last executing test programs: 2.915071389s ago: executing program 0 (id=654): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = clone$auto(0x6, 0x63d, 0x0, 0x0, 0x200) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x10ffffffff}, 0x6, 0x0) 1.697119085s ago: executing program 0 (id=669): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x6f7250c4) 1.696525911s ago: executing program 2 (id=670): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 1.540627973s ago: executing program 2 (id=673): r0 = socket(0xa, 0x3, 0x5) msgctl$auto_IPC_RMID(0x2, 0x0, &(0x7f00000000c0)={{0xcf9, 0x0, 0xee01, 0x4, 0x3, 0x0, 0xbfa5}, &(0x7f0000000040)=0xa, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x5, 0x9, 0x6, @raw=0x5, @raw=0x64}) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 1.409606522s ago: executing program 2 (id=675): mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) clone3$auto(0x0, 0x40) io_uring_setup$auto(0x80, 0x0) 1.275020617s ago: executing program 3 (id=677): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 1.242754666s ago: executing program 1 (id=678): r0 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x8) 1.054347694s ago: executing program 1 (id=679): r0 = socket(0x2, 0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x101000, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) 1.05408995s ago: executing program 3 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000780)={0x24, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1.001513667s ago: executing program 2 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) 891.778496ms ago: executing program 1 (id=682): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x7ffc, 0x0) io_uring_register$auto_IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x550) 859.477282ms ago: executing program 3 (id=683): open(&(0x7f0000000140)='./file0\x00', 0xaa4c0, 0x40) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) 804.351315ms ago: executing program 0 (id=684): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000180), 0x1, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) 793.99731ms ago: executing program 2 (id=685): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) 750.842752ms ago: executing program 1 (id=686): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r0, r1, 0x0, 0x7fffe000) 662.746124ms ago: executing program 3 (id=687): r0 = socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x53) setsockopt$auto(r0, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559) 583.185497ms ago: executing program 0 (id=688): socket(0x2, 0x3, 0x6) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) 390.649886ms ago: executing program 2 (id=689): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 390.581772ms ago: executing program 3 (id=690): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x1) 389.821125ms ago: executing program 0 (id=697): mmap$auto(0x0, 0xe983, 0xcaa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x2) 389.260391ms ago: executing program 1 (id=691): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D0p\x00', 0x8080, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/cable#0\x00', 0x101c80, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) 191.98482ms ago: executing program 1 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "000200000000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 150.341239ms ago: executing program 0 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x14) 0s ago: executing program 3 (id=694): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 88.562662][ T5614] cgroup: Unknown subsys name 'net' [ 88.677366][ T5614] cgroup: Unknown subsys name 'cpuset' [ 88.687235][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.460614][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.965439][ T10] cfg80211: failed to load regulatory.db [ 93.593906][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.603247][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.611204][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.623971][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.634509][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.725290][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.737161][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.745878][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.753533][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.765388][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.787950][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.797027][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.806276][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.808980][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.815288][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.829325][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.835541][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.844874][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.858852][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.867283][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.590239][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.597623][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.605065][ T5637] bridge_slave_0: entered allmulticast mode [ 95.613657][ T5637] bridge_slave_0: entered promiscuous mode [ 95.647280][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.654650][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.661817][ T5637] bridge_slave_1: entered allmulticast mode [ 95.669923][ T5637] bridge_slave_1: entered promiscuous mode [ 95.724064][ T5636] Bluetooth: hci0: command tx timeout [ 95.773178][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.780810][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.788114][ T5632] bridge_slave_0: entered allmulticast mode [ 95.795865][ T5632] bridge_slave_0: entered promiscuous mode [ 95.806943][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.822648][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.829985][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.837394][ T5626] bridge_slave_0: entered allmulticast mode [ 95.844964][ T5626] bridge_slave_0: entered promiscuous mode [ 95.853454][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.861410][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.868918][ T5632] bridge_slave_1: entered allmulticast mode [ 95.876352][ T5632] bridge_slave_1: entered promiscuous mode [ 95.883476][ T5636] Bluetooth: hci2: command tx timeout [ 95.891442][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.893461][ T5636] Bluetooth: hci1: command tx timeout [ 95.914005][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.921139][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.928432][ T5626] bridge_slave_1: entered allmulticast mode [ 95.935904][ T5626] bridge_slave_1: entered promiscuous mode [ 95.963242][ T5636] Bluetooth: hci3: command tx timeout [ 96.020184][ T5637] team0: Port device team_slave_0 added [ 96.051276][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.062807][ T5637] team0: Port device team_slave_1 added [ 96.068694][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.076282][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.084656][ T5631] bridge_slave_0: entered allmulticast mode [ 96.092292][ T5631] bridge_slave_0: entered promiscuous mode [ 96.102684][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.117010][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.156566][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.164858][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.172069][ T5631] bridge_slave_1: entered allmulticast mode [ 96.179773][ T5631] bridge_slave_1: entered promiscuous mode [ 96.189831][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.252470][ T5632] team0: Port device team_slave_0 added [ 96.259383][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.266693][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.293077][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.331778][ T5632] team0: Port device team_slave_1 added [ 96.338075][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.345190][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.371248][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.385415][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.397176][ T5626] team0: Port device team_slave_0 added [ 96.425935][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.437120][ T5626] team0: Port device team_slave_1 added [ 96.459640][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.466783][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.492813][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.540168][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.547245][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.573491][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.609177][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.616491][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.642553][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.665187][ T5631] team0: Port device team_slave_0 added [ 96.682881][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.689976][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.716396][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.739929][ T5631] team0: Port device team_slave_1 added [ 96.752628][ T5637] hsr_slave_0: entered promiscuous mode [ 96.759426][ T5637] hsr_slave_1: entered promiscuous mode [ 96.838210][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.845514][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.871676][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.888974][ T5626] hsr_slave_0: entered promiscuous mode [ 96.895566][ T5626] hsr_slave_1: entered promiscuous mode [ 96.901788][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 96.907780][ T5626] Cannot create hsr debugfs directory [ 96.934941][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.942071][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.968234][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.994108][ T5632] hsr_slave_0: entered promiscuous mode [ 97.000561][ T5632] hsr_slave_1: entered promiscuous mode [ 97.006896][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 97.013325][ T5632] Cannot create hsr debugfs directory [ 97.167404][ T5631] hsr_slave_0: entered promiscuous mode [ 97.174560][ T5631] hsr_slave_1: entered promiscuous mode [ 97.180741][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 97.186582][ T5631] Cannot create hsr debugfs directory [ 97.574948][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.589622][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.597919][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.611798][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.630670][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.640651][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.651162][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.663101][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.734342][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.748261][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.758142][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.769548][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.777827][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.789294][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.798550][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.803913][ T5636] Bluetooth: hci0: command tx timeout [ 97.814804][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.919493][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.930403][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.938896][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.948936][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.963287][ T5636] Bluetooth: hci1: command tx timeout [ 97.971546][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.978429][ T5636] Bluetooth: hci2: command tx timeout [ 97.987678][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.996435][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.007509][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.044793][ T5636] Bluetooth: hci3: command tx timeout [ 98.117031][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.128255][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.142239][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.152539][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.164759][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.178077][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.188278][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.196772][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.207301][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.268099][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.312150][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.319690][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.355228][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.362386][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.384863][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.471527][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.491523][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.508874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.516085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.548057][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.555303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.601957][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.619502][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.646307][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.653561][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.700999][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.708317][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.768572][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.806895][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.814168][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.853598][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.860985][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.666175][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.848171][ T5637] veth0_vlan: entered promiscuous mode [ 99.878613][ T5637] veth1_vlan: entered promiscuous mode [ 99.887008][ T5636] Bluetooth: hci0: command tx timeout [ 99.959421][ T5637] veth0_macvtap: entered promiscuous mode [ 100.017338][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.033974][ T5637] veth1_macvtap: entered promiscuous mode [ 100.044959][ T5636] Bluetooth: hci2: command tx timeout [ 100.050439][ T50] Bluetooth: hci1: command tx timeout [ 100.125512][ T50] Bluetooth: hci3: command tx timeout [ 100.134752][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.176529][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.198923][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.247082][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.295004][ T5626] veth0_vlan: entered promiscuous mode [ 100.360827][ T5626] veth1_vlan: entered promiscuous mode [ 100.453611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.458245][ T5632] veth0_vlan: entered promiscuous mode [ 100.486694][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.531248][ T5632] veth1_vlan: entered promiscuous mode [ 100.548072][ T5631] veth0_vlan: entered promiscuous mode [ 100.555418][ T5626] veth0_macvtap: entered promiscuous mode [ 100.568322][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.579384][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.599183][ T5626] veth1_macvtap: entered promiscuous mode [ 100.626368][ T5631] veth1_vlan: entered promiscuous mode [ 100.690326][ T5632] veth0_macvtap: entered promiscuous mode [ 100.701586][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.706715][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.742057][ T5632] veth1_macvtap: entered promiscuous mode [ 100.753275][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.767246][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.793213][ T4123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.823128][ T4123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.858816][ T5631] veth0_macvtap: entered promiscuous mode [ 100.883903][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.911268][ T5631] veth1_macvtap: entered promiscuous mode [ 100.933773][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934400][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934459][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934514][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934567][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.937801][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.057299][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.115929][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.167146][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.189774][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.213774][ T4123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.275081][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.310677][ T4123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.322531][ T4123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.456703][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.470946][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.484242][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.506031][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.657033][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.692392][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.770561][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.785566][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.808479][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.823150][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.893659][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.963583][ T50] Bluetooth: hci0: command tx timeout [ 101.973762][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.973781][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.973824][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.123276][ T50] Bluetooth: hci1: command tx timeout [ 102.128955][ T5636] Bluetooth: hci2: command tx timeout [ 102.203427][ T50] Bluetooth: hci3: command tx timeout [ 103.206745][ T5829] netlink: 206 bytes leftover after parsing attributes in process `syz.1.24'. [ 103.234797][ T5829] Zero length message leads to an empty skb [ 104.243436][ T50] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 104.628291][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.045980][ T5889] process 'syz.3.53' launched '/dev/fd/3' with NULL argv: empty string added [ 105.955699][ T5924] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 106.088201][ T5928] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 107.605939][ T5982] netlink: zone id is out of range [ 107.910260][ T5994] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 108.206254][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 108.976941][ T6035] netlink: 'syz.3.123': attribute type 11 has an invalid length. [ 109.000664][ T6035] netlink: 'syz.3.123': attribute type 11 has an invalid length. [ 109.010426][ T6035] netlink: 'syz.3.123': attribute type 11 has an invalid length. [ 109.591713][ T6056] netlink: 148 bytes leftover after parsing attributes in process `syz.3.133'. [ 110.797026][ T6100] netlink: 'syz.1.154': attribute type 12 has an invalid length. [ 112.065852][ T5727] Process accounting resumed [ 112.175524][ T6153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.464604][ T6164] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 113.320140][ T6196] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 115.001652][ T6255] ksmbd: Unknown IPC event: 14, ignore. [ 115.645788][ T6272] syz.2.237 (6272) used greatest stack depth: 17368 bytes left [ 116.389876][ T6308] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 116.570591][ T6314] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.001328][ T6329] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 117.697794][ T6356] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.862382][ T6469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.330'. [ 120.961339][ T6473] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.549077][ T6499] netlink: 334 bytes leftover after parsing attributes in process `syz.3.344'. [ 121.597110][ T6501] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 125.059424][ T6629] ======================================================= [ 125.059424][ T6629] WARNING: The mand mount option has been deprecated and [ 125.059424][ T6629] and is ignored by this kernel. Remove the mand [ 125.059424][ T6629] option from the mount to silence this warning. [ 125.059424][ T6629] ======================================================= [ 125.443654][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 125.459479][ T6641] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.660682][ T6651] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.631869][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 127.239543][ T6708] openvswitch: netlink: IP tunnel dst address not specified [ 127.882374][ T6738] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 128.258319][ T6750] nfsd: Unknown parameter 'batadv' [ 128.517384][ T50] Bluetooth: hci0: ACL packet too small [ 129.002617][ T6785] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 129.717039][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 129.767981][ T6812] netlink: 29 bytes leftover after parsing attributes in process `syz.2.488'. [ 130.178966][ T6828] aoe: could not set interface list: too many interfaces [ 130.581973][ T6846] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.862947][ T6856] netlink: 'syz.1.510': attribute type 3 has an invalid length. [ 131.079244][ T6865] FAULT_INJECTION: forcing a failure. [ 131.079244][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 131.107305][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.2.515 Not tainted syzkaller #0 PREEMPT(full) [ 131.107350][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.107375][ T6865] Call Trace: [ 131.107386][ T6865] [ 131.107399][ T6865] dump_stack_lvl+0x100/0x190 [ 131.107465][ T6865] should_fail_ex.cold+0x5/0xa [ 131.107504][ T6865] should_failslab+0xc2/0x120 [ 131.107555][ T6865] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.107594][ T6865] ? call_usermodehelper_setup+0xaf/0x360 [ 131.107662][ T6865] ? __pfx_free_modprobe_argv+0x10/0x10 [ 131.107703][ T6865] call_usermodehelper_setup+0xaf/0x360 [ 131.107764][ T6865] __request_module+0x3c7/0x6a0 [ 131.107804][ T6865] ? __pfx___request_module+0x10/0x10 [ 131.107858][ T6865] ? find_held_lock+0x2b/0x80 [ 131.107922][ T6865] ? inet6_create+0xb9f/0x12b0 [ 131.107969][ T6865] inet6_create+0xd65/0x12b0 [ 131.108010][ T6865] ? inet6_create+0x7f/0x12b0 [ 131.108051][ T6865] __sock_create+0x339/0x860 [ 131.108095][ T6865] __sys_socket+0x14d/0x260 [ 131.108133][ T6865] ? __pfx___sys_socket+0x10/0x10 [ 131.108184][ T6865] __x64_sys_socket+0x72/0xb0 [ 131.108221][ T6865] ? lockdep_hardirqs_on+0x78/0x100 [ 131.108266][ T6865] do_syscall_64+0x115/0x840 [ 131.108319][ T6865] ? clear_bhb_loop+0x70/0xc0 [ 131.108358][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.108389][ T6865] RIP: 0033:0x7f0eacb9e0d9 [ 131.108426][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.108454][ T6865] RSP: 002b:00007f0ead9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 131.108481][ T6865] RAX: ffffffffffffffda RBX: 00007f0eace25fa0 RCX: 00007f0eacb9e0d9 [ 131.108519][ T6865] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 131.108538][ T6865] RBP: 00007f0eacc35024 R08: 0000000000000000 R09: 0000000000000000 [ 131.108557][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.108576][ T6865] R13: 00007f0eace26038 R14: 00007f0eace25fa0 R15: 00007ffd93c13f38 [ 131.108618][ T6865] [ 132.737049][ T6909] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 132.928586][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936706][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.956688][ T6914] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.986976][ T6916] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 133.791559][ T6946] unsupported nla_type 113 [ 134.882804][ T997] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 135.435707][ T30] audit: type=1326 audit(1786039250.444:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.580" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eacb9e0d9 code=0x0 [ 136.569654][ T7054] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.232760][ T7077] FAULT_INJECTION: forcing a failure. [ 137.232760][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 137.257279][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.2.611 Not tainted syzkaller #0 PREEMPT(full) [ 137.257327][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.257347][ T7077] Call Trace: [ 137.257357][ T7077] [ 137.257369][ T7077] dump_stack_lvl+0x100/0x190 [ 137.257412][ T7077] should_fail_ex.cold+0x5/0xa [ 137.257450][ T7077] should_failslab+0xc2/0x120 [ 137.257499][ T7077] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 137.257541][ T7077] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.257600][ T7077] ? sock_alloc_inode+0x26/0x2c0 [ 137.257639][ T7077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 137.257676][ T7077] sock_alloc_inode+0x26/0x2c0 [ 137.257709][ T7077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 137.257742][ T7077] alloc_inode+0x68/0x250 [ 137.257789][ T7077] sock_alloc+0x44/0x280 [ 137.257840][ T7077] ? security_socket_create+0x7f/0x250 [ 137.257883][ T7077] __sock_create+0xc2/0x860 [ 137.257922][ T7077] ? lockdep_init_map_type+0x5c/0x250 [ 137.257960][ T7077] smc_create+0x163/0x290 [ 137.258006][ T7077] __sock_create+0x339/0x860 [ 137.258051][ T7077] __sys_socket+0x14d/0x260 [ 137.258093][ T7077] ? __pfx___sys_socket+0x10/0x10 [ 137.258146][ T7077] __x64_sys_socket+0x72/0xb0 [ 137.258185][ T7077] ? lockdep_hardirqs_on+0x78/0x100 [ 137.258231][ T7077] do_syscall_64+0x115/0x840 [ 137.258275][ T7077] ? clear_bhb_loop+0x70/0xc0 [ 137.258317][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.258352][ T7077] RIP: 0033:0x7f0eacb9e0d9 [ 137.258383][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.258415][ T7077] RSP: 002b:00007f0ead9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 137.258447][ T7077] RAX: ffffffffffffffda RBX: 00007f0eace25fa0 RCX: 00007f0eacb9e0d9 [ 137.258470][ T7077] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 137.258489][ T7077] RBP: 00007f0eacc35024 R08: 0000000000000000 R09: 0000000000000000 [ 137.258509][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.258528][ T7077] R13: 00007f0eace26038 R14: 00007f0eace25fa0 R15: 00007ffd93c13f38 [ 137.258578][ T7077] [ 137.258623][ T7077] socket: no more sockets [ 138.209242][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 138.348440][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.632632][ T7131] netlink: set zone limit has 4 unknown bytes [ 139.417332][ T7162] netlink: zone id is out of range [ 139.439420][ T7162] netlink: get zone limit has 8 unknown bytes [ 141.188079][ T7217] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 141.380908][ T30] audit: type=1800 audit(1786039256.384:3): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.679" name="lu_gp_id" dev="configfs" ino=12093 res=0 errno=0 [ 142.059692][ T7243] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7bfe6 [ 142.095249][ T7243] memcg:ffff888033573100 [ 142.103399][ T7243] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 142.121232][ T7243] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 142.138290][ T7243] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888033573100 [ 142.159582][ T7243] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 142.186336][ T7243] page_owner tracks the page as allocated [ 142.211479][ T7243] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7243, tgid 7242 (syz.2.689), ts 142059652754, free_ts 142004000800 [ 142.253157][ T7243] post_alloc_hook+0xfd/0x120 [ 142.263407][ T7243] get_page_from_freelist+0xf48/0x3530 [ 142.273282][ T7243] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 142.303166][ T7243] alloc_pages_mpol+0x1fb/0x540 [ 142.309739][ T7243] folio_alloc_noprof+0x22/0x250 [ 142.323941][ T7243] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 142.339750][ T7243] filemap_alloc_folio_noprof+0x5e/0x80 [ 142.353280][ T7243] page_cache_ra_order+0x539/0xed0 [ 142.366678][ T7243] filemap_fault+0x1943/0x3130 [ 142.383433][ T7243] __do_fault+0x10b/0x440 [ 142.389118][ T7243] do_fault+0xeb2/0x1750 [ 142.399812][ T7243] __handle_mm_fault+0x187d/0x2a00 [ 142.410923][ T7243] handle_mm_fault+0x37b/0xa30 [ 142.419534][ T7243] __get_user_pages+0x1178/0x32a0 [ 142.425309][ T7243] populate_vma_page_range+0x267/0x3f0 [ 142.431530][ T7243] __mm_populate+0x107/0x3a0 [ 142.436730][ T7243] page last free pid 7243 tgid 7242 stack trace: [ 142.443513][ T7243] register_dummy_stack+0x74/0xb0 [ 142.448777][ T7243] init_page_owner+0x42/0xa10 [ 142.454013][ T7243] page_ext_init+0x71d/0x780 [ 142.459230][ T7243] mm_core_init+0x229/0x270 [ 142.466799][ T7243] ------------[ cut here ]------------ [ 142.472389][ T7243] kernel BUG at mm/filemap.c:858! [ 142.480761][ T7243] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 142.487100][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) [ 142.496346][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.506440][ T7243] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 142.512474][ T7243] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 142.532132][ T7243] RSP: 0018:ffffc9000695f3f8 EFLAGS: 00010246 [ 142.538256][ T7243] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900072e9000 [ 142.546279][ T7243] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff88805972c2c4 [ 142.554295][ T7243] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 142.562311][ T7243] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 142.570329][ T7243] R13: ffffea0001eff980 R14: 0000000000000110 R15: 0000000000000000 [ 142.578348][ T7243] FS: 00007f0ead9ac6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 142.587354][ T7243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.593984][ T7243] CR2: 00007f2806beb7c0 CR3: 000000005c342000 CR4: 00000000003526f0 [ 142.602007][ T7243] Call Trace: [ 142.605359][ T7243] [ 142.608335][ T7243] ? __pfx___filemap_add_folio+0x10/0x10 [ 142.614039][ T7243] filemap_add_folio+0x1d3/0x630 [ 142.619063][ T7243] ? __lock_acquire+0x49f/0x1a40 [ 142.624098][ T7243] ? __pfx_filemap_add_folio+0x10/0x10 [ 142.629609][ T7243] ? __pfx___css_rstat_updated+0x10/0x10 [ 142.635320][ T7243] page_cache_ra_order+0x602/0xed0 [ 142.640513][ T7243] filemap_fault+0x1943/0x3130 [ 142.645357][ T7243] ? __pfx_filemap_fault+0x10/0x10 [ 142.650526][ T7243] ? blk_cgroup_congested+0x136/0x270 [ 142.655957][ T7243] ? blk_cgroup_congested+0x136/0x270 [ 142.661403][ T7243] ? __pfx_filemap_map_pages+0x10/0x10 [ 142.666909][ T7243] __do_fault+0x10b/0x440 [ 142.671298][ T7243] do_fault+0xeb2/0x1750 [ 142.675615][ T7243] __handle_mm_fault+0x187d/0x2a00 [ 142.680780][ T7243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.686224][ T7243] ? __pfx___handle_mm_fault+0x10/0x10 [ 142.691726][ T7243] ? pte_offset_map_lock+0x174/0x320 [ 142.697083][ T7243] ? find_held_lock+0x2b/0x80 [ 142.701830][ T7243] ? follow_page_pte+0x4d0/0x13f0 [ 142.710570][ T7243] handle_mm_fault+0x37b/0xa30 [ 142.715394][ T7243] __get_user_pages+0x1178/0x32a0 [ 142.720487][ T7243] ? __pfx___get_user_pages+0x10/0x10 [ 142.725941][ T7243] populate_vma_page_range+0x267/0x3f0 [ 142.731482][ T7243] ? __pfx_populate_vma_page_range+0x10/0x10 [ 142.737537][ T7243] ? __pfx_find_vma_intersection+0x10/0x10 [ 142.743444][ T7243] ? do_mmap+0x93f/0x12f0 [ 142.747845][ T7243] __mm_populate+0x107/0x3a0 [ 142.752497][ T7243] ? __pfx___mm_populate+0x10/0x10 [ 142.757682][ T7243] ? up_write+0x2e5/0x5c0 [ 142.762156][ T7243] vm_mmap_pgoff+0x37f/0x470 [ 142.766813][ T7243] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 142.771979][ T7243] ? __fget_files+0x215/0x3d0 [ 142.776715][ T7243] ? __fget_files+0x21f/0x3d0 [ 142.781448][ T7243] ksys_mmap_pgoff+0x3cb/0x610 [ 142.786277][ T7243] ? __x64_sys_futex+0x358/0x4d0 [ 142.791273][ T7243] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 142.796626][ T7243] ? xfd_validate_state+0x129/0x190 [ 142.801890][ T7243] __x64_sys_mmap+0x125/0x190 [ 142.806633][ T7243] do_syscall_64+0x115/0x840 [ 142.811292][ T7243] ? clear_bhb_loop+0x70/0xc0 [ 142.816022][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.821972][ T7243] RIP: 0033:0x7f0eacb9e0d9 [ 142.826446][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.846117][ T7243] RSP: 002b:00007f0ead9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 142.854585][ T7243] RAX: ffffffffffffffda RBX: 00007f0eace25fa0 RCX: 00007f0eacb9e0d9 [ 142.862599][ T7243] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 142.870612][ T7243] RBP: 00007f0eacc35024 R08: 0000000000000003 R09: 0000000000008000 [ 142.878628][ T7243] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 142.886644][ T7243] R13: 00007f0eace26038 R14: 00007f0eace25fa0 R15: 00007ffd93c13f38 [ 142.894679][ T7243] [ 142.897749][ T7243] Modules linked in: [ 142.903006][ T7243] ---[ end trace 0000000000000000 ]--- [ 142.914989][ T7243] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 142.921055][ T7243] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 142.941649][ T7243] RSP: 0018:ffffc9000695f3f8 EFLAGS: 00010246 [ 142.950036][ T7243] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900072e9000 [ 142.966307][ T7243] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff88805972c2c4 [ 143.010387][ T7243] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 143.023282][ T7243] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 143.046510][ T7243] R13: ffffea0001eff980 R14: 0000000000000110 R15: 0000000000000000 [ 143.061074][ T7243] FS: 00007f0ead9ac6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 143.070306][ T7243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.083259][ T7243] CR2: 0000001b34a01ff8 CR3: 000000005c342000 CR4: 00000000003526f0 [ 143.091336][ T7243] Kernel panic - not syncing: Fatal exception [ 143.098049][ T7243] Kernel Offset: disabled [ 143.102562][ T7243] Rebooting in 86400 seconds..