last executing test programs: 1.452810847s ago: executing program 2 (id=6118): mmap$auto(0x0, 0x400008, 0x1, 0x209b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x8) 1.263875238s ago: executing program 3 (id=6120): openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1.114806385s ago: executing program 1 (id=6122): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/13/effective_affinity_list\x00', 0xa0800, 0x0) pread64$auto(r0, 0x0, 0x8100000041, 0x413e) 1.099402451s ago: executing program 2 (id=6123): openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.05420112s ago: executing program 0 (id=6124): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x201, 0x6, 0x0, 0x0, 0x3) 946.364901ms ago: executing program 3 (id=6125): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x0) keyctl$auto_KEYCTL_DH_COMPUTE(0x17, 0xff, 0x9b7, 0xfffffffffffffffb, 0x3) 895.680274ms ago: executing program 1 (id=6126): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x181840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) 879.121974ms ago: executing program 2 (id=6127): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f00000001c0)='po', 0x2) 847.266503ms ago: executing program 0 (id=6128): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) 739.128524ms ago: executing program 3 (id=6129): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/mode\x00', 0x2000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) 670.115999ms ago: executing program 1 (id=6130): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x68, 0x30, 0x7ffd, 0x8, 0x80000000009, 0xfffffffffffffffd, 0x9, 0x5, 0xe2, 0x7f93, 0xfffffffe, 0x2, 0x7ff, 0x7, 0x200}) 642.530656ms ago: executing program 2 (id=6131): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) ioctl$auto(r0, 0x4b65, r0) 642.001935ms ago: executing program 0 (id=6132): r0 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r0, 0xff03, 0x0) 505.354878ms ago: executing program 3 (id=6133): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000004c0)={0x101}) 458.066258ms ago: executing program 1 (id=6134): r0 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwflags\x00', 0x80882, 0x0) write$auto(r0, 0x0, 0x3dc) 443.092525ms ago: executing program 2 (id=6135): unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 430.402114ms ago: executing program 0 (id=6136): r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0) read$auto(r0, &(0x7f0000000080)='+%@\x00', 0x10) 296.702699ms ago: executing program 3 (id=6137): mmap$auto(0x7fffffff9000, 0x5a4, 0x7fffffffffffffff, 0x3132, 0x8d73, 0x0) mmap$auto(0x7fffffffa000, 0x5, 0x7fffffffffffffff, 0x3132, 0x8d73, 0x0) 257.334528ms ago: executing program 1 (id=6138): socket(0x2d, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2d, 0x3, @empty}, 0x6a) 229.105852ms ago: executing program 0 (id=6139): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/halt_successful_poll\x00', 0x42, 0x0) write$auto(r0, &(0x7f00000002c0)='8\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\b\x00\x00\x00\x00\x00\x00\x00\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2N\x1a\xce\xda\b\'yD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dVE\xc3\xa1m(@\x04O\xdf\xb5\x8e\xffjL\xe2\xec?Z\x04\xa5T\xee\xfc_Q\xef\x92\t\x92UC\x83\x92\x19/\x8fWMFJ7\xeao\x12\\i\x17=%\xea\xe1\"\xe2 1 [ 95.176897][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.203523][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.217117][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.226013][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.310200][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.323583][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.333442][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.342125][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.350594][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.451327][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.463592][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.476469][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.493934][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.503616][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.511859][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.519773][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.521463][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.534650][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.537122][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.951738][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.959894][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.970546][ T5623] bridge_slave_0: entered allmulticast mode [ 96.979223][ T5623] bridge_slave_0: entered promiscuous mode [ 97.012435][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.019803][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.027268][ T5623] bridge_slave_1: entered allmulticast mode [ 97.039101][ T5623] bridge_slave_1: entered promiscuous mode [ 97.159176][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.200660][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.324133][ T5623] team0: Port device team_slave_0 added [ 97.326682][ T5637] Bluetooth: hci0: command tx timeout [ 97.344234][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.351461][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.359100][ T5627] bridge_slave_0: entered allmulticast mode [ 97.368225][ T5627] bridge_slave_0: entered promiscuous mode [ 97.384391][ T5623] team0: Port device team_slave_1 added [ 97.401588][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.409160][ T5637] Bluetooth: hci1: command tx timeout [ 97.414905][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.422125][ T5627] bridge_slave_1: entered allmulticast mode [ 97.429781][ T5627] bridge_slave_1: entered promiscuous mode [ 97.471613][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.479102][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.486729][ T5633] bridge_slave_0: entered allmulticast mode [ 97.494672][ T5633] bridge_slave_0: entered promiscuous mode [ 97.538658][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.546067][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.553469][ T5633] bridge_slave_1: entered allmulticast mode [ 97.560900][ T5633] bridge_slave_1: entered promiscuous mode [ 97.567970][ T5637] Bluetooth: hci2: command tx timeout [ 97.593242][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.600254][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.626567][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.643390][ T5637] Bluetooth: hci3: command tx timeout [ 97.658366][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.675341][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.682453][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.708708][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.737844][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.766045][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.814087][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.821373][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.828738][ T5634] bridge_slave_0: entered allmulticast mode [ 97.836237][ T5634] bridge_slave_0: entered promiscuous mode [ 97.847692][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.870516][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.878075][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.887251][ T5634] bridge_slave_1: entered allmulticast mode [ 97.896028][ T5634] bridge_slave_1: entered promiscuous mode [ 97.939125][ T5627] team0: Port device team_slave_0 added [ 97.983225][ T5627] team0: Port device team_slave_1 added [ 97.992037][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.003702][ T5633] team0: Port device team_slave_0 added [ 98.016446][ T5623] hsr_slave_0: entered promiscuous mode [ 98.023536][ T5623] hsr_slave_1: entered promiscuous mode [ 98.044638][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.055957][ T5633] team0: Port device team_slave_1 added [ 98.120695][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.127977][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.154171][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.179054][ T5634] team0: Port device team_slave_0 added [ 98.185730][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.192818][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.219385][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.231542][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.238840][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.265105][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.287177][ T5634] team0: Port device team_slave_1 added [ 98.293673][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.300776][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.326744][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.419870][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.427294][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.453454][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.497558][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.504793][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.531000][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.567200][ T5627] hsr_slave_0: entered promiscuous mode [ 98.574151][ T5627] hsr_slave_1: entered promiscuous mode [ 98.580489][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 98.586811][ T5627] Cannot create hsr debugfs directory [ 98.607961][ T5633] hsr_slave_0: entered promiscuous mode [ 98.614643][ T5633] hsr_slave_1: entered promiscuous mode [ 98.620862][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 98.626817][ T5633] Cannot create hsr debugfs directory [ 98.754876][ T5634] hsr_slave_0: entered promiscuous mode [ 98.761515][ T5634] hsr_slave_1: entered promiscuous mode [ 98.768102][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 98.773953][ T5634] Cannot create hsr debugfs directory [ 99.092712][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.107954][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.161026][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.171779][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.183563][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.196715][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.212213][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.224881][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.322896][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.339304][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.350033][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.359968][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.371481][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.382668][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.403275][ T5637] Bluetooth: hci0: command tx timeout [ 99.416239][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.427131][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.483163][ T5637] Bluetooth: hci1: command tx timeout [ 99.519719][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.530566][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.539268][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.552358][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.568553][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.580123][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.589722][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.599813][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.643768][ T5637] Bluetooth: hci2: command tx timeout [ 99.715752][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.723727][ T5637] Bluetooth: hci3: command tx timeout [ 99.732222][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.741453][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.754388][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.776060][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.788174][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.806292][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.817348][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.831661][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.922781][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.955671][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.962934][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.996058][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.003359][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.070380][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.099582][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.166751][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.182503][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.210188][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.217559][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.227869][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.235035][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.265395][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.291195][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.298463][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.309293][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.316554][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.402811][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.432203][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.439484][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.477357][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.484622][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.281182][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.469049][ T5623] veth0_vlan: entered promiscuous mode [ 101.484675][ T5637] Bluetooth: hci0: command tx timeout [ 101.529264][ T5623] veth1_vlan: entered promiscuous mode [ 101.563962][ T5637] Bluetooth: hci1: command tx timeout [ 101.651332][ T5623] veth0_macvtap: entered promiscuous mode [ 101.672414][ T5623] veth1_macvtap: entered promiscuous mode [ 101.723960][ T5637] Bluetooth: hci2: command tx timeout [ 101.772273][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.802491][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.814059][ T5637] Bluetooth: hci3: command tx timeout [ 101.847403][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.872887][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.910489][ T978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.932926][ T978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.944892][ T978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.958538][ T978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.006353][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.142385][ T5627] veth0_vlan: entered promiscuous mode [ 102.171599][ T5633] veth0_vlan: entered promiscuous mode [ 102.197325][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.212916][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.240170][ T5627] veth1_vlan: entered promiscuous mode [ 102.277349][ T5633] veth1_vlan: entered promiscuous mode [ 102.299128][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.306438][ T5634] veth0_vlan: entered promiscuous mode [ 102.317283][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.360336][ T5634] veth1_vlan: entered promiscuous mode [ 102.414845][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.449252][ T5627] veth0_macvtap: entered promiscuous mode [ 102.477929][ T5633] veth0_macvtap: entered promiscuous mode [ 102.490245][ T5627] veth1_macvtap: entered promiscuous mode [ 102.528357][ T5633] veth1_macvtap: entered promiscuous mode [ 102.552592][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.581228][ T5634] veth0_macvtap: entered promiscuous mode [ 102.607374][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.627540][ T5634] veth1_macvtap: entered promiscuous mode [ 102.641294][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.651634][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.666997][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.690508][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.699748][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.756133][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.808073][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.819858][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.831022][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.901246][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.921483][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.949609][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.030417][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.061142][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.090819][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.140512][ T99] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.164420][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.188291][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.307581][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.347145][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.382791][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.396074][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.498259][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.520172][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.564332][ T5637] Bluetooth: hci0: command tx timeout [ 103.606694][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.643179][ T5637] Bluetooth: hci1: command tx timeout [ 103.644919][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.796526][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.804936][ T5637] Bluetooth: hci2: command tx timeout [ 103.825462][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.886477][ T5637] Bluetooth: hci3: command tx timeout [ 104.340433][ T5800] Unable to find swap-space signature [ 104.411637][ T5804] mmap: syz.3.18 (5804) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.232702][ T5637] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 112.166056][ T6102] can: request_module (can-proto-5) failed. [ 113.456765][ T6158] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.565093][ T29] audit: type=1800 audit(1783092513.462:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.193" name="dbroot" dev="configfs" ino=9153 res=0 errno=0 [ 113.826714][ T29] audit: type=1800 audit(1783092513.723:3): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.199" name="features" dev="configfs" ino=8027 res=0 errno=0 [ 115.006349][ T5637] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 115.145892][ T29] audit: type=1800 audit(1783092515.040:4): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.226" name="features" dev="configfs" ino=8165 res=0 errno=0 [ 116.019747][ T6257] syz_tun: tun_chr_ioctl cmd 1074025681 [ 116.039828][ T6263] ======================================================= [ 116.039828][ T6263] WARNING: The mand mount option has been deprecated and [ 116.039828][ T6263] and is ignored by this kernel. Remove the mand [ 116.039828][ T6263] option from the mount to silence this warning. [ 116.039828][ T6263] ======================================================= [ 117.149491][ T6302] capability: warning: `syz.3.262' uses 32-bit capabilities (legacy support in use) [ 117.500671][ T6312] __vm_enough_memory: pid: 6312, comm: syz.1.267, bytes: 4398046511104 not enough memory for the allocation [ 118.208841][ T6343] syz_tun: tun_chr_ioctl cmd 1074025678 [ 118.221147][ T6343] syz_tun: group set to 23693 [ 118.578784][ T5637] Bluetooth: hci2: unexpected event 0x20 length: 120 > 7 [ 118.929645][ T5637] Bluetooth: hci2: unexpected event 0x23 length: 16 > 13 [ 119.557469][ T6402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.582845][ T5637] Bluetooth: hci1: unexpected event 0x23 length: 16 > 13 [ 120.583346][ T6443] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.651061][ T5637] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 121.181821][ T5637] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 121.530760][ T6480] __vm_enough_memory: pid: 6480, comm: syz.0.349, bytes: 4398046511104 not enough memory for the allocation [ 122.722293][ T5637] Bluetooth: hci1: unexpected event 0x3b length: 1022 > 10 [ 122.927874][ T6527] futex_wake_op: syz.3.372 tries to shift op by -2048; fix this program [ 123.649631][ T6557] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.734328][ T6561] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6561] [ 124.380356][ T6584] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6584] [ 127.057007][ T29] audit: type=1800 audit(1783094573.020:5): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.446" name="trace_pipe" dev="tracefs" ino=3415 res=0 errno=0 [ 128.011754][ T29] audit: type=1800 audit(1783094573.964:6): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.465" name="trace_pipe" dev="tracefs" ino=3453 res=0 errno=0 [ 129.605207][ T5637] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 129.784340][ T29] audit: type=1800 audit(1783094575.763:7): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="trace_pipe" dev="tracefs" ino=3453 res=0 errno=0 [ 133.060708][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072405][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.447801][ T29] audit: type=1326 audit(1783094579.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.579" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d19b9de59 code=0x0 [ 136.211074][ T7070] capability: warning: `syz.0.637' uses deprecated v2 capabilities in a way that may be insecure [ 138.133095][ T7154] syz.3.679 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.563815][ T5637] Bluetooth: hci3: unexpected subevent 0x03 length: 123 > 9 [ 139.468850][ T5637] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 139.476455][ T5637] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 143.481186][ T29] audit: type=1800 audit(1783094589.517:9): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.798" name="features" dev="configfs" ino=13086 res=0 errno=0 [ 145.819380][ T5637] Bluetooth: hci3: unexpected event 0x3c length: 124 > 7 [ 146.565089][ T29] audit: type=1800 audit(1783094592.621:10): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.868" name="members" dev="configfs" ino=13310 res=0 errno=0 [ 148.778001][ T29] audit: type=1800 audit(1783094594.842:11): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.913" name="members" dev="configfs" ino=13608 res=0 errno=0 [ 149.648091][ T29] audit: type=1800 audit(1783094595.716:12): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.927" name="members" dev="configfs" ino=14501 res=0 errno=0 [ 151.796438][ T7736] syz_tun: tun_chr_ioctl cmd 1074025680 [ 151.986877][ T7743] syz_tun: tun_chr_ioctl cmd 1074025676 [ 152.005488][ T7743] syz_tun: owner set to 111 [ 155.271774][ T7884] syz_tun: tun_chr_ioctl cmd 1074025675 [ 155.292885][ T7884] syz_tun: persist enabled [ 155.428560][ T7892] random: crng reseeded on system resumption [ 156.699294][ T7943] syz.0.1073 (7943): attempted to duplicate a private mapping with mremap. This is not supported. [ 156.912261][ T7954] syz_tun: tun_chr_ioctl cmd 1074025676 [ 157.357808][ T7972] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7972] [ 158.136803][ T5637] Bluetooth: hci3: unexpected event 0x34 length: 726 > 6 [ 159.949485][ T8090] Unable to find swap-space signature [ 160.560852][ T5637] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 160.870941][ T8128] nfs: Bad value for 'source' [ 162.736121][ T5637] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 165.171659][ T29] audit: type=1800 audit(1783094611.309:13): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="version" dev="configfs" ino=16542 res=0 errno=0 [ 165.368062][ T29] audit: type=1800 audit(1783094611.510:14): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1265" name="dummy_udc" dev="gadgetfs" ino=7064 res=0 errno=0 [ 165.718789][ T5637] Bluetooth: hci2: unknown advertising packet type: 0xea [ 166.531135][ T5637] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 169.822752][ T5637] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 174.036540][ T8671] kexec: Could not allocate control_code_buffer [ 176.256778][ T29] audit: type=1800 audit(1783094622.446:15): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1512" name="lu_gp_id" dev="configfs" ino=17517 res=0 errno=0 [ 180.042533][ T8933] kexec: Could not allocate control_code_buffer [ 180.271538][ T5637] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 180.271584][ T5637] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 180.286862][ T5637] Bluetooth: hci2: Unknown advertising packet type: 0x3e [ 182.269195][ T9077] Process accounting resumed [ 185.324316][ T5637] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 186.036919][ T9261] aoe: can't write to that file. [ 186.391757][ T9278] writing to auto_msgmni has no effect [ 186.580723][ T9288] bonding: no command found in bonding_masters - use +ifname or -ifname [ 186.726994][ T9293] usb usb3: usbfs: process 9293 (syz.1.1733) did not claim interface 0 before use [ 187.797502][ T9350] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 188.190960][ T9371] syz.1.1769: vm.laptop_mode is deprecated. Ignoring setting. [ 188.836143][ T9403] bond0: no command found in slaves file - use +ifname or -ifname [ 189.624273][ T9436] bond0: invalid ARP target specified [ 189.998471][ T9451] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.056779][ T9451] CIFS mount error: No usable UNC path provided in device string! [ 190.056779][ T9451] [ 190.088516][ T9451] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.338041][ T9393] kexec: Could not allocate control_code_buffer [ 191.328705][ T9508] phram: not enough arguments [ 191.880051][ T9532] bond0: invalid ARP target specified [ 192.382786][ T9490] kexec: Could not allocate control_code_buffer [ 193.365884][ T9595] block2mtd: Using custom MTD label '' for dev [ 193.372907][ T9595] block2mtd: error: cannot open device [ 193.733664][ T9610] vhci_hcd: not connected 4 [ 194.196275][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202795][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.217340][ T9628] writes to the poll attribute are ignored. [ 194.245532][ T9628] please use driver specific parameters instead. [ 194.347672][ T9568] kexec: Could not allocate control_code_buffer [ 194.677408][ T9652] bond0: invalid ARP target specified [ 195.403670][ T9677] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 196.410400][ T9658] kexec: Could not allocate control_code_buffer [ 196.550855][ T9723] syz_tun: tun_chr_ioctl cmd 2147767511 [ 198.835217][ T9846] syz_tun: tun_chr_ioctl cmd 2147767521 [ 199.701738][ T9893] vmstat_refresh: nr_hugetlb -2048 [ 201.411938][ T9985] bond0: option slaves: interface -]=,Do does not exist! [ 202.211169][T10029] process 'syz.0.2083' launched '/dev/fd/3' with NULL argv: empty string added [ 203.053284][T10074] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 203.258672][T10085] binder: 10084:10085 ioctl 400c620e 200000002900 returned -22 [ 203.573831][ T5637] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 203.573881][ T5637] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 203.591692][ T5637] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 204.422794][T10150] syz.2.2131 uses obsolete (PF_INET,SOCK_PACKET) [ 204.729946][T10160] ptp ptp0: only physical clock in use now [ 205.766164][T10214] sysfs_service_op_store: Client not running :-5: [ 206.974104][T10275] sysfs_service_op_store: Client not running :-5: [ 207.833483][T10314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.260890][ T29] audit: type=1800 audit(1843104544.260:16): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2225" name="discovery_nqn" dev="configfs" ino=21937 res=0 errno=0 [ 208.637541][T10365] binder: 10362:10365 ioctl c0306201 200000000000 returned -14 [ 211.085531][T10486] tipc: Can't bind to reserved service type 63 [ 211.631850][T10518] cougar: G6 mapped to F18 [ 212.211634][T10549] kAFS: Invalid Command on /proc/fs/afs/cells file [ 212.282345][T10549] Process accounting paused [ 212.400151][T10559] [ 213.097633][T10587] Line length is too long: Should be less than 4094 [ 213.204432][T10592] block2mtd: too many arguments [ 215.240179][ T29] audit: type=1807 audit(1843104551.287:17): UNKNOWN=nl80211 res=0 [ 215.256595][T10697] ima: policy update failed [ 215.258420][ T29] audit: type=1802 audit(1843104551.307:18): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2400" res=0 errno=0 [ 215.306069][ T29] audit: type=1802 audit(1843104551.327:19): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2400" res=0 errno=0 [ 216.020193][T10739] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 216.020193][T10739] [ 216.465002][T10766] bond0: invalid ARP target specified [ 218.265167][T10863] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 219.012382][T10905] futex_wake_op: syz.3.2503 tries to shift op by -2048; fix this program [ 219.023364][T10905] futex_wake_op: syz.3.2503 tries to shift op by -2048; fix this program [ 219.447934][T10925] bond0: option arp_interval: invalid value () [ 219.467088][T10925] bond0: option arp_interval: allowed values 0 - 2147483647 [ 220.161558][T10966] futex_wake_op: syz.2.2532 tries to shift op by -2048; fix this program [ 220.183316][T10966] futex_wake_op: syz.2.2532 tries to shift op by -2048; fix this program [ 221.636136][T11047] ceph: Failed to parse sending metrics switch value 'P^' [ 221.743774][T10940] Bluetooth: hci0: command 0x0406 tx timeout [ 221.750065][T10940] Bluetooth: hci1: command 0x0406 tx timeout [ 221.756254][T10940] Bluetooth: hci3: command 0x0406 tx timeout [ 221.762357][T10940] Bluetooth: hci2: command 0x0406 tx timeout [ 222.694147][ T29] audit: type=1800 audit(1843104558.775:20): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2600" name="dbroot" dev="configfs" ino=24231 res=0 errno=0 [ 224.225537][T11198] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 224.225537][T11198] M' is too long [ 224.252196][T11198] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 224.252196][T11198] W ' is too long [ 225.116224][ T29] audit: type=1800 audit(1843104561.208:21): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2668" name="dbroot" dev="configfs" ino=24462 res=0 errno=0 [ 225.163953][T11248] phram: not enough arguments [ 225.379262][T11260] blkio.reset_stats is deprecated [ 225.617953][ T29] audit: type=1800 audit(1843104561.710:22): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2681" name="dbroot" dev="configfs" ino=24506 res=0 errno=0 [ 225.864080][T11287] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.007058][ T29] audit: type=1807 audit(1843104562.102:23): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 226.011200][T11292] ima: policy update failed [ 226.048448][ T29] audit: type=1802 audit(1843104562.102:24): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2691" res=0 errno=0 [ 226.101482][ T29] audit: type=1802 audit(1843104562.153:25): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2691" res=0 errno=0 [ 226.222683][ T29] audit: type=1800 audit(1843104562.324:26): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2694" name="dbroot" dev="configfs" ino=25097 res=0 errno=0 [ 226.633469][T11331] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 226.633469][T11331] M' is too long [ 226.647046][T11331] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 226.647046][T11331] W ' is too long [ 228.063397][T11402] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 228.066676][T11401] ima: policy update failed [ 228.109521][ T29] audit: type=1802 audit(1843104564.223:27): pid=11401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2743" res=0 errno=0 [ 228.782020][T11439] usb usb13: usbfs: process 11439 (syz.0.2762) did not claim interface 0 before use [ 230.027230][T11504] CIFS mount error: No usable UNC path provided in device string! [ 230.027230][T11504] [ 230.053855][T11504] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.478043][T11530] warning: `syz.3.2807' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.410613][T11578] ima: policy update failed [ 231.432880][ T29] audit: type=1802 audit(1843104567.561:28): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2832" res=0 errno=0 [ 231.776326][T11597] CIFS: VFS: UNC: path must begin with // or \\ [ 231.789217][T11597] Malformed UNC in devname [ 231.789217][T11597] [ 231.796174][T11597] CIFS: VFS: Malformed UNC in devname [ 232.010178][T11609] kAFS: Invalid Command on /proc/fs/afs/cells file [ 232.875466][T11656] : Can't lookup blockdev [ 236.393991][T11821] zram: Added device: zram1 [ 237.083443][T11863] vhci_hcd vhci_hcd.2: invalid port number 16 [ 237.094898][T11863] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 237.176647][ T29] audit: type=1800 audit(1843104573.321:29): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2969" name="dbroot" dev="configfs" ino=26548 res=0 errno=0 [ 237.225336][T11865] db_root: cannot open: /sy] [ 237.465475][T11878] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 238.023577][T11902] smpboot: CPU 1 is now offline [ 239.758083][T11969] program syz.3.3020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.054825][T11978] zram: Added device: zram2 [ 240.920648][T12013] zram: Added device: zram3 [ 242.228128][T12059] Process accounting resumed [ 243.075603][T12086] zram: Added device: zram4 [ 243.365856][T12088] random: crng reseeded on system resumption [ 245.054228][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.061066][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.581248][T12268] Setting dangerous option i915.mitigations - tainting kernel [ 249.811184][T12276] nvme_fcloop: unknown parameter or missing value '' [ 250.577964][ T5637] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 251.210580][T12311] : Can't lookup blockdev [ 251.443982][T12319] bond0: invalid ARP target specified [ 254.046642][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.056495][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.867067][T12394] WARNING! power/level is deprecated; use power/control instead [ 254.970454][T12397] kAFS: No cell specified [ 255.101195][T12399] ACPI: Can not change Invalid GPE/Fixed Event status [ 255.412830][T12408] block2mtd: illegal erase size [ 255.972559][T12427] block2mtd: illegal erase size [ 257.002477][T12448] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 261.753755][T12562] usb usb22: usbfs: process 12562 (syz.1.3301) did not claim interface 1 before use [ 261.969896][T12567] syz_tun: tun_chr_ioctl cmd 1074812117 [ 262.305347][T12578] kafs: addr_prefs: Invalid Command [ 262.394717][T12581] sg_write: data in/out 262108/21 bytes for SCSI command 0x61-- guessing data in; [ 262.394717][T12581] program syz.1.3309 not setting count and/or reply_len properly [ 268.048493][ T11] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 271.904201][T12857] syz.2.3445 (12857): drop_caches: 0 [ 272.310643][T12862] Process accounting paused [ 280.634581][T13125] usb usb33: usbfs: process 13125 (syz.0.3575) did not claim interface 0 before use [ 281.616469][T13155] vhci_hcd: not connected 4 [ 282.016912][T13165] block2mtd: parameter too long [ 284.907337][T13242] ubi31: attaching mtd0 [ 285.318831][T13252] rnbd_client L213: map_device: Parameters missing [ 285.817220][T13265] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ef4a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 285.832922][T13265] Call Trace: [ 285.836222][T13265] [ 285.839169][T13265] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 285.845874][T13265] ? __pfx_debug_object_deactivate+0x10/0x10 [ 285.851911][T13265] mce_cpu_restart+0xd5/0x1f0 [ 285.856634][T13265] ? __pfx_mce_cpu_restart+0x10/0x10 [ 285.861948][T13265] smp_call_function_many_cond+0x139d/0x16c0 [ 285.867976][T13265] ? __pfx_mce_cpu_restart+0x10/0x10 [ 285.873282][T13265] ? mark_held_locks+0x40/0x70 [ 285.878074][T13265] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.883910][T13265] ? lockdep_hardirqs_on+0x78/0x100 [ 285.889136][T13265] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.894969][T13265] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 285.901327][T13265] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 285.907356][T13265] ? __timer_delete_sync+0x151/0x1c0 [ 285.912670][T13265] ? __pfx_mce_cpu_restart+0x10/0x10 [ 285.917999][T13265] on_each_cpu_cond_mask+0x40/0x90 [ 285.923140][T13265] set_bank+0x240/0x3a0 [ 285.927323][T13265] ? __pfx_set_bank+0x10/0x10 [ 285.932021][T13265] ? find_held_lock+0x2b/0x80 [ 285.936724][T13265] ? sysfs_file_kobj+0xe4/0x290 [ 285.941596][T13265] ? sysfs_file_kobj+0xe4/0x290 [ 285.946470][T13265] ? __pfx_set_bank+0x10/0x10 [ 285.951166][T13265] dev_attr_store+0x58/0x80 [ 285.955702][T13265] ? __pfx_dev_attr_store+0x10/0x10 [ 285.960931][T13265] sysfs_kf_write+0xf2/0x150 [ 285.965636][T13265] kernfs_fop_write_iter+0x3e0/0x5f0 [ 285.970942][T13265] ? __pfx_sysfs_kf_write+0x10/0x10 [ 285.976168][T13265] vfs_write+0x6ac/0x1050 [ 285.980535][T13265] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 285.986386][T13265] ? __pfx_vfs_write+0x10/0x10 [ 285.991202][T13265] ksys_write+0x12a/0x250 [ 285.995558][T13265] ? __pfx_ksys_write+0x10/0x10 [ 286.000445][T13265] do_syscall_64+0x115/0x840 [ 286.005087][T13265] ? clear_bhb_loop+0x40/0x90 [ 286.009793][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.015735][T13265] RIP: 0033:0x7f5d19b9de59 [ 286.020183][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.039808][T13265] RSP: 002b:00007f5d17df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.048252][T13265] RAX: ffffffffffffffda RBX: 00007f5d19e25fa0 RCX: 00007f5d19b9de59 [ 286.056240][T13265] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 286.064224][T13265] RBP: 00007f5d19c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 286.072213][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.080202][T13265] R13: 00007f5d19e26038 R14: 00007f5d19e25fa0 R15: 00007fffadd5b748 [ 286.088201][T13265] [ 286.533321][T13195] syz.3.3578 (13195) used greatest stack depth: 19544 bytes left [ 286.952680][T13289] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 291.672209][T13420] overlayfs: "check_copy_up" module option is obsolete [ 293.108304][T12073] syz.3.3069 (12073) used greatest stack depth: 18632 bytes left [ 294.344811][ T9] Process accounting resumed [ 296.557049][ T5357] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 297.665105][T13589] hub 1-0:1.0: USB hub found [ 297.687891][T13589] hub 1-0:1.0: 1 port detected [ 298.517390][T13628] kfence: disabled [ 299.384133][T13659] CIFS mount error: No usable UNC path provided in device string! [ 299.384133][T13659] [ 299.448432][T13659] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 300.079176][T13679] kAFS: Invalid Command on /proc/fs/afs/cells file [ 302.280634][T13735] Process accounting resumed [ 302.318177][T13739] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 302.375207][T13739] ep_00: uevent: failed to send synthetic uevent: -22 [ 302.564317][T13747] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[13747] [ 303.900878][T13783] hub 1-0:1.0: USB hub found [ 303.930459][T13783] hub 1-0:1.0: 1 port detected [ 306.038704][T13857] binder: 13855:13857 ioctl c018620c 200000000040 returned -1 [ 306.123794][T13859] Setting dangerous option i915.mitigations - tainting kernel [ 306.157335][T13859] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 306.397896][T13869] bond0: no command found in slaves file - use +ifname or -ifname [ 306.919127][T13889] synth uevent: /module/null_blk: unknown uevent action string [ 307.413934][ T29] audit: type=1400 audit(1843122987.935:30): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13904 comm="syz.1.3953" [ 307.716614][T13917] kernel profiling enabled (shift: 7) [ 307.724262][T13915] hub 1-0:1.0: USB hub found [ 307.748652][T13915] hub 1-0:1.0: 1 port detected [ 308.093335][T13927] synth uevent: /bus/mei: unknown uevent action string [ 308.753419][T13945] hub 1-0:1.0: USB hub found [ 308.783167][T13945] hub 1-0:1.0: 1 port detected [ 309.401275][T13965] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 310.296702][ T29] audit: type=1400 audit(1843122990.830:31): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13990 comm="syz.0.3995" [ 311.546621][T14034] Invalid ELF header magic: != ELF [ 315.229885][T14158] vhci_hcd vhci_hcd.2: invalid port number 253 [ 315.271409][T14158] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 316.447799][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.457638][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.626110][T14214] zswap: compressor F(_ not available [ 318.044948][ T5637] Bluetooth: hci0: unexpected event 0x35 length: 725 > 6 [ 321.975759][T14380] deleting an unspecified loop device is not supported. [ 322.814690][T14406] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807800ce00 pfn:0x7800c [ 322.878455][T14406] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 322.921998][T14406] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 322.959065][T14406] page_type: f5(slab) [ 322.981551][T14406] raw: 00fff00000000240 ffff88813fe1eb40 ffffea0001f3c410 ffffea0001a63f10 [ 323.011578][T14406] raw: ffff88807800ce00 000000080010000d 00000000f5000000 0000000000000000 [ 323.038806][T14406] head: 00fff00000000240 ffff88813fe1eb40 ffffea0001f3c410 ffffea0001a63f10 [ 323.065826][T14406] head: ffff88807800ce00 000000080010000d 00000000f5000000 0000000000000000 [ 323.101532][T14406] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 323.133818][T14406] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 323.166955][T14406] page dumped because: unmovable page [ 323.187400][T14406] page_owner tracks the page as allocated [ 323.214900][T14406] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 936, tgid 936 (kworker/0:2), ts 100713975716, free_ts 100517355602 [ 323.312733][T14406] post_alloc_hook+0xfd/0x120 [ 323.341800][T14406] get_page_from_freelist+0xf48/0x3530 [ 323.360301][T14422] RGB/YUV Input: ================= START STATUS ================= [ 323.371550][T14406] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 323.394442][T14406] new_slab+0xa2/0x650 [ 323.400086][T14422] RGB/YUV Input: Test Pattern: 75% Colorbar [ 323.409952][T14425] ICMPv6: process `syz.2.4198' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 323.427723][T14406] refill_objects+0xe3/0x410 [ 323.440211][T14422] RGB/YUV Input: Show Information: All [ 323.446909][T14406] __pcs_replace_empty_main+0x376/0x680 [ 323.458378][T14422] RGB/YUV Input: Vertical Flip: false [ 323.464206][T14406] __kmalloc_cache_noprof+0x479/0x6c0 [ 323.477188][T14422] RGB/YUV Input: Horizontal Flip: false [ 323.486155][T14406] br_multicast_new_group.part.0+0x13d/0x1ac0 [ 323.509075][T14422] RGB/YUV Input: Brightness: 128 [ 323.517608][T14406] __br_multicast_add_group+0x42f/0x570 [ 323.531234][T14422] RGB/YUV Input: Contrast: 128 [ 323.552956][T14422] RGB/YUV Input: Hue: 0 [ 323.563162][T14406] br_ip6_multicast_add_group+0x286/0x330 [ 323.583074][T14422] RGB/YUV Input: Saturation: 128 [ 323.598810][T14422] RGB/YUV Input: Pixel Rate: 160000000 [ 323.619971][T14406] br_multicast_rcv+0x21bc/0x6a20 [ 323.626966][T14422] RGB/YUV Input: Horizontal Blanking: 800 [ 323.643031][T14406] br_handle_frame_finish+0x124f/0x1fa0 [ 323.650477][T14422] RGB/YUV Input: Vertical Blanking: 3223 [ 323.665713][T14406] br_nf_hook_thresh+0x30d/0x420 [ 323.676061][T14422] RGB/YUV Input: ================== END STATUS ================== [ 323.699493][T14406] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 323.727640][T14406] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 323.746917][T14406] br_nf_pre_routing+0x90f/0x1560 [ 323.775223][T14406] page last free pid 5731 tgid 5731 stack trace: [ 323.799668][T14406] __free_frozen_pages+0x79f/0x1090 [ 323.834746][T14406] qlist_free_all+0x47/0xf0 [ 323.846415][T14406] kasan_quarantine_reduce+0x1a0/0x1f0 [ 323.868294][T14406] __kasan_slab_alloc+0x69/0x90 [ 323.890202][T14406] __kmalloc_noprof+0x2bf/0x820 [ 323.917898][T14406] tomoyo_realpath_from_path+0xb6/0x690 [ 323.953193][T14406] tomoyo_path_perm+0x276/0x460 [ 323.980607][T14406] security_inode_getattr+0x116/0x280 [ 324.011011][T14406] vfs_fstat+0x4b/0xe0 [ 324.032256][T14406] __do_sys_newfstat+0x8b/0x110 [ 324.057177][T14406] do_syscall_64+0x115/0x840 [ 324.072942][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.339182][T14449] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 324.379449][T14449] net gretap0: uevent: failed to send synthetic uevent: -22 [ 326.226194][T14519] block2mtd: illegal erase size [ 328.717215][T14604] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 328.756003][T14604] net gretap0: uevent: failed to send synthetic uevent: -22 [ 330.306953][T14654] i2c i2c-0: delete_device: Can't find device in list [ 331.352060][T14693] Invalid input. Must be >= 4608 [ 331.890144][T14707] zram0: detected capacity change from 0 to 16 [ 332.375184][T14720] Process accounting paused [ 333.347023][T14755] i2c i2c-0: new_device: Invalid device name [ 335.227900][T14829] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 335.278385][T14827] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 336.863876][T14892] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.924720][T14945] sd 0:0:1:0: PR command failed: 1026 [ 338.951577][T14945] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 338.985652][T14945] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 339.405188][T14964] program syz.0.4463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.892330][T15194] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 346.126399][T15203] bond0: no command found in slaves file - use +ifname or -ifname [ 347.730549][ T5637] Bluetooth: hci0: Unable to find connection for big 0xe0 [ 353.294538][T15435] ubi0: attaching mtd0 [ 353.315076][T15435] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 353.977134][T15457] i2c i2c-0: delete_device: Can't parse I2C address [ 357.597494][T15578] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 359.137289][T15626] vhci_hcd vhci_hcd.2: invalid port number 135 [ 359.173778][T15626] vhci_hcd vhci_hcd.2: invalid port number 135 [ 359.363466][T15635] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 359.831682][T15653] random: crng reseeded on system resumption [ 362.448695][T15742] Process accounting resumed [ 362.988108][T15764] ICMPv6: process `syz.2.4855' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 363.214354][T15770] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 363.259961][T15770] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 363.272795][T15762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.777689][T15762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.047196][T15762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.309145][T15762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.434622][T15798] zswap: compressor F(- not available [ 366.018443][ T5637] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 366.028059][ T5637] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 367.114556][T15881] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.4909' sets config #4095 [ 368.732750][T15932] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 368.733442][T15931] ima: policy update failed [ 368.798202][ T29] audit: type=1802 audit(1843123049.645:32): pid=15931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4933" res=0 errno=0 [ 374.122430][ T5637] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 374.122533][ T5637] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 374.527161][T16143] : Can't lookup blockdev [ 377.566296][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.573541][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.065486][T16273] usbip-vudc usbip-vudc.0: gadget not bound [ 379.127427][ T5624] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 379.136224][ T5624] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 381.863885][T16402] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 382.111271][T16402] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 382.157342][T16402] pci 0000:00:01.3: PCI INT A: no GSI [ 383.254780][ T5624] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 383.264665][ T5624] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 383.938981][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.948551][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.629229][ T5624] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 384.639915][ T5624] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 385.583505][T16523] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 386.474897][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 389.121259][T16590] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 389.605900][T16645] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 390.977389][T16698] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 392.487284][T16752] warning: `syz.1.5330' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 394.811856][T16750] Process accounting paused [ 394.982914][T16804] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 395.501898][T16825] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 396.652947][T16867] kafs: addr_prefs: Too many elements in string [ 398.030372][T16918] < [ 399.497644][ T29] audit: type=1800 audit(1843123080.494:33): pid=16955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5428" name="sr0" dev="devtmpfs" ino=2850 res=0 errno=0 [ 402.465369][ T29] audit: type=1800 audit(1843123083.480:34): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5483" name="dbroot" dev="configfs" ino=43822 res=0 errno=0 [ 403.995149][T17124] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17124] [ 404.803103][T17152] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 404.846073][T17152] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 404.870671][T17158] dyndbg: expected <4096 bytes into control [ 404.884931][T17152] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 404.916676][T17152] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 404.965222][T17152] page dumped because: unmovable page [ 404.990188][T17152] page_owner info is not present (never set?) [ 405.110447][ T29] audit: type=1800 audit(1843123086.133:35): pid=17164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5532" name="dbroot" dev="configfs" ino=44139 res=0 errno=0 [ 405.683136][T17185] TCP: TCP_TX_DELAY enabled [ 406.501042][T17218] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 407.035829][T17236] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 413.539909][ T29] audit: type=1800 audit(1843123094.617:36): pid=17414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5654" name="dbroot" dev="configfs" ino=45000 res=0 errno=0 [ 413.575837][T17414] db_root: cannot open: /dev/audio1 [ 413.611237][T17414] db_root: not a directory: /dev/audio1 [ 414.374441][T17439] ima: policy update failed [ 414.410442][ T29] audit: type=1802 audit(1843123095.482:37): pid=17439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5667" res=0 errno=0 [ 416.080847][T17496] hub 3-0:1.0: USB hub found [ 416.102799][T17496] hub 3-0:1.0: 1 port detected [ 416.234308][T17496] usb usb3: authorized to connect [ 417.146884][T17532] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 417.181028][T17535] kafs: addr_prefs: Invalid Command [ 417.402586][T17541] i2c i2c-0: new_device: Missing parameters [ 417.523630][T17546] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 418.510208][T17577] random: crng reseeded on system resumption [ 422.398920][ T5624] Bluetooth: hci1: Malformed LE Event: 0x1d [ 424.700975][T17777] Process accounting resumed [ 424.881555][T17788] sysfs_service_op_show: Client not running :-5: [ 425.139946][T17797] phram: not enough arguments [ 425.380677][T17806] Format for deleting device is "id" (uint). [ 427.539002][T17881] program syz.1.5881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.173293][T17905] Setting dangerous option i915.mitigations - tainting kernel [ 431.051107][T18012] syz.1.5947 uses obsolete (PF_INET,SOCK_PACKET) [ 431.272786][T18018] ICMPv6: process `syz.2.5950' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 433.450571][T18098] batman_adv: Routing algorithm '' is not supported [ 435.050352][ T29] audit: type=1800 audit(1843123116.239:38): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6015" name="lu_gp_id" dev="configfs" ino=47358 res=0 errno=0 [ 436.720227][T18208] usb usb25: usbfs: process 18208 (syz.0.6044) did not claim interface 9 before use [ 438.037354][ T29] audit: type=1806 audit(1843123119.235:39): xattr="." res=0 [ 438.475079][T18270] capability: warning: `syz.1.6073' uses deprecated v2 capabilities in a way that may be insecure [ 438.571541][T18273] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 438.695212][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.713899][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.588130][T18404] ================================================================== [ 442.588154][T18404] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 442.588219][T18404] Write of size 8 at addr ffffc900049c1000 by task syz.3.6140/18404 [ 442.588240][T18404] [ 442.588263][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.3.6140 Tainted: G U L syzkaller #0 PREEMPT(full) [ 442.588300][T18404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 442.588309][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.588328][T18404] Call Trace: [ 442.588336][T18404] [ 442.588346][T18404] dump_stack_lvl+0x100/0x190 [ 442.588382][T18404] print_report+0x13d/0x4b0 [ 442.588418][T18404] ? _raw_spin_lock_irqsave+0x52/0x60 [ 442.588478][T18404] ? sys_fillrect+0x174a/0x1910 [ 442.588503][T18404] kasan_report+0xdf/0x1c0 [ 442.588540][T18404] ? sys_fillrect+0x174a/0x1910 [ 442.588569][T18404] sys_fillrect+0x174a/0x1910 [ 442.588601][T18404] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 442.588641][T18404] bit_clear+0x17d/0x220 [ 442.588697][T18404] ? __pfx_bit_clear+0x10/0x10 [ 442.588739][T18404] ? fb_get_color_depth+0x120/0x250 [ 442.588789][T18404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.588826][T18404] __fbcon_clear+0x633/0x760 [ 442.588860][T18404] ? __pfx_bit_clear+0x10/0x10 [ 442.588898][T18404] fbcon_scroll+0x48b/0x650 [ 442.588932][T18404] con_scroll+0x464/0x690 [ 442.588961][T18404] csi_ECMA.constprop.0+0x1238/0x3b60 [ 442.588991][T18404] ? find_held_lock+0x2b/0x80 [ 442.589026][T18404] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 442.589059][T18404] do_con_write+0x3660/0x4a30 [ 442.589096][T18404] ? __pfx_do_con_write+0x10/0x10 [ 442.589132][T18404] con_write+0x23/0xb0 [ 442.589159][T18404] n_tty_write+0x431/0x1160 [ 442.589200][T18404] ? __pfx_n_tty_write+0x10/0x10 [ 442.589233][T18404] ? __kasan_kmalloc+0xaa/0xb0 [ 442.589259][T18404] ? __pfx_woken_wake_function+0x10/0x10 [ 442.589300][T18404] ? rcu_is_watching+0x12/0xc0 [ 442.589332][T18404] ? file_tty_write.isra.0+0x694/0x890 [ 442.589359][T18404] ? kfree+0x1e5/0x6c0 [ 442.589395][T18404] ? __pfx_n_tty_write+0x10/0x10 [ 442.589429][T18404] file_tty_write.isra.0+0x4d2/0x890 [ 442.589460][T18404] redirected_tty_write+0xd4/0x120 [ 442.589488][T18404] vfs_write+0x6ac/0x1050 [ 442.589524][T18404] ? __pfx_redirected_tty_write+0x10/0x10 [ 442.589553][T18404] ? __pfx_vfs_write+0x10/0x10 [ 442.589587][T18404] ? find_held_lock+0x2b/0x80 [ 442.589623][T18404] ksys_write+0x12a/0x250 [ 442.589657][T18404] ? __pfx_ksys_write+0x10/0x10 [ 442.589697][T18404] do_syscall_64+0x115/0x840 [ 442.589739][T18404] ? clear_bhb_loop+0x40/0x90 [ 442.589768][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.589793][T18404] RIP: 0033:0x7f1da719de59 [ 442.589812][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.589835][T18404] RSP: 002b:00007f1da8005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.589864][T18404] RAX: ffffffffffffffda RBX: 00007f1da7425fa0 RCX: 00007f1da719de59 [ 442.589880][T18404] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 442.589895][T18404] RBP: 00007f1da7233e6f R08: 0000000000000000 R09: 0000000000000000 [ 442.589910][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.589924][T18404] R13: 00007f1da7426038 R14: 00007f1da7425fa0 R15: 00007ffd2d28a8c8 [ 442.589948][T18404] [ 442.589956][T18404] [ 442.589963][T18404] The buggy address belongs to a vmalloc virtual mapping [ 442.589980][T18404] Memory state around the buggy address: [ 442.589992][T18404] ffffc900049c0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 442.590009][T18404] ffffc900049c0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 442.590029][T18404] >ffffc900049c1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 442.590042][T18404] ^ [ 442.590054][T18404] ffffc900049c1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 442.590071][T18404] ffffc900049c1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 442.590084][T18404] ================================================================== [ 442.605520][T18404] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 442.605546][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.3.6140 Tainted: G U L syzkaller #0 PREEMPT(full) [ 442.605583][T18404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 442.605593][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.605608][T18404] Call Trace: [ 442.605616][T18404] [ 442.605625][T18404] dump_stack_lvl+0x100/0x190 [ 442.605655][T18404] vpanic+0x552/0x970 [ 442.605678][T18404] ? __pfx_vpanic+0x10/0x10 [ 442.605701][T18404] ? mark_held_locks+0x40/0x70 [ 442.605745][T18404] ? sys_fillrect+0x174a/0x1910 [ 442.605770][T18404] panic+0xd1/0xe0 [ 442.605791][T18404] ? __pfx_panic+0x10/0x10 [ 442.605815][T18404] ? sys_fillrect+0x174a/0x1910 [ 442.605840][T18404] ? preempt_schedule_common+0x42/0xc0 [ 442.605880][T18404] check_panic_on_warn.cold+0x19/0x34 [ 442.605905][T18404] end_report.part.0+0x3a/0x90 [ 442.605941][T18404] kasan_report.cold+0xe/0x18 [ 442.605977][T18404] ? sys_fillrect+0x174a/0x1910 [ 442.606006][T18404] sys_fillrect+0x174a/0x1910 [ 442.606038][T18404] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 442.606077][T18404] bit_clear+0x17d/0x220 [ 442.606114][T18404] ? __pfx_bit_clear+0x10/0x10 [ 442.606151][T18404] ? fb_get_color_depth+0x120/0x250 [ 442.606184][T18404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.606220][T18404] __fbcon_clear+0x633/0x760 [ 442.606254][T18404] ? __pfx_bit_clear+0x10/0x10 [ 442.606292][T18404] fbcon_scroll+0x48b/0x650 [ 442.606327][T18404] con_scroll+0x464/0x690 [ 442.606355][T18404] csi_ECMA.constprop.0+0x1238/0x3b60 [ 442.606385][T18404] ? find_held_lock+0x2b/0x80 [ 442.606412][T18404] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 442.606446][T18404] do_con_write+0x3660/0x4a30 [ 442.606483][T18404] ? __pfx_do_con_write+0x10/0x10 [ 442.606519][T18404] con_write+0x23/0xb0 [ 442.606546][T18404] n_tty_write+0x431/0x1160 [ 442.606586][T18404] ? __pfx_n_tty_write+0x10/0x10 [ 442.606619][T18404] ? __kasan_kmalloc+0xaa/0xb0 [ 442.606646][T18404] ? __pfx_woken_wake_function+0x10/0x10 [ 442.606687][T18404] ? rcu_is_watching+0x12/0xc0 [ 442.606718][T18404] ? file_tty_write.isra.0+0x694/0x890 [ 442.606746][T18404] ? kfree+0x1e5/0x6c0 [ 442.606782][T18404] ? __pfx_n_tty_write+0x10/0x10 [ 442.606816][T18404] file_tty_write.isra.0+0x4d2/0x890 [ 442.606848][T18404] redirected_tty_write+0xd4/0x120 [ 442.606876][T18404] vfs_write+0x6ac/0x1050 [ 442.606912][T18404] ? __pfx_redirected_tty_write+0x10/0x10 [ 442.606942][T18404] ? __pfx_vfs_write+0x10/0x10 [ 442.606976][T18404] ? find_held_lock+0x2b/0x80 [ 442.607015][T18404] ksys_write+0x12a/0x250 [ 442.607050][T18404] ? __pfx_ksys_write+0x10/0x10 [ 442.607090][T18404] do_syscall_64+0x115/0x840 [ 442.607126][T18404] ? clear_bhb_loop+0x40/0x90 [ 442.607154][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.607179][T18404] RIP: 0033:0x7f1da719de59 [ 442.607199][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.607223][T18404] RSP: 002b:00007f1da8005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.607246][T18404] RAX: ffffffffffffffda RBX: 00007f1da7425fa0 RCX: 00007f1da719de59 [ 442.607263][T18404] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 442.607278][T18404] RBP: 00007f1da7233e6f R08: 0000000000000000 R09: 0000000000000000 [ 442.607293][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.607308][T18404] R13: 00007f1da7426038 R14: 00007f1da7425fa0 R15: 00007ffd2d28a8c8 [ 442.607331][T18404] [ 442.607410][T18404] Kernel Offset: disabled