last executing test programs: 2.936530578s ago: executing program 0 (id=14401): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 2.560080615s ago: executing program 0 (id=14405): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_score_adj\x00', 0x20202, 0x0) setuid$auto(0xe) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) write$auto(r0, 0x0, 0xce89) 2.555340821s ago: executing program 3 (id=14406): io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) 2.090394253s ago: executing program 1 (id=14411): madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40c5}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.087342639s ago: executing program 0 (id=14419): mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x1e, 0x1, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 1.932067826s ago: executing program 3 (id=14414): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x40011) getdents64$auto(r0, 0x0, 0x20000015) 1.572976406s ago: executing program 1 (id=14416): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x1, 0x0) 1.370813381s ago: executing program 2 (id=14418): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) 1.31111238s ago: executing program 1 (id=14420): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x5, 0x0, 0x0) 1.181579075s ago: executing program 3 (id=14421): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)={0x121c, 0x0, 0x4, 0x4070bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1205, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0x10c8, 0x46, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x10c0, 0x36, 0x0, 0x1, [@nested={0x2d9, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @nested={0x250, 0x6e, 0x0, 0x1, [@nested={0x249, 0x63, 0x0, 0x1, [@generic="d39602c3926ada2e36cd41b6a0d062d958c8b1eed33c26b284e7785de2fd5e8877357027d6e6b9cf103be5c4bbdf592a64e2143382b0ebfdac457ca40a0728d933c5b965ba7336d2128dbe23eefbf6a47b9ba84392e13b8256511ecdb7f9dea49522ed8eeb5d2638f42f18dde87d25aa8b1ed0e09756e4a78c1bc976a646ea26de1f654640070d1b7380cf5330b09b8b44708530168c3a7f6c16721cfd99995fefb0bfec588096f82055048fc8f0eb394858c36629cd6c41d0ecd9ed859ecda839b86c1a32acc056760a4ce128960137e6b71e22900c6c77df72c2c4dc91550b1e9874c8", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}}, @generic="3bbe087a3a253b8f6ac946a8a0f434940f3e4332dbf39dca37236c2163cfb1269f254d9626127cd4a1b36ffc01b9708dca9a597bc4046ef0b23637d1677df6b6e237ea7d3e3c04cac80aed0edee75178ff84b40943b8a8f81045cb6f58c2808e8f26afa842bb895f07596d8afb8bcb747a255193720473b333a9d1c05534", @nested={0x4, 0xec}, @generic="4a0c0de6dd6385ca9b9ccc4038047946acd3292baf97cea0ba671843e16973367439136b6585cf67dbda66b856e34b9b582e4aba51360049c04b072dd2f804a42756dfc0ba83e5e36a8010f5c63fcfe043ae3a4fa6de192164be8e644787cf8ce1b6618720cf402f5b23860fd0d233958978c914f6204b7a1a6f46cb3d4b48b89ec59bb6a17b197009deb76d0a2ddb3e065d5865da77dca7d42c7d58b3addecd9e6c2f998831d0424683909eb2ac5fe317da598ccccc9c4c681c9c0ed3f03e690609703cf1dbacec2da019"]}]}, @nested={0x4, 0x85}, @generic="7b2876790de819996d0bae314ac3b6988f4d1cc8ba44ffff000000000000c6608e2e7da2e2829c490a9e589e926aa4bc18efa0d44f083ad4797904f5ad5091e8cefb93264a2f17c4390f340e429362a9406e793e452a51aaa5e12aa5376ad64a84a1fb9b47e2345dff00000000"]}, @nested={0xddd, 0x29, 0x0, 0x1, [@nested={0x8e4, 0x2f, 0x0, 0x1, [@typed={0x803, 0xc8, 0x0, 0x0, @binary="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"}, @nested={0xd0, 0x13e, 0x0, 0x1, [@nested={0x4, 0xef}, @generic="467ea3ada5512062d3b65d18eaf29ee4927b240b8fcd8c0689bd0a011add51b5dccce28edb0db1761a62ae13dc6759b7df516f5377de31b0efeda74dbc6c69f8e3edf9c9fa647fb2ef5bd3b2b6dbabf82c5f8d39ea90ece70c3c32fd85c8fc089c29f19a6e3ca6b30fc69198c0864da9b19b400a8b94fae3ba0345da8fe4c8634daffacbffc084e3316c741a58ae81a6a56fed5abe5608ef120ea7815e8266caf596b8911ca9881511039292609a61997e1dfb0d6dc08402d60e86fd32544b7f", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x6}]}, @nested={0xc, 0x4e, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0x104}]}]}, @generic="06f3f15ee773298aba24165625e11f138abc9f82afde899851e0f38768071d8c70fb55747dd23c0044d767b025f03fa7efb81e270596a889ef20a952116c6a288b39dc86cdce373e27cbe34668a7ec551767f128a4a08b79b2edd73ff7112275f818a6e839ca8abb902a978a960849eb91d65f01dc9eb56f73f4fcc190e5556cbf94bb76c4997ba9fdd3ff0ac0cb2598a39627b16c7a00dbc1470ad585305042318e4362f4abcf7ced27f83d4eebb1b824a226cdab6cc4ff12b790bf79988c396b02a36d42407f8338febac27ee72ebcc54ab681b05404703043335f760f79eb5da4bfd5c77ba7e3b14845d8e600fa8fffd0ff53cae39ddc5b8ed7c86a72332219a48e4f360162894127ccf5925e4849a22ee4770801aa35773d7443b17d619f8d6c52e64bcf98cfbacc1c479b941f3c77f482cb84212d9def88b66ae088a3766bd880f82fb65e142b925691d232c2d8082969bafd470e191097098388a457c48f562ab49e134863cf1fbeb220dc3e2b0c3b8252cba1b6733df7e6832e1b84bfaf911add5a8f5cc322193ab9d57f574b6974031dbda51e05258eb1ce980af4ef7abdc71377b39b4c11e0648ba3f81b22ca8b71ac995e7897fa5d300fda3a3639a6288fa203f028b2c4237fa0e049f1b4cd0de2015845f5d68782bc66abffc951d14bf2acf15c641e5ee4e664e8e026dc0fbdc9461c2458e3f1bb8845e0712de7c38dfdc6cab65ff9ca10afc064c78426fdb3ef6735bc04d6bdf77355d4adbdb628c5216e908b829fccfd138acda02bf9545161e1650cb74972e72347ebf1a1fb8898d6f7537b2326f4cb5e3ba782a16ef4604c0a0ca2cafcff262e86c79f2ac8ccfa88502d26d2c83e27ed2f65a7b8e2812fd8da9228ab9944c3a627ba3e69af2661b0002408a1fa4ba4a80b746dc27377ceb8207402184ce3cc6b4b253fa7e38546fad0ecf4e346d109d41a7685600c566ce66bb3032d4e3ae81f5b9cc66e143b7073ab77231a08c291e8c6182426c71006296b40b85f9ca6c0e40f8535b6b0498983a79bd4eff2a9868d7c32d0986ce7f8fc5f26f238266668ba6c943923586b531fbef2eba0450ae9f8d731912a528ae95ba8328fb672b15bcf2859f001ef28a12031a8b43f3cd578baf23d03698200df46d1c395fcb2e2ff5c899a468c899e1427285d0df06991b8c00a48e680a1cb87eba1dbf1577eb5cb94c9aedaa5ba1383b0830c6e2b0b23cb1bc0e50fe8cdf6b1719052d75c4a06b36a9facc647454ed31623aa2af76665600a42bcd97ae0a3a92d342151a59083010e889417e42d4bf8c6e8d7d21643de3a5d3e7ee718b00dee00f718fa0ef3ddda8d5dbfce49ef628120857efb66fd6df89b4038dbf17b50bec33f4c2e965700a91516e29de4d6592be383fb9d7c82b6e179b98edd8120254da7414cb9d914815b55258726c0132aaf0c7413c13e4a06caf45e65af5beee3dcffb81c6a839ba23bf9d31167cbd07a198b5e985b417a9530fbaf724ba5cffc0ba279779e8ac7bf91df65f106543acdf38b382e27b35a97c964446ac0239c46675a434db5f0e12419fda17c75cd432ec84db5573beb218f658cf8903200a26e02eae53f1045e9039721f06da2c61192171f011cd4762847193e383fd8c09c96b0b57b3061746a4e89a7f6335dd402787aa180b044789a5ce13cb50b3586d88e9802d28aa1ce15690dc024dea8b0e4aa953f2e1eebc34d1bcb0af20477b0ca1e3b5cb2ad2a94aac01420567ea18a18dc00bee747ed29e1fca8b48984a5105ba4124b5786"]}]}]}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 1.125737858s ago: executing program 1 (id=14422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) 1.04446857s ago: executing program 2 (id=14423): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x81, 0x0, 0x14) 987.173581ms ago: executing program 0 (id=14424): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x61bf, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0xffc, 0x1ff, 0x8000000000008001, 0x80000001, 0x40, 0x40000102}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 722.703862ms ago: executing program 1 (id=14425): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(r0, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) 722.161115ms ago: executing program 2 (id=14426): madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40c5}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 721.75143ms ago: executing program 3 (id=14427): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x8, 0x200000000000b, 0x9) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 638.911491ms ago: executing program 0 (id=14428): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) 569.610901ms ago: executing program 2 (id=14429): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) 308.428651ms ago: executing program 1 (id=14430): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x40011) getdents64$auto(r0, 0x0, 0x20000015) 308.321815ms ago: executing program 2 (id=14431): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd3\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x40087101, 0xffffffffffffffff) 307.962634ms ago: executing program 3 (id=14432): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x848, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x6, 0x25, 0x8, 0x40006, 0x5, 0x5, 0x3, 0x200000005b71, 0x10000, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 220.996757ms ago: executing program 0 (id=14433): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x3, 0x0, 0x0) socket(0x11, 0x80000, 0x2) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, 0x0, 0x5) 145.361011ms ago: executing program 2 (id=14434): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) 0s ago: executing program 3 (id=14435): open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fremovexattr$auto(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_access\x00e\xd8\v\x1b\x02\xd5q?\x8c\xf1\x8f\x89\x7f\xd47\x84dG\xb3\xf1\xa6\x1b\x03\x18s8G \x950\xf0\xe0H!\x86,\xd1{\xf0\vX-c\xfd\xc4\xf24\xdd\xac\xea\x1f1\xc2+0\xc7gA\xa8\xc6B\xc9f\'_]\xe5.\xc6X\xe0c\xbbtzB\xe7\x9383\xdf\xf7x\x18\xd8\xfb(\xae\xb6\xc3\x02;mlG\x14\xdf\x9f\xea\xbf\x93\xae\xa5.\xfd\xe2a\xa4\x1bK\xbbZA\xb8\xc4\x9f\x93\xff\x86l\xd2\a7\xba=LC\xc4\xdc3\xf3%\xef\x7f\x81\x9eB\x9ak\a\xa3\xea?\x11\xd8LuY\x9b\xa8\xe2j\x98\\\xd0\xd72_c\b\xb3\xd1\xa6g,5\b|\x95\x98\xb0c\x90\xfd\x12\x1f\x1c!)(\xae\xfe\xc4\xec\x8f\xa1\x98\te\'\xc8\x97\xda\xe4&)\xe5\xa3)@\x13In\x1e0\xe5\xff\xcbv\xd2B\xd5\xaf+\xc8T\xc2\xb1\xd3\xaan\xfe}\x17\xcd\xebD[\xba\x9d\'\xb0') r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) setxattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): e=failed comm="syz.3.1095" name="features" dev="configfs" ino=14759 res=0 errno=0 [ 147.894136][ T6004] Bluetooth: hci2: unexpected event 0x20 length: 120 > 7 [ 148.697618][ T30] audit: type=1800 audit(1783137684.747:8): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1135" name="lu_gp_id" dev="configfs" ino=14890 res=0 errno=0 [ 151.371974][ T30] audit: type=1800 audit(1843104519.311:9): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1187" name="trace_pipe" dev="tracefs" ino=439 res=0 errno=0 [ 152.267930][ T7972] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5999] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7972] [ 152.425017][ T6004] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 153.212398][ T30] audit: type=1800 audit(1843104521.161:10): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1221" name="trace_pipe" dev="tracefs" ino=401 res=0 errno=0 [ 153.750489][ T7996] Process accounting paused [ 154.163937][ T8045] nfs: Bad value for 'source' [ 156.823007][ T8168] nfs: Bad value for 'source' [ 157.343306][ T8193] nfs: Bad value for 'source' [ 157.398174][ T8192] can: request_module (can-proto-5) failed. [ 157.455107][ T8197] Unable to find swap-space signature [ 157.992002][ T8221] nfs: Bad value for 'source' [ 159.795953][ T8289] Unable to find swap-space signature [ 160.367633][ T8315] Unable to find swap-space signature [ 160.655666][ T8327] futex_wake_op: syz.0.1379 tries to shift op by -2048; fix this program [ 163.946513][ T6004] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 165.661647][ T6004] Bluetooth: hci3: unexpected event 0x23 length: 16 > 13 [ 166.670976][ T6004] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 168.144461][ T8637] ima: policy update failed [ 168.161824][ T30] audit: type=1802 audit(1843105559.200:11): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1534" res=0 errno=0 [ 168.564148][ T6004] Bluetooth: hci1: unexpected event 0x3b length: 1022 > 10 [ 168.860474][ T6004] Bluetooth: hci2: unexpected event 0x34 length: 726 > 6 [ 170.686345][ T30] audit: type=1800 audit(1843105561.722:12): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1583" name="members" dev="configfs" ino=16341 res=0 errno=0 [ 176.871440][ T9004] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5999] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9004] [ 177.469719][ T9027] Invalid ELF header magic: != ELF [ 179.908401][ T9138] Invalid ELF header magic: != ELF [ 180.788454][ T6004] Bluetooth: hci3: unknown advertising packet type: 0xea [ 183.670244][ T9293] Process accounting resumed [ 184.172201][ T9318] ======================================================= [ 184.172201][ T9318] WARNING: The mand mount option has been deprecated and [ 184.172201][ T9318] and is ignored by this kernel. Remove the mand [ 184.172201][ T9318] option from the mount to silence this warning. [ 184.172201][ T9318] ======================================================= [ 184.927294][ T6004] Bluetooth: hci1: unexpected event 0x2c length: 1022 > 17 [ 185.452129][ T9377] Unable to find swap-space signature [ 187.046915][ T6004] Bluetooth: hci2: unexpected event 0x16 length: 124 > 6 [ 188.711777][ T6004] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 188.719639][ T6004] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 188.734854][ T6004] Bluetooth: hci3: Unknown advertising packet type: 0x3e [ 191.055543][ T9623] capability: warning: `syz.0.2019' uses deprecated v2 capabilities in a way that may be insecure [ 191.548547][ T9642] __vm_enough_memory: pid: 9642, comm: syz.0.2028, bytes: 4398046511104 not enough memory for the allocation [ 192.487815][ T9683] syz.3.2049(9683): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 193.147648][ T6004] Bluetooth: hci0: unexpected event 0x3c length: 124 > 7 [ 193.928420][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.944869][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.255435][ T9803] vhci_hcd: not connected 4 [ 195.603131][ T9815] ACPI: Can not change Invalid GPE/Fixed Event status [ 201.188989][T10039] block nbd0: NBD_DISCONNECT [ 202.992062][T10094] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 203.138718][T10100] ecryptfs_miscdev_write: Error while inspecting packet size [ 203.745128][T10128] sysfs_service_op_show: Client not running :-5: [ 204.105165][T10145] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 204.271662][T10151] WARNING! power/level is deprecated; use power/control instead [ 204.511548][ T30] audit: type=1800 audit(1843105595.711:13): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2283" name="dbroot" dev="configfs" ino=22678 res=0 errno=0 [ 205.945425][T10227] vhci_hcd vhci_hcd.1: invalid port number 16 [ 206.157458][ T30] audit: type=1800 audit(1843105597.369:14): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2320" name="dbroot" dev="configfs" ino=21790 res=0 errno=0 [ 206.805636][ T30] audit: type=1800 audit(1843105598.012:15): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2331" name="dbroot" dev="configfs" ino=22860 res=0 errno=0 [ 208.332135][T10340] phram: not enough arguments [ 208.634722][T10354] vhci_hcd vhci_hcd.1: invalid port number 16 [ 210.535428][T10431] usbip-vudc usbip-vudc.0: gadget not bound [ 212.844667][T10541] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 213.993962][T10570] Process accounting paused [ 216.187740][T10681] sd 0:0:1:0: PR command failed: 1026 [ 216.211033][T10681] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 216.221657][T10681] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 216.866282][T10711] vhci_hcd vhci_hcd.2: invalid port number 253 [ 216.880533][T10711] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 218.613964][T10790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 218.706959][T10795] block2mtd: too many arguments [ 220.860199][T10890] vmstat_refresh: nr_hugetlb -8192 [ 221.480189][T10828] Bluetooth: hci3: command 0x0406 tx timeout [ 221.486344][T10828] Bluetooth: hci0: command 0x0406 tx timeout [ 221.492468][T10828] Bluetooth: hci1: command 0x0406 tx timeout [ 221.498747][T10828] Bluetooth: hci2: command 0x0406 tx timeout [ 221.927110][T10937] bonding: no command found in bonding_masters - use +ifname or -ifname [ 222.466116][T10955] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 222.466116][T10955] [ 223.542841][T10995] nvme_fcloop: unknown parameter or missing value '7' [ 223.600070][ T4942] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 224.996840][T11056] futex_wake_op: syz.2.2704 tries to shift op by -2048; fix this program [ 225.030035][T11056] futex_wake_op: syz.2.2704 tries to shift op by -2048; fix this program [ 225.432046][T11067] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 225.459608][T11067] pci 0000:00:01.3: PCI INT A: no GSI [ 226.503302][T11110] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 226.540178][T11110] ep_00: uevent: failed to send synthetic uevent: -22 [ 229.316818][T11220] Format for adding new port is "id [perm_addr]" (uint MAC). [ 230.583405][T11281] random: crng reseeded on system resumption [ 231.098301][ T30] audit: type=1806 audit(1843105622.426:16): res=-14 [ 232.330320][ T30] audit: type=1800 audit(1843105623.662:17): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2857" name="sr0" dev="devtmpfs" ino=2817 res=0 errno=0 [ 232.421293][T11368] smpboot: CPU 1 is now offline [ 232.857683][T11382] vhci_hcd vhci_hcd.2: invalid port number 16 [ 232.886607][T11382] vhci_hcd vhci_hcd.2: invalid port number 16 [ 235.230129][T11459] sd 0:0:1:0: PR command failed: 1026 [ 235.262483][T11459] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 235.262532][T11459] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 235.810822][T11480] warning: `syz.1.2911' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 236.912189][T11525] vhci_hcd vhci_hcd.2: invalid port number 16 [ 236.943092][T11525] vhci_hcd vhci_hcd.2: invalid port number 16 [ 237.325909][T11537] program syz.1.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.130145][T11595] kernel profiling enabled (shift: 7) [ 239.935793][T11623] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.968246][T11623] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 243.049146][ T30] audit: type=1800 audit(1843105634.432:18): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3032" name="lu_gp_id" dev="configfs" ino=27745 res=0 errno=0 [ 243.079389][T11725] kstrtoul() returned -22 for lu_gp_id [ 244.088789][T11756] Process accounting resumed [ 245.228257][T11800] tipc: Can't bind to reserved service type 63 [ 245.894772][T11823] syz_tun: tun_chr_ioctl cmd 1074025698 [ 246.538736][T11845] usb usb4: usbfs: process 11845 (syz.3.3090) did not claim interface 0 before use [ 247.877370][T11893] Scaler: ================= START STATUS ================= [ 247.926075][T11893] Scaler: ================== END STATUS ================== [ 248.586596][T11916] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 249.338142][T11938] kAFS: Invalid Command on /proc/fs/afs/cells file [ 252.709716][T12057] kafs: addr_prefs: Invalid Command [ 253.489556][T12085] futex_wake_op: syz.1.3196 tries to shift op by -1; fix this program [ 253.810174][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.821512][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.622717][T12125] < [ 254.627811][T12124] usb usb3: usbfs: process 12124 (syz.0.3213) did not claim interface 0 before use [ 256.309808][T12187] bond0: invalid ARP target specified [ 257.745363][ T30] audit: type=1804 audit(1843105649.191:19): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3261" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=18 res=1 errno=0 [ 259.055524][T12282] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 263.652589][T12442] ICMPv6: process `syz.1.3361' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 263.943777][T12452] Invalid input. Must be >= 4608 [ 264.271793][T12464] kfence: disabled [ 265.189148][T12498] mmap: syz.1.3387 (12498): VmData 45805568 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 265.677033][T12512] bond0: no command found in slaves file - use +ifname or -ifname [ 266.975346][T12558] program syz.2.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.079354][T12558] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.429139][T12667] RGB/YUV Input: ================= START STATUS ================= [ 270.531576][T12667] RGB/YUV Input: Test Pattern: 75% Colorbar [ 270.634061][T12667] RGB/YUV Input: Show Information: All [ 270.711358][T12667] RGB/YUV Input: Vertical Flip: false [ 270.780547][T12667] RGB/YUV Input: Horizontal Flip: false [ 270.857752][T12667] RGB/YUV Input: Brightness: 128 [ 270.927167][T12667] RGB/YUV Input: Contrast: 128 [ 270.979054][T12667] RGB/YUV Input: Hue: 0 [ 271.034812][T12667] RGB/YUV Input: Saturation: 128 [ 271.117884][T12667] RGB/YUV Input: Pixel Rate: 160000000 [ 271.196350][T12667] RGB/YUV Input: Horizontal Blanking: 800 [ 271.360389][T12667] RGB/YUV Input: Vertical Blanking: 3223 [ 271.405950][T12667] RGB/YUV Input: ================== END STATUS ================== [ 274.069750][T12760] Process accounting paused [ 275.218538][T12810] bond0: invalid ARP target specified [ 277.031488][T12862] kernel read not supported for file /D (pid: 12862 comm: syz.3.3568) [ 277.081885][ T30] audit: type=1800 audit(1843105668.622:20): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3568" name=12E644089E dev="mqueue" ino=13978 res=0 errno=0 [ 277.512323][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.524919][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.982472][T12929] binder: 12928:12929 ioctl c018620c 200000000040 returned -1 [ 281.377122][T13019] program syz.2.3647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.390925][T13022] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 281.544852][ T4942] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 282.751184][T13063] syz.3.3667 uses obsolete (PF_INET,SOCK_PACKET) [ 283.099778][T13065] zswap: compressor F(_ not available [ 283.193195][T13076] bond0: invalid ARP target specified [ 283.584422][ T4942] Bluetooth: hci0: command 0x0406 tx timeout [ 285.485771][T13155] bond0: option slaves: interface -]=,Do does not exist! [ 285.654187][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 285.722912][T13161] ubi31: attaching mtd0 [ 286.201156][ T30] audit: type=1800 audit(1843105677.785:21): pid=13176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3722" name="dbroot" dev="configfs" ino=32369 res=0 errno=0 [ 287.813909][T13227] program syz.0.3748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.480952][ T4942] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 289.687207][T13283] queue_state_write: operation too long [ 289.720887][T13283] queue_state_write: use 'run', 'start' or 'kick' [ 290.511951][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 292.581814][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 292.844182][T13378] Setting dangerous option i915.mitigations - tainting kernel [ 293.547647][T13398] kAFS: Invalid Command on /proc/fs/afs/cells file [ 293.986003][T13405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.018551][ T4942] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 295.249924][T13441] kAFS: Invalid Command on /proc/fs/afs/cells file [ 295.645193][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 296.085838][ T4942] Bluetooth: hci3: command 0x0406 tx timeout [ 297.480933][T13516] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 297.677615][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 298.133919][ T5958] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 298.156699][ T5958] Bluetooth: hci3: command 0x0406 tx timeout [ 298.316701][T13549] block2mtd: parameter too long [ 299.750911][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 300.146274][ T6004] Bluetooth: hci1: command 0x0406 tx timeout [ 300.619462][ T4942] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 301.252304][T13658] phram: not enough arguments [ 302.216391][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 302.442535][T13707] syz_tun: tun_chr_ioctl cmd 1074812117 [ 302.635560][T13713] TCP: TCP_TX_DELAY enabled [ 302.694150][ T6004] Bluetooth: hci2: command 0x0406 tx timeout [ 303.486828][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 303.651228][T13748] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 303.690539][T13748] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 303.993566][T13752] Process accounting resumed [ 304.559384][T13725] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 304.719854][ T30] audit: type=1800 audit(1843105696.392:22): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4014" name="dbroot" dev="configfs" ino=34481 res=0 errno=0 [ 304.763528][ T4942] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 304.773763][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 304.791966][T13777] db_root: cannot open: /sy] [ 305.498057][ T30] audit: type=1400 audit(1843105697.176:23): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13799 comm="syz.2.4024" [ 305.565646][ T6004] Bluetooth: hci1: command 0x0406 tx timeout [ 305.787174][T13811] i2c i2c-0: new_device: Missing parameters [ 306.834836][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 307.632963][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 307.797082][ T30] audit: type=1807 audit(1843105699.487:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 307.825061][T13899] ima: policy update failed [ 307.865526][ T30] audit: type=1802 audit(1843105699.507:25): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.4074" res=0 errno=0 [ 307.993735][ T30] audit: type=1802 audit(1843105699.547:26): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4074" res=0 errno=0 [ 308.209691][T13909] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 308.264471][T13909] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 308.326833][T13909] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 308.371065][T13909] page_type: f5(slab) [ 308.400308][T13909] raw: 00fff00000000040 ffff88801d2dd8c0 dead000000000100 dead000000000122 [ 308.448455][T13909] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 308.503543][T13909] head: 00fff00000000040 ffff88801d2dd8c0 dead000000000100 dead000000000122 [ 308.559537][T13909] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 308.608903][T13909] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 308.652204][T13909] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 308.708089][T13909] page dumped because: unmovable page [ 308.737784][T13909] page_owner tracks the page as allocated [ 308.788316][T13909] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5006, tgid 5006 (udevadm), ts 37582846022, free_ts 29910287986 [ 308.895028][T13909] post_alloc_hook+0xfd/0x120 [ 308.907184][ T6004] Bluetooth: hci0: command 0x0406 tx timeout [ 308.926770][T13909] get_page_from_freelist+0xf48/0x3530 [ 308.946912][T13909] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 308.970471][T13909] new_slab+0xa2/0x650 [ 308.980493][T13909] refill_objects+0xe3/0x410 [ 308.998253][T13909] __pcs_replace_empty_main+0x376/0x680 [ 309.018028][T13909] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 309.036599][T13909] alloc_inode+0x183/0x250 [ 309.053619][T13909] iget_locked+0x1d9/0x6d0 [ 309.068152][T13909] kernfs_get_inode+0x46/0x470 [ 309.084882][T13909] kernfs_iop_lookup+0x1a7/0x2d0 [ 309.103017][T13909] __lookup_slow+0x155/0x320 [ 309.117870][T13909] lookup_slow+0x50/0x70 [ 309.131620][T13909] path_lookupat+0x5e8/0xc40 [ 309.148577][T13909] filename_lookup+0x202/0x590 [ 309.164750][T13909] vfs_statx+0xff/0x3f0 [ 309.176632][T13909] page last free pid 1 tgid 1 stack trace: [ 309.200134][T13909] free_pages_prepare+0x586/0xd80 [ 309.217832][T13909] __free_contig_range_common+0x14f/0x250 [ 309.236779][T13909] destroy_args+0xa8/0x7a0 [ 309.250620][T13909] debug_vm_pgtable+0x1d69/0x3490 [ 309.267771][T13909] do_one_initcall+0x11d/0x700 [ 309.287033][T13909] kernel_init_freeable+0x6ea/0x7b0 [ 309.306315][T13909] kernel_init+0x1f/0x1e0 [ 309.319963][T13909] ret_from_fork+0x72b/0xd50 [ 309.338236][T13909] ret_from_fork_asm+0x1a/0x30 [ 311.748670][T14040] busy [ 311.977468][T14048] bond0: option arp_interval: invalid value () [ 312.015771][T14048] bond0: option arp_interval: allowed values 0 - 2147483647 [ 314.243736][T14135] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 314.361220][T14135] CIFS mount error: No usable UNC path provided in device string! [ 314.361220][T14135] [ 314.410896][T14135] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 314.856589][T14160] syz.2.4200 (14160): /proc/14159/oom_adj is deprecated, please use /proc/14159/oom_score_adj instead. [ 316.236760][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.244796][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.786360][T14235] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ef4a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 316.802029][T14235] Call Trace: [ 316.805321][T14235] [ 316.808262][T14235] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 316.814977][T14235] ? __pfx_debug_object_deactivate+0x10/0x10 [ 316.820993][T14235] mce_cpu_restart+0xd5/0x1f0 [ 316.825688][T14235] ? __pfx_mce_cpu_restart+0x10/0x10 [ 316.830992][T14235] smp_call_function_many_cond+0x139d/0x16c0 [ 316.837002][T14235] ? __pfx_mce_cpu_restart+0x10/0x10 [ 316.842303][T14235] ? mark_held_locks+0x40/0x70 [ 316.847106][T14235] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.852948][T14235] ? lockdep_hardirqs_on+0x78/0x100 [ 316.858173][T14235] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 316.864019][T14235] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 316.870381][T14235] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 316.876385][T14235] ? __timer_delete_sync+0x151/0x1c0 [ 316.881688][T14235] ? __pfx_mce_cpu_restart+0x10/0x10 [ 316.886991][T14235] on_each_cpu_cond_mask+0x40/0x90 [ 316.892129][T14235] set_bank+0x240/0x3a0 [ 316.896316][T14235] ? __pfx_set_bank+0x10/0x10 [ 316.901014][T14235] ? find_held_lock+0x2b/0x80 [ 316.905729][T14235] ? sysfs_file_kobj+0xe4/0x290 [ 316.910599][T14235] ? sysfs_file_kobj+0xe4/0x290 [ 316.915470][T14235] ? __pfx_set_bank+0x10/0x10 [ 316.920157][T14235] dev_attr_store+0x58/0x80 [ 316.924678][T14235] ? __pfx_dev_attr_store+0x10/0x10 [ 316.929905][T14235] sysfs_kf_write+0xf2/0x150 [ 316.934510][T14235] kernfs_fop_write_iter+0x3e0/0x5f0 [ 316.939805][T14235] ? __pfx_sysfs_kf_write+0x10/0x10 [ 316.945019][T14235] vfs_write+0x6ac/0x1050 [ 316.949371][T14235] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 316.955187][T14235] ? __pfx_vfs_write+0x10/0x10 [ 316.959995][T14235] ksys_write+0x12a/0x250 [ 316.964345][T14235] ? __pfx_ksys_write+0x10/0x10 [ 316.969231][T14235] do_syscall_64+0x115/0x840 [ 316.973850][T14235] ? clear_bhb_loop+0x40/0x90 [ 316.978540][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.984454][T14235] RIP: 0033:0x7f9cb3d9de59 [ 316.988891][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.008506][T14235] RSP: 002b:00007f9cb4c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.017027][T14235] RAX: ffffffffffffffda RBX: 00007f9cb4025fa0 RCX: 00007f9cb3d9de59 [ 317.025020][T14235] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 317.033085][T14235] RBP: 00007f9cb3e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 317.041059][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.049034][T14235] R13: 00007f9cb4026038 R14: 00007f9cb4025fa0 R15: 00007ffc5cff7e88 [ 317.057023][T14235] [ 319.164724][T14295] kAFS: Invalid Command on /proc/fs/afs/cells file [ 319.556845][T14270] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 320.537136][T14325] CIFS mount error: No usable UNC path provided in device string! [ 320.537136][T14325] [ 320.652430][T14325] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.087382][T14379] hub 1-0:1.0: USB hub found [ 323.120267][T14379] hub 1-0:1.0: 1 port detected [ 323.224005][T14385] vhci_hcd vhci_hcd.2: invalid port number 194 [ 323.251859][T14385] vhci_hcd vhci_hcd.2: invalid port number 194 [ 323.530978][T14329] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 330.149231][T14603] zswap: compressor F(- not available [ 331.256530][T14652] sysfs_service_op_store: Client not running :-5: [ 331.381510][T14656] hub 1-0:1.0: USB hub found [ 331.406410][T14656] hub 1-0:1.0: 1 port detected [ 331.746881][T14663] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 332.492909][T14680] hub 1-0:1.0: USB hub found [ 332.524011][T14680] hub 1-0:1.0: 1 port detected [ 332.874342][T14694] dyndbg: expected <4096 bytes into control [ 334.164921][T14715] Process accounting paused [ 335.671850][T14775] program syz.0.4498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.120597][T14789] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 336.731448][T14815] syz.1.4518: vm.laptop_mode is deprecated. Ignoring setting. [ 337.725245][T14859] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 338.640207][T14892] Line length is too long: Should be less than 4094 [ 338.762739][T14895] bond0: invalid ARP target specified [ 339.409662][T14911] hub 1-0:1.0: USB hub found [ 339.432465][T14911] hub 1-0:1.0: 1 port detected [ 340.429626][T14938] hub 1-0:1.0: USB hub found [ 340.455555][T14938] hub 1-0:1.0: 1 port detected [ 340.533487][T14942] rnbd_client L213: map_device: Parameters missing [ 341.279234][T14966] phram: not enough arguments [ 342.172433][T15002] sg_write: data in/out 262108/21 bytes for SCSI command 0x61-- guessing data in; [ 342.172433][T15002] program syz.0.4611 not setting count and/or reply_len properly [ 342.964394][ T30] audit: type=1800 audit(1843105734.812:27): pid=15038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4629" name="dbroot" dev="configfs" ino=38585 res=0 errno=0 [ 343.392409][T15052] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 343.426742][T15054] serial 00:02: in use; can't configure [ 344.945474][ T50] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 344.945505][ T50] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 344.960973][ T50] Bluetooth: hci1: Dropping invalid advertising data [ 344.968912][ T50] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 344.968941][ T50] Bluetooth: hci1: unknown advertising packet type: 0x8b [ 344.976843][ T50] Bluetooth: hci1: unknown advertising packet type: 0xee [ 345.183872][T15112] nvme_fcloop: unknown parameter or missing value '' [ 346.996256][ T30] audit: type=1800 audit(1843105738.861:28): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4686" name="dbroot" dev="configfs" ino=38933 res=0 errno=0 [ 347.150000][T15143] usb usb13: usbfs: process 15143 (syz.0.4678) did not claim interface 0 before use [ 348.454454][T15190] busy [ 350.383758][T15249] ptp ptp0: only physical clock in use now [ 352.758053][T15354] i2c i2c-0: delete_device: Extra parameters [ 356.156117][ T50] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 356.156147][ T50] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 356.170906][ T50] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 356.332737][T15463] ICMPv6: process `syz.1.4833' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 358.880147][T15529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 360.630688][ T30] audit: type=1800 audit(1843105752.565:29): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4883" name="discovery_nqn" dev="configfs" ino=40391 res=0 errno=0 [ 363.934990][T15646] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 364.200388][T15652] Process accounting resumed [ 365.295842][T15675] ICMPv6: process `syz.0.4936' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 366.227997][T15701] : Can't lookup blockdev [ 369.679143][T15813] bond0: no command found in slaves file - use +ifname or -ifname [ 371.639344][T15894] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 372.166462][T15911] i2c i2c-0: new_device: Invalid device name [ 375.366859][T16005] : Can't lookup blockdev [ 375.699282][T16019] i2c i2c-0: delete_device: Can't find device in list [ 375.736821][T16021] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 375.765168][T16023] kAFS: Invalid Command on /proc/fs/afs/cells file [ 376.047602][T16033] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 376.102169][T16033] cec cec26: uevent: failed to send synthetic uevent: -22 [ 376.927208][T16063] process 'syz.2.5124' launched '/dev/fd/3' with NULL argv: empty string added [ 377.190928][T16071] Setting dangerous option i915.mitigations - tainting kernel [ 377.390430][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.396825][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.984631][T16099] block2mtd: Using custom MTD label '' for dev [ 378.015795][T16099] block2mtd: error: cannot open device [ 380.959318][T16221] zram0: detected capacity change from 0 to 16 [ 381.187424][T16227] bond0: Unable to set down delay as MII monitoring is disabled [ 385.439101][ T50] Bluetooth: hci2: Unable to find connection for big 0xe0 [ 385.466627][T16401] qrtr: Invalid version 13 [ 386.014034][T16425] bond0: invalid ARP target specified [ 386.164841][T16431] Format for deleting device is "id" (uint). [ 386.810396][T16459] kAFS: Invalid Command on /proc/fs/afs/cells file [ 387.716560][T16493] writing to auto_msgmni has no effect [ 392.964625][T16670] bond0: option fail_over_mac: invalid value () [ 394.112976][T16698] Process accounting paused [ 394.168918][T16700] writes to the poll attribute are ignored. [ 394.209875][T16700] please use driver specific parameters instead. [ 396.319721][ T30] audit: type=1800 audit(1843105788.423:30): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5469" name="members" dev="configfs" ino=44292 res=0 errno=0 [ 396.914830][T16806] program syz.2.5481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.118325][T16813] blkio.reset_stats is deprecated [ 397.743419][T16835] vhci_hcd vhci_hcd.1: invalid port number 16 [ 397.771000][T16835] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 398.827145][T16878] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 398.827145][T16878] M' is too long [ 398.883395][T16878] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 398.883395][T16878] W ' is too long [ 399.147556][T16889] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 401.393139][T16977] process 'syz.1.5564' launched '/dev/fd/3' with NULL argv: empty string added [ 401.410044][T16979] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6005] was attempted by ""[16979] [ 402.541623][T17022] aoe: can't write to that file. [ 403.314107][T17040] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.447601][T17040] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.537201][T17040] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.587091][T17040] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.274345][T17106] overlayfs: "check_copy_up" module option is obsolete [ 407.203203][T17186] mmap: syz.2.5666 (17186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 407.764467][T17208] block loop4: the capability attribute has been deprecated. [ 408.508464][T17229] ceph: Failed to parse sending metrics switch value 'P^' [ 408.722200][T17238] i2c i2c-0: delete_device: Can't parse I2C address [ 408.946427][T17249] kafs: addr_prefs: Too many elements in string [ 416.497723][T17495] usb usb33: usbfs: process 17495 (syz.1.5819) did not claim interface 0 before use [ 416.705308][T17505] block2mtd: illegal erase size [ 416.724266][ T30] audit: type=1800 audit(1843105808.929:31): pid=17509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5825" name="dbroot" dev="configfs" ino=46669 res=0 errno=0 [ 417.108873][T17525] bond0: invalid ARP target specified [ 420.423222][T17657] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 421.350922][T17696] block2mtd: illegal erase size [ 421.437043][T17701] Invalid ELF header magic: != ELF [ 422.646207][T17752] batman_adv: Routing algorithm '' is not supported [ 422.829552][T17760] kafs: addr_prefs: Invalid Command [ 424.048455][T17806] Process accounting resumed [ 425.169933][T17853] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 426.918654][T17914] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 426.977885][T17914] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 435.844321][T18181] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 435.947159][T18187] ecryptfs_parse_packet_length: Error parsing packet length [ 435.987875][T18187] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 436.438687][T18205] CIFS: VFS: Invalid SecurityFlags: [ 436.486107][T18209] CIFS: VFS: UNC: path must begin with // or \\ [ 436.518622][T18209] Malformed UNC in devname [ 436.518622][T18209] [ 436.555207][T18209] CIFS: VFS: Malformed UNC in devname [ 438.549261][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.558581][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.894789][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.901296][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.140793][T18407] usb usb25: usbfs: process 18407 (syz.1.6262) did not claim interface 9 before use [ 443.478856][ T30] audit: type=1806 audit(4294967314.848:32): xattr="" res=-22 [ 449.205710][T18723] kAFS: No cell specified [ 450.561470][T18772] block2mtd: illegal erase size [ 451.199855][T18800] cougar: G6 mapped to space [ 452.582521][T18854] zram: Can't change algorithm for initialized device [ 453.955717][T18897] Process accounting paused [ 460.984370][ T30] audit: type=1800 audit(4294967332.440:33): pid=19167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6626" name="dbroot" dev="configfs" ino=52026 res=0 errno=0 [ 461.017649][T19167] db_root: cannot open: /dev/audio1 [ 461.044621][T19167] db_root: not a directory: /dev/audio1 [ 464.977271][T19292] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 465.096848][T19292] CIFS mount error: No usable UNC path provided in device string! [ 465.096848][T19292] [ 465.148161][T19292] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 467.365715][T19395] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 471.685378][T19568] kAFS: unparsable volume name [ 472.796037][T19614] i2c i2c-0: delete_device: Can't find device in list [ 475.777533][T19728] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 479.975650][T19878] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 481.317079][T19930] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 481.563607][T19938] synth uevent: /module/null_blk: unknown uevent action string [ 482.037451][T19956] ICMPv6: process `syz.0.7009' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 483.204075][T20002] ubi0: attaching mtd0 [ 483.224462][T20002] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 484.009406][T20010] Process accounting resumed [ 484.275719][T20028] vhci_hcd: not connected 4 [ 485.699054][T20068] ima: policy update failed [ 485.727003][ T30] audit: type=1802 audit(4294967357.296:34): pid=20068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7065" res=0 errno=0 [ 487.265963][ T11] Process accounting resumed [ 487.400715][T20134] vhci_hcd vhci_hcd.2: invalid port number 16 [ 487.433566][T20134] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 488.716646][T20180] zram0: detected capacity change from 16 to 0 [ 488.759495][T20183] vhci_hcd: not connected 4 [ 490.503695][T20243] block2mtd: device name too long [ 491.543375][T20282] aoe: invalid device specification [ 491.671812][T20286] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.294204][ T30] audit: type=1400 audit(4294967364.902:35): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20339 comm="syz.0.7195" [ 494.496531][T20380] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 495.322111][T20407] syz_tun: tun_chr_ioctl cmd 1074025681 [ 495.450860][ T30] audit: type=1807 audit(4294967367.072:36): UNKNOWN=nl80211 res=0 [ 495.459515][T20410] ima: policy update failed [ 495.490840][ T30] audit: type=1802 audit(4294967367.082:37): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.7230" res=0 errno=0 [ 495.591628][ T30] audit: type=1802 audit(4294967367.092:38): pid=20410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7230" res=0 errno=0 [ 499.679663][T20533] syz.2.7289 (20533): drop_caches: 0 [ 499.694056][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.703053][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.002942][T20627] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 508.238014][ T30] audit: type=1400 audit(4294967379.912:39): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20783 comm="syz.3.7409" [ 508.646898][T20798] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 510.951632][ T50] Bluetooth: hci2: unexpected event 0x35 length: 725 > 6 [ 511.175503][T20886] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 514.388557][T21018] zram: Added device: zram1 [ 518.379421][T21154] sd 0:0:1:0: PR command failed: 1026 [ 518.400825][T21154] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 518.440685][T21154] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 518.881567][T21169] binder: binder_mmap: 21168 0-1000 bad vm_flags failed -1 [ 519.223233][T21179] syz.0.7597 (21179): attempted to duplicate a private mapping with mremap. This is not supported. [ 519.485601][T21189] usb usb22: usbfs: process 21189 (syz.2.7602) did not claim interface 1 before use [ 520.201925][T21216] syz.3.7614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 523.103877][T21076] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 527.888562][T21457] cougar: G6 mapped to F18 [ 528.360841][T21473] ima: policy update failed [ 528.391107][ T30] audit: type=1802 audit(4294985744.156:40): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.7739" res=0 errno=0 [ 528.790243][T21494] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 529.010071][ T30] audit: type=1800 audit(4294985744.779:41): pid=21503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7753" name="members" dev="configfs" ino=59455 res=0 errno=0 [ 531.222473][T21599] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 531.259683][T21599] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 531.866072][T21624] Setting dangerous option i915.mitigations - tainting kernel [ 531.907496][T21624] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 533.644680][T21692] bcache: register_bcache() error : failed to open device [ 535.889575][T21781] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 537.574706][T21791] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 538.051686][T21859] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 538.098355][T21859] net gretap0: uevent: failed to send synthetic uevent: -22 [ 538.192007][T21863] : Can't lookup blockdev [ 539.091995][T21897] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 539.139122][T21897] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 539.167887][T21897] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 539.222207][T21897] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 539.256431][T21897] page dumped because: unmovable page [ 539.281140][T21897] page_owner info is not present (never set?) [ 539.882269][T21930] synth uevent: /bus/mei: unknown uevent action string [ 540.997020][T21971] program syz.0.7985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.412295][T22096] syz.2.8045 uses obsolete (PF_INET,SOCK_PACKET) [ 544.574191][T22101] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 549.122511][T22265] random: crng reseeded on system resumption [ 550.203666][T22301] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 550.496178][T22311] i2c i2c-0: new_device: Can't parse I2C address [ 552.327091][T22377] CIFS mount error: No usable UNC path provided in device string! [ 552.327091][T22377] [ 552.381870][T22377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 552.625218][T22387] deleting an unspecified loop device is not supported. [ 553.684329][T22424] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6001] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[22424] [ 554.523606][ T30] audit: type=1326 audit(4294985770.419:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.8213" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f799de59 code=0x0 [ 558.033841][T22556] ima: policy update failed [ 558.060700][ T30] audit: type=1802 audit(4294985773.966:43): pid=22556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.8263" res=0 errno=0 [ 558.270253][T22563] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 558.474070][T21076] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 558.482024][T21076] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 558.924078][T22533] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 560.845710][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.856959][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.364331][T22674] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 561.546545][T22679] bond0: no command found in slaves file - use +ifname or -ifname [ 561.581332][T22681] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 563.934036][T22765] : Can't lookup blockdev [ 564.285177][T22731] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 566.360880][T22804] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 566.457033][T22850] wlan1: mtu less than device minimum [ 569.334116][T22941] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12) [ 569.635438][T20891] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 569.642965][T20891] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 570.672462][T22976] Zero length message leads to an empty skb [ 570.909285][T22982] syz_tun: tun_chr_ioctl cmd 1074025698 [ 573.499569][T23065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8510'. [ 573.575774][T23067] netlink: 29 bytes leftover after parsing attributes in process `syz.0.8510'. [ 574.409232][T23097] netlink: 'syz.1.8524': attribute type 1 has an invalid length. [ 575.811668][T23156] openvswitch: netlink: Message has 4 unknown bytes. [ 576.226238][T23168] FAULT_INJECTION: forcing a failure. [ 576.226238][T23168] name failslab, interval 1, probability 0, space 0, times 1 [ 576.303338][T23168] CPU: 0 UID: 0 PID: 23168 Comm: syz.2.8555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 576.303377][T23168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 576.303386][T23168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.303405][T23168] Call Trace: [ 576.303413][T23168] [ 576.303421][T23168] dump_stack_lvl+0x100/0x190 [ 576.303451][T23168] should_fail_ex.cold+0x5/0xa [ 576.303477][T23168] should_failslab+0xc2/0x120 [ 576.303507][T23168] kmem_cache_alloc_noprof+0x91/0x6a0 [ 576.303533][T23168] ? trace_kmem_cache_alloc+0xdd/0x100 [ 576.303564][T23168] ? security_file_alloc+0x34/0x2c0 [ 576.303616][T23168] security_file_alloc+0x34/0x2c0 [ 576.303645][T23168] init_file+0x95/0x480 [ 576.303670][T23168] alloc_empty_file+0x79/0x1c0 [ 576.303698][T23168] dentry_open+0x46/0xd0 [ 576.303725][T23168] pidfs_alloc_file+0x18f/0x290 [ 576.303763][T23168] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 576.303814][T23168] pidfd_prepare+0x107/0x1b0 [ 576.303842][T23168] __x64_sys_pidfd_open+0x105/0x1a0 [ 576.303876][T23168] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 576.303916][T23168] do_syscall_64+0x115/0x840 [ 576.303952][T23168] ? clear_bhb_loop+0x40/0x90 [ 576.303981][T23168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.304006][T23168] RIP: 0033:0x7f9cb3d9de59 [ 576.304026][T23168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.304049][T23168] RSP: 002b:00007f9cb4c6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 576.304076][T23168] RAX: ffffffffffffffda RBX: 00007f9cb4025fa0 RCX: 00007f9cb3d9de59 [ 576.304092][T23168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 576.304106][T23168] RBP: 00007f9cb3e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 576.304120][T23168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.304134][T23168] R13: 00007f9cb4026038 R14: 00007f9cb4025fa0 R15: 00007ffc5cff7e88 [ 576.304164][T23168] [ 579.018816][T23250] nbd: must specify a size in bytes for the device [ 579.139450][T21076] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 579.148240][T21076] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 579.282734][T23263] netlink: 'syz.3.8600': attribute type 1 has an invalid length. [ 580.299844][T23293] netlink: 'syz.3.8614': attribute type 1 has an invalid length. [ 580.895836][T23313] netlink: 'syz.1.8624': attribute type 11 has an invalid length. [ 580.933511][T23313] netlink: 'syz.1.8624': attribute type 11 has an invalid length. [ 580.967069][T23313] netlink: 'syz.1.8624': attribute type 11 has an invalid length. [ 581.099975][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8628'. [ 583.126388][T23391] zero sized request [ 583.478708][T20891] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 583.486297][T20891] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 583.910227][T23420] FAULT_INJECTION: forcing a failure. [ 583.910227][T23420] name failslab, interval 1, probability 0, space 0, times 0 [ 583.994711][T23420] CPU: 0 UID: 0 PID: 23420 Comm: syz.0.8672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 583.994752][T23420] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 583.994761][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.994774][T23420] Call Trace: [ 583.994781][T23420] [ 583.994790][T23420] dump_stack_lvl+0x100/0x190 [ 583.994819][T23420] should_fail_ex.cold+0x5/0xa [ 583.994846][T23420] should_failslab+0xc2/0x120 [ 583.994876][T23420] __kmalloc_node_noprof+0x101/0x830 [ 583.994901][T23420] ? __kmalloc_noprof+0x291/0x820 [ 583.994927][T23420] ? get_callchain_buffers+0x1e5/0x380 [ 583.994959][T23420] get_callchain_buffers+0x1e5/0x380 [ 583.994987][T23420] ? security_capable+0x80/0x260 [ 583.995025][T23420] stack_map_alloc+0x316/0x610 [ 583.995052][T23420] map_create+0x874/0x3120 [ 583.995091][T23420] ? __lock_acquire+0x49f/0x1a40 [ 583.995131][T23420] ? __pfx_map_create+0x10/0x10 [ 583.995179][T23420] ? __might_fault+0xc5/0x140 [ 583.995228][T23420] __sys_bpf+0x2a6e/0x4e80 [ 583.995262][T23420] ? __pfx___sys_bpf+0x10/0x10 [ 583.995282][T23420] ? __pfx_futex_hash+0x10/0x10 [ 583.995318][T23420] ? get_pid_task+0xfc/0x250 [ 583.995344][T23420] ? get_pid_task+0xfc/0x250 [ 583.995376][T23420] ? futex_wait+0x11e/0x370 [ 583.995404][T23420] ? __pfx_futex_wait+0x10/0x10 [ 583.995431][T23420] ? find_held_lock+0x2b/0x80 [ 583.995463][T23420] ? rcu_read_lock_any_held+0x6a/0xa0 [ 583.995490][T23420] ? find_held_lock+0x2b/0x80 [ 583.995515][T23420] ? ksys_write+0x190/0x250 [ 583.995550][T23420] ? ksys_write+0x190/0x250 [ 583.995600][T23420] ? __x64_sys_futex+0x34f/0x4d0 [ 583.995622][T23420] ? __x64_sys_futex+0x358/0x4d0 [ 583.995648][T23420] ? xfd_validate_state+0x129/0x190 [ 583.995675][T23420] ? __x64_sys_bpf+0xce/0x140 [ 583.995697][T23420] __x64_sys_bpf+0xce/0x140 [ 583.995720][T23420] ? do_syscall_64+0x90/0x840 [ 583.995757][T23420] do_syscall_64+0x115/0x840 [ 583.995792][T23420] ? clear_bhb_loop+0x40/0x90 [ 583.995821][T23420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.995845][T23420] RIP: 0033:0x7fe7a299de59 [ 583.995864][T23420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.995886][T23420] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.995908][T23420] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 583.995923][T23420] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 583.995937][T23420] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 583.995950][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.995964][T23420] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 583.995994][T23420] [ 585.299603][T23456] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 586.993072][T23515] No such timeout policy "" [ 587.517918][T23533] mmap: syz.0.8728 (23533): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 588.423379][T23562] FAULT_INJECTION: forcing a failure. [ 588.423379][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 588.526869][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.1.8739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 588.526908][T23562] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 588.526916][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.526929][T23562] Call Trace: [ 588.526935][T23562] [ 588.526943][T23562] dump_stack_lvl+0x100/0x190 [ 588.526971][T23562] should_fail_ex.cold+0x5/0xa [ 588.526995][T23562] should_failslab+0xc2/0x120 [ 588.527024][T23562] __kmalloc_cache_noprof+0x91/0x6c0 [ 588.527079][T23562] ? __debug_object_init+0x2de/0x3d0 [ 588.527109][T23562] ? sctp_endpoint_new+0xfc/0xb20 [ 588.527141][T23562] sctp_endpoint_new+0xfc/0xb20 [ 588.527169][T23562] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 588.527195][T23562] ? lockdep_init_map_type+0x5c/0x250 [ 588.527232][T23562] ? lockdep_init_map_type+0x5c/0x250 [ 588.527266][T23562] ? lockdep_init_map_type+0x5c/0x250 [ 588.527302][T23562] ? lockdep_init_map_type+0x5c/0x250 [ 588.527341][T23562] sctp_init_sock+0xe2b/0x1300 [ 588.527366][T23562] ? __pfx_sctp_init_sock+0x10/0x10 [ 588.527392][T23562] inet_create+0x94c/0x1060 [ 588.527416][T23562] ? inet_create+0x94/0x1060 [ 588.527442][T23562] __sock_create+0x339/0x860 [ 588.527481][T23562] __sys_socket+0x14d/0x260 [ 588.527516][T23562] ? __pfx___sys_socket+0x10/0x10 [ 588.527559][T23562] __x64_sys_socket+0x72/0xb0 [ 588.527599][T23562] ? lockdep_hardirqs_on+0x78/0x100 [ 588.527635][T23562] do_syscall_64+0x115/0x840 [ 588.527669][T23562] ? clear_bhb_loop+0x40/0x90 [ 588.527703][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.527727][T23562] RIP: 0033:0x7f38f799de59 [ 588.527747][T23562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.527769][T23562] RSP: 002b:00007f38f8850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 588.527791][T23562] RAX: ffffffffffffffda RBX: 00007f38f7c25fa0 RCX: 00007f38f799de59 [ 588.527806][T23562] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 588.527819][T23562] RBP: 00007f38f7a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 588.527833][T23562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.527847][T23562] R13: 00007f38f7c26038 R14: 00007f38f7c25fa0 R15: 00007ffd5100cd08 [ 588.527879][T23562] [ 590.848155][T23629] openvswitch: netlink: IP tunnel TTL not specified. [ 590.954411][T23634] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 592.339416][T23678] netlink: 'syz.2.8797': attribute type 11 has an invalid length. [ 592.371959][T23678] netlink: 'syz.2.8797': attribute type 11 has an invalid length. [ 592.409676][T23678] netlink: 'syz.2.8797': attribute type 11 has an invalid length. [ 592.508789][T23680] netlink: zone id is out of range [ 592.538111][T23680] netlink: zone id is out of range [ 592.558697][T23680] netlink: zone id is out of range [ 592.586137][T23680] netlink: zone id is out of range [ 592.608413][T23680] netlink: zone id is out of range [ 592.636959][T23680] netlink: zone id is out of range [ 592.659738][T23680] netlink: zone id is out of range [ 592.680181][T23680] netlink: zone id is out of range [ 592.706675][T23680] netlink: zone id is out of range [ 595.619053][T23777] netlink: 'syz.2.8844': attribute type 1 has an invalid length. [ 595.861402][T23784] net_ratelimit: 315 callbacks suppressed [ 595.861421][T23784] netlink: zone id is out of range [ 596.750185][T23810] nbd: couldn't find a device at index 2542 [ 599.194593][T23898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8901'. [ 599.241550][T23898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8901'. [ 600.300227][T23943] netlink: get zone limit has 8 unknown bytes [ 600.473978][T23945] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 601.085326][T23965] netlink: Failed to add  helper -22 [ 601.487221][T23407] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 601.495300][T23407] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 601.729211][T23990] netlink: 'syz.2.8944': attribute type 1 has an invalid length. [ 601.741986][T23991] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 601.769530][T23990] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8944'. [ 603.178614][T24037] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 603.272796][T24041] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 603.272796][T24041] The task syz.0.8967 (24041) triggered the difference, watch for misbehavior. [ 604.263442][T24065] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 605.084154][T24094] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 605.633953][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9004'. [ 606.169616][T24138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.809208][T24160] openvswitch: netlink: IPv4 tunnel dst address is zero [ 607.875569][T24195] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 608.057498][T24202] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 608.292064][T24211] MTRR 1 not used [ 608.500787][T24217] netlink: 'syz.3.9052': attribute type 8 has an invalid length. [ 609.839179][T24258] netlink: 'syz.3.9072': attribute type 11 has an invalid length. [ 609.879548][T24258] netlink: 'syz.3.9072': attribute type 11 has an invalid length. [ 609.916142][T24258] netlink: 'syz.3.9072': attribute type 11 has an invalid length. [ 609.949472][T24258] netlink: 'syz.3.9072': attribute type 11 has an invalid length. [ 611.141000][T24295] capability: warning: `syz.0.9089' uses 32-bit capabilities (legacy support in use) [ 614.535819][T24384] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 614.615452][T24384] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 614.688320][T24384] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 614.754803][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 614.817642][T24381] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 615.909481][T24413] netlink: 'syz.3.9144': attribute type 1 has an invalid length. [ 616.189021][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9147'. [ 617.678274][T23407] Bluetooth: hci0: SCO packet too small [ 617.998408][T24477] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 618.526292][T24495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9183'. [ 620.507078][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9217'. [ 620.545274][T24568] nbd: couldn't find device at index 158 [ 621.462265][T24602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 621.997299][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.005523][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.093691][T24659] netlink: set zone limit has 4 unknown bytes [ 623.249788][T24663] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 623.754358][T24681] vivid-008: ================= START STATUS ================= [ 623.785330][T24681] vivid-008: ================== END STATUS ================== [ 626.155172][T24766] netlink: NAT attribute has 5 unknown bytes [ 626.357073][ T30] audit: type=1326 audit(4294967322.538:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.0.9314" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7a299de59 code=0x0 [ 626.390153][T24776] netlink: 'syz.2.9316': attribute type 11 has an invalid length. [ 627.295334][T24803] netlink: 'syz.1.9327': attribute type 1 has an invalid length. [ 629.513941][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9365'. [ 630.270276][T24913] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 631.069651][T24937] netlink: 'syz.2.9391': attribute type 11 has an invalid length. [ 631.106559][T24937] netlink: 'syz.2.9391': attribute type 11 has an invalid length. [ 632.747451][T24997] netlink: 'syz.0.9417': attribute type 2 has an invalid length. [ 632.863529][T25000] netlink: 'syz.3.9419': attribute type 1 has an invalid length. [ 633.069494][T25008] netlink: 'syz.1.9423': attribute type 1 has an invalid length. [ 633.257498][T25014] netlink: Unknown conntrack attr (type=257, max=9) [ 635.119438][T25073] openvswitch: netlink: Flow actions attr not present in new flow. [ 636.560765][T25127] openvswitch: netlink: IP tunnel dst address not specified [ 636.585860][T25124] HfR: entered promiscuous mode [ 636.813191][T25136] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 639.562406][ T30] audit: type=1326 audit(4295032872.807:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25220 comm="syz.1.9519" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f799de59 code=0x0 [ 640.793104][T25253] netlink: 'syz.0.9532': attribute type 1 has an invalid length. [ 644.016537][T25341] netlink: 'syz.1.9574': attribute type 1 has an invalid length. [ 644.045252][T25337] HfR: entered promiscuous mode [ 645.015820][T25368] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 645.315179][T25373] HfR: entered promiscuous mode [ 646.746190][T25410] HSR: entered promiscuous mode [ 647.549613][T25431] netlink: 'syz.1.9615': attribute type 1 has an invalid length. [ 650.325879][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9649'. [ 650.415583][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9648'. [ 650.440612][T25516] openvswitch: netlink: Flow key attribute not present in set flow. [ 653.922269][T25648] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 654.064568][T25650] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 654.553315][T25669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9724'. [ 656.220450][T25724] NFSD: Failed to start, no listeners configured. [ 658.151625][T25795] netlink: 'syz.2.9781': attribute type 2 has an invalid length. [ 660.894755][T25895] ======================================================= [ 660.894755][T25895] WARNING: The mand mount option has been deprecated and [ 660.894755][T25895] and is ignored by this kernel. Remove the mand [ 660.894755][T25895] option from the mount to silence this warning. [ 660.894755][T25895] ======================================================= [ 661.498800][T25921] netlink: zone id is out of range [ 661.633078][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9845'. [ 664.027724][T26021] No such timeout policy "" [ 664.067740][T26021] netlink: Failed to associated timeout policy '' [ 665.224381][T26060] NFSD: Failed to start, no listeners configured. [ 666.613902][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9936'. [ 667.184649][T26132] NFSD: Failed to start, no listeners configured. [ 667.225366][T23407] Bluetooth: hci1: ACL packet too small [ 668.178401][T26163] NFSD: Failed to start, no listeners configured. [ 668.937644][ T30] audit: type=1326 audit(4295032902.325:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26194 comm="syz.1.9977" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f799de59 code=0x0 [ 669.063429][T26199] NFSD: Failed to start, no listeners configured. [ 670.051271][T26237] nbd: must specify an index to disconnect [ 670.080562][T26238] netlink: 'syz.0.9998': attribute type 4 has an invalid length. [ 670.117811][T26238] netlink: 'syz.0.9998': attribute type 1 has an invalid length. [ 671.607754][T23407] Bluetooth: hci0: ACL packet too small [ 673.173568][T26342] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5999] was attempted by ""[26342] [ 673.938898][T26356] openvswitch: netlink: IP tunnel dst address not specified [ 674.771547][T26394] netlink: 'syz.2.10070': attribute type 1 has an invalid length. [ 675.444930][T26414] netlink: zone id is out of range [ 675.470063][T26414] netlink: zone id is out of range [ 675.499997][T26414] netlink: zone id is out of range [ 675.532934][T26414] netlink: zone id is out of range [ 675.557933][T26414] netlink: zone id is out of range [ 675.578454][T26414] netlink: zone id is out of range [ 675.603513][T26414] netlink: zone id is out of range [ 675.628279][T26414] netlink: zone id is out of range [ 675.653934][T26414] netlink: zone id is out of range [ 677.001423][T26456] NFSD: Failed to start, no listeners configured. [ 677.967184][T26480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10110'. [ 678.031721][T26481] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10109'. [ 680.437657][T26534] netlink: 'syz.2.10133': attribute type 1 has an invalid length. [ 682.493196][T26572] phram: parameter too long [ 683.148427][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.156400][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.405680][T26598] netlink: 'syz.3.10163': attribute type 4 has an invalid length. [ 684.197884][T26614] syz_tun: tun_chr_ioctl cmd 1074025681 [ 685.281008][T26635] NFSD: Failed to start, no listeners configured. [ 688.934724][T26713] sctp: [Deprecated]: syz.1.10217 (pid 26713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.934724][T26713] Use struct sctp_sack_info instead [ 691.136733][T26780] .^: entered promiscuous mode [ 694.498450][T26899] net_ratelimit: 197 callbacks suppressed [ 694.498470][T26899] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 695.110759][ T30] audit: type=1326 audit(4295032928.618:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26916 comm="syz.1.10315" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f799de59 code=0x0 [ 695.226395][T26920] NFSD: Failed to start, no listeners configured. [ 696.296734][T26963] netlink: 'syz.2.10335': attribute type 11 has an invalid length. [ 697.169316][T26990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10346'. [ 699.731606][T27074] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 699.790570][T27076] netlink: Conntrack attr has 5 unknown bytes [ 699.853098][T27078] &#$@\]\-: entered promiscuous mode [ 701.130776][T27123] netlink: 'syz.0.10411': attribute type 2 has an invalid length. [ 701.165880][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10411'. [ 701.312413][T27128] netlink: zone id is out of range [ 701.341230][T27128] netlink: zone id is out of range [ 701.359608][T27128] netlink: zone id is out of range [ 701.387941][T27128] netlink: zone id is out of range [ 701.415115][T27128] netlink: zone id is out of range [ 701.435103][T27128] netlink: zone id is out of range [ 701.456539][T27128] netlink: zone id is out of range [ 701.485809][T27128] netlink: zone id is out of range [ 702.799350][ T6096] Process accounting resumed [ 704.296893][T27243] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 7 [ 769.221182][T23407] Bluetooth: hci2: command 0x0406 tx timeout [ 769.919344][T29382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11479'. [ 771.636369][T29426] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11499'. [ 773.280786][T29474] openvswitch: netlink: IPv6 tunnel dst address is zero [ 774.939849][T29525] futex_wake_op: syz.2.11546 tries to shift op by -2048; fix this program [ 774.983312][T29525] futex_wake_op: syz.2.11546 tries to shift op by -2048; fix this program [ 775.956675][T29564] syz_tun: tun_chr_ioctl cmd 35108 [ 776.954486][T29590] netlink: 'syz.0.11577': attribute type 1 has an invalid length. [ 777.562828][T29612] IPVS: length: 131 != 8 [ 778.771100][T29660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11610'. [ 779.010574][T29668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 779.644836][T29691] netlink: 'syz.1.11625': attribute type 1 has an invalid length. [ 780.448037][T29724] netlink: 'syz.1.11641': attribute type 11 has an invalid length. [ 781.028415][T29741] sctp: [Deprecated]: syz.2.11648 (pid 29741) Use of int in max_burst socket option deprecated. [ 781.028415][T29741] Use struct sctp_assoc_value instead [ 781.559987][T29755] : entered promiscuous mode [ 781.637864][T29757] netlink: 206 bytes leftover after parsing attributes in process `syz.2.11656'. [ 782.108879][T29769] netlink: 'syz.2.11662': attribute type 11 has an invalid length. [ 782.142580][T29769] netlink: 'syz.2.11662': attribute type 11 has an invalid length. [ 782.176457][T29769] netlink: 'syz.2.11662': attribute type 11 has an invalid length. [ 782.612811][T29787] netlink: Invalid conntrack helper [ 783.382638][T29813] nbd: illegal input index -1024 [ 783.492213][T29817] netlink: Setting conntrack mark requires 'commit' flag. [ 784.237257][T29840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11697'. [ 785.768784][T29881] openvswitch: netlink: Duplicate or invalid key (type 0). [ 790.012731][T30018] GUP no longer grows the stack in syz.0.11781 (30018): 5000-401000 (4000) [ 790.073095][T30018] CPU: 0 UID: 0 PID: 30018 Comm: syz.0.11781 Tainted: G U L syzkaller #0 PREEMPT(full) [ 790.073136][T30018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 790.073145][T30018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.073160][T30018] Call Trace: [ 790.073168][T30018] [ 790.073177][T30018] dump_stack_lvl+0x100/0x190 [ 790.073209][T30018] gup_vma_lookup.cold+0x83/0x96 [ 790.073246][T30018] __get_user_pages+0x241/0x32a0 [ 790.073286][T30018] ? down_read_killable+0x35e/0x520 [ 790.073313][T30018] ? __pfx___get_user_pages+0x10/0x10 [ 790.073345][T30018] ? __pfx_validate_mm+0x10/0x10 [ 790.073388][T30018] __gup_longterm_locked+0x87d/0x16f0 [ 790.073421][T30018] ? find_held_lock+0x2b/0x80 [ 790.073455][T30018] ? __pfx___gup_longterm_locked+0x10/0x10 [ 790.073497][T30018] ? lock_acquire+0x1b9/0x370 [ 790.073543][T30018] gup_fast_fallback+0x16dc/0x2790 [ 790.073596][T30018] ? __pfx_gup_fast_fallback+0x10/0x10 [ 790.073632][T30018] ? __lock_acquire+0x49f/0x1a40 [ 790.073667][T30018] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 790.073715][T30018] get_user_pages_fast+0xa7/0xf0 [ 790.073747][T30018] ? __pfx_get_user_pages_fast+0x10/0x10 [ 790.073788][T30018] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 790.073827][T30018] ? pipe_lock+0x69/0x80 [ 790.073861][T30018] ? __pfx___schedule+0x10/0x10 [ 790.073896][T30018] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 790.073932][T30018] ? __pfx___mutex_lock+0x10/0x10 [ 790.073972][T30018] ? iovec_from_user+0xda/0x140 [ 790.074011][T30018] iov_iter_get_pages2+0xa3/0x100 [ 790.074044][T30018] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 790.074076][T30018] ? wait_for_space+0x2ca/0x3b0 [ 790.074122][T30018] __do_sys_vmsplice+0x7dd/0x13c0 [ 790.074167][T30018] ? plist_del+0x308/0x510 [ 790.074201][T30018] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 790.074242][T30018] ? futex_private_hash_put+0x115/0x1c0 [ 790.074281][T30018] ? futex_wake+0x220/0x5e0 [ 790.074313][T30018] ? __pfx_futex_wake+0x10/0x10 [ 790.074348][T30018] ? __pfx___do_sys_mremap+0x10/0x10 [ 790.074408][T30018] ? do_syscall_64+0x115/0x840 [ 790.074444][T30018] do_syscall_64+0x115/0x840 [ 790.074480][T30018] ? clear_bhb_loop+0x40/0x90 [ 790.074516][T30018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.074541][T30018] RIP: 0033:0x7fe7a299de59 [ 790.074562][T30018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.074585][T30018] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 790.074607][T30018] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 790.074623][T30018] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 790.074638][T30018] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 790.074652][T30018] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 790.074666][T30018] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 790.074697][T30018] [ 790.941090][T30029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11785'. [ 791.349369][T30039] bridge0: port 3(team0) entered blocking state [ 791.385094][T30039] bridge0: port 3(team0) entered disabled state [ 791.402185][T30039] team0: entered allmulticast mode [ 791.414091][T30041] Device name cannot be null; rc = [-22] [ 791.426598][T30039] team_slave_0: entered allmulticast mode [ 791.443605][T30039] team_slave_1: entered allmulticast mode [ 791.484833][T30039] team0: entered promiscuous mode [ 791.501954][T30039] team_slave_0: entered promiscuous mode [ 791.521237][T30039] team_slave_1: entered promiscuous mode [ 791.549695][T30039] bridge0: port 3(team0) entered blocking state [ 791.557795][T30039] bridge0: port 3(team0) entered forwarding state [ 791.978908][T30051] netlink: 206 bytes leftover after parsing attributes in process `syz.1.11796'. [ 793.380394][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11816'. [ 793.854164][T30107] NFSD: Failed to start, no listeners configured. [ 795.674353][T30177] block nbd1: Unsupported socket: should be TCP or UNIX. [ 796.186875][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 797.181208][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 797.791770][T30232] NFSD: Failed to start, no listeners configured. [ 797.895155][T30238] syz_tun: tun_chr_ioctl cmd 1074025678 [ 797.916548][T30238] syz_tun: group set to 23693 [ 798.175585][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 798.675931][T30260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11892'. [ 799.169888][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 800.272939][T30309] NFSD: Failed to start, no listeners configured. [ 803.016373][T30395] NFSD: Failed to start, no listeners configured. [ 804.042107][T30426] NFSD: Failed to start, no listeners configured. [ 804.297044][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 805.292947][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 805.442807][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.450788][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.285641][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 807.279960][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 808.274495][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 809.029902][T30572] netlink: 186 bytes leftover after parsing attributes in process `syz.2.12022'. [ 809.195186][T30574] sctp: [Deprecated]: syz.0.12032 (pid 30574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.195186][T30574] Use struct sctp_sack_info instead [ 809.270625][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 809.783861][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12029'. [ 810.264369][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 811.263310][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 811.336420][T30628] NFSD: Failed to start, no listeners configured. [ 812.253763][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 812.300904][T30662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12064'. [ 812.598814][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12066'. [ 813.248841][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 813.411108][T30688] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 813.437152][T30688] audit: out of memory in audit_log_start [ 813.541025][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12077'. [ 813.596922][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12077'. [ 814.246946][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 814.749800][ T30] audit: type=1800 audit(4294967311.991:50): pid=30718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12088" name=04 dev="tmpfs" ino=14716 res=0 errno=0 [ 815.238224][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 815.935232][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12102'. [ 815.945918][T30751] netlink: 206 bytes leftover after parsing attributes in process `syz.3.12103'. [ 816.233067][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 817.206408][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12112'. [ 817.228651][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 818.222714][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 818.497549][T30804] sctp: [Deprecated]: syz.3.12127 (pid 30804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.497549][T30804] Use struct sctp_sack_info instead [ 818.878170][T30818] bridge0: port 3(dummy0) entered blocking state [ 818.944603][T30818] bridge0: port 3(dummy0) entered disabled state [ 819.006664][T30818] dummy0: entered allmulticast mode [ 819.076115][T30818] dummy0: entered promiscuous mode [ 819.143422][T30820] FAULT_INJECTION: forcing a failure. [ 819.143422][T30820] name failslab, interval 1, probability 0, space 0, times 0 [ 819.159072][T30818] bridge0: port 3(dummy0) entered blocking state [ 819.165514][T30818] bridge0: port 3(dummy0) entered forwarding state [ 819.203465][T30820] CPU: 0 UID: 0 PID: 30820 Comm: syz.0.12132 Tainted: G U L syzkaller #0 PREEMPT(full) [ 819.203503][T30820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 819.203511][T30820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.203524][T30820] Call Trace: [ 819.203531][T30820] [ 819.203540][T30820] dump_stack_lvl+0x100/0x190 [ 819.203567][T30820] should_fail_ex.cold+0x5/0xa [ 819.203591][T30820] should_failslab+0xc2/0x120 [ 819.203620][T30820] __kmalloc_noprof+0xfc/0x820 [ 819.203642][T30820] ? __lock_acquire+0x49f/0x1a40 [ 819.203674][T30820] ? sk_prot_alloc+0x10b/0x2a0 [ 819.203708][T30820] sk_prot_alloc+0x10b/0x2a0 [ 819.203740][T30820] sk_alloc+0x36/0xe80 [ 819.203763][T30820] pppol2tp_create+0x32/0x250 [ 819.203793][T30820] pppox_create+0x15c/0x2c0 [ 819.203826][T30820] __sock_create+0x339/0x860 [ 819.203862][T30820] __sys_socket+0x14d/0x260 [ 819.203902][T30820] ? __pfx___sys_socket+0x10/0x10 [ 819.203944][T30820] __x64_sys_socket+0x72/0xb0 [ 819.203976][T30820] ? lockdep_hardirqs_on+0x78/0x100 [ 819.204028][T30820] do_syscall_64+0x115/0x840 [ 819.204066][T30820] ? clear_bhb_loop+0x40/0x90 [ 819.204095][T30820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.204119][T30820] RIP: 0033:0x7fe7a299de59 [ 819.204138][T30820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.204160][T30820] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 819.204181][T30820] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 819.204196][T30820] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 819.204210][T30820] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 819.204224][T30820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.204237][T30820] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 819.204266][T30820] [ 820.212426][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 821.232033][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 822.110288][T23407] Bluetooth: hci1: Malformed HCI Event [ 822.203934][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 822.683144][T30868] nbd: socks must be embedded in a SOCK_ITEM attr [ 823.196857][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 823.281830][ T30] audit: type=1326 audit(4294967320.576:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30889 comm="syz.2.12159" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cb3d9de59 code=0x0 [ 824.191689][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 824.667635][T30924] nbd: socks must be embedded in a SOCK_ITEM attr [ 825.186488][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 825.955592][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12197'. [ 826.181604][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 826.608555][T30994] NFSD: Failed to start, no listeners configured. [ 827.176147][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 828.171004][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 828.885590][T31055] sock: sock_timestamping_bind_phc: sock not bind to device [ 829.163107][T31064] netlink: 'syz.2.12236': attribute type 2 has an invalid length. [ 829.172126][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 830.160788][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 831.156721][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 832.155226][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 833.145100][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 833.528989][T31179] dlm: non-version read from control device 2147479540 [ 833.915334][T31189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12288'. [ 834.139904][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 834.295108][T31197] netlink: 186 bytes leftover after parsing attributes in process `syz.1.12292'. [ 835.134788][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 835.427367][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12303'. [ 836.129571][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 837.124412][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 837.471187][T31258] FAULT_INJECTION: forcing a failure. [ 837.471187][T31258] name failslab, interval 1, probability 0, space 0, times 0 [ 837.534904][T31258] CPU: 0 UID: 0 PID: 31258 Comm: syz.0.12320 Tainted: G U L syzkaller #0 PREEMPT(full) [ 837.534942][T31258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 837.534950][T31258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.534962][T31258] Call Trace: [ 837.534970][T31258] [ 837.534978][T31258] dump_stack_lvl+0x100/0x190 [ 837.535006][T31258] should_fail_ex.cold+0x5/0xa [ 837.535030][T31258] should_failslab+0xc2/0x120 [ 837.535059][T31258] kmem_cache_alloc_noprof+0x91/0x6a0 [ 837.535085][T31258] ? sk_prot_alloc+0x60/0x2a0 [ 837.535119][T31258] sk_prot_alloc+0x60/0x2a0 [ 837.535150][T31258] sk_alloc+0x36/0xe80 [ 837.535174][T31258] rds_create+0x9e/0x5e0 [ 837.535206][T31258] __sock_create+0x339/0x860 [ 837.535248][T31258] __sys_socket+0x14d/0x260 [ 837.535282][T31258] ? __pfx___sys_socket+0x10/0x10 [ 837.535322][T31258] __x64_sys_socket+0x72/0xb0 [ 837.535354][T31258] ? lockdep_hardirqs_on+0x78/0x100 [ 837.535387][T31258] do_syscall_64+0x115/0x840 [ 837.535420][T31258] ? clear_bhb_loop+0x40/0x90 [ 837.535447][T31258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.535470][T31258] RIP: 0033:0x7fe7a299de59 [ 837.535488][T31258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.535527][T31258] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 837.535548][T31258] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 837.535563][T31258] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 837.535576][T31258] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 837.535590][T31258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.535603][T31258] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 837.535632][T31258] [ 838.133779][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 838.465858][T31278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12327'. [ 839.114116][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 840.108912][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 841.113707][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 841.227591][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12360'. [ 842.008645][T31374] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 842.098559][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 842.343189][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12373'. [ 843.098776][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 843.636412][T23407] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 844.088212][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 844.148102][T31427] smc: net device dummy0 erased user defined pnetid DUMMY0 [ 844.883272][T31440] bridge0: port 3(veth1_macvtap) entered blocking state [ 844.918672][T31440] bridge0: port 3(veth1_macvtap) entered disabled state [ 844.948603][T31440] veth1_macvtap: entered allmulticast mode [ 845.016415][T31440] veth1_macvtap: left allmulticast mode [ 845.083041][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 846.079089][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 846.896806][T31479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12416'. [ 847.072684][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 848.067490][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 848.756818][T31483] kexec: Could not allocate control_code_buffer [ 849.066451][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 850.057161][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 851.052008][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 851.075193][T31578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12461'. [ 851.555649][T31585] netlink: 'syz.1.12464': attribute type 1 has an invalid length. [ 851.645027][T23407] Bluetooth: hci3: Malformed Event: 0x13 [ 852.046820][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 853.043020][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 854.036458][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 854.358652][T31663] ovs_: entered promiscuous mode [ 855.031291][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 856.026504][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 857.020961][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 858.016620][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 859.010649][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 860.005433][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 860.680443][T31807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12558'. [ 861.000257][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 861.995076][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 863.015760][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 863.984722][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 864.979633][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 865.645321][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12610'. [ 865.690602][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12610'. [ 865.976162][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 866.444038][T31948] FAULT_INJECTION: forcing a failure. [ 866.444038][T31948] name failslab, interval 1, probability 0, space 0, times 0 [ 866.517418][T31948] CPU: 0 UID: 0 PID: 31948 Comm: syz.0.12620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.517455][T31948] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.517464][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.517476][T31948] Call Trace: [ 866.517483][T31948] [ 866.517491][T31948] dump_stack_lvl+0x100/0x190 [ 866.517519][T31948] should_fail_ex.cold+0x5/0xa [ 866.517543][T31948] should_failslab+0xc2/0x120 [ 866.517571][T31948] kmem_cache_alloc_noprof+0x91/0x6a0 [ 866.517596][T31948] ? key_alloc+0x3c5/0x1310 [ 866.517626][T31948] key_alloc+0x3c5/0x1310 [ 866.517659][T31948] ? __pfx_key_alloc+0x10/0x10 [ 866.517690][T31948] ? lsm_blob_alloc+0x68/0x90 [ 866.517725][T31948] keyring_alloc+0x44/0xc0 [ 866.517756][T31948] install_thread_keyring_to_cred+0xc1/0x140 [ 866.517783][T31948] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 866.517820][T31948] __do_sys_keyctl+0x316/0x5a0 [ 866.517843][T31948] do_syscall_64+0x115/0x840 [ 866.517876][T31948] ? clear_bhb_loop+0x40/0x90 [ 866.517926][T31948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.517950][T31948] RIP: 0033:0x7fe7a299de59 [ 866.517968][T31948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.517990][T31948] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 866.518012][T31948] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 866.518027][T31948] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 866.518040][T31948] RBP: 00007fe7a2a33e6f R08: 0000000000000008 R09: 0000000000000000 [ 866.518054][T31948] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 866.518067][T31948] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 866.518096][T31948] [ 866.896864][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.929455][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.972997][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 867.000093][T31954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12625'. [ 867.426400][T31972] FAULT_INJECTION: forcing a failure. [ 867.426400][T31972] name failslab, interval 1, probability 0, space 0, times 0 [ 867.487760][T31972] CPU: 0 UID: 0 PID: 31972 Comm: syz.0.12632 Tainted: G U L syzkaller #0 PREEMPT(full) [ 867.487801][T31972] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 867.487811][T31972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.487825][T31972] Call Trace: [ 867.487832][T31972] [ 867.487841][T31972] dump_stack_lvl+0x100/0x190 [ 867.487872][T31972] should_fail_ex.cold+0x5/0xa [ 867.487899][T31972] should_failslab+0xc2/0x120 [ 867.487930][T31972] __kmalloc_noprof+0xfc/0x820 [ 867.487956][T31972] ? string_escape_mem+0x746/0xe00 [ 867.487996][T31972] ? kstrdup_quotable+0xc2/0x190 [ 867.488038][T31972] kstrdup_quotable+0xc2/0x190 [ 867.488075][T31972] ? __pfx_kstrdup_quotable+0x10/0x10 [ 867.488114][T31972] ? get_cmdline+0x86/0x360 [ 867.488148][T31972] kstrdup_quotable_cmdline+0x127/0x210 [ 867.488191][T31972] __report_access+0x4b/0x230 [ 867.488221][T31972] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.488257][T31972] task_work_run+0x150/0x240 [ 867.488291][T31972] ? __pfx_task_work_run+0x10/0x10 [ 867.488332][T31972] exit_to_user_mode_loop+0x1d8/0x6f0 [ 867.488371][T31972] ? rcu_is_watching+0x12/0xc0 [ 867.488400][T31972] do_syscall_64+0x652/0x840 [ 867.488437][T31972] ? clear_bhb_loop+0x40/0x90 [ 867.488466][T31972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.488491][T31972] RIP: 0033:0x7fe7a299de59 [ 867.488512][T31972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.488535][T31972] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 867.488558][T31972] RAX: ffffffffffffffff RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 867.488574][T31972] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 867.488589][T31972] RBP: 00007fe7a2a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 867.488604][T31972] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 867.488618][T31972] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 867.488648][T31972] [ 867.488743][T31972] ptrace attach of "(null)"[5999] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[31972] [ 867.986779][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 868.112447][T31989] netlink: 342 bytes leftover after parsing attributes in process `syz.3.12642'. [ 868.958845][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 869.162014][ T30] audit: type=1804 audit(4294967366.694:52): pid=32022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12658" name="/newroot/3063/file0" dev="tmpfs" ino=15414 res=1 errno=0 [ 869.954874][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 870.948540][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 871.943373][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 872.942424][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 873.103776][T32136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12707'. [ 873.932998][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 874.927798][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 875.922643][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 876.917449][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 877.912309][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 878.908340][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 879.901974][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 880.363967][T32312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12787'. [ 880.898039][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 880.998973][T32332] bridge0: port 4(syz_tun) entered blocking state [ 881.061776][T32332] bridge0: port 4(syz_tun) entered disabled state [ 881.126946][T32332] syz_tun: entered allmulticast mode [ 881.192858][T32332] syz_tun: entered promiscuous mode [ 881.925982][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 882.907219][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 883.882455][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 884.876106][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 884.899188][T32422] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 884.907466][T32422] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 885.870944][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 886.284105][ T30] audit: type=1804 audit(4294967383.903:53): pid=32446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12841" name="file0" dev="tmpfs" ino=15856 res=1 errno=0 [ 886.314305][T32448] tunl0: entered allmulticast mode [ 886.865806][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 887.860564][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 888.628222][T32514] bridge_slave_0: left allmulticast mode [ 888.652180][T32514] bridge_slave_0: left promiscuous mode [ 888.680629][T32514] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.855374][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 889.773906][T32537] netlink: 334 bytes leftover after parsing attributes in process `syz.1.12882'. [ 889.851213][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 890.845046][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 891.841114][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 892.834729][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 893.816519][T32651] netlink: 338 bytes leftover after parsing attributes in process `syz.3.12934'. [ 893.833938][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 893.986118][T32655] bridge_slave_0: left allmulticast mode [ 894.028291][T32655] bridge_slave_0: left promiscuous mode [ 894.059178][T32655] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.468965][T32671] netlink: 'syz.3.12942': attribute type 23 has an invalid length. [ 894.825576][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 895.328644][T32704] ovs_?: entered promiscuous mode [ 895.819194][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 895.914331][T32725] netlink: 350 bytes leftover after parsing attributes in process `syz.3.12968'. [ 896.177093][T32736] bridge_slave_0: left allmulticast mode [ 896.204328][T32736] bridge_slave_0: left promiscuous mode [ 896.228296][T32740] FAULT_INJECTION: forcing a failure. [ 896.228296][T32740] name failslab, interval 1, probability 0, space 0, times 0 [ 896.242241][T32736] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.286630][T32740] CPU: 0 UID: 0 PID: 32740 Comm: syz.0.12974 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.286669][T32740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.286678][T32740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.286693][T32740] Call Trace: [ 896.286700][T32740] [ 896.286709][T32740] dump_stack_lvl+0x100/0x190 [ 896.286740][T32740] should_fail_ex.cold+0x5/0xa [ 896.286766][T32740] should_failslab+0xc2/0x120 [ 896.286797][T32740] kmem_cache_alloc_noprof+0x91/0x6a0 [ 896.286825][T32740] ? dup_fd+0x4d/0xd10 [ 896.286865][T32740] dup_fd+0x4d/0xd10 [ 896.286899][T32740] ? __pfx_get_nodes+0x10/0x10 [ 896.286948][T32740] __x64_sys_close_range+0x405/0x5d0 [ 896.286992][T32740] ? __pfx___x64_sys_close_range+0x10/0x10 [ 896.287039][T32740] do_syscall_64+0x115/0x840 [ 896.287076][T32740] ? clear_bhb_loop+0x40/0x90 [ 896.287107][T32740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.287131][T32740] RIP: 0033:0x7fe7a299de59 [ 896.287150][T32740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.287177][T32740] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 896.287199][T32740] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 896.287215][T32740] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 896.287229][T32740] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 896.287244][T32740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.287257][T32740] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 896.287286][T32740] [ 896.471995][T32742] netlink: 350 bytes leftover after parsing attributes in process `syz.2.12976'. [ 896.628982][T32748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12977'. [ 896.814999][ T6096] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 897.808841][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 898.803661][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 899.557657][ T377] IPVS: length: 537396514 != 24 [ 899.798543][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 900.070485][ T394] sctp: [Deprecated]: syz.0.13029 (pid 394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.070485][ T394] Use struct sctp_sack_info instead [ 900.447596][ T404] ovs_?: entered promiscuous mode [ 900.793319][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 901.788134][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 902.782974][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 903.777853][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 903.804351][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13084'. [ 904.772752][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 905.767520][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 906.762282][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 906.783633][ T607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13123'. [ 907.757102][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 908.164622][ T647] sctp: [Deprecated]: syz.0.13151 (pid 647) Use of int in maxseg socket option. [ 908.164622][ T647] Use struct sctp_assoc_value instead [ 908.752950][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 908.876453][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13147'. [ 909.746779][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 910.276359][ T699] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 910.741558][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 910.792544][T23407] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 910.926292][ T719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13179'. [ 911.173912][ T729] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 911.736432][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 912.731210][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 912.817094][ T777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13202'. [ 913.726084][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 914.720885][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 915.535311][ T842] netlink: 21 bytes leftover after parsing attributes in process `syz.0.13228'. [ 915.717828][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 916.366088][ T859] netlink: 334 bytes leftover after parsing attributes in process `syz.1.13237'. [ 916.530335][ T862] bridge0: port 1(ipvlan1) entered blocking state [ 916.577266][ T862] bridge0: port 1(ipvlan1) entered disabled state [ 916.599913][ T862] ipvlan1: entered allmulticast mode [ 916.628012][ T862] veth0_vlan: entered allmulticast mode [ 916.666953][ T862] ipvlan1: left allmulticast mode [ 916.695192][ T862] veth0_vlan: left allmulticast mode [ 916.713231][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 917.705390][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 918.001353][ T903] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 918.700212][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 918.718788][ T904] syz.0.13254 (904) used obsolete PPPIOCDETACH ioctl [ 918.789792][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13263'. [ 919.695904][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 919.842672][ T960] openvswitch: netlink: IPv4 tunnel dst address is zero [ 920.689837][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 921.283294][ T1000] input: f as /devices/virtual/input/input28 [ 921.684746][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 922.274773][ T1039] vmstat_refresh: nr_hugetlb -11264 [ 922.679467][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 923.683185][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 924.674159][ T6069] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 925.663990][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 926.521340][ T1185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13367'. [ 926.615273][ T1187] netlink: Unknown conntrack attr (0) [ 926.658799][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 926.768038][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13371'. [ 927.686557][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.693033][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 929.612524][ T1273] bridge0: port 1(batadv0) entered blocking state [ 929.661756][ T1273] bridge0: port 1(batadv0) entered disabled state [ 929.689179][ T1273] batadv0: entered allmulticast mode [ 929.713863][ T1273] batadv0: entered promiscuous mode [ 929.737721][ T1273] bridge0: port 1(batadv0) entered blocking state [ 929.744347][ T1273] bridge0: port 1(batadv0) entered forwarding state [ 930.181274][T20897] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 930.192438][T20897] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 931.312451][ T1316] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5999] was attempted by ""[1316] [ 934.654902][ T1368] kexec: Could not allocate control_code_buffer [ 935.232124][ T1406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13455'. [ 936.018679][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13470'. [ 938.026465][ T1487] netlink: 'syz.0.13493': attribute type 1 has an invalid length. [ 938.035019][ T1490] netlink: 'syz.2.13494': attribute type 1 has an invalid length. [ 938.078626][ T1490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13494'. [ 938.121406][ T1490] netlink: 'syz.2.13494': attribute type 1 has an invalid length. [ 938.230129][ T1494] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6005] was attempted by ""[1494] [ 939.498365][ T1536] zswap: compressor F not available [ 940.934356][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13534'. [ 941.364927][ T1597] FAULT_INJECTION: forcing a failure. [ 941.364927][ T1597] name fail_futex, interval 1, probability 0, space 0, times 1 [ 941.415182][ T1597] CPU: 0 UID: 0 PID: 1597 Comm: syz.0.13538 Tainted: G U L syzkaller #0 PREEMPT(full) [ 941.415220][ T1597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 941.415228][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.415242][ T1597] Call Trace: [ 941.415249][ T1597] [ 941.415258][ T1597] dump_stack_lvl+0x100/0x190 [ 941.415285][ T1597] should_fail_ex.cold+0x5/0xa [ 941.415310][ T1597] get_futex_key+0x295/0x14f0 [ 941.415348][ T1597] ? __pfx_get_futex_key+0x10/0x10 [ 941.415382][ T1597] ? refill_pi_state_cache+0x91/0x260 [ 941.415415][ T1597] futex_lock_pi+0x1eb/0x7f0 [ 941.415444][ T1597] ? __pfx_futex_lock_pi+0x10/0x10 [ 941.415472][ T1597] ? __pfx___futex_wait+0x10/0x10 [ 941.415521][ T1597] ? __pfx_futex_wake_mark+0x10/0x10 [ 941.415554][ T1597] ? rcu_read_lock_any_held+0x6a/0xa0 [ 941.415582][ T1597] ? find_held_lock+0x2b/0x80 [ 941.415606][ T1597] ? ksys_write+0x190/0x250 [ 941.415642][ T1597] do_futex+0x371/0x440 [ 941.415664][ T1597] ? __pfx_do_futex+0x10/0x10 [ 941.415687][ T1597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.415727][ T1597] __x64_sys_futex+0x34f/0x4d0 [ 941.415752][ T1597] ? __pfx___x64_sys_futex+0x10/0x10 [ 941.415783][ T1597] do_syscall_64+0x115/0x840 [ 941.415816][ T1597] ? clear_bhb_loop+0x40/0x90 [ 941.415843][ T1597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.415874][ T1597] RIP: 0033:0x7fe7a299de59 [ 941.415893][ T1597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.415914][ T1597] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 941.415935][ T1597] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 941.415950][ T1597] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 941.415963][ T1597] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 000000008000fff5 [ 941.415977][ T1597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.415990][ T1597] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 941.416018][ T1597] [ 942.197604][ T1605] syz_tun: tun_chr_ioctl cmd 1074025688 [ 944.111559][ T1654] ovs_: entered promiscuous mode [ 947.846797][ T1758] syz_tun: tun_chr_ioctl cmd 1074025694 [ 948.787927][ T1735] kexec: Could not allocate control_code_buffer [ 948.951542][ T1782] ovs_: entered promiscuous mode [ 949.805936][ T1815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13630'. [ 951.148406][ T1853] netlink: 342 bytes leftover after parsing attributes in process `syz.1.13648'. [ 951.164462][ T1803] kexec: Could not allocate control_code_buffer [ 952.275110][ T1893] sctp: [Deprecated]: syz.3.13666 (pid 1893) Use of int in max_burst socket option. [ 952.275110][ T1893] Use struct sctp_assoc_value instead [ 952.410566][ T1895] ovs_: entered promiscuous mode [ 953.355983][ T1887] kexec: Could not allocate control_code_buffer [ 953.792785][ T1936] netlink: 'syz.0.13686': attribute type 33 has an invalid length. [ 954.558928][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13698'. [ 957.226102][ T2035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13727'. [ 957.741079][ T30] audit: type=1800 audit(4294967455.725:54): pid=2047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13730" name="SYSVff7fffff" dev="tmpfs" ino=0 res=0 errno=0 [ 958.627138][ T2020] kexec: Could not allocate control_code_buffer [ 961.286300][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13776'. [ 962.435702][ T2183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13790'. [ 963.212558][ T30] audit: type=1800 audit(4294967461.234:55): pid=2208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13801" name=22050820 dev="tmpfs" ino=16731 res=0 errno=0 [ 966.012241][ T2288] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 966.169660][ T30] audit: type=1800 audit(4294967464.199:56): pid=2293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13838" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 967.337907][ T30] audit: type=1800 audit(4294967465.375:57): pid=2332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13855" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 967.535354][ T2338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13858'. [ 967.985149][ T2357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13866'. [ 969.621645][ T2410] netlink: 'syz.1.13890': attribute type 2 has an invalid length. [ 969.877949][ T2423] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 971.914178][ T2504] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6001] was attempted by "m;t{ ^\x0b)\x1ḃ\x0c 㬪1l KE\x0b&dԔxX\x22mOa_3&Na^sNi|q؉f\x5cbC\x0daeJqti+c5\x0d‡%;+&`GAUL)1`Ff5fCg7a_ٵŠI$UR~(J(3Ü|_H6?r˘\x09lj5b-ˤV~}Ecy-d\x09\x0bW$DM ab\x0c-cDXÌQMx.yx&_]}V\x0bIF母%cP8z0Y+W(R\x1b%bgtY#k(L\x0d= [ 976.461231][ T2699] netlink: 342 bytes leftover after parsing attributes in process `syz.0.13993'. [ 977.649645][ T2735] sctp: [Deprecated]: syz.1.14006 (pid 2735) Use of int in max_burst socket option deprecated. [ 977.649645][ T2735] Use struct sctp_assoc_value instead [ 978.311980][ T2761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14013'. [ 979.405387][ T2799] overlayfs: missing 'lowerdir' [ 981.667451][ T2899] vivid-008: ================= START STATUS ================= [ 981.729641][ T2899] vivid-008: ================== END STATUS ================== [ 982.892345][ T2943] sctp: [Deprecated]: syz.2.14080 (pid 2943) Use of int in maxseg socket option. [ 982.892345][ T2943] Use struct sctp_assoc_value instead [ 984.130580][ T2976] netlink: 'syz.2.14095': attribute type 1 has an invalid length. [ 984.798292][ T3003] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 984.839747][ T3003] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 985.291497][ T3019] overlayfs: missing 'lowerdir' [ 986.184043][ T3052] overlayfs: missing 'lowerdir' [ 986.413371][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14133'. [ 988.384663][ T3113] random: crng reseeded on system resumption [ 988.817913][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.824277][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.528922][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14201'. [ 995.950394][ T3263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14212'. [ 998.281803][ T3320] overlayfs: missing 'lowerdir' [ 999.991657][ T3369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14258'. [ 1000.021835][ T3369] batadv0: entered promiscuous mode [ 1002.020766][ T3442] bridge0: port 4(bond0) entered blocking state [ 1002.048932][ T3442] bridge0: port 4(bond0) entered disabled state [ 1002.077797][ T3442] bond0: entered allmulticast mode [ 1002.101148][ T3442] bond_slave_0: entered allmulticast mode [ 1002.141671][ T3442] bond_slave_1: entered allmulticast mode [ 1002.180649][ T3442] bond0: entered promiscuous mode [ 1002.209287][ T3442] bond_slave_0: entered promiscuous mode [ 1002.235228][ T3442] bond_slave_1: entered promiscuous mode [ 1002.266510][ T3442] bridge0: port 4(bond0) entered blocking state [ 1002.272915][ T3442] bridge0: port 4(bond0) entered forwarding state [ 1003.104226][ T3475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14306'. [ 1003.139209][ T30] audit: type=1800 audit(4294968524.344:58): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14304" name="file0" dev="tmpfs" ino=17541 res=0 errno=0 [ 1006.489885][ T3557] netlink: 338 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1010.021656][T23407] block nbd1: Receive control failed (result -107) [ 1010.451678][ T30] audit: type=1800 audit(4294968531.698:59): pid=3631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14373" name="file0" dev="tmpfs" ino=17958 res=0 errno=0 [ 1010.899192][ T3642] netlink: 'syz.0.14378': attribute type 9 has an invalid length. [ 1010.948720][ T3642] netlink: 330 bytes leftover after parsing attributes in process `syz.0.14378'. [ 1011.140678][ T3652] bridge0: port 1(bond0) entered blocking state [ 1011.176775][ T3652] bridge0: port 1(bond0) entered disabled state [ 1011.223712][ T3652] bond0: entered allmulticast mode [ 1011.248485][ T3652] bond_slave_0: entered allmulticast mode [ 1011.283572][ T3652] bond_slave_1: entered allmulticast mode [ 1011.326194][ T3652] bond0: entered promiscuous mode [ 1011.354098][ T3652] bond_slave_0: entered promiscuous mode [ 1011.378728][ T3652] bond_slave_1: entered promiscuous mode [ 1011.404431][ T3652] bridge0: port 1(bond0) entered blocking state [ 1011.410946][ T3652] bridge0: port 1(bond0) entered forwarding state [ 1012.316244][ T3687] bridge0: port 1(bond0) entered blocking state [ 1012.348799][ T3687] bridge0: port 1(bond0) entered disabled state [ 1012.377594][ T3687] bond0: entered allmulticast mode [ 1012.407950][ T3687] bond_slave_0: entered allmulticast mode [ 1012.432303][ T3687] bond_slave_1: entered allmulticast mode [ 1012.473573][ T3687] bond0: entered promiscuous mode [ 1012.507881][ T3687] bond_slave_0: entered promiscuous mode [ 1012.542926][ T3687] bond_slave_1: entered promiscuous mode [ 1012.562050][ T3687] bridge0: port 1(bond0) entered blocking state [ 1012.568535][ T3687] bridge0: port 1(bond0) entered forwarding state [ 1013.546853][ T3721] bridge0: port 5(bond0) entered blocking state [ 1013.577270][ T3721] bridge0: port 5(bond0) entered disabled state [ 1013.611361][ T3721] bond0: entered allmulticast mode [ 1013.636650][ T3721] bond_slave_0: entered allmulticast mode [ 1013.667102][ T3721] bond_slave_1: entered allmulticast mode [ 1013.707930][ T3721] bond0: entered promiscuous mode [ 1013.733143][ T3721] bond_slave_0: entered promiscuous mode [ 1013.759057][ T3721] bond_slave_1: entered promiscuous mode [ 1013.792707][ T3721] bridge0: port 5(bond0) entered blocking state [ 1013.799144][ T3721] bridge0: port 5(bond0) entered listening state [ 1015.508040][ T3769] ================================================================== [ 1015.508081][ T3769] BUG: KASAN: stack-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1015.508116][ T3769] Write of size 8 at addr ffffc9000484fbe0 by task syz.0.14433/3769 [ 1015.508143][ T3769] [ 1015.508157][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.0.14433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.508192][ T3769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.508201][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.508216][ T3769] Call Trace: [ 1015.508223][ T3769] [ 1015.508231][ T3769] dump_stack_lvl+0x100/0x190 [ 1015.508256][ T3769] print_report+0x13d/0x4b0 [ 1015.508290][ T3769] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1015.508325][ T3769] ? sys_imageblit+0x19fb/0x1d60 [ 1015.508350][ T3769] kasan_report+0xdf/0x1c0 [ 1015.508382][ T3769] ? sys_imageblit+0x19fb/0x1d60 [ 1015.508411][ T3769] sys_imageblit+0x19fb/0x1d60 [ 1015.508440][ T3769] ? desc_read+0x2e2/0x380 [ 1015.508473][ T3769] ? __pfx_sys_imageblit+0x10/0x10 [ 1015.508500][ T3769] ? desc_read_finalized_seq+0x131/0x1d0 [ 1015.508536][ T3769] ? __asan_memcpy+0x3c/0x60 [ 1015.508558][ T3769] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1015.508597][ T3769] soft_cursor+0x524/0xa10 [ 1015.508636][ T3769] ? fb_get_color_depth+0x120/0x250 [ 1015.508672][ T3769] bit_cursor+0xca1/0x1490 [ 1015.508712][ T3769] ? __pfx_bit_cursor+0x10/0x10 [ 1015.508752][ T3769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.508785][ T3769] ? get_color+0x1da/0x450 [ 1015.508815][ T3769] ? __pfx_bit_cursor+0x10/0x10 [ 1015.508850][ T3769] fbcon_cursor+0x43c/0x5e0 [ 1015.508885][ T3769] hide_cursor+0x87/0x230 [ 1015.508907][ T3769] putconsxy+0x1f/0x3c0 [ 1015.508935][ T3769] vcs_write+0xbd5/0xd70 [ 1015.508973][ T3769] ? __bpf_trace_sched_exit_tp+0xc0/0xc0 [ 1015.509012][ T3769] ? __pfx_vcs_write+0x10/0x10 [ 1015.509047][ T3769] ? apparmor_file_permission+0x13f/0x1c0 [ 1015.509072][ T3769] ? bpf_lsm_file_permission+0x9/0x10 [ 1015.509108][ T3769] ? security_file_permission+0x76/0x210 [ 1015.509142][ T3769] ? rw_verify_area+0xce/0x6d0 [ 1015.509175][ T3769] vfs_write+0x2aa/0x1050 [ 1015.509209][ T3769] ? __pfx_vcs_write+0x10/0x10 [ 1015.509247][ T3769] ? __pfx_vfs_write+0x10/0x10 [ 1015.509279][ T3769] ? find_held_lock+0x2b/0x80 [ 1015.509309][ T3769] ? __fget_files+0x215/0x3d0 [ 1015.509342][ T3769] ? __fget_files+0x215/0x3d0 [ 1015.509379][ T3769] ? __fget_files+0x21f/0x3d0 [ 1015.509441][ T3769] ksys_write+0x12a/0x250 [ 1015.509476][ T3769] ? __pfx_ksys_write+0x10/0x10 [ 1015.509517][ T3769] do_syscall_64+0x115/0x840 [ 1015.509554][ T3769] ? clear_bhb_loop+0x40/0x90 [ 1015.509582][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.509607][ T3769] RIP: 0033:0x7fe7a299de59 [ 1015.509626][ T3769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.509650][ T3769] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.509673][ T3769] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 1015.509690][ T3769] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1015.509705][ T3769] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.509721][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.509736][ T3769] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 1015.509760][ T3769] [ 1015.509768][ T3769] [ 1015.509774][ T3769] The buggy address belongs to a vmalloc virtual mapping [ 1015.509791][ T3769] The buggy address belongs to the physical page: [ 1015.509809][ T3769] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b57 [ 1015.509831][ T3769] memcg:ffff88803394db02 [ 1015.509840][ T3769] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1015.509868][ T3769] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1015.509891][ T3769] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88803394db02 [ 1015.509905][ T3769] page dumped because: kasan: bad access detected [ 1015.509920][ T3769] page_owner tracks the page as allocated [ 1015.509929][ T3769] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5999, tgid 5999 (syz-executor), ts 1014602920947, free_ts 1014536727158 [ 1015.510023][ T3769] post_alloc_hook+0xfd/0x120 [ 1015.510059][ T3769] get_page_from_freelist+0xf48/0x3530 [ 1015.510098][ T3769] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1015.510120][ T3769] alloc_pages_mpol+0x1fb/0x540 [ 1015.510157][ T3769] alloc_pages_noprof+0x1a/0x160 [ 1015.510190][ T3769] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 1015.510224][ T3769] __vmalloc_node_noprof+0xad/0xf0 [ 1015.510255][ T3769] copy_process+0x7fb/0x8030 [ 1015.510278][ T3769] kernel_clone+0x176/0x9d0 [ 1015.510301][ T3769] __do_sys_clone+0xd9/0x120 [ 1015.510324][ T3769] do_syscall_64+0x115/0x840 [ 1015.510359][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.510383][ T3769] page last free pid 23793 tgid 23793 stack trace: [ 1015.510396][ T3769] __free_frozen_pages+0x79f/0x1090 [ 1015.510429][ T3769] qlist_free_all+0x47/0xf0 [ 1015.510449][ T3769] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1015.510473][ T3769] __kasan_slab_alloc+0x69/0x90 [ 1015.510500][ T3769] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1015.510524][ T3769] ext4_init_io_end+0x24/0x170 [ 1015.510544][ T3769] ext4_do_writepages+0x9cf/0x3ed0 [ 1015.510574][ T3769] ext4_writepages+0x347/0x750 [ 1015.510603][ T3769] do_writepages+0x278/0x600 [ 1015.510638][ T3769] __writeback_single_inode+0x164/0x1300 [ 1015.510670][ T3769] writeback_sb_inodes+0x766/0x1c50 [ 1015.510700][ T3769] __writeback_inodes_wb+0xf8/0x2d0 [ 1015.510730][ T3769] wb_writeback+0x6f6/0xb50 [ 1015.510758][ T3769] wb_workfn+0x7cb/0xc80 [ 1015.510787][ T3769] process_one_work+0xa23/0x1940 [ 1015.510816][ T3769] worker_thread+0x5ef/0xe50 [ 1015.510845][ T3769] [ 1015.510850][ T3769] Memory state around the buggy address: [ 1015.510862][ T3769] ffffc9000484fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1015.510878][ T3769] ffffc9000484fb00: 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 00 00 00 [ 1015.510895][ T3769] >ffffc9000484fb80: 00 00 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 [ 1015.510908][ T3769] ^ [ 1015.510921][ T3769] ffffc9000484fc00: f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 1015.510938][ T3769] ffffc9000484fc80: f1 f1 f1 00 00 00 00 00 00 00 00 00 00 00 f3 f3 [ 1015.510951][ T3769] ================================================================== [ 1015.549343][ T3769] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1015.549367][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.0.14433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.549404][ T3769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.549413][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.549428][ T3769] Call Trace: [ 1015.549436][ T3769] [ 1015.549445][ T3769] dump_stack_lvl+0x100/0x190 [ 1015.549473][ T3769] vpanic+0x552/0x970 [ 1015.549495][ T3769] ? __pfx_vpanic+0x10/0x10 [ 1015.549518][ T3769] ? mark_held_locks+0x40/0x70 [ 1015.549554][ T3769] ? sys_imageblit+0x19fb/0x1d60 [ 1015.549580][ T3769] panic+0xd1/0xe0 [ 1015.549600][ T3769] ? __pfx_panic+0x10/0x10 [ 1015.549623][ T3769] ? sys_imageblit+0x19fb/0x1d60 [ 1015.549648][ T3769] ? preempt_schedule_common+0x42/0xc0 [ 1015.549686][ T3769] check_panic_on_warn.cold+0x19/0x34 [ 1015.549712][ T3769] end_report.part.0+0x3a/0x90 [ 1015.549746][ T3769] kasan_report.cold+0xe/0x18 [ 1015.549781][ T3769] ? sys_imageblit+0x19fb/0x1d60 [ 1015.549810][ T3769] sys_imageblit+0x19fb/0x1d60 [ 1015.549839][ T3769] ? desc_read+0x2e2/0x380 [ 1015.549872][ T3769] ? __pfx_sys_imageblit+0x10/0x10 [ 1015.549900][ T3769] ? desc_read_finalized_seq+0x131/0x1d0 [ 1015.549936][ T3769] ? __asan_memcpy+0x3c/0x60 [ 1015.549959][ T3769] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1015.549998][ T3769] soft_cursor+0x524/0xa10 [ 1015.550037][ T3769] ? fb_get_color_depth+0x120/0x250 [ 1015.550073][ T3769] bit_cursor+0xca1/0x1490 [ 1015.550113][ T3769] ? __pfx_bit_cursor+0x10/0x10 [ 1015.550162][ T3769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.550195][ T3769] ? get_color+0x1da/0x450 [ 1015.550226][ T3769] ? __pfx_bit_cursor+0x10/0x10 [ 1015.550261][ T3769] fbcon_cursor+0x43c/0x5e0 [ 1015.550296][ T3769] hide_cursor+0x87/0x230 [ 1015.550320][ T3769] putconsxy+0x1f/0x3c0 [ 1015.550349][ T3769] vcs_write+0xbd5/0xd70 [ 1015.550385][ T3769] ? __bpf_trace_sched_exit_tp+0xc0/0xc0 [ 1015.550425][ T3769] ? __pfx_vcs_write+0x10/0x10 [ 1015.550460][ T3769] ? apparmor_file_permission+0x13f/0x1c0 [ 1015.550486][ T3769] ? bpf_lsm_file_permission+0x9/0x10 [ 1015.550522][ T3769] ? security_file_permission+0x76/0x210 [ 1015.550551][ T3769] ? rw_verify_area+0xce/0x6d0 [ 1015.550583][ T3769] vfs_write+0x2aa/0x1050 [ 1015.550617][ T3769] ? __pfx_vcs_write+0x10/0x10 [ 1015.550654][ T3769] ? __pfx_vfs_write+0x10/0x10 [ 1015.550687][ T3769] ? find_held_lock+0x2b/0x80 [ 1015.550713][ T3769] ? __fget_files+0x215/0x3d0 [ 1015.550747][ T3769] ? __fget_files+0x215/0x3d0 [ 1015.550784][ T3769] ? __fget_files+0x21f/0x3d0 [ 1015.550821][ T3769] ksys_write+0x12a/0x250 [ 1015.550855][ T3769] ? __pfx_ksys_write+0x10/0x10 [ 1015.550894][ T3769] do_syscall_64+0x115/0x840 [ 1015.550930][ T3769] ? clear_bhb_loop+0x40/0x90 [ 1015.550957][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.550982][ T3769] RIP: 0033:0x7fe7a299de59 [ 1015.551001][ T3769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.551025][ T3769] RSP: 002b:00007fe7a0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.551048][ T3769] RAX: ffffffffffffffda RBX: 00007fe7a2c25fa0 RCX: 00007fe7a299de59 [ 1015.551064][ T3769] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1015.551079][ T3769] RBP: 00007fe7a2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.551094][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.551109][ T3769] R13: 00007fe7a2c26038 R14: 00007fe7a2c25fa0 R15: 00007ffd16e6ef68 [ 1015.551138][ T3769] [ 1015.551220][ T3769] Kernel Offset: disabled