Event: 0x02 [ 424.325937][T21390] NFSD: Failed to start, no listeners configured. [ 424.537389][T21413] binder: 21412:21413 ioctl 400c620e 200000001f40 returned -22 [ 424.839842][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7497'. [ 426.117824][T21446] binder: 21445:21446 ioctl c018620c 200000000040 returned -22 [ 426.985195][T21514] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 428.103725][T21556] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 428.325688][T21566] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 428.481850][T21571] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 428.503212][T21571] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 429.405931][T21608] netlink: 'syz.4.7581': attribute type 2 has an invalid length. [ 429.413953][T21608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7581'. [ 430.499118][T21660] NFSD: Failed to start, no listeners configured. [ 431.037117][T21696] block nbd2: not configured, cannot reconfigure [ 431.267540][T21706] NFSD: Failed to start, no listeners configured. [ 432.095144][T21751] NFSD: Failed to start, no listeners configured. [ 432.966104][T21800] NFSD: Failed to start, no listeners configured. [ 433.293588][T21820] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 434.044481][T21853] netlink: zone id is out of range [ 434.060000][T21853] netlink: zone id is out of range [ 434.067364][T21853] netlink: zone id is out of range [ 434.077320][T21853] netlink: get zone limit has 4 unknown bytes [ 434.299156][T21860] input: f as /devices/virtual/input/input25 [ 434.766800][T21819] kexec: Could not allocate control_code_buffer [ 434.933255][T21878] NFSD: Failed to start, no listeners configured. [ 435.366836][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7723'. [ 435.384759][T21906] FAULT_INJECTION: forcing a failure. [ 435.384759][T21906] name failslab, interval 1, probability 0, space 0, times 0 [ 435.397862][T21903] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 435.418687][T21906] CPU: 0 UID: 0 PID: 21906 Comm: syz.4.7721 Tainted: G U syzkaller #0 PREEMPT(full) [ 435.418732][T21906] Tainted: [U]=USER [ 435.418741][T21906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 435.418757][T21906] Call Trace: [ 435.418767][T21906] [ 435.418778][T21906] dump_stack_lvl+0x100/0x190 [ 435.418830][T21906] should_fail_ex.cold+0x5/0xa [ 435.418863][T21906] should_failslab+0xc2/0x120 [ 435.418904][T21906] __kmalloc_cache_noprof+0x91/0x6c0 [ 435.418938][T21906] ? sget_fc+0x120/0x1d80 [ 435.418979][T21906] ? sget_fc+0x120/0x1d80 [ 435.419019][T21906] ? sget_fc+0x1c3/0x1d80 [ 435.419064][T21906] sget_fc+0x1c3/0x1d80 [ 435.419114][T21906] ? __pfx_set_anon_super_fc+0x10/0x10 [ 435.419150][T21906] ? __pfx_sget_fc+0x10/0x10 [ 435.419186][T21906] ? refcount_dec_not_one+0x136/0x1c0 [ 435.419294][T21906] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 435.419340][T21906] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 435.419367][T21906] ? __kasan_kmalloc+0xaa/0xb0 [ 435.419408][T21906] ? __pfx_mqueue_fill_super+0x10/0x10 [ 435.419521][T21906] get_tree_nodev+0x28/0x190 [ 435.419565][T21906] mqueue_get_tree+0xf1/0x130 [ 435.419608][T21906] vfs_get_tree+0x92/0x320 [ 435.419648][T21906] fc_mount_longterm+0x1a/0x270 [ 435.419695][T21906] mq_init_ns+0x482/0x820 [ 435.419730][T21906] copy_ipcs+0x3dd/0x7e0 [ 435.419766][T21906] create_new_namespaces+0x20a/0xac0 [ 435.419818][T21906] ? security_capable+0x80/0x260 [ 435.419879][T21906] unshare_nsproxy_namespaces+0xf2/0x220 [ 435.419914][T21906] ksys_unshare+0x438/0xab0 [ 435.419957][T21906] ? find_held_lock+0x2b/0x80 [ 435.419992][T21906] ? __pfx_ksys_unshare+0x10/0x10 [ 435.420035][T21906] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 435.420077][T21906] ? do_raw_spin_unlock+0x145/0x1e0 [ 435.420118][T21906] __x64_sys_unshare+0x31/0x40 [ 435.420153][T21906] do_syscall_64+0x115/0x840 [ 435.420186][T21906] ? clear_bhb_loop+0x40/0x90 [ 435.420222][T21906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.420251][T21906] RIP: 0033:0x7f614879de99 [ 435.420275][T21906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.420301][T21906] RSP: 002b:00007f6149752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 435.420335][T21906] RAX: ffffffffffffffda RBX: 00007f6148a25fa0 RCX: 00007f614879de99 [ 435.420355][T21906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 435.420372][T21906] RBP: 00007f6148833eaf R08: 0000000000000000 R09: 0000000000000000 [ 435.420389][T21906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.420407][T21906] R13: 00007f6148a26038 R14: 00007f6148a25fa0 R15: 00007ffcadc6aaf8 [ 435.420445][T21906] [ 436.276736][T21940] netlink: 'syz.4.7739': attribute type 1 has an invalid length. [ 437.408336][ T5708] Process accounting resumed [ 438.414145][T22045] FAULT_INJECTION: forcing a failure. [ 438.414145][T22045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.451574][T22045] CPU: 1 UID: 0 PID: 22045 Comm: syz.0.7789 Tainted: G U syzkaller #0 PREEMPT(full) [ 438.451628][T22045] Tainted: [U]=USER [ 438.451637][T22045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 438.451667][T22045] Call Trace: [ 438.451677][T22045] [ 438.451688][T22045] dump_stack_lvl+0x100/0x190 [ 438.451731][T22045] should_fail_ex.cold+0x5/0xa [ 438.451758][T22045] ? prepare_alloc_pages+0x16d/0x5f0 [ 438.451820][T22045] should_fail_alloc_page+0xeb/0x140 [ 438.451863][T22045] prepare_alloc_pages+0x1f0/0x5f0 [ 438.451911][T22045] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 438.451954][T22045] ? try_to_migrate_one+0x119e/0x3000 [ 438.451992][T22045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.452025][T22045] ? __pfx_try_to_migrate_one+0x10/0x10 [ 438.452076][T22045] ? arch_scale_cpu_capacity+0x15/0xb0 [ 438.452125][T22045] ? find_held_lock+0x2b/0x80 [ 438.452162][T22045] ? rcu_is_watching+0x12/0xc0 [ 438.452199][T22045] ? __up_read+0x333/0x980 [ 438.452228][T22045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.452271][T22045] ? policy_nodemask+0xed/0x4f0 [ 438.452311][T22045] alloc_pages_mpol+0x1fb/0x540 [ 438.452349][T22045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 438.452398][T22045] folio_alloc_mpol_noprof+0x36/0x260 [ 438.452441][T22045] alloc_migration_target_by_mpol+0x2c1/0x650 [ 438.452488][T22045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 438.452532][T22045] ? __pfx___might_resched+0x10/0x10 [ 438.452581][T22045] migrate_pages_batch+0x5dc/0x45c0 [ 438.452638][T22045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 438.452697][T22045] ? walk_pgd_range+0x1133/0x1dd0 [ 438.452730][T22045] ? __pfx_migrate_pages_batch+0x10/0x10 [ 438.452795][T22045] migrate_pages_sync+0x12c/0x880 [ 438.452834][T22045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 438.452884][T22045] ? vma_migratable+0x380/0x450 [ 438.452929][T22045] ? __pfx_migrate_pages_sync+0x10/0x10 [ 438.452969][T22045] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 438.453028][T22045] migrate_pages+0x1a83/0x2850 [ 438.453075][T22045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 438.453129][T22045] ? __pfx_migrate_pages+0x10/0x10 [ 438.453173][T22045] ? mas_next_slot+0x10a3/0x1960 [ 438.453300][T22045] ? do_mbind+0x555/0xfd0 [ 438.453335][T22045] do_mbind+0x5a4/0xfd0 [ 438.453373][T22045] ? __pfx_do_mbind+0x10/0x10 [ 438.453401][T22045] ? find_held_lock+0x2b/0x80 [ 438.453437][T22045] ? ksys_write+0x190/0x250 [ 438.453477][T22045] ? __pfx_get_nodes+0x10/0x10 [ 438.453522][T22045] kernel_mbind+0x1b7/0x200 [ 438.453548][T22045] ? __pfx_kernel_mbind+0x10/0x10 [ 438.453584][T22045] do_syscall_64+0x115/0x840 [ 438.453624][T22045] ? clear_bhb_loop+0x40/0x90 [ 438.453658][T22045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.453685][T22045] RIP: 0033:0x7f24bcd9de99 [ 438.453708][T22045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.453735][T22045] RSP: 002b:00007f24bdce8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 438.453769][T22045] RAX: ffffffffffffffda RBX: 00007f24bd025fa0 RCX: 00007f24bcd9de99 [ 438.453787][T22045] RDX: 0000000100000000 RSI: 0800000100000004 RDI: 0000000000002000 [ 438.453805][T22045] RBP: 00007f24bce33eaf R08: 0000000000001003 R09: 0000000000000002 [ 438.453822][T22045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.453836][T22045] R13: 00007f24bd026038 R14: 00007f24bd025fa0 R15: 00007fff98fe9538 [ 438.453870][T22045] [ 438.454920][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.637540][T22053] random: crng reseeded on system resumption [ 438.678330][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.995569][T22066] openvswitch: netlink: IP tunnel dst address not specified [ 439.325373][T22086] netlink: 'syz.0.7809': attribute type 1 has an invalid length. [ 439.345045][T22086] netlink: 33 bytes leftover after parsing attributes in process `syz.0.7809'. [ 439.574793][T22099] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 439.864179][T22115] sd 0:0:1:0: PR command failed: 1026 [ 439.884847][T22115] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 439.932624][T22115] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 440.541575][T22134] .^: entered promiscuous mode [ 441.094399][T22158] dyndbg: bad flag-op 9, at start of 9p [ 441.106293][T22158] dyndbg: flags parse failed [ 441.244956][T22096] kexec: Could not allocate control_code_buffer [ 441.352824][T22166] NFSD: Failed to start, no listeners configured. [ 441.569185][T22182] FAULT_INJECTION: forcing a failure. [ 441.569185][T22182] name failslab, interval 1, probability 0, space 0, times 0 [ 441.585857][T22182] CPU: 1 UID: 0 PID: 22182 Comm: syz.2.7857 Tainted: G U syzkaller #0 PREEMPT(full) [ 441.585906][T22182] Tainted: [U]=USER [ 441.585917][T22182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 441.585934][T22182] Call Trace: [ 441.585943][T22182] [ 441.585954][T22182] dump_stack_lvl+0x100/0x190 [ 441.585992][T22182] should_fail_ex.cold+0x5/0xa [ 441.586022][T22182] should_failslab+0xc2/0x120 [ 441.586062][T22182] __kmalloc_noprof+0xfc/0x820 [ 441.586096][T22182] ? string_escape_mem+0x746/0xe00 [ 441.586127][T22182] ? kstrdup_quotable+0xc2/0x190 [ 441.586160][T22182] kstrdup_quotable+0xc2/0x190 [ 441.586189][T22182] ? __pfx_kstrdup_quotable+0x10/0x10 [ 441.586220][T22182] ? get_cmdline+0x86/0x360 [ 441.586289][T22182] kstrdup_quotable_cmdline+0x127/0x210 [ 441.586326][T22182] __report_access+0x77/0x230 [ 441.586463][T22182] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.586496][T22182] task_work_run+0x150/0x240 [ 441.586535][T22182] ? __pfx_task_work_run+0x10/0x10 [ 441.586584][T22182] exit_to_user_mode_loop+0x1d8/0x6f0 [ 441.586611][T22182] ? rcu_is_watching+0x12/0xc0 [ 441.586647][T22182] do_syscall_64+0x652/0x840 [ 441.586677][T22182] ? clear_bhb_loop+0x40/0x90 [ 441.586712][T22182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.586741][T22182] RIP: 0033:0x7f285079de99 [ 441.586764][T22182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.586787][T22182] RSP: 002b:00007f28515c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 441.586812][T22182] RAX: ffffffffffffffff RBX: 00007f2850a25fa0 RCX: 00007f285079de99 [ 441.586855][T22182] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 441.586871][T22182] RBP: 00007f2850833eaf R08: 0000000000000004 R09: 0000000000000000 [ 441.586887][T22182] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 441.586902][T22182] R13: 00007f2850a26038 R14: 00007f2850a25fa0 R15: 00007fff002da618 [ 441.586936][T22182] [ 441.794446][T22182] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "(null)"[22182] [ 443.525212][T22263] .^: entered promiscuous mode [ 443.696330][T22270] NFSD: Failed to start, no listeners configured. [ 443.797262][T22278] MTRR 1 not used [ 444.293141][T22299] nbd: must specify a size in bytes for the device [ 444.301652][T22300] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 444.556980][T22315] netlink: Unknown NAT attribute (type=262, max=9) [ 444.639006][T22319] random: crng reseeded on system resumption [ 445.153013][T22344] NFSD: Failed to start, no listeners configured. [ 445.316048][T22354] FAULT_INJECTION: forcing a failure. [ 445.316048][T22354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.334774][T22354] CPU: 0 UID: 0 PID: 22354 Comm: syz.1.7935 Tainted: G U syzkaller #0 PREEMPT(full) [ 445.334817][T22354] Tainted: [U]=USER [ 445.334825][T22354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.334839][T22354] Call Trace: [ 445.334848][T22354] [ 445.334859][T22354] dump_stack_lvl+0x100/0x190 [ 445.334897][T22354] should_fail_ex.cold+0x5/0xa [ 445.334921][T22354] ? prepare_alloc_pages+0x16d/0x5f0 [ 445.334964][T22354] should_fail_alloc_page+0xeb/0x140 [ 445.335005][T22354] prepare_alloc_pages+0x1f0/0x5f0 [ 445.335058][T22354] ? rcu_read_unlock+0x17/0x60 [ 445.335107][T22354] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 445.335146][T22354] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 445.335202][T22354] ? try_to_migrate_one+0x119e/0x3000 [ 445.335236][T22354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 445.335275][T22354] ? __pfx_try_to_migrate_one+0x10/0x10 [ 445.335319][T22354] ? __lock_acquire+0x49f/0x1a40 [ 445.335377][T22354] ? reacquire_held_locks+0xce/0x1e0 [ 445.335422][T22354] ? folio_lock_anon_vma_read+0x348/0xe30 [ 445.335456][T22354] ? rcu_is_watching+0x12/0xc0 [ 445.335489][T22354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.335534][T22354] ? policy_nodemask+0xed/0x4f0 [ 445.335576][T22354] alloc_pages_mpol+0x1fb/0x540 [ 445.335618][T22354] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 445.335670][T22354] folio_alloc_mpol_noprof+0x36/0x260 [ 445.335722][T22354] alloc_migration_target_by_mpol+0x2c1/0x650 [ 445.335773][T22354] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 445.335823][T22354] ? __pfx___might_resched+0x10/0x10 [ 445.335868][T22354] ? folio_get_anon_vma+0x16b/0x980 [ 445.335900][T22354] migrate_pages_batch+0x5dc/0x45c0 [ 445.335948][T22354] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 445.336010][T22354] ? __pfx_migrate_pages_batch+0x10/0x10 [ 445.336072][T22354] ? __pfx_remove_migration_pte+0x10/0x10 [ 445.336132][T22354] migrate_pages_sync+0x12c/0x880 [ 445.336177][T22354] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 445.336229][T22354] ? vma_migratable+0x380/0x450 [ 445.336276][T22354] ? __pfx_migrate_pages_sync+0x10/0x10 [ 445.336318][T22354] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 445.336380][T22354] migrate_pages+0x1a83/0x2850 [ 445.336430][T22354] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 445.336487][T22354] ? __pfx_migrate_pages+0x10/0x10 [ 445.336531][T22354] ? mas_next_slot+0x10a3/0x1960 [ 445.336575][T22354] ? do_mbind+0x555/0xfd0 [ 445.336616][T22354] do_mbind+0x5a4/0xfd0 [ 445.336654][T22354] ? __pfx_do_mbind+0x10/0x10 [ 445.336683][T22354] ? find_held_lock+0x2b/0x80 [ 445.336719][T22354] ? ksys_write+0x190/0x250 [ 445.336760][T22354] ? __pfx_get_nodes+0x10/0x10 [ 445.336806][T22354] kernel_mbind+0x1b7/0x200 [ 445.336837][T22354] ? __pfx_kernel_mbind+0x10/0x10 [ 445.336876][T22354] do_syscall_64+0x115/0x840 [ 445.336908][T22354] ? clear_bhb_loop+0x40/0x90 [ 445.336944][T22354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.336973][T22354] RIP: 0033:0x7fb78299de99 [ 445.336998][T22354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.337025][T22354] RSP: 002b:00007fb783781028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 445.337060][T22354] RAX: ffffffffffffffda RBX: 00007fb782c25fa0 RCX: 00007fb78299de99 [ 445.337080][T22354] RDX: 0000000100000000 RSI: 0800000100000004 RDI: 0000000000002000 [ 445.337098][T22354] RBP: 00007fb782a33eaf R08: 0000000000001003 R09: 0000000000000002 [ 445.337116][T22354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.337133][T22354] R13: 00007fb782c26038 R14: 00007fb782c25fa0 R15: 00007ffdbb920c78 [ 445.337172][T22354] [ 447.074137][T22419] can: request_module (can-proto-3) failed. [ 449.341928][T22524] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 451.318476][T22619] openvswitch: netlink: IP tunnel dst address not specified [ 452.228258][T22658] NFSD: Failed to start, no listeners configured. [ 453.418811][T22717] netlink: 'syz.4.8104': attribute type 2 has an invalid length. [ 454.602451][T22773] random: crng reseeded on system resumption [ 457.061171][T22864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8172'. [ 457.575155][T22893] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 457.611755][T22893] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 457.643124][T22893] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 457.677473][ T5774] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 457.700191][T22892] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 458.050510][T22915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8196'. [ 458.427547][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8203'. [ 458.617629][T22935] NFSD: Failed to start, no listeners configured. [ 459.437176][T22968] Invalid ELF header magic: != ELF [ 459.521411][T17360] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 459.862839][T22995] netlink: 'syz.4.8232': attribute type 1 has an invalid length. [ 461.109213][T23060] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 461.877067][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8284'. [ 463.164675][T23171] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd23 [ 463.260747][T23173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8321'. [ 464.937441][T23254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8358'. [ 466.692366][T23329] No such timeout policy "" [ 466.701171][T23329] netlink: Failed to associated timeout policy '' [ 467.546189][T23370] openvswitch: netlink: Multiple metadata blocks provided [ 468.491762][T23412] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 468.874685][T23427] netlink: 'syz.1.8440': attribute type 2 has an invalid length. [ 468.913433][T21612] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 468.965635][T23410] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 469.080223][T23435] netlink: zone id is out of range [ 469.088454][T23435] netlink: get zone limit has 8 unknown bytes [ 469.443641][T17360] Bluetooth: hci3: SCO packet too small [ 470.107991][T23485] sd 0:0:1:0: PR command failed: 1026 [ 470.122475][T23485] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 470.152430][T23485] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 470.395466][T23498] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 471.201659][T23535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 471.811074][T23566] openvswitch: netlink: IP tunnel dst address not specified [ 471.990367][T23578] netlink: 'syz.0.8511': attribute type 1 has an invalid length. [ 472.008327][T23580] netlink: 'syz.4.8513': attribute type 11 has an invalid length. [ 472.152970][T23589] netlink: 'syz.0.8524': attribute type 11 has an invalid length. [ 472.169122][T23589] netlink: 'syz.0.8524': attribute type 11 has an invalid length. [ 472.178397][T23589] netlink: 'syz.0.8524': attribute type 11 has an invalid length. [ 472.465125][T23603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 472.925281][T23619] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 483.054735][T24128] dump_stack_lvl+0x100/0x190 [ 483.054775][T24128] should_fail_ex.cold+0x5/0xa [ 483.054808][T24128] should_failslab+0xc2/0x120 [ 483.054849][T24128] __kmalloc_cache_noprof+0x91/0x6c0 [ 483.054880][T24128] ? call_usermodehelper_setup+0xaf/0x360 [ 483.054928][T24128] ? __pfx_free_modprobe_argv+0x10/0x10 [ 483.054962][T24128] call_usermodehelper_setup+0xaf/0x360 [ 483.055013][T24128] __request_module+0x3c7/0x6a0 [ 483.055045][T24128] ? __pfx___request_module+0x10/0x10 [ 483.055092][T24128] ? find_held_lock+0x2b/0x80 [ 483.055122][T24128] ? inet6_create+0xb9f/0x12b0 [ 483.055156][T24128] inet6_create+0xd65/0x12b0 [ 483.055184][T24128] ? inet6_create+0x7f/0x12b0 [ 483.055215][T24128] __sock_create+0x339/0x860 [ 483.055349][T24128] __sys_socket+0x14d/0x260 [ 483.055380][T24128] ? __pfx___sys_socket+0x10/0x10 [ 483.055428][T24128] __x64_sys_socket+0x72/0xb0 [ 483.055458][T24128] ? lockdep_hardirqs_on+0x78/0x100 [ 483.055492][T24128] do_syscall_64+0x115/0x840 [ 483.055525][T24128] ? clear_bhb_loop+0x40/0x90 [ 483.055559][T24128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.055589][T24128] RIP: 0033:0x7f614879de99 [ 483.055614][T24128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.055641][T24128] RSP: 002b:00007f6149752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 483.055669][T24128] RAX: ffffffffffffffda RBX: 00007f6148a25fa0 RCX: 00007f614879de99 [ 483.055688][T24128] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 483.055704][T24128] RBP: 00007f6148833eaf R08: 0000000000000000 R09: 0000000000000000 [ 483.055722][T24128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.055738][T24128] R13: 00007f6148a26038 R14: 00007f6148a25fa0 R15: 00007ffcadc6aaf8 [ 483.055774][T24128] [ 483.574933][T24143] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 483.636622][T24146] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 485.658238][T24236] netlink: ct family unspecified [ 485.881809][T24244] netlink: 'syz.0.8828': attribute type 1 has an invalid length. [ 486.501109][T24271] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 486.816091][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8847'. [ 487.173482][T24296] : entered promiscuous mode [ 487.331603][T24309] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 487.638298][T24317] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 488.311949][T24362] netlink: 'syz.4.8884': attribute type 2 has an invalid length. [ 488.568033][T24374] netlink: 'syz.1.8890': attribute type 2 has an invalid length. [ 488.596260][T24376] nbd: couldn't find a device at index 2147483647 [ 489.101427][T24414] openvswitch: netlink: Message has 4 unknown bytes. [ 489.496879][T24436] kfence: disabled [ 489.505482][T24436] kfence: re-enabled [ 489.589377][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8922'. [ 490.672114][T24494] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8947'. [ 491.008763][T24514] netlink: zone id is out of range [ 491.014524][T24514] netlink: zone id is out of range [ 491.020226][T24514] netlink: zone id is out of range [ 491.031782][T24514] netlink: zone id is out of range [ 491.037535][T24514] netlink: zone id is out of range [ 491.046877][T24514] netlink: zone id is out of range [ 491.067183][T24514] netlink: zone id is out of range [ 491.073104][T24517] netlink: 'syz.4.8957': attribute type 1 has an invalid length. [ 491.098513][T24514] netlink: zone id is out of range [ 491.117792][T24514] netlink: zone id is out of range [ 492.404396][ T29] audit: type=1326 audit(4294967300.184:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8995" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb78299de99 code=0x0 [ 492.595260][T24605] FAULT_INJECTION: forcing a failure. [ 492.595260][T24605] name failslab, interval 1, probability 0, space 0, times 0 [ 492.608810][T24605] CPU: 0 UID: 0 PID: 24605 Comm: syz.2.9000 Tainted: G U L syzkaller #0 PREEMPT(full) [ 492.608859][T24605] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 492.608870][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 492.608887][T24605] Call Trace: [ 492.608896][T24605] [ 492.608907][T24605] dump_stack_lvl+0x100/0x190 [ 492.608949][T24605] should_fail_ex.cold+0x5/0xa [ 492.608984][T24605] should_failslab+0xc2/0x120 [ 492.609025][T24605] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 492.609063][T24605] ? __d_alloc+0x35/0xa50 [ 492.609100][T24605] __d_alloc+0x35/0xa50 [ 492.609134][T24605] d_alloc_pseudo+0x1c/0xc0 [ 492.609173][T24605] alloc_file_pseudo+0x118/0x290 [ 492.609211][T24605] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 492.609251][T24605] ? hugetlbfs_get_inode+0x3f5/0x700 [ 492.609366][T24605] hugetlb_file_setup+0x2a8/0x5b0 [ 492.609405][T24605] ksys_mmap_pgoff+0x242/0x610 [ 492.609448][T24605] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 492.609487][T24605] ? xfd_validate_state+0x129/0x190 [ 492.609527][T24605] __x64_sys_mmap+0x125/0x190 [ 492.609565][T24605] do_syscall_64+0x115/0x840 [ 492.609598][T24605] ? clear_bhb_loop+0x40/0x90 [ 492.609632][T24605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.609661][T24605] RIP: 0033:0x7f285079de99 [ 492.609685][T24605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.609712][T24605] RSP: 002b:00007f28515c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 492.609739][T24605] RAX: ffffffffffffffda RBX: 00007f2850a25fa0 RCX: 00007f285079de99 [ 492.609758][T24605] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 492.609774][T24605] RBP: 00007f2850833eaf R08: 000000000000000d R09: 0000300000000000 [ 492.609792][T24605] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 492.609808][T24605] R13: 00007f2850a26038 R14: 00007f2850a25fa0 R15: 00007fff002da618 [ 492.609845][T24605] [ 493.032186][T24621] netlink: 'syz.2.9008': attribute type 1 has an invalid length. [ 493.116803][T24625] netlink: 'syz.4.9009': attribute type 1 has an invalid length. [ 493.848577][T24672] netlink: 178 bytes leftover after parsing attributes in process `syz.2.9033'. [ 494.651056][T24716] net_ratelimit: 316 callbacks suppressed [ 494.651081][T24716] netlink: ct_mark mask cannot be 0 [ 496.583350][T24820] openvswitch: netlink: Duplicate or invalid key (type 0). [ 497.139756][T24847] netlink: 'syz.4.9114': attribute type 1 has an invalid length. [ 497.654194][T24876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9130'. [ 498.171047][T24908] dyndbg: expected <4096 bytes into control [ 498.235086][T24910] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.818111][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9161'. [ 499.606237][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.612861][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.664827][T24985] netlink: 'syz.0.9179': attribute type 3 has an invalid length. [ 500.067291][T25009] random: crng reseeded on system resumption [ 502.175738][T25108] openvswitch: netlink: Flow key attr not present in new flow. [ 502.531503][T25131] netlink: 'syz.0.9248': attribute type 2 has an invalid length. [ 502.610651][T25135] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 503.347157][T25166] netlink: del zone limit has 4 unknown bytes [ 504.140465][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9285'. [ 504.439439][T25224] openvswitch: netlink: Multiple metadata blocks provided [ 505.523032][T25268] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 506.174684][T25292] sctp: [Deprecated]: syz.4.9325 (pid 25292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.174684][T25292] Use struct sctp_sack_info instead [ 507.665899][T25369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9356'. [ 508.158634][T25391] netlink: NAT attribute has 5 unknown bytes [ 508.234468][T25396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9371'. [ 508.681213][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9384'. [ 510.414224][T17360] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 510.520286][T25504] netlink: 'syz.2.9422': attribute type 12 has an invalid length. [ 510.741079][T25516] ksmbd: Unknown IPC event: 14, ignore. [ 511.130609][T25540] netlink: 'syz.1.9440': attribute type 1 has an invalid length. [ 511.292037][T25550] netlink: Unknown nat attribute (0) [ 511.509590][T25562] netlink: 'syz.4.9450': attribute type 1 has an invalid length. [ 512.517440][T25618] netlink: zone id is out of range [ 512.522811][T25618] netlink: zone id is out of range [ 512.528683][T25618] netlink: zone id is out of range [ 512.534192][T25618] netlink: zone id is out of range [ 512.553638][T25618] netlink: zone id is out of range [ 512.558839][T25618] netlink: zone id is out of range [ 512.573664][T25618] netlink: zone id is out of range [ 512.579954][T25618] netlink: zone id is out of range [ 512.939249][T25637] IPVS: length: 131 != 8 [ 513.915341][T25674] net_ratelimit: 49 callbacks suppressed [ 513.915364][T25674] netlink: Failed to add  helper -22 [ 514.150050][T25693] nbd: couldn't find device at index 158 [ 515.100072][T25741] netlink: 'syz.1.9530': attribute type 11 has an invalid length. [ 515.108390][T25741] netlink: 'syz.1.9530': attribute type 11 has an invalid length. [ 515.117158][T25741] netlink: 'syz.1.9530': attribute type 11 has an invalid length. [ 515.125765][T25741] netlink: 'syz.1.9530': attribute type 11 has an invalid length. [ 515.263892][T25744] IPVS: length: 131 != 8 [ 516.154698][T25782] nbd: must specify a device to reconfigure [ 517.146016][ T29] audit: type=1800 audit(4295032862.041:40): pid=25831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9571" name="lu_gp_id" dev="configfs" ino=74666 res=0 errno=0 [ 517.259507][T25835] ucma_write: process 5086 (syz.2.9573) changed security contexts after opening file descriptor, this is not allowed. [ 518.111621][T25873] FAULT_INJECTION: forcing a failure. [ 518.111621][T25873] name failslab, interval 1, probability 0, space 0, times 0 [ 518.140037][T25873] CPU: 0 UID: 0 PID: 25873 Comm: syz.2.9591 Tainted: G U L syzkaller #0 PREEMPT(full) [ 518.140089][T25873] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 518.140100][T25873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 518.140116][T25873] Call Trace: [ 518.140125][T25873] [ 518.140136][T25873] dump_stack_lvl+0x100/0x190 [ 518.140184][T25873] should_fail_ex.cold+0x5/0xa [ 518.140216][T25873] should_failslab+0xc2/0x120 [ 518.140274][T25873] __kmalloc_node_noprof+0x101/0x830 [ 518.140313][T25873] ? __kmalloc_noprof+0x251/0x820 [ 518.140348][T25873] ? get_callchain_buffers+0x1e5/0x380 [ 518.140401][T25873] get_callchain_buffers+0x1e5/0x380 [ 518.140438][T25873] ? security_capable+0x80/0x260 [ 518.140487][T25873] stack_map_alloc+0x316/0x610 [ 518.140525][T25873] map_create+0x874/0x3120 [ 518.140582][T25873] ? __lock_acquire+0x49f/0x1a40 [ 518.140636][T25873] ? __pfx_map_create+0x10/0x10 [ 518.140687][T25873] ? __might_fault+0xc5/0x140 [ 518.140732][T25873] __sys_bpf+0x2a6e/0x4e80 [ 518.140774][T25873] ? __pfx___sys_bpf+0x10/0x10 [ 518.140802][T25873] ? find_held_lock+0x2b/0x80 [ 518.140840][T25873] ? futex_wake+0x4ea/0x5e0 [ 518.140888][T25873] ? futex_wait+0x11e/0x370 [ 518.140936][T25873] ? __pfx_futex_wait+0x10/0x10 [ 518.140982][T25873] ? rcu_read_lock_any_held+0x6a/0xa0 [ 518.141018][T25873] ? find_held_lock+0x2b/0x80 [ 518.141049][T25873] ? ksys_write+0x190/0x250 [ 518.141073][T25873] ? ksys_write+0x190/0x250 [ 518.141119][T25873] ? __x64_sys_futex+0x34f/0x4d0 [ 518.141155][T25873] ? __x64_sys_futex+0x358/0x4d0 [ 518.141186][T25873] ? fput+0x79/0x100 [ 518.141215][T25873] ? __pfx___x64_sys_futex+0x10/0x10 [ 518.141257][T25873] ? __x64_sys_bpf+0xce/0x140 [ 518.141286][T25873] __x64_sys_bpf+0xce/0x140 [ 518.141321][T25873] ? do_syscall_64+0x90/0x840 [ 518.141357][T25873] do_syscall_64+0x115/0x840 [ 518.141389][T25873] ? clear_bhb_loop+0x40/0x90 [ 518.141424][T25873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.141451][T25873] RIP: 0033:0x7f285079de99 [ 518.141475][T25873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.141500][T25873] RSP: 002b:00007f28515c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.141528][T25873] RAX: ffffffffffffffda RBX: 00007f2850a25fa0 RCX: 00007f285079de99 [ 518.141547][T25873] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 518.141564][T25873] RBP: 00007f2850833eaf R08: 0000000000000000 R09: 0000000000000000 [ 518.141581][T25873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.141597][T25873] R13: 00007f2850a26038 R14: 00007f2850a25fa0 R15: 00007fff002da618 [ 518.141635][T25873] [ 519.777265][T25948] unsupported nla_type 113 [ 519.893870][T17360] Bluetooth: hci1: ACL packet too small [ 521.825590][T26054] netlink: 'syz.0.9685': attribute type 11 has an invalid length. [ 521.859410][T26054] netlink: 'syz.0.9685': attribute type 11 has an invalid length. [ 521.877208][T26054] netlink: 'syz.0.9685': attribute type 11 has an invalid length. [ 522.404646][T26084] openvswitch: netlink: Flow key attribute not present in set flow. [ 522.571796][T26091] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 523.739991][T17360] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 524.582649][T26183] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 524.967272][T26202] openvswitch: netlink: IP tunnel dst address not specified [ 525.306481][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9751'. [ 525.718989][T26240] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9761'. [ 529.269384][ T29] audit: type=1326 audit(4295032874.228:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26410 comm="syz.2.9840" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285079de99 code=0x0 [ 530.758764][T26473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9868'. [ 532.198899][T26514] phram: parameter too long [ 532.473779][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9896'. [ 532.946751][T26556] netlink: 334 bytes leftover after parsing attributes in process `syz.2.9904'. [ 535.343643][T26623] netlink: set zone limit has 4 unknown bytes [ 535.485305][T26628] netlink: zone id is out of range [ 535.745261][T26640] netlink: 'syz.2.9945': attribute type 11 has an invalid length. [ 535.754262][T26640] netlink: 'syz.2.9945': attribute type 11 has an invalid length. [ 535.762319][T26640] netlink: 'syz.2.9945': attribute type 11 has an invalid length. [ 536.525876][T26683] netlink: 'syz.1.9964': attribute type 1 has an invalid length. [ 537.025224][T26696] phram: parameter too long [ 537.861299][T26744] netlink: 'syz.0.9993': attribute type 4 has an invalid length. [ 537.880136][T26744] netlink: 'syz.0.9993': attribute type 1 has an invalid length. [ 538.714565][T26784] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 538.895909][T26787] XFS: Clearing xfsstats [ 540.366558][T26843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10040'. [ 540.413718][T26843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10040'. [ 540.683154][T26850] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 541.143481][T26868] netlink: Unknown conntrack attr (type=257, max=9) [ 541.733116][T26889] NFSD: Failed to start, no listeners configured. [ 542.304624][T26908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10072'. [ 543.154562][T26939] aoe: copy from user failed [ 543.162134][T26939] aoe: could not set interface list: too many interfaces [ 543.462812][T26952] netlink: 'syz.2.10093': attribute type 1 has an invalid length. [ 544.449324][T26982] netlink: Invalid conntrack helper [ 544.572302][T26987] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 544.599682][T26987] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 544.631232][T26990] FAULT_INJECTION: forcing a failure. [ 544.631232][T26990] name failslab, interval 1, probability 0, space 0, times 0 [ 544.683727][T26990] CPU: 1 UID: 0 PID: 26990 Comm: syz.1.10107 Tainted: G U L syzkaller #0 PREEMPT(full) [ 544.683782][T26990] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 544.683793][T26990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 544.683808][T26990] Call Trace: [ 544.683816][T26990] [ 544.683827][T26990] dump_stack_lvl+0x100/0x190 [ 544.683868][T26990] should_fail_ex.cold+0x5/0xa [ 544.683901][T26990] should_failslab+0xc2/0x120 [ 544.683942][T26990] __kmalloc_cache_noprof+0x91/0x6c0 [ 544.683975][T26990] ? sctp_auth_shkey_create+0x9e/0x210 [ 544.684128][T26990] sctp_auth_shkey_create+0x9e/0x210 [ 544.684168][T26990] sctp_endpoint_new+0x589/0xb20 [ 544.684258][T26990] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 544.684297][T26990] ? lockdep_init_map_type+0x5c/0x250 [ 544.684339][T26990] ? lockdep_init_map_type+0x5c/0x250 [ 544.684377][T26990] ? lockdep_init_map_type+0x5c/0x250 [ 544.684420][T26990] sctp_init_sock+0xe2b/0x1300 [ 544.684476][T26990] ? __pfx_sctp_init_sock+0x10/0x10 [ 544.684510][T26990] inet_create+0x94c/0x1060 [ 544.684548][T26990] ? inet_create+0x94/0x1060 [ 544.684583][T26990] __sock_create+0x339/0x860 [ 544.684618][T26990] __sys_socket+0x14d/0x260 [ 544.684645][T26990] ? __pfx___sys_socket+0x10/0x10 [ 544.684679][T26990] __x64_sys_socket+0x72/0xb0 [ 544.684710][T26990] ? lockdep_hardirqs_on+0x78/0x100 [ 544.684739][T26990] do_syscall_64+0x115/0x840 [ 544.684772][T26990] ? clear_bhb_loop+0x40/0x90 [ 544.684807][T26990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.684837][T26990] RIP: 0033:0x7fb78299de99 [ 544.684859][T26990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.684884][T26990] RSP: 002b:00007fb783781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 544.684908][T26990] RAX: ffffffffffffffda RBX: 00007fb782c25fa0 RCX: 00007fb78299de99 [ 544.684925][T26990] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 544.684939][T26990] RBP: 00007fb782a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 544.684954][T26990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.684968][T26990] R13: 00007fb782c26038 R14: 00007fb782c25fa0 R15: 00007ffdbb920c78 [ 544.685000][T26990] [ 545.220135][T27004] openvswitch: netlink: Missing valid actions attribute. [ 545.832755][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10133'. [ 545.974188][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10136'. [ 546.107220][T27047] netlink: 'syz.4.10139': attribute type 1 has an invalid length. [ 547.497302][T27095] futex_wake_op: syz.1.10158 tries to shift op by -2048; fix this program [ 547.531700][T27095] futex_wake_op: syz.1.10158 tries to shift op by -2048; fix this program [ 547.826172][T27117] nbd: illegal input index -1024 [ 548.073572][T27125] NFSD: Failed to start, no listeners configured. [ 549.231451][T27176] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 549.256689][T27172] NFSD: Failed to start, no listeners configured. [ 549.872612][ T29] audit: type=1326 audit(4295032894.925:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27195 comm="syz.0.10209" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24bcd9de99 code=0x0 [ 550.261072][ T29] audit: type=1107 audit(4295032895.317:43): pid=27213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 550.289830][ T29] audit: type=1107 audit(4295032895.317:44): pid=27213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 550.840725][T27227] NFSD: Failed to start, no listeners configured. [ 552.344070][T27288] netlink: 'syz.4.10254': attribute type 23 has an invalid length. [ 552.369536][T27273] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7ab66 [ 552.423014][T27273] memcg:ffff888034eb0280 [ 552.449225][T27273] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 552.522388][T27273] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 552.570359][T27273] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888034eb0280 [ 552.593968][T27273] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 552.619247][T27273] page_owner tracks the page as allocated [ 552.638464][T27273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 27273, tgid 27268 (syz.1.10242), ts 552369502407, free_ts 552339229659 [ 552.672666][T27298] netlink: 342 bytes leftover after parsing attributes in process `syz.2.10259'. [ 552.727834][T27273] post_alloc_hook+0xfd/0x120 [ 552.788372][T27273] get_page_from_freelist+0xf48/0x3530 [ 552.809770][T27273] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 552.828611][T27273] alloc_pages_mpol+0x1fb/0x540 [ 552.840339][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10262'. [ 552.852541][T27273] folio_alloc_noprof+0x22/0x250 [ 552.859019][T27305] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 552.871279][T27273] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 552.932967][T27273] filemap_alloc_folio_noprof+0x5e/0x80 [ 552.954621][T27273] page_cache_ra_order+0x539/0xed0 [ 552.993150][T27273] filemap_fault+0x1943/0x3130 [ 553.018929][T27273] __do_fault+0x10b/0x440 [ 553.055062][T27273] do_fault+0xeb2/0x1750 [ 553.059216][T27315] FAULT_INJECTION: forcing a failure. [ 553.059216][T27315] name failslab, interval 1, probability 0, space 0, times 0 [ 553.088742][T27273] __handle_mm_fault+0x187d/0x2a00 [ 553.091411][T27315] CPU: 1 UID: 0 PID: 27315 Comm: syz.4.10267 Tainted: G U L syzkaller #0 PREEMPT(full) [ 553.091461][T27315] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 553.091472][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.091489][T27315] Call Trace: [ 553.091498][T27315] [ 553.091509][T27315] dump_stack_lvl+0x100/0x190 [ 553.091546][T27315] should_fail_ex.cold+0x5/0xa [ 553.091578][T27315] should_failslab+0xc2/0x120 [ 553.091617][T27315] __kmalloc_noprof+0xfc/0x820 [ 553.091650][T27315] ? rcu_is_watching+0x12/0xc0 [ 553.091683][T27315] ? tomoyo_realpath_from_path+0xb6/0x690 [ 553.091852][T27315] tomoyo_realpath_from_path+0xb6/0x690 [ 553.091904][T27315] tomoyo_check_open_permission+0x2af/0x3c0 [ 553.091942][T27315] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 553.091978][T27315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.092015][T27315] ? hook_file_open+0x24f/0x8f0 [ 553.092076][T27315] ? lock_acquire+0x1b9/0x370 [ 553.092129][T27315] tomoyo_file_open+0x6b/0x90 [ 553.092184][T27315] security_file_open+0xb5/0x1e0 [ 553.092231][T27315] do_dentry_open+0x588/0x14d0 [ 553.092271][T27315] vfs_open+0x82/0x3f0 [ 553.092313][T27315] dentry_open+0x71/0xd0 [ 553.092348][T27315] pidfs_alloc_file+0x18f/0x290 [ 553.092405][T27315] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 553.092444][T27315] pidfd_prepare+0x107/0x1b0 [ 553.092483][T27315] __x64_sys_pidfd_open+0x105/0x1a0 [ 553.092524][T27315] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 553.092573][T27315] do_syscall_64+0x115/0x840 [ 553.092605][T27315] ? clear_bhb_loop+0x40/0x90 [ 553.092639][T27315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.092667][T27315] RIP: 0033:0x7f614879de99 [ 553.092691][T27315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.092716][T27315] RSP: 002b:00007f6149752028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 553.092742][T27315] RAX: ffffffffffffffda RBX: 00007f6148a25fa0 RCX: 00007f614879de99 [ 553.092760][T27315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 553.092775][T27315] RBP: 00007f6148833eaf R08: 0000000000000000 R09: 0000000000000000 [ 553.092792][T27315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.092807][T27315] R13: 00007f6148a26038 R14: 00007f6148a25fa0 R15: 00007ffcadc6aaf8 [ 553.092843][T27315] [ 553.092937][T27315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.147002][T27273] handle_mm_fault+0x37b/0xa30 [ 553.425837][T27273] __get_user_pages+0x1178/0x32a0 [ 553.491594][T27273] populate_vma_page_range+0x267/0x3f0 [ 553.521638][T27273] __mm_populate+0x107/0x3a0 [ 553.556500][T27273] page last free pid 23 tgid 23 stack trace: [ 553.582714][T27273] __free_frozen_pages+0x79f/0x1090 [ 553.614156][T27273] tlb_remove_table_rcu+0x2cf/0x380 [ 553.633174][T27273] rcu_core+0x5a2/0x10d0 [ 553.667178][T27273] handle_softirqs+0x1ea/0x9b0 [ 553.710280][T27273] run_ksoftirqd+0x38/0x60 [ 553.729074][T27273] smpboot_thread_fn+0x3d3/0xaa0 [ 553.748999][T27273] kthread+0x370/0x450 [ 553.779748][T27273] ret_from_fork+0x72b/0xd50 [ 553.796128][T27273] ret_from_fork_asm+0x1a/0x30 [ 553.812078][T27273] ------------[ cut here ]------------ [ 553.817912][T27273] kernel BUG at mm/filemap.c:858! [ 553.861692][T27343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10281'. [ 553.915277][T27273] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 553.921587][T27273] CPU: 0 UID: 0 PID: 27273 Comm: syz.1.10242 Tainted: G U L syzkaller #0 PREEMPT(full) [ 553.932653][T27273] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 553.937854][T27273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.948001][T27273] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 553.953996][T27273] Code: 3e c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 c6 eb 12 00 90 0f 0b e8 fe 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 af eb 12 00 90 <0f> 0b e8 e7 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 98 eb 12 00 [ 553.973619][T27273] RSP: 0000:ffffc9000e0273f8 EFLAGS: 00010246 [ 553.979697][T27273] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90005e39000 [ 553.988027][T27273] RDX: 0000000000080000 RSI: ffffffff825a5708 RDI: ffff88807ee4a3c4 [ 553.996024][T27273] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 554.004013][T27273] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 554.012001][T27273] R13: ffffea0001ead980 R14: 0000000000000030 R15: 0000000000000000 [ 554.019987][T27273] FS: 00007fb7837816c0(0000) GS:ffff888123de5000(0000) knlGS:0000000000000000 [ 554.028924][T27273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.035509][T27273] CR2: 00007fb782c13bf8 CR3: 0000000026ae4000 CR4: 00000000003526f0 [ 554.043485][T27273] Call Trace: [ 554.046767][T27273] [ 554.049719][T27273] ? __pfx___filemap_add_folio+0x10/0x10 [ 554.055386][T27273] filemap_add_folio+0x1d3/0x630 [ 554.060417][T27273] ? __lock_acquire+0x49f/0x1a40 [ 554.065378][T27273] ? __pfx_filemap_add_folio+0x10/0x10 [ 554.070840][T27273] ? __pfx___css_rstat_updated+0x10/0x10 [ 554.076690][T27273] page_cache_ra_order+0x602/0xed0 [ 554.081823][T27273] filemap_fault+0x1943/0x3130 [ 554.086597][T27273] ? __pfx_filemap_fault+0x10/0x10 [ 554.091896][T27273] ? blk_cgroup_congested+0x136/0x270 [ 554.097603][T27273] ? blk_cgroup_congested+0x136/0x270 [ 554.102981][T27273] ? __pfx_filemap_map_pages+0x10/0x10 [ 554.108444][T27273] __do_fault+0x10b/0x440 [ 554.112792][T27273] do_fault+0xeb2/0x1750 [ 554.117055][T27273] __handle_mm_fault+0x187d/0x2a00 [ 554.122173][T27273] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 554.127553][T27273] ? __pfx___handle_mm_fault+0x10/0x10 [ 554.133023][T27273] ? pte_offset_map_lock+0x174/0x320 [ 554.138317][T27273] ? find_held_lock+0x2b/0x80 [ 554.143004][T27273] ? follow_page_pte+0x4d0/0x13f0 [ 554.148039][T27273] handle_mm_fault+0x37b/0xa30 [ 554.152814][T27273] __get_user_pages+0x1178/0x32a0 [ 554.157857][T27273] ? __pfx___get_user_pages+0x10/0x10 [ 554.163274][T27273] populate_vma_page_range+0x267/0x3f0 [ 554.168747][T27273] ? __pfx_populate_vma_page_range+0x10/0x10 [ 554.174738][T27273] ? __pfx_find_vma_intersection+0x10/0x10 [ 554.180572][T27273] ? do_mmap+0x93f/0x12f0 [ 554.184921][T27273] __mm_populate+0x107/0x3a0 [ 554.189530][T27273] ? __pfx___mm_populate+0x10/0x10 [ 554.194656][T27273] ? up_write+0x2e5/0x5c0 [ 554.199018][T27273] vm_mmap_pgoff+0x37f/0x470 [ 554.203618][T27273] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 554.208736][T27273] ? __fget_files+0x215/0x3d0 [ 554.213417][T27273] ? __fget_files+0x21f/0x3d0 [ 554.218097][T27273] ksys_mmap_pgoff+0x3cb/0x610 [ 554.222909][T27273] ? __x64_sys_futex+0x358/0x4d0 [ 554.227856][T27273] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 554.233242][T27273] ? xfd_validate_state+0x129/0x190 [ 554.238449][T27273] __x64_sys_mmap+0x125/0x190 [ 554.243145][T27273] do_syscall_64+0x115/0x840 [ 554.247787][T27273] ? clear_bhb_loop+0x40/0x90 [ 554.252473][T27273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.258741][T27273] RIP: 0033:0x7fb78299de99 [ 554.263347][T27273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.283056][T27273] RSP: 002b:00007fb783781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 554.291496][T27273] RAX: ffffffffffffffda RBX: 00007fb782c25fa0 RCX: 00007fb78299de99 [ 554.299511][T27273] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 554.307501][T27273] RBP: 00007fb782a33eaf R08: 0000000000000003 R09: 0000000000008000 [ 554.315485][T27273] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 554.323459][T27273] R13: 00007fb782c26038 R14: 00007fb782c25fa0 R15: 00007ffdbb920c78 [ 554.331447][T27273] [ 554.334462][T27273] Modules linked in: [ 554.340602][T27273] ---[ end trace 0000000000000000 ]--- [ 554.357808][T27343] netlink: 29 bytes leftover after parsing attributes in process `syz.4.10281'. [ 554.396735][T27273] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 554.413398][T27273] Code: 3e c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 c6 eb 12 00 90 0f 0b e8 fe 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 af eb 12 00 90 <0f> 0b e8 e7 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 98 eb 12 00 [ 554.435856][T27273] RSP: 0000:ffffc9000e0273f8 EFLAGS: 00010246 [ 554.442042][T27273] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90005e39000 [ 554.451836][T27273] RDX: 0000000000080000 RSI: ffffffff825a5708 RDI: ffff88807ee4a3c4 [ 554.461174][T27273] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 554.469529][T27273] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 554.478182][T27273] R13: ffffea0001ead980 R14: 0000000000000030 R15: 0000000000000000 [ 554.486335][T27273] FS: 00007fb7837816c0(0000) GS:ffff888123de5000(0000) knlGS:0000000000000000 [ 554.501060][T27273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.508073][T27273] CR2: 0000001b31016ff8 CR3: 0000000026ae4000 CR4: 00000000003526f0 [ 554.518298][T27273] Kernel panic - not syncing: Fatal exception [ 554.524944][T27273] Kernel Offset: disabled [ 554.529269][T27273] Rebooting in 86400 seconds..