last executing test programs: 2.335450253s ago: executing program 0 (id=9319): close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0x0, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0x0) 2.061169443s ago: executing program 0 (id=9321): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20000000) 1.699792079s ago: executing program 0 (id=9324): mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) getsockopt$auto(r0, 0x200000000001, 0x10, 0x0, 0x0) 1.667406967s ago: executing program 3 (id=9325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x4}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) 1.541206635s ago: executing program 2 (id=9326): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.451833741s ago: executing program 1 (id=9327): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mknod$auto(&(0x7f0000000080)='./cgroup\x00', 0x83c1, 0x83f) 1.370937523s ago: executing program 0 (id=9328): mmap$auto(0x10000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x18000, 0x200007, 0x8) 1.233983179s ago: executing program 2 (id=9329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000780)={'tunl0\x00'}) write$auto(r0, &(0x7f0000000000)='tunl0\x00', 0x9) 1.176310833s ago: executing program 3 (id=9330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 1.143757851s ago: executing program 1 (id=9331): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x29, 0x5, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)=@test={r0, 0x5, 0x200000, 0x0, 0x90e5, 0x3, 0x80, 0x0, 0xfff, 0xc0, 0x8, 0x8, 0xfffffffa, 0x9}, 0x5) 971.071857ms ago: executing program 2 (id=9332): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x17, &(0x7f00000000c0), 0x7) 911.542672ms ago: executing program 1 (id=9333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) 866.328236ms ago: executing program 3 (id=9334): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) 691.259081ms ago: executing program 2 (id=9335): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) close_range$auto(0x2, 0xa, 0x0) 628.493128ms ago: executing program 1 (id=9336): socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 604.829848ms ago: executing program 0 (id=9337): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 568.930433ms ago: executing program 3 (id=9338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 392.314529ms ago: executing program 2 (id=9339): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) 346.168406ms ago: executing program 1 (id=9340): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2) 279.023363ms ago: executing program 3 (id=9341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'N,]\'\x00'}]}, 0x20}}, 0x20000040) 107.25228ms ago: executing program 2 (id=9342): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x6, 0x0, &(0x7f0000000840)="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", 0x2) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 106.680508ms ago: executing program 0 (id=9350): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="61e35d7d", 0x4}, 0x1) close_range$auto(0x2, 0x8000, 0x0) 71.321355ms ago: executing program 1 (id=9343): socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 0s ago: executing program 3 (id=9344): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x4b3d, 0xffffffffffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 88.417597][ T5816] cgroup: Unknown subsys name 'net' [ 88.562862][ T5816] cgroup: Unknown subsys name 'cpuset' [ 88.572259][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.442226][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.374582][ T5921] mmap: syz.2.84 (5921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.998379][ T6172] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.044742][ T6185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.059193][ T6185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.076081][ T6185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.086520][ T6185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.094637][ T6185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.352606][ T10] cfg80211: failed to load regulatory.db [ 97.767092][ T6171] chnl_net:caif_netlink_parms(): no params data found [ 98.149103][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.156440][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.165061][ T6171] bridge_slave_0: entered allmulticast mode [ 98.173305][ T6171] bridge_slave_0: entered promiscuous mode [ 98.188652][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.195853][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.203230][ T6171] bridge_slave_1: entered allmulticast mode [ 98.212648][ T6171] bridge_slave_1: entered promiscuous mode [ 98.306143][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.372376][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.623124][ T6171] team0: Port device team_slave_0 added [ 98.638975][ T6171] team0: Port device team_slave_1 added [ 98.716697][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.724382][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.752225][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.768848][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.775865][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.804067][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.953459][ T6171] hsr_slave_0: entered promiscuous mode [ 98.965532][ T6171] hsr_slave_1: entered promiscuous mode [ 99.227376][ T6171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.242872][ T6171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.261800][ T6171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.273199][ T6171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.374707][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.400699][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.416372][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.423734][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.441543][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.448754][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.661814][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.714299][ T6171] veth0_vlan: entered promiscuous mode [ 99.726668][ T6171] veth1_vlan: entered promiscuous mode [ 99.762185][ T6171] veth0_macvtap: entered promiscuous mode [ 99.772469][ T6171] veth1_macvtap: entered promiscuous mode [ 99.797711][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.819067][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.834868][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.851087][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.869174][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.877972][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.718001][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.841959][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.856093][ T6231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.866416][ T6231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.875956][ T6231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.887345][ T6231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.895788][ T6231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.904497][ T6231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.912214][ T6231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.924967][ T6231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.933216][ T6233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.941032][ T6236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.952163][ T6231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.960648][ T6237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.968875][ T6236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.970897][ T6237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.027074][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.055101][ T6237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.078927][ T6237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.106278][ T6237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.115355][ T6237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.130894][ T6237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.169447][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.578202][ T6230] chnl_net:caif_netlink_parms(): no params data found [ 101.758858][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 101.843358][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.852286][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.862154][ T6230] bridge_slave_0: entered allmulticast mode [ 101.869960][ T6230] bridge_slave_0: entered promiscuous mode [ 101.920638][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.927819][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.935285][ T6230] bridge_slave_1: entered allmulticast mode [ 101.945684][ T6230] bridge_slave_1: entered promiscuous mode [ 101.993614][ T6227] chnl_net:caif_netlink_parms(): no params data found [ 102.023696][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 102.055718][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.097075][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.182432][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.189816][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.197045][ T6228] bridge_slave_0: entered allmulticast mode [ 102.204889][ T6228] bridge_slave_0: entered promiscuous mode [ 102.223337][ T6230] team0: Port device team_slave_0 added [ 102.236228][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.243698][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.251525][ T6228] bridge_slave_1: entered allmulticast mode [ 102.259499][ T6228] bridge_slave_1: entered promiscuous mode [ 102.291213][ T6230] team0: Port device team_slave_1 added [ 102.351805][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.382418][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.435061][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.457252][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.464929][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.491881][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.503227][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.511272][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.518950][ T6238] bridge_slave_0: entered allmulticast mode [ 102.526426][ T6238] bridge_slave_0: entered promiscuous mode [ 102.547663][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.554994][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.562604][ T6227] bridge_slave_0: entered allmulticast mode [ 102.570573][ T6227] bridge_slave_0: entered promiscuous mode [ 102.579008][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.585998][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.612549][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.624556][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.632018][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.640154][ T6238] bridge_slave_1: entered allmulticast mode [ 102.647645][ T6238] bridge_slave_1: entered promiscuous mode [ 102.666573][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.674120][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.682376][ T6227] bridge_slave_1: entered allmulticast mode [ 102.690086][ T6227] bridge_slave_1: entered promiscuous mode [ 102.719933][ T6228] team0: Port device team_slave_0 added [ 102.763203][ T6228] team0: Port device team_slave_1 added [ 102.783838][ T6227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.797440][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.833877][ T6227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.845647][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.885923][ T6230] hsr_slave_0: entered promiscuous mode [ 102.893069][ T6230] hsr_slave_1: entered promiscuous mode [ 102.899775][ T6230] debugfs: 'hsr0' already exists in 'hsr' [ 102.905634][ T6230] Cannot create hsr debugfs directory [ 102.937257][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.944561][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.970910][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.983730][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.990804][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.017530][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.019195][ T6237] Bluetooth: hci0: command tx timeout [ 103.028286][ T6236] Bluetooth: hci2: command tx timeout [ 103.057200][ T6238] team0: Port device team_slave_0 added [ 103.086807][ T6227] team0: Port device team_slave_0 added [ 103.093130][ T6237] Bluetooth: hci1: command tx timeout [ 103.101476][ T6227] team0: Port device team_slave_1 added [ 103.124135][ T6238] team0: Port device team_slave_1 added [ 103.168806][ T6237] Bluetooth: hci3: command tx timeout [ 103.217148][ T6228] hsr_slave_0: entered promiscuous mode [ 103.224163][ T6228] hsr_slave_1: entered promiscuous mode [ 103.230719][ T6228] debugfs: 'hsr0' already exists in 'hsr' [ 103.236482][ T6228] Cannot create hsr debugfs directory [ 103.243059][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.250691][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.277143][ T6227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.324151][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.332988][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.359150][ T6227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.380280][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.387311][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.414084][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.469218][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.476412][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.504007][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.644274][ T6227] hsr_slave_0: entered promiscuous mode [ 103.652581][ T6227] hsr_slave_1: entered promiscuous mode [ 103.659327][ T6227] debugfs: 'hsr0' already exists in 'hsr' [ 103.665252][ T6227] Cannot create hsr debugfs directory [ 103.703906][ T12] bridge_slave_1: left allmulticast mode [ 103.710039][ T12] bridge_slave_1: left promiscuous mode [ 103.716614][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.731311][ T12] bridge_slave_0: left allmulticast mode [ 103.736993][ T12] bridge_slave_0: left promiscuous mode [ 103.743277][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.945159][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.957310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.968034][ T12] bond0 (unregistering): Released all slaves [ 104.034551][ T6238] hsr_slave_0: entered promiscuous mode [ 104.041239][ T6238] hsr_slave_1: entered promiscuous mode [ 104.047529][ T6238] debugfs: 'hsr0' already exists in 'hsr' [ 104.054754][ T6238] Cannot create hsr debugfs directory [ 104.066247][ T12] hsr_slave_0: left promiscuous mode [ 104.073249][ T12] hsr_slave_1: left promiscuous mode [ 104.080038][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.087547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.096234][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.103859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.118872][ T12] veth1_macvtap: left promiscuous mode [ 104.124570][ T12] veth0_macvtap: left promiscuous mode [ 104.131531][ T12] veth1_vlan: left promiscuous mode [ 104.136897][ T12] veth0_vlan: left promiscuous mode [ 104.357604][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.374186][ T12] team0 (unregistering): Port device team_slave_0 removed [ 105.089392][ T6237] Bluetooth: hci0: command tx timeout [ 105.090303][ T6236] Bluetooth: hci2: command tx timeout [ 105.178501][ T6236] Bluetooth: hci1: command tx timeout [ 105.248664][ T6236] Bluetooth: hci3: command tx timeout [ 105.311404][ T6230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.380945][ T6230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.424131][ T6230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.497275][ T6230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.590336][ T6238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.629212][ T6238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.650453][ T6238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.691025][ T6238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.803075][ T6227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.829548][ T6227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.861998][ T6227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.893955][ T6227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.961520][ T6228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.982428][ T6228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.994640][ T6228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.013305][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.025277][ T6228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.165663][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.197202][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.204469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.252536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.260204][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.439147][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.453059][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.507503][ T6227] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.547785][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.564147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.571414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.616998][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.645323][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.652596][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.717167][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.724543][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.746417][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.784077][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.791363][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.882583][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.889904][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.941234][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.948495][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.025387][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.062475][ T6227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.169395][ T6236] Bluetooth: hci0: command tx timeout [ 107.174175][ T6237] Bluetooth: hci2: command tx timeout [ 107.251640][ T6237] Bluetooth: hci1: command tx timeout [ 107.285411][ T6230] veth0_vlan: entered promiscuous mode [ 107.328687][ T6237] Bluetooth: hci3: command tx timeout [ 107.396029][ T6230] veth1_vlan: entered promiscuous mode [ 107.510339][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.555657][ T6230] veth0_macvtap: entered promiscuous mode [ 107.584585][ T6230] veth1_macvtap: entered promiscuous mode [ 107.651037][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.682383][ T6227] veth0_vlan: entered promiscuous mode [ 107.694306][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.716490][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.726626][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.746510][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.767116][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.785254][ T6227] veth1_vlan: entered promiscuous mode [ 107.807214][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.821621][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.944764][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.960230][ T6227] veth0_macvtap: entered promiscuous mode [ 107.965155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.008123][ T6228] veth0_vlan: entered promiscuous mode [ 108.016657][ T6227] veth1_macvtap: entered promiscuous mode [ 108.064419][ T6228] veth1_vlan: entered promiscuous mode [ 108.076673][ T6238] veth0_vlan: entered promiscuous mode [ 108.090157][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.098153][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.124732][ T6238] veth1_vlan: entered promiscuous mode [ 108.154037][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.190717][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.248397][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.270122][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.300897][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316405][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.333070][ T6228] veth0_macvtap: entered promiscuous mode [ 108.362629][ T6238] veth0_macvtap: entered promiscuous mode [ 108.414261][ T6228] veth1_macvtap: entered promiscuous mode [ 108.435334][ T6238] veth1_macvtap: entered promiscuous mode [ 108.528051][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.595898][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.626696][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.649873][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.661069][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.670657][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.681171][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.694078][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.717869][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.811974][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.838896][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.850605][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.867622][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.879434][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.888279][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.944680][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.137023][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.175185][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.217917][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.236288][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.252062][ T6237] Bluetooth: hci2: command tx timeout [ 109.252104][ T6236] Bluetooth: hci0: command tx timeout [ 109.328502][ T6236] Bluetooth: hci1: command tx timeout [ 109.409987][ T6236] Bluetooth: hci3: command tx timeout [ 109.432721][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.451818][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.468464][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.476376][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.738272][ T6401] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.132182][ T6419] Unable to find swap-space signature [ 113.730101][ T6516] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.904686][ T6645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.048644][ T30] audit: type=1800 audit(1775310796.609:2): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.527" name="lu_gp_id" dev="configfs" ino=11308 res=0 errno=0 [ 120.421751][ T30] audit: type=1800 audit(1775310796.989:3): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.533" name="features" dev="configfs" ino=11341 res=0 errno=0 [ 120.941859][ T30] audit: type=1800 audit(1843104519.180:4): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.543" name="trace_pipe" dev="tracefs" ino=3982 res=0 errno=0 [ 125.030136][ T30] audit: type=1800 audit(1843104523.260:5): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.622" name="lu_gp_id" dev="configfs" ino=11157 res=0 errno=0 [ 126.372224][ T6935] kexec: Could not allocate control_code_buffer [ 127.473547][ T7028] __vm_enough_memory: pid: 7028, comm: syz.1.661, bytes: 4398046511104 not enough memory for the allocation [ 128.119368][ T7053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.279693][ T30] audit: type=1800 audit(1843104527.500:6): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.693" name="trace_pipe" dev="tracefs" ino=3937 res=0 errno=0 [ 129.894393][ T7108] can: request_module (can-proto-5) failed. [ 130.642655][ T7094] kexec: Could not allocate control_code_buffer [ 132.488592][ T30] audit: type=1800 audit(1843106578.741:7): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.749" name="dummy_udc" dev="gadgetfs" ino=9369 res=0 errno=0 [ 133.041043][ T7226] ima: policy update failed [ 133.092673][ T30] audit: type=1802 audit(1843106579.334:8): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.757" res=0 errno=0 [ 133.161809][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168463][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.522609][ T30] audit: type=1326 audit(1843106581.786:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78ae39c819 code=0x0 [ 136.199887][ T30] audit: type=1800 audit(1843106582.460:10): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="members" dev="configfs" ino=12789 res=0 errno=0 [ 140.218242][ T7513] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.617481][ T6236] Bluetooth: hci3: unknown advertising packet type: 0xea [ 140.897146][ T7484] kexec: Could not allocate control_code_buffer [ 143.126285][ T7554] kexec: Could not allocate control_code_buffer [ 145.550283][ T7727] ptrace attach of "./syz-executor exec"[6230] was attempted by "./syz-executor exec"[7727] [ 146.587098][ T7775] syz.2.1031 (7775): attempted to duplicate a private mapping with mremap. This is not supported. [ 146.838230][ T30] audit: type=1800 audit(1843106593.155:11): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1033" name="dbroot" dev="configfs" ino=14511 res=0 errno=0 [ 147.380569][ T6236] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 147.554038][ T7821] capability: warning: `syz.1.1052' uses 32-bit capabilities (legacy support in use) [ 147.931537][ T30] audit: type=1800 audit(4294967297.180:12): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1061" name="version" dev="configfs" ino=14584 res=0 errno=0 [ 148.258735][ T6236] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 149.490301][ T7903] futex_wake_op: syz.1.1101 tries to shift op by -1; fix this program [ 150.243368][ T7933] Process accounting resumed [ 152.586238][ T6236] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 158.361602][ T8339] random: crng reseeded on system resumption [ 158.421053][ T30] audit: type=1800 audit(4294985651.719:13): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1312" name="features" dev="configfs" ino=15680 res=0 errno=0 [ 158.797764][ T8361] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.445203][ T8449] syz.0.1367(8449): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 161.355935][ T8490] capability: warning: `syz.0.1387' uses deprecated v2 capabilities in a way that may be insecure [ 162.650819][ T8553] futex_wake_op: syz.1.1418 tries to shift op by -2048; fix this program [ 163.339608][ T8591] syz_tun: tun_chr_ioctl cmd 1074812117 [ 166.333674][ T8731] syz_tun: tun_chr_ioctl cmd 2147767511 [ 167.690962][ T8799] syz_tun: tun_chr_ioctl cmd 1074025680 [ 167.951017][ T6236] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 169.594650][ T8884] syz.2.1579 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.160936][ T8960] syz_tun: tun_chr_ioctl cmd 1074025680 [ 171.835515][ T6236] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 173.646968][ T9088] nfs: Bad value for 'source' [ 177.328443][ T9271] ptrace attach of "./syz-executor exec"[6230] was attempted by "./syz-executor exec"[9271] [ 178.866825][ T6236] Bluetooth: hci1: unexpected event 0x34 length: 726 > 6 [ 180.178526][ T9406] Process accounting paused [ 181.774552][ T9484] Unable to find swap-space signature [ 183.169882][ T9544] Invalid ELF header magic: != ELF [ 183.592240][ T30] audit: type=1800 audit(4294986700.025:14): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1906" name="features" dev="configfs" ino=19634 res=0 errno=0 [ 184.501957][ T9599] kafs: addr_prefs: Invalid Command [ 186.738187][ T9711] queue_state_write: operation too long [ 186.749521][ T9711] queue_state_write: use 'run', 'start' or 'kick' [ 188.035492][ T9775] bond0: option mode: unable to set because the bond device is up [ 188.664915][ T9809] Debayer A: ================= START STATUS ================= [ 188.687660][ T9809] Debayer A: Debayer Mean Window Size: 3 [ 188.693645][ T9809] Debayer A: ================== END STATUS ================== [ 191.782851][ T9960] __vm_enough_memory: pid: 9960, comm: syz.2.2100, bytes: 9223372036854775808 not enough memory for the allocation [ 191.914325][ T9964] block2mtd: Using custom MTD label '' for dev [ 191.930836][ T9964] block2mtd: error: cannot open device [ 194.037678][T10076] bond0: invalid ARP target specified [ 194.283856][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290565][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.395747][ T30] audit: type=1800 audit(4294986711.896:15): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2190" name="lu_gp_id" dev="configfs" ino=21620 res=0 errno=0 [ 195.616419][T10156] synth uevent: /bus/mei: unknown uevent action string [ 196.429595][T10177] [U]  [ 197.754557][T10226] binder: 10225:10226 ioctl c0306201 0 returned -14 [ 198.795297][T10264] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 198.795297][T10264] [ 199.257102][T10287] binder: 10286:10287 ioctl 400c620e 0 returned -14 [ 200.887222][T10360] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 201.340087][T10381] ICMPv6: process `syz.3.2306' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 202.147630][T10414] vhci_hcd vhci_hcd.2: invalid port number 16 [ 202.157461][T10414] vhci_hcd vhci_hcd.2: invalid port number 16 [ 202.377669][T10422] mmap: syz.0.2326 (10422): VmData 45805568 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 202.858299][T10438] vhci_hcd vhci_hcd.2: invalid port number 16 [ 202.881321][T10438] vhci_hcd vhci_hcd.2: invalid port number 16 [ 203.789900][ T30] audit: type=1800 audit(4294986720.330:16): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2348" name="discovery_nqn" dev="configfs" ino=22817 res=0 errno=0 [ 204.262834][T10478] vhci_hcd vhci_hcd.2: invalid port number 16 [ 204.277526][T10478] vhci_hcd vhci_hcd.2: invalid port number 16 [ 204.924422][T10512] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.985248][T10579] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 207.422158][T10594] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 210.139858][T10714] Process accounting resumed [ 210.845052][T10754] writes to the poll attribute are ignored. [ 210.852656][T10754] please use driver specific parameters instead. [ 211.861494][T10811] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 211.890231][T10811] CIFS mount error: No usable UNC path provided in device string! [ 211.890231][T10811] [ 211.903655][T10811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.471751][T10856] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 214.920410][T10944] program syz.3.2575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.582982][T10980] bonding: no command found in bonding_masters - use +ifname or -ifname [ 217.290295][ T30] audit: type=1400 audit(4294986733.900:17): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11062 comm="syz.2.2632" [ 218.395638][T11078] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 220.017502][T11165] kAFS: unparsable volume name [ 223.130323][T11305] Setting dangerous option i915.mitigations - tainting kernel [ 223.199020][ T6236] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 223.199062][ T6236] Bluetooth: hci2: unexpected subevent 0x06 length: 725 > 10 [ 225.243864][ T6231] Bluetooth: hci2: command tx timeout [ 226.920530][ T6231] Bluetooth: hci1: command 0x0406 tx timeout [ 226.927542][ T6231] Bluetooth: hci0: command 0x0406 tx timeout [ 226.940862][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 227.309092][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 228.006698][T11515] binder: 11514:11515 ioctl 400c620e 2000000001c0 returned -22 [ 229.430821][T11585] ICMPv6: process `syz.0.2889' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 229.626410][T11593] WARNING! power/level is deprecated; use power/control instead [ 230.319311][T11629] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 230.331764][T11629] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 230.465637][T11633] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 230.479633][T11633] cec cec26: uevent: failed to send synthetic uevent: -22 [ 233.082256][T11738] rnbd_client L213: map_device: Parameters missing [ 233.845657][T11774] bond0: invalid ARP target specified [ 234.772581][T11819] program syz.1.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.794128][T11819] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 234.990445][T11829] TCP: TCP_TX_DELAY enabled [ 235.008391][T11831] ubi31: attaching mtd0 [ 235.015838][T11831] ubi31: scanning is finished [ 235.064581][T11831] ubi31: empty MTD device detected [ 235.329059][T11831] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 235.354580][T11831] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 235.373751][T11831] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 235.403876][T11831] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 235.435204][T11831] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 235.442260][T11831] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 235.485244][T11831] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 766356888 [ 235.504219][T11831] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 235.525268][T11844] ubi31: background thread "ubi_bgt31d" started, PID 11844 [ 236.141645][T11874] ptrace attach of "./syz-executor exec"[6227] was attempted by ""[11874] [ 237.615757][T11926] batman_adv: Routing algorithm '7' is not supported [ 238.233546][T11943] < [ 238.461938][T11949] kAFS: Invalid Command on /proc/fs/afs/cells file [ 239.847321][T12003] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 242.327667][T11976] Process accounting paused [ 243.294040][T12146] wlan1: mtu less than device minimum [ 243.613378][T12164] QAT: Device 250 not found [ 245.054748][T12226] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 246.285913][T12270] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 247.068087][T12308] usb usb3: usbfs: process 12308 (syz.2.3245) did not claim interface 0 before use [ 247.268831][T12320] misc userio: Invalid payload size [ 249.805642][T12442] delete_channel: no stack [ 250.733627][T12472] syz_tun: tun_chr_ioctl cmd 1074025698 [ 252.076222][ T30] audit: type=1326 audit(4294986768.861:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.0.3360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee2199c819 code=0x0 [ 252.172509][T12545] block2mtd: illegal erase size [ 252.587750][T12567] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 253.594444][T12618] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 253.618996][T12620] zram0: detected capacity change from 0 to 16 [ 254.729795][T12680] kernel read not supported for file /\*)A (pid: 12680 comm: syz.3.3425) [ 254.740663][ T30] audit: type=1800 audit(4294986771.545:19): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3425" name="\*)A" dev="mqueue" ino=28480 res=0 errno=0 [ 255.409326][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.415785][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.466122][T12713] usb usb2: usbfs: process 12713 (syz.3.3440) did not claim interface 4 before use [ 256.402668][T12763] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 256.434410][T12763] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 256.465033][T12763] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 256.483112][T12763] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 256.506257][T12763] page dumped because: unmovable page [ 256.519202][T12763] page_owner info is not present (never set?) [ 256.848841][T12781] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 258.127038][T12847] nvme_fcloop: unknown parameter or missing value '0' [ 258.640815][T12831] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 258.648578][T12849] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 258.658519][T12849] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 258.667978][T12849] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 258.677605][T12849] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 258.686848][T12849] page dumped because: unmovable page [ 258.692615][T12849] page_owner info is not present (never set?) [ 259.301051][T12887] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 259.309936][T12887] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 259.330198][T12887] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 259.350465][T12887] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 259.369494][T12887] page dumped because: unmovable page [ 259.391410][T12887] page_owner info is not present (never set?) [ 260.226981][T12889] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 260.432867][T12927] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 260.512999][T12929] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1215a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 260.529097][T12929] Call Trace: [ 260.532431][T12929] [ 260.535412][T12929] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 260.542196][T12929] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 260.548841][T12929] mce_cpu_restart+0xd5/0x1f0 [ 260.553615][T12929] ? __pfx_mce_cpu_restart+0x10/0x10 [ 260.558988][T12929] smp_call_function_many_cond+0x11fc/0x1500 [ 260.565051][T12929] ? __pfx_mce_cpu_restart+0x10/0x10 [ 260.570426][T12929] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.576335][T12929] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 260.582747][T12929] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 260.588822][T12929] ? __timer_delete_sync+0x151/0x1c0 [ 260.594400][T12929] ? __pfx_mce_cpu_restart+0x10/0x10 [ 260.599841][T12929] on_each_cpu_cond_mask+0x40/0x90 [ 260.605091][T12929] set_bank+0x240/0x3a0 [ 260.609357][T12929] ? __pfx_set_bank+0x10/0x10 [ 260.614125][T12929] ? find_held_lock+0x2b/0x80 [ 260.618877][T12929] ? sysfs_file_kobj+0xe4/0x290 [ 260.623810][T12929] ? sysfs_file_kobj+0xe4/0x290 [ 260.628812][T12929] ? __pfx_set_bank+0x10/0x10 [ 260.633549][T12929] dev_attr_store+0x58/0x80 [ 260.638111][T12929] ? __pfx_dev_attr_store+0x10/0x10 [ 260.643373][T12929] sysfs_kf_write+0xf2/0x150 [ 260.648025][T12929] kernfs_fop_write_iter+0x3e0/0x5f0 [ 260.653368][T12929] ? __pfx_sysfs_kf_write+0x10/0x10 [ 260.658631][T12929] vfs_write+0x6ac/0x1070 [ 260.663013][T12929] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 260.668887][T12929] ? __pfx_vfs_write+0x10/0x10 [ 260.673728][T12929] ksys_write+0x12a/0x250 [ 260.678102][T12929] ? __pfx_ksys_write+0x10/0x10 [ 260.683036][T12929] do_syscall_64+0x106/0xf80 [ 260.687724][T12929] ? clear_bhb_loop+0x40/0x90 [ 260.692457][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.698399][T12929] RIP: 0033:0x7f78ae39c819 [ 260.702871][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.722538][T12929] RSP: 002b:00007f78af25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.731017][T12929] RAX: ffffffffffffffda RBX: 00007f78ae615fa0 RCX: 00007f78ae39c819 [ 260.739048][T12929] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.747087][T12929] RBP: 00007f78ae432c91 R08: 0000000000000000 R09: 0000000000000000 [ 260.755129][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.763152][T12929] R13: 00007f78ae616038 R14: 00007f78ae615fa0 R15: 00007ffe9cc3bc58 [ 260.771206][T12929] [ 260.951686][T12940] block2mtd: device name too long [ 264.114608][T13097] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 264.481216][T13114] binder: binder_mmap: 13113 0-1000 bad vm_flags failed -1 [ 264.507099][T13117] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 264.516759][T13115] ima: policy update failed [ 264.594384][ T30] audit: type=1802 audit(4294986781.446:20): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3635" res=0 errno=0 [ 265.100761][T13145] [U] ^Z [ 265.604106][T13175] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 266.517611][T13218] aoe: invalid device specification [ 266.666251][T13192] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 267.103674][T13246] usb usb24: usbfs: process 13246 (syz.2.3701) did not claim interface 0 before use [ 267.586515][T13264] smpboot: CPU 1 is now offline [ 268.631790][T13254] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 270.930715][T13321] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 272.167163][T13406] udc dummy_udc.0: soft-connect without a gadget driver [ 272.209610][ T5149] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 272.209643][ T5149] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 272.225417][ T5149] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 272.300279][T13404] Process accounting resumed [ 274.062304][T13474] syz.3.3813 (13474): drop_caches: 0 [ 274.355038][ T5149] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 275.567564][ T5149] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 276.753938][T13564] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 277.590170][ T5149] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 279.393258][T13655] kAFS: Invalid Command on /proc/fs/afs/cells file [ 279.796454][T13669] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.831386][T13669] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 280.827009][T13711] ecryptfs_miscdev_write: Invalid packet size [192] [ 281.393361][T13734] usb usb4: usbfs: process 13734 (syz.3.3937) did not claim interface 0 before use [ 283.277802][T13798] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 283.345365][T13798] ep_00: uevent: failed to send synthetic uevent: -22 [ 284.613769][T13843] syz_tun: tun_chr_ioctl cmd 1074025680 [ 289.879129][T14022] QAT: Invalid ioctl 21531 [ 290.028055][ T30] audit: type=1800 audit(4294986806.998:21): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4077" name="dbroot" dev="configfs" ino=33941 res=0 errno=0 [ 290.053695][T14027] db_root: cannot open: /dev/audio1 [ 290.059179][T14027] db_root: not a directory: /dev/audio1 [ 291.270277][T14066] tipc: Can't bind to reserved service type 63 [ 293.519144][T14145] sysfs_service_op_store: Client not running :-5: [ 295.253489][T14211] overlayfs: "check_copy_up" module option is obsolete [ 297.409022][T14289] [U] ^R [ 300.933956][T14415] bond0: no command found in slaves file - use +ifname or -ifname [ 301.744090][ T30] audit: type=1800 audit(4294986818.789:22): pid=14446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4284" name="discovery_nqn" dev="configfs" ino=35269 res=0 errno=0 [ 302.196991][T14457] Process accounting paused [ 302.202251][T14461] kAFS: Invalid Command on /proc/fs/afs/cells file [ 303.785148][ T30] audit: type=1800 audit(4294986820.840:23): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4322" name="dbroot" dev="configfs" ino=35511 res=0 errno=0 [ 305.133141][T14574] ptrace attach of "./syz-executor exec"[6227] was attempted by "./syz-executor exec"[14574] [ 307.062052][T14636] vivid-007: ================= START STATUS ================= [ 307.106402][T14636] vivid-007: Generate PTS: true [ 307.132227][T14636] vivid-007: Generate SCR: true [ 307.137182][T14636] tpg source WxH: 320x240 (Y'CbCr) [ 307.214889][T14636] tpg field: 1 [ 307.236337][T14636] tpg crop: (0,0)/320x240 [ 307.258377][T14636] tpg compose: (0,0)/320x240 [ 307.294831][T14636] tpg colorspace: 8 [ 307.331131][T14636] tpg transfer function: 0/0 [ 307.361132][T14636] tpg Y'CbCr encoding: 0/0 [ 307.371963][T14636] tpg quantization: 0/0 [ 307.411489][T14636] tpg RGB range: 0/2 [ 307.430026][T14636] vivid-007: ================== END STATUS ================== [ 309.306318][T14709] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 309.353357][T14711] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 309.486081][T14716] : Can't lookup blockdev [ 310.514458][T14748] block nbd0: NBD_DISCONNECT [ 310.795121][T14757] vhci_hcd: not connected 4 [ 311.718150][T14793] random: crng reseeded on system resumption [ 312.708566][T14831] i2c i2c-0: delete_device: Can't find device in list [ 314.091148][T14879] vivid-007: ================= START STATUS ================= [ 314.130697][T14879] vivid-007: Enable Output Cropping: true [ 314.149248][T14879] vivid-007: Enable Output Composing: true [ 314.180281][T14879] vivid-007: Enable Output Scaler: true [ 314.204814][T14879] vivid-007: Tx RGB Quantization Range: Automatic [ 314.236690][T14879] vivid-007: Transmit Mode: HDMI [ 314.275809][T14879] vivid-007: Hotplug Present: 0x00000000 [ 314.287293][T14879] vivid-007: RxSense Present: 0x00000000 [ 314.316809][T14879] vivid-007: EDID Present: 0x00000000 [ 314.348552][T14879] vivid-007: ================== END STATUS ================== [ 316.178052][T14954] usbip-vudc usbip-vudc.0: gadget not bound [ 316.528464][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.534894][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.801345][T15021] bond0: option slaves: interface - does not exist! [ 318.022766][T15028] : Can't lookup blockdev [ 320.520828][T15116] QAT: failed to copy from user cfg_data. [ 321.939992][T15156] delete_channel: no stack [ 331.743821][T15349] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 332.210897][T15356] Process accounting resumed [ 334.562875][T15415] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 335.754957][T15460] ecryptfs_miscdev_write: Error while inspecting packet size [ 336.365363][T15485] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 336.801298][T15501] Invalid ELF header magic: != ELF [ 338.076063][T15547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.287063][T15547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.434259][T15547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.577747][T15547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.485773][T15595] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 339.966447][T15613] hub 3-0:1.0: USB hub found [ 340.001807][T15613] hub 3-0:1.0: 1 port detected [ 340.068859][T15613] usb usb3: authorized to connect [ 341.154636][T15659] QAT: Stopping all acceleration devices. [ 343.764434][T15758] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 344.355069][T15780] CIFS mount error: No usable UNC path provided in device string! [ 344.355069][T15780] [ 344.390107][T15780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 344.803038][T15801] process 'syz.2.4932' launched './file0' with NULL argv: empty string added [ 346.762098][T15876] QAT: failed to copy from user cfg_data. [ 349.095864][T15948] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 349.259309][T15948] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 349.304794][T15948] pci 0000:00:01.3: PCI INT A: no GSI [ 349.525092][T15962] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 351.601278][T16044] aoe: can't write to that file. [ 352.996646][T16103] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 354.555127][T16162] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 357.561613][T16281] block2mtd: illegal erase size [ 357.789118][T16291] kAFS: No cell specified [ 359.155619][T16337] program syz.2.5196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.787018][T16354] ima: policy update failed [ 359.812889][ T30] audit: type=1802 audit(4294986877.161:24): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5204" res=0 errno=0 [ 361.215243][T16403] syz.1.5228 uses obsolete (PF_INET,SOCK_PACKET) [ 362.111910][T16428] Process accounting paused [ 367.816414][T16587] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 367.825141][T16587] net gretap0: uevent: failed to send synthetic uevent: -22 [ 369.234907][T16626] [ 369.983070][ T5149] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 373.911169][T16758] nvme_fcloop: unknown parameter or missing value '7' [ 374.997539][T16797] ======================================================= [ 374.997539][T16797] WARNING: The mand mount option has been deprecated and [ 374.997539][T16797] and is ignored by this kernel. Remove the mand [ 374.997539][T16797] option from the mount to silence this warning. [ 374.997539][T16797] ======================================================= [ 377.659610][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.669355][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.410027][T16981] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 381.083120][ T30] audit: type=1800 audit(4294986898.542:25): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5517" name="members" dev="configfs" ino=43310 res=0 errno=0 [ 385.097353][T17142] Format for deleting device is "id" (uint). [ 385.341872][T17152] syz_tun: tun_chr_ioctl cmd 1074812117 [ 387.996147][ T30] audit: type=1400 audit(4294986905.488:26): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17230 comm="syz.0.5622" [ 388.761565][ T5149] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 389.014317][T17270] sysfs_service_op_show: Client not running :-5: [ 389.145978][T17272] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 390.839601][ T30] audit: type=1800 audit(4294986908.353:27): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5675" name="dbroot" dev="configfs" ino=44375 res=0 errno=0 [ 391.639295][T17372] Setting dangerous option i915.mitigations - tainting kernel [ 391.667039][T17372] Bad "i915.mitigations=CmâUQF\ ", 'CmâUQF\' is unknown [ 392.114303][T17383] Process accounting resumed [ 392.472989][T17400] ecryptfs_parse_packet_length: Error parsing packet length [ 392.503952][T17400] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 395.594278][T17506] bond0: option packets_per_slave: invalid value ( Xnp) [ 395.626663][T17506] bond0: option packets_per_slave: allowed values 0 - 65535 [ 396.109902][T17526] syz.1.5765: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 396.176753][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.1.5765 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 396.176804][T17526] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 396.176815][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.176832][T17526] Call Trace: [ 396.176840][T17526] [ 396.176848][T17526] dump_stack_lvl+0x100/0x190 [ 396.176891][T17526] warn_alloc.cold+0x95/0x1c1 [ 396.176934][T17526] ? __pfx_warn_alloc+0x10/0x10 [ 396.176975][T17526] ? __lock_acquire+0x4a5/0x2630 [ 396.177023][T17526] __vmalloc_node_range_noprof+0x1252/0x1530 [ 396.177059][T17526] ? rcu_is_watching+0x12/0xc0 [ 396.177099][T17526] ? trace_contention_end+0x140/0x180 [ 396.177135][T17526] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 396.177165][T17526] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 396.177191][T17526] ? tomoyo_path_number_perm+0x28f/0x580 [ 396.177222][T17526] ? tomoyo_path_number_perm+0x28f/0x580 [ 396.177254][T17526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 396.177287][T17526] ? __pfx___mutex_lock+0x10/0x10 [ 396.177319][T17526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.177349][T17526] ? futex_wait+0x125/0x380 [ 396.177391][T17526] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 396.177418][T17526] __vmalloc_node_noprof+0xad/0xf0 [ 396.177456][T17526] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 396.177487][T17526] dvb_dvr_do_ioctl+0x15d/0x270 [ 396.177519][T17526] dvb_usercopy+0x167/0x340 [ 396.177545][T17526] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 396.177574][T17526] ? __pfx_dvb_usercopy+0x10/0x10 [ 396.177612][T17526] ? __fget_files+0x21f/0x3d0 [ 396.177643][T17526] dvb_dvr_ioctl+0x29/0x40 [ 396.177685][T17526] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 396.177713][T17526] __x64_sys_ioctl+0x18e/0x210 [ 396.177752][T17526] do_syscall_64+0x106/0xf80 [ 396.177775][T17526] ? clear_bhb_loop+0x40/0x90 [ 396.177804][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.177828][T17526] RIP: 0033:0x7f78ae39c819 [ 396.177848][T17526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.177870][T17526] RSP: 002b:00007f78af25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.177896][T17526] RAX: ffffffffffffffda RBX: 00007f78ae615fa0 RCX: 00007f78ae39c819 [ 396.177912][T17526] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 396.177927][T17526] RBP: 00007f78ae432c91 R08: 0000000000000000 R09: 0000000000000000 [ 396.177942][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.177956][T17526] R13: 00007f78ae616038 R14: 00007f78ae615fa0 R15: 00007ffe9cc3bc58 [ 396.177986][T17526] [ 396.177997][T17526] Mem-Info: [ 397.145162][T17526] active_anon:5316 inactive_anon:1 isolated_anon:0 [ 397.145162][T17526] active_file:6598 inactive_file:40643 isolated_file:0 [ 397.145162][T17526] unevictable:768 dirty:358 writeback:0 [ 397.145162][T17526] slab_reclaimable:12105 slab_unreclaimable:90611 [ 397.145162][T17526] mapped:24277 shmem:1357 pagetables:1087 [ 397.145162][T17526] sec_pagetables:0 bounce:0 [ 397.145162][T17526] kernel_misc_reclaimable:0 [ 397.145162][T17526] free:1334459 free_pcp:11010 free_cma:0 [ 397.449247][T17526] Node 0 active_anon:25516kB inactive_anon:4kB active_file:26392kB inactive_file:162380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97104kB dirty:1428kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:11136kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 397.505463][ T5149] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 397.513546][ T5149] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 397.587581][T17575] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 397.610914][T17526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 397.743408][T17526] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.888602][T17526] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 397.915538][T17526] Node 0 DMA32 free:1397740kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23444kB inactive_anon:4kB active_file:26392kB inactive_file:162380kB unevictable:1536kB writepending:1528kB zspages:0kB present:3129332kB managed:2537268kB mlocked:0kB bounce:0kB free_pcp:37576kB local_pcp:37576kB free_cma:0kB [ 398.116359][T17526] lowmem_reserve[]: 0 0 1 1 1 [ 398.137927][T17526] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 398.280891][T17526] lowmem_reserve[]: 0 0 0 0 0 [ 398.285692][T17526] Node 1 Normal free:3924900kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3152kB local_pcp:3152kB free_cma:0kB [ 398.446961][T17526] lowmem_reserve[]: 0 0 0 0 0 [ 398.451745][T17526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 398.529535][T17526] Node 0 DMA32: 4999*4kB (UME) 3232*8kB (UME) 1959*16kB (UME) 553*32kB (UME) 481*64kB (UME) 412*128kB (UM) 289*256kB (UM) 183*512kB (UME) 113*1024kB (UM) 39*2048kB (UME) 209*4096kB (UM) = 1397740kB [ 398.616663][T17526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 398.691200][T17526] Node 1 Normal: 6*4kB (UM) 11*8kB (UM) 12*16kB (UM) 3*32kB (UM) 5*64kB (UM) 8*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 955*4096kB (UM) = 3924944kB [ 398.770720][T17526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 398.815786][T17526] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 398.862047][T17526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 398.912358][T17526] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 398.946697][T17526] 48699 total pagecache pages [ 398.951424][T17526] 2 pages in swap cache [ 398.989199][T17526] Free swap = 124988kB [ 398.993422][T17526] Total swap = 124996kB [ 399.026445][T17526] 2097051 pages RAM [ 399.030303][T17526] 0 pages HighMem/MovableOnly [ 399.086357][T17526] 430856 pages reserved [ 399.127649][T17526] 0 pages cma reserved [ 403.465670][T17842] vmstat_refresh: nr_hugetlb -2048 [ 403.933191][T17859] random: crng reseeded on system resumption [ 407.879300][T17976] nvme_fcloop: unknown parameter or missing value '' [ 409.211202][T18032] i2c i2c-0: new_device: Missing parameters [ 409.817069][T18049] vhci_hcd vhci_hcd.2: invalid port number 253 [ 409.847977][T18049] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 412.524586][T18160] i8042 aux 00:02: in use; can't configure [ 415.671688][T18322] bond0: invalid ARP target specified [ 417.149436][ T30] audit: type=1804 audit(4294986934.790:28): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6069" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 418.122814][T18426] delete_channel: no stack [ 418.171979][ T30] audit: type=1807 audit(4294986935.825:29): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 418.195902][T18428] ima: policy update failed [ 418.273767][ T30] audit: type=1802 audit(4294986935.855:30): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.6082" res=0 errno=0 [ 418.383184][ T30] audit: type=1802 audit(4294986935.855:31): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6082" res=0 errno=0 [ 419.719501][T18460] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 419.729040][T18460] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 420.227659][T18504] QAT: failed to copy from user cfg_data. [ 421.339036][T18556] Scaler: ================= START STATUS ================= [ 421.387367][T18556] Scaler: ================== END STATUS ================== [ 422.024293][T18567] Process accounting paused [ 423.429246][T18481] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 423.437474][T18481] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 425.462433][T18684] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 428.649885][T18814] ima: policy update failed [ 428.676401][ T30] audit: type=1802 audit(4294986946.379:32): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6210" res=0 errno=0 [ 429.385854][T18834] hub 1-0:1.0: USB hub found [ 429.429378][T18834] hub 1-0:1.0: 1 port detected [ 430.198274][T18869] hub 1-0:1.0: USB hub found [ 430.226966][T18869] hub 1-0:1.0: 1 port detected [ 430.971508][T18899] hub 1-0:1.0: USB hub found [ 430.989504][T18899] hub 1-0:1.0: 1 port detected [ 432.567221][T18965] hub 1-0:1.0: USB hub found [ 432.603108][T18965] hub 1-0:1.0: 1 port detected [ 432.962577][T18984] ptp ptp0: only physical clock in use now [ 434.360067][T19028] usb usb11: usbfs: interface 0 claimed by hub while 'syz.3.6308' sets config #7 [ 435.303548][T19046] could not allocate digest TFM handle [ 438.776481][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.785770][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.175520][T19256] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 442.535211][ T30] audit: type=1800 audit(4294986960.312:33): pid=19266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6422" name="sr0" dev="devtmpfs" ino=2876 res=0 errno=0 [ 444.549143][T19326] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 444.583429][T19326] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 445.412654][T19348] random: crng reseeded on system resumption [ 446.310699][T19377] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 446.796922][T19391] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 451.964851][T19569] Process accounting resumed [ 455.363866][T19690] program syz.1.6626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.435521][T19689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 455.446072][T19690] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 456.922657][T19754] vivid-003: ================= START STATUS ================= [ 456.930431][T19754] vivid-003: Radio HW Seek Mode: Bounded [ 456.987260][T19754] vivid-003: Radio Programmable HW Seek: false [ 457.022083][T19754] vivid-003: RDS Rx I/O Mode: Block I/O [ 457.022134][T19754] vivid-003: Generate RBDS Instead of RDS: false [ 457.022159][T19754] vivid-003: RDS Reception: true [ 457.022182][T19754] vivid-003: RDS Program Type: 0 inactive [ 457.022212][T19754] vivid-003: RDS PS Name: inactive [ 457.022240][T19754] vivid-003: RDS Radio Text: inactive [ 457.022268][T19754] vivid-003: RDS Traffic Announcement: false inactive [ 457.022298][T19754] vivid-003: RDS Traffic Program: false inactive [ 457.022326][T19754] vivid-003: RDS Music: false inactive [ 457.022355][T19754] vivid-003: ================== END STATUS ================== [ 457.779150][T19778] warning: `syz.0.6658' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 458.051927][T19787] block loop4: the capability attribute has been deprecated. [ 459.946339][T19859] i2c i2c-0: delete_device: Can't parse I2C address [ 461.712339][T19928] : Can't lookup blockdev [ 463.298382][T19988] synth uevent: /devices/virtual/tty/ttyz1: unknown uevent action string [ 463.341091][T19988] tty ttyz1: uevent: failed to send synthetic uevent: -22 [ 465.573724][T20065] random: crng reseeded on system resumption [ 466.343558][T20094] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 466.374812][T20094] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 467.661796][ T30] audit: type=1400 audit(4294986985.572:34): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20167 comm="syz.0.6829" [ 468.291213][T20188] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 470.462115][T20263] i2c i2c-0: new_device: Can't parse I2C address [ 471.579020][T20291] zswap: compressor Z(u not available [ 472.192423][T20324] kfence: disabled [ 480.382992][T18479] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 482.011401][T20645] Process accounting paused [ 482.341236][T20659] Setting dangerous option i915.mitigations - tainting kernel [ 483.544202][T20700] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 484.509404][T20731] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 485.146640][T20749] kAFS: Invalid Command on /proc/fs/afs/cells file [ 487.096493][T20804] zram0: detected capacity change from 16 to 0 [ 488.622431][T20855] Line length is too long: Should be less than 4094 [ 489.028185][T20864] nvme_fcloop: unknown parameter or missing value '1' [ 489.641001][T20886] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 490.220587][T20904] futex_wake_op: syz.1.7148 tries to shift op by -2048; fix this program [ 490.263733][T20904] futex_wake_op: syz.1.7148 tries to shift op by -2048; fix this program [ 491.863562][T20962] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 492.294704][ T30] audit: type=1800 audit(4295005354.336:35): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7185" name="lu_gp_id" dev="configfs" ino=54734 res=0 errno=0 [ 492.336890][T20980] kstrtoul() returned -22 for lu_gp_id [ 494.627707][T21070] i2c i2c-0: delete_device: Extra parameters [ 495.289457][T21100] program syz.0.7242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.674206][T21112] bond0: no command found in slaves file - use +ifname or -ifname [ 495.922823][T21123] blkio.reset_stats is deprecated [ 496.663003][ T30] audit: type=1800 audit(4295005358.718:36): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7268" name="dbroot" dev="configfs" ino=55285 res=0 errno=0 [ 497.761802][T21190] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 499.900925][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.907306][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.225779][T21270] kafs: addr_prefs: Invalid Command [ 500.462906][T21279] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 500.462906][T21279] M' is too long [ 500.514968][T21279] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 500.514968][T21279] W ' is too long [ 502.658900][T21362] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 505.412851][T21461] process 'syz.0.7419' launched '/dev/fd/3' with NULL argv: empty string added [ 505.518757][T21465] phram: not enough arguments [ 508.142249][T21564] usb usb26: usbfs: process 21564 (syz.0.7468) did not claim interface 0 before use [ 509.048339][T21598] bcache: register_bcache() error : failed to open device [ 509.801655][T21640] cougar: G6 mapped to space [ 511.552527][T21704] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 511.788338][T21711] ptrace attach of "./syz-executor exec"[6228] was attempted by "./syz-executor exec"[21711] [ 511.964011][T21713] Process accounting resumed [ 512.153394][T21730] warning: `syz.0.7533' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 513.798339][T18479] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 513.866700][T21802] usb usb13: check_ctrlrecip: process 21802 (syz.0.7565) requesting ep 01 but needs 81 [ 513.911797][T21802] usb usb13: usbfs: process 21802 (syz.0.7565) did not claim interface 0 before use [ 515.569459][T21873] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 515.603959][T21874] [U] 0="/ [ 515.617618][T21874] [U] [ 515.620449][T21874] [U] EeQ@ [ 515.651875][T21872] [U]  [ 515.808230][T18481] Bluetooth: hci1: command 0x0406 tx timeout [ 516.814661][T21909] ubi: mtd0 is already attached to ubi31 [ 517.879693][T18481] Bluetooth: hci1: command 0x0406 tx timeout [ 518.017726][T21949] kafs: addr_prefs: Invalid Command [ 520.255871][T22022] ICMPv6: process `syz.2.7660' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 521.269085][T22053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.067006][T22089] : Can't lookup blockdev [ 525.580430][T22222] ceph: Failed to parse sending metrics switch value 'P^' [ 526.466132][T22252] vhci_hcd vhci_hcd.1: invalid port number 14 [ 526.488978][T22255] vhci_hcd vhci_hcd.1: invalid port number 14 [ 526.510943][T22255] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 529.053920][T22357] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 529.865837][T22389] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 530.705605][T18479] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 530.705636][T18479] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 530.729753][T18479] Bluetooth: hci0: Dropping invalid advertising data [ 530.736484][T18479] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 530.736514][T18479] Bluetooth: hci0: Dropping invalid advertising data [ 530.755004][T18479] Bluetooth: hci0: Malformed LE Event: 0x02 [ 531.056691][T22452] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 531.786525][T18479] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 531.794721][T18479] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 531.805213][T18479] CPU: 0 UID: 0 PID: 18479 Comm: kworker/u11:1 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 531.805256][T18479] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 531.805266][T18479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.805285][T18479] Workqueue: hci0 hci_rx_work [ 531.805345][T18479] Call Trace: [ 531.805353][T18479] [ 531.805361][T18479] dump_stack_lvl+0x100/0x190 [ 531.805401][T18479] sysfs_warn_dup.cold+0x1c/0x28 [ 531.805435][T18479] sysfs_create_dir_ns+0x24b/0x2b0 [ 531.805472][T18479] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 531.805506][T18479] ? find_held_lock+0x2b/0x80 [ 531.805530][T18479] ? kobject_add_internal+0x25f/0x930 [ 531.805560][T18479] ? kobject_add_internal+0x25f/0x930 [ 531.805592][T18479] ? do_raw_spin_unlock+0x145/0x1e0 [ 531.805632][T18479] kobject_add_internal+0x2c8/0x930 [ 531.805667][T18479] kobject_add+0x16a/0x1e0 [ 531.805696][T18479] ? __pfx_kobject_add+0x10/0x10 [ 531.805725][T18479] ? class_to_subsys+0x10f/0x150 [ 531.805765][T18479] ? kobject_put+0xb9/0x640 [ 531.805791][T18479] ? _raw_spin_unlock+0x28/0x50 [ 531.805836][T18479] device_add+0x294/0x1950 [ 531.805870][T18479] ? __pfx_dev_set_name+0x10/0x10 [ 531.805908][T18479] ? __pfx_device_add+0x10/0x10 [ 531.805941][T18479] ? mgmt_send_event_skb+0x2fb/0x460 [ 531.805985][T18479] hci_conn_add_sysfs+0x1a3/0x260 [ 531.806034][T18479] le_conn_complete_evt+0x11eb/0x1f60 [ 531.806078][T18479] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 531.806112][T18479] ? __pfx_bt_warn+0x10/0x10 [ 531.806147][T18479] hci_le_conn_complete_evt+0x23c/0x3a0 [ 531.806184][T18479] ? skb_pull_data+0x15f/0x1e0 [ 531.806218][T18479] hci_le_meta_evt+0x34a/0x5f0 [ 531.806256][T18479] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 531.806296][T18479] hci_event_packet+0x51c/0xcd0 [ 531.806331][T18479] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 531.806369][T18479] ? __pfx_hci_event_packet+0x10/0x10 [ 531.806407][T18479] ? kcov_remote_start+0x374/0x660 [ 531.806432][T18479] ? lockdep_hardirqs_on+0x78/0x100 [ 531.806462][T18479] hci_rx_work+0x451/0xfc0 [ 531.806502][T18479] process_one_work+0xa23/0x19a0 [ 531.806551][T18479] ? __pfx_process_one_work+0x10/0x10 [ 531.806596][T18479] ? __pfx_hci_rx_work+0x10/0x10 [ 531.806633][T18479] worker_thread+0x5ef/0xe50 [ 531.806680][T18479] ? kthread+0x13a/0x450 [ 531.806711][T18479] ? __pfx_worker_thread+0x10/0x10 [ 531.806745][T18479] kthread+0x370/0x450 [ 531.806777][T18479] ? __pfx_kthread+0x10/0x10 [ 531.806812][T18479] ret_from_fork+0x754/0xd80 [ 531.806851][T18479] ? __pfx_ret_from_fork+0x10/0x10 [ 531.806890][T18479] ? __switch_to+0x7b4/0x1120 [ 531.806918][T18479] ? __pfx_kthread+0x10/0x10 [ 531.806952][T18479] ret_from_fork_asm+0x1a/0x30 [ 531.807000][T18479] [ 531.807058][T18479] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 532.120987][T18479] Bluetooth: hci0: failed to register connection device [ 534.192397][T18481] Bluetooth: hci0: command 0x0406 tx timeout [ 534.376867][T22588] netlink: 'syz.1.7869': attribute type 11 has an invalid length. [ 534.422167][T22588] netlink: 'syz.1.7869': attribute type 11 has an invalid length. [ 534.471991][T22588] netlink: 'syz.1.7869': attribute type 11 has an invalid length. [ 535.453155][T22625] syz.1.7885 uses obsolete (PF_INET,SOCK_PACKET) [ 535.492437][T22626] netlink: 'syz.3.7886': attribute type 1 has an invalid length. [ 535.977730][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7895'. [ 536.260758][T18481] Bluetooth: hci0: command 0x0406 tx timeout [ 536.912422][T22678] delete_channel: no stack [ 537.670408][T22706] ksmbd: Unknown IPC event: 14, ignore. [ 537.825997][T22710] netlink: 'syz.3.7920': attribute type 11 has an invalid length. [ 537.866219][T22710] netlink: 'syz.3.7920': attribute type 11 has an invalid length. [ 537.896837][T22710] netlink: 'syz.3.7920': attribute type 11 has an invalid length. [ 538.161971][T22722] FAULT_INJECTION: forcing a failure. [ 538.161971][T22722] name failslab, interval 1, probability 0, space 0, times 1 [ 538.219974][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.2.7925 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 538.220020][T22722] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 538.220031][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.220045][T22722] Call Trace: [ 538.220052][T22722] [ 538.220061][T22722] dump_stack_lvl+0x100/0x190 [ 538.220103][T22722] should_fail_ex.cold+0x5/0xa [ 538.220133][T22722] should_failslab+0xc2/0x120 [ 538.220160][T22722] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 538.220198][T22722] ? alloc_empty_file+0x55/0x1c0 [ 538.220236][T22722] alloc_empty_file+0x55/0x1c0 [ 538.220269][T22722] alloc_file_pseudo+0x13a/0x230 [ 538.220303][T22722] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 538.220334][T22722] ? alloc_fd+0x476/0x790 [ 538.220361][T22722] ? do_raw_spin_unlock+0x145/0x1e0 [ 538.220402][T22722] __anon_inode_getfile+0xe8/0x280 [ 538.220436][T22722] anon_inode_getfile_fmode+0x37/0xa0 [ 538.220469][T22722] __do_sys_fanotify_init+0xa79/0xe50 [ 538.220513][T22722] do_syscall_64+0x106/0xf80 [ 538.220536][T22722] ? clear_bhb_loop+0x40/0x90 [ 538.220565][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.220590][T22722] RIP: 0033:0x7f3de179c819 [ 538.220610][T22722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.220632][T22722] RSP: 002b:00007f3de2570028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 538.220655][T22722] RAX: ffffffffffffffda RBX: 00007f3de1a15fa0 RCX: 00007f3de179c819 [ 538.220671][T22722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 538.220684][T22722] RBP: 00007f3de1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 538.220698][T22722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.220712][T22722] R13: 00007f3de1a16038 R14: 00007f3de1a15fa0 R15: 00007ffd44a46d88 [ 538.220748][T22722] [ 538.595853][T22731] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 540.696674][T22790] openvswitch: netlink: IPv6 tunnel dst address is zero [ 540.841475][T22794] sd 0:0:1:0: PR command failed: 1026 [ 540.906142][T22794] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 540.939880][T22794] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 542.247150][T22826] Process accounting paused [ 543.569717][T22879] netlink: Unknown NAT attribute (type=262, max=9) [ 544.455984][T22907] sg_read: process 4023 (syz.0.8004) changed security contexts after opening file descriptor, this is not allowed. [ 544.736215][T22915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 545.157996][T22927] nbd: couldn't find a device at index 35644 [ 545.435610][T22934] netlink: 'syz.0.8016': attribute type 2 has an invalid length. [ 546.384168][T22966] netlink: del zone limit has 4 unknown bytes [ 546.559843][T22971] netlink: 'syz.0.8029': attribute type 3 has an invalid length. [ 547.628991][T23006] netlink: 'syz.1.8047': attribute type 11 has an invalid length. [ 547.665309][T23006] netlink: 'syz.1.8047': attribute type 11 has an invalid length. [ 547.688695][T23006] netlink: 'syz.1.8047': attribute type 11 has an invalid length. [ 547.969626][T23019] IPVS: length: 131 != 8 [ 549.929836][T23081] netlink: 'syz.3.8081': attribute type 11 has an invalid length. [ 550.264982][T23093] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 550.470041][T23099] netlink: 206 bytes leftover after parsing attributes in process `syz.2.8090'. [ 550.513125][T23099] Zero length message leads to an empty skb [ 550.805556][T23109] syz_tun: tun_chr_ioctl cmd 35108 [ 551.604922][T23137] mmap: syz.3.8106 (23137): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 551.686987][T23139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8107'. [ 551.706805][T23141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 551.713713][T23141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 551.968716][T23146] netlink: 'syz.0.8111': attribute type 1 has an invalid length. [ 552.279812][T23156] netlink: 'syz.2.8115': attribute type 9 has an invalid length. [ 552.296635][T23160] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 553.246540][T23184] openvswitch: netlink: Flow key attribute not present in set flow. [ 553.817179][T23153] kexec: Could not allocate control_code_buffer [ 554.043798][T23207] openvswitch: netlink: Flow actions attr not present in new flow. [ 555.408184][T18479] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 555.415956][T18479] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 555.712955][T23268] No such timeout policy "" [ 555.717897][T23268] netlink: Failed to associated timeout policy '' [ 556.257071][T23291] openvswitch: netlink: Key type 29 is not supported [ 556.472453][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8170'. [ 556.738695][T23308] __vm_enough_memory: pid: 23308, comm: syz.3.8175, bytes: 4398046511104 not enough memory for the allocation [ 556.836872][T23312] ima: policy update failed [ 556.882703][ T30] audit: type=1802 audit(4295005419.251:37): pid=23312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.8177" res=0 errno=0 [ 557.742531][T23344] nbd: illegal input index 37139 [ 558.143748][T23362] program syz.1.8197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.136214][T23394] netlink: 'syz.1.8211': attribute type 1 has an invalid length. [ 559.167117][T23397] program syz.3.8213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.019905][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.027570][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.380094][T23480] netlink: Conntrack attr has 16 unknown bytes [ 563.335174][T23555] zram: Removed device: zram0 [ 563.900966][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8279'. [ 564.964199][T23625] tc_dump_action: action bad kind [ 565.574759][T23645] netlink: zone id is out of range [ 566.424463][T23671] netlink: 'syz.0.8311': attribute type 3 has an invalid length. [ 566.719796][T23690] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 566.976629][T23712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8319'. [ 567.027770][T23714] netlink: 'syz.0.8320': attribute type 2 has an invalid length. [ 567.657095][T23729] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 567.669489][T23732] openvswitch: netlink: IP tunnel dst address not specified [ 567.691437][T23729] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 568.203566][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8336'. [ 568.258387][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8336'. [ 569.082440][T23787] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 569.101284][T23789] FAULT_INJECTION: forcing a failure. [ 569.101284][T23789] name failslab, interval 1, probability 0, space 0, times 0 [ 569.161652][T23789] CPU: 0 UID: 0 PID: 23789 Comm: syz.1.8351 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 569.161697][T23789] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 569.161708][T23789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.161722][T23789] Call Trace: [ 569.161730][T23789] [ 569.161739][T23789] dump_stack_lvl+0x100/0x190 [ 569.161783][T23789] should_fail_ex.cold+0x5/0xa [ 569.161814][T23789] should_failslab+0xc2/0x120 [ 569.161842][T23789] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 569.161890][T23789] ? __d_alloc+0x34/0xa80 [ 569.161919][T23789] ? make_vfsgid+0xf1/0x140 [ 569.161959][T23789] __d_alloc+0x34/0xa80 [ 569.161987][T23789] ? bpf_lsm_inode_permission+0x9/0x10 [ 569.162029][T23789] d_alloc+0x4a/0x1e0 [ 569.162059][T23789] vfs_tmpfile+0x148/0x9a0 [ 569.162093][T23789] path_openat+0x164e/0x31a0 [ 569.162119][T23789] ? kasan_save_stack+0x3f/0x50 [ 569.162141][T23789] ? kasan_save_stack+0x30/0x50 [ 569.162163][T23789] ? __kasan_slab_alloc+0x89/0x90 [ 569.162187][T23789] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 569.162225][T23789] ? do_getname+0x35/0x390 [ 569.162258][T23789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.162287][T23789] ? __pfx_path_openat+0x10/0x10 [ 569.162325][T23789] do_file_open+0x20e/0x430 [ 569.162355][T23789] ? __pfx_do_file_open+0x10/0x10 [ 569.162404][T23789] ? _raw_spin_unlock+0x28/0x50 [ 569.162442][T23789] ? alloc_fd+0x476/0x790 [ 569.162477][T23789] do_sys_openat2+0x10d/0x1e0 [ 569.162512][T23789] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.162558][T23789] __x64_sys_open+0xfe/0x1d0 [ 569.162592][T23789] ? __pfx___x64_sys_open+0x10/0x10 [ 569.162639][T23789] do_syscall_64+0x106/0xf80 [ 569.162662][T23789] ? clear_bhb_loop+0x40/0x90 [ 569.162692][T23789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.162718][T23789] RIP: 0033:0x7f78ae39c819 [ 569.162739][T23789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.162762][T23789] RSP: 002b:00007f78af25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 569.162785][T23789] RAX: ffffffffffffffda RBX: 00007f78ae615fa0 RCX: 00007f78ae39c819 [ 569.162801][T23789] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 569.162816][T23789] RBP: 00007f78ae432c91 R08: 0000000000000000 R09: 0000000000000000 [ 569.162831][T23789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.162845][T23789] R13: 00007f78ae616038 R14: 00007f78ae615fa0 R15: 00007ffe9cc3bc58 [ 569.162881][T23789] [ 571.948619][T23869] netlink: get zone limit has 4 unknown bytes [ 572.288856][T23877] Process accounting resumed [ 572.490298][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8395'. [ 572.692442][T23895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8396'. [ 572.824154][T23901] mmap: syz.3.8399 (23901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 572.929402][T23903] nbd: must specify an index to disconnect [ 573.119574][T23910] FAULT_INJECTION: forcing a failure. [ 573.119574][T23910] name failslab, interval 1, probability 0, space 0, times 0 [ 573.192316][T23910] CPU: 0 UID: 0 PID: 23910 Comm: syz.3.8403 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 573.192359][T23910] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 573.192370][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.192384][T23910] Call Trace: [ 573.192391][T23910] [ 573.192400][T23910] dump_stack_lvl+0x100/0x190 [ 573.192442][T23910] should_fail_ex.cold+0x5/0xa [ 573.192471][T23910] ? udpv6_init_sock+0x24e/0x450 [ 573.192506][T23910] should_failslab+0xc2/0x120 [ 573.192542][T23910] __kmalloc_noprof+0xe0/0x850 [ 573.192581][T23910] ? lockdep_init_map_type+0x5c/0x250 [ 573.192620][T23910] udpv6_init_sock+0x24e/0x450 [ 573.192653][T23910] ? __pfx_udpv6_init_sock+0x10/0x10 [ 573.192689][T23910] inet6_create+0xb21/0x12b0 [ 573.192715][T23910] ? inet6_create+0x7f/0x12b0 [ 573.192741][T23910] __sock_create+0x339/0x860 [ 573.192777][T23910] __sys_socket+0x14d/0x260 [ 573.192810][T23910] ? __pfx___sys_socket+0x10/0x10 [ 573.192850][T23910] __x64_sys_socket+0x72/0xb0 [ 573.192881][T23910] ? lockdep_hardirqs_on+0x78/0x100 [ 573.192905][T23910] do_syscall_64+0x106/0xf80 [ 573.192929][T23910] ? clear_bhb_loop+0x40/0x90 [ 573.192958][T23910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.192983][T23910] RIP: 0033:0x7ff03119c819 [ 573.193003][T23910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.193026][T23910] RSP: 002b:00007ff03213b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 573.193048][T23910] RAX: ffffffffffffffda RBX: 00007ff031415fa0 RCX: 00007ff03119c819 [ 573.193063][T23910] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 573.193077][T23910] RBP: 00007ff031232c91 R08: 0000000000000000 R09: 0000000000000000 [ 573.193091][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.193105][T23910] R13: 00007ff031416038 R14: 00007ff031415fa0 R15: 00007fff0c430fa8 [ 573.193134][T23910] [ 573.979199][T23936] netlink: 'syz.2.8414': attribute type 1 has an invalid length. [ 574.327984][T19207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.552325][T19207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.697217][T19207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.131465][T19207] bridge_slave_1: left allmulticast mode [ 575.157999][T19207] bridge_slave_1: left promiscuous mode [ 575.165360][T19207] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.328458][T19207] bridge_slave_0: left allmulticast mode [ 575.359057][T19207] bridge_slave_0: left promiscuous mode [ 575.364913][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.941644][T23994] netlink: 'syz.3.8430': attribute type 1 has an invalid length. [ 576.130020][T18481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 576.146710][T18481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 576.157888][T18481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 576.168288][T18481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 576.189228][T18481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 576.419264][T19207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.487761][T19207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.574528][T19207] bond0 (unregistering): Released all slaves [ 578.070009][T24098] openvswitch: netlink: IP tunnel dst address not specified [ 578.201998][T18481] Bluetooth: hci2: command tx timeout [ 578.457218][T19207] hsr_slave_0: left promiscuous mode [ 578.486678][T19207] hsr_slave_1: left promiscuous mode [ 578.510956][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.556493][T19207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.594006][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.624874][T19207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.708004][T19207] veth1_macvtap: left promiscuous mode [ 578.733636][T19207] veth0_macvtap: left promiscuous mode [ 578.759692][T19207] veth1_vlan: left promiscuous mode [ 578.782368][T19207] veth0_vlan: left promiscuous mode [ 578.963144][T24137] netlink: 'syz.3.8450': attribute type 1 has an invalid length. [ 579.750526][T19207] team0 (unregistering): Port device team_slave_1 removed [ 579.835761][T19207] team0 (unregistering): Port device team_slave_0 removed [ 580.221856][T23996] chnl_net:caif_netlink_parms(): no params data found [ 580.272546][T18481] Bluetooth: hci2: command tx timeout [ 580.922173][T23996] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.953125][T23996] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.992265][T23996] bridge_slave_0: entered allmulticast mode [ 581.038545][T23996] bridge_slave_0: entered promiscuous mode [ 581.122685][T23996] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.169632][T23996] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.215806][T23996] bridge_slave_1: entered allmulticast mode [ 581.252357][T23996] bridge_slave_1: entered promiscuous mode [ 581.437383][T23996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.508051][T23996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.640989][T24287] netlink: 'syz.3.8470': attribute type 2 has an invalid length. [ 582.124406][T23996] team0: Port device team_slave_0 added [ 582.169434][T23996] team0: Port device team_slave_1 added [ 582.340367][T18481] Bluetooth: hci2: command tx timeout [ 582.378072][T23996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.410332][T24332] NFSD: Failed to start, no listeners configured. [ 582.450193][T23996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.566656][T23996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.651589][T23996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.699309][T23996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.812122][T23996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.045504][T23996] hsr_slave_0: entered promiscuous mode [ 583.066650][T24390] netlink: 'syz.3.8481': attribute type 1 has an invalid length. [ 583.097624][T23996] hsr_slave_1: entered promiscuous mode [ 584.409753][T18481] Bluetooth: hci2: command tx timeout [ 585.232724][T23996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.336394][T23996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.399572][T23996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.491857][T24551] openvswitch: netlink: Multiple metadata blocks provided [ 585.502798][T23996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.724621][T24564] syz_tun: tun_chr_ioctl cmd 1074025694 [ 585.970905][T23996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.085335][T23996] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.116260][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.116373][T18458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.146424][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.146514][T20572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.382877][T24581] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 587.154580][T23996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.409558][T23996] veth0_vlan: entered promiscuous mode [ 587.458947][T23996] veth1_vlan: entered promiscuous mode [ 587.635711][T23996] veth0_macvtap: entered promiscuous mode [ 587.677653][T24612] ======================================================= [ 587.677653][T24612] WARNING: The mand mount option has been deprecated and [ 587.677653][T24612] and is ignored by this kernel. Remove the mand [ 587.677653][T24612] option from the mount to silence this warning. [ 587.677653][T24612] ======================================================= [ 587.745657][T23996] veth1_macvtap: entered promiscuous mode [ 587.826798][T23996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.884098][T23996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.974956][T24615] HSR: entered promiscuous mode [ 588.096412][T18466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.171141][T18466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.250331][T18466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.259130][T18466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.640562][T18483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.696777][T18483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.857668][T20572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.916052][T20572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.077441][T23996] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 589.715068][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8538'. [ 589.828770][T24682] ucma_write: process 3934 (syz.3.8539) changed security contexts after opening file descriptor, this is not allowed. [ 590.551647][T24710] capability: warning: `syz.2.8549' uses 32-bit capabilities (legacy support in use) [ 591.300710][T24734] nbd: must specify a size in bytes for the device [ 593.547604][T18481] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 594.847801][T24858] openvswitch: netlink: Key type 261 is out of range max 32 [ 597.014079][T24924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 597.612842][T24940] NFSD: Failed to start, no listeners configured. [ 599.586383][T25009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8655'. [ 601.907110][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8688'. [ 602.816524][T25121] FAULT_INJECTION: forcing a failure. [ 602.816524][T25121] name failslab, interval 1, probability 0, space 0, times 0 [ 602.868274][T25121] CPU: 0 UID: 0 PID: 25121 Comm: syz.1.8701 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 602.868329][T25121] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 602.868344][T25121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 602.868358][T25121] Call Trace: [ 602.868366][T25121] [ 602.868374][T25121] dump_stack_lvl+0x100/0x190 [ 602.868417][T25121] should_fail_ex.cold+0x5/0xa [ 602.868447][T25121] should_failslab+0xc2/0x120 [ 602.868474][T25121] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 602.868512][T25121] ? alloc_empty_file+0x55/0x1c0 [ 602.868550][T25121] alloc_empty_file+0x55/0x1c0 [ 602.868582][T25121] alloc_file_pseudo+0x13a/0x230 [ 602.868616][T25121] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 602.868649][T25121] ? security_inode_init_security_anon+0x7b/0x230 [ 602.868686][T25121] __anon_inode_getfile+0xe8/0x280 [ 602.868723][T25121] new_userfaultfd+0x255/0x400 [ 602.868764][T25121] __x64_sys_userfaultfd+0x4b/0xb0 [ 602.868788][T25121] do_syscall_64+0x106/0xf80 [ 602.868812][T25121] ? clear_bhb_loop+0x40/0x90 [ 602.868841][T25121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.868865][T25121] RIP: 0033:0x7f78ae39c819 [ 602.868885][T25121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.868908][T25121] RSP: 002b:00007f78af25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 602.868930][T25121] RAX: ffffffffffffffda RBX: 00007f78ae615fa0 RCX: 00007f78ae39c819 [ 602.868945][T25121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 602.868959][T25121] RBP: 00007f78ae432c91 R08: 0000000000000000 R09: 0000000000000000 [ 602.868973][T25121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.868987][T25121] R13: 00007f78ae616038 R14: 00007f78ae615fa0 R15: 00007ffe9cc3bc58 [ 602.869024][T25121] [ 603.234209][T25129] netlink: ct family unspecified [ 605.977040][T25232] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 606.893029][T25278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.975710][T25280] : entered promiscuous mode [ 609.273364][T25358] netlink: Failed to add  helper -22 [ 612.779325][T25486] nfsd: Unknown parameter '*' [ 612.887197][T25488] tipc: Started in network mode [ 612.909855][T25488] tipc: Node identity ee00, cluster identity 4711 [ 612.937111][T25488] tipc: Node number set to 60928 [ 613.309990][T25502] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 613.418328][T25505] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 613.720677][T25515] netlink: Conntrack attr has 5 unknown bytes [ 615.359730][T25574] netlink: 'syz.1.8861': attribute type 1 has an invalid length. [ 616.933710][T25628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 618.848017][T18481] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 618.848048][T18481] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 618.864102][T18481] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 618.864163][T18481] Bluetooth: hci0: Malformed LE Event: 0x0d [ 618.952612][T25718] openvswitch: netlink: Message has 20 unknown bytes. [ 619.838959][T25738] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 621.405487][T18481] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 621.423135][T18481] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 621.423208][T18481] Bluetooth: hci2: Malformed LE Event: 0x0d [ 621.543137][T25799] FAULT_INJECTION: forcing a failure. [ 621.543137][T25799] name failslab, interval 1, probability 0, space 0, times 0 [ 621.595148][T25799] CPU: 0 UID: 0 PID: 25799 Comm: syz.2.8921 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 621.595203][T25799] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 621.595219][T25799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 621.595232][T25799] Call Trace: [ 621.595241][T25799] [ 621.595251][T25799] dump_stack_lvl+0x100/0x190 [ 621.595292][T25799] should_fail_ex.cold+0x5/0xa [ 621.595322][T25799] should_failslab+0xc2/0x120 [ 621.595349][T25799] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 621.595389][T25799] ? __d_alloc+0x34/0xa80 [ 621.595431][T25799] __d_alloc+0x34/0xa80 [ 621.595458][T25799] ? new_inode+0x15a/0x1c0 [ 621.595494][T25799] d_alloc_pseudo+0x1c/0xc0 [ 621.595531][T25799] alloc_file_pseudo+0xcf/0x230 [ 621.595565][T25799] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 621.595599][T25799] ? hugetlbfs_get_inode+0x36e/0x750 [ 621.595631][T25799] hugetlb_file_setup+0x2a8/0x5b0 [ 621.595663][T25799] ksys_mmap_pgoff+0x232/0x650 [ 621.595689][T25799] ? __UNIQUE_ID_modinfo_711+0x63e08673/0xffffffffffec9f73 [ 621.595734][T25799] ? __x64_sys_futex+0x358/0x4d0 [ 621.595768][T25799] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 621.595796][T25799] ? xfd_validate_state+0x129/0x190 [ 621.595838][T25799] __x64_sys_mmap+0x125/0x190 [ 621.595874][T25799] ? __UNIQUE_ID_modinfo_711+0x63e08673/0xffffffffffec9f73 [ 621.595920][T25799] do_syscall_64+0x106/0xf80 [ 621.595944][T25799] ? clear_bhb_loop+0x40/0x90 [ 621.595974][T25799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.596003][T25799] RIP: 0033:0x7f3de179c819 [ 621.596022][T25799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.596045][T25799] RSP: 002b:00007f3de2570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 621.596067][T25799] RAX: ffffffffffffffda RBX: 00007f3de1a15fa0 RCX: 00007f3de179c819 [ 621.596083][T25799] RDX: 0000000000000002 RSI: 0000000000000005 RDI: ffffffffff600700 [ 621.596097][T25799] RBP: 00007f3de1832c91 R08: 0000000000000401 R09: 0000300000000000 [ 621.596112][T25799] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 621.596126][T25799] R13: 00007f3de1a16038 R14: 00007f3de1a15fa0 R15: 00007ffd44a46d88 [ 621.596151][T25799] ? __UNIQUE_ID_modinfo_711+0x63e08673/0xffffffffffec9f73 [ 621.596198][T25799] [ 622.296603][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.312358][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.280034][T18481] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 623.280064][T18481] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 623.295310][T18481] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 623.295335][T18481] Bluetooth: hci3: adv larger than maximum supported [ 623.303438][T18481] Bluetooth: hci3: Unknown advertising packet type: 0x3d [ 623.312008][T18481] Bluetooth: hci3: adv larger than maximum supported [ 623.319348][T18481] Bluetooth: hci3: Malformed LE Event: 0x0d [ 623.825182][T25860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.468027][T25870] HfR: entered promiscuous mode [ 624.720154][T25882] netlink: 'syz.2.8944': attribute type 1 has an invalid length. [ 625.326105][T18481] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 625.326148][T18481] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 625.342096][T18481] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 625.342125][T18481] Bluetooth: hci1: Unknown advertising packet type: 0x3e [ 625.349236][T18481] Bluetooth: hci1: adv larger than maximum supported [ 625.356270][T18481] Bluetooth: hci1: Malformed LE Event: 0x0d [ 627.204150][T25945] netlink: NAT attribute has 4 unknown bytes [ 628.604590][T25996] openvswitch: netlink: IP tunnel dst address not specified [ 631.033405][T26099] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 631.597136][T26124] netlink: 'syz.1.9034': attribute type 2 has an invalid length. [ 632.623774][ T30] audit: type=1326 audit(4294967302.066:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.0.9045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb85319c819 code=0x0 [ 632.689923][T18481] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 633.045692][T26191] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9051'. [ 633.079874][T26191] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9051'. [ 635.487865][T26282] delete_channel: no stack [ 637.460881][T26362] [U] ^@ [ 637.644961][T26370] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 639.723609][T26435] NFSD: Failed to start, no listeners configured. [ 640.538311][T26467] netlink: 'syz.2.9158': attribute type 1 has an invalid length. [ 640.555046][T26466] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 640.583517][T26467] nbd: error processing sock list [ 640.913969][T26479] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 641.466307][T18481] Bluetooth: hci2: SCO packet too small [ 641.993333][T26520] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 643.254544][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9195'. [ 644.111829][T26590] blktrace: Concurrent blktraces are not allowed on loop2 [ 645.023754][T26635] netlink: 'syz.3.9214': attribute type 1 has an invalid length. [ 645.367203][T26642] nbd: must specify a device to reconfigure [ 646.203579][T26674] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 648.597002][T26758] netlink: 'syz.0.9262': attribute type 1 has an invalid length. [ 648.628808][T26758] netlink: 'syz.0.9262': attribute type 1 has an invalid length. [ 648.653725][T26758] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9262'. [ 648.684575][T26758] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9262'. [ 649.268169][T26775] FAULT_INJECTION: forcing a failure. [ 649.268169][T26775] name failslab, interval 1, probability 0, space 0, times 0 [ 649.380727][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.3.9268 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 649.380786][T26775] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 649.380801][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.380816][T26775] Call Trace: [ 649.380824][T26775] [ 649.380833][T26775] dump_stack_lvl+0x100/0x190 [ 649.380875][T26775] should_fail_ex.cold+0x5/0xa [ 649.380904][T26775] should_failslab+0xc2/0x120 [ 649.380932][T26775] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 649.380956][T26775] ? kstrdup_const+0x63/0x80 [ 649.380990][T26775] kstrdup+0x51/0xe0 [ 649.381014][T26775] kstrdup_const+0x63/0x80 [ 649.381044][T26775] alloc_vfsmnt+0xe5/0x6a0 [ 649.381075][T26775] ? clone_mnt+0x39/0x930 [ 649.381112][T26775] clone_mnt+0x4b/0x930 [ 649.381152][T26775] copy_tree+0xfc/0xbf0 [ 649.381177][T26775] ? __pfx_down_write+0x10/0x10 [ 649.381213][T26775] copy_mnt_ns+0x2bd/0xc30 [ 649.381243][T26775] ? create_new_namespaces+0x30/0xac0 [ 649.381270][T26775] ? rcu_is_watching+0x12/0xc0 [ 649.381313][T26775] create_new_namespaces+0xd3/0xac0 [ 649.381339][T26775] ? bpf_lsm_capable+0x9/0x10 [ 649.381366][T26775] ? security_capable+0x80/0x260 [ 649.381394][T26775] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 649.381424][T26775] ksys_unshare+0x473/0xad0 [ 649.381457][T26775] ? __pfx_ksys_unshare+0x10/0x10 [ 649.381501][T26775] __x64_sys_unshare+0x31/0x40 [ 649.381532][T26775] do_syscall_64+0x106/0xf80 [ 649.381555][T26775] ? clear_bhb_loop+0x40/0x90 [ 649.381585][T26775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.381610][T26775] RIP: 0033:0x7ff03119c819 [ 649.381629][T26775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.381652][T26775] RSP: 002b:00007ff03213b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 649.381675][T26775] RAX: ffffffffffffffda RBX: 00007ff031415fa0 RCX: 00007ff03119c819 [ 649.381690][T26775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 649.381704][T26775] RBP: 00007ff031232c91 R08: 0000000000000000 R09: 0000000000000000 [ 649.381718][T26775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.381732][T26775] R13: 00007ff031416038 R14: 00007ff031415fa0 R15: 00007fff0c430fa8 [ 649.381762][T26775] [ 652.558317][ T30] audit: type=1800 audit(4294967322.109:39): pid=26883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9302" name="dbroot" dev="configfs" ino=72171 res=0 errno=0 [ 656.180336][T26992] ================================================================== [ 656.180365][T26992] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 656.180412][T26992] Write of size 8 at addr ffffc90004009320 by task syz.2.9342/26992 [ 656.180442][T26992] [ 656.180455][T26992] CPU: 0 UID: 0 PID: 26992 Comm: syz.2.9342 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 656.180505][T26992] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 656.180520][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.180534][T26992] Call Trace: [ 656.180543][T26992] [ 656.180552][T26992] dump_stack_lvl+0x100/0x190 [ 656.180589][T26992] print_report+0x156/0x4c9 [ 656.180622][T26992] ? _raw_spin_lock_irqsave+0x52/0x60 [ 656.180660][T26992] ? __virt_addr_valid+0x81/0x620 [ 656.180695][T26992] ? sys_imageblit+0x19fb/0x1d60 [ 656.180732][T26992] kasan_report+0xdf/0x1e0 [ 656.180759][T26992] ? sys_imageblit+0x19fb/0x1d60 [ 656.180800][T26992] sys_imageblit+0x19fb/0x1d60 [ 656.180841][T26992] ? __pfx_sys_imageblit+0x10/0x10 [ 656.180880][T26992] ? prb_read_valid+0x78/0xa0 [ 656.180913][T26992] ? __pfx_prb_read_valid+0x10/0x10 [ 656.180948][T26992] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 656.180983][T26992] soft_cursor+0x524/0xa10 [ 656.181018][T26992] ? fb_get_color_depth+0x120/0x250 [ 656.181048][T26992] bit_cursor+0xe58/0x16f0 [ 656.181083][T26992] ? __pfx_bit_cursor+0x10/0x10 [ 656.181113][T26992] ? __lock_acquire+0x4a5/0x2630 [ 656.181148][T26992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.181174][T26992] ? get_color+0x1da/0x450 [ 656.181199][T26992] ? __pfx_bit_cursor+0x10/0x10 [ 656.181229][T26992] fbcon_cursor+0x43c/0x5e0 [ 656.181255][T26992] ? add_softcursor+0x1d0/0x290 [ 656.181298][T26992] set_cursor+0x1db/0x250 [ 656.181331][T26992] con_write+0x89/0xb0 [ 656.181352][T26992] n_tty_write+0x44f/0x12d0 [ 656.181387][T26992] ? __pfx_n_tty_write+0x10/0x10 [ 656.181415][T26992] ? __pfx_woken_wake_function+0x10/0x10 [ 656.181461][T26992] ? __pfx___might_resched+0x10/0x10 [ 656.181500][T26992] ? __pfx_n_tty_write+0x10/0x10 [ 656.181528][T26992] file_tty_write.isra.0+0x4d2/0x890 [ 656.181571][T26992] redirected_tty_write+0xd4/0x120 [ 656.181610][T26992] vfs_write+0x6ac/0x1070 [ 656.181634][T26992] ? __pfx_redirected_tty_write+0x10/0x10 [ 656.181674][T26992] ? __pfx_vfs_write+0x10/0x10 [ 656.181696][T26992] ? find_held_lock+0x2b/0x80 [ 656.181728][T26992] ksys_write+0x12a/0x250 [ 656.181750][T26992] ? __pfx_ksys_write+0x10/0x10 [ 656.181789][T26992] do_syscall_64+0x106/0xf80 [ 656.181813][T26992] ? clear_bhb_loop+0x40/0x90 [ 656.181840][T26992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.181865][T26992] RIP: 0033:0x7f3de179c819 [ 656.181884][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.181907][T26992] RSP: 002b:00007f3de2570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.181930][T26992] RAX: ffffffffffffffda RBX: 00007f3de1a15fa0 RCX: 00007f3de179c819 [ 656.181946][T26992] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 656.181960][T26992] RBP: 00007f3de1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 656.181975][T26992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.181989][T26992] R13: 00007f3de1a16038 R14: 00007f3de1a15fa0 R15: 00007ffd44a46d88 [ 656.182012][T26992] [ 656.182020][T26992] [ 656.182027][T26992] The buggy address belongs to a vmalloc virtual mapping [ 656.182043][T26992] Memory state around the buggy address: [ 656.182055][T26992] ffffc90004009200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 656.182079][T26992] ffffc90004009280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 656.182096][T26992] >ffffc90004009300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 656.182108][T26992] ^ [ 656.182121][T26992] ffffc90004009380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 656.182137][T26992] ffffc90004009400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 656.182150][T26992] ================================================================== [ 656.182169][T26992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 656.182187][T26992] CPU: 0 UID: 0 PID: 26992 Comm: syz.2.9342 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 656.182237][T26992] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 656.182252][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.182266][T26992] Call Trace: [ 656.182273][T26992] [ 656.182282][T26992] dump_stack_lvl+0x100/0x190 [ 656.182318][T26992] vpanic+0x552/0x970 [ 656.182340][T26992] ? __pfx_vpanic+0x10/0x10 [ 656.182363][T26992] ? __pfx_vprintk_emit+0x10/0x10 [ 656.182389][T26992] ? sys_imageblit+0x19fb/0x1d60 [ 656.182436][T26992] panic+0xd1/0xe0 [ 656.182458][T26992] ? __pfx_panic+0x10/0x10 [ 656.182484][T26992] ? sys_imageblit+0x19fb/0x1d60 [ 656.182524][T26992] check_panic_on_warn.cold+0x19/0x34 [ 656.182551][T26992] end_report.part.0+0x3a/0x90 [ 656.182585][T26992] kasan_report.cold+0xe/0x18 [ 656.182620][T26992] ? sys_imageblit+0x19fb/0x1d60 [ 656.182661][T26992] sys_imageblit+0x19fb/0x1d60 [ 656.182704][T26992] ? __pfx_sys_imageblit+0x10/0x10 [ 656.182744][T26992] ? prb_read_valid+0x78/0xa0 [ 656.182777][T26992] ? __pfx_prb_read_valid+0x10/0x10 [ 656.182813][T26992] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 656.182843][T26992] soft_cursor+0x524/0xa10 [ 656.182877][T26992] ? fb_get_color_depth+0x120/0x250 [ 656.182913][T26992] bit_cursor+0xe58/0x16f0 [ 656.182949][T26992] ? __pfx_bit_cursor+0x10/0x10 [ 656.182982][T26992] ? __lock_acquire+0x4a5/0x2630 [ 656.183017][T26992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.183043][T26992] ? get_color+0x1da/0x450 [ 656.183069][T26992] ? __pfx_bit_cursor+0x10/0x10 [ 656.183099][T26992] fbcon_cursor+0x43c/0x5e0 [ 656.183126][T26992] ? add_softcursor+0x1d0/0x290 [ 656.183162][T26992] set_cursor+0x1db/0x250 [ 656.183195][T26992] con_write+0x89/0xb0 [ 656.183216][T26992] n_tty_write+0x44f/0x12d0 [ 656.183251][T26992] ? __pfx_n_tty_write+0x10/0x10 [ 656.183280][T26992] ? __pfx_woken_wake_function+0x10/0x10 [ 656.183320][T26992] ? __pfx___might_resched+0x10/0x10 [ 656.183358][T26992] ? __pfx_n_tty_write+0x10/0x10 [ 656.183388][T26992] file_tty_write.isra.0+0x4d2/0x890 [ 656.183437][T26992] redirected_tty_write+0xd4/0x120 [ 656.183477][T26992] vfs_write+0x6ac/0x1070 [ 656.183500][T26992] ? __pfx_redirected_tty_write+0x10/0x10 [ 656.183543][T26992] ? __pfx_vfs_write+0x10/0x10 [ 656.183565][T26992] ? find_held_lock+0x2b/0x80 [ 656.183597][T26992] ksys_write+0x12a/0x250 [ 656.183620][T26992] ? __pfx_ksys_write+0x10/0x10 [ 656.183648][T26992] do_syscall_64+0x106/0xf80 [ 656.183672][T26992] ? clear_bhb_loop+0x40/0x90 [ 656.183700][T26992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.183726][T26992] RIP: 0033:0x7f3de179c819 [ 656.183743][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.183768][T26992] RSP: 002b:00007f3de2570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.183791][T26992] RAX: ffffffffffffffda RBX: 00007f3de1a15fa0 RCX: 00007f3de179c819 [ 656.183808][T26992] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 656.183825][T26992] RBP: 00007f3de1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 656.183845][T26992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.183860][T26992] R13: 00007f3de1a16038 R14: 00007f3de1a15fa0 R15: 00007ffd44a46d88 [ 656.183884][T26992] [ 656.183951][T26992] Kernel Offset: disabled