last executing test programs: 2.132395095s ago: executing program 2 (id=10304): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x1) 1.882114188s ago: executing program 2 (id=10308): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) getpeername$auto(0x3, 0x0, 0x0) 1.624408463s ago: executing program 2 (id=10311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x5, 0x8, 0x0, 0x1, [@generic="c5"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) 1.380699242s ago: executing program 2 (id=10315): rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae601000000000088ca", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) 1.293306625s ago: executing program 3 (id=10316): socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) 1.199829469s ago: executing program 1 (id=10317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94a"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.151707073s ago: executing program 2 (id=10318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "1bc9a9019144"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 1.130518919s ago: executing program 0 (id=10319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002900), r0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006440)={&(0x7f0000004e80)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 1.056114215s ago: executing program 3 (id=10320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003e80)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x85}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 943.922935ms ago: executing program 1 (id=10321): socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55) shutdown$auto(0x200000003, 0x2) 895.577858ms ago: executing program 2 (id=10322): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x8002, 0x0) exit$auto(0xfff) close_range$auto(0x2, 0x8, 0x0) 873.283147ms ago: executing program 0 (id=10323): mprotect$auto(0x200000000000, 0x806122, 0xc) r0 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)=0x80) 804.984382ms ago: executing program 3 (id=10324): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r0, 0xc0c0128e, 0x300) 676.526706ms ago: executing program 0 (id=10325): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) 661.545101ms ago: executing program 1 (id=10326): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x17, 0x0, 0x8) 601.231898ms ago: executing program 3 (id=10327): close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x18, &(0x7f0000000040)=@task_fd_query={r0, 0xffffffffffffffff, 0x9, 0x8, 0x8, 0x7, 0xffffffffffffffff, 0x2, 0x4}, 0x92) 493.073324ms ago: executing program 0 (id=10328): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) 416.855428ms ago: executing program 1 (id=10329): close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x9, 0x8, r0, &(0x7f0000000200)='./cgroup\x00') 400.646001ms ago: executing program 3 (id=10330): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1f482e11f4423755, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x8}]}, 0x1c}}, 0x4004010) 296.057829ms ago: executing program 0 (id=10331): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x9, 0x70bd2f, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) 227.460196ms ago: executing program 1 (id=10332): r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r0, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) 190.297447ms ago: executing program 3 (id=10333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) 79.5834ms ago: executing program 0 (id=10334): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) 0s ago: executing program 1 (id=10335): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) getsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 93.314365][ T5828] cgroup: Unknown subsys name 'net' [ 93.446585][ T5828] cgroup: Unknown subsys name 'cpuset' [ 93.458039][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.236313][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.346121][ T807] cfg80211: failed to load regulatory.db [ 100.617937][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.635011][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.647135][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.656926][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.669704][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.699376][ T5163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.721920][ T5163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.730487][ T5163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.739588][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.742947][ T5163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.755136][ T5163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.766115][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.774907][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.785117][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.794755][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.828355][ T5163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.841640][ T5163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.851349][ T5163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.862381][ T5163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.872465][ T5163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.638057][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 101.688536][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 101.732586][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 101.901636][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 101.953662][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.961961][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.969418][ T5872] bridge_slave_0: entered allmulticast mode [ 101.977405][ T5872] bridge_slave_0: entered promiscuous mode [ 102.045818][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.053846][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.061348][ T5872] bridge_slave_1: entered allmulticast mode [ 102.069066][ T5872] bridge_slave_1: entered promiscuous mode [ 102.088522][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.095749][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.103162][ T5868] bridge_slave_0: entered allmulticast mode [ 102.110734][ T5868] bridge_slave_0: entered promiscuous mode [ 102.120138][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.128138][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.135570][ T5864] bridge_slave_0: entered allmulticast mode [ 102.143280][ T5864] bridge_slave_0: entered promiscuous mode [ 102.151383][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.159215][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.166624][ T5864] bridge_slave_1: entered allmulticast mode [ 102.174206][ T5864] bridge_slave_1: entered promiscuous mode [ 102.212757][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.220013][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.227371][ T5868] bridge_slave_1: entered allmulticast mode [ 102.234860][ T5868] bridge_slave_1: entered promiscuous mode [ 102.299608][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.312588][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.332988][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.345302][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.369354][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.392211][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.448114][ T5864] team0: Port device team_slave_0 added [ 102.466225][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.473968][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.481273][ T5871] bridge_slave_0: entered allmulticast mode [ 102.489352][ T5871] bridge_slave_0: entered promiscuous mode [ 102.510183][ T5864] team0: Port device team_slave_1 added [ 102.518528][ T5872] team0: Port device team_slave_0 added [ 102.525016][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.533045][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.541827][ T5871] bridge_slave_1: entered allmulticast mode [ 102.549386][ T5871] bridge_slave_1: entered promiscuous mode [ 102.558803][ T5868] team0: Port device team_slave_0 added [ 102.579442][ T5872] team0: Port device team_slave_1 added [ 102.618706][ T5868] team0: Port device team_slave_1 added [ 102.675672][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.682999][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.710031][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.720871][ T5869] Bluetooth: hci0: command tx timeout [ 102.729145][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.736421][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.762984][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.777682][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.799587][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.806753][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.833078][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.853228][ T5869] Bluetooth: hci1: command tx timeout [ 102.860603][ T5869] Bluetooth: hci2: command tx timeout [ 102.865400][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.875316][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.902077][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.915620][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.925710][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.932687][ T5869] Bluetooth: hci3: command tx timeout [ 102.938192][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.964199][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.977793][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.984917][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.011002][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.115904][ T5871] team0: Port device team_slave_0 added [ 103.141177][ T5868] hsr_slave_0: entered promiscuous mode [ 103.148465][ T5868] hsr_slave_1: entered promiscuous mode [ 103.161868][ T5864] hsr_slave_0: entered promiscuous mode [ 103.168565][ T5864] hsr_slave_1: entered promiscuous mode [ 103.175242][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 103.181083][ T5864] Cannot create hsr debugfs directory [ 103.189288][ T5871] team0: Port device team_slave_1 added [ 103.238846][ T5872] hsr_slave_0: entered promiscuous mode [ 103.245753][ T5872] hsr_slave_1: entered promiscuous mode [ 103.252990][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 103.258785][ T5872] Cannot create hsr debugfs directory [ 103.287951][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.295111][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.321973][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.334900][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.342139][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.368358][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.577317][ T5871] hsr_slave_0: entered promiscuous mode [ 103.584328][ T5871] hsr_slave_1: entered promiscuous mode [ 103.590675][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 103.596730][ T5871] Cannot create hsr debugfs directory [ 103.949952][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.967686][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.976322][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.989493][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.999014][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.010326][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.018755][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.032512][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.119099][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.131260][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.140847][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.151533][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.159807][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.172434][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.184484][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.196106][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.308130][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.328530][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.338689][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.350626][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.363931][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.376645][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.385121][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.395430][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.507399][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.517815][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.536808][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.547159][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.556357][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.566975][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.575343][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.586551][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.606056][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.693217][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.724703][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.732544][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.773076][ T5869] Bluetooth: hci0: command tx timeout [ 104.780096][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.787326][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.810357][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.849710][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.879711][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.910300][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.917536][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.932467][ T5869] Bluetooth: hci2: command tx timeout [ 104.932478][ T5163] Bluetooth: hci1: command tx timeout [ 104.966852][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.986031][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.993226][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.012325][ T5869] Bluetooth: hci3: command tx timeout [ 105.035256][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.042498][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.086891][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.094356][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.147531][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.235139][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.290306][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.297677][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.367131][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.374471][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.553865][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.684150][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.829677][ T5864] veth0_vlan: entered promiscuous mode [ 105.890093][ T5864] veth1_vlan: entered promiscuous mode [ 105.931140][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.970700][ T5868] veth0_vlan: entered promiscuous mode [ 106.005262][ T5868] veth1_vlan: entered promiscuous mode [ 106.040415][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.067875][ T5864] veth0_macvtap: entered promiscuous mode [ 106.103562][ T5864] veth1_macvtap: entered promiscuous mode [ 106.125692][ T5872] veth0_vlan: entered promiscuous mode [ 106.151511][ T5868] veth0_macvtap: entered promiscuous mode [ 106.171539][ T5868] veth1_macvtap: entered promiscuous mode [ 106.187097][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.206176][ T5872] veth1_vlan: entered promiscuous mode [ 106.229665][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.268274][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.279634][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.305262][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.314647][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.327453][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.362582][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.393914][ T5871] veth0_vlan: entered promiscuous mode [ 106.415524][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.424955][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.440044][ T5872] veth0_macvtap: entered promiscuous mode [ 106.449431][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.481021][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.506520][ T5872] veth1_macvtap: entered promiscuous mode [ 106.527477][ T5871] veth1_vlan: entered promiscuous mode [ 106.600475][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.625236][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.648162][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.704247][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.712690][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.731170][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.776787][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.787756][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.807698][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.812743][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835829][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.839584][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.854985][ T5869] Bluetooth: hci0: command tx timeout [ 106.879981][ T5871] veth0_macvtap: entered promiscuous mode [ 106.904523][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.933162][ T5871] veth1_macvtap: entered promiscuous mode [ 106.968393][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.985799][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.012313][ T5869] Bluetooth: hci2: command tx timeout [ 107.012329][ T5163] Bluetooth: hci1: command tx timeout [ 107.078224][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.094095][ T5869] Bluetooth: hci3: command tx timeout [ 107.137646][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.217760][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.228899][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.253100][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.267412][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.323258][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.367737][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.483048][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.525909][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.745996][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.784362][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.916153][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.942644][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.932481][ T5869] Bluetooth: hci0: command tx timeout [ 109.093351][ T5869] Bluetooth: hci1: command tx timeout [ 109.094589][ T5163] Bluetooth: hci2: command tx timeout [ 109.174167][ T5163] Bluetooth: hci3: command tx timeout [ 110.522383][ T5996] kexec: Could not allocate control_code_buffer [ 112.006275][ T5163] Bluetooth: hci1: unexpected subevent 0x01 length: 126 > 18 [ 112.088549][ T5163] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 115.975024][ T6249] Process accounting resumed [ 117.345173][ T6310] futex_wake_op: syz.0.186 tries to shift op by -1; fix this program [ 118.854660][ T30] audit: type=1800 audit(1776893856.808:2): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.215" name="lu_gp_id" dev="configfs" ino=8773 res=0 errno=0 [ 120.861181][ T5163] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 121.468603][ T6470] Process accounting resumed [ 122.472668][ T6509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.277042][ T6543] syz.0.302(6543): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 125.169077][ T30] audit: type=1800 audit(1776893863.128:3): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.337" name="lu_gp_id" dev="configfs" ino=9140 res=0 errno=0 [ 125.834727][ T6609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.854248][ T6609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.887857][ T6609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.904133][ T6609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.914353][ T6609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.931038][ T6609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.949113][ T6609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.971416][ T6609] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.004668][ T6609] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.022384][ T6609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.038986][ T6609] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.058525][ T6609] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.092207][ T5163] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.583721][ T6697] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[6697] [ 127.971856][ T5163] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.978043][ T5869] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.053041][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.171794][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.473516][ T6766] __vm_enough_memory: pid: 6766, comm: syz.1.408, bytes: 4398046511104 not enough memory for the allocation [ 130.052908][ T5869] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.054405][ T5163] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.143708][ T5163] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.252928][ T5163] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.131858][ T5163] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.133073][ T5869] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.211903][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.183077][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.192932][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.582076][ T6910] mmap: syz.2.481 (6910) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.899647][ T30] audit: type=1800 audit(1776893872.858:4): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="features" dev="configfs" ino=11587 res=0 errno=0 [ 135.933700][ T30] audit: type=1800 audit(1776893873.898:5): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.523" name="members" dev="configfs" ino=10778 res=0 errno=0 [ 136.366498][ T30] audit: type=1800 audit(1776893874.318:6): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.530" name="features" dev="configfs" ino=10799 res=0 errno=0 [ 136.913990][ T7036] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.749064][ T30] audit: type=1800 audit(1776893875.708:7): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.559" name="features" dev="configfs" ino=10862 res=0 errno=0 [ 138.481334][ T30] audit: type=1800 audit(1776893876.438:8): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.570" name="members" dev="configfs" ino=10888 res=0 errno=0 [ 143.027291][ T7269] nfs: Bad value for 'source' [ 143.968972][ T5869] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 144.212171][ T5869] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 144.506297][ T7327] syz_tun: tun_chr_ioctl cmd 1074812118 [ 146.228561][ T7387] Process accounting paused [ 147.338416][ T7429] syz.0.737 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.093273][ T7394] kexec: Could not allocate control_code_buffer [ 148.430186][ T5869] Bluetooth: hci0: unexpected event 0x34 length: 726 > 6 [ 150.340724][ T7477] kexec: Could not allocate control_code_buffer [ 151.656329][ T30] audit: type=1326 audit(1776895935.603:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a6559c819 code=0x0 [ 151.688653][ T7571] Process accounting paused [ 152.422743][ T7593] syz_tun: tun_chr_ioctl cmd 1074025675 [ 152.449507][ T7593] syz_tun: persist enabled [ 152.479813][ T7553] kexec: Could not allocate control_code_buffer [ 153.030730][ T30] audit: type=1326 audit(1776895936.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82af19c819 code=0x0 [ 154.590560][ T30] audit: type=1326 audit(1776895938.542:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.0.855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9373b9c819 code=0x0 [ 154.894312][ T7619] kexec: Could not allocate control_code_buffer [ 156.857317][ T7752] syz_tun: tun_chr_ioctl cmd 1074025677 [ 156.882867][ T7752] syz_tun: Linktype set failed because interface is up [ 157.605158][ T7784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.748729][ T30] audit: type=1800 audit(1776895941.700:12): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.918" name="dbroot" dev="configfs" ino=12923 res=0 errno=0 [ 158.339521][ T7814] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[7814] [ 159.629767][ T30] audit: type=1800 audit(1776895943.579:13): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.960" name="trace_pipe" dev="tracefs" ino=1486 res=0 errno=0 [ 160.217895][ T30] audit: type=1800 audit(1776895944.169:14): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.971" name="dummy_udc" dev="gadgetfs" ino=6994 res=0 errno=0 [ 160.307057][ T30] audit: type=1800 audit(1776895944.259:15): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.973" name="dbroot" dev="configfs" ino=14161 res=0 errno=0 [ 160.453651][ T7905] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 162.729590][ T30] audit: type=1800 audit(1776895946.678:16): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1025" name="dummy_udc" dev="gadgetfs" ino=6994 res=0 errno=0 [ 165.373915][ T8110] capability: warning: `syz.3.1077' uses deprecated v2 capabilities in a way that may be insecure [ 172.099086][ T30] audit: type=1800 audit(1776895956.037:17): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1208" name="trace_pipe" dev="tracefs" ino=1524 res=0 errno=0 [ 173.071189][ T30] audit: type=1800 audit(1776895957.017:18): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1227" name="features" dev="configfs" ino=15999 res=0 errno=0 [ 174.201915][ T8473] ima: policy update failed [ 174.221983][ T30] audit: type=1802 audit(1776895958.167:19): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1250" res=0 errno=0 [ 174.808793][ T8498] capability: warning: `syz.2.1261' uses 32-bit capabilities (legacy support in use) [ 175.652877][ T5869] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 176.556359][ T8545] Process accounting resumed [ 179.106277][ T8664] syz.1.1339 (8664): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.855814][ T8765] Process accounting resumed [ 183.001965][ T8805] can: request_module (can-proto-5) failed. [ 184.885827][ T8896] syz_tun: tun_chr_ioctl cmd 2147767511 [ 185.240078][ T5869] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 188.104202][ T5869] Bluetooth: hci1: unknown advertising packet type: 0xea [ 191.429498][ T5869] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 193.416333][ T9216] ======================================================= [ 193.416333][ T9216] WARNING: The mand mount option has been deprecated and [ 193.416333][ T9216] and is ignored by this kernel. Remove the mand [ 193.416333][ T9216] option from the mount to silence this warning. [ 193.416333][ T9216] ======================================================= [ 194.048067][ T5869] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 194.470464][ T9262] random: crng reseeded on system resumption [ 194.634089][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.643596][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.453527][ T9341] syz_tun: tun_chr_ioctl cmd 1074025676 [ 196.489711][ T9341] syz_tun: owner set to 111 [ 197.076823][ T9371] random: crng reseeded on system resumption [ 197.687886][ T9395] random: crng reseeded on system resumption [ 200.551412][ T9528] Invalid ELF header magic: != ELF [ 201.426561][ T30] audit: type=1800 audit(4294967303.734:20): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1777" name="version" dev="configfs" ino=18853 res=0 errno=0 [ 202.629497][ T9632] Unable to find swap-space signature [ 205.265810][ T9735] Unable to find swap-space signature [ 206.659452][ T9790] Process accounting paused [ 209.737793][ T9917] i2c i2c-0: delete_device: Can't find device in list [ 210.991349][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 211.005878][ T9957] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 211.026219][ T9957] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 211.066018][ T9957] page_type: f5(slab) [ 211.084829][ T9957] raw: 00fff00000000040 ffff88813fe87140 dead000000000100 dead000000000122 [ 211.100993][ T9957] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 211.110362][ T9957] head: 00fff00000000040 ffff88813fe87140 dead000000000100 dead000000000122 [ 211.126885][ T9957] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 211.150959][ T9957] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 211.160203][ T9957] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 211.215069][ T9957] page dumped because: unmovable page [ 211.227153][ T9957] page_owner tracks the page as allocated [ 211.270254][ T9957] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5212, tgid 5212 (udevd), ts 48448242912, free_ts 48437342353 [ 211.336273][ T9957] post_alloc_hook+0x153/0x170 [ 211.352873][ T9957] get_page_from_freelist+0x11a6/0x33b0 [ 211.388434][ T9957] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 211.415826][ T9957] new_slab+0xa6/0x6c0 [ 211.441228][ T9957] refill_objects+0x277/0x420 [ 211.463208][ T9957] __pcs_replace_empty_main+0x375/0x650 [ 211.476472][ T9957] __kmalloc_noprof+0x688/0x850 [ 211.491270][ T9957] tomoyo_realpath_from_path+0xb6/0x690 [ 211.523257][ T9957] tomoyo_path_perm+0x276/0x460 [ 211.552134][ T9957] security_inode_getattr+0x116/0x280 [ 211.570350][ T9957] vfs_fstat+0x4b/0xe0 [ 211.582176][ T9957] __do_sys_newfstat+0x8b/0x110 [ 211.593594][ T9957] do_syscall_64+0x10b/0xf80 [ 211.609444][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.623462][ T9957] page last free pid 5217 tgid 5217 stack trace: [ 211.636926][ T9957] __free_frozen_pages+0x747/0x1040 [ 211.664523][ T9957] qlist_free_all+0x47/0xf0 [ 211.674534][ T9957] kasan_quarantine_reduce+0x1a0/0x1f0 [ 211.693305][ T9957] __kasan_slab_alloc+0x69/0x90 [ 211.706245][ T9957] __kmalloc_cache_noprof+0x243/0x6f0 [ 211.723443][ T9957] kernfs_fop_open+0x23d/0xd50 [ 211.740459][ T9957] do_dentry_open+0x6d8/0x1660 [ 211.756412][ T9957] vfs_open+0x82/0x3f0 [ 211.765827][ T9957] path_openat+0x208c/0x31a0 [ 211.784547][ T9957] do_file_open+0x20e/0x430 [ 211.804121][ T9957] do_sys_openat2+0x10d/0x1e0 [ 211.842597][ T9957] __x64_sys_openat+0x12d/0x210 [ 211.853541][ T9957] do_syscall_64+0x10b/0xf80 [ 211.867296][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.924036][ T9987] i2c i2c-0: delete_device: Can't find device in list [ 212.000062][ T9957] Process accounting paused [ 212.136648][ T9991] sg_write: data in/out 262108/40 bytes for SCSI command 0x61-- guessing data in; [ 212.136648][ T9991] program syz.3.1972 not setting count and/or reply_len properly [ 214.150979][T10079] kAFS: Invalid Command on /proc/fs/afs/cells file [ 218.677078][T10237] futex_wake_op: syz.2.2092 tries to shift op by -2048; fix this program [ 218.700797][T10237] futex_wake_op: syz.2.2092 tries to shift op by -2048; fix this program [ 218.733708][T10239] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 218.755715][T10239] cec cec26: uevent: failed to send synthetic uevent: -22 [ 219.454234][T10269] bonding: no command found in bonding_masters - use +ifname or -ifname [ 225.871897][T10506] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 225.883553][T10506] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 225.909862][T10506] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 225.924569][T10506] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 225.937410][T10506] page dumped because: unmovable page [ 225.947435][T10506] page_owner info is not present (never set?) [ 227.588543][T10562] program syz.1.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.649129][T10562] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 228.386679][T10587] kafs: addr_prefs: Invalid Command [ 229.258452][T10611] syz.2.2273 uses obsolete (PF_INET,SOCK_PACKET) [ 230.349566][T10650] Setting dangerous option i915.mitigations - tainting kernel [ 230.909729][T10672] Setting dangerous option i915.mitigations - tainting kernel [ 231.968550][T10700] Setting dangerous option i915.mitigations - tainting kernel [ 233.477208][ T30] audit: type=1804 audit(4294967335.951:21): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2332" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=25 res=1 errno=0 [ 236.560796][T10827] Process accounting resumed [ 236.682484][T10845] program syz.0.2385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.753736][T10879] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 238.359696][T10896] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 240.873448][T10979] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.906899][T11013] bond0: no command found in slaves file - use +ifname or -ifname [ 241.956527][T11015] Process accounting resumed [ 242.860258][T11058] synth uevent: /module/null_blk: unknown uevent action string [ 243.252601][T11072] Setting dangerous option i915.mitigations - tainting kernel [ 243.293569][T11074] bond0: invalid ARP target specified [ 243.732504][T11094] Setting dangerous option i915.mitigations - tainting kernel [ 245.022871][ T30] audit: type=1800 audit(4294967347.561:22): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2528" name="features" dev="configfs" ino=23313 res=0 errno=0 [ 246.677491][T11218] kafs: addr_prefs: Too many elements in string [ 252.006525][T11450] : Can't lookup blockdev [ 252.019947][T11451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 252.678615][T11483] kernel read not supported for file /\*)A (pid: 11483 comm: syz.1.2696) [ 252.688045][ T30] audit: type=1800 audit(4294967355.271:23): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2696" name="\*)A" dev="mqueue" ino=25758 res=0 errno=0 [ 253.547521][T11517] : Can't lookup blockdev [ 255.594464][T11604] usb usb11: usbfs: interface 0 claimed by hub while 'syz.0.2753' sets config #7 [ 255.744828][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744916][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.819802][T11615] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1c88a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 255.819943][T11615] Call Trace: [ 255.819957][T11615] [ 255.819975][T11615] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 255.820024][T11615] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 255.820094][T11615] mce_cpu_restart+0xd5/0x1f0 [ 255.820136][T11615] ? __pfx_mce_cpu_restart+0x10/0x10 [ 255.820178][T11615] smp_call_function_many_cond+0x13d4/0x1700 [ 255.820246][T11615] ? __pfx_mce_cpu_restart+0x10/0x10 [ 255.820295][T11615] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.820357][T11615] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 255.820415][T11615] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 255.820480][T11615] ? __timer_delete_sync+0x151/0x1c0 [ 255.820543][T11615] ? __pfx_mce_cpu_restart+0x10/0x10 [ 255.820595][T11615] on_each_cpu_cond_mask+0x40/0x90 [ 255.820654][T11615] set_bank+0x240/0x3a0 [ 255.820692][T11615] ? __pfx_set_bank+0x10/0x10 [ 255.820729][T11615] ? find_held_lock+0x2b/0x80 [ 255.820775][T11615] ? sysfs_file_kobj+0xe4/0x290 [ 255.820830][T11615] ? sysfs_file_kobj+0xe4/0x290 [ 255.820888][T11615] ? __pfx_set_bank+0x10/0x10 [ 255.820923][T11615] dev_attr_store+0x58/0x80 [ 255.820962][T11615] ? __pfx_dev_attr_store+0x10/0x10 [ 255.821001][T11615] sysfs_kf_write+0xf2/0x150 [ 255.821061][T11615] kernfs_fop_write_iter+0x3e0/0x5f0 [ 255.821111][T11615] ? __pfx_sysfs_kf_write+0x10/0x10 [ 255.821172][T11615] vfs_write+0x6ac/0x1070 [ 255.821212][T11615] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 255.821266][T11615] ? __pfx_vfs_write+0x10/0x10 [ 255.821334][T11615] ksys_write+0x12a/0x250 [ 255.821382][T11615] ? __pfx_ksys_write+0x10/0x10 [ 255.821426][T11615] ? rcu_is_watching+0x12/0xc0 [ 255.821476][T11615] do_syscall_64+0x10b/0xf80 [ 255.821529][T11615] ? clear_bhb_loop+0x40/0x90 [ 255.821574][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.821611][T11615] RIP: 0033:0x7f2e6d19c819 [ 255.821649][T11615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.821682][T11615] RSP: 002b:00007f2e6df70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.821722][T11615] RAX: ffffffffffffffda RBX: 00007f2e6d415fa0 RCX: 00007f2e6d19c819 [ 255.821746][T11615] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 255.821768][T11615] RBP: 00007f2e6d232c91 R08: 0000000000000000 R09: 0000000000000000 [ 255.821789][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.821810][T11615] R13: 00007f2e6d416038 R14: 00007f2e6d415fa0 R15: 00007ffd41785dd8 [ 255.821856][T11615] [ 256.390282][T11625] kernel read not supported for file /\*)A (pid: 11625 comm: syz.0.2765) [ 256.390954][ T30] audit: type=1800 audit(4294967358.980:24): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2765" name="\*)A" dev="mqueue" ino=26007 res=0 errno=0 [ 257.090410][T11651] kernel read not supported for file /\*)A (pid: 11651 comm: syz.3.2776) [ 257.100382][ T30] audit: type=1800 audit(4294967359.704:25): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2776" name="\*)A" dev="mqueue" ino=19149 res=0 errno=0 [ 259.019423][T11729] syz_tun: tun_chr_ioctl cmd 1074812117 [ 259.433798][T11741] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 259.476132][T11741] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 263.952002][T11939] blkio.reset_stats is deprecated [ 264.117792][T11947] ACPI: Can not change Invalid GPE/Fixed Event status [ 265.835139][ T30] audit: type=1400 audit(4294967368.479:26): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12014 comm="syz.2.2953" [ 266.535320][T12040] Process accounting paused [ 267.175040][T12075] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 267.259006][T12075] CIFS mount error: No usable UNC path provided in device string! [ 267.259006][T12075] [ 267.270500][T12075] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.608355][T12094] delete_channel: no stack [ 267.689660][T12099] bond0: Unable to set down delay as MII monitoring is disabled [ 269.540336][ T30] audit: type=1400 audit(4294967372.199:27): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12192 comm="syz.1.3043" [ 270.105500][T12212] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 270.144106][T12212] pci 0000:00:01.3: PCI INT A: no GSI [ 270.145538][ T30] audit: type=1400 audit(4294967372.812:28): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12215 comm="syz.0.3054" [ 270.600774][T12236] bcache: register_bcache() error : failed to open device [ 271.461609][T12272] binder: binder_mmap: 12270 0-1000 bad vm_flags failed -1 [ 271.944048][T12289] Process accounting paused [ 272.499332][T12310] kAFS: Invalid Command on /proc/fs/afs/cells file [ 272.513944][T12311] QAT: Invalid ioctl 21531 [ 272.645863][T12315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 274.480724][ T30] audit: type=1800 audit(4294967377.174:29): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3146" name="discovery_nqn" dev="configfs" ino=27358 res=0 errno=0 [ 276.822691][T12511] smpboot: CPU 1 is now offline [ 278.680461][T12569] CIFS mount error: No usable UNC path provided in device string! [ 278.680461][T12569] [ 278.729296][T12569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 279.204216][ T30] audit: type=1800 audit(4294967381.909:30): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3233" name="discovery_nqn" dev="configfs" ino=28859 res=0 errno=0 [ 280.525858][T12631] nvme_fcloop: unknown parameter or missing value '1' [ 281.599379][T12663] delete_channel: no stack [ 284.759712][ T30] audit: type=1804 audit(4294967387.498:31): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3315" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 288.232559][T12879] ecryptfs_parse_packet_length: Error parsing packet length [ 288.268281][T12879] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 289.099455][ T30] audit: type=1804 audit(4294967391.860:32): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3391" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 289.834224][T12922] zswap: compressor Z(u not available [ 292.046665][T13020] scsi_mod.scan: string doesn't fit in 6 chars. [ 293.477933][T13063] vhci_hcd vhci_hcd.1: invalid port number 16 [ 293.512629][T13063] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 294.907576][T13106] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 295.509848][T13126] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 296.594991][T13164] Process accounting resumed [ 297.535855][T13205] program syz.2.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.601411][T13205] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.876866][T13317] QAT: failed to copy from user cfg_data. [ 301.277331][T12503] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 301.765526][T13369] wlan1: mtu less than device minimum [ 301.806609][T13371] kernel profiling enabled (shift: 0) [ 301.842926][T13373] process 'syz.0.3580' launched './file0' with NULL argv: empty string added [ 302.062545][T13378] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 303.332823][T13337] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.987270][T13465] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 305.401140][T13337] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.344811][T13371] Process accounting resumed [ 309.771295][ T30] audit: type=1800 audit(4294967322.652:33): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3675" name="members" dev="configfs" ino=31784 res=0 errno=0 [ 311.981682][T13668] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 314.199008][T13747] sysfs_service_op_show: Client not running :-5: [ 316.865177][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.876016][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.925567][ T30] audit: type=1800 audit(4294967337.891:34): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3890" name="members" dev="configfs" ino=33195 res=0 errno=0 [ 325.116007][ T30] audit: type=1400 audit(4294967338.092:35): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14107 comm="syz.2.3892" [ 325.401122][ T30] audit: type=1800 audit(4294967338.373:36): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3896" name="dbroot" dev="configfs" ino=33236 res=0 errno=0 [ 327.707485][T12503] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 328.474946][ T30] audit: type=1800 audit(4294967341.469:37): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3933" name="dbroot" dev="configfs" ino=33503 res=0 errno=0 [ 329.091570][T14098] Process accounting paused [ 329.752038][T12503] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.460618][T14297] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 330.515656][T14297] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 331.820016][T13337] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.933363][T14353] virtio-pci 0000:00:03.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 333.079749][T14395] ecryptfs_miscdev_write: Invalid packet size [192] [ 333.487357][T12503] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 333.497045][T12503] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 336.267006][T14522] Process accounting paused [ 338.990201][T14589] vhci_hcd vhci_hcd.2: invalid port number 16 [ 339.055630][T14589] vhci_hcd vhci_hcd.2: invalid port number 16 [ 339.893742][T14623] ubi0: attaching mtd0 [ 339.928084][T14623] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 343.956381][T14750] Scaler: ================= START STATUS ================= [ 344.036019][T14750] Scaler: ================== END STATUS ================== [ 344.932438][T12503] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 344.942901][T12503] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 346.272478][T14847] cougar: G6 mapped to F18 [ 346.672973][T14858] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 348.047860][T14905] block2mtd: illegal erase size [ 349.344469][T14945] qrtr: Invalid version 0 [ 350.729102][T15002] usb usb26: usbfs: process 15002 (syz.0.4236) did not claim interface 0 before use [ 351.437786][T15027] rnbd_client L213: map_device: Parameters missing [ 352.342495][T15064] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 352.640520][T15075] usb usb26: usbfs: process 15075 (syz.1.4272) did not claim interface 0 before use [ 353.427368][T12503] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 353.434926][T12503] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 355.285545][T15166] synth uevent: /bus/mei: unknown uevent action string [ 357.166647][T15233] synth uevent: /bus/mei: unknown uevent action string [ 358.084691][T15272] synth uevent: /bus/mei: unknown uevent action string [ 358.870791][T15298] CIFS mount error: No usable UNC path provided in device string! [ 358.870791][T15298] [ 358.919098][T15298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.022220][T15301] Process accounting resumed [ 359.769907][T15330] program syz.2.4359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.867795][T15332] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 360.350002][T12503] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 360.359038][T12503] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 362.504708][T15435] sd 0:0:1:0: PR command failed: 1026 [ 362.527717][T15435] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 362.557919][T15435] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 364.795766][T15494] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.393330][T15543] Process accounting resumed [ 366.516234][T15550] bond0: option slaves: interface - does not exist! [ 368.657148][T15619] block2mtd: parameter too long [ 368.712439][ T30] audit: type=1807 audit(4294967381.909:38): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 368.742595][T15620] ima: policy update failed [ 368.773384][ T30] audit: type=1802 audit(4294967381.949:39): pid=15621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4472" res=0 errno=0 [ 368.901757][ T30] audit: type=1802 audit(4294967381.969:40): pid=15620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4472" res=0 errno=0 [ 370.316543][T15684] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 372.351765][T15759] Invalid ELF header magic: != ELF [ 374.838786][ T30] audit: type=1800 audit(4294967388.071:41): pid=15858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4575" name="dbroot" dev="configfs" ino=37818 res=0 errno=0 [ 374.888293][T15858] db_root: cannot open: /dev/audio1 [ 374.948551][T15858] db_root: not a directory: /dev/audio1 [ 375.045210][T15864] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 379.374042][T16023] warning: `syz.1.4648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 379.500521][T16029] bond0: invalid ARP target specified [ 387.375927][T16314] block nbd0: NBD_DISCONNECT [ 388.935783][T16369] Process accounting paused [ 389.048648][T16377] block2mtd: illegal erase size [ 391.356221][T16458] nvme_fabrics: missing parameter 'transport=%s' [ 391.385835][T16458] nvme_fabrics: missing parameter 'nqn=%s' [ 392.303116][T16500] usb usb3: usbfs: process 16500 (syz.2.4850) did not claim interface 0 before use [ 392.741480][ T30] audit: type=1800 audit(4294967406.064:42): pid=16513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4856" name="sr0" dev="devtmpfs" ino=2807 res=0 errno=0 [ 394.889700][T16573] deleting an unspecified loop device is not supported. [ 396.472497][T16626] Process accounting paused [ 396.638625][T16640] ima: policy update failed [ 396.663594][ T30] audit: type=1802 audit(4294967410.004:43): pid=16640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4910" res=0 errno=0 [ 396.864904][T16648] bond0: invalid ARP target specified [ 397.552982][T16677] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 397.612282][T16677] ep_00: uevent: failed to send synthetic uevent: -22 [ 398.176585][T16701] Line length is too long: Should be less than 4094 [ 398.889103][T13337] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 398.889134][T13337] Bluetooth: hci2: unexpected subevent 0x06 length: 725 > 10 [ 399.707417][ T30] audit: type=1806 audit(4294967413.060:44): res=-14 [ 400.902604][T13337] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.181023][T16809] WARNING! power/level is deprecated; use power/control instead [ 401.583694][ T30] audit: type=1800 audit(4294967414.960:45): pid=16823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4988" name="lu_gp_id" dev="configfs" ino=40555 res=0 errno=0 [ 402.220738][T16845] ima: policy update failed [ 402.255375][ T30] audit: type=1802 audit(4294967415.623:46): pid=16845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4998" res=0 errno=0 [ 408.105396][T17087] vhci_hcd vhci_hcd.2: invalid port number 194 [ 408.133444][T17087] vhci_hcd vhci_hcd.2: invalid port number 194 [ 408.611174][T17105] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 410.507891][T17196] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 410.639585][T17198] usbip-vudc usbip-vudc.0: gadget not bound [ 411.065152][T17209] nvme_fcloop: unknown parameter or missing value '7' [ 411.135989][T17213] vivid-007: ================= START STATUS ================= [ 411.175118][T17213] vivid-007: Generate PTS: true [ 411.212173][T17213] vivid-007: Generate SCR: true [ 411.233481][T17213] tpg source WxH: 320x240 (Y'CbCr) [ 411.259826][T17213] tpg field: 1 [ 411.274586][T17213] tpg crop: (0,0)/320x240 [ 411.297567][T17213] tpg compose: (0,0)/320x240 [ 411.320653][T17213] tpg colorspace: 8 [ 411.338818][T17213] tpg transfer function: 0/0 [ 411.362427][T17213] tpg Y'CbCr encoding: 0/0 [ 411.391689][T17213] tpg quantization: 0/0 [ 411.418070][T17213] tpg RGB range: 0/2 [ 411.442631][T17213] vivid-007: ================== END STATUS ================== [ 413.891610][T17306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.947172][T17435] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 416.947172][T17435] M' is too long [ 417.010716][T17435] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 417.010716][T17435] W ' is too long [ 418.126397][ T30] audit: type=1800 audit(4294967431.576:47): pid=17498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5243" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 419.192289][T17529] Process accounting resumed [ 422.495544][T17655] nvme_fcloop: unknown parameter or missing value '' [ 422.609727][T17660] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 424.169272][ T30] audit: type=1326 audit(4294967437.657:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.1.5330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82af19c819 code=0x0 [ 424.320676][T17739] bonding: no command found in bonding_masters - use +ifname or -ifname [ 424.739496][T17750] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 425.542952][T17791] mmap: syz.2.5344 (17791) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 426.526993][T17820] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 426.852542][T17808] Process accounting resumed [ 426.891025][T17829] [ 427.543925][T17850] program syz.3.5368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.605518][T17854] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 427.870860][T17862] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 428.157396][T17869] [U] ^\ [ 428.477849][T17883] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 428.737867][T17890] process 'syz.2.5386' launched '/dev/fd/3' with NULL argv: empty string added [ 429.580885][T17919] usb usb15: usbfs: process 17919 (syz.3.5397) did not claim interface 0 before use [ 430.671498][T17975] vivid-007: ================= START STATUS ================= [ 430.716760][T17975] vivid-007: Enable Output Cropping: true [ 430.754634][T17975] vivid-007: Enable Output Composing: true [ 430.781106][T17975] vivid-007: Enable Output Scaler: true [ 430.808302][T17975] vivid-007: Tx RGB Quantization Range: Automatic [ 430.844281][T17975] vivid-007: Transmit Mode: HDMI [ 430.863820][T17975] vivid-007: Hotplug Present: 0x00000000 [ 430.883084][T17975] vivid-007: RxSense Present: 0x00000000 [ 430.902230][T17975] vivid-007: EDID Present: 0x00000000 [ 430.934070][T17975] vivid-007: ================== END STATUS ================== [ 434.192578][ T30] audit: type=1800 audit(4294967447.739:49): pid=18097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5462" name="dbroot" dev="configfs" ino=43862 res=0 errno=0 [ 435.464724][T18145] aoe: can't write to that file. [ 438.927541][ T30] audit: type=1800 audit(4294967452.494:50): pid=18273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5529" name="lu_gp_id" dev="configfs" ino=44354 res=0 errno=0 [ 442.955254][T18437] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 442.955696][T18435] ima: policy update failed [ 443.018972][ T30] audit: type=1802 audit(4294967456.605:51): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5580" res=0 errno=0 [ 443.733414][T13337] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 447.618379][T18633] aoe: could not set interface list: too many interfaces [ 449.248545][T18677] Process accounting paused [ 453.405909][T18820] aoe: invalid device specification [ 454.964512][T18866] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 456.590656][T18914] program syz.1.5761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.916325][T18920] Process accounting paused [ 458.396747][T18973] kAFS: unparsable volume name [ 459.584248][T19018] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 460.117562][T19052] ima: policy update failed [ 460.145773][ T30] audit: type=1802 audit(4294967473.824:52): pid=19052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5812" res=0 errno=0 [ 460.538612][T19067] ubi31: attaching mtd0 [ 460.705907][T19067] ubi31: scanning is finished [ 460.754256][T19067] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 461.193110][T19067] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 462.504163][T19125] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 462.795406][T19150] block2mtd: Using custom MTD label '' for dev [ 462.835203][T19150] block2mtd: error: cannot open device [ 466.742771][T19309] ptp ptp0: only physical clock in use now [ 467.547585][T19344] syz.1.5916 (19344): attempted to duplicate a private mapping with mremap. This is not supported. [ 468.234737][ T30] audit: type=1806 audit(4294967481.956:53): xattr="" res=-22 [ 470.097855][T19443] TCP: TCP_TX_DELAY enabled [ 473.412585][T19571] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 473.449307][T19571] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 473.711477][T19583] usbip-vudc usbip-vudc.0: gadget not bound [ 475.310916][T19642] delete_channel: no stack [ 475.560508][T19655] syz.1.6055 (19655): drop_caches: 0 [ 477.451378][ T30] audit: type=1800 audit(4294967491.214:54): pid=19712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6078" name="dbroot" dev="configfs" ino=48136 res=0 errno=0 [ 477.687249][T19718] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 477.732843][T19718] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 478.913350][T19771] ubi31: attaching mtd0 [ 478.965677][T19771] ubi31: scanning is finished [ 479.006866][T19771] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 479.031931][T19773] ima: policy update failed [ 479.059689][ T30] audit: type=1802 audit(4294967492.832:55): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6106" res=0 errno=0 [ 479.195425][T19771] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 479.361585][T19771] Process accounting resumed [ 480.860872][T19843] syz_tun: tun_chr_ioctl cmd 1074025681 [ 483.905909][T19967] ptp ptp0: only physical clock in use now [ 484.544495][T19991] Invalid input. Must be >= 4608 [ 484.989340][T20008] syz.3.6207: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 485.062942][T20008] CPU: 0 UID: 0 PID: 20008 Comm: syz.3.6207 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 485.062987][T20008] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 485.063006][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.063023][T20008] Call Trace: [ 485.063031][T20008] [ 485.063040][T20008] dump_stack_lvl+0x100/0x190 [ 485.063072][T20008] warn_alloc.cold+0x95/0x1c1 [ 485.063098][T20008] ? __pfx_warn_alloc+0x10/0x10 [ 485.063143][T20008] ? __lock_acquire+0x4a5/0x2630 [ 485.063178][T20008] __vmalloc_node_range_noprof+0x136c/0x1630 [ 485.063218][T20008] ? rcu_is_watching+0x12/0xc0 [ 485.063248][T20008] ? trace_contention_end+0x122/0x170 [ 485.063274][T20008] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 485.063307][T20008] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 485.063337][T20008] ? find_held_lock+0x2b/0x80 [ 485.063368][T20008] ? tomoyo_path_number_perm+0x28f/0x580 [ 485.063411][T20008] ? tomoyo_path_number_perm+0x28f/0x580 [ 485.063454][T20008] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 485.063487][T20008] ? __pfx___mutex_lock+0x10/0x10 [ 485.063532][T20008] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.063571][T20008] ? futex_wait+0x11e/0x370 [ 485.063607][T20008] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 485.063638][T20008] __vmalloc_node_noprof+0xad/0xf0 [ 485.063671][T20008] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 485.063705][T20008] dvb_dvr_do_ioctl+0x15d/0x270 [ 485.063741][T20008] dvb_usercopy+0x167/0x340 [ 485.063770][T20008] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 485.063803][T20008] ? __pfx_dvb_usercopy+0x10/0x10 [ 485.063844][T20008] ? __fget_files+0x21f/0x3d0 [ 485.063877][T20008] dvb_dvr_ioctl+0x29/0x40 [ 485.063906][T20008] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 485.063937][T20008] __x64_sys_ioctl+0x18e/0x210 [ 485.063963][T20008] do_syscall_64+0x10b/0xf80 [ 485.064008][T20008] ? clear_bhb_loop+0x40/0x90 [ 485.064039][T20008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.064064][T20008] RIP: 0033:0x7f2e6d19c819 [ 485.064084][T20008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.064108][T20008] RSP: 002b:00007f2e6df70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.064135][T20008] RAX: ffffffffffffffda RBX: 00007f2e6d415fa0 RCX: 00007f2e6d19c819 [ 485.064152][T20008] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 485.064167][T20008] RBP: 00007f2e6d232c91 R08: 0000000000000000 R09: 0000000000000000 [ 485.064182][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.064196][T20008] R13: 00007f2e6d416038 R14: 00007f2e6d415fa0 R15: 00007ffd41785dd8 [ 485.064227][T20008] [ 485.065847][T20008] Mem-Info: [ 485.738806][ T30] audit: type=1806 audit(4294967499.507:56): xattr="" res=-22 [ 485.984213][T20038] syz_tun: tun_chr_ioctl cmd 1074025694 [ 486.165534][T20008] active_anon:5439 inactive_anon:0 isolated_anon:0 [ 486.165534][T20008] active_file:574 inactive_file:55652 isolated_file:0 [ 486.165534][T20008] unevictable:768 dirty:221 writeback:0 [ 486.165534][T20008] slab_reclaimable:11074 slab_unreclaimable:91925 [ 486.165534][T20008] mapped:24539 shmem:1357 pagetables:1461 [ 486.165534][T20008] sec_pagetables:0 bounce:0 [ 486.165534][T20008] kernel_misc_reclaimable:0 [ 486.165534][T20008] free:1130343 free_pcp:12574 free_cma:0 [ 486.377735][T20008] Node 0 active_anon:21704kB inactive_anon:0kB active_file:2296kB inactive_file:222472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98104kB dirty:884kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10736kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 486.534784][T20008] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 486.697998][T20008] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.837189][T20008] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 486.876766][T20063] Process accounting resumed [ 486.882200][T20008] Node 0 DMA32 free:574016kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21680kB inactive_anon:0kB active_file:2296kB inactive_file:222480kB unevictable:1536kB writepending:916kB zspages:8kB present:3129332kB managed:2535488kB mlocked:0kB bounce:0kB free_pcp:40848kB local_pcp:40848kB free_cma:0kB [ 487.025693][T20008] lowmem_reserve[]: 0 0 0 0 0 [ 487.041739][T20008] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1004kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 487.167657][T20008] lowmem_reserve[]: 0 0 0 0 0 [ 487.191723][T20008] Node 1 Normal free:3923844kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11580kB local_pcp:11580kB free_cma:0kB [ 487.337746][T20008] lowmem_reserve[]: 0 0 0 0 0 [ 487.363749][T20008] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 487.421815][T20008] Node 0 DMA32: 2702*4kB (UM) 1691*8kB (UME) 1201*16kB (UM) 535*32kB (UM) 235*64kB (ME) 491*128kB (UM) 343*256kB (UME) 205*512kB (UM) 115*1024kB (UM) 19*2048kB (UME) 21*4096kB (M) = 574016kB [ 487.515376][T20008] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 487.552036][T20008] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 8*16kB (UM) 10*32kB (UM) 8*64kB (UM) 5*128kB (UM) 1*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 955*4096kB (UM) = 3923844kB [ 487.619053][T20008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.669271][T20008] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 487.713187][T20008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.756156][T20008] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 487.805849][T20008] 57867 total pagecache pages [ 487.826639][T20008] 0 pages in swap cache [ 487.846097][T20008] Free swap = 124988kB [ 487.864657][T20008] Total swap = 124996kB [ 487.878367][T20008] 2097051 pages RAM [ 487.892481][T20008] 0 pages HighMem/MovableOnly [ 487.913000][T20008] 431313 pages reserved [ 487.928069][T20008] 0 pages cma reserved [ 488.645811][T20066] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 494.166406][T20300] Format for deleting device is "id" (uint). [ 495.054728][T20329] ICMPv6: process `syz.0.6345' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 495.736708][T20357] warn_alloc: 1 callbacks suppressed [ 495.736726][T20357] syz.2.6353: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 495.844857][T20357] CPU: 0 UID: 0 PID: 20357 Comm: syz.2.6353 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 495.844901][T20357] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 495.844912][T20357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 495.844927][T20357] Call Trace: [ 495.844934][T20357] [ 495.844943][T20357] dump_stack_lvl+0x100/0x190 [ 495.844974][T20357] warn_alloc.cold+0x95/0x1c1 [ 495.845000][T20357] ? __pfx_warn_alloc+0x10/0x10 [ 495.845050][T20357] ? __lock_acquire+0x4a5/0x2630 [ 495.845085][T20357] __vmalloc_node_range_noprof+0x136c/0x1630 [ 495.845126][T20357] ? rcu_is_watching+0x12/0xc0 [ 495.845155][T20357] ? trace_contention_end+0x122/0x170 [ 495.845181][T20357] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 495.845214][T20357] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 495.845243][T20357] ? find_held_lock+0x2b/0x80 [ 495.845275][T20357] ? tomoyo_path_number_perm+0x28f/0x580 [ 495.845314][T20357] ? tomoyo_path_number_perm+0x28f/0x580 [ 495.845356][T20357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 495.845392][T20357] ? __pfx___mutex_lock+0x10/0x10 [ 495.845437][T20357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.845476][T20357] ? futex_wait+0x11e/0x370 [ 495.845512][T20357] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 495.845542][T20357] __vmalloc_node_noprof+0xad/0xf0 [ 495.845575][T20357] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 495.845610][T20357] dvb_dvr_do_ioctl+0x15d/0x270 [ 495.845645][T20357] dvb_usercopy+0x167/0x340 [ 495.845674][T20357] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 495.845707][T20357] ? __pfx_dvb_usercopy+0x10/0x10 [ 495.845757][T20357] ? __fget_files+0x21f/0x3d0 [ 495.845791][T20357] dvb_dvr_ioctl+0x29/0x40 [ 495.845820][T20357] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 495.845852][T20357] __x64_sys_ioctl+0x18e/0x210 [ 495.845878][T20357] do_syscall_64+0x10b/0xf80 [ 495.845916][T20357] ? clear_bhb_loop+0x40/0x90 [ 495.845946][T20357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.845971][T20357] RIP: 0033:0x7f1a6559c819 [ 495.845991][T20357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.846014][T20357] RSP: 002b:00007f1a664d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.846037][T20357] RAX: ffffffffffffffda RBX: 00007f1a65815fa0 RCX: 00007f1a6559c819 [ 495.846053][T20357] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 495.846068][T20357] RBP: 00007f1a65632c91 R08: 0000000000000000 R09: 0000000000000000 [ 495.846083][T20357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.846097][T20357] R13: 00007f1a65816038 R14: 00007f1a65815fa0 R15: 00007ffc28df08c8 [ 495.846129][T20357] [ 496.168582][T20357] Mem-Info: [ 496.171853][T20357] active_anon:5148 inactive_anon:1 isolated_anon:0 [ 496.171853][T20357] active_file:602 inactive_file:53439 isolated_file:0 [ 496.171853][T20357] unevictable:768 dirty:155 writeback:0 [ 496.171853][T20357] slab_reclaimable:11071 slab_unreclaimable:91902 [ 496.171853][T20357] mapped:24232 shmem:1357 pagetables:1437 [ 496.171853][T20357] sec_pagetables:0 bounce:0 [ 496.171853][T20357] kernel_misc_reclaimable:0 [ 496.171853][T20357] free:1130946 free_pcp:12913 free_cma:0 [ 496.218397][T20357] Node 0 active_anon:20592kB inactive_anon:4kB active_file:2408kB inactive_file:213620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96928kB dirty:620kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10624kB pagetables:5576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 496.254101][T20357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 496.287205][T20357] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.318739][T20357] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 496.325337][T20357] Node 0 DMA32 free:583820kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20592kB inactive_anon:4kB active_file:2408kB inactive_file:213620kB unevictable:1536kB writepending:620kB zspages:8kB present:3129332kB managed:2535488kB mlocked:0kB bounce:0kB free_pcp:40800kB local_pcp:40800kB free_cma:0kB [ 496.359198][T20357] lowmem_reserve[]: 0 0 0 0 0 [ 496.364072][T20357] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1004kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 496.394344][T20357] lowmem_reserve[]: 0 0 0 0 0 [ 496.399215][T20357] Node 1 Normal free:3924600kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10824kB local_pcp:10824kB free_cma:0kB [ 496.433126][T20357] lowmem_reserve[]: 0 0 0 0 0 [ 496.438893][T20357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 496.461984][T20357] Node 0 DMA32: 2749*4kB (UM) 1661*8kB (UME) 1207*16kB (UM) 554*32kB (UME) 236*64kB (ME) 486*128kB (UM) 339*256kB (UME) 204*512kB (UM) 114*1024kB (UM) 21*2048kB (UME) 23*4096kB (M) = 583820kB [ 496.516302][T20357] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 496.581846][T20357] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 9*16kB (UM) 9*32kB (UM) 8*64kB (UM) 5*128kB (UM) 2*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 955*4096kB (UM) = 3924600kB [ 496.661553][T20357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.700948][T20357] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 496.749615][T20357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.782264][T20357] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 496.817194][T20357] 55396 total pagecache pages [ 496.830879][T20357] 2 pages in swap cache [ 496.845408][T20357] Free swap = 124972kB [ 496.862637][T20357] Total swap = 124996kB [ 496.894470][T20357] 2097051 pages RAM [ 496.905040][T20357] 0 pages HighMem/MovableOnly [ 496.917492][T20357] 431313 pages reserved [ 496.946705][T20357] 0 pages cma reserved [ 497.245000][T20386] syz_tun: tun_chr_ioctl cmd 35111 [ 497.488681][T20395] binder: 20392:20395 ioctl c0046209 9 returned -22 [ 500.018673][T13337] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 501.402535][T20522] [U] 0="/ [ 501.420929][T20522] [U] [ 501.434081][T20522] [U] EeQ@ [ 501.452583][T20521] [U]  [ 503.751199][T20591] Format for adding new port is "id [perm_addr]" (uint MAC). [ 505.155151][ T30] audit: type=1800 audit(4294967519.068:57): pid=20651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6477" name="lu_gp_id" dev="configfs" ino=50739 res=0 errno=0 [ 505.185568][T20651] kstrtoul() returned -22 for lu_gp_id [ 506.772428][ T30] audit: type=1800 audit(4294967520.697:58): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6506" name="lu_gp_id" dev="configfs" ino=50931 res=0 errno=0 [ 506.804249][T20716] kstrtoul() returned -22 for lu_gp_id [ 507.511694][T20744] QAT: Device 250 not found [ 508.298607][T20771] binder: 20770:20771 ioctl c0306201 0 returned -14 [ 509.392767][T20801] Process accounting paused [ 511.554818][T20889] binder: 20888:20889 ioctl c018620c 200000000080 returned -1 [ 512.524304][T20917] i2c i2c-0: delete_device: Can't parse I2C address [ 512.664488][T13337] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 512.991727][T20872] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 513.365309][T20962] usb usb22: usbfs: process 20962 (syz.1.6601) did not claim interface 1 before use [ 515.128306][T13337] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 515.128349][T13337] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 515.143265][T13337] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 515.391050][T21040] : Can't lookup blockdev [ 516.421134][T13337] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 516.814416][T21109] Process accounting paused [ 517.381303][T21132] kafs: addr_prefs: Invalid Command [ 517.837054][T13337] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 520.931326][T13337] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 522.272397][T21249] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 524.994467][T21348] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 527.421665][T21432] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 527.674730][T21484] usb usb4: usbfs: process 21484 (syz.3.6799) did not claim interface 0 before use [ 527.711061][T21488] usb usb2: usbfs: process 21488 (syz.0.6800) did not claim interface 4 before use [ 530.164307][T21503] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 532.043954][T21632] batman_adv: Routing algorithm '7' is not supported [ 532.740169][T21661] i2c i2c-0: new_device: Missing parameters [ 534.613167][T21722] bond0: no command found in slaves file - use +ifname or -ifname [ 536.476166][T21792] CIFS: VFS: UNC: path must begin with // or \\ [ 536.498605][T21790] bond0: option mode: unable to set because the bond device is up [ 536.511471][T21792] Malformed UNC in devname [ 536.511471][T21792] [ 536.530700][T21792] CIFS: VFS: Malformed UNC in devname [ 538.250667][T21840] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 539.446058][T21846] Process accounting resumed [ 539.598893][T21858] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 539.872694][T21868] syz.1.6968 uses obsolete (PF_INET,SOCK_PACKET) [ 540.145221][T21877] QAT: failed to copy from user. [ 541.194798][T21918] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.129797][T21957] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 542.203678][T21956] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 542.415598][T21966] overlayfs: "check_copy_up" module option is obsolete [ 543.821157][T13337] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 544.537931][T22053] vhci_hcd vhci_hcd.2: invalid port number 135 [ 544.570833][T22053] vhci_hcd vhci_hcd.2: invalid port number 135 [ 544.699757][T22059] kAFS: Invalid Command on /proc/fs/afs/cells file [ 546.406183][T22126] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x3-- guessing data in; [ 546.406183][T22126] program syz.2.7081 not setting count and/or reply_len properly [ 547.258772][T22125] Process accounting resumed [ 547.763819][T22171] block2mtd: device name too long [ 549.934277][T22257] : Can't lookup blockdev [ 549.949333][ T30] audit: type=1800 audit(4294967564.091:59): pid=22259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7137" name="lu_gp_id" dev="configfs" ino=55158 res=0 errno=0 [ 549.979114][T22259] ALUA LU Group already has a valid ID, ignoring request [ 550.216372][T22266] vhci_hcd vhci_hcd.2: invalid port number 16 [ 550.247189][T22266] vhci_hcd vhci_hcd.2: invalid port number 16 [ 554.798503][T22441] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 556.669247][T22514] bond0: invalid ARP target specified [ 558.001046][T22558] sg_write: data in/out 262364/16 bytes for SCSI command 0x61-- guessing data in; [ 558.001046][T22558] program syz.3.7266 not setting count and/or reply_len properly [ 559.372513][T22603] sd 0:0:1:0: PR command failed: 1026 [ 559.398518][T22603] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 559.428278][T22603] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 561.301111][T22659] [U] ^Z [ 563.462189][T22728] ceph: Failed to parse sending metrics switch value 'P^' [ 563.726180][T22738] QAT: failed to copy from user cfg_data. [ 569.418772][T22958] QAT: Stopping all acceleration devices. [ 569.564295][T22956] Process accounting paused [ 570.037193][T22977] program syz.0.7440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.767591][T23006] Setting dangerous option i915.mitigations - tainting kernel [ 570.814374][T23006] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 571.213208][T13337] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 573.930412][T23112] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 573.930412][T23112] program syz.2.7487 not setting count and/or reply_len properly [ 574.472812][T23129] bond0: invalid ARP target specified [ 577.137709][T23226] Process accounting paused [ 577.743752][T23256] serial 00:02: in use; can't configure [ 578.853696][T23294] syz.0.7556 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 588.269544][T23633] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 588.313236][T23633] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 588.583089][T23642] kAFS: Invalid Command on /proc/fs/afs/cells file [ 590.269032][T23707] vivid-003: ================= START STATUS ================= [ 590.307053][T23707] vivid-003: Radio HW Seek Mode: Bounded [ 590.326844][T23706] zram0: detected capacity change from 0 to 16 [ 590.347554][T23707] vivid-003: Radio Programmable HW Seek: false [ 590.370902][T23707] vivid-003: RDS Rx I/O Mode: Block I/O [ 590.402779][T23707] vivid-003: Generate RBDS Instead of RDS: false [ 590.451022][T23707] vivid-003: RDS Reception: true [ 590.474136][T23707] vivid-003: RDS Program Type: 0 inactive [ 590.514739][T23707] vivid-003: RDS PS Name: inactive [ 590.530068][T23714] QAT: failed to copy from user cfg_data. [ 590.542689][T23707] vivid-003: RDS Radio Text: inactive [ 590.579639][T23707] vivid-003: RDS Traffic Announcement: false inactive [ 590.608159][T23707] vivid-003: RDS Traffic Program: false inactive [ 590.649489][T23707] vivid-003: RDS Music: false inactive [ 590.687215][T23707] vivid-003: ================== END STATUS ================== [ 591.134843][T13337] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 591.134876][T13337] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 591.152646][T13337] Bluetooth: hci2: Malformed LE Event: 0x1b [ 591.688302][T23758] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 591.718100][T23758] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 591.743826][T23758] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 591.780586][T23758] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 591.809084][T23758] page dumped because: unmovable page [ 591.827610][T23758] page_owner tracks the page as allocated [ 591.848196][T23758] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1772406116, free_ts 0 [ 591.894053][T23758] register_early_stack+0x74/0xaf [ 591.913003][T23758] init_page_owner+0x4c/0xa10 [ 591.928331][T23758] page_ext_init+0x71d/0x780 [ 591.945538][T23758] mm_core_init+0x229/0x270 [ 591.960455][T23758] page_owner free stack trace missing [ 592.113881][T13337] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 592.113913][T13337] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 592.129282][T13337] Bluetooth: hci2: Dropping invalid advertising data [ 592.136049][T13337] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 592.136082][T13337] Bluetooth: hci2: unknown advertising packet type: 0x8b [ 592.145068][T13337] Bluetooth: hci2: unknown advertising packet type: 0xee [ 592.200722][T23768] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 592.254162][T23768] net gretap0: uevent: failed to send synthetic uevent: -22 [ 592.462142][T23778] < [ 594.142526][T23790] block loop4: the capability attribute has been deprecated. [ 597.790405][T23920] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 599.628894][T23986] Process accounting resumed [ 600.037895][ T30] audit: type=1806 audit(4294967614.411:60): xattr="." res=0 [ 601.861232][T24074] writes to the poll attribute are ignored. [ 601.896648][T24074] please use driver specific parameters instead. [ 602.196424][ T9] usb usb40-port5: attempt power cycle [ 602.863952][ T9] usb usb40-port5: unable to enumerate USB device [ 604.777160][T24177] capability: warning: `syz.3.7931' uses deprecated v2 capabilities in a way that may be insecure [ 605.222306][T24180] hub 1-0:1.0: USB hub found [ 605.283418][T24180] hub 1-0:1.0: 1 port detected [ 606.186556][T24230] aoe: copy from user failed [ 606.210545][T24230] aoe: could not set interface list: too many interfaces [ 607.073389][T24260] Process accounting resumed [ 611.319081][T24398] zram: Added device: zram1 [ 614.585349][T24530] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[24530] [ 614.609755][T24513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.229658][T24513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.488464][T24513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.671278][T24513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.717559][T24571] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 618.166087][T24669] vhci_hcd vhci_hcd.2: invalid port number 253 [ 618.196575][T24669] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 618.539977][T24685] cougar: G6 mapped to space [ 619.560335][T24726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 620.830973][T24776] queue_state_write: operation too long [ 620.875695][T24776] queue_state_write: use 'run', 'start' or 'kick' [ 622.480449][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.488809][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.131036][T24944] usb usb13: check_ctrlrecip: process 24944 (syz.2.8248) requesting ep 01 but needs 81 [ 625.193774][T24944] usb usb13: usbfs: process 24944 (syz.2.8248) did not claim interface 0 before use [ 626.166510][T24976] __vm_enough_memory: pid: 24976, comm: syz.3.8261, bytes: 9223372036854775808 not enough memory for the allocation [ 626.185417][T24978] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 626.738074][ T30] audit: type=1400 audit(4294985985.271:61): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24998 comm="syz.0.8271" [ 628.605671][T25070] block2mtd: too many arguments [ 629.451346][T25099] [U]  [ 629.615214][T25103] Process accounting paused [ 629.866412][T25117] ecryptfs_miscdev_write: Error while inspecting packet size [ 631.117273][T25167] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 633.041128][T25232] could not allocate digest TFM handle [ 633.683824][T25261] bond0: no command found in slaves file - use +ifname or -ifname [ 635.249101][T25314] i2c i2c-0: delete_device: Extra parameters [ 635.417244][T25318] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 635.417244][T25318] [ 636.996887][T25358] Process accounting paused [ 638.052217][T25391] ICMPv6: process `syz.1.8443' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 638.540854][ T30] audit: type=1800 audit(4294985997.133:62): pid=25407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8450" name="dbroot" dev="configfs" ino=63688 res=0 errno=0 [ 639.030039][T25425] i2c i2c-0: new_device: Invalid device name [ 639.309342][T25434] vmstat_refresh: nr_hugetlb -2048 [ 639.737437][T25451] kfence: disabled [ 640.255086][T13337] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 640.809692][T25493] : Can't lookup blockdev [ 641.441445][T25519] hub 27-0:1.0: USB hub found [ 641.487756][T25519] hub 27-0:1.0: 1 port detected [ 641.898298][T25535] nvme_fcloop: unknown parameter or missing value '0' [ 646.162321][T25690] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 649.144806][T25798] nbd: must specify a size in bytes for the device [ 649.382420][T25804] openvswitch: netlink: Flow actions attr not present in new flow. [ 649.510018][T25811] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 650.226451][T25824] : entered promiscuous mode [ 651.935906][T25896] netlink: 'syz.1.8654': attribute type 9 has an invalid length. [ 652.405752][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8659'. [ 652.871875][T25924] mmap: syz.0.8666 (25924): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 653.683803][T25949] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 653.962880][T25956] : entered promiscuous mode [ 654.322170][T25973] openvswitch: netlink: IP tunnel dst address not specified [ 654.609819][T25981] netlink: 'syz.1.8690': attribute type 1 has an invalid length. [ 654.907330][T25988] : entered promiscuous mode [ 655.251317][T26002] netlink: ct family unspecified [ 655.764719][T26020] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 655.811680][T26020] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 656.328277][T26015] NFSD: Failed to start, no listeners configured. [ 656.688059][T26044] nbd: must specify an index to disconnect [ 656.860142][T26050] nbd: couldn't find a device at index 18109 [ 657.852476][T26086] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 657.904148][T26086] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 659.630317][T26142] Process accounting resumed [ 660.597995][T26178] netlink: 'syz.1.8771': attribute type 11 has an invalid length. [ 660.656168][T26178] netlink: 'syz.1.8771': attribute type 11 has an invalid length. [ 660.689637][T26178] netlink: 'syz.1.8771': attribute type 11 has an invalid length. [ 660.726294][T26178] netlink: 'syz.1.8771': attribute type 11 has an invalid length. [ 661.004131][T26195] Zero length message leads to an empty skb [ 663.248762][T26267] delete_channel: no stack [ 664.423790][T26307] netlink: 'syz.0.8824': attribute type 4 has an invalid length. [ 664.461474][T26307] netlink: 'syz.0.8824': attribute type 1 has an invalid length. [ 665.220233][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8837'. [ 666.970805][T26395] Process accounting resumed [ 669.510403][T26476] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 674.320939][T26652] netlink: 'syz.1.8949': attribute type 11 has an invalid length. [ 674.706323][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8954'. [ 674.949994][T26675] vivid-005: ================= START STATUS ================= [ 674.950096][T26675] vivid-005: Radio HW Seek Mode: Bounded [ 674.950133][T26675] vivid-005: Radio Programmable HW Seek: false [ 674.950158][T26675] vivid-005: RDS Rx I/O Mode: Block I/O [ 674.950182][T26675] vivid-005: Generate RBDS Instead of RDS: false [ 674.950208][T26675] vivid-005: RDS Reception: true [ 674.950232][T26675] vivid-005: RDS Program Type: 0 inactive [ 674.950287][T26675] vivid-005: RDS PS Name: inactive [ 674.950331][T26675] vivid-005: RDS Radio Text: inactive [ 674.950361][T26675] vivid-005: RDS Traffic Announcement: false inactive [ 674.950391][T26675] vivid-005: RDS Traffic Program: false inactive [ 674.950421][T26675] vivid-005: RDS Music: false inactive [ 674.950451][T26675] vivid-005: ================== END STATUS ================== [ 675.374107][T26687] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.374215][T26687] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 676.514253][T26721] FAULT_INJECTION: forcing a failure. [ 676.514253][T26721] name failslab, interval 1, probability 0, space 0, times 0 [ 676.595445][T26721] CPU: 0 UID: 0 PID: 26721 Comm: syz.1.8974 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 676.595489][T26721] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 676.595501][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 676.595516][T26721] Call Trace: [ 676.595524][T26721] [ 676.595533][T26721] dump_stack_lvl+0x100/0x190 [ 676.595564][T26721] should_fail_ex.cold+0x5/0xa [ 676.595596][T26721] should_failslab+0xc2/0x120 [ 676.595628][T26721] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 676.595669][T26721] ? __d_alloc+0x34/0xa40 [ 676.595707][T26721] __d_alloc+0x34/0xa40 [ 676.595743][T26721] d_alloc_pseudo+0x1c/0xc0 [ 676.595765][T26721] alloc_file_pseudo+0xcf/0x230 [ 676.595803][T26721] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 676.595841][T26721] ? hugetlbfs_get_inode+0x3f5/0x700 [ 676.595880][T26721] hugetlb_file_setup+0x2a8/0x5b0 [ 676.595918][T26721] ksys_mmap_pgoff+0x242/0x610 [ 676.595946][T26721] ? __UNIQUE_ID_modinfo_714+0x63da8c83/0xffffffffffec9583 [ 676.595990][T26721] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 676.596019][T26721] ? xfd_validate_state+0x129/0x190 [ 676.596044][T26721] ? ksys_write+0x1ac/0x250 [ 676.596075][T26721] __x64_sys_mmap+0x125/0x190 [ 676.596101][T26721] ? __UNIQUE_ID_modinfo_714+0x63da8c83/0xffffffffffec9583 [ 676.596151][T26721] do_syscall_64+0x10b/0xf80 [ 676.596190][T26721] ? clear_bhb_loop+0x40/0x90 [ 676.596221][T26721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.596246][T26721] RIP: 0033:0x7f82af19c819 [ 676.596266][T26721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.596289][T26721] RSP: 002b:00007f82b0056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 676.596313][T26721] RAX: ffffffffffffffda RBX: 00007f82af415fa0 RCX: 00007f82af19c819 [ 676.596329][T26721] RDX: 0000000000000002 RSI: 0000000000000005 RDI: ffffffffff600700 [ 676.596343][T26721] RBP: 00007f82af232c91 R08: 0000000000000401 R09: 0000300000000000 [ 676.596359][T26721] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 676.596373][T26721] R13: 00007f82af416038 R14: 00007f82af415fa0 R15: 00007ffd5c5d9628 [ 676.596398][T26721] ? __UNIQUE_ID_modinfo_714+0x63da8c83/0xffffffffffec9583 [ 676.596436][T26721] [ 677.175087][T26736] openvswitch: netlink: Flow key attr not present in new flow. [ 677.801266][T13337] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 677.801298][T13337] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 677.816472][T13337] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 677.816495][T13337] Bluetooth: hci1: Unknown advertising packet type: 0x7d [ 677.823825][T13337] Bluetooth: hci1: adv larger than maximum supported [ 677.831952][T13337] Bluetooth: hci1: Malformed LE Event: 0x0d [ 679.504188][T26796] netlink: zone id is out of range [ 680.016638][T13337] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 680.024426][T13337] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 680.414239][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9013'. [ 680.550041][T26822] netlink: 'syz.0.9016': attribute type 1 has an invalid length. [ 681.248704][T26839] netlink: Setting conntrack mark requires 'commit' flag. [ 682.131856][T26866] FAULT_INJECTION: forcing a failure. [ 682.131856][T26866] name failslab, interval 1, probability 0, space 0, times 0 [ 682.191506][T26866] CPU: 0 UID: 0 PID: 26866 Comm: syz.3.9034 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 682.191583][T26866] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 682.191595][T26866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 682.191609][T26866] Call Trace: [ 682.191617][T26866] [ 682.191626][T26866] dump_stack_lvl+0x100/0x190 [ 682.191658][T26866] should_fail_ex.cold+0x5/0xa [ 682.191690][T26866] should_failslab+0xc2/0x120 [ 682.191718][T26866] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 682.191762][T26866] ? __d_alloc+0x34/0xa40 [ 682.191800][T26866] __d_alloc+0x34/0xa40 [ 682.191835][T26866] d_alloc_pseudo+0x1c/0xc0 [ 682.191857][T26866] alloc_file_pseudo+0xcf/0x230 [ 682.191896][T26866] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 682.191941][T26866] __shmem_file_setup+0x205/0x460 [ 682.191977][T26866] ? __pfx___shmem_file_setup+0x10/0x10 [ 682.192015][T26866] ? vm_area_alloc+0x1f/0x160 [ 682.192057][T26866] shmem_zero_setup+0x96/0x1b0 [ 682.192084][T26866] __mmap_region+0x24e7/0x2da0 [ 682.192127][T26866] ? __pfx___mmap_region+0x10/0x10 [ 682.192173][T26866] ? __lock_acquire+0x4a5/0x2630 [ 682.192197][T26866] ? rcu_is_watching+0x12/0xc0 [ 682.192228][T26866] ? trace_pelt_se_tp+0x13b/0x190 [ 682.192282][T26866] ? __lock_acquire+0x4a5/0x2630 [ 682.192305][T26866] ? do_raw_spin_unlock+0x145/0x1e0 [ 682.192335][T26866] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 682.192387][T26866] ? rcu_is_watching+0x12/0xc0 [ 682.192428][T26866] ? rcu_is_watching+0x12/0xc0 [ 682.192457][T26866] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 682.192490][T26866] ? lockdep_hardirqs_on+0x78/0x100 [ 682.192572][T26866] mmap_region+0x35d/0x620 [ 682.192613][T26866] ? rcu_is_watching+0x12/0xc0 [ 682.192642][T26866] ? __pfx_mmap_region+0x10/0x10 [ 682.192685][T26866] ? cap_mmap_addr+0x4b/0x120 [ 682.192717][T26866] ? bpf_lsm_mmap_addr+0x9/0x30 [ 682.192740][T26866] ? security_mmap_addr+0x71/0x1e0 [ 682.192764][T26866] ? __get_unmapped_area+0x255/0x3e0 [ 682.192798][T26866] do_mmap+0xc63/0x12f0 [ 682.192832][T26866] ? __pfx_do_mmap+0x10/0x10 [ 682.192862][T26866] ? __pfx_down_write_killable+0x10/0x10 [ 682.192894][T26866] vm_mmap_pgoff+0x29e/0x470 [ 682.192930][T26866] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 682.192963][T26866] ? do_futex+0x192/0x350 [ 682.192990][T26866] ? __pfx_do_futex+0x10/0x10 [ 682.193021][T26866] ksys_mmap_pgoff+0xe4/0x610 [ 682.193051][T26866] ? __x64_sys_futex+0x358/0x4d0 [ 682.193078][T26866] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 682.193107][T26866] ? xfd_validate_state+0x129/0x190 [ 682.193131][T26866] ? ksys_write+0x1ac/0x250 [ 682.193224][T26866] __x64_sys_mmap+0x125/0x190 [ 682.193255][T26866] do_syscall_64+0x10b/0xf80 [ 682.193292][T26866] ? clear_bhb_loop+0x40/0x90 [ 682.193322][T26866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.193347][T26866] RIP: 0033:0x7f2e6d19c819 [ 682.193368][T26866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.193391][T26866] RSP: 002b:00007f2e6df70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 682.193415][T26866] RAX: ffffffffffffffda RBX: 00007f2e6d415fa0 RCX: 00007f2e6d19c819 [ 682.193431][T26866] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 682.193446][T26866] RBP: 00007f2e6d232c91 R08: fffffffffffffffa R09: 0000000000008000 [ 682.193461][T26866] R10: 0000009000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 682.193476][T26866] R13: 00007f2e6d416038 R14: 00007f2e6d415fa0 R15: 00007ffd41785dd8 [ 682.193506][T26866] [ 683.596617][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.604911][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.169040][T26919] HfR: entered promiscuous mode [ 684.848729][T26945] tc_dump_action: action bad kind [ 685.972184][T26979] zero sized request [ 686.837127][T27002] openvswitch: netlink: Message has 4 unknown bytes. [ 687.207331][T27011] netlink: 276 bytes leftover after parsing attributes in process `syz.3.9091'. [ 687.295860][T27013] openvswitch: netlink: IPv4 tunnel dst address is zero [ 689.621922][T27086] netlink: Unknown NAT attribute (type=262, max=9) [ 689.742361][T27088] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 689.825210][T27088] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 689.882947][T27088] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 689.930098][T17574] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 689.973905][T27087] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 690.034787][T17574] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 690.164841][T27084] Process accounting paused [ 691.694395][T27145] capability: warning: `syz.1.9145' uses 32-bit capabilities (legacy support in use) [ 692.369319][T27166] tc_dump_action: action bad kind [ 693.031535][T27185] ALSA: mixer_oss: invalid OSS volume ',e&ER$o i<\#Z\' [ 693.067056][T27187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9161'. [ 694.029129][T27214] nbd: must specify a device to reconfigure [ 694.501408][T27229] netlink: 'syz.1.9178': attribute type 2 has an invalid length. [ 694.990696][T27242] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 695.105876][T27246] tc_dump_action: action bad kind [ 695.340890][ T30] audit: type=1326 audit(4294986054.248:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.1.9190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82af19c819 code=0x0 [ 695.773279][T27271] openvswitch: netlink: Key type 261 is out of range max 32 [ 695.807343][T27273] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 203000000000 [ 697.285575][T27311] Process accounting paused [ 698.616225][T27371] openvswitch: netlink: Message has 4 unknown bytes. [ 698.889142][T27383] FAULT_INJECTION: forcing a failure. [ 698.889142][T27383] name failslab, interval 1, probability 0, space 0, times 0 [ 698.957160][T27383] CPU: 0 UID: 0 PID: 27383 Comm: syz.2.9242 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 698.957205][T27383] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 698.957216][T27383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.957231][T27383] Call Trace: [ 698.957239][T27383] [ 698.957247][T27383] dump_stack_lvl+0x100/0x190 [ 698.957278][T27383] should_fail_ex.cold+0x5/0xa [ 698.957309][T27383] ? tomoyo_encode2+0xfb/0x3c0 [ 698.957335][T27383] should_failslab+0xc2/0x120 [ 698.957363][T27383] __kmalloc_noprof+0xe0/0x850 [ 698.957409][T27383] tomoyo_encode2+0xfb/0x3c0 [ 698.957440][T27383] tomoyo_encode+0x29/0x50 [ 698.957465][T27383] tomoyo_mount_acl+0x14c/0x8b0 [ 698.957488][T27383] ? is_bpf_text_address+0x8a/0x1a0 [ 698.957523][T27383] ? bpf_ksym_find+0x124/0x1c0 [ 698.957548][T27383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 698.957587][T27383] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 698.957609][T27383] ? kernel_text_address+0x8d/0x100 [ 698.957636][T27383] ? unwind_get_return_address+0x59/0xa0 [ 698.957700][T27383] ? tomoyo_domain+0xb2/0x150 [ 698.957737][T27383] ? tomoyo_profile+0x47/0x60 [ 698.957771][T27383] tomoyo_mount_permission+0x214/0x460 [ 698.957795][T27383] ? tomoyo_mount_permission+0x1f6/0x460 [ 698.957822][T27383] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 698.957863][T27383] security_sb_mount+0xdd/0x270 [ 698.957901][T27383] path_mount+0x158/0x23d0 [ 698.957940][T27383] ? __pfx_path_mount+0x10/0x10 [ 698.957972][T27383] ? lockdep_hardirqs_on+0x78/0x100 [ 698.958014][T27383] ? putname+0xb1/0x110 [ 698.958043][T27383] ? kmem_cache_free+0x127/0x6c0 [ 698.958090][T27383] ? __x64_sys_mount+0x293/0x310 [ 698.958122][T27383] __x64_sys_mount+0x293/0x310 [ 698.958158][T27383] ? __pfx___x64_sys_mount+0x10/0x10 [ 698.958195][T27383] ? rcu_is_watching+0x12/0xc0 [ 698.958228][T27383] do_syscall_64+0x10b/0xf80 [ 698.958265][T27383] ? clear_bhb_loop+0x40/0x90 [ 698.958295][T27383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.958320][T27383] RIP: 0033:0x7f1a6559c819 [ 698.958340][T27383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.958364][T27383] RSP: 002b:00007f1a664d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 698.958387][T27383] RAX: ffffffffffffffda RBX: 00007f1a65815fa0 RCX: 00007f1a6559c819 [ 698.958403][T27383] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 698.958418][T27383] RBP: 00007f1a65632c91 R08: 0000000000000000 R09: 0000000000000000 [ 698.958432][T27383] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 698.958447][T27383] R13: 00007f1a65816038 R14: 00007f1a65815fa0 R15: 00007ffc28df08c8 [ 698.958477][T27383] [ 699.937379][T27406] : entered promiscuous mode [ 699.989660][T27411] ima: policy update failed [ 700.011743][ T30] audit: type=1802 audit(4294986058.932:64): pid=27411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.9255" res=0 errno=0 [ 700.490473][T27427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9261'. [ 700.539754][T27427] nbd: illegal input index -2113925087 [ 701.764706][T27470] openvswitch: netlink: IP tunnel TTL not specified. [ 702.573117][T27498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 702.582262][T27498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 706.514434][T27616] zero sized request [ 707.033314][T27637] openvswitch: netlink: Duplicate or invalid key (type 0). [ 707.655938][T27659] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 708.523348][T27689] netlink: get zone limit has 4 unknown bytes [ 708.565461][T27693] FAULT_INJECTION: forcing a failure. [ 708.565461][T27693] name failslab, interval 1, probability 0, space 0, times 0 [ 708.631851][T27693] CPU: 0 UID: 0 PID: 27693 Comm: syz.2.9376 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 708.631896][T27693] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 708.631907][T27693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.631922][T27693] Call Trace: [ 708.631929][T27693] [ 708.631938][T27693] dump_stack_lvl+0x100/0x190 [ 708.631973][T27693] should_fail_ex.cold+0x5/0xa [ 708.632004][T27693] should_failslab+0xc2/0x120 [ 708.632032][T27693] __kvmalloc_node_noprof+0xfa/0xa00 [ 708.632056][T27693] ? io_alloc_cache_init+0x38/0x170 [ 708.632088][T27693] ? lockdep_init_map_type+0x5c/0x250 [ 708.632123][T27693] io_alloc_cache_init+0x38/0x170 [ 708.632157][T27693] io_uring_setup.cold+0x3cd/0x1c6e [ 708.632203][T27693] ? __pfx_io_uring_setup+0x10/0x10 [ 708.632230][T27693] ? do_futex+0x192/0x350 [ 708.632256][T27693] ? __pfx_do_futex+0x10/0x10 [ 708.632295][T27693] ? xfd_validate_state+0x129/0x190 [ 708.632320][T27693] ? ksys_write+0x1ac/0x250 [ 708.632354][T27693] __x64_sys_io_uring_setup+0xc2/0x170 [ 708.632381][T27693] do_syscall_64+0x10b/0xf80 [ 708.632418][T27693] ? clear_bhb_loop+0x40/0x90 [ 708.632448][T27693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.632474][T27693] RIP: 0033:0x7f1a6559c819 [ 708.632493][T27693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.632517][T27693] RSP: 002b:00007f1a664d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 708.632540][T27693] RAX: ffffffffffffffda RBX: 00007f1a65815fa0 RCX: 00007f1a6559c819 [ 708.632556][T27693] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 708.632570][T27693] RBP: 00007f1a65632c91 R08: 0000000000000000 R09: 0000000000000000 [ 708.632585][T27693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.632599][T27693] R13: 00007f1a65816038 R14: 00007f1a65815fa0 R15: 00007ffc28df08c8 [ 708.632629][T27693] [ 709.153208][T27707] netlink: 'syz.1.9381': attribute type 11 has an invalid length. [ 709.169722][T27708] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 709.188193][T27707] netlink: 'syz.1.9381': attribute type 11 has an invalid length. [ 709.217431][T27707] netlink: 'syz.1.9381': attribute type 11 has an invalid length. [ 709.700138][T27723] netlink: del zone limit has 4 unknown bytes [ 710.415681][T27759] netlink: 'syz.0.9402': attribute type 1 has an invalid length. [ 710.821022][T27783] program syz.3.9405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.686277][T27844] __vm_enough_memory: pid: 27844, comm: syz.0.9428, bytes: 4398046511104 not enough memory for the allocation [ 715.706975][T27956] bond0: option lp_interval: invalid value () [ 715.762709][T27956] bond0: option lp_interval: allowed values 1 - 2147483647 [ 716.128501][T27970] sctp: [Deprecated]: syz.0.9479 (pid 27970) Use of int in max_burst socket option deprecated. [ 716.128501][T27970] Use struct sctp_assoc_value instead [ 718.400275][T28052] netlink: 'syz.1.9514': attribute type 1 has an invalid length. [ 719.816518][T28093] sd 0:0:1:0: PR command failed: 1026 [ 719.849772][T28093] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 719.897893][T28093] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 720.303427][T28101] Process accounting resumed [ 720.830588][T28121] openvswitch: netlink: Multiple metadata blocks provided [ 723.782057][T28210] block nbd2: not configured, cannot reconfigure [ 723.827306][T28213] netlink: 'syz.3.9585': attribute type 1 has an invalid length. [ 725.188195][T28258] netlink: 'syz.0.9604': attribute type 3 has an invalid length. [ 725.808481][T28279] netlink: 'syz.1.9614': attribute type 1 has an invalid length. [ 725.858467][T28279] nbd: error processing sock list [ 727.169657][T28327] Process accounting resumed [ 727.514340][T28341] netlink: 'syz.2.9641': attribute type 1 has an invalid length. [ 728.068123][T28362] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 731.639550][T28489] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 731.777398][T28496] ======================================================= [ 731.777398][T28496] WARNING: The mand mount option has been deprecated and [ 731.777398][T28496] and is ignored by this kernel. Remove the mand [ 731.777398][T28496] option from the mount to silence this warning. [ 731.777398][T28496] ======================================================= [ 733.893777][T28567] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 734.998978][T28594] program syz.2.9748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.142982][T28629] openvswitch: netlink: IP tunnel dst address not specified [ 736.320293][T28635] netlink: Unknown nat attribute (0) [ 741.881252][T28825] nfs: Unknown parameter 'nl802154' [ 742.713141][T28851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9844'. [ 743.633689][T28879] netlink: 'syz.0.9860': attribute type 1 has an invalid length. [ 744.716719][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.725113][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.997153][T28918] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 746.955434][T28989] netlink: 'syz.0.9905': attribute type 2 has an invalid length. [ 747.086334][T28994] netlink: 'syz.2.9906': attribute type 11 has an invalid length. [ 747.124357][T28994] netlink: 'syz.2.9906': attribute type 11 has an invalid length. [ 747.161914][T28994] netlink: 'syz.2.9906': attribute type 11 has an invalid length. [ 748.208125][T29024] netlink: NAT attribute has 8 unknown bytes [ 750.313514][T29081] Process accounting paused [ 750.730972][T29087] NFSD: Failed to start, no listeners configured. [ 750.945558][T29106] netlink: NAT attribute has 8 unknown bytes [ 751.160512][T29108] NFSD: Failed to start, no listeners configured. [ 751.549731][T29126] netlink: 'syz.3.9960': attribute type 1 has an invalid length. [ 752.304675][T29156] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 752.538591][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9975'. [ 752.601126][T29175] netlink: 29 bytes leftover after parsing attributes in process `syz.2.9975'. [ 753.498120][ T30] audit: type=1800 audit(4294986112.690:65): pid=29199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="dbroot" dev="configfs" ino=75188 res=0 errno=0 [ 754.634862][T29255] NFSD: Failed to start, no listeners configured. [ 755.111689][T29272] syz_tun: tun_chr_ioctl cmd 2147767519 [ 755.451411][T29281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10002'. [ 755.487526][T29281] netlink: 29 bytes leftover after parsing attributes in process `syz.3.10002'. [ 756.013079][T29296] No such timeout policy "" [ 756.049947][T29296] netlink: Failed to associated timeout policy '' [ 756.569940][T29317] netlink: 'syz.2.10018': attribute type 1 has an invalid length. [ 757.079609][T29331] No such timeout policy "" [ 757.120037][T29331] netlink: Failed to associated timeout policy '' [ 757.245076][T29334] Process accounting paused [ 757.367806][ T30] audit: type=1800 audit(4294986116.591:66): pid=29339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="dbroot" dev="configfs" ino=75626 res=0 errno=0 [ 760.522234][T29439] IPVS: length: 131 != 8 [ 761.274198][T29470] openvswitch: netlink: IP tunnel dst address not specified [ 761.552370][T29476] NFSD: Failed to start, no listeners configured. [ 763.749089][T29557] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 767.117749][T29657] HSR: entered promiscuous mode [ 767.743721][T29661] syz.2.10163 (29661) used greatest stack depth: 19720 bytes left [ 768.231762][T29709] syz_tun: tun_chr_ioctl cmd 1074812117 [ 769.860119][T29766] futex_wake_op: syz.3.10197 tries to shift op by -1; fix this program [ 770.595839][T29792] MTRR 1 not used [ 771.054333][T29809] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 773.710972][T29913] FAULT_INJECTION: forcing a failure. [ 773.710972][T29913] name failslab, interval 1, probability 0, space 0, times 0 [ 773.788776][T29913] CPU: 0 UID: 0 PID: 29913 Comm: syz.1.10247 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 773.788843][T29913] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 773.788855][T29913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.788870][T29913] Call Trace: [ 773.788878][T29913] [ 773.788887][T29913] dump_stack_lvl+0x100/0x190 [ 773.788919][T29913] should_fail_ex.cold+0x5/0xa [ 773.788954][T29913] should_failslab+0xc2/0x120 [ 773.788983][T29913] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 773.789022][T29913] ? alloc_empty_file+0x5b/0x1c0 [ 773.789072][T29913] alloc_empty_file+0x5b/0x1c0 [ 773.789109][T29913] alloc_file_pseudo+0x13a/0x230 [ 773.789147][T29913] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 773.789183][T29913] ? alloc_fd+0x476/0x790 [ 773.789214][T29913] ? do_raw_spin_unlock+0x145/0x1e0 [ 773.789246][T29913] __anon_inode_getfile+0xe8/0x280 [ 773.789286][T29913] anon_inode_getfile_fmode+0x37/0xa0 [ 773.789323][T29913] __do_sys_fanotify_init+0xab8/0xe80 [ 773.789355][T29913] do_syscall_64+0x10b/0xf80 [ 773.789393][T29913] ? clear_bhb_loop+0x40/0x90 [ 773.789423][T29913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.789449][T29913] RIP: 0033:0x7f82af19c819 [ 773.789468][T29913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.789491][T29913] RSP: 002b:00007f82b0056028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 773.789514][T29913] RAX: ffffffffffffffda RBX: 00007f82af415fa0 RCX: 00007f82af19c819 [ 773.789530][T29913] RDX: 0000000000000000 RSI: 0002010000000000 RDI: 0000000000000200 [ 773.789545][T29913] RBP: 00007f82af232c91 R08: 0000000000000000 R09: 0000000000000000 [ 773.789559][T29913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.789573][T29913] R13: 00007f82af416038 R14: 00007f82af415fa0 R15: 00007ffd5c5d9628 [ 773.789603][T29913] [ 774.321807][T29930] netlink: 'syz.3.10254': attribute type 12 has an invalid length. [ 774.880532][T13337] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 775.348230][T29967] sctp: [Deprecated]: syz.0.10270 (pid 29967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.348230][T29967] Use struct sctp_sack_info instead [ 779.747293][T30121] BUG: unable to handle page fault for address: fffff5200092d200 [ 779.747313][T30121] #PF: supervisor read access in kernel mode [ 779.747327][T30121] #PF: error_code(0x0000) - not-present page [ 779.747341][T30121] PGD 23fff5067 P4D 23fff5067 PUD 1c6c2067 PMD 2640d067 PTE 0 [ 779.747384][T30121] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 779.747410][T30121] CPU: 0 UID: 0 PID: 30121 Comm: syz.0.10334 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 779.747450][T30121] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 779.747462][T30121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.747477][T30121] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 779.747514][T30121] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 d0 88 c3 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 779.747538][T30121] RSP: 0018:ffffc9000526f5a8 EFLAGS: 00010a06 [ 779.747562][T30121] RAX: 00000000000069dc RBX: 0000000000000180 RCX: 1ffff9200092d200 [ 779.747578][T30121] RDX: 0000000000080000 RSI: ffffffff85453e50 RDI: 0000000000000010 [ 779.747594][T30121] RBP: 0000010000000100 R08: 0000000000000001 R09: 0000000000000004 [ 779.747610][T30121] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc90004969000 [ 779.747626][T30121] R13: ffffc90004969000 R14: dffffc0000000000 R15: 0000000000000004 [ 779.747642][T30121] FS: 00007f9374abc6c0(0000) GS:ffff8881242e2000(0000) knlGS:0000000000000000 [ 779.747667][T30121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.747684][T30121] CR2: fffff5200092d200 CR3: 000000005ae3c000 CR4: 00000000003526f0 [ 779.747700][T30121] Call Trace: [ 779.747708][T30121] [ 779.747723][T30121] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 779.747768][T30121] bit_clear+0x17d/0x220 [ 779.747793][T30121] ? __pfx_bit_clear+0x10/0x10 [ 779.747826][T30121] ? fb_get_color_depth+0x120/0x250 [ 779.747848][T30121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.747888][T30121] __fbcon_clear+0x633/0x760 [ 779.747929][T30121] ? __pfx_bit_clear+0x10/0x10 [ 779.747955][T30121] fbcon_scroll+0x48b/0x650 [ 779.747979][T30121] con_scroll+0x464/0x690 [ 779.748012][T30121] csi_ECMA.constprop.0+0x1238/0x3b60 [ 779.748048][T30121] ? find_held_lock+0x2b/0x80 [ 779.748080][T30121] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 779.748119][T30121] do_con_write+0x3946/0x4a10 [ 779.748161][T30121] ? __pfx_do_con_write+0x10/0x10 [ 779.748201][T30121] con_write+0x23/0xb0 [ 779.748233][T30121] n_tty_write+0x431/0x11c0 [ 779.748278][T30121] ? __pfx_n_tty_write+0x10/0x10 [ 779.748317][T30121] ? trace_kmalloc+0xe3/0x110 [ 779.748345][T30121] ? __pfx_woken_wake_function+0x10/0x10 [ 779.748376][T30121] ? rcu_is_watching+0x12/0xc0 [ 779.748405][T30121] ? file_tty_write.isra.0+0x694/0x890 [ 779.748437][T30121] ? kfree+0x1dd/0x6c0 [ 779.748471][T30121] ? __pfx_n_tty_write+0x10/0x10 [ 779.748511][T30121] file_tty_write.isra.0+0x4d2/0x890 [ 779.748548][T30121] redirected_tty_write+0xd4/0x120 [ 779.748581][T30121] vfs_write+0x6ac/0x1070 [ 779.748608][T30121] ? __pfx_redirected_tty_write+0x10/0x10 [ 779.748643][T30121] ? __pfx_vfs_write+0x10/0x10 [ 779.748669][T30121] ? find_held_lock+0x2b/0x80 [ 779.748709][T30121] ksys_write+0x12a/0x250 [ 779.748735][T30121] ? __pfx_ksys_write+0x10/0x10 [ 779.748763][T30121] ? rcu_is_watching+0x12/0xc0 [ 779.748794][T30121] do_syscall_64+0x10b/0xf80 [ 779.748839][T30121] ? clear_bhb_loop+0x40/0x90 [ 779.748868][T30121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.748894][T30121] RIP: 0033:0x7f9373b9c819 [ 779.748913][T30121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.748938][T30121] RSP: 002b:00007f9374abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.748961][T30121] RAX: ffffffffffffffda RBX: 00007f9373e15fa0 RCX: 00007f9373b9c819 [ 779.748977][T30121] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 779.748993][T30121] RBP: 00007f9373c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 779.749009][T30121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.749024][T30121] R13: 00007f9373e16038 R14: 00007f9373e15fa0 R15: 00007fffc28779f8 [ 779.749048][T30121] [ 779.749056][T30121] Modules linked in: [ 779.749070][T30121] CR2: fffff5200092d200 [ 779.749088][T30121] ---[ end trace 0000000000000000 ]--- [ 779.749105][T30121] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 779.749139][T30121] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 d0 88 c3 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 779.749164][T30121] RSP: 0018:ffffc9000526f5a8 EFLAGS: 00010a06 [ 779.749183][T30121] RAX: 00000000000069dc RBX: 0000000000000180 RCX: 1ffff9200092d200 [ 779.749199][T30121] RDX: 0000000000080000 RSI: ffffffff85453e50 RDI: 0000000000000010 [ 779.749215][T30121] RBP: 0000010000000100 R08: 0000000000000001 R09: 0000000000000004 [ 779.749231][T30121] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc90004969000 [ 779.749248][T30121] R13: ffffc90004969000 R14: dffffc0000000000 R15: 0000000000000004 [ 779.749264][T30121] FS: 00007f9374abc6c0(0000) GS:ffff8881242e2000(0000) knlGS:0000000000000000 [ 779.749288][T30121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.749305][T30121] CR2: fffff5200092d200 CR3: 000000005ae3c000 CR4: 00000000003526f0 [ 779.749324][T30121] Kernel panic - not syncing: Fatal exception [ 779.749387][T30121] Kernel Offset: disabled