last executing test programs: 4m19.692562978s ago: executing program 0 (id=3842): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x8f3b7a51b80ebd01, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 4m19.42626228s ago: executing program 0 (id=3846): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040)='-:', 0x2) 4m19.162896326s ago: executing program 0 (id=3849): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x60000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) 4m18.890709173s ago: executing program 0 (id=3853): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000004c0)="60a19ed8", 0x4) 4m18.585938441s ago: executing program 0 (id=3858): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m18.016102755s ago: executing program 0 (id=3865): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) 4m17.441649134s ago: executing program 32 (id=3865): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) 3m9.532758225s ago: executing program 1 (id=4611): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) ioctl$auto_FICLONE(r0, 0x40049409, r0) 3m9.190911455s ago: executing program 1 (id=4616): socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0xffffffffffffff81, 0x4cbd5d) 3m8.823253466s ago: executing program 1 (id=4620): r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r0, 0x0, 0x4) 3m8.412198483s ago: executing program 1 (id=4622): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd10/queue/max_segments\x00', 0x80980, 0x0) sendfile$auto(0x1, r0, 0x0, 0x400207ffff000) 3m7.947355217s ago: executing program 1 (id=4628): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) 3m7.603012933s ago: executing program 1 (id=4632): openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000005240), 0x8000, 0x0) lseek$auto(0x3, 0x20000, 0x1) 2m52.559981567s ago: executing program 33 (id=4632): openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000005240), 0x8000, 0x0) lseek$auto(0x3, 0x20000, 0x1) 1m25.843177438s ago: executing program 2 (id=5742): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) 1m25.568272762s ago: executing program 2 (id=5746): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) lseek$auto(0x3, 0x0, 0x1) 1m25.27505264s ago: executing program 2 (id=5750): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x0, 0x1) 1m25.021215648s ago: executing program 2 (id=5754): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) lseek$auto(0x3, 0x0, 0x1) 1m24.734638564s ago: executing program 2 (id=5758): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r0, &(0x7f0000000240)='5\x00\\\x1cj\xf0\xa4\x9cje\xdc\"F\x12', 0x81) 1m24.453699699s ago: executing program 2 (id=5761): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000240)=""/163, 0xa3) 1m9.369223045s ago: executing program 34 (id=5761): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000240)=""/163, 0xa3) 4.14512987s ago: executing program 6 (id=6469): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) 3.895047782s ago: executing program 6 (id=6473): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKROTATIONAL(r0, 0x127e, 0x0) 3.47822392s ago: executing program 6 (id=6478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000740)={0x20, r1, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0xc, 0x138, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_VHT_CAPABILITY={0x4}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) 3.1701238s ago: executing program 6 (id=6482): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(r0, 0x0, 0x80009, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) 1.900890677s ago: executing program 6 (id=6495): setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) 1.792497746s ago: executing program 5 (id=6497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001480)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "000000010000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) 1.591087003s ago: executing program 6 (id=6499): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 1.564496947s ago: executing program 3 (id=6500): close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x15, 0x0, 0x0) 1.509288591s ago: executing program 5 (id=6501): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mprotect$auto(0x0, 0x806121, 0x8) 1.29390755s ago: executing program 3 (id=6503): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r0, 0x40085618, r0) 1.210096838s ago: executing program 4 (id=6504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_MM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22}, 0x0) 1.051259601s ago: executing program 3 (id=6505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x7, 0x3, ',&^'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044855}, 0x20008010) 1.030840648s ago: executing program 5 (id=6506): r0 = socket(0xa, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) close_range$auto(0x2, 0x8, 0x0) 957.546443ms ago: executing program 4 (id=6507): r0 = socket(0x10, 0x2, 0x4) bind$auto(r0, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xe) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 784.57844ms ago: executing program 3 (id=6508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 768.430264ms ago: executing program 5 (id=6509): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto_IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 699.48756ms ago: executing program 4 (id=6510): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x9, 0x70bd2f, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) 528.902053ms ago: executing program 3 (id=6511): unshare$auto(0x8100000) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) 520.548842ms ago: executing program 5 (id=6512): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de48302", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) 435.546099ms ago: executing program 4 (id=6513): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r0}, 0x287) 247.238172ms ago: executing program 4 (id=6514): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) inotify_init1$auto(0x3000000000000) 138.408145ms ago: executing program 4 (id=6515): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) lsetxattr$auto(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='security.caility\xf6\x00\x00\xcd\xd3<\x81\a(\xa2\b\x00\x00\x00\x00\x00\x00\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00\x04dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G&\f\x00S\xd4\x7f\x98\x0f\xd2\xe2\xa8\xc5\xbcLK\xbb=\xaeM\xb9\xfe\xf4[\x89\xbc\xca\x95\x1d*7\xce\x96\xfbY\x83\xad\x8d\xcd\x1f\xa4\xbcP\xaf\x95\x1fW\xcf<\xee\x93,v\xcee\x0f\x19\x92\xb3\xc8\xd0\xe0\x92\x02S0c\xb9\xa1\x8c\x84W\xa1\xc7\x8f\xb0e\xe4\x88\x14\xd2\xc2\xb3\x1et\xb5\xf5\x99', 0x0, 0x4, 0x0) 43.218597ms ago: executing program 3 (id=6516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000064c0), r0) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PHC_VCLOCKS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 5 (id=6517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250a0000000800030001000000080001000003000008000200c9cb"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 94.958662][ T5611] cgroup: Unknown subsys name 'net' [ 95.072534][ T5611] cgroup: Unknown subsys name 'cpuset' [ 95.083805][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.984675][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.290633][ T186] cfg80211: failed to load regulatory.db [ 103.715583][ T5892] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.845124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.880686][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.224739][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.238837][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.300933][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.312619][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.323005][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.332764][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.341580][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.399809][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.411862][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.422842][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.431178][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.439450][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.451369][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.462504][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.473813][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.483674][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.488162][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.497828][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.507794][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.528200][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.537012][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.547208][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.377118][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.385053][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.392876][ T5944] bridge_slave_0: entered allmulticast mode [ 111.400614][ T5944] bridge_slave_0: entered promiscuous mode [ 111.447891][ T5942] Bluetooth: hci0: command tx timeout [ 111.454803][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.462364][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.469648][ T5944] bridge_slave_1: entered allmulticast mode [ 111.477183][ T5944] bridge_slave_1: entered promiscuous mode [ 111.607173][ T5942] Bluetooth: hci3: command tx timeout [ 111.607241][ T5948] Bluetooth: hci2: command tx timeout [ 111.613667][ T50] Bluetooth: hci1: command tx timeout [ 111.622040][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.636786][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.644089][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.651599][ T5941] bridge_slave_0: entered allmulticast mode [ 111.659146][ T5941] bridge_slave_0: entered promiscuous mode [ 111.696864][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.706209][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.714117][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.721464][ T5941] bridge_slave_1: entered allmulticast mode [ 111.728956][ T5941] bridge_slave_1: entered promiscuous mode [ 111.782809][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.790161][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.797625][ T5940] bridge_slave_0: entered allmulticast mode [ 111.805458][ T5940] bridge_slave_0: entered promiscuous mode [ 111.813323][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.820740][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.828483][ T5945] bridge_slave_0: entered allmulticast mode [ 111.835964][ T5945] bridge_slave_0: entered promiscuous mode [ 111.869125][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.876463][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.884095][ T5940] bridge_slave_1: entered allmulticast mode [ 111.891648][ T5940] bridge_slave_1: entered promiscuous mode [ 111.899455][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.906743][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.913958][ T5945] bridge_slave_1: entered allmulticast mode [ 111.921856][ T5945] bridge_slave_1: entered promiscuous mode [ 111.931226][ T5944] team0: Port device team_slave_0 added [ 111.942268][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.979945][ T5944] team0: Port device team_slave_1 added [ 111.989161][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.048064][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.061929][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.098923][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.110575][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.120867][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.128253][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.154452][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.169727][ T5941] team0: Port device team_slave_0 added [ 112.176170][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.183224][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.209256][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.245296][ T5941] team0: Port device team_slave_1 added [ 112.313691][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.321227][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.347294][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.361624][ T5940] team0: Port device team_slave_0 added [ 112.369860][ T5945] team0: Port device team_slave_0 added [ 112.377528][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.384582][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.411231][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.424664][ T5940] team0: Port device team_slave_1 added [ 112.444196][ T5945] team0: Port device team_slave_1 added [ 112.524891][ T5944] hsr_slave_0: entered promiscuous mode [ 112.531983][ T5944] hsr_slave_1: entered promiscuous mode [ 112.540927][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.548031][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.574239][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.586515][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.593873][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.620849][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.656868][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.663987][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.690081][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.701975][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.709310][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.735886][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.772104][ T5941] hsr_slave_0: entered promiscuous mode [ 112.778891][ T5941] hsr_slave_1: entered promiscuous mode [ 112.785215][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 112.791195][ T5941] Cannot create hsr debugfs directory [ 112.954253][ T5940] hsr_slave_0: entered promiscuous mode [ 112.960933][ T5940] hsr_slave_1: entered promiscuous mode [ 112.967914][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 112.974292][ T5940] Cannot create hsr debugfs directory [ 112.987241][ T5945] hsr_slave_0: entered promiscuous mode [ 112.993877][ T5945] hsr_slave_1: entered promiscuous mode [ 113.000670][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 113.006459][ T5945] Cannot create hsr debugfs directory [ 113.463527][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.478877][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.488177][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.501875][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.522479][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.534891][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.543413][ T50] Bluetooth: hci0: command tx timeout [ 113.560740][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.573554][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.642050][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.654462][ T5941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.664099][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.675422][ T5941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.684326][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.687448][ T50] Bluetooth: hci1: command tx timeout [ 113.696660][ T5942] Bluetooth: hci3: command tx timeout [ 113.697851][ T5948] Bluetooth: hci2: command tx timeout [ 113.715259][ T5941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.735477][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.746304][ T5941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.849318][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.861957][ T5940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.878935][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.891578][ T5940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.911597][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.922628][ T5940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.931409][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.943249][ T5940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.059252][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.070142][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.078765][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.089660][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.103192][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.113950][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.125114][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.134083][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.145810][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.223873][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.260714][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.268573][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.302579][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.309786][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.344674][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.418092][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.445642][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.452831][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.489687][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.496940][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.509520][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.561587][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.599577][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.606833][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.635365][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.642696][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.693294][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.786485][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.840029][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.847327][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.880152][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.942321][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.949608][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.608925][ T5948] Bluetooth: hci0: command tx timeout [ 115.767569][ T5948] Bluetooth: hci2: command tx timeout [ 115.768126][ T5942] Bluetooth: hci3: command tx timeout [ 115.773179][ T5948] Bluetooth: hci1: command tx timeout [ 115.831884][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.019190][ T5944] veth0_vlan: entered promiscuous mode [ 116.070127][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.098981][ T5944] veth1_vlan: entered promiscuous mode [ 116.152628][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.277402][ T5944] veth0_macvtap: entered promiscuous mode [ 116.316283][ T5944] veth1_macvtap: entered promiscuous mode [ 116.356387][ T5941] veth0_vlan: entered promiscuous mode [ 116.373636][ T5940] veth0_vlan: entered promiscuous mode [ 116.382856][ T5941] veth1_vlan: entered promiscuous mode [ 116.400290][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.425260][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.441569][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.460965][ T5940] veth1_vlan: entered promiscuous mode [ 116.563308][ T5941] veth0_macvtap: entered promiscuous mode [ 116.578838][ T5941] veth1_macvtap: entered promiscuous mode [ 116.618429][ T5940] veth0_macvtap: entered promiscuous mode [ 116.640641][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.676542][ T5940] veth1_macvtap: entered promiscuous mode [ 116.709228][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.721497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.739164][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.751682][ T5945] veth0_vlan: entered promiscuous mode [ 116.789727][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.800442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.812798][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.839091][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.848105][ T5945] veth1_vlan: entered promiscuous mode [ 116.875868][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.891949][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.928011][ T200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.114806][ T5945] veth0_macvtap: entered promiscuous mode [ 117.183998][ T5945] veth1_macvtap: entered promiscuous mode [ 117.201990][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.246208][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.357112][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.374547][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.388062][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.419311][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.432088][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.454403][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.519807][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.616133][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.637193][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.657688][ T200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.699527][ T5948] Bluetooth: hci0: command tx timeout [ 117.729003][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.792594][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.847155][ T5948] Bluetooth: hci3: command tx timeout [ 117.853160][ T5942] Bluetooth: hci2: command tx timeout [ 117.859503][ T5948] Bluetooth: hci1: command tx timeout [ 118.067840][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.086328][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.109161][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.120195][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.268107][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.298843][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.331836][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.426983][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.459894][ T200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.490546][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.525473][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.602273][ T202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.633356][ T202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.920590][ T6205] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.443772][ T30] audit: type=1800 audit(1785493892.040:2): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.328" name="features" dev="configfs" ino=9602 res=0 errno=0 [ 124.509356][ T6333] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.186146][ T30] audit: type=1800 audit(1785493895.780:3): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.395" name="features" dev="configfs" ino=10648 res=0 errno=0 [ 128.214340][ T6477] futex_wake_op: syz.2.454 tries to shift op by -2048; fix this program [ 129.866517][ T6545] mmap: syz.2.485 (6545) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.822872][ T6581] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.873959][ T30] audit: type=1800 audit(1785493901.470:4): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.501" name="trace_pipe" dev="tracefs" ino=4248 res=0 errno=0 [ 133.132783][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142216][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.586824][ T5948] Bluetooth: hci3: unexpected event 0x3b length: 1022 > 10 [ 135.556429][ T6730] Unable to find swap-space signature [ 140.591122][ T6885] syz.0.646 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.888745][ T6895] Unable to find swap-space signature [ 142.032880][ T6935] ima: policy update failed [ 142.075016][ T30] audit: type=1802 audit(1785493912.660:5): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.672" res=0 errno=0 [ 142.741262][ T6961] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 146.649542][ T5948] Bluetooth: hci2: unexpected event 0x3c length: 124 > 7 [ 147.675629][ T7155] random: crng reseeded on system resumption [ 148.317407][ T5948] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 150.757579][ T30] audit: type=1800 audit(4294967297.920:6): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.842" name="dummy_udc" dev="gadgetfs" ino=7780 res=0 errno=0 [ 151.137474][ T30] audit: type=1800 audit(4294967298.300:7): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.849" name="members" dev="configfs" ino=12108 res=0 errno=0 [ 152.937680][ T7358] syz.3.881(7358): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 162.438673][ T30] audit: type=1800 audit(4294967309.600:8): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1053" name="features" dev="configfs" ino=14831 res=0 errno=0 [ 164.082184][ T7700] kexec: Could not allocate control_code_buffer [ 164.643417][ T30] audit: type=1800 audit(4294967311.800:9): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1086" name="dbroot" dev="configfs" ino=13954 res=0 errno=0 [ 166.172594][ T7817] capability: warning: `syz.0.1109' uses deprecated v2 capabilities in a way that may be insecure [ 168.673693][ T7911] nfs: Bad value for 'source' [ 169.517899][ T7948] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5945] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7948] [ 170.331048][ T7978] Process accounting resumed [ 170.957459][ T30] audit: type=1326 audit(4294967318.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1203" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff72bb9e019 code=0x0 [ 171.389673][ T30] audit: type=1800 audit(4294967318.550:11): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1209" name="lu_gp_id" dev="configfs" ino=14318 res=0 errno=0 [ 173.613969][ T8070] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.636947][ T8070] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 173.692509][ T8070] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 173.717667][ T8070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.733664][ T8070] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 173.840423][ T8070] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 173.883656][ T8070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.911440][ T8070] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.954145][ T8070] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.983401][ T8070] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.020629][ T8070] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.065039][ T8070] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.886643][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.766699][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.929079][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.007523][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.966833][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.856905][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.006812][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.086741][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.047004][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.926772][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.019106][ T8342] Invalid ELF header magic: != ELF [ 180.086772][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.167382][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.438987][ T5948] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 182.153021][ T8424] capability: warning: `syz.3.1411' uses 32-bit capabilities (legacy support in use) [ 186.837642][ T5948] Bluetooth: hci1: unexpected event 0x2c length: 1019 > 17 [ 186.837702][ T5948] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 187.541520][ T8621] ======================================================= [ 187.541520][ T8621] WARNING: The mand mount option has been deprecated and [ 187.541520][ T8621] and is ignored by this kernel. Remove the mand [ 187.541520][ T8621] option from the mount to silence this warning. [ 187.541520][ T8621] ======================================================= [ 190.882973][ T30] audit: type=1800 audit(1843107604.573:12): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1574" name="trace_pipe" dev="tracefs" ino=4286 res=0 errno=0 [ 192.395141][ T8808] can: request_module (can-proto-5) failed. [ 193.138522][ T30] audit: type=1800 audit(1843107606.835:13): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1612" name="version" dev="configfs" ino=18573 res=0 errno=0 [ 194.538297][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544812][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.912316][ T8972] syz.1.1680 (8972): attempted to duplicate a private mapping with mremap. This is not supported. [ 199.301820][ T9056] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5940] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9056] [ 199.427957][ T5948] Bluetooth: hci2: unexpected subevent 0x12 length: 123 > 5 [ 199.728468][ T5948] Bluetooth: hci0: unexpected event 0x03 length: 123 > 11 [ 200.437135][ T9095] Process accounting paused [ 204.110130][ T5948] Bluetooth: hci2: unexpected event 0x16 length: 124 > 6 [ 205.231158][ T9289] Unable to find swap-space signature [ 205.287483][ T5948] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 206.389990][ T9328] zram: Added device: zram1 [ 207.462399][ T9373] vhci_hcd vhci_hcd.2: invalid port number 253 [ 207.490225][ T9373] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 208.214458][ T9403] syz.0.1892 uses obsolete (PF_INET,SOCK_PACKET) [ 209.583366][ T9458] nvme_fcloop: unknown parameter or missing value '' [ 210.447199][ T9494] zram: Added device: zram2 [ 210.600669][ T9500] bond0: invalid ARP target specified [ 211.299232][ T9527] vhci_hcd vhci_hcd.2: invalid port number 253 [ 211.317246][ T9527] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 212.501266][ T5948] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 212.508989][ T5948] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 214.333650][ T9643] kAFS: unparsable volume name [ 216.251631][ T30] audit: type=1806 audit(1843107630.065:14): xattr="" res=-22 [ 216.442674][ T9724] ICMPv6: process `syz.1.2050' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 216.945478][ T30] audit: type=1326 audit(1843107630.768:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.2059" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e2c19e019 code=0x0 [ 218.056091][ T9790] vhci_hcd vhci_hcd.2: invalid port number 135 [ 218.072094][ T9790] vhci_hcd vhci_hcd.2: invalid port number 135 [ 218.823629][ T30] audit: type=1800 audit(1843107632.658:16): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2098" name="members" dev="configfs" ino=20127 res=0 errno=0 [ 219.118872][ T9831] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.127340][ T9831] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 223.530445][T10009] vhci_hcd vhci_hcd.2: invalid port number 194 [ 223.546085][T10009] vhci_hcd vhci_hcd.2: invalid port number 194 [ 225.601255][T10089] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 226.083758][T10066] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 226.346114][T10112] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 228.185393][ T30] audit: type=1804 audit(1843107642.067:17): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2276" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1057 res=1 errno=0 [ 228.482124][T10198] binder: 10197:10198 ioctl 4018620d 9 returned -22 [ 230.351109][T10254] Process accounting resumed [ 235.078015][T10424] i2c i2c-0: new_device: Invalid device name [ 235.085830][T10427] Sensor B: ================= START STATUS ================= [ 235.106165][T10427] Sensor B: Test Pattern: 75% Colorbar [ 235.132888][T10427] Sensor B: Show Information: All [ 235.150338][T10427] Sensor B: Vertical Flip: false [ 235.167008][T10427] Sensor B: Horizontal Flip: false [ 235.183137][T10427] Sensor B: Brightness: 128 [ 235.198017][T10427] Sensor B: Contrast: 128 [ 235.222971][T10427] Sensor B: Hue: 0 [ 235.228410][T10427] Sensor B: Saturation: 128 [ 235.245335][T10427] Sensor B: Pixel Rate: 160000000 [ 235.264921][T10427] Sensor B: Horizontal Blanking: 800 [ 235.291276][T10427] Sensor B: Vertical Blanking: 3223 [ 235.315901][T10427] Sensor B: ================== END STATUS ================== [ 237.773571][T10524] kAFS: Invalid Command on /proc/fs/afs/cells file [ 238.820157][T10558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.423552][T10618] Line length is too long: Should be less than 4094 [ 242.315967][T10686] block2mtd: illegal erase size [ 244.945361][T10793] serial 00:02: in use; can't configure [ 248.239340][T10913] WARNING! power/level is deprecated; use power/control instead [ 248.715253][T10934] ICMPv6: process `syz.0.2620' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 249.773718][T10980] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 251.329910][T11046] binder: binder_mmap: 11044 0-1000 bad vm_flags failed -1 [ 251.899652][T11069] binder: 11066:11069 ioctl c018620c 200000000040 returned -1 [ 252.551654][T11096] Invalid input. Must be >= 4608 [ 255.669601][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.677703][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.516397][T11263] nvme_fcloop: unknown parameter or missing value '7' [ 257.385461][T11298] batman_adv: Routing algorithm '' is not supported [ 260.343727][T11420] Process accounting paused [ 261.296701][T11463] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 261.323098][T11463] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 261.347173][T11463] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 261.361030][T11463] page_type: f5(slab) [ 261.370943][T11463] raw: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 261.406734][T11463] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 261.447815][T11463] head: 00fff00000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 261.496209][T11463] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 261.525032][T11463] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 261.543583][T11463] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 261.568262][T11463] page dumped because: unmovable page [ 261.586823][T11463] page_owner tracks the page as allocated [ 261.621493][T11463] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5945, tgid 5945 (syz-executor), ts 159648517609, free_ts 136268428384 [ 261.663009][T11463] post_alloc_hook+0xfd/0x120 [ 261.668340][T11463] get_page_from_freelist+0xf48/0x3530 [ 261.673996][T11463] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 261.685814][T11463] new_slab+0xa2/0x640 [ 261.694164][T11463] refill_objects+0xe3/0x410 [ 261.732958][T11463] __pcs_replace_empty_main+0x376/0x680 [ 261.740601][T11463] __kmalloc_noprof+0x66d/0x820 [ 261.747602][T11463] tomoyo_realpath_from_path+0xb6/0x690 [ 261.753824][T11463] tomoyo_check_open_permission+0x2af/0x3c0 [ 261.761267][T11463] tomoyo_file_open+0x6b/0x90 [ 261.766457][T11463] security_file_open+0xb5/0x1e0 [ 261.771529][T11463] do_dentry_open+0x588/0x14d0 [ 261.798782][T11463] vfs_open+0x82/0x3f0 [ 261.810810][T11463] path_openat+0x2873/0x4280 [ 261.822970][T11463] do_file_open+0x20e/0x430 [ 261.838361][T11463] do_sys_openat2+0x10f/0x1e0 [ 261.860221][T11463] page last free pid 5945 tgid 5945 stack trace: [ 261.879500][T11463] __free_frozen_pages+0x79f/0x1090 [ 261.885980][T11463] qlist_free_all+0x47/0xf0 [ 261.891074][T11463] kasan_quarantine_reduce+0x1a0/0x1f0 [ 261.898595][T11463] __kasan_slab_alloc+0x69/0x90 [ 261.903594][T11463] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 261.909646][T11463] anon_vma_fork+0x8d/0x6b0 [ 261.914573][T11463] dup_mmap+0x143e/0x21b0 [ 261.923651][T11463] copy_process+0x4588/0x8030 [ 261.948477][T11463] kernel_clone+0x176/0x9d0 [ 261.972036][T11463] __do_sys_clone+0xd9/0x120 [ 261.988391][T11463] do_syscall_64+0x115/0x840 [ 261.998595][T11463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.819636][ T5948] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 263.135986][T11531] synth uevent: /module/null_blk: unknown uevent action string [ 264.062671][ T5948] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 264.889031][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.680892][T11628] block loop4: the capability attribute has been deprecated. [ 266.082653][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.967876][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.297830][T11690] bond0: option slaves: interface -]=,Do does not exist! [ 267.323908][T11692] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.585345][T11702] warning: `syz.2.2993' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 268.151645][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.875779][T11791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 269.932410][T11791] CIFS mount error: No usable UNC path provided in device string! [ 269.932410][T11791] [ 269.971270][T11791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 270.789202][T11823] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 270.804547][T11823] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 270.815105][T11823] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 270.827255][T11823] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 270.849534][T11823] page dumped because: unmovable page [ 270.868085][T11823] page_owner info is not present (never set?) [ 272.085658][T11874] syz.3.3079 (11874): /proc/11873/oom_adj is deprecated, please use /proc/11873/oom_score_adj instead. [ 272.601718][T11898] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 272.768865][T11905] Setting dangerous option i915.mitigations - tainting kernel [ 272.803302][ T5948] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 273.442301][T11927] program syz.1.3104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.848926][ T5942] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 274.495551][T11965] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 274.526975][T11961] syz_tun: tun_chr_ioctl cmd 21731 [ 274.840722][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.500659][T12005] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 275.510925][T12005] net gretap0: uevent: failed to send synthetic uevent: -22 [ 275.873569][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.251574][T12030] usb usb3: usbfs: process 12030 (syz.1.3151) did not claim interface 0 before use [ 276.909736][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.250485][ T5942] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 277.943840][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.444911][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 279.111623][T12132] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.119469][T12132] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.293667][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.487639][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.046238][T12206] usbip-vudc usbip-vudc.0: gadget not bound [ 281.363750][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.558318][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.769145][T12309] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 283.773804][T12307] ima: policy update failed [ 283.828748][ T30] audit: type=1802 audit(1843107697.996:18): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3286" res=0 errno=0 [ 284.116133][T12322] syz_tun: tun_chr_ioctl cmd 2147767506 [ 285.832755][T12392] cifs: Unknown parameter 'knjeRaBt$Mi' [ 286.029814][ T30] audit: type=1806 audit(1843107700.208:19): xattr="." res=0 syzkaller syzkaller login: [ 289.978622][T12558] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 290.232077][T12560] Process accounting resumed [ 290.851049][T12591] ICMPv6: process `syz.1.3421' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 291.230893][T12605] phram: not enough arguments [ 293.877330][T12706] bond0: option fail_over_mac: invalid value () [ 294.060423][T12714] usb usb13: usbfs: process 12714 (syz.2.3482) did not claim interface 0 before use [ 298.048751][T12882] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 300.740689][T12991] kafs: addr_prefs: Too many elements in string [ 300.956617][T12999] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 302.958555][T13068] smpboot: CPU 1 is now offline [ 307.206228][T13174] CIFS mount error: No usable UNC path provided in device string! [ 307.206228][T13174] [ 307.272888][T13174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 307.798713][T13193] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 307.798713][T13193] M' is too long [ 307.842802][T13193] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 307.842802][T13193] W ' is too long [ 311.797824][T13295] kAFS: Invalid Command on /proc/fs/afs/cells file [ 313.735235][T13351] writing to auto_msgmni has no effect [ 315.513080][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.530302][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.412497][T13513] ima: policy update failed [ 319.417590][ T30] audit: type=1807 audit(1843107733.771:20): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 319.496726][ T30] audit: type=1802 audit(1843107733.771:21): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3864" res=0 errno=0 [ 319.591753][ T30] audit: type=1802 audit(1843107733.822:22): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3864" res=0 errno=0 [ 319.657979][ T200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.774990][ T200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.902129][ T200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.092600][T13518] Process accounting paused [ 320.493950][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.517895][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.540834][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.556911][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.566860][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.704963][T13534] phram: not enough arguments [ 320.939620][ T200] bridge_slave_1: left allmulticast mode [ 320.999585][ T200] bridge_slave_1: left promiscuous mode [ 321.055803][ T200] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.159523][ T200] bridge_slave_0: left allmulticast mode [ 321.192577][ T200] bridge_slave_0: left promiscuous mode [ 321.228708][ T200] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.295989][ T200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.366137][ T200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.423416][ T200] bond0 (unregistering): Released all slaves [ 322.670055][ T5948] Bluetooth: hci0: command tx timeout [ 323.397608][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 323.617278][ T200] hsr_slave_0: left promiscuous mode [ 323.666071][ T200] hsr_slave_1: left promiscuous mode [ 323.698102][ T200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.749568][ T200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.843160][ T200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.899857][ T200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.050052][ T200] veth1_macvtap: left promiscuous mode [ 324.088322][ T200] veth0_macvtap: left promiscuous mode [ 324.118033][ T200] veth1_vlan: left promiscuous mode [ 324.141944][ T200] veth0_vlan: left promiscuous mode [ 324.737913][ T5948] Bluetooth: hci0: command tx timeout [ 325.406433][ T200] team0 (unregistering): Port device team_slave_1 removed [ 325.517834][ T200] team0 (unregistering): Port device team_slave_0 removed [ 326.809096][ T5948] Bluetooth: hci0: command tx timeout [ 327.379975][T13672] sysfs_service_op_store: Client not running :-5: [ 328.404175][T13699] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 328.458277][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.497825][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.553940][T13528] bridge_slave_0: entered allmulticast mode [ 328.600512][T13528] bridge_slave_0: entered promiscuous mode [ 328.659017][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.715320][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.759230][T13528] bridge_slave_1: entered allmulticast mode [ 328.810540][T13528] bridge_slave_1: entered promiscuous mode [ 328.880902][ T5948] Bluetooth: hci0: command tx timeout [ 329.070488][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.177550][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.310548][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.421131][T13528] team0: Port device team_slave_0 added [ 329.471999][T13528] team0: Port device team_slave_1 added [ 329.525609][T13723] [U]  [ 329.705985][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.753924][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.898485][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.979085][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.028360][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.208607][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.599196][T13528] hsr_slave_0: entered promiscuous mode [ 330.641746][T13528] hsr_slave_1: entered promiscuous mode [ 330.684975][T13528] debugfs: 'hsr0' already exists in 'hsr' [ 330.718274][T13528] Cannot create hsr debugfs directory [ 331.227348][T13769] ceph: Failed to parse sending metrics switch value 'P^' [ 332.548594][T13528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.620118][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.668786][T13528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.744901][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.775361][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 332.797814][T13528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.864905][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.919680][T13528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.039574][T13528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.627766][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.723750][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.846897][T13796] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.854136][T13796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.959187][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.966441][T13796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.493872][T13875] rnbd_client L213: map_device: Parameters missing [ 335.874444][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 336.689830][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.506805][T13924] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 338.302832][T13528] veth0_vlan: entered promiscuous mode [ 338.444996][T13528] veth1_vlan: entered promiscuous mode [ 338.621386][T13528] veth0_macvtap: entered promiscuous mode [ 338.691990][T13528] veth1_macvtap: entered promiscuous mode [ 338.826754][ T30] audit: type=1800 audit(1843107753.282:23): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4023" name="discovery_nqn" dev="configfs" ino=34861 res=0 errno=0 [ 338.871773][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.966163][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.108986][T13796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.148263][T13796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.212904][T13785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.361385][T13838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.713025][T13838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.766169][T13838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.998847][T13844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.044120][T13844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.634337][T13800] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.649844][ T5357] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 347.095292][T14138] futex_wake_op: syz.2.4115 tries to shift op by -1; fix this program [ 350.097249][T14209] Process accounting resumed [ 354.510188][T14339] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.523490][T14338] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177aa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 354.539357][T14338] Call Trace: [ 354.542657][T14338] [ 354.545638][T14338] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 354.552364][T14338] mce_cpu_restart+0xd5/0x1f0 [ 354.557107][T14338] ? __pfx_mce_cpu_restart+0x10/0x10 [ 354.562428][T14338] smp_call_function_many_cond+0x153b/0x1870 [ 354.568456][T14338] ? __pfx_mce_cpu_restart+0x10/0x10 [ 354.573778][T14338] ? preempt_schedule_thunk+0x16/0x40 [ 354.579198][T14338] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 354.585038][T14338] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 354.591419][T14338] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 354.597445][T14338] ? __timer_delete_sync+0x151/0x1c0 [ 354.602887][T14338] ? __pfx_mce_cpu_restart+0x10/0x10 [ 354.608230][T14338] on_each_cpu_cond_mask+0x40/0x90 [ 354.613396][T14338] set_bank+0x240/0x3a0 [ 354.617608][T14338] ? __pfx_set_bank+0x10/0x10 [ 354.622337][T14338] ? find_held_lock+0x2b/0x80 [ 354.627052][T14338] ? sysfs_file_kobj+0xe4/0x290 [ 354.631934][T14338] ? sysfs_file_kobj+0xe4/0x290 [ 354.636823][T14338] ? __pfx_set_bank+0x10/0x10 [ 354.641631][T14338] dev_attr_store+0x58/0x80 [ 354.646366][T14338] ? __pfx_dev_attr_store+0x10/0x10 [ 354.651622][T14338] sysfs_kf_write+0xf2/0x150 [ 354.656293][T14338] kernfs_fop_write_iter+0x3e0/0x5f0 [ 354.661622][T14338] ? __pfx_sysfs_kf_write+0x10/0x10 [ 354.666865][T14338] vfs_write+0x6ac/0x1050 [ 354.671244][T14338] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 354.677085][T14338] ? __pfx_vfs_write+0x10/0x10 [ 354.681891][T14338] ksys_write+0x12a/0x250 [ 354.686257][T14338] ? __pfx_ksys_write+0x10/0x10 [ 354.691161][T14338] do_syscall_64+0x115/0x840 [ 354.695878][T14338] ? clear_bhb_loop+0x40/0x90 [ 354.700588][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.706577][T14338] RIP: 0033:0x7f1ca719e019 [ 354.711044][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.730689][T14338] RSP: 002b:00007f1ca53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.739155][T14338] RAX: ffffffffffffffda RBX: 00007f1ca7425fa0 RCX: 00007f1ca719e019 [ 354.747171][T14338] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 354.755266][T14338] RBP: 00007f1ca723500c R08: 0000000000000000 R09: 0000000000000000 [ 354.763264][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.771263][T14338] R13: 00007f1ca7426038 R14: 00007f1ca7425fa0 R15: 00007ffc114cd988 [ 354.779300][T14338] [ 356.399721][T14385] i2c i2c-0: new_device: Missing parameters [ 357.369222][T14407] i2c i2c-0: delete_device: Can't parse I2C address [ 358.184377][T14429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 358.466602][T14435] program syz.2.4230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.922258][T14445] : Can't lookup blockdev [ 361.132749][T14499] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 361.204907][T14499] cec cec26: uevent: failed to send synthetic uevent: -22 [ 366.698134][T14647] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 367.098170][ T30] audit: type=1800 audit(1843107781.699:24): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4341" name="members" dev="configfs" ino=37229 res=0 errno=0 [ 368.429084][T14697] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 368.482815][T14696] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 368.526092][T14696] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 368.567371][T14696] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 368.637323][T14696] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 368.691316][T14696] page dumped because: unmovable page [ 368.718215][T14696] page_owner tracks the page as allocated [ 368.745276][T14696] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1716710557, free_ts 0 [ 368.791577][T14696] register_early_stack+0x74/0xaf [ 368.815468][T14696] init_page_owner+0x4c/0xa10 [ 368.847906][T14696] page_ext_init+0x71d/0x780 [ 368.872265][T14696] mm_core_init+0x229/0x270 [ 368.902652][T14696] page_owner free stack trace missing [ 371.565863][T14780] [U] ^R [ 372.041395][T14782] hub 1-0:1.0: USB hub found [ 372.107963][T14782] hub 1-0:1.0: 1 port detected [ 373.961951][T14846] kafs: addr_prefs: Invalid Command [ 376.282273][T14907] bond0: option packets_per_slave: invalid value ( Xnp) [ 376.346875][T14907] bond0: option packets_per_slave: allowed values 0 - 65535 [ 377.920895][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.930049][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675166][T14973] syz_tun: tun_chr_ioctl cmd 2147767521 [ 380.083204][T15008] Process accounting paused [ 386.496178][T15188] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 390.534138][T15300] mmap: syz.2.4637 (15300): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 390.820040][T15304] ima: policy update failed [ 390.849284][ T30] audit: type=1802 audit(1843107805.583:25): pid=15304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4640" res=0 errno=0 [ 392.125942][T15336] kernel read not supported for file /\*)A (pid: 15336 comm: syz.4.4655) [ 392.171554][ T30] audit: type=1800 audit(1843107806.910:26): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4655" name="\*)A" dev="mqueue" ino=39301 res=0 errno=0 [ 393.645194][T15370] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5944] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15370] [ 396.895775][T15446] Format for deleting device is "id" (uint). [ 397.998078][T15470] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 398.037876][T15470] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 402.350313][T15567] block2mtd: Using custom MTD label '' for dev [ 402.379087][T15567] block2mtd: error: cannot open device [ 405.510387][T13787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.528479][T13787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.539306][T13787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.552713][T13787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.569125][T13787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.666020][T15658] futex_wake_op: syz.3.4812 tries to shift op by -2048; fix this program [ 406.722538][T15658] futex_wake_op: syz.3.4812 tries to shift op by -2048; fix this program [ 407.666462][T13787] Bluetooth: hci4: command tx timeout [ 407.724207][T13785] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.268257][T13785] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.633527][T13785] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.667735][T15700] kfence: disabled [ 408.938145][T13785] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.508027][T15723] i2c i2c-0: new_device: Can't parse I2C address [ 409.735662][T13787] Bluetooth: hci4: command tx timeout [ 409.808144][T15727] Setting dangerous option i915.mitigations - tainting kernel [ 409.962740][T13785] bridge_slave_1: left allmulticast mode [ 410.013559][T13785] bridge_slave_1: left promiscuous mode [ 410.045808][T15729] Process accounting resumed [ 410.070166][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.151095][T13785] bridge_slave_0: left allmulticast mode [ 410.151159][T13785] bridge_slave_0: left promiscuous mode [ 410.152320][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.644184][T15741] zram0: detected capacity change from 0 to 16 [ 411.201818][T13785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.290769][T13785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.350809][T13785] bond0 (unregistering): Released all slaves [ 411.779830][ T30] audit: type=1800 audit(1843107826.622:27): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4860" name="sr0" dev="devtmpfs" ino=2833 res=0 errno=0 [ 411.820116][T13787] Bluetooth: hci4: command tx timeout [ 412.514949][T15627] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.576970][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.625552][T15627] bridge_slave_0: entered allmulticast mode [ 412.663890][T15627] bridge_slave_0: entered promiscuous mode [ 412.717781][T15797] zram: Cannot change disksize for initialized device [ 412.745094][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 412.799397][T15627] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.855309][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.904807][T15627] bridge_slave_1: entered allmulticast mode [ 412.935734][T15627] bridge_slave_1: entered promiscuous mode [ 413.024006][T13785] hsr_slave_0: left promiscuous mode [ 413.059823][T13785] hsr_slave_1: left promiscuous mode [ 413.094713][T13785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.149544][T13785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.160825][T13785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.160850][T13785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.195763][T13785] veth1_macvtap: left promiscuous mode [ 413.195817][T13785] veth0_macvtap: left promiscuous mode [ 413.195992][T13785] veth1_vlan: left promiscuous mode [ 413.196051][T13785] veth0_vlan: left promiscuous mode [ 413.874189][T13787] Bluetooth: hci4: command tx timeout [ 414.059354][T15819] zram: Cannot change disksize for initialized device [ 414.430188][T13785] team0 (unregistering): Port device team_slave_1 removed [ 414.520832][T13785] team0 (unregistering): Port device team_slave_0 removed [ 415.298767][T15627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.381356][T15627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.679927][T15627] team0: Port device team_slave_0 added [ 415.753618][T15627] team0: Port device team_slave_1 added [ 415.974585][T15627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.034095][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.225113][T15627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.347999][T15627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.396981][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.574664][T15627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.012739][T15627] hsr_slave_0: entered promiscuous mode [ 417.049770][T15627] hsr_slave_1: entered promiscuous mode [ 417.086678][T15627] debugfs: 'hsr0' already exists in 'hsr' [ 417.131906][T15627] Cannot create hsr debugfs directory [ 418.136022][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 419.126326][T15627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 419.198215][T15627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.244901][T15627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.345824][T15627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.382494][T15627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.457780][T15627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.512039][T15627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.581551][T15627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.160309][T15627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.286137][T15627] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.412768][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.420014][T13806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.477550][T15945] : Can't lookup blockdev [ 420.527772][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.535046][T13806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.853678][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 421.784106][T15971] TCP: TCP_TX_DELAY enabled [ 423.245738][T15627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.612450][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8 [ 424.775384][T15627] veth0_vlan: entered promiscuous mode [ 424.870852][T15627] veth1_vlan: entered promiscuous mode [ 425.104663][T15627] veth0_macvtap: entered promiscuous mode [ 425.161149][T15627] veth1_macvtap: entered promiscuous mode [ 425.269509][T15627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.359618][T15627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.444773][T13790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.491930][T13790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.565157][T13790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.620359][T13790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.122557][T16052] zswap: compressor F(_ not available [ 426.337882][T13806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.398631][T13806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.603234][T13806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.674220][T13806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.749794][T16105] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 428.803884][T16105] ep_00: uevent: failed to send synthetic uevent: -22 [ 428.880279][T16101] zswap: compressor F(_ not available [ 433.957442][T16226] ICMPv6: process `syz.3.5037' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 436.050790][T13787] Bluetooth: hci3: unexpected event 0x35 length: 725 > 6 [ 436.877104][T16308] zram0: detected capacity change from 16 to 0 [ 439.028958][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.043025][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.134392][T16393] Process accounting paused [ 443.756828][T16505] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 446.190829][T13800] Bluetooth: hci0: command 0x0406 tx timeout [ 451.940660][T13787] Bluetooth: hci4: unexpected subevent 0x0c length: 118 > 5 [ 454.916727][T16783] i2c i2c-0: delete_device: Can't find device in list [ 455.314559][T16795] CIFS mount error: No usable UNC path provided in device string! [ 455.314559][T16795] [ 455.389809][T16795] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 456.091202][T13787] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 456.805973][T16835] process 'syz.3.5304' launched './file0' with NULL argv: empty string added [ 458.460905][T16881] queue_state_write: operation too long [ 458.493781][T16881] queue_state_write: use 'run', 'start' or 'kick' [ 459.202199][T13787] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 459.202235][T13787] Bluetooth: hci0: unexpected event for opcode 0x647c [ 462.359303][T16054] Process accounting resumed [ 463.058402][T17000] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 465.600162][T17069] ptp ptp0: only physical clock in use now [ 466.832511][T17101] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 467.085539][T17101] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 467.125732][T17101] pci 0000:00:01.3: PCI INT A: no GSI [ 469.350512][T17167] ima: policy update failed [ 469.384569][ T30] audit: type=1802 audit(1843107884.521:28): pid=17167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5469" res=0 errno=0 [ 470.878072][T17211] bond0: invalid ARP target specified [ 471.201989][T13787] Bluetooth: hci4: unexpected event 0x0f length: 7 > 4 [ 471.731921][T17233] bond0: no command found in slaves file - use +ifname or -ifname [ 473.586029][T13787] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 473.586066][T13787] Bluetooth: hci3: unexpected event for opcode 0x647c [ 479.071034][T17407] cougar: G6 mapped to space [ 481.427811][T17471] usb usb35: usbfs: process 17471 (syz.4.5616) did not claim interface 0 before use [ 482.881320][T17512] CIFS: VFS: Invalid SecurityFlags: [ 483.893420][T17527] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 491.673845][T17734] : Can't lookup blockdev [ 492.682234][T17761] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 493.827497][T17788] vmstat_refresh: nr_hugetlb -4096 [ 496.295862][T17834] i2c i2c-0: delete_device: Can't find device in list [ 499.119029][T17893] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 499.567221][T17903] sd 0:0:1:0: PR command failed: 1026 [ 499.604519][T17903] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 499.643867][T17903] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 500.147961][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.161856][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.221408][T17934] bond0: invalid ARP target specified [ 501.239238][T17935] kernel profiling enabled (shift: 7) [ 501.985047][T17944] could not allocate digest TFM handle [ 503.401238][T17975] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 507.132199][T18051] kAFS: No cell specified [ 508.575265][T18082] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 508.717254][T13800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.732655][T13800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.745930][T13800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.767783][T13800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.783490][T13800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.450520][T13844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.897088][T13787] Bluetooth: hci1: command tx timeout [ 511.154241][T13844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.464227][T13844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.786687][T13844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.909899][T13844] bridge_slave_1: left allmulticast mode [ 512.961269][T13787] Bluetooth: hci1: command tx timeout [ 512.971850][T13844] bridge_slave_1: left promiscuous mode [ 513.016707][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.093469][T13844] bridge_slave_0: left allmulticast mode [ 513.140361][T13844] bridge_slave_0: left promiscuous mode [ 513.182483][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.578348][T13844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.678714][T13844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.770864][T13844] bond0 (unregistering): Released all slaves [ 515.033810][T13787] Bluetooth: hci1: command tx timeout [ 515.893814][T18084] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.950892][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.992184][T18084] bridge_slave_0: entered allmulticast mode [ 516.035161][T18084] bridge_slave_0: entered promiscuous mode [ 516.108930][T18084] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.157004][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.199408][T18084] bridge_slave_1: entered allmulticast mode [ 516.240095][T18084] bridge_slave_1: entered promiscuous mode [ 516.370215][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 516.645126][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.789708][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.993089][T13844] hsr_slave_0: left promiscuous mode [ 517.038915][T13844] hsr_slave_1: left promiscuous mode [ 517.068126][T13844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.099940][T13787] Bluetooth: hci1: command tx timeout [ 517.118630][T13844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.160103][T13844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.212119][T13844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.297877][T13844] veth1_macvtap: left promiscuous mode [ 517.333171][T13844] veth0_macvtap: left promiscuous mode [ 517.371934][T13844] veth1_vlan: left promiscuous mode [ 517.404915][T13844] veth0_vlan: left promiscuous mode [ 517.814213][T18273] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 517.814213][T18273] [ 518.397684][T13787] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 518.419963][T13787] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 518.663974][T13844] team0 (unregistering): Port device team_slave_1 removed [ 518.713026][T13844] team0 (unregistering): Port device team_slave_0 removed [ 519.153901][T18084] team0: Port device team_slave_0 added [ 519.210012][T18084] team0: Port device team_slave_1 added [ 519.428849][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.472174][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.596265][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.734692][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.772814][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.858150][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.465944][T18084] hsr_slave_0: entered promiscuous mode [ 520.494555][T18084] hsr_slave_1: entered promiscuous mode [ 521.683231][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 522.724720][T18084] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.827869][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.881206][T18084] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.952108][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.031924][T18084] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 523.111940][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.166290][T18084] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 523.233455][T18084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.826098][T18393] bonding: no command found in bonding_masters - use +ifname or -ifname [ 524.025218][T18084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.192906][T18084] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.260236][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.267458][T13785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.389462][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.396652][T13785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.133509][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11 [ 527.249536][T18471] : Can't lookup blockdev [ 527.271297][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.340080][T18473] bond0: no command found in slaves file - use +ifname or -ifname [ 527.685893][T13800] Bluetooth: hci4: command 0x0406 tx timeout [ 528.033688][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12 [ 528.872182][T18084] veth0_vlan: entered promiscuous mode [ 528.981167][T18084] veth1_vlan: entered promiscuous mode [ 529.182253][T18084] veth0_macvtap: entered promiscuous mode [ 529.269838][T18084] veth1_macvtap: entered promiscuous mode [ 529.414636][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.489253][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.563293][T13796] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.639448][T13796] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.774105][T16050] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.872475][T16050] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.270577][T13844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.336773][T13844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.524493][T13785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.581341][T13785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.629241][ T30] audit: type=1400 audit(4294967332.711:29): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18559 comm="syz.4.6091" [ 533.877080][T18603] kAFS: Invalid Command on /proc/fs/afs/cells file [ 535.528872][T18644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 535.908673][T18653] openvswitch: netlink: IP tunnel dst address not specified [ 536.902058][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6143'. [ 537.756269][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6148'. [ 541.625204][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6179'. [ 541.676235][T18781] netlink: 'syz.3.6181': attribute type 1 has an invalid length. [ 542.876260][T18812] Zero length message leads to an empty skb [ 550.560204][T18990] netlink: 'syz.4.6258': attribute type 2 has an invalid length. [ 550.745608][T18994] netlink: 'syz.3.6259': attribute type 2 has an invalid length. [ 554.683401][T19082] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 556.639409][T19125] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 558.117041][T19150] netlink: 'syz.6.6315': attribute type 8 has an invalid length. [ 559.040065][T19176] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 560.357140][T19207] netlink: 'syz.6.6337': attribute type 1 has an invalid length. [ 560.499811][T19210] openvswitch: netlink: Flow actions attr not present in new flow. [ 561.276756][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.288491][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.799309][T19289] openvswitch: netlink: Flow actions attr not present in new flow. [ 563.848465][T19291] netlink: Invalid conntrack helper [ 564.495419][T19307] openvswitch: netlink: IPv4 tunnel dst address is zero [ 565.119826][T19320] openvswitch: netlink: IP tunnel TTL not specified. [ 566.612185][T19357] netlink: 'syz.4.6410': attribute type 4 has an invalid length. [ 566.678011][T19357] netlink: 'syz.4.6410': attribute type 1 has an invalid length. [ 568.640013][T19387] could not allocate digest TFM handle [ 568.759391][T19400] nbd: illegal input index -1024 [ 570.622086][T19438] netlink: del zone limit has 4 unknown bytes [ 571.696649][T19459] FAULT_INJECTION: forcing a failure. [ 571.696649][T19459] name failslab, interval 1, probability 0, space 0, times 1 [ 571.731790][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 571.780164][T19459] CPU: 0 UID: 0 PID: 19459 Comm: syz.4.6454 Tainted: G U syzkaller #0 PREEMPT(full) [ 571.780203][T19459] Tainted: [U]=USER [ 571.780216][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.780235][T19459] Call Trace: [ 571.780303][T19459] [ 571.780312][T19459] dump_stack_lvl+0x100/0x190 [ 571.780347][T19459] should_fail_ex.cold+0x5/0xa [ 571.780388][T19459] should_failslab+0xc2/0x120 [ 571.780423][T19459] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 571.780457][T19459] ? __d_alloc+0x35/0xa50 [ 571.780502][T19459] __d_alloc+0x35/0xa50 [ 571.780532][T19459] d_alloc_pseudo+0x1c/0xc0 [ 571.780566][T19459] alloc_file_pseudo+0x118/0x290 [ 571.780601][T19459] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 571.780641][T19459] __shmem_file_setup+0x205/0x460 [ 571.780679][T19459] ? __pfx___shmem_file_setup+0x10/0x10 [ 571.780720][T19459] ? vm_area_alloc+0x1f/0x160 [ 571.780746][T19459] shmem_zero_setup+0x96/0x1b0 [ 571.780776][T19459] __mmap_region+0x24ef/0x2db0 [ 571.780812][T19459] ? __pfx___mmap_region+0x10/0x10 [ 571.780836][T19459] ? __lock_acquire+0x49f/0x1a40 [ 571.780886][T19459] ? __lock_acquire+0x49f/0x1a40 [ 571.780935][T19459] ? do_raw_spin_lock+0x128/0x260 [ 571.780966][T19459] ? __lock_acquire+0x49f/0x1a40 [ 571.781017][T19459] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 571.781061][T19459] ? rcu_is_watching+0x12/0xc0 [ 571.781096][T19459] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 571.781122][T19459] ? lockdep_hardirqs_on+0x78/0x100 [ 571.781234][T19459] mmap_region+0x35d/0x620 [ 571.781262][T19459] ? rcu_is_watching+0x12/0xc0 [ 571.781291][T19459] ? __pfx_mmap_region+0x10/0x10 [ 571.781322][T19459] ? cap_mmap_addr+0x4b/0x120 [ 571.781411][T19459] ? bpf_lsm_mmap_addr+0x9/0x30 [ 571.781434][T19459] ? security_mmap_addr+0x71/0x1e0 [ 571.781487][T19459] ? __get_unmapped_area+0x255/0x3e0 [ 571.781527][T19459] do_mmap+0xc63/0x12f0 [ 571.781567][T19459] ? __pfx_do_mmap+0x10/0x10 [ 571.781601][T19459] ? __pfx_down_write_killable+0x10/0x10 [ 571.781654][T19459] ? __pfx_futex_wait+0x10/0x10 [ 571.781691][T19459] vm_mmap_pgoff+0x29e/0x470 [ 571.781731][T19459] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 571.781770][T19459] ? __pfx_do_futex+0x10/0x10 [ 571.781802][T19459] ksys_mmap_pgoff+0xe4/0x610 [ 571.781836][T19459] ? __x64_sys_futex+0x358/0x4d0 [ 571.781864][T19459] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 571.781898][T19459] ? xfd_validate_state+0x129/0x190 [ 571.781944][T19459] __x64_sys_mmap+0x125/0x190 [ 571.781977][T19459] do_syscall_64+0x115/0x840 [ 571.782008][T19459] ? clear_bhb_loop+0x40/0x90 [ 571.782037][T19459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.782062][T19459] RIP: 0033:0x7f1ca719e019 [ 571.782084][T19459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.782106][T19459] RSP: 002b:00007f1ca53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 571.782156][T19459] RAX: ffffffffffffffda RBX: 00007f1ca7425fa0 RCX: 00007f1ca719e019 [ 571.782172][T19459] RDX: 0000000000000004 RSI: 000000000202000d RDI: 0000000000000000 [ 571.782186][T19459] RBP: 00007f1ca723500c R08: ffffffffffffffff R09: 0000000000008000 [ 571.782201][T19459] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 571.782221][T19459] R13: 00007f1ca7426038 R14: 00007f1ca7425fa0 R15: 00007ffc114cd988 [ 571.782251][T19459] [ 574.636214][T19527] nbd: must specify a size in bytes for the device [ 575.071948][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6490'. [ 575.538612][T19547] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 576.014183][T19556] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5be41 [ 576.066223][T19556] memcg:ffff88807668aa00 [ 576.098804][T19556] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 576.146009][T19556] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 576.188050][T19556] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88807668aa00 [ 576.249603][T19556] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 576.314234][T19556] page_owner tracks the page as allocated [ 576.353711][T19556] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 19556, tgid 19553 (syz.6.6499), ts 576014156562, free_ts 575971565114 [ 576.479833][T19556] post_alloc_hook+0xfd/0x120 [ 576.515092][T19556] get_page_from_freelist+0xf48/0x3530 [ 576.541705][T19556] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 576.581790][T19556] alloc_pages_mpol+0x1fb/0x540 [ 576.611863][T19556] folio_alloc_noprof+0x22/0x250 [ 576.642241][T19556] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 576.709558][T19556] filemap_alloc_folio_noprof+0x5e/0x80 [ 576.774646][T19556] page_cache_ra_order+0x539/0xed0 [ 576.814731][T19556] filemap_fault+0x1943/0x3130 [ 576.849044][T19556] __do_fault+0x10b/0x440 [ 576.878739][T19556] do_fault+0xeb2/0x1750 [ 576.901576][T19556] __handle_mm_fault+0x187d/0x2a00 [ 576.928318][T19556] handle_mm_fault+0x37b/0xa30 [ 576.956823][T19556] __get_user_pages+0x1178/0x32a0 [ 576.973518][T19556] populate_vma_page_range+0x267/0x3f0 [ 576.986934][T19556] __mm_populate+0x107/0x3a0 [ 576.997558][T19556] page last free pid 15 tgid 15 stack trace: [ 577.025494][T19556] __free_frozen_pages+0x79f/0x1090 [ 577.040366][T19556] tlb_remove_table_rcu+0x2cf/0x380 [ 577.055170][T19556] rcu_core+0x5a2/0x10d0 [ 577.063141][T19556] handle_softirqs+0x1ea/0x9b0 [ 577.074401][T19556] run_ksoftirqd+0x38/0x60 [ 577.084483][T19556] smpboot_thread_fn+0x3d3/0xaa0 [ 577.101579][T19556] kthread+0x370/0x450 [ 577.110870][T19556] ret_from_fork+0x72b/0xd50 [ 577.122330][T19556] ret_from_fork_asm+0x1a/0x30 [ 577.200240][T19556] ------------[ cut here ]------------ [ 577.206109][T19556] kernel BUG at mm/filemap.c:858! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.276836][T19556] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 577.283179][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.6.6499 Tainted: G U syzkaller #0 PREEMPT(full) [ 577.294155][T19556] Tainted: [U]=USER [ 577.298060][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.308148][T19556] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 577.314166][T19556] Code: 3e c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 e6 ed 12 00 90 0f 0b e8 1e 3e c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 cf ed 12 00 90 <0f> 0b e8 07 3e c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 b8 ed 12 00 [ 577.333850][T19556] RSP: 0018:ffffc90003dd73f8 EFLAGS: 00010283 [ 577.339938][T19556] RAX: 0000000000077457 RBX: 0000000000112cc0 RCX: ffffc90012371000 [ 577.348024][T19556] RDX: 0000000000080000 RSI: ffffffff825a5e48 RDI: ffff8880383ea3c4 [ 577.356011][T19556] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 577.364081][T19556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 577.372067][T19556] R13: ffffea00016f9040 R14: 0000000000000000 R15: 0000000000000000 [ 577.380066][T19556] FS: 00007f93001cb6c0(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000 [ 577.389016][T19556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.395618][T19556] CR2: 00007f1ca7057b60 CR3: 00000000673aa000 CR4: 00000000003526f0 [ 577.403609][T19556] Call Trace: [ 577.406901][T19556] [ 577.409851][T19556] ? __pfx___filemap_add_folio+0x10/0x10 [ 577.415516][T19556] filemap_add_folio+0x1d3/0x630 [ 577.420480][T19556] ? __pfx_filemap_add_folio+0x10/0x10 [ 577.425956][T19556] ? preempt_schedule_common+0x42/0xc0 [ 577.431444][T19556] page_cache_ra_order+0x602/0xed0 [ 577.436599][T19556] filemap_fault+0x1943/0x3130 [ 577.441384][T19556] ? __pfx_filemap_fault+0x10/0x10 [ 577.446519][T19556] ? blk_cgroup_congested+0x136/0x270 [ 577.451995][T19556] ? blk_cgroup_congested+0x136/0x270 [ 577.457397][T19556] ? __pfx_filemap_map_pages+0x10/0x10 [ 577.462934][T19556] __do_fault+0x10b/0x440 [ 577.467399][T19556] do_fault+0xeb2/0x1750 [ 577.471686][T19556] __handle_mm_fault+0x187d/0x2a00 [ 577.476831][T19556] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 577.482235][T19556] ? __pfx___handle_mm_fault+0x10/0x10 [ 577.487720][T19556] ? pte_offset_map_lock+0x174/0x320 [ 577.493045][T19556] ? find_held_lock+0x2b/0x80 [ 577.497756][T19556] ? follow_page_pte+0x4d0/0x13f0 [ 577.502810][T19556] handle_mm_fault+0x37b/0xa30 [ 577.507592][T19556] __get_user_pages+0x1178/0x32a0 [ 577.512654][T19556] ? __pfx___get_user_pages+0x10/0x10 [ 577.518053][T19556] populate_vma_page_range+0x267/0x3f0 [ 577.523545][T19556] ? __pfx_populate_vma_page_range+0x10/0x10 [ 577.529558][T19556] ? __pfx_find_vma_intersection+0x10/0x10 [ 577.535395][T19556] ? do_mmap+0x93f/0x12f0 [ 577.539755][T19556] __mm_populate+0x107/0x3a0 [ 577.544385][T19556] ? __pfx___mm_populate+0x10/0x10 [ 577.549544][T19556] ? up_write+0x2e5/0x5c0 [ 577.553896][T19556] vm_mmap_pgoff+0x37f/0x470 [ 577.558518][T19556] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 577.563663][T19556] ? __fget_files+0x215/0x3d0 [ 577.568385][T19556] ? __fget_files+0x21f/0x3d0 [ 577.573089][T19556] ksys_mmap_pgoff+0x3cb/0x610 [ 577.577975][T19556] ? __x64_sys_futex+0x358/0x4d0 [ 577.582955][T19556] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 577.588271][T19556] ? xfd_validate_state+0x129/0x190 [ 577.593499][T19556] __x64_sys_mmap+0x125/0x190 [ 577.598218][T19556] do_syscall_64+0x115/0x840 [ 577.602833][T19556] ? clear_bhb_loop+0x40/0x90 [ 577.607552][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.613467][T19556] RIP: 0033:0x7f92ff39e019 [ 577.617915][T19556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.637540][T19556] RSP: 002b:00007f93001cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 577.645971][T19556] RAX: ffffffffffffffda RBX: 00007f92ff625fa0 RCX: 00007f92ff39e019 [ 577.653956][T19556] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 577.661952][T19556] RBP: 00007f92ff43500c R08: 0000000000000003 R09: 0000000000008000 [ 577.669936][T19556] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 577.677919][T19556] R13: 00007f92ff626038 R14: 00007f92ff625fa0 R15: 00007ffffb5e3018 [ 577.685913][T19556] [ 577.688942][T19556] Modules linked in: [ 577.694398][T19556] ---[ end trace 0000000000000000 ]--- [ 578.444068][T19556] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 578.452467][T19556] Code: 3e c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 e6 ed 12 00 90 0f 0b e8 1e 3e c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 cf ed 12 00 90 <0f> 0b e8 07 3e c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 b8 ed 12 00 [ 578.474296][T19556] RSP: 0018:ffffc90003dd73f8 EFLAGS: 00010283 [ 578.480909][T19556] RAX: 0000000000077457 RBX: 0000000000112cc0 RCX: ffffc90012371000 [ 578.489566][T19556] RDX: 0000000000080000 RSI: ffffffff825a5e48 RDI: ffff8880383ea3c4 [ 578.502703][T16050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.519875][T19556] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 578.528861][T19556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 578.541975][T16050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.559859][T19556] R13: ffffea00016f9040 R14: 0000000000000000 R15: 0000000000000000 [ 578.568217][T19556] FS: 00007f93001cb6c0(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000 [ 578.581623][T16050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.593069][T19556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.601635][T19556] CR2: 0000562c846aeee8 CR3: 00000000673aa000 CR4: 00000000003526f0 [ 578.609966][T19556] Kernel panic - not syncing: Fatal exception [ 578.616126][T19556] Kernel Offset: disabled [ 578.620487][T19556] Rebooting in 86400 seconds..