last executing test programs: 8m28.437924143s ago: executing program 2 (id=573): keyctl$auto(0x7, 0xfffffffb, 0x2, 0x3e, 0x8) 8m28.246313578s ago: executing program 2 (id=577): pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) 8m28.028110329s ago: executing program 2 (id=582): readlink$auto(0x0, 0x0, 0x80000001) 8m27.863788137s ago: executing program 2 (id=585): select$auto(0x2, &(0x7f0000000000)={[0x2, 0x8eac, 0x6, 0x9, 0x8, 0x2, 0x3c, 0x0, 0x3, 0x4, 0x6, 0x6, 0x80000000, 0x8, 0x1, 0x3]}, 0x0, &(0x7f0000000100)={[0xa, 0x5, 0xfffffffffffffff7, 0x8, 0x7, 0x4, 0x1, 0x10001, 0x377, 0x5, 0x7, 0x8000, 0x3, 0x9, 0xf963, 0x80]}, &(0x7f0000000180)={0x0, 0x35}) 8m27.622493428s ago: executing program 2 (id=591): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 8m27.117369599s ago: executing program 2 (id=600): mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @raw=0xce8}, 0x287) 8m26.724574176s ago: executing program 32 (id=600): mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @raw=0xce8}, 0x287) 7m51.750376235s ago: executing program 4 (id=1184): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/252:0/min_ratio_fine\x00', 0xc0082, 0x0) sendfile$auto(r0, r0, 0x0, 0xef3) 7m51.498830065s ago: executing program 4 (id=1188): r0 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x40201, 0x0) write$auto_trace_options_fops_trace(r0, 0x0, 0x0) 7m51.235449556s ago: executing program 4 (id=1191): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000280)="7bae", 0x107}, 0x4) 7m51.07959845s ago: executing program 4 (id=1194): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/quirks\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) 7m50.833913324s ago: executing program 4 (id=1198): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) tkill$auto(0x1, 0x7) 7m50.221683157s ago: executing program 4 (id=1208): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x200}, 0x3) 7m49.733823277s ago: executing program 33 (id=1208): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x200}, 0x3) 7m2.430910924s ago: executing program 0 (id=2068): setresuid$auto(0x8, 0x8, 0x0) setuid$auto(0x0) 7m2.290782317s ago: executing program 0 (id=2072): timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) 7m2.167789023s ago: executing program 0 (id=2075): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x80000004) 7m2.046199901s ago: executing program 0 (id=2077): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) 7m1.887618409s ago: executing program 0 (id=2081): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 7m1.387854949s ago: executing program 0 (id=2092): r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20020, 0x0) read$auto_mgts_fops_(r0, &(0x7f0000000080)=""/4096, 0x1000) 7m1.032801724s ago: executing program 34 (id=2092): r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20020, 0x0) read$auto_mgts_fops_(r0, &(0x7f0000000080)=""/4096, 0x1000) 4m41.742562323s ago: executing program 6 (id=4228): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r0, 0x4161, 0x0) 4m41.507118973s ago: executing program 6 (id=4232): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) 4m40.807854373s ago: executing program 6 (id=4240): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m40.54028331s ago: executing program 6 (id=4244): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) write$auto(r0, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) 4m40.295288819s ago: executing program 6 (id=4247): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 4m39.674533169s ago: executing program 6 (id=4256): ioperm$auto(0x7, 0x6, 0x2) fchmod$auto(0xffffffffffffffff, 0x4) 4m39.061917218s ago: executing program 35 (id=4256): ioperm$auto(0x7, 0x6, 0x2) fchmod$auto(0xffffffffffffffff, 0x4) 3.158568381s ago: executing program 7 (id=7495): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000780)={'bond0\x00'}) 2.934963086s ago: executing program 7 (id=7497): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) 2.651273162s ago: executing program 1 (id=7500): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) 2.392848534s ago: executing program 5 (id=7502): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.140950586s ago: executing program 5 (id=7504): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5521, r0) 2.130339841s ago: executing program 1 (id=7505): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) write$auto_lowpan_control_fops_6lowpan(r0, 0x0, 0x14) 2.064188951s ago: executing program 3 (id=7506): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) 1.908013782s ago: executing program 5 (id=7507): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) 1.806786999s ago: executing program 3 (id=7508): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x40) 1.674036645s ago: executing program 1 (id=7509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000040c0)={0x14, r1, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) 1.660896852s ago: executing program 5 (id=7510): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) 1.652611019s ago: executing program 7 (id=7511): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x40b, 0x5) 1.542000382s ago: executing program 3 (id=7512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x91}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 1.401993293s ago: executing program 5 (id=7513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x29}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 1.337742547s ago: executing program 7 (id=7514): r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8, 0x2, 0x0) 1.332642172s ago: executing program 1 (id=7515): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r0, &(0x7f00000042c0), 0x1, 0x7be, &(0x7f00000043c0)=@nl=@unspec, &(0x7f0000004400)=0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004740), r0) 1.243583778s ago: executing program 3 (id=7516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 1.141347332s ago: executing program 5 (id=7517): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 1.036780644s ago: executing program 3 (id=7518): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x21, 0x2, 0xa) getsockopt$auto(r0, 0x110, 0x9, 0xffffffffffffffff, 0x0) 1.03294347s ago: executing program 7 (id=7519): r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) exit$auto(0x2) read$auto(r0, 0x0, 0x58b22256) 1.002139699s ago: executing program 1 (id=7520): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x20000a, 0x4) 805.689873ms ago: executing program 3 (id=7521): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) 780.574297ms ago: executing program 1 (id=7522): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0x2) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)) 0s ago: executing program 7 (id=7523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 89.282074][ T5816] cgroup: Unknown subsys name 'net' [ 89.402458][ T5816] cgroup: Unknown subsys name 'cpuset' [ 89.412785][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.168798][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.310330][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.319173][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.327145][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.335384][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.343253][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.355242][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.359348][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.370757][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.377095][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.380021][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.392550][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.395158][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.406795][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.407296][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.422500][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.429202][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.430450][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.437572][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.452892][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.460459][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.003965][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.144261][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 94.168352][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 94.282420][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 94.322531][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.329843][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.338239][ T5831] bridge_slave_0: entered allmulticast mode [ 94.347196][ T5831] bridge_slave_0: entered promiscuous mode [ 94.361940][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.369267][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.376597][ T5831] bridge_slave_1: entered allmulticast mode [ 94.383931][ T5831] bridge_slave_1: entered promiscuous mode [ 94.553040][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.563018][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.570652][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.578473][ T5828] bridge_slave_0: entered allmulticast mode [ 94.586413][ T5828] bridge_slave_0: entered promiscuous mode [ 94.594145][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.601554][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.609377][ T5826] bridge_slave_0: entered allmulticast mode [ 94.616912][ T5826] bridge_slave_0: entered promiscuous mode [ 94.625997][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.633138][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.640540][ T5826] bridge_slave_1: entered allmulticast mode [ 94.648589][ T5826] bridge_slave_1: entered promiscuous mode [ 94.665331][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.690140][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.697534][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.705863][ T5828] bridge_slave_1: entered allmulticast mode [ 94.713152][ T5828] bridge_slave_1: entered promiscuous mode [ 94.765341][ T5831] team0: Port device team_slave_0 added [ 94.818211][ T5831] team0: Port device team_slave_1 added [ 94.840724][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.850086][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.857510][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.864905][ T5827] bridge_slave_0: entered allmulticast mode [ 94.872233][ T5827] bridge_slave_0: entered promiscuous mode [ 94.880892][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.888528][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.896060][ T5827] bridge_slave_1: entered allmulticast mode [ 94.903325][ T5827] bridge_slave_1: entered promiscuous mode [ 94.926554][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.939763][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.951201][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.052811][ T5826] team0: Port device team_slave_0 added [ 95.061863][ T5826] team0: Port device team_slave_1 added [ 95.083013][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.090099][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.117049][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.133194][ T5828] team0: Port device team_slave_0 added [ 95.142594][ T5828] team0: Port device team_slave_1 added [ 95.166207][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.178946][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.189744][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.197901][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.224588][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.303645][ T5827] team0: Port device team_slave_0 added [ 95.325637][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.332627][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.362202][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.392682][ T5827] team0: Port device team_slave_1 added [ 95.399301][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.406859][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.429020][ T5838] Bluetooth: hci1: command tx timeout [ 95.434109][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.450061][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.457330][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.483537][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.504354][ T5838] Bluetooth: hci0: command tx timeout [ 95.504368][ T5834] Bluetooth: hci2: command tx timeout [ 95.504698][ T5834] Bluetooth: hci3: command tx timeout [ 95.540383][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.547781][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.573852][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.601130][ T5831] hsr_slave_0: entered promiscuous mode [ 95.608464][ T5831] hsr_slave_1: entered promiscuous mode [ 95.660004][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.667244][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.693318][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.706135][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.713122][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.739579][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.771459][ T5828] hsr_slave_0: entered promiscuous mode [ 95.778050][ T5828] hsr_slave_1: entered promiscuous mode [ 95.784752][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.792532][ T5828] Cannot create hsr debugfs directory [ 95.884540][ T5826] hsr_slave_0: entered promiscuous mode [ 95.891131][ T5826] hsr_slave_1: entered promiscuous mode [ 95.897897][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.906093][ T5826] Cannot create hsr debugfs directory [ 95.982030][ T5827] hsr_slave_0: entered promiscuous mode [ 95.989056][ T5827] hsr_slave_1: entered promiscuous mode [ 95.995836][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.003431][ T5827] Cannot create hsr debugfs directory [ 96.435423][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.450651][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.462441][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.486043][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.541994][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.564098][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.582669][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.595949][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.701258][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.720076][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.747836][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.776585][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.851933][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.885746][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.913824][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.926868][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.972273][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.037839][ T9] cfg80211: failed to load regulatory.db [ 97.047621][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.094104][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.101510][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.130648][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.142694][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.157610][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.164829][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.217039][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.249032][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.266310][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.273500][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.313567][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.320774][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.354536][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.361691][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.405222][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.416515][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.436322][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.443496][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.460455][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.506863][ T5834] Bluetooth: hci1: command tx timeout [ 97.548938][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.584499][ T5140] Bluetooth: hci2: command tx timeout [ 97.590211][ T5834] Bluetooth: hci0: command tx timeout [ 97.596813][ T5140] Bluetooth: hci3: command tx timeout [ 97.610840][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.618189][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.653501][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.660828][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.707186][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.753661][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.842172][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.942101][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.089913][ T5831] veth0_vlan: entered promiscuous mode [ 98.165981][ T5831] veth1_vlan: entered promiscuous mode [ 98.200646][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.248077][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.326028][ T5831] veth0_macvtap: entered promiscuous mode [ 98.357684][ T5831] veth1_macvtap: entered promiscuous mode [ 98.377870][ T5826] veth0_vlan: entered promiscuous mode [ 98.398604][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.430151][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.458627][ T5826] veth1_vlan: entered promiscuous mode [ 98.469402][ T5827] veth0_vlan: entered promiscuous mode [ 98.481625][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.505697][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.514765][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.523495][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532721][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.580252][ T5827] veth1_vlan: entered promiscuous mode [ 98.639044][ T5828] veth0_vlan: entered promiscuous mode [ 98.667105][ T5826] veth0_macvtap: entered promiscuous mode [ 98.683697][ T5828] veth1_vlan: entered promiscuous mode [ 98.696810][ T5826] veth1_macvtap: entered promiscuous mode [ 98.755053][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.763043][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.838177][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.848961][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.861891][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.871773][ T5827] veth0_macvtap: entered promiscuous mode [ 98.883080][ T5827] veth1_macvtap: entered promiscuous mode [ 98.900809][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.913281][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.926258][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.936090][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.951251][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.951896][ T5828] veth0_macvtap: entered promiscuous mode [ 98.971492][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.980936][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.989952][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.999485][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.019854][ T5828] veth1_macvtap: entered promiscuous mode [ 99.040576][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.051220][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.062469][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.073027][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.086252][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.126160][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.127826][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.155746][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.166524][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.177298][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.190089][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.230496][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.248420][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.261649][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.272914][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.283251][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.294155][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.316067][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.325619][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.342674][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.360260][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369725][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.402234][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.419165][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.431579][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.454362][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.478331][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.484603][ T5834] Bluetooth: hci3: unexpected event 0x32 length: 10 > 9 [ 99.490908][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.526112][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.585054][ T5834] Bluetooth: hci1: command tx timeout [ 99.609574][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.630251][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.634333][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.642979][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.658951][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670928][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.679918][ T5834] Bluetooth: hci0: command tx timeout [ 99.679995][ T5140] Bluetooth: hci3: command tx timeout [ 99.686399][ T5834] Bluetooth: hci2: command tx timeout [ 99.902747][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.919365][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.000504][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.027505][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.080557][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.107272][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.200385][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.246258][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.318573][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.345117][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.665221][ T5834] Bluetooth: hci1: command tx timeout [ 101.749224][ T5834] Bluetooth: hci2: command tx timeout [ 101.755102][ T5838] Bluetooth: hci3: command tx timeout [ 101.760556][ T5838] Bluetooth: hci0: command tx timeout [ 103.882190][ T6036] nfs: Bad value for 'source' [ 105.418586][ T6091] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6091] [ 108.854909][ T6217] futex_wake_op: syz.0.160 tries to shift op by 64; fix this program [ 112.446313][ T6348] syz.3.224 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.329097][ T6374] can: request_module (can-proto-3) failed. [ 118.535875][ T6552] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6552] [ 124.759007][ T6796] mmap: syz.3.445 (6796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.511969][ T30] audit: type=1800 audit(6041127555.788:2): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.458" name="members" dev="configfs" ino=8926 res=0 errno=0 [ 128.519149][ T5140] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 129.713765][ T30] audit: type=1800 audit(6041127572.006:3): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="discovery_nqn" dev="configfs" ino=10300 res=0 errno=0 [ 131.908632][ T30] audit: type=1800 audit(6041127574.217:4): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="lu_gp_id" dev="configfs" ino=11312 res=0 errno=0 [ 132.505900][ T192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.647968][ T192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.728030][ T192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.883893][ T192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.400540][ T192] bridge_slave_1: left allmulticast mode [ 133.406446][ T192] bridge_slave_1: left promiscuous mode [ 133.456749][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.524971][ T192] bridge_slave_0: left allmulticast mode [ 133.536129][ T192] bridge_slave_0: left promiscuous mode [ 133.541993][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.558261][ T5140] Bluetooth: hci0: Malformed LE Event: 0x0b [ 133.911088][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.942950][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.953493][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.970216][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.978078][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.216706][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.247763][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.293307][ T192] bond0 (unregistering): Released all slaves [ 136.004562][ T5834] Bluetooth: hci3: command tx timeout [ 136.516128][ T192] hsr_slave_0: left promiscuous mode [ 136.554106][ T192] hsr_slave_1: left promiscuous mode [ 136.597236][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.622131][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.651701][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.683091][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.752219][ T192] veth1_macvtap: left promiscuous mode [ 136.758108][ T192] veth0_macvtap: left promiscuous mode [ 136.807709][ T192] veth1_vlan: left promiscuous mode [ 136.822393][ T192] veth0_vlan: left promiscuous mode [ 137.943764][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.950366][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.072604][ T5834] Bluetooth: hci3: command tx timeout [ 138.370340][ T192] team0 (unregistering): Port device team_slave_1 removed [ 138.424636][ T192] team0 (unregistering): Port device team_slave_0 removed [ 139.267977][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 139.805939][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.843372][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.860843][ T7157] bridge_slave_0: entered allmulticast mode [ 139.939429][ T7157] bridge_slave_0: entered promiscuous mode [ 139.985953][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.021899][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.043131][ T7157] bridge_slave_1: entered allmulticast mode [ 140.059244][ T7157] bridge_slave_1: entered promiscuous mode [ 140.141761][ T5834] Bluetooth: hci3: command tx timeout [ 140.355758][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.418004][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.637562][ T7157] team0: Port device team_slave_0 added [ 140.666339][ T7157] team0: Port device team_slave_1 added [ 140.942387][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.953840][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.000095][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.015819][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.023183][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.080751][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.468259][ T7157] hsr_slave_0: entered promiscuous mode [ 141.498047][ T7157] hsr_slave_1: entered promiscuous mode [ 142.075254][ T7457] ======================================================= [ 142.075254][ T7457] WARNING: The mand mount option has been deprecated and [ 142.075254][ T7457] and is ignored by this kernel. Remove the mand [ 142.075254][ T7457] option from the mount to silence this warning. [ 142.075254][ T7457] ======================================================= [ 142.213637][ T5834] Bluetooth: hci3: command tx timeout [ 142.358684][ T7157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.431437][ T7157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.502343][ T7157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.542853][ T7157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.904570][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.017435][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.043803][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.051723][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.100154][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.107408][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.741967][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.064277][ T5834] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 144.557278][ T7157] veth0_vlan: entered promiscuous mode [ 144.601214][ T7157] veth1_vlan: entered promiscuous mode [ 144.717497][ T7157] veth0_macvtap: entered promiscuous mode [ 144.781290][ T7157] veth1_macvtap: entered promiscuous mode [ 144.859129][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.887129][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.907529][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.928365][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.963760][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.993158][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.008904][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.050577][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.071707][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.118395][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.148345][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.175658][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.205345][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.240402][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.271953][ T7157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.303157][ T7157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.333421][ T7157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.352634][ T7157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.601919][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.638557][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.744490][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.777870][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.131085][ T5834] Bluetooth: hci3: unexpected event 0x17 length: 123 > 6 [ 156.521407][ T30] audit: type=1800 audit(4294967302.895:5): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.974" name="version" dev="configfs" ino=13151 res=0 errno=0 [ 158.489138][ T8103] random: crng reseeded on system resumption [ 158.897606][ T8049] kexec: Could not allocate control_code_buffer [ 160.615278][ T8189] Unable to find swap-space signature [ 160.719441][ T8194] aoe: copy from user failed [ 160.724105][ T8194] aoe: could not set interface list: too many interfaces [ 161.723396][ T8244] nfsd: Unknown parameter '^B-' [ 162.388391][ T8280] cougar: G6 mapped to space [ 163.310847][ T8323] delete_channel: no stack [ 163.771780][ T8350] block2mtd: Using custom MTD label '' for dev [ 163.787123][ T8350] block2mtd: error: cannot open device [ 164.647619][ T8392] random: crng reseeded on system resumption [ 165.397522][ T8427] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 167.397490][ T8519] kAFS: Invalid Command on /proc/fs/afs/cells file [ 168.307145][ T30] audit: type=1800 audit(4294967314.746:6): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1191" name="discovery_nqn" dev="configfs" ino=15651 res=0 errno=0 [ 169.472478][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.644574][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.832709][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.022039][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.445506][ T36] bridge_slave_1: left allmulticast mode [ 170.451225][ T36] bridge_slave_1: left promiscuous mode [ 170.475114][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.547605][ T36] bridge_slave_0: left allmulticast mode [ 170.553334][ T36] bridge_slave_0: left promiscuous mode [ 170.589460][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.642666][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.652357][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.660266][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.668710][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.676562][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.963018][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.996670][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.019347][ T36] bond0 (unregistering): Released all slaves [ 172.692843][ T5140] Bluetooth: hci3: command tx timeout [ 172.719917][ T36] hsr_slave_0: left promiscuous mode [ 172.752203][ T36] hsr_slave_1: left promiscuous mode [ 172.758573][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.769465][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.787391][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.799376][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.835876][ T8737] blkio.reset_stats is deprecated [ 172.850656][ T36] veth1_macvtap: left promiscuous mode [ 172.861307][ T36] veth0_macvtap: left promiscuous mode [ 172.877368][ T36] veth1_vlan: left promiscuous mode [ 172.887371][ T36] veth0_vlan: left promiscuous mode [ 174.607697][ T36] team0 (unregistering): Port device team_slave_1 removed [ 174.607898][ T8809] WARNING! power/level is deprecated; use power/control instead [ 174.718954][ T36] team0 (unregistering): Port device team_slave_0 removed [ 174.761861][ T5140] Bluetooth: hci3: command tx timeout [ 175.104380][ T8828] zram0: detected capacity change from 0 to 8 [ 175.476268][ T8844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.478409][ T8646] chnl_net:caif_netlink_parms(): no params data found [ 176.845070][ T5140] Bluetooth: hci3: command tx timeout [ 177.173448][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.194048][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.215097][ T8646] bridge_slave_0: entered allmulticast mode [ 177.227016][ T8646] bridge_slave_0: entered promiscuous mode [ 177.271570][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.293879][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.304678][ T8646] bridge_slave_1: entered allmulticast mode [ 177.314503][ T8646] bridge_slave_1: entered promiscuous mode [ 177.452395][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.483956][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.503836][ T8917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.607990][ T8646] team0: Port device team_slave_0 added [ 177.631582][ T8646] team0: Port device team_slave_1 added [ 177.789715][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.815470][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.889096][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.951593][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.984956][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.989419][ T8937] binder: 8936:8937 ioctl 40046205 0 returned -22 [ 178.058629][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.336813][ T8646] hsr_slave_0: entered promiscuous mode [ 178.350618][ T8646] hsr_slave_1: entered promiscuous mode [ 178.432771][ T30] audit: type=1800 audit(4294967324.909:7): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1345" name="dbroot" dev="configfs" ino=16763 res=0 errno=0 [ 178.439964][ T8956] db_root: not a directory: /dev/audio1 [ 178.452821][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.913498][ T5140] Bluetooth: hci3: command tx timeout [ 179.073424][ T8979] vivid-003: ================= START STATUS ================= [ 179.091794][ T8979] vivid-003: Radio HW Seek Mode: Bounded [ 179.111470][ T8979] vivid-003: Radio Programmable HW Seek: false [ 179.118200][ T8979] vivid-003: RDS Rx I/O Mode: Block I/O [ 179.130851][ T8979] vivid-003: Generate RBDS Instead of RDS: false [ 179.137281][ T8979] vivid-003: RDS Reception: true [ 179.180927][ T8979] vivid-003: RDS Program Type: 0 inactive [ 179.196909][ T8979] vivid-003: RDS PS Name: inactive [ 179.212701][ T8979] vivid-003: RDS Radio Text: inactive [ 179.247244][ T8979] vivid-003: RDS Traffic Announcement: false inactive [ 179.280155][ T8646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.291557][ T8979] vivid-003: RDS Traffic Program: false inactive [ 179.320675][ T8646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.337681][ T8979] vivid-003: RDS Music: false inactive [ 179.344838][ T8979] vivid-003: ================== END STATUS ================== [ 179.368565][ T8646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.393593][ T8646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.753349][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.838862][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.886955][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.894207][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.932600][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.939871][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.688165][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.532695][ T8646] veth0_vlan: entered promiscuous mode [ 181.606524][ T8646] veth1_vlan: entered promiscuous mode [ 181.711681][ T8646] veth0_macvtap: entered promiscuous mode [ 181.754730][ T8646] veth1_macvtap: entered promiscuous mode [ 181.845413][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.884626][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.894978][ T9095] nvme_fabrics: missing parameter 'transport=%s' [ 181.895025][ T9095] nvme_fabrics: missing parameter 'nqn=%s' [ 181.934331][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.955546][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.988462][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.033876][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.055843][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.140080][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.195075][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.212860][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.252653][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.262532][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.312690][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.389041][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.475402][ T8646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.495673][ T8646] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.506446][ T8646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.518845][ T8646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.839110][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.879430][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.977871][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.018820][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.759723][ T5140] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 185.718028][ T5870] Process accounting resumed [ 189.502253][ T9431] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[9431] [ 190.480383][ T5140] Bluetooth: hci0: Malformed Event: 0x13 [ 192.310533][ T9532] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 195.498840][ T9663] queue_state_write: operation too long [ 195.525261][ T9663] queue_state_write: use 'run', 'start' or 'kick' syzkaller syzkaller login: [ 197.004592][ T9727] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1672' sets config #5 [ 197.996230][ T9772] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 199.006406][ T9819] block2mtd: parameter too long [ 199.041539][ T9823] program syz.1.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.043261][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.060797][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.080783][ T9823] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.892494][ T9951] [ 203.204295][T10013] warning: `syz.1.1775' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.840876][T10041] delete_channel: no stack [ 206.878807][T10179] kAFS: Invalid Command on /proc/fs/afs/cells file [ 208.384698][T10253] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 210.185937][T10332] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 210.970269][T10368] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 211.650739][T10402] syz.5.1947 uses obsolete (PF_INET,SOCK_PACKET) [ 216.385333][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 216.387566][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 216.391508][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 218.144076][T10694] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 218.196482][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.317716][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.422118][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.591689][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.038284][ T1147] bridge_slave_1: left allmulticast mode [ 219.071227][ T1147] bridge_slave_1: left promiscuous mode [ 219.077806][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.180241][ T1147] bridge_slave_0: left allmulticast mode [ 219.205699][ T1147] bridge_slave_0: left promiscuous mode [ 219.240678][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.493492][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.505740][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.532701][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.552116][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.578746][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.151093][T10755] futex_wake_op: syz.1.2115 tries to shift op by 64; fix this program [ 220.509483][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.528002][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.585796][ T1147] bond0 (unregistering): Released all slaves [ 221.646910][ T5834] Bluetooth: hci0: command tx timeout [ 221.749809][ T1147] hsr_slave_0: left promiscuous mode [ 221.782373][ T1147] hsr_slave_1: left promiscuous mode [ 221.797540][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.805018][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.859670][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.886151][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.985893][ T1147] veth1_macvtap: left promiscuous mode [ 221.996441][ T1147] veth0_macvtap: left promiscuous mode [ 222.002201][ T1147] veth1_vlan: left promiscuous mode [ 222.021581][ T1147] veth0_vlan: left promiscuous mode [ 222.138701][T10830] udc dummy_udc.0: soft-connect without a gadget driver [ 223.129506][T10864] program syz.5.2158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.649988][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 223.712679][ T5834] Bluetooth: hci0: command tx timeout [ 223.880784][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 225.596128][T10729] chnl_net:caif_netlink_parms(): no params data found [ 225.791985][ T5834] Bluetooth: hci0: command tx timeout [ 226.307152][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.317461][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.343601][T10729] bridge_slave_0: entered allmulticast mode [ 226.367120][T10729] bridge_slave_0: entered promiscuous mode [ 226.398384][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.422120][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.465720][T10729] bridge_slave_1: entered allmulticast mode [ 226.514518][T10729] bridge_slave_1: entered promiscuous mode [ 226.708803][T10729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.745406][T10729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.897659][T10729] team0: Port device team_slave_0 added [ 226.917671][T10729] team0: Port device team_slave_1 added [ 227.019524][T10729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.047531][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.073530][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.094610][T10729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.135794][T10729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.146209][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.174659][T10729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.336184][T10729] hsr_slave_0: entered promiscuous mode [ 227.373378][T10729] hsr_slave_1: entered promiscuous mode [ 227.388836][T10729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.396483][T10729] Cannot create hsr debugfs directory [ 227.851571][ T5834] Bluetooth: hci0: command tx timeout [ 228.266875][T10729] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.311854][T10729] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.385884][T10729] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.409651][T10729] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.840013][T10729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.904001][T10729] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.944346][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.951616][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.025594][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.032869][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.167962][T10729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.752000][T10729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.596760][T10729] veth0_vlan: entered promiscuous mode [ 230.634305][T10729] veth1_vlan: entered promiscuous mode [ 230.736195][T10729] veth0_macvtap: entered promiscuous mode [ 230.816355][T10729] veth1_macvtap: entered promiscuous mode [ 230.887096][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.887127][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.887143][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.887162][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.887178][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.887198][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.889313][T10729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.915364][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.915396][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.915411][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.915432][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.915449][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.915469][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.916973][T10729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.934656][T10729] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.934709][T10729] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.934755][T10729] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.934799][T10729] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.133318][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.133347][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.246044][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.246073][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.413672][T11206] kAFS: No cell specified [ 233.435672][T11245] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 233.544910][T11251] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 234.113705][T11274] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 234.898144][ T5834] Bluetooth: hci1: Malformed Event: 0x02 [ 237.018976][T11389] vivid-007: ================= START STATUS ================= [ 237.056511][T11389] vivid-007: Generate PTS: true [ 237.089486][T11389] vivid-007: Generate SCR: true [ 237.094545][T11389] tpg source WxH: 640x360 (Y'CbCr) [ 237.145342][T11389] tpg field: 1 [ 237.155478][T11389] tpg crop: (0,0)/640x360 [ 237.184629][T11389] tpg compose: (0,0)/640x360 [ 237.202389][T11389] tpg colorspace: 8 [ 237.220295][T11389] tpg transfer function: 0/0 [ 237.237703][T11389] tpg Y'CbCr encoding: 0/0 [ 237.255214][T11389] tpg quantization: 0/0 [ 237.272797][T11389] tpg RGB range: 0/2 [ 237.283212][T11389] vivid-007: ================== END STATUS ================== [ 237.962473][T11427] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 237.973573][T11425] ima: policy update failed [ 237.973575][T11428] rnbd_client L213: map_device: Parameters missing [ 238.016354][ T30] audit: type=1802 audit(4294967384.769:8): pid=11425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2368" res=0 errno=0 [ 241.699736][T11552] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 241.886671][T11561] program syz.5.2421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.243040][T11575] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 242.710500][ T5834] Bluetooth: hci0: Malformed Event: 0x02 [ 244.831638][ T5834] Bluetooth: hci2: Malformed Event: 0x02 [ 246.409499][T11736] dyndbg: bad flag-op , at start of [ 246.433241][T11736] dyndbg: flags parse failed [ 246.437907][T11736] dyndbg: bad flag-op , at start of [ 246.454044][T11736] dyndbg: flags parse failed [ 246.887006][ T5834] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 246.887051][ T5834] Bluetooth: hci0: unexpected subevent 0x05 length: 725 > 12 [ 247.002560][ T5834] Bluetooth: hci3: Malformed Event: 0x02 [ 248.936001][ T5834] Bluetooth: hci0: command tx timeout [ 250.580298][ T30] audit: type=1400 audit(4294967397.444:9): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11884 comm="syz.5.2568" [ 251.391759][ T5834] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 251.391803][ T5834] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 251.784856][T11936] Invalid ELF header magic: != ELF [ 252.991183][T11991] ICMPv6: process `syz.6.2607' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 253.473170][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 257.542199][T12196] vmstat_refresh: nr_hugetlb -2048 [ 260.167866][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.174266][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.909294][T12469] process 'syz.5.2810' launched '/dev/fd/3' with NULL argv: empty string added [ 265.142502][T12520] Unable to find swap-space signature [ 265.862691][ T30] audit: type=1800 audit(4294967412.804:10): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2851" name="lu_gp_id" dev="configfs" ino=28965 res=0 errno=0 [ 274.534366][T12859] kafs: addr_prefs: Invalid Command [ 274.973741][T12871] hub 8-0:1.0: Interface 0 is not authorized for usage [ 275.021795][T12871] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 275.750507][T12898] zram0: detected capacity change from 8 to 0 [ 276.665743][T12928] usb usb2: usbfs: process 12928 (syz.5.3032) did not claim interface 1 before use [ 279.004186][ T30] audit: type=1800 audit(4294967426.012:11): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3064" name="features" dev="configfs" ino=28625 res=0 errno=0 [ 279.024579][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.134688][T13084] aoe: can't write to that file. [ 285.814188][ T30] audit: type=1800 audit(4294967432.837:12): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3148" name="members" dev="configfs" ino=30950 res=0 errno=0 [ 286.456758][T13185] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[13185] [ 286.802480][T13194] queue_state_write: unsupported operation '' [ 286.848840][T13194] queue_state_write: use 'run', 'start' or 'kick' [ 287.322999][T13190] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 288.516832][T13238] ima: policy update failed [ 288.534528][ T30] audit: type=1802 audit(4294967435.592:13): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3183" res=0 errno=0 [ 288.761914][T13247] ICMPv6: process `syz.6.3187' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 290.834173][T13301] Format for deleting device is "id" (uint). [ 291.681619][T13331] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate) [ 291.723600][T13331] bond0: option lp_interval: allowed values 1 - 2147483647 [ 292.790160][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 293.094328][T13372] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 293.955976][T13398] i2c i2c-0: delete_device: Can't find device in list [ 295.543897][T13457] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 295.543897][T13457] [ 296.070947][T13474] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.574003][T13492] [U] [ 296.587207][T13492] [U] ]73å^Jdz׹VWw+ [ 296.605967][T13492] [U] WM ?rBzp^GfѿaG`u2k0[LҽA/U5'~  [ 297.654469][T13538] vivid-007: ================= START STATUS ================= [ 297.686883][T13538] vivid-007: Enable Output Cropping: true [ 297.704073][T13538] vivid-007: Enable Output Composing: true [ 297.710013][T13538] vivid-007: Enable Output Scaler: true [ 297.731735][T13538] vivid-007: Tx RGB Quantization Range: Automatic [ 297.738868][T13538] vivid-007: Transmit Mode: HDMI [ 297.744478][T13538] vivid-007: Hotplug Present: 0x00000000 [ 297.750199][T13538] vivid-007: RxSense Present: 0x00000000 [ 297.757135][T13538] vivid-007: EDID Present: 0x00000000 [ 297.763007][T13538] vivid-007: ================== END STATUS ================== [ 297.790867][T13546] bond0: option packets_per_slave: invalid value ( Xnp) [ 297.799523][T13546] bond0: option packets_per_slave: allowed values 0 - 65535 [ 298.675282][T13584] afs: Bad value for 'source' [ 299.687694][T13617] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 307.972752][T13953] kafs: addr_prefs: Too many elements in string [ 308.668773][T13987] misc userio: Invalid payload size [ 309.712269][ T30] audit: type=1800 audit(4294967456.882:14): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3540" name="dbroot" dev="configfs" ino=33286 res=0 errno=0 [ 309.721028][T14034] db_root: cannot open: [ 310.205422][T14053] hub 3-0:1.0: USB hub found [ 310.225858][T14053] hub 3-0:1.0: 1 port detected [ 310.260663][T14053] usb usb3: authorized to connect [ 311.288842][T14106] QAT: Invalid ioctl 21531 [ 312.334507][T14150] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 312.334507][T14150] program syz.5.3586 not setting count and/or reply_len properly [ 312.356538][ T30] audit: type=1800 audit(4294967459.535:15): pid=14155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3585" name="members" dev="configfs" ino=32435 res=0 errno=0 [ 312.664620][T14168] [ 314.020828][T14229] aoe: invalid device specification [ 318.789091][ T30] audit: type=1806 audit(4294967465.999:16): xattr="" res=-22 [ 321.291259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.297673][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.012000][T14592] syz.1.3753 (14592): drop_caches: 0 [ 322.903062][T14632] bond0: no command found in slaves file - use +ifname or -ifname [ 325.098120][T14731] Setting dangerous option i915.mitigations - tainting kernel [ 325.491044][T14747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 325.538786][T14747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 325.606797][T14747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 325.636080][T14747] page_type: f5(slab) [ 325.659574][T14747] raw: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 325.714642][T14747] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 325.758147][T14747] head: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 325.768264][T14747] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 325.818814][T14747] head: 00fff00000000003 ffffea0001e40001 00000000ffffffff 00000000ffffffff [ 325.838842][T14747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 325.864486][T14747] page dumped because: unmovable page [ 325.871583][T14747] page_owner tracks the page as allocated [ 325.891555][T14747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10729, tgid 10729 (syz-executor), ts 317499204410, free_ts 316617784445 [ 325.948574][T14747] post_alloc_hook+0x181/0x1b0 [ 325.969419][T14747] get_page_from_freelist+0x135c/0x3920 [ 325.985680][T14747] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 326.005208][T14747] alloc_pages_mpol+0x1fb/0x550 [ 326.010236][T14747] new_slab+0x244/0x340 [ 326.028002][T14747] ___slab_alloc+0xd9c/0x1940 [ 326.044155][T14747] __slab_alloc.constprop.0+0x56/0xb0 [ 326.058610][T14747] kmem_cache_alloc_noprof+0xef/0x3b0 [ 326.066488][T14747] getname_flags.part.0+0x4c/0x550 [ 326.072810][T14747] getname_flags+0x93/0xf0 [ 326.085067][T14747] user_path_at+0x24/0x60 [ 326.097706][T14747] __x64_sys_umount+0x10a/0x1a0 [ 326.105428][T14747] do_syscall_64+0xcd/0x230 [ 326.110029][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.152000][T14747] page last free pid 14325 tgid 14325 stack trace: [ 326.174223][T14747] __free_frozen_pages+0x69d/0xff0 [ 326.179454][T14747] __put_partials+0x16d/0x1c0 [ 326.187858][T14747] qlist_free_all+0x4e/0x120 [ 326.192551][T14747] kasan_quarantine_reduce+0x195/0x1e0 [ 326.199277][T14747] __kasan_slab_alloc+0x69/0x90 [ 326.204331][T14747] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 326.210244][T14747] alloc_inode+0xc3/0x240 [ 326.227663][T14747] create_pipe_files+0x4c/0x930 [ 326.232613][T14747] do_pipe2+0xaf/0x1c0 [ 326.237724][T14747] __x64_sys_pipe2+0x54/0x80 [ 326.243650][T14747] do_syscall_64+0xcd/0x230 [ 326.268742][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.651419][T14792] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 328.599925][T14872] i2c i2c-0: delete_device: Extra parameters [ 328.922696][T14882] zram: Added device: zram1 [ 329.710830][ T5834] Bluetooth: hci1: SCO packet too small [ 331.115484][T14962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79018 [ 331.129702][T14962] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.139231][T14962] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.147925][T14962] page_type: f5(slab) [ 331.153575][T14962] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 331.163395][T14962] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 331.172649][T14962] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 331.182162][T14962] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 331.192423][T14962] head: 00fff00000000003 ffffea0001e40601 00000000ffffffff 00000000ffffffff [ 331.201650][T14962] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 331.210861][T14962] page dumped because: unmovable page [ 331.216345][T14962] page_owner tracks the page as allocated [ 331.222720][T14962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13803, tgid 13803 (sed), ts 304485784008, free_ts 304430950409 [ 331.248000][T14962] post_alloc_hook+0x181/0x1b0 [ 331.254453][T14962] get_page_from_freelist+0x135c/0x3920 [ 331.273994][T14962] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 331.284126][T14962] alloc_pages_mpol+0x1fb/0x550 [ 331.297881][T14962] new_slab+0x244/0x340 [ 331.317632][T14962] ___slab_alloc+0xd9c/0x1940 [ 331.322477][T14962] __slab_alloc.constprop.0+0x56/0xb0 [ 331.377293][T14962] __kmalloc_noprof+0x2f2/0x510 [ 331.382247][T14962] tomoyo_realpath_from_path+0xc2/0x6e0 [ 331.422481][T14962] tomoyo_check_open_permission+0x2ab/0x3c0 [ 331.446825][T14962] tomoyo_file_open+0x6b/0x90 [ 331.451623][T14962] security_file_open+0x84/0x1e0 [ 331.475105][T14962] do_dentry_open+0x596/0x1c10 [ 331.485613][T14962] vfs_open+0x82/0x3f0 [ 331.498891][T14962] path_openat+0x1e5e/0x2d40 [ 331.503589][T14962] do_filp_open+0x20b/0x470 [ 331.526359][T14962] page last free pid 9121 tgid 9121 stack trace: [ 331.553479][T14962] __free_frozen_pages+0x69d/0xff0 [ 331.563358][T14962] __put_partials+0x16d/0x1c0 [ 331.576114][T14962] qlist_free_all+0x4e/0x120 [ 331.580804][T14962] kasan_quarantine_reduce+0x195/0x1e0 [ 331.606039][T14962] __kasan_slab_alloc+0x69/0x90 [ 331.645783][T14962] __kmalloc_noprof+0x1d4/0x510 [ 331.650835][T14962] tomoyo_realpath_from_path+0xc2/0x6e0 [ 331.675959][T14962] tomoyo_check_open_permission+0x2ab/0x3c0 [ 331.681973][T14962] tomoyo_file_open+0x6b/0x90 [ 331.705559][T14962] security_file_open+0x84/0x1e0 [ 331.710601][T14962] do_dentry_open+0x596/0x1c10 [ 331.745225][T14962] vfs_open+0x82/0x3f0 [ 331.765478][T14962] path_openat+0x1e5e/0x2d40 [ 331.770195][T14962] do_filp_open+0x20b/0x470 [ 331.774748][T14962] do_sys_openat2+0x11b/0x1d0 [ 331.824910][T14962] __x64_sys_openat+0x174/0x210 [ 331.966401][T14983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 332.578073][T14997] Setting dangerous option i915.mitigations - tainting kernel [ 332.610865][T14997] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 337.004829][ T5870] smpboot: CPU 1 is now offline [ 337.281540][T15148] sysfs_service_op_show: Client not running :-5: [ 338.362608][T15177] Debayer A: ================= START STATUS ================= [ 338.393900][T15177] Debayer A: Debayer Mean Window Size: 3 [ 338.421074][T15177] Debayer A: ================== END STATUS ================== [ 339.655288][T15217] Ignoring unsupported numa_zonelist_order value: [ 339.655288][T15217] [ 339.680296][T15218] [U] α{=@cBhPZ4:zI [ 340.191610][T15233] ima: policy update failed [ 340.198569][ T30] audit: type=1802 audit(4294967487.520:17): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3995" res=0 errno=0 [ 343.276478][T15323] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 343.724247][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 348.917188][T15484] kAFS: Invalid Command on /proc/fs/afs/cells file [ 353.257520][T15603] block nbd8: NBD_DISCONNECT [ 356.066483][T15678] ICMPv6: process `syz.6.4203' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 356.212716][T15683] bond0: Unable to set down delay as MII monitoring is disabled [ 358.098065][T15734] ubi0: attaching mtd0 [ 358.105434][T15734] ubi0: scanning is finished [ 358.154781][T15734] ubi0: empty MTD device detected [ 358.190557][T15734] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 358.418670][T15734] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 360.143047][ T3421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.362197][ T3421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.699044][ T3421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.964720][ T30] audit: type=1807 audit(4294967508.398:18): UNKNOWN= res=0 [ 360.972162][ T30] audit: type=1802 audit(4294967508.398:19): pid=15796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.4263" res=0 errno=0 [ 360.990865][T15795] ima: policy update failed [ 361.013601][ T3421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.063194][T15797] ima: policy update failed [ 361.153027][ T30] audit: type=1802 audit(4294967508.469:20): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4263" res=0 errno=0 [ 361.284599][ T30] audit: type=1807 audit(4294967508.489:21): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 361.392221][ T30] audit: type=1802 audit(4294967508.499:22): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4265" res=0 errno=0 [ 361.560777][ T30] audit: type=1802 audit(4294967508.499:23): pid=15797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4265" res=0 errno=0 [ 361.693043][ T3421] bridge_slave_1: left allmulticast mode [ 361.698759][ T3421] bridge_slave_1: left promiscuous mode [ 361.747821][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.881479][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.891123][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.900915][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.918603][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.926268][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.963723][ T3421] bridge_slave_0: left allmulticast mode [ 362.012063][ T3421] bridge_slave_0: left promiscuous mode [ 362.068456][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.015437][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.035487][ T5834] Bluetooth: hci0: command tx timeout [ 364.093814][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.139846][ T3421] bond0 (unregistering): Released all slaves [ 365.528406][ T3421] hsr_slave_0: left promiscuous mode [ 365.607815][ T3421] hsr_slave_1: left promiscuous mode [ 365.650720][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.658155][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.764632][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.818252][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.917105][ T3421] veth1_macvtap: left promiscuous mode [ 365.997232][ T3421] veth0_macvtap: left promiscuous mode [ 366.002872][ T3421] veth1_vlan: left promiscuous mode [ 366.067039][ T3421] veth0_vlan: left promiscuous mode [ 366.089231][ T5834] Bluetooth: hci0: command tx timeout [ 367.250071][T15948] block2mtd: device name too long [ 368.095459][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 368.156052][ T5834] Bluetooth: hci0: command tx timeout [ 368.332020][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 368.354571][T15976] bcache: register_bcache() error : failed to open device [ 369.303417][T16002] synth uevent: /bus/memstick: unknown uevent action string [ 369.930646][T16018] : Can't lookup blockdev [ 370.225215][ T5834] Bluetooth: hci0: command tx timeout [ 371.287759][T15814] chnl_net:caif_netlink_parms(): no params data found [ 371.952880][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.999517][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.051994][T15814] bridge_slave_0: entered allmulticast mode [ 372.105681][T15814] bridge_slave_0: entered promiscuous mode [ 372.153210][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.210582][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.251099][T15814] bridge_slave_1: entered allmulticast mode [ 372.292585][T15814] bridge_slave_1: entered promiscuous mode [ 372.550401][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.631878][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.927303][T15814] team0: Port device team_slave_0 added [ 373.007052][T15814] team0: Port device team_slave_1 added [ 373.317093][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.357754][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.482746][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.561350][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.600162][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.728863][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.995342][T15814] hsr_slave_0: entered promiscuous mode [ 374.036759][T15814] hsr_slave_1: entered promiscuous mode [ 374.078090][T15814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.117190][T15814] Cannot create hsr debugfs directory [ 375.176471][T15814] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.281078][T15814] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.327553][T15814] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.450233][T15814] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.901980][T15814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.022397][T15814] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.098333][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.105536][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.192567][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.199861][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.341640][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.650214][T15814] veth0_vlan: entered promiscuous mode [ 378.798028][T15814] veth1_vlan: entered promiscuous mode [ 378.961177][T15814] veth0_macvtap: entered promiscuous mode [ 379.037215][T15814] veth1_macvtap: entered promiscuous mode [ 379.138516][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.198673][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.237770][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.314516][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.373130][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.443353][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.489718][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.552689][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.620063][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.666840][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.722259][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.776457][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.813744][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.859518][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.939095][T15814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.983868][T15814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.036813][T15814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.081430][T15814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.573220][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.581162][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.768767][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.837592][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.352334][T16316] i2c i2c-0: new_device: Can't parse I2C address [ 382.409369][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.416035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.633809][T16383] deleting an unspecified loop device is not supported. [ 385.056601][T16423] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 385.402375][T16434] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 390.193865][T16583] ICMPv6: process `syz.1.4575' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 396.356891][T16771] QAT: failed to copy from user. [ 396.363364][T16772] bond0: option mode: unable to set because the bond device is up [ 399.030172][T16850] < [ 399.692088][T16869] ima: policy update failed [ 399.700579][ T30] audit: type=1802 audit(4294967555.336:24): pid=16869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.4702" res=0 errno=0 [ 399.984686][T16879] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 400.328926][T16889] program syz.5.4708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.211795][T17197] ceph: Failed to parse sending metrics switch value 'P^' [ 415.766845][ T5834] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 420.555247][T17524] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 423.871154][T17617] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 423.897279][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.032856][T17617] CIFS mount error: No usable UNC path provided in device string! [ 424.032856][T17617] [ 424.101390][T17617] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 424.893526][T17648] program syz.5.5037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.911422][T17649] Line length is too long: Should be less than 4094 [ 424.958318][T17648] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 426.197105][T17685] ubi0: attaching mtd0 [ 426.201270][T17685] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 429.261151][T17770] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 432.659095][T17864] binder: binder_mmap: 17863 0-1000 bad vm_flags failed -1 [ 443.535534][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.541863][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.846742][T18180] tipc: Can't bind to reserved service type 1 [ 447.193462][T18216] : Can't lookup blockdev [ 452.093121][T18365] binder: 18363:18365 ioctl 400c620e 200000001b00 returned -22 [ 452.386059][T18372] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 453.464020][T18402] kAFS: unparsable volume name [ 455.181188][ T5834] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 455.181223][ T5834] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 455.279560][T18442] Setting dangerous option i915.mitigations - tainting kernel [ 459.746764][T18546] ima: policy update failed [ 459.786814][ T30] audit: type=1802 audit(4294967615.718:25): pid=18546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5478" res=0 errno=0 [ 461.781431][T18607] mmap: syz.7.5506 (18607): VmData 39563264 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 462.440435][ T30] audit: type=1806 audit(4294967618.402:26): xattr=2EC7871B res=-22 [ 467.851053][T18766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.883060][T18766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 467.935954][T18766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.966091][T18766] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.018369][T18766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.045621][T18766] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 468.094605][T18766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.138871][T18766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 468.192085][T18766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 468.520747][T18794] block2mtd: illegal erase size [ 469.234914][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 469.329952][T18815] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 469.946874][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 470.030041][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 470.106112][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.299855][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 472.017792][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 472.098894][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 472.175335][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.319035][T18894] usb usb15: usbfs: process 18894 (syz.7.5646) did not claim interface 0 before use [ 473.477011][T18920] : Can't lookup blockdev [ 474.244425][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.438532][T18948] binder: 18947:18948 ioctl c0306201 0 returned -14 [ 478.675699][T19067] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 479.141456][T19069] svc: failed to register nfsdv3 RPC service (errno 111). [ 479.207883][T19069] svc: failed to register nfsaclv3 RPC service (errno 111). [ 479.784934][T19092] ubi0: attaching mtd0 [ 479.814896][T19092] ubi0: scanning is finished [ 479.859260][T19092] ubi0: empty MTD device detected [ 480.081462][T19092] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 480.130984][T19092] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 480.173337][T19092] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 480.213559][T19092] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 480.253208][T19092] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 480.280884][T19092] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 480.323039][T19092] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1818526564 [ 480.377438][T19092] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 480.428072][T19099] ubi0: background thread "ubi_bgt0d" started, PID 19099 [ 481.346895][T19130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.409407][T19166] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.504217][T19168] sd 0:0:1:0: PR command failed: 1026 [ 482.534449][T19168] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 482.550033][T19168] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 482.716934][T19171] HSR: entered promiscuous mode [ 485.596893][ T30] audit: type=1800 audit(4294967641.673:27): pid=19236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5804" name="discovery_nqn" dev="configfs" ino=49024 res=0 errno=0 [ 486.197986][T19243] ima: policy update failed [ 486.237205][ T30] audit: type=1802 audit(4294967642.326:28): pid=19243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5808" res=0 errno=0 [ 489.407604][T19335] openvswitch: netlink: IP tunnel dst address not specified [ 489.824044][T19338] svc: failed to register nfsdv3 RPC service (errno 111). [ 489.852169][T19338] svc: failed to register nfsaclv3 RPC service (errno 111). [ 489.929014][T19343] QAT: Device 0 not found [ 491.797555][T19382] netlink: 'syz.1.5866': attribute type 2 has an invalid length. [ 497.174249][T19514] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 497.710639][T19531] Zero length message leads to an empty skb [ 498.942472][T19563] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 504.670047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.678277][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.061586][T19706] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 505.264687][T19721] openvswitch: netlink: IPv6 tunnel dst address is zero [ 505.958247][T19741] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 506.350698][T19751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.549105][T19752] netlink: set zone limit has 8 unknown bytes [ 506.887326][T19764] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6044'. [ 509.367399][T19827] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 510.079843][T19846] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 511.275025][T19871] openvswitch: netlink: IP tunnel dst address not specified [ 511.527769][T19843] kexec: Could not allocate control_code_buffer [ 511.789624][T19881] netlink: 'syz.5.6096': attribute type 1 has an invalid length. [ 520.763119][T20114] capability: warning: `syz.5.6198' uses 32-bit capabilities (legacy support in use) [ 521.245815][T20122] openvswitch: netlink: Flow key attr not present in new flow. [ 526.027848][T20253] netlink: 'syz.3.6262': attribute type 2 has an invalid length. [ 527.264334][ T30] audit: type=1800 audit(4294967683.559:29): pid=20282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6276" name="features" dev="configfs" ino=52634 res=0 errno=0 [ 528.499434][T20306] netlink: 'syz.5.6287': attribute type 1 has an invalid length. [ 529.109917][T20323] netlink: del zone limit has 4 unknown bytes [ 532.494581][T20407] ubi0: detaching mtd0 [ 532.562856][T20407] ubi0: mtd0 is detached [ 536.167201][T20487] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 536.233429][T20487] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 539.293119][T20555] netlink: 'syz.3.6401': attribute type 2 has an invalid length. [ 539.418698][T20557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 540.299493][T20564] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 542.884914][T20621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.931632][T20621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.373343][T20633] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 543.418950][ T30] audit: type=1800 audit(4294967699.803:30): pid=20635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6436" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 544.441797][T20655] sg_read: process 1040 (syz.7.6445) changed security contexts after opening file descriptor, this is not allowed. [ 544.865341][T20660] nvme_fabrics: missing parameter 'transport=%s' [ 544.896874][T20660] nvme_fabrics: missing parameter 'nqn=%s' [ 544.918346][T20662] nvme_fabrics: unknown parameter or missing value 'nbd V' in ctrl creation request [ 545.393109][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6453'. [ 545.477553][T20674] openvswitch: netlink: Duplicate or invalid key (type 0). [ 546.081243][T20690] openvswitch: netlink: Duplicate key (type 15). [ 550.536926][T20787] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6508'. [ 551.195942][T20803] dyndbg: expected <4096 bytes into control [ 552.345607][T20828] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 552.534363][T20834] sctp: [Deprecated]: syz.7.6530 (pid 20834) Use of int in max_burst socket option deprecated. [ 552.534363][T20834] Use struct sctp_assoc_value instead [ 553.962593][T20863] vivid-003: ================= START STATUS ================= [ 554.001866][T20863] vivid-003: Radio HW Seek Mode: Bounded [ 554.007592][T20863] vivid-003: Radio Programmable HW Seek: false [ 554.063227][T20863] vivid-003: RDS Rx I/O Mode: Block I/O [ 554.068848][T20863] vivid-003: Generate RBDS Instead of RDS: false [ 554.161513][T20863] vivid-003: RDS Reception: true [ 554.179166][T20863] vivid-003: RDS Program Type: 0 inactive [ 554.212301][T20863] vivid-003: RDS PS Name: inactive [ 554.241869][T20863] vivid-003: RDS Radio Text: inactive [ 554.284202][T20863] vivid-003: RDS Traffic Announcement: false inactive [ 554.312071][T20863] vivid-003: RDS Traffic Program: false inactive [ 554.348987][T20863] vivid-003: RDS Music: false inactive [ 554.386155][T20863] vivid-003: ================== END STATUS ================== [ 554.487883][T20873] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 555.051276][T20877] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 555.424747][T20892] : entered promiscuous mode [ 556.746009][T20919] vivid-007: ================= START STATUS ================= [ 556.817227][T20919] vivid-007: Generate PTS: true [ 556.874300][T20919] vivid-007: Generate SCR: true [ 556.924326][T20919] tpg source WxH: 640x360 (Y'CbCr) [ 556.967860][T20919] tpg field: 1 [ 557.033510][T20919] tpg crop: (0,0)/640x360 [ 557.068112][T20919] tpg compose: (0,0)/640x360 [ 557.116841][T20919] tpg colorspace: 8 [ 557.179727][T20919] tpg transfer function: 0/2 [ 557.236592][T20919] tpg Y'CbCr encoding: 0/1 [ 557.300289][T20919] tpg quantization: 0/2 [ 557.341389][T20919] tpg RGB range: 0/2 [ 557.377908][T20919] vivid-007: ================== END STATUS ================== [ 557.457479][T20937] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 557.899542][T20945] CIFS: VFS: Invalid SecurityFlags: [ 558.821673][T20969] ksmbd: Unknown IPC event: 14, ignore. [ 561.062967][T21027] aoe: copy from user failed [ 561.067617][T21027] aoe: could not set interface list: too many interfaces [ 561.371460][T21037] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 561.951336][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6628'. [ 564.218645][T21111] netlink: 'syz.7.6654': attribute type 2 has an invalid length. [ 564.714922][T21124] nbd: couldn't find device at index 33904 [ 565.350068][T21142] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6668'. [ 565.780420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.786825][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.075259][T21163] sd 0:0:1:0: PR command failed: 1026 [ 566.095863][T21163] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 566.144429][T21163] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 567.082150][T21186] netlink: 'syz.1.6688': attribute type 1 has an invalid length. [ 567.116585][T21188] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 567.138017][T21189] sd 0:0:1:0: PR command failed: 1026 [ 567.161633][T21189] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 567.223106][T21189] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 568.013789][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6696'. [ 571.522497][T21302] netlink: set zone limit has 8 unknown bytes [ 572.184259][T21318] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 573.424415][T21350] netlink: 'syz.7.6764': attribute type 2 has an invalid length. [ 573.564937][T21353] batman_adv: Routing algorithm '' is not supported [ 574.294820][T21373] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 574.854848][ T30] audit: type=1800 audit(4294967731.407:31): pid=21389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6783" name="members" dev="configfs" ino=56197 res=0 errno=0 [ 575.535388][T21407] netlink: 206 bytes leftover after parsing attributes in process `syz.5.6792'. [ 575.846135][T21417] program syz.5.6797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.443853][T21458] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 577.733883][T21464] netlink: 'syz.7.6819': attribute type 1 has an invalid length. [ 578.337791][T21481] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 580.566649][T21543] netlink: 'syz.1.6857': attribute type 1 has an invalid length. [ 581.162278][T21558] netlink: 306 bytes leftover after parsing attributes in process `syz.1.6864'. [ 581.879874][T21283] Bluetooth: hci2: ACL packet too small [ 588.772751][T21737] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 589.691933][T21763] CIFS: VFS: Invalid SecurityFlags: [ 590.230622][T21775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.521202][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6961'. [ 593.365063][T21843] ucma_write: process 2850 (syz.5.6988) changed security contexts after opening file descriptor, this is not allowed. [ 593.959177][T21863] block nbd0: not configured, cannot reconfigure [ 594.211552][T21869] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 594.782534][ T30] audit: type=1800 audit(4294967751.430:32): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7008" name="lu_gp_id" dev="configfs" ino=57826 res=0 errno=0 [ 595.247014][T21893] random: crng reseeded on system resumption [ 597.534906][T21952] openvswitch: netlink: Multiple metadata blocks provided [ 597.878813][T21963] ima: policy update failed [ 597.906177][ T30] audit: type=1802 audit(4294967754.577:33): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.7043" res=0 errno=0 [ 598.424201][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7049'. [ 598.707297][T21987] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 598.764142][T21987] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 599.551905][T22008] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 600.460141][T22032] netlink: 'syz.5.7072': attribute type 1 has an invalid length. [ 601.559613][T22062] tipc: Enabling of bearer rejected, media not registered [ 603.010355][T22099] netlink: zone id is out of range [ 603.042030][T22099] netlink: get zone limit has 4 unknown bytes [ 603.166151][T22101] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7105'. [ 605.428479][T22155] perf: Dynamic interrupt throttling disabled, can hang your system! [ 605.670348][T22161] netlink: 'syz.1.7131': attribute type 11 has an invalid length. [ 605.728522][T22161] netlink: 'syz.1.7131': attribute type 11 has an invalid length. [ 605.758377][T22161] netlink: 'syz.1.7131': attribute type 11 has an invalid length. [ 605.792833][T22161] netlink: 'syz.1.7131': attribute type 11 has an invalid length. [ 606.047974][T22168] netlink: 'syz.7.7134': attribute type 22 has an invalid length. [ 606.372190][T22176] Console: switching to colour VGA+ 80x25 [ 606.919672][T22190] openvswitch: netlink: IP tunnel dst address not specified [ 607.351735][T22201] svc: failed to register nfsdv3 RPC service (errno 111). [ 607.415613][T22201] svc: failed to register nfsaclv3 RPC service (errno 111). [ 609.418308][T22252] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 610.524470][T22280] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 610.811839][T22286] delete_channel: no stack [ 611.379593][T22298] netlink: 'syz.1.7194': attribute type 11 has an invalid length. [ 611.434195][T22298] netlink: 'syz.1.7194': attribute type 11 has an invalid length. [ 611.472053][T22298] netlink: 'syz.1.7194': attribute type 11 has an invalid length. [ 613.079319][T22346] ubi0: attaching mtd0 [ 613.108502][T22346] ubi0: scanning is finished [ 613.152086][T22346] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 613.369963][T22346] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 614.882958][T22393] netlink: zone id is out of range [ 614.888135][T22393] netlink: zone id is out of range [ 614.933501][T22393] netlink: zone id is out of range [ 614.938668][T22393] netlink: zone id is out of range [ 614.992560][T22393] netlink: zone id is out of range [ 615.030787][T22393] netlink: zone id is out of range [ 615.077404][T22393] netlink: zone id is out of range [ 615.089146][T22393] netlink: zone id is out of range [ 615.127945][T22393] netlink: zone id is out of range [ 615.171504][T22393] netlink: zone id is out of range [ 616.746842][T22439] zram: Removed device: zram0 [ 620.685148][T22535] MTRR 1 not used [ 620.964667][T22544] netlink: 'syz.3.7309': attribute type 11 has an invalid length. [ 621.000842][T22544] netlink: 'syz.3.7309': attribute type 11 has an invalid length. [ 621.036568][T22544] netlink: 'syz.3.7309': attribute type 11 has an invalid length. [ 621.926227][T22573] net_ratelimit: 20 callbacks suppressed [ 621.926249][T22573] netlink: zone id is out of range [ 621.981508][T22573] netlink: zone id is out of range [ 622.013574][T22573] netlink: zone id is out of range [ 622.033858][T22573] netlink: zone id is out of range [ 622.075790][T22573] netlink: zone id is out of range [ 622.113127][T22573] netlink: zone id is out of range [ 622.123281][T22573] netlink: zone id is out of range [ 622.156794][T22573] netlink: zone id is out of range [ 622.197385][T22573] netlink: zone id is out of range [ 622.213063][T22573] netlink: zone id is out of range [ 624.228055][T22637] program syz.7.7351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.585272][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7367'. [ 626.900155][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.906669][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.410845][T22714] nbd: must specify an index to disconnect [ 627.932975][T22728] net_ratelimit: 22 callbacks suppressed [ 627.932995][T22728] openvswitch: netlink: Flow key attribute not present in set flow. [ 628.747807][T22749] netlink: 206 bytes leftover after parsing attributes in process `syz.1.7403'. [ 628.972908][T22752] delete_channel: no stack [ 629.182201][T22755] Invalid ELF header magic: != ELF [ 629.762720][T22774] netlink: 'syz.3.7417': attribute type 2 has an invalid length. [ 630.351896][T22789] netlink: Conntrack attr has 16 unknown bytes [ 630.903451][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7430'. [ 633.406960][T22868] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 635.054016][T22911] nbd: illegal input index 2147483647 [ 688.019768][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.029581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.141841][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.149412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.606087][ T31] INFO: task syz.5.7517:22988 blocked for more than 143 seconds. [ 781.613864][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 781.636511][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 781.645243][ T31] task:syz.5.7517 state:D stack:26488 pid:22988 tgid:22988 ppid:8646 task_flags:0x440140 flags:0x00000004 [ 781.661599][ T31] Call Trace: [ 781.664918][ T31] [ 781.668222][ T31] __schedule+0x116f/0x5de0 [ 781.672764][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 781.684105][ T31] ? __pfx___schedule+0x10/0x10 [ 781.690339][ T31] ? find_held_lock+0x2b/0x80 [ 781.695052][ T31] ? schedule+0x2d7/0x3a0 [ 781.704125][ T31] schedule+0xe7/0x3a0 [ 781.708635][ T31] io_schedule+0xbf/0x130 [ 781.713054][ T31] bit_wait_io+0x15/0xe0 [ 781.719968][ T31] __wait_on_bit+0x62/0x180 [ 781.724505][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 781.730622][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 781.738570][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 781.744586][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 781.750462][ T31] do_get_write_access+0x93d/0x12a0 [ 781.758233][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 781.770839][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 781.779885][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 781.789070][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 781.794589][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 781.805625][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 781.811679][ T31] ? rcu_is_watching+0x12/0xc0 [ 781.818967][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 781.824914][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 781.830144][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 781.839307][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 781.845277][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 781.850240][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 781.858352][ T31] ext4_dirty_inode+0xd9/0x130 [ 781.864647][ T31] ? rcu_is_watching+0x12/0xc0 [ 781.869845][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 781.877825][ T31] generic_update_time+0xcf/0xf0 [ 781.882817][ T31] file_update_time+0x17d/0x1c0 [ 781.888116][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 781.893188][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 781.907444][ T31] do_page_mkwrite+0x171/0x380 [ 781.912272][ T31] do_pte_missing+0x29c/0x3fb0 [ 781.920451][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 781.927292][ T31] __handle_mm_fault+0x103d/0x2a40 [ 781.932444][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 781.940620][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 781.946800][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 781.952064][ T31] handle_mm_fault+0x3fe/0xad0 [ 781.959484][ T31] do_user_addr_fault+0x60c/0x1370 [ 781.966250][ T31] exc_page_fault+0x5c/0xc0 [ 781.970791][ T31] asm_exc_page_fault+0x26/0x30 [ 781.978334][ T31] RIP: 0033:0x7f873b26f282 [ 781.982775][ T31] RSP: 002b:00007ffe2973d900 EFLAGS: 00010202 [ 781.989453][ T31] RAX: 000000000000b008 RBX: 00007f873c0e5720 RCX: 0000000000000000 [ 781.999980][ T31] RDX: 0000001b2e815000 RSI: 0000000000000008 RDI: 00007f873c0e5720 [ 782.015104][ T31] RBP: 000000000000069a R08: 00007f873a9ff0d0 R09: 00007f873b5a2000 [ 782.023121][ T31] R10: 00007f873a9ff008 R11: 0000000000000001 R12: ffffffff822a95de [ 782.036586][ T31] R13: 00007f873b5b6038 R14: 00000000000001e5 R15: ffffffffffff5000 [ 782.045055][ T31] ? lookup_page_ext+0xe/0x190 [ 782.049853][ T31] [ 782.052925][ T31] INFO: task syz.3.7521:22998 blocked for more than 143 seconds. [ 782.069900][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 782.081120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 782.090952][ T31] task:syz.3.7521 state:D stack:28344 pid:22998 tgid:22998 ppid:5828 task_flags:0x440040 flags:0x00000004 [ 782.105626][ T31] Call Trace: [ 782.110218][ T31] [ 782.116320][ T31] __schedule+0x116f/0x5de0 [ 782.120923][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 782.130946][ T31] ? __pfx___schedule+0x10/0x10 [ 782.136853][ T31] ? find_held_lock+0x2b/0x80 [ 782.141589][ T31] ? schedule+0x2d7/0x3a0 [ 782.148721][ T31] schedule+0xe7/0x3a0 [ 782.153121][ T31] io_schedule+0xbf/0x130 [ 782.157480][ T31] bit_wait_io+0x15/0xe0 [ 782.161746][ T31] __wait_on_bit+0x62/0x180 [ 782.171217][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 782.176658][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 782.182083][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 782.190672][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 782.196440][ T31] do_get_write_access+0x93d/0x12a0 [ 782.201682][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 782.211396][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 782.218013][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 782.228255][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 782.236258][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 782.241683][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 782.251051][ T31] ? rcu_is_watching+0x12/0xc0 [ 782.256110][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 782.261772][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 782.270850][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 782.277618][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 782.286096][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 782.291063][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 782.296863][ T31] ext4_dirty_inode+0xd9/0x130 [ 782.301679][ T31] ? rcu_is_watching+0x12/0xc0 [ 782.309068][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 782.315740][ T31] generic_update_time+0xcf/0xf0 [ 782.320719][ T31] file_update_time+0x17d/0x1c0 [ 782.328733][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 782.337080][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 782.346790][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 782.353401][ T31] ? pte_alloc_one+0x2b1/0x380 [ 782.358205][ T31] do_page_mkwrite+0x171/0x380 [ 782.365680][ T31] do_pte_missing+0x29c/0x3fb0 [ 782.372516][ T31] __handle_mm_fault+0x103d/0x2a40 [ 782.377719][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 782.386601][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 782.392158][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 782.397409][ T31] handle_mm_fault+0x3fe/0xad0 [ 782.404706][ T31] do_user_addr_fault+0x60c/0x1370 [ 782.409851][ T31] exc_page_fault+0x5c/0xc0 [ 782.416108][ T31] asm_exc_page_fault+0x26/0x30 [ 782.420993][ T31] RIP: 0033:0x7f8c9fc6eada [ 782.428088][ T31] RSP: 002b:00007ffc87be3cf0 EFLAGS: 00010202 [ 782.434770][ T31] RAX: 0000001b30320000 RBX: 00007f8ca0ae5720 RCX: 0000001b3031fff8 [ 782.447421][ T31] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f8ca0ae5700 [ 782.458010][ T31] RBP: ffffffff815df230 R08: 00007f8c9ffb6038 R09: 00007f8c9ffa2000 [ 782.469441][ T31] R10: 00007f8c9f3ff008 R11: 0000000000000000 R12: 0000000000000000 [ 782.479032][ T31] R13: 0000000000000001 R14: ffffffff815dfb5a R15: 0000000000000001 [ 782.490118][ T31] ? __x64_sys_mmap+0x1a/0x190 [ 782.496002][ T31] ? ia32_setup_rt_frame+0x550/0xb30 [ 782.503795][ T31] [ 782.507017][ T31] INFO: task syz.1.7522:22999 blocked for more than 144 seconds. [ 782.515197][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 782.528221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 782.537232][ T31] task:syz.1.7522 state:D stack:28168 pid:22999 tgid:22999 ppid:5827 task_flags:0x440040 flags:0x00000004 [ 782.553124][ T31] Call Trace: [ 782.556435][ T31] [ 782.559380][ T31] __schedule+0x116f/0x5de0 [ 782.568632][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 782.576053][ T31] ? __pfx___schedule+0x10/0x10 [ 782.583621][ T31] ? find_held_lock+0x2b/0x80 [ 782.588355][ T31] ? schedule+0x2d7/0x3a0 [ 782.593093][ T31] schedule+0xe7/0x3a0 [ 782.597193][ T31] io_schedule+0xbf/0x130 [ 782.604840][ T31] bit_wait_io+0x15/0xe0 [ 782.609131][ T31] __wait_on_bit+0x62/0x180 [ 782.613989][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 782.620319][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 782.628427][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 782.634693][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 782.640193][ T31] do_get_write_access+0x93d/0x12a0 [ 782.649766][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 782.656324][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 782.667201][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 782.675306][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 782.685442][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 782.691140][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 782.697179][ T31] ? rcu_is_watching+0x12/0xc0 [ 782.704636][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 782.711339][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 782.716570][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 782.726514][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 782.732450][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 782.737410][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 782.745306][ T31] ext4_dirty_inode+0xd9/0x130 [ 782.750364][ T31] ? rcu_is_watching+0x12/0xc0 [ 782.755153][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 782.762901][ T31] generic_update_time+0xcf/0xf0 [ 782.767886][ T31] file_update_time+0x17d/0x1c0 [ 782.775324][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 782.786437][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 782.793412][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 782.798913][ T31] ? pte_alloc_one+0x2b1/0x380 [ 782.811444][ T31] do_page_mkwrite+0x171/0x380 [ 782.816259][ T31] do_pte_missing+0x29c/0x3fb0 [ 782.823617][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 782.828868][ T31] ? __pmd_alloc+0x3c2/0x870 [ 782.836148][ T31] __handle_mm_fault+0x103d/0x2a40 [ 782.841550][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 782.847028][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 782.854771][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 782.860243][ T31] handle_mm_fault+0x3fe/0xad0 [ 782.865286][ T31] do_user_addr_fault+0x60c/0x1370 [ 782.873168][ T31] exc_page_fault+0x5c/0xc0 [ 782.877705][ T31] asm_exc_page_fault+0x26/0x30 [ 782.886464][ T31] RIP: 0033:0x7f716906547b [ 782.895704][ T31] RSP: 002b:00007ffd6e91f640 EFLAGS: 00010246 [ 782.902935][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 782.913375][ T31] RDX: 0000001b2fb20000 RSI: 0000000000600000 RDI: 00007f7169298d50 [ 782.921587][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 782.934045][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 782.942316][ T31] R13: 00000000000927c0 R14: 000000000009c8cc R15: 00007ffd6e91f8f0 [ 782.952773][ T31] [ 782.955819][ T31] [ 782.955819][ T31] Showing all locks held in the system: [ 782.964058][ T31] 1 lock held by khungtaskd/31: [ 782.971329][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 782.982419][ T31] 3 locks held by syz-executor/5816: [ 782.987723][ T31] #0: ffff888061359948 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 783.004830][ T31] #1: ffff88814e0ee518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 783.016007][ T31] #2: ffff88814e0f2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 783.029542][ T31] 2 locks held by getty/20154: [ 783.034328][ T31] #0: ffff888031c4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 783.050166][ T31] #1: ffffc900042332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 783.061176][ T31] 3 locks held by syz.5.7517/22988: [ 783.066397][ T31] #0: ffff8880641ece48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 783.077814][ T31] #1: ffff88814e0ee518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 783.091274][ T31] #2: ffff88814e0f2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 783.101192][ T31] 3 locks held by syz.3.7521/22998: [ 783.106399][ T31] #0: ffff88807c829bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 783.124039][ T31] #1: ffff88814e0ee518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 783.136126][ T31] #2: ffff88814e0f2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 783.149049][ T31] 3 locks held by syz.1.7522/22999: [ 783.154288][ T31] #0: ffff88802a2b0588 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 783.165658][ T31] #1: ffff88814e0ee518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 783.176085][ T31] #2: ffff88814e0f2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 783.189508][ T31] 3 locks held by syz.7.7523/23001: [ 783.194733][ T31] #0: ffff88802dce5a88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 783.206592][ T31] #1: ffff88814e0ee518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 783.219330][ T31] #2: ffff88814e0f2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 783.235110][ T31] [ 783.240152][ T31] ============================================= [ 783.240152][ T31] [ 783.249566][ T31] NMI backtrace for cpu 0 [ 783.249591][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 783.249626][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 783.249634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 783.249646][ T31] Call Trace: [ 783.249653][ T31] [ 783.249660][ T31] dump_stack_lvl+0x116/0x1f0 [ 783.249694][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 783.249716][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 783.249751][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 783.249775][ T31] watchdog+0xf70/0x12c0 [ 783.249807][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.249832][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.249860][ T31] ? __kthread_parkme+0x19e/0x250 [ 783.249886][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.249912][ T31] kthread+0x3c2/0x780 [ 783.249953][ T31] ? __pfx_kthread+0x10/0x10 [ 783.249980][ T31] ? __pfx_kthread+0x10/0x10 [ 783.250008][ T31] ? __pfx_kthread+0x10/0x10 [ 783.250054][ T31] ? __pfx_kthread+0x10/0x10 [ 783.250083][ T31] ? rcu_is_watching+0x12/0xc0 [ 783.250104][ T31] ? __pfx_kthread+0x10/0x10 [ 783.250154][ T31] ret_from_fork+0x45/0x80 [ 783.250189][ T31] ? __pfx_kthread+0x10/0x10 [ 783.250221][ T31] ret_from_fork_asm+0x1a/0x30 [ 783.250268][ T31] [ 783.250282][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 783.390604][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 783.403982][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 783.409971][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 783.420026][ T31] Call Trace: [ 783.423306][ T31] [ 783.426237][ T31] dump_stack_lvl+0x3d/0x1f0 [ 783.430839][ T31] panic+0x71c/0x800 [ 783.434746][ T31] ? __pfx_panic+0x10/0x10 [ 783.439175][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 783.444136][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 783.449876][ T31] ? irq_work_queue+0xce/0x100 [ 783.454657][ T31] ? watchdog+0xdda/0x12c0 [ 783.459107][ T31] ? watchdog+0xdcd/0x12c0 [ 783.463543][ T31] watchdog+0xdeb/0x12c0 [ 783.467809][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.472540][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.477755][ T31] ? __kthread_parkme+0x19e/0x250 [ 783.482796][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.487527][ T31] kthread+0x3c2/0x780 [ 783.491611][ T31] ? __pfx_kthread+0x10/0x10 [ 783.496211][ T31] ? __pfx_kthread+0x10/0x10 [ 783.500815][ T31] ? __pfx_kthread+0x10/0x10 [ 783.505419][ T31] ? __pfx_kthread+0x10/0x10 [ 783.510019][ T31] ? rcu_is_watching+0x12/0xc0 [ 783.514784][ T31] ? __pfx_kthread+0x10/0x10 [ 783.519393][ T31] ret_from_fork+0x45/0x80 [ 783.523827][ T31] ? __pfx_kthread+0x10/0x10 [ 783.528431][ T31] ret_from_fork_asm+0x1a/0x30 [ 783.533225][ T31] [ 783.536304][ T31] Kernel Offset: disabled [ 783.540634][ T31] Rebooting in 86400 seconds..