last executing test programs: 5m56.954559843s ago: executing program 3 (id=6513): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/numa_zonelist_order\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 5m56.814216256s ago: executing program 3 (id=6516): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c429b3f6e", 0x36) 5m56.642240432s ago: executing program 3 (id=6520): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8242, 0x0) sendfile$auto(r0, r0, 0x0, 0x1048) 5m56.495371595s ago: executing program 3 (id=6523): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) 5m56.355328182s ago: executing program 3 (id=6526): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 5m55.586096525s ago: executing program 3 (id=6537): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) 5m55.055396051s ago: executing program 32 (id=6537): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) 15.530799846s ago: executing program 1 (id=11442): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x15c) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x80040, 0x46) fcntl$auto_F_GETLEASE(r0, 0x401, 0xf) 15.173261305s ago: executing program 2 (id=11450): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) sysfs$auto(0x2, 0x47, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r0, 0x5609, r0) 15.098244672s ago: executing program 2 (id=11452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_?\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 15.005065893s ago: executing program 2 (id=11454): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x20000800) setsockopt$auto(r0, 0x6, 0x2, 0x0, 0x9) 14.928698131s ago: executing program 2 (id=11456): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r0, 0x40505331, 0x38) 14.58528525s ago: executing program 1 (id=11460): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12%\x15\x95.\xe5\xfa\b\"\xc7\xe6\x04\x8c\x83k', 0x91) ioperm$auto(0xffffffffffbfffff, 0x10100000c, 0x3) socket(0x18, 0xa, 0x1) 14.19629964s ago: executing program 0 (id=11462): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x13) write$auto_drm_connector_fops_drm_debugfs(r0, &(0x7f0000000080)="cd240089b0", 0x5) 14.195470421s ago: executing program 1 (id=11463): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r0, 0x7, 0x3d, 0x2) 14.038819798s ago: executing program 1 (id=11466): r0 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(r0, &(0x7f00000001c0)=@can={0x1d, 0x0, 0x6000000}, &(0x7f0000000080)=0xffffffff) 14.029296814s ago: executing program 0 (id=11467): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x0) msgctl$auto_IPC_INFO(0xa6, 0x3, &(0x7f0000000100)={{0x7, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8}, 0x0, &(0x7f0000000040)=0xa, 0x3e, 0x7f, 0x7, 0x100000000, 0xffffffffffffffff, 0x2cf, 0x2}) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3) 13.93598408s ago: executing program 0 (id=11468): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 13.910181867s ago: executing program 4 (id=11469): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x84, 0x65, 0x0, 0x0) 13.86468956s ago: executing program 1 (id=11470): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = epoll_create$auto(0x3e) mprotect$auto(0x200000000000, 0x806121, 0x4) newfstatat$auto(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x7fffffff) 13.828138396s ago: executing program 0 (id=11471): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000580), 0x2, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') 13.796002192s ago: executing program 4 (id=11472): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x5}, 0x7) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180)) 13.710236486s ago: executing program 0 (id=11473): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12%\x15\x95.\xe5\xfa\b\"\xc7\xe6\x04\x8c\x83k', 0x91) ioperm$auto(0xffffffffffbfffff, 0x10100000c, 0x3) socket(0x18, 0xa, 0x1) 13.710080519s ago: executing program 1 (id=11474): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7ffc, 0x0) nanosleep$auto(0x0, &(0x7f0000000240)={0x10001, 0x140000000}) close_range$auto(0x2, 0x8, 0x0) 13.082642736s ago: executing program 0 (id=11475): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) 13.082544225s ago: executing program 4 (id=11476): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x9, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 13.038409146s ago: executing program 2 (id=11477): sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 12.955831079s ago: executing program 4 (id=11478): socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 12.940821506s ago: executing program 2 (id=11479): socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) fcntl$auto(0x4, 0x4, 0xa553) close_range$auto(0x2, 0x8000, 0x0) 12.884199254s ago: executing program 4 (id=11480): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 4 (id=11481): r0 = socket(0x15, 0x5, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) getsockname$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, &(0x7f0000000080)=0x400) kernel console output (not intermixed with test programs): 10610] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 206.665313][T10640] wlan1: mtu less than device minimum [ 207.192289][T10661] bond0: option packets_per_slave: invalid value ( Xnp) [ 207.216294][T10661] bond0: option packets_per_slave: allowed values 0 - 65535 [ 207.816958][T10683] bond0: option packets_per_slave: invalid value ( Xnp) [ 207.824608][T10683] bond0: option packets_per_slave: allowed values 0 - 65535 [ 208.503041][T10703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.651892][T10703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.807785][T10703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.904173][T10703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.960597][T10719] overlayfs: "check_copy_up" module option is obsolete [ 210.305212][T10761] cifs: Unknown parameter 'knjeRaBt$Mi' [ 210.784829][T10783] kAFS: Invalid Command on /proc/fs/afs/cells file [ 210.891734][T10787] phram: not enough arguments [ 211.699568][T10739] Bluetooth: hci0: command 0x0406 tx timeout [ 211.705800][T10739] Bluetooth: hci2: command 0x0406 tx timeout [ 211.715157][T10739] Bluetooth: hci3: command 0x0406 tx timeout [ 211.721275][T10739] Bluetooth: hci1: command 0x0406 tx timeout [ 212.518959][T10850] block2mtd: Using custom MTD label '' for dev [ 212.533593][T10850] block2mtd: error: cannot open device [ 212.884478][ T5633] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 212.892263][ T5633] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 213.335292][T10887] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 213.705930][T10901] usb usb13: usbfs: process 10901 (syz.0.2512) did not claim interface 0 before use [ 214.106761][T10921] synth uevent: /bus/mei: unknown uevent action string [ 214.852530][T10961] phram: not enough arguments [ 215.362484][T10991] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 215.723918][T11011] synth uevent: /bus/mei: unknown uevent action string [ 216.856409][T11073] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 217.162488][T11089] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.838148][T11182] syz_tun: tun_chr_ioctl cmd 1074025698 [ 221.646251][T11331] Process accounting resumed [ 222.699178][T11387] Setting dangerous option i915.mitigations - tainting kernel [ 222.752696][T11391] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 223.100862][T11404] Process accounting resumed [ 223.785438][T11447] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 224.280236][T11473] nvme_fcloop: unknown parameter or missing value '7' [ 225.176844][T11522] kAFS: No cell specified [ 225.350386][T11528] : Can't lookup blockdev [ 226.084442][T11570] mmap: syz.0.2838 (11570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.386376][T11589] process 'syz.0.2848' launched './file0' with NULL argv: empty string added [ 226.479552][T11593] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 226.493444][T11593] ep_00: uevent: failed to send synthetic uevent: -22 [ 227.187574][T11631] i2c i2c-0: delete_device: Can't find device in list [ 227.950236][T11673] bond0: no command found in slaves file - use +ifname or -ifname [ 228.917153][ T5633] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 228.924843][ T5633] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 229.642979][T11740] Sensor B: ================= START STATUS ================= [ 229.650940][T11740] Sensor B: Test Pattern: 75% Colorbar [ 229.657885][T11740] Sensor B: Show Information: All [ 229.664034][T11740] Sensor B: Vertical Flip: false [ 229.678458][T11740] Sensor B: Horizontal Flip: false [ 229.691016][T11740] Sensor B: Brightness: 128 [ 229.707457][T11740] Sensor B: Contrast: 128 [ 229.720758][T11740] Sensor B: Hue: 0 [ 229.735935][T11740] Sensor B: Saturation: 128 [ 229.747376][T11740] Sensor B: Pixel Rate: 160000000 [ 229.772271][T11740] Sensor B: Horizontal Blanking: 800 [ 229.789866][T11740] Sensor B: Vertical Blanking: 3223 [ 229.811698][T11740] Sensor B: ================== END STATUS ================== [ 230.773726][T11792] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 231.227157][T11819] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 231.242906][T11819] Call Trace: [ 231.246210][T11819] [ 231.249166][T11819] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 231.255892][T11819] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 231.262441][T11819] ? debug_object_deactivate+0x2e4/0x3b0 [ 231.268136][T11819] ? smp_call_function+0x1/0x90 [ 231.273035][T11819] mce_cpu_restart+0xd5/0x1f0 [ 231.277750][T11819] ? __pfx_mce_cpu_restart+0x10/0x10 [ 231.283081][T11819] smp_call_function_many_cond+0x153b/0x1870 [ 231.289110][T11819] ? __pfx_mce_cpu_restart+0x10/0x10 [ 231.294440][T11819] ? lockdep_hardirqs_on+0x78/0x100 [ 231.299686][T11819] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.305531][T11819] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 231.311910][T11819] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 231.317944][T11819] ? __timer_delete_sync+0x151/0x1c0 [ 231.323276][T11819] ? __pfx_mce_cpu_restart+0x10/0x10 [ 231.328597][T11819] on_each_cpu_cond_mask+0x40/0x90 [ 231.333742][T11819] set_bank+0x240/0x3a0 [ 231.337918][T11819] ? __pfx_set_bank+0x10/0x10 [ 231.342607][T11819] ? find_held_lock+0x2b/0x80 [ 231.347303][T11819] ? sysfs_file_kobj+0xe4/0x290 [ 231.352169][T11819] ? sysfs_file_kobj+0xe4/0x290 [ 231.357039][T11819] ? __pfx_set_bank+0x10/0x10 [ 231.361727][T11819] dev_attr_store+0x58/0x80 [ 231.366240][T11819] ? __pfx_dev_attr_store+0x10/0x10 [ 231.371445][T11819] sysfs_kf_write+0xf2/0x150 [ 231.376067][T11819] kernfs_fop_write_iter+0x3e0/0x5f0 [ 231.381361][T11819] ? __pfx_sysfs_kf_write+0x10/0x10 [ 231.386579][T11819] vfs_write+0x6ac/0x1050 [ 231.390918][T11819] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 231.396739][T11819] ? __pfx_vfs_write+0x10/0x10 [ 231.401538][T11819] ksys_write+0x12a/0x250 [ 231.405876][T11819] ? __pfx_ksys_write+0x10/0x10 [ 231.410747][T11819] do_syscall_64+0x115/0x840 [ 231.415356][T11819] ? clear_bhb_loop+0x40/0x90 [ 231.420052][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.425953][T11819] RIP: 0033:0x7f69e4b9e0d9 [ 231.430387][T11819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.450004][T11819] RSP: 002b:00007f69e5b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.458445][T11819] RAX: ffffffffffffffda RBX: 00007f69e4e25fa0 RCX: 00007f69e4b9e0d9 [ 231.466429][T11819] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 231.474417][T11819] RBP: 00007f69e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 231.482399][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.490439][T11819] R13: 00007f69e4e26038 R14: 00007f69e4e25fa0 R15: 00007ffca984c198 [ 231.498439][T11819] [ 231.756426][T11835] warning: `syz.2.2965' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.053429][T11851] vhci_hcd: not connected 4 [ 232.583785][T11878] i2c i2c-0: new_device: Can't parse I2C address [ 234.943187][T12001] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.972858][T12001] CIFS mount error: No usable UNC path provided in device string! [ 234.972858][T12001] [ 234.987475][T12001] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.656274][ T29] audit: type=1807 audit(4294969455.250:22): UNKNOWN=nl80211 res=0 [ 237.665687][T12141] ima: policy update failed [ 237.681158][ T29] audit: type=1802 audit(4294969455.250:23): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3118" res=0 errno=0 [ 237.761267][ T29] audit: type=1802 audit(4294969455.270:24): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3118" res=0 errno=0 [ 237.890828][T12152] : Can't lookup blockdev [ 238.172887][T12166] kafs: addr_prefs: Invalid Command [ 239.341230][T12227] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 240.041325][T12255] could not allocate digest TFM handle [ 240.834307][T12304] block loop4: the capability attribute has been deprecated. [ 246.344122][ T29] audit: type=1400 audit(4294969463.975:25): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12614 comm="syz.3.3350" [ 248.872303][T12726] program syz.2.3404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.502826][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 249.510155][ T5776] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 249.675818][T12767] CIFS mount error: No usable UNC path provided in device string! [ 249.675818][T12767] [ 249.696746][T12767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.892860][ T5633] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 249.902880][ T5633] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 250.554150][T12796] block2mtd: illegal erase size [ 251.572147][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 251.578340][ T5776] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 251.627074][T12848] Process accounting paused [ 252.950079][T12892] Process accounting paused [ 254.553827][T12963] ptp ptp0: only physical clock in use now [ 255.016725][T12982] random: crng reseeded on system resumption [ 255.476027][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.482673][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.546205][T13005] kafs: addr_prefs: Too many elements in string [ 255.662726][T13009] random: crng reseeded on system resumption [ 256.713242][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 256.720995][ T5635] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 257.726992][ T5633] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 258.498625][T13140] syz_tun: tun_chr_ioctl cmd 2147767507 [ 258.517770][T13136] bond0: option fail_over_mac: invalid value () [ 259.440892][ T5635] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 259.448653][ T5635] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 259.771564][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 259.791457][ T29] audit: type=1326 audit(4294969477.495:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz.2.3628" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3e499e0d9 code=0x0 [ 260.419863][T13223] ICMPv6: process `syz.1.3642' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 261.838885][ T4945] Bluetooth: hci2: command 0x0406 tx timeout [ 263.039283][T13350] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 264.008903][T13332] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 264.842296][T13408] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 264.852435][T13408] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 266.056817][T13422] Bluetooth: hci1: command 0x0406 tx timeout [ 266.654988][T13510] : Can't lookup blockdev [ 266.920115][T13526] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 267.047864][T13332] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 267.056797][T13332] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 267.150167][T13540] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 267.163093][T13540] net gretap0: uevent: failed to send synthetic uevent: -22 [ 268.129909][T13332] Bluetooth: hci1: command 0x0406 tx timeout [ 268.522394][T13585] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.545024][T13585] vhci_hcd vhci_hcd.2: invalid port number 0 [ 268.731910][T13332] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 270.674806][T13332] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 270.752625][T13422] Bluetooth: hci3: command 0x0406 tx timeout [ 271.047762][T13650] aoe: can't write to that file. [ 271.718502][T13422] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 271.726403][T13422] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 271.735877][T13422] CPU: 0 UID: 0 PID: 13422 Comm: kworker/u12:3 Tainted: G U syzkaller #0 PREEMPT(full) [ 271.735970][T13422] Tainted: [U]=USER [ 271.735991][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.736030][T13422] Workqueue: hci0 hci_rx_work [ 271.736069][T13422] Call Trace: [ 271.736079][T13422] [ 271.736089][T13422] dump_stack_lvl+0x100/0x190 [ 271.736124][T13422] sysfs_warn_dup.cold+0x1c/0x28 [ 271.736166][T13422] sysfs_create_dir_ns+0x24b/0x2b0 [ 271.736207][T13422] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 271.736247][T13422] ? find_held_lock+0x2b/0x80 [ 271.736282][T13422] ? kobject_add_internal+0x25f/0x930 [ 271.736311][T13422] ? kobject_add_internal+0x25f/0x930 [ 271.736343][T13422] ? do_raw_spin_unlock+0x145/0x1e0 [ 271.736377][T13422] kobject_add_internal+0x2c8/0x930 [ 271.736412][T13422] kobject_add+0x16a/0x1e0 [ 271.736440][T13422] ? __pfx_kobject_add+0x10/0x10 [ 271.736466][T13422] ? class_to_subsys+0x10f/0x150 [ 271.736501][T13422] ? kobject_put+0xb9/0x640 [ 271.736525][T13422] ? _raw_spin_unlock+0x28/0x50 [ 271.736567][T13422] device_add+0x294/0x1970 [ 271.736606][T13422] ? __pfx_dev_set_name+0x10/0x10 [ 271.736640][T13422] ? __pfx_device_add+0x10/0x10 [ 271.736669][T13422] ? mgmt_send_event_skb+0x2fb/0x460 [ 271.736718][T13422] hci_conn_add_sysfs+0x1a3/0x260 [ 271.736762][T13422] le_conn_complete_evt+0x11eb/0x1f60 [ 271.736809][T13422] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 271.736841][T13422] ? __pfx_bt_warn+0x10/0x10 [ 271.736865][T13422] ? hci_event_packet+0x186/0xcd0 [ 271.736910][T13422] hci_le_conn_complete_evt+0x23c/0x3a0 [ 271.736947][T13422] ? skb_pull_data+0x15f/0x1e0 [ 271.736983][T13422] hci_le_meta_evt+0x34a/0x5f0 [ 271.737021][T13422] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 271.737060][T13422] hci_event_packet+0x51c/0xcd0 [ 271.737095][T13422] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 271.737134][T13422] ? __pfx_hci_event_packet+0x10/0x10 [ 271.737170][T13422] ? kcov_remote_start+0x384/0x670 [ 271.737207][T13422] ? lockdep_hardirqs_on+0x78/0x100 [ 271.737255][T13422] hci_rx_work+0x451/0xfc0 [ 271.737294][T13422] process_one_work+0xa23/0x1940 [ 271.737349][T13422] ? __pfx_process_one_work+0x10/0x10 [ 271.737397][T13422] ? __pfx_hci_rx_work+0x10/0x10 [ 271.737435][T13422] worker_thread+0x5ef/0xe50 [ 271.737484][T13422] ? __pfx_worker_thread+0x10/0x10 [ 271.737536][T13422] ? kthread+0x13a/0x450 [ 271.737571][T13422] ? __pfx_worker_thread+0x10/0x10 [ 271.737618][T13422] kthread+0x370/0x450 [ 271.737653][T13422] ? __pfx_kthread+0x10/0x10 [ 271.737692][T13422] ret_from_fork+0x72b/0xd50 [ 271.737730][T13422] ? __pfx_ret_from_fork+0x10/0x10 [ 271.737767][T13422] ? __switch_to+0x800/0x10f0 [ 271.737810][T13422] ? __switch_to_asm+0x39/0x70 [ 271.737847][T13422] ? __pfx_kthread+0x10/0x10 [ 271.737887][T13422] ret_from_fork_asm+0x1a/0x30 [ 271.737945][T13422] [ 272.022709][T13422] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 272.037566][T13422] Bluetooth: hci0: failed to register connection device [ 272.743387][T13422] Bluetooth: hci0: command 0x0406 tx timeout [ 272.823184][T13422] Bluetooth: hci3: command 0x0406 tx timeout [ 273.419209][T13744] syz.0.3887: vm.laptop_mode is deprecated. Ignoring setting. [ 274.114553][ T29] audit: type=1800 audit(4294969491.889:27): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3907" name="sr0" dev="devtmpfs" ino=2817 res=0 errno=0 [ 274.369682][T13796] serial 00:02: in use; can't configure [ 274.811332][T13332] Bluetooth: hci0: command 0x0406 tx timeout [ 275.144171][ T29] audit: type=1800 audit(4294969492.925:28): pid=13843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3936" name="members" dev="configfs" ino=32744 res=0 errno=0 [ 275.217451][T13849] ICMPv6: process `syz.2.3939' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 275.337680][T13851] sysfs_service_op_store: Client not running :-5: [ 276.701819][T13908] Invalid ELF header magic: != ELF [ 276.880604][T13332] Bluetooth: hci0: command 0x0406 tx timeout [ 277.017074][T13917] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 277.435974][T13936] ima: policy update failed [ 277.450187][ T29] audit: type=1802 audit(4294969495.247:29): pid=13936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3983" res=0 errno=0 [ 278.950744][T13407] Bluetooth: hci0: command 0x0406 tx timeout [ 280.227818][T14086] binder: 14085:14086 ioctl c0046209 ffffffffffffffff returned -22 [ 281.242590][T14138] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 281.261094][T14138] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 281.519067][T14149] Process accounting resumed [ 283.000432][T14201] Process accounting resumed [ 283.608516][T14241] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 283.645806][T14241] cec cec26: uevent: failed to send synthetic uevent: -22 [ 285.025505][T14315] bcache: register_bcache() error : failed to open device [ 285.583901][T14351] CIFS mount error: No usable UNC path provided in device string! [ 285.583901][T14351] [ 285.583931][T14351] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.754808][T14404] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 289.227287][ T5643] Process accounting resumed [ 289.361303][T14490] rnbd_client L213: map_device: Parameters missing [ 290.072864][T14524] aoe: invalid device specification [ 297.370330][T14846] kAFS: Invalid Command on /proc/fs/afs/cells file [ 297.435475][T14841] smpboot: CPU 1 is now offline [ 297.639956][T14849] [ 298.303048][T14875] vhci_hcd vhci_hcd.2: invalid port number 16 [ 298.356412][T14875] vhci_hcd vhci_hcd.2: invalid port number 16 [ 300.024099][ T29] audit: type=1804 audit(4294967318.868:30): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4465" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=44 res=1 errno=0 [ 300.726268][T14987] ICMPv6: process `syz.3.4479' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 301.831406][T15040] Scaler: ================= START STATUS ================= [ 301.877260][T15040] Scaler: ================== END STATUS ================== [ 306.736968][T15249] Invalid input. Must be >= 4608 [ 308.980706][T15358] Invalid input. Must be >= 4608 [ 310.164579][T15417] bond0: invalid ARP target specified [ 311.495807][T15477] Process accounting paused [ 311.757472][T15491] bond0: option slaves: interface -]=,Do does not exist! [ 312.364506][T15516] dyndbg: expected <4096 bytes into control [ 312.888203][T15538] Process accounting paused [ 314.929793][T15600] bond0: invalid ARP target specified Ijn9_VQ8j@:U%Ux0 [ 316.213725][T15648] sd 0:0:1:0: PR command failed: 1026 [ 316.240926][T15648] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 316.285875][T15648] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 316.355881][T15652] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 316.599056][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.610347][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.317099][T15682] Line length is too long: Should be less than 4094 [ 317.967668][T15704] block2mtd: device name too long [ 318.972923][T15737] [U]  Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 319.728112][T15765] kernel read not supported for file /\*)A (pid: 15765 comm: syz.2.4846) [ 319.766758][ T29] audit: type=1800 audit(4294967338.711:31): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4846" name="\*)A" dev="mqueue" ino=34304 res=0 errno=0 [ 320.669661][T15799] usbip-vudc usbip-vudc.0: gadget not bound [ 321.648838][T15848] ======================================================= [ 321.648838][T15848] WARNING: The mand mount option has been deprecated and [ 321.648838][T15848] and is ignored by this kernel. Remove the mand [ 321.648838][T15848] option from the mount to silence this warning. [ 321.648838][T15848] ======================================================= [ 321.707102][T13407] Bluetooth: hci0: unexpected event 0x04 length: 125 > 10 [ 321.707130][T13407] Bluetooth: unknown link type 101 [ 321.721192][T13407] Bluetooth: hci0: connection err: -111 [ 321.807458][T15851] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 322.268484][T15871] syz.0.4898 uses obsolete (PF_INET,SOCK_PACKET) [ 322.569097][T15881] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5637] was attempted by ""[15881] [ 323.804396][T15937] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 323.879125][T15939] usb usb36: usbfs: process 15939 (syz.1.4931) did not claim interface 0 before use [ 324.008684][T15937] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 324.069248][T15937] pci 0000:00:01.3: PCI INT A: no GSI [ 324.530426][ T29] audit: type=1800 audit(4294967343.506:32): pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4945" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 326.744649][T16071] cougar: G6 mapped to space [ 327.042745][ T29] audit: type=1800 audit(4294967346.029:33): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5005" name="discovery_nqn" dev="configfs" ino=41361 res=0 errno=0 [ 327.664582][T16112] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 328.409815][T16143] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 328.409815][T16143] [ 330.058975][T16225] TCP: TCP_TX_DELAY enabled [ 331.867439][T16298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 332.018660][T16303] mmap: syz.2.5112 (16303): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 333.684705][T16379] capability: warning: `syz.0.5149' uses 32-bit capabilities (legacy support in use) [ 335.890883][T16480] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 337.658015][T16555] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 339.520417][ T5776] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 340.027288][T16669] block nbd0: NBD_DISCONNECT [ 341.387577][T16731] Process accounting resumed [ 342.839488][T16793] Process accounting resumed [ 343.479410][T16820] program syz.3.5364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.867378][T16933] writes to the poll attribute are ignored. [ 345.930638][T16933] please use driver specific parameters instead. [ 349.407018][T17065] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 350.580782][T17102] kAFS: unparsable volume name [ 351.474381][T17136] block2mtd: too many arguments [ 352.548148][T17173] tipc: Can't bind to reserved service type 63 [ 354.747721][T17252] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 355.454874][T17284] ceph: Failed to parse sending metrics switch value 'P^' [ 355.736030][T17292] queue_state_write: operation too long [ 355.774465][T17292] queue_state_write: use 'run', 'start' or 'kick' [ 356.855494][T17347] syz.3.5625 (17347): attempted to duplicate a private mapping with mremap. This is not supported. [ 358.384613][T17403] zram: Added device: zram1 [ 359.641088][T17463] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 359.641088][T17463] M' is too long [ 359.700158][T17463] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 359.700158][T17463] W ' is too long [ 360.721555][T17514] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 360.742446][T17517] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 361.602132][T17559] i2c i2c-0: new_device: Missing parameters [ 362.248489][T17589] binder: 17588:17589 ioctl 40046210 9 returned -14 [ 363.675999][T17657] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17657] [ 363.844828][T17665] i2c i2c-0: delete_device: Can't parse I2C address [ 366.389074][ T29] audit: type=1800 audit(4294985729.583:34): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5843" name="members" dev="configfs" ino=46819 res=0 errno=0 [ 367.117269][T17821] zram0: detected capacity change from 0 to 16 [ 370.446135][T17977] kafs: addr_prefs: Invalid Command [ 370.857362][T17995] kernel profiling enabled (shift: 7) [ 371.279972][T18011] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 371.405767][T18009] Process accounting paused [ 371.977868][T18037] bond0: no command found in slaves file - use +ifname or -ifname [ 372.066783][T18039] zram: Added device: zram2 [ 372.261470][T18046] kfence: disabled [ 372.825937][T18066] capability: warning: `syz.3.5978' uses deprecated v2 capabilities in a way that may be insecure [ 372.890416][T18069] Process accounting paused [ 373.195318][T18082] zram: Cannot change disksize for initialized device [ 373.636818][T18096] syz_tun: tun_chr_ioctl cmd 1074025694 [ 374.349200][T18123] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 374.375503][T18123] vhci_hcd vhci_hcd.3: invalid port number 0 [ 374.463815][T18092] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 377.164902][T18218] binder: binder_mmap: 18217 0-1000 bad vm_flags failed -1 [ 377.710352][T18234] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 377.729867][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.739453][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.726798][T18273] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 379.714347][T18313] blkio.reset_stats is deprecated [ 379.848329][T18315] Setting dangerous option i915.mitigations - tainting kernel [ 380.477823][T18330] cougar: G6 mapped to F18 [ 381.134651][T18334] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 383.380991][T18387] synth uevent: /module/null_blk: unknown uevent action string [ 383.837604][ T5776] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 388.830161][T13407] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 394.019130][T18771] hub 1-0:1.0: USB hub found [ 394.055485][T18771] hub 1-0:1.0: 1 port detected [ 395.022037][T18808] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 395.085911][T18808] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 395.118788][T18808] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 395.160332][T18808] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 395.202723][T18808] page dumped because: unmovable page [ 395.233091][T18808] page_owner info is not present (never set?) [ 396.243247][T18854] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 396.315021][T18854] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.638407][T18915] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 397.679067][T18915] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 397.703524][T18915] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 397.739350][T18915] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 397.776049][T18915] page dumped because: unmovable page [ 397.800734][T18915] page_owner tracks the page as allocated [ 397.826681][T18915] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1736405393, free_ts 0 [ 397.892045][T18915] register_early_stack+0x74/0xaf [ 397.913129][T18915] init_page_owner+0x4c/0xa10 [ 397.937336][T18915] page_ext_init+0x71d/0x780 [ 397.958035][T18915] mm_core_init+0x229/0x270 [ 397.977987][T18915] page_owner free stack trace missing [ 398.477222][T18945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 398.511784][T18945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 398.551601][T18945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 398.589345][T18945] page_type: f5(slab) [ 398.607741][T18945] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 398.643400][T18945] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 398.688309][T18945] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 398.728269][T18945] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 398.769604][T18945] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 398.810706][T18945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 398.850623][T18945] page dumped because: unmovable page [ 398.875594][T18945] page_owner tracks the page as allocated [ 398.901468][T18945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 110319289753, free_ts 110214426538 [ 398.997384][T18945] post_alloc_hook+0xfd/0x120 [ 399.014663][T18945] get_page_from_freelist+0xf48/0x3530 [ 399.041901][T18945] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 399.063698][T18945] new_slab+0xa2/0x640 [ 399.082603][T18945] refill_objects+0xe3/0x410 [ 399.104524][T18945] __pcs_replace_empty_main+0x376/0x680 [ 399.129447][T18945] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 399.149826][T18945] kmalloc_reserve+0xe8/0x350 [ 399.164682][T18945] __alloc_skb+0x185/0x710 [ 399.182149][T18945] nsim_dev_trap_report_work+0x2af/0xd20 [ 399.202140][T18945] process_one_work+0xa23/0x1940 [ 399.230542][T18945] worker_thread+0x5ef/0xe50 [ 399.249850][T18945] kthread+0x370/0x450 [ 399.267747][T18945] ret_from_fork+0x72b/0xd50 [ 399.311909][T18945] ret_from_fork_asm+0x1a/0x30 [ 399.337905][T18945] page last free pid 5627 tgid 5627 stack trace: [ 399.365824][T18945] __free_frozen_pages+0x79f/0x1090 [ 399.390846][T18945] qlist_free_all+0x47/0xf0 [ 399.408889][T18945] kasan_quarantine_reduce+0x1a0/0x1f0 [ 399.422816][T18971] i2c i2c-0: delete_device: Can't find device in list [ 399.436711][T18945] __kasan_slab_alloc+0x69/0x90 [ 399.454466][T18945] __kmalloc_noprof+0x2bf/0x820 [ 399.482994][T18945] inotify_handle_inode_event+0x1a5/0x6a0 [ 399.505641][T18945] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 399.535065][T18945] fsnotify+0x1b45/0x3240 [ 399.552235][T18945] __fsnotify_parent+0x74f/0xd00 [ 399.574661][T18945] __fput+0x30d/0xb50 [ 399.594691][T18945] fput_close_sync+0x118/0x250 [ 399.616479][T18945] __x64_sys_close+0x8b/0x120 [ 399.635973][T18945] do_syscall_64+0x115/0x840 [ 399.656867][T18945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.309944][T19026] Process accounting resumed [ 402.881759][T19082] Process accounting resumed [ 403.217760][T19100] program syz.1.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.206916][ T5776] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 406.667390][T19237] syz.2.6533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 407.310814][T13336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.769602][T13336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.799934][T13332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.814045][T13332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.823924][T13332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.842463][T13332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.852417][T13332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.137516][T13336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.342031][T13336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.292907][T13336] bridge_slave_1: left allmulticast mode [ 409.335519][T13336] bridge_slave_1: left promiscuous mode [ 409.370283][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.463505][T13336] bridge_slave_0: left allmulticast mode [ 409.505771][T13336] bridge_slave_0: left promiscuous mode [ 409.537292][T13336] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.950325][T13332] Bluetooth: hci2: command tx timeout [ 410.656200][T13336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.808741][T13336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.873990][T13336] bond0 (unregistering): Released all slaves [ 410.948852][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 411.305229][T19363] kAFS: Invalid Command on /proc/fs/afs/cells file [ 412.019461][T13332] Bluetooth: hci2: command tx timeout [ 412.549289][T13336] hsr_slave_0: left promiscuous mode [ 412.600553][T13336] hsr_slave_1: left promiscuous mode [ 412.649561][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.703881][T13336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.764938][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.798478][T13336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.007444][T13336] veth1_macvtap: left promiscuous mode [ 413.045198][T13336] veth0_macvtap: left promiscuous mode [ 413.074108][T13336] veth1_vlan: left promiscuous mode [ 413.099528][T13336] veth0_vlan: left promiscuous mode [ 413.934082][T13336] team0 (unregistering): Port device team_slave_1 removed [ 413.990998][T13336] team0 (unregistering): Port device team_slave_0 removed [ 414.087119][T13332] Bluetooth: hci2: command tx timeout [ 414.324580][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.480695][T19444] nvme_fcloop: unknown parameter or missing value '' [ 414.972510][T19257] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.010132][T19257] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.050714][T19257] bridge_slave_0: entered allmulticast mode [ 415.088179][T19257] bridge_slave_0: entered promiscuous mode [ 415.129674][T19257] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.168428][T19257] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.215067][T19257] bridge_slave_1: entered allmulticast mode [ 415.256212][T19257] bridge_slave_1: entered promiscuous mode [ 415.501688][T19257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.572287][T19257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.795904][T19480] syz_tun: tun_chr_ioctl cmd 1074025692 [ 415.834796][T19257] team0: Port device team_slave_0 added [ 415.902224][T19257] team0: Port device team_slave_1 added [ 416.044844][T19257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.084323][T19257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.161480][T13332] Bluetooth: hci2: command tx timeout [ 416.229046][T19257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.298469][T19257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.342696][T19257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.452375][T19257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.522360][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 416.583755][T19503] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 417.093856][T19257] hsr_slave_0: entered promiscuous mode [ 417.140570][T19257] hsr_slave_1: entered promiscuous mode [ 417.178746][T19257] debugfs: 'hsr0' already exists in 'hsr' [ 417.209066][T19257] Cannot create hsr debugfs directory [ 417.286997][T19522] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 418.838249][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 418.878190][T19574] block2mtd: illegal erase size [ 418.890393][T19257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.005312][T19257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.049978][T19257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.116158][T19257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.153580][T19257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.197426][T19257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.234496][T19257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.288480][T19257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.751355][T19257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.850870][T19257] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.911656][T13334] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.918851][T13334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.023343][T13334] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.030555][T13334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.778635][T19635] CIFS: VFS: Invalid SecurityFlags: [ 421.507906][T19257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.823809][T13332] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 421.823837][T13332] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 421.839491][T13332] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 422.075887][T19673] batman_adv: Routing algorithm '' is not supported [ 422.354400][T19257] veth0_vlan: entered promiscuous mode [ 422.407854][T19257] veth1_vlan: entered promiscuous mode [ 422.535913][T19257] veth0_macvtap: entered promiscuous mode [ 422.581289][T19257] veth1_macvtap: entered promiscuous mode [ 422.663722][T19257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.723039][T19257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.801483][T13370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.847282][T13370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.893113][T13370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.959390][T13370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.295727][T13410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.340440][T13410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.456474][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.489961][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.118758][T19742] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 429.050811][T19917] bond0: invalid ARP target specified [ 430.385076][T19966] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 431.263931][T18433] syz.1.6158 (18433) used greatest stack depth: 18304 bytes left [ 433.011869][T20058] Process accounting paused [ 433.985986][T20101] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6882'. [ 434.070246][T20101] Zero length message leads to an empty skb [ 434.747272][T20127] nbd: couldn't find device at index 158 [ 436.455781][T20176] netlink: 'syz.4.6907': attribute type 1 has an invalid length. [ 437.412613][T13332] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 437.821273][T20232] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 438.841623][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.851273][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.086303][T20262] phram: parameter too long [ 439.488379][T20285] FAULT_INJECTION: forcing a failure. [ 439.488379][T20285] name failslab, interval 1, probability 0, space 0, times 1 [ 439.528280][T13332] Bluetooth: hci1: ISO packet for unknown connection handle 4095 [ 439.599485][T20285] CPU: 0 UID: 0 PID: 20285 Comm: syz.4.6953 Tainted: G U syzkaller #0 PREEMPT(full) [ 439.599515][T20285] Tainted: [U]=USER [ 439.599520][T20285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.599538][T20285] Call Trace: [ 439.599544][T20285] [ 439.599549][T20285] dump_stack_lvl+0x100/0x190 [ 439.599579][T20285] should_fail_ex.cold+0x5/0xa [ 439.599617][T20285] should_failslab+0xc2/0x120 [ 439.599640][T20285] __kmalloc_node_noprof+0x101/0x830 [ 439.599658][T20285] ? __kmalloc_noprof+0x311/0x820 [ 439.599677][T20285] ? get_callchain_buffers+0x1e5/0x380 [ 439.599711][T20285] get_callchain_buffers+0x1e5/0x380 [ 439.599730][T20285] ? security_capable+0x80/0x260 [ 439.599824][T20285] stack_map_alloc+0x316/0x610 [ 439.599846][T20285] map_create+0x874/0x3120 [ 439.599884][T20285] ? __lock_acquire+0x49f/0x1a40 [ 439.599920][T20285] ? __pfx_map_create+0x10/0x10 [ 439.599947][T20285] ? __might_fault+0xc5/0x140 [ 439.599972][T20285] __sys_bpf+0x2a6e/0x4e80 [ 439.599998][T20285] ? __pfx___sys_bpf+0x10/0x10 [ 439.600013][T20285] ? __pfx_futex_hash+0x10/0x10 [ 439.600036][T20285] ? get_pid_task+0xfc/0x250 [ 439.600057][T20285] ? get_pid_task+0xfc/0x250 [ 439.600081][T20285] ? futex_wait+0x11e/0x370 [ 439.600100][T20285] ? __pfx_futex_wait+0x10/0x10 [ 439.600118][T20285] ? find_held_lock+0x2b/0x80 [ 439.600140][T20285] ? rcu_read_lock_any_held+0x6a/0xa0 [ 439.600164][T20285] ? find_held_lock+0x2b/0x80 [ 439.600181][T20285] ? ksys_write+0x190/0x250 [ 439.600195][T20285] ? ksys_write+0x190/0x250 [ 439.600220][T20285] ? __x64_sys_futex+0x34f/0x4d0 [ 439.600235][T20285] ? __x64_sys_futex+0x358/0x4d0 [ 439.600253][T20285] ? xfd_validate_state+0x129/0x190 [ 439.600274][T20285] ? __x64_sys_bpf+0xce/0x140 [ 439.600289][T20285] __x64_sys_bpf+0xce/0x140 [ 439.600306][T20285] ? do_syscall_64+0x90/0x840 [ 439.600328][T20285] do_syscall_64+0x115/0x840 [ 439.600346][T20285] ? clear_bhb_loop+0x40/0x90 [ 439.600366][T20285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.600382][T20285] RIP: 0033:0x7ff5ecb9e0d9 [ 439.600396][T20285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.600411][T20285] RSP: 002b:00007ff5ed990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.600429][T20285] RAX: ffffffffffffffda RBX: 00007ff5ece25fa0 RCX: 00007ff5ecb9e0d9 [ 439.600439][T20285] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 439.600448][T20285] RBP: 00007ff5ecc35024 R08: 0000000000000000 R09: 0000000000000000 [ 439.600458][T20285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.600467][T20285] R13: 00007ff5ece26038 R14: 00007ff5ece25fa0 R15: 00007ffd84a52998 [ 439.600488][T20285] [ 441.086475][T20303] netlink: Unknown NAT attribute (type=262, max=9) [ 442.337830][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6975'. [ 443.251585][T20357] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 443.675647][T20342] : entered promiscuous mode [ 602.057534][T13407] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 602.057565][T13407] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 602.073336][T13407] Bluetooth: hci0: Dropping invalid advertising data [ 602.080277][T13407] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 602.080300][T13407] Bluetooth: hci0: unknown advertising packet type: 0x8b [ 602.087350][T13407] Bluetooth: hci0: unknown advertising packet type: 0xee [ 602.385562][T25380] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 603.832524][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9305'. [ 603.880160][T25430] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 604.233114][T25443] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 606.627481][T25503] openvswitch: netlink: IP tunnel dst address not specified [ 606.651177][T25501] vmstat_refresh: nr_hugetlb -7680 [ 607.737481][T25529] syz.0.9351 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 607.779929][T25529] CPU: 0 UID: 0 PID: 25529 Comm: syz.0.9351 Tainted: G U L syzkaller #0 PREEMPT(full) [ 607.779957][T25529] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 607.779963][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.779972][T25529] Call Trace: [ 607.779978][T25529] [ 607.779984][T25529] dump_stack_lvl+0x100/0x190 [ 607.780007][T25529] dump_header+0xfb/0x606 [ 607.780025][T25529] oom_kill_process.cold+0xd/0x330 [ 607.780044][T25529] out_of_memory+0x340/0x14f0 [ 607.780075][T25529] ? __pfx_out_of_memory+0x10/0x10 [ 607.780105][T25529] mem_cgroup_out_of_memory+0xc6/0x130 [ 607.780123][T25529] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 607.780138][T25529] ? find_held_lock+0x2b/0x80 [ 607.780161][T25529] ? do_raw_spin_unlock+0x145/0x1e0 [ 607.780178][T25529] ? _raw_spin_unlock+0x28/0x50 [ 607.780198][T25529] try_charge_memcg+0x6e5/0xdf0 [ 607.780224][T25529] ? __pfx_try_charge_memcg+0x10/0x10 [ 607.780245][T25529] ? find_held_lock+0x2b/0x80 [ 607.780262][T25529] ? rcu_read_unlock+0x17/0x60 [ 607.780284][T25529] ? rcu_read_unlock+0x17/0x60 [ 607.780306][T25529] ? find_held_lock+0x2b/0x80 [ 607.780324][T25529] ? rcu_read_unlock+0x17/0x60 [ 607.780350][T25529] charge_memcg+0x187/0x1e0 [ 607.780373][T25529] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 607.780391][T25529] swap_cache_alloc_folio+0x548/0xc50 [ 607.780413][T25529] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 607.780430][T25529] ? swap_cache_get_folio+0x28d/0x360 [ 607.780447][T25529] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 607.780463][T25529] ? lockdep_hardirqs_on+0x78/0x100 [ 607.780483][T25529] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 607.780505][T25529] swap_cache_read_folio+0x47/0x140 [ 607.780524][T25529] swap_cluster_readahead+0x479/0x5f0 [ 607.780546][T25529] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 607.780573][T25529] ? __lock_acquire+0x49f/0x1a40 [ 607.780595][T25529] ? get_vma_policy+0x23d/0x3b0 [ 607.780619][T25529] swapin_readahead+0x159/0x1200 [ 607.780642][T25529] ? __pfx_swapin_readahead+0x10/0x10 [ 607.780664][T25529] ? swap_table_get+0x10d/0x2c0 [ 607.780680][T25529] ? swap_cache_get_folio+0x28d/0x360 [ 607.780696][T25529] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 607.780713][T25529] ? __pfx_softleaf_type+0x10/0x10 [ 607.780741][T25529] ? do_swap_page+0xf98/0x5780 [ 607.780754][T25529] do_swap_page+0xf98/0x5780 [ 607.780778][T25529] ? __pfx_do_swap_page+0x10/0x10 [ 607.780793][T25529] ? __lock_acquire+0x49f/0x1a40 [ 607.780818][T25529] ? rcu_is_watching+0x12/0xc0 [ 607.780836][T25529] ? __pte_offset_map+0x179/0x310 [ 607.780858][T25529] __handle_mm_fault+0x192f/0x2a00 [ 607.780878][T25529] ? reacquire_held_locks+0xce/0x1e0 [ 607.780901][T25529] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.780919][T25529] ? lock_vma_under_rcu+0x17c/0x590 [ 607.780945][T25529] handle_mm_fault+0x37b/0xa30 [ 607.780964][T25529] do_user_addr_fault+0x5a3/0x12f0 [ 607.780991][T25529] exc_page_fault+0x6f/0xd0 [ 607.781011][T25529] asm_exc_page_fault+0x26/0x30 [ 607.781026][T25529] RIP: 0033:0x7f063d5706c9 [ 607.781040][T25529] Code: 07 c5 fe 7f 44 17 e0 e9 88 00 00 00 c5 fe 7f 47 c0 c5 fe 7f 47 e0 eb 7c 66 0f 1f 84 00 00 00 00 00 48 3b 15 11 1c 28 00 77 77 fe 7f 07 c5 fe 7f 47 20 48 01 d7 48 81 fa 80 00 00 00 76 cd c5 [ 607.781054][T25529] RSP: 002b:00007ffcdc785b88 EFLAGS: 00010287 [ 607.781067][T25529] RAX: 0000555579db6a00 RBX: 00007f063e5236c0 RCX: 0000000000000120 [ 607.781077][T25529] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000555579db6a00 [ 607.781086][T25529] RBP: 000000000000000f R08: 00007f063d7f2e20 R09: 0000000000000001 [ 607.781095][T25529] R10: 0000000000021000 R11: 0000000000000000 R12: 00007ffcdc785d00 [ 607.781104][T25529] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 607.781123][T25529] [ 607.781156][T25529] memory: usage 3072kB, limit 3072kB, failcnt 56405 [ 609.026448][ T29] audit: type=1800 audit(4294967313.505:38): pid=25532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9348" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 609.052442][T25532] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 609.108434][T25532] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 609.151053][T25532] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 609.393501][T25529] memory+swap: usage 38632kB, limit 9007199254740988kB, failcnt 0 [ 609.518346][T25529] kmem: usage 2056kB, limit 9007199254740988kB, failcnt 0 [ 609.597076][T25529] Memory cgroup stats for /syz0: [ 609.597314][T25529] cache 954368 [ 609.698512][T25529] rss 0 [ 609.724593][T25529] rss_huge 0 [ 609.760939][T25529] shmem 385024 [ 609.803558][T25529] mapped_file 81920 [ 609.830865][T25529] dirty 0 [ 609.863018][T25529] writeback 0 [ 609.901257][T25529] workingset_refault_anon 4313 [ 609.966255][T25529] workingset_refault_file 28069 [ 609.994499][T25553] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 610.017731][T25529] swap 36712448 [ 610.045332][T25529] swapcached 160845824 [ 610.087899][T25529] pgpgin 245184 [ 610.132276][T25529] pgpgout 251591 [ 610.183671][T25529] pgfault 484119 [ 610.215507][T25529] pgmajfault 1808 [ 610.247631][T25529] inactive_anon 401408 [ 610.296703][T25529] active_anon 0 [ 610.340262][T25529] inactive_file 372736 [ 610.384404][T25529] active_file 196608 [ 610.424578][T25529] unevictable 0 [ 610.469800][T25529] hierarchical_memory_limit 3145728 [ 610.528876][T25529] hierarchical_memsw_limit 9223372036854771712 [ 610.555598][T25570] netlink: Invalid conntrack helper [ 610.572899][T25529] total_cache 954368 [ 610.601582][T25529] total_rss 0 [ 610.629483][T25529] total_rss_huge 0 [ 610.657469][T25529] total_shmem 385024 [ 610.710479][T25529] total_mapped_file 81920 [ 610.767249][T25529] total_dirty 0 [ 610.815677][T25529] total_writeback 0 [ 610.857979][T25529] total_workingset_refault_anon 4313 [ 610.907908][T25529] total_workingset_refault_file 28069 [ 610.962215][T25529] total_swap 36712448 [ 611.021861][T25529] total_swapcached 160845824 [ 611.073365][T25529] total_pgpgin 245184 [ 611.116713][T25529] total_pgpgout 251591 [ 611.168819][T25529] total_pgfault 484119 [ 611.228444][T25529] total_pgmajfault 1808 [ 611.243391][T25587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.270548][T25529] total_inactive_anon 401408 [ 611.334817][T25529] total_active_anon 0 [ 611.370290][T25529] total_inactive_file 372736 [ 611.409915][T25529] total_active_file 196608 [ 611.440496][T25529] total_unevictable 0 [ 611.478126][T25529] anon_cost 64 [ 611.529477][T25529] file_cost 7 [ 611.559904][T25529] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9106,pid=25020,uid=0 [ 611.775136][T25529] Memory cgroup out of memory: Killed process 25020 (syz.0.9106) total-vm:104300kB, anon-rss:1248kB, file-rss:44776kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 611.893342][T25601] unsupported nla_type 113 [ 612.222854][T25610] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 612.414229][ T29] audit: type=1326 audit(4294967316.923:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25613 comm="syz.1.9395" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69e4b9e0d9 code=0x0 [ 613.923300][T25673] Process accounting paused [ 614.095688][T25680] netlink: zone id is out of range [ 614.120429][T25680] netlink: get zone limit has 8 unknown bytes [ 614.353927][T25687] openvswitch: netlink: Flow key attr not present in new flow. [ 615.005626][T25711] netlink: 'syz.4.9441': attribute type 1 has an invalid length. [ 616.136116][T25752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9460'. [ 617.845792][T25819] netlink: 'syz.2.9493': attribute type 1 has an invalid length. [ 618.064488][T25827] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 618.244821][T25834] nbd: illegal input index -1024 [ 618.846472][T25858] netlink: 'syz.1.9510': attribute type 1 has an invalid length. [ 619.436722][T25880] netlink: 'syz.1.9523': attribute type 1 has an invalid length. [ 619.873707][T25895] FAULT_INJECTION: forcing a failure. [ 619.873707][T25895] name failslab, interval 1, probability 0, space 0, times 0 [ 619.937969][T25895] CPU: 0 UID: 0 PID: 25895 Comm: syz.2.9530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 619.938012][T25895] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 619.938018][T25895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.938029][T25895] Call Trace: [ 619.938035][T25895] [ 619.938041][T25895] dump_stack_lvl+0x100/0x190 [ 619.938067][T25895] should_fail_ex.cold+0x5/0xa [ 619.938086][T25895] should_failslab+0xc2/0x120 [ 619.938116][T25895] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 619.938138][T25895] ? __d_alloc+0x35/0xa50 [ 619.938163][T25895] __d_alloc+0x35/0xa50 [ 619.938178][T25895] ? __lock_acquire+0x49f/0x1a40 [ 619.938203][T25895] d_alloc_parallel+0x105/0x14b0 [ 619.938232][T25895] ? __pfx_d_alloc_parallel+0x10/0x10 [ 619.938253][T25895] ? __d_lookup+0x25c/0x4a0 [ 619.938278][T25895] ? __d_lookup+0x266/0x4a0 [ 619.938308][T25895] path_openat+0x271c/0x4280 [ 619.938333][T25895] ? __pfx_path_openat+0x10/0x10 [ 619.938359][T25895] do_file_open+0x20e/0x430 [ 619.938376][T25895] ? __pfx_do_file_open+0x10/0x10 [ 619.938398][T25895] ? __pfx_kfree_link+0x10/0x10 [ 619.938541][T25895] ? alloc_fd+0x471/0x7a0 [ 619.938559][T25895] ? do_getname+0x191/0x390 [ 619.938580][T25895] do_sys_openat2+0x10f/0x1e0 [ 619.938603][T25895] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.938622][T25895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.938657][T25895] __x64_sys_openat+0x12d/0x210 [ 619.938678][T25895] ? __pfx___x64_sys_openat+0x10/0x10 [ 619.938707][T25895] do_syscall_64+0x115/0x840 [ 619.938728][T25895] ? clear_bhb_loop+0x40/0x90 [ 619.938747][T25895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.938762][T25895] RIP: 0033:0x7fb3e499e0d9 [ 619.938780][T25895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.938795][T25895] RSP: 002b:00007fb3e57e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.938810][T25895] RAX: ffffffffffffffda RBX: 00007fb3e4c25fa0 RCX: 00007fb3e499e0d9 [ 619.938821][T25895] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 619.938831][T25895] RBP: 00007fb3e4a35024 R08: 0000000000000000 R09: 0000000000000000 [ 619.938841][T25895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.938850][T25895] R13: 00007fb3e4c26038 R14: 00007fb3e4c25fa0 R15: 00007ffdc79e8298 [ 619.938871][T25895] [ 620.445666][T25907] nbd: must specify an index to disconnect [ 622.026634][T25970] netlink: 'syz.0.9565': attribute type 1 has an invalid length. [ 622.049991][T25972] netlink: 'syz.2.9566': attribute type 1 has an invalid length. [ 622.063798][T25970] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9565'. [ 622.090125][T25972] nbd: error processing sock list [ 622.208874][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.217684][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.756241][T25997] netlink: 'syz.2.9578': attribute type 1 has an invalid length. [ 622.801270][T26001] netlink: 'syz.1.9580': attribute type 1 has an invalid length. [ 623.044215][T13410] ttyS ttyS0: 1 input overrun(s) [ 624.192402][T26057] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 624.601254][T26073] syz.0.9614(26073): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 626.744273][T26164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9658'. [ 628.216365][T26225] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 629.044880][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9700'. [ 629.686969][T26283] netlink: 334 bytes leftover after parsing attributes in process `syz.0.9712'. [ 629.766476][T13407] Bluetooth: hci0: ACL packet too small [ 631.377346][T26353] openvswitch: netlink: Flow actions attr not present in new flow. [ 631.533372][T26359] netlink: Setting conntrack mark requires 'commit' flag. [ 631.573920][T26363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9751'. [ 631.613225][T26363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9751'. [ 632.146218][T26383] netlink: 'syz.1.9762': attribute type 11 has an invalid length. [ 632.192249][T26383] netlink: 'syz.1.9762': attribute type 11 has an invalid length. [ 632.235276][T26383] netlink: 'syz.1.9762': attribute type 11 has an invalid length. [ 632.964759][T26421] netlink: zone id is out of range [ 633.968486][T13407] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 634.004862][T26462] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 634.012554][T26462] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 634.022023][T26462] CPU: 0 UID: 0 PID: 26462 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.022054][T26462] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.022060][T26462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.022072][T26462] Workqueue: hci1 hci_rx_work [ 634.022185][T26462] Call Trace: [ 634.022192][T26462] [ 634.022199][T26462] dump_stack_lvl+0x100/0x190 [ 634.022225][T26462] sysfs_warn_dup.cold+0x1c/0x28 [ 634.022261][T26462] sysfs_create_dir_ns+0x24b/0x2b0 [ 634.022342][T26462] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 634.022378][T26462] ? find_held_lock+0x2b/0x80 [ 634.022399][T26462] ? kobject_add_internal+0x25f/0x930 [ 634.022419][T26462] ? kobject_add_internal+0x25f/0x930 [ 634.022436][T26462] ? do_raw_spin_unlock+0x145/0x1e0 [ 634.022455][T26462] kobject_add_internal+0x2c8/0x930 [ 634.022473][T26462] kobject_add+0x16a/0x1e0 [ 634.022489][T26462] ? __pfx_kobject_add+0x10/0x10 [ 634.022503][T26462] ? class_to_subsys+0x10f/0x150 [ 634.022584][T26462] ? kobject_put+0xb9/0x640 [ 634.022597][T26462] ? _raw_spin_unlock+0x28/0x50 [ 634.022670][T26462] device_add+0x294/0x1970 [ 634.022698][T26462] ? __pfx_dev_set_name+0x10/0x10 [ 634.022739][T26462] ? __pfx_device_add+0x10/0x10 [ 634.022755][T26462] ? mgmt_send_event_skb+0x2fb/0x460 [ 634.022809][T26462] hci_conn_add_sysfs+0x1a3/0x260 [ 634.022876][T26462] le_conn_complete_evt+0x11eb/0x1f60 [ 634.022943][T26462] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 634.022961][T26462] ? __pfx_bt_warn+0x10/0x10 [ 634.022980][T26462] ? hci_event_packet+0x186/0xcd0 [ 634.023003][T26462] hci_le_conn_complete_evt+0x23c/0x3a0 [ 634.023023][T26462] ? skb_pull_data+0x15f/0x1e0 [ 634.023045][T26462] hci_le_meta_evt+0x34a/0x5f0 [ 634.023088][T26462] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 634.023112][T26462] hci_event_packet+0x51c/0xcd0 [ 634.023132][T26462] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 634.023154][T26462] ? __pfx_hci_event_packet+0x10/0x10 [ 634.023175][T26462] ? kcov_remote_start+0x384/0x670 [ 634.023198][T26462] ? lockdep_hardirqs_on+0x78/0x100 [ 634.023224][T26462] hci_rx_work+0x451/0xfc0 [ 634.023247][T26462] process_one_work+0xa23/0x1940 [ 634.023277][T26462] ? __pfx_process_one_work+0x10/0x10 [ 634.023304][T26462] ? __pfx_hci_rx_work+0x10/0x10 [ 634.023324][T26462] worker_thread+0x5ef/0xe50 [ 634.023350][T26462] ? __pfx_worker_thread+0x10/0x10 [ 634.023372][T26462] ? kthread+0x13a/0x450 [ 634.023391][T26462] ? __pfx_worker_thread+0x10/0x10 [ 634.023410][T26462] kthread+0x370/0x450 [ 634.023429][T26462] ? __pfx_kthread+0x10/0x10 [ 634.023450][T26462] ret_from_fork+0x72b/0xd50 [ 634.023470][T26462] ? __pfx_ret_from_fork+0x10/0x10 [ 634.023488][T26462] ? rcu_is_watching+0x12/0xc0 [ 634.023507][T26462] ? __switch_to+0x800/0x10f0 [ 634.023529][T26462] ? __switch_to_asm+0x39/0x70 [ 634.023549][T26462] ? __pfx_kthread+0x10/0x10 [ 634.023569][T26462] ret_from_fork_asm+0x1a/0x30 [ 634.023599][T26462] [ 634.632149][T26462] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 634.646390][T26462] Bluetooth: hci1: failed to register connection device [ 634.881581][T26480] sctp: [Deprecated]: syz.4.9807 (pid 26480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.881581][T26480] Use struct sctp_sack_info instead [ 636.053062][T26462] Bluetooth: hci1: command 0x0406 tx timeout [ 636.377450][T26535] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9834'. [ 638.122966][T26462] Bluetooth: hci1: command 0x0406 tx timeout [ 638.717001][T26610] netlink: 'syz.0.9866': attribute type 2 has an invalid length. [ 639.414670][T26640] block nbd2: not configured, cannot reconfigure [ 640.023564][T26663] FAULT_INJECTION: forcing a failure. [ 640.023564][T26663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 640.079107][T26663] CPU: 0 UID: 0 PID: 26663 Comm: syz.0.9892 Tainted: G U L syzkaller #0 PREEMPT(full) [ 640.079138][T26663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 640.079145][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.079154][T26663] Call Trace: [ 640.079167][T26663] [ 640.079174][T26663] dump_stack_lvl+0x100/0x190 [ 640.079198][T26663] should_fail_ex.cold+0x5/0xa [ 640.079215][T26663] ? prepare_alloc_pages+0x16d/0x5f0 [ 640.079241][T26663] should_fail_alloc_page+0xeb/0x140 [ 640.079265][T26663] prepare_alloc_pages+0x1f0/0x5f0 [ 640.079286][T26663] ? rcu_is_watching+0x12/0xc0 [ 640.079313][T26663] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 640.079341][T26663] ? find_held_lock+0x2b/0x80 [ 640.079360][T26663] ? rcu_read_unlock+0x17/0x60 [ 640.079383][T26663] ? rcu_read_unlock+0x17/0x60 [ 640.079406][T26663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 640.079428][T26663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 640.079448][T26663] ? rcu_is_watching+0x12/0xc0 [ 640.079465][T26663] ? trace_mm_page_alloc+0x164/0x1c0 [ 640.079492][T26663] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 640.079514][T26663] ? __lock_acquire+0x49f/0x1a40 [ 640.079535][T26663] ? __css_rstat_updated+0x1ce/0x5a0 [ 640.079560][T26663] ? __lock_acquire+0x49f/0x1a40 [ 640.079581][T26663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 640.079605][T26663] ? policy_nodemask+0xed/0x4f0 [ 640.079628][T26663] alloc_pages_mpol+0x1fb/0x540 [ 640.079650][T26663] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 640.079671][T26663] ? find_held_lock+0x2b/0x80 [ 640.079691][T26663] ? __pud_alloc+0x4f6/0x690 [ 640.079711][T26663] ? __pud_alloc+0x4f6/0x690 [ 640.079733][T26663] alloc_pages_noprof+0x1a/0x160 [ 640.079749][T26663] __pmd_alloc+0x3b/0x950 [ 640.079768][T26663] ? __pud_alloc+0x4fb/0x690 [ 640.079790][T26663] walk_to_pmd+0x3a3/0x4c0 [ 640.079813][T26663] get_locked_pte+0x25/0xc0 [ 640.079836][T26663] map_ldt_struct+0x3c1/0xa70 [ 640.079862][T26663] ? __pfx_map_ldt_struct+0x10/0x10 [ 640.079883][T26663] ? alloc_pages_noprof+0xf9/0x160 [ 640.079900][T26663] write_ldt+0x6d3/0xd40 [ 640.079923][T26663] ? __pfx_write_ldt+0x10/0x10 [ 640.079945][T26663] ? xfd_validate_state+0x129/0x190 [ 640.079967][T26663] __x64_sys_modify_ldt+0xb1/0x170 [ 640.079989][T26663] do_syscall_64+0x115/0x840 [ 640.080009][T26663] ? clear_bhb_loop+0x40/0x90 [ 640.080028][T26663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.080044][T26663] RIP: 0033:0x7f063d59e0d9 [ 640.080058][T26663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.080074][T26663] RSP: 002b:00007f063e523028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 640.080090][T26663] RAX: ffffffffffffffda RBX: 00007f063d825fa0 RCX: 00007f063d59e0d9 [ 640.080099][T26663] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 640.080109][T26663] RBP: 00007f063d635024 R08: 0000000000000000 R09: 0000000000000000 [ 640.080118][T26663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.080127][T26663] R13: 00007f063d826038 R14: 00007f063d825fa0 R15: 00007ffcdc785c08 [ 640.080148][T26663] [ 640.451375][T26462] Bluetooth: hci1: command 0x0406 tx timeout [ 640.553174][T26674] dyndbg: expected <4096 bytes into control [ 640.630332][T26678] HSR: entered promiscuous mode [ 642.437772][T26738] openvswitch: netlink: IP tunnel dst address not specified [ 642.499273][T13407] Bluetooth: hci1: command 0x0406 tx timeout [ 643.096889][T26766] FAULT_INJECTION: forcing a failure. [ 643.096889][T26766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.177230][T26766] CPU: 0 UID: 0 PID: 26766 Comm: syz.4.9940 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.177264][T26766] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.177271][T26766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.177281][T26766] Call Trace: [ 643.177286][T26766] [ 643.177293][T26766] dump_stack_lvl+0x100/0x190 [ 643.177318][T26766] should_fail_ex.cold+0x5/0xa [ 643.177335][T26766] ? prepare_alloc_pages+0x16d/0x5f0 [ 643.177361][T26766] should_fail_alloc_page+0xeb/0x140 [ 643.177389][T26766] prepare_alloc_pages+0x1f0/0x5f0 [ 643.177417][T26766] ? rcu_is_watching+0x12/0xc0 [ 643.177439][T26766] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 643.177467][T26766] ? find_held_lock+0x2b/0x80 [ 643.177485][T26766] ? rcu_read_unlock+0x17/0x60 [ 643.177507][T26766] ? rcu_read_unlock+0x17/0x60 [ 643.177529][T26766] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 643.177546][T26766] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 643.177565][T26766] ? rcu_is_watching+0x12/0xc0 [ 643.177583][T26766] ? trace_mm_page_alloc+0x164/0x1c0 [ 643.177605][T26766] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 643.177626][T26766] ? __lock_acquire+0x49f/0x1a40 [ 643.177647][T26766] ? __css_rstat_updated+0x1ce/0x5a0 [ 643.177673][T26766] ? __lock_acquire+0x49f/0x1a40 [ 643.177693][T26766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 643.177717][T26766] ? policy_nodemask+0xed/0x4f0 [ 643.177740][T26766] alloc_pages_mpol+0x1fb/0x540 [ 643.177765][T26766] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 643.177786][T26766] ? find_held_lock+0x2b/0x80 [ 643.177804][T26766] ? __pud_alloc+0x4f6/0x690 [ 643.177825][T26766] ? __pud_alloc+0x4f6/0x690 [ 643.177850][T26766] alloc_pages_noprof+0x1a/0x160 [ 643.177865][T26766] __pmd_alloc+0x3b/0x950 [ 643.177885][T26766] ? __pud_alloc+0x4fb/0x690 [ 643.177907][T26766] walk_to_pmd+0x3a3/0x4c0 [ 643.177930][T26766] get_locked_pte+0x25/0xc0 [ 643.177953][T26766] map_ldt_struct+0x3c1/0xa70 [ 643.177986][T26766] ? __pfx_map_ldt_struct+0x10/0x10 [ 643.178009][T26766] ? alloc_pages_noprof+0xf9/0x160 [ 643.178027][T26766] write_ldt+0x6d3/0xd40 [ 643.178053][T26766] ? __pfx_write_ldt+0x10/0x10 [ 643.178075][T26766] ? xfd_validate_state+0x129/0x190 [ 643.178099][T26766] __x64_sys_modify_ldt+0xb1/0x170 [ 643.178121][T26766] do_syscall_64+0x115/0x840 [ 643.178141][T26766] ? clear_bhb_loop+0x40/0x90 [ 643.178161][T26766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.178178][T26766] RIP: 0033:0x7f640af9e0d9 [ 643.178193][T26766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.178208][T26766] RSP: 002b:00007f640bf2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 643.178223][T26766] RAX: ffffffffffffffda RBX: 00007f640b225fa0 RCX: 00007f640af9e0d9 [ 643.178233][T26766] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 643.178242][T26766] RBP: 00007f640b035024 R08: 0000000000000000 R09: 0000000000000000 [ 643.178252][T26766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.178261][T26766] R13: 00007f640b226038 R14: 00007f640b225fa0 R15: 00007ffdfe388338 [ 643.178282][T26766] [ 643.714907][T26778] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.829658][T26773] Process accounting resumed [ 644.388592][T26811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9961'. [ 644.668334][T13407] Bluetooth: hci2: command 0x0406 tx timeout [ 645.747708][ T5631] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 645.782954][T26857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9984'. [ 645.854071][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 645.854101][ T5631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 645.854108][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.854117][ T5631] Call Trace: [ 645.854122][ T5631] [ 645.854128][ T5631] dump_stack_lvl+0x100/0x190 [ 645.854152][ T5631] dump_header+0xfb/0x606 [ 645.854171][ T5631] oom_kill_process.cold+0xd/0x330 [ 645.854189][ T5631] out_of_memory+0x340/0x14f0 [ 645.854219][ T5631] ? __pfx_out_of_memory+0x10/0x10 [ 645.854247][ T5631] mem_cgroup_out_of_memory+0xc6/0x130 [ 645.854266][ T5631] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 645.854282][ T5631] ? find_held_lock+0x2b/0x80 [ 645.854305][ T5631] ? do_raw_spin_unlock+0x145/0x1e0 [ 645.854322][ T5631] ? _raw_spin_unlock+0x28/0x50 [ 645.854343][ T5631] try_charge_memcg+0x6e5/0xdf0 [ 645.854369][ T5631] ? __pfx_try_charge_memcg+0x10/0x10 [ 645.854389][ T5631] ? find_held_lock+0x2b/0x80 [ 645.854407][ T5631] ? rcu_read_unlock+0x17/0x60 [ 645.854429][ T5631] ? rcu_read_unlock+0x17/0x60 [ 645.854450][ T5631] ? find_held_lock+0x2b/0x80 [ 645.854469][ T5631] ? rcu_read_unlock+0x17/0x60 [ 645.854495][ T5631] charge_memcg+0x187/0x1e0 [ 645.854518][ T5631] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 645.854536][ T5631] swap_cache_alloc_folio+0x548/0xc50 [ 645.854557][ T5631] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 645.854574][ T5631] ? swap_cache_get_folio+0x28d/0x360 [ 645.854591][ T5631] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 645.854613][ T5631] swap_cache_read_folio+0x47/0x140 [ 645.854633][ T5631] swap_cluster_readahead+0x387/0x5f0 [ 645.854655][ T5631] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 645.854673][ T5631] ? __css_rstat_updated+0x1ce/0x5a0 [ 645.854704][ T5631] ? __lock_acquire+0x49f/0x1a40 [ 645.854726][ T5631] ? get_vma_policy+0x23d/0x3b0 [ 645.854751][ T5631] swapin_readahead+0x159/0x1200 [ 645.854768][ T5631] ? debug_object_assert_init+0x1c4/0x310 [ 645.854925][ T5631] ? __pfx_swapin_readahead+0x10/0x10 [ 645.854947][ T5631] ? swap_table_get+0x10d/0x2c0 [ 645.854963][ T5631] ? swap_cache_get_folio+0x28d/0x360 [ 645.854980][ T5631] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 645.854997][ T5631] ? __pfx_softleaf_type+0x10/0x10 [ 645.855017][ T5631] ? do_swap_page+0xf98/0x5780 [ 645.855031][ T5631] do_swap_page+0xf98/0x5780 [ 645.855055][ T5631] ? __pfx_do_swap_page+0x10/0x10 [ 645.855070][ T5631] ? __lock_acquire+0x49f/0x1a40 [ 645.855093][ T5631] ? lockdep_hardirqs_on+0x78/0x100 [ 645.855124][ T5631] ? rcu_is_watching+0x12/0xc0 [ 645.855142][ T5631] ? __pte_offset_map+0x179/0x310 [ 645.855164][ T5631] __handle_mm_fault+0x192f/0x2a00 [ 645.855183][ T5631] ? reacquire_held_locks+0xce/0x1e0 [ 645.855207][ T5631] ? __pfx___handle_mm_fault+0x10/0x10 [ 645.855226][ T5631] ? lock_vma_under_rcu+0x17c/0x590 [ 645.855252][ T5631] handle_mm_fault+0x37b/0xa30 [ 645.855271][ T5631] do_user_addr_fault+0x5a3/0x12f0 [ 645.855298][ T5631] exc_page_fault+0x6f/0xd0 [ 645.855318][ T5631] asm_exc_page_fault+0x26/0x30 [ 645.855333][ T5631] RIP: 0033:0x7f063d55e90e [ 645.855349][ T5631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.855363][ T5631] RSP: 002b:00007ffcdc785ee8 EFLAGS: 00010246 [ 645.855376][ T5631] RAX: 0000000000000000 RBX: 0000555579da3500 RCX: 00007f063d55e90e [ 645.855386][ T5631] RDX: 00007ffcdc785f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.855395][ T5631] RBP: 00007ffcdc785fac R08: 0000000000000000 R09: 0000000000000000 [ 645.855404][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 645.855413][ T5631] R13: 00000000000927c0 R14: 000000000009e2cb R15: 00007ffcdc786000 [ 645.855433][ T5631] [ 645.857197][ T5631] memory: usage 3072kB, limit 3072kB, failcnt 65745 [ 646.738435][ T5631] memory+swap: usage 3400kB, limit 9007199254740988kB, failcnt 0 [ 646.746246][ T5631] kmem: usage 3044kB, limit 9007199254740988kB, failcnt 0 [ 646.753746][ T5631] Memory cgroup stats for /syz0: [ 646.753848][ T5631] cache 0 [ 646.762189][ T5631] rss 28672 [ 646.765313][ T5631] rss_huge 0 [ 646.770267][ T5631] shmem 0 [ 646.773241][ T5631] mapped_file 0 [ 646.776696][ T5631] dirty 0 [ 646.781180][ T5631] writeback 0 [ 646.784498][ T5631] workingset_refault_anon 4600 [ 646.789734][ T5631] workingset_refault_file 30319 [ 646.794641][ T5631] swap 335872 [ 646.798420][ T5631] swapcached 183824384 [ 646.802511][ T5631] pgpgin 259550 [ 646.805964][ T5631] pgpgout 266187 [ 646.810037][ T5631] pgfault 519476 [ 646.813615][ T5631] pgmajfault 1967 [ 646.817585][ T5631] inactive_anon 28672 [ 646.821585][ T5631] active_anon 0 [ 646.825035][ T5631] inactive_file 0 [ 646.831527][ T5631] active_file 0 [ 646.835015][ T5631] unevictable 0 [ 646.838743][ T5631] hierarchical_memory_limit 3145728 [ 646.843965][ T5631] hierarchical_memsw_limit 9223372036854771712 [ 646.850461][ T5631] total_cache 0 [ 646.853934][ T5631] total_rss 28672 [ 646.858167][ T5631] total_rss_huge 0 [ 646.861914][ T5631] total_shmem 0 [ 646.865363][ T5631] total_mapped_file 0 [ 646.869931][ T5631] total_dirty 0 [ 646.873420][ T5631] total_writeback 0 [ 646.878793][ T5631] total_workingset_refault_anon 4600 [ 646.884108][ T5631] total_workingset_refault_file 30319 [ 646.891259][ T5631] total_swap 335872 [ 646.895095][ T5631] total_swapcached 183824384 [ 646.900148][ T5631] total_pgpgin 259550 [ 646.904157][ T5631] total_pgpgout 266187 [ 646.908533][ T5631] total_pgfault 519476 [ 646.912633][ T5631] total_pgmajfault 1967 [ 646.917161][ T5631] total_inactive_anon 28672 [ 646.921808][ T5631] total_active_anon 0 [ 646.925791][ T5631] total_inactive_file 0 [ 646.932468][ T5631] total_active_file 0 [ 646.936730][ T5631] total_unevictable 0 [ 646.940745][ T5631] anon_cost 28 [ 646.944106][ T5631] file_cost 0 [ 646.948596][ T5631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9980,pid=26847,uid=0 [ 646.968820][ T5631] Memory cgroup out of memory: Killed process 26847 (syz.0.9980) total-vm:104432kB, anon-rss:1272kB, file-rss:20876kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 647.062411][T26850] debugfs: out of free dentries, can not create file 'netdev@ffff888067984700' [ 647.711398][T26895] NFSD: Failed to start, no listeners configured. [ 647.890215][T26906] netlink: 'syz.2.10007': attribute type 11 has an invalid length. [ 647.926203][T26906] netlink: 'syz.2.10007': attribute type 11 has an invalid length. [ 647.965756][T26906] netlink: 'syz.2.10007': attribute type 11 has an invalid length. [ 648.118696][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10011'. [ 648.390020][T13407] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 648.436295][T13407] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 648.454946][T13407] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 648.470032][T13407] CPU: 0 UID: 0 PID: 13407 Comm: kworker/u12:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 648.470061][T13407] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 648.470067][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.470079][T13407] Workqueue: hci2 hci_rx_work [ 648.470104][T13407] Call Trace: [ 648.470110][T13407] [ 648.470118][T13407] dump_stack_lvl+0x100/0x190 [ 648.470139][T13407] sysfs_warn_dup.cold+0x1c/0x28 [ 648.470163][T13407] sysfs_create_dir_ns+0x24b/0x2b0 [ 648.470188][T13407] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 648.470211][T13407] ? find_held_lock+0x2b/0x80 [ 648.470230][T13407] ? kobject_add_internal+0x25f/0x930 [ 648.470246][T13407] ? kobject_add_internal+0x25f/0x930 [ 648.470263][T13407] ? do_raw_spin_unlock+0x145/0x1e0 [ 648.470281][T13407] kobject_add_internal+0x2c8/0x930 [ 648.470299][T13407] kobject_add+0x16a/0x1e0 [ 648.470314][T13407] ? __pfx_kobject_add+0x10/0x10 [ 648.470327][T13407] ? class_to_subsys+0x10f/0x150 [ 648.470347][T13407] ? kobject_put+0xb9/0x640 [ 648.470359][T13407] ? _raw_spin_unlock+0x28/0x50 [ 648.470381][T13407] device_add+0x294/0x1970 [ 648.470396][T13407] ? __pfx_dev_set_name+0x10/0x10 [ 648.470414][T13407] ? __pfx_device_add+0x10/0x10 [ 648.470429][T13407] ? mgmt_send_event_skb+0x2fb/0x460 [ 648.470454][T13407] hci_conn_add_sysfs+0x1a3/0x260 [ 648.470477][T13407] le_conn_complete_evt+0x11eb/0x1f60 [ 648.470501][T13407] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 648.470518][T13407] ? __pfx_bt_warn+0x10/0x10 [ 648.470531][T13407] ? hci_event_packet+0x186/0xcd0 [ 648.470554][T13407] hci_le_conn_complete_evt+0x23c/0x3a0 [ 648.470574][T13407] ? skb_pull_data+0x15f/0x1e0 [ 648.470593][T13407] hci_le_meta_evt+0x34a/0x5f0 [ 648.470613][T13407] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 648.470635][T13407] hci_event_packet+0x51c/0xcd0 [ 648.470653][T13407] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 648.470674][T13407] ? __pfx_hci_event_packet+0x10/0x10 [ 648.470702][T13407] ? kcov_remote_start+0x384/0x670 [ 648.470724][T13407] ? lockdep_hardirqs_on+0x78/0x100 [ 648.470750][T13407] hci_rx_work+0x451/0xfc0 [ 648.470771][T13407] process_one_work+0xa23/0x1940 [ 648.470801][T13407] ? __pfx_process_one_work+0x10/0x10 [ 648.470828][T13407] ? __pfx_hci_rx_work+0x10/0x10 [ 648.470848][T13407] worker_thread+0x5ef/0xe50 [ 648.470876][T13407] ? kthread+0x13a/0x450 [ 648.470894][T13407] ? __pfx_worker_thread+0x10/0x10 [ 648.470914][T13407] kthread+0x370/0x450 [ 648.470933][T13407] ? __pfx_kthread+0x10/0x10 [ 648.470953][T13407] ret_from_fork+0x72b/0xd50 [ 648.470972][T13407] ? __pfx_ret_from_fork+0x10/0x10 [ 648.470992][T13407] ? __switch_to+0x800/0x10f0 [ 648.471014][T13407] ? __switch_to_asm+0x39/0x70 [ 648.471034][T13407] ? __pfx_kthread+0x10/0x10 [ 648.471054][T13407] ret_from_fork_asm+0x1a/0x30 [ 648.471084][T13407] [ 648.471107][T13407] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 648.781044][T13407] Bluetooth: hci2: failed to register connection device [ 648.977426][T26935] openvswitch: netlink: Message has 4 unknown bytes. [ 649.631394][T26959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10032'. [ 650.027720][T26976] netlink: NAT attribute has 5 unknown bytes [ 650.460688][T13407] Bluetooth: hci2: command 0x0406 tx timeout [ 652.528871][T26462] Bluetooth: hci2: command 0x0406 tx timeout [ 654.166810][T27143] NFSD: Failed to start, no listeners configured. [ 654.597133][T13407] Bluetooth: hci2: command 0x0406 tx timeout [ 655.541806][T27204] netlink: 'syz.2.10151': attribute type 4 has an invalid length. [ 655.595618][T27204] netlink: 'syz.2.10151': attribute type 1 has an invalid length. [ 656.059183][T27222] FAULT_INJECTION: forcing a failure. [ 656.059183][T27222] name failslab, interval 1, probability 0, space 0, times 0 [ 656.115361][T27222] CPU: 0 UID: 0 PID: 27222 Comm: syz.1.10159 Tainted: G U L syzkaller #0 PREEMPT(full) [ 656.115391][T27222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 656.115398][T27222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.115408][T27222] Call Trace: [ 656.115414][T27222] [ 656.115422][T27222] dump_stack_lvl+0x100/0x190 [ 656.115448][T27222] should_fail_ex.cold+0x5/0xa [ 656.115467][T27222] should_failslab+0xc2/0x120 [ 656.115491][T27222] __kvmalloc_node_noprof+0x116/0x970 [ 656.115512][T27222] ? percpu_ref_init+0xec/0x3f0 [ 656.115533][T27222] ? io_alloc_cache_init+0x38/0x170 [ 656.115639][T27222] io_alloc_cache_init+0x38/0x170 [ 656.115662][T27222] io_uring_setup.cold+0x46e/0x1c2e [ 656.115688][T27222] ? ksys_write+0x190/0x250 [ 656.115702][T27222] ? ksys_write+0x190/0x250 [ 656.115715][T27222] ? __pfx_io_uring_setup+0x10/0x10 [ 656.115771][T27222] ? do_futex+0x190/0x440 [ 656.115790][T27222] ? __pfx_do_futex+0x10/0x10 [ 656.115817][T27222] ? xfd_validate_state+0x129/0x190 [ 656.115840][T27222] __x64_sys_io_uring_setup+0xc2/0x170 [ 656.115858][T27222] do_syscall_64+0x115/0x840 [ 656.115879][T27222] ? clear_bhb_loop+0x40/0x90 [ 656.115899][T27222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.115917][T27222] RIP: 0033:0x7f69e4b9e0d9 [ 656.115931][T27222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.115946][T27222] RSP: 002b:00007f69e5b2a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 656.115962][T27222] RAX: ffffffffffffffda RBX: 00007f69e4e25fa0 RCX: 00007f69e4b9e0d9 [ 656.115973][T27222] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 656.115983][T27222] RBP: 00007f69e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 656.115993][T27222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.116003][T27222] R13: 00007f69e4e26038 R14: 00007f69e4e25fa0 R15: 00007ffca984c198 [ 656.116022][T27222] [ 656.698352][T13407] Bluetooth: hci2: command 0x0406 tx timeout [ 656.888560][T13407] Bluetooth: hci1: SCO packet too small [ 657.716170][T27292] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 658.040682][T27306] netlink: 'syz.0.10198': attribute type 8 has an invalid length. [ 658.212327][T27314] syz_tun: tun_chr_ioctl cmd 2147767519 [ 658.587858][T27332] netlink: 'syz.0.10211': attribute type 4 has an invalid length. [ 658.632854][T27332] netlink: 'syz.0.10211': attribute type 1 has an invalid length. [ 660.941326][ T29] audit: type=1326 audit(4294967301.343:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.4.10260" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f640af9e0d9 code=0x0 [ 661.910232][T27462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 662.895374][T27505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10294'. [ 663.868768][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10313'. [ 665.191961][ T29] audit: type=1800 audit(4294967305.625:41): pid=27604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10342" name="lu_gp_id" dev="configfs" ino=83482 res=0 errno=0 [ 667.245603][T27690] openvswitch: netlink: IP tunnel TTL not specified. [ 669.030981][T27754] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.10414'. [ 669.340808][T27767] FAULT_INJECTION: forcing a failure. [ 669.340808][T27767] name failslab, interval 1, probability 0, space 0, times 0 [ 669.398076][T27767] CPU: 0 UID: 0 PID: 27767 Comm: syz.1.10420 Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.398108][T27767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.398115][T27767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.398125][T27767] Call Trace: [ 669.398130][T27767] [ 669.398136][T27767] dump_stack_lvl+0x100/0x190 [ 669.398160][T27767] should_fail_ex.cold+0x5/0xa [ 669.398180][T27767] should_failslab+0xc2/0x120 [ 669.398201][T27767] __kmalloc_cache_noprof+0x91/0x6c0 [ 669.398218][T27767] ? find_held_lock+0x2b/0x80 [ 669.398238][T27767] ? rcu_read_unlock+0x17/0x60 [ 669.398268][T27767] ? alloc_mnt_ns+0xce/0x520 [ 669.398294][T27767] alloc_mnt_ns+0xce/0x520 [ 669.398318][T27767] copy_mnt_ns+0x308/0x1180 [ 669.398339][T27767] ? rcu_is_watching+0x12/0xc0 [ 669.398357][T27767] ? __pfx_copy_mnt_ns+0x10/0x10 [ 669.398375][T27767] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 669.398394][T27767] ? create_new_namespaces+0x30/0xac0 [ 669.398413][T27767] create_new_namespaces+0xd3/0xac0 [ 669.398429][T27767] ? bpf_lsm_capable+0x9/0x10 [ 669.398445][T27767] ? security_capable+0x80/0x260 [ 669.398465][T27767] unshare_nsproxy_namespaces+0xf2/0x220 [ 669.398486][T27767] ksys_unshare+0x438/0xab0 [ 669.398506][T27767] ? __pfx_ksys_unshare+0x10/0x10 [ 669.398532][T27767] __x64_sys_unshare+0x31/0x40 [ 669.398550][T27767] do_syscall_64+0x115/0x840 [ 669.398570][T27767] ? clear_bhb_loop+0x40/0x90 [ 669.398588][T27767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.398604][T27767] RIP: 0033:0x7f69e4b9e0d9 [ 669.398618][T27767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.398633][T27767] RSP: 002b:00007f69e5b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 669.398648][T27767] RAX: ffffffffffffffda RBX: 00007f69e4e25fa0 RCX: 00007f69e4b9e0d9 [ 669.398658][T27767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 669.398667][T27767] RBP: 00007f69e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 669.398675][T27767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.398684][T27767] R13: 00007f69e4e26038 R14: 00007f69e4e25fa0 R15: 00007ffca984c198 [ 669.398703][T27767] [ 670.775343][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10443'. [ 670.958763][T27823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10447'. [ 672.033173][T27865] bridge0: port 3(veth0_to_bridge) entered blocking state [ 672.058625][T27865] bridge0: port 3(veth0_to_bridge) entered disabled state [ 672.084897][T27865] veth0_to_bridge: entered allmulticast mode [ 672.116182][T27865] veth0_to_bridge: entered promiscuous mode [ 672.137352][T27865] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.195872][T27865] bridge0: port 3(veth0_to_bridge) entered blocking state [ 672.205572][T27865] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 673.755925][T27921] Process accounting paused [ 673.921775][T27931] netlink: 334 bytes leftover after parsing attributes in process `syz.0.10497'. [ 674.401154][T27950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10506'. [ 674.601477][T27958] netlink: 13 bytes leftover after parsing attributes in process `syz.1.10510'. [ 675.502857][T27986] netlink: 82 bytes leftover after parsing attributes in process `syz.4.10521'. [ 675.536962][T27988] netlink: 29 bytes leftover after parsing attributes in process `syz.0.10519'. [ 678.466972][T28094] netlink: 'syz.2.10570': attribute type 2 has an invalid length. [ 679.054600][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10575'. [ 680.577781][T28143] netlink: 'syz.2.10591': attribute type 1 has an invalid length. [ 681.016373][T28157] netlink: 186 bytes leftover after parsing attributes in process `syz.1.10598'. [ 681.747635][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10610'. [ 682.764313][T28224] netlink: 'syz.2.10630': attribute type 23 has an invalid length. [ 683.120113][T28236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10636'. [ 683.332537][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.342334][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.496543][T28304] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 685.504882][T28304] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 685.598874][T26462] Bluetooth: hci1: Malformed HCI Event [ 686.567172][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10691'. [ 688.475047][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10724'. [ 688.666926][T28434] vivid-007: ================= START STATUS ================= [ 688.698138][T28434] vivid-007: Generate PTS: true [ 688.731721][T28434] vivid-007: Generate SCR: true [ 688.758555][T28434] tpg source WxH: 320x240 (Y'CbCr) [ 688.767588][T28439] FAULT_INJECTION: forcing a failure. [ 688.767588][T28439] name failslab, interval 1, probability 0, space 0, times 0 [ 688.789520][T28434] tpg field: 1 [ 688.800393][T28434] tpg crop: (0,0)/320x240 [ 688.807972][T28439] CPU: 0 UID: 0 PID: 28439 Comm: syz.0.10730 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.808003][T28439] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.808009][T28439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.808018][T28439] Call Trace: [ 688.808024][T28439] [ 688.808030][T28439] dump_stack_lvl+0x100/0x190 [ 688.808054][T28439] should_fail_ex.cold+0x5/0xa [ 688.808073][T28439] should_failslab+0xc2/0x120 [ 688.808094][T28439] kmem_cache_alloc_noprof+0x91/0x6a0 [ 688.808113][T28439] ? security_inode_alloc+0x3b/0x2c0 [ 688.808134][T28439] ? sk_prot_alloc+0x60/0x2a0 [ 688.808233][T28439] sk_prot_alloc+0x60/0x2a0 [ 688.808251][T28439] sk_alloc+0x36/0xe80 [ 688.808272][T28439] smc_create+0x11a/0x290 [ 688.808294][T28439] __sock_create+0x339/0x860 [ 688.808315][T28439] __sys_socket+0x14d/0x260 [ 688.808336][T28439] ? __pfx___sys_socket+0x10/0x10 [ 688.808359][T28439] __x64_sys_socket+0x72/0xb0 [ 688.808375][T28439] ? lockdep_hardirqs_on+0x78/0x100 [ 688.808394][T28439] do_syscall_64+0x115/0x840 [ 688.808414][T28439] ? clear_bhb_loop+0x40/0x90 [ 688.808432][T28439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.808447][T28439] RIP: 0033:0x7f063d59e0d9 [ 688.808462][T28439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.808477][T28439] RSP: 002b:00007f063e523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 688.808492][T28439] RAX: ffffffffffffffda RBX: 00007f063d825fa0 RCX: 00007f063d59e0d9 [ 688.808502][T28439] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 688.808511][T28439] RBP: 00007f063d635024 R08: 0000000000000000 R09: 0000000000000000 [ 688.808520][T28439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.808530][T28439] R13: 00007f063d826038 R14: 00007f063d825fa0 R15: 00007ffcdc785c08 [ 688.808550][T28439] [ 689.019663][T28434] tpg compose: (0,0)/320x240 [ 689.024662][T28434] tpg colorspace: 8 [ 689.028618][T28434] tpg transfer function: 0/0 [ 689.033324][T28434] tpg Y'CbCr encoding: 0/0 [ 689.037801][T28434] tpg quantization: 0/0 [ 689.042063][T28434] tpg RGB range: 0/2 [ 689.046027][T28434] vivid-007: ================== END STATUS ================== [ 691.203180][T28540] openvswitch: netlink: IPv4 tunnel dst address is zero [ 691.361476][ T29] audit: type=1800 audit(4294967331.921:42): pid=28548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10777" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 692.942015][T28617] futex_wake_op: syz.0.10808 tries to shift op by -2048; fix this program [ 692.985524][T28617] futex_wake_op: syz.0.10808 tries to shift op by -2048; fix this program [ 693.166060][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10811'. [ 693.486425][T28637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10817'. [ 694.454903][T28674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10833'. [ 696.368915][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10867'. [ 697.084688][T28778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10882'. [ 697.465871][T28793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10887'. [ 697.963671][T28814] netlink: 206 bytes leftover after parsing attributes in process `syz.4.10898'. [ 699.169581][ T29] audit: type=1804 audit(4294967339.761:43): pid=28846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10909" name="/newroot/2622/file0" dev="tmpfs" ino=13218 res=1 errno=0 [ 699.450704][T28861] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10918'. [ 700.489637][T28902] netlink: 350 bytes leftover after parsing attributes in process `syz.0.10938'. [ 703.678960][T29032] Process accounting resumed [ 705.321409][T29071] netlink: 'syz.1.11017': attribute type 2 has an invalid length. [ 706.007472][T29103] netlink: 'syz.0.11031': attribute type 2 has an invalid length. [ 706.490301][T29123] netlink: 186 bytes leftover after parsing attributes in process `syz.2.11041'. [ 706.768477][T29131] netlink: 'syz.4.11046': attribute type 2 has an invalid length. [ 708.814068][T29182] netlink: 'syz.0.11066': attribute type 1 has an invalid length. [ 709.310764][T29200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11076'. [ 710.850183][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11096'. [ 711.880529][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11109'. [ 713.241259][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11123'. [ 714.294197][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11140'. [ 715.160323][T26462] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 715.160354][T26462] Bluetooth: hci0: unexpected event for opcode 0x647c [ 715.534533][T29394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11156'. [ 716.432626][T29412] mac80211.ieee80211_default_rc_algo: string parameter too long [ 719.796015][T29515] netlink: 'syz.0.11207': attribute type 23 has an invalid length. [ 720.750613][T29542] netlink: Unknown conntrack attr (0) [ 721.180538][T29552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11220'. [ 723.387833][T29609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11245'. [ 723.581135][T29615] kAFS: No cell specified [ 727.211695][T26462] Bluetooth: hci3: Malformed HCI Event [ 728.696236][T29742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11297'. [ 731.428825][T29803] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 731.435306][T29803] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 732.142304][T29820] NFSD: Failed to start, no listeners configured. [ 732.672317][T29827] nbd: socks must be embedded in a SOCK_ITEM attr [ 732.842717][T29830] syz.0.11335 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 732.871472][T29830] CPU: 0 UID: 0 PID: 29830 Comm: syz.0.11335 Tainted: G U L syzkaller #0 PREEMPT(full) [ 732.871501][T29830] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 732.871506][T29830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.871515][T29830] Call Trace: [ 732.871522][T29830] [ 732.871528][T29830] dump_stack_lvl+0x100/0x190 [ 732.871551][T29830] dump_header+0xfb/0x606 [ 732.871568][T29830] oom_kill_process.cold+0xd/0x330 [ 732.871592][T29830] out_of_memory+0x340/0x14f0 [ 732.871621][T29830] ? __pfx_out_of_memory+0x10/0x10 [ 732.871650][T29830] mem_cgroup_out_of_memory+0xc6/0x130 [ 732.871668][T29830] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 732.871684][T29830] ? find_held_lock+0x2b/0x80 [ 732.871707][T29830] ? do_raw_spin_unlock+0x145/0x1e0 [ 732.871724][T29830] ? _raw_spin_unlock+0x28/0x50 [ 732.871744][T29830] try_charge_memcg+0x6e5/0xdf0 [ 732.871769][T29830] ? __pfx_try_charge_memcg+0x10/0x10 [ 732.871790][T29830] ? find_held_lock+0x2b/0x80 [ 732.871807][T29830] ? rcu_read_unlock+0x17/0x60 [ 732.871829][T29830] ? rcu_read_unlock+0x17/0x60 [ 732.871851][T29830] ? find_held_lock+0x2b/0x80 [ 732.871870][T29830] ? rcu_read_unlock+0x17/0x60 [ 732.871896][T29830] charge_memcg+0x187/0x1e0 [ 732.871918][T29830] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 732.871936][T29830] swap_cache_alloc_folio+0x548/0xc50 [ 732.871958][T29830] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 732.871975][T29830] ? swap_cache_get_folio+0x28d/0x360 [ 732.871992][T29830] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 732.872007][T29830] ? lockdep_hardirqs_on+0x78/0x100 [ 732.872027][T29830] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 732.872049][T29830] swap_cache_read_folio+0x47/0x140 [ 732.872068][T29830] swap_cluster_readahead+0x387/0x5f0 [ 732.872090][T29830] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 732.872116][T29830] ? __lock_acquire+0x49f/0x1a40 [ 732.872139][T29830] ? get_vma_policy+0x23d/0x3b0 [ 732.872162][T29830] swapin_readahead+0x159/0x1200 [ 732.872186][T29830] ? __pfx_swapin_readahead+0x10/0x10 [ 732.872208][T29830] ? swap_table_get+0x10d/0x2c0 [ 732.872223][T29830] ? swap_cache_get_folio+0x28d/0x360 [ 732.872240][T29830] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 732.872256][T29830] ? __pfx_softleaf_type+0x10/0x10 [ 732.872277][T29830] ? do_swap_page+0xf98/0x5780 [ 732.872290][T29830] do_swap_page+0xf98/0x5780 [ 732.872314][T29830] ? __pfx_do_swap_page+0x10/0x10 [ 732.872329][T29830] ? __lock_acquire+0x49f/0x1a40 [ 732.872354][T29830] ? rcu_is_watching+0x12/0xc0 [ 732.872372][T29830] ? __pte_offset_map+0x179/0x310 [ 732.872394][T29830] __handle_mm_fault+0x192f/0x2a00 [ 732.872413][T29830] ? reacquire_held_locks+0xce/0x1e0 [ 732.872437][T29830] ? __pfx___handle_mm_fault+0x10/0x10 [ 732.872455][T29830] ? lock_vma_under_rcu+0x17c/0x590 [ 732.872481][T29830] handle_mm_fault+0x37b/0xa30 [ 732.872500][T29830] do_user_addr_fault+0x5a3/0x12f0 [ 732.872527][T29830] exc_page_fault+0x6f/0xd0 [ 732.872546][T29830] asm_exc_page_fault+0x26/0x30 [ 732.872562][T29830] RIP: 0033:0x7f063d59ec38 [ 732.872575][T29830] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f [ 732.872594][T29830] RSP: 002b:00007ffcdc785d40 EFLAGS: 00010202 [ 732.872607][T29830] RAX: 0000000000000000 RBX: 00007f063d825fa0 RCX: 0000555579da3808 [ 732.872617][T29830] RDX: edb0b01c56109700 RSI: 0000000000000000 RDI: 0000000000000000 [ 732.872626][T29830] RBP: 00007f063d827da0 R08: 0000000000000000 R09: 0000000000000000 [ 732.872634][T29830] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000b3bda [ 732.872643][T29830] R13: 00007f063d82609c R14: 00000000000b3964 R15: 00007f063d826090 [ 732.872663][T29830] [ 732.872669][T29830] memory: usage 3072kB, limit 3072kB, failcnt 82771 [ 733.295216][T29830] memory+swap: usage 3400kB, limit 9007199254740988kB, failcnt 0 [ 733.304240][T29830] kmem: usage 3072kB, limit 9007199254740988kB, failcnt 0 [ 733.319138][T29830] Memory cgroup stats for /syz0: [ 733.319244][T29830] cache 0 [ 733.328207][T29830] rss 0 [ 733.331601][T29830] rss_huge 0 [ 733.335292][T29830] shmem 0 [ 733.346381][T29830] mapped_file 0 [ 733.350302][T29830] dirty 0 [ 733.359496][T29830] writeback 8192 [ 733.366084][T29830] workingset_refault_anon 6293 [ 733.375764][T29830] workingset_refault_file 32444 [ 733.386831][T29830] swap 327680 [ 733.394755][T29830] swapcached 284934144 [ 733.399923][T29830] pgpgin 298633 [ 733.430487][T29830] pgpgout 308571 [ 733.440970][T29830] pgfault 611357 [ 733.460698][T29830] pgmajfault 2855 [ 733.481024][T29830] inactive_anon 8192 [ 733.505071][T29830] active_anon 0 [ 733.531148][T29830] inactive_file 0 [ 733.542692][T29830] active_file 0 [ 733.557984][T29830] unevictable 0 [ 733.571324][T29830] hierarchical_memory_limit 3145728 [ 733.585619][T29830] hierarchical_memsw_limit 9223372036854771712 [ 733.595261][T29830] total_cache 0 [ 733.613400][T29830] total_rss 0 [ 733.623078][T29830] total_rss_huge 0 [ 733.631809][T29830] total_shmem 0 [ 733.639346][T29830] total_mapped_file 0 [ 733.649426][T29830] total_dirty 0 [ 733.660112][T29830] total_writeback 8192 [ 733.672400][T29830] total_workingset_refault_anon 6293 [ 733.691993][T29830] total_workingset_refault_file 32444 [ 733.707867][T29830] total_swap 327680 [ 733.722743][T29830] total_swapcached 284934144 [ 733.737481][T29830] total_pgpgin 298633 [ 733.753224][T29830] total_pgpgout 308571 [ 733.764699][T29830] total_pgfault 611357 [ 733.774996][T29830] total_pgmajfault 2855 [ 733.786659][T29830] total_inactive_anon 8192 [ 733.802495][T29830] total_active_anon 0 [ 733.815873][T29830] total_inactive_file 0 [ 733.830802][T29830] total_active_file 0 [ 733.844926][T29830] total_unevictable 0 [ 733.858281][T29830] anon_cost 18 [ 733.868070][T29830] file_cost 0 [ 733.877666][T29830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11335,pid=29830,uid=0 [ 733.927735][T29830] Memory cgroup out of memory: Killed process 29830 (syz.0.11335) total-vm:104432kB, anon-rss:1244kB, file-rss:21036kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 734.135956][T29843] Process accounting paused [ 737.620056][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11367'. [ 737.702038][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11367'. [ 738.165888][T29913] syz.1.11368 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 738.236994][T29913] CPU: 0 UID: 0 PID: 29913 Comm: syz.1.11368 Tainted: G U L syzkaller #0 PREEMPT(full) [ 738.237041][T29913] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 738.237052][T29913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.237068][T29913] Call Trace: [ 738.237075][T29913] [ 738.237081][T29913] dump_stack_lvl+0x100/0x190 [ 738.237106][T29913] dump_header+0xfb/0x606 [ 738.237124][T29913] oom_kill_process.cold+0xd/0x330 [ 738.237142][T29913] out_of_memory+0x340/0x14f0 [ 738.237171][T29913] ? __pfx_out_of_memory+0x10/0x10 [ 738.237200][T29913] mem_cgroup_out_of_memory+0xc6/0x130 [ 738.237218][T29913] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 738.237241][T29913] ? find_held_lock+0x2b/0x80 [ 738.237264][T29913] ? do_raw_spin_unlock+0x145/0x1e0 [ 738.237281][T29913] ? _raw_spin_unlock+0x28/0x50 [ 738.237301][T29913] try_charge_memcg+0x6e5/0xdf0 [ 738.237326][T29913] ? __pfx_try_charge_memcg+0x10/0x10 [ 738.237347][T29913] ? find_held_lock+0x2b/0x80 [ 738.237364][T29913] ? rcu_read_unlock+0x17/0x60 [ 738.237386][T29913] ? rcu_read_unlock+0x17/0x60 [ 738.237408][T29913] ? find_held_lock+0x2b/0x80 [ 738.237426][T29913] ? rcu_read_unlock+0x17/0x60 [ 738.237451][T29913] charge_memcg+0x187/0x1e0 [ 738.237474][T29913] __mem_cgroup_charge+0x2b/0x1c0 [ 738.237490][T29913] do_anonymous_page+0xb53/0x2080 [ 738.237506][T29913] ? rcu_read_unlock+0x2d/0xb0 [ 738.237527][T29913] __handle_mm_fault+0x1d2c/0x2a00 [ 738.237546][T29913] ? reacquire_held_locks+0xce/0x1e0 [ 738.237569][T29913] ? __pfx___handle_mm_fault+0x10/0x10 [ 738.237588][T29913] ? lock_vma_under_rcu+0x17c/0x590 [ 738.237614][T29913] handle_mm_fault+0x37b/0xa30 [ 738.237632][T29913] do_user_addr_fault+0x5a3/0x12f0 [ 738.237659][T29913] exc_page_fault+0x6f/0xd0 [ 738.237679][T29913] asm_exc_page_fault+0x26/0x30 [ 738.237693][T29913] RIP: 0033:0x7f69e4b5b284 [ 738.237707][T29913] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 738.237721][T29913] RSP: 002b:00007ffca984c140 EFLAGS: 00010246 [ 738.237734][T29913] RAX: 00007f69e5ae9000 RBX: 00007f69e5b096c0 RCX: 00007f69e4b9ded7 [ 738.237744][T29913] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f69e5b096c0 [ 738.237753][T29913] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 738.237762][T29913] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffca984c290 [ 738.237771][T29913] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 738.237790][T29913] [ 738.237797][T29913] memory: usage 3072kB, limit 3072kB, failcnt 104902 [ 739.187304][T29913] memory+swap: usage 3532kB, limit 9007199254740988kB, failcnt 0 [ 739.228041][T29913] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 739.259594][T29913] Memory cgroup stats for /syz1: [ 739.259820][T29913] cache 0 [ 739.296100][T29913] rss 12288 [ 739.309102][T29913] rss_huge 0 [ 739.321810][T29913] shmem 0 [ 739.340015][T29913] mapped_file 0 [ 739.360028][T29913] dirty 0 [ 739.373367][T29913] writeback 0 [ 739.388746][T29913] workingset_refault_anon 7149 [ 739.409918][T29913] workingset_refault_file 44994 [ 739.437649][T29913] swap 471040 [ 739.453238][T29913] swapcached 408166400 [ 739.472279][T29913] pgpgin 289609 [ 739.484884][T29913] pgpgout 312946 [ 739.501437][T29913] pgfault 594533 [ 739.520458][T29913] pgmajfault 4472 [ 739.538791][T29913] inactive_anon 0 [ 739.555227][T29913] active_anon 12288 [ 739.573751][T29913] inactive_file 0 [ 739.591568][T29913] active_file 0 [ 739.604486][T29913] unevictable 0 [ 739.615923][T29913] hierarchical_memory_limit 3145728 [ 739.634157][T29913] hierarchical_memsw_limit 9223372036854771712 [ 739.658207][T29913] total_cache 0 [ 739.683962][T29913] total_rss 12288 [ 739.694625][T29913] total_rss_huge 0 [ 739.710335][T29913] total_shmem 0 [ 739.725152][T29913] total_mapped_file 0 [ 739.743227][T29913] total_dirty 0 [ 739.759964][T29913] total_writeback 0 [ 739.784232][T29913] total_workingset_refault_anon 7149 [ 739.809445][T29913] total_workingset_refault_file 44994 [ 739.831608][T29913] total_swap 471040 [ 739.851419][T29913] total_swapcached 408166400 [ 739.870799][T29913] total_pgpgin 289609 [ 739.891862][T29913] total_pgpgout 312946 [ 739.910465][T29913] total_pgfault 594533 [ 739.930527][T29913] total_pgmajfault 4472 [ 739.954724][T29913] total_inactive_anon 0 [ 739.980072][T29913] total_active_anon 12288 [ 740.006088][T29913] total_inactive_file 0 [ 740.025536][T29913] total_active_file 0 [ 740.047918][T29913] total_unevictable 0 [ 740.062749][T29913] anon_cost 164 [ 740.076403][T29913] file_cost 0 [ 740.087965][T29913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.11368,pid=29913,uid=0 [ 740.153362][T29913] Memory cgroup out of memory: Killed process 29913 (syz.1.11368) total-vm:104432kB, anon-rss:1244kB, file-rss:21004kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 740.379820][T29954] sctp: [Deprecated]: syz.0.11386 (pid 29954) Use of int in maxseg socket option. [ 740.379820][T29954] Use struct sctp_assoc_value instead [ 740.835071][T29972] netlink: 21 bytes leftover after parsing attributes in process `syz.1.11394'. [ 741.382335][T29990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11402'. [ 741.435428][T29994] netlink: 5316 bytes leftover after parsing attributes in process `syz.1.11404'. [ 742.852216][ T5637] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 742.896361][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 742.896390][ T5637] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 742.896396][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.896405][ T5637] Call Trace: [ 742.896410][ T5637] [ 742.896417][ T5637] dump_stack_lvl+0x100/0x190 [ 742.896440][ T5637] dump_header+0xfb/0x606 [ 742.896458][ T5637] oom_kill_process.cold+0xd/0x330 [ 742.896476][ T5637] out_of_memory+0x340/0x14f0 [ 742.896505][ T5637] ? __pfx_out_of_memory+0x10/0x10 [ 742.896534][ T5637] mem_cgroup_out_of_memory+0xc6/0x130 [ 742.896552][ T5637] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 742.896568][ T5637] ? find_held_lock+0x2b/0x80 [ 742.896591][ T5637] ? do_raw_spin_unlock+0x145/0x1e0 [ 742.896613][ T5637] ? _raw_spin_unlock+0x28/0x50 [ 742.896635][ T5637] try_charge_memcg+0x6e5/0xdf0 [ 742.896660][ T5637] ? __pfx_try_charge_memcg+0x10/0x10 [ 742.896681][ T5637] ? find_held_lock+0x2b/0x80 [ 742.896698][ T5637] ? rcu_read_unlock+0x17/0x60 [ 742.896724][ T5637] ? rcu_read_unlock+0x17/0x60 [ 742.896746][ T5637] ? find_held_lock+0x2b/0x80 [ 742.896764][ T5637] ? rcu_read_unlock+0x17/0x60 [ 742.896789][ T5637] charge_memcg+0x187/0x1e0 [ 742.896812][ T5637] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 742.896830][ T5637] swap_cache_alloc_folio+0x548/0xc50 [ 742.896851][ T5637] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 742.896868][ T5637] ? swap_cache_get_folio+0x28d/0x360 [ 742.896890][ T5637] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 742.896906][ T5637] ? find_held_lock+0x2b/0x80 [ 742.896923][ T5637] ? get_info+0x413/0x5f0 [ 742.897046][ T5637] ? get_info+0x413/0x5f0 [ 742.897070][ T5637] swap_cache_read_folio+0x47/0x140 [ 742.897090][ T5637] swap_cluster_readahead+0x387/0x5f0 [ 742.897112][ T5637] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 742.897133][ T5637] ? get_info+0x489/0x5f0 [ 742.897156][ T5637] ? __lock_acquire+0x49f/0x1a40 [ 742.897178][ T5637] ? get_vma_policy+0x23d/0x3b0 [ 742.897204][ T5637] swapin_readahead+0x159/0x1200 [ 742.897227][ T5637] ? __pfx_swapin_readahead+0x10/0x10 [ 742.897249][ T5637] ? swap_table_get+0x10d/0x2c0 [ 742.897264][ T5637] ? swap_cache_get_folio+0x28d/0x360 [ 742.897281][ T5637] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 742.897297][ T5637] ? __pfx_softleaf_type+0x10/0x10 [ 742.897318][ T5637] ? do_swap_page+0xf98/0x5780 [ 742.897332][ T5637] do_swap_page+0xf98/0x5780 [ 742.897349][ T5637] ? __might_fault+0xc5/0x140 [ 742.897369][ T5637] ? __pfx_do_swap_page+0x10/0x10 [ 742.897385][ T5637] ? __lock_acquire+0x49f/0x1a40 [ 742.897412][ T5637] ? _copy_from_user+0x59/0xd0 [ 742.897438][ T5637] ? rcu_is_watching+0x12/0xc0 [ 742.897456][ T5637] ? __pte_offset_map+0x179/0x310 [ 742.897478][ T5637] __handle_mm_fault+0x192f/0x2a00 [ 742.897497][ T5637] ? reacquire_held_locks+0xce/0x1e0 [ 742.897521][ T5637] ? __pfx___handle_mm_fault+0x10/0x10 [ 742.897539][ T5637] ? lock_vma_under_rcu+0x17c/0x590 [ 742.897565][ T5637] handle_mm_fault+0x37b/0xa30 [ 742.897584][ T5637] do_user_addr_fault+0x5a3/0x12f0 [ 742.897610][ T5637] exc_page_fault+0x6f/0xd0 [ 742.897630][ T5637] asm_exc_page_fault+0x26/0x30 [ 742.897646][ T5637] RIP: 0033:0x7f69e4b6bd2d [ 742.897660][ T5637] Code: 20 0f 82 d6 02 00 00 c5 fe 6f 0e c5 f5 74 0f c5 fd d7 c1 ff c0 0f 85 b2 00 00 00 48 83 fa 40 0f 86 3c 02 00 00 c5 fe 6f 56 20 ed 74 57 20 c5 fd d7 c2 ff c0 0f 85 b2 00 00 00 48 81 fa 80 00 [ 742.897674][ T5637] RSP: 002b:00007ffca984be08 EFLAGS: 00010206 [ 742.897687][ T5637] RAX: 0000000000000000 RBX: 00007ffca984be30 RCX: 00007f69e4b9f8aa [ 742.897696][ T5637] RDX: 0000000000000054 RSI: 00007ffca984be30 RDI: 00007f69e4deffc8 [ 742.897706][ T5637] RBP: 0000000000000003 R08: 00007ffca984be2c R09: 0000000000000000 [ 742.897715][ T5637] R10: 00007ffca984be30 R11: 0000000000000246 R12: 00007f69e4deffc0 [ 742.897723][ T5637] R13: 00007ffca984be2c R14: 0000000000000000 R15: 00007f69e4df2180 [ 742.897743][ T5637] [ 743.918057][ T5637] memory: usage 3072kB, limit 3072kB, failcnt 85650 [ 743.936080][ T5637] memory+swap: usage 7500kB, limit 9007199254740988kB, failcnt 0 [ 743.960371][ T5637] kmem: usage 3072kB, limit 9007199254740988kB, failcnt 0 [ 743.982667][ T5637] Memory cgroup stats for /syz0: [ 743.982782][ T5637] cache 0 [ 744.011119][ T5637] rss 4096 [ 744.021987][ T5637] rss_huge 0 [ 744.032633][ T5637] shmem 0 [ 744.042858][ T5637] mapped_file 0 [ 744.052689][ T5637] dirty 0 [ 744.062006][ T5637] writeback 0 [ 744.074130][ T5637] workingset_refault_anon 6751 [ 744.088106][ T5637] workingset_refault_file 32509 [ 744.103194][ T5637] swap 4530176 [ 744.116447][ T5637] swapcached 314363904 [ 744.129839][ T5637] pgpgin 304844 [ 744.141849][ T5637] pgpgout 316595 [ 744.153899][ T5637] pgfault 620135 [ 744.164811][ T5637] pgmajfault 3158 [ 744.176665][ T5637] inactive_anon 0 [ 744.187713][ T5637] active_anon 0 [ 744.199280][ T5637] inactive_file 0 [ 744.209888][ T5637] active_file 0 [ 744.227231][ T5637] unevictable 0 [ 744.240629][ T5637] hierarchical_memory_limit 3145728 [ 744.257493][ T5637] hierarchical_memsw_limit 9223372036854771712 [ 744.277125][ T5637] total_cache 0 [ 744.287161][ T5637] total_rss 4096 [ 744.300349][ T5637] total_rss_huge 0 [ 744.312892][ T5637] total_shmem 0 [ 744.325254][ T5637] total_mapped_file 0 [ 744.338541][ T5637] total_dirty 0 [ 744.350737][ T5637] total_writeback 0 [ 744.364547][ T5637] total_workingset_refault_anon 6751 [ 744.382038][ T5637] total_workingset_refault_file 32509 [ 744.398460][ T5637] total_swap 4530176 [ 744.411275][ T5637] total_swapcached 314363904 [ 744.426834][ T5637] total_pgpgin 304844 [ 744.441044][ T5637] total_pgpgout 316595 [ 744.452701][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.459148][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.473350][ T5637] total_pgfault 620135 [ 744.486448][ T5637] total_pgmajfault 3158 [ 744.500465][ T5637] total_inactive_anon 0 [ 744.512024][ T5637] total_active_anon 0 [ 744.527391][ T5637] total_inactive_file 0 [ 744.540624][ T5637] total_active_file 0 [ 744.553299][ T5637] total_unevictable 0 [ 744.567748][ T5637] anon_cost 11 [ 744.577030][ T5637] file_cost 0 [ 744.589417][ T5637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11408,pid=30002,uid=0 [ 744.643115][ T5637] Memory cgroup out of memory: Killed process 30002 (syz.0.11408) total-vm:108532kB, anon-rss:1244kB, file-rss:21204kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 745.066202][T30048] bridge0: port 4(batadv0) entered blocking state [ 745.094888][T30048] bridge0: port 4(batadv0) entered disabled state [ 745.124431][T30048] batadv0: entered allmulticast mode [ 745.160800][T30048] batadv0: entered promiscuous mode [ 745.194981][T30048] bridge0: port 4(batadv0) entered blocking state [ 745.201566][T30048] bridge0: port 4(batadv0) entered forwarding state [ 745.364772][T13336] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 745.374437][T13336] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 745.391502][T30053] bridge0: port 3(team0) entered blocking state [ 745.419210][T30053] bridge0: port 3(team0) entered disabled state [ 745.451981][T30053] team0: entered allmulticast mode [ 745.479150][T30053] team_slave_0: entered allmulticast mode [ 745.501595][T30053] team_slave_1: entered allmulticast mode [ 745.547650][T30053] team0: entered promiscuous mode [ 745.576908][T30053] team_slave_0: entered promiscuous mode [ 745.597055][T30053] team_slave_1: entered promiscuous mode [ 745.615366][T30053] bridge0: port 3(team0) entered blocking state [ 745.621754][T30053] bridge0: port 3(team0) entered listening state [ 746.840469][T30085] ovs_?: entered promiscuous mode [ 747.334594][T30109] ovs_?: entered promiscuous mode [ 747.672344][T30123] sctp: [Deprecated]: syz.0.11458 (pid 30123) Use of int in max_burst socket option. [ 747.672344][T30123] Use struct sctp_assoc_value instead [ 747.895233][T30127] FAULT_INJECTION: forcing a failure. [ 747.895233][T30127] name failslab, interval 1, probability 0, space 0, times 0 [ 747.934554][T30127] CPU: 0 UID: 0 PID: 30127 Comm: syz.1.11460 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.934584][T30127] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.934591][T30127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.934601][T30127] Call Trace: [ 747.934606][T30127] [ 747.934613][T30127] dump_stack_lvl+0x100/0x190 [ 747.934639][T30127] should_fail_ex.cold+0x5/0xa [ 747.934661][T30127] should_failslab+0xc2/0x120 [ 747.934685][T30127] __kmalloc_noprof+0xfc/0x820 [ 747.934703][T30127] ? __lock_acquire+0x49f/0x1a40 [ 747.934727][T30127] ? sk_prot_alloc+0x10b/0x2a0 [ 747.934748][T30127] sk_prot_alloc+0x10b/0x2a0 [ 747.934765][T30127] sk_alloc+0x36/0xe80 [ 747.934786][T30127] pppol2tp_create+0x32/0x250 [ 747.934890][T30127] pppox_create+0x15c/0x2c0 [ 747.934910][T30127] __sock_create+0x339/0x860 [ 747.934930][T30127] __sys_socket+0x14d/0x260 [ 747.934948][T30127] ? __pfx___sys_socket+0x10/0x10 [ 747.934972][T30127] __x64_sys_socket+0x72/0xb0 [ 747.934988][T30127] ? lockdep_hardirqs_on+0x78/0x100 [ 747.935008][T30127] do_syscall_64+0x115/0x840 [ 747.935028][T30127] ? clear_bhb_loop+0x40/0x90 [ 747.935046][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.935062][T30127] RIP: 0033:0x7f69e4b9e0d9 [ 747.935077][T30127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.935092][T30127] RSP: 002b:00007f69e5b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 747.935107][T30127] RAX: ffffffffffffffda RBX: 00007f69e4e25fa0 RCX: 00007f69e4b9e0d9 [ 747.935117][T30127] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 747.935126][T30127] RBP: 00007f69e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 747.935135][T30127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.935144][T30127] R13: 00007f69e4e26038 R14: 00007f69e4e25fa0 R15: 00007ffca984c198 [ 747.935165][T30127] [ 748.742513][T30157] FAULT_INJECTION: forcing a failure. [ 748.742513][T30157] name failslab, interval 1, probability 0, space 0, times 0 [ 748.774577][T30157] CPU: 0 UID: 0 PID: 30157 Comm: syz.0.11473 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.774608][T30157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.774614][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.774624][T30157] Call Trace: [ 748.774630][T30157] [ 748.774637][T30157] dump_stack_lvl+0x100/0x190 [ 748.774663][T30157] should_fail_ex.cold+0x5/0xa [ 748.774682][T30157] should_failslab+0xc2/0x120 [ 748.774706][T30157] __kmalloc_noprof+0xfc/0x820 [ 748.774725][T30157] ? trace_kmalloc+0xeb/0x110 [ 748.774745][T30157] ? lsm_blob_alloc+0x68/0x90 [ 748.774766][T30157] lsm_blob_alloc+0x68/0x90 [ 748.774780][T30157] security_sk_alloc+0x2d/0x290 [ 748.774799][T30157] sk_prot_alloc+0x12a/0x2a0 [ 748.774818][T30157] sk_alloc+0x36/0xe80 [ 748.774838][T30157] pppol2tp_create+0x32/0x250 [ 748.774857][T30157] pppox_create+0x15c/0x2c0 [ 748.774874][T30157] __sock_create+0x339/0x860 [ 748.774896][T30157] __sys_socket+0x14d/0x260 [ 748.774915][T30157] ? __pfx___sys_socket+0x10/0x10 [ 748.774938][T30157] __x64_sys_socket+0x72/0xb0 [ 748.774955][T30157] ? lockdep_hardirqs_on+0x78/0x100 [ 748.774975][T30157] do_syscall_64+0x115/0x840 [ 748.774994][T30157] ? clear_bhb_loop+0x40/0x90 [ 748.775013][T30157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.775029][T30157] RIP: 0033:0x7f063d59e0d9 [ 748.775045][T30157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.775066][T30157] RSP: 002b:00007f063e523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 748.775082][T30157] RAX: ffffffffffffffda RBX: 00007f063d825fa0 RCX: 00007f063d59e0d9 [ 748.775093][T30157] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 748.775102][T30157] RBP: 00007f063d635024 R08: 0000000000000000 R09: 0000000000000000 [ 748.775112][T30157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.775121][T30157] R13: 00007f063d826038 R14: 00007f063d825fa0 R15: 00007ffcdc785c08 [ 748.775141][T30157] [ 749.398522][T30164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11477'. [ 749.507799][ T5631] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 749.532709][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 749.532738][ T5631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 749.532744][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.532753][ T5631] Call Trace: [ 749.532759][ T5631] [ 749.532765][ T5631] dump_stack_lvl+0x100/0x190 [ 749.532788][ T5631] dump_header+0xfb/0x606 [ 749.532806][ T5631] oom_kill_process.cold+0xd/0x330 [ 749.532824][ T5631] out_of_memory+0x340/0x14f0 [ 749.532853][ T5631] ? __pfx_out_of_memory+0x10/0x10 [ 749.532882][ T5631] mem_cgroup_out_of_memory+0xc6/0x130 [ 749.532903][ T5631] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 749.532919][ T5631] ? find_held_lock+0x2b/0x80 [ 749.532942][ T5631] ? do_raw_spin_unlock+0x145/0x1e0 [ 749.532959][ T5631] ? _raw_spin_unlock+0x28/0x50 [ 749.532979][ T5631] try_charge_memcg+0x6e5/0xdf0 [ 749.533005][ T5631] ? __pfx_try_charge_memcg+0x10/0x10 [ 749.533025][ T5631] ? find_held_lock+0x2b/0x80 [ 749.533042][ T5631] ? rcu_read_unlock+0x17/0x60 [ 749.533065][ T5631] ? rcu_read_unlock+0x17/0x60 [ 749.533086][ T5631] ? find_held_lock+0x2b/0x80 [ 749.533105][ T5631] ? rcu_read_unlock+0x17/0x60 [ 749.533131][ T5631] charge_memcg+0x187/0x1e0 [ 749.533153][ T5631] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 749.533171][ T5631] swap_cache_alloc_folio+0x548/0xc50 [ 749.533194][ T5631] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 749.533211][ T5631] ? swap_cache_get_folio+0x28d/0x360 [ 749.533228][ T5631] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 749.533250][ T5631] swap_cache_read_folio+0x47/0x140 [ 749.533270][ T5631] swap_cluster_readahead+0x387/0x5f0 [ 749.533292][ T5631] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 749.533312][ T5631] ? lock_acquire+0x1b9/0x370 [ 749.533339][ T5631] ? __lock_acquire+0x49f/0x1a40 [ 749.533361][ T5631] ? get_vma_policy+0x23d/0x3b0 [ 749.533386][ T5631] swapin_readahead+0x159/0x1200 [ 749.533403][ T5631] ? lapic_next_event+0x10/0x20 [ 749.533435][ T5631] ? __pfx_swapin_readahead+0x10/0x10 [ 749.533457][ T5631] ? swap_table_get+0x10d/0x2c0 [ 749.533473][ T5631] ? swap_cache_get_folio+0x28d/0x360 [ 749.533490][ T5631] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 749.533506][ T5631] ? __pfx_softleaf_type+0x10/0x10 [ 749.533527][ T5631] ? do_swap_page+0xf98/0x5780 [ 749.533541][ T5631] do_swap_page+0xf98/0x5780 [ 749.533565][ T5631] ? __pfx_do_swap_page+0x10/0x10 [ 749.533580][ T5631] ? __lock_acquire+0x49f/0x1a40 [ 749.533603][ T5631] ? lockdep_hardirqs_on+0x78/0x100 [ 749.533625][ T5631] ? rcu_is_watching+0x12/0xc0 [ 749.533643][ T5631] ? __pte_offset_map+0x179/0x310 [ 749.533665][ T5631] __handle_mm_fault+0x192f/0x2a00 [ 749.533685][ T5631] ? reacquire_held_locks+0xce/0x1e0 [ 749.533708][ T5631] ? __pfx___handle_mm_fault+0x10/0x10 [ 749.533727][ T5631] ? lock_vma_under_rcu+0x17c/0x590 [ 749.533753][ T5631] handle_mm_fault+0x37b/0xa30 [ 749.533772][ T5631] do_user_addr_fault+0x5a3/0x12f0 [ 749.533800][ T5631] exc_page_fault+0x6f/0xd0 [ 749.533819][ T5631] asm_exc_page_fault+0x26/0x30 [ 749.533835][ T5631] RIP: 0033:0x7f063d55e90e [ 749.533849][ T5631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 749.533864][ T5631] RSP: 002b:00007ffcdc785ee8 EFLAGS: 00010246 [ 749.533876][ T5631] RAX: 0000000000000000 RBX: 0000555579da3500 RCX: 00007f063d55e90e [ 749.533886][ T5631] RDX: 00007ffcdc785f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 749.533895][ T5631] RBP: 00007ffcdc785fac R08: 0000000000000000 R09: 0000000000000000 [ 749.533903][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 749.533912][ T5631] R13: 00000000000927c0 R14: 00000000000b7b07 R15: 00007ffcdc786000 [ 749.533931][ T5631] [ 749.535991][ T5631] memory: usage 3072kB, limit 3072kB, failcnt 86134 [ 761.006405][ C0] bridge0: port 3(team0) entered learning state [ 771.060201][T30155] Process accounting resumed [ 776.289859][ C0] bridge0: port 3(team0) entered forwarding state [ 776.298336][ C0] bridge0: topology change detected, propagating [ 887.654367][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 887.661453][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5627/1:b..l P22711/1:b..l [ 887.671260][ C0] rcu: (detected by 0, t=10502 jiffies, g=262241, q=524 ncpus=1) [ 887.679129][ C0] task:syz-executor state:R running task stack:23480 pid:22711 tgid:22711 ppid:22695 task_flags:0x400140 flags:0x00080000 [ 887.694085][ C0] Call Trace: [ 887.697368][ C0] [ 887.700326][ C0] __schedule+0x125c/0x6730 [ 887.704911][ C0] ? kernel_text_address+0x8d/0x100 [ 887.710108][ C0] ? __kernel_text_address+0xd/0x30 [ 887.715312][ C0] ? __pfx___schedule+0x10/0x10 [ 887.720156][ C0] ? mark_held_locks+0x40/0x70 [ 887.724921][ C0] preempt_schedule_irq+0x50/0x90 [ 887.729939][ C0] irqentry_exit+0x205/0xa00 [ 887.734526][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 887.740499][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 887.746563][ C0] Code: 00 00 00 5b e9 42 8a 11 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 25 5f 5a 12 48 8b 34 24 <65> 48 8b 15 01 5f 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 887.766160][ C0] RSP: 0018:ffffc900040c76e8 EFLAGS: 00000246 [ 887.772302][ C0] RAX: 0000000080000000 RBX: ffff88801e55f0d8 RCX: ffffffff82858064 [ 887.780263][ C0] RDX: 0000000000000000 RSI: ffffffff82858072 RDI: ffff88801e358000 [ 887.788227][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 887.796184][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801e55f090 [ 887.804145][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 887.812116][ C0] ? __page_table_check_zero+0x194/0x410 [ 887.817765][ C0] ? __page_table_check_zero+0x1a2/0x410 [ 887.823396][ C0] __page_table_check_zero+0x1a2/0x410 [ 887.828847][ C0] __free_frozen_pages+0x790/0x1090 [ 887.834045][ C0] ? __free_slab+0xd0/0x220 [ 887.838538][ C0] qlist_free_all+0x47/0xf0 [ 887.843028][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 887.848478][ C0] __kasan_slab_alloc+0x69/0x90 [ 887.853322][ C0] kmem_cache_alloc_lru_noprof+0x267/0x6a0 [ 887.859125][ C0] ? __d_alloc+0x35/0xa50 [ 887.863448][ C0] __d_alloc+0x35/0xa50 [ 887.867592][ C0] ? __lock_acquire+0x49f/0x1a40 [ 887.872530][ C0] d_alloc_parallel+0x105/0x14b0 [ 887.877467][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 887.882833][ C0] ? __d_lookup+0x25c/0x4a0 [ 887.887332][ C0] ? __d_lookup+0x266/0x4a0 [ 887.891832][ C0] path_openat+0x271c/0x4280 [ 887.896423][ C0] ? __pfx_path_openat+0x10/0x10 [ 887.901370][ C0] do_file_open+0x20e/0x430 [ 887.905867][ C0] ? __pfx_do_file_open+0x10/0x10 [ 887.910893][ C0] ? alloc_fd+0x471/0x7a0 [ 887.915217][ C0] ? do_getname+0x191/0x390 [ 887.919719][ C0] do_sys_openat2+0x10f/0x1e0 [ 887.924389][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 887.929587][ C0] __x64_sys_openat+0x12d/0x210 [ 887.934453][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 887.939842][ C0] do_syscall_64+0x115/0x840 [ 887.944453][ C0] ? clear_bhb_loop+0x40/0x90 [ 887.949153][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.955061][ C0] RIP: 0033:0x7f640af5e90e [ 887.959490][ C0] RSP: 002b:00007ffdfe3885e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 887.967925][ C0] RAX: ffffffffffffffda RBX: 0000555590caa500 RCX: 00007f640af5e90e [ 887.975913][ C0] RDX: 0000000000000002 RSI: 00007ffdfe388730 RDI: ffffffffffffff9c [ 887.983903][ C0] RBP: 00007ffdfe3886dc R08: 0000000000000000 R09: 0000000000000000 [ 887.991877][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000395 [ 887.999857][ C0] R13: 00000000000927c0 R14: 00000000000b7d94 R15: 00007ffdfe388730 [ 888.007861][ C0] [ 888.010903][ C0] task:syz-executor state:R running task stack:22440 pid:5627 tgid:5627 ppid:5624 task_flags:0x400140 flags:0x00080000 [ 888.024378][ C0] Call Trace: [ 888.027642][ C0] [ 888.030565][ C0] __schedule+0x125c/0x6730 [ 888.035076][ C0] ? __pfx___schedule+0x10/0x10 [ 888.039917][ C0] ? mark_held_locks+0x40/0x70 [ 888.044679][ C0] preempt_schedule_irq+0x50/0x90 [ 888.049698][ C0] irqentry_exit+0x205/0xa00 [ 888.054334][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 888.060325][ C0] RIP: 0010:unwind_next_frame+0x16e1/0x2090 [ 888.066215][ C0] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 94 07 00 00 49 8b 45 10 48 39 dd 0f 87 f5 f8 ff ff 48 39 d8 0f 86 ec f8 ff ff 48 8d 53 08 <48> 39 d5 0f 92 c1 48 39 d0 0f 93 c0 84 c1 0f 84 d4 f8 ff ff 48 39 [ 888.085810][ C0] RSP: 0018:ffffc900038cf5b8 EFLAGS: 00000216 [ 888.091865][ C0] RAX: ffffc900038d0000 RBX: ffffc900038cfdb8 RCX: ffffffff91fe03c8 [ 888.099821][ C0] RDX: ffffc900038cfdc0 RSI: ffffc900038cfd98 RDI: ffffc900038cf638 [ 888.107784][ C0] RBP: ffffc900038c8000 R08: 0000000000000001 R09: 0000000000000007 [ 888.115743][ C0] R10: 0000000000000200 R11: 000000000003d3af R12: ffffc900038cf678 [ 888.123703][ C0] R13: ffffc900038cf628 R14: ffffc900038cfdb8 R15: ffffc900038cf65c [ 888.131676][ C0] ? unwind_next_frame+0x1561/0x2090 [ 888.136960][ C0] ? tomoyo_path_unlink+0x91/0xe0 [ 888.142105][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 888.148258][ C0] arch_stack_walk+0x94/0xf0 [ 888.152846][ C0] ? security_path_unlink+0x145/0x2b0 [ 888.158219][ C0] stack_trace_save+0x8e/0xc0 [ 888.162889][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 888.168255][ C0] ? __lock_acquire+0x49f/0x1a40 [ 888.173192][ C0] ? __lock_acquire+0x49f/0x1a40 [ 888.178126][ C0] save_stack+0x162/0x1e0 [ 888.182454][ C0] ? __pfx_save_stack+0x10/0x10 [ 888.187292][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 888.192660][ C0] ? qlist_free_all+0x47/0xf0 [ 888.197333][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 888.202956][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 888.207971][ C0] ? __kmalloc_noprof+0x2bf/0x820 [ 888.212983][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 888.217818][ C0] ? tomoyo_encode+0x29/0x50 [ 888.222417][ C0] ? tomoyo_realpath_from_path+0x18c/0x690 [ 888.228244][ C0] ? tomoyo_path_perm+0x276/0x460 [ 888.233285][ C0] ? tomoyo_path_unlink+0x91/0xe0 [ 888.238304][ C0] ? page_ext_put+0x3e/0xd0 [ 888.242804][ C0] __reset_page_owner+0x84/0x190 [ 888.247764][ C0] __free_frozen_pages+0x79f/0x1090 [ 888.252960][ C0] ? __free_slab+0xd0/0x220 [ 888.257475][ C0] qlist_free_all+0x47/0xf0 [ 888.261995][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 888.267456][ C0] __kasan_slab_alloc+0x69/0x90 [ 888.272306][ C0] __kmalloc_noprof+0x2bf/0x820 [ 888.277162][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 888.281962][ C0] tomoyo_encode2+0xfb/0x3c0 [ 888.286549][ C0] tomoyo_encode+0x29/0x50 [ 888.290963][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 888.296602][ C0] tomoyo_path_perm+0x276/0x460 [ 888.301450][ C0] ? tomoyo_path_perm+0x262/0x460 [ 888.306473][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 888.311870][ C0] ? mntput+0x70/0xa0 [ 888.315868][ C0] ? __d_lookup+0x25c/0x4a0 [ 888.320377][ C0] tomoyo_path_unlink+0x91/0xe0 [ 888.325225][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 888.330765][ C0] ? lookup_dcache+0x66/0x170 [ 888.335464][ C0] security_path_unlink+0x145/0x2b0 [ 888.340663][ C0] filename_unlinkat+0x316/0x730 [ 888.345619][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 888.351100][ C0] ? do_getname+0x191/0x390 [ 888.355610][ C0] __x64_sys_unlink+0x46/0x70 [ 888.360310][ C0] do_syscall_64+0x115/0x840 [ 888.364900][ C0] ? clear_bhb_loop+0x40/0x90 [ 888.369572][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.375458][ C0] RIP: 0033:0x7fb3e499d1c7 [ 888.379864][ C0] RSP: 002b:00007ffdc79e7508 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 888.388265][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb3e499d1c7 [ 888.396231][ C0] RDX: 00007ffdc79e7530 RSI: 00007ffdc79e75c0 RDI: 00007ffdc79e75c0 [ 888.404199][ C0] RBP: 00007ffdc79e75c0 R08: 00007ffdc79e85c0 R09: 00000000ffffffff [ 888.412161][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdc79e8650 [ 888.420127][ C0] R13: 00007fb3e4a34474 R14: 00000000000ba3f4 R15: 00007ffdc79e8690 [ 888.428114][ C0] [ 888.431154][ C0] rcu: rcu_preempt kthread starved for 450 jiffies! g262241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 888.442258][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 888.452235][ C0] rcu: RCU grace-period kthread stack dump: [ 888.458108][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 888.471588][ C0] Call Trace: [ 888.474859][ C0] [ 888.477786][ C0] __schedule+0x125c/0x6730 [ 888.482302][ C0] ? __pfx___schedule+0x10/0x10 [ 888.487151][ C0] ? find_held_lock+0x2b/0x80 [ 888.491828][ C0] ? schedule+0x225/0x2c0 [ 888.496157][ C0] schedule+0xdd/0x2c0 [ 888.500752][ C0] schedule_timeout+0x127/0x280 [ 888.505592][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 888.510955][ C0] ? __pfx_process_timeout+0x10/0x10 [ 888.516238][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 888.522035][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 888.527500][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 888.532265][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 888.537548][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 888.542486][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 888.547677][ C0] ? rcu_is_watching+0x12/0xc0 [ 888.552437][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 888.558240][ C0] rcu_gp_kthread+0x179/0x230 [ 888.562920][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 888.568120][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 888.573928][ C0] ? __kthread_parkme+0x18c/0x230 [ 888.578969][ C0] ? kthread+0x13a/0x450 [ 888.583210][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 888.588405][ C0] kthread+0x370/0x450 [ 888.592474][ C0] ? __pfx_kthread+0x10/0x10 [ 888.597061][ C0] ret_from_fork+0x72b/0xd50 [ 888.601645][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 888.606754][ C0] ? __switch_to+0x800/0x10f0 [ 888.611432][ C0] ? __switch_to_asm+0x39/0x70 [ 888.616192][ C0] ? __pfx_kthread+0x10/0x10 [ 888.620780][ C0] ret_from_fork_asm+0x1a/0x30 [ 888.625546][ C0] [ 888.628552][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 888.634946][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 888.646225][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 888.651404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.661475][ C0] Workqueue: bat_events batadv_dat_purge [ 888.667202][ C0] RIP: 0010:check_preemption_disabled+0x8/0xe0 [ 888.673355][ C0] Code: ab 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 <65> 8b 1d d5 75 ab 08 65 f7 05 c6 75 ab 08 ff ff ff 7f 74 0f 48 83 [ 888.692955][ C0] RSP: 0018:ffffc90000007588 EFLAGS: 00000296 [ 888.699015][ C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000000000000 [ 888.706974][ C0] RDX: ffffffff81b803bd RSI: ffffffff8c400a00 RDI: ffffffff8c400a40 [ 888.714939][ C0] RBP: ffffc90000007680 R08: 00000000a971accd R09: 0000000000000007 [ 888.722894][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f3d980 [ 888.730850][ C0] R13: ffffc90000007638 R14: 0000000000000000 R15: ffff888033469f00 [ 888.738812][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 888.747732][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.754329][ C0] CR2: 00007fdc57a00218 CR3: 000000007c310000 CR4: 00000000003526f0 [ 888.762295][ C0] Call Trace: [ 888.765564][ C0] [ 888.768400][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 888.774556][ C0] rcu_is_watching+0x12/0xc0 [ 888.779139][ C0] unwind_next_frame+0x6fa/0x2090 [ 888.784179][ C0] ? stack_trace_save+0x8e/0xc0 [ 888.789023][ C0] ? __unwind_start+0x3cd/0x7e0 [ 888.793866][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 888.800033][ C0] arch_stack_walk+0x94/0xf0 [ 888.804625][ C0] ? stack_trace_save+0x8e/0xc0 [ 888.809470][ C0] stack_trace_save+0x8e/0xc0 [ 888.814142][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 888.819505][ C0] ? stack_trace_save+0x8e/0xc0 [ 888.824349][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 888.829716][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 888.835280][ C0] kasan_save_stack+0x30/0x50 [ 888.839982][ C0] kasan_save_track+0x14/0x30 [ 888.844652][ C0] __kasan_slab_alloc+0x89/0x90 [ 888.849500][ C0] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 888.855385][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 888.860413][ C0] ? kmalloc_reserve+0x148/0x350 [ 888.865347][ C0] kmalloc_reserve+0x148/0x350 [ 888.870101][ C0] __alloc_skb+0x185/0x710 [ 888.874527][ C0] ? __alloc_skb+0x5b7/0x710 [ 888.879110][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 888.884042][ C0] ? do_raw_spin_lock+0x128/0x260 [ 888.889061][ C0] skb_copy+0x1ca/0x3a0 [ 888.893218][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 888.899391][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 888.905911][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 888.911623][ C0] ? __lock_acquire+0x49f/0x1a40 [ 888.916562][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 888.922283][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 888.927739][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 888.933284][ C0] __iterate_interfaces+0x2e6/0x650 [ 888.938535][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 888.944607][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 888.950686][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 888.957737][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 888.962944][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 888.968745][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 888.973945][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 888.979045][ C0] handle_softirqs+0x1ea/0x9b0 [ 888.983802][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 888.989078][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 888.994351][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 889.000146][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 889.005763][ C0] do_softirq+0xac/0xe0 [ 889.009913][ C0] [ 889.012832][ C0] [ 889.015765][ C0] __local_bh_enable_ip+0xf8/0x120 [ 889.020885][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 889.026514][ C0] batadv_dat_purge+0x4b/0xa0 [ 889.031198][ C0] process_one_work+0xa23/0x1940 [ 889.036160][ C0] ? __pfx_process_one_work+0x10/0x10 [ 889.041538][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 889.046904][ C0] rescuer_thread+0x905/0x14a0 [ 889.051671][ C0] ? rescuer_thread+0x240/0x14a0 [ 889.056598][ C0] ? rescuer_thread+0x118/0x14a0 [ 889.061526][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 889.066721][ C0] ? __kthread_parkme+0x18c/0x230 [ 889.071754][ C0] ? kthread+0x13a/0x450 [ 889.076033][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 889.081245][ C0] kthread+0x370/0x450 [ 889.085316][ C0] ? __pfx_kthread+0x10/0x10 [ 889.089906][ C0] ret_from_fork+0x72b/0xd50 [ 889.094494][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 889.099595][ C0] ? __switch_to+0x800/0x10f0 [ 889.104267][ C0] ? __switch_to_asm+0x39/0x70 [ 889.109025][ C0] ? __pfx_kthread+0x10/0x10 [ 889.113604][ C0] ret_from_fork_asm+0x1a/0x30 [ 889.118368][ C0] [ 891.007182][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.019778][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.325931][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.337717][ T1318] ieee802154 phy1 wpan1: encryption failed: -22