last executing test programs: 2m43.04301543s ago: executing program 1 (id=4798): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 2m42.800589028s ago: executing program 1 (id=4801): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m42.593166443s ago: executing program 1 (id=4804): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) 2m42.340485392s ago: executing program 1 (id=4808): r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 2m42.113270415s ago: executing program 1 (id=4812): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 2m41.964876919s ago: executing program 2 (id=4815): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 2m41.717907189s ago: executing program 2 (id=4817): socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x6b) 2m41.446602195s ago: executing program 2 (id=4819): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0xb, 0xa79e) 2m41.21366799s ago: executing program 1 (id=4821): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/nvme/parameters/write_queues\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 2m41.165477537s ago: executing program 2 (id=4822): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x5393, 0xffffffffffffffff) 2m40.385106452s ago: executing program 32 (id=4821): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/nvme/parameters/write_queues\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 2m40.336520072s ago: executing program 2 (id=4824): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x42241, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) 2m40.065825319s ago: executing program 2 (id=4827): r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto_nsim_dev_health_break_fops_health(r0, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a", 0x86) 2m25.034668281s ago: executing program 33 (id=4827): r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto_nsim_dev_health_break_fops_health(r0, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a", 0x86) 2.078307194s ago: executing program 0 (id=6522): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 1.766252952s ago: executing program 0 (id=6526): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lseek$auto(r0, 0x7f, 0x4) 1.687805767s ago: executing program 3 (id=6528): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) 1.685638937s ago: executing program 5 (id=6536): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) 1.557747477s ago: executing program 4 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) 1.483519181s ago: executing program 5 (id=6530): setns(0xc9, 0x0) socket(0x1f, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) 1.444016919s ago: executing program 3 (id=6531): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x79, 0x0, 0xd) 1.304070163s ago: executing program 4 (id=6532): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.215693455s ago: executing program 5 (id=6533): unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) semctl$auto_GETALL(0x0, 0xe9b, 0xd, 0x9) 1.174082401s ago: executing program 3 (id=6534): socket(0xa, 0x801, 0x84) setreuid$auto(0x0, 0x20000000004) ioctl$auto(0x3, 0x8916, 0x91) 837.059995ms ago: executing program 5 (id=6535): r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 836.944765ms ago: executing program 3 (id=6537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r0) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_MS_ADDRESS={0x8}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_LINK={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80) 834.781744ms ago: executing program 0 (id=6544): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) 833.280897ms ago: executing program 4 (id=6538): socket(0x2d, 0x2, 0x0) setreuid$auto(0x9, 0x1) ioctl$auto(0x3, 0x894c, 0x91) 647.11808ms ago: executing program 0 (id=6539): mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) faccessat2$auto(0x1, 0x0, 0x2, 0x1000) 630.316271ms ago: executing program 4 (id=6540): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0xffffffffffffffff) 629.568854ms ago: executing program 3 (id=6541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048080) 527.583955ms ago: executing program 5 (id=6542): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) 400.684149ms ago: executing program 0 (id=6543): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) ioctl$auto(r0, 0x8946, 0x24) 390.538922ms ago: executing program 4 (id=6545): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x68, 0x0, 0x8) 382.65929ms ago: executing program 3 (id=6546): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) 1.660515ms ago: executing program 0 (id=6547): unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) semctl$auto_GETALL(0x0, 0xe9b, 0xd, 0x9) 1.571834ms ago: executing program 4 (id=6548): setns(0xc9, 0x0) socket(0x24, 0x2, 0x4e1) write$auto(0x3, 0x0, 0x1) 0s ago: executing program 5 (id=6549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf251b00000008009a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. [ 89.559871][ T5601] cgroup: Unknown subsys name 'net' [ 89.681414][ T5601] cgroup: Unknown subsys name 'cpuset' [ 89.691765][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.471063][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.463201][ T5704] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.290343][ T29] cfg80211: failed to load regulatory.db [ 100.549514][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.561342][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.578556][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.598940][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.609156][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.646039][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.659412][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.668553][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.679667][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.688772][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.744501][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.758629][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.770272][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.786877][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.799820][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.840237][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.854083][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.865130][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.881559][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.891972][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.647297][ T5735] Bluetooth: hci0: command tx timeout [ 102.726278][ T5735] Bluetooth: hci2: command tx timeout [ 102.828482][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.836702][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.844011][ T5738] bridge_slave_0: entered allmulticast mode [ 102.851911][ T5738] bridge_slave_0: entered promiscuous mode [ 102.880633][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.888005][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.895237][ T5739] bridge_slave_0: entered allmulticast mode [ 102.903050][ T5739] bridge_slave_0: entered promiscuous mode [ 102.911908][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.919217][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.926840][ T5739] bridge_slave_1: entered allmulticast mode [ 102.934352][ T5739] bridge_slave_1: entered promiscuous mode [ 102.941686][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.949102][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.956787][ T5738] bridge_slave_1: entered allmulticast mode [ 102.964176][ T5738] bridge_slave_1: entered promiscuous mode [ 102.976353][ T4931] Bluetooth: hci1: command tx timeout [ 102.983004][ T5735] Bluetooth: hci3: command tx timeout [ 103.073129][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.080566][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.088030][ T5733] bridge_slave_0: entered allmulticast mode [ 103.095533][ T5733] bridge_slave_0: entered promiscuous mode [ 103.107845][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.120340][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.142256][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.149736][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.157459][ T5733] bridge_slave_1: entered allmulticast mode [ 103.165929][ T5733] bridge_slave_1: entered promiscuous mode [ 103.178539][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.190264][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.213085][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.220512][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.227837][ T5742] bridge_slave_0: entered allmulticast mode [ 103.235310][ T5742] bridge_slave_0: entered promiscuous mode [ 103.277744][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.284994][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.292687][ T5742] bridge_slave_1: entered allmulticast mode [ 103.301172][ T5742] bridge_slave_1: entered promiscuous mode [ 103.367696][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.379659][ T5739] team0: Port device team_slave_0 added [ 103.388611][ T5738] team0: Port device team_slave_0 added [ 103.408779][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.420003][ T5739] team0: Port device team_slave_1 added [ 103.429009][ T5738] team0: Port device team_slave_1 added [ 103.438105][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.484396][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.559805][ T5733] team0: Port device team_slave_0 added [ 103.568027][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.575019][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.601458][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.614259][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.621601][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.647612][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.661112][ T5742] team0: Port device team_slave_0 added [ 103.669040][ T5733] team0: Port device team_slave_1 added [ 103.675395][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.682633][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.709488][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.731327][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.738623][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.764638][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.779095][ T5742] team0: Port device team_slave_1 added [ 103.810466][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.817561][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.844169][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.858888][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.865918][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.892102][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.943053][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.950620][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.976702][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.014378][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.021586][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.047751][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.123742][ T5739] hsr_slave_0: entered promiscuous mode [ 104.130883][ T5739] hsr_slave_1: entered promiscuous mode [ 104.157325][ T5733] hsr_slave_0: entered promiscuous mode [ 104.163884][ T5733] hsr_slave_1: entered promiscuous mode [ 104.170578][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 104.176969][ T5733] Cannot create hsr debugfs directory [ 104.201579][ T5738] hsr_slave_0: entered promiscuous mode [ 104.208149][ T5738] hsr_slave_1: entered promiscuous mode [ 104.214416][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 104.220263][ T5738] Cannot create hsr debugfs directory [ 104.244652][ T5742] hsr_slave_0: entered promiscuous mode [ 104.251290][ T5742] hsr_slave_1: entered promiscuous mode [ 104.257735][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 104.263513][ T5742] Cannot create hsr debugfs directory [ 104.726614][ T5735] Bluetooth: hci0: command tx timeout [ 104.817347][ T5735] Bluetooth: hci2: command tx timeout [ 104.827513][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.847757][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.859318][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.871538][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.880377][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.897983][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.906944][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.917596][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.009017][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.022239][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.040780][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.047809][ T5735] Bluetooth: hci3: command tx timeout [ 105.053273][ T4931] Bluetooth: hci1: command tx timeout [ 105.064025][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.078599][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.090393][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.125184][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.138865][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.205992][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.222739][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.234647][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.245338][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.269059][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.281446][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.294865][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.309120][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.451685][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.459076][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.471116][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.486749][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.497631][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.515192][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.528454][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.537241][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.551665][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.624642][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.667014][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.674424][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.704870][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.727451][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.734756][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.800775][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.833141][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.849879][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.857171][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.895385][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.902629][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.943488][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.971345][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.978610][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.008601][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.015913][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.068544][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.158765][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.211865][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.219267][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.258210][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.265507][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.819079][ T5735] Bluetooth: hci0: command tx timeout [ 106.889205][ T5735] Bluetooth: hci2: command tx timeout [ 107.136177][ T5735] Bluetooth: hci1: command tx timeout [ 107.136476][ T4931] Bluetooth: hci3: command tx timeout [ 107.233167][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.411584][ T5742] veth0_vlan: entered promiscuous mode [ 107.475080][ T5742] veth1_vlan: entered promiscuous mode [ 107.531096][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.590894][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.643726][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.697262][ T5742] veth0_macvtap: entered promiscuous mode [ 107.728365][ T5742] veth1_macvtap: entered promiscuous mode [ 107.744948][ T5738] veth0_vlan: entered promiscuous mode [ 107.794830][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.814398][ T5733] veth0_vlan: entered promiscuous mode [ 107.828830][ T5738] veth1_vlan: entered promiscuous mode [ 107.840538][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.871824][ T5739] veth0_vlan: entered promiscuous mode [ 107.900594][ T5733] veth1_vlan: entered promiscuous mode [ 107.925612][ T5739] veth1_vlan: entered promiscuous mode [ 107.958362][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.018631][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.099238][ T5738] veth0_macvtap: entered promiscuous mode [ 108.109986][ T5733] veth0_macvtap: entered promiscuous mode [ 108.125105][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.135768][ T5738] veth1_macvtap: entered promiscuous mode [ 108.143162][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.176929][ T5733] veth1_macvtap: entered promiscuous mode [ 108.207131][ T5739] veth0_macvtap: entered promiscuous mode [ 108.234857][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.246493][ T5739] veth1_macvtap: entered promiscuous mode [ 108.247968][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.262976][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.287527][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.299800][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.329699][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.353493][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.378626][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.417750][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.471469][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.498361][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.512239][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.546482][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.559617][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.589791][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.785652][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.796757][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.830365][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.867368][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.887385][ T4931] Bluetooth: hci0: command tx timeout [ 108.914971][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.924390][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.966784][ T4931] Bluetooth: hci2: command tx timeout [ 108.989119][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.005510][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.039469][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.062732][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.137382][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.161207][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.176782][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.207503][ T4931] Bluetooth: hci3: command tx timeout [ 109.207519][ T5735] Bluetooth: hci1: command tx timeout [ 109.308489][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.323251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.409100][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.418892][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.439944][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.449147][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.623677][ T4931] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 111.987250][ T5980] syz.3.133(5980): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 112.192776][ T30] audit: type=1326 audit(1787010753.731:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.137" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ff859e0d9 code=0x0 [ 114.045691][ T6056] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.984144][ T4931] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 115.761871][ T6120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.314477][ T6137] can: request_module (can-proto-5) failed. [ 116.513074][ T4931] Bluetooth: hci1: unexpected event 0x20 length: 120 > 7 [ 116.663361][ T6154] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.017496][ T4931] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 118.066545][ T6206] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.319273][ T30] audit: type=1800 audit(1787015879.894:3): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.267" name="dummy_udc" dev="gadgetfs" ino=7521 res=0 errno=0 [ 121.879766][ T4931] Bluetooth: hci3: unexpected event 0x16 length: 124 > 6 [ 123.059549][ T6385] capability: warning: `syz.3.334' uses 32-bit capabilities (legacy support in use) [ 126.433759][ T6495] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5738] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6495] [ 133.024093][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031871][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.763003][ T6765] Unable to find swap-space signature [ 137.543411][ T4931] Bluetooth: hci1: unexpected event 0x2c length: 1022 > 17 [ 139.003725][ T30] audit: type=1800 audit(4294967300.219:4): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.575" name="members" dev="configfs" ino=11041 res=0 errno=0 [ 144.197200][ T7071] syz_tun: tun_chr_ioctl cmd 1074025676 [ 144.215749][ T7071] syz_tun: owner set to 111 [ 147.664608][ T7184] syz_tun: tun_chr_ioctl cmd 1074025680 [ 151.642022][ T7311] syz.1.788 (7311): attempted to duplicate a private mapping with mremap. This is not supported. [ 151.876837][ T7320] random: crng reseeded on system resumption [ 152.823305][ T7357] Invalid ELF header magic: != ELF [ 154.125182][ T7406] mmap: syz.0.836 (7406) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.585442][ T7425] capability: warning: `syz.3.844' uses deprecated v2 capabilities in a way that may be insecure [ 158.693280][ T7591] Invalid ELF header magic: != ELF [ 159.557343][ T4931] Bluetooth: hci0: unexpected event 0x23 length: 16 > 13 [ 160.392444][ T7659] syz.2.961 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.556630][ T30] audit: type=1800 audit(4294967321.872:5): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.963" name="version" dev="configfs" ino=13893 res=0 errno=0 [ 162.172978][ T7727] Unable to find swap-space signature [ 163.560299][ T4931] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 169.507188][ T30] audit: type=1800 audit(4294967330.869:6): pid=8038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1148" name="trace_pipe" dev="tracefs" ino=4139 res=0 errno=0 [ 169.764702][ T4931] Bluetooth: hci1: unexpected event 0x3c length: 124 > 7 [ 170.070864][ T4931] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 171.109700][ T30] audit: type=1800 audit(4294967332.477:7): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1180" name="trace_pipe" dev="tracefs" ino=4101 res=0 errno=0 [ 174.002301][ T8220] __vm_enough_memory: pid: 8220, comm: syz.1.1239, bytes: 4398046511104 not enough memory for the allocation [ 176.854677][ T30] audit: type=1800 audit(1843104520.889:8): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1301" name="features" dev="configfs" ino=15938 res=0 errno=0 [ 178.118835][ T30] audit: type=1800 audit(1843104522.156:9): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1323" name="features" dev="configfs" ino=16005 res=0 errno=0 [ 178.496069][ T8343] kexec: Could not allocate control_code_buffer [ 178.775125][ T30] audit: type=1800 audit(1843104522.819:10): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1334" name="dbroot" dev="configfs" ino=16034 res=0 errno=0 [ 179.656025][ T8444] Process accounting resumed [ 180.822193][ T8500] nfs: Bad value for 'source' [ 183.254553][ T8592] syz_tun: tun_chr_ioctl cmd 1074025680 [ 183.396416][ T30] audit: type=1800 audit(1843104527.463:11): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1425" name="lu_gp_id" dev="configfs" ino=16765 res=0 errno=0 [ 184.954313][ T8662] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5739] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8662] [ 185.392221][ T4931] Bluetooth: hci3: unexpected event 0x2c length: 1019 > 17 [ 185.392266][ T4931] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 186.349990][ T4931] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 191.377313][ T8915] deleting an unspecified loop device is not supported. [ 192.281818][ T30] audit: type=1800 audit(1843104536.389:12): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1602" name="dbroot" dev="configfs" ino=17384 res=0 errno=0 [ 192.318611][ T8946] db_root: cannot open: /sy] [ 194.161094][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.167872][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.813686][ T30] audit: type=1800 audit(1843104538.943:13): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1634" name="dbroot" dev="configfs" ino=18629 res=0 errno=0 [ 194.846757][ T9033] db_root: cannot open: /sy] [ 197.301442][ T9131] kAFS: No cell specified [ 198.594743][ T9179] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 199.424637][ T9213] binder: 9208:9213 ioctl 40046205 0 returned -22 [ 199.780353][ T9227] bond0: option slaves: interface -]=,Do does not exist! [ 202.701457][ T9352] warning: `syz.0.1793' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.190186][ T4931] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 203.850398][ T9398] i2c i2c-0: new_device: Invalid device name [ 205.663783][ T9472] serial 00:02: in use; can't configure [ 207.785099][ T9563] WARNING! power/level is deprecated; use power/control instead [ 208.933998][ T9612] random: crng reseeded on system resumption [ 209.662678][ T9637] Process accounting paused [ 211.547073][ T9706] futex_wake_op: syz.2.1964 tries to shift op by -1; fix this program [ 211.562690][ T9711] random: crng reseeded on system resumption [ 215.618871][ T30] audit: type=1806 audit(1843104559.851:14): xattr="." res=0 [ 215.812955][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.821406][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.050259][ T30] audit: type=1800 audit(1843104560.293:15): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2050" name="lu_gp_id" dev="configfs" ino=20437 res=0 errno=0 [ 216.070921][ T9885] kstrtoul() returned -22 for lu_gp_id [ 216.649562][ T4931] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 216.659298][ T4931] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 217.359624][ T9934] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 218.759752][ T4931] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 218.759798][ T4931] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 218.775444][ T4931] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 222.047886][T10105] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 222.060538][T10105] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 222.068841][T10105] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 222.077895][T10105] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 222.087506][T10105] page dumped because: unmovable page [ 222.095034][T10109] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 222.107079][T10105] page_owner info is not present (never set?) [ 222.443341][T10119] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.476402][T10119] vhci_hcd vhci_hcd.3: invalid port number 0 [ 222.810138][T10134] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 222.842871][T10134] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 222.860729][T10134] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 222.894315][T10134] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 222.917846][T10134] page dumped because: unmovable page [ 222.936151][T10134] page_owner info is not present (never set?) [ 222.974685][T10140] i2c i2c-0: delete_device: Can't parse I2C address [ 224.482924][T10193] usb usb13: usbfs: process 10193 (syz.1.2195) did not claim interface 0 before use [ 226.423682][ T30] audit: type=1807 audit(1843104570.697:16): UNKNOWN=nl80211 res=0 [ 226.434874][T10257] ima: policy update failed [ 226.439567][ T30] audit: type=1802 audit(1843104570.727:17): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2227" res=0 errno=0 [ 226.489793][ T30] audit: type=1802 audit(1843104570.757:18): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2227" res=0 errno=0 [ 226.592148][T10260] wlan1: mtu less than device minimum [ 226.783199][T10199] Bluetooth: hci3: command 0x0406 tx timeout [ 226.796248][T10199] Bluetooth: hci2: command 0x0406 tx timeout [ 226.802482][T10198] Bluetooth: hci0: command 0x0406 tx timeout [ 226.802552][T10198] Bluetooth: hci1: command 0x0406 tx timeout [ 228.372062][T10301] dyndbg: expected <4096 bytes into control [ 230.906979][T10362] block2mtd: illegal erase size [ 231.300928][T10369] ICMPv6: process `syz.1.2279' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 236.385429][T10508] syz.1.2342: vm.laptop_mode is deprecated. Ignoring setting. [ 237.520177][T10538] ICMPv6: process `syz.1.2357' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 238.587585][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 238.595251][ T50] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 239.621087][T10563] Process accounting resumed [ 242.299210][ T30] audit: type=1800 audit(1843104586.660:19): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2414" name="sr0" dev="devtmpfs" ino=2807 res=0 errno=0 [ 242.606659][T10651] sd 0:0:1:0: PR command failed: 1026 [ 242.621061][T10651] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 242.635573][T10651] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 243.063123][T10664] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.104813][T10689] i2c i2c-0: delete_device: Can't find device in list [ 245.611364][T10744] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 246.378517][T10771] warning: `syz.1.2470' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.253771][T10897] block2mtd: device name too long [ 252.235059][T10964] zram: Added device: zram1 [ 252.741876][T10279] syz.3.2238 (10279) used greatest stack depth: 18408 bytes left [ 255.153742][T11099] kfence: disabled [ 255.285195][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.293728][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750727][T11123] zram: Added device: zram2 [ 257.280540][T11188] zram: Added device: zram3 [ 258.790256][T11247] kafs: addr_prefs: Too many elements in string [ 260.043974][T11279] syz.3.2716 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 260.090092][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.3.2716 Not tainted syzkaller #0 PREEMPT(full) [ 260.090142][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.090166][T11279] Call Trace: [ 260.090177][T11279] [ 260.090189][T11279] dump_stack_lvl+0x100/0x190 [ 260.090238][T11279] dump_header+0xfb/0x606 [ 260.090276][T11279] oom_kill_process.cold+0xd/0x330 [ 260.090317][T11279] out_of_memory+0x340/0x14f0 [ 260.090359][T11279] ? __pfx_out_of_memory+0x10/0x10 [ 260.090403][T11279] mem_cgroup_out_of_memory+0xc6/0x130 [ 260.090443][T11279] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 260.090482][T11279] ? find_held_lock+0x2b/0x80 [ 260.090542][T11279] ? do_raw_spin_unlock+0x145/0x1e0 [ 260.090582][T11279] ? _raw_spin_unlock+0x28/0x50 [ 260.090631][T11279] try_charge_memcg+0x6e5/0xdf0 [ 260.090690][T11279] ? __pfx_try_charge_memcg+0x10/0x10 [ 260.090740][T11279] ? find_held_lock+0x2b/0x80 [ 260.090782][T11279] ? rcu_read_unlock+0x17/0x60 [ 260.090833][T11279] ? rcu_read_unlock+0x17/0x60 [ 260.090886][T11279] ? find_held_lock+0x2b/0x80 [ 260.090929][T11279] ? rcu_read_unlock+0x17/0x60 [ 260.090990][T11279] charge_memcg+0x187/0x1e0 [ 260.091044][T11279] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 260.091084][T11279] swap_cache_alloc_folio+0x548/0xc50 [ 260.091133][T11279] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 260.091174][T11279] ? swap_cache_get_folio+0x28d/0x360 [ 260.091214][T11279] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 260.091253][T11279] ? find_held_lock+0x2b/0x80 [ 260.091295][T11279] ? mlock_drain_local+0x254/0x4e0 [ 260.091333][T11279] ? mlock_drain_local+0x254/0x4e0 [ 260.091376][T11279] swap_cache_read_folio+0x47/0x140 [ 260.091421][T11279] swap_cluster_readahead+0x479/0x5f0 [ 260.091470][T11279] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 260.091538][T11279] ? __lock_acquire+0x49f/0x1a40 [ 260.091568][T11279] ? get_vma_policy+0x23d/0x3b0 [ 260.091625][T11279] swapin_readahead+0x159/0x1200 [ 260.091678][T11279] ? __pfx_swapin_readahead+0x10/0x10 [ 260.091728][T11279] ? swap_table_get+0x10d/0x2c0 [ 260.091765][T11279] ? swap_cache_get_folio+0x28d/0x360 [ 260.091804][T11279] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 260.091843][T11279] ? __pfx_softleaf_type+0x10/0x10 [ 260.091888][T11279] ? do_swap_page+0xf98/0x5780 [ 260.091919][T11279] do_swap_page+0xf98/0x5780 [ 260.091981][T11279] ? __pfx_do_swap_page+0x10/0x10 [ 260.092016][T11279] ? __lock_acquire+0x49f/0x1a40 [ 260.092052][T11279] ? lockdep_hardirqs_on+0x78/0x100 [ 260.092112][T11279] ? rcu_is_watching+0x12/0xc0 [ 260.092160][T11279] ? __pte_offset_map+0x179/0x310 [ 260.092224][T11279] __handle_mm_fault+0x192f/0x2a00 [ 260.092285][T11279] ? reacquire_held_locks+0xce/0x1e0 [ 260.092325][T11279] ? __pfx___handle_mm_fault+0x10/0x10 [ 260.092368][T11279] ? lock_vma_under_rcu+0x17c/0x590 [ 260.092427][T11279] handle_mm_fault+0x37b/0xa30 [ 260.092470][T11279] do_user_addr_fault+0x5a3/0x12f0 [ 260.092546][T11279] exc_page_fault+0x6f/0xd0 [ 260.092589][T11279] asm_exc_page_fault+0x26/0x30 [ 260.092622][T11279] RIP: 0033:0x7f897d759214 [ 260.092657][T11279] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae a4 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 [ 260.092688][T11279] RSP: 002b:00007ffe47c42ad0 EFLAGS: 00010246 [ 260.092719][T11279] RAX: 0000000000000000 RBX: 000055556ad29500 RCX: 0000000000000000 [ 260.092739][T11279] RDX: 00007ffe47c42b10 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.092759][T11279] RBP: 00007f897da27da0 R08: 0000000000000000 R09: 0000000000000000 [ 260.092777][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003fbd2 [ 260.092797][T11279] R13: 00007f897da2609c R14: 000000000003f8fd R15: 00007f897da26090 [ 260.092840][T11279] [ 260.093011][T11279] memory: usage 468kB, limit 3072kB, failcnt 20207 [ 260.507088][T11279] memory+swap: usage 616kB, limit 9007199254740988kB, failcnt 0 [ 260.554707][T11279] kmem: usage 420kB, limit 9007199254740988kB, failcnt 0 [ 260.591224][T11279] Memory cgroup stats for /syz3: [ 260.591743][T11279] cache 0 [ 260.615988][T11279] rss 28672 [ 260.637044][T11279] rss_huge 0 [ 260.655071][T11279] shmem 0 [ 260.670230][T11279] mapped_file 0 [ 260.673878][T11279] dirty 0 [ 260.677719][T11279] writeback 0 [ 260.681302][T11279] workingset_refault_anon 503 [ 260.686440][T11279] workingset_refault_file 4123 [ 260.691565][T11279] swap 151552 [ 260.694992][T11279] swapcached 77107200 [ 260.702383][T11279] pgpgin 68833 [ 260.706018][T11279] pgpgout 68823 [ 260.709721][T11279] pgfault 65107 [ 260.715750][T11279] pgmajfault 410 [ 260.722549][T11279] inactive_anon 0 [ 260.731932][T11279] active_anon 40960 [ 260.737922][T11279] inactive_file 0 [ 260.741665][T11279] active_file 0 [ 260.745160][T11279] unevictable 0 [ 260.749118][T11279] hierarchical_memory_limit 3145728 [ 260.754686][T11279] hierarchical_memsw_limit 9223372036854771712 [ 260.763308][T11279] total_cache 0 [ 260.767221][T11279] total_rss 28672 [ 260.770927][T11279] total_rss_huge 0 [ 260.774861][T11279] total_shmem 0 [ 260.778990][T11279] total_mapped_file 0 [ 260.783981][T11279] total_dirty 0 [ 260.789707][T11279] total_writeback 0 [ 260.795402][T11279] total_workingset_refault_anon 503 [ 260.801911][T11279] total_workingset_refault_file 4123 [ 260.807327][T11279] total_swap 151552 [ 260.811392][T11279] total_swapcached 77107200 [ 260.816099][T11279] total_pgpgin 68833 [ 260.820225][T11279] total_pgpgout 68823 [ 260.828794][T11279] total_pgfault 65107 [ 260.834392][T11279] total_pgmajfault 410 [ 260.839309][T11279] total_inactive_anon 0 [ 260.853185][T11279] total_active_anon 40960 [ 260.864388][T11279] total_inactive_file 0 [ 260.884980][T11279] total_active_file 0 [ 260.893777][T11279] total_unevictable 0 [ 260.905030][T11279] anon_cost 0 [ 260.909918][T11279] file_cost 0 [ 260.921218][T11279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2716,pid=11279,uid=0 [ 260.951988][T11279] Memory cgroup out of memory: Killed process 11279 (syz.3.2716) total-vm:102312kB, anon-rss:1272kB, file-rss:22040kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 267.192955][T11583] nvme_fcloop: unknown parameter or missing value '' [ 269.593748][T11679] Process accounting paused [ 269.877909][T11696] overlayfs: "check_copy_up" module option is obsolete [ 270.272385][T11710] nvme_fcloop: unknown parameter or missing value '7' [ 271.244272][T11743] : Can't lookup blockdev [ 271.837706][T11761] random: crng reseeded on system resumption [ 272.364423][T11772] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 272.708963][T11781] : Can't lookup blockdev [ 272.875382][T11785] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 275.135759][T11853] futex_wake_op: syz.0.2985 tries to shift op by -1; fix this program [ 280.391553][T12029] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 280.588803][T12035] bond0: invalid ARP target specified [ 281.566399][T12073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 283.246600][T12139] random: crng reseeded on system resumption [ 284.012756][T12167] queue_state_write: operation too long [ 284.027208][T12167] queue_state_write: use 'run', 'start' or 'kick' [ 284.119767][T12170] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 284.119767][T12170] [ 286.020400][T12244] syz.1.3165 uses obsolete (PF_INET,SOCK_PACKET) [ 286.488115][ T30] audit: type=1804 audit(1843104631.089:20): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3173" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1022 res=1 errno=0 [ 286.867735][T12272] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 289.390607][T12365] block2mtd: illegal erase size [ 289.613875][T12376] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 290.263552][T12399] Setting dangerous option i915.mitigations - tainting kernel [ 292.453669][T12472] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1892a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 292.469658][T12472] Call Trace: [ 292.473000][T12472] [ 292.475988][T12472] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 292.482749][T12472] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 292.489373][T12472] ? debug_object_deactivate+0x2e4/0x3b0 [ 292.495148][T12472] ? smp_call_function+0x71/0x90 [ 292.500185][T12472] mce_cpu_restart+0xd5/0x1f0 [ 292.504954][T12472] ? __pfx_mce_cpu_restart+0x10/0x10 [ 292.510328][T12472] smp_call_function_many_cond+0x153b/0x1870 [ 292.516401][T12472] ? __pfx_mce_cpu_restart+0x10/0x10 [ 292.521785][T12472] ? lockdep_hardirqs_on+0x78/0x100 [ 292.527064][T12472] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.532950][T12472] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 292.539374][T12472] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 292.545464][T12472] ? __timer_delete_sync+0x151/0x1c0 [ 292.550873][T12472] ? __pfx_mce_cpu_restart+0x10/0x10 [ 292.556259][T12472] on_each_cpu_cond_mask+0x40/0x90 [ 292.561469][T12472] set_bank+0x240/0x3a0 [ 292.565709][T12472] ? __pfx_set_bank+0x10/0x10 [ 292.570465][T12472] ? find_held_lock+0x2b/0x80 [ 292.575231][T12472] ? sysfs_file_kobj+0xe4/0x290 [ 292.580162][T12472] ? sysfs_file_kobj+0xe4/0x290 [ 292.585095][T12472] ? __pfx_set_bank+0x10/0x10 [ 292.589886][T12472] dev_attr_store+0x58/0x80 [ 292.594489][T12472] ? __pfx_dev_attr_store+0x10/0x10 [ 292.599764][T12472] sysfs_kf_write+0xf2/0x150 [ 292.604442][T12472] kernfs_fop_write_iter+0x3e0/0x5f0 [ 292.609817][T12472] ? __pfx_sysfs_kf_write+0x10/0x10 [ 292.615182][T12472] vfs_write+0x6ac/0x1050 [ 292.619580][T12472] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 292.625500][T12472] ? __pfx_vfs_write+0x10/0x10 [ 292.630367][T12472] ksys_write+0x12a/0x250 [ 292.634766][T12472] ? __pfx_ksys_write+0x10/0x10 [ 292.639706][T12472] do_syscall_64+0x115/0x840 [ 292.644369][T12472] ? clear_bhb_loop+0x70/0xc0 [ 292.649133][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.655093][T12472] RIP: 0033:0x7f897d79e0d9 [ 292.659573][T12472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.679266][T12472] RSP: 002b:00007f897e744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.687774][T12472] RAX: ffffffffffffffda RBX: 00007f897da25fa0 RCX: 00007f897d79e0d9 [ 292.695814][T12472] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 292.703852][T12472] RBP: 00007f897d835024 R08: 0000000000000000 R09: 0000000000000000 [ 292.712007][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.720041][T12472] R13: 00007f897da26038 R14: 00007f897da25fa0 R15: 00007ffe47c429d8 [ 292.728187][T12472] [ 292.768616][T12439] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 293.086878][T12485] kafs: addr_prefs: Invalid Command [ 294.678787][T12539] ceph: Failed to parse sending metrics switch value 'P^' [ 295.782870][T12572] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 295.819803][T12572] pci 0000:00:01.3: PCI INT A: no GSI [ 296.095571][T12588] mmap: syz.2.3332 (12588): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 296.258828][T12594] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 299.368524][T12716] Setting dangerous option i915.mitigations - tainting kernel [ 299.390666][T12716] Bad "i915.mitigations=,m];", 'm];' is unknown [ 299.501560][T12720] Process accounting resumed [ 299.892724][T12737] bond0: invalid ARP target specified [ 302.321144][T12835] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.027493][T12893] ptp ptp0: only physical clock in use now [ 304.883038][T12925] bdi 7:8: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 305.686239][T12954] ubi0: attaching mtd0 [ 305.796851][T12954] ubi0: scanning is finished [ 305.811308][T12954] ubi0: empty MTD device detected [ 306.122984][T12954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 306.146757][T12954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3967 bytes [ 306.168111][T12954] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 306.187480][T12954] ubi0: VID header offset: 65 (aligned 65), data offset: 129 [ 306.223980][T12954] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 306.249480][T12954] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 306.281716][T12954] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3455210924 [ 306.315234][T12954] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 306.361772][T12963] ubi0: background thread "ubi_bgt0d" started, PID 12963 [ 306.671082][T11940] syz.0.3017 (11940) used greatest stack depth: 17496 bytes left [ 307.402147][T12995] bonding: no command found in bonding_masters - use +ifname or -ifname [ 308.320491][T13031] kafs: addr_prefs: Invalid Command [ 309.888654][T13096] synth uevent: /bus/mei: unknown uevent action string [ 311.127244][T13109] syz.0.3587 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 311.192574][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.0.3587 Tainted: G U syzkaller #0 PREEMPT(full) [ 311.192632][T13109] Tainted: [U]=USER [ 311.192643][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.192663][T13109] Call Trace: [ 311.192673][T13109] [ 311.192686][T13109] dump_stack_lvl+0x100/0x190 [ 311.192732][T13109] dump_header+0xfb/0x606 [ 311.192775][T13109] oom_kill_process.cold+0xd/0x330 [ 311.192817][T13109] out_of_memory+0x340/0x14f0 [ 311.192860][T13109] ? __pfx_out_of_memory+0x10/0x10 [ 311.192905][T13109] mem_cgroup_out_of_memory+0xc6/0x130 [ 311.192948][T13109] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 311.192987][T13109] ? find_held_lock+0x2b/0x80 [ 311.193040][T13109] ? do_raw_spin_unlock+0x145/0x1e0 [ 311.193081][T13109] ? _raw_spin_unlock+0x28/0x50 [ 311.193123][T13109] try_charge_memcg+0x6e5/0xdf0 [ 311.193182][T13109] ? __pfx_try_charge_memcg+0x10/0x10 [ 311.193232][T13109] ? find_held_lock+0x2b/0x80 [ 311.193275][T13109] ? rcu_read_unlock+0x17/0x60 [ 311.193328][T13109] ? rcu_read_unlock+0x17/0x60 [ 311.193383][T13109] ? find_held_lock+0x2b/0x80 [ 311.193435][T13109] ? rcu_read_unlock+0x17/0x60 [ 311.193498][T13109] charge_memcg+0x187/0x1e0 [ 311.193554][T13109] __mem_cgroup_charge+0x2b/0x1c0 [ 311.193592][T13109] do_anonymous_page+0xb53/0x2080 [ 311.193630][T13109] ? rcu_read_unlock+0x2d/0xb0 [ 311.193678][T13109] __handle_mm_fault+0x1d2c/0x2a00 [ 311.193720][T13109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.193765][T13109] ? __pfx___handle_mm_fault+0x10/0x10 [ 311.193805][T13109] ? pte_offset_map_lock+0x174/0x320 [ 311.193853][T13109] ? find_held_lock+0x2b/0x80 [ 311.193910][T13109] ? follow_page_pte+0x4d0/0x13f0 [ 311.193969][T13109] handle_mm_fault+0x37b/0xa30 [ 311.194014][T13109] __get_user_pages+0x1178/0x32a0 [ 311.194081][T13109] ? __pfx___get_user_pages+0x10/0x10 [ 311.194143][T13109] populate_vma_page_range+0x267/0x3f0 [ 311.194201][T13109] ? __pfx_populate_vma_page_range+0x10/0x10 [ 311.194254][T13109] ? __pfx_find_vma_intersection+0x10/0x10 [ 311.194306][T13109] ? do_mmap+0x93f/0x12f0 [ 311.194361][T13109] __mm_populate+0x107/0x3a0 [ 311.194418][T13109] ? __pfx___mm_populate+0x10/0x10 [ 311.194485][T13109] ? up_write+0x2e5/0x5c0 [ 311.194525][T13109] vm_mmap_pgoff+0x37f/0x470 [ 311.194580][T13109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.194649][T13109] ksys_mmap_pgoff+0xe4/0x610 [ 311.194700][T13109] ? kcov_ioctl+0x17a/0x750 [ 311.194750][T13109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.194797][T13109] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.194850][T13109] __x64_sys_mmap+0x125/0x190 [ 311.194899][T13109] do_syscall_64+0x115/0x840 [ 311.194942][T13109] ? clear_bhb_loop+0x70/0xc0 [ 311.194984][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.195019][T13109] RIP: 0033:0x7f2cb0d9e0d9 [ 311.195048][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.195080][T13109] RSP: 002b:00007f2cb1c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.195112][T13109] RAX: ffffffffffffffda RBX: 00007f2cb1025fa0 RCX: 00007f2cb0d9e0d9 [ 311.195133][T13109] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 311.195152][T13109] RBP: 00007f2cb0e35024 R08: 0000000000000002 R09: 0000000000008000 [ 311.195172][T13109] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 311.195191][T13109] R13: 00007f2cb1026038 R14: 00007f2cb1025fa0 R15: 00007ffc9b0a1a58 [ 311.195234][T13109] [ 311.575320][T13109] memory: usage 1024kB, limit 3072kB, failcnt 22251 [ 311.582187][T13109] memory+swap: usage 1128kB, limit 9007199254740988kB, failcnt 0 [ 311.591756][T13109] kmem: usage 356kB, limit 9007199254740988kB, failcnt 0 [ 311.598980][T13109] Memory cgroup stats for /syz0: [ 311.599269][T13109] cache 0 [ 311.607492][T13109] rss 659456 [ 311.610830][T13109] rss_huge 0 [ 311.614882][T13109] shmem 0 [ 311.618022][T13109] mapped_file 0 [ 311.621564][T13109] dirty 0 [ 311.624686][T13109] writeback 0 [ 311.628260][T13109] workingset_refault_anon 1060 [ 311.633698][T13109] workingset_refault_file 6061 [ 311.638677][T13109] swap 106496 [ 311.642092][T13109] swapcached 84557824 [ 311.646122][T13109] pgpgin 86733 [ 311.649715][T13109] pgpgout 87591 [ 311.655490][T13109] pgfault 90012 [ 311.660008][T13109] pgmajfault 431 [ 311.663726][T13109] inactive_anon 573440 [ 311.667853][T13109] active_anon 0 [ 311.671896][T13109] inactive_file 0 [ 311.675818][T13109] active_file 0 [ 311.679395][T13109] unevictable 0 [ 311.683101][T13109] hierarchical_memory_limit 3145728 [ 311.688379][T13109] hierarchical_memsw_limit 9223372036854771712 [ 311.694855][T13109] total_cache 0 [ 311.698365][T13109] total_rss 659456 [ 311.702775][T13109] total_rss_huge 0 [ 311.706713][T13109] total_shmem 0 [ 311.710230][T13109] total_mapped_file 0 [ 311.714420][T13109] total_dirty 0 [ 311.718224][T13109] total_writeback 0 [ 311.722299][T13109] total_workingset_refault_anon 1060 [ 311.727646][T13109] total_workingset_refault_file 6061 [ 311.733131][T13109] total_swap 106496 [ 311.742805][T13109] total_swapcached 84557824 [ 311.750602][T13142] Scaler: ================= START STATUS ================= [ 311.782319][T13109] total_pgpgin 86733 [ 311.786942][T13109] total_pgpgout 87591 [ 311.791749][T13109] total_pgfault 90012 [ 311.796325][T13109] total_pgmajfault 431 [ 311.801459][T13109] total_inactive_anon 573440 [ 311.804122][T13142] Scaler: ================== END STATUS ================== [ 311.806302][T13109] total_active_anon 0 [ 311.820250][T13109] total_inactive_file 0 [ 311.824476][T13109] total_active_file 0 [ 311.828553][T13109] total_unevictable 0 [ 311.832737][T13109] anon_cost 0 [ 311.836163][T13109] file_cost 0 [ 311.839501][T13109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3587,pid=13108,uid=0 [ 311.857153][T13109] Memory cgroup out of memory: Killed process 13108 (syz.0.3587) total-vm:108400kB, anon-rss:1784kB, file-rss:21460kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 312.246515][T13161] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 313.728883][T13221] syz.2.3643 (13221): /proc/13220/oom_adj is deprecated, please use /proc/13220/oom_score_adj instead. [ 316.398447][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.408236][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.106235][T13362] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 317.475671][T13382] ICMPv6: process `syz.3.3721' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 318.063338][T13407] ICMPv6: process `syz.2.3732' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 318.730186][T13433] sysfs_service_op_store: Client not running :-5: [ 318.823594][T13425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.535495][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 320.545365][ T189] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 320.804000][T13520] vhci_hcd: not connected 4 [ 321.082027][T13531] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 321.529078][T13553] qrtr: Invalid version 13 [ 322.603920][ T189] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 322.604608][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 322.823778][T13599] zswap: compressor F(_ not available [ 322.936005][T13615] hub 27-0:1.0: USB hub found [ 322.943292][T13615] hub 27-0:1.0: 1 port detected [ 324.553818][T13686] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 324.585133][T13686] CIFS mount error: No usable UNC path provided in device string! [ 324.585133][T13686] [ 324.612208][T13686] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 324.735330][T13691] i2c i2c-0: new_device: Missing parameters [ 327.138687][T13796] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 327.154908][T13796] net gretap0: uevent: failed to send synthetic uevent: -22 [ 328.343980][T13848] kAFS: Invalid Command on /proc/fs/afs/cells file [ 328.488342][T13856] binder: binder_mmap: 13855 0-1000 bad vm_flags failed -1 [ 328.631477][T13862] syz.2.3955 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.392516][T13897] process 'syz.0.3971' launched '/dev/fd/3' with NULL argv: empty string added [ 329.505192][T13900] Process accounting paused [ 330.000729][ T5744] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 330.008546][ T5744] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 330.341004][T13938] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 330.400016][T13938] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 330.718869][T13951] bond0: no command found in slaves file - use +ifname or -ifname [ 331.100840][T13971] kAFS: Invalid Command on /proc/fs/afs/cells file [ 331.230507][T13977] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 331.428220][T13984] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.446388][T13984] vhci_hcd vhci_hcd.2: invalid port number 0 [ 331.607759][T13995] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 332.287751][T14020] Invalid input. Must be >= 4608 [ 332.862672][ T5744] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 332.870521][ T5744] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 333.681773][T14084] writes to the poll attribute are ignored. [ 333.691554][T14084] please use driver specific parameters instead. [ 334.017223][ T5744] Bluetooth: hci3: unexpected event 0x12 length: 13 > 8 [ 334.019329][T14098] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 334.054419][T14098] cec cec26: uevent: failed to send synthetic uevent: -22 [ 336.362425][ T5744] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 336.370009][ T5744] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 337.213531][T14232] program syz.0.4130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.608297][T14298] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 338.610348][T14295] ima: policy update failed [ 338.646591][ T5744] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 338.648298][ T30] audit: type=1802 audit(1843104683.521:21): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4162" res=0 errno=0 [ 338.657128][ T5744] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 342.250835][T14401] syz.3.4203 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 342.312414][T14401] CPU: 1 UID: 0 PID: 14401 Comm: syz.3.4203 Tainted: G U syzkaller #0 PREEMPT(full) [ 342.312466][T14401] Tainted: [U]=USER [ 342.312477][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.312502][T14401] Call Trace: [ 342.312513][T14401] [ 342.312524][T14401] dump_stack_lvl+0x100/0x190 [ 342.312569][T14401] dump_header+0xfb/0x606 [ 342.312605][T14401] oom_kill_process.cold+0xd/0x330 [ 342.312644][T14401] out_of_memory+0x340/0x14f0 [ 342.312682][T14401] ? __pfx_out_of_memory+0x10/0x10 [ 342.312725][T14401] mem_cgroup_out_of_memory+0xc6/0x130 [ 342.312765][T14401] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 342.312801][T14401] ? find_held_lock+0x2b/0x80 [ 342.312850][T14401] ? do_raw_spin_unlock+0x145/0x1e0 [ 342.312895][T14401] ? _raw_spin_unlock+0x28/0x50 [ 342.312932][T14401] try_charge_memcg+0x6e5/0xdf0 [ 342.312991][T14401] ? __pfx_try_charge_memcg+0x10/0x10 [ 342.313038][T14401] ? find_held_lock+0x2b/0x80 [ 342.313077][T14401] ? rcu_read_unlock+0x17/0x60 [ 342.313127][T14401] ? rcu_read_unlock+0x17/0x60 [ 342.313181][T14401] ? find_held_lock+0x2b/0x80 [ 342.313225][T14401] ? rcu_read_unlock+0x17/0x60 [ 342.313287][T14401] charge_memcg+0x187/0x1e0 [ 342.313342][T14401] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 342.313384][T14401] swap_cache_alloc_folio+0x548/0xc50 [ 342.313435][T14401] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 342.313481][T14401] ? swap_cache_get_folio+0x28d/0x360 [ 342.313529][T14401] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 342.313570][T14401] ? find_held_lock+0x2b/0x80 [ 342.313611][T14401] ? mlock_drain_local+0x254/0x4e0 [ 342.313648][T14401] ? mlock_drain_local+0x254/0x4e0 [ 342.313692][T14401] swap_cache_read_folio+0x47/0x140 [ 342.313739][T14401] swap_cluster_readahead+0x387/0x5f0 [ 342.313789][T14401] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 342.313827][T14401] ? __css_rstat_updated+0x1ce/0x5a0 [ 342.313901][T14401] ? __lock_acquire+0x49f/0x1a40 [ 342.313931][T14401] ? get_vma_policy+0x23d/0x3b0 [ 342.313989][T14401] swapin_readahead+0x159/0x1200 [ 342.314038][T14401] ? __pfx_swapin_readahead+0x10/0x10 [ 342.314092][T14401] ? swap_table_get+0x10d/0x2c0 [ 342.314125][T14401] ? swap_cache_get_folio+0x28d/0x360 [ 342.314161][T14401] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 342.314199][T14401] ? __pfx_softleaf_type+0x10/0x10 [ 342.314244][T14401] ? do_swap_page+0xf98/0x5780 [ 342.314275][T14401] do_swap_page+0xf98/0x5780 [ 342.314330][T14401] ? __pfx_do_swap_page+0x10/0x10 [ 342.314364][T14401] ? __lock_acquire+0x49f/0x1a40 [ 342.314401][T14401] ? rcu_is_watching+0x12/0xc0 [ 342.314442][T14401] ? __pte_offset_map+0x179/0x310 [ 342.314604][T14401] __handle_mm_fault+0x192f/0x2a00 [ 342.314656][T14401] ? reacquire_held_locks+0xce/0x1e0 [ 342.314688][T14401] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.314729][T14401] ? lock_vma_under_rcu+0x17c/0x590 [ 342.314789][T14401] handle_mm_fault+0x37b/0xa30 [ 342.314832][T14401] do_user_addr_fault+0x5a3/0x12f0 [ 342.314891][T14401] exc_page_fault+0x6f/0xd0 [ 342.314934][T14401] asm_exc_page_fault+0x26/0x30 [ 342.314977][T14401] RIP: 0033:0x7f897d66b95e [ 342.315006][T14401] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 a8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 56 c4 3b 00 85 c0 0f 8e 53 fd ff ff 2d 7f fe ff 49 39 c4 73 88 48 8d 1d 31 a6 3b 00 83 3d 36 c4 3b [ 342.315037][T14401] RSP: 002b:00007ffe47c42b40 EFLAGS: 00010202 [ 342.315063][T14401] RAX: 0000000000000001 RBX: 00007f897da27da0 RCX: 000055556ad29808 [ 342.315099][T14401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.315118][T14401] RBP: 00007f897da27da0 R08: 0000000000000000 R09: 0000000000000000 [ 342.315137][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000053d53 [ 342.315156][T14401] R13: 00007f897da2609c R14: 0000000000053a86 R15: 00007f897da26090 [ 342.315198][T14401] [ 342.589984][T14401] memory: usage 3072kB, limit 3072kB, failcnt 22711 [ 342.817395][T14401] memory+swap: usage 868kB, limit 9007199254740988kB, failcnt 0 [ 342.858315][T14401] kmem: usage 396kB, limit 9007199254740988kB, failcnt 0 [ 342.877841][T14401] Memory cgroup stats for /syz3: [ 342.878065][T14401] cache 0 [ 342.886227][T14401] rss 28672 [ 342.893844][T14401] rss_huge 0 [ 342.897124][T14401] shmem 0 [ 342.900288][T14401] mapped_file 0 [ 342.903785][T14401] dirty 0 [ 342.906847][T14401] writeback 0 [ 342.910221][T14401] workingset_refault_anon 721 [ 342.914948][T14401] workingset_refault_file 4139 [ 342.919839][T14401] swap 147456 [ 342.923192][T14401] swapcached 83648512 [ 342.927219][T14401] pgpgin 87546 [ 342.930734][T14401] pgpgout 90600 [ 342.936406][T14401] pgfault 109783 [ 342.942381][T14401] pgmajfault 519 [ 342.961834][T14401] inactive_anon 28672 [ 342.973555][T14401] active_anon 20480 [ 342.984991][T14401] inactive_file 0 [ 342.996781][T14401] active_file 0 [ 343.008012][T14401] unevictable 0 [ 343.017756][T14401] hierarchical_memory_limit 3145728 [ 343.026480][T14401] hierarchical_memsw_limit 9223372036854771712 [ 343.042226][T14401] total_cache 0 [ 343.051216][T14401] total_rss 28672 [ 343.067281][T14401] total_rss_huge 0 [ 343.071191][T14401] total_shmem 0 [ 343.080098][T14401] total_mapped_file 0 [ 343.088322][T14401] total_dirty 0 [ 343.096615][T14401] total_writeback 0 [ 343.105170][T14401] total_workingset_refault_anon 721 [ 343.114942][T14401] total_workingset_refault_file 4139 [ 343.126671][T14401] total_swap 147456 [ 343.126692][T14401] total_swapcached 83648512 [ 343.126707][T14401] total_pgpgin 87546 [ 343.126720][T14401] total_pgpgout 90600 [ 343.126734][T14401] total_pgfault 109783 [ 343.126748][T14401] total_pgmajfault 519 [ 343.126761][T14401] total_inactive_anon 28672 [ 343.126775][T14401] total_active_anon 20480 [ 343.126789][T14401] total_inactive_file 0 [ 343.126802][T14401] total_active_file 0 [ 343.126815][T14401] total_unevictable 0 [ 343.126828][T14401] anon_cost 0 [ 343.126840][T14401] file_cost 0 [ 343.126853][T14401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4203,pid=14401,uid=0 [ 343.128188][T14401] Memory cgroup out of memory: Killed process 14401 (syz.3.4203) total-vm:104360kB, anon-rss:1272kB, file-rss:21592kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 347.036611][T14610] phram: not enough arguments [ 347.408751][ T50] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 347.420548][ T50] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 347.890878][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 349.982621][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 352.060147][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 353.349070][T14874] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 354.974117][T14952] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.985120][T14952] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 355.400401][T14974] TCP: TCP_TX_DELAY enabled [ 355.917386][T14989] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 356.606347][T15017] ima: policy update failed [ 356.613552][ T30] audit: type=1802 audit(1843104701.584:22): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4491" res=0 errno=0 [ 359.466174][T15140] Process accounting resumed [ 359.951753][T15158] ubi: mtd0 is already attached to ubi0 [ 360.163290][T15170] dyndbg: expected <4096 bytes into control [ 361.399216][T15220] smpboot: CPU 1 is now offline [ 365.538958][ T5744] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 366.619978][ T30] audit: type=1800 audit(1843104711.636:23): pid=15376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4664" name="members" dev="configfs" ino=39466 res=0 errno=0 [ 367.070095][T15390] usbip-vudc usbip-vudc.0: gadget not bound [ 367.571519][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 369.642817][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 370.397530][T15506] bond0: invalid ARP target specified [ 372.730826][T15577] block2mtd: parameter too long [ 372.968218][T15584] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 373.049285][T15584] ep_00: uevent: failed to send synthetic uevent: -22 [ 374.442609][T15633] block2mtd: illegal erase size [ 375.858670][T15673] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 376.249245][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.259729][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.186998][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.594443][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.043693][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.301807][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.361741][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.379698][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.394815][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.407057][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.415023][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.749042][T15722] block2mtd: too many arguments [ 379.091151][T15729] vhci_hcd vhci_hcd.0: invalid port number 13 [ 379.138250][T15729] vhci_hcd vhci_hcd.0: invalid port number 13 [ 380.463380][ T50] Bluetooth: hci0: command tx timeout [ 380.647986][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.674639][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.698759][T15711] bridge_slave_0: entered allmulticast mode [ 380.732398][T15711] bridge_slave_0: entered promiscuous mode [ 380.763748][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.781574][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.803210][T15711] bridge_slave_1: entered allmulticast mode [ 380.830893][T15711] bridge_slave_1: entered promiscuous mode [ 380.953833][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.002773][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.146254][T15711] team0: Port device team_slave_0 added [ 381.186055][T15711] team0: Port device team_slave_1 added [ 381.320338][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.343105][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.421874][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.449512][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.474866][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.563994][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.752405][T15711] hsr_slave_0: entered promiscuous mode [ 381.774998][T15711] hsr_slave_1: entered promiscuous mode [ 381.797480][T15711] debugfs: 'hsr0' already exists in 'hsr' [ 381.815223][T15711] Cannot create hsr debugfs directory [ 382.537587][ T50] Bluetooth: hci0: command tx timeout [ 382.881448][T15711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.944242][T15711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.976450][T15711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.024046][T15711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.057138][T15711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.105555][T15711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.132510][T15711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.189888][T15711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.521759][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.610888][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.678172][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.685469][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.753402][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.760610][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.601588][ T50] Bluetooth: hci0: command tx timeout [ 384.895636][T15841] rnbd_client L213: map_device: Parameters missing [ 384.937313][T15843] bond0: no command found in slaves file - use +ifname or -ifname [ 385.262905][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.157739][T15711] veth0_vlan: entered promiscuous mode [ 386.200971][T15711] veth1_vlan: entered promiscuous mode [ 386.359244][T15711] veth0_macvtap: entered promiscuous mode [ 386.393491][T15711] veth1_macvtap: entered promiscuous mode [ 386.471114][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.519701][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.618182][T15877] tipc: Can't bind to reserved service type 63 [ 386.651748][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.671046][ T50] Bluetooth: hci0: command tx timeout [ 386.711394][ T156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.774587][ T156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.822875][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.096168][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.136888][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.329080][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.365815][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.606937][T15711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 388.250839][T15904] program syz.4.4902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.869230][T15941] bond0: option packets_per_slave: invalid value ( Xnp) [ 389.893577][T15941] bond0: option packets_per_slave: allowed values 0 - 65535 [ 392.999680][ T5739] Process accounting paused [ 393.542791][T16008] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.564582][T16008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.575244][T16008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.592018][T16008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.606177][T16008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.664807][T15991] Bluetooth: hci4: command tx timeout [ 396.433387][T16075] program syz.0.4973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.608810][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.644980][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.672321][T16006] bridge_slave_0: entered allmulticast mode [ 396.700398][T16006] bridge_slave_0: entered promiscuous mode [ 396.737462][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.770009][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.809614][T16006] bridge_slave_1: entered allmulticast mode [ 396.854144][T16006] bridge_slave_1: entered promiscuous mode [ 397.022803][T16006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.103126][T16006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.321693][T16006] team0: Port device team_slave_0 added [ 397.393398][T16006] team0: Port device team_slave_1 added [ 397.559622][T16006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.597052][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.731146][T16006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.746023][T15991] Bluetooth: hci4: command tx timeout [ 397.809294][T16006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.861561][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.003810][T16006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.303989][T16006] hsr_slave_0: entered promiscuous mode [ 398.321581][T16006] hsr_slave_1: entered promiscuous mode [ 398.338261][T16006] debugfs: 'hsr0' already exists in 'hsr' [ 398.353497][T16006] Cannot create hsr debugfs directory [ 399.113890][T16116] i2c i2c-0: new_device: Can't parse I2C address [ 399.522475][T16006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.588450][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.620380][T16006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.668847][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.719472][T16006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.788100][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.803655][T15991] Bluetooth: hci4: command tx timeout [ 399.837279][T16006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.890685][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.275619][T16006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.400399][T16006] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.480759][T15993] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.487944][T15993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.581980][T15993] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.589327][T15993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.962733][ T30] audit: type=1800 audit(1843104746.165:24): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5009" name="discovery_nqn" dev="configfs" ino=42849 res=0 errno=0 [ 401.873325][T15991] Bluetooth: hci4: command tx timeout [ 402.073198][T16006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.894416][T16006] veth0_vlan: entered promiscuous mode [ 402.949365][T16006] veth1_vlan: entered promiscuous mode [ 403.089771][T16006] veth0_macvtap: entered promiscuous mode [ 403.130441][T16006] veth1_macvtap: entered promiscuous mode [ 403.200728][T16006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.283024][T16006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.365683][T16013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.403896][T16013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.439025][T16013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.573284][T16013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.899545][T15994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.931690][T15994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.076953][T16013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.113066][T16013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.129280][T16276] ima: policy update failed [ 407.154429][ T30] audit: type=1802 audit(1843104752.377:25): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5060" res=0 errno=0 [ 408.109038][T16303] ima: policy update failed [ 408.140395][ T30] audit: type=1802 audit(1843104753.382:26): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5073" res=0 errno=0 [ 411.076093][T16374] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 411.663382][T16386] capability: warning: `syz.4.5113' uses deprecated v2 capabilities in a way that may be insecure [ 416.570975][T16497] kafs: addr_prefs: Invalid Command [ 417.962901][T16523] ecryptfs_parse_packet_length: Error parsing packet length [ 417.999457][T16523] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 418.621498][ T30] audit: type=1800 audit(1843104763.906:27): pid=16533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5187" name="lu_gp_id" dev="configfs" ino=44352 res=0 errno=0 [ 419.378236][T16552] vhci_hcd vhci_hcd.2: invalid port number 16 [ 419.400867][T16552] vhci_hcd vhci_hcd.2: invalid port number 16 [ 419.683069][ T30] audit: type=1800 audit(1843104764.972:28): pid=16558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5197" name="lu_gp_id" dev="configfs" ino=44427 res=0 errno=0 [ 421.226638][T16598] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 424.234401][T16651] hub 1-0:1.0: USB hub found [ 424.282753][T16651] hub 1-0:1.0: 1 port detected [ 426.797117][T16715] CIFS mount error: No usable UNC path provided in device string! [ 426.797117][T16715] [ 426.839256][T16715] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 427.612506][T16734] bonding:  is being created... [ 430.534096][ T5276] 8021q: adding VLAN 0 to HW filter on device  [ 430.574636][T16791] bond0: option fail_over_mac: invalid value () [ 430.970186][T16801] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 431.377591][T16810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 431.418985][T16810] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 431.462344][T16810] memcg:ffff888078800811 [ 431.480324][T16810] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 431.518203][T16810] page_type: f5(slab) [ 431.534241][T16810] raw: 00fff00000000040 ffff88813fe2a3c0 dead000000000100 dead000000000122 [ 431.574645][T16810] raw: 0000000000000000 0000100000080008 00000000f5000000 ffff888078800811 [ 431.606760][T16810] head: 00fff00000000040 ffff88813fe2a3c0 dead000000000100 dead000000000122 [ 431.653624][T16810] head: 0000000000000000 0000100000080008 00000000f5000000 ffff888078800811 [ 431.699226][T16810] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 431.733606][T16810] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 431.767148][T16810] page dumped because: unmovable page [ 431.785497][T16810] page_owner tracks the page as allocated [ 431.850653][T16810] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5738, tgid 5738 (syz-executor), ts 382626003011, free_ts 382617844855 [ 431.954475][T16810] post_alloc_hook+0xfd/0x120 [ 431.977940][T16810] get_page_from_freelist+0xf48/0x3530 [ 431.996142][T16810] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 432.024554][T16810] new_slab+0xa2/0x640 [ 432.039662][T16810] refill_objects+0xe3/0x410 [ 432.077997][T16810] __pcs_replace_empty_main+0x376/0x680 [ 432.097596][T16810] __kvmalloc_node_noprof+0x793/0x970 [ 432.116543][T16810] alloc_fdtable+0x110/0x2d0 [ 432.129597][T16810] dup_fd+0x995/0xd10 [ 432.176590][T16810] copy_process+0x2c9c/0x8210 [ 432.207056][T16810] kernel_clone+0x176/0x9d0 [ 432.236523][T16810] __do_sys_clone+0xd9/0x120 [ 432.256151][T16810] do_syscall_64+0x115/0x840 [ 432.270903][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.308140][T16810] page last free pid 156 tgid 156 stack trace: [ 432.342492][T16810] __free_frozen_pages+0x79f/0x1090 [ 432.369430][T16810] page_frag_free+0x199/0x1f0 [ 432.401051][T16810] skb_free_head+0x9a/0x160 [ 432.436144][T16810] skb_release_data+0x6c5/0x8e0 [ 432.460709][T16810] consume_skb+0xc4/0x110 [ 432.489054][T16810] batadv_forw_packet_free+0x1c8/0x250 [ 432.519067][T16810] batadv_iv_send_outstanding_bat_ogm_packet+0x275/0x800 [ 432.550641][T16810] process_one_work+0xa23/0x1940 [ 432.572819][T16810] worker_thread+0x5ef/0xe50 [ 432.594770][T16810] kthread+0x370/0x450 [ 432.616405][T16810] ret_from_fork+0x72b/0xd50 [ 432.641145][T16810] ret_from_fork_asm+0x1a/0x30 [ 436.049362][T16890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.474729][T16890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.632045][T16890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.815208][T16890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.117973][T16912] ecryptfs_miscdev_write: Invalid packet size [102] [ 438.644491][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.655343][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.497527][T16970] page: refcount:2 mapcount:0 mapping:ffff888022f8fc00 index:0x4621 pfn:0x78299 [ 439.521867][T16970] memcg:ffff88807e275300 [ 439.532269][T16970] aops:shmem_aops ino:167c dentry name(?):"core" [ 439.556332][T16970] flags: 0xfff0000002001c(referenced|uptodate|dirty|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 439.592200][T16970] raw: 00fff0000002001c ffffea000152f588 ffffea0001c61348 ffff888022f8fc00 [ 439.613158][T16970] raw: 0000000000004621 0000000000000000 00000002ffffffff ffff88807e275300 [ 439.632865][T16970] page dumped because: unmovable page [ 439.647416][T16970] page_owner tracks the page as allocated [ 439.662980][T16970] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 15716, tgid 15716 (syz.3.4830), ts 430290999520, free_ts 430201940665 [ 439.723267][T16970] post_alloc_hook+0xfd/0x120 [ 439.731747][T16970] get_page_from_freelist+0xf48/0x3530 [ 439.742393][T16970] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 439.757008][T16970] alloc_pages_mpol+0x1fb/0x540 [ 439.768816][T16970] folio_alloc_mpol_noprof+0x36/0x260 [ 439.779616][T16970] shmem_alloc_folio+0x135/0x160 [ 439.807152][T16970] shmem_alloc_and_add_folio+0x371/0xd40 [ 439.822877][T16970] shmem_get_folio_gfp+0x6ad/0x1910 [ 439.838864][T16970] shmem_write_begin+0x1a4/0x420 [ 439.849606][T16970] generic_perform_write+0x292/0xa40 [ 439.862145][T16970] shmem_file_write_iter+0x10e/0x140 [ 439.873688][T16970] __kernel_write_iter+0x2ac/0x930 [ 439.889571][T16970] dump_user_range+0x3f9/0xad0 [ 439.898820][T16970] elf_core_dump+0x2d68/0x3d20 [ 439.911667][T16970] vfs_coredump+0x281a/0x54a0 [ 439.935452][T16970] get_signal+0x1f2a/0x21e0 [ 439.952903][T16970] page last free pid 16787 tgid 16786 stack trace: [ 439.969185][T16970] free_unref_folios+0xa44/0x1710 [ 439.981636][T16970] folios_put_refs+0x585/0xaa0 [ 439.991709][T16970] free_pages_and_swap_cache+0x30b/0x3b0 [ 440.008270][T16970] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 440.026781][T16970] tlb_finish_mmu+0x1b0/0x810 [ 440.041861][T16970] exit_mmap+0x454/0xa00 [ 440.060606][T16970] __mmput+0x12a/0x410 [ 440.081078][T16970] mmput+0x67/0x80 [ 440.099138][T16970] do_exit+0x8b1/0x2ae0 [ 440.122341][T16970] do_group_exit+0xd5/0x2a0 [ 440.141729][T16970] get_signal+0x1ec7/0x21e0 [ 440.161414][T16970] arch_do_signal_or_restart+0x91/0x7a0 [ 440.186774][T16970] exit_to_user_mode_loop+0x139/0x700 [ 440.211201][T16970] do_syscall_64+0x652/0x840 [ 440.242569][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.750982][T17043] kAFS: Invalid Command on /proc/fs/afs/cells file [ 444.550995][T17082] block2mtd: Using custom MTD label '' for dev [ 444.582934][T17082] block2mtd: error: cannot open device [ 448.220714][T15991] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 451.301211][T17236] kAFS: unparsable volume name [ 454.050745][T17297] syz_tun: tun_chr_ioctl cmd 1074025681 [ 461.574425][T17448] syz_tun: tun_chr_ioctl cmd 2147767511 [ 461.785347][T17460] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 462.425116][T17475] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 466.782401][T17581] i2c i2c-0: delete_device: Can't find device in list [ 467.374048][T17596] synth uevent: /module/null_blk: unknown uevent action string [ 467.954742][ T30] audit: type=1800 audit(4294967323.410:29): pid=17609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5683" name="members" dev="configfs" ino=47638 res=0 errno=0 [ 468.781019][T17623] vmstat_refresh: nr_hugetlb -6144 [ 468.786924][T15991] Bluetooth: hci3: unexpected event 0x35 length: 725 > 6 [ 469.618180][T17651] mmap: syz.4.5705 (17651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 469.657548][T17652] vmstat_refresh: nr_hugetlb -6144 [ 470.432530][T17672] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 471.363622][T17700] ecryptfs_miscdev_write: Error while inspecting packet size [ 472.169919][T17722] vhci_hcd: not connected 4 [ 475.253030][T17813] kernel profiling enabled (shift: 7) [ 476.229213][T17840] Setting dangerous option i915.mitigations - tainting kernel [ 478.299888][T17902] i2c i2c-0: delete_device: Extra parameters [ 479.007509][ T30] audit: type=1400 audit(4294967334.517:30): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17919 comm="syz.0.5839" [ 479.685736][T17937] blkio.reset_stats is deprecated [ 480.205032][T17951] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 480.571560][T17957] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17957] [ 481.051451][ T189] Process accounting resumed [ 486.042061][T18105] syz_tun: tun_chr_ioctl cmd 2147767521 [ 486.289599][T18111] usb usb16: usbfs: process 18111 (syz.5.5931) did not claim interface 0 before use [ 486.588362][T18120] cifs: Unknown parameter 'knjeRaBt$Mi' [ 487.225877][T18142] : Can't lookup blockdev [ 488.856487][T18183] kAFS: Invalid Command on /proc/fs/afs/cells file [ 489.007536][T18187] ima: policy update failed [ 489.036654][ T30] audit: type=1802 audit(4294967344.599:31): pid=18187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5968" res=0 errno=0 [ 489.281385][T18193] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 489.281385][T18193] M' is too long [ 489.332587][T18193] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 489.332587][T18193] W ' is too long [ 490.316654][T18222] cougar: G6 mapped to space [ 491.600053][T18250] could not allocate digest TFM handle [ 494.342587][T18328] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 494.780752][T18338] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 495.976891][T18373] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 498.389094][T18436] netlink: zone id is out of range [ 498.690066][T18444] Sensor A: ================= START STATUS ================= [ 498.753953][T18444] Sensor A: Test Pattern: 75% Colorbar [ 498.785823][T18444] Sensor A: Show Information: All [ 498.823436][T18444] Sensor A: Vertical Flip: false [ 498.853591][T18444] Sensor A: Horizontal Flip: false [ 498.894417][T18444] Sensor A: Brightness: 128 [ 498.927318][T18444] Sensor A: Contrast: 128 [ 498.955085][T18444] Sensor A: Hue: 0 [ 498.973768][T18444] Sensor A: Saturation: 128 [ 498.995587][T18444] Sensor A: Pixel Rate: 160000000 [ 499.041229][T18444] Sensor A: Horizontal Blanking: 800 [ 499.072633][T18444] Sensor A: Vertical Blanking: 3223 [ 499.110757][T18444] Sensor A: ================== END STATUS ================== [ 499.212232][T18454] netlink: 'syz.3.6096': attribute type 1 has an invalid length. [ 499.778985][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.787635][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.834619][T15991] Bluetooth: hci0: command 0x0406 tx timeout [ 502.959226][T18531] netlink: 'syz.4.6132': attribute type 2 has an invalid length. [ 503.486090][T18541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 505.138277][T18575] vmstat_refresh: nr_hugetlb -6144 [ 507.284775][T18624] netlink: 'syz.5.6174': attribute type 11 has an invalid length. [ 507.333398][T18624] netlink: 'syz.5.6174': attribute type 11 has an invalid length. [ 507.375376][T18624] netlink: 'syz.5.6174': attribute type 11 has an invalid length. [ 507.420419][T18624] netlink: 'syz.5.6174': attribute type 11 has an invalid length. [ 508.735248][T18651] Zero length message leads to an empty skb [ 512.010721][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6219'. [ 512.231950][T18726] netlink: set zone limit has 4 unknown bytes [ 514.026312][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6245'. [ 514.869534][T18804] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 515.713225][T18823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6268'. [ 516.931552][T18850] openvswitch: netlink: IP tunnel TTL not specified. [ 517.119119][T15991] Bluetooth: hci4: command 0x0406 tx timeout [ 518.797077][T18901] FAULT_INJECTION: forcing a failure. [ 518.797077][T18901] name failslab, interval 1, probability 0, space 0, times 1 [ 518.842104][T18901] CPU: 0 UID: 0 PID: 18901 Comm: syz.5.6306 Tainted: G U L syzkaller #0 PREEMPT(full) [ 518.842147][T18901] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 518.842156][T18901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.842174][T18901] Call Trace: [ 518.842182][T18901] [ 518.842191][T18901] dump_stack_lvl+0x100/0x190 [ 518.842229][T18901] should_fail_ex.cold+0x5/0xa [ 518.842291][T18901] should_failslab+0xc2/0x120 [ 518.842330][T18901] __kmalloc_noprof+0xfc/0x820 [ 518.842364][T18901] ? alloc_pipe_info+0x1ec/0x590 [ 518.842399][T18901] alloc_pipe_info+0x1ec/0x590 [ 518.842431][T18901] create_pipe_files+0x8c/0x970 [ 518.842465][T18901] do_pipe2+0xbd/0x1e0 [ 518.842494][T18901] ? __pfx_do_pipe2+0x10/0x10 [ 518.842523][T18901] ? xfd_validate_state+0x129/0x190 [ 518.842562][T18901] __x64_sys_pipe2+0x54/0x80 [ 518.842592][T18901] do_syscall_64+0x115/0x840 [ 518.842627][T18901] ? clear_bhb_loop+0x70/0xc0 [ 518.842657][T18901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.842683][T18901] RIP: 0033:0x7fb50cf9e0d9 [ 518.842703][T18901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.842727][T18901] RSP: 002b:00007fb50dd92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 518.842753][T18901] RAX: ffffffffffffffda RBX: 00007fb50d225fa0 RCX: 00007fb50cf9e0d9 [ 518.842769][T18901] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 518.842784][T18901] RBP: 00007fb50d035024 R08: 0000000000000000 R09: 0000000000000000 [ 518.842798][T18901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.842813][T18901] R13: 00007fb50d226038 R14: 00007fb50d225fa0 R15: 00007fff7275b6f8 [ 518.842842][T18901] [ 519.127683][T18905] ======================================================= [ 519.127683][T18905] WARNING: The mand mount option has been deprecated and [ 519.127683][T18905] and is ignored by this kernel. Remove the mand [ 519.127683][T18905] option from the mount to silence this warning. [ 519.127683][T18905] ======================================================= [ 519.722252][T18923] netlink: 'syz.5.6316': attribute type 1 has an invalid length. [ 520.722812][T18953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 521.184000][T18967] openvswitch: netlink: Flow key attribute not present in set flow. [ 521.494208][T18973] netlink: 206 bytes leftover after parsing attributes in process `syz.4.6341'. [ 521.961531][T18984] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.896476][T19065] openvswitch: netlink: IP tunnel TTL not specified. [ 525.448135][T19083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 525.902512][T19093] openvswitch: netlink: IP tunnel TTL not specified. [ 526.949038][T19125] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 527.837082][T19152] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 528.399445][T19148] syz.3.6425 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 528.491393][T19148] CPU: 0 UID: 0 PID: 19148 Comm: syz.3.6425 Tainted: G U L syzkaller #0 PREEMPT(full) [ 528.491433][T19148] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 528.491442][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.491456][T19148] Call Trace: [ 528.491464][T19148] [ 528.491472][T19148] dump_stack_lvl+0x100/0x190 [ 528.491507][T19148] dump_header+0xfb/0x606 [ 528.491535][T19148] oom_kill_process.cold+0xd/0x330 [ 528.491564][T19148] out_of_memory+0x340/0x14f0 [ 528.491594][T19148] ? __pfx_out_of_memory+0x10/0x10 [ 528.491626][T19148] mem_cgroup_out_of_memory+0xc6/0x130 [ 528.491655][T19148] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 528.491683][T19148] ? find_held_lock+0x2b/0x80 [ 528.491721][T19148] ? do_raw_spin_unlock+0x145/0x1e0 [ 528.491750][T19148] ? _raw_spin_unlock+0x28/0x50 [ 528.491863][T19148] try_charge_memcg+0x6e5/0xdf0 [ 528.491906][T19148] ? __pfx_try_charge_memcg+0x10/0x10 [ 528.491944][T19148] ? find_held_lock+0x2b/0x80 [ 528.491974][T19148] ? rcu_read_unlock+0x17/0x60 [ 528.492012][T19148] ? rcu_read_unlock+0x17/0x60 [ 528.492059][T19148] obj_cgroup_charge_pages+0x22/0x1d0 [ 528.492100][T19148] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 528.492144][T19148] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 528.492176][T19148] ? ktime_get+0x1a4/0x320 [ 528.492203][T19148] ? lapic_next_event+0x10/0x20 [ 528.492235][T19148] ? clockevents_program_event+0x1ef/0x820 [ 528.492274][T19148] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.492315][T19148] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 528.492344][T19148] ? lockdep_hardirqs_on+0x78/0x100 [ 528.492402][T19148] ? __lock_acquire+0x49f/0x1a40 [ 528.492423][T19148] ? __css_rstat_updated+0x1ce/0x5a0 [ 528.492464][T19148] ? __pfx___css_rstat_updated+0x10/0x10 [ 528.492505][T19148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.492545][T19148] ? policy_nodemask+0xed/0x4f0 [ 528.492583][T19148] alloc_pages_mpol+0x1fb/0x540 [ 528.492621][T19148] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 528.492658][T19148] ? find_held_lock+0x2b/0x80 [ 528.492688][T19148] ? rcu_read_unlock+0x17/0x60 [ 528.492725][T19148] ? rcu_read_unlock+0x17/0x60 [ 528.492767][T19148] alloc_pages_noprof+0x1a/0x160 [ 528.492791][T19148] __vmalloc_node_range_noprof+0xaec/0x1630 [ 528.492846][T19148] ? __do_sys_listmount+0x289/0xee0 [ 528.492880][T19148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 528.492926][T19148] ? rcu_is_watching+0x12/0xc0 [ 528.492965][T19148] __kvmalloc_node_noprof+0x3d3/0x970 [ 528.493001][T19148] ? __do_sys_listmount+0x289/0xee0 [ 528.493026][T19148] ? _copy_from_user+0x59/0xd0 [ 528.493137][T19148] ? __do_sys_listmount+0x289/0xee0 [ 528.493166][T19148] __do_sys_listmount+0x289/0xee0 [ 528.493190][T19148] ? __pfx_do_futex+0x10/0x10 [ 528.493219][T19148] ? cap_task_prctl+0x104/0xa50 [ 528.493287][T19148] ? __pfx___do_sys_listmount+0x10/0x10 [ 528.493331][T19148] do_syscall_64+0x115/0x840 [ 528.493361][T19148] ? clear_bhb_loop+0x70/0xc0 [ 528.493391][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.493416][T19148] RIP: 0033:0x7f897d79e0d9 [ 528.493436][T19148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.493458][T19148] RSP: 002b:00007f897e744028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 528.493481][T19148] RAX: ffffffffffffffda RBX: 00007f897da25fa0 RCX: 00007f897d79e0d9 [ 528.493497][T19148] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 528.493511][T19148] RBP: 00007f897d835024 R08: 0000000000000000 R09: 0000000000000000 [ 528.493525][T19148] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 528.493539][T19148] R13: 00007f897da26038 R14: 00007f897da25fa0 R15: 00007ffe47c429d8 [ 528.493569][T19148] [ 530.061510][T19148] memory: usage 3072kB, limit 3072kB, failcnt 45604 [ 530.129642][T19148] memory+swap: usage 3248kB, limit 9007199254740988kB, failcnt 0 [ 530.173843][T19148] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 530.188640][T19201] netlink: 'syz.0.6451': attribute type 23 has an invalid length. [ 530.228802][T19148] Memory cgroup stats for /syz3: [ 530.229112][T19148] cache 0 [ 530.265864][T19148] rss 16384 [ 530.295114][T19148] rss_huge 0 [ 530.311573][T19148] shmem 0 [ 530.358900][T19148] mapped_file 0 [ 530.381939][T19148] dirty 0 [ 530.413866][T19148] writeback 0 [ 530.431142][T19148] workingset_refault_anon 1455 [ 530.462688][T19148] workingset_refault_file 12138 [ 530.504888][T19148] swap 180224 [ 530.534462][T19148] swapcached 156155904 [ 530.557124][T19148] pgpgin 136843 [ 530.588137][T19148] pgpgout 144503 [ 530.624646][T19148] pgfault 203960 [ 530.648591][T19148] pgmajfault 1047 [ 530.674257][T19148] inactive_anon 16384 [ 530.703993][T19148] active_anon 4096 [ 530.723502][T19148] inactive_file 0 [ 530.738424][T19148] active_file 0 [ 530.776136][T19148] unevictable 0 [ 530.793719][T19148] hierarchical_memory_limit 3145728 [ 530.822947][T19148] hierarchical_memsw_limit 9223372036854771712 [ 530.874426][T19148] total_cache 0 [ 530.910188][T19148] total_rss 16384 [ 530.935067][T19148] total_rss_huge 0 [ 530.957017][T19148] total_shmem 0 [ 530.988336][T19148] total_mapped_file 0 [ 531.024100][T19148] total_dirty 0 [ 531.045370][T19148] total_writeback 0 [ 531.069398][T19148] total_workingset_refault_anon 1455 [ 531.121194][T19148] total_workingset_refault_file 12138 [ 531.157380][T19148] total_swap 180224 [ 531.193003][T19148] total_swapcached 156155904 [ 531.218635][T19148] total_pgpgin 136843 [ 531.239371][T19148] total_pgpgout 144503 [ 531.262031][T19148] total_pgfault 203960 [ 531.294007][T19148] total_pgmajfault 1047 [ 531.317290][T19148] total_inactive_anon 16384 [ 531.356628][T19148] total_active_anon 4096 [ 531.384870][T19148] total_inactive_file 0 [ 531.425383][T19148] total_active_file 0 [ 531.454387][T19148] total_unevictable 0 [ 531.489433][T19148] anon_cost 0 [ 531.524373][T19148] file_cost 0 [ 531.574620][T19148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6425,pid=19146,uid=0 [ 531.718796][T19148] Memory cgroup out of memory: Killed process 19146 (syz.3.6425) total-vm:104300kB, anon-rss:1248kB, file-rss:20876kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 533.219896][T19277] netlink: Unknown NAT attribute (type=262, max=9) [ 534.784657][T19320] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 536.035049][T19353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 537.964371][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 537.991398][ T31] Tainted: G U L syzkaller #0 [ 538.031234][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.077563][ T31] task:kworker/u8:0 state:D stack:23368 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 538.152135][ T31] Workqueue: netns cleanup_net [ 538.179566][ T31] Call Trace: [ 538.196582][ T31] [ 538.220880][ T31] __schedule+0x125c/0x6730 [ 538.241342][ T31] ? __pfx___schedule+0x10/0x10 [ 538.265288][ T31] ? find_held_lock+0x2b/0x80 [ 538.280213][ T31] ? schedule+0x225/0x2c0 [ 538.295430][ T31] schedule+0xdd/0x2c0 [ 538.306389][ T31] schedule_timeout+0x1b2/0x280 [ 538.318152][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 538.334002][ T31] ? mark_held_locks+0x40/0x70 [ 538.346706][ T31] __wait_for_common+0x2e7/0x4c0 [ 538.358076][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 538.374416][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 538.388809][ T31] remove_one+0x312/0x420 [ 538.397942][ T31] ? up_write+0x2e5/0x5c0 [ 538.405495][ T31] __simple_recursive_removal+0x148/0x5c0 [ 538.413052][ T31] ? __pfx_remove_one+0x10/0x10 [ 538.426194][ T31] debugfs_remove+0x5d/0x80 [ 538.437758][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 538.449251][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 538.470420][ T31] nsim_dev_reload_down+0x66/0xd0 [ 538.488311][ T31] devlink_reload+0x1ae/0x7a0 [ 538.502227][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 538.513921][ T31] devlink_pernet_pre_exit+0x247/0x370 [ 538.528207][ T31] ? iput.part.0+0x1a0/0x1050 [ 538.538899][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 538.557673][ T31] ? iput+0x3a/0x40 [ 538.568613][ T31] ? sock_release+0x14d/0x1c0 [ 538.579521][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 538.592235][ T31] ops_undo_list+0x187/0xab0 [ 538.603284][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 538.615325][ T31] ? cleanup_net+0x332/0x920 [ 538.628550][ T31] ? cleanup_net+0x332/0x920 [ 538.638491][ T31] ? idr_destroy+0x62/0x2e0 [ 538.647185][ T31] cleanup_net+0x499/0x920 [ 538.673350][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 538.690291][ T31] ? rcu_is_watching+0x12/0xc0 [ 538.695518][ T31] process_one_work+0xa23/0x1940 [ 538.701115][ T31] ? __pfx_process_one_work+0x10/0x10 [ 538.706701][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 538.712290][ T31] worker_thread+0x5ef/0xe50 [ 538.717101][ T31] ? kthread+0x13a/0x450 [ 538.721908][ T31] ? __pfx_worker_thread+0x10/0x10 [ 538.730819][ T31] kthread+0x370/0x450 [ 538.735083][ T31] ? __pfx_kthread+0x10/0x10 [ 538.740131][ T31] ret_from_fork+0x72b/0xd50 [ 538.744859][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 538.750516][ T31] ? __switch_to+0x800/0x10f0 [ 538.755443][ T31] ? __switch_to_asm+0x39/0x70 [ 538.762907][ T31] ? __pfx_kthread+0x10/0x10 [ 538.767641][ T31] ret_from_fork_asm+0x1a/0x30 [ 538.773117][ T31] [ 538.776428][ T31] INFO: task syz.2.4827:15708 blocked for more than 144 seconds. [ 538.801977][ T31] Tainted: G U L syzkaller #0 [ 538.808740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.817921][ T31] task:syz.2.4827 state:D stack:28856 pid:15708 tgid:15706 ppid:5739 task_flags:0x400040 flags:0x00080002 [ 538.833710][ T31] Call Trace: [ 538.837118][ T31] [ 538.840494][ T31] __schedule+0x125c/0x6730 [ 538.846218][ T31] ? do_raw_spin_lock+0x128/0x260 [ 538.852017][ T31] ? __pfx___schedule+0x10/0x10 [ 538.857019][ T31] ? find_held_lock+0x2b/0x80 [ 538.862182][ T31] ? schedule+0x225/0x2c0 [ 538.866656][ T31] schedule+0xdd/0x2c0 [ 538.872435][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.878047][ T31] __mutex_lock+0xccc/0x1bd0 [ 538.883204][ T31] ? devlink_health_report+0x656/0xb00 [ 538.888930][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.894656][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 538.901683][ T31] ? devlink_health_report+0x656/0xb00 [ 538.907295][ T31] devlink_health_report+0x656/0xb00 [ 538.914600][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 538.923072][ T31] ? _copy_from_user+0x59/0xd0 [ 538.927956][ T31] nsim_dev_health_break_write+0x166/0x210 [ 538.937762][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 538.944489][ T31] full_proxy_write+0x135/0x1a0 [ 538.949881][ T31] vfs_write+0x2aa/0x1050 [ 538.954340][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 538.960210][ T31] ? __pfx_vfs_write+0x10/0x10 [ 538.965119][ T31] ? __fget_files+0x215/0x3d0 [ 538.970314][ T31] ? __fget_files+0x21f/0x3d0 [ 538.975141][ T31] ksys_write+0x12a/0x250 [ 538.981753][ T31] ? __pfx_ksys_write+0x10/0x10 [ 538.986741][ T31] do_syscall_64+0x115/0x840 [ 538.991832][ T31] ? clear_bhb_loop+0x70/0xc0 [ 538.996642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.003192][ T31] RIP: 0033:0x7f6ff859e0d9 [ 539.007734][ T31] RSP: 002b:00007f6ff9547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.016754][ T31] RAX: ffffffffffffffda RBX: 00007f6ff8825fa0 RCX: 00007f6ff859e0d9 [ 539.026570][ T31] RDX: 0000000000000086 RSI: 0000200000000280 RDI: 0000000000000003 [ 539.039057][ T31] RBP: 00007f6ff8635024 R08: 0000000000000000 R09: 0000000000000000 [ 539.047217][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.055791][ T31] R13: 00007f6ff8826038 R14: 00007f6ff8825fa0 R15: 00007ffef5bf8678 [ 539.064789][ T31] [ 539.068003][ T31] [ 539.068003][ T31] Showing all locks held in the system: [ 539.077339][ T31] 6 locks held by kworker/u8:0/12: [ 539.085440][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 539.097528][ T31] #1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 539.107852][ T31] #2: ffffffff90a82e88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 539.117422][ T31] #3: ffff888034cff128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 539.130129][ T31] #4: ffff88802a47d258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 539.144863][ T31] #5: ffff888072046c90 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 539.157120][ T31] 1 lock held by khungtaskd/31: [ 539.162975][ T31] #0: ffffffff8ebe8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 539.173330][ T31] 2 locks held by getty/5369: [ 539.178343][ T31] #0: ffff888036bc00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 539.188756][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 539.200462][ T31] 3 locks held by syz.2.4827/15708: [ 539.205789][ T31] #0: ffff888031d99270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 539.215437][ T31] #1: ffff888020a88460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 539.224841][ T31] #2: ffff88802a47d258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 539.235982][ T31] [ 539.249994][ T31] ============================================= [ 539.249994][ T31] [ 539.259549][ T31] NMI backtrace for cpu 0 [ 539.259569][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.259603][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.259612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.259625][ T31] Call Trace: [ 539.259632][ T31] [ 539.259640][ T31] dump_stack_lvl+0x100/0x190 [ 539.259672][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 539.259702][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.259734][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 539.259763][ T31] sys_info+0x141/0x190 [ 539.259799][ T31] watchdog+0xcb1/0x1030 [ 539.259843][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 539.259872][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.259907][ T31] ? __kthread_parkme+0x18c/0x230 [ 539.259939][ T31] ? kthread+0x13a/0x450 [ 539.259972][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.260005][ T31] kthread+0x370/0x450 [ 539.260037][ T31] ? __pfx_kthread+0x10/0x10 [ 539.260070][ T31] ret_from_fork+0x72b/0xd50 [ 539.260101][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.260132][ T31] ? __switch_to+0x800/0x10f0 [ 539.260152][ T31] ? __switch_to_asm+0x39/0x70 [ 539.260184][ T31] ? __pfx_kthread+0x10/0x10 [ 539.260218][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.260263][ T31] [ 539.407480][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 539.414914][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.425726][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.430937][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.441040][ T31] Call Trace: [ 539.444341][ T31] [ 539.447288][ T31] dump_stack_lvl+0x100/0x190 [ 539.452010][ T31] vpanic+0x552/0x970 [ 539.456037][ T31] ? __pfx_vpanic+0x10/0x10 [ 539.460566][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 539.466747][ T31] panic+0xd1/0xe0 [ 539.470551][ T31] ? __pfx_panic+0x10/0x10 [ 539.474994][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 539.481168][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 539.487346][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 539.493524][ T31] ? watchdog.cold+0x1ec/0x234 [ 539.498319][ T31] ? watchdog+0xcc1/0x1030 [ 539.502770][ T31] watchdog.cold+0x1fd/0x234 [ 539.507385][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 539.513349][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.518103][ T31] ? __kthread_parkme+0x18c/0x230 [ 539.523166][ T31] ? kthread+0x13a/0x450 [ 539.527440][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.532172][ T31] kthread+0x370/0x450 [ 539.536270][ T31] ? __pfx_kthread+0x10/0x10 [ 539.540913][ T31] ret_from_fork+0x72b/0xd50 [ 539.545529][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.550666][ T31] ? __switch_to+0x800/0x10f0 [ 539.555366][ T31] ? __switch_to_asm+0x39/0x70 [ 539.560161][ T31] ? __pfx_kthread+0x10/0x10 [ 539.564892][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.569722][ T31] [ 539.572831][ T31] Kernel Offset: disabled [ 539.577175][ T31] Rebooting in 86400 seconds..