last executing test programs: 43.904979346s ago: executing program 2 (id=6516): r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r0, 0x0, 0x4) 43.739933786s ago: executing program 2 (id=6520): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) 43.579801515s ago: executing program 2 (id=6524): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000100)="c80d1b5d399b3944", 0x8) 42.633118054s ago: executing program 2 (id=6545): r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x10001) 42.481327545s ago: executing program 2 (id=6548): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 41.995887732s ago: executing program 2 (id=6556): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000400), 0x8482, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000440)="316fc7329f951848", 0x8) 41.577022648s ago: executing program 32 (id=6556): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000400), 0x8482, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000440)="316fc7329f951848", 0x8) 2.561399388s ago: executing program 3 (id=7149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001fc0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='{\x8b\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004) 2.210125337s ago: executing program 3 (id=7154): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 2.207737352s ago: executing program 1 (id=7155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x309, 0x70bd2d, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 2.057754073s ago: executing program 1 (id=7158): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 1.889767861s ago: executing program 1 (id=7160): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x200204, 0x14) 1.454581608s ago: executing program 3 (id=7166): unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d20, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.34905186s ago: executing program 4 (id=7167): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b45, r0) 1.263737735s ago: executing program 1 (id=7168): prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1.166998402s ago: executing program 4 (id=7170): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) 1.054327569s ago: executing program 1 (id=7171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x11, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x141}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771fdc19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 991.254536ms ago: executing program 0 (id=7172): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) 954.647492ms ago: executing program 4 (id=7173): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x8) 823.129524ms ago: executing program 1 (id=7174): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 779.955886ms ago: executing program 0 (id=7175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0xee}, @generic]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x3c}}, 0x48084) 747.918925ms ago: executing program 4 (id=7176): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lseek$auto(r0, 0x7f, 0x4) 584.979639ms ago: executing program 3 (id=7177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f000000cf40)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040050) 574.384122ms ago: executing program 0 (id=7178): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) close_range$auto(0x2, 0x8, 0x0) 358.691836ms ago: executing program 3 (id=7179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf258c00000008000100000000000c0099000100000002"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x44) 354.845077ms ago: executing program 0 (id=7180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e80)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) 278.449218ms ago: executing program 4 (id=7181): setresuid$auto(0x0, 0x8, 0x8000) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) 184.661231ms ago: executing program 3 (id=7182): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1c\x00', 0x40001, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, 0x0) 162.625853ms ago: executing program 0 (id=7183): setns(0xc9, 0x0) r0 = socket(0x8, 0x80000, 0x80000003) getsockopt$auto_SO_NO_CHECK(r0, 0x5, 0x42000004, 0x0, &(0x7f0000000040)=0x2) 40.677µs ago: executing program 0 (id=7184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80) 0s ago: executing program 4 (id=7185): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x2, 0x9) ioctl$auto(r0, 0x8910, 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 78.769112][ T5612] cgroup: Unknown subsys name 'net' [ 78.861853][ T5612] cgroup: Unknown subsys name 'cpuset' [ 78.871923][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.366060][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.836003][ T5693] mmap: syz.1.64 (5693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.796461][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.934694][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.944701][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.954456][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.963569][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.966154][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.973164][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.980800][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.987905][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.015097][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.017552][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.022986][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.036237][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.050798][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.061298][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.069461][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.125137][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.136478][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.145774][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.162221][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.182740][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.770282][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.778218][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.785719][ T5867] bridge_slave_0: entered allmulticast mode [ 90.792894][ T5867] bridge_slave_0: entered promiscuous mode [ 90.840207][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.847373][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.854879][ T5867] bridge_slave_1: entered allmulticast mode [ 90.862183][ T5867] bridge_slave_1: entered promiscuous mode [ 90.963494][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.988939][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.996278][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.004930][ T5866] bridge_slave_0: entered allmulticast mode [ 91.012139][ T5866] bridge_slave_0: entered promiscuous mode [ 91.022205][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.031602][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.039500][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.046696][ T5879] bridge_slave_0: entered allmulticast mode [ 91.054236][ T5879] bridge_slave_0: entered promiscuous mode [ 91.059500][ T5873] Bluetooth: hci0: command tx timeout [ 91.063442][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.066385][ T5875] Bluetooth: hci1: command tx timeout [ 91.073043][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.085682][ T5879] bridge_slave_1: entered allmulticast mode [ 91.092990][ T5879] bridge_slave_1: entered promiscuous mode [ 91.118009][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.125261][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.132969][ T5875] Bluetooth: hci2: command tx timeout [ 91.138803][ T5866] bridge_slave_1: entered allmulticast mode [ 91.145871][ T5866] bridge_slave_1: entered promiscuous mode [ 91.172376][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.179718][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.186923][ T5874] bridge_slave_0: entered allmulticast mode [ 91.194140][ T5874] bridge_slave_0: entered promiscuous mode [ 91.208483][ T5875] Bluetooth: hci3: command tx timeout [ 91.245841][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.253685][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.261116][ T5874] bridge_slave_1: entered allmulticast mode [ 91.269005][ T5874] bridge_slave_1: entered promiscuous mode [ 91.279001][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.290691][ T5867] team0: Port device team_slave_0 added [ 91.299068][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.321320][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.332509][ T5867] team0: Port device team_slave_1 added [ 91.340260][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.394516][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.438697][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.449909][ T5866] team0: Port device team_slave_0 added [ 91.456720][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.463766][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.489736][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.503413][ T5879] team0: Port device team_slave_0 added [ 91.519886][ T5866] team0: Port device team_slave_1 added [ 91.526280][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.533541][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.559711][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.574185][ T5879] team0: Port device team_slave_1 added [ 91.624500][ T5874] team0: Port device team_slave_0 added [ 91.653543][ T5874] team0: Port device team_slave_1 added [ 91.660648][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.667784][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.694738][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.706956][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.713975][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.740189][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.773863][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.781226][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.807458][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.819475][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.826693][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.853291][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.900448][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.907500][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.933763][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.951184][ T5867] hsr_slave_0: entered promiscuous mode [ 91.957664][ T5867] hsr_slave_1: entered promiscuous mode [ 91.969007][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.976034][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.002164][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.090778][ T5879] hsr_slave_0: entered promiscuous mode [ 92.097609][ T5879] hsr_slave_1: entered promiscuous mode [ 92.097646][ T807] cfg80211: failed to load regulatory.db [ 92.110043][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 92.115871][ T5879] Cannot create hsr debugfs directory [ 92.129114][ T5866] hsr_slave_0: entered promiscuous mode [ 92.135538][ T5866] hsr_slave_1: entered promiscuous mode [ 92.142704][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 92.148750][ T5866] Cannot create hsr debugfs directory [ 92.228137][ T5874] hsr_slave_0: entered promiscuous mode [ 92.234896][ T5874] hsr_slave_1: entered promiscuous mode [ 92.241313][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 92.247053][ T5874] Cannot create hsr debugfs directory [ 92.666106][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.684868][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.693600][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.705199][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.714446][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.724881][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.738866][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.751713][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.833237][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.844579][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.852803][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.864020][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.872620][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.881801][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.899155][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.910399][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.994387][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.005021][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.013381][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.023013][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.045784][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.057746][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.066853][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.076956][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.128716][ T5873] Bluetooth: hci0: command tx timeout [ 93.134829][ T5875] Bluetooth: hci1: command tx timeout [ 93.189756][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.200386][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.208534][ T5875] Bluetooth: hci2: command tx timeout [ 93.215781][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.227679][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.244084][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.253664][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.273670][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.286413][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.294670][ T5875] Bluetooth: hci3: command tx timeout [ 93.347872][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.418116][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.466629][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.474559][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.505817][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.516117][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.523396][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.583391][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.595032][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.621578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.628796][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.648546][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.655717][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.711723][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.738111][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.786815][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.794086][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.830182][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.854922][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.862260][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.887934][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.895198][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.937305][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.944550][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.635777][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.836433][ T5867] veth0_vlan: entered promiscuous mode [ 94.886162][ T5867] veth1_vlan: entered promiscuous mode [ 94.941402][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.052141][ T5867] veth0_macvtap: entered promiscuous mode [ 95.085007][ T5867] veth1_macvtap: entered promiscuous mode [ 95.105555][ T5874] veth0_vlan: entered promiscuous mode [ 95.141053][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.176136][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.193549][ T5874] veth1_vlan: entered promiscuous mode [ 95.206488][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.209975][ T5873] Bluetooth: hci0: command tx timeout [ 95.219487][ T5875] Bluetooth: hci1: command tx timeout [ 95.237841][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.267076][ T99] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.278794][ T99] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289422][ T5873] Bluetooth: hci2: command tx timeout [ 95.307208][ T99] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.316605][ T99] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.378656][ T5873] Bluetooth: hci3: command tx timeout [ 95.407630][ T5874] veth0_macvtap: entered promiscuous mode [ 95.429640][ T5879] veth0_vlan: entered promiscuous mode [ 95.462896][ T5874] veth1_macvtap: entered promiscuous mode [ 95.486375][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497734][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.513108][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.523325][ T5879] veth1_vlan: entered promiscuous mode [ 95.545465][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.588147][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.599140][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.599746][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.620896][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.637234][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.646770][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.665050][ T5866] veth0_vlan: entered promiscuous mode [ 95.722627][ T5866] veth1_vlan: entered promiscuous mode [ 95.791373][ T5879] veth0_macvtap: entered promiscuous mode [ 95.823326][ T5879] veth1_macvtap: entered promiscuous mode [ 95.864381][ T29] audit: type=1800 audit(1785407030.232:2): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="lu_gp_id" dev="configfs" ino=8485 res=0 errno=0 [ 96.000913][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.027963][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.030038][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.098191][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.131505][ T5866] veth0_macvtap: entered promiscuous mode [ 96.190872][ T5866] veth1_macvtap: entered promiscuous mode [ 96.217745][ T1052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.237520][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.262267][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.274806][ T1052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.292158][ T1052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340100][ T1052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.417215][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.462460][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.554000][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.577762][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.634149][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.653222][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.696984][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.730488][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.885613][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.914789][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.048095][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.077801][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.207622][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.231432][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.290421][ T5873] Bluetooth: hci0: command tx timeout [ 97.296073][ T5875] Bluetooth: hci1: command tx timeout [ 97.369547][ T5875] Bluetooth: hci2: command tx timeout [ 97.449238][ T5875] Bluetooth: hci3: command tx timeout [ 97.805643][ T6069] random: crng reseeded on system resumption [ 100.016608][ T6160] random: crng reseeded on system resumption [ 100.265352][ T29] audit: type=1800 audit(1785407034.632:3): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.274" name="lu_gp_id" dev="configfs" ino=9441 res=0 errno=0 [ 101.447324][ T29] audit: type=1800 audit(1785407035.812:4): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.302" name="lu_gp_id" dev="configfs" ino=9212 res=0 errno=0 [ 102.265782][ T6258] syz.2.319 (6258): attempted to duplicate a private mapping with mremap. This is not supported. [ 102.414689][ T6264] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.974623][ T5875] Bluetooth: hci3: unexpected event 0x23 length: 16 > 13 [ 103.371462][ T5875] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 104.340091][ T29] audit: type=1800 audit(1785407038.712:5): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.364" name="features" dev="configfs" ino=10393 res=0 errno=0 [ 105.164409][ T6386] Process accounting resumed [ 105.407013][ T6397] ima: policy update failed [ 105.425032][ T29] audit: type=1802 audit(1785407039.792:6): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.389" res=0 errno=0 [ 106.143614][ T6432] nfs: Bad value for 'source' [ 106.926242][ T6467] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.467997][ T6495] syz.3.437 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.734662][ T29] audit: type=1800 audit(1785407044.102:7): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.489" name="trace_pipe" dev="tracefs" ino=3379 res=0 errno=0 [ 111.424958][ T6667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.687574][ T29] audit: type=1800 audit(1785407048.052:8): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.571" name="features" dev="configfs" ino=10197 res=0 errno=0 [ 114.250628][ T29] audit: type=1800 audit(1785407048.622:9): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.581" name="version" dev="configfs" ino=10208 res=0 errno=0 [ 115.183179][ T29] audit: type=1800 audit(1843104519.310:10): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.601" name="features" dev="configfs" ino=12297 res=0 errno=0 [ 119.680558][ T6965] Process accounting resumed [ 120.852456][ T7000] Process accounting resumed [ 122.017998][ T7040] ======================================================= [ 122.017998][ T7040] WARNING: The mand mount option has been deprecated and [ 122.017998][ T7040] and is ignored by this kernel. Remove the mand [ 122.017998][ T7040] option from the mount to silence this warning. [ 122.017998][ T7040] ======================================================= [ 127.515553][ T7253] Invalid ELF header magic: != ELF [ 133.059677][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067716][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.672856][ T5875] Bluetooth: hci1: unexpected event 0x03 length: 123 > 11 [ 135.189059][ T7536] Process accounting paused [ 137.359252][ T7633] capability: warning: `syz.2.994' uses 32-bit capabilities (legacy support in use) [ 144.527800][ T5875] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 144.710617][ T29] audit: type=1800 audit(1843104545.160:11): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1163" name="trace_pipe" dev="tracefs" ino=3417 res=0 errno=0 [ 145.444348][ T29] audit: type=1800 audit(1843104545.890:12): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1179" name="dummy_udc" dev="gadgetfs" ino=7805 res=0 errno=0 [ 146.526721][ T8047] can: request_module (can-proto-5) failed. [ 146.760836][ T5875] Bluetooth: hci0: unexpected event 0x20 length: 120 > 7 [ 149.796954][ T8195] Process accounting paused [ 150.895781][ T8248] Process accounting paused [ 151.012748][ T5875] Bluetooth: hci0: unexpected event 0x3c length: 124 > 7 [ 151.168954][ T8263] syz_tun: tun_chr_ioctl cmd 1074025675 [ 151.208539][ T8263] syz_tun: persist enabled [ 154.573355][ T8378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.579660][ T8378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.592666][ T8378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.602470][ T8378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.608770][ T8378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.619312][ T8378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.627335][ T8378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.633614][ T8378] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.640946][ T8378] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.649395][ T8378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.655504][ T8378] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.670186][ T8378] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.227251][ T8434] __vm_enough_memory: pid: 8434, comm: syz.2.1393, bytes: 4398046511104 not enough memory for the allocation [ 155.397388][ T8440] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.849216][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.416209][ T5875] Bluetooth: hci1: unknown advertising packet type: 0xea [ 156.649259][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.650669][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.731508][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.762892][ T8509] __vm_enough_memory: pid: 8509, comm: syz.1.1429, bytes: 4398046511104 not enough memory for the allocation [ 157.897058][ T8562] syz_tun: tun_chr_ioctl cmd 2147767520 [ 157.930329][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.126873][ T8572] capability: warning: `syz.0.1460' uses deprecated v2 capabilities in a way that may be insecure [ 158.728703][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.730002][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.808453][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.846031][ T8606] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5879] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8606] [ 160.009979][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.809036][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.812063][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.888638][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.806194][ T8748] syz_tun: tun_chr_ioctl cmd 2147767508 [ 161.868459][ T29] audit: type=1326 audit(1843104562.310:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.0.1546" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bb659df99 code=0x0 [ 161.963409][ T8754] Unable to find swap-space signature [ 162.857287][ T8797] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5867] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8797] [ 164.776162][ T8888] Unable to find swap-space signature [ 165.279819][ T8908] Process accounting resumed [ 167.073429][ T5873] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 168.606557][ T29] audit: type=1800 audit(1843104569.050:14): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1704" name="dbroot" dev="configfs" ino=18001 res=0 errno=0 [ 169.045460][ T9091] syz_tun: tun_chr_ioctl cmd 1074025676 [ 169.058503][ T9091] syz_tun: owner set to 111 [ 171.226364][ T5873] Bluetooth: hci2: unexpected event 0x2c length: 1022 > 17 [ 173.330569][ T9216] kexec: Could not allocate control_code_buffer [ 175.148863][ T9365] Line length is too long: Should be less than 4094 [ 175.417444][ T9376] vmstat_refresh: nr_hugetlb -2048 [ 175.730132][ T29] audit: type=1800 audit(1843106624.183:15): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1860" name="members" dev="configfs" ino=19166 res=0 errno=0 [ 176.554470][ T9425] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.066355][ T9448] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 177.098421][ T9448] CIFS mount error: No usable UNC path provided in device string! [ 177.098421][ T9448] [ 177.120727][ T9442] zswap: compressor F(_ not available [ 177.125155][ T9448] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.344808][ T9460] bond0: invalid ARP target specified [ 178.492391][ T9508] vmstat_refresh: nr_hugetlb -2048 [ 179.787646][ T9566] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 180.166649][ T9569] Process accounting resumed [ 180.939761][ T9618] Process accounting resumed [ 181.193332][ T9632] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 181.193332][ T9632] M' is too long [ 181.210896][ T9632] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 181.210896][ T9632] W ' is too long [ 182.027279][ T9663] zswap: compressor F(_ not available [ 184.246763][ T9766] cifs: Unknown parameter 'knjeRaBt$Mi' [ 186.994300][ T9874] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 187.232259][ T9885] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5867] was attempted by ""[9885] [ 187.451537][ T9895] syz_tun: tun_chr_ioctl cmd 2147767517 [ 188.447661][ T9942] rnbd_client L213: map_device: Parameters missing [ 188.457654][ T9944] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 191.737450][T10084] rnbd_client L213: map_device: Parameters missing [ 193.322802][T10154] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 194.383049][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392398][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.723684][T10221] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 195.200424][T10237] Process accounting paused [ 195.720293][T10265] binder: binder_mmap: 10263 0-1000 bad vm_flags failed -1 [ 196.317318][T10292] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.082809][T10321] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 199.180278][T10421] ACPI: Can not change Invalid GPE/Fixed Event status [ 199.256626][T10427] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 199.382006][T10432] bond0: no command found in slaves file - use +ifname or -ifname [ 199.650862][T10446] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [88] [ 200.769028][T10496] aoe: can't write to that file. [ 200.887007][T10501] block2mtd: illegal erase size [ 202.862096][T10604] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 202.879122][T10604] ep_00: uevent: failed to send synthetic uevent: -22 [ 204.764647][T10678] warning: `syz.1.2484' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.408464][T10710] i2c i2c-0: delete_device: Can't parse I2C address [ 207.384876][T10814] kernel profiling enabled (shift: 7) [ 208.418344][ T5821] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 208.558780][T10878] ecryptfs_miscdev_write: Error while inspecting packet size [ 209.156567][T10910] vhci_hcd: not connected 4 [ 210.000872][T10954] block2mtd: too many arguments [ 210.009353][T10950] Process accounting paused [ 210.956748][T10996] Process accounting paused [ 211.286586][ T29] audit: type=1800 audit(1843106659.928:16): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2653" name="members" dev="configfs" ino=24303 res=0 errno=0 [ 212.757851][T11088] bond0: option packets_per_slave: invalid value ( Xnp) [ 212.786073][T11088] bond0: option packets_per_slave: allowed values 0 - 65535 [ 213.736734][T11134] CIFS mount error: No usable UNC path provided in device string! [ 213.736734][T11134] [ 213.758029][T11134] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 216.625167][T11273] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 218.471135][ T29] audit: type=1326 audit(1843106667.145:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.3.2826" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb8099df99 code=0x0 [ 218.800239][T11388] bond0: invalid ARP target specified [ 219.218497][T11405] blkio.reset_stats is deprecated [ 220.275038][T11457] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 220.739430][T11484] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 221.372030][T11516] bond0: no command found in slaves file - use +ifname or -ifname [ 222.440888][T11569] kAFS: Invalid Command on /proc/fs/afs/cells file [ 223.068986][T11600] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 223.091013][T11600] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 223.939067][T11645] i2c i2c-0: delete_device: Can't find device in list [ 225.217734][T11701] Process accounting resumed [ 227.293060][T11817] kAFS: unparsable volume name [ 227.631033][ T29] audit: type=1806 audit(1843106676.313:18): xattr="." res=0 [ 229.660997][T11938] kAFS: unparsable volume name [ 230.081846][T11961] i2c i2c-0: new_device: Can't parse I2C address [ 231.688975][T12049] ceph: Failed to parse sending metrics switch value 'P^' [ 233.158416][T12125] Setting dangerous option i915.mitigations - tainting kernel [ 234.535899][T12198] process 'syz.1.3227' launched './file0' with NULL argv: empty string added [ 235.375737][T12244] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 235.410367][T12242] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 235.929664][T12264] syz.3.3260 uses obsolete (PF_INET,SOCK_PACKET) [ 238.575030][T12388] kAFS: No cell specified [ 239.906166][T12443] Process accounting resumed [ 240.919452][T12488] Process accounting resumed [ 242.617323][T12572] bond0: option fail_over_mac: invalid value () [ 242.711981][T12550] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 243.384995][T12605] bond0: invalid ARP target specified [ 245.701302][T12707] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.726672][T12707] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 246.951122][ T29] audit: type=1400 audit(1843143383.775:19): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12758 comm="syz.1.3498" [ 247.324001][T12777] program syz.0.3504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.326828][T12889] block nbd0: NBD_DISCONNECT [ 251.740239][T12908] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 252.306438][T12947] ubi0: attaching mtd0 [ 252.325118][T12947] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 253.997745][T12953] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 254.687000][T13015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 254.701547][T13015] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.710734][T13015] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.719679][T13015] page_type: f5(slab) [ 254.725591][T13015] raw: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 254.760649][T13015] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 254.769804][T13015] head: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 254.779751][T13015] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 254.788882][T13015] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 254.804508][T13015] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 254.814742][T13015] page dumped because: unmovable page [ 254.821163][T13015] page_owner tracks the page as allocated [ 254.857192][T13015] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5003, tgid 5003 (udevd), ts 35870445484, free_ts 27521824796 [ 254.866233][T13029] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 254.879867][T13015] post_alloc_hook+0xfd/0x120 [ 254.893452][T13015] get_page_from_freelist+0xf48/0x3530 [ 254.902140][T13015] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 254.914132][T13015] new_slab+0xa2/0x640 [ 254.920708][T13015] refill_objects+0xe3/0x410 [ 254.926234][T13015] __pcs_replace_empty_main+0x376/0x680 [ 254.934615][T13015] __kmalloc_cache_noprof+0x479/0x6c0 [ 254.940692][T13015] kernfs_iop_get_link+0x65/0x16a0 [ 254.946550][T13015] vfs_readlink+0x213/0x440 [ 254.958229][T13028] ima: policy update failed [ 254.969613][T13015] do_readlinkat+0x250/0x370 [ 254.982814][ T29] audit: type=1802 audit(1843143391.837:20): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3629" res=0 errno=0 [ 255.010366][T13015] __x64_sys_readlink+0x78/0xc0 [ 255.023444][T13015] do_syscall_64+0x115/0x840 [ 255.040119][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.053788][T13015] page last free pid 1 tgid 1 stack trace: [ 255.064686][T13015] free_pages_prepare+0x586/0xd80 [ 255.074883][T13015] __free_contig_range_common+0x14f/0x250 [ 255.086331][T13015] destroy_args+0xa8/0x7a0 [ 255.097059][T13015] debug_vm_pgtable+0x1d69/0x3490 [ 255.116922][T13015] do_one_initcall+0x11d/0x700 [ 255.123344][T13015] kernel_init_freeable+0x6ea/0x7b0 [ 255.136970][T13015] kernel_init+0x1f/0x1e0 [ 255.152702][T13015] ret_from_fork+0x72b/0xd50 [ 255.166465][T13015] ret_from_fork_asm+0x1a/0x30 [ 255.171246][T13038] Process accounting paused [ 255.511676][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.518186][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.857763][T13075] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 256.064239][T13087] syz.0.3656: vm.laptop_mode is deprecated. Ignoring setting. [ 256.498667][T13107] Setting dangerous option i915.mitigations - tainting kernel [ 256.541972][T13107] Bad "i915.mitigations=,^", '^' is unknown [ 256.759168][T13121] TCP: TCP_TX_DELAY enabled [ 258.352655][T13200] CIFS mount error: No usable UNC path provided in device string! [ 258.352655][T13200] [ 258.374094][T13200] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.753552][T13256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 259.772238][T13256] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.783468][T13256] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.798367][T13256] page_type: f5(slab) [ 259.804524][T13256] raw: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 259.814079][T13256] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 259.825559][T13256] head: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 259.839554][T13256] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 259.857021][T13256] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 259.872103][T13256] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 259.889788][T13256] page dumped because: unmovable page [ 259.904219][T13256] page_owner tracks the page as allocated [ 259.918104][T13256] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5003, tgid 5003 (udevd), ts 35870445484, free_ts 27521824796 [ 259.968675][T13256] post_alloc_hook+0xfd/0x120 [ 259.978763][T13256] get_page_from_freelist+0xf48/0x3530 [ 259.990315][T13256] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 260.010513][T13256] new_slab+0xa2/0x640 [ 260.018263][T13256] refill_objects+0xe3/0x410 [ 260.033026][T13256] __pcs_replace_empty_main+0x376/0x680 [ 260.044544][T13256] __kmalloc_cache_noprof+0x479/0x6c0 [ 260.054627][T13256] kernfs_iop_get_link+0x65/0x16a0 [ 260.065896][T13256] vfs_readlink+0x213/0x440 [ 260.077916][T13256] do_readlinkat+0x250/0x370 [ 260.085055][T13256] __x64_sys_readlink+0x78/0xc0 [ 260.091913][T13256] do_syscall_64+0x115/0x840 [ 260.099035][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.105347][T13256] page last free pid 1 tgid 1 stack trace: [ 260.113149][T13256] free_pages_prepare+0x586/0xd80 [ 260.124940][T13256] __free_contig_range_common+0x14f/0x250 [ 260.131763][T13256] destroy_args+0xa8/0x7a0 [ 260.136419][T13256] debug_vm_pgtable+0x1d69/0x3490 [ 260.142111][T13256] do_one_initcall+0x11d/0x700 [ 260.151779][T13256] kernel_init_freeable+0x6ea/0x7b0 [ 260.172415][T13256] kernel_init+0x1f/0x1e0 [ 260.186505][T13256] ret_from_fork+0x72b/0xd50 [ 260.209319][T13256] ret_from_fork_asm+0x1a/0x30 [ 260.679729][ T29] audit: type=1800 audit(1843143397.577:21): pid=13298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3761" name="discovery_nqn" dev="configfs" ino=31529 res=0 errno=0 [ 261.245808][T13323] kafs: addr_prefs: Invalid Command [ 263.075227][T13406] vhci_hcd vhci_hcd.2: invalid port number 253 [ 263.096001][T13406] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 263.662175][T13435] i2c i2c-0: new_device: Missing parameters [ 264.058389][T13454] kafs: addr_prefs: Invalid Command [ 264.912934][T13493] block2mtd: parameter too long [ 265.727301][T13529] synth uevent: /module/null_blk: unknown uevent action string [ 266.708690][T13574] Setting dangerous option i915.mitigations - tainting kernel [ 268.581751][T13666] syz_tun: tun_chr_ioctl cmd 2147767519 [ 268.961549][T13687] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 268.991773][T13687] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 269.345277][T13709] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 269.370803][T13709] net gretap0: uevent: failed to send synthetic uevent: -22 [ 269.636330][T13719] nvme_fcloop: unknown parameter or missing value '7' [ 269.872373][T13729] Process accounting paused [ 270.710001][T13777] Sensor B: ================= START STATUS ================= [ 270.751091][T13777] Sensor B: Test Pattern: 75% Colorbar [ 270.769783][T13777] Sensor B: Show Information: All [ 270.798204][T13777] Sensor B: Vertical Flip: false [ 270.830900][T13777] Sensor B: Horizontal Flip: false [ 270.836339][T13781] Process accounting paused [ 270.850956][T13777] Sensor B: Brightness: 128 [ 270.877583][T13777] Sensor B: Contrast: 128 [ 270.900221][T13777] Sensor B: Hue: 0 [ 270.915214][T13777] Sensor B: Saturation: 128 [ 270.925394][T13777] Sensor B: Pixel Rate: 160000000 [ 270.933695][T13777] Sensor B: Horizontal Blanking: 800 [ 270.941823][T13777] Sensor B: Vertical Blanking: 3223 [ 270.965683][T13777] Sensor B: ================== END STATUS ================== [ 271.896188][T13826] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 271.908221][T13826] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 271.958893][T13826] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 271.988568][T13826] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 272.016034][T13826] page dumped because: unmovable page [ 272.038687][T13826] page_owner info is not present (never set?) [ 272.706816][T13868] qrtr: Invalid version 13 [ 273.005965][T13883] sd 0:0:1:0: PR command failed: 1026 [ 273.021698][T13883] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 273.037296][T13886] kAFS: Invalid Command on /proc/fs/afs/cells file [ 273.040774][T13883] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 273.692645][T13915] usb usb3: usbfs: process 13915 (syz.1.4065) did not claim interface 0 before use [ 275.155439][T13987] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 276.297792][T14047] random: crng reseeded on system resumption [ 277.197084][T14092] block2mtd: device name too long [ 278.063235][ T5873] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 280.381242][T14259] random: crng reseeded on system resumption [ 281.136586][T14299] CIFS: VFS: Invalid SecurityFlags: [ 281.943036][T14340] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 282.723623][T14382] block2mtd: Using custom MTD label '' for dev [ 282.730198][T14382] block2mtd: error: cannot open device [ 283.623387][T14425] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 285.185023][T14500] Process accounting resumed [ 286.178882][T14554] cougar: G6 mapped to F18 [ 287.282285][T14612] cougar: G6 mapped to F18 [ 287.660705][T14628] zram0: detected capacity change from 0 to 16 [ 288.528809][T14654] bond0: no command found in slaves file - use +ifname or -ifname [ 290.098803][T14710] : Can't lookup blockdev [ 290.389669][T14722] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 291.059195][T14753] syz.0.4480 (14753): drop_caches: 0 [ 292.289911][ T808] Process accounting resumed [ 292.580069][T14763] syz.3.4478 (14763) used greatest stack depth: 20072 bytes left [ 293.641054][ T5821] Process accounting resumed [ 294.623997][ T5874] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 294.641776][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 294.641821][ T5874] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 294.641830][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.641849][ T5874] Call Trace: [ 294.641858][ T5874] [ 294.641867][ T5874] dump_stack_lvl+0x100/0x190 [ 294.641901][ T5874] dump_header+0xfb/0x606 [ 294.641929][ T5874] oom_kill_process.cold+0xd/0x330 [ 294.641956][ T5874] out_of_memory+0x340/0x14f0 [ 294.642002][ T5874] ? __pfx_out_of_memory+0x10/0x10 [ 294.642056][ T5874] mem_cgroup_out_of_memory+0xc6/0x130 [ 294.642097][ T5874] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 294.642125][ T5874] ? find_held_lock+0x2b/0x80 [ 294.642163][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 294.642192][ T5874] ? _raw_spin_unlock+0x28/0x50 [ 294.642222][ T5874] try_charge_memcg+0x6e5/0xdf0 [ 294.642264][ T5874] ? __pfx_try_charge_memcg+0x10/0x10 [ 294.642298][ T5874] ? find_held_lock+0x2b/0x80 [ 294.642328][ T5874] ? rcu_read_unlock+0x17/0x60 [ 294.642362][ T5874] ? rcu_read_unlock+0x17/0x60 [ 294.642402][ T5874] ? find_held_lock+0x2b/0x80 [ 294.642434][ T5874] ? rcu_read_unlock+0x17/0x60 [ 294.642480][ T5874] charge_memcg+0x187/0x1e0 [ 294.642519][ T5874] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 294.642551][ T5874] swap_cache_alloc_folio+0x548/0xc50 [ 294.642589][ T5874] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 294.642620][ T5874] ? swap_cache_get_folio+0x28d/0x360 [ 294.642649][ T5874] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 294.642690][ T5874] swap_cache_read_folio+0x47/0x140 [ 294.642725][ T5874] swap_cluster_readahead+0x387/0x5f0 [ 294.642770][ T5874] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 294.642820][ T5874] ? __lock_acquire+0x49f/0x1a40 [ 294.642858][ T5874] ? get_vma_policy+0x23d/0x3b0 [ 294.642899][ T5874] swapin_readahead+0x159/0x1200 [ 294.642929][ T5874] ? debug_object_assert_init+0x1c4/0x310 [ 294.642979][ T5874] ? __pfx_swapin_readahead+0x10/0x10 [ 294.643018][ T5874] ? swap_table_get+0x10d/0x2c0 [ 294.643047][ T5874] ? swap_cache_get_folio+0x28d/0x360 [ 294.643076][ T5874] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 294.643105][ T5874] ? __pfx_softleaf_type+0x10/0x10 [ 294.643142][ T5874] ? do_swap_page+0xf98/0x5780 [ 294.643170][ T5874] do_swap_page+0xf98/0x5780 [ 294.643215][ T5874] ? __pfx_do_swap_page+0x10/0x10 [ 294.643241][ T5874] ? __lock_acquire+0x49f/0x1a40 [ 294.643280][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 294.643314][ T5874] ? rcu_is_watching+0x12/0xc0 [ 294.643345][ T5874] ? __pte_offset_map+0x179/0x310 [ 294.643382][ T5874] __handle_mm_fault+0x192f/0x2a00 [ 294.643412][ T5874] ? reacquire_held_locks+0xce/0x1e0 [ 294.643446][ T5874] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.643474][ T5874] ? lock_vma_under_rcu+0x17c/0x590 [ 294.643515][ T5874] handle_mm_fault+0x37b/0xa30 [ 294.643545][ T5874] do_user_addr_fault+0x5a3/0x12f0 [ 294.643587][ T5874] exc_page_fault+0x6f/0xd0 [ 294.643614][ T5874] asm_exc_page_fault+0x26/0x30 [ 294.643637][ T5874] RIP: 0033:0x7feb8095e7ce [ 294.643669][ T5874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.643691][ T5874] RSP: 002b:00007fff414f9a88 EFLAGS: 00010246 [ 294.643716][ T5874] RAX: 0000000000000000 RBX: 000055556a3d1500 RCX: 00007feb8095e7ce [ 294.643731][ T5874] RDX: 00007fff414f9ae0 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.643754][ T5874] RBP: 00007fff414f9b4c R08: 0000000000000000 R09: 0000000000000000 [ 294.643769][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 294.643784][ T5874] R13: 00000000000927c0 R14: 0000000000047f55 R15: 00007fff414f9ba0 [ 294.643817][ T5874] [ 294.645737][ T5874] memory: usage 3072kB, limit 3072kB, failcnt 2464 [ 294.973417][T14884] ICMPv6: process `syz.1.4544' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 295.021610][ T5874] memory+swap: usage 3096kB, limit 9007199254740988kB, failcnt 0 [ 295.080407][ T5874] kmem: usage 468kB, limit 9007199254740988kB, failcnt 0 [ 295.087909][ T5874] Memory cgroup stats for /syz3: [ 295.088436][ T5874] cache 2482176 [ 295.100504][ T5874] rss 172032 [ 295.117184][ T5874] rss_huge 0 [ 295.124802][ T5874] shmem 0 [ 295.163439][ T5874] mapped_file 2482176 [ 295.179242][ T5874] dirty 0 [ 295.187478][ T5874] writeback 0 [ 295.197401][ T5874] workingset_refault_anon 619 [ 295.212367][ T5874] workingset_refault_file 1190 [ 295.232215][ T5874] swap 24576 [ 295.248219][ T5874] swapcached 4923392 [ 295.258943][ T5874] pgpgin 89114 [ 295.270958][ T5874] pgpgout 89485 [ 295.282180][ T5874] pgfault 154549 [ 295.299526][ T5874] pgmajfault 155 [ 295.308508][ T5874] inactive_anon 4096 [ 295.324583][ T5874] active_anon 8192 [ 295.331860][ T5874] inactive_file 0 [ 295.370892][ T5874] active_file 0 [ 295.378171][ T5874] unevictable 2654208 [ 295.386224][ T5874] hierarchical_memory_limit 3145728 [ 295.400933][ T5874] hierarchical_memsw_limit 9223372036854771712 [ 295.410823][ T5874] total_cache 2482176 [ 295.422308][ T5874] total_rss 172032 [ 295.433404][ T5874] total_rss_huge 0 [ 295.448321][ T5874] total_shmem 0 [ 295.454916][ T5874] total_mapped_file 2482176 [ 295.472006][ T5874] total_dirty 0 [ 295.486544][ T5874] total_writeback 0 [ 295.490500][ T5874] total_workingset_refault_anon 619 [ 295.519296][ T5874] total_workingset_refault_file 1190 [ 295.524842][ T5874] total_swap 24576 [ 295.528699][ T5874] total_swapcached 4923392 [ 295.533167][ T5874] total_pgpgin 89114 [ 295.568191][ T5874] total_pgpgout 89485 [ 295.572262][ T5874] total_pgfault 154549 [ 295.576476][ T5874] total_pgmajfault 155 [ 295.580625][ T5874] total_inactive_anon 4096 [ 295.585131][ T5874] total_active_anon 8192 [ 295.589384][ T5874] total_inactive_file 0 [ 295.593637][ T5874] total_active_file 0 [ 295.610677][ T5874] total_unevictable 2654208 [ 295.615311][ T5874] anon_cost 0 [ 295.618613][ T5874] file_cost 0 [ 295.621920][ T5874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4537,pid=14865,uid=0 [ 295.666367][ T5874] Memory cgroup out of memory: Killed process 14865 (syz.3.4537) total-vm:104428kB, anon-rss:1420kB, file-rss:24740kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 298.888089][ T5873] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 298.898112][ T5873] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 299.140486][T15049] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 299.788658][T15063] Process accounting resumed [ 300.539455][T15097] mmap: syz.3.4635 (15097): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 300.876054][T15109] deleting an unspecified loop device is not supported. [ 301.192060][T15125] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 301.472149][T15137] writes to the poll attribute are ignored. [ 301.478815][T15137] please use driver specific parameters instead. [ 302.640728][T15183] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 303.368458][ T5875] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 303.376224][ T5875] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 303.961106][T15237] cougar: G6 mapped to space [ 305.328557][T15285] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 305.357890][T15285] cec cec26: uevent: failed to send synthetic uevent: -22 [ 305.565037][T15295] kAFS: Invalid Command on /proc/fs/afs/cells file [ 306.695180][ T5873] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 306.702835][ T5873] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 307.971556][ T5875] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 307.980013][ T5875] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 308.804676][T15414] kfence: disabled [ 309.575681][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177aa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 309.591291][ C0] Call Trace: [ 309.594586][ C0] [ 309.597458][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 309.604175][ C0] ? sched_clock_cpu+0x6c/0x570 [ 309.609055][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 309.614363][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 309.619664][ C0] mce_cpu_restart+0xd5/0x1f0 [ 309.624362][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 309.630543][ C0] __sysvec_call_function_single+0x81/0x420 [ 309.636459][ C0] sysvec_call_function_single+0x9e/0xc0 [ 309.642109][ C0] [ 309.645041][ C0] [ 309.647976][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 309.653968][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 309.659193][ C0] Code: 05 3b 75 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 47 3d 0f 0f 82 ac 02 00 00 8b 35 6e 7b 3d 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 74 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 309.678811][ C0] RSP: 0018:ffffc900045ffc88 EFLAGS: 00000206 [ 309.684892][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: b7d8673702e28e19 [ 309.692881][ C0] RDX: 0000000000000000 RSI: ffffffff8e182941 RDI: ffffffff8c400a80 [ 309.700859][ C0] RBP: ffff888066c01b40 R08: 00000000e959f40f R09: 0000000000000091 [ 309.708842][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 309.716827][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 309.724830][ C0] ? verify_dirent_name+0x49/0x60 [ 309.729918][ C0] _raw_spin_lock+0x2e/0x40 [ 309.734427][ C0] ? find_positive_dentry+0x27/0x290 [ 309.739731][ C0] find_positive_dentry+0x27/0x290 [ 309.744870][ C0] offset_readdir+0x195/0x780 [ 309.749562][ C0] ? apparmor_file_permission+0x13f/0x1c0 [ 309.755303][ C0] iterate_dir+0x296/0xae0 [ 309.759743][ C0] __x64_sys_getdents64+0x13b/0x2c0 [ 309.764958][ C0] ? find_held_lock+0x2b/0x80 [ 309.769648][ C0] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 309.775387][ C0] ? exc_page_fault+0x6f/0xd0 [ 309.780077][ C0] ? __pfx_filldir64+0x10/0x10 [ 309.784879][ C0] do_syscall_64+0x115/0x840 [ 309.789482][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.794180][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.800086][ C0] RIP: 0033:0x7fb1229c6933 [ 309.804507][ C0] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 309.824143][ C0] RSP: 002b:00007ffe9a90b858 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 309.832568][ C0] RAX: ffffffffffffffda RBX: 000055558a9e6a00 RCX: 00007fb1229c6933 [ 309.840545][ C0] RDX: 0000000000008000 RSI: 000055558a9e6a30 RDI: 0000000000000003 [ 309.848523][ C0] RBP: 000055558a9e6a30 R08: 00007fb122bf1e20 R09: 0000000000000001 [ 309.856505][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558a9e6a04 [ 309.864481][ C0] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe9a90ca10 [ 309.872475][ C0] [ 310.732372][T15488] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 311.460082][T15524] batman_adv: Routing algorithm '' is not supported [ 311.858676][T15542] WARNING! power/level is deprecated; use power/control instead [ 312.510928][T15569] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.551366][T15676] random: crng reseeded on system resumption [ 316.630229][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.637937][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.945303][T15725] block2mtd: illegal erase size [ 317.256812][T15736] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint syzkaller syzkaller login: [ 318.522943][T15783] bond0: option slaves: interface -]=,Do does not exist! [ 319.666281][T15831] : Can't lookup blockdev [ 319.727488][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.735239][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.086949][T15887] could not allocate digest TFM handle [ 323.354470][T15990] Invalid input. Must be >= 4608 [ 323.772827][T16012] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 324.101764][ T29] audit: type=1807 audit(1843143461.317:22): UNKNOWN=nl80211 res=0 [ 324.112553][T16023] ima: policy update failed [ 324.122252][ T29] audit: type=1802 audit(1843143461.327:23): pid=16024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.5078" res=0 errno=0 [ 324.181091][ T29] audit: type=1802 audit(1843143461.347:24): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5078" res=0 errno=0 [ 324.327128][T16032] phram: not enough arguments [ 324.816800][T16052] syz_tun: tun_chr_ioctl cmd 1074025681 [ 325.739056][ T5875] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 326.251122][ T5875] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 326.251168][ T5875] Bluetooth: hci2: unexpected event for opcode 0x647c [ 326.755274][T16133] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 326.782360][T16133] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 327.467269][T16153] bond0: invalid ARP target specified [ 329.841676][T16191] Process accounting paused [ 329.976022][T16237] ICMPv6: process `syz.3.5180' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 330.005847][ T5875] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 330.005890][ T5875] Bluetooth: hci1: unexpected event for opcode 0x647c [ 330.332512][T16248] serial 00:02: in use; can't configure [ 332.385471][ T5953] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 332.393298][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.478614][T16376] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 333.569587][T16379] random: crng reseeded on system resumption [ 333.949717][T16396] usb usb35: usbfs: process 16396 (syz.2.5255) did not claim interface 0 before use Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 335.253447][T16459] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 335.343311][ T5875] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 335.514129][T16469] bond0: invalid ARP target specified [ 337.406747][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.445079][T16538] ima: policy update failed [ 337.470307][ T29] audit: type=1802 audit(4294967314.587:25): pid=16538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5325" res=0 errno=0 [ 338.596989][T16583] ICMPv6: process `syz.2.5347' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 339.175406][T16604] binder: 16603:16604 ioctl 400c620e 200000000240 returned -22 [ 339.469637][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.401259][ T29] audit: type=1804 audit(4294967318.537:26): pid=16662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5383" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=22 res=1 errno=0 [ 341.999332][T16682] program syz.2.5395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.462638][T16714] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 343.971684][ T5873] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 343.979805][ T5873] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 344.155944][T16737] phram: not enough arguments [ 344.957530][T16758] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 346.009050][T16797] wlan1: mtu less than device minimum [ 346.943320][T16823] wlan1: mtu less than device minimum [ 347.313079][T16831] syz_tun: tun_chr_ioctl cmd 1074025698 [ 347.841083][T16842] [U]  [ 350.649829][ T5873] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 350.872207][T16947] [U]  [ 351.692788][T16973] [U]  [ 352.325598][T16996] usb usb13: usbfs: process 16996 (syz.0.5545) did not claim interface 0 before use [ 352.677838][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.838644][ T5873] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 352.891226][T17016] usb usb4: usbfs: process 17016 (syz.2.5552) did not claim interface 0 before use [ 352.950262][ T5873] Bluetooth: hci2: unexpected event 0x04 length: 125 > 10 [ 352.950341][ T5873] Bluetooth: unknown link type 101 [ 352.964649][ T5873] Bluetooth: hci2: connection err: -111 [ 353.232179][ T5873] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 353.239809][ T5873] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 353.554193][T17031] kafs: addr_prefs: Invalid Command [ 354.746755][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.907457][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 355.363396][T17079] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 356.264521][ T50] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 356.272304][ T50] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 356.979698][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 359.148489][T17129] : Can't lookup blockdev [ 359.768174][T17143] Process accounting resumed [ 364.845464][T17310] vhci_hcd vhci_hcd.2: invalid port number 135 [ 364.874296][T17310] vhci_hcd vhci_hcd.2: invalid port number 135 [ 365.638981][T17338] writing to auto_msgmni has no effect [ 368.478893][T17424] CIFS: VFS: UNC: path must begin with // or \\ [ 368.507636][T17424] Malformed UNC in devname [ 368.507636][T17424] [ 368.520368][T17424] CIFS: VFS: Malformed UNC in devname [ 368.980844][T17439] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 370.918218][T16655] syz.2.5382 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 370.966661][T16655] CPU: 0 UID: 0 PID: 16655 Comm: syz.2.5382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 370.966703][T16655] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 370.966713][T16655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.966728][T16655] Call Trace: [ 370.966834][T16655] [ 370.966872][T16655] dump_stack_lvl+0x100/0x190 [ 370.966948][T16655] dump_header+0xfb/0x606 [ 370.966998][T16655] oom_kill_process.cold+0xd/0x330 [ 370.967028][T16655] out_of_memory+0x340/0x14f0 [ 370.967103][T16655] ? __pfx_out_of_memory+0x10/0x10 [ 370.967154][T16655] mem_cgroup_out_of_memory+0xc6/0x130 [ 370.967196][T16655] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 370.967224][T16655] ? find_held_lock+0x2b/0x80 [ 370.967282][T16655] ? do_raw_spin_unlock+0x145/0x1e0 [ 370.967312][T16655] ? _raw_spin_unlock+0x28/0x50 [ 370.967389][T16655] try_charge_memcg+0x6e5/0xdf0 [ 370.967433][T16655] ? __pfx_try_charge_memcg+0x10/0x10 [ 370.967470][T16655] ? find_held_lock+0x2b/0x80 [ 370.967501][T16655] ? rcu_read_unlock+0x17/0x60 [ 370.967546][T16655] ? rcu_read_unlock+0x17/0x60 [ 370.967584][T16655] ? find_held_lock+0x2b/0x80 [ 370.967616][T16655] ? rcu_read_unlock+0x17/0x60 [ 370.967661][T16655] charge_memcg+0x187/0x1e0 [ 370.967699][T16655] __mem_cgroup_charge+0x2b/0x1c0 [ 370.967742][T16655] shmem_alloc_and_add_folio+0x451/0xd40 [ 370.967781][T16655] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 370.967814][T16655] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 370.967853][T16655] shmem_get_folio_gfp+0x6ad/0x1910 [ 370.967887][T16655] ? __lock_acquire+0x49f/0x1a40 [ 370.967927][T16655] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 370.967967][T16655] shmem_write_begin+0x1a4/0x420 [ 370.968001][T16655] ? __pfx_shmem_write_begin+0x10/0x10 [ 370.968031][T16655] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 370.968064][T16655] ? lockdep_hardirqs_on+0x78/0x100 [ 370.968214][T16655] generic_perform_write+0x292/0xa40 [ 370.968275][T16655] ? __pfx_generic_perform_write+0x10/0x10 [ 370.968320][T16655] ? file_update_time_flags+0x373/0x500 [ 370.968372][T16655] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 370.968405][T16655] shmem_file_write_iter+0x10e/0x140 [ 370.968441][T16655] __kernel_write_iter+0x2ac/0x930 [ 370.968470][T16655] ? __pfx___kernel_write_iter+0x10/0x10 [ 370.968496][T16655] ? __up_read+0x333/0x980 [ 370.968530][T16655] ? dump_user_range+0x65e/0xad0 [ 370.968623][T16655] dump_user_range+0x3f9/0xad0 [ 370.968663][T16655] ? __pfx_dump_user_range+0x10/0x10 [ 370.968708][T16655] ? __pfx_writenote+0x10/0x10 [ 370.968767][T16655] ? elf_core_dump+0x1f25/0x3d20 [ 370.968805][T16655] elf_core_dump+0x2d68/0x3d20 [ 370.968855][T16655] ? __pfx_elf_core_dump+0x10/0x10 [ 370.968885][T16655] ? kasan_save_stack+0x3f/0x50 [ 370.968923][T16655] ? kasan_save_stack+0x30/0x50 [ 370.968953][T16655] ? kasan_save_track+0x14/0x30 [ 370.968982][T16655] ? __kasan_kmalloc+0xaa/0xb0 [ 370.969012][T16655] ? vfs_coredump+0x22a6/0x56f0 [ 370.969040][T16655] ? get_signal+0x1f2a/0x21e0 [ 370.969082][T16655] ? arch_do_signal_or_restart+0x91/0x7a0 [ 370.969150][T16655] ? 0xffffffffff600000 [ 370.969236][T16655] ? vfs_coredump+0x294b/0x56f0 [ 370.969266][T16655] vfs_coredump+0x294b/0x56f0 [ 370.969311][T16655] ? __pfx_vfs_coredump+0x10/0x10 [ 370.969345][T16655] ? __lock_acquire+0x49f/0x1a40 [ 370.969423][T16655] ? bpf_ksym_find+0x124/0x1c0 [ 370.969478][T16655] ? unwind_get_return_address+0x59/0xa0 [ 370.969528][T16655] ? arch_stack_walk+0xa6/0xf0 [ 370.969583][T16655] ? __sigqueue_free+0xbe/0x2a0 [ 370.969618][T16655] ? stack_trace_save+0x8e/0xc0 [ 370.969666][T16655] ? __pfx_stack_trace_save+0x10/0x10 [ 370.969702][T16655] ? stack_depot_save_flags+0x27/0x9d0 [ 370.969900][T16655] ? proc_coredump_connector+0x2d3/0x4f0 [ 370.969982][T16655] ? __pfx_proc_coredump_connector+0x10/0x10 [ 370.970018][T16655] ? rcu_is_watching+0x12/0xc0 [ 370.970066][T16655] get_signal+0x1f2a/0x21e0 [ 370.970109][T16655] ? __pfx_get_signal+0x10/0x10 [ 370.970137][T16655] ? __pfx_force_sig_fault+0x10/0x10 [ 370.970174][T16655] arch_do_signal_or_restart+0x91/0x7a0 [ 370.970218][T16655] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 370.970281][T16655] irqentry_exit+0x402/0xa00 [ 370.970316][T16655] asm_exc_page_fault+0x26/0x30 [ 370.970342][T16655] RIP: 0033:0x7fb12299dfa1 [ 370.970364][T16655] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 370.970388][T16655] RSP: 002b:0000000000000009 EFLAGS: 00010217 [ 370.970448][T16655] RAX: 0000000000000000 RBX: 00007fb122c25fa0 RCX: 00007fb12299df99 [ 370.970465][T16655] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 370.970481][T16655] RBP: 00007fb122a34ec4 R08: 0000000000000006 R09: 0000000000000000 [ 370.970496][T16655] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.970519][T16655] R13: 00007fb122c26038 R14: 00007fb122c25fa0 R15: 00007ffe9a90c618 [ 370.970543][T16655] ? 0xffffffff81000000 [ 370.970575][T16655] [ 371.454651][T16655] memory: usage 3072kB, limit 3072kB, failcnt 40855 [ 371.462035][T16655] memory+swap: usage 57028kB, limit 9007199254740988kB, failcnt 0 [ 371.471437][T16655] kmem: usage 740kB, limit 9007199254740988kB, failcnt 0 [ 371.478525][T16655] Memory cgroup stats for /syz2: [ 371.478807][T16655] cache 2277376 [ 371.487304][T16655] rss 53248 [ 371.490466][T16655] rss_huge 0 [ 371.493677][T16655] shmem 2277376 [ 371.497145][T16655] mapped_file 0 [ 371.500661][T16655] dirty 0 [ 371.503612][T16655] writeback 0 [ 371.506905][T16655] workingset_refault_anon 505 [ 371.511637][T16655] workingset_refault_file 34092 [ 371.516515][T16655] swap 55222272 [ 371.520037][T16655] swapcached 65867776 [ 371.524034][T16655] pgpgin 138003 [ 371.527503][T16655] pgpgout 138954 [ 371.533175][T16655] pgfault 221610 [ 371.536744][T16655] pgmajfault 570 [ 371.541536][T16655] inactive_anon 2269184 [ 371.545712][T16655] active_anon 94208 [ 371.549564][T16655] inactive_file 0 [ 371.553301][T16655] active_file 0 [ 371.556776][T16655] unevictable 0 [ 371.560319][T16655] hierarchical_memory_limit 3145728 [ 371.565655][T16655] hierarchical_memsw_limit 9223372036854771712 [ 371.571953][T16655] total_cache 2277376 [ 371.575955][T16655] total_rss 53248 [ 371.579657][T16655] total_rss_huge 0 [ 371.583396][T16655] total_shmem 2277376 [ 371.587398][T16655] total_mapped_file 0 [ 371.591440][T16655] total_dirty 0 [ 371.594945][T16655] total_writeback 0 [ 371.598814][T16655] total_workingset_refault_anon 505 [ 371.604038][T16655] total_workingset_refault_file 34092 [ 371.609467][T16655] total_swap 55222272 [ 371.613462][T16655] total_swapcached 65867776 [ 371.617982][T16655] total_pgpgin 138003 [ 371.622166][T16655] total_pgpgout 138954 [ 371.626253][T16655] total_pgfault 221610 [ 371.630376][T16655] total_pgmajfault 570 [ 371.634460][T16655] total_inactive_anon 2269184 [ 371.639244][T16655] total_active_anon 94208 [ 371.644601][T16655] total_inactive_file 0 [ 371.648822][T16655] total_active_file 0 [ 371.652824][T16655] total_unevictable 0 [ 371.656830][T16655] anon_cost 154 [ 371.660365][T16655] file_cost 0 [ 371.663666][T16655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5382,pid=16655,uid=0 [ 371.678954][T16655] Memory cgroup out of memory: Killed process 16655 (syz.2.5382) total-vm:104296kB, anon-rss:1256kB, file-rss:25224kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 371.928545][T16655] syz.2.5382 (16655) used greatest stack depth: 18856 bytes left [ 373.724846][T17525] zram: Added device: zram1 [ 377.144382][T17638] ICMPv6: process `syz.2.5834' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 377.220792][ T29] audit: type=1400 audit(4294967354.534:27): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17639 comm="syz.0.5833" [ 377.752294][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.762976][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.611603][T16608] syz.1.5358 (16608) used greatest stack depth: 18600 bytes left [ 380.350139][T17739] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 380.778356][T17755] futex_wake_op: syz.2.5888 tries to shift op by -1; fix this program [ 381.770483][T17799] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 382.759928][T17834] hub 1-0:1.0: USB hub found [ 382.774102][T17834] hub 1-0:1.0: 1 port detected [ 385.161979][T17927] hub 3-0:1.0: USB hub found [ 385.186196][T17927] hub 3-0:1.0: 1 port detected [ 385.276624][T17927] usb usb3: authorized to connect [ 385.294583][T17930] < [ 386.015552][T17952] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 386.128956][ T5875] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 386.128994][ T5875] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 386.151692][T17956] [ 388.433887][T18049] syz_tun: tun_chr_ioctl cmd 21731 [ 389.725191][T18095] Process accounting paused [ 389.822028][ T5875] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 389.822063][ T5875] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 390.771144][T18138] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 394.682254][T18264] kernel read not supported for file /\*)A (pid: 18264 comm: syz.2.6139) [ 394.715789][ T29] audit: type=1800 audit(4294967372.125:28): pid=18264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6139" name="\*)A" dev="mqueue" ino=11095 res=0 errno=0 [ 395.014741][T18276] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 395.292352][T18286] dyndbg: expected <4096 bytes into control [ 395.505969][T18296] syz_tun: tun_chr_ioctl cmd 2147767506 [ 397.346025][T17376] syz.3.5722 (17376) used greatest stack depth: 18544 bytes left [ 401.059698][T18557] smpboot: CPU 1 is now offline [ 403.995709][T18688] kAFS: Invalid Command on /proc/fs/afs/cells file [ 404.310514][ T5875] Bluetooth: hci0: unexpected event 0x35 length: 725 > 6 [ 405.569329][ T29] audit: type=1800 audit(4294967383.041:29): pid=18761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6381" name="sr0" dev="devtmpfs" ino=2799 res=0 errno=0 [ 406.494774][T18777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.765638][T18806] overlayfs: "check_copy_up" module option is obsolete [ 406.838954][T18808] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 407.113872][T18808] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 407.127899][T18777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.165739][T18808] pci 0000:00:01.3: PCI INT A: no GSI [ 407.359793][T18777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.557492][T18777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.715260][T18834] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 409.448746][T18912] Format for deleting device is "id" (uint). [ 410.586137][T18969] ecryptfs_parse_packet_length: Error parsing packet length [ 410.615599][T18969] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 411.335139][T19005] syz_tun: tun_chr_ioctl cmd 2147767507 [ 413.849274][T19108] i2c i2c-0: delete_device: Can't find device in list [ 414.044094][ T35] bridge_slave_1: left allmulticast mode [ 414.076577][ T35] bridge_slave_1: left promiscuous mode [ 414.114135][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.191232][ T35] bridge_slave_0: left allmulticast mode [ 414.209960][ T35] bridge_slave_0: left promiscuous mode [ 414.225993][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.957403][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.025314][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.045268][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.060835][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.071370][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.080915][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.123297][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.233351][ T35] bond0 (unregistering): Released all slaves [ 415.807639][T19169] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 416.418249][ T35] hsr_slave_0: left promiscuous mode [ 416.454632][ T35] hsr_slave_1: left promiscuous mode [ 416.482983][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.521594][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.551953][T19197] ptp ptp0: only physical clock in use now [ 416.568061][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.599767][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.765424][ T35] veth1_macvtap: left promiscuous mode [ 416.802188][ T35] veth0_macvtap: left promiscuous mode [ 416.834602][ T35] veth1_vlan: left promiscuous mode [ 416.858487][ T35] veth0_vlan: left promiscuous mode [ 417.227424][ T50] Bluetooth: hci3: command tx timeout [ 417.712137][ T35] team0 (unregistering): Port device team_slave_1 removed [ 417.781296][ T35] team0 (unregistering): Port device team_slave_0 removed [ 418.073979][ T29] audit: type=1400 audit(4294967395.606:30): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19245 comm="syz.1.6616" [ 418.779600][T19266] syz.0.6625 (19266): /proc/19264/oom_adj is deprecated, please use /proc/19264/oom_score_adj instead. [ 419.290795][ T50] Bluetooth: hci3: command tx timeout [ 419.573760][T19296] Process accounting resumed [ 419.790059][T19138] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.834277][T19138] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.865217][T19138] bridge_slave_0: entered allmulticast mode [ 419.896897][T19138] bridge_slave_0: entered promiscuous mode [ 419.950322][T19138] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.982938][T19138] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.014744][T19138] bridge_slave_1: entered allmulticast mode [ 420.051772][T19138] bridge_slave_1: entered promiscuous mode [ 420.205326][T19138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.259831][T19138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.395599][T19138] team0: Port device team_slave_0 added [ 420.429387][T19138] team0: Port device team_slave_1 added [ 420.542835][T19138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.576288][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.665338][T19138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.718618][T19138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.749089][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.869594][T19138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.076849][T19138] hsr_slave_0: entered promiscuous mode [ 421.109118][T19138] hsr_slave_1: entered promiscuous mode [ 421.136987][T19138] debugfs: 'hsr0' already exists in 'hsr' [ 421.169425][T19138] Cannot create hsr debugfs directory [ 421.360143][T19333] Bluetooth: hci3: command tx timeout [ 421.723670][T19138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.740420][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.751337][T19138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.764294][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.773403][T19138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.783963][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.792320][T19138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.802023][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.888627][T19138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.913028][T19138] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.932981][T19298] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.940179][T19298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.954397][T19298] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.961577][T19298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.324030][T19138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.542927][T19138] veth0_vlan: entered promiscuous mode [ 422.557532][T19138] veth1_vlan: entered promiscuous mode [ 422.591193][T19138] veth0_macvtap: entered promiscuous mode [ 422.601059][T19138] veth1_macvtap: entered promiscuous mode [ 422.622253][T19138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.644281][T19138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.661773][T19292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.678572][T19292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.704987][T19292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.735555][T19292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.877344][T19292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.898408][T19292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.938992][T19312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.948536][T19312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.006686][T19138] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 423.430562][T19333] Bluetooth: hci3: command tx timeout [ 424.521059][T19465] netlink: 'syz.4.6704': attribute type 1 has an invalid length. [ 425.771429][T19512] unsupported nla_type 113 [ 426.897661][T19559] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.038892][T19615] openvswitch: netlink: IP tunnel dst address not specified [ 431.042359][T19685] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 431.847134][T19713] netlink: 'syz.0.6822': attribute type 2 has an invalid length. [ 432.434554][T19734] IPVS: length: 131 != 8 [ 432.815445][T19748] FAULT_INJECTION: forcing a failure. [ 432.815445][T19748] name failslab, interval 1, probability 0, space 0, times 1 [ 432.878940][T19748] CPU: 0 UID: 0 PID: 19748 Comm: syz.4.6840 Tainted: G U L syzkaller #0 PREEMPT(full) [ 432.878969][T19748] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 432.878975][T19748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.878984][T19748] Call Trace: [ 432.878990][T19748] [ 432.878997][T19748] dump_stack_lvl+0x100/0x190 [ 432.879021][T19748] should_fail_ex.cold+0x5/0xa [ 432.879067][T19748] should_failslab+0xc2/0x120 [ 432.879090][T19748] __kmalloc_noprof+0xfc/0x820 [ 432.879109][T19748] ? string_escape_mem+0x746/0xe00 [ 432.879192][T19748] ? kstrdup_quotable+0xc2/0x190 [ 432.879211][T19748] kstrdup_quotable+0xc2/0x190 [ 432.879227][T19748] ? __pfx_kstrdup_quotable+0x10/0x10 [ 432.879244][T19748] ? get_cmdline+0x86/0x360 [ 432.879268][T19748] kstrdup_quotable_cmdline+0x127/0x210 [ 432.879287][T19748] __report_access+0x77/0x230 [ 432.879337][T19748] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.879364][T19748] task_work_run+0x150/0x240 [ 432.879388][T19748] ? __pfx_task_work_run+0x10/0x10 [ 432.879416][T19748] exit_to_user_mode_loop+0x1d8/0x6f0 [ 432.879432][T19748] ? rcu_is_watching+0x12/0xc0 [ 432.879451][T19748] do_syscall_64+0x652/0x840 [ 432.879468][T19748] ? clear_bhb_loop+0x40/0x90 [ 432.879486][T19748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.879501][T19748] RIP: 0033:0x7f15ddf9df99 [ 432.879515][T19748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.879530][T19748] RSP: 002b:00007f15def52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 432.879548][T19748] RAX: ffffffffffffffff RBX: 00007f15de225fa0 RCX: 00007f15ddf9df99 [ 432.879559][T19748] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 432.879568][T19748] RBP: 00007f15de034ec4 R08: 0000000000000004 R09: 0000000000000000 [ 432.879577][T19748] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 432.879587][T19748] R13: 00007f15de226038 R14: 00007f15de225fa0 R15: 00007ffccedfa598 [ 432.879606][T19748] [ 432.879634][T19748] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[19138] was attempted by "(null)"[19748] [ 434.495128][T19781] could not allocate digest TFM handle [ 434.694641][T19802] openvswitch: netlink: Key type 29 is not supported [ 434.746853][T19806] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 434.783372][T19806] audit: out of memory in audit_log_start [ 435.968420][T19843] process 'syz.0.6884' launched '/dev/fd/3' with NULL argv: empty string added [ 436.389939][ T29] audit: type=1326 audit(4294967414.021:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19857 comm="syz.1.6891" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f2b79df99 code=0x0 [ 436.618249][T19866] netlink: 'syz.4.6894': attribute type 1 has an invalid length. [ 436.687696][T19868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 437.291045][T19882] netlink: 'syz.3.6900': attribute type 1 has an invalid length. [ 437.598626][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.608588][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.556889][T19927] ======================================================= [ 438.556889][T19927] WARNING: The mand mount option has been deprecated and [ 438.556889][T19927] and is ignored by this kernel. Remove the mand [ 438.556889][T19927] option from the mount to silence this warning. [ 438.556889][T19927] ======================================================= [ 438.973647][T19941] binder: 19940:19941 ioctl c0046209 3 returned -22 [ 439.235944][T19951] sd 0:0:1:0: PR command failed: 1026 [ 439.260551][T19951] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 439.293876][T19951] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 440.026393][T19973] HfR: entered promiscuous mode [ 443.509253][T20070] NFSD: Failed to start, no listeners configured. [ 443.545621][T20090] netlink: 178 bytes leftover after parsing attributes in process `syz.0.7002'. [ 444.314539][T20114] mmap: syz.1.7014 (20114): VmData 45879296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 444.676910][T20125] binder: 20124:20125 ioctl c0046209 3 returned -22 [ 445.429041][T20152] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 446.781914][T20201] syz.0.7058 uses obsolete (PF_INET,SOCK_PACKET) [ 447.610018][T20230] netlink: 'syz.1.7071': attribute type 1 has an invalid length. [ 448.435997][T20257] ksmbd: Unknown IPC event: 14, ignore. [ 448.550618][T20263] openvswitch: netlink: IP tunnel dst address not specified [ 448.671363][T20267] FAULT_INJECTION: forcing a failure. [ 448.671363][T20267] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 448.776793][T20267] CPU: 0 UID: 0 PID: 20267 Comm: syz.0.7089 Tainted: G U L syzkaller #0 PREEMPT(full) [ 448.776821][T20267] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 448.776827][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.776836][T20267] Call Trace: [ 448.776842][T20267] [ 448.776847][T20267] dump_stack_lvl+0x100/0x190 [ 448.776870][T20267] should_fail_ex.cold+0x5/0xa [ 448.776885][T20267] ? prepare_alloc_pages+0x16d/0x5f0 [ 448.776909][T20267] should_fail_alloc_page+0xeb/0x140 [ 448.776932][T20267] prepare_alloc_pages+0x1f0/0x5f0 [ 448.776953][T20267] ? rcu_read_unlock+0x17/0x60 [ 448.776984][T20267] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 448.777004][T20267] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 448.777023][T20267] ? try_to_migrate_one+0x119e/0x3000 [ 448.777042][T20267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 448.777062][T20267] ? __pfx_try_to_migrate_one+0x10/0x10 [ 448.777076][T20267] ? __lock_acquire+0x49f/0x1a40 [ 448.777106][T20267] ? reacquire_held_locks+0xce/0x1e0 [ 448.777127][T20267] ? folio_lock_anon_vma_read+0x348/0xe30 [ 448.777145][T20267] ? rcu_is_watching+0x12/0xc0 [ 448.777162][T20267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.777185][T20267] ? policy_nodemask+0xed/0x4f0 [ 448.777206][T20267] alloc_pages_mpol+0x1fb/0x540 [ 448.777228][T20267] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 448.777256][T20267] folio_alloc_mpol_noprof+0x36/0x260 [ 448.777280][T20267] alloc_migration_target_by_mpol+0x2c1/0x650 [ 448.777306][T20267] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 448.777331][T20267] ? __pfx___might_resched+0x10/0x10 [ 448.777353][T20267] ? folio_get_anon_vma+0x16b/0x980 [ 448.777369][T20267] migrate_pages_batch+0x5dc/0x45c0 [ 448.777393][T20267] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 448.777424][T20267] ? __pfx_migrate_pages_batch+0x10/0x10 [ 448.777452][T20267] ? __pfx_remove_migration_pte+0x10/0x10 [ 448.777479][T20267] migrate_pages_sync+0x12c/0x880 [ 448.777502][T20267] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 448.777528][T20267] ? vma_migratable+0x380/0x450 [ 448.777550][T20267] ? __pfx_migrate_pages_sync+0x10/0x10 [ 448.777571][T20267] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 448.777601][T20267] migrate_pages+0x1a83/0x2850 [ 448.777626][T20267] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 448.777655][T20267] ? __pfx_migrate_pages+0x10/0x10 [ 448.777677][T20267] ? mas_next_slot+0x10a3/0x1960 [ 448.777849][T20267] ? do_mbind+0x555/0xfd0 [ 448.777871][T20267] do_mbind+0x5a4/0xfd0 [ 448.777891][T20267] ? __pfx_do_mbind+0x10/0x10 [ 448.777905][T20267] ? find_held_lock+0x2b/0x80 [ 448.777924][T20267] ? ksys_write+0x190/0x250 [ 448.777945][T20267] ? __pfx_get_nodes+0x10/0x10 [ 448.777968][T20267] kernel_mbind+0x1b7/0x200 [ 448.777995][T20267] ? __pfx_kernel_mbind+0x10/0x10 [ 448.778015][T20267] do_syscall_64+0x115/0x840 [ 448.778033][T20267] ? clear_bhb_loop+0x40/0x90 [ 448.778052][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.778067][T20267] RIP: 0033:0x7f1bb659df99 [ 448.778082][T20267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.778096][T20267] RSP: 002b:00007f1bb74a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 448.778111][T20267] RAX: ffffffffffffffda RBX: 00007f1bb6825fa0 RCX: 00007f1bb659df99 [ 448.778122][T20267] RDX: 0000000100000000 RSI: 0800000100000004 RDI: 0000000000002000 [ 448.778131][T20267] RBP: 00007f1bb6634ec4 R08: 0000000000001003 R09: 0000000000000002 [ 448.778140][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.778150][T20267] R13: 00007f1bb6826038 R14: 00007f1bb6825fa0 R15: 00007ffd4253ac48 [ 448.778169][T20267] [ 450.300837][T20295] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 451.593952][T20320] NFSD: Failed to start, no listeners configured. [ 452.033567][T19534] Process accounting paused [ 452.456104][T20349] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 452.543916][ T5821] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 452.586150][T20348] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 453.399748][T20383] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 454.712492][T19534] syz.3.6737 (19534) used greatest stack depth: 18376 bytes left [ 455.620520][T20443] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72fd8 [ 455.711597][T20443] memcg:ffff888032af0a80 [ 455.750911][T20443] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 455.794630][T20443] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 455.842693][T20443] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888032af0a80 [ 455.878378][T20443] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 455.939880][T20443] page_owner tracks the page as allocated [ 455.980060][T20443] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20443, tgid 20442 (syz.1.7174), ts 455620497144, free_ts 455620353684 [ 456.096398][T20443] post_alloc_hook+0xfd/0x120 [ 456.107642][T20467] NFSD: Failed to start, no listeners configured. [ 456.120320][T20443] get_page_from_freelist+0xf48/0x3530 [ 456.134002][T20443] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 456.146452][T20443] alloc_pages_mpol+0x1fb/0x540 [ 456.154478][T20443] folio_alloc_noprof+0x22/0x250 [ 456.159879][T20443] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 456.166419][T20443] filemap_alloc_folio_noprof+0x5e/0x80 [ 456.172460][T20443] page_cache_ra_order+0x539/0xed0 [ 456.177817][T20443] filemap_fault+0x1943/0x3130 [ 456.183690][T20443] __do_fault+0x10b/0x440 [ 456.188225][T20443] do_fault+0xeb2/0x1750 [ 456.192854][T20443] __handle_mm_fault+0x187d/0x2a00 [ 456.200432][T20443] handle_mm_fault+0x37b/0xa30 [ 456.205331][T20443] __get_user_pages+0x1178/0x32a0 [ 456.211390][T20443] populate_vma_page_range+0x267/0x3f0 [ 456.217227][T20443] __mm_populate+0x107/0x3a0 [ 456.222492][T20443] page last free pid 5874 tgid 5874 stack trace: [ 456.230450][T20443] free_pages_prepare+0x586/0xd80 [ 456.235700][T20443] __free_contig_range_common+0x14f/0x250 [ 456.241908][T20443] free_pages_bulk+0x12a/0x200 [ 456.246871][T20443] vm_area_free_pages+0xad/0x2b0 [ 456.253037][T20443] vfree+0x107/0x750 [ 456.257118][T20443] do_ip6t_get_ctl+0x90a/0xb00 [ 456.262493][T20443] nf_getsockopt+0x7c/0xe0 [ 456.269078][T20443] ipv6_getsockopt+0x207/0x2a0 [ 456.274025][T20443] tcp_getsockopt+0xa1/0x110 [ 456.279368][T20443] do_sock_getsockopt+0x50a/0x6e0 [ 456.284550][T20443] __sys_getsockopt+0x133/0x1d0 [ 456.290955][T20443] __x64_sys_getsockopt+0xbd/0x160 [ 456.299788][T20443] do_syscall_64+0x115/0x840 [ 456.305041][T20443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.328627][T20443] ------------[ cut here ]------------ [ 456.334445][T20443] kernel BUG at mm/filemap.c:858! [ 456.366459][T20443] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 456.373396][T20443] CPU: 0 UID: 0 PID: 20443 Comm: syz.1.7174 Tainted: G U L syzkaller #0 PREEMPT(full) [ 456.385157][T20443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 456.391066][T20443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.401311][T20443] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 456.407481][T20443] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 e6 ed 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 cf ed 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 b8 ed 12 00 [ 456.427809][T20443] RSP: 0018:ffffc900039bf3f8 EFLAGS: 00010246 [ 456.434185][T20443] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900105d9000 [ 456.442676][T20443] RDX: 0000000000080000 RSI: ffffffff825a5d28 RDI: ffff88802a30e1c4 [ 456.450664][T20443] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 456.458625][T20443] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 456.466585][T20443] R13: ffffea0001cbf600 R14: 0000000000000010 R15: 0000000000000000 [ 456.474571][T20443] FS: 00007f7f2c70d6c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 456.483500][T20443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.490101][T20443] CR2: 00007f15de1edc38 CR3: 000000007688c000 CR4: 00000000003526f0 [ 456.498084][T20443] Call Trace: [ 456.501370][T20443] [ 456.504301][T20443] ? __pfx___filemap_add_folio+0x10/0x10 [ 456.509936][T20443] filemap_add_folio+0x1d3/0x630 [ 456.514895][T20443] ? __lock_acquire+0x49f/0x1a40 [ 456.519833][T20443] ? __pfx_filemap_add_folio+0x10/0x10 [ 456.525313][T20443] ? __pfx___css_rstat_updated+0x10/0x10 [ 456.530998][T20443] page_cache_ra_order+0x602/0xed0 [ 456.536208][T20443] filemap_fault+0x1943/0x3130 [ 456.540989][T20443] ? __pfx_filemap_fault+0x10/0x10 [ 456.546114][T20443] ? blk_cgroup_congested+0x136/0x270 [ 456.551609][T20443] ? blk_cgroup_congested+0x136/0x270 [ 456.556995][T20443] ? __pfx_filemap_map_pages+0x10/0x10 [ 456.562458][T20443] __do_fault+0x10b/0x440 [ 456.566815][T20443] do_fault+0xeb2/0x1750 [ 456.571069][T20443] __handle_mm_fault+0x187d/0x2a00 [ 456.576198][T20443] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 456.581580][T20443] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.587061][T20443] ? pte_offset_map_lock+0x174/0x320 [ 456.592341][T20443] ? find_held_lock+0x2b/0x80 [ 456.597128][T20443] ? follow_page_pte+0x4d0/0x13f0 [ 456.602162][T20443] handle_mm_fault+0x37b/0xa30 [ 456.607024][T20443] __get_user_pages+0x1178/0x32a0 [ 456.612136][T20443] ? __pfx___get_user_pages+0x10/0x10 [ 456.617508][T20443] populate_vma_page_range+0x267/0x3f0 [ 456.622997][T20443] ? __pfx_populate_vma_page_range+0x10/0x10 [ 456.628975][T20443] ? __pfx_find_vma_intersection+0x10/0x10 [ 456.634778][T20443] ? do_mmap+0x93f/0x12f0 [ 456.639122][T20443] __mm_populate+0x107/0x3a0 [ 456.643724][T20443] ? __pfx___mm_populate+0x10/0x10 [ 456.648934][T20443] ? up_write+0x2e5/0x5c0 [ 456.653256][T20443] vm_mmap_pgoff+0x37f/0x470 [ 456.657861][T20443] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 456.663053][T20443] ? __fget_files+0x215/0x3d0 [ 456.667739][T20443] ? __fget_files+0x21f/0x3d0 [ 456.672418][T20443] ksys_mmap_pgoff+0x3cb/0x610 [ 456.677200][T20443] ? __x64_sys_futex+0x358/0x4d0 [ 456.682131][T20443] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 456.687411][T20443] ? xfd_validate_state+0x129/0x190 [ 456.692631][T20443] __x64_sys_mmap+0x125/0x190 [ 456.697324][T20443] do_syscall_64+0x115/0x840 [ 456.701922][T20443] ? clear_bhb_loop+0x40/0x90 [ 456.706630][T20443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.712564][T20443] RIP: 0033:0x7f7f2b79df99 [ 456.716980][T20443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.736595][T20443] RSP: 002b:00007f7f2c70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 456.745004][T20443] RAX: ffffffffffffffda RBX: 00007f7f2ba25fa0 RCX: 00007f7f2b79df99 [ 456.752981][T20443] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 456.760972][T20443] RBP: 00007f7f2b834ec4 R08: 0000000000000003 R09: 0000000000008000 [ 456.768946][T20443] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 456.776990][T20443] R13: 00007f7f2ba26038 R14: 00007f7f2ba25fa0 R15: 00007fff13809668 [ 456.784980][T20443] [ 456.788022][T20443] Modules linked in: [ 456.793203][T20443] ---[ end trace 0000000000000000 ]--- [ 456.823734][T20443] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 456.836662][T20443] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 e6 ed 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 cf ed 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 b8 ed 12 00 [ 456.860313][T20443] RSP: 0018:ffffc900039bf3f8 EFLAGS: 00010246 [ 456.867040][T20443] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900105d9000 [ 456.877682][T20443] RDX: 0000000000080000 RSI: ffffffff825a5d28 RDI: ffff88802a30e1c4 [ 456.887903][T20443] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 456.896595][T20443] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 456.906882][T20443] R13: ffffea0001cbf600 R14: 0000000000000010 R15: 0000000000000000 [ 456.917541][T20443] FS: 00007f7f2c70d6c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 456.926877][T20443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.933676][T20443] CR2: 00007f1bb67ee2f8 CR3: 000000007688c000 CR4: 00000000003526f0 [ 456.945722][T20443] Kernel panic - not syncing: Fatal exception [ 456.951995][T20443] Kernel Offset: disabled [ 456.956315][T20443] Rebooting in 86400 seconds..