last executing test programs: 2.857415931s ago: executing program 2 (id=6407): mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') 2.22015604s ago: executing program 2 (id=6415): r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_userio_fops_userio(r0, 0x0, 0x0) 1.51570461s ago: executing program 2 (id=6427): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x1b, 0x34, 0x7fff, 0x40000005, 0x80000000009, 0xfffffffffffffffe, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x3, 0x3, 0x7, 0x9}) 1.160492257s ago: executing program 1 (id=6431): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002c40)='/dev/snd/midiC2D2\x00', 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000002c80)={0x0, 0xad1b, 0x0, 0x0, 0x8, "ed0fec02e6bf50d015c76509"}) 1.153847362s ago: executing program 0 (id=6432): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x5403, 0x3) 1.123755828s ago: executing program 3 (id=6433): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000440)={0xa2, 0x0, 0xe00, 0x15, 0x3, 0x0, 0x0}) 1.024062255s ago: executing program 2 (id=6434): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000100)="fb", 0xffffff3d) 959.665035ms ago: executing program 0 (id=6435): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0xb, 0xa79e) 943.555026ms ago: executing program 1 (id=6436): openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) 925.001926ms ago: executing program 3 (id=6437): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)="ff03") 767.061515ms ago: executing program 0 (id=6438): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 760.176393ms ago: executing program 1 (id=6439): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) 718.094249ms ago: executing program 3 (id=6440): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 556.912551ms ago: executing program 0 (id=6441): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002f00)='/sys/module/vmxnet3/version\x00', 0x400, 0x0) read$auto(r0, &(0x7f00000032c0)='#(@-]\x00', 0x9) 509.794061ms ago: executing program 3 (id=6442): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) write$auto(r0, 0x0, 0x10000000008) 507.573624ms ago: executing program 1 (id=6443): r0 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_score_adj\x00', 0x20202, 0x0) read$auto_proc_oom_score_adj_operations_base(r0, 0x0, 0x0) 471.886056ms ago: executing program 2 (id=6444): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000200000000) 345.714865ms ago: executing program 0 (id=6445): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$auto(r0, 0x8004b707, 0x1) 301.351503ms ago: executing program 3 (id=6446): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume_offset\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) 300.500344ms ago: executing program 1 (id=6447): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x6, 0x809) 147.099414ms ago: executing program 0 (id=6448): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 88.127469ms ago: executing program 1 (id=6449): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) 85.039537ms ago: executing program 3 (id=6450): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) 0s ago: executing program 2 (id=6451): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x100020000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 91.185875][ T5812] cgroup: Unknown subsys name 'net' [ 91.281755][ T5812] cgroup: Unknown subsys name 'cpuset' [ 91.291777][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.989126][ T10] cfg80211: failed to load regulatory.db [ 93.138253][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.475484][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.484260][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.492830][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.501226][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.518109][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.628509][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.637983][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.645921][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.655620][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.668510][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.698603][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.707400][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.726949][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.735305][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.743814][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.751906][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.770016][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.780411][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.782479][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.823235][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.231685][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 100.405232][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 100.514474][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 100.535724][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.543636][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.552414][ T5831] bridge_slave_0: entered allmulticast mode [ 100.560331][ T5831] bridge_slave_0: entered promiscuous mode [ 100.620438][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.627714][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.635123][ T5831] bridge_slave_1: entered allmulticast mode [ 100.642828][ T5831] bridge_slave_1: entered promiscuous mode [ 100.650712][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 100.754912][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.767908][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.846154][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.853485][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.861043][ T5836] bridge_slave_0: entered allmulticast mode [ 100.868703][ T5836] bridge_slave_0: entered promiscuous mode [ 100.876193][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.884126][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.891535][ T5835] bridge_slave_0: entered allmulticast mode [ 100.899014][ T5835] bridge_slave_0: entered promiscuous mode [ 100.908156][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.915301][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.923022][ T5835] bridge_slave_1: entered allmulticast mode [ 100.930811][ T5835] bridge_slave_1: entered promiscuous mode [ 100.964107][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.971391][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.978690][ T5836] bridge_slave_1: entered allmulticast mode [ 100.987000][ T5836] bridge_slave_1: entered promiscuous mode [ 101.007945][ T5831] team0: Port device team_slave_0 added [ 101.052121][ T5831] team0: Port device team_slave_1 added [ 101.085129][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.106642][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.114045][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.121445][ T5838] bridge_slave_0: entered allmulticast mode [ 101.129319][ T5838] bridge_slave_0: entered promiscuous mode [ 101.139876][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.152703][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.186359][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.193878][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.201593][ T5838] bridge_slave_1: entered allmulticast mode [ 101.209295][ T5838] bridge_slave_1: entered promiscuous mode [ 101.219667][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.241757][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.248915][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.275764][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.315244][ T5835] team0: Port device team_slave_0 added [ 101.322355][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.329514][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.360885][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.396961][ T5835] team0: Port device team_slave_1 added [ 101.414636][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.426416][ T5836] team0: Port device team_slave_0 added [ 101.460455][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.471786][ T5836] team0: Port device team_slave_1 added [ 101.479519][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.486580][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.513010][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.560505][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.567632][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.594837][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.595045][ T5146] Bluetooth: hci0: command tx timeout [ 101.658819][ T5838] team0: Port device team_slave_0 added [ 101.665254][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.672427][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.698757][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.716730][ T5831] hsr_slave_0: entered promiscuous mode [ 101.723715][ T5831] hsr_slave_1: entered promiscuous mode [ 101.768275][ T5838] team0: Port device team_slave_1 added [ 101.774632][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.781880][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.807961][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.827446][ T51] Bluetooth: hci1: command tx timeout [ 101.833284][ T5146] Bluetooth: hci3: command tx timeout [ 101.896926][ T5835] hsr_slave_0: entered promiscuous mode [ 101.903620][ T5835] hsr_slave_1: entered promiscuous mode [ 101.910322][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 101.916155][ T5835] Cannot create hsr debugfs directory [ 101.917518][ T5146] Bluetooth: hci2: command tx timeout [ 101.939812][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.946825][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.974121][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.003049][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.010340][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.037445][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.188320][ T5836] hsr_slave_0: entered promiscuous mode [ 102.195000][ T5836] hsr_slave_1: entered promiscuous mode [ 102.202123][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 102.207945][ T5836] Cannot create hsr debugfs directory [ 102.227412][ T5838] hsr_slave_0: entered promiscuous mode [ 102.234023][ T5838] hsr_slave_1: entered promiscuous mode [ 102.240603][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 102.246354][ T5838] Cannot create hsr debugfs directory [ 102.601808][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.630359][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.650403][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.678626][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.752922][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.764923][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.776195][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.791182][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.914988][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.938963][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.951512][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.980915][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.086446][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.098590][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.110909][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.122075][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.136504][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.214246][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.232098][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.247359][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.254820][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.285743][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.292937][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.312959][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.363636][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.370869][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.397492][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.404689][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.463282][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.499421][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.551731][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.559079][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.586207][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.593575][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.631165][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.669046][ T5146] Bluetooth: hci0: command tx timeout [ 103.740318][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.784437][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.791742][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.815344][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.822598][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.910320][ T5146] Bluetooth: hci3: command tx timeout [ 103.915835][ T5146] Bluetooth: hci1: command tx timeout [ 103.987475][ T5146] Bluetooth: hci2: command tx timeout [ 104.178232][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.223478][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.389330][ T5835] veth0_vlan: entered promiscuous mode [ 104.406905][ T5831] veth0_vlan: entered promiscuous mode [ 104.431573][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.440312][ T5835] veth1_vlan: entered promiscuous mode [ 104.455850][ T5831] veth1_vlan: entered promiscuous mode [ 104.480044][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.563235][ T5831] veth0_macvtap: entered promiscuous mode [ 104.575128][ T5831] veth1_macvtap: entered promiscuous mode [ 104.611970][ T5838] veth0_vlan: entered promiscuous mode [ 104.630993][ T5835] veth0_macvtap: entered promiscuous mode [ 104.659967][ T5836] veth0_vlan: entered promiscuous mode [ 104.670032][ T5838] veth1_vlan: entered promiscuous mode [ 104.679371][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.688871][ T5835] veth1_macvtap: entered promiscuous mode [ 104.716137][ T5836] veth1_vlan: entered promiscuous mode [ 104.731304][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.776802][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.793139][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.814193][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.824268][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.840585][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.852788][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.883996][ T5838] veth0_macvtap: entered promiscuous mode [ 104.915934][ T5838] veth1_macvtap: entered promiscuous mode [ 104.931356][ T5836] veth0_macvtap: entered promiscuous mode [ 104.940669][ T169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.951881][ T169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.979497][ T5836] veth1_macvtap: entered promiscuous mode [ 104.986599][ T169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.000941][ T169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.044732][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.053382][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.101088][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.129925][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.176356][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.189894][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.214860][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.223307][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.249411][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.258898][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.304351][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.313850][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.325564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.333738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.369522][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.394609][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.409073][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.422627][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.471695][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.549431][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.559009][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.632636][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.663441][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.749130][ T5146] Bluetooth: hci0: command tx timeout [ 105.780818][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.817214][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.979313][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.994507][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.998167][ T5146] Bluetooth: hci1: command tx timeout [ 106.009186][ T51] Bluetooth: hci3: command tx timeout [ 106.068106][ T5146] Bluetooth: hci2: command tx timeout [ 106.088038][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.096302][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.839127][ T5944] syz.2.16 (5944): attempted to duplicate a private mapping with mremap. This is not supported. [ 107.830004][ T5146] Bluetooth: hci0: command tx timeout [ 107.864561][ T29] audit: type=1800 audit(1774980419.171:2): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="version" dev="configfs" ino=7815 res=0 errno=0 [ 108.067932][ T5146] Bluetooth: hci1: command tx timeout [ 108.073502][ T5146] Bluetooth: hci3: command tx timeout [ 108.157669][ T5146] Bluetooth: hci2: command tx timeout [ 111.426717][ T6113] Invalid ELF header magic: != ELF [ 112.872492][ T29] audit: type=1800 audit(1774980424.191:3): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.129" name="dummy_udc" dev="gadgetfs" ino=6913 res=0 errno=0 [ 113.251208][ T6186] Unable to find swap-space signature [ 116.046777][ T6301] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.742168][ T6531] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.174617][ T6724] futex_wake_op: syz.2.401 tries to shift op by -1; fix this program [ 127.422716][ T6776] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[6776] [ 132.206074][ T6976] can: request_module (can-proto-5) failed. [ 132.951066][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957691][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.959661][ T29] audit: type=1800 audit(1774983516.291:4): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.561" name="dbroot" dev="configfs" ino=10931 res=0 errno=0 [ 134.864575][ T5146] Bluetooth: hci3: unexpected event 0x22 length: 726 > 260 [ 134.864640][ T5146] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 135.080703][ T5146] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 135.080750][ T5146] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 135.440061][ T7123] futex_wake_op: syz.0.594 tries to shift op by -2048; fix this program [ 139.668934][ T7310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.896115][ T5146] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 140.031279][ T7326] mmap: syz.2.696 (7326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.343286][ T5146] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 146.919087][ T29] audit: type=1800 audit(1774983529.318:5): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.843" name="members" dev="configfs" ino=13440 res=0 errno=0 [ 148.868209][ T5146] Bluetooth: hci0: unknown advertising packet type: 0xea [ 153.558579][ T7801] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.696694][ T5146] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 155.921592][ T7872] ima: policy update failed [ 155.944295][ T29] audit: type=1802 audit(1774983538.385:6): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.961" res=0 errno=0 [ 156.014373][ T7874] Unable to find swap-space signature [ 156.198678][ T7880] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.944911][ T7856] kexec: Could not allocate control_code_buffer [ 158.191099][ T7946] syz.3.999 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.368888][ T7990] nfs: Bad value for 'source' [ 160.786210][ T29] audit: type=1800 audit(1774983543.260:7): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="features" dev="configfs" ino=14496 res=0 errno=0 [ 161.015701][ T8067] Process accounting resumed [ 162.360587][ T5146] Bluetooth: hci2: unexpected event 0x01 length: 124 > 1 [ 163.031508][ T8153] Process accounting resumed [ 165.844560][ T5146] Bluetooth: hci1: unexpected event 0x34 length: 726 > 6 [ 168.653224][ T5146] Bluetooth: hci2: unexpected event 0x3e length: 720 > 260 [ 168.958318][ T8433] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8433] [ 169.871176][ T8479] random: crng reseeded on system resumption [ 172.987098][ T5146] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 175.434222][ T29] audit: type=1800 audit(4294967300.819:8): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="features" dev="configfs" ino=16537 res=0 errno=0 [ 176.444069][ T8800] capability: warning: `syz.0.1422' uses 32-bit capabilities (legacy support in use) [ 176.653565][ T29] audit: type=1326 audit(4294967302.046:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.3.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51cbb9c799 code=0x0 [ 178.249299][ T29] audit: type=1800 audit(4294967303.644:10): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1461" name="trace_pipe" dev="tracefs" ino=4137 res=0 errno=0 [ 178.857543][ T5146] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 180.253300][ T8974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 182.054180][ T9020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.060960][ T9020] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.111993][ T9020] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.132617][ T9020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.152040][ T9020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.172517][ T9020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.220169][ T9020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.231710][ T9020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.282722][ T9020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.326643][ T9020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.346974][ T9020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.411065][ T9020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.906813][ T9094] ecryptfs_miscdev_write: Error while inspecting packet size [ 183.316647][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.856228][ T132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.198797][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.278066][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.347766][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.382901][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.482914][ T9212] usb usb3: usbfs: process 9212 (syz.3.1625) did not claim interface 0 before use [ 186.257785][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.347248][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.416969][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.451868][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.027964][ T9307] smpboot: CPU 1 is now offline [ 188.257771][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.346827][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.416534][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.578995][ T9386] nfsd: Unknown parameter 'ԣ' [ 191.395110][ T9360] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 191.505712][ T9360] Process accounting paused [ 192.226762][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.233168][ T5912] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 192.913721][ T9462] Process accounting paused [ 193.115625][ T9474] block2mtd: Using custom MTD label '' for dev [ 193.148091][ T9474] block2mtd: error: cannot open device [ 194.075976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083050][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.570496][ T9669] bond0: invalid ARP target specified [ 198.756056][ T9663] could not allocate digest TFM handle [ 198.854539][ T9676] program syz.1.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.979463][ T9716] warning: `syz.2.1871' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.279442][ T9728] Line length is too long: Should be less than 4094 [ 202.299052][ T9801] block2mtd: device name too long [ 203.437882][ T9844] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 204.328990][ T9869] synth uevent: /devices/virtual/tty/ttyz1: unknown uevent action string [ 204.376854][ T9869] tty ttyz1: uevent: failed to send synthetic uevent: -22 [ 205.368251][ T9901] block loop4: the capability attribute has been deprecated. [ 206.913229][ T9945] bond0: option packets_per_slave: invalid value ( Xnp) [ 206.943511][ T9945] bond0: option packets_per_slave: allowed values 0 - 65535 [ 208.311437][ T29] audit: type=1800 audit(4294967333.870:11): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2000" name="dbroot" dev="configfs" ino=21207 res=0 errno=0 [ 209.799923][T10012] nvme_fcloop: unknown parameter or missing value '0' [ 210.728199][ T29] audit: type=1800 audit(4294967336.293:12): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2031" name="lu_gp_id" dev="configfs" ino=21400 res=0 errno=0 [ 210.780603][T10042] ALUA LU Group already has a valid ID, ignoring request [ 210.892882][T10045] vhci_hcd vhci_hcd.2: invalid port number 16 [ 210.933378][T10045] vhci_hcd vhci_hcd.2: invalid port number 16 [ 213.701628][T10143] ICMPv6: process `syz.1.2080' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 214.143160][T10160] random: crng reseeded on system resumption [ 215.430652][T10198] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 215.552197][T10198] CIFS mount error: No usable UNC path provided in device string! [ 215.552197][T10198] [ 215.615444][T10198] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.919383][T10213] random: crng reseeded on system resumption [ 217.150415][ T29] audit: type=1800 audit(4294967342.756:13): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2136" name="sr0" dev="devtmpfs" ino=2807 res=0 errno=0 [ 218.039323][T10288] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 221.661954][T10405] Process accounting resumed [ 222.062380][T10430] vhci_hcd vhci_hcd.2: invalid port number 16 [ 222.102958][T10430] vhci_hcd vhci_hcd.2: invalid port number 16 [ 222.834480][T10453] Process accounting resumed [ 225.705233][T10556] ICMPv6: process `syz.2.2284' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 229.542936][T10682] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 229.764829][T10688] [ 231.671919][T10752] kAFS: Invalid Command on /proc/fs/afs/cells file [ 235.593362][T10882] syz.1.2447 uses obsolete (PF_INET,SOCK_PACKET) [ 237.988345][T10959] delete_channel: no stack [ 239.572995][T11016] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 243.004430][T11128] Invalid ELF header magic: != ELF [ 247.339422][T11272] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 247.966126][T11293] ima: policy update failed [ 247.986088][ T29] audit: type=1802 audit(4294967318.146:14): pid=11293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2651" res=0 errno=0 [ 248.395618][T11312] writes to the poll attribute are ignored. [ 248.401880][T11312] please use driver specific parameters instead. [ 248.812577][T11329] random: crng reseeded on system resumption [ 251.594201][T11415] Process accounting paused [ 252.870211][T11444] Process accounting paused [ 255.209515][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.215837][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.847473][T11541] batman_adv: Routing algorithm '7' is not supported [ 256.075921][T11547] syz.1.2766: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.151970][T11547] CPU: 0 UID: 0 PID: 11547 Comm: syz.1.2766 Not tainted syzkaller #0 PREEMPT(full) [ 256.152003][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.152024][T11547] Call Trace: [ 256.152034][T11547] [ 256.152043][T11547] dump_stack_lvl+0x100/0x190 [ 256.152085][T11547] warn_alloc.cold+0x95/0x1c1 [ 256.152128][T11547] ? __pfx_warn_alloc+0x10/0x10 [ 256.152168][T11547] ? __lock_acquire+0x4a5/0x2630 [ 256.152215][T11547] __vmalloc_node_range_noprof+0x1252/0x1530 [ 256.152251][T11547] ? rcu_is_watching+0x12/0xc0 [ 256.152290][T11547] ? trace_contention_end+0x140/0x180 [ 256.152325][T11547] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 256.152355][T11547] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 256.152381][T11547] ? tomoyo_path_number_perm+0x28f/0x580 [ 256.152410][T11547] ? tomoyo_path_number_perm+0x28f/0x580 [ 256.152450][T11547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.152483][T11547] ? __pfx___mutex_lock+0x10/0x10 [ 256.152513][T11547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.152542][T11547] ? futex_wake+0x1ad/0x530 [ 256.152584][T11547] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 256.152610][T11547] __vmalloc_node_noprof+0xad/0xf0 [ 256.152642][T11547] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 256.152673][T11547] dvb_dvr_do_ioctl+0x15d/0x270 [ 256.152705][T11547] dvb_usercopy+0x167/0x340 [ 256.152730][T11547] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 256.152759][T11547] ? __pfx_dvb_usercopy+0x10/0x10 [ 256.152795][T11547] ? __fget_files+0x21f/0x3d0 [ 256.152825][T11547] dvb_dvr_ioctl+0x29/0x40 [ 256.152850][T11547] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 256.152877][T11547] __x64_sys_ioctl+0x18e/0x210 [ 256.152917][T11547] do_syscall_64+0x106/0xf80 [ 256.152939][T11547] ? clear_bhb_loop+0x40/0x90 [ 256.152968][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.152997][T11547] RIP: 0033:0x7f2045f9c799 [ 256.153021][T11547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.153044][T11547] RSP: 002b:00007f20441ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.153070][T11547] RAX: ffffffffffffffda RBX: 00007f2046215fa0 RCX: 00007f2045f9c799 [ 256.153085][T11547] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 256.153100][T11547] RBP: 00007f2046032c99 R08: 0000000000000000 R09: 0000000000000000 [ 256.153114][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.153128][T11547] R13: 00007f2046216038 R14: 00007f2046215fa0 R15: 00007fff3db69808 [ 256.153159][T11547] [ 256.450531][T11547] Mem-Info: [ 256.453891][T11547] active_anon:4819 inactive_anon:12 isolated_anon:0 [ 256.453891][T11547] active_file:3164 inactive_file:52823 isolated_file:0 [ 256.453891][T11547] unevictable:768 dirty:94 writeback:0 [ 256.453891][T11547] slab_reclaimable:12143 slab_unreclaimable:89378 [ 256.453891][T11547] mapped:23917 shmem:1356 pagetables:1029 [ 256.453891][T11547] sec_pagetables:0 bounce:0 [ 256.453891][T11547] kernel_misc_reclaimable:0 [ 256.453891][T11547] free:1332901 free_pcp:10672 free_cma:0 [ 256.500491][T11547] Node 0 active_anon:19276kB inactive_anon:48kB active_file:12656kB inactive_file:211100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95616kB dirty:376kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10976kB pagetables:3980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.533325][T11547] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.564732][T11547] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.595778][T11547] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 256.602731][T11547] Node 0 DMA32 free:1379464kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19276kB inactive_anon:48kB active_file:12656kB inactive_file:211100kB unevictable:1536kB writepending:376kB zspages:472kB present:3129332kB managed:2537292kB mlocked:0kB bounce:0kB free_pcp:42620kB local_pcp:42620kB free_cma:0kB [ 256.636616][T11547] lowmem_reserve[]: 0 0 1 1 1 [ 256.641459][T11547] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 256.681474][T11547] lowmem_reserve[]: 0 0 0 0 0 [ 256.691505][T11547] Node 1 Normal free:3936768kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.740594][T11547] lowmem_reserve[]: 0 0 0 0 0 [ 256.745632][T11547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.813672][T11547] Node 0 DMA32: 1848*4kB (UM) 2328*8kB (UME) 1216*16kB (UME) 700*32kB (UM) 345*64kB (UME) 234*128kB (UME) 182*256kB (UME) 72*512kB (UME) 60*1024kB (UME) 10*2048kB (UME) 267*4096kB (M) = 1378912kB [ 256.924398][T11547] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 256.987955][T11547] Node 1 Normal: 12*4kB (UM) 12*8kB (UM) 15*16kB (UM) 14*32kB (UM) 7*64kB (U) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3936768kB [ 257.049528][T11547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.099370][T11547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.123396][T11547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.149034][T11547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.181770][T11547] 57350 total pagecache pages [ 257.186625][T11547] 4 pages in swap cache [ 257.206640][T11547] Free swap = 124832kB [ 257.223519][T11547] Total swap = 124996kB [ 257.227715][T11547] 2097051 pages RAM [ 257.258460][T11547] 0 pages HighMem/MovableOnly [ 257.263178][T11547] 430849 pages reserved [ 257.267801][T11547] 0 pages cma reserved [ 258.838077][T11610] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.2.2797: 7 [ 261.410026][T11686] binder: 11684:11686 ioctl 541b 38 returned -22 [ 261.813994][T11702] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 261.813994][T11702] [ 265.541242][T11818] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 266.504687][T11849] usb usb13: check_ctrlrecip: process 11849 (syz.1.2903) requesting ep 01 but needs 81 [ 266.590347][T11849] usb usb13: usbfs: process 11849 (syz.1.2903) did not claim interface 0 before use [ 268.648472][T11910] binder: 11909:11910 ioctl 40046205 0 returned -22 [ 269.704132][T11946] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 269.746067][T11946] ep_00: uevent: failed to send synthetic uevent: -22 [ 270.167889][T11957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.646920][T11999] sd 0:0:1:0: PR command failed: 1026 [ 271.652406][T11999] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 271.708671][T11999] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 271.860094][T12005] aoe: invalid device specification [ 273.003247][T12044] kernel read not supported for file /\*)A (pid: 12044 comm: syz.2.2991) [ 273.038935][ T29] audit: type=1800 audit(4294967343.336:15): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2991" name="\*)A" dev="mqueue" ino=27716 res=0 errno=0 [ 273.863980][T12075] process 'syz.2.3003' launched './file0' with NULL argv: empty string added [ 274.539670][T12099] hub 1-0:1.0: USB hub found [ 274.575329][T12099] hub 1-0:1.0: 1 port detected [ 275.480982][T12136] cougar: G6 mapped to space [ 275.695578][T12144] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 277.275380][ T5894] Process accounting resumed [ 279.315843][T12254] i2c i2c-0: new_device: Can't parse I2C address [ 280.571941][T12304] WARNING! power/level is deprecated; use power/control instead [ 281.666629][T12337] Process accounting resumed [ 282.684928][T12380] QAT: failed to copy from user cfg_data. [ 283.272029][T12402] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 283.509066][T12410] hub 1-0:1.0: USB hub found [ 283.519581][T12410] hub 1-0:1.0: 1 port detected [ 284.834461][T12463] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 285.091848][T12471] delete_channel: no stack [ 285.109079][T12472] usb usb11: usbfs: interface 0 claimed by hub while 'syz.1.3198' sets config #7 [ 285.807582][T12500] zram0: detected capacity change from 0 to 16 [ 286.725665][T12537] misc userio: Invalid payload size [ 287.194688][T12550] syz.3.3237 (12550): drop_caches: 0 [ 287.443768][T12558] kafs: addr_prefs: Invalid Command [ 287.508778][T12560] block2mtd: parameter too long [ 288.545872][T12590] Setting dangerous option i915.mitigations - tainting kernel [ 288.671452][T12596] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 291.273023][T12695] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 293.183059][T12767] random: crng reseeded on system resumption [ 293.253881][T12771] sysfs_service_op_show: Client not running :-5: [ 294.302381][T12810] kAFS: Invalid Command on /proc/fs/afs/cells file [ 296.632710][ T29] audit: type=1400 audit(4294967367.049:16): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12886 comm="syz.1.3407" [ 297.103056][T12907] vhci_hcd vhci_hcd.1: invalid port number 14 [ 297.135640][T12907] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 298.404451][T12951] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 298.404451][T12951] M' is too long [ 298.446407][T12951] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 298.446407][T12951] W ' is too long [ 298.539765][T12948] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 298.629086][T12948] pci 0000:00:01.3: PCI INT A: no GSI [ 299.104352][T12974] ubi31: attaching mtd0 [ 299.127124][T12974] ubi31: scanning is finished [ 299.147000][T12974] ubi31: empty MTD device detected [ 299.409317][T12974] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 299.459264][T12974] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 299.498832][T12974] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 299.545764][T12974] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 299.589820][T12974] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 299.620726][T12974] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 299.669366][T12974] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 159607897 [ 299.740519][T12974] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 299.800183][T12983] ubi31: background thread "ubi_bgt31d" started, PID 12983 [ 302.198081][T13050] Malformed UNC in devname [ 302.198081][T13050] [ 302.272005][T13050] CIFS: VFS: Malformed UNC in devname [ 307.970665][T13251] sd 0:0:1:0: PR command failed: 1026 [ 307.994686][T13251] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 308.020723][T13251] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 308.380025][T13263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 311.710650][T13368] Process accounting paused [ 312.427829][T13397] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[13397] [ 313.275883][ T5146] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 315.446541][T13513] bond0: no command found in slaves file - use +ifname or -ifname [ 316.306523][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.313064][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.998882][T13659] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 319.595127][ T29] audit: type=1800 audit(4294985734.125:17): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3792" name="features" dev="configfs" ino=32934 res=0 errno=0 [ 320.526798][T13717] overlayfs: "check_copy_up" module option is obsolete [ 321.239829][T13745] __vm_enough_memory: pid: 13745, comm: syz.3.3821, bytes: 9223372036854775808 not enough memory for the allocation [ 323.926497][T13843] vivid-007: ================= START STATUS ================= [ 323.937693][T13844] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 323.954619][T13843] vivid-007: Generate PTS: true [ 323.971197][T13843] vivid-007: Generate SCR: true [ 323.978426][T13843] tpg source WxH: 320x240 (Y'CbCr) [ 323.989940][T13843] tpg field: 1 [ 323.996707][T13843] tpg crop: (0,0)/320x240 [ 324.006751][T13843] tpg compose: (0,0)/320x240 [ 324.024619][T13843] tpg colorspace: 8 [ 324.035528][T13843] tpg transfer function: 0/0 [ 324.046908][T13843] tpg Y'CbCr encoding: 0/0 [ 324.056103][T13843] tpg quantization: 0/0 [ 324.080989][T13843] tpg RGB range: 0/2 [ 324.091772][T13843] vivid-007: ================== END STATUS ================== [ 324.716572][ T29] audit: type=1800 audit(4294985739.271:18): pid=13866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3879" name="dbroot" dev="configfs" ino=33491 res=0 errno=0 [ 325.540895][T13893] nvme_fcloop: unknown parameter or missing value '1' [ 329.105820][ T5146] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 330.696557][T14065] mmap: syz.3.3976 (14065): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 331.398428][T14090] QAT: failed to copy from user cfg_data. [ 336.048766][T14239] aoe: copy from user failed [ 336.084859][T14239] aoe: could not set interface list: too many interfaces [ 336.518100][T14254] QAT: Stopping all acceleration devices. [ 337.312561][T14281] ecryptfs_miscdev_write: Invalid packet size [192] [ 338.823319][T14335] program syz.0.4109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.857323][T14434] Process accounting resumed [ 342.728947][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.735698][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.220812][T14512] blkio.reset_stats is deprecated [ 344.726787][T14531] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 344.804743][T14531] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 347.495988][T14628] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 348.140390][T14652] bond0: option slaves: interface - does not exist! [ 350.811926][ T29] audit: type=1804 audit(4294985765.497:19): pid=14749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4299" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 352.888189][T14825] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.665198][ T5146] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 354.674706][ T5146] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 356.540852][T14977] nvme_fcloop: unknown parameter or missing value '7' [ 359.528564][T15086] block2mtd: illegal erase size [ 359.534032][T15087] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 360.612687][ T5146] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 362.325508][T15180] block2mtd: illegal erase size [ 362.458660][T15184] sd 0:0:1:0: PR command failed: 1026 [ 362.482533][T15184] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 362.489335][T15184] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 365.472828][T15258] vhci_hcd: not connected 4 [ 366.534798][ T5146] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 366.576905][T15288] ======================================================= [ 366.576905][T15288] WARNING: The mand mount option has been deprecated and [ 366.576905][T15288] and is ignored by this kernel. Remove the mand [ 366.576905][T15288] option from the mount to silence this warning. [ 366.576905][T15288] ======================================================= [ 367.370494][T15311] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 367.470855][T15310] zram: Added device: zram1 [ 369.089979][T15365] kAFS: No cell specified [ 369.455412][T15378] mmap: syz.0.4554 (15378) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 370.128495][T15353] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 370.128529][T15353] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 370.145863][T15353] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 370.861142][T15430] i2c i2c-0: new_device: Missing parameters [ 371.741715][T15457] Process accounting paused [ 372.867444][T15507] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 373.270038][T15353] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 373.282147][T15353] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 374.353954][ T29] audit: type=1800 audit(4294985789.179:20): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4638" name="dbroot" dev="configfs" ino=38575 res=0 errno=0 [ 375.267952][T15610] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 375.549968][T15619] vivid-003: ================= START STATUS ================= [ 375.597655][T15619] vivid-003: Radio HW Seek Mode: Bounded [ 375.644286][T15619] vivid-003: Radio Programmable HW Seek: false [ 375.678359][T15619] vivid-003: RDS Rx I/O Mode: Block I/O [ 375.730641][T15619] vivid-003: Generate RBDS Instead of RDS: false [ 375.763894][T15619] vivid-003: RDS Reception: true [ 375.787626][T15619] vivid-003: RDS Program Type: 0 inactive [ 375.819867][T15619] vivid-003: RDS PS Name: inactive [ 375.859568][T15619] vivid-003: RDS Radio Text: inactive [ 375.891556][T15619] vivid-003: RDS Traffic Announcement: false inactive [ 375.942504][T15619] vivid-003: RDS Traffic Program: false inactive [ 375.970238][T15619] vivid-003: RDS Music: false inactive [ 375.996996][T15619] vivid-003: ================== END STATUS ================== [ 377.443925][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.450330][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.089393][T15522] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 378.735064][T15743] [U] 0="/ [ 378.762532][T15743] [U] [ 378.765399][T15743] [U] EeQ@ [ 378.802412][T15740] [U]  [ 379.036052][T15754] nvme_fcloop: unknown parameter or missing value '' [ 379.812334][T15522] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 379.819887][T15522] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 381.363219][T15858] vivid-007: ================= START STATUS ================= [ 381.412855][T15858] vivid-007: Enable Output Cropping: true [ 381.418962][T15858] vivid-007: Enable Output Composing: true [ 381.481626][T15858] vivid-007: Enable Output Scaler: true [ 381.512146][T15858] vivid-007: Tx RGB Quantization Range: Automatic [ 381.541101][T15865] qrtr: Invalid version 0 [ 381.547315][T15858] vivid-007: Transmit Mode: HDMI [ 381.567063][T15858] vivid-007: Hotplug Present: 0x00000000 [ 381.587407][T15858] vivid-007: RxSense Present: 0x00000000 [ 381.617028][T15858] vivid-007: EDID Present: 0x00000000 [ 381.660462][T15858] vivid-007: ================== END STATUS ================== [ 383.205620][T15929] kAFS: Invalid Command on /proc/fs/afs/cells file [ 383.375562][T15934] deleting an unspecified loop device is not supported. [ 386.080384][T16036] bond0: invalid ARP target specified [ 386.256497][T16042] Setting dangerous option i915.mitigations - tainting kernel [ 386.291333][T16042] Bad "i915.mitigations=CmâUQF\ ", 'CmâUQF\' is unknown [ 386.741606][ T29] audit: type=1800 audit(4294985801.624:21): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4850" name="dbroot" dev="configfs" ino=40044 res=0 errno=0 [ 387.628513][T16094] bond0: no command found in slaves file - use +ifname or -ifname [ 388.962486][T16149] zram0: detected capacity change from 16 to 0 [ 389.125186][T16153] program syz.3.4895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.152704][T16155] kafs: addr_prefs: Too many elements in string [ 389.601403][T16170] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 390.804289][T16216] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 391.194086][T15522] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 391.805905][T16271] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 392.049203][T15522] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 394.061078][T15400] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.413166][T16363] capability: warning: `syz.0.4971' uses deprecated v2 capabilities in a way that may be insecure [ 394.795005][T16377] syz.2.4976 uses obsolete (PF_INET,SOCK_PACKET) [ 395.848170][T16414] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[16414] [ 396.126696][T15400] Bluetooth: hci1: command 0x0c1a tx timeout [ 396.223090][T15522] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 396.594620][T16462] : Can't lookup blockdev [ 397.030651][T16473] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 397.307085][ T29] audit: type=1800 audit(4294985812.249:22): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5016" name="lu_gp_id" dev="configfs" ino=41192 res=0 errno=0 [ 397.536710][ T29] audit: type=1800 audit(4294985812.480:23): pid=16491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5020" name="lu_gp_id" dev="configfs" ino=41220 res=0 errno=0 [ 397.561231][T16491] kstrtoul() returned -22 for lu_gp_id [ 399.877835][T16580] ima: policy update failed [ 399.909149][ T29] audit: type=1802 audit(4294985814.852:24): pid=16580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5064" res=0 errno=0 [ 400.707840][T16613] udc dummy_udc.0: soft-connect without a gadget driver [ 400.980814][T16625] cougar: G6 mapped to F18 [ 401.624343][T16645] Process accounting resumed [ 403.968606][T15522] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 404.954007][T16790] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 404.986910][T15400] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 405.999482][T15522] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.509264][T16863] QAT: Device 250 not found [ 407.510109][T16899] : Can't lookup blockdev [ 407.741858][T16907] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 408.068074][T15400] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.357230][T15522] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 411.801796][T17049] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 412.054653][T17058] process 'syz.1.5262' launched '/dev/fd/3' with NULL argv: empty string added [ 412.290428][T17067] rtc_cmos 00:00: Alarms can be up to one day in the future [ 412.448472][T15400] Bluetooth: hci3: command 0x0c1a tx timeout [ 413.901413][T17129] wlan1: mtu less than device minimum [ 414.056447][T15522] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 414.325554][T17162] delete_channel: no stack [ 414.519651][T15522] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.913151][T17219] Setting dangerous option i915.mitigations - tainting kernel [ 416.102856][T15522] Bluetooth: hci2: command 0x0c1a tx timeout [ 416.127644][T17225] ceph: Failed to parse sending metrics switch value 'P^' [ 416.189171][T17226] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.213380][T17226] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 418.174057][T15400] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.633780][T17417] usb usb4: usbfs: process 17417 (syz.2.5426) did not claim interface 0 before use [ 425.259921][T17540] bond0: option mode: unable to set because the bond device is up [ 427.819474][T17630] [U] ^\ [ 427.868238][T17635] usbip-vudc usbip-vudc.0: gadget not bound [ 428.123638][T17640] usb usb36: usbfs: process 17640 (syz.2.5536) did not claim interface 0 before use [ 430.488704][T17727] Invalid input. Must be >= 4608 [ 431.589353][T17763] Process accounting paused [ 434.529195][T17864] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 435.382196][T17901] kAFS: Invalid Command on /proc/fs/afs/cells file [ 435.398412][T17900] program syz.3.5662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.544067][T17905] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 436.635008][T17948] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 437.014756][T15522] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 437.014786][T15522] Bluetooth: hci1: unexpected subevent 0x06 length: 725 > 10 [ 438.555928][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.562355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.023355][T15522] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.800897][T18069] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 440.064186][T18078] warning: `syz.1.5745' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 441.044028][T18116] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 441.916788][T18148] bcache: register_bcache() error : failed to open device [ 442.668999][T18174] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 443.679548][T18211] vhci_hcd vhci_hcd.2: invalid port number 253 [ 443.707272][T18211] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 446.856995][T18313] program syz.3.5858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.889599][T18313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 449.542532][T18409] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 451.687567][T18478] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 451.897638][T18486] futex_wake_op: syz.3.5943 tries to shift op by -2048; fix this program [ 451.933723][T18486] futex_wake_op: syz.3.5943 tries to shift op by -2048; fix this program [ 456.428786][ T29] audit: type=1400 audit(4294985871.676:25): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18625 comm="syz.0.5998" [ 460.486260][T18738] blktrace: Concurrent blktraces are not allowed on sg0 [ 460.726991][T18744] i2c i2c-0: delete_device: Can't find device in list [ 461.481888][T18763] Process accounting resumed [ 463.217551][T18809] usbcore.quirks: string doesn't fit in 127 chars. [ 465.157890][T18848] : Can't lookup blockdev [ 465.884726][T15522] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 467.381416][T18891] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.627643][T18891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.799613][T18891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.007699][T18891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.182416][T18891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.619337][T18971] [U] ^R [ 473.600898][T19089] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 476.962657][T19215] TCP: TCP_TX_DELAY enabled [ 477.705119][T19258] [ 482.265828][T19384] Debayer A: ================= START STATUS ================= [ 482.291086][T19384] Debayer A: Debayer Mean Window Size: 3 [ 482.297128][T19384] Debayer A: ================== END STATUS ================== [ 484.000088][T19440] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 486.580470][T19526] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 490.507591][T19650] ================================================================== [ 490.507625][T19650] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 490.507733][T19650] Write of size 8 at addr ffffc90004219000 by task syz.3.6450/19650 [ 490.507753][T19650] [ 490.507770][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.3.6450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 490.507806][T19650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 490.507815][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.507834][T19650] Call Trace: [ 490.507842][T19650] [ 490.507851][T19650] dump_stack_lvl+0x100/0x190 [ 490.507889][T19650] print_report+0x156/0x4c9 [ 490.507923][T19650] ? _raw_spin_lock_irqsave+0x52/0x60 [ 490.507984][T19650] ? __virt_addr_valid+0x81/0x620 [ 490.508027][T19650] ? sys_fillrect+0x174a/0x1910 [ 490.508063][T19650] kasan_report+0xdf/0x1e0 [ 490.508090][T19650] ? sys_fillrect+0x174a/0x1910 [ 490.508130][T19650] sys_fillrect+0x174a/0x1910 [ 490.508172][T19650] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 490.508202][T19650] bit_clear+0x17d/0x220 [ 490.508231][T19650] ? __pfx_bit_clear+0x10/0x10 [ 490.508262][T19650] ? fb_get_color_depth+0x120/0x250 [ 490.508305][T19650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.508334][T19650] __fbcon_clear+0x633/0x760 [ 490.508361][T19650] ? __pfx_bit_clear+0x10/0x10 [ 490.508394][T19650] fbcon_scroll+0x48b/0x650 [ 490.508423][T19650] con_scroll+0x464/0x690 [ 490.508461][T19650] do_con_write+0x6883/0x8540 [ 490.508491][T19650] ? __pfx_do_con_write+0x10/0x10 [ 490.508520][T19650] con_write+0x23/0xb0 [ 490.508540][T19650] n_tty_write+0x44f/0x12d0 [ 490.508574][T19650] ? __pfx_n_tty_write+0x10/0x10 [ 490.508601][T19650] ? trace_kmalloc+0x101/0x130 [ 490.508627][T19650] ? __pfx_woken_wake_function+0x10/0x10 [ 490.508666][T19650] ? rcu_is_watching+0x12/0xc0 [ 490.508709][T19650] ? file_tty_write.isra.0+0x694/0x890 [ 490.508763][T19650] ? kfree+0x2ec/0x6b0 [ 490.508796][T19650] ? __pfx_n_tty_write+0x10/0x10 [ 490.508824][T19650] file_tty_write.isra.0+0x4d2/0x890 [ 490.508867][T19650] redirected_tty_write+0xd4/0x120 [ 490.508906][T19650] vfs_write+0x6ac/0x1070 [ 490.508929][T19650] ? __pfx_redirected_tty_write+0x10/0x10 [ 490.508970][T19650] ? __pfx_vfs_write+0x10/0x10 [ 490.508991][T19650] ? find_held_lock+0x2b/0x80 [ 490.509031][T19650] ksys_write+0x12a/0x250 [ 490.509053][T19650] ? __pfx_ksys_write+0x10/0x10 [ 490.509080][T19650] do_syscall_64+0x106/0xf80 [ 490.509103][T19650] ? clear_bhb_loop+0x40/0x90 [ 490.509131][T19650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.509156][T19650] RIP: 0033:0x7f51cbb9c799 [ 490.509175][T19650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.509198][T19650] RSP: 002b:00007f51ccaea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.509226][T19650] RAX: ffffffffffffffda RBX: 00007f51cbe15fa0 RCX: 00007f51cbb9c799 [ 490.509242][T19650] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 490.509257][T19650] RBP: 00007f51cbc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.509271][T19650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.509286][T19650] R13: 00007f51cbe16038 R14: 00007f51cbe15fa0 R15: 00007fff460c5f28 [ 490.509309][T19650] [ 490.509317][T19650] [ 490.509323][T19650] The buggy address belongs to a vmalloc virtual mapping [ 490.509342][T19650] Memory state around the buggy address: [ 490.509355][T19650] ffffc90004218f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 490.509377][T19650] ffffc90004218f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 490.509394][T19650] >ffffc90004219000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 490.509407][T19650] ^ [ 490.509419][T19650] ffffc90004219080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 490.509436][T19650] ffffc90004219100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 490.509449][T19650] ================================================================== [ 490.509483][T19650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 490.509501][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.3.6450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 490.509537][T19650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 490.509546][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.509561][T19650] Call Trace: [ 490.509568][T19650] [ 490.509576][T19650] dump_stack_lvl+0x100/0x190 [ 490.509612][T19650] vpanic+0x552/0x970 [ 490.509635][T19650] ? __pfx_vpanic+0x10/0x10 [ 490.509659][T19650] ? mark_held_locks+0x40/0x70 [ 490.509692][T19650] ? sys_fillrect+0x174a/0x1910 [ 490.509728][T19650] panic+0xd1/0xe0 [ 490.509749][T19650] ? __pfx_panic+0x10/0x10 [ 490.509779][T19650] check_panic_on_warn.cold+0x19/0x34 [ 490.509805][T19650] end_report.part.0+0x3a/0x90 [ 490.509839][T19650] kasan_report.cold+0xe/0x18 [ 490.509873][T19650] ? sys_fillrect+0x174a/0x1910 [ 490.509914][T19650] sys_fillrect+0x174a/0x1910 [ 490.509956][T19650] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 490.509986][T19650] bit_clear+0x17d/0x220 [ 490.510023][T19650] ? __pfx_bit_clear+0x10/0x10 [ 490.510054][T19650] ? fb_get_color_depth+0x120/0x250 [ 490.510082][T19650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.510111][T19650] __fbcon_clear+0x633/0x760 [ 490.510139][T19650] ? __pfx_bit_clear+0x10/0x10 [ 490.510171][T19650] fbcon_scroll+0x48b/0x650 [ 490.510201][T19650] con_scroll+0x464/0x690 [ 490.510239][T19650] do_con_write+0x6883/0x8540 [ 490.510270][T19650] ? __pfx_do_con_write+0x10/0x10 [ 490.510298][T19650] con_write+0x23/0xb0 [ 490.510319][T19650] n_tty_write+0x44f/0x12d0 [ 490.510353][T19650] ? __pfx_n_tty_write+0x10/0x10 [ 490.510380][T19650] ? trace_kmalloc+0x101/0x130 [ 490.510406][T19650] ? __pfx_woken_wake_function+0x10/0x10 [ 490.510446][T19650] ? rcu_is_watching+0x12/0xc0 [ 490.510483][T19650] ? file_tty_write.isra.0+0x694/0x890 [ 490.510521][T19650] ? kfree+0x2ec/0x6b0 [ 490.510553][T19650] ? __pfx_n_tty_write+0x10/0x10 [ 490.510582][T19650] file_tty_write.isra.0+0x4d2/0x890 [ 490.510624][T19650] redirected_tty_write+0xd4/0x120 [ 490.510663][T19650] vfs_write+0x6ac/0x1070 [ 490.510686][T19650] ? __pfx_redirected_tty_write+0x10/0x10 [ 490.510727][T19650] ? __pfx_vfs_write+0x10/0x10 [ 490.510749][T19650] ? find_held_lock+0x2b/0x80 [ 490.510781][T19650] ksys_write+0x12a/0x250 [ 490.510804][T19650] ? __pfx_ksys_write+0x10/0x10 [ 490.510831][T19650] do_syscall_64+0x106/0xf80 [ 490.510854][T19650] ? clear_bhb_loop+0x40/0x90 [ 490.510882][T19650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.510906][T19650] RIP: 0033:0x7f51cbb9c799 [ 490.510924][T19650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.510947][T19650] RSP: 002b:00007f51ccaea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.510969][T19650] RAX: ffffffffffffffda RBX: 00007f51cbe15fa0 RCX: 00007f51cbb9c799 [ 490.510986][T19650] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 490.511007][T19650] RBP: 00007f51cbc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.511022][T19650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.511037][T19650] R13: 00007f51cbe16038 R14: 00007f51cbe15fa0 R15: 00007fff460c5f28 [ 490.511061][T19650] [ 490.511129][T19650] Kernel Offset: disabled