last executing test programs: 2.65163942s ago: executing program 0 (id=5321): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x460f, 0x0) 2.218406411s ago: executing program 0 (id=5327): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11FCSErrorCount\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x8) 2.160600271s ago: executing program 2 (id=5329): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) clock_adjtime$auto(0x17, 0x0) 1.765744639s ago: executing program 2 (id=5333): socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 1.424052969s ago: executing program 0 (id=5337): r0 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) read$auto_nst_seq_fops_netdebug(r0, &(0x7f0000001680)=""/222, 0xde) 1.313226407s ago: executing program 2 (id=5339): socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x20, 0x0, 0x0) 1.111439235s ago: executing program 1 (id=5341): r0 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0) read$auto_clk_dump_fops_(r0, &(0x7f00000005c0)=""/4096, 0x1000) 1.050210756s ago: executing program 3 (id=5342): r0 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/README\x00', 0x2200, 0x0) read$auto_tracing_readme_fops_trace(r0, 0x0, 0x0) 910.512486ms ago: executing program 2 (id=5343): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram12\x00', 0x40, 0x0) ioctl$auto_BLKIOMIN(r0, 0x1278, 0x1000000000000) 907.670431ms ago: executing program 1 (id=5344): r0 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r0, 0x11b, 0x3, 0xffffffffffffffff, 0x0) 880.339975ms ago: executing program 0 (id=5345): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001780)=""/217, 0xd9) 826.911803ms ago: executing program 3 (id=5346): r0 = socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000100)={0x20, @inferred=r0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0x0, 0x1) 702.64548ms ago: executing program 1 (id=5347): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) 646.031851ms ago: executing program 3 (id=5348): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3c, 0x0, 0x110) 512.607948ms ago: executing program 2 (id=5349): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 496.961049ms ago: executing program 1 (id=5350): r0 = socket(0x25, 0x1, 0x2) setsockopt$auto(r0, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) 492.93756ms ago: executing program 0 (id=5351): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/defrag\x00', 0x8a002, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfb\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xc0\x04z\xd0I>\x8f\x00\xc2\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\x1d\x04\x00\x00\x00\x00\x00\x00\x00i\xcbA\xa5[\b\xb8\xffT\xc9\xd2\xc7\x0e`\xdf\xad;\x02tcf\x06\xfbD\x91\xd9\xf8\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\xd5\\O\x1c\xb9p\xce\xd9\x00\x00\x00\x00\x00`\xe7\xd5Y\a\xc1\xe9(\x95\xc3H\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00\xc30\xe4\xb6\x92\x87Z\xc1Ln\xc2s\xf2\xe5\x7f\xe1*r(\xb7\x02\xe419}J\xdc1\xac\x12(\xcd\x90Om\xddh\xd3\x9d\x92\t\xef\xe4j[?A\x14\x19\xab6\x1c\xd2\xcb1\xfb\xe8\xedq9\b\xb3\xb0\xdfA\xf0\xcc\xba&+^\a\xc4\x7f\xd8t\x03Y\x00;\xf9\x01\xb5\x00p;9\x97$\x91j\x8aZ\a\x8f\xe2\x1e\xd4\xaf6\x8cC\xe2\x9d`\x12\xa6l{Y\xa1\xbb\xaek\x91\xab\xa4;\xa3l\xcb\xc6M\x9e\xa1\xdc\x11\xf0wEV\xa3\x93\xfe\xf5N Cc\xf4\x0e2q>\x193\b\xa0E\xcf\xc3\xd1\x907M$\xdb\xbc\rq\x05\xa9\x9c\xef\xc1\xe8\x96\xf1\x12', 0x200) 422.999363ms ago: executing program 3 (id=5352): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x3fe, 0x10002, 0x7d, 0x3, 0x5, 0x5, r0, [], {0x0, 0x10, 0x6, 0x6, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x4, 0x80000001, 0x8, 0x6b, 0x5, 0x0, 0xfffffffa, 0xb0}}) 288.898877ms ago: executing program 1 (id=5353): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/ext4/sda1/last_error_block\x00', 0x20880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) 201.227752ms ago: executing program 3 (id=5354): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='X\x00\\\xa0\x04|\x03\xcb\x12\xfa\x18\x1c\xc7k', 0x81) 127.063533ms ago: executing program 2 (id=5355): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/msi_bus\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/16, 0x10) 87.524871ms ago: executing program 0 (id=5356): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) 67.437324ms ago: executing program 1 (id=5357): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0xfffe, 0xc, 0x0, 0x7fb, 0x0}) 0s ago: executing program 3 (id=5358): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000002940)="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", 0xd4f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 102.658571][ T9] cfg80211: failed to load regulatory.db [ 103.128500][ T5821] cgroup: Unknown subsys name 'net' [ 103.260901][ T5821] cgroup: Unknown subsys name 'cpuset' [ 103.270853][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.434391][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.075723][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.092771][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.102085][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.111793][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.120953][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.188946][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.200094][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.210913][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.221923][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.243085][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.252810][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.264126][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.271935][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.280952][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.288888][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.385399][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.394903][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.403715][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.412641][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.420667][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.146256][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 113.240622][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 113.286898][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 113.354903][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 113.458414][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.467333][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.474701][ T5854] bridge_slave_0: entered allmulticast mode [ 113.482595][ T5854] bridge_slave_0: entered promiscuous mode [ 113.530862][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.538442][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.545856][ T5854] bridge_slave_1: entered allmulticast mode [ 113.553587][ T5854] bridge_slave_1: entered promiscuous mode [ 113.620209][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.627847][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.636107][ T5860] bridge_slave_0: entered allmulticast mode [ 113.644517][ T5860] bridge_slave_0: entered promiscuous mode [ 113.683924][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.691444][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.698810][ T5860] bridge_slave_1: entered allmulticast mode [ 113.706790][ T5860] bridge_slave_1: entered promiscuous mode [ 113.718701][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.728273][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.736655][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.746478][ T5858] bridge_slave_0: entered allmulticast mode [ 113.754259][ T5858] bridge_slave_0: entered promiscuous mode [ 113.793779][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.805459][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.817592][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.826921][ T5858] bridge_slave_1: entered allmulticast mode [ 113.835432][ T5858] bridge_slave_1: entered promiscuous mode [ 113.893523][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.901298][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.909010][ T5863] bridge_slave_0: entered allmulticast mode [ 113.917322][ T5863] bridge_slave_0: entered promiscuous mode [ 113.930400][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.970353][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.978859][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.986540][ T5863] bridge_slave_1: entered allmulticast mode [ 113.994616][ T5863] bridge_slave_1: entered promiscuous mode [ 114.008722][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.021796][ T5854] team0: Port device team_slave_0 added [ 114.032275][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.081023][ T5854] team0: Port device team_slave_1 added [ 114.090814][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.105409][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.152739][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.165695][ T5860] team0: Port device team_slave_0 added [ 114.177995][ T5855] Bluetooth: hci0: command tx timeout [ 114.217125][ T5860] team0: Port device team_slave_1 added [ 114.223906][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.231522][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.265545][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.281569][ T5858] team0: Port device team_slave_0 added [ 114.314270][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.322791][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.349902][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.357663][ T53] Bluetooth: hci2: command tx timeout [ 114.366884][ T5855] Bluetooth: hci1: command tx timeout [ 114.369759][ T5858] team0: Port device team_slave_1 added [ 114.380596][ T5863] team0: Port device team_slave_0 added [ 114.425528][ T5863] team0: Port device team_slave_1 added [ 114.432130][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.439520][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.466416][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.479981][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.487299][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.514342][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.525414][ T5855] Bluetooth: hci3: command tx timeout [ 114.564418][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.571893][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.599675][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.639638][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.646987][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.673729][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.685972][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.693595][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.720054][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.753371][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.760853][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.787376][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.805339][ T5854] hsr_slave_0: entered promiscuous mode [ 114.812358][ T5854] hsr_slave_1: entered promiscuous mode [ 114.864871][ T5860] hsr_slave_0: entered promiscuous mode [ 114.872148][ T5860] hsr_slave_1: entered promiscuous mode [ 114.879172][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 114.885156][ T5860] Cannot create hsr debugfs directory [ 114.988604][ T5858] hsr_slave_0: entered promiscuous mode [ 114.998531][ T5858] hsr_slave_1: entered promiscuous mode [ 115.004807][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 115.010749][ T5858] Cannot create hsr debugfs directory [ 115.055615][ T5863] hsr_slave_0: entered promiscuous mode [ 115.062800][ T5863] hsr_slave_1: entered promiscuous mode [ 115.069484][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 115.075256][ T5863] Cannot create hsr debugfs directory [ 115.581317][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.603356][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.617557][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.642609][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.717284][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.729982][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.743317][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.757179][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.877011][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.889253][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.905331][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.921242][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.047679][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.059957][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.081320][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.108401][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.238356][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.257190][ T5855] Bluetooth: hci0: command tx timeout [ 116.281403][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.317520][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.331308][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.364896][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.372343][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.390143][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.405164][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.413067][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.418441][ T53] Bluetooth: hci2: command tx timeout [ 116.426607][ T5855] Bluetooth: hci1: command tx timeout [ 116.452516][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.467464][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.475500][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.505632][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.513188][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.546086][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.554270][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.577262][ T53] Bluetooth: hci3: command tx timeout [ 116.595712][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.603173][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.674629][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.741129][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.792791][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.800604][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.845682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.853250][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.063917][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.295273][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.430987][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.471472][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.554708][ T5854] veth0_vlan: entered promiscuous mode [ 117.609596][ T5854] veth1_vlan: entered promiscuous mode [ 117.642664][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.661923][ T5858] veth0_vlan: entered promiscuous mode [ 117.690430][ T5860] veth0_vlan: entered promiscuous mode [ 117.712211][ T5858] veth1_vlan: entered promiscuous mode [ 117.743675][ T5860] veth1_vlan: entered promiscuous mode [ 117.800398][ T5854] veth0_macvtap: entered promiscuous mode [ 117.829391][ T5854] veth1_macvtap: entered promiscuous mode [ 117.861864][ T5858] veth0_macvtap: entered promiscuous mode [ 117.885629][ T5863] veth0_vlan: entered promiscuous mode [ 117.898462][ T5860] veth0_macvtap: entered promiscuous mode [ 117.908111][ T5858] veth1_macvtap: entered promiscuous mode [ 117.924074][ T5860] veth1_macvtap: entered promiscuous mode [ 117.939123][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.964470][ T5863] veth1_vlan: entered promiscuous mode [ 117.979857][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.015056][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.039612][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.052179][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.067364][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.081053][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.094748][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.110519][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.142527][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.183864][ T1005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.221218][ T1005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.231903][ T1005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.242115][ T1005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.262692][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.285212][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.299616][ T5863] veth0_macvtap: entered promiscuous mode [ 118.322983][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.333965][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.344675][ T53] Bluetooth: hci0: command tx timeout [ 118.354488][ T5863] veth1_macvtap: entered promiscuous mode [ 118.444040][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.470168][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.496772][ T5855] Bluetooth: hci1: command tx timeout [ 118.503442][ T53] Bluetooth: hci2: command tx timeout [ 118.529442][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.574562][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.587668][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.603937][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.656855][ T53] Bluetooth: hci3: command tx timeout [ 118.671001][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.692941][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.726742][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.754126][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.773680][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.791180][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.805754][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.913369][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.933910][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.996199][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.017710][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.143310][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.176632][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.220061][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.259362][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.407448][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.440105][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.416773][ T53] Bluetooth: hci0: command tx timeout [ 120.577826][ T5855] Bluetooth: hci1: command tx timeout [ 120.583525][ T53] Bluetooth: hci2: command tx timeout [ 120.737319][ T53] Bluetooth: hci3: command tx timeout [ 124.356593][ T6110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.488336][ T6189] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.521065][ T30] audit: type=1800 audit(1766361016.165:2): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.129" name="trace_pipe" dev="tracefs" ino=1252 res=0 errno=0 [ 126.639497][ T6195] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.878270][ T6400] syz_tun: tun_chr_ioctl cmd 1074025675 [ 131.894917][ T6400] syz_tun: persist disabled [ 132.454868][ T6419] syz_tun: tun_chr_ioctl cmd 1074025680 [ 135.783060][ T6545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.028012][ T6555] Unable to find swap-space signature [ 136.445647][ T6567] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.259033][ T6601] nfs: Bad value for 'source' [ 138.305863][ T6646] ima: policy update failed [ 138.317368][ T30] audit: type=1802 audit(1766362054.976:3): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.354" res=0 errno=0 [ 141.990313][ T30] audit: type=1800 audit(1766362058.646:4): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.423" name="version" dev="configfs" ino=10588 res=0 errno=0 [ 143.628643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.635619][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.421373][ T30] audit: type=1800 audit(1766362066.076:5): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.537" name="dbroot" dev="configfs" ino=11615 res=0 errno=0 [ 154.266336][ T7179] syz.3.611 (7179): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.573269][ T7187] can: request_module (can-proto-5) failed. [ 156.597340][ T7274] syz_tun: tun_chr_ioctl cmd 1074025676 [ 156.620196][ T7274] syz_tun: owner set to 111 [ 157.218542][ T7238] kexec: Could not allocate control_code_buffer [ 157.881025][ T7328] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[7328] [ 158.377755][ T53] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 159.325827][ T53] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 160.263137][ T7420] __vm_enough_memory: pid: 7420, comm: syz.1.734, bytes: 4398046511104 not enough memory for the allocation [ 161.463669][ T7479] mmap: syz.2.762 (7479) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.824153][ T53] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 164.335556][ T7564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.367362][ T7564] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.401361][ T7564] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.423227][ T7564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.432925][ T7564] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.445124][ T7564] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.478849][ T7564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.484928][ T7564] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.495901][ T7564] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.511228][ T7564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.537962][ T7564] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.555468][ T7564] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.850804][ T7597] futex_wake_op: syz.1.820 tries to shift op by -1; fix this program [ 165.111929][ T30] audit: type=1800 audit(6061330399.763:6): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.825" name="version" dev="configfs" ino=12950 res=0 errno=0 [ 165.617317][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.497294][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.504131][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.577302][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.799609][ T7605] kexec: Could not allocate control_code_buffer [ 167.697193][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.577436][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.583766][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.667602][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.453812][ T30] audit: type=1800 audit(6061330404.103:7): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.899" name="dummy_udc" dev="gadgetfs" ino=6840 res=0 errno=0 [ 169.777230][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.657211][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.663390][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.747671][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.033892][ T7817] Process accounting resumed [ 171.519706][ T7765] kexec: Could not allocate control_code_buffer [ 173.305535][ T7918] Process accounting resumed [ 173.854141][ T7947] futex_wake_op: syz.0.993 tries to shift op by -2048; fix this program [ 174.361213][ T5855] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 174.368896][ T5855] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 176.631074][ T8074] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[8074] [ 177.142819][ T8098] ======================================================= [ 177.142819][ T8098] WARNING: The mand mount option has been deprecated and [ 177.142819][ T8098] and is ignored by this kernel. Remove the mand [ 177.142819][ T8098] option from the mount to silence this warning. [ 177.142819][ T8098] ======================================================= [ 178.461446][ T30] audit: type=1326 audit(6061330413.113:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.0.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f588258f7c9 code=0x0 [ 179.251656][ T8186] syz_tun: tun_chr_ioctl cmd 1074025680 [ 179.635632][ T30] audit: type=1800 audit(6061330414.283:9): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1120" name="trace_pipe" dev="tracefs" ino=1296 res=0 errno=0 [ 179.734556][ T8207] random: crng reseeded on system resumption [ 182.996474][ T8364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.661668][ T30] audit: type=1800 audit(6061332466.328:10): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1217" name="lu_gp_id" dev="configfs" ino=15164 res=0 errno=0 [ 188.339455][ T5855] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 193.217640][ T8865] syz.2.1446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.271059][ T8920] syz_tun: tun_chr_ioctl cmd 1074025679 [ 194.637423][ T8940] Unable to find swap-space signature [ 194.741432][ T30] audit: type=1800 audit(6061332477.465:11): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1485" name="members" dev="configfs" ino=16960 res=0 errno=0 [ 194.824615][ T8948] syz_tun: tun_chr_ioctl cmd 2147767517 [ 195.186968][ T30] audit: type=1800 audit(6061332477.918:12): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1496" name="features" dev="configfs" ino=17632 res=0 errno=0 [ 195.874426][ T5855] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 196.552311][ T9040] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.829268][ T9160] delete_channel: no stack [ 199.172007][ T9181] syz.1.1602 uses obsolete (PF_INET,SOCK_PACKET) [ 200.822552][ T9261] bond0: Unable to set down delay as MII monitoring is disabled [ 200.960911][ T9265] Process accounting paused [ 200.984359][ T9269] zswap: compressor *E;3߃L MapCMcsyF*srHDU}]$rm+8ጅY7TU9d L@saXfmY6  =KԿ_+ gX not available [ 203.210413][ T9376] Process accounting paused [ 204.940047][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.948034][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.937476][ T9630] Scaler: ================= START STATUS ================= [ 207.945130][ T9630] Scaler: ================== END STATUS ================== [ 210.488499][ T30] audit: type=1806 audit(6061332493.297:13): xattr="." res=0 [ 213.370142][ T9845] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 213.371080][ T9843] ima: policy update failed [ 213.401017][ T30] audit: type=1802 audit(6061332496.222:14): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1922" res=0 errno=0 [ 215.922082][ T9963] vhci_hcd vhci_hcd.2: invalid port number 135 [ 215.928593][ T9963] vhci_hcd vhci_hcd.2: invalid port number 135 [ 216.373032][ T9985] program syz.1.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.393925][ T9985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 216.734361][T10000] kafs: addr_prefs: Too many elements in string [ 217.922234][T10058] random: crng reseeded on system resumption [ 218.461602][T10082] i2c i2c-0: delete_device: Can't find device in list [ 219.221070][T10113] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 219.695234][T10135] random: crng reseeded on system resumption [ 220.092079][T10154] ima: policy update failed [ 220.114122][ T30] audit: type=1802 audit(6061332502.977:15): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2076" res=0 errno=0 [ 221.151838][T10193] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 222.223434][T10242] kAFS: unparsable volume name [ 223.420295][T10294] vhci_hcd vhci_hcd.2: invalid port number 255 [ 223.834559][T10315] random: crng reseeded on system resumption [ 226.646790][T10445] bond0: invalid ARP target specified [ 227.163300][T10465] ptp ptp0: only physical clock in use now [ 227.557858][T10482] program syz.0.2234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.604265][T10485] nfsd: Unknown parameter '^B-' [ 228.798560][ T5946] smpboot: CPU 1 is now offline [ 229.331925][T10565] ICMPv6: process `syz.0.2276' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 230.822666][T10610] Process accounting resumed [ 232.307488][T10666] overlayfs: "check_copy_up" module option is obsolete [ 232.698694][ T5855] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 233.059848][T10689] Process accounting resumed [ 233.511455][T10702] hub 8-0:1.0: USB hub found [ 233.540806][T10702] hub 8-0:1.0: 1 port detected [ 234.784850][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.041888][T10762] Format for deleting device is "id" (uint). [ 235.704079][T10785] Invalid input. Must be >= 4608 [ 235.797198][T10789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 236.552143][T10817] usb usb15: usbfs: process 10817 (syz.1.2399) did not claim interface 0 before use [ 236.850060][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.089058][T10836] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 239.050551][ T5855] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 241.025470][T10978] process 'syz.2.2476' launched './file0' with NULL argv: empty string added [ 241.065170][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.086329][T10980] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 241.234185][T10984] vhci_hcd vhci_hcd.2: invalid port number 16 [ 241.240313][T10984] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 242.584495][T11037] syz.2.2505: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.656903][T11037] CPU: 0 UID: 0 PID: 11037 Comm: syz.2.2505 Not tainted syzkaller #0 PREEMPT(full) [ 242.656934][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.656951][T11037] Call Trace: [ 242.656959][T11037] [ 242.656968][T11037] dump_stack_lvl+0x16c/0x1f0 [ 242.657014][T11037] warn_alloc+0x248/0x3a0 [ 242.657045][T11037] ? __pfx_warn_alloc+0x10/0x10 [ 242.657076][T11037] ? __lock_acquire+0x436/0x2890 [ 242.657113][T11037] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 242.657137][T11037] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 242.657162][T11037] ? __pfx___might_resched+0x10/0x10 [ 242.657198][T11037] ? rcu_is_watching+0x12/0xc0 [ 242.657236][T11037] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 242.657259][T11037] ? find_held_lock+0x2b/0x80 [ 242.657289][T11037] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 242.657311][T11037] ? tomoyo_path_number_perm+0x295/0x580 [ 242.657342][T11037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.657366][T11037] ? __pfx___mutex_lock+0x10/0x10 [ 242.657404][T11037] ? tomoyo_path_number_perm+0x18d/0x580 [ 242.657435][T11037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.657469][T11037] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 242.657491][T11037] __vmalloc_node_noprof+0xad/0xf0 [ 242.657514][T11037] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 242.657540][T11037] dvb_dvr_do_ioctl+0x15d/0x290 [ 242.657567][T11037] dvb_usercopy+0x167/0x340 [ 242.657605][T11037] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 242.657630][T11037] ? __pfx_dvb_usercopy+0x10/0x10 [ 242.657680][T11037] ? __fget_files+0x20e/0x3c0 [ 242.657721][T11037] dvb_dvr_ioctl+0x29/0x40 [ 242.657741][T11037] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 242.657763][T11037] __x64_sys_ioctl+0x18e/0x210 [ 242.657795][T11037] do_syscall_64+0xcd/0xf80 [ 242.657834][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.657858][T11037] RIP: 0033:0x7f1c57b8f7c9 [ 242.657883][T11037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.657905][T11037] RSP: 002b:00007f1c589d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.657927][T11037] RAX: ffffffffffffffda RBX: 00007f1c57de5fa0 RCX: 00007f1c57b8f7c9 [ 242.657942][T11037] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 242.657957][T11037] RBP: 00007f1c57c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.657971][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.657985][T11037] R13: 00007f1c57de6038 R14: 00007f1c57de5fa0 R15: 00007ffd4334fa88 [ 242.658021][T11037] [ 242.658030][T11037] Mem-Info: [ 243.156785][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.820657][T11037] active_anon:4876 inactive_anon:332 isolated_anon:0 [ 243.820657][T11037] active_file:18821 inactive_file:37424 isolated_file:0 [ 243.820657][T11037] unevictable:768 dirty:424 writeback:0 [ 243.820657][T11037] slab_reclaimable:10814 slab_unreclaimable:92082 [ 243.820657][T11037] mapped:24178 shmem:1356 pagetables:1058 [ 243.820657][T11037] sec_pagetables:0 bounce:0 [ 243.820657][T11037] kernel_misc_reclaimable:0 [ 243.820657][T11037] free:1330253 free_pcp:16590 free_cma:0 [ 244.061278][ T53] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 244.141229][T11037] Node 0 active_anon:19508kB inactive_anon:1440kB active_file:75324kB inactive_file:149524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96808kB dirty:1708kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11552kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.335853][T11037] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.504026][T11037] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.712307][T11037] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 244.763063][T11037] Node 0 DMA32 free:1419916kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19508kB inactive_anon:1128kB active_file:75376kB inactive_file:149472kB unevictable:1536kB writepending:1864kB zspages:0kB present:3129332kB managed:2541028kB mlocked:0kB bounce:0kB free_pcp:34360kB local_pcp:34360kB free_cma:0kB [ 245.002973][T11037] lowmem_reserve[]: 0 0 1 1 1 [ 245.013536][T11037] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.220414][T11037] lowmem_reserve[]: 0 0 0 0 0 [ 245.263533][T11037] Node 1 Normal free:3885748kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31024kB local_pcp:31024kB free_cma:0kB [ 245.451129][T11037] lowmem_reserve[]: 0 0 0 0 0 [ 245.495408][T11037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.592721][T11037] Node 0 DMA32: 1771*4kB (UME) 1904*8kB (UME) 1404*16kB (UME) 1013*32kB (UME) 574*64kB (UME) 413*128kB (UME) 269*256kB (UME) 117*512kB (UM) 50*1024kB (UM) 8*2048kB (UM) 258*4096kB (M) = 1419916kB [ 245.726384][T11037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 245.782637][T11037] Node 1 Normal: 195*4kB (UE) 25*8kB (UME) 32*16kB (UME) 219*32kB (UME) 82*64kB (UME) 22*128kB (UME) 6*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 941*4096kB (UM) = 3885748kB [ 245.888881][T11037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.937212][T11037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.987205][T11037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.048997][T11037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.084398][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.128358][T11037] 57596 total pagecache pages [ 246.166989][T11037] 0 pages in swap cache [ 246.188318][T11037] Free swap = 124996kB [ 246.216565][T11037] Total swap = 124996kB [ 246.235726][T11037] 2097051 pages RAM [ 246.258602][T11037] 0 pages HighMem/MovableOnly [ 246.290767][T11037] 429768 pages reserved [ 246.319591][T11037] 0 pages cma reserved [ 247.182679][ T53] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 247.630885][T11184] queue_state_write: operation too long [ 247.661109][T11184] queue_state_write: use 'run', 'start' or 'kick' [ 248.155980][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.628636][T11214] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 249.253145][T11238] usbcore.quirks: string doesn't fit in 127 chars. [ 249.262515][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.328776][T11237] ima: policy update failed [ 249.374745][ T30] audit: type=1802 audit(6061332532.379:16): pid=11237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2585" res=0 errno=0 [ 250.073003][ T30] audit: type=1800 audit(6061332533.073:17): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2597" name="dbroot" dev="configfs" ino=25384 res=0 errno=0 [ 250.382341][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.389774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.331707][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.496294][T11307] random: crng reseeded on system resumption [ 252.409317][T11343] syz_tun: tun_chr_ioctl cmd 1074025684 [ 253.987830][T11397] kafs: addr_prefs: Invalid Command [ 254.460758][T11321] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 255.190313][T11441] blkio.reset_stats is deprecated [ 256.505167][T11331] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.746880][T11331] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 257.653868][T11528] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 258.334324][T11550] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 258.575782][T11417] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.812913][T11321] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.745562][T11629] Process accounting paused [ 260.882968][T11321] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.070199][T11711] Process accounting paused [ 264.921522][T11785] syz_tun: tun_chr_ioctl cmd 2147767521 [ 265.013894][T11788] [U]  [ 265.134200][T11791] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 265.134564][T11790] ima: policy update failed [ 265.164205][ T30] audit: type=1802 audit(6061332548.251:18): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2845" res=0 errno=0 [ 265.254250][T11797] bond0: option mode: unable to set because the bond device is up [ 265.407938][T11802] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 266.067955][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.074292][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.968337][T11955] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 270.025218][T11955] ep_00: uevent: failed to send synthetic uevent: -22 [ 270.344463][T11968] i2c i2c-0: delete_device: Extra parameters [ 271.057837][T11994] hub 1-0:1.0: USB hub found [ 271.093817][T11994] hub 1-0:1.0: 1 port detected [ 272.560055][T12042] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 274.785379][T12107] usb usb22: usbfs: process 12107 (syz.1.2968) did not claim interface 5 before use [ 281.485185][T12278] cougar: G6 mapped to F18 [ 281.665665][T12281] misc userio: Invalid payload size [ 285.087631][T12353] usb usb4: usbfs: process 12353 (syz.0.3078) did not claim interface 0 before use [ 289.052048][T12437] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 290.701424][T12473] Process accounting resumed [ 292.307670][T12517] random: crng reseeded on system resumption [ 293.104101][T12530] Process accounting resumed [ 294.439631][T12567] block2mtd: illegal erase size [ 297.519628][T11331] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 298.020102][T12638] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 298.523465][ T30] audit: type=1800 audit(6061332581.785:19): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3217" name="discovery_nqn" dev="configfs" ino=29867 res=0 errno=0 [ 298.749701][T12690] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 300.767393][T12764] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 303.441031][T12855] usb usb16: usbfs: process 12855 (syz.3.3324) did not claim interface 0 before use [ 304.596558][T12896] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.3343: 7 [ 306.783550][T12971] usb usb37: usbfs: process 12971 (syz.3.3381) did not claim interface 0 before use [ 310.251131][T13101] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 310.410608][T13105] qrtr: Invalid version 0 [ 310.545833][T13109] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 313.889307][T13224] ICMPv6: process `syz.1.3505' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 314.653766][T13250] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 314.832721][T13256] QAT: Stopping all acceleration devices. [ 315.256163][T13271] bond0: invalid ARP target specified [ 317.334683][T13341] QAT: Device 250 not found [ 319.001492][ T30] audit: type=1800 audit(6061332602.361:20): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3594" name="members" dev="configfs" ino=32187 res=0 errno=0 [ 320.476012][ T30] audit: type=1800 audit(6061332603.849:21): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3621" name="features" dev="configfs" ino=32358 res=0 errno=0 [ 320.546372][T13453] Process accounting paused [ 320.715777][T13462] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 322.044220][T13504] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 322.174240][T13504] CIFS mount error: No usable UNC path provided in device string! [ 322.174240][T13504] [ 322.223207][T13504] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.029299][T13538] writes to the poll attribute are ignored. [ 323.059488][T13538] please use driver specific parameters instead. [ 323.078870][T13540] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 323.212833][T13539] Process accounting paused [ 326.231374][T13656] kAFS: Invalid Command on /proc/fs/afs/cells file [ 327.180045][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.197139][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.239752][T13686] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 327.288683][T13686] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 327.336914][T13686] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 327.388477][T13686] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 327.421258][T13686] page dumped because: unmovable page [ 327.438184][T13686] page_owner info is not present (never set?) [ 329.853473][T13775] CIFS mount error: No usable UNC path provided in device string! [ 329.853473][T13775] [ 329.909298][T13775] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.459470][T13799] bond0: no command found in slaves file - use +ifname or -ifname [ 331.063518][T13807] could not allocate digest TFM handle [ 331.829764][T13844] nvme_fcloop: unknown parameter or missing value '' [ 334.813889][T13952] syz_tun: tun_chr_ioctl cmd 1074025698 [ 335.408816][T13970] ICMPv6: process `syz.1.3871' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 335.978299][T13990] capability: warning: `syz.1.3880' uses 32-bit capabilities (legacy support in use) [ 337.431305][T14040] Invalid ELF header magic: != ELF [ 337.594900][T14037] zswap: compressor _ not available [ 338.243334][T14072] [U] 0="/ [ 338.274814][T14072] [U] [ 338.277638][T14072] [U] EeQ@ [ 338.302975][T14071] [U]  [ 338.952544][T14099] program syz.2.3929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.228903][T14107] : Can't lookup blockdev [ 340.712724][T14153] delete_channel: no stack [ 343.398153][T14224] kafs: addr_prefs: Invalid Command [ 349.829827][T14399] kAFS: Invalid Command on /proc/fs/afs/cells file [ 350.513649][T14418] Process accounting resumed [ 352.511878][T14477] binder: 14476:14477 ioctl 541b fffffffffffff4e0 returned -22 [ 353.209648][T14495] Process accounting resumed [ 353.358494][T14503] program syz.1.4126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.934641][T14551] usb usb36: usbfs: process 14551 (syz.0.4149) did not claim interface 0 before use [ 356.906187][T14624] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078406000 pfn:0x78400 [ 356.956201][T14624] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 356.997625][T14624] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 357.032658][T14624] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 357.073121][T14624] raw: ffff888078406000 0000000000000000 00000016ffffffff 0000000000000000 [ 357.119637][T14624] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 357.153181][T14624] head: ffff888078406000 0000000000000000 00000016ffffffff 0000000000000000 [ 357.194288][T14624] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 357.229832][T14624] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 357.276542][T14624] page dumped because: unmovable page [ 357.300922][T14624] page_owner tracks the page as allocated [ 357.333852][T14624] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 344230084983, free_ts 344229536709 [ 357.416602][T14624] post_alloc_hook+0x1af/0x220 [ 357.436911][T14624] get_page_from_freelist+0xd0b/0x31a0 [ 357.472241][T14624] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 357.514300][T14624] alloc_pages_mpol+0x1fb/0x550 [ 357.540095][T14624] alloc_pages_noprof+0x131/0x390 [ 357.575906][T14624] skb_page_frag_refill+0x186/0x5c0 [ 357.598518][T14624] try_fill_recv+0x7e4/0x2930 [ 357.620454][T14644] : Can't lookup blockdev [ 357.625131][T14624] virtnet_poll+0x18d5/0x3e00 [ 357.638907][T14624] __napi_poll.constprop.0+0xb3/0x540 [ 357.668646][T14624] net_rx_action+0x9f9/0xfa0 [ 357.719845][T14624] handle_softirqs+0x219/0x950 [ 357.724797][T14624] run_ksoftirqd+0x3a/0x60 [ 357.800229][T14624] smpboot_thread_fn+0x3f7/0xae0 [ 357.805259][T14624] kthread+0x3c5/0x780 [ 357.843599][T14624] ret_from_fork+0x983/0xb10 [ 357.860769][T14624] ret_from_fork_asm+0x1a/0x30 [ 357.865675][T14624] page last free pid 15 tgid 15 stack trace: [ 357.915595][T14624] __free_frozen_pages+0x7df/0x1170 [ 357.947249][T14624] __folio_put+0x329/0x450 [ 357.951923][T14624] skb_release_data+0x81a/0x9e0 [ 357.998897][T14624] __kfree_skb+0x4f/0x70 [ 358.003215][T14624] tcp_ack+0x1d41/0x6150 [ 358.026229][T14624] tcp_rcv_established+0x10b6/0x36e0 [ 358.052052][T14624] tcp_v4_do_rcv+0xc65/0x10a0 [ 358.075126][T14624] tcp_v4_rcv+0x3077/0x4db0 [ 358.085189][T14624] ip_protocol_deliver_rcu+0xba/0x4c0 [ 358.116295][T14624] ip_local_deliver_finish+0x3f2/0x720 [ 358.121838][T14624] ip_local_deliver+0x18e/0x1f0 [ 358.165998][T14624] ip_sublist_rcv_finish+0x2ce/0x660 [ 358.171552][T14624] ip_list_rcv_finish+0x590/0x780 [ 358.219910][T14624] ip_list_rcv+0x335/0x450 [ 358.224418][T14624] __netif_receive_skb_list_core+0x752/0x950 [ 358.266348][T14624] netif_receive_skb_list_internal+0x75f/0xdc0 [ 360.246165][T14730] bcache: register_bcache() error : failed to open device [ 361.223431][T11331] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 361.231093][T11331] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 366.124567][ T30] audit: type=1400 audit(6061332649.726:22): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14924 comm="syz.2.4334" [ 366.539950][T14941] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 366.656448][T14944] kfence: disabled [ 367.754016][T11331] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 367.761864][T11331] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 367.810027][T14988] ACPI: Can not change Invalid GPE/Fixed Event status [ 367.976828][T14992] WARNING! power/level is deprecated; use power/control instead [ 373.851305][T15177] ubi31: attaching mtd0 [ 373.880824][T15177] ubi31: scanning is finished [ 373.914244][T15177] ubi31: empty MTD device detected [ 374.163324][T15177] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 374.216582][T15177] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 374.251802][T15177] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 374.312142][T15177] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 374.342647][T15177] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 374.393890][T15177] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 374.439113][T15177] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1882039606 [ 374.521391][T15177] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 374.570853][T15184] ubi31: background thread "ubi_bgt31d" started, PID 15184 [ 374.631745][T15196] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 374.631745][T15196] [ 377.099274][T15276] bond0: option packets_per_slave: invalid value ( Xnp) [ 377.197540][T15276] bond0: option packets_per_slave: allowed values 0 - 65535 [ 379.234955][T15348] vivid-003: ================= START STATUS ================= [ 379.274529][T15348] vivid-003: Radio HW Seek Mode: Bounded [ 379.307463][T15348] vivid-003: Radio Programmable HW Seek: false [ 379.338247][T15348] vivid-003: RDS Rx I/O Mode: Block I/O [ 379.376022][T15348] vivid-003: Generate RBDS Instead of RDS: false [ 379.395737][T15348] vivid-003: RDS Reception: true [ 379.425821][T15348] vivid-003: RDS Program Type: 0 inactive [ 379.450504][T15348] vivid-003: RDS PS Name: inactive [ 379.487149][T15348] vivid-003: RDS Radio Text: inactive [ 379.508777][T15348] vivid-003: RDS Traffic Announcement: false inactive [ 379.536404][T15348] vivid-003: RDS Traffic Program: false inactive [ 379.570039][T15348] vivid-003: RDS Music: false inactive [ 379.604615][T15348] vivid-003: ================== END STATUS ================== [ 380.663237][T15382] Process accounting paused [ 381.462561][T15413] cifs: Unknown parameter ';4.հhf[GL̺_,"̒ |TeVז+#L/V")WbH#' [ 381.509077][T15413] CIFS mount error: No usable UNC path provided in device string! [ 381.509077][T15413] [ 381.558767][T15413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.430227][T11331] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 382.446011][T11331] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 383.414216][T15452] Process accounting paused [ 384.002762][T15471] random: crng reseeded on system resumption [ 387.493639][T15553] ecryptfs_miscdev_write: Invalid packet size [192] [ 387.733302][T15557] tipc: Can't bind to reserved service type 0 [ 388.320673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.327034][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.429366][T15573] bonding: no command found in bonding_masters - use +ifname or -ifname [ 392.161271][T15674] block2mtd: parameter too long [ 392.602847][T15688] usb usb2: usbfs: process 15688 (syz.3.4707) did not claim interface 0 before use [ 393.146751][T15704] QAT: failed to copy from user. [ 396.898202][T15793] Setting dangerous option i915.mitigations - tainting kernel [ 400.480328][ T9] Process accounting resumed [ 401.126847][T15913] kAFS: No cell specified [ 401.486624][T15919] sd 0:0:1:0: PR command failed: 1026 [ 401.511214][T15919] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 401.517974][T15919] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 402.212016][T11349] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.204489][T15949] usbip-vudc usbip-vudc.0: gadget not bound [ 409.542042][ T30] audit: type=1800 audit(6061332693.372:23): pid=16097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4905" name="members" dev="configfs" ino=40803 res=0 errno=0 [ 412.258406][T15896] Process accounting resumed [ 413.318648][T16194] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 413.364532][T16194] net nr1: uevent: failed to send synthetic uevent: -22 [ 413.388369][T16195] Process accounting resumed [ 414.099614][T16223] kAFS: Invalid Command on /proc/fs/afs/cells file [ 419.398082][T16407] program syz.2.5054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.460400][T16407] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 420.166271][T16432] __vm_enough_memory: pid: 16432, comm: syz.2.5067, bytes: 4398046511104 not enough memory for the allocation [ 421.722559][T16481] udc dummy_udc.0: soft-connect without a gadget driver [ 422.599978][T16506] cougar: G6 mapped to space [ 422.633206][ T30] audit: type=1800 audit(6061332706.540:24): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5102" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 422.915100][T16516] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 425.296041][T16602] program syz.3.5150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.883773][T16696] sg_write: data in/out 14745563/34144 bytes for SCSI command 0x0-- guessing data in; [ 427.883773][T16696] program syz.2.5196 not setting count and/or reply_len properly [ 427.986941][T16698] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 427.986941][T16698] program syz.3.5197 not setting count and/or reply_len properly [ 428.412946][T16712] binder: 16711:16712 ioctl 40046210 0 returned -14 [ 428.978127][T16733] bond0: invalid ARP target specified [ 429.062279][T16735] bonding: no command found in bonding_masters - use +ifname or -ifname [ 431.092794][T16793] < [ 431.731071][T11331] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 431.735376][T11331] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 431.752298][T11331] Bluetooth: hci0: Dropping invalid advertising data [ 431.759686][T11331] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 434.538298][T16899] __vm_enough_memory: pid: 16899, comm: syz.1.5294, bytes: 4398046511104 not enough memory for the allocation [ 435.762780][T16929] binder: 16925:16929 ioctl c00c6211 0 returned -14 [ 439.465510][T17030] ================================================================== [ 439.465525][T17030] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 439.465570][T17030] Write of size 8 at addr ffffc90003ea9000 by task syz.3.5358/17030 [ 439.465589][T17030] [ 439.465604][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.3.5358 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 439.465642][T17030] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 439.465653][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.465670][T17030] Call Trace: [ 439.465678][T17030] [ 439.465687][T17030] dump_stack_lvl+0x116/0x1f0 [ 439.465725][T17030] print_report+0xcd/0x630 [ 439.465761][T17030] ? __virt_addr_valid+0x81/0x610 [ 439.465801][T17030] ? sys_imageblit+0x1a6f/0x1e60 [ 439.465835][T17030] kasan_report+0xe0/0x110 [ 439.465870][T17030] ? sys_imageblit+0x1a6f/0x1e60 [ 439.465908][T17030] sys_imageblit+0x1a6f/0x1e60 [ 439.465945][T17030] ? panic_on_this_cpu+0x32/0x40 [ 439.465967][T17030] ? _prb_read_valid+0x73c/0x890 [ 439.465992][T17030] ? __pfx_sys_imageblit+0x10/0x10 [ 439.466030][T17030] ? __pfx__prb_read_valid+0x10/0x10 [ 439.466055][T17030] ? __asan_memcpy+0x3c/0x60 [ 439.466083][T17030] ? desc_read+0x2ae/0x370 [ 439.466105][T17030] ? panic_on_this_cpu+0x32/0x40 [ 439.466127][T17030] ? _prb_read_valid+0x73c/0x890 [ 439.466153][T17030] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 439.466192][T17030] soft_cursor+0x524/0xa10 [ 439.466230][T17030] ? fb_get_color_depth+0x120/0x250 [ 439.466257][T17030] bit_cursor+0xe8c/0x17e0 [ 439.466289][T17030] ? __pfx_bit_cursor+0x10/0x10 [ 439.466321][T17030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.466359][T17030] ? get_color+0x1da/0x450 [ 439.466382][T17030] ? __pfx_bit_cursor+0x10/0x10 [ 439.466409][T17030] fbcon_cursor+0x437/0x5d0 [ 439.466432][T17030] ? mark_lock+0x9d1/0x9f0 [ 439.466454][T17030] hide_cursor+0x87/0x220 [ 439.466483][T17030] do_con_write+0x23fc/0x8280 [ 439.466521][T17030] ? trace_contention_end+0xdd/0x110 [ 439.466546][T17030] ? __mutex_lock+0x27b/0x1ca0 [ 439.466583][T17030] ? __pfx_prb_read_valid+0x10/0x10 [ 439.466609][T17030] ? find_held_lock+0x2b/0x80 [ 439.466638][T17030] ? n_tty_write+0x5aa/0x1280 [ 439.466660][T17030] ? n_tty_write+0x553/0x1280 [ 439.466684][T17030] ? __pfx___mutex_lock+0x10/0x10 [ 439.466721][T17030] ? __mutex_unlock_slowpath+0x161/0x790 [ 439.466760][T17030] ? __pfx_do_con_write+0x10/0x10 [ 439.466795][T17030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.466836][T17030] ? con_write+0x93/0xb0 [ 439.466871][T17030] con_write+0x23/0xb0 [ 439.466905][T17030] n_tty_write+0x434/0x1280 [ 439.466934][T17030] ? __pfx_n_tty_write+0x10/0x10 [ 439.466958][T17030] ? __pfx_woken_wake_function+0x10/0x10 [ 439.466987][T17030] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 439.467024][T17030] ? __pfx_n_tty_write+0x10/0x10 [ 439.467048][T17030] file_tty_write.constprop.0+0x503/0x9b0 [ 439.467087][T17030] redirected_tty_write+0xd4/0x120 [ 439.467121][T17030] vfs_write+0x7d3/0x11d0 [ 439.467154][T17030] ? __pfx_redirected_tty_write+0x10/0x10 [ 439.467190][T17030] ? __pfx_vfs_write+0x10/0x10 [ 439.467231][T17030] ? find_held_lock+0x2b/0x80 [ 439.467270][T17030] ksys_write+0x12a/0x250 [ 439.467303][T17030] ? __pfx_ksys_write+0x10/0x10 [ 439.467343][T17030] do_syscall_64+0xcd/0xf80 [ 439.467380][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.467404][T17030] RIP: 0033:0x7f22bbf8f7c9 [ 439.467423][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.467447][T17030] RSP: 002b:00007f22bcf10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.467469][T17030] RAX: ffffffffffffffda RBX: 00007f22bc1e5fa0 RCX: 00007f22bbf8f7c9 [ 439.467484][T17030] RDX: 0000000000000d4f RSI: 0000200000002940 RDI: 0000000000000003 [ 439.467499][T17030] RBP: 00007f22bc013f91 R08: 0000000000000000 R09: 0000000000000000 [ 439.467513][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.467527][T17030] R13: 00007f22bc1e6038 R14: 00007f22bc1e5fa0 R15: 00007ffee30cadc8 [ 439.467550][T17030] [ 439.467558][T17030] [ 439.467564][T17030] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003ba9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 439.467623][T17030] Memory state around the buggy address: [ 439.467635][T17030] ffffc90003ea8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.467652][T17030] ffffc90003ea8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.467668][T17030] >ffffc90003ea9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.467681][T17030] ^ [ 439.467693][T17030] ffffc90003ea9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.467709][T17030] ffffc90003ea9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.467722][T17030] ================================================================== [ 439.467735][T17030] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 439.467752][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.3.5358 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 439.467791][T17030] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 439.467802][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.467816][T17030] Call Trace: [ 439.467824][T17030] [ 439.467832][T17030] dump_stack_lvl+0x3d/0x1f0 [ 439.467868][T17030] vpanic+0x640/0x6f0 [ 439.467892][T17030] panic+0xca/0xd0 [ 439.467914][T17030] ? __pfx_panic+0x10/0x10 [ 439.467944][T17030] check_panic_on_warn+0xab/0xb0 [ 439.467969][T17030] end_report+0x107/0x160 [ 439.468005][T17030] kasan_report+0xee/0x110 [ 439.468042][T17030] ? sys_imageblit+0x1a6f/0x1e60 [ 439.468081][T17030] sys_imageblit+0x1a6f/0x1e60 [ 439.468118][T17030] ? panic_on_this_cpu+0x32/0x40 [ 439.468140][T17030] ? _prb_read_valid+0x73c/0x890 [ 439.468186][T17030] ? __pfx_sys_imageblit+0x10/0x10 [ 439.468230][T17030] ? __pfx__prb_read_valid+0x10/0x10 [ 439.468256][T17030] ? __asan_memcpy+0x3c/0x60 [ 439.468285][T17030] ? desc_read+0x2ae/0x370 [ 439.468308][T17030] ? panic_on_this_cpu+0x32/0x40 [ 439.468330][T17030] ? _prb_read_valid+0x73c/0x890 [ 439.468358][T17030] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 439.468397][T17030] soft_cursor+0x524/0xa10 [ 439.468428][T17030] ? fb_get_color_depth+0x120/0x250 [ 439.468455][T17030] bit_cursor+0xe8c/0x17e0 [ 439.468486][T17030] ? __pfx_bit_cursor+0x10/0x10 [ 439.468519][T17030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.468556][T17030] ? get_color+0x1da/0x450 [ 439.468579][T17030] ? __pfx_bit_cursor+0x10/0x10 [ 439.468606][T17030] fbcon_cursor+0x437/0x5d0 [ 439.468629][T17030] ? mark_lock+0x9d1/0x9f0 [ 439.468651][T17030] hide_cursor+0x87/0x220 [ 439.468681][T17030] do_con_write+0x23fc/0x8280 [ 439.468716][T17030] ? trace_contention_end+0xdd/0x110 [ 439.468741][T17030] ? __mutex_lock+0x27b/0x1ca0 [ 439.468778][T17030] ? __pfx_prb_read_valid+0x10/0x10 [ 439.468804][T17030] ? find_held_lock+0x2b/0x80 [ 439.468835][T17030] ? n_tty_write+0x5aa/0x1280 [ 439.468857][T17030] ? n_tty_write+0x553/0x1280 [ 439.468881][T17030] ? __pfx___mutex_lock+0x10/0x10 [ 439.468920][T17030] ? __mutex_unlock_slowpath+0x161/0x790 [ 439.468959][T17030] ? __pfx_do_con_write+0x10/0x10 [ 439.468995][T17030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.469038][T17030] ? con_write+0x93/0xb0 [ 439.469074][T17030] con_write+0x23/0xb0 [ 439.469116][T17030] n_tty_write+0x434/0x1280 [ 439.469146][T17030] ? __pfx_n_tty_write+0x10/0x10 [ 439.469170][T17030] ? __pfx_woken_wake_function+0x10/0x10 [ 439.469205][T17030] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 439.469242][T17030] ? __pfx_n_tty_write+0x10/0x10 [ 439.469266][T17030] file_tty_write.constprop.0+0x503/0x9b0 [ 439.469306][T17030] redirected_tty_write+0xd4/0x120 [ 439.469341][T17030] vfs_write+0x7d3/0x11d0 [ 439.469375][T17030] ? __pfx_redirected_tty_write+0x10/0x10 [ 439.469412][T17030] ? __pfx_vfs_write+0x10/0x10 [ 439.469444][T17030] ? find_held_lock+0x2b/0x80 [ 439.469484][T17030] ksys_write+0x12a/0x250 [ 439.469518][T17030] ? __pfx_ksys_write+0x10/0x10 [ 439.469557][T17030] do_syscall_64+0xcd/0xf80 [ 439.469595][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.469619][T17030] RIP: 0033:0x7f22bbf8f7c9 [ 439.469637][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.469660][T17030] RSP: 002b:00007f22bcf10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.469682][T17030] RAX: ffffffffffffffda RBX: 00007f22bc1e5fa0 RCX: 00007f22bbf8f7c9 [ 439.469698][T17030] RDX: 0000000000000d4f RSI: 0000200000002940 RDI: 0000000000000003 [ 439.469713][T17030] RBP: 00007f22bc013f91 R08: 0000000000000000 R09: 0000000000000000 [ 439.469729][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.469744][T17030] R13: 00007f22bc1e6038 R14: 00007f22bc1e5fa0 R15: 00007ffee30cadc8 [ 439.469767][T17030] [ 439.469838][T17030] Kernel Offset: disabled