last executing test programs:

8m29.225383128s ago: executing program 0 (id=1619):
mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000)

8m29.122215105s ago: executing program 0 (id=1623):
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0x8, 0x0)

8m28.941773104s ago: executing program 0 (id=1627):
setdomainname$auto(0xfffffffffffffffc, 0x9)

8m28.792641319s ago: executing program 0 (id=1631):
pwrite64$auto(0xc8, &(0x7f0000000240)=':X\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a)

8m28.619451623s ago: executing program 0 (id=1637):
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})

8m28.287152247s ago: executing program 0 (id=1645):
iopl$auto(0x3)

8m27.954186848s ago: executing program 32 (id=1645):
iopl$auto(0x3)

7m52.759735975s ago: executing program 2 (id=2382):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x8, 0x8000)

7m52.618304936s ago: executing program 2 (id=2385):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x3, 0x8000)

7m52.434515201s ago: executing program 2 (id=2389):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0)

7m52.304179892s ago: executing program 2 (id=2393):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a)

7m52.124015056s ago: executing program 2 (id=2399):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
tkill$auto(0x1, 0x7)

7m51.669871694s ago: executing program 2 (id=2411):
socket(0x2b, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)

7m51.248499009s ago: executing program 33 (id=2411):
socket(0x2b, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)

4m40.833711572s ago: executing program 5 (id=6527):
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)

4m40.637226831s ago: executing program 5 (id=6530):
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1})

4m39.960506585s ago: executing program 5 (id=6540):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)

4m39.727304395s ago: executing program 5 (id=6545):
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x2)

4m39.504238418s ago: executing program 5 (id=6548):
ioperm$auto(0xd44, 0x6, 0x8)
tkill$auto(0x80000000000001, 0x7)

4m39.03294964s ago: executing program 5 (id=6555):
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x80801, 0x0)
pwrite64$auto(r0, 0x0, 0x4e, 0x3)

4m38.40775038s ago: executing program 34 (id=6555):
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x80801, 0x0)
pwrite64$auto(r0, 0x0, 0x4e, 0x3)

1.93571991s ago: executing program 3 (id=10181):
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x700}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

1.685845589s ago: executing program 3 (id=10185):
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c000)
r0 = socket(0xa, 0x3, 0x5)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa)

1.591643658s ago: executing program 1 (id=10187):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x40049409, 0x0)

1.483792434s ago: executing program 3 (id=10189):
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x568)

1.377412054s ago: executing program 1 (id=10191):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0)
access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7)

1.298842779s ago: executing program 4 (id=10192):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x11, 0x0, 0x4)

1.170053232s ago: executing program 6 (id=10193):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0)
ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x40)

1.134392551s ago: executing program 1 (id=10194):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0)
readv$auto(r0, &(0x7f0000000040)={0x0, 0x36a}, 0x6)

1.070735108s ago: executing program 4 (id=10195):
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)

949.437497ms ago: executing program 6 (id=10196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x14, r1, 0x701, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)

845.338556ms ago: executing program 3 (id=10197):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(0xff80000000000000, 0x40b, 0x5)

825.08334ms ago: executing program 4 (id=10198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x29}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000)

705.940292ms ago: executing program 6 (id=10199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}, @typed={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)

574.744023ms ago: executing program 4 (id=10200):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

573.261888ms ago: executing program 3 (id=10201):
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8, 0x2, 0x0)

491.9217ms ago: executing program 1 (id=10202):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66)
madvise$auto_MADV_GUARD_REMOVE(0x0, 0x4, 0x67)

462.374066ms ago: executing program 6 (id=10203):
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x3, "6e546c3c3a265f11056b516535b1935cf3c6b75a2aeaf8af28111479136c52c5"})
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x01\x00\x00\x00\x00\x00', 0x7138)

342.755177ms ago: executing program 4 (id=10204):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800)

277.850205ms ago: executing program 3 (id=10205):
r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x1, 0x0)
exit$auto(0x7)
write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0)

250.044991ms ago: executing program 1 (id=10206):
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x3, 0xa)
getsockopt$auto(r0, 0x0, 0x33, 0x0, 0x0)

226.783913ms ago: executing program 6 (id=10207):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0)

114.688716ms ago: executing program 4 (id=10208):
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r0 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r0, 0x107, 0xc, 0x0, 0x0)

52.627506ms ago: executing program 1 (id=10209):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0)

0s ago: executing program 6 (id=10210):
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x3, 0x67)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts.
[   82.060247][ T5813] cgroup: Unknown subsys name 'net'
[   82.207933][ T5813] cgroup: Unknown subsys name 'cpuset'
[   82.217016][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.896445][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.943391][ T6091] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.669252][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.677300][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.706324][ T6163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.714880][ T6163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.724181][ T6165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.732752][ T6167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.745300][ T6167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.803866][ T6167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.812049][ T6167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.874164][ T6165] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.885372][ T6170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.887107][ T6169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.900934][ T6169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.909340][ T6165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.909775][ T6170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.925147][ T6170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.935524][ T6157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.936708][ T6169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.967972][ T6169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.979404][ T6169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.494450][ T6159] chnl_net:caif_netlink_parms(): no params data found
[   96.522896][ T6158] chnl_net:caif_netlink_parms(): no params data found
[   96.585908][ T6155] chnl_net:caif_netlink_parms(): no params data found
[   96.769564][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.777302][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.785226][ T6159] bridge_slave_0: entered allmulticast mode
[   96.792385][ T6159] bridge_slave_0: entered promiscuous mode
[   96.821168][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.828312][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.835722][ T6158] bridge_slave_0: entered allmulticast mode
[   96.842797][ T6158] bridge_slave_0: entered promiscuous mode
[   96.850990][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.858275][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.865499][ T6159] bridge_slave_1: entered allmulticast mode
[   96.872677][ T6159] bridge_slave_1: entered promiscuous mode
[   96.895210][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.902343][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.911703][ T6158] bridge_slave_1: entered allmulticast mode
[   96.919653][ T6158] bridge_slave_1: entered promiscuous mode
[   96.933830][   T24] cfg80211: failed to load regulatory.db
[   96.995240][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.030960][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.038404][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.045985][ T6155] bridge_slave_0: entered allmulticast mode
[   97.053035][ T6155] bridge_slave_0: entered promiscuous mode
[   97.060672][ T6164] chnl_net:caif_netlink_parms(): no params data found
[   97.073795][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.085769][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.095114][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.102259][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.109513][ T6155] bridge_slave_1: entered allmulticast mode
[   97.117717][ T6155] bridge_slave_1: entered promiscuous mode
[   97.145239][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.258391][ T6158] team0: Port device team_slave_0 added
[   97.267613][ T6159] team0: Port device team_slave_0 added
[   97.276916][ T6159] team0: Port device team_slave_1 added
[   97.297063][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.313393][ T6158] team0: Port device team_slave_1 added
[   97.334831][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.389257][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.396724][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.422935][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.479968][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.487018][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.513719][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.542601][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.549861][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.557159][ T6164] bridge_slave_0: entered allmulticast mode
[   97.565132][ T6164] bridge_slave_0: entered promiscuous mode
[   97.573344][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.580506][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.607398][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.620111][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.627563][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.654301][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.670903][ T6155] team0: Port device team_slave_0 added
[   97.677547][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.685202][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.692325][ T6164] bridge_slave_1: entered allmulticast mode
[   97.699685][ T6164] bridge_slave_1: entered promiscuous mode
[   97.728920][ T6155] team0: Port device team_slave_1 added
[   97.792545][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.820042][ T6159] hsr_slave_0: entered promiscuous mode
[   97.827130][ T6159] hsr_slave_1: entered promiscuous mode
[   97.864059][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.874026][ T6169] Bluetooth: hci1: command tx timeout
[   97.896608][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.905693][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.932525][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.946068][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.953045][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.979024][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.007382][ T6158] hsr_slave_0: entered promiscuous mode
[   98.013812][ T6158] hsr_slave_1: entered promiscuous mode
[   98.019872][ T6158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.027681][ T6158] Cannot create hsr debugfs directory
[   98.034069][ T6169] Bluetooth: hci2: command tx timeout
[   98.034147][ T6157] Bluetooth: hci0: command tx timeout
[   98.045570][ T6163] Bluetooth: hci3: command tx timeout
[   98.081439][ T6164] team0: Port device team_slave_0 added
[   98.107212][ T6164] team0: Port device team_slave_1 added
[   98.193222][ T6155] hsr_slave_0: entered promiscuous mode
[   98.199965][ T6155] hsr_slave_1: entered promiscuous mode
[   98.206566][ T6155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.214184][ T6155] Cannot create hsr debugfs directory
[   98.242490][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.249482][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.275442][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.323011][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.330628][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.356728][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.463219][ T6164] hsr_slave_0: entered promiscuous mode
[   98.469629][ T6164] hsr_slave_1: entered promiscuous mode
[   98.476190][ T6164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.483871][ T6164] Cannot create hsr debugfs directory
[   98.720358][ T6159] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.744173][ T6159] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.776345][ T6159] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.809416][ T6159] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.900483][ T6158] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.911429][ T6158] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.923199][ T6158] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.936079][ T6158] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.031055][ T6155] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.042857][ T6155] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.075411][ T6155] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.088863][ T6155] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.175015][ T6164] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.197135][ T6164] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.216946][ T6164] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.229317][ T6164] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.247645][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.309132][ T6159] 8021q: adding VLAN 0 to HW filter on device team0
[   99.336145][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.343396][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.372956][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.383169][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.390413][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.471596][ T6158] 8021q: adding VLAN 0 to HW filter on device team0
[   99.491154][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.519621][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.526787][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.562463][ T6155] 8021q: adding VLAN 0 to HW filter on device team0
[   99.589240][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.596420][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.621339][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.628536][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.666802][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.674007][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.820796][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.874914][ T6164] 8021q: adding VLAN 0 to HW filter on device team0
[   99.917270][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.924630][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.954606][ T6163] Bluetooth: hci1: command tx timeout
[   99.980304][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.008224][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.015452][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.118913][ T6163] Bluetooth: hci2: command tx timeout
[  100.124527][ T6157] Bluetooth: hci3: command tx timeout
[  100.124536][ T6169] Bluetooth: hci0: command tx timeout
[  100.218367][ T6159] veth0_vlan: entered promiscuous mode
[  100.280716][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.310235][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.332928][ T6159] veth1_vlan: entered promiscuous mode
[  100.458054][ T6155] veth0_vlan: entered promiscuous mode
[  100.465989][ T6158] veth0_vlan: entered promiscuous mode
[  100.492339][ T6155] veth1_vlan: entered promiscuous mode
[  100.505277][ T6158] veth1_vlan: entered promiscuous mode
[  100.515910][ T6159] veth0_macvtap: entered promiscuous mode
[  100.535730][ T6159] veth1_macvtap: entered promiscuous mode
[  100.574825][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.587864][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.602234][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.640200][ T6159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.649867][ T6159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.658939][ T6159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.667774][ T6159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.679292][ T6155] veth0_macvtap: entered promiscuous mode
[  100.690266][ T6155] veth1_macvtap: entered promiscuous mode
[  100.699283][ T6158] veth0_macvtap: entered promiscuous mode
[  100.711569][ T6158] veth1_macvtap: entered promiscuous mode
[  100.746104][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.758470][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.770674][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.801842][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.812807][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.823050][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.834883][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.846215][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.867275][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.878586][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.890263][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.919233][ T6158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.928288][ T6158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.937665][ T6158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.946610][ T6158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.959831][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.970853][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.981461][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.992205][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.004413][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.081601][ T6155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.092165][ T6155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.100962][ T6155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.111139][ T6155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.123397][ T6164] veth0_vlan: entered promiscuous mode
[  101.133152][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.144407][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.214434][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.222349][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.255602][ T6164] veth1_vlan: entered promiscuous mode
[  101.368019][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.385845][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.471786][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.474689][ T6164] veth0_macvtap: entered promiscuous mode
[  101.487492][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.510949][ T6164] veth1_macvtap: entered promiscuous mode
[  101.587541][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.598945][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.670695][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.681923][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.698488][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.706534][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.717737][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.728473][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.739036][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.754762][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.778530][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.800898][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.824762][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.853712][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.874081][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.891416][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.917051][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.945206][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.971654][ T6164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.000441][ T6164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.009991][ T6164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.019107][ T6164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.035935][ T6157] Bluetooth: hci1: command tx timeout
[  102.195223][ T6157] Bluetooth: hci3: command tx timeout
[  102.200962][ T6163] Bluetooth: hci0: command tx timeout
[  102.200971][ T6169] Bluetooth: hci2: command tx timeout
[  102.380591][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.443423][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.599010][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.628858][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.680703][ T6291] syz.2.306(6291): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  104.117267][ T6157] Bluetooth: hci1: command tx timeout
[  104.278908][ T6157] Bluetooth: hci2: command tx timeout
[  104.284415][ T6163] Bluetooth: hci3: command tx timeout
[  104.284431][ T6169] Bluetooth: hci0: command tx timeout
[  108.217526][   T30] audit: type=1800 audit(1746156122.714:2): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.398" name="dbroot" dev="configfs" ino=7898 res=0 errno=0
[  108.288032][   T30] audit: type=1800 audit(1746156122.784:3): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="dummy_udc" dev="gadgetfs" ino=8326 res=0 errno=0
[  108.553822][   T30] audit: type=1800 audit(1746156123.044:4): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="trace_pipe" dev="tracefs" ino=255 res=0 errno=0
[  109.343392][ T6530] mmap: syz.2.421 (6530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.103587][   T30] audit: type=1800 audit(1746156125.594:5): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.463" name="dbroot" dev="configfs" ino=8052 res=0 errno=0
[  111.851811][   T30] audit: type=1800 audit(1746156126.344:6): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.476" name="members" dev="configfs" ino=9457 res=0 errno=0
[  112.179267][   T30] audit: type=1800 audit(1746156126.674:7): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.481" name="dbroot" dev="configfs" ino=8113 res=0 errno=0
[  115.221519][ T6801] Unable to find swap-space signature
[  115.402905][ T6169] Bluetooth: hci3: unexpected event 0x32 length: 10 > 9
[  118.814664][   T30] audit: type=1800 audit(6041123431.307:8): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.640" name="trace_pipe" dev="tracefs" ino=213 res=0 errno=0
[  119.152911][   T30] audit: type=1326 audit(6041123431.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.2.648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95c778e969 code=0x0
[  120.914164][ T6169] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7
[  121.431289][ T7115] __vm_enough_memory: pid: 7115, comm: syz.0.710, bytes: 4398046511104 not enough memory for the allocation
[  122.168502][ T7156] capability: warning: `syz.3.730' uses 32-bit capabilities (legacy support in use)
[  127.199033][ T7373] ptrace attach of "./syz-executor exec"[6158] was attempted by "./syz-executor exec"[7373]
[  127.890989][ T7403] nfs: Bad value for 'source'
[  133.114968][ T7654] futex_wake_op: syz.1.970 tries to shift op by 64; fix this program
[  134.014861][ T6169] Bluetooth: hci1: Malformed HCI Event: 0x22
[  136.778328][ T7860] can: request_module (can-proto-3) failed.
[  136.959501][ T7875] syz.3.1078 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  137.880358][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  137.891219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.639633][ T7973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  142.374515][ T8187] ptrace attach of "./syz-executor exec"[6158] was attempted by "./syz-executor exec"[8187]
[  142.777154][ T6169] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7
[  151.699091][   T30] audit: type=1800 audit(6041127562.207:10): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1487" name="members" dev="configfs" ino=15649 res=0 errno=0
[  153.221445][ T6169] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13
[  153.613745][   T30] audit: type=1800 audit(6041127576.127:11): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1539" name="discovery_nqn" dev="configfs" ino=16541 res=0 errno=0
[  154.473238][ T8859] ima: policy update failed
[  154.513560][   T30] audit: type=1802 audit(6041127577.042:12): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1561" res=0 errno=0
[  156.603184][ T6169] Bluetooth: hci3: Malformed LE Event: 0x0b
[  157.000674][   T30] audit: type=1800 audit(6041127579.535:13): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1638" name="lu_gp_id" dev="configfs" ino=16854 res=0 errno=0
[  157.340362][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.497858][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.676082][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.808375][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.169524][   T36] bridge_slave_1: left allmulticast mode
[  158.180974][   T36] bridge_slave_1: left promiscuous mode
[  158.200763][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.288961][   T36] bridge_slave_0: left allmulticast mode
[  158.298547][   T36] bridge_slave_0: left promiscuous mode
[  158.331692][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.454990][ T6157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.469916][ T6157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.488761][ T6157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.510833][ T6157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.521139][ T6157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.477263][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.505974][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.537993][   T36] bond0 (unregistering): Released all slaves
[  160.520418][   T36] hsr_slave_0: left promiscuous mode
[  160.556582][   T36] hsr_slave_1: left promiscuous mode
[  160.573613][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.603306][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.617409][ T6169] Bluetooth: hci2: command tx timeout
[  160.634732][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.655472][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.754912][   T36] veth1_macvtap: left promiscuous mode
[  160.765110][   T36] veth0_macvtap: left promiscuous mode
[  160.810691][   T36] veth1_vlan: left promiscuous mode
[  160.819273][   T36] veth0_vlan: left promiscuous mode
[  161.966780][   T36] team0 (unregistering): Port device team_slave_1 removed
[  162.054614][   T36] team0 (unregistering): Port device team_slave_0 removed
[  162.686563][ T6169] Bluetooth: hci2: command tx timeout
[  163.570927][ T9065] chnl_net:caif_netlink_parms(): no params data found
[  164.058610][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.067294][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.088851][ T9065] bridge_slave_0: entered allmulticast mode
[  164.110862][ T9065] bridge_slave_0: entered promiscuous mode
[  164.131692][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.148958][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.170394][ T9065] bridge_slave_1: entered allmulticast mode
[  164.188173][ T9065] bridge_slave_1: entered promiscuous mode
[  164.421898][ T9065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.444907][ T9065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.591549][ T9065] team0: Port device team_slave_0 added
[  164.623828][ T9065] team0: Port device team_slave_1 added
[  164.757780][ T6169] Bluetooth: hci2: command tx timeout
[  164.802629][ T9372] Process accounting resumed
[  164.820385][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.827545][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.860248][ T9065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.905922][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.912910][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.978153][ T9065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.111755][ T9065] hsr_slave_0: entered promiscuous mode
[  165.145348][ T9065] hsr_slave_1: entered promiscuous mode
[  165.779052][ T9065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.813777][ T9065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.837065][ T9065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.902414][ T9065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  166.169211][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.243327][ T9065] 8021q: adding VLAN 0 to HW filter on device team0
[  166.285137][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.293089][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.315460][ T9443] =======================================================
[  166.315460][ T9443] WARNING: The mand mount option has been deprecated and
[  166.315460][ T9443]          and is ignored by this kernel. Remove the mand
[  166.315460][ T9443]          option from the mount to silence this warning.
[  166.315460][ T9443] =======================================================
[  166.401400][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.408695][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.836633][ T6169] Bluetooth: hci2: command tx timeout
[  166.946987][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.574077][ T9065] veth0_vlan: entered promiscuous mode
[  167.615745][ T9065] veth1_vlan: entered promiscuous mode
[  167.727209][ T9065] veth0_macvtap: entered promiscuous mode
[  167.767401][ T9065] veth1_macvtap: entered promiscuous mode
[  167.843542][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.868205][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.889872][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.903259][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.917395][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.929803][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.957605][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.016084][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.055989][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.098747][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.110008][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.120309][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.132509][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.177443][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.230752][ T9065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.246920][ T9065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.289556][ T9065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.300002][ T9065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.590124][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.618802][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.697147][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.706201][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.471774][ T6169] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9
[  170.971544][ T9649] capability: warning: `syz.3.1895' uses deprecated v2 capabilities in a way that may be insecure
[  178.699914][ T6169] Bluetooth: hci1: unexpected event 0x17 length: 123 > 6
[  179.835675][ T9979] kexec: Could not allocate control_code_buffer
[  181.001270][T10134] syz_tun: tun_chr_ioctl cmd 9
[  181.361032][   T30] audit: type=1800 audit(1045.184:14): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2116" name="version" dev="configfs" ino=21036 res=0 errno=0
[  183.329749][T10270] random: crng reseeded on system resumption
[  184.772657][T10353] Unable to find swap-space signature
[  186.421309][T10448] nfsd: Unknown parameter '^B�-'
[  187.468370][T10503] cougar: G6 mapped to space
[  187.747060][T10520] aoe: copy from user failed
[  187.751792][T10520] aoe: could not set interface list: too many interfaces
[  188.544250][T10563] delete_channel: no stack
[  189.383640][T10609] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  190.685934][T10675] block2mtd: Using custom MTD label '' for dev 
[  190.701212][T10675] block2mtd: error: cannot open device 
[  192.004208][T10744] kAFS: Invalid Command on /proc/fs/afs/cells file
[  193.148539][T10807] Scaler: =================  START STATUS  =================
[  193.156086][T10807] Scaler: ==================  END STATUS  ==================
[  193.303885][   T30] audit: type=1800 audit(1057.187:15): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2394" name="discovery_nqn" dev="configfs" ino=22882 res=0 errno=0
[  194.000651][   T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.166538][   T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.247061][   T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.361405][   T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.734267][   T70] bridge_slave_1: left allmulticast mode
[  194.747943][   T70] bridge_slave_1: left promiscuous mode
[  194.770864][   T70] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.829920][T10871] Process accounting paused
[  194.840468][   T70] bridge_slave_0: left allmulticast mode
[  194.846152][   T70] bridge_slave_0: left promiscuous mode
[  194.864407][   T70] bridge0: port 1(bridge_slave_0) entered disabled state
����[  194.944161][ T6157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.955258][ T6157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.967535][ T6157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.980143][ T6157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.008853][ T6157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.814769][   T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.831093][   T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.881815][   T70] bond0 (unregistering): Released all slaves
[  196.657011][T10956] blkio.reset_stats is deprecated
[  196.724532][   T70] hsr_slave_0: left promiscuous mode
[  196.775979][   T70] hsr_slave_1: left promiscuous mode
[  196.789798][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.818394][   T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.849791][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.857816][   T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.957207][   T70] veth1_macvtap: left promiscuous mode
[  196.986003][   T70] veth0_macvtap: left promiscuous mode
[  197.008240][   T70] veth1_vlan: left promiscuous mode
[  197.019104][   T70] veth0_vlan: left promiscuous mode
[  197.077735][ T6169] Bluetooth: hci3: command tx timeout
[  198.015202][   T70] team0 (unregistering): Port device team_slave_1 removed
[  198.124087][   T70] team0 (unregistering): Port device team_slave_0 removed
[  198.419859][T11031] zram0: detected capacity change from 0 to 8
[  198.477732][T11034] WARNING! power/level is deprecated; use power/control instead
[  199.062514][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.071626][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  199.147622][ T6169] Bluetooth: hci3: command tx timeout
[  199.186097][T10877] chnl_net:caif_netlink_parms(): no params data found
[  199.613820][T10877] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.634005][T10877] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.664303][T10877] bridge_slave_0: entered allmulticast mode
[  199.672122][T10877] bridge_slave_0: entered promiscuous mode
[  199.733080][T10877] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.747199][T10877] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.766032][T10877] bridge_slave_1: entered allmulticast mode
[  199.792108][T10877] bridge_slave_1: entered promiscuous mode
[  200.006262][T10877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.059822][T10877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.206428][T10877] team0: Port device team_slave_0 added
[  200.237786][T10877] team0: Port device team_slave_1 added
[  200.345225][T10877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.390332][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.459688][T10877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.494179][T10877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.502025][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.564027][T10877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.667468][T10877] hsr_slave_0: entered promiscuous mode
[  200.690302][T10877] hsr_slave_1: entered promiscuous mode
[  200.719468][T10877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.727152][T10877] Cannot create hsr debugfs directory
[  200.994232][T11137] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  201.206186][ T6169] Bluetooth: hci3: command tx timeout
[  201.241289][T11144] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  201.318617][T10877] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  201.363693][T10877] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  201.389433][T10877] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  201.442832][T10877] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  201.709087][T10877] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.786941][T10877] 8021q: adding VLAN 0 to HW filter on device team0
[  201.838325][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.845544][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.904602][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.911806][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.067356][T10877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.518039][T11126] kexec: Could not allocate control_code_buffer
[  202.577320][T10877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.855897][T11201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  203.215333][T10877] veth0_vlan: entered promiscuous mode
[  203.256954][T10877] veth1_vlan: entered promiscuous mode
[  203.275901][ T6169] Bluetooth: hci3: command tx timeout
[  203.373815][T10877] veth0_macvtap: entered promiscuous mode
[  203.404423][T10877] veth1_macvtap: entered promiscuous mode
[  203.433240][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.451740][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.465662][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.481724][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.492268][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.506869][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.547264][T10877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.611101][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.622043][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.643837][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.683327][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.703191][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.723051][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.734700][T10877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.760600][T11235] vivid-003: =================  START STATUS  =================
[  203.782446][T10877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.805015][T11235] vivid-003: Radio HW Seek Mode: Bounded
[  203.814778][T11235] vivid-003: Radio Programmable HW Seek: false
[  203.821060][T10877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.830591][T11235] vivid-003: RDS Rx I/O Mode: Block I/O
[  203.837248][T10877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.846245][T11235] vivid-003: Generate RBDS Instead of RDS: false
[  203.853110][T11235] vivid-003: RDS Reception: true
[  203.858206][T10877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.867246][T11235] vivid-003: RDS Program Type: 0 inactive
[  203.875853][T11235] vivid-003: RDS PS Name:  inactive
[  203.890750][T11235] vivid-003: RDS Radio Text:  inactive
[  203.900530][T11235] vivid-003: RDS Traffic Announcement: false inactive
[  203.908347][T11235] vivid-003: RDS Traffic Program: false inactive
[  203.919190][T11235] vivid-003: RDS Music: false inactive
[  203.925830][T11235] vivid-003: ==================  END STATUS  ==================
[  204.034679][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.058026][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.149908][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.172405][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.587053][T11267] binder: 11263:11267 ioctl 40046205 0 returned -22
[  206.084388][   T30] audit: type=1800 audit(1070.033:16): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2609" name="dbroot" dev="configfs" ino=23865 res=0 errno=0
[  206.100537][T11344] db_root: not a directory: /dev/audio1
[  208.758663][ T6169] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[  209.144398][T11485] nvme_fabrics: missing parameter 'transport=%s'
[  209.181332][T11485] nvme_fabrics: missing parameter 'nqn=%s'
[  212.289945][ T5827] Process accounting resumed
[  215.615242][ T6169] Bluetooth: hci2: Malformed Event: 0x13
[  215.868962][T11796] ptrace attach of "./syz-executor exec"[9065] was attempted by ""[11796]

syzkaller
syzkaller login: [  221.037493][T12022] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2909' sets config #5
[  221.504667][ T5139] Bluetooth: hci1: command 0x0406 tx timeout
[  221.511351][ T6163] Bluetooth: hci0: command 0x0406 tx timeout
[  222.039297][T12070] queue_state_write: operation too long
[  222.045139][T12070] queue_state_write: use 'run', 'start' or 'kick'

syzkaller
syzkaller login: [  223.348965][T12142] bond0: no command found in slaves file - use +ifname or -ifname
[  223.496881][T12147] block2mtd: parameter too long
[  224.985897][T12228] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead.
[  228.176880][T12390] warning: `syz.5.3047' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  228.915544][T12427] delete_channel: no stack
[  230.085399][T12490] usbip-vudc usbip-vudc.0: gadget not bound
[  230.249129][T12502] kAFS: Invalid Command on /proc/fs/afs/cells file
[  231.169215][T12544] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  231.169215][T12544]    program syz.1.3110 not setting count and/or reply_len properly
[  232.140499][T12595] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  236.452299][T12815] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  238.433554][T12910] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  238.462604][T12916] syz.5.3291 uses obsolete (PF_INET,SOCK_PACKET)
[  243.572248][T13174] binder: 13173:13174 ioctl c0306201 200000002380 returned -14
[  244.645111][T13232] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed.
[  244.969930][T13246] futex_wake_op: syz.3.3455 tries to shift op by 64; fix this program
[  246.292763][T13315] udc dummy_udc.0: soft-connect without a gadget driver
[  246.451482][T13325] program syz.3.3490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.462493][T13791] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5)
[  255.968481][T13819] kAFS: No cell specified
[  256.713111][T13854] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  256.849106][T13862] cifs: Unknown parameter '#�ʑ���C�	ˀH�/R{�<'
[  257.090428][   T30] audit: type=1800 audit(4294967300.709:17): pid=13874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3698" name="lu_gp_id" dev="configfs" ino=32792 res=0 errno=0
[  257.118159][T13874] kstrtoul() returned -22 for lu_gp_id
[  258.749129][ T6157] Bluetooth: hci1: Malformed Event: 0x02
[  259.018987][T13966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  259.758487][T14001] i2c i2c-0: delete_device: Can't parse I2C address
[  260.184649][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  260.198373][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  260.256488][T14026] ima: Unable to open file: /surit��R�y/integrity?iqa/policy (-2)
[  260.261018][T14025] ima: policy update failed
[  260.295125][   T30] audit: type=1802 audit(4294967303.935:18): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3763" res=0 errno=0
[  261.827239][T14094] vivid-007: =================  START STATUS  =================
[  261.851141][T14094] vivid-007: Generate PTS: true
[  261.860691][T14094] vivid-007: Generate SCR: true
[  261.865722][T14094] tpg source WxH: 640x360 (Y'CbCr)
[  261.893651][T14094] tpg field: 1
[  261.897074][T14094] tpg crop: (0,0)/640x360
[  261.912917][T14094] tpg compose: (0,0)/640x360
[  261.920674][T14094] tpg colorspace: 8
[  261.928953][T14094] tpg transfer function: 0/0
[  261.939023][T14094] tpg Y'CbCr encoding: 0/0
[  261.961292][T14094] tpg quantization: 0/0
[  261.965576][T14094] tpg RGB range: 0/2
[  261.969573][T14094] vivid-007: ==================  END STATUS  ==================
[  262.158872][T14104] rnbd_client L213: map_device: Parameters missing
[  263.742751][ T6157] Bluetooth: hci3: Malformed Event: 0x02
[  265.081856][T14240] program syz.1.3867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.202265][T14244] ima: Unable to open file: /surit��R�y/integrity?iqa/policy (-2)
[  265.202699][T14242] ima: policy update failed
[  265.252793][   T30] audit: type=1802 audit(4294967308.911:19): pid=14242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3868" res=0 errno=0
[  265.522857][ T6157] Bluetooth: hci2: Malformed Event: 0x02
[  266.487581][T14304] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  266.654832][T14313] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request
[  266.787808][T14317] synth uevent: /module/l2tp_ip6: unknown uevent action string
[  267.997286][   T30] audit: type=1800 audit(4294967311.675:20): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3934" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0
[  269.578299][ T6157] Bluetooth: hci0: Malformed Event: 0x02
[  270.132799][T14475] dyndbg: bad flag-op �, at start of �
[  270.138462][T14475] dyndbg: flags parse failed
[  270.163284][T14475] dyndbg: bad flag-op �, at start of �
[  270.180534][T14475] dyndbg: flags parse failed
[  271.311558][T14526] usbcore.quirks: string doesn't fit in 127 chars.
[  271.542497][ T6157] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  271.542543][ T6157] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12
[  273.551063][ T6157] Bluetooth: hci1: command 0x0406 tx timeout
[  273.616318][ T6157] Bluetooth: hci2: Malformed Event: 0x02
[  273.906353][   T30] audit: type=1400 audit(4294967317.616:21): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14655 comm="syz.1.4066"
[  275.055508][ T6157] Bluetooth: hci0: Malformed Event: 0x02
[  276.166922][ T6157] Bluetooth: hci0: Malformed Event: 0x02
[  276.660956][T14765] QAT: failed to copy from user cfg_data.
[  278.036328][T14829] ICMPv6: process `syz.5.4150' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead
[  278.226973][T14836] Invalid ELF header magic: != ELF
[  280.776202][T14964] Invalid ELF header magic: != ELF
[  281.359507][T14986] zram: Can't change algorithm for initialized device
[  282.561246][T15030] binder: 15029:15030 ioctl c0046209 0 returned -22
[  282.623565][ T6169] Bluetooth: hci2: command 0x0406 tx timeout
[  283.734801][T15090] vmstat_refresh: nr_hugetlb -2048
[  284.218540][T15115] kAFS: Invalid Command on /proc/fs/afs/cells file
[  288.379557][T15307] process 'syz.3.4384' launched '/dev/fd/3' with NULL argv: empty string added
[  290.573621][   T30] audit: type=1800 audit(4294967334.363:22): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4439" name="lu_gp_id" dev="configfs" ino=37150 res=0 errno=0
[  292.557749][T15513] Unable to find swap-space signature
[  295.119688][T15659] : Can't lookup blockdev
[  298.306313][T15840] i2c i2c-0: new_device: Missing parameters
[  298.781224][T15865] zram0: detected capacity change from 8 to 0
[  299.072205][ T6157] Bluetooth: hci1: unexpected event 0x3e length: 0 < 1
[  299.866956][T15923] hub 8-0:1.0: Interface 0 is not authorized for usage
[  299.884532][T15923] usbtest 8-0:1.0: Interface 0 is not authorized for usage
[  300.681515][T15972] kafs: addr_prefs: Invalid Command
[  301.186287][T15988] usb usb2: usbfs: process 15988 (syz.3.4715) did not claim interface 1 before use
[  303.331959][   T30] audit: type=1800 audit(4294967347.189:23): pid=16095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4768" name="features" dev="configfs" ino=39301 res=0 errno=0
[  303.730859][T16117] block2mtd: illegal erase size
[  305.744441][T16202] aoe: can't write to that file.
[  309.913686][T16340] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  310.817805][T16387] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string
[  310.828617][T16387]  ep_00: uevent: failed to send synthetic uevent: -22
[  311.401873][T16420] ptrace attach of "./syz-executor exec"[6158] was attempted by "./syz-executor exec"[16420]
[  312.799074][T16496] ima: policy update failed
[  312.814025][   T30] audit: type=1802 audit(4294967356.718:24): pid=16496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4964" res=0 errno=0
[  313.287403][T16516] queue_state_write: unsupported operation ''
[  313.306699][T16516] queue_state_write: use 'run', 'start' or 'kick'
[  315.797245][T16622] Format for deleting device is "id" (uint).
[  316.062349][T16633] kAFS: Invalid Command on /proc/fs/afs/cells file
[  316.192214][T16637] ICMPv6: process `syz.4.5033' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead
[  316.785000][T16660] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate)
[  316.807764][T16660] bond0: option lp_interval: allowed values 1 - 2147483647
[  317.216648][T16678] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  317.936206][T16714] i2c i2c-0: delete_device: Can't find device in list
[  318.014612][T16720] block2mtd: illegal erase size
[  318.277573][ T6169] Bluetooth: hci3: command 0x0406 tx timeout
[  319.932920][T16830] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  321.306341][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  321.313010][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  321.690323][T16922] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there
[  321.690323][T16922]  
[  322.529981][T16968] bond0: option packets_per_slave: invalid value (X�n�p�)
[  322.566728][T16968] bond0: option packets_per_slave: allowed values 0 - 65535
[  322.673512][T16978] vivid-007: =================  START STATUS  =================
[  322.691792][T16978] vivid-007: Enable Output Cropping: true
[  322.725232][T16978] vivid-007: Enable Output Composing: true
[  322.731133][T16978] vivid-007: Enable Output Scaler: true
[  322.741220][T16978] vivid-007: Tx RGB Quantization Range: Automatic
[  322.758721][T16978] vivid-007: Transmit Mode: HDMI
[  322.769572][T16978] vivid-007: Hotplug Present: 0x00000000
[  322.784595][T16978] vivid-007: RxSense Present: 0x00000000
[  322.790442][T16978] vivid-007: EDID Present: 0x00000000
[  322.800548][T16978] vivid-007: ==================  END STATUS  ==================
[  322.939361][T16990] [U] �
[  322.945848][T16990] [U] ]7�3å�^�Jd�z׹��V�Ww+��
[  322.952113][T16990] [U] �W�M	?r�B�zp^��Gfѿ�aG�`u�2����k�0[�����L�����ҽA/�U��5'~���
[  324.437403][T17066] bond0: option packets_per_slave: invalid value (X�n�p�)
[  324.452615][T17066] bond0: option packets_per_slave: allowed values 0 - 65535
[  324.859152][T17090] afs: Bad value for 'source'
[  326.228700][T17166] ecryptfs_parse_packet_length: Error parsing packet length
[  326.246070][T17166] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  326.529044][T17183] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i��(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[  326.730276][T17190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.909512][T17190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.043618][T17190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.199589][T17190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.573593][T17288] [U] ��α�{�=@cBh�PZ4:�z�I
[  328.595377][T17288] [U] 9�zG�-a�o�P��]:��]�V�
[  328.619788][T17292] mmap: syz.3.5354 (17292): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  329.030184][T17314] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  329.056285][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.063906][T17314] CIFS mount error: No usable UNC path provided in device string!
[  329.063906][T17314] 
[  329.075053][T17314] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  331.551687][T17460] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  331.552485][T17458] ima: policy update failed
[  331.580956][   T30] audit: type=1802 audit(4294967375.586:25): pid=17458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5437" res=0 errno=0
[  331.682994][T17466] kafs: addr_prefs: Too many elements in string
[  333.460002][   T30] audit: type=1800 audit(4294967377.486:26): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5475" name="dbroot" dev="configfs" ino=42938 res=0 errno=0
[  333.503029][T17536] db_root: cannot open: �
[  333.743149][T17547] misc userio: Invalid payload size
[  335.127780][T17624] hub 3-0:1.0: USB hub found
[  335.138588][T17624] hub 3-0:1.0: 1 port detected
[  335.143009][T17625] QAT: Invalid ioctl 21531
[  335.164568][T17624] usb usb3: authorized to connect
[  336.209684][   T30] audit: type=1800 audit(4294967380.240:27): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5549" name="members" dev="configfs" ino=43777 res=0 errno=0
[  336.621351][T17710] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in;
[  336.621351][T17710]    program syz.5.5561 not setting count and/or reply_len properly
[  337.357465][T17741] block nbd14: the capability attribute has been deprecated.
[  337.732529][T17763] 
[  338.274884][T17795] scsi_strcpy_devinfo: vendor string '��/&c��~n]	�|
[  338.274884][T17795] M�' is too long
[  338.288627][T17795] scsi_strcpy_devinfo: model string '�Dd5��K�2b�
[  338.288627][T17795] ���W����� ��' is too long
[  338.556211][T17810] aoe: invalid device specification 
[  338.806876][T17823] nvme_fcloop: unknown parameter or missing value '^/]'
[  340.367753][T17907] [U] ����UU�|�@3*���gv�����SdbƱ�)�݄s������pA�g�`���y
[  340.387643][T17907] [U] 9�zG�-a�o�P��]:��]�V�
[  342.824814][   T30] audit: type=1806 audit(4294967386.895:28): xattr="" res=-22
[  344.350413][   T30] audit: type=1400 audit(4294967388.422:29): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18103 comm="syz.3.5757"
[  346.013152][T18174] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008
[  346.032473][T18174] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  346.051309][T18174] memcg:ffff8880255eb081
[  346.072767][T18174] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  346.091772][T18174] page_type: f5(slab)
[  346.107875][T18174] raw: 00fff00000000040 ffff8881404088c0 0000000000000000 dead000000000001
[  346.132382][T18174] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880255eb081
[  346.152440][T18174] head: 00fff00000000040 ffff8881404088c0 0000000000000000 dead000000000001
[  346.169458][T18174] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880255eb081
[  346.188523][T18174] head: 00fff00000000002 ffffea0001e00201 00000000ffffffff 00000000ffffffff
[  346.216709][T18174] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  346.236375][T18174] page dumped because: unmovable page
[  346.251754][T18174] page_owner tracks the page as allocated
[  346.281574][T18174] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6134, tgid 6134 (syz-executor), ts 90618870587, free_ts 85370064117
[  346.331335][T18174]  post_alloc_hook+0x181/0x1b0
[  346.336165][T18174]  get_page_from_freelist+0x135c/0x3920
[  346.354238][T18174]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  346.360188][T18174]  alloc_pages_mpol+0x1fb/0x550
[  346.381073][T18174]  new_slab+0x244/0x340
[  346.385321][T18174]  ___slab_alloc+0xd9c/0x1940
[  346.414213][T18174]  __slab_alloc.constprop.0+0x56/0xb0
[  346.419690][T18174]  kmem_cache_alloc_lru_noprof+0xf4/0x3b0
[  346.440808][T18174]  alloc_inode+0xc3/0x240
[  346.445756][T18174]  new_inode+0x22/0x1c0
[  346.450504][T18174]  binderfs_create_file+0xb2/0x3b0
[  346.474522][T18174]  binderfs_fill_super+0xa18/0x1360
[  346.479821][T18174]  get_tree_nodev+0xda/0x190
[  346.495150][T18174]  vfs_get_tree+0x8b/0x340
[  346.510406][T18174]  path_mount+0x14d4/0x1f20
[  346.523905][T18174]  __x64_sys_mount+0x28d/0x310
[  346.528749][T18174] page last free pid 5813 tgid 5813 stack trace:
[  346.550203][T18174]  free_unref_folios+0x999/0x1630
[  346.555285][T18174]  folios_put_refs+0x56f/0x740
[  346.560107][T18174]  free_pages_and_swap_cache+0x245/0x4a0
[  346.585517][T18174]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  346.600981][T18174]  tlb_finish_mmu+0x168/0x7b0
[  346.614289][T18174]  vms_clear_ptes+0x55e/0x770
[  346.627347][T18174]  vms_complete_munmap_vmas+0x1ca/0x970
[  346.641780][T18174]  do_vmi_align_munmap+0x43b/0x7d0
[  346.646982][T18174]  do_vmi_munmap+0x208/0x3e0
[  346.689485][T18174]  __vm_munmap+0x19a/0x390
[  346.693977][T18174]  __x64_sys_munmap+0x59/0x80
[  346.698706][T18174]  do_syscall_64+0xcd/0x230
[  346.719325][T18174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.871347][T18266] bond0: no command found in slaves file - use +ifname or -ifname
[  348.260049][T18288] syz.5.5848 (18288): drop_caches: 0
[  348.405448][T18295] ecryptfs_miscdev_write: Invalid packet size [192]
[  349.574561][T18357] Setting dangerous option i915.mitigations - tainting kernel
[  351.602485][T18435] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706].
[  352.090732][T18451] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  352.267861][T18457] zram: Added device: zram1
[  353.005682][T18487] i2c i2c-0: delete_device: Extra parameters
[  353.652842][ T6157] Bluetooth: hci2: SCO packet too small
[  353.944209][T18540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008
[  353.963777][T18540] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  353.989163][T18540] memcg:ffff8880255eb081
[  353.998764][T18540] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  354.007352][T18540] page_type: f5(slab)
[  354.015691][T18540] raw: 00fff00000000040 ffff8881404088c0 0000000000000000 dead000000000001
[  354.024960][T18540] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880255eb081
[  354.038268][T18540] head: 00fff00000000040 ffff8881404088c0 0000000000000000 dead000000000001
[  354.058374][T18540] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880255eb081
[  354.087521][T18540] head: 00fff00000000002 ffffea0001e00201 00000000ffffffff 00000000ffffffff
[  354.116247][T18540] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  354.150331][T18540] page dumped because: unmovable page
[  354.163543][T18540] page_owner tracks the page as allocated
[  354.179481][T18540] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6134, tgid 6134 (syz-executor), ts 90618870587, free_ts 85370064117
[  354.240687][T18540]  post_alloc_hook+0x181/0x1b0
[  354.250520][T18540]  get_page_from_freelist+0x135c/0x3920
[  354.262502][T18540]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  354.277057][T18540]  alloc_pages_mpol+0x1fb/0x550
[  354.285447][T18540]  new_slab+0x244/0x340
[  354.289776][T18540]  ___slab_alloc+0xd9c/0x1940
[  354.295001][T18540]  __slab_alloc.constprop.0+0x56/0xb0
[  354.305605][T18540]  kmem_cache_alloc_lru_noprof+0xf4/0x3b0
[  354.311852][T18540]  alloc_inode+0xc3/0x240
[  354.316407][T18540]  new_inode+0x22/0x1c0
[  354.336544][T18540]  binderfs_create_file+0xb2/0x3b0
[  354.342764][T18540]  binderfs_fill_super+0xa18/0x1360
[  354.355920][T18540]  get_tree_nodev+0xda/0x190
[  354.366286][T18540]  vfs_get_tree+0x8b/0x340
[  354.379522][T18540]  path_mount+0x14d4/0x1f20
[  354.387381][T18540]  __x64_sys_mount+0x28d/0x310
[  354.396180][T18540] page last free pid 5813 tgid 5813 stack trace:
[  354.402863][T18540]  free_unref_folios+0x999/0x1630
[  354.408044][T18540]  folios_put_refs+0x56f/0x740
[  354.417350][T18540]  free_pages_and_swap_cache+0x245/0x4a0
[  354.423473][T18540]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  354.439248][T18540]  tlb_finish_mmu+0x168/0x7b0
[  354.461092][T18540]  vms_clear_ptes+0x55e/0x770
[  354.468695][T18540]  vms_complete_munmap_vmas+0x1ca/0x970
[  354.488795][T18540]  do_vmi_align_munmap+0x43b/0x7d0
[  354.502091][T18540]  do_vmi_munmap+0x208/0x3e0
[  354.512214][T18540]  __vm_munmap+0x19a/0x390
[  354.527047][T18540]  __x64_sys_munmap+0x59/0x80
[  354.537789][T18540]  do_syscall_64+0xcd/0x230
[  354.550592][T18540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.600418][T18562] syz_tun: tun_chr_ioctl cmd 35111
[  355.312446][T18604] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  355.766804][T18645] Setting dangerous option i915.mitigations - tainting kernel
[  355.792231][T18645] Bad "i915.mitigations=!h��@�S�", 'h��@�S�' is unknown
[  359.335558][T18843] sysfs_service_op_store: Client not running :-5:
[  359.669919][ T6157] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11
[  360.459432][   T22] process 6158 (syz-executor) no longer affine to cpu1
[  360.495589][   T10] smpboot: CPU 1 is now offline
[  360.746308][T18920] sysfs_service_op_show: Client not running :-5:
[  364.282240][T19064] ima: policy update failed
[  364.297748][   T30] audit: type=1802 audit(4294967408.466:30): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.6193" res=0 errno=0
[  367.983668][T19192] [U] ����UU�|�@3*���gv�����SdbƱ�)�݄s������pA�g�F�_31Ša���ـ�M E��˜m%?ߥǜ���!�Z��gɚn[�Q��!��"�
[  368.297241][T19200] Setting dangerous option i915.mitigations - tainting kernel
[  373.574236][T19391] kAFS: Invalid Command on /proc/fs/afs/cells file
[  374.398680][T19420] nvme_fcloop: unknown parameter or missing value '7'
[  375.969026][   T30] audit: type=1800 audit(4294967420.207:31): pid=19469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6380" name="dbroot" dev="configfs" ino=50331 res=0 errno=0
[  378.175946][T19540] block nbd8: NBD_DISCONNECT
[  380.543622][T19623] ACPI: Can not change Invalid GPE/Fixed Event status
[  381.100442][T19643] bond0: Unable to set down delay as MII monitoring is disabled
[  381.161966][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  381.168292][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  381.272999][   T30] audit: type=1806 audit(4294967425.544:32):  res=-14
[  381.744736][T19666] program syz.3.6475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.658317][T19695] ICMPv6: process `syz.4.6489' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead
[  384.744733][   T30] audit: type=1807 audit(4294967429.033:33): UNKNOWN=� res=0
[  384.762128][T19771] ima: policy update failed
[  384.787906][   T30] audit: type=1802 audit(4294967429.053:34): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.6526" res=0 errno=0
[  384.909195][   T30] audit: type=1802 audit(4294967429.093:35): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6526" res=0 errno=0
[  384.998029][T19780] ubi0: attaching mtd0
[  385.016772][ T6157] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  385.016801][ T6157] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  385.037242][ T6157] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  385.037306][ T6157] Bluetooth: hci0: Malformed LE Event: 0x0d
[  385.082760][T19780] ubi0: scanning is finished
[  385.087377][T19780] ubi0: empty MTD device detected
[  385.125653][T19780] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  385.323287][T19780] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  385.735392][T19803] ima: policy update failed
[  385.740088][   T30] audit: type=1807 audit(4294967430.028:36): UNKNOWN=0"�]$|�1j�0B|d���ӉO��+��/��x����WӦ��^��gq%Ḧr�O� res=0
[  385.817711][   T30] audit: type=1802 audit(4294967430.028:37): pid=19804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.6542" res=0 errno=0
[  385.919738][   T30] audit: type=1802 audit(4294967430.088:38): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6542" res=0 errno=0
[  386.755795][ T1144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.912021][ T1144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.015614][ T1144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.174985][ T1144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.736382][ T1144] bridge_slave_1: left allmulticast mode
[  387.742062][ T1144] bridge_slave_1: left promiscuous mode
[  387.828020][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.988186][ T1144] bridge_slave_0: left allmulticast mode
[  387.993856][ T1144] bridge_slave_0: left promiscuous mode
[  388.062643][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.508667][ T6169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  388.519192][ T6169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  388.527285][ T6169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  388.535839][ T6169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  388.579680][ T6169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  389.744873][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.779529][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.821673][ T1144] bond0 (unregistering): Released all slaves
[  390.621826][ T6157] Bluetooth: hci3: command tx timeout
[  391.501066][ T1144] hsr_slave_0: left promiscuous mode
[  391.541230][ T1144] hsr_slave_1: left promiscuous mode
[  391.570869][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.627708][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.716171][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.767964][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.872811][ T1144] veth1_macvtap: left promiscuous mode
[  391.939839][ T1144] veth0_macvtap: left promiscuous mode
[  391.969802][ T1144] veth1_vlan: left promiscuous mode
[  391.996327][ T1144] veth0_vlan: left promiscuous mode
[  392.223169][T20117] bcache: register_bcache() error : failed to open device
[  392.692061][ T6157] Bluetooth: hci3: command tx timeout
[  393.439078][T20150] synth uevent: /bus/memstick: unknown uevent action string
[  393.759123][ T1144] team0 (unregistering): Port device team_slave_1 removed
[  393.938266][ T1144] team0 (unregistering): Port device team_slave_0 removed
[  394.759963][ T6157] Bluetooth: hci3: command tx timeout
[  395.582496][T19894] chnl_net:caif_netlink_parms(): no params data found
[  396.194562][T19894] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.201674][T19894] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.296121][T19894] bridge_slave_0: entered allmulticast mode
[  396.337500][T19894] bridge_slave_0: entered promiscuous mode
[  396.444416][T19894] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.500740][T19894] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.540430][T19894] bridge_slave_1: entered allmulticast mode
[  396.602862][T19894] bridge_slave_1: entered promiscuous mode
[  396.712773][T20307] : Can't lookup blockdev
[  396.835399][ T6157] Bluetooth: hci3: command tx timeout
[  396.964499][T19894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.040336][T19894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.365135][T19894] team0: Port device team_slave_0 added
[  397.441942][T19894] team0: Port device team_slave_1 added
[  397.789479][T19894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.833658][T19894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.038438][T19894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.143986][T19894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.151418][T19894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.314150][T19894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.592110][T19894] hsr_slave_0: entered promiscuous mode
[  398.598419][T19894] hsr_slave_1: entered promiscuous mode
[  398.663330][T19894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.697145][T19894] Cannot create hsr debugfs directory
[  399.726513][T19894] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  399.807796][T19894] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  399.879718][T19894] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  399.952179][T19894] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  400.423741][T19894] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.517609][T19894] 8021q: adding VLAN 0 to HW filter on device team0
[  400.642187][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.649346][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.742134][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.749275][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.941573][T19894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  401.705040][T19894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.733549][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  402.758308][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  402.810238][T19894] veth0_vlan: entered promiscuous mode
[  402.899685][T19894] veth1_vlan: entered promiscuous mode
[  403.031936][T19894] veth0_macvtap: entered promiscuous mode
[  403.102174][T19894] veth1_macvtap: entered promiscuous mode
[  403.203795][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.267072][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.314056][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.366347][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.424895][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.459053][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.502215][T19894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.583342][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.642791][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.687836][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.738529][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.807950][T19894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.880580][T19894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.931660][T19894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.023721][T19894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.074633][T19894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.124838][T19894] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.165844][T19894] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.544882][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.604470][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.797809][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.839113][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.721228][T20829] Invalid input. Must be >= 4608
[  408.632008][T20864] i2c i2c-0: new_device: Invalid device name
[  415.821620][T21110] usb usb24: check_ctrlrecip: process 21110 (syz.4.6887) requesting ep 01 but needs 81
[  415.893661][T21110] usb usb24: usbfs: process 21110 (syz.4.6887) did not claim interface 0 before use
[  415.919261][T21113] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1.  Contact your vendor for updates.
[  417.068076][T21154] i2c i2c-0: new_device: Can't parse I2C address
[  417.880982][T21183] ICMPv6: process `syz.6.6916' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  420.935536][T21290] QAT: failed to copy from user.
[  423.783407][T21393] program syz.3.7006 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  424.663812][T21427] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd
[  425.857326][T21476] <
[  429.400533][T21601] syz.4.7082 (21601): attempted to duplicate a private mapping with mremap.  This is not supported.
[  431.627638][T21691] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81630039 (__mcheck_cpu_init_clear_banks+0x109/0x1f0)
[  431.643132][T21691] Call Trace:
[  431.646419][T21691]  <TASK>
[  431.649359][T21691]  mce_cpu_restart+0x98/0xb0
[  431.653959][T21691]  ? __pfx_mce_cpu_restart+0x10/0x10
[  431.659270][T21691]  smp_call_function_many_cond+0xd7d/0x1290
[  431.665197][T21691]  ? __pfx_mce_cpu_restart+0x10/0x10
[  431.670502][T21691]  ? __pfx_mce_cpu_restart+0x10/0x10
[  431.675794][T21691]  on_each_cpu_cond_mask+0x40/0x90
[  431.680934][T21691]  set_bank+0x240/0x3a0
[  431.685120][T21691]  ? __pfx_set_bank+0x10/0x10
[  431.689811][T21691]  ? find_held_lock+0x2b/0x80
[  431.694510][T21691]  ? __pfx_set_bank+0x10/0x10
[  431.699198][T21691]  dev_attr_store+0x55/0x80
[  431.703723][T21691]  ? __pfx_dev_attr_store+0x10/0x10
[  431.708944][T21691]  sysfs_kf_write+0xef/0x150
[  431.713558][T21691]  kernfs_fop_write_iter+0x351/0x510
[  431.718866][T21691]  ? __pfx_sysfs_kf_write+0x10/0x10
[  431.724083][T21691]  vfs_write+0x5ba/0x1180
[  431.728415][T21691]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  431.734236][T21691]  ? __pfx___mutex_lock+0x10/0x10
[  431.739279][T21691]  ? __pfx_vfs_write+0x10/0x10
[  431.744064][T21691]  ksys_write+0x12a/0x240
[  431.748393][T21691]  ? __pfx_ksys_write+0x10/0x10
[  431.753239][T21691]  ? rcu_is_watching+0x12/0xc0
[  431.758008][T21691]  do_syscall_64+0xcd/0x230
[  431.762548][T21691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.768440][T21691] RIP: 0033:0x7f9a8c18e969
[  431.772857][T21691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.792480][T21691] RSP: 002b:00007f9a8d039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  431.800903][T21691] RAX: ffffffffffffffda RBX: 00007f9a8c3b5fa0 RCX: 00007f9a8c18e969
[  431.809215][T21691] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003
[  431.817188][T21691] RBP: 00007f9a8c210ab1 R08: 0000000000000000 R09: 0000000000000000
[  431.825156][T21691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.833125][T21691] R13: 0000000000000000 R14: 00007f9a8c3b5fa0 R15: 00007ffd06bf8ca8
[  431.841111][T21691]  </TASK>
[  433.405572][T21750] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582)
[  434.668275][T21799] ceph: Failed to parse sending metrics switch value 'P^'
[  437.559187][T21902] writes to the poll attribute are ignored.
[  437.598719][T21902] please use driver specific parameters instead.
[  440.588531][ T6157] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  443.553301][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  443.559721][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  449.002937][T22338] program syz.6.7372 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  449.060825][T22338] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  449.837907][T22371] Line length is too long: Should be less than 4094
[  450.726928][   T30] audit: type=1400 audit(4294967495.356:39): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=22404 comm="syz.3.7402"
[  452.962725][T22483] ubi0: attaching mtd0
[  453.020422][T22483] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033)
[  455.817292][T22584] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  459.396131][T22709] delete_channel: no stack
[  461.479395][T22777] cougar: G6 mapped to F18
[  468.217741][T23006] overlayfs: "check_copy_up" module option is obsolete
[  469.817233][T23048] tipc: Can't bind to reserved service type 1
[  474.331650][T23194] delete_channel: no stack
[  477.026921][T23276] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  478.933129][T23346] binder: 23344:23346 ioctl 400c620e 200000001b00 returned -22
[  479.560352][T23367] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  479.822471][T23380] Setting dangerous option i915.mitigations - tainting kernel
[  480.003856][T23385] kAFS: unparsable volume name
[  487.299290][T23687] syz_tun: tun_chr_ioctl cmd 1074025688
[  489.322062][   T30] audit: type=1806 audit(4294967534.156:40): xattr=2EC7871B res=-22
[  492.006272][T23869] block2mtd: illegal erase size
[  492.048579][T23871] blktrace: Concurrent blktraces are not allowed on ram7
[  495.769464][T23994] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  495.794776][T23994] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  495.860450][T23994] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  495.888922][T23994] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  495.934581][T23994] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  495.975991][T23994] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  496.020036][T23994] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  496.040628][T23994] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  496.062280][T23994] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  496.952955][T24077] usb usb15: usbfs: process 24077 (syz.1.8091) did not claim interface 0 before use
[  497.004307][T24081] rnbd_client L202: map_device: Unknown parameter or missing value '('
[  497.109691][ T6157] Bluetooth: hci0: command 0x0406 tx timeout
[  497.907881][ T6157] Bluetooth: hci1: command 0x0406 tx timeout
[  497.985014][ T6157] Bluetooth: hci2: command 0x0406 tx timeout
[  498.067725][ T6157] Bluetooth: hci3: command 0x0c1a tx timeout
[  498.225610][T24124] : Can't lookup blockdev
[  499.177269][ T6157] Bluetooth: hci0: command 0x0406 tx timeout
[  499.273863][T24159] binder: 24158:24159 ioctl c0306201 0 returned -14
[  499.840639][T24177] openvswitch: netlink: Multiple metadata blocks provided
[  499.976511][ T6157] Bluetooth: hci1: command 0x0406 tx timeout
[  500.054835][ T6157] Bluetooth: hci2: command 0x0406 tx timeout
[  500.131609][ T6157] Bluetooth: hci3: command 0x0c1a tx timeout
[  502.201173][ T6157] Bluetooth: hci3: command 0x0c1a tx timeout
[  503.393905][T24308] svc: failed to register nfsdv3 RPC service (errno 111).
[  503.444584][T24308] svc: failed to register nfsaclv3 RPC service (errno 111).
[  504.676508][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  504.683697][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  504.849739][T24362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  505.396979][T24379] device-mapper: ioctl: Invalid ioctl structure: uuid �, name , dev 5
[  506.058950][T24401] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  506.392184][T24408] HSR: entered promiscuous mode
[  508.744729][T24462] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  508.781011][T24462] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  508.818134][T24462] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  508.850239][T24462] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  509.098495][T24510] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  509.281692][T24505] ima: policy update failed
[  509.361489][   T30] audit: type=1802 audit(4294967554.280:41): pid=24505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.8246" res=0 errno=0
[  509.660470][   T30] audit: type=1800 audit(4294967554.592:42): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8254" name="discovery_nqn" dev="configfs" ino=63671 res=0 errno=0
[  510.084498][ T6157] Bluetooth: hci0: command 0x0406 tx timeout
[  510.612768][T24559] HSR: entered promiscuous mode
[  510.800093][ T6157] Bluetooth: hci1: command 0x0406 tx timeout
[  510.875753][ T6157] Bluetooth: hci3: command 0x0c1a tx timeout
[  510.881815][ T6169] Bluetooth: hci2: command 0x0406 tx timeout
[  514.837726][T24678] ima: policy update failed
[  514.842383][   T30] audit: type=1802 audit(4294967559.799:43): pid=24678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.8313" res=0 errno=0
[  515.136834][T24697] netlink: 'syz.6.8318': attribute type 2 has an invalid length.
[  516.733624][T24752] svc: failed to register nfsdv3 RPC service (errno 111).
[  516.770041][T24752] svc: failed to register nfsaclv3 RPC service (errno 111).
[  518.177130][T24811] QAT: Device 0 not found
[  520.672043][T24894] netlink: 'syz.6.8390': attribute type 1 has an invalid length.
[  522.314973][T24947] Zero length message leads to an empty skb
[  527.640052][T25115] openvswitch: netlink: Key 2 has unexpected len 0 expected 4
[  527.938513][T25123] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  528.551150][T25142] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  529.902580][T25183] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  529.922253][T25138] kexec: Could not allocate control_code_buffer
[  530.058045][T25190] netlink: 'syz.3.8506': attribute type 1 has an invalid length.
[  530.523553][T25164] NFSD: Unable to initialize client recovery tracking! (-110)
[  530.552387][T25164] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  530.578347][T25164] NFSD: starting 90-second grace period (net f00003c1)
[  531.118331][T25220] netlink: set zone limit has 8 unknown bytes
[  531.822044][T25252] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint).
[  533.037009][T25291] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  534.119163][T25327] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  537.524081][T25448] svc: failed to register nfsdv3 RPC service (errno 111).
[  537.580979][T25448] svc: failed to register nfsaclv3 RPC service (errno 111).
[  539.321481][T25512] netlink: 'syz.1.8625': attribute type 1 has an invalid length.
[  540.531460][T25556] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  541.290085][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8653'.
[  542.019846][T25552] kexec: Could not allocate control_code_buffer
[  544.184976][T25680] program syz.3.8695 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  545.714932][T25730] netlink: 'syz.3.8715': attribute type 1 has an invalid length.
[  546.129955][T25743] sctp: [Deprecated]: syz.6.8722 (pid 25743) Use of int in max_burst socket option deprecated.
[  546.129955][T25743] Use struct sctp_assoc_value instead
[  547.843770][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8745'.
[  548.664213][T25826] openvswitch: netlink: Flow key attr not present in new flow.
[  550.733846][T25881] netlink: 'syz.4.8778': attribute type 2 has an invalid length.
[  551.430092][   T30] audit: type=1800 audit(4294967596.579:44): pid=25910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8791" name="features" dev="configfs" ino=67697 res=0 errno=0
[  551.454862][T25907] netlink: Unknown conntrack attr (type=146, max=9)
[  553.820366][T25984] netlink: del zone limit has 4 unknown bytes
[  555.082389][T26027] netlink: 'syz.1.8838': attribute type 1 has an invalid length.
[  555.270516][T26032] netlink: 29 bytes leftover after parsing attributes in process `syz.4.8840'.
[  556.064620][T26054] nbd: must specify at least one socket
[  559.946617][T26178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  559.997164][T26178] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  563.859840][T26295] netlink: 'syz.1.8946': attribute type 1 has an invalid length.
[  563.899968][T26295] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8946'.
[  564.093463][T26301] openvswitch: netlink: Flow actions attr not present in new flow.
[  565.805668][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  565.819716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  566.790186][T26381] nvme_fabrics: missing parameter 'transport=%s'
[  566.831812][T26381] nvme_fabrics: missing parameter 'nqn=%s'
[  566.854272][T26390] sg_read: process 1187 (syz.6.8983) changed security contexts after opening file descriptor, this is not allowed.
[  566.889892][T26385] nvme_fabrics: unknown parameter or missing value 'nbdV�' in ctrl creation request
[  567.047097][   T30] audit: type=1800 audit(4294967612.270:45): pid=26388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8984" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0
[  568.261251][T26430] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  568.460333][T26434] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45
[  569.784334][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9014'.
[  570.979074][T26543] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  572.141953][T26577] openvswitch: netlink: Duplicate key (type 15).
[  572.243640][T26580] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  573.132120][T26601] openvswitch: netlink: Duplicate or invalid key (type 0).
[  573.631287][T26613] netlink: 'syz.6.9060': attribute type 10 has an invalid length.
[  574.355240][T26640] netlink: 342 bytes leftover after parsing attributes in process `syz.6.9071'.
[  575.205078][T26667] sctp: [Deprecated]: syz.1.9082 (pid 26667) Use of int in max_burst socket option deprecated.
[  575.205078][T26667] Use struct sctp_assoc_value instead
[  575.692531][T26685] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  575.942463][T26696] dyndbg: expected <4096 bytes into control
[  576.556609][T26717] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46
[  576.734432][T26720] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47
[  577.428167][T26770] MTRR 1 not used
[  578.518847][T26809] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49
[  578.808425][T26818] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50
[  580.065339][T26894] vivid-007: =================  START STATUS  =================
[  580.092588][T26894] vivid-007: Generate PTS: true
[  580.115119][T26894] vivid-007: Generate SCR: true
[  580.139488][T26894] tpg source WxH: 640x360 (Y'CbCr)
[  580.159964][T26894] tpg field: 1
[  580.173446][T26894] tpg crop: (0,0)/640x360
[  580.191215][T26894] tpg compose: (0,0)/640x360
[  580.211513][T26894] tpg colorspace: 8
[  580.228055][T26894] tpg transfer function: 0/2
[  580.262982][T26894] tpg Y'CbCr encoding: 0/1
[  580.278451][T26894] tpg quantization: 0/2
[  580.303009][T26894] tpg RGB range: 0/2
[  580.326001][T26894] vivid-007: ==================  END STATUS  ==================
[  581.012042][T26922] vivid-003: =================  START STATUS  =================
[  581.049778][T26922] vivid-003: Radio HW Seek Mode: Bounded
[  581.108143][T26922] vivid-003: Radio Programmable HW Seek: false
[  581.140799][T26922] vivid-003: RDS Rx I/O Mode: Block I/O
[  581.146394][T26922] vivid-003: Generate RBDS Instead of RDS: false
[  581.212877][T26922] vivid-003: RDS Reception: true
[  581.260308][T26922] vivid-003: RDS Program Type: 0 inactive
[  581.304018][T26922] vivid-003: RDS PS Name:  inactive
[  581.322331][T26922] vivid-003: RDS Radio Text:  inactive
[  581.373387][T26922] vivid-003: RDS Traffic Announcement: false inactive
[  581.393687][T26922] vivid-003: RDS Traffic Program: false inactive
[  581.416481][T26933] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  581.441348][T26922] vivid-003: RDS Music: false inactive
[  581.475256][T26922] vivid-003: ==================  END STATUS  ==================
[  582.322350][T26952] �: entered promiscuous mode
[  585.370031][T27056] ksmbd: Unknown IPC event: 14, ignore.
[  585.786921][T27071] aoe: copy from user failed
[  585.791930][T27071] aoe: could not set interface list: too many interfaces
[  585.859146][T27074] netlink: 'syz.1.9235': attribute type 3 has an invalid length.
[  586.774181][T27100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9246'.
[  587.241874][T27117] __vm_enough_memory: pid: 27117, comm: syz.3.9253, bytes: 4503599627366400 not enough memory for the allocation
[  587.432383][T27121] netlink: 'syz.4.9256': attribute type 2 has an invalid length.
[  587.778546][T27135] syz_tun: tun_chr_ioctl cmd 1074025684
[  588.554842][T27158] openvswitch: netlink: Missing valid actions attribute.
[  589.628711][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9286'.
[  590.863969][T27230] sd 0:0:1:0: PR command failed: 1026
[  590.889749][T27230] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  590.934537][T27230] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  591.886549][T27260] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  592.897967][   T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.044382][   T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.162294][   T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.315435][   T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.889633][   T70] bridge_slave_1: left allmulticast mode
[  593.915380][   T70] bridge_slave_1: left promiscuous mode
[  593.954160][   T70] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.016485][   T70] bridge_slave_0: left allmulticast mode
[  594.022152][   T70] bridge_slave_0: left promiscuous mode
[  594.087416][   T70] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.485524][T27333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  594.495659][T27333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  594.504395][T27333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  594.519767][T27333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  594.532282][T27333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  595.233172][   T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.293386][   T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.325026][   T70] bond0 (unregistering): Released all slaves
[  596.241137][T27409] netlink: set zone limit has 8 unknown bytes
[  596.599855][T27333] Bluetooth: hci3: command tx timeout
[  596.636331][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9353'.
[  596.777357][T27330] chnl_net:caif_netlink_parms(): no params data found
[  597.288575][   T70] hsr_slave_0: left promiscuous mode
[  597.311946][   T70] hsr_slave_1: left promiscuous mode
[  597.325259][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.356880][   T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.388185][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.418019][   T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.484145][   T70] veth1_macvtap: left promiscuous mode
[  597.499526][   T70] veth0_macvtap: left promiscuous mode
[  597.514063][   T70] veth1_vlan: left promiscuous mode
[  597.527720][   T70] veth0_vlan: left promiscuous mode
[  598.021005][   T70] team0 (unregistering): Port device team_slave_1 removed
[  598.065796][   T70] team0 (unregistering): Port device team_slave_0 removed
[  598.663251][T27333] Bluetooth: hci3: command tx timeout
[  598.838012][T27330] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.897467][T27330] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.957675][T27330] bridge_slave_0: entered allmulticast mode
[  599.004614][T27330] bridge_slave_0: entered promiscuous mode
[  599.045628][T27330] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.096976][T27330] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.104132][T27330] bridge_slave_1: entered allmulticast mode
[  599.186664][T27330] bridge_slave_1: entered promiscuous mode
[  599.491527][T27330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.599015][T27330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  599.836726][T27650] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  599.889894][T27330] team0: Port device team_slave_0 added
[  599.959923][T27330] team0: Port device team_slave_1 added
[  600.176229][T27330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.216561][T27330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.349143][T27330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.450127][T27330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.486346][T27330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.613676][T27330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.728436][T27333] Bluetooth: hci3: command tx timeout
[  600.922783][T27330] hsr_slave_0: entered promiscuous mode
[  600.950021][T27330] hsr_slave_1: entered promiscuous mode
[  600.987623][T27330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.038187][T27330] Cannot create hsr debugfs directory
[  601.213961][T27776] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  601.494068][T27795] netlink: 'syz.3.9388': attribute type 2 has an invalid length.
[  601.649545][T27820] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  602.797875][T27333] Bluetooth: hci3: command tx timeout
[  602.969929][T27330] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  603.023211][T27330] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  603.074024][T27330] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  603.155133][T27330] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  603.632220][T27330] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.764495][T27330] 8021q: adding VLAN 0 to HW filter on device team0
[  603.897574][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.904707][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.980876][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.988009][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.373483][T27930] netlink: 'syz.4.9415': attribute type 2 has an invalid length.
[  604.930208][T27330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.911334][T27980] program syz.4.9429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  606.192324][T27330] veth0_vlan: entered promiscuous mode
[  606.234001][T27330] veth1_vlan: entered promiscuous mode
[  606.379787][T27992] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  606.391743][T27330] veth0_macvtap: entered promiscuous mode
[  606.477251][T27330] veth1_macvtap: entered promiscuous mode
[  606.566929][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.626776][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.679953][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.711857][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.751521][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.798753][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.854133][T27330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.925132][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.005386][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.057673][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.155016][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.191811][T27330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.255637][T27330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.321030][T27330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.410903][T27330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.460989][T27330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.500630][T27330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.545306][T27330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.932218][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.940054][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.113402][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.157455][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.940203][T28161] netlink: 'syz.6.9489': attribute type 1 has an invalid length.
[  612.290277][T28172] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  614.072197][T28231] CIFS: VFS: Invalid SecurityFlags: 
[  614.896295][T28257] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  615.697915][T28285] program syz.4.9539 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  616.631743][T28325] ucma_write: process 3908 (syz.4.9554) changed security contexts after opening file descriptor, this is not allowed.
[  616.684298][T28327] netlink: 'syz.1.9555': attribute type 1 has an invalid length.
[  617.724543][T28355] random: crng reseeded on system resumption
[  618.862237][T28388] vivid-003: =================  START STATUS  =================
[  618.902015][T28388] vivid-003: Radio HW Seek Mode: Bounded
[  618.947417][T28388] vivid-003: Radio Programmable HW Seek: false
[  618.969031][T28388] vivid-003: RDS Rx I/O Mode: Block I/O
[  618.992219][T28388] vivid-003: Generate RBDS Instead of RDS: false
[  619.026196][T28388] vivid-003: RDS Reception: true
[  619.061337][T28388] vivid-003: RDS Program Type: 0 inactive
[  619.088294][T28388] vivid-003: RDS PS Name:  inactive
[  619.117836][T28388] vivid-003: RDS Radio Text:  inactive
[  619.156828][T28388] vivid-003: RDS Traffic Announcement: false inactive
[  619.202553][T28388] vivid-003: RDS Traffic Program: false inactive
[  619.238652][T28388] vivid-003: RDS Music: false inactive
[  619.268914][T28388] vivid-003: ==================  END STATUS  ==================
[  619.636723][   T30] audit: type=1800 audit(4294967665.144:46): pid=28409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9590" name="lu_gp_id" dev="configfs" ino=74318 res=0 errno=0
[  619.709770][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9592'.
[  619.805835][T28414] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  620.490928][T28442] block nbd0: not configured, cannot reconfigure
[  622.150599][T28489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9626'.
[  622.762522][T28508] ima: policy update failed
[  622.779679][   T30] audit: type=1802 audit(4294967668.300:47): pid=28508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.9636" res=0 errno=0
[  623.269641][T28527] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  623.462784][T28533] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  623.497026][T28533] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  624.182453][T28555] openvswitch: netlink: Multiple metadata blocks provided
[  624.277187][T28558] netlink: 'syz.1.9659': attribute type 1 has an invalid length.
[  624.995356][T28581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9669'.
[  626.131342][T28622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9688'.
[  626.944770][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  626.951439][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  627.684122][T28671] netlink: zone id is out of range
[  627.708670][T28671] netlink: get zone limit has 4 unknown bytes
[  628.826282][T28707] svc: failed to register nfsdv3 RPC service (errno 111).
[  628.872485][T28707] svc: failed to register nfsaclv3 RPC service (errno 111).
[  628.915146][T28720] netlink: 'syz.4.9729': attribute type 22 has an invalid length.
[  629.040248][T28724] perf: Dynamic interrupt throttling disabled, can hang your system!
[  629.853557][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9742'.
[  630.633149][T28773] netlink: 'syz.1.9750': attribute type 11 has an invalid length.
[  630.683072][T28773] netlink: 'syz.1.9750': attribute type 11 has an invalid length.
[  630.710699][T28773] netlink: 'syz.1.9750': attribute type 11 has an invalid length.
[  631.490945][T28799] openvswitch: netlink: IP tunnel dst address not specified
[  633.087813][T28844] Console: switching to colour VGA+ 80x25
[  634.430697][T28885] delete_channel: no stack
[  634.828978][T28899] netlink: 'syz.3.9808': attribute type 11 has an invalid length.
[  634.871330][T28899] netlink: 'syz.3.9808': attribute type 11 has an invalid length.
[  634.910460][T28899] netlink: 'syz.3.9808': attribute type 11 has an invalid length.
[  635.105141][T28911] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  635.404670][T28918] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  635.497681][T28922] ubi0: attaching mtd0
[  635.530748][T28922] ubi0: scanning is finished
[  635.535385][T28922] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  635.749281][T28922] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  636.062284][T28939] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  638.090417][T29008] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  640.780723][T29106] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8
[  641.440489][T29130] netlink: 'syz.1.9902': attribute type 11 has an invalid length.
[  641.488620][T29130] netlink: 'syz.1.9902': attribute type 11 has an invalid length.
[  641.526228][T29130] netlink: 'syz.1.9902': attribute type 11 has an invalid length.
[  641.661577][T29140] netlink: zone id is out of range
[  641.705526][T29140] netlink: zone id is out of range
[  641.710750][T29140] netlink: zone id is out of range
[  641.764606][T29140] netlink: zone id is out of range
[  641.801066][T29140] netlink: zone id is out of range
[  641.816541][T29140] netlink: zone id is out of range
[  641.848650][T29140] netlink: zone id is out of range
[  641.877084][T29140] netlink: zone id is out of range
[  641.903413][T29140] netlink: zone id is out of range
[  642.643073][T29170] nbd: must specify a device to reconfigure
[  644.568111][T29235] MTRR 1 not used
[  645.321074][T29259] zram: Removed device: zram0
[  648.581588][T29349] net_ratelimit: 20 callbacks suppressed
[  648.581605][T29349] openvswitch: netlink: IP tunnel dst address not specified
[  650.203916][T29392] netlink: 'syz.4.10002': attribute type 11 has an invalid length.
[  650.287980][T29392] netlink: 'syz.4.10002': attribute type 11 has an invalid length.
[  650.362208][T29392] netlink: 'syz.4.10002': attribute type 11 has an invalid length.
[  650.435007][   T30] audit: type=1326 audit(4294967307.725:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29401 comm="syz.3.10009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ff1d8e969 code=0x0
[  651.045521][T29421] program syz.6.10015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  651.801073][T29445] openvswitch: netlink: Flow key attribute not present in set flow.
[  652.092936][T29457] openvswitch: netlink: nsh attr 68 is out of range max 3
[  652.327414][T29461] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  652.615544][T29469] delete_channel: no stack
[  653.246286][T29491] netlink: 206 bytes leftover after parsing attributes in process `syz.6.10043'.
[  653.363385][T29494] Invalid ELF header magic: != ELF
[  653.966869][T29510] netlink: Conntrack attr has 16 unknown bytes
[  656.139868][T29576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.372379][T29626] netlink: 'syz.1.10097': attribute type 2 has an invalid length.
[  657.809036][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10103'.
[  658.069851][T29647] perf: Dynamic interrupt throttling disabled, can hang your system!
[  660.394520][T29732] smc: net device syz_tun applied user defined pnetid ETHTOOL
[  661.568136][T29765] netlink: 'syz.1.10155': attribute type 1 has an invalid length.
[  663.216195][T29825] nbd: illegal input index 2147483647
[  663.751029][T29843] openvswitch: netlink: Key type 29 is not supported
[  688.041821][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  688.048310][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  720.678151][T27333] Bluetooth: hci3: command 0x0406 tx timeout
[  723.672351][ T5199] udevd[5199]: worker [29303] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time
[  749.162701][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  749.174123][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  810.285328][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  810.294062][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  816.009099][   T31] INFO: task jbd2/sda1-8:5161 blocked for more than 143 seconds.
[  816.016944][   T31]       Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0
[  816.045528][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.056539][   T31] task:jbd2/sda1-8     state:D stack:25224 pid:5161  tgid:5161  ppid:2      task_flags:0x240040 flags:0x00004000
[  816.071937][   T31] Call Trace:
[  816.075315][   T31]  <TASK>
[  816.078252][   T31]  __schedule+0x116f/0x5de0
[  816.083108][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  816.088071][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  816.095451][   T31]  ? __pfx___schedule+0x10/0x10
[  816.100605][   T31]  ? find_held_lock+0x2b/0x80
[  816.105290][   T31]  ? schedule+0x2d7/0x3a0
[  816.111959][   T31]  schedule+0xe7/0x3a0
[  816.116058][   T31]  io_schedule+0xbf/0x130
[  816.121474][   T31]  bit_wait_io+0x15/0xe0
[  816.125738][   T31]  __wait_on_bit+0x62/0x180
[  816.133765][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  816.140120][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  816.146183][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  816.157361][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  816.163131][   T31]  ? __pfx___might_resched+0x10/0x10
[  816.170732][   T31]  __wait_on_buffer+0x64/0x70
[  816.175429][   T31]  jbd2_journal_commit_transaction+0x382e/0x6830
[  816.183171][   T31]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  816.191956][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  816.197774][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[  816.203666][   T31]  ? __pfx_debug_object_deactivate+0x10/0x10
[  816.211825][   T31]  ? find_held_lock+0x2b/0x80
[  816.216527][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  816.223240][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.231282][   T31]  kjournald2+0x1f4/0x760
[  816.235645][   T31]  ? __pfx_kjournald2+0x10/0x10
[  816.240765][   T31]  ? find_held_lock+0x2b/0x80
[  816.246133][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  816.255150][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  816.263519][   T31]  ? __kthread_parkme+0x19e/0x250
[  816.270715][   T31]  ? __pfx_kjournald2+0x10/0x10
[  816.275586][   T31]  kthread+0x3c2/0x780
[  816.279995][   T31]  ? __pfx_kthread+0x10/0x10
[  816.284605][   T31]  ? __pfx_kthread+0x10/0x10
[  816.292406][   T31]  ? __pfx_kthread+0x10/0x10
[  816.297023][   T31]  ? __pfx_kthread+0x10/0x10
[  816.301843][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.306615][   T31]  ? __pfx_kthread+0x10/0x10
[  816.313576][   T31]  ret_from_fork+0x45/0x80
[  816.318170][   T31]  ? __pfx_kthread+0x10/0x10
[  816.322794][   T31]  ret_from_fork_asm+0x1a/0x30
[  816.332346][   T31]  </TASK>
[  816.335506][   T31] INFO: task syz-executor:5813 blocked for more than 143 seconds.
[  816.343699][   T31]       Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0
[  816.355488][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.364998][   T31] task:syz-executor    state:D stack:21368 pid:5813  tgid:5813  ppid:5811   task_flags:0x440100 flags:0x00004002
[  816.381769][   T31] Call Trace:
[  816.385053][   T31]  <TASK>
[  816.388237][   T31]  __schedule+0x116f/0x5de0
[  816.392755][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  816.400915][   T31]  ? __pfx___schedule+0x10/0x10
[  816.405785][   T31]  ? find_held_lock+0x2b/0x80
[  816.410820][   T31]  ? schedule+0x2d7/0x3a0
[  816.415179][   T31]  schedule+0xe7/0x3a0
[  816.421818][   T31]  io_schedule+0xbf/0x130
[  816.427099][   T31]  bit_wait_io+0x15/0xe0
[  816.431371][   T31]  __wait_on_bit+0x62/0x180
[  816.439298][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  816.444256][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  816.450585][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  816.458775][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  816.464251][   T31]  do_get_write_access+0x93d/0x12a0
[  816.470409][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  816.478687][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  816.484871][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  816.499163][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  816.504649][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  816.512682][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  816.520812][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.525587][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  816.532078][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  816.540584][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  816.546414][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  816.552902][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  816.559959][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  816.565345][   T31]  ext4_dirty_inode+0xd9/0x130
[  816.570411][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.575183][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  816.582955][   T31]  generic_update_time+0xcf/0xf0
[  816.588078][   T31]  file_update_time+0x17d/0x1c0
[  816.593026][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  816.602151][   T31]  ? anon_pipe_read+0xc85/0x1210
[  816.609053][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  816.614531][   T31]  ? vm_normal_page+0x13b/0x2b0
[  816.622743][   T31]  ? find_held_lock+0x2b/0x80
[  816.627637][   T31]  ? find_held_lock+0x2b/0x80
[  816.632980][   T31]  do_page_mkwrite+0x171/0x380
[  816.641300][   T31]  do_wp_page+0xb9e/0x58e0
[  816.647023][   T31]  ? __pfx_do_wp_page+0x10/0x10
[  816.652477][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  816.659811][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  816.665206][   T31]  ? ___pte_offset_map+0x1bc/0x540
[  816.670638][   T31]  __handle_mm_fault+0x1ada/0x2a40
[  816.678175][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  816.683643][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  816.689832][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  816.695067][   T31]  handle_mm_fault+0x3fe/0xad0
[  816.702120][   T31]  do_user_addr_fault+0x60c/0x1370
[  816.709070][   T31]  exc_page_fault+0x5c/0xc0
[  816.713595][   T31]  asm_exc_page_fault+0x26/0x30
[  816.722811][   T31] RIP: 0033:0x7fcf1e4689c5
[  816.729384][   T31] RSP: 002b:00007ffe93113f00 EFLAGS: 00010202
[  816.739660][   T31] RAX: 00007fcf1b5fa818 RBX: 00007ffe93114000 RCX: 0000000000000000
[  816.747840][   T31] RDX: 00007fcf1b5fa814 RSI: 0000000000000008 RDI: 00007ffe93114000
[  816.758746][   T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  816.767038][   T31] R10: 00007ffe93113fe0 R11: 0000000000000000 R12: 0000000000000000
[  816.777488][   T31] R13: 00000000000057e8 R14: ffffffffffffa818 R15: 00000000000057e8
[  816.785697][   T31]  </TASK>
[  816.788784][   T31] INFO: task syz.1.10209:29907 blocked for more than 144 seconds.
[  816.799825][   T31]       Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0
[  816.814014][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.827886][   T31] task:syz.1.10209     state:D stack:28344 pid:29907 tgid:29907 ppid:6155   task_flags:0x440040 flags:0x00000004
[  816.843765][   T31] Call Trace:
[  816.848959][   T31]  <TASK>
[  816.851902][   T31]  __schedule+0x116f/0x5de0
[  816.857928][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  816.862896][   T31]  ? __pfx___schedule+0x10/0x10
[  816.869528][   T31]  ? find_held_lock+0x2b/0x80
[  816.874213][   T31]  ? schedule+0x2d7/0x3a0
[  816.879337][   T31]  schedule+0xe7/0x3a0
[  816.883419][   T31]  io_schedule+0xbf/0x130
[  816.891071][   T31]  bit_wait_io+0x15/0xe0
[  816.896118][   T31]  __wait_on_bit+0x62/0x180
[  816.900663][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  816.908318][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  816.913713][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  816.920500][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  816.929047][   T31]  do_get_write_access+0x93d/0x12a0
[  816.937713][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  816.948002][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  816.954850][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  816.961114][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  816.969676][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  816.975820][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  816.981824][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.988396][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  816.994738][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  816.999953][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  817.007571][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  817.013240][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  817.019577][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  817.026704][   T31]  ext4_dirty_inode+0xd9/0x130
[  817.031487][   T31]  ? rcu_is_watching+0x12/0xc0
[  817.038749][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  817.049668][   T31]  generic_update_time+0xcf/0xf0
[  817.057139][   T31]  file_update_time+0x17d/0x1c0
[  817.062713][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  817.069642][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  817.075894][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  817.081377][   T31]  ? pte_alloc_one+0x2b1/0x380
[  817.088123][   T31]  do_page_mkwrite+0x171/0x380
[  817.092913][   T31]  do_pte_missing+0x29c/0x3fb0
[  817.098512][   T31]  __handle_mm_fault+0x103d/0x2a40
[  817.105625][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  817.111107][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  817.117228][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  817.122467][   T31]  handle_mm_fault+0x3fe/0xad0
[  817.129781][   T31]  do_user_addr_fault+0x60c/0x1370
[  817.135647][   T31]  exc_page_fault+0x5c/0xc0
[  817.140860][   T31]  asm_exc_page_fault+0x26/0x30
[  817.149612][   T31] RIP: 0033:0x7ffac6a6eada
[  817.156917][   T31] RSP: 002b:00007ffcd5716570 EFLAGS: 00010202
[  817.166490][   T31] RAX: 0000001b2c720000 RBX: 00007ffac78e5720 RCX: 0000001b2c71fff8
[  817.175412][   T31] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007ffac78e5700
[  817.185132][   T31] RBP: ffffffff815df230 R08: 00007ffac6db6038 R09: 00007ffac6da2000
[  817.193803][   T31] R10: 00007ffac61ff008 R11: 0000000000000000 R12: 0000000000000000
[  817.201777][   T31] R13: 0000000000000001 R14: ffffffff815dfb5a R15: 0000000000000001
[  817.211507][   T31]  ? __x64_sys_mmap+0x1a/0x190
[  817.217051][   T31]  ? ia32_setup_rt_frame+0x550/0xb30
[  817.222354][   T31]  </TASK>
[  817.227448][   T31] INFO: task syz.6.10210:29910 blocked for more than 144 seconds.
[  817.237520][   T31]       Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0
[  817.250220][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  817.260538][   T31] task:syz.6.10210     state:D stack:28632 pid:29910 tgid:29910 ppid:27330  task_flags:0x440040 flags:0x00000004
[  817.278232][   T31] Call Trace:
[  817.281523][   T31]  <TASK>
[  817.285319][   T31]  __schedule+0x116f/0x5de0
[  817.289850][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  817.297299][   T31]  ? __pfx___schedule+0x10/0x10
[  817.302345][   T31]  ? find_held_lock+0x2b/0x80
[  817.307062][   T31]  ? schedule+0x2d7/0x3a0
[  817.311410][   T31]  schedule+0xe7/0x3a0
[  817.318156][   T31]  io_schedule+0xbf/0x130
[  817.322678][   T31]  bit_wait_io+0x15/0xe0
[  817.326942][   T31]  __wait_on_bit+0x62/0x180
[  817.331459][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  817.338863][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  817.345848][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  817.355100][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  817.360580][   T31]  do_get_write_access+0x93d/0x12a0
[  817.369095][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  817.377592][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  817.386267][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  817.394300][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  817.399876][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  817.405522][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  817.413718][   T31]  ? rcu_is_watching+0x12/0xc0
[  817.418514][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  817.424375][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  817.429581][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  817.437943][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  817.443871][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  817.449354][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  817.459003][   T31]  ext4_dirty_inode+0xd9/0x130
[  817.463963][   T31]  ? rcu_is_watching+0x12/0xc0
[  817.469413][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  817.478032][   T31]  generic_update_time+0xcf/0xf0
[  817.483157][   T31]  file_update_time+0x17d/0x1c0
[  817.488039][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  817.498025][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  817.503960][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  817.509436][   T31]  ? pte_alloc_one+0x2b1/0x380
[  817.516821][   T31]  do_page_mkwrite+0x171/0x380
[  817.526669][   T31]  do_pte_missing+0x29c/0x3fb0
[  817.533641][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  817.538867][   T31]  ? __pmd_alloc+0x3c2/0x870
[  817.543734][   T31]  __handle_mm_fault+0x103d/0x2a40
[  817.549613][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  817.558703][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  817.564813][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  817.573004][   T31]  handle_mm_fault+0x3fe/0xad0
[  817.577783][   T31]  do_user_addr_fault+0x60c/0x1370
[  817.583933][   T31]  exc_page_fault+0x5c/0xc0
[  817.588449][   T31]  asm_exc_page_fault+0x26/0x30
[  817.595533][   T31] RIP: 0033:0x7faddac6547b
[  817.599960][   T31] RSP: 002b:00007ffc30e9b1f0 EFLAGS: 00010246
[  817.609069][   T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  817.620051][   T31] RDX: 0000001b2d820000 RSI: 0000000000400000 RDI: 00007faddae98d50
[  817.628228][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  817.638707][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  817.646891][   T31] R13: 00000000000927c0 R14: 00000000000a318f R15: 00007ffc30e9b4a0
[  817.658908][   T31]  </TASK>
[  817.662121][   T31] 
[  817.662121][   T31] Showing all locks held in the system:
[  817.673616][   T31] 1 lock held by khungtaskd/31:
[  817.678496][   T31]  #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  817.688825][   T31] 3 locks held by syz-executor/5813:
[  817.697488][   T31]  #0: ffff888031d12a88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  817.707076][   T31]  #1: ffff88807b268518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  817.722569][   T31]  #2: ffff88807b26c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  817.733001][   T31] 2 locks held by getty/26537:
[  817.737770][   T31]  #0: ffff888034bb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  817.749559][   T31]  #1: ffffc9000c70b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  817.764737][   T31] 3 locks held by syz.1.10209/29907:
[  817.770264][   T31]  #0: ffff888012b161c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  817.783117][   T31]  #1: ffff88807b268518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  817.792862][   T31]  #2: ffff88807b26c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  817.805655][   T31] 3 locks held by syz.6.10210/29910:
[  817.811149][   T31]  #0: ffff88805da2d088 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  817.824580][   T31]  #1: ffff88807b268518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  817.835373][   T31]  #2: ffff88807b26c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  817.849298][   T31] 
[  817.851628][   T31] =============================================
[  817.851628][   T31] 
[  817.863739][   T31] NMI backtrace for cpu 0
[  817.863758][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) 
[  817.863789][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[  817.863797][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  817.863808][   T31] Call Trace:
[  817.863814][   T31]  <TASK>
[  817.863820][   T31]  dump_stack_lvl+0x116/0x1f0
[  817.863849][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  817.863868][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  817.863898][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  817.863919][   T31]  watchdog+0xf70/0x12c0
[  817.863947][   T31]  ? __pfx_watchdog+0x10/0x10
[  817.863969][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  817.863994][   T31]  ? __kthread_parkme+0x19e/0x250
[  817.864017][   T31]  ? __pfx_watchdog+0x10/0x10
[  817.864040][   T31]  kthread+0x3c2/0x780
[  817.864066][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864090][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864115][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864139][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864163][   T31]  ? rcu_is_watching+0x12/0xc0
[  817.864180][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864206][   T31]  ret_from_fork+0x45/0x80
[  817.864234][   T31]  ? __pfx_kthread+0x10/0x10
[  817.864259][   T31]  ret_from_fork_asm+0x1a/0x30
[  817.864296][   T31]  </TASK>
[  817.864309][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  818.004467][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) 
[  818.017850][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[  818.023830][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  818.033892][   T31] Call Trace:
[  818.037190][   T31]  <TASK>
[  818.040133][   T31]  dump_stack_lvl+0x3d/0x1f0
[  818.044733][   T31]  panic+0x71c/0x800
[  818.048637][   T31]  ? __pfx_panic+0x10/0x10
[  818.053061][   T31]  ? ret_from_fork_asm+0x1a/0x30
[  818.058017][   T31]  ? nmi_backtrace_stall_check+0x6e/0x540
[  818.063747][   T31]  ? irq_work_queue+0xce/0x100
[  818.068524][   T31]  ? watchdog+0xdda/0x12c0
[  818.072948][   T31]  ? watchdog+0xdcd/0x12c0
[  818.077381][   T31]  watchdog+0xdeb/0x12c0
[  818.081639][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.086372][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  818.091585][   T31]  ? __kthread_parkme+0x19e/0x250
[  818.096617][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.101311][   T31]  kthread+0x3c2/0x780
[  818.105401][   T31]  ? __pfx_kthread+0x10/0x10
[  818.110001][   T31]  ? __pfx_kthread+0x10/0x10
[  818.114602][   T31]  ? __pfx_kthread+0x10/0x10
[  818.119198][   T31]  ? __pfx_kthread+0x10/0x10
[  818.123791][   T31]  ? rcu_is_watching+0x12/0xc0
[  818.128555][   T31]  ? __pfx_kthread+0x10/0x10
[  818.133245][   T31]  ret_from_fork+0x45/0x80
[  818.137681][   T31]  ? __pfx_kthread+0x10/0x10
[  818.142282][   T31]  ret_from_fork_asm+0x1a/0x30
[  818.147078][   T31]  </TASK>
[  818.150190][   T31] Kernel Offset: disabled
[  818.154511][   T31] Rebooting in 86400 seconds..