last executing test programs: 5m44.365875408s ago: executing program 3 (id=32): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x13, 0x7) 5m44.10289449s ago: executing program 3 (id=37): prctl$auto_PR_GET_TSC(0x19, 0x400000000000006, 0x8000000000, 0x0, 0xe) 5m43.859743606s ago: executing program 3 (id=41): openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000001b80), 0x80202, 0x0) 5m43.624027185s ago: executing program 3 (id=45): pselect6$auto(0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 5m43.38405006s ago: executing program 3 (id=49): tkill$auto(0x1, 0x7) 5m42.771556646s ago: executing program 3 (id=58): pselect6$auto(0xd, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x74, 0xfffffffffffffffe}, 0x0) 5m42.352801841s ago: executing program 32 (id=58): pselect6$auto(0xd, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x74, 0xfffffffffffffffe}, 0x0) 2.504765189s ago: executing program 0 (id=5133): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 2.063306544s ago: executing program 0 (id=5137): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 1.532870303s ago: executing program 1 (id=5144): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x102, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x8000000000000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffff7, 0xc00, 0x2c, 0x2c, 0x0, 0x2}) 1.435558107s ago: executing program 4 (id=5145): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) 1.358593115s ago: executing program 0 (id=5147): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064ad, 0x8) 1.291955379s ago: executing program 1 (id=5148): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x1ed242, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.114013766s ago: executing program 4 (id=5149): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) pidfd_open$auto(r0, 0x0) 1.099302006s ago: executing program 2 (id=5150): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 1.046520121s ago: executing program 1 (id=5151): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x80002) 930.932298ms ago: executing program 0 (id=5152): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/misc\x00', 0x20a40, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 873.799691ms ago: executing program 2 (id=5153): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064aa, 0x20000a) 857.763036ms ago: executing program 4 (id=5154): r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) preadv2$auto(r0, &(0x7f0000000000)={0x0, 0x34a}, 0x800000000006, 0x8000, 0x5, 0x0) 808.832618ms ago: executing program 1 (id=5155): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)="ba7f75", 0x3) 658.130271ms ago: executing program 4 (id=5156): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x2288, 0xffffffffffffffff) 643.907727ms ago: executing program 2 (id=5157): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r0, 0x80000000000000) 600.696278ms ago: executing program 1 (id=5158): pidfd_open$auto(0x1, 0x0) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 498.649272ms ago: executing program 0 (id=5159): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/4096, 0x1000) 429.322374ms ago: executing program 4 (id=5160): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x7ffffffff000) 410.157923ms ago: executing program 2 (id=5161): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) 329.118993ms ago: executing program 1 (id=5162): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/scheduler\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) 227.929975ms ago: executing program 4 (id=5163): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x900064b6, 0x6162) 207.277288ms ago: executing program 2 (id=5164): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000003c0)=""/212, 0xd4) 79.684958ms ago: executing program 0 (id=5165): setresuid$auto(0x8, 0x8, 0x0) swapon$auto(0x0, 0x2) 0s ago: executing program 2 (id=5166): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd5/sched/owned_by_driver\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000100)=""/169, 0xa9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 93.969383][ T5850] cgroup: Unknown subsys name 'net' [ 94.081834][ T5850] cgroup: Unknown subsys name 'cpuset' [ 94.091873][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.028766][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.288441][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.299015][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.303037][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.306794][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.320926][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.322936][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.328797][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.337448][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.351216][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.351829][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.359793][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.372995][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.380825][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.387471][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.395075][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.423861][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.431921][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.442692][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.453409][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.461746][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.004128][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 99.059559][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 99.345370][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 99.359259][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.366537][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.374672][ T5864] bridge_slave_0: entered allmulticast mode [ 99.383035][ T5864] bridge_slave_0: entered promiscuous mode [ 99.392361][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 99.438727][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.446051][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.453603][ T5864] bridge_slave_1: entered allmulticast mode [ 99.461287][ T5864] bridge_slave_1: entered promiscuous mode [ 99.490515][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.497972][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.505392][ T5860] bridge_slave_0: entered allmulticast mode [ 99.513140][ T5860] bridge_slave_0: entered promiscuous mode [ 99.559331][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.567504][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.574757][ T5860] bridge_slave_1: entered allmulticast mode [ 99.582840][ T5860] bridge_slave_1: entered promiscuous mode [ 99.600802][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.614156][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.721124][ T5864] team0: Port device team_slave_0 added [ 99.738253][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.764325][ T5864] team0: Port device team_slave_1 added [ 99.803019][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.886130][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.893659][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.901583][ T5862] bridge_slave_0: entered allmulticast mode [ 99.909072][ T5862] bridge_slave_0: entered promiscuous mode [ 99.919002][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.926336][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.953977][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.966125][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.973679][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.981020][ T5870] bridge_slave_0: entered allmulticast mode [ 99.988567][ T5870] bridge_slave_0: entered promiscuous mode [ 99.998337][ T5860] team0: Port device team_slave_0 added [ 100.004548][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.014028][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.021300][ T5870] bridge_slave_1: entered allmulticast mode [ 100.029300][ T5870] bridge_slave_1: entered promiscuous mode [ 100.043678][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.051270][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.059036][ T5862] bridge_slave_1: entered allmulticast mode [ 100.066431][ T5862] bridge_slave_1: entered promiscuous mode [ 100.073822][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.081082][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.107110][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.127964][ T5860] team0: Port device team_slave_1 added [ 100.183261][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.225639][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.283507][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.297531][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.308209][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.315188][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.341410][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.398330][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.405320][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.431648][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.448931][ T5864] hsr_slave_0: entered promiscuous mode [ 100.455659][ T5864] hsr_slave_1: entered promiscuous mode [ 100.465415][ T5862] team0: Port device team_slave_0 added [ 100.478037][ T5873] Bluetooth: hci1: command tx timeout [ 100.478240][ T5877] Bluetooth: hci0: command tx timeout [ 100.489920][ T5867] Bluetooth: hci3: command tx timeout [ 100.511699][ T5862] team0: Port device team_slave_1 added [ 100.538123][ T5870] team0: Port device team_slave_0 added [ 100.548171][ T5870] team0: Port device team_slave_1 added [ 100.557755][ T5867] Bluetooth: hci2: command tx timeout [ 100.643061][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.650872][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.677395][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.722000][ T5860] hsr_slave_0: entered promiscuous mode [ 100.729220][ T5860] hsr_slave_1: entered promiscuous mode [ 100.735916][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 100.741988][ T5860] Cannot create hsr debugfs directory [ 100.748574][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.755570][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.781892][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.810214][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.817577][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.843897][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.857072][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.864059][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.890238][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.052562][ T5862] hsr_slave_0: entered promiscuous mode [ 101.059415][ T5862] hsr_slave_1: entered promiscuous mode [ 101.065677][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 101.071498][ T5862] Cannot create hsr debugfs directory [ 101.166303][ T5870] hsr_slave_0: entered promiscuous mode [ 101.173411][ T5870] hsr_slave_1: entered promiscuous mode [ 101.180268][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 101.186059][ T5870] Cannot create hsr debugfs directory [ 101.509483][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.524292][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.560174][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.593168][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.689996][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.703792][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.716739][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.735365][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.826179][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.848280][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.861409][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.872709][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.988162][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.005679][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.031583][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.046351][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.114301][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.185392][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.200629][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.242013][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.249330][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.269298][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.276462][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.299607][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.319665][ T43] cfg80211: failed to load regulatory.db [ 102.371866][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.379145][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.408497][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.435852][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.443844][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.534619][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.558105][ T5867] Bluetooth: hci3: command tx timeout [ 102.563699][ T5867] Bluetooth: hci0: command tx timeout [ 102.567336][ T5877] Bluetooth: hci1: command tx timeout [ 102.580897][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.600297][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.607550][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.638486][ T5877] Bluetooth: hci2: command tx timeout [ 102.676407][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.683776][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.742000][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.805765][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.813042][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.849886][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.857129][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.053295][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.153032][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.374384][ T5864] veth0_vlan: entered promiscuous mode [ 103.428543][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.448134][ T5864] veth1_vlan: entered promiscuous mode [ 103.640664][ T5864] veth0_macvtap: entered promiscuous mode [ 103.655726][ T5860] veth0_vlan: entered promiscuous mode [ 103.676415][ T5864] veth1_macvtap: entered promiscuous mode [ 103.725625][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.745365][ T5860] veth1_vlan: entered promiscuous mode [ 103.765751][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.781576][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.804749][ T3515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.826696][ T3515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.836479][ T3515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.854463][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.877806][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.006330][ T5860] veth0_macvtap: entered promiscuous mode [ 104.025353][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.051143][ T5860] veth1_macvtap: entered promiscuous mode [ 104.057984][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.134659][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.142959][ T5862] veth0_vlan: entered promiscuous mode [ 104.146985][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.181642][ T5862] veth1_vlan: entered promiscuous mode [ 104.205576][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.215553][ T5870] veth0_vlan: entered promiscuous mode [ 104.254157][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.275060][ T5870] veth1_vlan: entered promiscuous mode [ 104.290928][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.309294][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.325973][ T5862] veth0_macvtap: entered promiscuous mode [ 104.340930][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.353654][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.378409][ T5862] veth1_macvtap: entered promiscuous mode [ 104.395429][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.464715][ T5870] veth0_macvtap: entered promiscuous mode [ 104.506096][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.538249][ T5870] veth1_macvtap: entered promiscuous mode [ 104.562811][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.639314][ T5877] Bluetooth: hci1: command tx timeout [ 104.639649][ T5867] Bluetooth: hci3: command tx timeout [ 104.652384][ T5867] Bluetooth: hci0: command tx timeout [ 104.679577][ T3515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.692775][ T3515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.711788][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.720400][ T5867] Bluetooth: hci2: command tx timeout [ 104.732540][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.743855][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.752883][ T3515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.771125][ T3515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.825780][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.892518][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.906746][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.920354][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.929179][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.952989][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.967289][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.218785][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.242175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.314804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.339619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.493147][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.526423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.642121][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.672335][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.718481][ T5867] Bluetooth: hci3: command tx timeout [ 106.719959][ T5873] Bluetooth: hci0: command tx timeout [ 106.729741][ T5877] Bluetooth: hci1: command tx timeout [ 106.797420][ T5877] Bluetooth: hci2: command tx timeout [ 106.803303][ T6011] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.466746][ T6067] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.614084][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.776209][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.921851][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.103826][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.485053][ T5877] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 109.590616][ T49] bridge_slave_1: left allmulticast mode [ 109.644819][ T49] bridge_slave_1: left promiscuous mode [ 109.668061][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.793721][ T49] bridge_slave_0: left allmulticast mode [ 109.800944][ T49] bridge_slave_0: left promiscuous mode [ 109.806806][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.982843][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.000907][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.028866][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.049589][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.060247][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.275411][ T6147] random: crng reseeded on system resumption [ 111.291282][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.321998][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.360515][ T49] bond0 (unregistering): Released all slaves [ 112.158342][ T5877] Bluetooth: hci3: command tx timeout [ 112.315282][ T30] audit: type=1800 audit(1754308205.607:2): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.100" name="version" dev="configfs" ino=8507 res=0 errno=0 [ 112.948594][ T49] hsr_slave_0: left promiscuous mode [ 112.983437][ T49] hsr_slave_1: left promiscuous mode [ 112.994801][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.029641][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.075410][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.106107][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.220846][ T49] veth1_macvtap: left promiscuous mode [ 113.226784][ T49] veth0_macvtap: left promiscuous mode [ 113.290864][ T49] veth1_vlan: left promiscuous mode [ 113.296537][ T49] veth0_vlan: left promiscuous mode [ 114.237510][ T5877] Bluetooth: hci3: command tx timeout [ 114.915545][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.165599][ T49] team0 (unregistering): Port device team_slave_1 removed [ 115.276583][ T49] team0 (unregistering): Port device team_slave_0 removed [ 116.320575][ T5877] Bluetooth: hci3: command tx timeout [ 116.556224][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 117.379196][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.399137][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.427180][ T6102] bridge_slave_0: entered allmulticast mode [ 117.448678][ T6102] bridge_slave_0: entered promiscuous mode [ 117.494532][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.528156][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.553693][ T6102] bridge_slave_1: entered allmulticast mode [ 117.573122][ T6102] bridge_slave_1: entered promiscuous mode [ 117.735082][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.785955][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.128077][ T6102] team0: Port device team_slave_0 added [ 118.156567][ T6102] team0: Port device team_slave_1 added [ 118.362396][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.371781][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.401340][ T5877] Bluetooth: hci3: command tx timeout [ 118.412048][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.506786][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.547079][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.627871][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.642542][ T6375] random: crng reseeded on system resumption [ 118.901417][ T6102] hsr_slave_0: entered promiscuous mode [ 118.918484][ T6102] hsr_slave_1: entered promiscuous mode [ 118.940285][ T6102] debugfs: 'hsr0' already exists in 'hsr' [ 118.996998][ T6102] Cannot create hsr debugfs directory [ 119.759179][ T6412] random: crng reseeded on system resumption [ 119.774083][ T6102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.842127][ T6102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.911372][ T6102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.956103][ T6102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.508086][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.602785][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.646484][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.655061][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.818365][ T30] audit: type=1800 audit(1754308218.103:3): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="discovery_nqn" dev="configfs" ino=9034 res=0 errno=0 [ 120.830084][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.849042][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.532730][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.045175][ T6102] veth0_vlan: entered promiscuous mode [ 122.095106][ T6102] veth1_vlan: entered promiscuous mode [ 122.172775][ T6102] veth0_macvtap: entered promiscuous mode [ 122.201489][ T6102] veth1_macvtap: entered promiscuous mode [ 122.233043][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.259554][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.284403][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.299308][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.318661][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.329950][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.443102][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.463672][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.518870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.534768][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.297724][ T6683] futex_wake_op: syz.0.296 tries to shift op by -2048; fix this program [ 128.370973][ T6688] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.719426][ T6731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.274045][ T30] audit: type=1800 audit(1754308407.567:4): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.323" name="features" dev="configfs" ino=10726 res=0 errno=0 [ 131.472613][ T5877] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 132.782609][ T30] audit: type=1800 audit(1754308410.077:5): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.363" name="lu_gp_id" dev="configfs" ino=9822 res=0 errno=0 [ 143.265148][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.281125][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.804920][ T30] audit: type=1800 audit(1843104521.402:6): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.517" name="trace_pipe" dev="tracefs" ino=1108 res=0 errno=0 [ 151.564293][ T7438] syz.0.612(7438): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 152.717080][ T7473] Invalid ELF header magic: != ELF [ 153.604829][ T7501] mmap: syz.2.637 (7501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.385813][ T30] audit: type=1800 audit(1843104527.302:7): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.647" name="lu_gp_id" dev="configfs" ino=12893 res=0 errno=0 [ 157.170577][ T7611] ptrace attach of "./syz-executor exec"[6102] was attempted by "./syz-executor exec"[7611] [ 158.302787][ T5877] Bluetooth: hci0: unexpected event 0x3c length: 728 > 7 [ 160.480198][ T7698] ptrace attach of "./syz-executor exec"[6102] was attempted by "./syz-executor exec"[7698] [ 160.994541][ T7713] random: crng reseeded on system resumption [ 161.951439][ T7742] Unable to find swap-space signature [ 164.857314][ T30] audit: type=1800 audit(6138071833.828:8): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.787" name="dbroot" dev="configfs" ino=12187 res=0 errno=0 [ 172.320292][ T8050] Process accounting resumed [ 179.524888][ T8263] ima: policy update failed [ 179.565585][ T30] audit: type=1802 audit(4294968324.423:9): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1002" res=0 errno=0 [ 179.588600][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.035085][ T8344] Unable to find swap-space signature [ 182.286559][ T8352] syz_tun: tun_chr_ioctl cmd 1074025681 [ 184.408945][ T30] audit: type=1800 audit(4294968329.288:10): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1080" name="dummy_udc" dev="gadgetfs" ino=5881 res=0 errno=0 [ 184.753108][ T5877] Bluetooth: hci3: unexpected event 0x06 length: 124 > 3 [ 185.127426][ T8455] ======================================================= [ 185.127426][ T8455] WARNING: The mand mount option has been deprecated and [ 185.127426][ T8455] and is ignored by this kernel. Remove the mand [ 185.127426][ T8455] option from the mount to silence this warning. [ 185.127426][ T8455] ======================================================= [ 194.983711][ T8823] syz_tun: tun_chr_ioctl cmd 1074812118 [ 196.132670][ T30] audit: type=1326 audit(4294968341.069:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.1303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff01618eb69 code=0x0 [ 198.132322][ T30] audit: type=1800 audit(4294968343.069:12): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1334" name="trace_pipe" dev="tracefs" ino=1065 res=0 errno=0 [ 198.578772][ T8948] syz_tun: tun_chr_ioctl cmd 1074025680 [ 198.885019][ T8897] kexec: Could not allocate control_code_buffer [ 201.091384][ T9036] kfence: disabled [ 201.253853][ T9041] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 202.302911][ T9080] Process accounting paused [ 202.828791][ T9106] vhci_hcd: invalid port number 16 [ 202.835613][ T9106] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 203.076827][ T9116] block2mtd: illegal erase size [ 204.385950][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.399959][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.189770][ T9320] usb usb24: usbfs: process 9320 (syz.2.1516) did not claim interface 0 before use [ 209.230383][ T9323] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 209.680203][ T9335] usb usb16: usbfs: process 9335 (syz.2.1523) did not claim interface 0 before use [ 209.863721][ T9339] hub 8-0:1.0: USB hub found [ 209.888956][ T9339] hub 8-0:1.0: 1 port detected [ 210.153233][ T5877] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 212.016708][ T9416] kafs: addr_prefs: Invalid Command [ 216.466746][ T9561] bond0: no command found in slaves file - use +ifname or -ifname [ 216.827521][ T9526] kexec: Could not allocate control_code_buffer [ 217.093729][ T5877] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 217.716261][ T9599] hub 8-0:1.0: USB hub found [ 217.778026][ T9599] hub 8-0:1.0: 1 port detected [ 218.900805][ T9597] kexec: Could not allocate control_code_buffer [ 219.108914][ T9646] block2mtd: Using custom MTD label '' for dev [ 219.123410][ T9646] block2mtd: error: cannot open device [ 219.745427][ T43] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 219.823153][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.832813][ T43] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 220.386658][ T9688] i2c i2c-0: delete_device: Can't parse I2C address [ 221.729686][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 221.738478][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 221.889298][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.895851][ T43] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 223.958633][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.429268][ T9831] busy [ 229.130792][ T9982] zram: Added device: zram1 [ 229.349949][ T9990] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 229.350675][ T9988] ima: policy update failed [ 229.400080][ T30] audit: type=1802 audit(4294968374.522:13): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1846" res=0 errno=0 [ 231.936643][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 232.140569][T10090] ICMPv6: process `syz.0.1895' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 232.304190][T10092] Process accounting resumed [ 232.320738][ T5877] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 233.286861][T10136] bond0: no command found in slaves file - use +ifname or -ifname [ 236.504565][T10255] sd 0:0:1:0: PR command failed: 1026 [ 236.525902][T10255] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 236.572709][T10255] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 236.935149][T10270] dyndbg: expected <4096 bytes into control [ 238.602252][T10333] syz.4.2011 uses obsolete (PF_INET,SOCK_PACKET) [ 240.106607][T10385] aoe: can't write to that file. [ 246.798711][ T5877] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 246.798758][ T5877] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 246.815191][ T5877] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 246.815300][ T5877] Bluetooth: hci0: Malformed LE Event: 0x0d [ 246.978812][ T30] audit: type=1806 audit(4294968392.183:14): xattr="" res=-22 [ 251.579765][T10729] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 252.424565][T10766] kAFS: Invalid Command on /proc/fs/afs/cells file [ 252.708793][T10778] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 253.480697][T10809] usb usb36: usbfs: process 10809 (syz.1.2244) did not claim interface 0 before use [ 254.636086][T10822] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 255.032726][T10864] XFS: irix_symlink_mode sysctl option is deprecated. [ 256.133437][T10872] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 256.293819][T10896] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 256.632623][ T30] audit: type=1800 audit(4294968401.894:15): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2292" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 257.419061][T10916] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 258.844373][T10981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.676221][T11031] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 261.200779][T11071] mmap: syz.4.2373 (11071): VmData 37396480 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 262.327348][T11112] Process accounting paused [ 262.353956][T11074] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 262.385652][T11114] vhci_hcd: invalid port number 16 [ 263.266214][T11159] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 263.754927][T11181] binder: 11180:11181 ioctl c0306201 2000000000c0 returned -14 [ 264.465152][T11210] ima: policy update failed [ 264.481154][ T30] audit: type=1802 audit(4294968409.785:16): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2438" res=0 errno=0 [ 265.509304][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.517463][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.749498][T11268] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 266.068961][T11283] Setting dangerous option i915.mitigations - tainting kernel [ 267.403645][T11338] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 267.403645][T11338] M' is too long [ 267.431922][T11338] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 267.431922][T11338] W ' is too long [ 269.522980][T11426] program syz.1.2541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.633349][T11430] process 'syz.2.2543' launched './file0' with NULL argv: empty string added [ 270.653441][T11464] cougar: G6 mapped to F18 [ 271.117492][T11481] binder: 11478:11481 ioctl c018620c 200000000080 returned -22 [ 271.612571][T11497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 271.945571][T11526] WARNING! power/level is deprecated; use power/control instead [ 273.242300][T11584] synth uevent: /bus/mei: unknown uevent action string [ 273.812711][T11608] vhci_hcd: vhci_device speed not set [ 273.980831][T11616] i2c i2c-0: new_device: Missing parameters [ 277.063944][T11749] : Can't lookup blockdev [ 277.214780][T11755] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.415853][T11765] synth uevent: /devices/virtual/block/nbd6: unknown uevent action string [ 277.459524][T11765] block nbd6: uevent: failed to send synthetic uevent: -22 [ 278.704048][ T30] audit: type=1806 audit(4294968424.078:17): res=-14 [ 280.056816][ T30] audit: type=1800 audit(4294968425.446:18): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2745" name="dbroot" dev="configfs" ino=25525 res=0 errno=0 [ 280.191930][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.889237][T11897] ptp ptp0: only physical clock in use now [ 288.602535][T12213] < [ 289.436376][T12254] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 290.246027][T12291] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 291.203894][T12332] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 291.238449][T12332] ep_00: uevent: failed to send synthetic uevent: -22 [ 291.409120][T12343] ima: policy update failed [ 291.417555][ T30] audit: type=1802 audit(4294968436.855:19): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2960" res=0 errno=0 [ 291.610058][T12348] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 291.684554][ T30] audit: type=1800 audit(4294968437.126:20): pid=12354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2965" name="lu_gp_id" dev="configfs" ino=26558 res=0 errno=0 [ 291.701161][T12354] kstrtoul() returned -22 for lu_gp_id [ 292.291805][T12372] Process accounting resumed [ 292.445908][T12382] usbip-vudc usbip-vudc.0: gadget not bound [ 292.857879][T12401] ecryptfs_miscdev_write: Error while inspecting packet size [ 294.746468][ T5877] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 296.805088][ T30] audit: type=1800 audit(4294968442.273:21): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3076" name="dbroot" dev="configfs" ino=27624 res=0 errno=0 [ 296.836447][T12577] db_root: not a directory: /dev/audio1 [ 296.945732][ T5877] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 297.160593][T12608] Setting dangerous option i915.mitigations - tainting kernel [ 297.184861][T12608] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 297.266551][T12613] syz.1.3081 (12613): attempted to duplicate a private mapping with mremap. This is not supported. [ 297.780582][T12630] block2mtd: illegal erase size [ 299.067738][T12688] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 299.798812][ T5904] smpboot: CPU 1 is now offline [ 300.186774][ T5877] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 301.153263][T12775] kAFS: Invalid Command on /proc/fs/afs/cells file [ 301.619698][T12784] vivid-007: ================= START STATUS ================= [ 301.707063][T12784] vivid-007: Enable Output Cropping: true [ 301.760714][T12784] vivid-007: Enable Output Composing: true [ 301.828272][T12784] vivid-007: Enable Output Scaler: true [ 301.875807][T12784] vivid-007: Tx RGB Quantization Range: Automatic [ 301.914430][T12784] vivid-007: Transmit Mode: HDMI [ 301.939340][T12784] vivid-007: Hotplug Present: 0x00000000 [ 301.973149][T12784] vivid-007: RxSense Present: 0x00000000 [ 302.028423][T12784] vivid-007: EDID Present: 0x00000000 [ 302.066608][T12784] vivid-007: ================== END STATUS ================== [ 302.880834][ T5877] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 302.889305][ T5877] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 304.624906][T12882] vivid-003: ================= START STATUS ================= [ 304.666079][T12882] vivid-003: Radio HW Seek Mode: Bounded [ 304.710218][T12882] vivid-003: Radio Programmable HW Seek: false [ 304.762811][T12882] vivid-003: RDS Rx I/O Mode: Block I/O [ 304.798696][T12882] vivid-003: Generate RBDS Instead of RDS: false [ 304.844957][T12882] vivid-003: RDS Reception: true [ 304.891933][T12882] vivid-003: RDS Program Type: 0 inactive [ 304.919981][T12882] vivid-003: RDS PS Name: inactive [ 304.968551][T12882] vivid-003: RDS Radio Text: inactive [ 305.001069][T12882] vivid-003: RDS Traffic Announcement: false inactive [ 305.039993][T12882] vivid-003: RDS Traffic Program: false inactive [ 305.098167][T12882] vivid-003: RDS Music: false inactive [ 305.147532][T12882] vivid-003: ================== END STATUS ================== [ 308.490597][T12981] queue_state_write: operation too long [ 308.497640][T12981] queue_state_write: use 'run', 'start' or 'kick' [ 309.402376][T13006] ubi0: attaching mtd0 [ 309.429618][T13006] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 312.259785][T13089] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 312.307657][T13089] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 312.358409][T13089] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 312.424627][T13089] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 312.461622][T13094] __vm_enough_memory: pid: 13094, comm: syz.4.3290, bytes: 4398046511104 not enough memory for the allocation [ 312.491778][T13089] page dumped because: unmovable page [ 312.520016][T13089] page_owner info is not present (never set?) [ 316.184208][ T5877] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 316.184246][ T5877] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 316.671740][ T5877] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 321.511643][T13374] : Can't lookup blockdev [ 321.742509][ T30] audit: type=1800 audit(4294968467.342:22): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3405" name="members" dev="configfs" ino=31036 res=0 errno=0 [ 321.765976][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.374343][T13389] Process accounting paused [ 325.373751][T13459] ecryptfs_miscdev_write: Invalid packet size [192] [ 325.718457][T13470] program syz.2.3450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.641699][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.651460][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.826298][T13500] binder: 13499:13500 ioctl c0306201 200000000300 returned -14 [ 326.927657][T13504] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 327.644156][T13524] futex_wake_op: syz.4.3473 tries to shift op by 64; fix this program [ 327.694021][T13526] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 327.694021][T13526] program syz.2.3476 not setting count and/or reply_len properly [ 335.051006][T13727] kAFS: Invalid Command on /proc/fs/afs/cells file [ 338.186407][T13823] rtc_cmos 00:00: Alarms can be up to one day in the future [ 339.319638][T13856] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 339.348357][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.500296][T13856] CIFS mount error: No usable UNC path provided in device string! [ 339.500296][T13856] [ 339.567106][T13856] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 339.673882][T13864] random: crng reseeded on system resumption [ 341.601122][ T30] audit: type=1804 audit(4294968487.306:23): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3666" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 346.087101][T14036] Invalid input. Must be >= 4608 [ 347.817175][T14087] delete_channel: no stack [ 347.946321][T14093] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.3749' sets config #32769 [ 348.473647][T14107] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 348.766294][T14114] kernel profiling enabled (shift: 0) [ 350.919223][T14114] syz.1.3759: vmalloc error: size 709537792, failed to allocated page array size 1385816, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.078961][T14114] CPU: 0 UID: 0 PID: 14114 Comm: syz.1.3759 Tainted: G U I 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 351.079005][T14114] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 351.079014][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.079032][T14114] Call Trace: [ 351.079046][T14114] [ 351.079055][T14114] dump_stack_lvl+0x16c/0x1f0 [ 351.079097][T14114] warn_alloc+0x248/0x3a0 [ 351.079128][T14114] ? __pfx_warn_alloc+0x10/0x10 [ 351.079168][T14114] ? profile_init+0xd5/0x130 [ 351.079195][T14114] ? __vmalloc_node_noprof+0xad/0xf0 [ 351.079238][T14114] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 351.079292][T14114] ? profile_init+0xd5/0x130 [ 351.079333][T14114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.079376][T14114] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 351.079409][T14114] ? rcu_is_watching+0x12/0xc0 [ 351.079439][T14114] ? profile_init+0xd5/0x130 [ 351.079467][T14114] __vmalloc_node_noprof+0xad/0xf0 [ 351.079507][T14114] ? profile_init+0xd5/0x130 [ 351.079538][T14114] ? __pfx_profiling_store+0x10/0x10 [ 351.079573][T14114] profile_init+0xd5/0x130 [ 351.079602][T14114] profiling_store+0x7b/0x120 [ 351.079638][T14114] kobj_attr_store+0x55/0x80 [ 351.079677][T14114] ? __pfx_kobj_attr_store+0x10/0x10 [ 351.079716][T14114] sysfs_kf_write+0xf2/0x150 [ 351.079746][T14114] kernfs_fop_write_iter+0x354/0x510 [ 351.079767][T14114] ? __pfx_sysfs_kf_write+0x10/0x10 [ 351.079797][T14114] vfs_write+0x6c4/0x1150 [ 351.079827][T14114] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 351.079852][T14114] ? __pfx___mutex_lock+0x10/0x10 [ 351.079873][T14114] ? __pfx_vfs_write+0x10/0x10 [ 351.079922][T14114] ksys_write+0x12a/0x250 [ 351.079950][T14114] ? __pfx_ksys_write+0x10/0x10 [ 351.079987][T14114] do_syscall_64+0xcd/0x490 [ 351.080011][T14114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.080035][T14114] RIP: 0033:0x7f741918eb69 [ 351.080063][T14114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.080086][T14114] RSP: 002b:00007f7419fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.080108][T14114] RAX: ffffffffffffffda RBX: 00007f74193b5fa0 RCX: 00007f741918eb69 [ 351.080124][T14114] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000003 [ 351.080138][T14114] RBP: 00007f7419211df1 R08: 0000000000000000 R09: 0000000000000000 [ 351.080152][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.080166][T14114] R13: 0000000000000000 R14: 00007f74193b5fa0 R15: 00007ffe95f9cb68 [ 351.080197][T14114] [ 351.360565][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.369504][T14114] Mem-Info: [ 351.372733][T14114] active_anon:19769 inactive_anon:0 isolated_anon:0 [ 351.372733][T14114] active_file:16020 inactive_file:39559 isolated_file:0 [ 351.372733][T14114] unevictable:768 dirty:14 writeback:4 [ 351.372733][T14114] slab_reclaimable:10986 slab_unreclaimable:93995 [ 351.372733][T14114] mapped:33416 shmem:15944 pagetables:1155 [ 351.372733][T14114] sec_pagetables:0 bounce:0 [ 351.372733][T14114] kernel_misc_reclaimable:0 [ 351.372733][T14114] free:1305275 free_pcp:2910 free_cma:0 [ 351.424472][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.435061][T14114] Node 0 active_anon:79076kB inactive_anon:0kB active_file:64080kB inactive_file:158100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133664kB dirty:56kB writeback:16kB shmem:62240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11376kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.470526][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.478336][T14114] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.512396][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.522902][T14114] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.554641][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.562033][T14114] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 351.568597][T14114] Node 0 DMA32 free:1300876kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:79028kB inactive_anon:0kB active_file:64080kB inactive_file:156772kB unevictable:1536kB writepending:72kB present:3129332kB managed:2539724kB mlocked:0kB bounce:0kB free_pcp:11588kB local_pcp:11588kB free_cma:0kB [ 351.606196][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.616260][T14114] lowmem_reserve[]: 0 0 1 1 1 [ 351.622009][T14114] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 351.657032][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.666125][T14114] lowmem_reserve[]: 0 0 0 0 0 [ 351.671096][T14114] Node 1 Normal free:3904864kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.705323][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.725970][T14114] lowmem_reserve[]: 0 0 0 0 0 [ 351.731022][T14114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 351.763405][T14114] Node 0 DMA32: 1*4kB (U) 1*8kB (M) 4*16kB (UM) 269*32kB (ME) 15*64kB (UME) 58*128kB (ME) 54*256kB (UM) 22*512kB (ME) 13*1024kB (UME) 6*2048kB (UME) 301*4096kB (UM) = 1300652kB [ 351.803329][T14114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.828724][T14114] Node 1 Normal: 224*4kB (UME) 72*8kB (UME) 58*16kB (UME) 256*32kB (UME) 102*64kB (UME) 31*128kB (UME) 13*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3904864kB [ 351.853930][T14114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.872990][T14114] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.900647][T14114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.928019][T14114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.942337][T14114] 71532 total pagecache pages [ 351.947356][T14114] 0 pages in swap cache [ 351.951936][T14114] Free swap = 124996kB [ 351.956566][T14114] Total swap = 124996kB [ 351.960853][T14114] 2097051 pages RAM [ 351.975866][T14114] 0 pages HighMem/MovableOnly [ 351.992203][T14114] 430158 pages reserved [ 352.019667][T14114] 0 pages cma reserved [ 352.361151][T14171] Process accounting resumed [ 352.813700][T14181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.145789][T14263] sysfs_service_op_store: Client not running :-5: [ 356.447862][T14271] usb usb24: check_ctrlrecip: process 14271 (syz.4.3836) requesting ep 01 but needs 81 [ 356.500996][T14271] usb usb24: usbfs: process 14271 (syz.4.3836) did not claim interface 0 before use [ 359.806955][T14360] vmstat_refresh: nr_hugetlb -2048 [ 360.307991][T14376] [ 361.697052][T14416] overlayfs: "check_copy_up" module option is obsolete [ 362.756653][T14443] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 366.273874][T14520] Setting dangerous option i915.mitigations - tainting kernel [ 366.850401][T14532] QAT: Stopping all acceleration devices. [ 367.468750][T14549] block nbd14: the capability attribute has been deprecated. [ 368.703516][T14590] afs: Bad value for 'source' [ 368.853691][T14594] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 368.959628][T14598] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 369.849000][T14626] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 14626 comm: syz.0.4007) [ 369.881316][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.046153][ T30] audit: type=1800 audit(4294968515.893:24): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4007" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=34946 res=0 errno=0 [ 370.115763][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.112117][T14664] random: crng reseeded on system resumption [ 373.984854][T14748] syz_tun: tun_chr_ioctl cmd 1074812117 [ 375.383960][T14789] i2c i2c-0: new_device: Can't parse I2C address [ 377.740919][T14847] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 378.700476][T14872] random: crng reseeded on system resumption [ 380.586306][T14930] phram: not enough arguments [ 381.706845][T14957] usbcore.quirks: string doesn't fit in 127 chars. [ 382.135597][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 382.235972][T14969] Process accounting paused [ 385.336707][T15056] vhci_hcd: invalid port number 16 [ 385.378158][T15056] vhci_hcd: invalid port number 16 [ 387.759660][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.769041][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.054732][T15128] vhci_hcd: invalid port number 23 [ 388.081095][T15128] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 389.779612][T15183] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 389.780218][T15182] ima: policy update failed [ 389.888878][ T30] audit: type=1802 audit(4294968535.827:25): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4274" res=0 errno=0 [ 391.284344][T15228] ICMPv6: process `syz.1.4295' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 398.097925][ T5877] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 398.097960][ T5877] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 398.116865][ T5877] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 398.712979][T15464] QAT: failed to copy from user. [ 400.669095][T15531] usb usb6: usbfs: process 15531 (syz.2.4442) did not claim interface 0 before use [ 402.618496][T15581] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 406.190475][T15683] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 406.587594][T15694] kAFS: No cell specified [ 408.210488][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.459046][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.836396][ T5877] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 412.293121][T15845] Process accounting resumed [ 413.067171][T15871] random: crng reseeded on system resumption [ 413.313297][T15874] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 414.176112][T15905] vhci_hcd: invalid port number 16 [ 414.215631][T15905] vhci_hcd: invalid port number 16 [ 414.805286][T15916] nvme_fabrics: missing parameter 'transport=%s' [ 414.828695][T15916] nvme_fabrics: missing parameter 'nqn=%s' [ 415.359436][T15923] could not allocate digest TFM handle [ 415.410920][T15935] deleting an unspecified loop device is not supported. [ 416.737578][T15972] syz.1.4653: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.814651][T15972] CPU: 0 UID: 0 PID: 15972 Comm: syz.1.4653 Tainted: G U I 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 416.814702][T15972] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 416.814713][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.814729][T15972] Call Trace: [ 416.814737][T15972] [ 416.814747][T15972] dump_stack_lvl+0x16c/0x1f0 [ 416.814795][T15972] warn_alloc+0x248/0x3a0 [ 416.814829][T15972] ? __pfx_warn_alloc+0x10/0x10 [ 416.814886][T15972] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 416.814915][T15972] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 416.814964][T15972] ? __pfx___might_resched+0x10/0x10 [ 416.814995][T15972] ? rcu_is_watching+0x12/0xc0 [ 416.815023][T15972] ? trace_contention_end+0xdd/0x130 [ 416.815062][T15972] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 416.815090][T15972] ? tomoyo_path_number_perm+0x295/0x580 [ 416.815125][T15972] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.815170][T15972] ? __pfx___mutex_lock+0x10/0x10 [ 416.815197][T15972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 416.815233][T15972] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 416.815271][T15972] __vmalloc_node_noprof+0xad/0xf0 [ 416.815316][T15972] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 416.815348][T15972] dvb_dvr_do_ioctl+0x15d/0x290 [ 416.815382][T15972] dvb_usercopy+0x167/0x340 [ 416.815407][T15972] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 416.815437][T15972] ? __pfx_dvb_usercopy+0x10/0x10 [ 416.815476][T15972] ? __fget_files+0x20e/0x3c0 [ 416.815518][T15972] dvb_dvr_ioctl+0x29/0x40 [ 416.815545][T15972] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 416.815572][T15972] __x64_sys_ioctl+0x18e/0x210 [ 416.815619][T15972] do_syscall_64+0xcd/0x490 [ 416.815646][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.815674][T15972] RIP: 0033:0x7f741918eb69 [ 416.815695][T15972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.815721][T15972] RSP: 002b:00007f7419fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.815746][T15972] RAX: ffffffffffffffda RBX: 00007f74193b5fa0 RCX: 00007f741918eb69 [ 416.815764][T15972] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 416.815781][T15972] RBP: 00007f7419211df1 R08: 0000000000000000 R09: 0000000000000000 [ 416.815798][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.815815][T15972] R13: 0000000000000000 R14: 00007f74193b5fa0 R15: 00007ffe95f9cb68 [ 416.815849][T15972] [ 417.191083][T15972] Mem-Info: [ 417.201081][T15972] active_anon:5189 inactive_anon:0 isolated_anon:0 [ 417.201081][T15972] active_file:16006 inactive_file:39875 isolated_file:0 [ 417.201081][T15972] unevictable:768 dirty:45 writeback:0 [ 417.201081][T15972] slab_reclaimable:11084 slab_unreclaimable:93891 [ 417.201081][T15972] mapped:24156 shmem:1371 pagetables:1062 [ 417.201081][T15972] sec_pagetables:0 bounce:0 [ 417.201081][T15972] kernel_misc_reclaimable:0 [ 417.201081][T15972] free:1072626 free_pcp:9581 free_cma:0 [ 417.522398][T15972] Node 0 active_anon:20912kB inactive_anon:0kB active_file:64024kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96676kB dirty:284kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11056kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.720978][T15972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.898494][T15972] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.068610][T15972] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 418.074708][T15972] Node 0 DMA32 free:1418848kB boost:0kB min:34324kB low:42904kB high:51484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20836kB inactive_anon:0kB active_file:64024kB inactive_file:158044kB unevictable:1536kB writepending:28kB present:3129332kB managed:2539724kB mlocked:0kB bounce:0kB free_pcp:37404kB local_pcp:37404kB free_cma:0kB [ 418.270565][T15972] lowmem_reserve[]: 0 0 1 1 1 [ 418.275560][T15972] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 418.473028][T15972] lowmem_reserve[]: 0 0 0 0 0 [ 418.508943][T15972] Node 1 Normal free:2856296kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.681462][T15972] lowmem_reserve[]: 0 0 0 0 0 [ 418.711179][T15972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.778564][T15972] Node 0 DMA32: 2964*4kB (UME) 1944*8kB (UM) 1505*16kB (UME) 1208*32kB (UME) 257*64kB (UM) 148*128kB (UME) 78*256kB (UME) 29*512kB (UME) 11*1024kB (UM) 9*2048kB (UME) 300*4096kB (UM) = 1418848kB [ 418.915045][T15972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.977155][T15972] Node 1 Normal: 226*4kB (UME) 72*8kB (UME) 58*16kB (UME) 256*32kB (UME) 102*64kB (UME) 31*128kB (UME) 13*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 688*4096kB (M) = 2856296kB [ 419.069436][T15972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.135574][T15972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.197072][T15972] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 419.273180][T15972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.343779][T15972] 57250 total pagecache pages [ 419.349911][T15972] 0 pages in swap cache [ 419.394224][T15972] Free swap = 124996kB [ 419.400726][T15972] Total swap = 124996kB [ 419.455088][T15972] 2097051 pages RAM [ 419.460115][T15972] 0 pages HighMem/MovableOnly [ 419.523494][T15972] 430158 pages reserved [ 419.552310][T15972] 0 pages cma reserved [ 419.761681][T16045] rnbd_client L213: map_device: Parameters missing [ 422.980946][T16147] program syz.0.4740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.273012][T16160] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 423.273012][T16160] [ 424.624462][ T30] audit: type=1800 audit(4294968570.757:26): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4767" name="lu_gp_id" dev="configfs" ino=39913 res=0 errno=0 [ 426.462310][T16260] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 427.570767][ T30] audit: type=1400 audit(4294968573.713:27): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16287 comm="syz.1.4808" [ 428.460177][T16312] kafs: addr_prefs: Invalid Command [ 429.976781][T16364] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 432.416746][T16434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.647332][T16434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.797210][T16434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.999322][T16434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.159611][T16637] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 438.781318][T16657] vhci_hcd: invalid port number 16 [ 438.786525][T16657] vhci_hcd: invalid port number 16 [ 439.746710][T16690] random: crng reseeded on system resumption [ 440.075702][T16699] delete_channel: no stack [ 442.427985][T16767] Process accounting paused [ 443.804238][T16844] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 444.628090][T16869] vhci_hcd: invalid port number 16 [ 444.646827][T16869] vhci_hcd: invalid port number 16 [ 445.434167][ T5877] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14 [ 446.336401][T16949] program syz.0.5091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.420516][T16949] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 446.886662][T16969] block2mtd: too many arguments [ 447.118159][T16974] writes to the poll attribute are ignored. [ 447.148975][T16974] please use driver specific parameters instead. [ 448.888482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.894812][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.547118][T17069] syz_tun: tun_chr_ioctl cmd 2147767517 [ 450.828571][T17112] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[17112] [ 451.297695][T17120] [ 451.300153][T17120] ====================================================== [ 451.307188][T17120] WARNING: possible circular locking dependency detected [ 451.314251][T17120] 6.16.0-syzkaller-11489-gd2eedaa3909b #0 Tainted: G U I [ 451.322588][T17120] ------------------------------------------------------ [ 451.329613][T17120] syz.1.5162/17120 is trying to acquire lock: [ 451.335695][T17120] ffff8880261dca98 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 451.345224][T17120] [ 451.345224][T17120] but task is already holding lock: [ 451.352601][T17120] ffff8880261dc558 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 451.363879][T17120] [ 451.363879][T17120] which lock already depends on the new lock. [ 451.363879][T17120] [ 451.374298][T17120] [ 451.374298][T17120] the existing dependency chain (in reverse order) is: [ 451.383336][T17120] [ 451.383336][T17120] -> #3 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 451.392322][T17120] blk_alloc_queue+0x619/0x760 [ 451.397666][T17120] blk_mq_alloc_queue+0x172/0x280 [ 451.403248][T17120] __blk_mq_alloc_disk+0x29/0x120 [ 451.408841][T17120] nbd_dev_add+0x492/0xbb0 [ 451.413793][T17120] nbd_init+0x181/0x320 [ 451.418663][T17120] do_one_initcall+0x120/0x6e0 [ 451.423969][T17120] kernel_init_freeable+0x5c2/0x910 [ 451.429717][T17120] kernel_init+0x1c/0x2b0 [ 451.434594][T17120] ret_from_fork+0x5d4/0x6f0 [ 451.439747][T17120] ret_from_fork_asm+0x1a/0x30 [ 451.445051][T17120] [ 451.445051][T17120] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 451.452328][T17120] fs_reclaim_acquire+0x102/0x150 [ 451.457922][T17120] prepare_alloc_pages+0x162/0x610 [ 451.463605][T17120] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 451.470056][T17120] __alloc_pages_noprof+0xb/0x1b0 [ 451.475626][T17120] pcpu_populate_chunk+0x110/0xb00 [ 451.481326][T17120] pcpu_alloc_noprof+0x86a/0x1470 [ 451.486913][T17120] __alloc+0xa8/0x190 [ 451.491489][T17120] alloc_bulk+0x413/0xc80 [ 451.496386][T17120] bpf_mem_alloc_init+0x84b/0xd40 [ 451.501977][T17120] htab_map_alloc+0xe95/0x1570 [ 451.509014][T17120] map_create+0x58f/0x1f80 [ 451.514004][T17120] __sys_bpf+0x44d2/0x4de0 [ 451.518974][T17120] __x64_sys_bpf+0x78/0xc0 [ 451.523941][T17120] do_syscall_64+0xcd/0x490 [ 451.528995][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.535448][T17120] [ 451.535448][T17120] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 451.543231][T17120] __mutex_lock+0x193/0x10b0 [ 451.548374][T17120] pcpu_alloc_noprof+0xb4c/0x1470 [ 451.554039][T17120] sbitmap_init_node+0x2fd/0x770 [ 451.559543][T17120] sbitmap_queue_init_node+0x41/0x560 [ 451.565480][T17120] blk_mq_init_tags+0x12d/0x2b0 [ 451.570887][T17120] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 451.576991][T17120] blk_mq_init_sched+0x30c/0x610 [ 451.582483][T17120] elevator_switch+0x1e1/0x7f0 [ 451.587789][T17120] elevator_change+0x2ac/0x400 [ 451.593093][T17120] elevator_set_default+0x2c4/0x360 [ 451.598836][T17120] blk_register_queue+0x393/0x4f0 [ 451.604408][T17120] __add_disk+0x74a/0xf00 [ 451.609277][T17120] add_disk_fwnode+0x13f/0x5d0 [ 451.614576][T17120] nbd_dev_add+0x783/0xbb0 [ 451.619537][T17120] nbd_init+0x181/0x320 [ 451.624243][T17120] do_one_initcall+0x120/0x6e0 [ 451.629586][T17120] kernel_init_freeable+0x5c2/0x910 [ 451.635432][T17120] kernel_init+0x1c/0x2b0 [ 451.640340][T17120] ret_from_fork+0x5d4/0x6f0 [ 451.645492][T17120] ret_from_fork_asm+0x1a/0x30 [ 451.650801][T17120] [ 451.650801][T17120] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 451.658633][T17120] __lock_acquire+0x12a6/0x1ce0 [ 451.664035][T17120] lock_acquire+0x179/0x350 [ 451.669135][T17120] __mutex_lock+0x193/0x10b0 [ 451.674321][T17120] elevator_change+0x103/0x400 [ 451.679647][T17120] elv_iosched_store+0x2eb/0x3a0 [ 451.685171][T17120] queue_attr_store+0x26b/0x310 [ 451.690592][T17120] sysfs_kf_write+0xf2/0x150 [ 451.695749][T17120] kernfs_fop_write_iter+0x354/0x510 [ 451.701570][T17120] vfs_write+0x6c4/0x1150 [ 451.706509][T17120] ksys_write+0x12a/0x250 [ 451.711401][T17120] do_syscall_64+0xcd/0x490 [ 451.716459][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.722928][T17120] [ 451.722928][T17120] other info that might help us debug this: [ 451.722928][T17120] [ 451.733198][T17120] Chain exists of: [ 451.733198][T17120] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#57 [ 451.733198][T17120] [ 451.747262][T17120] Possible unsafe locking scenario: [ 451.747262][T17120] [ 451.754731][T17120] CPU0 CPU1 [ 451.760300][T17120] ---- ---- [ 451.765691][T17120] lock(&q->q_usage_counter(io)#57); [ 451.771095][T17120] lock(fs_reclaim); [ 451.777622][T17120] lock(&q->q_usage_counter(io)#57); [ 451.785558][T17120] lock(&q->elevator_lock); [ 451.790159][T17120] [ 451.790159][T17120] *** DEADLOCK *** [ 451.790159][T17120] [ 451.798921][T17120] 7 locks held by syz.1.5162/17120: [ 451.804131][T17120] #0: ffff888025003cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 451.813233][T17120] #1: ffff888034a46428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 451.822260][T17120] #2: ffff88805f1e0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 451.832040][T17120] #3: ffff888025433c38 (kn->active#267){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 451.842178][T17120] #4: ffff88802646a988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 451.852871][T17120] #5: ffff8880261dc558 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 451.864602][T17120] #6: ffff8880261dc590 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 451.876491][T17120] [ 451.876491][T17120] stack backtrace: [ 451.882400][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.1.5162 Tainted: G U I 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 451.882447][T17120] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 451.882458][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.882474][T17120] Call Trace: [ 451.882484][T17120] [ 451.882494][T17120] dump_stack_lvl+0x116/0x1f0 [ 451.882540][T17120] print_circular_bug+0x275/0x350 [ 451.882575][T17120] check_noncircular+0x14c/0x170 [ 451.882612][T17120] __lock_acquire+0x12a6/0x1ce0 [ 451.882651][T17120] lock_acquire+0x179/0x350 [ 451.882685][T17120] ? elevator_change+0x103/0x400 [ 451.882718][T17120] ? __pfx___might_resched+0x10/0x10 [ 451.882746][T17120] ? elevator_change+0x103/0x400 [ 451.882776][T17120] __mutex_lock+0x193/0x10b0 [ 451.882797][T17120] ? elevator_change+0x103/0x400 [ 451.882828][T17120] ? enable_work+0x245/0x340 [ 451.882851][T17120] ? __pfx_xa_find_after+0x10/0x10 [ 451.882879][T17120] ? __pfx___mutex_lock+0x10/0x10 [ 451.882905][T17120] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 451.882929][T17120] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 451.882958][T17120] ? elevator_change+0x103/0x400 [ 451.882988][T17120] elevator_change+0x103/0x400 [ 451.883021][T17120] elv_iosched_store+0x2eb/0x3a0 [ 451.883056][T17120] ? __pfx_elv_iosched_store+0x10/0x10 [ 451.883094][T17120] ? __mutex_trylock_common+0xe9/0x250 [ 451.883130][T17120] ? __pfx_elv_iosched_store+0x10/0x10 [ 451.883172][T17120] queue_attr_store+0x26b/0x310 [ 451.883206][T17120] ? __pfx_queue_attr_store+0x10/0x10 [ 451.883241][T17120] ? find_held_lock+0x2b/0x80 [ 451.883267][T17120] ? sysfs_file_kobj+0xe4/0x290 [ 451.883297][T17120] ? __pfx_queue_attr_store+0x10/0x10 [ 451.883324][T17120] sysfs_kf_write+0xf2/0x150 [ 451.883353][T17120] kernfs_fop_write_iter+0x354/0x510 [ 451.883386][T17120] ? __pfx_sysfs_kf_write+0x10/0x10 [ 451.883416][T17120] vfs_write+0x6c4/0x1150 [ 451.883448][T17120] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 451.883475][T17120] ? __pfx___mutex_lock+0x10/0x10 [ 451.883498][T17120] ? __pfx_vfs_write+0x10/0x10 [ 451.883537][T17120] ksys_write+0x12a/0x250 [ 451.883567][T17120] ? __pfx_ksys_write+0x10/0x10 [ 451.883602][T17120] do_syscall_64+0xcd/0x490 [ 451.883627][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.883654][T17120] RIP: 0033:0x7f741918eb69 [ 451.883675][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.883701][T17120] RSP: 002b:00007f7419fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.883725][T17120] RAX: ffffffffffffffda RBX: 00007f74193b5fa0 RCX: 00007f741918eb69 [ 451.883743][T17120] RDX: 00000000001098c7 RSI: 00002000000002c0 RDI: 0000000000000003 [ 451.883760][T17120] RBP: 00007f7419211df1 R08: 0000000000000000 R09: 0000000000000000 [ 451.883776][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.883791][T17120] R13: 0000000000000000 R14: 00007f74193b5fa0 R15: 00007ffe95f9cb68 [ 451.883818][T17120] [ 451.883867][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.186938][ C0] vkms_vblank_simulate: vblank timer overrun