last executing test programs: 998.525647ms ago: executing program 0 (id=3788): r0 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2d, 0x0, 0x1f, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x20040804) 851.770355ms ago: executing program 3 (id=3792): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) 829.799684ms ago: executing program 0 (id=3793): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) close_range$auto(0x2, 0x8, 0x0) 767.66353ms ago: executing program 2 (id=3794): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) 705.283003ms ago: executing program 1 (id=3795): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) writev$auto(r0, &(0x7f0000001100)={0x0, 0xe5e7}, 0x1) 689.087792ms ago: executing program 3 (id=3796): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) read$auto(r0, &(0x7f0000000040)='@%[\x00', 0xfffffff0) 663.637367ms ago: executing program 2 (id=3797): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) 587.444826ms ago: executing program 1 (id=3798): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek$auto(0x3, 0x8, 0x3) 551.315282ms ago: executing program 2 (id=3799): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 545.92571ms ago: executing program 0 (id=3800): openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 484.466285ms ago: executing program 3 (id=3801): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/jbd2/sda1-8/info\x00', 0x240, 0x0) close_range$auto(0x2, 0x8, 0x0) 469.593971ms ago: executing program 1 (id=3802): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000140)=""/44, 0x2c) 377.430956ms ago: executing program 2 (id=3803): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd) 359.449119ms ago: executing program 3 (id=3804): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x2, 0x0) writev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x8}, 0x9) 317.640033ms ago: executing program 0 (id=3805): socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) 316.236578ms ago: executing program 1 (id=3806): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) 276.067853ms ago: executing program 0 (id=3807): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 193.164072ms ago: executing program 3 (id=3808): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79400d01532f2ed0d", 0x18) 186.930288ms ago: executing program 2 (id=3809): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045035, 0x0) 178.933334ms ago: executing program 1 (id=3810): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x40005504, 0xffffffffffffffff) 59.663794ms ago: executing program 0 (id=3811): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xe9) 18.251993ms ago: executing program 3 (id=3812): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x82000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/190, 0xbe) 9.994184ms ago: executing program 1 (id=3813): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064a3, 0x1000000000000003) 0s ago: executing program 2 (id=3814): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 81.050202][ T5813] cgroup: Unknown subsys name 'net' [ 81.168510][ T5813] cgroup: Unknown subsys name 'cpuset' [ 81.178259][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.843129][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.340088][ T5985] mmap: syz.2.150 (5985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.315386][ T6178] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.907497][ T6176] chnl_net:caif_netlink_parms(): no params data found [ 90.226956][ T6204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.235255][ T6204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.242907][ T6204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.251391][ T6204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.259631][ T6204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.564770][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.571941][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.594677][ T6176] bridge_slave_0: entered allmulticast mode [ 90.614437][ T6176] bridge_slave_0: entered promiscuous mode [ 90.648647][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.655901][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.663028][ T6176] bridge_slave_1: entered allmulticast mode [ 90.670544][ T6176] bridge_slave_1: entered promiscuous mode [ 90.712951][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.744164][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.826586][ T6176] team0: Port device team_slave_0 added [ 90.868385][ T6176] team0: Port device team_slave_1 added [ 91.345576][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.352592][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.397691][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.419729][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.427275][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.457935][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.630173][ T6176] hsr_slave_0: entered promiscuous mode [ 91.637209][ T6176] hsr_slave_1: entered promiscuous mode [ 91.981010][ T2157] cfg80211: failed to load regulatory.db [ 92.100419][ T6176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.138101][ T6176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.149101][ T6176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.185113][ T6176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.278535][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.299480][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.312381][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.319683][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.339427][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.346588][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.537482][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.580005][ T6176] veth0_vlan: entered promiscuous mode [ 92.591752][ T6176] veth1_vlan: entered promiscuous mode [ 92.623979][ T6176] veth0_macvtap: entered promiscuous mode [ 92.634254][ T6176] veth1_macvtap: entered promiscuous mode [ 92.653428][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.668314][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.682049][ T1119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.691682][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.702912][ T1119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.712484][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.464775][ T6204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.491337][ T6252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.499206][ T6252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.521233][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.532084][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.552577][ T6259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.559593][ T6260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.563357][ T6260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.576736][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.577243][ T6258] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.595232][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.602753][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.610022][ T6258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.613463][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.627931][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.635443][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.643594][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.651894][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.663204][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.673992][ T6256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.789513][ T688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.175528][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 95.321734][ T6250] chnl_net:caif_netlink_parms(): no params data found [ 95.425593][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 95.437891][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 95.449810][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.457104][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.464259][ T6248] bridge_slave_0: entered allmulticast mode [ 95.471580][ T6248] bridge_slave_0: entered promiscuous mode [ 95.498568][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.506001][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.513106][ T6248] bridge_slave_1: entered allmulticast mode [ 95.520452][ T6248] bridge_slave_1: entered promiscuous mode [ 95.626201][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.651722][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.674285][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.681626][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.689693][ T6250] bridge_slave_0: entered allmulticast mode [ 95.697204][ T6250] bridge_slave_0: entered promiscuous mode [ 95.729205][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.736914][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.744230][ T6250] bridge_slave_1: entered allmulticast mode [ 95.751853][ T6250] bridge_slave_1: entered promiscuous mode [ 95.814001][ T6248] team0: Port device team_slave_0 added [ 95.830829][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.838567][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.845869][ T6253] bridge_slave_0: entered allmulticast mode [ 95.853017][ T6253] bridge_slave_0: entered promiscuous mode [ 95.872885][ T6248] team0: Port device team_slave_1 added [ 95.879272][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.886545][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.893661][ T6254] bridge_slave_0: entered allmulticast mode [ 95.901218][ T6254] bridge_slave_0: entered promiscuous mode [ 95.908940][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.916188][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.923304][ T6253] bridge_slave_1: entered allmulticast mode [ 95.930652][ T6253] bridge_slave_1: entered promiscuous mode [ 95.940705][ T6250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.962710][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.970120][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.977730][ T6254] bridge_slave_1: entered allmulticast mode [ 95.985690][ T6254] bridge_slave_1: entered promiscuous mode [ 96.005563][ T6250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.058907][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.066203][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.092163][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.116156][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.138143][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.145305][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.171270][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.185267][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.197695][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.209625][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.220650][ T6250] team0: Port device team_slave_0 added [ 96.270254][ T6250] team0: Port device team_slave_1 added [ 96.290723][ T6254] team0: Port device team_slave_0 added [ 96.325353][ T6254] team0: Port device team_slave_1 added [ 96.333194][ T6253] team0: Port device team_slave_0 added [ 96.350160][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.357518][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.384739][ T6250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.409702][ T6253] team0: Port device team_slave_1 added [ 96.442003][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.449160][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.475535][ T6250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.515571][ T6248] hsr_slave_0: entered promiscuous mode [ 96.521985][ T6248] hsr_slave_1: entered promiscuous mode [ 96.528434][ T6248] debugfs: 'hsr0' already exists in 'hsr' [ 96.534272][ T6248] Cannot create hsr debugfs directory [ 96.562974][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.570188][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.596194][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.607877][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.615376][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.641465][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.663238][ T688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.695462][ T6256] Bluetooth: hci3: command tx timeout [ 96.695501][ T5146] Bluetooth: hci2: command tx timeout [ 96.707275][ T6204] Bluetooth: hci0: command tx timeout [ 96.715413][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.722406][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.748459][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.760521][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.767605][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.794012][ T6204] Bluetooth: hci1: command tx timeout [ 96.799617][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.846770][ T688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.938100][ T6250] hsr_slave_0: entered promiscuous mode [ 96.944680][ T6250] hsr_slave_1: entered promiscuous mode [ 96.950844][ T6250] debugfs: 'hsr0' already exists in 'hsr' [ 96.956819][ T6250] Cannot create hsr debugfs directory [ 96.974271][ T6253] hsr_slave_0: entered promiscuous mode [ 96.981162][ T6253] hsr_slave_1: entered promiscuous mode [ 96.987512][ T6253] debugfs: 'hsr0' already exists in 'hsr' [ 96.993267][ T6253] Cannot create hsr debugfs directory [ 97.030427][ T688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.118070][ T6254] hsr_slave_0: entered promiscuous mode [ 97.125070][ T6254] hsr_slave_1: entered promiscuous mode [ 97.131259][ T6254] debugfs: 'hsr0' already exists in 'hsr' [ 97.137909][ T6254] Cannot create hsr debugfs directory [ 97.465018][ T688] bridge_slave_1: left allmulticast mode [ 97.470806][ T688] bridge_slave_1: left promiscuous mode [ 97.477223][ T688] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.488461][ T688] bridge_slave_0: left allmulticast mode [ 97.494118][ T688] bridge_slave_0: left promiscuous mode [ 97.500526][ T688] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.669625][ T688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.680972][ T688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.691140][ T688] bond0 (unregistering): Released all slaves [ 97.908288][ T688] hsr_slave_0: left promiscuous mode [ 97.914282][ T688] hsr_slave_1: left promiscuous mode [ 97.920892][ T688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.928367][ T688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.936846][ T688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.944268][ T688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.959211][ T688] veth1_macvtap: left promiscuous mode [ 97.965007][ T688] veth0_macvtap: left promiscuous mode [ 97.970549][ T688] veth1_vlan: left promiscuous mode [ 97.976731][ T688] veth0_vlan: left promiscuous mode [ 98.161340][ T688] team0 (unregistering): Port device team_slave_1 removed [ 98.184378][ T688] team0 (unregistering): Port device team_slave_0 removed [ 98.290560][ T6248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.340097][ T6248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.358303][ T6248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.396891][ T6248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.593218][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.621030][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.634093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.641380][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.671862][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.679144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.774996][ T6204] Bluetooth: hci0: command tx timeout [ 98.780463][ T6204] Bluetooth: hci2: command tx timeout [ 98.786695][ T5146] Bluetooth: hci3: command tx timeout [ 98.855044][ T6204] Bluetooth: hci1: command tx timeout [ 98.879039][ T6253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.891533][ T6253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.910506][ T6253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.923736][ T6253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.117675][ T6254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.158270][ T6254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.253209][ T6254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.280578][ T6254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.357802][ T6250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.373516][ T6250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.387080][ T6250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.398191][ T6250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.415905][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.464304][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.476537][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.517704][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.524902][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.535754][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.542843][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.655117][ T6248] veth0_vlan: entered promiscuous mode [ 99.711157][ T6248] veth1_vlan: entered promiscuous mode [ 99.774037][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.854064][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.865744][ T6248] veth0_macvtap: entered promiscuous mode [ 99.881446][ T6248] veth1_macvtap: entered promiscuous mode [ 99.907056][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.949908][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.957103][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.969776][ T6250] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.008127][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.015338][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.030710][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.037924][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.051515][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.058716][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.126558][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.203047][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.253883][ T6254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.274157][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.320739][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.337254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.423521][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.462531][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.686833][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.709768][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.748130][ T6253] veth0_vlan: entered promiscuous mode [ 100.762362][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.779015][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.809071][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.820707][ T6253] veth1_vlan: entered promiscuous mode [ 100.855763][ T6204] Bluetooth: hci2: command tx timeout [ 100.861244][ T6204] Bluetooth: hci3: command tx timeout [ 100.867925][ T5146] Bluetooth: hci0: command tx timeout [ 100.935231][ T6204] Bluetooth: hci1: command tx timeout [ 100.993385][ T6254] veth0_vlan: entered promiscuous mode [ 101.010261][ T6253] veth0_macvtap: entered promiscuous mode [ 101.048796][ T6253] veth1_macvtap: entered promiscuous mode [ 101.088090][ T6254] veth1_vlan: entered promiscuous mode [ 101.173456][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.197333][ T6250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.210720][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.220859][ T6254] veth0_macvtap: entered promiscuous mode [ 101.248038][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.257872][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.278996][ T6254] veth1_macvtap: entered promiscuous mode [ 101.300074][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.310570][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.390090][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.449125][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.482657][ T6250] veth0_vlan: entered promiscuous mode [ 101.537871][ T6250] veth1_vlan: entered promiscuous mode [ 101.581173][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.591312][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.626670][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.653781][ T688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.666203][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.681931][ T688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.807126][ T6250] veth0_macvtap: entered promiscuous mode [ 101.817700][ T6250] veth1_macvtap: entered promiscuous mode [ 101.844436][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.863456][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.902518][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.928229][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.981519][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.075872][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.117494][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.138280][ T1119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.157024][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.166368][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.204070][ T1119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.236745][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.486843][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.510546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.666872][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.700214][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.934595][ T5146] Bluetooth: hci0: command tx timeout [ 102.940209][ T5146] Bluetooth: hci2: command tx timeout [ 102.945941][ T6204] Bluetooth: hci3: command tx timeout [ 103.015868][ T5146] Bluetooth: hci1: command tx timeout [ 109.034806][ T29] audit: type=1800 audit(1843104522.568:2): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.497" name="lu_gp_id" dev="configfs" ino=11321 res=0 errno=0 [ 109.889944][ T5146] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 112.675772][ T6833] Unable to find swap-space signature [ 113.213239][ T6857] capability: warning: `syz.2.591' uses 32-bit capabilities (legacy support in use) [ 114.335329][ T5146] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 114.534954][ T6916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.749271][ T29] audit: type=1800 audit(1843104528.308:3): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.627" name="trace_pipe" dev="tracefs" ino=4025 res=0 errno=0 [ 115.135541][ T29] audit: type=1800 audit(1843104528.690:4): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.635" name="version" dev="configfs" ino=11630 res=0 errno=0 [ 115.832900][ T6974] Unable to find swap-space signature [ 116.319260][ T6997] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.515208][ T7056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.299207][ T5146] Bluetooth: hci2: unexpected event 0x34 length: 11 > 6 [ 119.589362][ T7142] nfs: Bad value for 'source' [ 121.173554][ T5146] Bluetooth: hci0: unexpected event 0x03 length: 123 > 11 [ 122.122685][ T7242] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.778066][ T5146] Bluetooth: hci2: unknown advertising packet type: 0xea [ 125.340477][ T7384] Invalid ELF header magic: != ELF [ 125.723181][ T7401] ptrace attach of "./syz-executor exec"[6253] was attempted by "./syz-executor exec"[7401] [ 127.106145][ T7466] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.662731][ T7535] can: request_module (can-proto-5) failed. [ 130.640908][ T7631] syz.2.968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.820823][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.827354][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.455066][ T7783] Unable to find swap-space signature [ 136.514822][ T7863] kexec: Could not allocate control_code_buffer [ 138.952780][ T8059] Invalid ELF header magic: != ELF [ 140.475045][ T5146] Bluetooth: hci3: unexpected event 0x3c length: 254 > 7 [ 140.660780][ T29] audit: type=1800 audit(1843104554.352:5): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1192" name="features" dev="configfs" ino=15187 res=0 errno=0 [ 144.299530][ T5146] Bluetooth: hci1: unexpected event 0x3e length: 720 > 260 [ 144.837976][ T8307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.081105][ T8314] syz.2.1281 (8314): attempted to duplicate a private mapping with mremap. This is not supported. [ 145.800692][ T8284] kexec: Could not allocate control_code_buffer [ 146.266789][ T5146] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 146.738770][ T29] audit: type=1800 audit(1843105587.466:6): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1315" name="dbroot" dev="configfs" ino=16611 res=0 errno=0 [ 149.905575][ T8525] random: crng reseeded on system resumption [ 150.676310][ T8487] kexec: Could not allocate control_code_buffer [ 150.918235][ T29] audit: type=1326 audit(1843105591.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.1.1407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6da4d9c799 code=0x0 [ 152.991763][ T8583] kexec: Could not allocate control_code_buffer [ 154.133379][ T29] audit: type=1800 audit(1843105594.895:8): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1483" name="features" dev="configfs" ino=16028 res=0 errno=0 [ 161.162975][ T5146] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 162.098637][ T9153] ======================================================= [ 162.098637][ T9153] WARNING: The mand mount option has been deprecated and [ 162.098637][ T9153] and is ignored by this kernel. Remove the mand [ 162.098637][ T9153] option from the mount to silence this warning. [ 162.098637][ T9153] ======================================================= [ 162.758361][ T29] audit: type=1800 audit(4294967302.860:9): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1714" name="trace_pipe" dev="tracefs" ino=4070 res=0 errno=0 [ 166.162232][ T9334] syz_tun: tun_chr_ioctl cmd 1074025680 [ 166.982915][ T9373] syz_tun: tun_chr_ioctl cmd 1074025672 [ 166.988647][ T9373] syz_tun: ignored: set checksum disabled [ 168.358072][ T9437] ptrace attach of "./syz-executor exec"[6250] was attempted by "./syz-executor exec"[9437] [ 171.347526][ T9600] futex_wake_op: syz.0.1922 tries to shift op by -2048; fix this program [ 172.219311][ T9650] __vm_enough_memory: pid: 9650, comm: syz.1.1947, bytes: 4398046511104 not enough memory for the allocation [ 173.097372][ T9694] ima: policy update failed [ 173.116091][ T29] audit: type=1802 audit(4294967313.274:10): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1969" res=0 errno=0 [ 173.165946][ T9692] Process accounting resumed [ 173.837319][ T5146] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 176.233550][ T9863] capability: warning: `syz.0.2053' uses deprecated v2 capabilities in a way that may be insecure [ 176.970271][ T5146] Bluetooth: hci3: unexpected event 0x22 length: 726 > 260 [ 176.970307][ T5146] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 179.190727][ T29] audit: type=1800 audit(4294967319.375:11): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2126" name="dummy_udc" dev="gadgetfs" ino=8098 res=0 errno=0 [ 181.135516][T10108] futex_wake_op: syz.0.2172 tries to shift op by -1; fix this program [ 182.293668][T10171] syz.2.2201(10171): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 183.866271][ T29] audit: type=1800 audit(4294967324.080:12): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2238" name="members" dev="configfs" ino=21591 res=0 errno=0 [ 187.212156][T10413] binder: 10412:10413 ioctl c0046209 9 returned -22 [ 188.470469][T10473] program syz.2.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.486946][T10475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 188.559317][T10479] binder: 10478:10479 ioctl 541b 38 returned -22 [ 189.734433][T10542] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 189.806816][ T29] audit: type=1800 audit(4294967330.050:13): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2378" name="sr0" dev="devtmpfs" ino=2796 res=0 errno=0 [ 190.201249][T10564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.263153][T10564] CIFS mount error: No usable UNC path provided in device string! [ 190.263153][T10564] [ 190.274327][T10564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 192.065154][T10658] warning: `syz.0.2433' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.141454][T10662] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 192.779674][T10691] Setting dangerous option i915.mitigations - tainting kernel [ 193.662585][T10736] block2mtd: too many arguments [ 193.919673][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.926252][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.954158][T10854] Setting dangerous option i915.mitigations - tainting kernel [ 197.295897][T10931] syz.2.2566 uses obsolete (PF_INET,SOCK_PACKET) [ 198.121603][T10973] Line length is too long: Should be less than 4094 [ 198.728266][T11005] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 199.002415][T11015] cougar: G6 mapped to space [ 200.131284][T11076] syz_tun: tun_chr_ioctl cmd 1074025694 [ 201.388665][T11143] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 201.400325][T11143] ep_00: uevent: failed to send synthetic uevent: -22 [ 201.950782][T11170] usbcore.quirks: string doesn't fit in 127 chars. [ 202.319965][T11187] bonding: no command found in bonding_masters - use +ifname or -ifname [ 202.497938][T11197] block nbd0: NBD_DISCONNECT [ 202.892107][T11221] bond0: invalid ARP target specified [ 203.016043][T11225] random: crng reseeded on system resumption [ 203.179620][T11225] Process accounting paused [ 203.482454][T11251] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 207.207749][T11442] vhci_hcd vhci_hcd.2: invalid port number 135 [ 207.243118][T11442] vhci_hcd vhci_hcd.2: invalid port number 135 [ 209.115684][T11542] [U] 0="/ [ 209.119362][T11542] [U] [ 209.122164][T11542] [U] EeQ@ [ 209.148366][T11541] [U]  [ 209.266487][T11550] random: crng reseeded on system resumption [ 209.461802][T11557] bond0: no command found in slaves file - use +ifname or -ifname [ 209.505856][T11560] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 211.002762][T11619] Format for deleting device is "id" (uint). [ 212.071722][T11677] syz.3.2931 (11677): attempted to duplicate a private mapping with mremap. This is not supported. [ 213.342929][T11738] bond0: Unable to set down delay as MII monitoring is disabled [ 214.062013][T11776] kAFS: No cell specified [ 214.223446][T11782] delete_channel: no stack [ 215.938918][T11866] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 216.352497][T11885] [U] ^Z [ 216.355720][ T6258] Bluetooth: hci3: command 0x0406 tx timeout [ 216.362442][ T6258] Bluetooth: hci1: command 0x0406 tx timeout [ 216.363135][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 216.370802][ T6259] Bluetooth: hci0: command 0x0406 tx timeout [ 218.651269][T12006] ecryptfs_parse_packet_length: Error parsing packet length [ 218.658957][T12006] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 220.478290][T12104] bond0: option packets_per_slave: invalid value ( Xnp) [ 220.486864][T12104] bond0: option packets_per_slave: allowed values 0 - 65535 [ 222.644965][T12207] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 223.819859][T12262] i2c i2c-0: new_device: Can't parse I2C address [ 224.707088][T12311] sysfs_service_op_store: Client not running :-5: [ 226.408534][T12406] vhci_hcd vhci_hcd.2: invalid port number 253 [ 226.415001][T12406] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 227.336514][T12453] usb usb13: check_ctrlrecip: process 12453 (syz.1.3311) requesting ep 01 but needs 81 [ 227.381001][T12453] usb usb13: usbfs: process 12453 (syz.1.3311) did not claim interface 0 before use [ 229.711120][T12584] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 229.830574][T12586] program syz.3.3376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.333331][T12613] QAT: Invalid ioctl 21531 [ 231.377245][T12665] syz.1.3415 uses obsolete (PF_INET,SOCK_PACKET) [ 231.415537][T12667] zswap: compressor ^`#ߗ(2NAV1`Wnf\'J돆#If&ͦ5j)٥Kp$'\&9r y*paۄH,T{Kf_SQAW not available [ 232.996722][T12747] zswap: compressor ^`#ߗ(2NAV1`Wnf\'J돆#If&ͦ5j)٥Kp$'\&9r y*paۄH,T{Kf_SQAW not available [ 233.101778][T12746] Process accounting resumed [ 233.503722][T12779] zswap: compressor ^`#ߗ(2NAV1`Wnf\'J돆#If&ͦ5j)٥Kp$'\&9r y*paۄH,T{Kf_SQAW not available [ 235.043467][T12854] ptrace attach of "./syz-executor exec"[6253] was attempted by "./syz-executor exec"[12854] [ 237.012090][T12955] kafs: addr_prefs: Invalid Command [ 237.625190][ T29] audit: type=1800 audit(4294967378.109:14): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3567" name="discovery_nqn" dev="configfs" ino=30088 res=0 errno=0 [ 239.132695][T13048] program syz.3.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.177349][T13048] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 239.730905][T13072] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.101294][ T29] audit: type=1800 audit(4294967380.602:15): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3620" name="dbroot" dev="configfs" ino=31244 res=0 errno=0 [ 240.142464][T13091] db_root: cannot open: /dev/audio1 [ 240.186630][T13091] db_root: not a directory: /dev/audio1 [ 242.603712][ T29] audit: type=1800 audit(4294967383.125:16): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3681" name="dbroot" dev="configfs" ino=31469 res=0 errno=0 [ 242.626800][T13215] db_root: cannot open: /dev/audio1 [ 242.657092][T13215] db_root: not a directory: /dev/audio1 [ 245.406657][ T29] audit: type=1806 audit(4294967385.930:17): xattr="." res=0 [ 248.412046][T13485] ================================================================== [ 248.412072][T13485] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 248.412130][T13485] Write of size 8 at addr ffffc90004739000 by task syz.2.3814/13485 [ 248.412159][T13485] [ 248.412192][T13485] CPU: 1 UID: 0 PID: 13485 Comm: syz.2.3814 Tainted: G U syzkaller #0 PREEMPT(full) [ 248.412241][T13485] Tainted: [U]=USER [ 248.412253][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 248.412277][T13485] Call Trace: [ 248.412288][T13485] [ 248.412300][T13485] dump_stack_lvl+0x100/0x190 [ 248.412349][T13485] print_report+0x156/0x4c9 [ 248.412397][T13485] ? _raw_spin_lock_irqsave+0x52/0x60 [ 248.412434][T13485] ? __virt_addr_valid+0x81/0x620 [ 248.412481][T13485] ? sys_fillrect+0x174a/0x1910 [ 248.412520][T13485] kasan_report+0xdf/0x1e0 [ 248.412554][T13485] ? sys_fillrect+0x174a/0x1910 [ 248.412601][T13485] sys_fillrect+0x174a/0x1910 [ 248.412658][T13485] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 248.412714][T13485] bit_clear+0x17d/0x220 [ 248.412746][T13485] ? __pfx_bit_clear+0x10/0x10 [ 248.412779][T13485] ? fb_get_color_depth+0x120/0x250 [ 248.412832][T13485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.412894][T13485] __fbcon_clear+0x633/0x760 [ 248.412954][T13485] ? __pfx_bit_clear+0x10/0x10 [ 248.412990][T13485] fbcon_scroll+0x48b/0x650 [ 248.413045][T13485] con_scroll+0x464/0x690 [ 248.413089][T13485] do_con_write+0x6883/0x8540 [ 248.413145][T13485] ? __pfx_do_con_write+0x10/0x10 [ 248.413198][T13485] con_write+0x23/0xb0 [ 248.413240][T13485] n_tty_write+0x44f/0x12d0 [ 248.413302][T13485] ? __pfx_n_tty_write+0x10/0x10 [ 248.413352][T13485] ? trace_kmalloc+0x101/0x130 [ 248.413387][T13485] ? __pfx_woken_wake_function+0x10/0x10 [ 248.413439][T13485] ? rcu_is_watching+0x12/0xc0 [ 248.413488][T13485] ? file_tty_write.isra.0+0x694/0x890 [ 248.413529][T13485] ? kfree+0x2ec/0x6b0 [ 248.413572][T13485] ? __pfx_n_tty_write+0x10/0x10 [ 248.413625][T13485] file_tty_write.isra.0+0x4d2/0x890 [ 248.413682][T13485] redirected_tty_write+0xd4/0x120 [ 248.413726][T13485] vfs_write+0x6ac/0x1070 [ 248.413781][T13485] ? __pfx_redirected_tty_write+0x10/0x10 [ 248.413827][T13485] ? __pfx_vfs_write+0x10/0x10 [ 248.413879][T13485] ? find_held_lock+0x2b/0x80 [ 248.413923][T13485] ksys_write+0x12a/0x250 [ 248.413952][T13485] ? __pfx_ksys_write+0x10/0x10 [ 248.413988][T13485] do_syscall_64+0x106/0xf80 [ 248.414029][T13485] ? clear_bhb_loop+0x40/0x90 [ 248.414068][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.414104][T13485] RIP: 0033:0x7f2ec459c799 [ 248.414139][T13485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.414173][T13485] RSP: 002b:00007f2ec27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.414210][T13485] RAX: ffffffffffffffda RBX: 00007f2ec4815fa0 RCX: 00007f2ec459c799 [ 248.414232][T13485] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 248.414253][T13485] RBP: 00007f2ec4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 248.414273][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.414293][T13485] R13: 00007f2ec4816038 R14: 00007f2ec4815fa0 R15: 00007ffe02da14b8 [ 248.414326][T13485] [ 248.414338][T13485] [ 248.414348][T13485] The buggy address belongs to a vmalloc virtual mapping [ 248.414371][T13485] Memory state around the buggy address: [ 248.414389][T13485] ffffc90004738f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 248.414418][T13485] ffffc90004738f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 248.414443][T13485] >ffffc90004739000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 248.414462][T13485] ^ [ 248.414479][T13485] ffffc90004739080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 248.414504][T13485] ffffc90004739100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 248.414523][T13485] ================================================================== [ 248.414648][T13485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.414674][T13485] CPU: 1 UID: 0 PID: 13485 Comm: syz.2.3814 Tainted: G U syzkaller #0 PREEMPT(full) [ 248.414722][T13485] Tainted: [U]=USER [ 248.414734][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 248.414753][T13485] Call Trace: [ 248.414764][T13485] [ 248.414776][T13485] dump_stack_lvl+0x100/0x190 [ 248.414825][T13485] vpanic+0x552/0x970 [ 248.414856][T13485] ? __pfx_vpanic+0x10/0x10 [ 248.414892][T13485] ? sys_fillrect+0x174a/0x1910 [ 248.414931][T13485] panic+0xd1/0xe0 [ 248.414961][T13485] ? __pfx_panic+0x10/0x10 [ 248.414995][T13485] ? sys_fillrect+0x174a/0x1910 [ 248.415035][T13485] ? preempt_schedule_common+0x42/0xc0 [ 248.415080][T13485] check_panic_on_warn.cold+0x19/0x34 [ 248.415117][T13485] end_report.part.0+0x3a/0x90 [ 248.415167][T13485] kasan_report.cold+0xe/0x18 [ 248.415217][T13485] ? sys_fillrect+0x174a/0x1910 [ 248.415263][T13485] sys_fillrect+0x174a/0x1910 [ 248.415319][T13485] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 248.415371][T13485] bit_clear+0x17d/0x220 [ 248.415403][T13485] ? __pfx_bit_clear+0x10/0x10 [ 248.415436][T13485] ? fb_get_color_depth+0x120/0x250 [ 248.415488][T13485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.415550][T13485] __fbcon_clear+0x633/0x760 [ 248.415602][T13485] ? __pfx_bit_clear+0x10/0x10 [ 248.415645][T13485] fbcon_scroll+0x48b/0x650 [ 248.415699][T13485] con_scroll+0x464/0x690 [ 248.415742][T13485] do_con_write+0x6883/0x8540 [ 248.415797][T13485] ? __pfx_do_con_write+0x10/0x10 [ 248.415851][T13485] con_write+0x23/0xb0 [ 248.415892][T13485] n_tty_write+0x44f/0x12d0 [ 248.415952][T13485] ? __pfx_n_tty_write+0x10/0x10 [ 248.416003][T13485] ? trace_kmalloc+0x101/0x130 [ 248.416038][T13485] ? __pfx_woken_wake_function+0x10/0x10 [ 248.416088][T13485] ? rcu_is_watching+0x12/0xc0 [ 248.416137][T13485] ? file_tty_write.isra.0+0x694/0x890 [ 248.416179][T13485] ? kfree+0x2ec/0x6b0 [ 248.416221][T13485] ? __pfx_n_tty_write+0x10/0x10 [ 248.416272][T13485] file_tty_write.isra.0+0x4d2/0x890 [ 248.416321][T13485] redirected_tty_write+0xd4/0x120 [ 248.416371][T13485] vfs_write+0x6ac/0x1070 [ 248.416425][T13485] ? __pfx_redirected_tty_write+0x10/0x10 [ 248.416473][T13485] ? __pfx_vfs_write+0x10/0x10 [ 248.416525][T13485] ? find_held_lock+0x2b/0x80 [ 248.416569][T13485] ksys_write+0x12a/0x250 [ 248.416600][T13485] ? __pfx_ksys_write+0x10/0x10 [ 248.416642][T13485] do_syscall_64+0x106/0xf80 [ 248.416684][T13485] ? clear_bhb_loop+0x40/0x90 [ 248.416723][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.416757][T13485] RIP: 0033:0x7f2ec459c799 [ 248.416784][T13485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.416817][T13485] RSP: 002b:00007f2ec27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.416850][T13485] RAX: ffffffffffffffda RBX: 00007f2ec4815fa0 RCX: 00007f2ec459c799 [ 248.416873][T13485] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 248.416894][T13485] RBP: 00007f2ec4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 248.416914][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.416935][T13485] R13: 00007f2ec4816038 R14: 00007f2ec4815fa0 R15: 00007ffe02da14b8 [ 248.416968][T13485] [ 248.417678][T13485] Kernel Offset: disabled