last executing test programs: 5.033894614s ago: executing program 3 (id=3747): r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x29, 0x1, 0x0, 0x0) 4.917465305s ago: executing program 3 (id=3749): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x80, 0xffff) 4.778824533s ago: executing program 3 (id=3752): socket(0x2, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x6a) 4.663780888s ago: executing program 3 (id=3753): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5ced", 0x2) 4.546364165s ago: executing program 3 (id=3755): fanotify_init$auto(0x65, 0x2) close_range$auto(0x2, 0x8, 0x0) 4.45040265s ago: executing program 3 (id=3756): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000540)=""/87, 0x57) 1.18249553s ago: executing program 2 (id=3807): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, 0x0) 1.134535027s ago: executing program 1 (id=3809): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/macsec0/stable_secret\x00', 0x22400, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 1.00242464s ago: executing program 1 (id=3810): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC0D0c\x00', 0x1200, 0x0) readv$auto(r0, &(0x7f00000004c0)={0x0, 0x5}, 0x369) 891.787666ms ago: executing program 2 (id=3812): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, r0, 0x0) 877.355103ms ago: executing program 1 (id=3813): r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) 744.750506ms ago: executing program 1 (id=3815): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a082, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/cec31\x00', 0x200) 701.788918ms ago: executing program 0 (id=3816): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb) 674.16349ms ago: executing program 2 (id=3817): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x20001, 0x0) write$auto(r0, &(0x7f0000000100)=':%(:#(&-!]\x00', 0xd40a) 609.862101ms ago: executing program 1 (id=3818): setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) userfaultfd$auto(0x1) 567.249817ms ago: executing program 0 (id=3819): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r0, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x800010) 480.870975ms ago: executing program 1 (id=3820): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) ioctl$auto(r0, 0xc0046209, 0xffffffffffffffff) 404.373256ms ago: executing program 2 (id=3821): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) 403.907491ms ago: executing program 0 (id=3829): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="9bbf5fa9", 0x4) 322.506124ms ago: executing program 0 (id=3822): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) acct$auto(&(0x7f00000000c0)='/proc/net/rpc/use-gss-\x06roxy\x00') 217.248826ms ago: executing program 2 (id=3823): socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e1, 0x91) 205.885043ms ago: executing program 0 (id=3824): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0xa0840, 0x0) ioctl$auto(r0, 0x540a, 0x2) 76.802715ms ago: executing program 0 (id=3825): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty50\x00', 0x1, 0x0) ioctl$auto(r0, 0x540a, 0x0) 0s ago: executing program 2 (id=3826): r0 = socket(0xa, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 72.742177][ T5814] cgroup: Unknown subsys name 'net' [ 72.871571][ T5814] cgroup: Unknown subsys name 'cpuset' [ 72.880282][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.318545][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.364535][ T5855] mmap: syz.3.22 (5855) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.984685][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.315958][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.337856][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.345625][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.362678][ T5895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.370565][ T5895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.380208][ T5895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.388012][ T5895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.404741][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.413368][ T5900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.422638][ T5898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.423888][ T5903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.439322][ T5903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.446490][ T5903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.456401][ T5898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.464073][ T5898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.501766][ T5898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.510946][ T5898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.520709][ T5898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.535212][ T5898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.545892][ T5898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.150529][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 82.190231][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 82.292217][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 82.433715][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.441325][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.448575][ T5892] bridge_slave_0: entered allmulticast mode [ 82.455640][ T5892] bridge_slave_0: entered promiscuous mode [ 82.463977][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 82.489428][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.496567][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.503850][ T5892] bridge_slave_1: entered allmulticast mode [ 82.510946][ T5892] bridge_slave_1: entered promiscuous mode [ 82.525337][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.532483][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.539700][ T5896] bridge_slave_0: entered allmulticast mode [ 82.547007][ T5896] bridge_slave_0: entered promiscuous mode [ 82.590872][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.598277][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.605424][ T5896] bridge_slave_1: entered allmulticast mode [ 82.613202][ T5896] bridge_slave_1: entered promiscuous mode [ 82.666483][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.675746][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.684047][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.691279][ T5901] bridge_slave_0: entered allmulticast mode [ 82.698802][ T5901] bridge_slave_0: entered promiscuous mode [ 82.709325][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.725360][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.735110][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.743058][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.750457][ T5901] bridge_slave_1: entered allmulticast mode [ 82.757328][ T5901] bridge_slave_1: entered promiscuous mode [ 82.766557][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.844308][ T5896] team0: Port device team_slave_0 added [ 82.863632][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.875826][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.896093][ T5896] team0: Port device team_slave_1 added [ 82.903603][ T5892] team0: Port device team_slave_0 added [ 82.941985][ T5892] team0: Port device team_slave_1 added [ 82.969313][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.976462][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.983807][ T5904] bridge_slave_0: entered allmulticast mode [ 82.990905][ T5904] bridge_slave_0: entered promiscuous mode [ 83.000913][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.008116][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.015294][ T5904] bridge_slave_1: entered allmulticast mode [ 83.023419][ T5904] bridge_slave_1: entered promiscuous mode [ 83.041286][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.048373][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.074579][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.088123][ T5901] team0: Port device team_slave_0 added [ 83.113105][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.120071][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.146322][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.174142][ T5901] team0: Port device team_slave_1 added [ 83.193744][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.200827][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.226886][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.239423][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.246368][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.272700][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.323121][ T5896] hsr_slave_0: entered promiscuous mode [ 83.329795][ T5896] hsr_slave_1: entered promiscuous mode [ 83.338889][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.355120][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.375536][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.382960][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.409202][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.446377][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.453532][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.479608][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.498438][ T5895] Bluetooth: hci0: command tx timeout [ 83.504019][ T5898] Bluetooth: hci2: command tx timeout [ 83.510060][ T5895] Bluetooth: hci1: command tx timeout [ 83.541549][ T5904] team0: Port device team_slave_0 added [ 83.562543][ T5892] hsr_slave_0: entered promiscuous mode [ 83.568911][ T5892] hsr_slave_1: entered promiscuous mode [ 83.575279][ T5892] debugfs: 'hsr0' already exists in 'hsr' [ 83.581180][ T5898] Bluetooth: hci3: command tx timeout [ 83.587227][ T5892] Cannot create hsr debugfs directory [ 83.605712][ T5904] team0: Port device team_slave_1 added [ 83.691406][ T5901] hsr_slave_0: entered promiscuous mode [ 83.697569][ T5901] hsr_slave_1: entered promiscuous mode [ 83.703620][ T5901] debugfs: 'hsr0' already exists in 'hsr' [ 83.709614][ T5901] Cannot create hsr debugfs directory [ 83.721579][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.728658][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.754652][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.790794][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.798023][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.824160][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.988548][ T5904] hsr_slave_0: entered promiscuous mode [ 83.994733][ T5904] hsr_slave_1: entered promiscuous mode [ 84.000992][ T5904] debugfs: 'hsr0' already exists in 'hsr' [ 84.006717][ T5904] Cannot create hsr debugfs directory [ 84.263743][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.277232][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.298580][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.308984][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.365186][ T5892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.376988][ T5892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.390198][ T5892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.401693][ T5892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.483210][ T5904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.496498][ T5904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.506976][ T5904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.517164][ T5904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.630004][ T5901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.640474][ T5901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.650780][ T5901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.678288][ T5901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.768390][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.778779][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.828814][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.844471][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.867221][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.874506][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.884719][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.891933][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.909496][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.916654][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.936937][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.944030][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.996794][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.057547][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.075602][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.095222][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.102336][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.118708][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.125791][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.156793][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.179189][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.186315][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.207425][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.214607][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.300856][ T5904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.317442][ T5904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.598643][ T5895] Bluetooth: hci1: command tx timeout [ 85.604068][ T5895] Bluetooth: hci0: command tx timeout [ 85.610464][ T5898] Bluetooth: hci2: command tx timeout [ 85.633679][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.651295][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.660773][ T5895] Bluetooth: hci3: command tx timeout [ 85.792298][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.806750][ T5892] veth0_vlan: entered promiscuous mode [ 85.816226][ T5896] veth0_vlan: entered promiscuous mode [ 85.842542][ T5896] veth1_vlan: entered promiscuous mode [ 85.853682][ T5892] veth1_vlan: entered promiscuous mode [ 85.914227][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.923236][ T5896] veth0_macvtap: entered promiscuous mode [ 85.946127][ T5896] veth1_macvtap: entered promiscuous mode [ 85.982906][ T5892] veth0_macvtap: entered promiscuous mode [ 85.989840][ T5904] veth0_vlan: entered promiscuous mode [ 86.006743][ T5892] veth1_macvtap: entered promiscuous mode [ 86.022743][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.034155][ T5904] veth1_vlan: entered promiscuous mode [ 86.055037][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.082361][ T3022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.092159][ T3022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.116433][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.124428][ T3022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.133581][ T3022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.174658][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.211355][ T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.220996][ T5901] veth0_vlan: entered promiscuous mode [ 86.239982][ T3495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249141][ T3495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.276544][ T5904] veth0_macvtap: entered promiscuous mode [ 86.283740][ T3495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.321196][ T5901] veth1_vlan: entered promiscuous mode [ 86.331020][ T5904] veth1_macvtap: entered promiscuous mode [ 86.333341][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.357327][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.415896][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.431174][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.442907][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.456126][ T5901] veth0_macvtap: entered promiscuous mode [ 86.486194][ T5901] veth1_macvtap: entered promiscuous mode [ 86.502728][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.518101][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.530588][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.544411][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.595418][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.628674][ T3484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655670][ T3484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.667688][ T3484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.683382][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.691776][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.700008][ T3484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.732314][ T9] cfg80211: failed to load regulatory.db [ 86.791822][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.822138][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.827913][ T5983] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.832622][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.902901][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094637][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.112480][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.331101][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.359734][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.391648][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.405231][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.525941][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.546950][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.658284][ T5895] Bluetooth: hci0: command tx timeout [ 87.663714][ T5895] Bluetooth: hci2: command tx timeout [ 87.670334][ T5898] Bluetooth: hci1: command tx timeout [ 87.740337][ T5895] Bluetooth: hci3: command tx timeout [ 89.741815][ T5895] Bluetooth: hci0: command tx timeout [ 89.747245][ T5895] Bluetooth: hci2: command tx timeout [ 89.754635][ T5898] Bluetooth: hci1: command tx timeout [ 89.818871][ T5898] Bluetooth: hci3: command tx timeout [ 90.096787][ T29] audit: type=1800 audit(1773645694.383:2): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="features" dev="configfs" ino=8458 res=0 errno=0 [ 90.285361][ T6119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.010668][ T6256] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.502067][ T6333] nfs: Bad value for 'source' [ 94.650442][ T5898] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 97.263655][ T6475] Invalid ELF header magic: != ELF [ 98.129616][ T6519] syz.3.295 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.316623][ T6521] can: request_module (can-proto-5) failed. [ 98.497035][ T6532] Invalid ELF header magic: != ELF [ 103.082922][ T5898] Bluetooth: hci2: unknown advertising packet type: 0xea [ 103.456830][ T5898] Bluetooth: hci1: unexpected event 0x3c length: 254 > 7 [ 107.132536][ T5898] Bluetooth: hci2: unexpected event 0x34 length: 11 > 6 [ 109.010490][ T29] audit: type=1800 audit(1773646740.312:3): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.572" name="features" dev="configfs" ino=10935 res=0 errno=0 [ 109.077549][ T7079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.092538][ T29] audit: type=1800 audit(1773646740.392:4): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.574" name="trace_pipe" dev="tracefs" ino=3332 res=0 errno=0 [ 109.256151][ T5898] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 111.489994][ T7209] futex_wake_op: syz.2.635 tries to shift op by -1; fix this program [ 112.920510][ T7279] capability: warning: `syz.1.668' uses deprecated v2 capabilities in a way that may be insecure [ 113.070590][ T5898] Bluetooth: hci1: unexpected event 0x3e length: 720 > 260 [ 113.785297][ T5898] Bluetooth: hci3: unexpected event 0x22 length: 726 > 260 [ 113.793554][ T5898] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 114.815192][ T7370] ptrace attach of "./syz-executor exec"[5896] was attempted by "./syz-executor exec"[7370] [ 116.031948][ T29] audit: type=1800 audit(1773646747.322:5): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.745" name="dummy_udc" dev="gadgetfs" ino=6938 res=0 errno=0 [ 117.339266][ T29] audit: type=1800 audit(1773646748.632:6): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.777" name="members" dev="configfs" ino=13612 res=0 errno=0 [ 119.179022][ T29] audit: type=1800 audit(1773646750.462:7): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.825" name="version" dev="configfs" ino=12793 res=0 errno=0 [ 119.227179][ T7609] syz.3.834 (7609): attempted to duplicate a private mapping with mremap. This is not supported. [ 123.202113][ T7807] syz.1.921(7807): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 125.736078][ T29] audit: type=1800 audit(4294967303.490:8): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.981" name="dbroot" dev="configfs" ino=14280 res=0 errno=0 [ 126.504527][ T29] audit: type=1326 audit(4294967304.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.0.998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f235b79c799 code=0x0 [ 127.472347][ T8021] Process accounting resumed [ 129.413479][ T8137] futex_wake_op: syz.1.1082 tries to shift op by -2048; fix this program [ 129.702678][ T29] audit: type=1800 audit(4294967307.440:10): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1089" name="trace_pipe" dev="tracefs" ino=3377 res=0 errno=0 [ 131.208762][ T8231] ima: policy update failed [ 131.214015][ T29] audit: type=1802 audit(4294967308.970:11): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1129" res=0 errno=0 [ 131.543277][ T8253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.448721][ T8307] __vm_enough_memory: pid: 8307, comm: syz.2.1167, bytes: 4398046511104 not enough memory for the allocation [ 132.797283][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803855][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.993581][ T8409] kexec: Could not allocate control_code_buffer [ 136.805927][ T8533] capability: warning: `syz.1.1279' uses 32-bit capabilities (legacy support in use) [ 136.988680][ T8541] ptrace attach of "./syz-executor exec"[5896] was attempted by "./syz-executor exec"[8541] [ 138.233848][ T8525] kexec: Could not allocate control_code_buffer [ 138.871085][ T5898] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 140.608508][ T8737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.254024][ T8776] random: crng reseeded on system resumption [ 142.268614][ T8833] Unable to find swap-space signature [ 142.688808][ T8857] Unable to find swap-space signature [ 144.659682][ T8889] kexec: Could not allocate control_code_buffer [ 145.905200][ T9020] Unable to find swap-space signature [ 146.424301][ T5898] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 146.424337][ T5898] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 146.439147][ T5898] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 148.196877][ T9159] syz_tun: tun_chr_ioctl cmd 1074025672 [ 148.209374][ T9159] syz_tun: ignored: set checksum disabled [ 149.563038][ T5898] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 150.180496][ T9248] syz_tun: tun_chr_ioctl cmd 1074812118 [ 150.925186][ T29] audit: type=1800 audit(1843107606.969:12): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1651" name="lu_gp_id" dev="configfs" ino=18486 res=0 errno=0 [ 153.647266][ T5898] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 154.593180][ T5898] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 158.232295][ T9685] ======================================================= [ 158.232295][ T9685] WARNING: The mand mount option has been deprecated and [ 158.232295][ T9685] and is ignored by this kernel. Remove the mand [ 158.232295][ T9685] option from the mount to silence this warning. [ 158.232295][ T9685] ======================================================= [ 159.244229][ T9742] syz_tun: tun_chr_ioctl cmd 1074025678 [ 159.259960][ T9742] syz_tun: group set to 23693 [ 164.704097][T10024] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.196353][T10050] random: crng reseeded on system resumption [ 165.763636][T10080] __vm_enough_memory: pid: 10080, comm: syz.0.2046, bytes: 9223372036854775808 not enough memory for the allocation [ 165.907786][T10088] bond0: invalid ARP target specified [ 166.098243][T10099] misc userio: Invalid payload size [ 166.400771][T10118] : Can't lookup blockdev [ 166.886912][T10147] kAFS: Invalid Command on /proc/fs/afs/cells file [ 168.229760][T10223] sysfs_service_op_store: Client not running :-5: [ 168.557601][T10243] zswap: compressor ^`#ߗ(2NAV1`Wnf\'J돆#If&ͦ5j)٥Kp$'\&9r y*paۄH,T{Kf_SQAW not available [ 172.435478][T10456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 173.112294][T10484] bond0: no command found in slaves file - use +ifname or -ifname [ 173.552998][T10509] usb usb2: usbfs: process 10509 (syz.0.2236) did not claim interface 4 before use [ 173.600361][T10513] bond0: no command found in slaves file - use +ifname or -ifname [ 174.607701][ T29] audit: type=1800 audit(1843107630.777:13): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2264" name="dbroot" dev="configfs" ino=22350 res=0 errno=0 [ 174.632980][T10567] db_root: cannot open: /dev/audio1 [ 174.649357][T10567] db_root: not a directory: /dev/audio1 [ 174.900079][T10583] usb usb37: usbfs: process 10583 (syz.0.2271) did not claim interface 0 before use [ 174.929035][T10588] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 175.074370][ T29] audit: type=1800 audit(1843107631.239:14): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2278" name="members" dev="configfs" ino=22388 res=0 errno=0 [ 175.832386][ T5898] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 175.865088][ T29] audit: type=1806 audit(1843107632.033:15): xattr="." res=0 [ 176.161891][ T29] audit: type=1800 audit(1843107632.345:16): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2311" name="dbroot" dev="configfs" ino=22695 res=0 errno=0 [ 176.165858][T10665] db_root: cannot open: /dev/audio1 [ 176.210264][T10665] db_root: not a directory: /dev/audio1 [ 176.661889][ T29] audit: type=1800 audit(1843107632.847:17): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2324" name="dbroot" dev="configfs" ino=22527 res=0 errno=0 [ 176.682447][T10692] db_root: cannot open: /dev/audio1 [ 176.687662][T10692] db_root: not a directory: /dev/audio1 [ 177.546803][ T5898] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 177.827332][T10759] usbip-vudc usbip-vudc.0: gadget not bound [ 177.966481][ T5898] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 179.746126][T10879] warning: `syz.2.2416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 179.987026][T10892] [U] ^\ [ 180.284467][T10909] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa94447c pfn:0x78000 [ 180.318954][T10909] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 180.347777][T10909] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 180.384228][T10909] raw: 00000007fa94447c 0000000000000000 0000000400000002 0000000000000000 [ 180.405805][T10909] page dumped because: unmovable page [ 180.414642][T10909] page_owner tracks the page as allocated [ 180.441897][T10909] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5888, tgid 5888 (syz-executor), ts 81052392223, free_ts 75695789776 [ 180.502497][T10909] post_alloc_hook+0x153/0x170 [ 180.507330][T10909] get_page_from_freelist+0x111d/0x3140 [ 180.524555][T10909] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 180.537730][T10909] alloc_pages_mpol+0x1fb/0x550 [ 180.542631][T10909] alloc_pages_noprof+0x131/0x390 [ 180.550719][T10909] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 180.557166][T10909] vmalloc_user_noprof+0x9e/0xe0 [ 180.573214][T10909] kcov_ioctl+0x4c/0x720 [ 180.587620][T10909] __x64_sys_ioctl+0x18e/0x210 [ 180.592434][T10909] do_syscall_64+0x106/0xf80 [ 180.613221][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.623137][T10909] page last free pid 5814 tgid 5814 stack trace: [ 180.632740][T10909] free_unref_folios+0xaea/0x1790 [ 180.638672][T10909] folios_put_refs+0x53c/0x840 [ 180.643561][T10909] free_pages_and_swap_cache+0x242/0x480 [ 180.650625][T10909] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 180.656724][T10909] tlb_finish_mmu+0x1b0/0x810 [ 180.661830][T10909] unmap_region+0x2d9/0x3b0 [ 180.666374][T10909] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 180.672400][T10909] do_vmi_align_munmap+0x44f/0x5f0 [ 180.698242][T10909] do_vmi_munmap+0x1f8/0x3e0 [ 180.710859][T10909] __vm_munmap+0x196/0x390 [ 180.717013][T10909] __x64_sys_munmap+0x59/0x80 [ 180.727412][T10909] do_syscall_64+0x106/0xf80 [ 180.732055][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.341789][T10965] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 181.677565][T10983] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 182.620402][T11038] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 182.651342][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.657832][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.025703][T11058] bonding: no command found in bonding_masters - use +ifname or -ifname [ 183.806089][T11108] block loop4: the capability attribute has been deprecated. [ 183.849434][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.861071][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.104037][T11124] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 187.205133][T11307] process 'syz.0.2624' launched '/dev/fd/3' with NULL argv: empty string added [ 187.384132][T11319] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 189.246522][T11400] usb usb13: check_ctrlrecip: process 11400 (syz.3.2672) requesting ep 01 but needs 81 [ 189.262489][T11400] usb usb13: usbfs: process 11400 (syz.3.2672) did not claim interface 0 before use [ 190.129240][T11428] Debayer A: ================= START STATUS ================= [ 190.136926][T11428] Debayer A: Debayer Mean Window Size: 3 [ 190.203332][T11428] Debayer A: ================== END STATUS ================== [ 193.950615][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.957045][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525645][T11607] kAFS: Invalid Command on /proc/fs/afs/cells file [ 194.966522][T11630] ptp ptp0: only physical clock in use now [ 197.055972][T11756] blkio.reset_stats is deprecated [ 198.183840][ T5898] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 199.919112][ T29] audit: type=1800 audit(1843107656.218:18): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2907" name="discovery_nqn" dev="configfs" ino=26765 res=0 errno=0 [ 199.967236][T11915] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 201.088739][T11980] block2mtd: parameter too long [ 203.275369][T12109] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 206.017592][ T5900] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 206.104576][T12256] tipc: Can't bind to reserved service type 1 [ 206.195180][ T5900] Bluetooth: hci0: command 0x0406 tx timeout [ 206.202094][ T5900] Bluetooth: hci2: command 0x0406 tx timeout [ 206.214297][ T5900] Bluetooth: hci3: command 0x0406 tx timeout [ 206.214406][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 209.106199][T12412] QAT: failed to copy from user cfg_data. [ 209.151680][T12415] TCP: TCP_TX_DELAY enabled [ 209.278784][T12420] ubi0: attaching mtd0 [ 209.283027][T12420] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 212.058864][T12552] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 212.081748][T12552] ep_00: uevent: failed to send synthetic uevent: -22 [ 212.221892][T12559] vhci_hcd vhci_hcd.2: invalid port number 135 [ 212.274817][T12559] vhci_hcd vhci_hcd.2: invalid port number 135 [ 213.360422][T12627] vivid-007: ================= START STATUS ================= [ 213.370553][T12627] vivid-007: Enable Output Cropping: true [ 213.376513][T12627] vivid-007: Enable Output Composing: true [ 213.387305][T12627] vivid-007: Enable Output Scaler: true [ 213.392894][T12627] vivid-007: Tx RGB Quantization Range: Automatic [ 213.399983][T12627] vivid-007: Transmit Mode: HDMI [ 213.405290][T12627] vivid-007: Hotplug Present: 0x00000000 [ 213.411464][T12627] vivid-007: RxSense Present: 0x00000000 [ 213.427074][T12627] vivid-007: EDID Present: 0x00000000 [ 213.437580][T12627] vivid-007: ================== END STATUS ================== [ 214.423687][T12685] smpboot: CPU 1 is now offline [ 215.848428][T12765] ecryptfs_miscdev_write: Error while inspecting packet size [ 216.412327][T12793] [U] 0="/ [ 216.415796][T12793] [U] [ 216.441084][T12793] [U] EeQ@ [ 216.462716][T12792] [U]  [ 216.675069][T12808] kafs: addr_prefs: Too many elements in string [ 217.639672][T12855] syz_tun: tun_chr_ioctl cmd 1074812117 [ 221.895859][T13070] syz.3.3453 uses obsolete (PF_INET,SOCK_PACKET) [ 222.050311][T13075] rnbd_client L213: map_device: Parameters missing [ 224.449552][T13196] ptrace attach of "./syz-executor exec"[5896] was attempted by "./syz-executor exec"[13196] [ 224.620438][T13203] QAT: Stopping all acceleration devices. [ 227.920547][T13360] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 228.044906][T13360] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 228.085026][T13360] pci 0000:00:01.3: PCI INT A: no GSI [ 228.477128][T13390] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.622212][ T51] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 229.267547][T13429] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 230.535128][T13495] ecryptfs_miscdev_write: Error while inspecting packet size [ 231.257943][T13533] block2mtd: device name too long [ 234.106407][T13665] QAT: Invalid ioctl 21531 [ 234.161649][T13666] syz_tun: tun_chr_ioctl cmd 1074812117 [ 239.103276][ T5960] ================================================================== [ 239.103290][ T5960] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 239.103314][ T5960] Write of size 8 at addr ffffc900049d9000 by task kworker/0:5/5960 [ 239.103325][ T5960] [ 239.103338][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.103357][ T5960] Tainted: [L]=SOFTLOCKUP [ 239.103362][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.103373][ T5960] Workqueue: events_power_efficient fb_flashcursor [ 239.103392][ T5960] Call Trace: [ 239.103397][ T5960] [ 239.103403][ T5960] dump_stack_lvl+0x100/0x190 [ 239.103423][ T5960] print_report+0x156/0x4c9 [ 239.103441][ T5960] ? _raw_spin_lock_irqsave+0x52/0x60 [ 239.103458][ T5960] ? __virt_addr_valid+0x81/0x620 [ 239.103476][ T5960] ? sys_imageblit+0x19fb/0x1d60 [ 239.103493][ T5960] kasan_report+0xdf/0x1e0 [ 239.103507][ T5960] ? sys_imageblit+0x19fb/0x1d60 [ 239.103527][ T5960] sys_imageblit+0x19fb/0x1d60 [ 239.103547][ T5960] ? __pfx_sys_imageblit+0x10/0x10 [ 239.103567][ T5960] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 239.103590][ T5960] soft_cursor+0x524/0xa10 [ 239.103612][ T5960] bit_cursor+0xe58/0x16f0 [ 239.103629][ T5960] ? __pfx_bit_cursor+0x10/0x10 [ 239.103646][ T5960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.103668][ T5960] ? get_color+0x1da/0x450 [ 239.103688][ T5960] ? __pfx_bit_cursor+0x10/0x10 [ 239.103705][ T5960] fb_flashcursor+0x338/0x430 [ 239.103718][ T5960] process_one_work+0xa23/0x19a0 [ 239.103740][ T5960] ? __pfx_process_one_work+0x10/0x10 [ 239.103767][ T5960] ? __pfx_fb_flashcursor+0x10/0x10 [ 239.103787][ T5960] worker_thread+0x5ef/0xe50 [ 239.103807][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 239.103825][ T5960] ? kthread+0x13a/0x450 [ 239.103841][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 239.103859][ T5960] kthread+0x370/0x450 [ 239.103874][ T5960] ? __pfx_kthread+0x10/0x10 [ 239.103891][ T5960] ret_from_fork+0x754/0xd80 [ 239.103910][ T5960] ? __pfx_ret_from_fork+0x10/0x10 [ 239.103929][ T5960] ? __switch_to+0x7b4/0x1120 [ 239.103943][ T5960] ? __pfx_kthread+0x10/0x10 [ 239.103962][ T5960] ret_from_fork_asm+0x1a/0x30 [ 239.103981][ T5960] [ 239.103985][ T5960] [ 239.103989][ T5960] The buggy address belongs to a vmalloc virtual mapping [ 239.103999][ T5960] Memory state around the buggy address: [ 239.104006][ T5960] ffffc900049d8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 239.104015][ T5960] ffffc900049d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 239.104024][ T5960] >ffffc900049d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 239.104031][ T5960] ^ [ 239.104037][ T5960] ffffc900049d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 239.104046][ T5960] ffffc900049d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 239.104053][ T5960] ================================================================== [ 239.104074][ T5960] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 239.104085][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.104103][ T5960] Tainted: [L]=SOFTLOCKUP [ 239.104108][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.104117][ T5960] Workqueue: events_power_efficient fb_flashcursor [ 239.104130][ T5960] Call Trace: [ 239.104134][ T5960] [ 239.104139][ T5960] dump_stack_lvl+0x100/0x190 [ 239.104157][ T5960] vpanic+0x552/0x970 [ 239.104170][ T5960] ? __pfx_vpanic+0x10/0x10 [ 239.104183][ T5960] ? mark_held_locks+0x40/0x70 [ 239.104200][ T5960] ? sys_imageblit+0x19fb/0x1d60 [ 239.104218][ T5960] panic+0xd1/0xe0 [ 239.104229][ T5960] ? __pfx_panic+0x10/0x10 [ 239.104244][ T5960] ? check_panic_on_warn+0x1f/0x90 [ 239.104263][ T5960] check_panic_on_warn.cold+0x19/0x34 [ 239.104277][ T5960] end_report.part.0+0x3a/0x90 [ 239.104295][ T5960] kasan_report.cold+0xe/0x18 [ 239.104313][ T5960] ? sys_imageblit+0x19fb/0x1d60 [ 239.104333][ T5960] sys_imageblit+0x19fb/0x1d60 [ 239.104353][ T5960] ? __pfx_sys_imageblit+0x10/0x10 [ 239.104374][ T5960] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 239.104395][ T5960] soft_cursor+0x524/0xa10 [ 239.104413][ T5960] bit_cursor+0xe58/0x16f0 [ 239.104429][ T5960] ? __pfx_bit_cursor+0x10/0x10 [ 239.104447][ T5960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.104468][ T5960] ? get_color+0x1da/0x450 [ 239.104488][ T5960] ? __pfx_bit_cursor+0x10/0x10 [ 239.104502][ T5960] fb_flashcursor+0x338/0x430 [ 239.104515][ T5960] process_one_work+0xa23/0x19a0 [ 239.104536][ T5960] ? __pfx_process_one_work+0x10/0x10 [ 239.104557][ T5960] ? __pfx_fb_flashcursor+0x10/0x10 [ 239.104578][ T5960] worker_thread+0x5ef/0xe50 [ 239.104598][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 239.104616][ T5960] ? kthread+0x13a/0x450 [ 239.104632][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 239.104649][ T5960] kthread+0x370/0x450 [ 239.104665][ T5960] ? __pfx_kthread+0x10/0x10 [ 239.104682][ T5960] ret_from_fork+0x754/0xd80 [ 239.104700][ T5960] ? __pfx_ret_from_fork+0x10/0x10 [ 239.104719][ T5960] ? __switch_to+0x7b4/0x1120 [ 239.104733][ T5960] ? __pfx_kthread+0x10/0x10 [ 239.104756][ T5960] ret_from_fork_asm+0x1a/0x30 [ 239.104774][ T5960] [ 239.104834][ T5960] Kernel Offset: disabled