last executing test programs: 8m0.475953128s ago: executing program 3 (id=656): unlink$auto(0x0) 8m0.3041125s ago: executing program 3 (id=660): setresuid$auto(0x0, 0xee00, 0xffffffffffffffff) 8m0.148517722s ago: executing program 3 (id=663): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c?\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) 7m59.915421537s ago: executing program 3 (id=668): arch_prctl$auto(0x1021, 0x80000000000002) 7m59.751848821s ago: executing program 3 (id=670): tkill$auto(0x1, 0x7) 7m59.193073149s ago: executing program 3 (id=680): prctl$auto(0x23, 0x2, 0x7fffffffeffe, 0x0, 0x0) 7m58.725779377s ago: executing program 32 (id=680): prctl$auto(0x23, 0x2, 0x7fffffffeffe, 0x0, 0x0) 7m12.580612692s ago: executing program 4 (id=1385): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) 7m11.561439164s ago: executing program 4 (id=1397): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) 7m11.189884057s ago: executing program 4 (id=1403): mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) getcpu$auto(&(0x7f0000000880)=0x7ff, &(0x7f00000008c0)=0x3, 0x0) 7m10.97138707s ago: executing program 4 (id=1408): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x80045515, r0) 7m10.495786389s ago: executing program 4 (id=1412): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 7m8.330534527s ago: executing program 4 (id=1432): r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x4, 0x2}, 0x80) 7m7.644353812s ago: executing program 33 (id=1432): r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x4, 0x2}, 0x80) 3.266691357s ago: executing program 2 (id=6746): lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) 2.890633261s ago: executing program 2 (id=6751): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="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", 0x28f) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0)) 2.611176782s ago: executing program 0 (id=6756): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x3, 0x200000000001, 0x2e, 0x0, 0x0) 2.571402703s ago: executing program 2 (id=6757): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2502fffff70400080014000180100004"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 2.403828643s ago: executing program 0 (id=6759): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r0, 0x0, 0x20) 2.358820592s ago: executing program 2 (id=6760): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 2.178637206s ago: executing program 0 (id=6761): pwrite64$auto(0x2, 0x0, 0x0, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 1.803783625s ago: executing program 0 (id=6765): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0xf000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1.430910124s ago: executing program 5 (id=6768): openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 1.368465278s ago: executing program 1 (id=6769): pread64$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x8800000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.183593654s ago: executing program 5 (id=6770): socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) 1.145042789s ago: executing program 1 (id=6771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000003a00)={0x34, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) 1.08613335s ago: executing program 0 (id=6772): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x0, 0x0) exit$auto(0x6) read$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) 908.857989ms ago: executing program 5 (id=6773): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x66, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) 818.861298ms ago: executing program 1 (id=6774): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xc0}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 735.184788ms ago: executing program 2 (id=6775): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r0, 0x40000000113, 0x4, 0xfffffffffffffffc, 0x0) 687.608365ms ago: executing program 5 (id=6776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 521.722934ms ago: executing program 1 (id=6777): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0x40047438, 0x0) 511.194498ms ago: executing program 2 (id=6778): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 440.650345ms ago: executing program 5 (id=6779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 286.187148ms ago: executing program 1 (id=6780): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x9, 0x0, 0x20008004) 138.345898ms ago: executing program 5 (id=6781): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007) open_tree$auto(r0, 0x0, 0x1001) 30.207052ms ago: executing program 0 (id=6782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) 0s ago: executing program 1 (id=6783): r0 = socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getsockopt$auto(r0, 0x6, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 98.288963][ T5853] cgroup: Unknown subsys name 'net' [ 98.507710][ T5853] cgroup: Unknown subsys name 'cpuset' [ 98.517869][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.398708][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.634455][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.644284][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.652401][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.661167][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.662421][ T9] cfg80211: failed to load regulatory.db [ 102.670156][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.706489][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.715475][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.735775][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.743958][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.752730][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.753670][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.769846][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.784041][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.792367][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.802054][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.830866][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.843595][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.851461][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.861564][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.870188][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.437981][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 103.498113][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 103.612973][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 103.718869][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 103.771020][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.778530][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.786729][ T5863] bridge_slave_0: entered allmulticast mode [ 103.795006][ T5863] bridge_slave_0: entered promiscuous mode [ 103.806106][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.813555][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.821121][ T5863] bridge_slave_1: entered allmulticast mode [ 103.829334][ T5863] bridge_slave_1: entered promiscuous mode [ 103.961692][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.975792][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.987097][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.995705][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.003587][ T5867] bridge_slave_0: entered allmulticast mode [ 104.010976][ T5867] bridge_slave_0: entered promiscuous mode [ 104.052970][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.060454][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.068771][ T5867] bridge_slave_1: entered allmulticast mode [ 104.076456][ T5867] bridge_slave_1: entered promiscuous mode [ 104.155851][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.163892][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.171270][ T5871] bridge_slave_0: entered allmulticast mode [ 104.179755][ T5871] bridge_slave_0: entered promiscuous mode [ 104.220645][ T5863] team0: Port device team_slave_0 added [ 104.230052][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.239830][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.247261][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.255682][ T5871] bridge_slave_1: entered allmulticast mode [ 104.264278][ T5871] bridge_slave_1: entered promiscuous mode [ 104.288619][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.296415][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.304113][ T5874] bridge_slave_0: entered allmulticast mode [ 104.311670][ T5874] bridge_slave_0: entered promiscuous mode [ 104.321588][ T5863] team0: Port device team_slave_1 added [ 104.344857][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.390519][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.397907][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.405886][ T5874] bridge_slave_1: entered allmulticast mode [ 104.413403][ T5874] bridge_slave_1: entered promiscuous mode [ 104.454546][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.480640][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.487847][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.515825][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.529976][ T5867] team0: Port device team_slave_0 added [ 104.539144][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.563879][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.570960][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.601314][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.616816][ T5867] team0: Port device team_slave_1 added [ 104.639656][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.653197][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.751310][ T5871] team0: Port device team_slave_0 added [ 104.761061][ T5871] team0: Port device team_slave_1 added [ 104.788170][ T5874] team0: Port device team_slave_0 added [ 104.798240][ T5874] team0: Port device team_slave_1 added [ 104.805329][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.813271][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.834199][ T5187] Bluetooth: hci0: command tx timeout [ 104.842063][ T5870] Bluetooth: hci1: command tx timeout [ 104.851940][ T5866] Bluetooth: hci2: command tx timeout [ 104.860867][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.913218][ T5866] Bluetooth: hci3: command tx timeout [ 104.943539][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.950994][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.980808][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.002882][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.009979][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.036564][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.050285][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.057815][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.085895][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.103498][ T5863] hsr_slave_0: entered promiscuous mode [ 105.110553][ T5863] hsr_slave_1: entered promiscuous mode [ 105.171513][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.178839][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.205223][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.218537][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.225856][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.252969][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.291272][ T5867] hsr_slave_0: entered promiscuous mode [ 105.298007][ T5867] hsr_slave_1: entered promiscuous mode [ 105.304518][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 105.310430][ T5867] Cannot create hsr debugfs directory [ 105.355585][ T5871] hsr_slave_0: entered promiscuous mode [ 105.362475][ T5871] hsr_slave_1: entered promiscuous mode [ 105.368905][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 105.375356][ T5871] Cannot create hsr debugfs directory [ 105.532588][ T5874] hsr_slave_0: entered promiscuous mode [ 105.539584][ T5874] hsr_slave_1: entered promiscuous mode [ 105.547450][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 105.554231][ T5874] Cannot create hsr debugfs directory [ 106.001915][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.017976][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.054108][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.076751][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.129950][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.143153][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.172974][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.185981][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.280583][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.295569][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.309264][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.338963][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.448779][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.473715][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.499460][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.511288][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.700953][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.736933][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.774384][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.808282][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.834625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.842415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.883964][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.891413][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.913435][ T5870] Bluetooth: hci1: command tx timeout [ 106.913445][ T5187] Bluetooth: hci0: command tx timeout [ 106.925169][ T5866] Bluetooth: hci2: command tx timeout [ 106.935956][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.948796][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.969937][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.993456][ T5870] Bluetooth: hci3: command tx timeout [ 106.997099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.006307][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.056438][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.063774][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.086646][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.101820][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.109088][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.151338][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.158873][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.186868][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.194672][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.225896][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.233152][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.656848][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.826016][ T5863] veth0_vlan: entered promiscuous mode [ 107.874180][ T5863] veth1_vlan: entered promiscuous mode [ 108.016120][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.039895][ T5863] veth0_macvtap: entered promiscuous mode [ 108.063479][ T5863] veth1_macvtap: entered promiscuous mode [ 108.077629][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.137876][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.165661][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.180773][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.227805][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.238042][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.257663][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.267238][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.307046][ T5867] veth0_vlan: entered promiscuous mode [ 108.350338][ T5867] veth1_vlan: entered promiscuous mode [ 108.407556][ T5874] veth0_vlan: entered promiscuous mode [ 108.458581][ T5871] veth0_vlan: entered promiscuous mode [ 108.490134][ T5871] veth1_vlan: entered promiscuous mode [ 108.494340][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.507908][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.518594][ T5874] veth1_vlan: entered promiscuous mode [ 108.587744][ T5867] veth0_macvtap: entered promiscuous mode [ 108.603958][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.615980][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.629971][ T5867] veth1_macvtap: entered promiscuous mode [ 108.678989][ T5874] veth0_macvtap: entered promiscuous mode [ 108.689291][ T5871] veth0_macvtap: entered promiscuous mode [ 108.731204][ T5874] veth1_macvtap: entered promiscuous mode [ 108.738890][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.750264][ T5871] veth1_macvtap: entered promiscuous mode [ 108.773625][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.787177][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.873521][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.905141][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.943680][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.954469][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.976207][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.988453][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.000022][ T5870] Bluetooth: hci0: command tx timeout [ 109.006280][ T5866] Bluetooth: hci1: command tx timeout [ 109.006299][ T5187] Bluetooth: hci2: command tx timeout [ 109.034729][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.057269][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.074538][ T5187] Bluetooth: hci3: command tx timeout [ 109.103088][ T2911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.111994][ T2911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.148198][ T2911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.172304][ T2911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.219576][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.302711][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.331480][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.340703][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.361476][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.385070][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.456959][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.478204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.545176][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.564888][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.700850][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.724115][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.741793][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.800813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.964935][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.987937][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.077191][ T5187] Bluetooth: hci1: command tx timeout [ 111.077226][ T5870] Bluetooth: hci2: command tx timeout [ 111.089648][ T5866] Bluetooth: hci0: command tx timeout [ 111.153452][ T5866] Bluetooth: hci3: command tx timeout [ 111.738007][ T31] audit: type=1326 audit(1754630034.927:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.0.39" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65be98ebe9 code=0x0 [ 112.956395][ T6074] mmap: syz.0.60 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.515364][ T6126] Process accounting resumed [ 115.292903][ T6156] syz.2.98 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.491075][ T6160] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.338435][ T6375] ima: policy update failed [ 121.388952][ T31] audit: type=1802 audit(1754630044.587:3): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.210" res=0 errno=0 [ 122.438159][ T6418] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.293233][ T6450] capability: warning: `syz.3.247' uses deprecated v2 capabilities in a way that may be insecure [ 124.219401][ T6488] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.956657][ T5866] Bluetooth: hci2: unexpected event 0x06 length: 124 > 3 [ 127.192810][ T6612] random: crng reseeded on system resumption [ 127.931330][ T31] audit: type=1800 audit(1754630051.127:4): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.350" name="dummy_udc" dev="gadgetfs" ino=6321 res=0 errno=0 [ 127.968687][ T6643] random: crng reseeded on system resumption [ 128.236218][ T6651] nfs: Bad value for 'source' [ 128.288592][ T31] audit: type=1800 audit(1754630051.477:5): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.348" name="trace_pipe" dev="tracefs" ino=178 res=0 errno=0 [ 128.357459][ T6659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.598861][ T6670] random: crng reseeded on system resumption [ 130.152134][ T31] audit: type=1800 audit(1754630053.347:6): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.387" name="version" dev="configfs" ino=8904 res=0 errno=0 [ 130.786194][ T6754] Invalid ELF header magic: != ELF [ 134.100719][ T5866] Bluetooth: hci2: unexpected event 0x32 length: 10 > 9 [ 134.473841][ T6917] syz.1.477(6917): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 136.628643][ T31] audit: type=1326 audit(1754630062.827:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.0.518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65be98ebe9 code=0x0 [ 136.813330][ T7007] ptrace attach of "./syz-executor exec"[5871] was attempted by "./syz-executor exec"[7007] [ 136.963711][ T7014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.976321][ T7015] futex_wake_op: syz.2.526 tries to shift op by -2048; fix this program [ 139.864876][ T7142] Unable to find swap-space signature [ 140.118345][ T7151] capability: warning: `syz.3.591' uses 32-bit capabilities (legacy support in use) [ 141.295671][ T31] audit: type=1800 audit(1754630067.497:8): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="discovery_nqn" dev="configfs" ino=11535 res=0 errno=0 [ 143.048625][ T7249] Unable to find swap-space signature [ 143.565497][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.572270][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.647874][ T7309] Process accounting paused [ 145.420080][ T3038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.584613][ T3038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.745788][ T3038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.759608][ T5866] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 146.023733][ T3038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.374655][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.392724][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.413456][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.430443][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.446170][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.480212][ T3038] bridge_slave_1: left allmulticast mode [ 146.524630][ T3038] bridge_slave_1: left promiscuous mode [ 146.541851][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.648940][ T3038] bridge_slave_0: left allmulticast mode [ 146.670356][ T3038] bridge_slave_0: left promiscuous mode [ 146.680589][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.928058][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.967136][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.985929][ T3038] bond0 (unregistering): Released all slaves [ 148.511596][ T5866] Bluetooth: hci2: command tx timeout [ 149.274772][ T3038] hsr_slave_0: left promiscuous mode [ 149.304488][ T3038] hsr_slave_1: left promiscuous mode [ 149.351492][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.391095][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.436417][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.464527][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.555275][ T3038] veth1_macvtap: left promiscuous mode [ 149.561553][ T3038] veth0_macvtap: left promiscuous mode [ 149.593967][ T3038] veth1_vlan: left promiscuous mode [ 149.612624][ T3038] veth0_vlan: left promiscuous mode [ 150.589617][ T5866] Bluetooth: hci2: command tx timeout [ 151.250173][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 151.385727][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 151.587553][ T7478] kexec: Could not allocate control_code_buffer [ 152.663161][ T5866] Bluetooth: hci2: command tx timeout [ 152.939081][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 153.399136][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.426453][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.448522][ T7352] bridge_slave_0: entered allmulticast mode [ 153.474000][ T7352] bridge_slave_0: entered promiscuous mode [ 153.489717][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.507354][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.533459][ T7352] bridge_slave_1: entered allmulticast mode [ 153.555840][ T7352] bridge_slave_1: entered promiscuous mode [ 153.696006][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.737952][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.112567][ T7352] team0: Port device team_slave_0 added [ 154.134111][ T7352] team0: Port device team_slave_1 added [ 154.364722][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.390111][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.474103][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.514364][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.537918][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.598357][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.717523][ T5866] Bluetooth: hci2: command tx timeout [ 154.876707][ T7352] hsr_slave_0: entered promiscuous mode [ 154.897681][ T7352] hsr_slave_1: entered promiscuous mode [ 154.936763][ T7352] debugfs: 'hsr0' already exists in 'hsr' [ 154.942770][ T7352] Cannot create hsr debugfs directory [ 155.784567][ T7352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.843625][ T7352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.907733][ T7352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.995201][ T7352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.345985][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.426742][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.495525][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.502816][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.585874][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.593139][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.404799][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.552837][ T7352] veth0_vlan: entered promiscuous mode [ 158.612731][ T7352] veth1_vlan: entered promiscuous mode [ 158.749579][ T7352] veth0_macvtap: entered promiscuous mode [ 158.797981][ T7352] veth1_macvtap: entered promiscuous mode [ 158.855096][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.910586][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.983746][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.023160][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.137649][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.203262][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.427812][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.452574][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.627820][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.685679][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.295137][ T7909] block2mtd: device name too long [ 162.828075][ T7931] delete_channel: no stack [ 163.204416][ T7944] syz.1.928 (7944): drop_caches: 0 [ 163.516897][ T9] Process accounting resumed [ 163.903295][ T7972] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 166.936077][ T8097] vhci_hcd: invalid port number 16 [ 166.965159][ T8097] vhci_hcd: invalid port number 16 [ 167.341439][ T8110] kAFS: Invalid Command on /proc/fs/afs/cells file [ 167.351547][ T8109] delete_channel: no stack [ 169.467663][ T31] audit: type=1800 audit(4294967314.415:9): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1032" name="trace_pipe" dev="tracefs" ino=135 res=0 errno=0 [ 169.856473][ T8212] binder: 8211:8212 ioctl 541b 38 returned -22 [ 170.104525][ T8222] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.1043: 7 [ 171.092058][ T8262] vhci_hcd: invalid port number 16 [ 171.097337][ T8262] vhci_hcd: invalid port number 16 [ 171.788124][ T8289] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 171.797626][ T8289] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 171.873704][ T8289] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 171.885324][ T8289] page_type: f5(slab) [ 171.895862][ T8289] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 171.905328][ T8289] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 171.933699][ T8289] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 171.944286][ T8289] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 171.959338][ T8289] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 172.007997][ T8289] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 172.019491][ T8289] page dumped because: unmovable page [ 172.025499][ T8289] page_owner tracks the page as allocated [ 172.035922][ T8289] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5238, tgid 5238 (udevadm), ts 43691002877, free_ts 38257171661 [ 172.115807][ T8289] post_alloc_hook+0x1c0/0x230 [ 172.133313][ T8289] get_page_from_freelist+0x132b/0x38e0 [ 172.140421][ T8289] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 172.144313][ T8298] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 172.154939][ T8289] alloc_pages_mpol+0x1fb/0x550 [ 172.161824][ T8289] new_slab+0x247/0x330 [ 172.174903][ T8289] ___slab_alloc+0xcf2/0x1740 [ 172.181782][ T8289] __slab_alloc.constprop.0+0x56/0xb0 [ 172.191396][ T8289] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 172.200183][ T8289] alloc_inode+0xc3/0x240 [ 172.204746][ T8289] iget_locked+0x2e4/0x830 [ 172.222542][ T8289] kernfs_get_inode+0x48/0x460 [ 172.245771][ T8289] kernfs_iop_lookup+0x1a7/0x2d0 [ 172.250919][ T8289] __lookup_slow+0x251/0x460 [ 172.266031][ T8289] walk_component+0x353/0x5b0 [ 172.270988][ T8289] path_lookupat+0x142/0x6d0 [ 172.288807][ T8289] filename_lookup+0x224/0x5f0 [ 172.293734][ T8289] page last free pid 1 tgid 1 stack trace: [ 172.338411][ T8289] __free_frozen_pages+0x7d5/0x10f0 [ 172.343723][ T8289] free_contig_range+0x183/0x4b0 [ 172.399058][ T8289] destroy_args+0x7f6/0xa60 [ 172.403923][ T8289] debug_vm_pgtable+0x1a32/0x3640 [ 172.431684][ T8289] do_one_initcall+0x120/0x6e0 [ 172.447168][ T8289] kernel_init_freeable+0x5c2/0x910 [ 172.452603][ T8289] kernel_init+0x1c/0x2b0 [ 172.469128][ T8289] ret_from_fork+0x5d7/0x6f0 [ 172.473930][ T8289] ret_from_fork_asm+0x1a/0x30 [ 173.434092][ T8339] [ 174.689216][ T8388] Process accounting resumed [ 175.762860][ T8433] hub 1-0:1.0: USB hub found [ 175.783637][ T8433] hub 1-0:1.0: 1 port detected [ 176.774259][ T8467] bond0: option mode: unable to set because the bond device is up [ 178.647888][ T8540] ima: policy update failed [ 178.674301][ T31] audit: type=1802 audit(4294967323.673:10): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1194" res=0 errno=0 [ 182.338658][ T8676] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 182.347341][ T8674] ima: policy update failed [ 182.444619][ T31] audit: type=1802 audit(4294967327.462:11): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1246" res=0 errno=0 [ 183.437112][ T8719] ceph: Failed to parse sending metrics switch value 'P^' [ 184.668021][ T8761] nvme_fcloop: unknown parameter or missing value '^/]' [ 185.137464][ T31] audit: type=1800 audit(4294967330.166:12): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1285" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 186.091118][ T8807] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.148234][ T8841] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 187.148234][ T8841] [ 193.569496][ T119] smpboot: CPU 1 is now offline [ 195.271401][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.756211][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.134783][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.366042][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.623186][ T59] bridge_slave_1: left allmulticast mode [ 196.648875][ T59] bridge_slave_1: left promiscuous mode [ 196.654783][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.724267][ T59] bridge_slave_0: left allmulticast mode [ 196.772523][ T59] bridge_slave_0: left promiscuous mode [ 196.805081][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.591249][ T9170] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 198.566487][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.580078][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.591460][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.615783][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.623537][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.464643][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.560805][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.600675][ T59] bond0 (unregistering): Released all slaves [ 199.806155][ T9216] bond0: Unable to set down delay as MII monitoring is disabled [ 200.637704][ T59] hsr_slave_0: left promiscuous mode [ 200.671807][ T59] hsr_slave_1: left promiscuous mode [ 200.708401][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.718016][ T5870] Bluetooth: hci2: command tx timeout [ 200.770981][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.894069][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.931191][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.058599][ T59] veth1_macvtap: left promiscuous mode [ 201.064471][ T59] veth0_macvtap: left promiscuous mode [ 201.137787][ T59] veth1_vlan: left promiscuous mode [ 201.196004][ T59] veth0_vlan: left promiscuous mode [ 202.790306][ T5870] Bluetooth: hci2: command tx timeout [ 203.169763][ T9288] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 203.243686][ T9288] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.312744][ T9288] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 203.347401][ T9288] page_type: f5(slab) [ 203.377420][ T9288] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 203.413927][ T9288] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 203.428552][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.452311][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.481802][ T9288] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 203.551260][ T9288] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 203.592882][ T9288] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 203.640048][ T9288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 203.693197][ T9288] page dumped because: unmovable page [ 203.725289][ T9288] page_owner tracks the page as allocated [ 203.781987][ T9288] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5238, tgid 5238 (udevadm), ts 43691002877, free_ts 38257171661 [ 203.863654][ T9288] post_alloc_hook+0x1c0/0x230 [ 203.883569][ T9288] get_page_from_freelist+0x132b/0x38e0 [ 203.901287][ T9288] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 204.000667][ T9288] alloc_pages_mpol+0x1fb/0x550 [ 204.005836][ T9288] new_slab+0x247/0x330 [ 204.010028][ T9288] ___slab_alloc+0xcf2/0x1740 [ 204.050431][ T9288] __slab_alloc.constprop.0+0x56/0xb0 [ 204.067536][ T9288] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 204.090161][ T9288] alloc_inode+0xc3/0x240 [ 204.094695][ T9288] iget_locked+0x2e4/0x830 [ 204.150046][ T9288] kernfs_get_inode+0x48/0x460 [ 204.154904][ T9288] kernfs_iop_lookup+0x1a7/0x2d0 [ 204.193168][ T9288] __lookup_slow+0x251/0x460 [ 204.197964][ T9288] walk_component+0x353/0x5b0 [ 204.226776][ T9288] path_lookupat+0x142/0x6d0 [ 204.239457][ T9288] filename_lookup+0x224/0x5f0 [ 204.263515][ T9288] page last free pid 1 tgid 1 stack trace: [ 204.284920][ T9288] __free_frozen_pages+0x7d5/0x10f0 [ 204.332065][ T9288] free_contig_range+0x183/0x4b0 [ 204.337072][ T9288] destroy_args+0x7f6/0xa60 [ 204.374330][ T9288] debug_vm_pgtable+0x1a32/0x3640 [ 204.396885][ T9288] do_one_initcall+0x120/0x6e0 [ 204.410404][ T9288] kernel_init_freeable+0x5c2/0x910 [ 204.435988][ T9288] kernel_init+0x1c/0x2b0 [ 204.448243][ T9288] ret_from_fork+0x5d7/0x6f0 [ 204.452998][ T9288] ret_from_fork_asm+0x1a/0x30 [ 204.616508][ T9288] Process accounting paused [ 204.705194][ T59] team0 (unregistering): Port device team_slave_1 removed [ 204.927141][ T59] team0 (unregistering): Port device team_slave_0 removed [ 205.732768][ T5870] Bluetooth: hci2: command 0x0419 tx timeout [ 205.739835][ T5854] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 207.540179][ T9192] chnl_net:caif_netlink_parms(): no params data found [ 207.801573][ T5870] Bluetooth: hci2: command 0x0419 tx timeout [ 207.820815][ T5854] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 208.298658][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.344719][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.393309][ T9192] bridge_slave_0: entered allmulticast mode [ 208.441972][ T9192] bridge_slave_0: entered promiscuous mode [ 208.487076][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.549300][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.609285][ T9192] bridge_slave_1: entered allmulticast mode [ 208.658494][ T9192] bridge_slave_1: entered promiscuous mode [ 208.963979][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.042153][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.357311][ T9192] team0: Port device team_slave_0 added [ 209.413667][ T9192] team0: Port device team_slave_1 added [ 209.673122][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.680499][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.870527][ T5870] Bluetooth: hci2: command 0x0419 tx timeout [ 209.877640][ T5854] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 209.898177][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.009217][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.087893][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.257150][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.587602][ T9192] hsr_slave_0: entered promiscuous mode [ 210.594064][ T9192] hsr_slave_1: entered promiscuous mode [ 210.655509][ T9192] debugfs: 'hsr0' already exists in 'hsr' [ 210.690533][ T9192] Cannot create hsr debugfs directory [ 211.908117][ T9192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.949320][ T5870] Bluetooth: hci2: command 0x0419 tx timeout [ 211.996288][ T9192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.144747][ T9192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.212104][ T9192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.793687][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.948332][ T9192] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.057081][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.064952][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.164991][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.172927][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.614383][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.474066][ T9192] veth0_vlan: entered promiscuous mode [ 216.559436][ T9192] veth1_vlan: entered promiscuous mode [ 216.778183][ T9192] veth0_macvtap: entered promiscuous mode [ 216.840484][ T9192] veth1_macvtap: entered promiscuous mode [ 216.967262][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.059670][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.233304][ T3003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.294864][ T3003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.373729][ T3003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.426177][ T3003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.800261][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.808393][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.064911][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.132372][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.464234][ T9655] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 218.495252][ T31] audit: type=1800 audit(4294967363.690:13): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1632" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 218.925843][ T9667] kAFS: Invalid Command on /proc/fs/afs/cells file [ 219.239026][ T9673] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 222.867260][ T9768] vhci_hcd: vhci_device speed not set [ 223.455582][ T9787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 224.594130][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 224.600802][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 227.140937][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 228.395554][ T9918] Invalid ELF header magic: != ELF [ 230.181288][ T9964] ima: policy update failed [ 230.206609][ T31] audit: type=1802 audit(4294967375.481:14): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1756" res=0 errno=0 [ 230.715254][ T9979] Setting dangerous option i915.mitigations - tainting kernel [ 230.771498][ T9979] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 232.588494][T10021] usbcore.quirks: string doesn't fit in 127 chars. [ 234.586302][T10066] Process accounting resumed [ 236.118928][T10107] block2mtd: illegal erase size [ 239.056886][T10187] ecryptfs_miscdev_write: Invalid packet size [192] [ 241.861431][ T31] audit: type=1400 audit(4294967387.161:15): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10252 comm="syz.5.1866" [ 242.739889][T10279] afs: Bad value for 'source' [ 242.762117][T10277] queue_state_write: operation too long [ 242.836621][T10277] queue_state_write: use 'run', 'start' or 'kick' [ 245.169552][T10339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 246.375390][ T5866] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 247.457681][T10391] block nbd14: the capability attribute has been deprecated. [ 248.556401][T10421] QAT: failed to copy from user. [ 253.831631][T10556] usb usb16: usbfs: process 10556 (syz.1.1985) did not claim interface 0 before use [ 257.285001][T10656] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 257.338584][T10656] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 257.408367][T10656] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 257.482545][T10656] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 257.549604][T10656] page dumped because: unmovable page [ 257.589447][T10656] page_owner info is not present (never set?) [ 260.329953][ T31] audit: type=1807 audit(4294967405.757:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 260.358021][T10736] ima: policy update failed [ 260.437255][ T31] audit: type=1802 audit(4294967405.757:17): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2060" res=0 errno=0 [ 260.582094][ T31] audit: type=1802 audit(4294967405.787:18): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2060" res=0 errno=0 [ 264.731742][T10796] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 264.832057][T10850] Process accounting paused [ 265.063926][T10860] kernel profiling enabled (shift: 0) [ 265.824480][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.831203][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.953759][T10860] syz.1.2108: vmalloc error: size 709750784, failed to allocated page array size 1386232, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.134615][T10860] CPU: 0 UID: 0 PID: 10860 Comm: syz.1.2108 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 268.134655][T10860] Tainted: [U]=USER [ 268.134663][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.134680][T10860] Call Trace: [ 268.134688][T10860] [ 268.134697][T10860] dump_stack_lvl+0x16c/0x1f0 [ 268.134730][T10860] warn_alloc+0x248/0x3a0 [ 268.134760][T10860] ? __pfx_warn_alloc+0x10/0x10 [ 268.134800][T10860] ? profile_init+0xd5/0x130 [ 268.134834][T10860] ? __vmalloc_node_noprof+0xad/0xf0 [ 268.134861][T10860] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 268.134894][T10860] ? profile_init+0xd5/0x130 [ 268.134936][T10860] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.134961][T10860] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 268.134992][T10860] ? rcu_is_watching+0x12/0xc0 [ 268.135022][T10860] ? profile_init+0xd5/0x130 [ 268.135054][T10860] __vmalloc_node_noprof+0xad/0xf0 [ 268.135076][T10860] ? profile_init+0xd5/0x130 [ 268.135111][T10860] ? __pfx_profiling_store+0x10/0x10 [ 268.135144][T10860] profile_init+0xd5/0x130 [ 268.135179][T10860] profiling_store+0x7b/0x120 [ 268.135213][T10860] kobj_attr_store+0x55/0x80 [ 268.135239][T10860] ? __pfx_kobj_attr_store+0x10/0x10 [ 268.135266][T10860] sysfs_kf_write+0xf2/0x150 [ 268.135294][T10860] kernfs_fop_write_iter+0x354/0x510 [ 268.135315][T10860] ? __pfx_sysfs_kf_write+0x10/0x10 [ 268.135344][T10860] vfs_write+0x6c4/0x1150 [ 268.135373][T10860] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 268.135397][T10860] ? __pfx___mutex_lock+0x10/0x10 [ 268.135430][T10860] ? __pfx_vfs_write+0x10/0x10 [ 268.135478][T10860] ksys_write+0x12a/0x250 [ 268.135506][T10860] ? __pfx_ksys_write+0x10/0x10 [ 268.135543][T10860] do_syscall_64+0xcd/0x490 [ 268.135572][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.135596][T10860] RIP: 0033:0x7f69d9b8ebe9 [ 268.135618][T10860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.135645][T10860] RSP: 002b:00007f69daa24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.135666][T10860] RAX: ffffffffffffffda RBX: 00007f69d9db5fa0 RCX: 00007f69d9b8ebe9 [ 268.135681][T10860] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000003 [ 268.135695][T10860] RBP: 00007f69d9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.135708][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.135722][T10860] R13: 00007f69d9db6038 R14: 00007f69d9db5fa0 R15: 00007ffdb2f457d8 [ 268.135752][T10860] [ 268.423763][T10860] Mem-Info: [ 268.427144][T10860] active_anon:6095 inactive_anon:0 isolated_anon:0 [ 268.427144][T10860] active_file:13626 inactive_file:39954 isolated_file:0 [ 268.427144][T10860] unevictable:768 dirty:278 writeback:0 [ 268.427144][T10860] slab_reclaimable:10506 slab_unreclaimable:94619 [ 268.427144][T10860] mapped:24387 shmem:1370 pagetables:1330 [ 268.427144][T10860] sec_pagetables:0 bounce:0 [ 268.427144][T10860] kernel_misc_reclaimable:0 [ 268.427144][T10860] free:1318907 free_pcp:1857 free_cma:0 [ 268.473659][T10860] Node 0 active_anon:24380kB inactive_anon:0kB active_file:54444kB inactive_file:159616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97488kB dirty:1108kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11664kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.507607][T10860] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.539493][T10860] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.569347][T10860] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 268.575421][T10860] Node 0 DMA32 free:1350864kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24332kB inactive_anon:0kB active_file:54444kB inactive_file:158304kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2539660kB mlocked:0kB bounce:0kB free_pcp:2020kB local_pcp:2020kB free_cma:0kB [ 268.610447][T10860] lowmem_reserve[]: 0 0 1 1 1 [ 268.616505][T10860] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 268.646665][T10860] lowmem_reserve[]: 0 0 0 0 0 [ 268.651488][T10860] Node 1 Normal free:3909392kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5376kB local_pcp:5376kB free_cma:0kB [ 268.709534][T10860] lowmem_reserve[]: 0 0 0 0 0 [ 268.714447][T10860] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.727479][T10860] Node 0 DMA32: 520*4kB (UME) 529*8kB (M) 671*16kB (UM) 477*32kB (ME) 230*64kB (ME) 44*128kB (UME) 35*256kB (ME) 12*512kB (ME) 3*1024kB (ME) 1*2048kB (U) 312*4096kB (M) = 1350840kB [ 268.843577][T10860] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 268.913316][T10860] Node 1 Normal: 228*4kB (UE) 56*8kB (UE) 30*16kB (UE) 261*32kB (UE) 95*64kB (UME) 19*128kB (UME) 6*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3909392kB [ 268.976414][T10860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.039684][T10860] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 269.078123][T10860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.122022][T10860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.152280][T10860] 54945 total pagecache pages [ 269.161599][T10860] 0 pages in swap cache [ 269.181659][T10860] Free swap = 124996kB [ 269.211745][T10860] Total swap = 124996kB [ 269.220160][T10860] 2097051 pages RAM [ 269.244741][T10860] 0 pages HighMem/MovableOnly [ 269.281263][T10860] 430174 pages reserved [ 269.301399][T10860] 0 pages cma reserved [ 270.117816][T10963] Ignoring unsupported numa_zonelist_order value: [ 270.117816][T10963] [ 273.833201][T11053] program syz.2.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.398209][T11097] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 279.985931][ T31] audit: type=1400 audit(4294967425.509:19): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11225 comm="syz.2.2273" [ 280.493801][T11240] binder: 11239:11240 ioctl c0306201 200000000300 returned -14 [ 281.057963][ T31] audit: type=1800 audit(4294967426.585:20): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2287" name="lu_gp_id" dev="configfs" ino=24487 res=0 errno=0 [ 285.390578][T11372] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 287.335210][T11429] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2373' sets config #32769 [ 287.693228][T11441] vhci_hcd: invalid port number 23 [ 287.717021][T11441] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 288.817792][T11466] block2mtd: illegal erase size [ 292.926363][T11577] program syz.5.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.933205][T11604] kfence: disabled [ 294.985090][T11627] Process accounting resumed [ 295.845027][T11657] warning: `syz.2.2466' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 296.110578][T11663] vivid-003: ================= START STATUS ================= [ 296.139466][T11663] vivid-003: Radio HW Seek Mode: Bounded [ 296.164982][T11663] vivid-003: Radio Programmable HW Seek: false [ 296.195250][T11663] vivid-003: RDS Rx I/O Mode: Block I/O [ 296.242525][T11663] vivid-003: Generate RBDS Instead of RDS: false [ 296.288734][T11663] vivid-003: RDS Reception: true [ 296.325879][T11663] vivid-003: RDS Program Type: 0 inactive [ 296.349113][T11663] vivid-003: RDS PS Name: inactive [ 296.358182][T11667] syz.0.2471 uses obsolete (PF_INET,SOCK_PACKET) [ 296.381904][T11663] vivid-003: RDS Radio Text: inactive [ 296.409385][T11663] vivid-003: RDS Traffic Announcement: false inactive [ 296.459931][T11663] vivid-003: RDS Traffic Program: false inactive [ 296.477730][T11663] vivid-003: RDS Music: false inactive [ 296.529558][T11663] vivid-003: ================== END STATUS ================== [ 296.929226][T11681] db_root: cannot open: Y [ 297.474809][T11699] Invalid input. Must be >= 4608 [ 305.816600][ T31] audit: type=1800 audit(4294967451.474:21): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2592" name="members" dev="configfs" ino=26478 res=0 errno=0 [ 305.925290][T11920] cougar: G6 mapped to F18 [ 306.378504][T11930] i2c i2c-0: delete_device: Can't find device in list [ 310.937839][ T5866] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 317.245425][ T5866] Bluetooth: hci2: unexpected event 0x3d length: 3 < 14 [ 317.770323][T12253] i2c i2c-0: delete_device: Extra parameters [ 318.823899][T12277] i2c i2c-0: delete_device: Extra parameters [ 319.833137][T12306] ecryptfs_miscdev_write: Error while inspecting packet size [ 320.984094][T12341] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 320.984094][T12341] M' is too long [ 321.037997][T12341] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 321.037997][T12341] W ' is too long [ 322.231693][ T5866] Bluetooth: hci0: unexpected event 0x3d length: 3 < 14 [ 322.763242][T12382] program syz.5.2820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.837410][T12382] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.144978][T12434] Process accounting paused [ 326.949189][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.955878][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.761716][ T5866] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14 [ 331.515483][ T5866] Bluetooth: hci3: unexpected event 0x3d length: 3 < 14 [ 332.060391][ T5866] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 332.060423][ T5866] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 333.443911][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.452340][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.345609][T12680] WARNING! power/level is deprecated; use power/control instead syzkaller syzkaller login: [ 337.656984][T12780] cougar: G6 mapped to space [ 338.854160][T12814] program syz.5.3029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.283734][T12825] synth uevent: /bus/mei: unknown uevent action string syzkaller syzkaller login: [ 339.844387][T12841] program syz.2.3042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.923974][T12976] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 349.422659][T13104] : Can't lookup blockdev [ 352.166117][T13180] program syz.2.3209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.852777][T13245] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 355.014430][T13235] Process accounting resumed [ 361.087104][T13406] mmap: syz.5.3319 (13406): VmData 45809664 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 368.145988][T13612] bond0: no command found in slaves file - use +ifname or -ifname [ 373.478220][T13767] futex_wake_op: syz.1.3498 tries to shift op by 64; fix this program [ 376.173411][T13847] dyndbg: expected <4096 bytes into control [ 376.586939][T13862] aoe: can't write to that file. [ 377.761079][T13898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 379.112131][T13937] __vm_enough_memory: pid: 13937, comm: syz.0.3581, bytes: 4398046511104 not enough memory for the allocation [ 381.822765][T14037] i2c i2c-0: delete_device: Can't parse I2C address [ 381.852941][T14040] QAT: Invalid ioctl 21531 [ 385.023206][T14144] Process accounting paused [ 386.142535][T14193] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 386.648706][ T5866] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 386.795928][T14214] sysfs_service_op_show: Client not running :-5: [ 388.072126][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.078690][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.850793][ T31] audit: type=1800 audit(4294985886.946:22): pid=14324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3734" name="members" dev="configfs" ino=34153 res=0 errno=0 [ 390.540489][T14349] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 390.566607][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.730266][T14349] CIFS mount error: No usable UNC path provided in device string! [ 390.730266][T14349] [ 390.799768][T14349] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.192027][T14573] vhci_hcd: invalid port number 16 [ 397.228343][T14573] vhci_hcd: invalid port number 16 [ 399.115544][T14641] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 399.159097][ T5866] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 399.683407][T14662] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 399.997440][ T5866] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 399.997472][ T5866] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 400.015124][ T5866] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 400.015200][ T5866] Bluetooth: hci1: Malformed LE Event: 0x0d [ 400.338513][T14678] nvme_fabrics: missing parameter 'transport=%s' [ 400.361094][T14678] nvme_fabrics: missing parameter 'nqn=%s' [ 406.302620][T14889] kafs: addr_prefs: Too many elements in string [ 407.276304][ T5866] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 408.088119][T14965] overlayfs: "check_copy_up" module option is obsolete [ 410.124284][T15032] usb usb24: check_ctrlrecip: process 15032 (syz.2.3998) requesting ep 01 but needs 81 [ 410.186840][T15032] usb usb24: usbfs: process 15032 (syz.2.3998) did not claim interface 0 before use [ 414.250836][ T5866] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 415.195884][T15185] Process accounting resumed [ 416.768077][T15250] random: crng reseeded on system resumption [ 420.802649][T15390] ptp ptp0: only physical clock in use now [ 421.086956][T15402] block2mtd: illegal erase size [ 421.377709][T15409] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 422.436851][T15446] queue_state_write: unsupported operation '' [ 422.442985][T15446] queue_state_write: use 'run', 'start' or 'kick' [ 423.396852][T15477] hub 8-0:1.0: Interface 0 is not authorized for usage [ 423.447087][T15477] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 425.958121][T15575] blkio.reset_stats is deprecated [ 427.763436][T15642] ACPI: Can not change Invalid GPE/Fixed Event status [ 428.082520][T15653] : Can't lookup blockdev [ 428.365117][T15661] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 432.882638][T15818] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 435.864867][T15918] block2mtd: parameter too long [ 437.683260][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 438.881729][T16018] bond0: no command found in slaves file - use +ifname or -ifname [ 439.657017][T16046] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f729 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 439.673060][T16046] Call Trace: [ 439.676420][T16046] [ 439.679421][T16046] mce_cpu_restart+0x98/0xb0 [ 439.684233][T16046] ? __pfx_mce_cpu_restart+0x10/0x10 [ 439.689602][T16046] smp_call_function_many_cond+0x1227/0x1600 [ 439.695649][T16046] ? __pfx_mce_cpu_restart+0x10/0x10 [ 439.701080][T16046] ? mark_held_locks+0x49/0x80 [ 439.706153][T16046] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 439.712192][T16046] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.717637][T16046] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 439.723511][T16046] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 439.729948][T16046] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 439.735998][T16046] ? __pfx_mce_cpu_restart+0x10/0x10 [ 439.741315][T16046] on_each_cpu_cond_mask+0x40/0x90 [ 439.746460][T16046] set_bank+0x240/0x3a0 [ 439.750695][T16046] ? __pfx_set_bank+0x10/0x10 [ 439.755756][T16046] ? find_held_lock+0x2b/0x80 [ 439.760578][T16046] ? __pfx_set_bank+0x10/0x10 [ 439.765405][T16046] dev_attr_store+0x55/0x80 [ 439.769958][T16046] ? __pfx_dev_attr_store+0x10/0x10 [ 439.775236][T16046] sysfs_kf_write+0xf2/0x150 [ 439.780320][T16046] kernfs_fop_write_iter+0x354/0x510 [ 439.785781][T16046] ? __pfx_sysfs_kf_write+0x10/0x10 [ 439.791253][T16046] vfs_write+0x6c4/0x1150 [ 439.795623][T16046] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 439.801648][T16046] ? __pfx___mutex_lock+0x10/0x10 [ 439.806714][T16046] ? __pfx_vfs_write+0x10/0x10 [ 439.811576][T16046] ksys_write+0x12a/0x250 [ 439.815935][T16046] ? __pfx_ksys_write+0x10/0x10 [ 439.820838][T16046] do_syscall_64+0xcd/0x490 [ 439.825568][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.831628][T16046] RIP: 0033:0x7f951f58ebe9 [ 439.836059][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.855883][T16046] RSP: 002b:00007f952034b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.864863][T16046] RAX: ffffffffffffffda RBX: 00007f951f7b5fa0 RCX: 00007f951f58ebe9 [ 439.873034][T16046] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 439.881459][T16046] RBP: 00007f951f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 439.889654][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.897858][T16046] R13: 00007f951f7b6038 R14: 00007f951f7b5fa0 R15: 00007ffd9e72b618 [ 439.905940][T16046] [ 441.129971][T16087] Setting dangerous option i915.mitigations - tainting kernel [ 442.596774][T16135] XFS: irix_symlink_mode sysctl option is deprecated. [ 443.108794][T16155] program syz.1.4452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.226723][T16160] vhci_hcd: invalid port number 255 [ 444.769085][T16214] sysfs_service_op_store: Client not running :-5: [ 445.199599][T16225] Process accounting paused [ 445.343699][T16231] [U]  [ 446.124488][T16266] i2c i2c-0: new_device: Missing parameters [ 447.418411][ T5866] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12 [ 448.434559][T16348] usb usb6: usbfs: process 16348 (syz.5.4526) did not claim interface 0 before use [ 448.996175][T16366] QAT: failed to copy from user cfg_data. [ 449.215959][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.222470][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.424478][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 529.291045][T18823] udc dummy_udc.0: soft-connect without a gadget driver [ 530.205931][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5577'. [ 530.612698][T18877] nbd: must specify at least one socket [ 530.879301][T18885] syz.0.5587 (18885): attempted to duplicate a private mapping with mremap. This is not supported. [ 532.871194][T18972] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 534.069580][T19008] vhci_hcd: invalid port number 21 [ 534.171859][T19010] netlink: zone id is out of range [ 534.209597][T19010] netlink: zone id is out of range [ 534.711182][T19023] netlink: 'syz.1.5640': attribute type 1 has an invalid length. [ 534.924865][T19021] syz.0.5639 (19021) used greatest stack depth: 19752 bytes left [ 535.419338][T19026] Process accounting resumed [ 535.998394][T19049] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 536.698979][T19067] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 536.862905][T19071] FAULT_INJECTION: forcing a failure. [ 536.862905][T19071] name failslab, interval 1, probability 0, space 0, times 1 [ 536.899997][T19072] ima: policy update failed [ 536.912455][ T31] audit: type=1802 audit(4294986037.769:31): pid=19072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5663" res=0 errno=0 [ 536.939289][T19071] CPU: 0 UID: 0 PID: 19071 Comm: syz.1.5662 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 536.939332][T19071] Tainted: [U]=USER [ 536.939339][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.939353][T19071] Call Trace: [ 536.939360][T19071] [ 536.939369][T19071] dump_stack_lvl+0x16c/0x1f0 [ 536.939399][T19071] should_fail_ex+0x512/0x640 [ 536.939430][T19071] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 536.939463][T19071] should_failslab+0xc2/0x120 [ 536.939504][T19071] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 536.939533][T19071] ? create_new_namespaces+0x30/0xa90 [ 536.939564][T19071] create_new_namespaces+0x30/0xa90 [ 536.939590][T19071] ? bpf_lsm_capable+0x9/0x10 [ 536.939611][T19071] ? security_capable+0x7e/0x260 [ 536.939650][T19071] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 536.939680][T19071] ksys_unshare+0x45b/0xa40 [ 536.939713][T19071] ? __pfx_ksys_unshare+0x10/0x10 [ 536.939746][T19071] ? xfd_validate_state+0x61/0x180 [ 536.939790][T19071] __x64_sys_unshare+0x31/0x40 [ 536.939823][T19071] do_syscall_64+0xcd/0x490 [ 536.939853][T19071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.939876][T19071] RIP: 0033:0x7f69d9b8ebe9 [ 536.939893][T19071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.939917][T19071] RSP: 002b:00007f69daa24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 536.939939][T19071] RAX: ffffffffffffffda RBX: 00007f69d9db5fa0 RCX: 00007f69d9b8ebe9 [ 536.939954][T19071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 536.939968][T19071] RBP: 00007f69d9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 536.939981][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.939996][T19071] R13: 00007f69d9db6038 R14: 00007f69d9db5fa0 R15: 00007ffdb2f457d8 [ 536.940026][T19071] [ 538.589940][T19101] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5676'. [ 538.829688][T19104] openvswitch: netlink: IP tunnel dst address not specified [ 539.475105][T19120] netlink: 'syz.1.5685': attribute type 11 has an invalid length. [ 539.508077][T19122] phram: parameter too long [ 539.744996][T19127] netlink: 'syz.5.5688': attribute type 1 has an invalid length. [ 540.154243][T19138] nbd: illegal input index 2147483647 [ 540.581537][T19152] binder: 19150:19152 ioctl c0306201 2000000000c0 returned -14 [ 541.359412][T19174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5708'. [ 541.393111][T19174] tc_dump_action: action bad kind [ 543.664806][T19240] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 544.798839][T19281] FAULT_INJECTION: forcing a failure. [ 544.798839][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 544.885541][T19281] CPU: 0 UID: 0 PID: 19281 Comm: syz.1.5757 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 544.885581][T19281] Tainted: [U]=USER [ 544.885588][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.885602][T19281] Call Trace: [ 544.885609][T19281] [ 544.885618][T19281] dump_stack_lvl+0x16c/0x1f0 [ 544.885649][T19281] should_fail_ex+0x512/0x640 [ 544.885677][T19281] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 544.885714][T19281] should_failslab+0xc2/0x120 [ 544.885746][T19281] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 544.885774][T19281] ? d_instantiate+0x77/0x90 [ 544.885804][T19281] ? alloc_empty_file+0x55/0x1e0 [ 544.885843][T19281] alloc_empty_file+0x55/0x1e0 [ 544.885889][T19281] alloc_file_pseudo+0x13a/0x230 [ 544.885925][T19281] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 544.885968][T19281] ? security_inode_init_security_anon+0x79/0x240 [ 544.886000][T19281] __anon_inode_getfile+0xe8/0x280 [ 544.886034][T19281] new_userfaultfd+0x25e/0x3d0 [ 544.886071][T19281] __x64_sys_userfaultfd+0x4b/0xb0 [ 544.886095][T19281] do_syscall_64+0xcd/0x490 [ 544.886124][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.886147][T19281] RIP: 0033:0x7f69d9b8ebe9 [ 544.886165][T19281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.886188][T19281] RSP: 002b:00007f69daa24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 544.886212][T19281] RAX: ffffffffffffffda RBX: 00007f69d9db5fa0 RCX: 00007f69d9b8ebe9 [ 544.886227][T19281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 544.886241][T19281] RBP: 00007f69d9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 544.886254][T19281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.886267][T19281] R13: 00007f69d9db6038 R14: 00007f69d9db5fa0 R15: 00007ffdb2f457d8 [ 544.886296][T19281] [ 545.161383][T19286] ======================================================= [ 545.161383][T19286] WARNING: The mand mount option has been deprecated and [ 545.161383][T19286] and is ignored by this kernel. Remove the mand [ 545.161383][T19286] option from the mount to silence this warning. [ 545.161383][T19286] ======================================================= [ 545.668308][T19301] Zero length message leads to an empty skb [ 546.163217][T19321] openvswitch: netlink: Missing valid actions attribute. [ 546.721362][ T31] audit: type=1800 audit(4294986047.641:32): pid=19338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5782" name="dbroot" dev="configfs" ino=48131 res=0 errno=0 [ 547.698741][T19359] .SR: entered promiscuous mode [ 547.778175][T19366] openvswitch: netlink: Key type 29 is not supported [ 548.013181][ T31] audit: type=1800 audit(4294986048.937:33): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5797" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 549.522193][T19425] usb usb37: usbfs: process 19425 (syz.1.5822) did not claim interface 0 before use [ 549.967377][T19440] bond0: option lp_interval: invalid value () [ 550.011250][T19440] bond0: option lp_interval: allowed values 1 - 2147483647 [ 550.843017][T19468] bond0: option lp_interval: invalid value () [ 550.870338][T19468] bond0: option lp_interval: allowed values 1 - 2147483647 [ 550.914485][T19473] openvswitch: netlink: Multiple metadata blocks provided [ 553.077074][T19549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 554.124920][T19575] syz.2.5892 (19575) used obsolete PPPIOCDETACH ioctl [ 555.597262][T19621] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 557.257314][T19662] netlink: 'syz.5.5925': attribute type 1 has an invalid length. [ 557.458829][T18375] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 558.752909][T19723] netlink: 'syz.2.5940': attribute type 1 has an invalid length. [ 559.217576][T19738] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 559.391193][T19744] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5952'. [ 561.120988][T19798] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5976'. [ 561.636137][T19809] FAULT_INJECTION: forcing a failure. [ 561.636137][T19809] name failslab, interval 1, probability 0, space 0, times 0 [ 561.720509][T19809] CPU: 0 UID: 0 PID: 19809 Comm: syz.1.5981 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 561.720553][T19809] Tainted: [U]=USER [ 561.720561][T19809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.720576][T19809] Call Trace: [ 561.720584][T19809] [ 561.720594][T19809] dump_stack_lvl+0x16c/0x1f0 [ 561.720628][T19809] should_fail_ex+0x512/0x640 [ 561.720660][T19809] ? fs_reclaim_acquire+0xae/0x150 [ 561.720703][T19809] should_failslab+0xc2/0x120 [ 561.720738][T19809] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 561.720771][T19809] ? security_inode_alloc+0x3b/0x2b0 [ 561.720800][T19809] security_inode_alloc+0x3b/0x2b0 [ 561.720826][T19809] inode_init_always_gfp+0xce4/0x1030 [ 561.720861][T19809] alloc_inode+0x86/0x240 [ 561.720899][T19809] sock_alloc+0x40/0x280 [ 561.720932][T19809] __sock_create+0xc1/0x8d0 [ 561.720969][T19809] ? lockdep_init_map_type+0x5c/0x280 [ 561.721010][T19809] smc_create+0x15d/0x2a0 [ 561.721053][T19809] __sock_create+0x338/0x8d0 [ 561.721096][T19809] __sys_socket+0x14d/0x260 [ 561.721144][T19809] ? __pfx___sys_socket+0x10/0x10 [ 561.721183][T19809] ? xfd_validate_state+0x61/0x180 [ 561.721222][T19809] ? __pfx_ksys_write+0x10/0x10 [ 561.721260][T19809] __x64_sys_socket+0x72/0xb0 [ 561.721298][T19809] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.721325][T19809] do_syscall_64+0xcd/0x490 [ 561.721357][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.721385][T19809] RIP: 0033:0x7f69d9b8ebe9 [ 561.721405][T19809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.721430][T19809] RSP: 002b:00007f69daa24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 561.721454][T19809] RAX: ffffffffffffffda RBX: 00007f69d9db5fa0 RCX: 00007f69d9b8ebe9 [ 561.721471][T19809] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 561.721486][T19809] RBP: 00007f69d9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.721501][T19809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.721516][T19809] R13: 00007f69d9db6038 R14: 00007f69d9db5fa0 R15: 00007ffdb2f457d8 [ 561.721552][T19809] [ 561.721643][T19809] socket: no more sockets [ 563.813139][T18375] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 564.281544][T19898] ptp ptp0: only physical clock in use now [ 565.138410][T19925] : entered promiscuous mode [ 565.679226][T19910] Process accounting paused [ 566.658290][T19976] openvswitch: netlink: IP tunnel dst address not specified [ 568.736811][T20020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.760936][T20020] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 568.816254][T20020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.842829][T20020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 568.873778][T20020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.895073][T20020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 568.949790][T20020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 569.997307][T18375] Bluetooth: hci0: command 0x0406 tx timeout [ 570.875470][T18375] Bluetooth: hci3: command 0x0406 tx timeout [ 570.882249][T18375] Bluetooth: hci1: command 0x0406 tx timeout [ 571.436225][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.442987][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.573056][T20129] futex_wake_op: syz.0.6099 tries to shift op by -9; fix this program [ 571.831456][T20139] netlink: 'syz.1.6104': attribute type 1 has an invalid length. [ 572.069438][T20108] Bluetooth: hci0: command 0x0406 tx timeout [ 572.592919][T20163] openvswitch: netlink: IP tunnel dst address not specified [ 572.942075][T20108] Bluetooth: hci1: command 0x0406 tx timeout [ 572.948562][T20108] Bluetooth: hci3: command 0x0406 tx timeout [ 574.336903][T20223] perf: Dynamic interrupt throttling disabled, can hang your system! [ 575.011170][T20108] Bluetooth: hci3: command 0x0406 tx timeout [ 575.556031][T20248] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 576.058855][T20268] netlink: 'syz.2.6163': attribute type 1 has an invalid length. [ 577.686446][T20321] netlink: 'syz.1.6188': attribute type 1 has an invalid length. [ 579.334034][T20373] ksmbd: Unknown IPC event: 14, ignore. [ 582.512462][T20484] FAULT_INJECTION: forcing a failure. [ 582.512462][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 582.573780][T20484] CPU: 0 UID: 0 PID: 20484 Comm: syz.0.6263 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 582.573820][T20484] Tainted: [U]=USER [ 582.573828][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.573842][T20484] Call Trace: [ 582.573849][T20484] [ 582.573858][T20484] dump_stack_lvl+0x16c/0x1f0 [ 582.573888][T20484] should_fail_ex+0x512/0x640 [ 582.573917][T20484] ? __kvmalloc_node_noprof+0x124/0x620 [ 582.573947][T20484] should_failslab+0xc2/0x120 [ 582.573979][T20484] __kvmalloc_node_noprof+0x137/0x620 [ 582.574011][T20484] ? io_alloc_cache_init+0x33/0x170 [ 582.574047][T20484] ? io_alloc_cache_init+0x33/0x170 [ 582.574075][T20484] io_alloc_cache_init+0x33/0x170 [ 582.574107][T20484] io_uring_setup+0x5e1/0x2080 [ 582.574136][T20484] ? __pfx_io_uring_setup+0x10/0x10 [ 582.574160][T20484] ? do_futex+0x122/0x350 [ 582.574191][T20484] ? __pfx_do_futex+0x10/0x10 [ 582.574236][T20484] ? xfd_validate_state+0x61/0x180 [ 582.574270][T20484] ? __pfx_ksys_write+0x10/0x10 [ 582.574303][T20484] __x64_sys_io_uring_setup+0xc2/0x170 [ 582.574330][T20484] do_syscall_64+0xcd/0x490 [ 582.574359][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.574382][T20484] RIP: 0033:0x7f65be98ebe9 [ 582.574400][T20484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.574423][T20484] RSP: 002b:00007f65bf743038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 582.574444][T20484] RAX: ffffffffffffffda RBX: 00007f65bebb5fa0 RCX: 00007f65be98ebe9 [ 582.574459][T20484] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 582.574473][T20484] RBP: 00007f65bea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 582.574496][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.574510][T20484] R13: 00007f65bebb6038 R14: 00007f65bebb5fa0 R15: 00007ffc4f3cdd18 [ 582.574539][T20484] [ 582.783745][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.999503][T20494] netlink: 'syz.0.6267': attribute type 1 has an invalid length. [ 586.931269][T20597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6312'. [ 588.294106][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6327'. [ 591.212914][T20732] openvswitch: netlink: Flow key attr not present in new flow. [ 593.235919][T20785] tc_dump_action: action bad kind [ 595.469247][T20840] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6410'. [ 595.637287][T20839] Process accounting resumed [ 597.822725][T20918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6444'. [ 599.177649][T20954] svc: failed to register nfsdv3 RPC service (errno 111). [ 599.226991][T20954] svc: failed to register nfsaclv3 RPC service (errno 111). [ 599.943098][T20983] nbd: illegal input index -5 [ 600.412687][T20997] zram: Removed device: zram0 [ 601.239271][T21020] program syz.0.6487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.956807][T21042] writing to auto_msgmni has no effect [ 603.293791][T21082] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 604.317678][T21125] netlink: 'syz.2.6527': attribute type 1 has an invalid length. [ 604.672264][T21138] binder_alloc: binder_alloc_mmap_handler: 21134 0-1000 already mapped failed -16 [ 605.155152][T21153] netlink: 338 bytes leftover after parsing attributes in process `syz.5.6540'. [ 605.207004][T21153] netlink: 338 bytes leftover after parsing attributes in process `syz.5.6540'. [ 605.417147][T21162] kafs: addr_prefs: Invalid Command [ 605.600452][T21167] FAULT_INJECTION: forcing a failure. [ 605.600452][T21167] name failslab, interval 1, probability 0, space 0, times 0 [ 605.630442][T21167] CPU: 0 UID: 0 PID: 21167 Comm: syz.1.6546 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 605.630483][T21167] Tainted: [U]=USER [ 605.630490][T21167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.630503][T21167] Call Trace: [ 605.630511][T21167] [ 605.630520][T21167] dump_stack_lvl+0x16c/0x1f0 [ 605.630550][T21167] should_fail_ex+0x512/0x640 [ 605.630583][T21167] should_failslab+0xc2/0x120 [ 605.630616][T21167] __kmalloc_cache_noprof+0x6a/0x3e0 [ 605.630641][T21167] ? proc_thread_self_get_link+0x1c6/0x240 [ 605.630678][T21167] proc_thread_self_get_link+0x1c6/0x240 [ 605.630710][T21167] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 605.630742][T21167] step_into+0x195b/0x2270 [ 605.630772][T21167] ? __pfx_step_into+0x10/0x10 [ 605.630800][T21167] ? lookup_fast+0x156/0x610 [ 605.630827][T21167] walk_component+0xfc/0x5b0 [ 605.630853][T21167] link_path_walk+0x627/0xe20 [ 605.630888][T21167] path_openat+0x1b0/0x2cb0 [ 605.630913][T21167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.630947][T21167] ? __pfx_path_openat+0x10/0x10 [ 605.630983][T21167] do_filp_open+0x20b/0x470 [ 605.631011][T21167] ? __pfx_do_filp_open+0x10/0x10 [ 605.631059][T21167] ? alloc_fd+0x471/0x7d0 [ 605.631092][T21167] do_sys_openat2+0x11b/0x1d0 [ 605.631132][T21167] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.631181][T21167] __x64_sys_openat+0x174/0x210 [ 605.631218][T21167] ? __pfx___x64_sys_openat+0x10/0x10 [ 605.631275][T21167] do_syscall_64+0xcd/0x490 [ 605.631306][T21167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.631329][T21167] RIP: 0033:0x7f69d9b8ebe9 [ 605.631349][T21167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.631372][T21167] RSP: 002b:00007f69daa24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.631395][T21167] RAX: ffffffffffffffda RBX: 00007f69d9db5fa0 RCX: 00007f69d9b8ebe9 [ 605.631463][T21167] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 605.631477][T21167] RBP: 00007f69d9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.631491][T21167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.631505][T21167] R13: 00007f69d9db6038 R14: 00007f69d9db5fa0 R15: 00007ffdb2f457d8 [ 605.631534][T21167] [ 606.092235][T21175] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 608.078214][T21232] svc: failed to register nfsdv3 RPC service (errno 111). [ 608.114876][T21232] svc: failed to register nfsaclv3 RPC service (errno 111). [ 608.467300][T21253] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 608.467300][T21253] program syz.5.6584 not setting count and/or reply_len properly [ 609.516026][T21288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 611.421056][T21348] random: crng reseeded on system resumption [ 614.347819][T21456] openvswitch: netlink: IPv4 tunnel dst address is zero [ 615.390296][T21439] kexec: Could not allocate control_code_buffer [ 615.451087][T21479] sg_read: process 3577 (syz.1.6674) changed security contexts after opening file descriptor, this is not allowed. [ 616.270869][T21502] perf: Dynamic interrupt throttling disabled, can hang your system! [ 617.845189][T21544] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 620.791006][ T31] audit: type=1800 audit(4294986122.086:34): pid=21634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6739" name="dbroot" dev="configfs" ino=55481 res=0 errno=0 [ 621.543861][T21657] netlink: 'syz.1.6750': attribute type 1 has an invalid length. [ 621.587351][T21661] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekelevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 624.463647][T21735] [ 624.463647][T21735] but task is already holding lock: [ 624.471304][T21735] ffff88802611a7e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 624.483022][T21735] [ 624.483022][T21735] which lock already depends on the new lock. [ 624.483022][T21735] [ 624.493450][T21735] [ 624.493450][T21735] the existing dependency chain (in reverse order) is: [ 624.502580][T21735] [ 624.502580][T21735] -> #3 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 624.511222][T21735] blk_alloc_queue+0x619/0x760 [ 624.516545][T21735] blk_mq_alloc_queue+0x172/0x280 [ 624.522279][T21735] __blk_mq_alloc_disk+0x29/0x120 [ 624.527846][T21735] loop_add+0x490/0xb70 [ 624.532651][T21735] loop_init+0x164/0x270 [ 624.537652][T21735] do_one_initcall+0x120/0x6e0 [ 624.543055][T21735] kernel_init_freeable+0x5c2/0x910 [ 624.548811][T21735] kernel_init+0x1c/0x2b0 [ 624.553821][T21735] ret_from_fork+0x5d7/0x6f0 [ 624.559212][T21735] ret_from_fork_asm+0x1a/0x30 [ 624.564644][T21735] [ 624.564644][T21735] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 624.571961][T21735] fs_reclaim_acquire+0x102/0x150 [ 624.577671][T21735] prepare_alloc_pages+0x162/0x610 [ 624.583444][T21735] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 624.590036][T21735] __alloc_pages_noprof+0xb/0x1b0 [ 624.595616][T21735] pcpu_populate_chunk+0x110/0xb00 [ 624.601275][T21735] pcpu_alloc_noprof+0x86a/0x1470 [ 624.606856][T21735] __alloc+0xa8/0x190 [ 624.611405][T21735] alloc_bulk+0x413/0xc80 [ 624.616283][T21735] bpf_mem_alloc_init+0x84b/0xd40 [ 624.621855][T21735] htab_map_alloc+0xe95/0x1570 [ 624.627156][T21735] map_create+0x58f/0x1f80 [ 624.632359][T21735] __sys_bpf+0x44d2/0x4de0 [ 624.637364][T21735] __x64_sys_bpf+0x78/0xc0 [ 624.642344][T21735] do_syscall_64+0xcd/0x490 [ 624.647477][T21735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.653907][T21735] [ 624.653907][T21735] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 624.661667][T21735] __mutex_lock+0x193/0x10b0 [ 624.666823][T21735] pcpu_alloc_noprof+0xb4c/0x1470 [ 624.672493][T21735] sbitmap_init_node+0x2fd/0x770 [ 624.678091][T21735] sbitmap_queue_init_node+0x41/0x560 [ 624.684485][T21735] blk_mq_init_tags+0x12d/0x2b0 [ 624.690029][T21735] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 624.696317][T21735] blk_mq_init_sched+0x30c/0x610 [ 624.702059][T21735] elevator_switch+0x1e1/0x7f0 [ 624.707392][T21735] elevator_change+0x2ac/0x400 [ 624.712908][T21735] elevator_set_default+0x2c4/0x360 [ 624.718757][T21735] blk_register_queue+0x393/0x4f0 [ 624.724422][T21735] __add_disk+0x74a/0xf00 [ 624.729303][T21735] add_disk_fwnode+0x13f/0x5d0 [ 624.735049][T21735] nbd_dev_add+0x783/0xbb0 [ 624.740123][T21735] nbd_init+0x181/0x320 [ 624.744923][T21735] do_one_initcall+0x120/0x6e0 [ 624.750424][T21735] kernel_init_freeable+0x5c2/0x910 [ 624.756188][T21735] kernel_init+0x1c/0x2b0 [ 624.761166][T21735] ret_from_fork+0x5d7/0x6f0 [ 624.766525][T21735] ret_from_fork_asm+0x1a/0x30 [ 624.772039][T21735] [ 624.772039][T21735] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 624.780083][T21735] __lock_acquire+0x12a6/0x1ce0 [ 624.785493][T21735] lock_acquire+0x179/0x350 [ 624.790715][T21735] __mutex_lock+0x193/0x10b0 [ 624.795935][T21735] elevator_change+0x103/0x400 [ 624.801334][T21735] elv_iosched_store+0x2eb/0x3a0 [ 624.806915][T21735] queue_attr_store+0x26b/0x310 [ 624.812303][T21735] sysfs_kf_write+0xf2/0x150 [ 624.817439][T21735] kernfs_fop_write_iter+0x354/0x510 [ 624.823354][T21735] vfs_write+0x6c4/0x1150 [ 624.828305][T21735] ksys_write+0x12a/0x250 [ 624.833344][T21735] do_syscall_64+0xcd/0x490 [ 624.838383][T21735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.845070][T21735] [ 624.845070][T21735] other info that might help us debug this: [ 624.845070][T21735] [ 624.855424][T21735] Chain exists of: [ 624.855424][T21735] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 624.855424][T21735] [ 624.869308][T21735] Possible unsafe locking scenario: [ 624.869308][T21735] [ 624.876784][T21735] CPU0 CPU1 [ 624.882176][T21735] ---- ---- [ 624.887569][T21735] lock(&q->q_usage_counter(io)#18); [ 624.893093][T21735] lock(fs_reclaim); [ 624.899793][T21735] lock(&q->q_usage_counter(io)#18); [ 624.908013][T21735] lock(&q->elevator_lock); [ 624.912655][T21735] [ 624.912655][T21735] *** DEADLOCK *** [ 624.912655][T21735] [ 624.920992][T21735] 7 locks held by syz.2.6778/21735: [ 624.926419][T21735] #0: ffff88803528d5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 624.935742][T21735] #1: ffff88807e87e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 624.944869][T21735] #2: ffff88805a33f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 624.954834][T21735] #3: ffff888026288b48 (kn->active#439){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 624.965073][T21735] #4: ffff888142fcb368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 624.976354][T21735] #5: ffff88802611a7e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 624.988156][T21735] #6: ffff88802611a820 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 625.000250][T21735] [ 625.000250][T21735] stack backtrace: [ 625.006347][T21735] CPU: 0 UID: 0 PID: 21735 Comm: syz.2.6778 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 625.006384][T21735] Tainted: [U]=USER [ 625.006392][T21735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.006406][T21735] Call Trace: [ 625.006416][T21735] [ 625.006425][T21735] dump_stack_lvl+0x116/0x1f0 [ 625.006454][T21735] print_circular_bug+0x275/0x350 [ 625.006485][T21735] check_noncircular+0x14c/0x170 [ 625.006517][T21735] __lock_acquire+0x12a6/0x1ce0 [ 625.006553][T21735] lock_acquire+0x179/0x350 [ 625.006582][T21735] ? elevator_change+0x103/0x400 [ 625.006617][T21735] ? __pfx___might_resched+0x10/0x10 [ 625.006642][T21735] ? elevator_change+0x103/0x400 [ 625.006674][T21735] __mutex_lock+0x193/0x10b0 [ 625.006700][T21735] ? elevator_change+0x103/0x400 [ 625.006731][T21735] ? enable_work+0x245/0x340 [ 625.006752][T21735] ? __pfx_xa_find_after+0x10/0x10 [ 625.006783][T21735] ? __pfx___mutex_lock+0x10/0x10 [ 625.006812][T21735] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 625.006838][T21735] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 625.006868][T21735] ? elevator_change+0x103/0x400 [ 625.006900][T21735] elevator_change+0x103/0x400 [ 625.006934][T21735] elv_iosched_store+0x2eb/0x3a0 [ 625.006970][T21735] ? __pfx_elv_iosched_store+0x10/0x10 [ 625.007009][T21735] ? __mutex_trylock_common+0xe9/0x250 [ 625.007041][T21735] ? __pfx_elv_iosched_store+0x10/0x10 [ 625.007076][T21735] queue_attr_store+0x26b/0x310 [ 625.007105][T21735] ? __pfx_queue_attr_store+0x10/0x10 [ 625.007140][T21735] ? find_held_lock+0x2b/0x80 [ 625.007162][T21735] ? sysfs_file_kobj+0xe4/0x290 [ 625.007188][T21735] ? __pfx_queue_attr_store+0x10/0x10 [ 625.007232][T21735] sysfs_kf_write+0xf2/0x150 [ 625.007257][T21735] kernfs_fop_write_iter+0x354/0x510 [ 625.007279][T21735] ? __pfx_sysfs_kf_write+0x10/0x10 [ 625.007305][T21735] vfs_write+0x6c4/0x1150 [ 625.007332][T21735] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 625.007354][T21735] ? __pfx___mutex_lock+0x10/0x10 [ 625.007380][T21735] ? __pfx_vfs_write+0x10/0x10 [ 625.007415][T21735] ksys_write+0x12a/0x250 [ 625.007441][T21735] ? __pfx_ksys_write+0x10/0x10 [ 625.007471][T21735] do_syscall_64+0xcd/0x490 [ 625.007498][T21735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.007522][T21735] RIP: 0033:0x7f437238ebe9 [ 625.007540][T21735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.007563][T21735] RSP: 002b:00007f4373259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 625.007584][T21735] RAX: ffffffffffffffda RBX: 00007f43725b6090 RCX: 00007f437238ebe9 [ 625.007599][T21735] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 625.007612][T21735] RBP: 00007f4372411e19 R08: 0000000000000000 R09: 0000000000000000 [ 625.007626][T21735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.007639][T21735] R13: 00007f43725b6128 R14: 00007f43725b6090 R15: 00007ffc70d86978 [ 625.007661][T21735] [ 632.555615][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.562130][ T1304] ieee802154 phy1 wpan1: encryption failed: -22