last executing test programs: 5m36.840004714s ago: executing program 1 (id=2895): socket(0x18, 0x5, 0x2) close_range$auto(0x2, 0x8, 0x0) 5m36.677500201s ago: executing program 1 (id=2899): fanotify_init$auto(0x5, 0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) 5m36.410584143s ago: executing program 1 (id=2905): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop11/hctx0/dispatch\x00', 0x101480, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 5m36.139714028s ago: executing program 1 (id=2912): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x5309, 0x38) 5m35.743675777s ago: executing program 1 (id=2921): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 5m34.407536729s ago: executing program 1 (id=2942): r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x40) 5m33.898476415s ago: executing program 32 (id=2942): r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x40) 4m32.333641478s ago: executing program 2 (id=4040): socket(0x26, 0x80805, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 4m32.172398055s ago: executing program 2 (id=4044): prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 4m31.612375686s ago: executing program 2 (id=4056): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c2, 0x1e2) 4m31.384963892s ago: executing program 2 (id=4061): r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80184947, 0x0) 4m31.287863161s ago: executing program 2 (id=4062): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 4m30.821797797s ago: executing program 2 (id=4069): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x40004580, 0x10000000000402) 4m30.462249358s ago: executing program 33 (id=4069): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x40004580, 0x10000000000402) 1.745636309s ago: executing program 0 (id=8838): mmap$auto(0x0, 0x2, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000340)=""/230, 0xe6) 1.657430062s ago: executing program 5 (id=8840): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0x2) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)) 1.596103234s ago: executing program 0 (id=8841): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140)="c48596dda5a72fc74d4a2340d1e5ed1e9a3625402333c91e491d1681bbaef0aeb600823566967c935f2dc9d7a36b9ed400c15888b89827d024dc2de502feea168e4cbec2f8c9bcee548142a65f54ad5e52fdee5b09cd163215", 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) 1.461497914s ago: executing program 5 (id=8844): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, r0) 1.460555881s ago: executing program 0 (id=8845): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) fsopen$auto(0x0, 0x1) 1.336271029s ago: executing program 5 (id=8847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25050000001c0001800800058004007d00100001800a"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) 1.166687682s ago: executing program 5 (id=8850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040085}, 0x40) 1.004157815s ago: executing program 5 (id=8854): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) read$auto(r0, 0x0, 0x10) 935.128945ms ago: executing program 0 (id=8855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r1, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) 871.643922ms ago: executing program 3 (id=8856): ioperm$auto(0x7, 0x6, 0x2) timer_create$auto(0x8, 0x0, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, 0x0) 773.658119ms ago: executing program 0 (id=8858): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) pread64$auto(r0, 0x0, 0xa8, 0x4) 709.861294ms ago: executing program 3 (id=8859): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x40) 681.918657ms ago: executing program 4 (id=8860): mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) 560.475625ms ago: executing program 0 (id=8861): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x7, 0x8c4c, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x3, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) exit$auto(0x6) poll$auto(&(0x7f0000000040)={0x3, 0x500, 0x5}, 0x5, 0x80000000) 495.353644ms ago: executing program 4 (id=8862): close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 438.341326ms ago: executing program 3 (id=8863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x24, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 363.046518ms ago: executing program 3 (id=8864): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) fsopen$auto(0x0, 0x1) 361.318217ms ago: executing program 4 (id=8872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x1c, r1, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0xfffffe9a, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040010) 270.364074ms ago: executing program 4 (id=8865): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setfsgid$auto(0xee01) 179.25254ms ago: executing program 4 (id=8866): ioperm$auto(0x6, 0x81, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syncfs$auto(r0) 118.251628ms ago: executing program 3 (id=8867): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioctl$auto(0x3, 0x80000541b, 0x38) 68.811304ms ago: executing program 4 (id=8868): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$auto(r0, 0x10f, 0x80, 0x0, 0x14) 34.400032ms ago: executing program 5 (id=8869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d4e3a", @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 0s ago: executing program 3 (id=8870): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r0, 0x5459, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 94.524160][ T5819] cgroup: Unknown subsys name 'net' [ 94.664223][ T5819] cgroup: Unknown subsys name 'cpuset' [ 94.673883][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.521133][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.180830][ T24] cfg80211: failed to load regulatory.db [ 101.304822][ T6110] mmap: syz.0.269 (6110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.360105][ T6193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.368878][ T6193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.379466][ T6193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.391447][ T6193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.420464][ T6193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.437387][ T6189] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.449084][ T6193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.458017][ T6193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.467272][ T6193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.491529][ T6193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.500181][ T6193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.509292][ T6193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.521768][ T6245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.530214][ T6193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.531299][ T6245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.545382][ T6245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.722750][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.731399][ T6193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.740183][ T6193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.748049][ T6193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.756732][ T6193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.766596][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.778140][ T6193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.786053][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.793852][ T6193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.801615][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.409807][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 111.453419][ T6242] chnl_net:caif_netlink_parms(): no params data found [ 111.632172][ T6247] chnl_net:caif_netlink_parms(): no params data found [ 111.699160][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.707075][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.714939][ T6248] bridge_slave_0: entered allmulticast mode [ 111.723351][ T6248] bridge_slave_0: entered promiscuous mode [ 111.746900][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.754143][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.761490][ T6242] bridge_slave_0: entered allmulticast mode [ 111.769554][ T6242] bridge_slave_0: entered promiscuous mode [ 111.805553][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.812848][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.820465][ T6248] bridge_slave_1: entered allmulticast mode [ 111.827888][ T6248] bridge_slave_1: entered promiscuous mode [ 111.836109][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.843712][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.850999][ T6242] bridge_slave_1: entered allmulticast mode [ 111.858704][ T6242] bridge_slave_1: entered promiscuous mode [ 111.981935][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.024978][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.037128][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.050915][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.108185][ T6240] chnl_net:caif_netlink_parms(): no params data found [ 112.176805][ T6242] team0: Port device team_slave_0 added [ 112.183284][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.191709][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.199721][ T6247] bridge_slave_0: entered allmulticast mode [ 112.207448][ T6247] bridge_slave_0: entered promiscuous mode [ 112.218383][ T6248] team0: Port device team_slave_0 added [ 112.236954][ T6242] team0: Port device team_slave_1 added [ 112.258642][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.266154][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.273795][ T6247] bridge_slave_1: entered allmulticast mode [ 112.282049][ T6247] bridge_slave_1: entered promiscuous mode [ 112.291450][ T6248] team0: Port device team_slave_1 added [ 112.406682][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.413775][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.440050][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.453217][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.462125][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.488563][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.502707][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.515932][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.533609][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.540812][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.567318][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.579532][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.586532][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.612860][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.624790][ T55] Bluetooth: hci0: command tx timeout [ 112.630815][ T55] Bluetooth: hci1: command tx timeout [ 112.714721][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.722507][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.730127][ T6240] bridge_slave_0: entered allmulticast mode [ 112.737543][ T6240] bridge_slave_0: entered promiscuous mode [ 112.751311][ T6247] team0: Port device team_slave_0 added [ 112.772088][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.779950][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.787351][ T6240] bridge_slave_1: entered allmulticast mode [ 112.795017][ T6240] bridge_slave_1: entered promiscuous mode [ 112.818370][ T6247] team0: Port device team_slave_1 added [ 112.847605][ T6248] hsr_slave_0: entered promiscuous mode [ 112.855034][ T6248] hsr_slave_1: entered promiscuous mode [ 112.860899][ T6245] Bluetooth: hci2: command tx timeout [ 112.866717][ T6245] Bluetooth: hci3: command tx timeout [ 112.946902][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.964434][ T6242] hsr_slave_0: entered promiscuous mode [ 112.971074][ T6242] hsr_slave_1: entered promiscuous mode [ 112.977346][ T6242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.985369][ T6242] Cannot create hsr debugfs directory [ 113.012163][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.019270][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.045533][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.061074][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.078941][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.086069][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.112469][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.230852][ T6240] team0: Port device team_slave_0 added [ 113.267285][ T6240] team0: Port device team_slave_1 added [ 113.362427][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.372107][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.399061][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.430951][ T6247] hsr_slave_0: entered promiscuous mode [ 113.437750][ T6247] hsr_slave_1: entered promiscuous mode [ 113.444452][ T6247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.452130][ T6247] Cannot create hsr debugfs directory [ 113.458719][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.466228][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.492189][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.699212][ T6240] hsr_slave_0: entered promiscuous mode [ 113.705756][ T6240] hsr_slave_1: entered promiscuous mode [ 113.712261][ T6240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.720070][ T6240] Cannot create hsr debugfs directory [ 113.907041][ T6248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.936543][ T6248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.963604][ T6248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.993062][ T6248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.101575][ T6242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.115620][ T6242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.129853][ T6242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.148299][ T6242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.264969][ T6247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.282072][ T6247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.294602][ T6247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.325334][ T6247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.412777][ T6240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.444257][ T6240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.456869][ T6240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.481455][ T6240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.592224][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.622659][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.641459][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.698518][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.705900][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.715350][ T6245] Bluetooth: hci1: command tx timeout [ 114.721762][ T55] Bluetooth: hci0: command tx timeout [ 114.737781][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.768138][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.775480][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.788499][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.795873][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.824178][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.831499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.867293][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.933801][ T6247] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.956393][ T6245] Bluetooth: hci3: command tx timeout [ 114.962635][ T55] Bluetooth: hci2: command tx timeout [ 114.966519][ T6248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.981704][ T6248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.011014][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.018198][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.047740][ T6242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.059901][ T6242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.106728][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.114120][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.177723][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.305888][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.348528][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.355848][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.417102][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.424400][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.509743][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.568128][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.683302][ T6242] veth0_vlan: entered promiscuous mode [ 115.736813][ T6242] veth1_vlan: entered promiscuous mode [ 115.821813][ T6248] veth0_vlan: entered promiscuous mode [ 115.846934][ T6248] veth1_vlan: entered promiscuous mode [ 115.952427][ T6242] veth0_macvtap: entered promiscuous mode [ 115.977361][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.028013][ T6242] veth1_macvtap: entered promiscuous mode [ 116.042464][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.053825][ T6248] veth0_macvtap: entered promiscuous mode [ 116.073299][ T6248] veth1_macvtap: entered promiscuous mode [ 116.116525][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.135247][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.146903][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.160834][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.185622][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.212268][ T6247] veth0_vlan: entered promiscuous mode [ 116.219414][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.233797][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.246374][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.254941][ T6248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.264479][ T6248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.273948][ T6248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.283510][ T6248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.316470][ T6242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.326515][ T6242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.335337][ T6242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.344780][ T6242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.366864][ T6247] veth1_vlan: entered promiscuous mode [ 116.414119][ T6240] veth0_vlan: entered promiscuous mode [ 116.478544][ T6240] veth1_vlan: entered promiscuous mode [ 116.575342][ T6247] veth0_macvtap: entered promiscuous mode [ 116.591387][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.602506][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.634768][ T6247] veth1_macvtap: entered promiscuous mode [ 116.653350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.666383][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.687272][ T6240] veth0_macvtap: entered promiscuous mode [ 116.752351][ T6240] veth1_macvtap: entered promiscuous mode [ 116.776334][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.780817][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.800482][ T6245] Bluetooth: hci1: command tx timeout [ 116.804180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.805927][ T6245] Bluetooth: hci0: command tx timeout [ 116.820366][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.830312][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.841339][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.853815][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.883624][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.894392][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.904991][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.915956][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.928269][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.947351][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.951075][ T6247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.964716][ T6247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.971070][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.975923][ T6247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.990198][ T6247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.015085][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.027022][ T6245] Bluetooth: hci3: command tx timeout [ 117.027032][ T55] Bluetooth: hci2: command tx timeout [ 117.038398][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.038421][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.038445][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.038463][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.038485][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.052351][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.166639][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.203284][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.233485][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.245180][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.255607][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.266626][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.291050][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.367817][ T6240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.409221][ T6240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.418379][ T6240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.448118][ T6240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.654138][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.680247][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.852745][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.893781][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.100191][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.129329][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.267225][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.288681][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.865739][ T55] Bluetooth: hci0: command tx timeout [ 118.865792][ T6245] Bluetooth: hci1: command tx timeout [ 119.101069][ T6245] Bluetooth: hci2: command tx timeout [ 119.112306][ T6245] Bluetooth: hci3: command tx timeout [ 122.259507][ T30] audit: type=1800 audit(1745618097.106:2): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.426" name="dummy_udc" dev="gadgetfs" ino=7533 res=0 errno=0 [ 122.662571][ T30] audit: type=1800 audit(1745618097.516:3): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="trace_pipe" dev="tracefs" ino=1175 res=0 errno=0 [ 124.361888][ T6539] random: crng reseeded on system resumption [ 128.140120][ T6679] Unable to find swap-space signature [ 132.392731][ T6846] ======================================================= [ 132.392731][ T6846] WARNING: The mand mount option has been deprecated and [ 132.392731][ T6846] and is ignored by this kernel. Remove the mand [ 132.392731][ T6846] option from the mount to silence this warning. [ 132.392731][ T6846] ======================================================= [ 133.343998][ T6889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.215961][ T6245] Bluetooth: hci0: unexpected event 0x17 length: 123 > 6 [ 135.445503][ T30] audit: type=1800 audit(1745618110.296:4): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.683" name="version" dev="configfs" ino=9982 res=0 errno=0 [ 135.694170][ T30] audit: type=1800 audit(1745618110.546:5): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="lu_gp_id" dev="configfs" ino=9999 res=0 errno=0 [ 137.004696][ T7053] capability: warning: `syz.1.718' uses deprecated v2 capabilities in a way that may be insecure [ 138.149648][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.156324][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.817960][ T30] audit: type=1800 audit(1745618115.666:6): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.804" name="trace_pipe" dev="tracefs" ino=1175 res=0 errno=0 [ 143.884017][ T7360] Unable to find swap-space signature [ 144.466874][ T6245] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 145.226713][ T7418] Unable to find swap-space signature [ 147.054890][ T6245] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 151.619437][ T7681] syz.3.1025(7681): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 151.991766][ T7697] syz_tun: tun_chr_ioctl cmd 2147767506 [ 153.028017][ T7736] syz.3.1052 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.116256][ T7811] Process accounting resumed [ 157.795125][ T7912] syz_tun: tun_chr_ioctl cmd 9 [ 157.850921][ T7857] kexec: Could not allocate control_code_buffer [ 159.888366][ T7938] kexec: Could not allocate control_code_buffer [ 162.143524][ T8007] kexec: Could not allocate control_code_buffer [ 164.129822][ T8123] nfs: Bad value for 'source' [ 164.447050][ T8083] kexec: Could not allocate control_code_buffer [ 166.581742][ T8159] kexec: Could not allocate control_code_buffer [ 167.382887][ T8244] can: request_module (can-proto-3) failed. [ 170.153466][ T8354] ima: policy update failed [ 170.159047][ T30] audit: type=1802 audit(1745619180.001:7): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1356" res=0 errno=0 [ 177.379493][ T6245] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 177.711752][ T8550] kexec: Could not allocate control_code_buffer [ 179.787599][ T6245] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 181.764047][ T8762] syz_tun: tun_chr_ioctl cmd 1074025678 [ 185.262785][ T8879] Process accounting paused [ 188.756662][ T9026] syz_tun: tun_chr_ioctl cmd 1074025681 [ 188.925314][ T30] audit: type=1800 audit(1032.546:8): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1695" name="members" dev="configfs" ino=17428 res=0 errno=0 [ 188.945031][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.103076][ T9037] Process accounting resumed [ 191.248284][ T9145] futex_wake_op: syz.3.1748 tries to shift op by 64; fix this program [ 191.563570][ T30] audit: type=1800 audit(1035.185:9): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1754" name="members" dev="configfs" ino=17603 res=0 errno=0 [ 192.278056][ T30] audit: type=1800 audit(1035.905:10): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1770" name="dbroot" dev="configfs" ino=16695 res=0 errno=0 [ 199.601807][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.608388][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.393518][ T9769] Unable to find swap-space signature [ 208.873401][ T30] audit: type=1800 audit(4294969360.486:11): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2137" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 213.313836][ T6245] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 215.233342][T10225] ptrace attach of "./syz-executor exec"[6248] was attempted by "./syz-executor exec"[10225] [ 215.384267][T10223] Process accounting resumed [ 215.406878][ T30] audit: type=1806 audit(4294969367.047:12): res=-14 [ 216.277209][T10263] usb usb15: usbfs: process 10263 (syz.2.2302) did not claim interface 0 before use [ 217.257417][T10307] vivid-003: ================= START STATUS ================= [ 217.289223][T10307] vivid-003: Radio HW Seek Mode: Bounded [ 217.295187][T10307] vivid-003: Radio Programmable HW Seek: false [ 217.310322][T10307] vivid-003: RDS Rx I/O Mode: Block I/O [ 217.316059][T10307] vivid-003: Generate RBDS Instead of RDS: false [ 217.328244][T10307] vivid-003: RDS Reception: true [ 217.340835][T10307] vivid-003: RDS Program Type: 0 inactive [ 217.347455][T10307] vivid-003: RDS PS Name: inactive [ 217.355569][T10307] vivid-003: RDS Radio Text: inactive [ 217.378034][T10307] vivid-003: RDS Traffic Announcement: false inactive [ 217.385865][T10307] vivid-003: RDS Traffic Program: false inactive [ 217.402859][T10307] vivid-003: RDS Music: false inactive [ 217.412930][T10307] vivid-003: ================== END STATUS ================== [ 217.544180][T10319] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 217.557651][T10319] ep_00: uevent: failed to send synthetic uevent: -22 [ 218.028641][ T6245] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 218.074100][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.081905][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.113912][T10386] warning: `syz.0.2363' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 219.175459][ T6245] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14 [ 219.208358][T10386] Process accounting paused [ 219.684735][T10412] ubi0: attaching mtd0 [ 219.692327][T10412] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 220.304644][T10444] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 220.880662][T10470] kAFS: No cell specified [ 221.888244][T10514] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 224.224151][T10619] vivid-007: ================= START STATUS ================= [ 224.233071][T10619] vivid-007: Generate PTS: true [ 224.240332][T10619] vivid-007: Generate SCR: true [ 224.240398][T10619] tpg source WxH: 640x360 (Y'CbCr) [ 224.240422][T10619] tpg field: 1 [ 224.240435][T10619] tpg crop: (0,0)/640x360 [ 224.240456][T10619] tpg compose: (0,0)/640x360 [ 224.240477][T10619] tpg colorspace: 8 [ 224.240490][T10619] tpg transfer function: 0/0 [ 224.240506][T10619] tpg Y'CbCr encoding: 0/0 [ 224.240521][T10619] tpg quantization: 0/0 [ 224.240536][T10619] tpg RGB range: 0/2 [ 224.240552][T10619] vivid-007: ================== END STATUS ================== [ 227.807003][T10769] syz.0.2552 uses obsolete (PF_INET,SOCK_PACKET) [ 228.617015][T10800] sysfs_service_op_store: Client not running :-5: [ 229.736975][T10847] ima: policy update failed [ 229.744651][ T30] audit: type=1802 audit(4294969381.454:13): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2592" res=0 errno=0 [ 230.445615][T10889] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 230.614602][T10894] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 231.073991][ T30] audit: type=1806 audit(4294969382.780:14): xattr=2EC7871B res=-22 [ 231.471825][T10931] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 231.877148][ T6245] Bluetooth: hci2: Malformed Event: 0x13 [ 233.319250][T11026] aoe: invalid device specification [ 236.501505][T11189] block nbd14: the capability attribute has been deprecated. [ 236.822465][T11203] syz_tun: tun_chr_ioctl cmd 35108 [ 237.347365][T11126] Bluetooth: hci1: command 0x0406 tx timeout [ 237.353933][T11126] Bluetooth: hci0: command 0x0406 tx timeout [ 237.360174][T11126] Bluetooth: hci2: command 0x0406 tx timeout [ 237.366552][T11126] Bluetooth: hci3: command 0x0406 tx timeout [ 237.676664][T11249] ICMPv6: process `syz.3.2775' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 238.438099][T11282] delete_channel: no stack [ 239.032316][T11314] zram: Added device: zram1 [ 240.464777][T11378] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 240.625084][T11383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.480032][T11512] zram: Added device: zram2 [ 243.838818][T11530] block nbd8: NBD_DISCONNECT [ 243.960174][T11537] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.893891][ T197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.050536][ T197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.265205][ T197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.284309][T11579] Process accounting paused [ 245.442093][ T197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.835998][ T197] bridge_slave_1: left allmulticast mode [ 245.859330][ T197] bridge_slave_1: left promiscuous mode [ 245.873038][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.889947][ T197] bridge_slave_0: left allmulticast mode [ 245.897568][ T197] bridge_slave_0: left promiscuous mode [ 245.907320][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.877749][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.896461][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.905916][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.928952][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.937434][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.141615][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.196937][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.239882][ T197] bond0 (unregistering): Released all slaves [ 248.328632][ T197] hsr_slave_0: left promiscuous mode [ 248.365509][ T197] hsr_slave_1: left promiscuous mode [ 248.385514][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.417792][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.441544][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.478782][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.565733][ T197] veth1_macvtap: left promiscuous mode [ 248.571704][ T197] veth0_macvtap: left promiscuous mode [ 248.605075][ T197] veth1_vlan: left promiscuous mode [ 248.610658][ T197] veth0_vlan: left promiscuous mode [ 248.988170][ T5143] Bluetooth: hci1: command tx timeout [ 249.816391][ T197] team0 (unregistering): Port device team_slave_1 removed [ 249.935996][ T197] team0 (unregistering): Port device team_slave_0 removed [ 251.043352][ T5143] Bluetooth: hci1: command tx timeout [ 251.096134][T11629] chnl_net:caif_netlink_parms(): no params data found [ 251.119762][T11715] Process accounting resumed [ 251.397037][T11786] synth uevent: /devices/virtual/tty/tty19: unknown uevent action string [ 251.408543][T11786] tty tty19: uevent: failed to send synthetic uevent: -22 [ 251.514723][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.533905][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.558378][T11629] bridge_slave_0: entered allmulticast mode [ 251.566385][T11629] bridge_slave_0: entered promiscuous mode [ 251.597118][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.621496][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.642163][T11629] bridge_slave_1: entered allmulticast mode [ 251.656798][T11629] bridge_slave_1: entered promiscuous mode [ 251.765421][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.802973][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.944819][T11629] team0: Port device team_slave_0 added [ 251.973718][T11629] team0: Port device team_slave_1 added [ 252.186376][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.207396][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.283664][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.322990][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.330213][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.364565][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.555338][T11629] hsr_slave_0: entered promiscuous mode [ 252.585316][T11629] hsr_slave_1: entered promiscuous mode [ 252.591839][T11629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.642883][T11629] Cannot create hsr debugfs directory [ 252.650729][T11790] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 252.767788][T11828] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 252.767788][T11828] [ 253.117153][ T5143] Bluetooth: hci1: command tx timeout [ 253.485369][T11629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.528223][T11629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.560430][T11629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.567909][T11856] deleting an unspecified loop device is not supported. [ 253.612006][T11629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.945772][T11629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.023507][T11629] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.083693][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.091053][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.139084][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.146442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.966362][T11629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.187110][ T5143] Bluetooth: hci1: command tx timeout [ 255.855368][T11629] veth0_vlan: entered promiscuous mode [ 255.900013][T11629] veth1_vlan: entered promiscuous mode [ 256.022794][T11629] veth0_macvtap: entered promiscuous mode [ 256.070722][T11629] veth1_macvtap: entered promiscuous mode [ 256.145249][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.185786][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.206433][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.246132][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.265831][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.285723][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.317311][T11629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.351015][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.365004][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.377359][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.421273][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.441859][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.472627][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.487822][T11629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.560770][T11629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.592472][T11629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.624157][T11629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.652830][T11629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.988582][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.003365][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.086966][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.124108][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.765246][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.772051][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.832645][T12170] Scaler: ================= START STATUS ================= [ 261.865938][T12170] Scaler: ================== END STATUS ================== [ 264.690529][T12291] Setting dangerous option i915.mitigations - tainting kernel [ 266.310446][T12349] delete_channel: no stack [ 266.752589][T12373] [ 268.853889][T12464] ima: policy update failed [ 268.892571][ T30] audit: type=1802 audit(4294969420.788:15): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3290" res=0 errno=0 [ 270.566952][T12548] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 272.319886][T12631] QAT: Invalid ioctl 21531 [ 273.229545][T12688] dyndbg: bad flag-op , at start of [ 273.235105][T12688] dyndbg: flags parse failed [ 273.291475][T12688] dyndbg: bad flag-op , at start of [ 273.320226][T12688] dyndbg: flags parse failed [ 275.300812][T12785] Process accounting resumed [ 281.114381][T13065] Process accounting paused [ 281.583545][T13097] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 282.452424][T13135] syz.2.3548 (13135): drop_caches: 0 [ 282.885028][T13158] WARNING! power/level is deprecated; use power/control instead [ 287.027732][ T30] audit: type=1807 audit(4294969439.003:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 287.055488][T13361] ima: policy update failed [ 287.066919][ T30] audit: type=1802 audit(4294969439.023:17): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3650" res=0 errno=0 [ 287.115018][T13367] Invalid input. Must be >= 4608 [ 287.132423][ T30] audit: type=1802 audit(4294969439.033:18): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3650" res=0 errno=0 [ 288.796353][T13450] ecryptfs_miscdev_write: Invalid packet size [192] [ 289.290116][T13476] i2c i2c-0: new_device: Missing parameters [ 289.495318][T13486] syz_tun: tun_chr_ioctl cmd 2147767519 [ 290.720548][T13543] ubi0: attaching mtd0 [ 290.724922][T13543] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 291.390438][T13575] Line length is too long: Should be less than 4094 [ 293.437338][T13670] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 294.750273][T13716] ubi0: attaching mtd0 [ 294.765479][T13716] ubi0: scanning is finished [ 294.775815][T13716] ubi0: empty MTD device detected [ 294.785945][T13716] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 294.945989][T13716] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 297.164442][T13793] ima: policy update failed [ 297.193167][ T30] audit: type=1802 audit(4294969449.211:19): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3852" res=0 errno=0 [ 300.228139][T13887] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 300.254919][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.263229][T13887] CIFS mount error: No usable UNC path provided in device string! [ 300.263229][T13887] [ 300.274920][T13887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.705054][ T5143] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 302.293782][T13996] Process accounting resumed [ 306.606007][T14161] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 307.126456][ T30] audit: type=1800 audit(4294967300.144:20): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4027" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 307.589414][T14204] bond0: Unable to set down delay as MII monitoring is disabled [ 307.808592][T14214] < [ 308.578413][T14246] usb usb2: usbfs: process 14246 (syz.3.4060) did not claim interface 1 before use [ 309.024820][T14265] nvme_fabrics: missing parameter 'transport=%s' [ 309.034927][T14265] nvme_fabrics: missing parameter 'nqn=%s' [ 309.261733][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.359394][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.451911][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.617317][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.993610][ T13] bridge_slave_1: left allmulticast mode [ 310.020402][ T13] bridge_slave_1: left promiscuous mode [ 310.029321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.104225][ T13] bridge_slave_0: left allmulticast mode [ 310.111187][ T13] bridge_slave_0: left promiscuous mode [ 310.128575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.356050][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.368223][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.376964][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.392326][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.400440][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.212697][T14353] Process accounting resumed [ 311.690760][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.765762][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.793359][ T13] bond0 (unregistering): Released all slaves [ 312.522288][ T6193] Bluetooth: hci3: command tx timeout [ 312.570977][ T13] hsr_slave_0: left promiscuous mode [ 312.603226][ T13] hsr_slave_1: left promiscuous mode [ 312.611881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.658063][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.704050][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.719654][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.799926][ T13] veth1_macvtap: left promiscuous mode [ 312.816914][ T13] veth0_macvtap: left promiscuous mode [ 312.823838][ T13] veth1_vlan: left promiscuous mode [ 312.835597][ T13] veth0_vlan: left promiscuous mode [ 314.039600][ T13] team0 (unregistering): Port device team_slave_1 removed [ 314.116523][ T13] team0 (unregistering): Port device team_slave_0 removed [ 314.583001][ T6193] Bluetooth: hci3: command tx timeout [ 315.649814][T14317] chnl_net:caif_netlink_parms(): no params data found [ 316.208831][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.227424][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.251409][T14317] bridge_slave_0: entered allmulticast mode [ 316.273166][T14317] bridge_slave_0: entered promiscuous mode [ 316.311234][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.352713][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.365495][T14317] bridge_slave_1: entered allmulticast mode [ 316.387277][T14317] bridge_slave_1: entered promiscuous mode [ 316.577213][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.610324][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.652573][ T6193] Bluetooth: hci3: command tx timeout [ 316.801574][T14317] team0: Port device team_slave_0 added [ 316.851486][T14317] team0: Port device team_slave_1 added [ 317.003485][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.021641][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.054781][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.151962][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.159083][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.223375][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.474168][T14317] hsr_slave_0: entered promiscuous mode [ 317.503334][T14317] hsr_slave_1: entered promiscuous mode [ 318.466056][T14317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.507291][T14317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.569283][T14317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.611096][T14958] ICMPv6: process `syz.3.4197' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 318.636741][T14317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.723479][ T6193] Bluetooth: hci3: command tx timeout [ 318.956430][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.031411][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.072159][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.079388][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.134608][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.141879][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.792033][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.069266][T15018] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 320.545787][T14317] veth0_vlan: entered promiscuous mode [ 320.581436][T14317] veth1_vlan: entered promiscuous mode [ 320.691811][T14317] veth0_macvtap: entered promiscuous mode [ 320.739577][T14317] veth1_macvtap: entered promiscuous mode [ 320.826736][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.857341][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.890969][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.932296][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.961835][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.991819][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.014928][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.047813][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.081976][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.107870][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.146252][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.171245][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.198860][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.233078][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.276723][T14317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.310163][T14317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.319604][T14317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.358137][T14317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.647576][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.682162][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.773813][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.794027][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.917860][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.924694][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.399446][ T30] audit: type=1800 audit(4294967316.491:21): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4255" name="lu_gp_id" dev="configfs" ino=34929 res=0 errno=0 [ 324.415564][T15200] Setting dangerous option i915.mitigations - tainting kernel [ 324.575972][T15207] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 326.401577][T15277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.656698][T15277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.799077][T15277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.977442][T15277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.711626][ T6193] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 331.864715][ T30] audit: type=1800 audit(4294967325.000:22): pid=15525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4387" name="discovery_nqn" dev="configfs" ino=36226 res=0 errno=0 [ 333.112538][T15591] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 333.761026][T15624] [U] y [ 333.780723][T15624] [U] 9zG-aoP]:]V [ 334.147984][T15636] Setting dangerous option i915.mitigations - tainting kernel [ 334.168322][T15636] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 334.654068][T15656] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 336.308131][T15732] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 337.003765][T15761] nfsd: Unknown parameter '^B-' [ 338.380366][T15814] block2mtd: illegal erase size syzkaller syzkaller login: [ 339.673014][T15878] nvme_fcloop: unknown parameter or missing value '7' [ 340.795050][T15932] synth uevent: /bus/memstick: unknown uevent action string [ 341.313854][T15948] Process accounting paused syzkaller syzkaller login: [ 344.342151][T16086] [U] UU|@3*gv SdbƱ)݄spAg?hQBerf2h] [ 344.381846][T16086] [U] rPt5i}HmԺ9(e\O7MV*n bB+w [ 344.492161][T16086] [U] 7ϋ Bj$U-X&/?2`%w?ϺŰh\w [ 344.500355][T16086] [U] R!Cu+򳃇.S96b>Ö{ [ 344.542484][T16086] [U] oP=jW5^%W\c _H@~Ί|lO[%ao [ 344.561461][T16086] [U] kUdR_?.Y"?oQqD;`N0QB۲* `@;^'g}5r>LJ+@<ÿcAU`A}}Hi%?`zga/:}?4>A.U>ʭX qn\2q2}ƼcJFQ9mFdÕŲG8y̵eFfq4\Z5<.+7&W^axԅRmw\2LvJe.6 [ 344.760076][T16086] [U] =\2n|OFϊ`zi(k5eĢHW7g"/Mu)*/˓%jRUTmIJ7M5JH [ 344.778756][T16086] [U] QU~A%z [ 344.802639][T16086] [U] o{\UcK!>o{n(x/ [ 344.808144][T16086] [U] PDٛ9&a4 ầ*0.`R~m~(C+y7&O/-RR2 [ 344.848768][T16086] [U] oj3KQu)n·Eb=]$B$6;e [ 344.875740][T16086] [U] P/΂?R~T"Ds6f"~a$wBN< 8|{\yg.LĘ«sX [ 344.895836][T16086] [U] vVt۳z?|M2 [ 344.914215][T16086] [U] Z{:n#c98Jk}G=\fd]*Iїj0[?b2BiET=6` BJcF0#6 rWE([LFᦺ qdI{ qbM{dx*3:ЛU4=`K0I [ 344.969031][T16086] [U] F`8ӗNh+UZ%n؀3-5s$J}RwݬJ4v\&9) [ 344.998284][T16086] [U] Yu@%SL<i֦WEq*IH [ 345.033507][T16086] [U] mV.άnZtUN=EF˙2~30^_$Lt5҈ͭV|6N ;Ҧ֨oy*]پ 5GFq{ёu-4CD0==%IEO`"S&駡' VxD`9LE^+zRM! [ 345.161251][T16086] [U] pncN23{(?PbzԐ [ 345.203707][T16086] [U] 9 xN%ɓR~1:OYmZ?sL-Vi/铰T4sT^k]Z{ah]! :t!)tmr," 1={N\ [ 345.237349][T16086] [U] O 260 [ 356.965148][ T5143] Bluetooth: hci0: unexpected subevent 0x05 length: 725 > 12 [ 359.019499][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 366.870763][T17202] delete_channel: no stack [ 367.910626][T17255] [U] UU|@3*gv SdbƱ)݄spAgPBp [ 368.127276][ T30] audit: type=1806 audit(4294967361.431:24): xattr="" res=-22 [ 369.591192][ T10] Process accounting resumed [ 369.842641][ T6193] Bluetooth: hci1: command 0x0406 tx timeout [ 375.215170][ T30] audit: type=1800 audit(4294967368.554:25): pid=17572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5157" name="dbroot" dev="configfs" ino=41276 res=0 errno=0 [ 375.231595][T17572] db_root: not a directory: /dev/audio1 [ 375.392284][ T5143] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 375.392328][ T5143] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 375.484437][T17583] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 376.751364][T17638] syz.4.5185: vmalloc error: size 141863388262170624, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.799605][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.4.5185 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 376.799658][T17638] Tainted: [U]=USER [ 376.799669][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 376.799692][T17638] Call Trace: [ 376.799703][T17638] [ 376.799719][T17638] dump_stack_lvl+0x16c/0x1f0 [ 376.799762][T17638] warn_alloc+0x248/0x3a0 [ 376.799797][T17638] ? __pfx_warn_alloc+0x10/0x10 [ 376.799842][T17638] ? check_path.constprop.0+0x24/0x50 [ 376.799902][T17638] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 376.799973][T17638] ? disksize_store+0x117/0x670 [ 376.800024][T17638] ? __pfx___might_resched+0x10/0x10 [ 376.800059][T17638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.800117][T17638] ? down_write+0x14d/0x200 [ 376.800159][T17638] ? __pfx_down_write+0x10/0x10 [ 376.800200][T17638] ? disksize_store+0x117/0x670 [ 376.800243][T17638] vzalloc_noprof+0x6b/0x90 [ 376.800300][T17638] ? disksize_store+0x117/0x670 [ 376.800345][T17638] disksize_store+0x117/0x670 [ 376.800396][T17638] ? __pfx_disksize_store+0x10/0x10 [ 376.800438][T17638] dev_attr_store+0x55/0x80 [ 376.800475][T17638] ? __pfx_dev_attr_store+0x10/0x10 [ 376.800511][T17638] sysfs_kf_write+0xef/0x150 [ 376.800560][T17638] kernfs_fop_write_iter+0x351/0x510 [ 376.800599][T17638] ? __pfx_sysfs_kf_write+0x10/0x10 [ 376.800649][T17638] vfs_write+0x5ba/0x1180 [ 376.800680][T17638] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 376.800724][T17638] ? __pfx___mutex_lock+0x10/0x10 [ 376.800763][T17638] ? __pfx_vfs_write+0x10/0x10 [ 376.800821][T17638] ksys_write+0x12a/0x240 [ 376.800850][T17638] ? __pfx_ksys_write+0x10/0x10 [ 376.800876][T17638] ? rcu_is_watching+0x12/0xc0 [ 376.800919][T17638] do_syscall_64+0xcd/0x230 [ 376.800962][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.800995][T17638] RIP: 0033:0x7f21e5d8e969 [ 376.801030][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.801062][T17638] RSP: 002b:00007f21e6b22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.801094][T17638] RAX: ffffffffffffffda RBX: 00007f21e5fb5fa0 RCX: 00007f21e5d8e969 [ 376.801115][T17638] RDX: 0000000000000006 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 376.801135][T17638] RBP: 00007f21e5e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 376.801154][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.801172][T17638] R13: 0000000000000000 R14: 00007f21e5fb5fa0 R15: 00007ffdc2d54638 [ 376.801216][T17638] [ 376.801582][T17638] Mem-Info: [ 377.087588][T17638] active_anon:16256 inactive_anon:0 isolated_anon:0 [ 377.087588][T17638] active_file:15662 inactive_file:38215 isolated_file:0 [ 377.087588][T17638] unevictable:768 dirty:460 writeback:0 [ 377.087588][T17638] slab_reclaimable:10405 slab_unreclaimable:97636 [ 377.087588][T17638] mapped:32268 shmem:11162 pagetables:1033 [ 377.087588][T17638] sec_pagetables:0 bounce:0 [ 377.087588][T17638] kernel_misc_reclaimable:0 [ 377.087588][T17638] free:1333322 free_pcp:1155 free_cma:0 [ 377.159948][T17638] Node 0 active_anon:63224kB inactive_anon:0kB active_file:62588kB inactive_file:152856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129012kB dirty:1836kB writeback:0kB shmem:44212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10764kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.201699][T17638] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.247609][T17638] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.311539][T17638] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 377.325759][T17638] Node 0 DMA32 free:1408952kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:63928kB inactive_anon:0kB active_file:62588kB inactive_file:151028kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:3184kB local_pcp:2444kB free_cma:0kB [ 377.381480][T17638] lowmem_reserve[]: 0 0 1 1 1 [ 377.386516][T17638] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 377.439629][T17638] lowmem_reserve[]: 0 0 0 0 0 [ 377.459545][T17638] Node 1 Normal free:3912296kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:4kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 377.520147][T17638] lowmem_reserve[]: 0 0 0 0 0 [ 377.529517][T17638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.625887][T17638] Node 0 DMA32: 324*4kB (UME) 260*8kB (UME) 94*16kB (UE) 20*32kB (UE) 18*64kB (UME) 84*128kB (ME) 177*256kB (UME) 110*512kB (UME) 54*1024kB (UME) 8*2048kB (UM) 296*4096kB (UM) = 1403152kB [ 377.685068][T17638] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 377.713047][T17638] Node 1 Normal: 210*4kB (UME) 60*8kB (UME) 34*16kB (UME) 195*32kB (UME) 83*64kB (UME) 32*128kB (UME) 22*256kB (UME) 8*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3912296kB [ 377.774673][T17638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.784678][T17663] udc dummy_udc.0: soft-connect without a gadget driver [ 377.785203][T17638] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 377.826598][T17638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.848321][T17638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.868259][T17638] 67997 total pagecache pages [ 377.877626][T17638] 0 pages in swap cache [ 377.882414][T17638] Free swap = 124996kB [ 377.905104][T17638] Total swap = 124996kB [ 377.909343][T17638] 2097051 pages RAM [ 377.913273][T17638] 0 pages HighMem/MovableOnly [ 377.928319][T17638] 428892 pages reserved [ 377.932563][T17638] 0 pages cma reserved [ 382.579902][T17883] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 382.597812][T17882] ima: policy update failed [ 382.621942][ T30] audit: type=1802 audit(4294967375.989:26): pid=17882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5293" res=0 errno=0 [ 383.073551][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.089733][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.951718][T17936] syz_tun: tun_chr_ioctl cmd 1074025694 [ 384.289290][T17944] [ 389.314575][T18179] ptrace attach of "./syz-executor exec"[14317] was attempted by "./syz-executor exec"[18179] [ 390.513179][T18203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.542911][T18203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 390.697992][T18203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.730900][T18203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 390.791020][T18203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 390.838135][T18203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.873641][T18203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 390.961570][T18203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.008586][T18203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 391.061018][T18203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 391.986764][T18329] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 392.003426][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 392.696498][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 392.863913][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 393.023306][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.054369][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 394.774804][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 394.924215][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 395.083693][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.206755][T18500] i2c i2c-0: new_device: Invalid device name [ 396.132977][T18531] bond0: option packets_per_slave: invalid value ( Xnp) [ 396.146484][T18531] bond0: option packets_per_slave: allowed values 0 - 65535 [ 396.851595][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 397.153762][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 398.013067][T18573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.028384][T18623] aoe: copy from user failed [ 398.034949][T18573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.043790][T18573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.050085][T18623] aoe: could not set interface list: too many interfaces [ 398.074080][T18573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.776964][T18662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.797884][T18662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.821577][T18662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.831388][T18662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.135091][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 401.861552][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 401.861579][ T6193] Bluetooth: hci1: command 0x0406 tx timeout [ 401.867661][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 403.111402][T18854] syz.0.5641 (18854): attempted to duplicate a private mapping with mremap. This is not supported. [ 404.010825][ T30] audit: type=1400 audit(4294967397.480:27): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18894 comm="syz.0.5660" [ 405.736579][T18958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.746560][T18958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.775117][T18958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.794661][T18958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.030823][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 407.749421][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 407.823525][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 407.829664][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 409.721213][T19199] ICMPv6: process `syz.5.5781' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 410.051046][ T30] audit: type=1800 audit(4294967403.548:28): pid=19214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5787" name="dbroot" dev="configfs" ino=44753 res=0 errno=0 [ 411.297750][T19276] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 413.855438][T19406] delete_channel: no stack [ 414.816463][T19442] tipc: Can't bind to reserved service type 1 [ 416.265219][T19515] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 416.383861][T19519] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate) [ 416.423403][T19519] bond0: option lp_interval: allowed values 1 - 2147483647 [ 419.928494][T19668] nvme_fcloop: unknown parameter or missing value '^/]' [ 420.721675][ T30] audit: type=1800 audit(4294967414.268:29): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6012" name="members" dev="configfs" ino=46624 res=0 errno=0 [ 420.951538][T19717] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 421.462811][T19743] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 421.487068][T19746] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 428.793665][T20073] mmap: syz.4.6170 (20073): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 429.243108][T20097] ima: policy update failed [ 429.256162][ T30] audit: type=1802 audit(4294967422.838:30): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6178" res=0 errno=0 [ 429.455884][T20105] : Can't lookup blockdev [ 430.709578][T20165] Debayer A: ================= START STATUS ================= [ 430.756858][T20165] Debayer A: Debayer Mean Window Size: 3 [ 430.775842][T20165] Debayer A: ================== END STATUS ================== [ 430.963547][T20175] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 431.815080][ T5143] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 433.036956][T20288] CIFS mount error: No usable UNC path provided in device string! [ 433.036956][T20288] [ 433.078794][T20288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 434.057326][T20340] blkio.reset_stats is deprecated [ 435.174156][T20392] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 435.174156][T20392] program syz.4.6296 not setting count and/or reply_len properly [ 436.181898][T20434] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 437.032069][T20479] vivid-007: ================= START STATUS ================= [ 437.040082][T20479] vivid-007: Enable Output Cropping: true [ 437.052615][T20479] vivid-007: Enable Output Composing: true [ 437.056578][T20478] writes to the poll attribute are ignored. [ 437.059652][T20479] vivid-007: Enable Output Scaler: true [ 437.078198][T20479] vivid-007: Tx RGB Quantization Range: Automatic [ 437.079717][T20478] please use driver specific parameters instead. [ 437.084704][T20479] vivid-007: Transmit Mode: HDMI [ 437.096832][T20479] vivid-007: Hotplug Present: 0x00000000 [ 437.102775][T20479] vivid-007: RxSense Present: 0x00000000 [ 437.126060][T20479] vivid-007: EDID Present: 0x00000000 [ 437.136220][T20479] vivid-007: ================== END STATUS ================== [ 437.419498][T20492] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 442.963743][T20769] program syz.3.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.170739][T20830] queue_state_write: unsupported operation '' [ 444.180814][T20830] queue_state_write: use 'run', 'start' or 'kick' [ 444.219922][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.226972][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.042419][T20874] sysfs_service_op_show: Client not running :-5: [ 446.448276][T20945] kAFS: Invalid Command on /proc/fs/afs/cells file [ 447.830550][T21017] kAFS: Invalid Command on /proc/fs/afs/cells file [ 448.483930][ T30] audit: type=1800 audit(4294967442.169:31): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6587" name="lu_gp_id" dev="configfs" ino=50670 res=0 errno=0 [ 448.520298][T21050] kstrtoul() returned -22 for lu_gp_id [ 448.697603][T21060] bond0: no command found in slaves file - use +ifname or -ifname [ 449.548839][T21103] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 449.652757][ T30] audit: type=1800 audit(4294967443.344:32): pid=21108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6613" name="discovery_nqn" dev="configfs" ino=50767 res=0 errno=0 [ 450.345463][T21144] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 452.365632][ T5143] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 452.406498][T21223] Invalid ELF header magic: != ELF [ 458.661138][T21463] syz_tun: tun_chr_ioctl cmd 1074025692 [ 460.708843][T21551] rtc_cmos 00:00: Alarms can be up to one day in the future [ 461.236823][T21575] : Can't lookup blockdev [ 462.070369][T21615] rnbd_client L213: map_device: Parameters missing [ 462.853924][T21652] queue_state_write: operation too long [ 462.864010][T21652] queue_state_write: use 'run', 'start' or 'kick' [ 465.198412][T21759] kafs: addr_prefs: Too many elements in string [ 466.152542][T21800] program syz.3.6925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.364889][T21811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6929'. [ 467.865525][T21885] futex_wake_op: syz.0.6965 tries to shift op by 64; fix this program [ 468.010644][T21892] kafs: addr_prefs: Invalid Command [ 468.352781][T21907] usbip-vudc usbip-vudc.0: gadget not bound [ 470.321583][T22003] usb usb24: check_ctrlrecip: process 22003 (syz.0.7026) requesting ep 01 but needs 81 [ 470.361062][T22003] usb usb24: usbfs: process 22003 (syz.0.7026) did not claim interface 0 before use [ 472.933814][T22100] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 473.691500][T22137] block2mtd: device name too long [ 475.302500][ T30] audit: type=1807 audit(4294967469.115:33): UNKNOWN= res=0 [ 475.322512][T22194] ima: policy update failed [ 475.337029][ T30] audit: type=1802 audit(4294967469.135:34): pid=22195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.7121" res=0 errno=0 [ 475.392975][ T30] audit: type=1802 audit(4294967469.185:35): pid=22194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.7121" res=0 errno=0 [ 477.064757][T22278] bond0: option mode: unable to set because the bond device is up [ 479.476737][T22395] usbcore.quirks: string doesn't fit in 127 chars. [ 482.231159][T22530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 484.908268][T22636] program syz.4.7324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.941118][T22636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 484.970081][T22639] program syz.0.7325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.558983][T22666] block2mtd: device name too long [ 486.607810][T22715] kAFS: unparsable volume name [ 487.428840][ T5143] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 491.238240][ T30] audit: type=1400 audit(4294967485.120:36): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=22929 comm="syz.0.7466" [ 495.395389][T23134] bond0: no command found in slaves file - use +ifname or -ifname [ 496.194619][T23169] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 496.195075][T23167] ima: policy update failed [ 496.213142][ T30] audit: type=1802 audit(4294967490.123:37): pid=23167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.7578" res=0 errno=0 [ 497.144833][T23216] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 498.700783][T23293] program syz.5.7641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.716300][T23293] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 499.116390][T23313] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 500.716217][T23389] Unable to find swap-space signature [ 501.815892][T23445] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 504.208196][T23517] Ignoring unsupported numa_zonelist_order value: [ 504.208196][T23517] [ 505.382539][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.389470][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.806431][T23631] ecryptfs_miscdev_write: Error while inspecting packet size [ 508.571956][T23656] program syz.4.7817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.815724][T23816] bcache: register_bcache() error : failed to open device [ 513.037575][T23826] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 516.452889][T23966] aoe: can't write to that file. [ 519.403231][T24071] i2c i2c-0: delete_device: Can't parse I2C address [ 519.642170][T24082] kAFS: Invalid Command on /proc/fs/afs/cells file [ 521.083864][ T30] audit: type=1800 audit(4294967515.110:38): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8046" name="members" dev="configfs" ino=60058 res=0 errno=0 [ 521.688681][T24158] kAFS: Invalid Command on /proc/fs/afs/cells file [ 521.979242][ T30] audit: type=1800 audit(4294967516.014:39): pid=24169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8057" name="members" dev="configfs" ino=60093 res=0 errno=0 [ 524.968082][ T30] audit: type=1800 audit(4294967518.998:40): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8102" name="discovery_nqn" dev="configfs" ino=59179 res=0 errno=0 [ 525.546460][T24314] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 525.546460][T24314] M' is too long [ 525.590826][T24317] overlayfs: "check_copy_up" module option is obsolete [ 525.600176][T24314] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 525.600176][T24314] W ' is too long [ 525.833513][T24325] ptrace attach of "./syz-executor exec"[14317] was attempted by ""[24325] [ 526.830795][T24361] ceph: Failed to parse sending metrics switch value 'P^' [ 529.675634][T24473] cougar: G6 mapped to F18 [ 529.917921][ T5143] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 531.614673][T24553] Setting dangerous option i915.mitigations - tainting kernel [ 533.531313][T24626] afs: Bad value for 'source' [ 535.350526][T24684] could not allocate digest TFM handle [ 535.418280][T24688] could not allocate digest TFM handle [ 536.459213][ T5143] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 537.349776][ T5143] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 538.374636][T24868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 538.545244][ T2905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.676382][ T2905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.816030][ T2905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.975352][ T2905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.554464][ T2905] bridge_slave_1: left allmulticast mode [ 539.560204][ T2905] bridge_slave_1: left promiscuous mode [ 539.584349][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.624439][ T2905] bridge_slave_0: left allmulticast mode [ 539.645743][ T6193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.656527][ T2905] bridge_slave_0: left promiscuous mode [ 539.662419][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.674774][ T6193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.684391][ T6193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.699984][ T6193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.710385][ T6193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.422400][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.433293][T24927] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 540.433287][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.444412][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.458992][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.467535][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.586392][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.603784][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.621223][ T2905] bond0 (unregistering): Released all slaves [ 540.966869][T24952] MTRR 1 not used [ 541.754306][ T5143] Bluetooth: hci1: command tx timeout [ 541.965397][ T2905] hsr_slave_0: left promiscuous mode [ 541.986650][ T2905] hsr_slave_1: left promiscuous mode [ 541.996465][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.012883][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.046011][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.064776][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.116582][ T2905] veth1_macvtap: left promiscuous mode [ 542.125636][ T2905] veth0_macvtap: left promiscuous mode [ 542.127624][T24922] kexec: Could not allocate control_code_buffer [ 542.131365][ T2905] veth1_vlan: left promiscuous mode [ 542.146259][ T2905] veth0_vlan: left promiscuous mode [ 542.550289][ T5143] Bluetooth: hci2: command tx timeout [ 543.262095][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 543.374297][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 543.450520][T25127] usb usb34: usbfs: process 25127 (syz.0.8377) did not claim interface 0 before use [ 543.826802][ T5143] Bluetooth: hci1: command tx timeout [ 544.099836][T24923] chnl_net:caif_netlink_parms(): no params data found [ 544.428377][T25248] netlink: 'syz.5.8382': attribute type 2 has an invalid length. [ 544.458574][T24906] chnl_net:caif_netlink_parms(): no params data found [ 544.591762][T24923] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.599112][T24923] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.611082][T24923] bridge_slave_0: entered allmulticast mode [ 544.630762][ T5143] Bluetooth: hci2: command tx timeout [ 544.650717][T24923] bridge_slave_0: entered promiscuous mode [ 544.700244][T24923] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.707473][T24923] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.716428][T24923] bridge_slave_1: entered allmulticast mode [ 544.725060][T24923] bridge_slave_1: entered promiscuous mode [ 545.137346][T24923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.176118][T24923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.372331][T24906] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.391540][T24906] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.419448][T24906] bridge_slave_0: entered allmulticast mode [ 545.446176][T24906] bridge_slave_0: entered promiscuous mode [ 545.533793][T24923] team0: Port device team_slave_0 added [ 545.553869][T24906] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.586073][T24906] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.593530][T24906] bridge_slave_1: entered allmulticast mode [ 545.619182][T24906] bridge_slave_1: entered promiscuous mode [ 545.728709][T24923] team0: Port device team_slave_1 added [ 545.895934][ T5143] Bluetooth: hci1: command tx timeout [ 545.899770][T24906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.941763][T24906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.039615][T24923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.057555][T24923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.094241][T24923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.108187][ T2905] bridge_slave_1: left allmulticast mode [ 546.114553][ T2905] bridge_slave_1: left promiscuous mode [ 546.120393][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.139298][ T2905] bridge_slave_0: left allmulticast mode [ 546.145899][ T2905] bridge_slave_0: left promiscuous mode [ 546.154874][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.691038][ T5143] Bluetooth: hci2: command tx timeout [ 546.813062][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.825462][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.837260][ T2905] bond0 (unregistering): Released all slaves [ 546.888944][T24923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.896195][T24923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.936872][T24923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.129347][T25530] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.136937][T25530] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 547.229490][T24906] team0: Port device team_slave_0 added [ 547.286815][T24923] hsr_slave_0: entered promiscuous mode [ 547.299694][T24923] hsr_slave_1: entered promiscuous mode [ 547.306099][T24923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.319236][T24923] Cannot create hsr debugfs directory [ 547.337305][T24906] team0: Port device team_slave_1 added [ 547.368211][T25546] Zero length message leads to an empty skb [ 547.795227][T24906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.815581][T24906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.875727][T24906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.924190][ T2905] hsr_slave_0: left promiscuous mode [ 547.939114][ T2905] hsr_slave_1: left promiscuous mode [ 547.946530][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.959585][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.964885][ T5143] Bluetooth: hci1: command tx timeout [ 547.982686][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.998814][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.079772][ T2905] veth1_macvtap: left promiscuous mode [ 548.085511][ T2905] veth0_macvtap: left promiscuous mode [ 548.091249][ T2905] veth1_vlan: left promiscuous mode [ 548.109526][ T2905] veth0_vlan: left promiscuous mode [ 548.761301][ T5143] Bluetooth: hci2: command tx timeout [ 549.057934][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 549.109865][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 549.622689][T24906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.631554][T24906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.664112][T24906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.907880][T24906] hsr_slave_0: entered promiscuous mode [ 549.914670][T24906] hsr_slave_1: entered promiscuous mode [ 549.933146][T24906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.949752][T24906] Cannot create hsr debugfs directory [ 550.706592][T24923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 550.835657][T24923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 551.028613][T24923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 551.075346][T24923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.498695][T24923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.555721][T24923] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.603311][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.610506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.631796][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.639011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.708166][T24906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.726080][T24906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.745052][T24906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.767589][T24906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.011462][T24906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.046182][T24906] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.072342][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.079630][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.116865][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.124428][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.327205][T24923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.565616][T24906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.727186][T24906] veth0_vlan: entered promiscuous mode [ 552.765432][T24906] veth1_vlan: entered promiscuous mode [ 552.857526][T24906] veth0_macvtap: entered promiscuous mode [ 552.889949][T24906] veth1_macvtap: entered promiscuous mode [ 552.955103][T24906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.967443][T24906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.980316][T24906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.995480][T24906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.009443][T24906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.044423][T24923] veth0_vlan: entered promiscuous mode [ 553.054524][T24906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.066823][T24906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.080276][T24906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.094992][T24906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.108707][T24906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.135103][T24906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.146292][T24906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.157119][T24906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.166336][T24906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.197458][T24923] veth1_vlan: entered promiscuous mode [ 553.307191][T24923] veth0_macvtap: entered promiscuous mode [ 553.358334][T24923] veth1_macvtap: entered promiscuous mode [ 553.423907][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.442996][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.456925][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.475957][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.486455][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.497864][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.509115][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.521195][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.533565][T24923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.590308][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.605145][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.620256][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.632391][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.644636][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.655247][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.667294][T24923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.694556][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.704743][T24923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.714715][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.725245][T24923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.736167][T24923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.750260][T24923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.006029][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.036621][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.126660][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.135364][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.862715][T25957] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 555.666600][T25997] ima: policy update failed [ 555.681990][ T30] audit: type=1802 audit(4294967549.872:41): pid=25997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.8441" res=0 errno=0 [ 557.110845][T26067] netlink: 'syz.3.8467': attribute type 11 has an invalid length. [ 557.626689][T26094] ucma_write: process 32 (syz.4.8477) changed security contexts after opening file descriptor, this is not allowed. [ 558.285496][T26121] openvswitch: netlink: IP tunnel dst address not specified [ 560.343203][T26204] sg_write: process 2080 (syz.5.8529) changed security contexts after opening file descriptor, this is not allowed. [ 562.658698][T26314] netlink: 'syz.0.8570': attribute type 1 has an invalid length. [ 562.679440][T26314] netlink: 33 bytes leftover after parsing attributes in process `syz.0.8570'. [ 563.742991][ T5143] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 563.743040][ T5143] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 563.759639][ T5143] Bluetooth: hci1: Dropping invalid advertising data [ 563.770836][ T5143] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 563.770890][ T5143] Bluetooth: hci1: Dropping invalid advertising data [ 563.785118][ T5143] Bluetooth: hci1: Malformed LE Event: 0x02 [ 564.436897][T26385] openvswitch: netlink: IP tunnel dst address not specified [ 565.367598][T26422] ubi0: attaching mtd0 [ 565.378682][T26422] ubi0: scanning is finished [ 565.384543][T26422] ubi0: empty MTD device detected [ 565.621919][T26422] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 565.638318][T26422] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 565.647954][T26422] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 565.655842][T26422] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 565.664107][T26422] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 565.671831][T26422] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 565.680215][T26422] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3465373199 [ 565.691222][T26422] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 565.704836][T26432] ubi0: background thread "ubi_bgt0d" started, PID 26432 [ 565.865016][T26441] netlink: del zone limit has 8 unknown bytes [ 566.522349][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.528794][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.845213][T26520] netlink: 'syz.5.8662': attribute type 2 has an invalid length. [ 567.887787][T26522] netlink: 'syz.4.8671': attribute type 1 has an invalid length. [ 569.111499][T26566] perf: Dynamic interrupt throttling disabled, can hang your system! [ 571.127540][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8711'. [ 571.155389][T26637] netlink: 29 bytes leftover after parsing attributes in process `syz.4.8712'. [ 572.914369][T26691] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 574.419733][T26761] dyndbg: expected <4096 bytes into control [ 574.520835][T26768] delete_channel: no stack [ 574.896187][T26788] capability: warning: `syz.3.8773' uses 32-bit capabilities (legacy support in use) [ 577.152754][T26888] netlink: 'syz.3.8817': attribute type 2 has an invalid length. [ 577.334810][T26897] nbd: illegal input index 2147483647 [ 578.014526][T26927] usb usb36: usbfs: process 26927 (syz.3.8832) did not claim interface 0 before use [ 578.631828][T26956] netlink: 'syz.5.8847': attribute type 1 has an invalid length. [ 627.677769][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.684199][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.424063][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 665.430403][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 688.829404][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.838943][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.043247][ T31] INFO: task syz-executor:5819 blocked for more than 143 seconds. [ 727.051664][ T31] Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 727.061222][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.070329][ T31] task:syz-executor state:D stack:22888 pid:5819 tgid:5819 ppid:5817 task_flags:0x440100 flags:0x00000002 [ 727.082593][ T31] Call Trace: [ 727.087040][ T31] [ 727.090033][ T31] __schedule+0x116f/0x5de0 [ 727.094694][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 727.099796][ T31] ? __pfx___schedule+0x10/0x10 [ 727.104771][ T31] ? find_held_lock+0x2b/0x80 [ 727.109516][ T31] ? schedule+0x2d7/0x3a0 [ 727.113982][ T31] schedule+0xe7/0x3a0 [ 727.118142][ T31] io_schedule+0xbf/0x130 [ 727.122557][ T31] bit_wait_io+0x15/0xe0 [ 727.126901][ T31] __wait_on_bit+0x62/0x180 [ 727.131473][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 727.137532][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 727.144121][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 727.150181][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 727.155778][ T31] do_get_write_access+0x93d/0x12a0 [ 727.161058][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 727.167251][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 727.173902][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 727.179635][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 727.186957][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 727.192467][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 727.198530][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.205662][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 727.211459][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 727.217482][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 727.224117][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 727.229835][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 727.234976][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 727.240929][ T31] ext4_dirty_inode+0xd9/0x130 [ 727.246646][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.251566][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 727.258401][ T31] generic_update_time+0xcf/0xf0 [ 727.263583][ T31] file_update_time+0x17d/0x1c0 [ 727.268787][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 727.274586][ T31] ? tcp_recvmsg+0x1f9/0x680 [ 727.279416][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 727.284649][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 727.291379][ T31] ? vm_normal_page+0x13b/0x2b0 [ 727.296366][ T31] ? find_held_lock+0x2b/0x80 [ 727.301087][ T31] ? find_held_lock+0x2b/0x80 [ 727.305855][ T31] do_page_mkwrite+0x171/0x380 [ 727.310844][ T31] do_wp_page+0xb9e/0x58e0 [ 727.315404][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 727.320413][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 727.325522][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 727.330958][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 727.336297][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 727.341639][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.347383][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 727.352819][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 727.358134][ T31] handle_mm_fault+0x3fe/0xad0 [ 727.363932][ T31] do_user_addr_fault+0x60c/0x1370 [ 727.369209][ T31] exc_page_fault+0x5c/0xc0 [ 727.373845][ T31] asm_exc_page_fault+0x26/0x30 [ 727.379070][ T31] RIP: 0033:0x7ff56ae77dcf [ 727.383574][ T31] RSP: 002b:00007fffc8c8e710 EFLAGS: 00010202 [ 727.390620][ T31] RAX: 00007ff569858000 RBX: 000055557180df90 RCX: 0000000000000004 [ 727.399064][ T31] RDX: 1ffffffff1620b3c RSI: 000055557180cba8 RDI: 0000000000000010 [ 727.407113][ T31] RBP: 00007fffc8c8ea00 R08: 000055557180cdf8 R09: 0000000000000167 [ 727.415190][ T31] R10: 0000000000000001 R11: 00007fffc8c8ec10 R12: 00007fffc8c8ea60 [ 727.423242][ T31] R13: 0000000000000004 R14: 00007fffc8c8e780 R15: 00007fffc8c8e850 [ 727.431613][ T31] [ 727.434753][ T31] INFO: task syz.4.8868:27011 blocked for more than 143 seconds. [ 727.442596][ T31] Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 727.451898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.460697][ T31] task:syz.4.8868 state:D stack:28264 pid:27011 tgid:27011 ppid:24923 task_flags:0x440040 flags:0x00000004 [ 727.472789][ T31] Call Trace: [ 727.476130][ T31] [ 727.479457][ T31] __schedule+0x116f/0x5de0 [ 727.484163][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 727.489161][ T31] ? __pfx___schedule+0x10/0x10 [ 727.495421][ T31] ? find_held_lock+0x2b/0x80 [ 727.500151][ T31] ? schedule+0x2d7/0x3a0 [ 727.504570][ T31] schedule+0xe7/0x3a0 [ 727.508731][ T31] io_schedule+0xbf/0x130 [ 727.513219][ T31] bit_wait_io+0x15/0xe0 [ 727.517704][ T31] __wait_on_bit+0x62/0x180 [ 727.522313][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 727.527321][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 727.532902][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 727.538941][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 727.544578][ T31] do_get_write_access+0x93d/0x12a0 [ 727.549860][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 727.556052][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 727.562236][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 727.567851][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 727.573511][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 727.579218][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 727.585488][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.590468][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 727.597135][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 727.602606][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 727.608399][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 727.614146][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 727.619233][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 727.624817][ T31] ext4_dirty_inode+0xd9/0x130 [ 727.629636][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.634504][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 727.639614][ T31] generic_update_time+0xcf/0xf0 [ 727.644742][ T31] file_update_time+0x17d/0x1c0 [ 727.649714][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 727.654872][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 727.660612][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 727.666139][ T31] ? pte_alloc_one+0x2b1/0x380 [ 727.671024][ T31] do_page_mkwrite+0x171/0x380 [ 727.675851][ T31] do_pte_missing+0x29c/0x3fb0 [ 727.681066][ T31] __handle_mm_fault+0x103d/0x2a40 [ 727.686253][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.691981][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 727.698011][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 727.703385][ T31] handle_mm_fault+0x3fe/0xad0 [ 727.708382][ T31] do_user_addr_fault+0x60c/0x1370 [ 727.713643][ T31] exc_page_fault+0x5c/0xc0 [ 727.718212][ T31] asm_exc_page_fault+0x26/0x30 [ 727.723157][ T31] RIP: 0033:0x7fb7c8a6eada [ 727.727618][ T31] RSP: 002b:00007fff60378470 EFLAGS: 00010202 [ 727.733800][ T31] RAX: 0000001b31020000 RBX: 00007fb7c98e5720 RCX: 0000001b3101fff8 [ 727.741858][ T31] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007fb7c98e5700 [ 727.750836][ T31] RBP: ffffffff815df250 R08: 00007fb7c8db6038 R09: 00007fb7c8da2000 [ 727.758865][ T31] R10: 00007fb7c81ff008 R11: 0000000000000000 R12: 0000000000000000 [ 727.767278][ T31] R13: 0000000000000001 R14: ffffffff815dfb3a R15: 0000000000000001 [ 727.775477][ T31] ? __x64_sys_mmap+0x1a/0x190 [ 727.780341][ T31] ? ia32_setup_rt_frame+0x590/0xb30 [ 727.785971][ T31] [ 727.789038][ T31] INFO: task syz.5.8869:27013 blocked for more than 144 seconds. [ 727.797968][ T31] Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 727.807380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.816183][ T31] task:syz.5.8869 state:D stack:28632 pid:27013 tgid:27013 ppid:14317 task_flags:0x440040 flags:0x00000004 [ 727.828276][ T31] Call Trace: [ 727.831710][ T31] [ 727.834700][ T31] __schedule+0x116f/0x5de0 [ 727.839309][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 727.844326][ T31] ? __pfx___schedule+0x10/0x10 [ 727.849354][ T31] ? find_held_lock+0x2b/0x80 [ 727.854207][ T31] ? schedule+0x2d7/0x3a0 [ 727.858712][ T31] schedule+0xe7/0x3a0 [ 727.863025][ T31] io_schedule+0xbf/0x130 [ 727.867417][ T31] bit_wait_io+0x15/0xe0 [ 727.871781][ T31] __wait_on_bit+0x62/0x180 [ 727.876349][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 727.881419][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 727.887267][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 727.893400][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 727.899978][ T31] do_get_write_access+0x93d/0x12a0 [ 727.905293][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 727.911454][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 727.917721][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 727.923941][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 727.929680][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 727.935129][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 727.941493][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.946314][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 727.952101][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 727.957363][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 727.963189][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 727.970163][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 727.975347][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 727.980838][ T31] ext4_dirty_inode+0xd9/0x130 [ 727.985682][ T31] ? rcu_is_watching+0x12/0xc0 [ 727.991319][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 727.996510][ T31] generic_update_time+0xcf/0xf0 [ 728.002705][ T31] file_update_time+0x17d/0x1c0 [ 728.007622][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 728.012920][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 728.018616][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 728.024134][ T31] ? pte_alloc_one+0x2b1/0x380 [ 728.029004][ T31] do_page_mkwrite+0x171/0x380 [ 728.033822][ T31] do_pte_missing+0x29c/0x3fb0 [ 728.038690][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 728.044034][ T31] ? __pmd_alloc+0x3c2/0x870 [ 728.048780][ T31] __handle_mm_fault+0x103d/0x2a40 [ 728.053949][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 728.059757][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 728.065081][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 728.070605][ T31] handle_mm_fault+0x3fe/0xad0 [ 728.075431][ T31] do_user_addr_fault+0x60c/0x1370 [ 728.080906][ T31] exc_page_fault+0x5c/0xc0 [ 728.085627][ T31] asm_exc_page_fault+0x26/0x30 [ 728.091016][ T31] RIP: 0033:0x7f87ef66547b [ 728.095486][ T31] RSP: 002b:00007fff640da780 EFLAGS: 00010246 [ 728.101786][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 728.110859][ T31] RDX: 0000001b30220000 RSI: 0000000000400000 RDI: 00007f87ef898d50 [ 728.119204][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 728.127322][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 728.135408][ T31] R13: 00000000000927c0 R14: 000000000008dfa0 R15: 00007fff640daa30 [ 728.143755][ T31] [ 728.147001][ T31] INFO: task syz.3.8870:27014 blocked for more than 144 seconds. [ 728.154829][ T31] Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 728.164285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 728.173392][ T31] task:syz.3.8870 state:D stack:28360 pid:27014 tgid:27014 ppid:24906 task_flags:0x440040 flags:0x00000004 [ 728.185560][ T31] Call Trace: [ 728.189027][ T31] [ 728.192331][ T31] __schedule+0x116f/0x5de0 [ 728.196934][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 728.202010][ T31] ? __pfx___schedule+0x10/0x10 [ 728.207901][ T31] ? find_held_lock+0x2b/0x80 [ 728.212751][ T31] ? schedule+0x2d7/0x3a0 [ 728.217166][ T31] schedule+0xe7/0x3a0 [ 728.221389][ T31] io_schedule+0xbf/0x130 [ 728.225967][ T31] bit_wait_io+0x15/0xe0 [ 728.230664][ T31] __wait_on_bit+0x62/0x180 [ 728.235353][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 728.241033][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 728.246568][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 728.252644][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 728.258330][ T31] do_get_write_access+0x93d/0x12a0 [ 728.263591][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 728.269719][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 728.275947][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 728.281627][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 728.287203][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 728.292918][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 728.299205][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.304013][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 728.310688][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 728.315978][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 728.322013][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 728.327775][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 728.332968][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 728.338647][ T31] ext4_dirty_inode+0xd9/0x130 [ 728.343485][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.348374][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 728.353555][ T31] generic_update_time+0xcf/0xf0 [ 728.358652][ T31] file_update_time+0x17d/0x1c0 [ 728.363582][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 728.368916][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 728.374424][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 728.380008][ T31] ? pte_alloc_one+0x2b1/0x380 [ 728.384835][ T31] do_page_mkwrite+0x171/0x380 [ 728.389741][ T31] do_pte_missing+0x29c/0x3fb0 [ 728.395271][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 728.400735][ T31] ? __pmd_alloc+0x3c2/0x870 [ 728.405403][ T31] __handle_mm_fault+0x103d/0x2a40 [ 728.411526][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 728.417127][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 728.422388][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 728.427728][ T31] handle_mm_fault+0x3fe/0xad0 [ 728.432753][ T31] do_user_addr_fault+0x60c/0x1370 [ 728.438196][ T31] exc_page_fault+0x5c/0xc0 [ 728.442847][ T31] asm_exc_page_fault+0x26/0x30 [ 728.447792][ T31] RIP: 0033:0x7f8a1166547b [ 728.452259][ T31] RSP: 002b:00007ffec42fa5d0 EFLAGS: 00010246 [ 728.458457][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 728.466825][ T31] RDX: 0000001b2e220000 RSI: 0000000000400000 RDI: 00007f8a11898d50 [ 728.474964][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 728.483089][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 728.491396][ T31] R13: 00000000000927c0 R14: 000000000008dfd6 R15: 00007ffec42fa880 [ 728.500144][ T31] [ 728.503235][ T31] [ 728.503235][ T31] Showing all locks held in the system: [ 728.511932][ T31] 3 locks held by kworker/u8:1/13: [ 728.517164][ T31] 1 lock held by khungtaskd/31: [ 728.522051][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 728.532075][ T31] 6 locks held by kworker/u8:5/197: [ 728.537361][ T31] #0: ffff888143edc148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 728.548330][ T31] #1: ffffc90002e67d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 728.560709][ T31] #2: ffff8880356cc0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 728.571657][ T31] #3: ffff8880356ceb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 728.582306][ T31] #4: ffff88814e730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 728.592031][ T31] #5: ffff88807c754820 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 728.602389][ T31] 3 locks held by syz-executor/5819: [ 728.607776][ T31] #0: ffff888012501d08 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 728.618271][ T31] #1: ffff8880356cc518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 728.628044][ T31] #2: ffff88814e730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 728.637810][ T31] 2 locks held by getty/26644: [ 728.642653][ T31] #0: ffff8880354e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 728.652705][ T31] #1: ffffc9000ba1d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 728.663297][ T31] 3 locks held by syz.4.8868/27011: [ 728.668575][ T31] #0: ffff88807f51d448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 728.678054][ T31] #1: ffff8880356cc518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 728.687903][ T31] #2: ffff88814e730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 728.697821][ T31] 3 locks held by syz.5.8869/27013: [ 728.703434][ T31] #0: ffff88805b14ae48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 728.712928][ T31] #1: ffff8880356cc518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 728.723758][ T31] #2: ffff88814e730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 728.733971][ T31] 3 locks held by syz.3.8870/27014: [ 728.739281][ T31] #0: ffff888068baae48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 728.748749][ T31] #1: ffff8880356cc518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 728.758510][ T31] #2: ffff88814e730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 728.768456][ T31] [ 728.770872][ T31] ============================================= [ 728.770872][ T31] [ 728.779531][ T31] NMI backtrace for cpu 1 [ 728.779556][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 728.779604][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 728.779616][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 728.779633][ T31] Call Trace: [ 728.779645][ T31] [ 728.779658][ T31] dump_stack_lvl+0x116/0x1f0 [ 728.779704][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 728.779776][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 728.779822][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 728.779874][ T31] watchdog+0xf70/0x12c0 [ 728.779919][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.779955][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.779989][ T31] ? __kthread_parkme+0x19e/0x250 [ 728.780027][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.780067][ T31] kthread+0x3c2/0x780 [ 728.780110][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780151][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780191][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780234][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780274][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.780304][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780348][ T31] ret_from_fork+0x45/0x80 [ 728.780396][ T31] ? __pfx_kthread+0x10/0x10 [ 728.780439][ T31] ret_from_fork_asm+0x1a/0x30 [ 728.780503][ T31] [ 728.780514][ T31] Sending NMI from CPU 1 to CPUs 0: [ 728.925532][ C0] NMI backtrace for cpu 0 [ 728.925555][ C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 728.925597][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 728.925607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 728.925623][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 728.925663][ C0] RIP: 0010:unwind_next_frame+0xc63/0x20a0 [ 728.925693][ C0] Code: 40 01 48 89 c7 48 c1 ef 03 0f b6 14 17 4c 89 c7 83 e7 07 40 38 fe 40 0f 9e c7 40 84 f6 40 0f 95 c6 40 84 f7 0f 85 e3 10 00 00 <83> e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 cc 10 00 [ 728.925717][ C0] RSP: 0018:ffffc90000be7318 EFLAGS: 00000246 [ 728.925736][ C0] RAX: ffffffff911dbc09 RBX: 0000000000000001 RCX: ffffffff911dbc04 [ 728.925752][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 728.925767][ C0] RBP: ffffc90000be73d0 R08: ffffffff911dbc08 R09: 0000000000000000 [ 728.925789][ C0] R10: 0000000000000003 R11: 000000000000a68e R12: ffffc90000be73d8 [ 728.925804][ C0] R13: ffffc90000be7388 R14: ffffc90000be74b8 R15: ffffc90000be73bc [ 728.925821][ C0] FS: 0000000000000000(0000) GS:ffff8881249ef000(0000) knlGS:0000000000000000 [ 728.925845][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.925884][ C0] CR2: 00005574eb09d600 CR3: 000000000e180000 CR4: 00000000003526f0 [ 728.925900][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.925914][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 728.925940][ C0] Call Trace: [ 728.925947][ C0] [ 728.925957][ C0] ? stack_trace_save+0x8e/0xc0 [ 728.925983][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.926010][ C0] arch_stack_walk+0x94/0x100 [ 728.926041][ C0] ? kasan_save_stack+0x33/0x60 [ 728.926068][ C0] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 728.926095][ C0] stack_trace_save+0x8e/0xc0 [ 728.926118][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 728.926146][ C0] ? find_held_lock+0x2b/0x80 [ 728.926168][ C0] kasan_save_stack+0x33/0x60 [ 728.926221][ C0] kasan_save_track+0x14/0x30 [ 728.926245][ C0] __kasan_kmalloc+0xaa/0xb0 [ 728.926269][ C0] __kmalloc_noprof+0x223/0x510 [ 728.926300][ C0] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 728.926325][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.926354][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 728.926381][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 728.926418][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 728.926454][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 728.926485][ C0] ? ieee80211_sta_active_ibss+0x21d/0x420 [ 728.926532][ C0] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 728.926577][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 728.926612][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 728.926655][ C0] ? __pfx___might_resched+0x10/0x10 [ 728.926693][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 728.926730][ C0] ieee80211_iface_work+0xbf4/0x1020 [ 728.926756][ C0] ? rcu_is_watching+0x12/0xc0 [ 728.926785][ C0] cfg80211_wiphy_work+0x3dc/0x550 [ 728.926822][ C0] process_one_work+0x9cc/0x1b70 [ 728.926866][ C0] ? __pfx_process_one_work+0x10/0x10 [ 728.926909][ C0] ? assign_work+0x1a0/0x250 [ 728.926944][ C0] worker_thread+0x6c8/0xf10 [ 728.926989][ C0] ? __pfx_worker_thread+0x10/0x10 [ 728.927026][ C0] kthread+0x3c2/0x780 [ 728.927059][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927091][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927123][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927156][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927189][ C0] ? rcu_is_watching+0x12/0xc0 [ 728.927210][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927244][ C0] ret_from_fork+0x45/0x80 [ 728.927281][ C0] ? __pfx_kthread+0x10/0x10 [ 728.927314][ C0] ret_from_fork_asm+0x1a/0x30 [ 728.927357][ C0] [ 728.927690][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 729.311814][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 729.325239][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 729.331347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 729.341603][ T31] Call Trace: [ 729.345078][ T31] [ 729.348030][ T31] dump_stack_lvl+0x3d/0x1f0 [ 729.352819][ T31] panic+0x71c/0x800 [ 729.356793][ T31] ? __pfx_panic+0x10/0x10 [ 729.361270][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 729.366716][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 729.372746][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 729.378155][ T31] ? watchdog+0xdda/0x12c0 [ 729.382593][ T31] ? watchdog+0xdcd/0x12c0 [ 729.387034][ T31] watchdog+0xdeb/0x12c0 [ 729.391583][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.396280][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.401758][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.407599][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.412319][ T31] kthread+0x3c2/0x780 [ 729.416423][ T31] ? __pfx_kthread+0x10/0x10 [ 729.421037][ T31] ? __pfx_kthread+0x10/0x10 [ 729.425673][ T31] ? __pfx_kthread+0x10/0x10 [ 729.430334][ T31] ? __pfx_kthread+0x10/0x10 [ 729.435480][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.440283][ T31] ? __pfx_kthread+0x10/0x10 [ 729.444922][ T31] ret_from_fork+0x45/0x80 [ 729.449383][ T31] ? __pfx_kthread+0x10/0x10 [ 729.454011][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.458826][ T31] [ 729.462116][ T31] Kernel Offset: disabled [ 729.466460][ T31] Rebooting in 86400 seconds..