last executing test programs: 5m42.148625938s ago: executing program 1 (id=689): pselect6$auto(0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)) 5m41.983626302s ago: executing program 1 (id=692): syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff) 5m41.781530916s ago: executing program 1 (id=696): clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) 5m41.610344904s ago: executing program 1 (id=699): bpf$auto(0x5, &(0x7f00000000c0)=@raw_tracepoint={0x8000000000009, 0xffffffffffffffff, 0x0, 0xd1}, 0x8) 5m41.411482775s ago: executing program 1 (id=702): tkill$auto(0x1, 0x7) 5m40.232910828s ago: executing program 1 (id=706): tgkill$auto(0x1, 0x1, 0x5) 5m40.22951201s ago: executing program 32 (id=706): tgkill$auto(0x1, 0x1, 0x5) 1.300032406s ago: executing program 0 (id=8541): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(0x3, 0x0, 0x17) 887.168937ms ago: executing program 0 (id=8549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003e80)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xd, 0x0, 0x1, [@nested={0x4, 0x11c}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 875.414676ms ago: executing program 4 (id=8550): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) 768.023061ms ago: executing program 2 (id=8551): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x80) 758.92728ms ago: executing program 3 (id=8552): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101800, 0x0) ioctl$auto(r0, 0x4b46, 0x1) 737.392788ms ago: executing program 4 (id=8553): socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) 722.628951ms ago: executing program 0 (id=8554): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x6) 618.375105ms ago: executing program 2 (id=8555): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000680)="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", 0x310) ioctl$auto_SNDCTL_SEQ_RESET(r0, 0x5100, 0x0) 614.802237ms ago: executing program 3 (id=8556): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x54, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x24, 0x3, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@generic="4818f1fa"]}, @typed={0x16, 0xa0, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) 595.360502ms ago: executing program 0 (id=8557): close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) 575.123077ms ago: executing program 4 (id=8558): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x74, 0x2000000000002) write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001) 452.231838ms ago: executing program 2 (id=8559): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x1, 0x8, 0xfffffffffffffffc, 0x0) 447.922256ms ago: executing program 3 (id=8560): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002e, 0x0) fsopen$auto(0x0, 0x1) 429.86494ms ago: executing program 0 (id=8561): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x81, 0x0, 0x14) 415.968566ms ago: executing program 4 (id=8562): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 316.025808ms ago: executing program 3 (id=8563): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) read$auto(r0, &(0x7f0000000040)='/proc/sys/kernel/printk_devkmsg\x00', 0x9) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 309.614294ms ago: executing program 2 (id=8564): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x1, 0x0, 0x1e) 280.654383ms ago: executing program 0 (id=8565): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 218.502437ms ago: executing program 4 (id=8566): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000019c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000022c0)={0x14, r0, 0xf03, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 158.426816ms ago: executing program 3 (id=8567): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x101202, 0x0) write$auto(r0, 0x0, 0x3f00) 155.037089ms ago: executing program 2 (id=8568): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) timer_create$auto(0xb, &(0x7f00000001c0)={@sival_ptr=0x0, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0) timer_gettime$auto(0x0, 0x0) 57.0045ms ago: executing program 4 (id=8569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 21.570653ms ago: executing program 2 (id=8570): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x2282, r0) 0s ago: executing program 3 (id=8571): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x20040, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 76.246645][ T5850] cgroup: Unknown subsys name 'net' [ 76.417486][ T5850] cgroup: Unknown subsys name 'cpuset' [ 76.426783][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.824416][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.464279][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.473291][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.474724][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.481386][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.492707][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.504450][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.504647][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.520000][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.527748][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.529068][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.544109][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.551975][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.552507][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.571006][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.572604][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.578818][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.588556][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.612527][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.625116][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.636869][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.217960][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 85.231536][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 85.364842][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 85.418536][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 85.476225][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.483577][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.490795][ T5883] bridge_slave_0: entered allmulticast mode [ 85.498826][ T5883] bridge_slave_0: entered promiscuous mode [ 85.519700][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.527011][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.534397][ T5878] bridge_slave_0: entered allmulticast mode [ 85.542126][ T5878] bridge_slave_0: entered promiscuous mode [ 85.575549][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.583063][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.590539][ T5883] bridge_slave_1: entered allmulticast mode [ 85.598618][ T5883] bridge_slave_1: entered promiscuous mode [ 85.611110][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.619744][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.627232][ T5878] bridge_slave_1: entered allmulticast mode [ 85.634253][ T5878] bridge_slave_1: entered promiscuous mode [ 85.708175][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.726128][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.748567][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.775569][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.847677][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.855296][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.862583][ T5873] bridge_slave_0: entered allmulticast mode [ 85.869922][ T5873] bridge_slave_0: entered promiscuous mode [ 85.879255][ T5878] team0: Port device team_slave_0 added [ 85.888582][ T5878] team0: Port device team_slave_1 added [ 85.907381][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.914834][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.922170][ T5872] bridge_slave_0: entered allmulticast mode [ 85.929422][ T5872] bridge_slave_0: entered promiscuous mode [ 85.937023][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.944361][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.951528][ T5873] bridge_slave_1: entered allmulticast mode [ 85.959411][ T5873] bridge_slave_1: entered promiscuous mode [ 85.980950][ T5883] team0: Port device team_slave_0 added [ 85.987345][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.994637][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.002078][ T5872] bridge_slave_1: entered allmulticast mode [ 86.009366][ T5872] bridge_slave_1: entered promiscuous mode [ 86.045494][ T5883] team0: Port device team_slave_1 added [ 86.087049][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.094807][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.121319][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.135380][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.142644][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.169160][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.205563][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.240999][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.249317][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.275944][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.290361][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.302010][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.327490][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.334925][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.361279][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.381339][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.464052][ T5873] team0: Port device team_slave_0 added [ 86.472076][ T5872] team0: Port device team_slave_0 added [ 86.483656][ T5878] hsr_slave_0: entered promiscuous mode [ 86.490379][ T5878] hsr_slave_1: entered promiscuous mode [ 86.515314][ T5873] team0: Port device team_slave_1 added [ 86.522918][ T5872] team0: Port device team_slave_1 added [ 86.590902][ T5883] hsr_slave_0: entered promiscuous mode [ 86.597726][ T5883] hsr_slave_1: entered promiscuous mode [ 86.604284][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 86.610194][ T5883] Cannot create hsr debugfs directory [ 86.634895][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.641891][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.643292][ T5882] Bluetooth: hci1: command tx timeout [ 86.668713][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.674357][ T5877] Bluetooth: hci2: command tx timeout [ 86.684559][ T5879] Bluetooth: hci0: command tx timeout [ 86.687020][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.702935][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.722686][ T5882] Bluetooth: hci3: command tx timeout [ 86.730034][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.793563][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.800548][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.826650][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.866931][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.874135][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.909073][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.064602][ T5873] hsr_slave_0: entered promiscuous mode [ 87.072775][ T5873] hsr_slave_1: entered promiscuous mode [ 87.079301][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 87.085213][ T5873] Cannot create hsr debugfs directory [ 87.114436][ T5872] hsr_slave_0: entered promiscuous mode [ 87.121085][ T5872] hsr_slave_1: entered promiscuous mode [ 87.127901][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 87.133968][ T5872] Cannot create hsr debugfs directory [ 87.468037][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.480548][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.494639][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.535198][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.631763][ T5883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.654393][ T5883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.664987][ T5883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.677419][ T5883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.796458][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.810843][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.828206][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.839698][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.946805][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.958925][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.981126][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.991107][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.034526][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.090983][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.109084][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.124180][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.131556][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.179603][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.186852][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.222617][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.241002][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.274360][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.281546][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.318267][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.325506][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.364871][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.405493][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.412679][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.441046][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448506][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.516884][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.598164][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.662170][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.669457][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.725873][ T5882] Bluetooth: hci0: command tx timeout [ 88.725897][ T5877] Bluetooth: hci1: command tx timeout [ 88.725934][ T5877] Bluetooth: hci2: command tx timeout [ 88.747269][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.754635][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.802476][ T5877] Bluetooth: hci3: command tx timeout [ 88.878251][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.974220][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.100381][ T5878] veth0_vlan: entered promiscuous mode [ 89.147011][ T5878] veth1_vlan: entered promiscuous mode [ 89.160481][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.193847][ T5883] veth0_vlan: entered promiscuous mode [ 89.248260][ T5878] veth0_macvtap: entered promiscuous mode [ 89.257373][ T5883] veth1_vlan: entered promiscuous mode [ 89.276045][ T5878] veth1_macvtap: entered promiscuous mode [ 89.331565][ T5873] veth0_vlan: entered promiscuous mode [ 89.363922][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.371900][ T5883] veth0_macvtap: entered promiscuous mode [ 89.381153][ T5873] veth1_vlan: entered promiscuous mode [ 89.398892][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.417851][ T5883] veth1_macvtap: entered promiscuous mode [ 89.427272][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.456158][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.466687][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.481882][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491696][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.514212][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.550307][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.589029][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.598791][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.609808][ T5873] veth0_macvtap: entered promiscuous mode [ 89.628532][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.645779][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.659644][ T5873] veth1_macvtap: entered promiscuous mode [ 89.699358][ T5872] veth0_vlan: entered promiscuous mode [ 89.740983][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.749192][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.761111][ T5872] veth1_vlan: entered promiscuous mode [ 89.767537][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.789680][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.854568][ T4177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.868086][ T4177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.887784][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918525][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.930615][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.943656][ T5872] veth0_macvtap: entered promiscuous mode [ 89.959792][ T5872] veth1_macvtap: entered promiscuous mode [ 89.971983][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.990394][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.011625][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021270][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.053734][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.071529][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.079030][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.134849][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.207333][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.239420][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.253567][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.297850][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320881][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.416332][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.478151][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.490392][ T5877] Bluetooth: hci2: unexpected event 0x06 length: 124 > 3 [ 90.505733][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.617624][ T4177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.651167][ T4177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.737530][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.785372][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.803100][ T5877] Bluetooth: hci0: command tx timeout [ 90.803375][ T5882] Bluetooth: hci2: command tx timeout [ 90.808595][ T5877] Bluetooth: hci1: command tx timeout [ 90.882970][ T5882] Bluetooth: hci3: command tx timeout [ 92.020353][ T9] cfg80211: failed to load regulatory.db [ 92.031137][ T6028] mmap: syz.2.36 (6028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.887842][ T5882] Bluetooth: hci2: command tx timeout [ 92.893526][ T5879] Bluetooth: hci1: command tx timeout [ 92.894991][ T5877] Bluetooth: hci0: command tx timeout [ 92.966149][ T5877] Bluetooth: hci3: command tx timeout [ 93.434699][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.967212][ T6123] capability: warning: `syz.3.83' uses 32-bit capabilities (legacy support in use) [ 94.057351][ T6129] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.320005][ T6527] capability: warning: `syz.0.281' uses deprecated v2 capabilities in a way that may be insecure [ 102.917671][ T5877] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 103.130635][ T30] audit: type=1800 audit(1754566626.484:2): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.307" name="lu_gp_id" dev="configfs" ino=8920 res=0 errno=0 [ 104.255514][ T6609] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.455733][ T6710] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.110804][ T6989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.430834][ T7164] syz.1.594 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.468796][ T30] audit: type=1800 audit(1754566639.824:3): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.617" name="lu_gp_id" dev="configfs" ino=11558 res=0 errno=0 [ 122.129061][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.359073][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.665503][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.005395][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.072230][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.083256][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.093204][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.101373][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.109562][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.337840][ T30] audit: type=1800 audit(4294967301.250:4): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.720" name="dummy_udc" dev="gadgetfs" ino=7356 res=0 errno=0 [ 123.581781][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 123.972395][ T13] bridge_slave_1: left allmulticast mode [ 123.978920][ T13] bridge_slave_1: left promiscuous mode [ 123.989713][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.100345][ T13] bridge_slave_0: left allmulticast mode [ 124.122390][ T13] bridge_slave_0: left promiscuous mode [ 124.128210][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.218727][ T30] audit: type=1800 audit(4294967302.130:5): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.735" name="version" dev="configfs" ino=11923 res=0 errno=0 [ 125.098653][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.139091][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.159143][ T13] bond0 (unregistering): Released all slaves [ 125.203666][ T5882] Bluetooth: hci1: command tx timeout [ 125.358534][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.406143][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.442169][ T7416] bridge_slave_0: entered allmulticast mode [ 125.464692][ T7416] bridge_slave_0: entered promiscuous mode [ 125.903453][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.910628][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.949095][ T7416] bridge_slave_1: entered allmulticast mode [ 125.960123][ T7416] bridge_slave_1: entered promiscuous mode [ 126.237451][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.349030][ T7543] Unable to find swap-space signature [ 126.528212][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.810934][ T13] hsr_slave_0: left promiscuous mode [ 126.867746][ T13] hsr_slave_1: left promiscuous mode [ 126.886464][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.923076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.948524][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.977252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.997380][ T30] audit: type=1800 audit(4294967304.910:6): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.782" name="dummy_udc" dev="gadgetfs" ino=7356 res=0 errno=0 [ 127.059628][ T13] veth1_macvtap: left promiscuous mode [ 127.076260][ T13] veth0_macvtap: left promiscuous mode [ 127.082250][ T13] veth1_vlan: left promiscuous mode [ 127.113172][ T13] veth0_vlan: left promiscuous mode [ 127.282997][ T5882] Bluetooth: hci1: command tx timeout [ 127.532524][ T30] audit: type=1800 audit(4294967305.440:7): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.793" name="dummy_udc" dev="gadgetfs" ino=7356 res=0 errno=0 [ 127.711757][ T30] audit: type=1800 audit(4294967305.620:8): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.797" name="trace_pipe" dev="tracefs" ino=196 res=0 errno=0 [ 128.429138][ T13] team0 (unregistering): Port device team_slave_1 removed [ 128.429263][ T7639] random: crng reseeded on system resumption [ 128.558317][ T13] team0 (unregistering): Port device team_slave_0 removed [ 129.324107][ T7416] team0: Port device team_slave_0 added [ 129.362700][ T5882] Bluetooth: hci1: command tx timeout [ 129.417852][ T7416] team0: Port device team_slave_1 added [ 129.614911][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.627827][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.658001][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.701257][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.722824][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.765337][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.941208][ T7416] hsr_slave_0: entered promiscuous mode [ 129.961765][ T7416] hsr_slave_1: entered promiscuous mode [ 129.989487][ T7416] debugfs: 'hsr0' already exists in 'hsr' [ 129.989539][ T7416] Cannot create hsr debugfs directory [ 130.736887][ T7416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.768299][ T7416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.857771][ T7416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.885416][ T7416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.953534][ T7742] random: crng reseeded on system resumption [ 131.149673][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.250846][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.270076][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.277390][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.307633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.314892][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.442488][ T5882] Bluetooth: hci1: command tx timeout [ 131.457972][ T7416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.716010][ T7775] random: crng reseeded on system resumption [ 131.877220][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.525420][ T7416] veth0_vlan: entered promiscuous mode [ 132.543134][ T7416] veth1_vlan: entered promiscuous mode [ 132.606667][ T7416] veth0_macvtap: entered promiscuous mode [ 132.619025][ T7416] veth1_macvtap: entered promiscuous mode [ 132.640963][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.660884][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.688727][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.707756][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.727825][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.745554][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.839644][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.862390][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.908506][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.917699][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.979402][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986795][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271690][ T7837] random: crng reseeded on system resumption [ 134.941233][ T5882] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 135.239879][ T5882] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 136.737281][ T8009] futex_wake_op: syz.4.958 tries to shift op by -2048; fix this program [ 137.507482][ T8043] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 138.799715][ T8117] ptrace attach of "./syz-executor exec"[5872] was attempted by "./syz-executor exec"[8117] [ 138.953381][ T8123] Unable to find swap-space signature [ 142.119730][ T30] audit: type=1800 audit(1843104519.480:9): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1072" name="discovery_nqn" dev="configfs" ino=15455 res=0 errno=0 [ 144.837727][ T30] audit: type=1326 audit(1843104522.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.4.1142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfdd38ebe9 code=0x0 [ 147.474377][ T8563] nfs: Bad value for 'source' [ 148.614882][ T8620] ======================================================= [ 148.614882][ T8620] WARNING: The mand mount option has been deprecated and [ 148.614882][ T8620] and is ignored by this kernel. Remove the mand [ 148.614882][ T8620] option from the mount to silence this warning. [ 148.614882][ T8620] ======================================================= [ 150.559611][ T8634] kexec: Could not allocate control_code_buffer [ 152.029481][ T8771] ima: policy update failed [ 152.067999][ T30] audit: type=1802 audit(1843104532.416:11): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1299" res=0 errno=0 [ 153.269253][ T8844] syz.2.1326(8844): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 154.497825][ T30] audit: type=1800 audit(1843104534.856:12): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1353" name="dbroot" dev="configfs" ino=16876 res=0 errno=0 [ 157.442151][ T9082] Invalid ELF header magic: != ELF [ 159.894755][ T30] audit: type=1326 audit(1843104540.256:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.4.1474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfdd38ebe9 code=0x0 [ 161.706383][ T30] audit: type=1800 audit(1843106590.068:14): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1515" name="features" dev="configfs" ino=17876 res=0 errno=0 [ 164.633719][ T30] audit: type=1800 audit(1843106593.003:15): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1596" name="trace_pipe" dev="tracefs" ino=239 res=0 errno=0 [ 166.911380][ T9603] Process accounting resumed [ 168.516381][ T9710] syz_tun: tun_chr_ioctl cmd 1074025676 [ 170.230437][ T9804] could not allocate digest TFM handle [ 170.449418][ T9827] vivid-003: ================= START STATUS ================= [ 170.477619][ T9827] vivid-003: Radio HW Seek Mode: Bounded [ 170.495160][ T9827] vivid-003: Radio Programmable HW Seek: false [ 170.506139][ T9827] vivid-003: RDS Rx I/O Mode: Block I/O [ 170.522242][ T9827] vivid-003: Generate RBDS Instead of RDS: false [ 170.556011][ T9827] vivid-003: RDS Reception: true [ 170.558761][ T9834] [ 170.581304][ T9827] vivid-003: RDS Program Type: 0 inactive [ 170.616098][ T9827] vivid-003: RDS PS Name: inactive [ 170.621409][ T9827] vivid-003: RDS Radio Text: inactive [ 170.650477][ T9827] vivid-003: RDS Traffic Announcement: false inactive [ 170.674285][ T9827] vivid-003: RDS Traffic Program: false inactive [ 170.679148][ T9837] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 170.699194][ T9827] vivid-003: RDS Music: false inactive [ 170.706884][ T9827] vivid-003: ================== END STATUS ================== [ 170.812120][ T9842] mmap: syz.2.1780 (9842): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 171.204211][ T9866] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 171.824722][ T9898] vhci_hcd: invalid port number 16 [ 172.394052][ T9932] delete_channel: no stack [ 174.237908][T10037] random: crng reseeded on system resumption [ 174.638723][T10059] vhci_hcd: invalid port number 16 [ 177.218571][T10204] block2mtd: Using custom MTD label '' for dev [ 177.239373][T10204] block2mtd: error: cannot open device [ 178.204409][T10258] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 178.411816][T10268] synth uevent: /bus/mei: unknown uevent action string [ 178.529189][T10276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.449368][T10380] [ 181.133253][T10417] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 181.155531][T10419] futex_wake_op: syz.3.2062 tries to shift op by 64; fix this program [ 181.623214][T10447] syz.4.2074 uses obsolete (PF_INET,SOCK_PACKET) [ 184.277242][T10592] program syz.2.2144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.333452][T10592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 184.705369][T10615] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 185.543407][T10660] nvme_fcloop: unknown parameter or missing value '7' [ 185.653592][T10665] ICMPv6: process `syz.0.2179' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 185.671261][T10666] program syz.3.2177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.564999][T10758] i2c i2c-0: new_device: Can't parse I2C address [ 187.572359][T10733] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 187.833304][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 189.246323][T10848] usb usb24: check_ctrlrecip: process 10848 (syz.3.2269) requesting ep 01 but needs 81 [ 189.277507][T10848] usb usb24: usbfs: process 10848 (syz.3.2269) did not claim interface 0 before use [ 191.164570][ T5882] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 191.164607][ T5882] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 191.181726][ T5882] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 192.058719][T11012] block2mtd: illegal erase size [ 194.178200][T11123] ptrace attach of "./syz-executor exec"[7416] was attempted by ""[11123] [ 194.241010][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.248489][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.519065][T11145] kAFS: Invalid Command on /proc/fs/afs/cells file [ 194.882377][T11163] usb usb24: check_ctrlrecip: process 11163 (syz.0.2425) requesting ep 01 but needs 81 [ 194.923040][T11163] usb usb24: usbfs: process 11163 (syz.0.2425) did not claim interface 0 before use [ 195.776836][T11217] vhci_hcd: invalid port number 16 [ 195.781996][T11217] vhci_hcd: invalid port number 16 [ 196.757456][T11262] : Can't lookup blockdev [ 196.877989][T11263] Process accounting paused [ 197.699104][T11312] blktrace: Concurrent blktraces are not allowed on loop2 [ 197.781569][T11317] bond0: no command found in slaves file - use +ifname or -ifname [ 198.346862][T11345] dyndbg: expected <4096 bytes into control [ 199.738929][T11423] __vm_enough_memory: pid: 11423, comm: syz.0.2549, bytes: 4398046511104 not enough memory for the allocation [ 201.257630][T11511] usb usb2: usbfs: process 11511 (syz.3.2592) did not claim interface 0 before use [ 202.250282][T11561] __vm_enough_memory: pid: 11561, comm: syz.4.2617, bytes: 9223372036854775808 not enough memory for the allocation [ 203.464131][T11631] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 203.810012][T11650] QAT: failed to copy from user cfg_data. [ 204.804125][T11710] udc dummy_udc.0: soft-connect without a gadget driver [ 205.034522][T11723] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 205.034522][T11723] program syz.2.2698 not setting count and/or reply_len properly [ 206.078016][T11781] : Can't lookup blockdev [ 206.489336][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 206.490109][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.831961][T11817] program syz.2.2743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.063360][T11935] Invalid input. Must be >= 4608 [ 210.341910][T11997] random: crng reseeded on system resumption [ 211.028030][T12032] aoe: can't write to that file. [ 211.500621][T12058] kafs: addr_prefs: Invalid Command [ 211.581781][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 212.990398][T12137] blkio.reset_stats is deprecated [ 213.788552][T12183] i2c i2c-0: delete_device: Extra parameters [ 217.806496][T12403] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 218.426006][T12441] ima: policy update failed [ 218.435369][ T30] audit: type=1802 audit(1843104570.606:16): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3049" res=0 errno=0 [ 218.604305][T12453] random: crng reseeded on system resumption [ 219.294888][T12479] vhci_hcd: vhci_device speed not set [ 219.483154][T12492] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 221.546066][T12607] kAFS: unparsable volume name [ 221.756828][T12618] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 221.983988][T12636] bond0: no command found in slaves file - use +ifname or -ifname [ 222.075176][T12638] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 223.212750][T12695] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 224.652574][T12774] rnbd_client L213: map_device: Parameters missing [ 224.871562][T12786] cougar: G6 mapped to space [ 225.542150][T12826] i2c i2c-0: new_device: Missing parameters [ 225.709503][T12835] sysfs_service_op_show: Client not running :-5: [ 225.864491][T12844] vhci_hcd: invalid port number 23 [ 225.884450][T12844] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 226.885348][T12895] Process accounting resumed [ 229.330639][T13038] vhci_hcd: invalid port number 16 [ 229.336397][T13038] vhci_hcd: invalid port number 16 [ 231.334255][T13157] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 231.418363][T13157] CIFS mount error: No usable UNC path provided in device string! [ 231.418363][T13157] [ 231.431889][T13157] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 232.301276][T13210] QAT: Invalid ioctl 21531 [ 233.870164][T13314] vhci_hcd: invalid port number 16 [ 233.896740][T13314] vhci_hcd: invalid port number 16 [ 234.209130][T13333] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 236.283461][ T5877] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 236.379787][ T5877] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14 [ 237.101926][T13518] delete_channel: no stack [ 237.227436][T13525] cougar: G6 mapped to F18 [ 237.392222][ T30] audit: type=1800 audit(6138071885.674:17): pid=13536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3551" name="members" dev="configfs" ino=30666 res=0 errno=0 [ 239.472961][T13642] nvme_fabrics: missing parameter 'transport=%s' [ 239.484020][T13642] nvme_fabrics: missing parameter 'nqn=%s' [ 239.802720][T13669] QAT: Device 250 not found [ 240.587014][T13711] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 240.587014][T13711] program syz.4.3624 not setting count and/or reply_len properly [ 241.332736][T13752] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.208022][T13800] zram: Added device: zram1 [ 242.491589][T13822] vmstat_refresh: nr_hugetlb -2048 [ 242.737528][ T5877] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 243.431787][T13898] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 243.431787][T13898] [ 243.462230][T13899] bcache: register_bcache() error : failed to open device [ 244.346712][ T30] audit: type=1800 audit(6138071892.660:18): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3718" name="lu_gp_id" dev="configfs" ino=32938 res=0 errno=0 [ 244.380754][T13952] kstrtoul() returned -22 for lu_gp_id [ 244.799148][T13978] : Can't lookup blockdev [ 245.096745][T13996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 245.139141][T13996] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.176921][T13996] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.197067][T13996] page_type: f5(slab) [ 245.211320][T13996] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 245.246603][T13996] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 245.273297][T13996] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 245.285499][T13996] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 245.303606][T13996] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 245.319409][T13996] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 245.352967][T13996] page dumped because: unmovable page [ 245.375791][T13996] page_owner tracks the page as allocated [ 245.383832][T13996] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5248, tgid 5248 (udevadm), ts 35714492881, free_ts 29323932620 [ 245.426110][T13996] post_alloc_hook+0x1c0/0x230 [ 245.430945][T13996] get_page_from_freelist+0x132b/0x38e0 [ 245.440330][T13996] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 245.449323][T13996] alloc_pages_mpol+0x1fb/0x550 [ 245.497817][T14020] zram: Added device: zram2 [ 245.514833][T13996] new_slab+0x247/0x330 [ 245.534713][T13996] ___slab_alloc+0xcf2/0x1740 [ 245.534802][T13996] __slab_alloc.constprop.0+0x56/0xb0 [ 245.534826][T13996] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 245.535464][T13996] alloc_inode+0xc3/0x240 [ 245.535504][T13996] iget_locked+0x2e4/0x830 [ 245.535558][T13996] kernfs_get_inode+0x48/0x460 [ 245.535589][T13996] kernfs_iop_lookup+0x1a7/0x2d0 [ 245.535620][T13996] __lookup_slow+0x251/0x460 [ 245.535654][T13996] walk_component+0x353/0x5b0 [ 245.535678][T13996] path_lookupat+0x142/0x6d0 [ 245.535702][T13996] filename_lookup+0x224/0x5f0 [ 245.535735][T13996] page last free pid 1 tgid 1 stack trace: [ 245.535752][T13996] __free_frozen_pages+0x7d5/0x10f0 [ 245.535777][T13996] free_contig_range+0x183/0x4b0 [ 245.535801][T13996] destroy_args+0x7f6/0xa60 [ 245.535825][T13996] debug_vm_pgtable+0x1a32/0x3640 [ 245.535848][T13996] do_one_initcall+0x120/0x6e0 [ 245.535877][T13996] kernel_init_freeable+0x5c2/0x910 [ 245.535906][T13996] kernel_init+0x1c/0x2b0 [ 245.535935][T13996] ret_from_fork+0x5d7/0x6f0 [ 245.535970][T13996] ret_from_fork_asm+0x1a/0x30 [ 246.457192][ T5882] Bluetooth: hci0: unexpected event 0x3d length: 3 < 14 [ 247.238907][ T5882] Bluetooth: hci1: command 0x0406 tx timeout [ 247.360323][ T5877] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 247.376361][ T5877] Bluetooth: hci3: unexpected event 0x3d length: 3 < 14 [ 248.028182][ T30] audit: type=1800 audit(6138071896.359:19): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3802" name="dbroot" dev="configfs" ino=33248 res=0 errno=0 [ 248.058744][T14230] db_root: not a directory: /dev/audio1 [ 319.807118][T18857] ima: policy update failed [ 319.823088][ T30] audit: type=1802 audit(6138071971.531:30): pid=18857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5660" res=0 errno=0 [ 320.286486][T18887] kAFS: Invalid Command on /proc/fs/afs/cells file [ 321.393486][T18952] queue_state_write: unsupported operation '' [ 321.431294][T18952] queue_state_write: use 'run', 'start' or 'kick' [ 322.258153][T19009] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 322.323714][T19009] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 322.371610][T19009] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 322.426713][T19009] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 322.471308][T19009] page dumped because: unmovable page [ 322.499406][T19009] page_owner info is not present (never set?) [ 324.664342][T19141] overlayfs: "check_copy_up" module option is obsolete [ 325.205084][T19167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 328.949376][T19402] XFS: irix_symlink_mode sysctl option is deprecated. [ 329.982928][ T30] audit: type=1800 audit(6138090324.746:31): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5902" name="members" dev="configfs" ino=47827 res=0 errno=0 [ 331.376312][T19552] block2mtd: parameter too long [ 332.100433][ T30] audit: type=1800 audit(6138090326.867:32): pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5951" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 332.192322][T19597] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 335.080815][T19314] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 335.448849][ T30] audit: type=1800 audit(6138090330.244:33): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6022" name="discovery_nqn" dev="configfs" ino=48664 res=0 errno=0 [ 335.558768][T19314] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 335.891507][T19787] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 335.981131][T19787] ep_00: uevent: failed to send synthetic uevent: -22 [ 337.052843][T19860] syz_tun: tun_chr_ioctl cmd 1074025680 [ 337.545597][T19881] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 344.351239][T20246] binder: binder_mmap: 20245 0-1000 bad vm_flags failed -1 [ 344.948004][T20283] usb usb24: usbfs: process 20283 (syz.2.6255) did not claim interface 0 before use [ 346.075072][T20350] kafs: addr_prefs: Too many elements in string [ 346.518254][T20370] Process accounting resumed [ 346.630824][T20386] random: crng reseeded on system resumption [ 346.637653][T20382] Setting dangerous option i915.mitigations - tainting kernel [ 347.659789][T20443] syz_tun: tun_chr_ioctl cmd 1074812117 [ 347.959310][T20459] kAFS: Invalid Command on /proc/fs/afs/cells file [ 348.247767][T20474] synth uevent: /devices/virtual/block/nbd6: unknown uevent action string [ 348.298386][T20474] block nbd6: uevent: failed to send synthetic uevent: -22 [ 350.953065][T20631] : Can't lookup blockdev [ 351.644131][T20671] kAFS: Invalid Command on /proc/fs/afs/cells file [ 351.714106][ T30] audit: type=1800 audit(6138090354.587:34): pid=20677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6426" name="lu_gp_id" dev="configfs" ino=51265 res=0 errno=0 [ 352.097972][T20698] block2mtd: device name too long [ 352.843027][T20749] ubi0: attaching mtd0 [ 352.886372][T20749] ubi0: scanning is finished [ 352.916419][T20749] ubi0: empty MTD device detected [ 353.204224][T20749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 353.247379][T20749] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 353.306935][T20749] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 353.354266][T20749] ubi0: VID header offset: 514 (aligned 514), data offset: 578 [ 353.391104][T20749] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 353.464286][T20749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 353.516428][T20749] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3952894486 [ 353.575203][T20749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 353.668693][T20764] ubi0: background thread "ubi_bgt0d" started, PID 20764 [ 354.231759][T20785] WARNING! power/level is deprecated; use power/control instead [ 354.260335][T20789] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 355.000449][T20829] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 355.663235][T20862] CIFS mount error: No usable UNC path provided in device string! [ 355.663235][T20862] [ 355.697602][T20863] block nbd14: the capability attribute has been deprecated. [ 355.706700][T20862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 356.974801][T20921] ecryptfs_miscdev_write: Invalid packet size [192] [ 358.096644][T20961] QAT: Stopping all acceleration devices. [ 359.104395][T21017] i2c i2c-0: new_device: Invalid device name [ 360.254728][T19314] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 360.475488][T21085] Malformed UNC in devname [ 360.475488][T21085] [ 360.501657][T21085] CIFS: VFS: Malformed UNC in devname [ 365.986091][T21328] random: crng reseeded on system resumption [ 367.182343][T21376] < [ 369.096312][T21491] vhci_hcd: invalid port number 255 [ 369.667504][T21529] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 369.681867][T21528] ICMPv6: process `syz.4.6786' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 369.844995][T21535] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 370.493539][T21567] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 370.493889][T21566] ima: policy update failed [ 370.566011][ T30] audit: type=1802 audit(6138090373.535:35): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6802" res=0 errno=0 [ 374.219798][T21725] sd 0:0:1:0: PR command failed: 1026 [ 374.225353][T21725] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 374.312058][T21725] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 374.375288][T21732] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 375.785456][T21806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.419329][T21846] Process accounting paused [ 377.327123][T21897] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 21897 comm: syz.3.6938) [ 377.464789][ T30] audit: type=1800 audit(6138090380.471:36): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6938" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=54653 res=0 errno=0 [ 377.520299][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.650218][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.656544][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.741053][T21972] program syz.2.6970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.873480][ T5915] usb usb38-port5: attempt power cycle [ 381.182802][T22131] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 381.351908][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.514410][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.574139][ T5915] usb usb38-port5: unable to enumerate USB device [ 383.097802][T19314] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 383.105926][T19314] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 384.823429][T22342] aoe: invalid device specification [ 384.846032][ T30] audit: type=1804 audit(6138090387.879:37): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7116" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 386.471423][T22443] usbcore.quirks: string doesn't fit in 127 chars. [ 386.760605][T22459] binder: 22457:22459 ioctl c00c6211 0 returned -14 [ 388.287892][T22555] random: crng reseeded on system resumption [ 388.697143][T19249] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12 [ 389.102428][T22621] hub 1-0:1.0: USB hub found [ 389.146312][T22621] hub 1-0:1.0: 1 port detected [ 389.576413][T22653] syz.3.7230: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.672456][T22653] CPU: 0 UID: 0 PID: 22653 Comm: syz.3.7230 Tainted: G U I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 389.672484][T22653] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 389.672489][T22653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.672500][T22653] Call Trace: [ 389.672506][T22653] [ 389.672511][T22653] dump_stack_lvl+0x16c/0x1f0 [ 389.672533][T22653] warn_alloc+0x248/0x3a0 [ 389.672552][T22653] ? __pfx_warn_alloc+0x10/0x10 [ 389.672579][T22653] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 389.672598][T22653] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 389.672613][T22653] ? __pfx___might_resched+0x10/0x10 [ 389.672628][T22653] ? rcu_is_watching+0x12/0xc0 [ 389.672642][T22653] ? trace_contention_end+0xdd/0x130 [ 389.672660][T22653] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 389.672677][T22653] ? tomoyo_path_number_perm+0x295/0x580 [ 389.672696][T22653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.672708][T22653] ? __pfx___mutex_lock+0x10/0x10 [ 389.672725][T22653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.672738][T22653] ? futex_wake+0x1ad/0x530 [ 389.672759][T22653] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 389.672774][T22653] __vmalloc_node_noprof+0xad/0xf0 [ 389.672795][T22653] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 389.672813][T22653] dvb_dvr_do_ioctl+0x15d/0x290 [ 389.672834][T22653] dvb_usercopy+0x167/0x340 [ 389.672850][T22653] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 389.672868][T22653] ? __pfx_dvb_usercopy+0x10/0x10 [ 389.672892][T22653] ? __fget_files+0x20e/0x3c0 [ 389.672911][T22653] dvb_dvr_ioctl+0x29/0x40 [ 389.672926][T22653] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 389.672942][T22653] __x64_sys_ioctl+0x18e/0x210 [ 389.672964][T22653] do_syscall_64+0xcd/0x490 [ 389.672980][T22653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.672994][T22653] RIP: 0033:0x7fe00758ebe9 [ 389.673005][T22653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.673018][T22653] RSP: 002b:00007fe008452038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.673031][T22653] RAX: ffffffffffffffda RBX: 00007fe0077b5fa0 RCX: 00007fe00758ebe9 [ 389.673039][T22653] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 389.673047][T22653] RBP: 00007fe007611e19 R08: 0000000000000000 R09: 0000000000000000 [ 389.673055][T22653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.673063][T22653] R13: 00007fe0077b6038 R14: 00007fe0077b5fa0 R15: 00007ffc8e157158 [ 389.673080][T22653] [ 389.673086][T22653] Mem-Info: [ 390.175402][T19249] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 390.183120][T19249] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 390.647333][T22717] deleting an unspecified loop device is not supported. [ 390.732703][T19314] Bluetooth: hci1: command 0x0406 tx timeout [ 390.807320][T22653] active_anon:5519 inactive_anon:5 isolated_anon:0 [ 390.807320][T22653] active_file:20249 inactive_file:39210 isolated_file:0 [ 390.807320][T22653] unevictable:768 dirty:85 writeback:0 [ 390.807320][T22653] slab_reclaimable:11315 slab_unreclaimable:94593 [ 390.807320][T22653] mapped:24616 shmem:1367 pagetables:1130 [ 390.807320][T22653] sec_pagetables:0 bounce:0 [ 390.807320][T22653] kernel_misc_reclaimable:0 [ 390.807320][T22653] free:1064691 free_pcp:10800 free_cma:0 [ 391.039782][T22653] Node 0 active_anon:21972kB inactive_anon:20kB active_file:80936kB inactive_file:156712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98488kB dirty:376kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11152kB pagetables:4304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.245911][T22653] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.417547][T22653] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.561510][T22653] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 391.603664][T22653] Node 0 DMA32 free:1396456kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22284kB inactive_anon:20kB active_file:79748kB inactive_file:156600kB unevictable:1536kB writepending:532kB present:3129332kB managed:2539660kB mlocked:0kB bounce:0kB free_pcp:41108kB local_pcp:41108kB free_cma:0kB [ 391.776328][T22653] lowmem_reserve[]: 0 0 1 1 1 [ 391.814276][T22653] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:1188kB inactive_file:112kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 391.987534][T22653] lowmem_reserve[]: 0 0 0 0 0 [ 391.992315][T22653] Node 1 Normal free:2847472kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:128kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.212476][T22653] lowmem_reserve[]: 0 0 0 0 0 [ 392.227485][T22653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.289922][T22653] Node 0 DMA32: 2621*4kB (UM) 1810*8kB (UME) 1655*16kB (UM) 1032*32kB (UME) 638*64kB (UME) 205*128kB (UME) 104*256kB (UM) 97*512kB (UM) 51*1024kB (UM) 9*2048kB (UM) 268*4096kB (UM) = 1396212kB [ 392.403569][T22653] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 392.473406][T22653] Node 1 Normal: 204*4kB (UME) 46*8kB (UME) 49*16kB (UME) 224*32kB (UE) 113*64kB (UME) 34*128kB (UM) 16*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 685*4096kB (M) = 2847472kB [ 392.572572][T22653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.639525][T22653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 392.688092][T22653] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 392.736399][T22653] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 392.799177][T22653] 60831 total pagecache pages [ 392.819325][T22653] 10 pages in swap cache [ 392.842813][T22653] Free swap = 124956kB [ 392.869038][T22653] Total swap = 124996kB [ 392.906775][T22653] 2097051 pages RAM [ 392.924454][T19314] Bluetooth: hci2: unexpected subevent 0x05 length: 123 > 12 [ 392.937844][T22653] 0 pages HighMem/MovableOnly [ 392.977710][T22653] 430174 pages reserved [ 393.000710][T22653] 0 pages cma reserved [ 393.440695][T22872] syz.3.7295 (22872): drop_caches: 0 [ 393.663547][ T30] audit: type=1800 audit(6138090396.755:38): pid=22883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7300" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 394.174280][T22909] hub 1-0:1.0: USB hub found [ 394.205554][T22909] hub 1-0:1.0: 1 port detected [ 394.950509][T19314] Bluetooth: hci2: command 0x0406 tx timeout [ 395.146588][T19314] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 395.156254][T19314] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 396.838254][T23074] Line length is too long: Should be less than 4094 [ 396.944269][T22971] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12 [ 398.295637][T22971] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 398.303172][T22971] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 398.358822][ T30] audit: type=1400 audit(6138090401.470:39): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23177 comm="syz.2.7388" [ 399.006804][T19249] Bluetooth: hci0: command 0x0406 tx timeout [ 402.064702][T19249] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 402.072597][T19249] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 402.467111][T23420] bond0: option mode: unable to set because the bond device is up [ 402.962191][T22971] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 402.969911][T22971] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 404.479505][T23542] kafs: addr_prefs: Invalid Command [ 404.849305][ T30] audit: type=1400 audit(6138090408.003:40): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=23559 comm="syz.0.7518" [ 404.998754][T23568] ICMPv6: process `syz.2.7519' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 406.152520][T23640] bond0: option packets_per_slave: invalid value ( Xnp) [ 406.196415][T23640] bond0: option packets_per_slave: allowed values 0 - 65535 [ 406.409510][T23651] Process accounting resumed [ 408.989836][T23805] Format for deleting device is "id" (uint). [ 410.420083][T23871] block2mtd: illegal erase size [ 411.094256][T23897] vhci_hcd: invalid port number 16 [ 411.118752][T23897] vhci_hcd: invalid port number 16 [ 414.564293][T24059] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 414.806765][T24074] usb usb1: usbfs: process 24074 (syz.4.7716) did not claim interface 0 before use [ 415.161864][T24091] binder: 24090:24091 ioctl c0306201 0 returned -14 [ 416.520780][T24170] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 416.520780][T24170] M' is too long [ 416.583324][T24170] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 416.583324][T24170] W ' is too long [ 418.865235][T19249] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 419.161100][T24343] db_root: cannot open: Y [ 420.172560][T24399] misc userio: Invalid payload size [ 420.455727][T24416] kAFS: Invalid Command on /proc/fs/afs/cells file [ 421.231026][T19249] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 422.442857][T19249] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 422.442882][T19249] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 422.458445][T19249] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 422.458493][T19249] Bluetooth: hci1: Malformed LE Event: 0x0d [ 422.496888][T24551] [U]  [ 423.417414][T24610] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 424.384842][T24657] kernel profiling enabled (shift: 0) [ 424.596020][T19249] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 425.730680][T19249] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 425.945815][T24657] syz.0.7927: vmalloc error: size 709750784, failed to allocated page array size 1386232, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.041914][T24657] CPU: 0 UID: 0 PID: 24657 Comm: syz.0.7927 Tainted: G U I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 426.041942][T24657] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 426.041947][T24657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.041955][T24657] Call Trace: [ 426.041970][T24657] [ 426.041975][T24657] dump_stack_lvl+0x16c/0x1f0 [ 426.041995][T24657] warn_alloc+0x248/0x3a0 [ 426.042014][T24657] ? __pfx_warn_alloc+0x10/0x10 [ 426.042038][T24657] ? profile_init+0xd5/0x130 [ 426.042057][T24657] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.042074][T24657] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 426.042094][T24657] ? profile_init+0xd5/0x130 [ 426.042121][T24657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.042136][T24657] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 426.042154][T24657] ? rcu_is_watching+0x12/0xc0 [ 426.042172][T24657] ? profile_init+0xd5/0x130 [ 426.042190][T24657] __vmalloc_node_noprof+0xad/0xf0 [ 426.042203][T24657] ? profile_init+0xd5/0x130 [ 426.042223][T24657] ? __pfx_profiling_store+0x10/0x10 [ 426.042242][T24657] profile_init+0xd5/0x130 [ 426.042261][T24657] profiling_store+0x7b/0x120 [ 426.042280][T24657] kobj_attr_store+0x55/0x80 [ 426.042296][T24657] ? __pfx_kobj_attr_store+0x10/0x10 [ 426.042311][T24657] sysfs_kf_write+0xf2/0x150 [ 426.042328][T24657] kernfs_fop_write_iter+0x354/0x510 [ 426.042341][T24657] ? __pfx_sysfs_kf_write+0x10/0x10 [ 426.042358][T24657] vfs_write+0x6c4/0x1150 [ 426.042375][T24657] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 426.042389][T24657] ? __pfx___mutex_lock+0x10/0x10 [ 426.042405][T24657] ? __pfx_vfs_write+0x10/0x10 [ 426.042433][T24657] ksys_write+0x12a/0x250 [ 426.042448][T24657] ? __pfx_ksys_write+0x10/0x10 [ 426.042469][T24657] do_syscall_64+0xcd/0x490 [ 426.042486][T24657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.042500][T24657] RIP: 0033:0x7f3c7a98ebe9 [ 426.042512][T24657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.042524][T24657] RSP: 002b:00007f3c7b84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.042538][T24657] RAX: ffffffffffffffda RBX: 00007f3c7abb5fa0 RCX: 00007f3c7a98ebe9 [ 426.042546][T24657] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000003 [ 426.042554][T24657] RBP: 00007f3c7aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 426.042562][T24657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.042570][T24657] R13: 00007f3c7abb6038 R14: 00007f3c7abb5fa0 R15: 00007ffc8fc589a8 [ 426.042588][T24657] [ 426.042594][T24657] Mem-Info: [ 426.253654][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.303359][T24657] active_anon:5939 inactive_anon:5 isolated_anon:0 [ 427.303359][T24657] active_file:20248 inactive_file:39505 isolated_file:0 [ 427.303359][T24657] unevictable:768 dirty:95 writeback:0 [ 427.303359][T24657] slab_reclaimable:11277 slab_unreclaimable:93863 [ 427.303359][T24657] mapped:24630 shmem:1368 pagetables:1221 [ 427.303359][T24657] sec_pagetables:0 bounce:0 [ 427.303359][T24657] kernel_misc_reclaimable:0 [ 427.303359][T24657] free:1043553 free_pcp:10647 free_cma:0 [ 427.348682][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.548803][T24657] Node 0 active_anon:23912kB inactive_anon:20kB active_file:80936kB inactive_file:157888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98468kB dirty:380kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11024kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.694675][T24657] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.847346][T24657] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.993267][T24657] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 428.010534][T24657] Node 0 DMA32 free:1311800kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23680kB inactive_anon:20kB active_file:79748kB inactive_file:157776kB unevictable:1536kB writepending:472kB present:3129332kB managed:2539660kB mlocked:0kB bounce:0kB free_pcp:41776kB local_pcp:41776kB free_cma:0kB [ 428.093371][T24851] binder: 24848:24851 ioctl c0046209 0 returned -22 [ 428.167837][T24657] lowmem_reserve[]: 0 0 1 1 1 [ 428.202042][T24657] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:1188kB inactive_file:112kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 428.341956][T24657] lowmem_reserve[]: 0 0 0 0 0 [ 428.374960][T24657] Node 1 Normal free:2847240kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:272kB free_cma:0kB [ 428.565422][T24657] lowmem_reserve[]: 0 0 0 0 0 [ 428.570558][T24657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 428.630529][T24657] Node 0 DMA32: 1940*4kB (UM) 123*8kB (UME) 119*16kB (M) 481*32kB (UME) 474*64kB (ME) 186*128kB (ME) 49*256kB (M) 113*512kB (UM) 52*1024kB (UM) 7*2048kB (M) 267*4096kB (UM) = 1311800kB [ 428.724907][T24657] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 428.777626][T24657] Node 1 Normal: 203*4kB (UME) 47*8kB (UME) 49*16kB (UME) 226*32kB (UME) 115*64kB (UME) 35*128kB (UM) 16*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 685*4096kB (M) = 2847284kB [ 428.888110][T24657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.933253][T24657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.984405][T24657] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 429.039829][T24657] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 429.054466][T24896] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 429.082478][T24657] 63066 total pagecache pages [ 429.101507][T24657] 10 pages in swap cache [ 429.125867][T24657] Free swap = 124956kB [ 429.144819][T24657] Total swap = 124996kB [ 429.168016][T24657] 2097051 pages RAM [ 429.180054][T24657] 0 pages HighMem/MovableOnly [ 429.209803][T24657] 430174 pages reserved [ 429.240292][T24657] 0 pages cma reserved [ 430.398514][ T9] Process accounting resumed [ 431.313520][T24992] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 432.017214][T19249] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 433.560599][T25104] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 434.286162][T19249] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 435.575901][T25217] syz.0.8107 (25217): attempted to duplicate a private mapping with mremap. This is not supported. [ 435.795571][T25218] svc: failed to register nfsdv3 RPC service (errno 111). [ 435.826389][T25218] svc: failed to register nfsaclv3 RPC service (errno 111). [ 436.304228][T25240] Process accounting paused [ 436.353383][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8115'. [ 438.160365][T25338] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 438.729268][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.735653][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.952225][T25374] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 439.767527][T25416] netlink: 338 bytes leftover after parsing attributes in process `syz.2.8180'. [ 439.825980][T25416] netlink: 338 bytes leftover after parsing attributes in process `syz.2.8180'. [ 439.894010][T25421] vhci_hcd: invalid port number 21 [ 440.129823][T25431] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 440.168323][T25432] netlink: 'syz.2.8186': attribute type 1 has an invalid length. [ 440.505324][T25446] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   [ 459.714364][T26323] netlink: 'syz.3.8506': attribute type 1 has an invalid length. [ 460.472359][T26362] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 462.307873][T26460] openvswitch: netlink: IPv4 tunnel dst address is zero [ 462.768930][T26474] [ 462.771299][T26474] ====================================================== [ 462.778307][T26474] WARNING: possible circular locking dependency detected [ 462.785311][T26474] 6.16.0-syzkaller-11952-g6e64f4580381 #0 Tainted: G U I [ 462.793635][T26474] ------------------------------------------------------ [ 462.800634][T26474] syz.0.8565/26474 is trying to acquire lock: [ 462.806795][T26474] ffff888025f75468 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 462.816307][T26474] [ 462.816307][T26474] but task is already holding lock: [ 462.823751][T26474] ffff888025f74f28 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 462.834977][T26474] [ 462.834977][T26474] which lock already depends on the new lock. [ 462.834977][T26474] [ 462.845404][T26474] [ 462.845404][T26474] the existing dependency chain (in reverse order) is: [ 462.854583][T26474] [ 462.854583][T26474] -> #3 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 462.863441][T26474] blk_alloc_queue+0x619/0x760 [ 462.868738][T26474] blk_mq_alloc_queue+0x172/0x280 [ 462.874280][T26474] __blk_mq_alloc_disk+0x29/0x120 [ 462.879821][T26474] loop_add+0x490/0xb70 [ 462.884492][T26474] loop_init+0x164/0x270 [ 462.889278][T26474] do_one_initcall+0x120/0x6e0 [ 462.894551][T26474] kernel_init_freeable+0x5c2/0x910 [ 462.900283][T26474] kernel_init+0x1c/0x2b0 [ 462.905472][T26474] ret_from_fork+0x5d7/0x6f0 [ 462.910587][T26474] ret_from_fork_asm+0x1a/0x30 [ 462.915866][T26474] [ 462.915866][T26474] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 462.923110][T26474] fs_reclaim_acquire+0x102/0x150 [ 462.928650][T26474] prepare_alloc_pages+0x162/0x610 [ 462.934305][T26474] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 462.940712][T26474] __alloc_pages_noprof+0xb/0x1b0 [ 462.946338][T26474] pcpu_populate_chunk+0x110/0xb00 [ 462.951965][T26474] pcpu_alloc_noprof+0x86a/0x1470 [ 462.957527][T26474] __alloc+0xa8/0x190 [ 462.962029][T26474] alloc_bulk+0x413/0xc80 [ 462.966890][T26474] bpf_mem_alloc_init+0x84b/0xd40 [ 462.972431][T26474] htab_map_alloc+0xe95/0x1570 [ 462.977699][T26474] map_create+0x58f/0x1f80 [ 462.982653][T26474] __sys_bpf+0x44d2/0x4de0 [ 462.987584][T26474] __x64_sys_bpf+0x78/0xc0 [ 462.992546][T26474] do_syscall_64+0xcd/0x490 [ 462.997645][T26474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.004481][T26474] [ 463.004481][T26474] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 463.012206][T26474] __mutex_lock+0x193/0x10b0 [ 463.017304][T26474] pcpu_alloc_noprof+0xb4c/0x1470 [ 463.022922][T26474] sbitmap_init_node+0x2fd/0x770 [ 463.028389][T26474] sbitmap_queue_init_node+0x41/0x560 [ 463.034365][T26474] blk_mq_init_tags+0x12d/0x2b0 [ 463.039728][T26474] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 463.045862][T26474] blk_mq_init_sched+0x30c/0x610 [ 463.051326][T26474] elevator_switch+0x1e1/0x7f0 [ 463.056639][T26474] elevator_change+0x2ac/0x400 [ 463.062106][T26474] elevator_set_default+0x2c4/0x360 [ 463.067826][T26474] blk_register_queue+0x393/0x4f0 [ 463.073389][T26474] __add_disk+0x74a/0xf00 [ 463.078233][T26474] add_disk_fwnode+0x13f/0x5d0 [ 463.083603][T26474] nbd_dev_add+0x783/0xbb0 [ 463.088541][T26474] nbd_init+0x181/0x320 [ 463.093471][T26474] do_one_initcall+0x120/0x6e0 [ 463.098750][T26474] kernel_init_freeable+0x5c2/0x910 [ 463.104468][T26474] kernel_init+0x1c/0x2b0 [ 463.109317][T26474] ret_from_fork+0x5d7/0x6f0 [ 463.114568][T26474] ret_from_fork_asm+0x1a/0x30 [ 463.119881][T26474] [ 463.119881][T26474] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 463.127701][T26474] __lock_acquire+0x12a6/0x1ce0 [ 463.133151][T26474] lock_acquire+0x179/0x350 [ 463.138283][T26474] __mutex_lock+0x193/0x10b0 [ 463.143378][T26474] elevator_change+0x103/0x400 [ 463.148738][T26474] elv_iosched_store+0x2eb/0x3a0 [ 463.154190][T26474] queue_attr_store+0x26b/0x310 [ 463.159774][T26474] sysfs_kf_write+0xf2/0x150 [ 463.164898][T26474] kernfs_fop_write_iter+0x354/0x510 [ 463.170711][T26474] vfs_write+0x6c4/0x1150 [ 463.175549][T26474] ksys_write+0x12a/0x250 [ 463.180392][T26474] do_syscall_64+0xcd/0x490 [ 463.185403][T26474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.191820][T26474] [ 463.191820][T26474] other info that might help us debug this: [ 463.191820][T26474] [ 463.202033][T26474] Chain exists of: [ 463.202033][T26474] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 463.202033][T26474] [ 463.215753][T26474] Possible unsafe locking scenario: [ 463.215753][T26474] [ 463.223215][T26474] CPU0 CPU1 [ 463.228593][T26474] ---- ---- [ 463.233937][T26474] lock(&q->q_usage_counter(io)#18); [ 463.239442][T26474] lock(fs_reclaim); [ 463.245939][T26474] lock(&q->q_usage_counter(io)#18); [ 463.253833][T26474] lock(&q->elevator_lock); [ 463.258434][T26474] [ 463.258434][T26474] *** DEADLOCK *** [ 463.258434][T26474] [ 463.266559][T26474] 7 locks held by syz.0.8565/26474: [ 463.271733][T26474] #0: ffff88803198a0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 463.280766][T26474] #1: ffff8880351b4428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 463.289730][T26474] #2: ffff88805b282088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 463.299454][T26474] #3: ffff8880255ca3c8 (kn->active#438){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 463.309543][T26474] #4: ffff888025f96368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 463.320276][T26474] #5: ffff888025f74f28 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 463.331995][T26474] #6: ffff888025f74f60 (&q->q_usage_counter(queue)#23){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 463.343911][T26474] [ 463.343911][T26474] stack backtrace: [ 463.350224][T26474] CPU: 0 UID: 0 PID: 26474 Comm: syz.0.8565 Tainted: G U I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 463.350248][T26474] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 463.350253][T26474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.350261][T26474] Call Trace: [ 463.350285][T26474] [ 463.350291][T26474] dump_stack_lvl+0x116/0x1f0 [ 463.350310][T26474] print_circular_bug+0x275/0x350 [ 463.350328][T26474] check_noncircular+0x14c/0x170 [ 463.350346][T26474] __lock_acquire+0x12a6/0x1ce0 [ 463.350366][T26474] lock_acquire+0x179/0x350 [ 463.350383][T26474] ? elevator_change+0x103/0x400 [ 463.350402][T26474] ? __pfx___might_resched+0x10/0x10 [ 463.350417][T26474] ? elevator_change+0x103/0x400 [ 463.350435][T26474] __mutex_lock+0x193/0x10b0 [ 463.350450][T26474] ? elevator_change+0x103/0x400 [ 463.350467][T26474] ? enable_work+0x245/0x340 [ 463.350479][T26474] ? __pfx_xa_find_after+0x10/0x10 [ 463.350497][T26474] ? __pfx___mutex_lock+0x10/0x10 [ 463.350513][T26474] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 463.350528][T26474] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 463.350545][T26474] ? elevator_change+0x103/0x400 [ 463.350562][T26474] elevator_change+0x103/0x400 [ 463.350582][T26474] elv_iosched_store+0x2eb/0x3a0 [ 463.350601][T26474] ? __pfx_elv_iosched_store+0x10/0x10 [ 463.350622][T26474] ? __mutex_trylock_common+0xe9/0x250 [ 463.350640][T26474] ? __pfx_elv_iosched_store+0x10/0x10 [ 463.350660][T26474] queue_attr_store+0x26b/0x310 [ 463.350677][T26474] ? __pfx_queue_attr_store+0x10/0x10 [ 463.350696][T26474] ? find_held_lock+0x2b/0x80 [ 463.350709][T26474] ? sysfs_file_kobj+0xe4/0x290 [ 463.350724][T26474] ? __pfx_queue_attr_store+0x10/0x10 [ 463.350740][T26474] sysfs_kf_write+0xf2/0x150 [ 463.350754][T26474] kernfs_fop_write_iter+0x354/0x510 [ 463.350766][T26474] ? __pfx_sysfs_kf_write+0x10/0x10 [ 463.350781][T26474] vfs_write+0x6c4/0x1150 [ 463.350796][T26474] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 463.350809][T26474] ? __pfx___mutex_lock+0x10/0x10 [ 463.350823][T26474] ? __pfx_vfs_write+0x10/0x10 [ 463.350842][T26474] ksys_write+0x12a/0x250 [ 463.350857][T26474] ? __pfx_ksys_write+0x10/0x10 [ 463.350874][T26474] do_syscall_64+0xcd/0x490 [ 463.350889][T26474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.350903][T26474] RIP: 0033:0x7f3c7a98ebe9 [ 463.350915][T26474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.350928][T26474] RSP: 002b:00007f3c7b82e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.350941][T26474] RAX: ffffffffffffffda RBX: 00007f3c7abb6090 RCX: 00007f3c7a98ebe9 [ 463.350950][T26474] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 463.350958][T26474] RBP: 00007f3c7aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 463.350965][T26474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.350973][T26474] R13: 00007f3c7abb6128 R14: 00007f3c7abb6090 R15: 00007ffc8fc589a8 [ 463.350985][T26474]