last executing test programs: 2.022933362s ago: executing program 1 (id=8153): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 1.64129877s ago: executing program 1 (id=8160): mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r0, 0x80000000, 0x0, 0x6) 1.558582592s ago: executing program 0 (id=8161): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) 1.479815443s ago: executing program 3 (id=8163): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48980, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x80000004, 0x4, 0x100, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) 1.324054881s ago: executing program 0 (id=8164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0) sendmsg$auto_OVS_DP_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1.2878333s ago: executing program 2 (id=8165): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') 1.283348325s ago: executing program 3 (id=8166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, ':fR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 1.244529637s ago: executing program 1 (id=8167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002200)={0x14, r1, 0x1, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x48084) 1.073510245s ago: executing program 2 (id=8168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x5, 0x8, 0x0, 0x1, [@generic="c5"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) 1.06665445s ago: executing program 0 (id=8169): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) socket(0x2b, 0x1, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 1.033773541s ago: executing program 3 (id=8170): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000005400)={0x0, 0x0, &(0x7f00000053c0)={&(0x7f0000004c40)={0x3c, r0, 0x1b1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "fb5ca63af87a55b36e4cdb1914162261f443a608188acf1767b01bcd740059cc8f32faad"}]}, 0x3c}}, 0x4000000) 924.848144ms ago: executing program 1 (id=8171): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) 861.609051ms ago: executing program 2 (id=8172): mmap$auto(0x0, 0x2020009, 0x2, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) write$auto(r0, 0x0, 0xa) 832.496654ms ago: executing program 3 (id=8173): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) 654.848319ms ago: executing program 2 (id=8174): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) 624.735711ms ago: executing program 3 (id=8175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) 482.386181ms ago: executing program 0 (id=8176): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setitimer$auto(0x1, 0x0, 0x0) 427.225996ms ago: executing program 2 (id=8177): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x40084d02, r0) 385.793053ms ago: executing program 3 (id=8178): mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, 0x0, 0x11, 0x2) 346.024496ms ago: executing program 1 (id=8179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'N,]\'\x00'}]}, 0x20}}, 0x20000040) 215.442304ms ago: executing program 2 (id=8180): ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, 0x0, 0xc5, 0x0, 0x6, &(0x7f00000004c0)="446b081769e3b176bd009e85f5084404010ae3abc8b0961c665b7e010123fbf142831055f70eb4636634db71af3b1aa74fb6c1c48c1342e9d4556c986a8dc44d6d99cb971bcb94fc4581d7a747a31a624d2b4e4c78c4a59fee8f75a8b0f0554f6d5fb7d0cc9b9c433d0281999ef53e6870305515193d1dc9e12464e48b31ddbd5ef20860e094b0f47f7576e3740a34915560041df7368da5e3a31a504b37f99b4d", 0x0}, 0xffffffff, 0x0}) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) 201.23222ms ago: executing program 0 (id=8181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000580)={0x30, r1, 0x601, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_KEY={0x3a, 0x1, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="ef6735f5058af96b26651160dfbb140872"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 93.129886ms ago: executing program 1 (id=8182): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x8902, 0x38) 0s ago: executing program 0 (id=8183): mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xcf, 0x0) open$dir(&(0x7f00000000c0)='}[,&*}\x00', 0x400, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 88.182724][ T5811] cgroup: Unknown subsys name 'net' [ 88.282215][ T5811] cgroup: Unknown subsys name 'cpuset' [ 88.292005][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.158311][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.465476][ T5918] mmap: syz.2.84 (5918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.420072][ T24] cfg80211: failed to load regulatory.db [ 98.645556][ T6007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.656438][ T6007] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.664922][ T6007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.674504][ T6007] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.690681][ T6007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.740571][ T6009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.764145][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.776475][ T6015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.786019][ T6015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.795097][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.808742][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.817661][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.829714][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.834338][ T6018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.868670][ T6015] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.876833][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.877875][ T6018] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.893155][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.901613][ T6015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.911144][ T6015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.625139][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 99.697906][ T6010] chnl_net:caif_netlink_parms(): no params data found [ 99.785496][ T6012] chnl_net:caif_netlink_parms(): no params data found [ 99.866729][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 99.972173][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.980772][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.988503][ T6006] bridge_slave_0: entered allmulticast mode [ 99.996886][ T6006] bridge_slave_0: entered promiscuous mode [ 100.048908][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.056493][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.064669][ T6006] bridge_slave_1: entered allmulticast mode [ 100.072694][ T6006] bridge_slave_1: entered promiscuous mode [ 100.124063][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.131478][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.138816][ T6010] bridge_slave_0: entered allmulticast mode [ 100.146249][ T6010] bridge_slave_0: entered promiscuous mode [ 100.161412][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.168954][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.176477][ T6012] bridge_slave_0: entered allmulticast mode [ 100.184277][ T6012] bridge_slave_0: entered promiscuous mode [ 100.205474][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.212813][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.220707][ T6010] bridge_slave_1: entered allmulticast mode [ 100.229455][ T6010] bridge_slave_1: entered promiscuous mode [ 100.243704][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.251072][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.259212][ T6012] bridge_slave_1: entered allmulticast mode [ 100.267050][ T6012] bridge_slave_1: entered promiscuous mode [ 100.279290][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.327327][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.391048][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.401334][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.408942][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.416189][ T6011] bridge_slave_0: entered allmulticast mode [ 100.424177][ T6011] bridge_slave_0: entered promiscuous mode [ 100.434446][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.459423][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.469037][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.476343][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.483720][ T6011] bridge_slave_1: entered allmulticast mode [ 100.492039][ T6011] bridge_slave_1: entered promiscuous mode [ 100.502217][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.530578][ T6006] team0: Port device team_slave_0 added [ 100.575491][ T6006] team0: Port device team_slave_1 added [ 100.607343][ T6012] team0: Port device team_slave_0 added [ 100.629117][ T6010] team0: Port device team_slave_0 added [ 100.651627][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.667973][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.679693][ T6012] team0: Port device team_slave_1 added [ 100.688441][ T6010] team0: Port device team_slave_1 added [ 100.695157][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.702889][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.729273][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.769304][ T6007] Bluetooth: hci0: command tx timeout [ 100.801169][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.808314][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.835606][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.863322][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.870656][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.897355][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.927783][ T6007] Bluetooth: hci2: command tx timeout [ 100.938530][ T6011] team0: Port device team_slave_0 added [ 100.946093][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.953928][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.980450][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.992752][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.000435][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.026644][ T6007] Bluetooth: hci3: command tx timeout [ 101.026996][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.033596][ T6018] Bluetooth: hci1: command tx timeout [ 101.052463][ T6011] team0: Port device team_slave_1 added [ 101.079907][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.086933][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.113817][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.139051][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.146186][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.173130][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.186513][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.193763][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.220283][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.293905][ T6006] hsr_slave_0: entered promiscuous mode [ 101.301089][ T6006] hsr_slave_1: entered promiscuous mode [ 101.379358][ T6010] hsr_slave_0: entered promiscuous mode [ 101.386215][ T6010] hsr_slave_1: entered promiscuous mode [ 101.393089][ T6010] debugfs: 'hsr0' already exists in 'hsr' [ 101.399219][ T6010] Cannot create hsr debugfs directory [ 101.411584][ T6012] hsr_slave_0: entered promiscuous mode [ 101.418319][ T6012] hsr_slave_1: entered promiscuous mode [ 101.424820][ T6012] debugfs: 'hsr0' already exists in 'hsr' [ 101.430668][ T6012] Cannot create hsr debugfs directory [ 101.486961][ T6011] hsr_slave_0: entered promiscuous mode [ 101.493912][ T6011] hsr_slave_1: entered promiscuous mode [ 101.501538][ T6011] debugfs: 'hsr0' already exists in 'hsr' [ 101.507339][ T6011] Cannot create hsr debugfs directory [ 102.004598][ T6006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.027987][ T6006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.042142][ T6006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.065837][ T6006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.147552][ T6010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.161168][ T6010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.187439][ T6010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.202593][ T6010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.266232][ T6012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.295359][ T6012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.312270][ T6012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.335023][ T6012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.472160][ T6011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.484519][ T6011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.495774][ T6011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.523412][ T6011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.605446][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.656994][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.675081][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.709693][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.717213][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.729247][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.736827][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.755051][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.800496][ T6012] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.816671][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.836814][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.845232][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.854918][ T6018] Bluetooth: hci0: command tx timeout [ 102.909829][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.917884][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.932597][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.940055][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.951657][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.959157][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.025442][ T6018] Bluetooth: hci2: command tx timeout [ 103.036503][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.088538][ T6018] Bluetooth: hci1: command tx timeout [ 103.094196][ T6018] Bluetooth: hci3: command tx timeout [ 103.114439][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.163178][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.170645][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.207279][ T6010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.246866][ T6012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.296647][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.304054][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.472037][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.613574][ T6006] veth0_vlan: entered promiscuous mode [ 103.641831][ T6006] veth1_vlan: entered promiscuous mode [ 103.782664][ T6006] veth0_macvtap: entered promiscuous mode [ 103.818124][ T6006] veth1_macvtap: entered promiscuous mode [ 103.892835][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.916897][ T6012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.956601][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.989674][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.005885][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.017053][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.029310][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.045622][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.067895][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.190640][ T6012] veth0_vlan: entered promiscuous mode [ 104.213719][ T6010] veth0_vlan: entered promiscuous mode [ 104.243357][ T6012] veth1_vlan: entered promiscuous mode [ 104.254464][ T6011] veth0_vlan: entered promiscuous mode [ 104.289667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.304320][ T6011] veth1_vlan: entered promiscuous mode [ 104.309968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.323037][ T6010] veth1_vlan: entered promiscuous mode [ 104.393625][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.414480][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.436192][ T6012] veth0_macvtap: entered promiscuous mode [ 104.462324][ T6012] veth1_macvtap: entered promiscuous mode [ 104.473755][ T6011] veth0_macvtap: entered promiscuous mode [ 104.499642][ T6006] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.503768][ T6010] veth0_macvtap: entered promiscuous mode [ 104.536319][ T6011] veth1_macvtap: entered promiscuous mode [ 104.557905][ T6010] veth1_macvtap: entered promiscuous mode [ 104.574235][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.593130][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.629687][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.654412][ T27] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.677221][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.706552][ T27] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.720021][ T27] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.739310][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.752588][ T27] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.774977][ T27] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.802151][ T27] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.812064][ T27] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.834889][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.845447][ T27] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.907811][ T27] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.944979][ T6018] Bluetooth: hci0: command tx timeout [ 104.970921][ T27] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.030223][ T27] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.040036][ T27] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.078158][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.086235][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.098145][ T6018] Bluetooth: hci2: command tx timeout [ 105.168262][ T6018] Bluetooth: hci1: command tx timeout [ 105.180117][ T6018] Bluetooth: hci3: command tx timeout [ 105.260940][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.285564][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.294448][ T6096] syz.0.157(6096): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 105.332088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.346499][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.510574][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.512385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.536326][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.543806][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.696228][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.706893][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.008550][ T6018] Bluetooth: hci0: command tx timeout [ 107.168473][ T6018] Bluetooth: hci2: command tx timeout [ 107.258918][ T6018] Bluetooth: hci3: command tx timeout [ 107.265515][ T6007] Bluetooth: hci1: command tx timeout [ 107.423839][ T6157] Unable to find swap-space signature [ 110.956376][ T6293] Unable to find swap-space signature [ 112.112273][ T30] audit: type=1800 audit(1776074643.175:2): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.274" name="members" dev="configfs" ino=8929 res=0 errno=0 [ 114.646660][ T6446] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.918894][ T6496] ======================================================= [ 115.918894][ T6496] WARNING: The mand mount option has been deprecated and [ 115.918894][ T6496] and is ignored by this kernel. Remove the mand [ 115.918894][ T6496] option from the mount to silence this warning. [ 115.918894][ T6496] ======================================================= [ 121.926973][ T6018] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 123.700694][ T6769] capability: warning: `syz.3.477' uses 32-bit capabilities (legacy support in use) [ 129.452096][ T6958] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.327565][ T30] audit: type=1800 audit(1843105552.679:3): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.580" name="lu_gp_id" dev="configfs" ino=11551 res=0 errno=0 [ 132.940584][ T7082] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.278196][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.285984][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.465841][ T7131] nfs: Bad value for 'source' [ 135.358382][ T6018] Bluetooth: hci2: unknown advertising packet type: 0xea [ 135.680082][ T7173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.010699][ T30] audit: type=1326 audit(1843105559.366:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7faf9c819 code=0x0 [ 141.402900][ T7365] Process accounting resumed [ 142.073043][ T30] audit: type=1800 audit(1843123908.417:5): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.785" name="features" dev="configfs" ino=12387 res=0 errno=0 [ 142.655920][ T30] audit: type=1800 audit(4294967297.380:6): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.796" name="dbroot" dev="configfs" ino=12234 res=0 errno=0 [ 143.894592][ T30] audit: type=1800 audit(4294967298.630:7): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.822" name="features" dev="configfs" ino=12503 res=0 errno=0 [ 143.967004][ T7475] syz_tun: tun_chr_ioctl cmd 1074812117 [ 144.687877][ T7502] futex_wake_op: syz.2.836 tries to shift op by -1; fix this program [ 145.258683][ T7527] syz.3.848 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.705069][ T30] audit: type=1800 audit(4294967300.440:8): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.858" name="trace_pipe" dev="tracefs" ino=3048 res=0 errno=0 [ 146.060935][ T30] audit: type=1800 audit(4294967300.800:9): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.866" name="trace_pipe" dev="tracefs" ino=3003 res=0 errno=0 [ 146.272653][ T7572] capability: warning: `syz.2.869' uses deprecated v2 capabilities in a way that may be insecure [ 151.335712][ T7717] kexec: Could not allocate control_code_buffer [ 152.804034][ T7837] syz_tun: tun_chr_ioctl cmd 1074025675 [ 152.811131][ T7837] syz_tun: persist enabled [ 153.007682][ T7846] futex_wake_op: syz.3.1007 tries to shift op by -2048; fix this program [ 155.984860][ T7975] syz_tun: tun_chr_ioctl cmd 1074025672 [ 156.026066][ T7975] syz_tun: ignored: set checksum disabled [ 156.862353][ T8015] Invalid ELF header magic: != ELF [ 157.828413][ T8019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.839723][ T8019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.888800][ T8019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.950466][ T8019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.975549][ T8019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.023800][ T8019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.049064][ T8019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.055597][ T8019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.089232][ T8019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.137867][ T8019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.144074][ T8019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.203161][ T8019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.211205][ T30] audit: type=1800 audit(4294968339.950:10): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1115" name="version" dev="configfs" ino=14492 res=0 errno=0 [ 159.096430][ T6018] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.976958][ T6018] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.058093][ T6018] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.218404][ T6018] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.937094][ T8173] ptrace attach of "./syz-executor exec"[6006] was attempted by "./syz-executor exec"[8173] [ 161.182083][ T6018] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.057301][ T6018] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.138481][ T6018] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.297951][ T6018] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.265806][ T6018] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.141881][ T6018] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.216427][ T6018] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.376311][ T6018] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.943149][ T8486] syz_tun: tun_chr_ioctl cmd 1074025680 [ 168.109502][ T8492] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 168.300395][ T8500] __vm_enough_memory: pid: 8500, comm: syz.1.1330, bytes: 4398046511104 not enough memory for the allocation [ 170.935611][ T8539] kexec: Could not allocate control_code_buffer [ 171.420910][ T8609] Process accounting paused [ 173.760430][ T8727] ptrace attach of "./syz-executor exec"[6012] was attempted by "./syz-executor exec"[8727] [ 174.454366][ T6018] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 177.428569][ T8895] ptrace attach of "./syz-executor exec"[6011] was attempted by "./syz-executor exec"[8895] [ 177.917775][ T6018] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 180.242534][ T6018] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 184.630733][ T6018] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 184.988970][ T9253] random: crng reseeded on system resumption [ 188.009361][ T9406] block nbd0: NBD_DISCONNECT [ 188.485997][ T9432] kernel read not supported for file /\*)A (pid: 9432 comm: syz.1.1789) [ 188.518555][ T30] audit: type=1800 audit(4294970418.365:11): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1789" name="\*)A" dev="mqueue" ino=18631 res=0 errno=0 [ 189.940996][ T9498] ICMPv6: process `syz.0.1821' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 190.662149][ T9536] bond0: no command found in slaves file - use +ifname or -ifname [ 192.980989][ T9646] wlan1: mtu less than device minimum [ 193.624169][ T9680] kafs: addr_prefs: Invalid Command [ 194.555503][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.562126][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.424934][ T9772] block2mtd: illegal erase size [ 195.777382][ T9789] Line length is too long: Should be less than 4094 [ 196.016977][ T9797] usb usb15: usbfs: process 9797 (syz.1.1961) did not claim interface 0 before use [ 196.662979][ T9829] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 196.695756][ T9829] net gretap0: uevent: failed to send synthetic uevent: -22 [ 197.373280][ T9865] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.974397][ T9895] : Can't lookup blockdev [ 200.617200][T10015] Debayer A: ================= START STATUS ================= [ 200.637172][T10015] Debayer A: Debayer Mean Window Size: 3 [ 200.643188][T10015] Debayer A: ================== END STATUS ================== [ 201.276668][T10047] Process accounting resumed [ 202.546720][T10113] vhci_hcd vhci_hcd.2: invalid port number 16 [ 202.564260][T10113] vhci_hcd vhci_hcd.2: invalid port number 16 [ 203.190803][T10148] binder: 10147:10148 ioctl c018620c 200000000080 returned -1 [ 204.147280][T10194] Scaler: ================= START STATUS ================= [ 204.216372][T10194] Scaler: ================== END STATUS ================== [ 204.530333][T10208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.667945][T10208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.817064][T10208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.932457][T10208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.031343][T10283] ACPI: Can not change Invalid GPE/Fixed Event status [ 206.477814][ T6018] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 207.331353][T10346] blkio.reset_stats is deprecated [ 209.415933][ T30] audit: type=1400 audit(4295007127.381:12): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10460 comm="syz.0.2281" [ 210.807776][T10528] : Can't lookup blockdev [ 210.996126][T10533] vhci_hcd vhci_hcd.1: invalid port number 14 [ 211.023251][T10533] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 211.831426][T10575] warning: `syz.2.2337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.939788][T10636] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.1.2367: 7 [ 213.500856][T10661] vhci_hcd vhci_hcd.1: invalid port number 14 [ 213.529735][T10661] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 213.717417][T10671] smpboot: CPU 1 is now offline [ 219.389671][T10868] usb usb26: usbfs: process 10868 (syz.2.2477) did not claim interface 0 before use [ 220.185181][T10898] usb usb26: usbfs: process 10898 (syz.1.2491) did not claim interface 0 before use [ 221.020459][T10933] binder: 10932:10933 ioctl c0306201 0 returned -14 [ 222.470090][T10987] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 225.239233][T11087] Invalid ELF header magic: != ELF [ 225.509490][T11095] kAFS: unparsable volume name [ 225.947880][T11112] sysfs_service_op_show: Client not running :-5: [ 226.133150][T11119] kAFS: unparsable volume name [ 226.908879][T11151] kAFS: unparsable volume name [ 227.327062][T11165] sd 0:0:1:0: PR command failed: 1026 [ 227.347264][T11165] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 227.381339][T11165] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 231.323804][T11305] Process accounting paused [ 232.929528][T11374] nvme_fcloop: unknown parameter or missing value '1' [ 233.938987][T11414] aoe: invalid device specification [ 235.397080][T11460] program syz.1.2766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.452536][T11460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 239.361775][ T30] audit: type=1800 audit(4295007157.477:13): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2827" name="sr0" dev="devtmpfs" ino=2819 res=0 errno=0 [ 240.149303][T11614] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.184840][T11614] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 241.624382][T11670] Format for deleting device is "id" (uint). [ 243.539414][T11743] random: crng reseeded on system resumption [ 244.666502][T11782] QAT: failed to copy from user cfg_data. [ 245.673361][ T30] audit: type=1800 audit(4295007163.830:14): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2930" name="members" dev="configfs" ino=27229 res=0 errno=0 [ 248.506226][ T30] audit: type=1800 audit(4295007166.665:15): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2975" name="members" dev="configfs" ino=27518 res=0 errno=0 [ 249.763763][T11945] Setting dangerous option i915.mitigations - tainting kernel [ 249.805571][T11945] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 251.863687][T12007] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 251.959450][T12009] hub 1-0:1.0: USB hub found [ 251.994023][T12009] hub 1-0:1.0: 1 port detected [ 252.231699][T12020] vhci_hcd vhci_hcd.2: invalid port number 16 [ 252.238083][T12020] vhci_hcd vhci_hcd.2: invalid port number 16 [ 254.089502][T12093] program syz.1.3066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.141826][T12093] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 255.442962][ T30] audit: type=1804 audit(4295007173.641:16): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3089" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=16 res=1 errno=0 [ 255.680852][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693654][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.237802][T12173] binder: 12172:12173 ioctl c0046209 9 returned -22 [ 256.427467][T12179] ICMPv6: process `syz.3.3108' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 256.506799][T12182] hub 1-0:1.0: USB hub found [ 256.541868][T12182] hub 1-0:1.0: 1 port detected [ 257.190793][T12215] udc dummy_udc.0: soft-connect without a gadget driver [ 258.268580][T12257] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 258.715031][T12273] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 258.751897][T12273] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 259.005821][T12284] hub 1-0:1.0: USB hub found [ 259.034497][T12284] hub 1-0:1.0: 1 port detected [ 260.708947][T12341] hub 1-0:1.0: USB hub found [ 260.744668][T12341] hub 1-0:1.0: 1 port detected [ 261.318184][T12358] Process accounting resumed [ 261.445473][T12368] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 261.445473][T12368] M' is too long [ 261.498535][T12368] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 261.498535][T12368] W ' is too long [ 261.792185][T12381] i2c i2c-0: delete_device: Can't parse I2C address [ 263.671111][T12454] process 'syz.0.3234' launched '/dev/fd/3' with NULL argv: empty string added [ 264.045569][T12468] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.539706][T12488] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 265.171529][T12512] vhci_hcd vhci_hcd.2: invalid port number 253 [ 265.177850][T12512] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 265.840228][ T30] audit: type=1800 audit(4295007184.085:17): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3275" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 268.431084][T12621] misc userio: Invalid payload size [ 270.288671][T12679] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 271.253495][T12713] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 272.233454][ T6018] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 272.233486][ T6018] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 272.249268][ T6018] Bluetooth: hci0: Malformed LE Event: 0x1b [ 272.264727][T12751] QAT: Invalid ioctl 21531 [ 272.317360][T12754] kAFS: Invalid Command on /proc/fs/afs/cells file [ 272.537171][T12762] WARNING! power/level is deprecated; use power/control instead [ 274.078056][T12821] Invalid input. Must be >= 4608 [ 278.009115][ T30] audit: type=1800 audit(4295007196.328:18): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3482" name="dbroot" dev="configfs" ino=30799 res=0 errno=0 [ 279.825394][T13012] bond0: invalid ARP target specified [ 280.245587][T13026] TCP: TCP_TX_DELAY enabled [ 280.902889][T13045] bond0: invalid ARP target specified [ 283.794675][T13139] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 284.583844][T13165] syz.0.3584 uses obsolete (PF_INET,SOCK_PACKET) [ 285.058498][T13183] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 285.058498][T13183] [ 285.998220][T13220] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 286.184732][T13220] CIFS mount error: No usable UNC path provided in device string! [ 286.184732][T13220] [ 286.232826][T13220] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.835015][ T30] audit: type=1800 audit(4295007205.194:19): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3622" name="members" dev="configfs" ino=31708 res=0 errno=0 [ 288.306416][T13300] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 289.824541][T13362] : Can't lookup blockdev [ 289.946480][T13367] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 291.261028][T13410] Process accounting paused [ 291.467486][T13419] syz.3.3709: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.544215][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.3.3709 Tainted: G U syzkaller #0 PREEMPT(full) [ 291.544255][T13419] Tainted: [U]=USER [ 291.544263][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 291.544284][T13419] Call Trace: [ 291.544292][T13419] [ 291.544304][T13419] dump_stack_lvl+0x100/0x190 [ 291.544353][T13419] warn_alloc.cold+0x95/0x1c1 [ 291.544397][T13419] ? __pfx_warn_alloc+0x10/0x10 [ 291.544440][T13419] ? __lock_acquire+0x4a5/0x2630 [ 291.544488][T13419] __vmalloc_node_range_noprof+0x1252/0x1530 [ 291.544525][T13419] ? rcu_is_watching+0x12/0xc0 [ 291.544565][T13419] ? trace_contention_end+0x140/0x180 [ 291.544603][T13419] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 291.544634][T13419] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 291.544662][T13419] ? tomoyo_path_number_perm+0x28f/0x580 [ 291.544693][T13419] ? tomoyo_path_number_perm+0x28f/0x580 [ 291.544727][T13419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.544760][T13419] ? __pfx___mutex_lock+0x10/0x10 [ 291.544793][T13419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.544824][T13419] ? futex_wait+0x125/0x380 [ 291.544867][T13419] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 291.544895][T13419] __vmalloc_node_noprof+0xad/0xf0 [ 291.544928][T13419] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 291.544960][T13419] dvb_dvr_do_ioctl+0x15d/0x270 [ 291.544995][T13419] dvb_usercopy+0x167/0x340 [ 291.545022][T13419] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 291.545052][T13419] ? __pfx_dvb_usercopy+0x10/0x10 [ 291.545091][T13419] ? __fget_files+0x21f/0x3d0 [ 291.545130][T13419] dvb_dvr_ioctl+0x29/0x40 [ 291.545157][T13419] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 291.545186][T13419] __x64_sys_ioctl+0x18e/0x210 [ 291.545228][T13419] do_syscall_64+0x106/0xf80 [ 291.545253][T13419] ? clear_bhb_loop+0x40/0x90 [ 291.545284][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.545309][T13419] RIP: 0033:0x7fe3dc59c819 [ 291.545333][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.545357][T13419] RSP: 002b:00007fe3dd3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.545383][T13419] RAX: ffffffffffffffda RBX: 00007fe3dc815fa0 RCX: 00007fe3dc59c819 [ 291.545400][T13419] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 291.545415][T13419] RBP: 00007fe3dc632c91 R08: 0000000000000000 R09: 0000000000000000 [ 291.545430][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.545444][T13419] R13: 00007fe3dc816038 R14: 00007fe3dc815fa0 R15: 00007ffe6cc78c88 [ 291.545475][T13419] [ 291.545487][T13419] Mem-Info: [ 292.481066][T13419] active_anon:4781 inactive_anon:0 isolated_anon:0 [ 292.481066][T13419] active_file:3555 inactive_file:53368 isolated_file:0 [ 292.481066][T13419] unevictable:768 dirty:340 writeback:0 [ 292.481066][T13419] slab_reclaimable:11732 slab_unreclaimable:90159 [ 292.481066][T13419] mapped:24148 shmem:1356 pagetables:957 [ 292.481066][T13419] sec_pagetables:0 bounce:0 [ 292.481066][T13419] kernel_misc_reclaimable:0 [ 292.481066][T13419] free:1318800 free_pcp:21509 free_cma:0 [ 292.696231][T13419] Node 0 active_anon:19212kB inactive_anon:0kB active_file:14220kB inactive_file:213088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96484kB dirty:1340kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11104kB pagetables:3844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.830909][T13419] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.982544][T13419] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.055035][T13465] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 293.125844][T13419] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 293.132131][T13419] Node 0 DMA32 free:1366980kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19160kB inactive_anon:0kB active_file:14220kB inactive_file:213088kB unevictable:1536kB writepending:1340kB zspages:0kB present:3129332kB managed:2537256kB mlocked:0kB bounce:0kB free_pcp:42112kB local_pcp:42112kB free_cma:0kB [ 293.316279][T13419] lowmem_reserve[]: 0 0 1 1 1 [ 293.331859][T13419] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 293.474092][T13419] lowmem_reserve[]: 0 0 0 0 0 [ 293.503838][T13419] Node 1 Normal free:3892476kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:384kB unevictable:1536kB writepending:24kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:43876kB local_pcp:43876kB free_cma:0kB [ 293.645712][T13419] lowmem_reserve[]: 0 0 0 0 0 [ 293.650870][T13419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.737529][T13419] Node 0 DMA32: 3899*4kB (UME) 2739*8kB (UME) 1325*16kB (UME) 710*32kB (UME) 333*64kB (UM) 249*128kB (UME) 134*256kB (UM) 68*512kB (UM) 38*1024kB (UME) 3*2048kB (UE) 273*4096kB (M) = 1366996kB [ 293.864571][T13419] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 293.947280][T13419] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 15*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 7*256kB (UM) 2*512kB (UM) 1*1024kB (U) 4*2048kB (UM) 947*4096kB (UM) = 3892520kB [ 294.044770][T13419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.101388][T13419] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 294.155005][T13419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.229152][T13419] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 294.265662][T13419] 58275 total pagecache pages [ 294.293426][T13419] 0 pages in swap cache [ 294.332424][T13419] Free swap = 124996kB [ 294.336766][T13419] Total swap = 124996kB [ 294.379219][T13419] 2097051 pages RAM [ 294.383087][T13419] 0 pages HighMem/MovableOnly [ 294.387805][T13419] 430859 pages reserved [ 294.455028][T13419] 0 pages cma reserved [ 294.928494][T13521] random: crng reseeded on system resumption [ 296.776807][T13589] bond0: invalid ARP target specified [ 303.531306][T13815] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 305.142726][T13862] vhci_hcd vhci_hcd.2: invalid port number 16 [ 305.173177][T13862] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 305.215102][T13865] bond0: Unable to set down delay as MII monitoring is disabled [ 307.046482][T13921] nvme_fcloop: unknown parameter or missing value '' [ 309.764962][T13999] ubi31: attaching mtd0 [ 309.801437][T13999] ubi31: scanning is finished [ 309.806410][T13999] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 310.020704][T13999] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 310.252660][T14015] binder: 14014:14015 ioctl c0306201 200000000000 returned -14 [ 311.051927][T14038] batman_adv: Routing algorithm '7' is not supported [ 315.819824][T14210] program syz.2.4087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.069003][T14218] kernel profiling enabled (shift: 0) [ 316.816512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.825689][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 319.176619][T14295] usb usb3: usbfs: process 14295 (syz.3.4129) did not claim interface 0 before use [ 319.576742][T14306] CIFS mount error: No usable UNC path provided in device string! [ 319.576742][T14306] [ 319.621425][T14306] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 320.422382][T14339] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 321.166367][T14367] Process accounting resumed [ 321.812224][T14397] syz.2.4176 (14397): drop_caches: 0 [ 322.075491][T14113] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 322.903085][T14440] ptrace attach of "./syz-executor exec"[6006] was attempted by "./syz-executor exec"[14440] [ 323.328768][T14453] kAFS: Invalid Command on /proc/fs/afs/cells file [ 323.517296][T14460] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 323.987791][T14477] block loop4: the capability attribute has been deprecated. [ 326.486157][ T30] audit: type=1806 audit(4295007245.060:20): xattr="" res=-22 [ 328.353439][T14638] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 328.469411][T14640] cougar: G6 mapped to F18 [ 331.194679][T14746] nvme_fcloop: unknown parameter or missing value '0' [ 339.226433][T15032] kafs: addr_prefs: Invalid Command [ 342.631644][T15157] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 343.882040][ T30] audit: type=1800 audit(4295007262.540:21): pid=15202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4560" name="dbroot" dev="configfs" ino=37812 res=0 errno=0 [ 344.289707][T15216] ICMPv6: process `syz.1.4568' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 345.005545][T15247] binder: 15245:15247 ioctl 541b 0 returned -22 [ 347.983125][T15361] usb usb22: usbfs: process 15361 (syz.1.4639) did not claim interface 1 before use [ 349.053093][T15404] syz.0.4658 (15404): attempted to duplicate a private mapping with mremap. This is not supported. [ 349.274393][T15410] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 349.515249][T15418] QAT: Stopping all acceleration devices. [ 351.202011][T15478] Process accounting paused [ 352.093892][ T30] audit: type=1326 audit(4295007270.793:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.4716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7faf9c819 code=0x0 [ 353.370870][T15563] block2mtd: device name too long [ 353.616609][T15575] < [ 354.247017][T15597] scsi_mod.scan: string doesn't fit in 6 chars. [ 357.554826][T15716] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 358.127743][T15738] aoe: copy from user failed [ 358.167560][T15738] aoe: could not set interface list: too many interfaces [ 359.888326][T15796] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 361.182080][T15847] bond0: option slaves: interface - does not exist! [ 362.822964][T15912] vhci_hcd vhci_hcd.2: invalid port number 194 [ 362.848375][T15912] vhci_hcd vhci_hcd.2: invalid port number 194 [ 363.391992][T15932] block2mtd: illegal erase size [ 364.524601][T15964] vhci_hcd vhci_hcd.1: invalid port number 16 [ 364.530757][T15964] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 365.354136][T15988] tipc: Can't bind to reserved service type 63 [ 365.948345][T16004] [ 366.316553][T14113] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 366.319221][T14113] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 366.344849][T14113] Bluetooth: hci3: Dropping invalid advertising data [ 366.353688][T14113] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 366.353724][T14113] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 366.361212][T14113] Bluetooth: hci3: unknown advertising packet type: 0xee [ 367.403350][T16036] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 367.528236][T16024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 367.568902][T16024] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 367.609045][T16036] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 367.617971][T16024] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 367.647621][T16024] page_type: f5(slab) [ 367.653023][T16036] pci 0000:00:01.3: PCI INT A: no GSI [ 367.668828][T16024] raw: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 367.710665][T16024] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 367.763310][T16024] head: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 367.815207][T16024] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 367.858103][T16024] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 367.866937][T16024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 367.947268][T16024] page dumped because: unmovable page [ 367.958377][T16024] page_owner tracks the page as allocated [ 367.964380][T16024] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 41683614198, free_ts 33780905137 [ 368.086444][T16024] post_alloc_hook+0x153/0x170 [ 368.107402][T16024] get_page_from_freelist+0x111d/0x3140 [ 368.114343][T16024] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 368.145725][T16024] new_slab+0xa6/0x6b0 [ 368.149900][T16024] refill_objects+0x26b/0x400 [ 368.177544][T16024] __pcs_replace_empty_main+0x1ab/0x660 [ 368.183282][T16024] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 368.219749][T16024] alloc_inode+0x183/0x250 [ 368.224282][T16024] iget_locked+0x1d9/0x6d0 [ 368.250101][T16024] kernfs_get_inode+0x46/0x470 [ 368.265007][T16024] kernfs_iop_lookup+0x1a7/0x2d0 [ 368.270024][T16024] __lookup_slow+0x251/0x460 [ 368.294888][T16024] lookup_slow+0x50/0x70 [ 368.309468][T16024] path_lookupat+0x5e8/0xc40 [ 368.314145][T16024] filename_lookup+0x202/0x590 [ 368.344613][T16024] vfs_statx+0xff/0x3f0 [ 368.360837][T16024] page last free pid 1 tgid 1 stack trace: [ 368.384348][T16024] __free_frozen_pages+0x7e1/0x10d0 [ 368.389857][T16024] free_contig_range+0xde/0x1d0 [ 368.414347][T16024] destroy_args+0xa8/0x7a0 [ 368.418854][T16024] debug_vm_pgtable+0x1b66/0x34c0 [ 368.423967][T16024] do_one_initcall+0x11d/0x760 [ 368.469552][T16024] kernel_init_freeable+0x6e5/0x7a0 [ 368.493830][T16024] kernel_init+0x1f/0x1e0 [ 368.498534][T16024] ret_from_fork+0x754/0xd80 [ 368.528661][T16024] ret_from_fork_asm+0x1a/0x30 [ 370.066649][T16083] delete_channel: no stack [ 370.349410][T16089] vhci_hcd vhci_hcd.2: invalid port number 16 [ 370.384049][T16089] vhci_hcd vhci_hcd.2: invalid port number 16 [ 372.096353][T16147] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.531012][T14113] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 372.542431][T14113] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 373.198655][T16203] kafs: addr_prefs: Too many elements in string [ 377.607057][T16356] i8042 aux 00:02: in use; can't configure [ 377.925672][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.932225][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.595797][T16389] bond0: invalid ARP target specified [ 379.188965][T16409] aoe: can't write to that file. [ 379.414667][T16415] vhci_hcd: not connected 4 [ 379.926250][T16432] [U] ^Z [ 381.282697][T16478] Process accounting resumed [ 384.674785][ T30] audit: type=1804 audit(4295007303.553:23): pid=16590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5206" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 385.960942][T14072] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 385.969000][T14072] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 386.690866][T16682] Malformed UNC in devname [ 386.690866][T16682] [ 386.755493][T16682] CIFS: VFS: Malformed UNC in devname [ 389.299243][T14113] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 389.299277][T14113] Bluetooth: hci1: unexpected subevent 0x06 length: 725 > 10 [ 390.763176][T16854] GUP no longer grows the stack in syz.2.5313 (16854): 10000-411000 (0) [ 390.806743][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.2.5313 Tainted: G U syzkaller #0 PREEMPT(full) [ 390.806783][T16854] Tainted: [U]=USER [ 390.806792][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.806820][T16854] Call Trace: [ 390.806829][T16854] [ 390.806838][T16854] dump_stack_lvl+0x100/0x190 [ 390.806881][T16854] gup_vma_lookup.cold+0x83/0x96 [ 390.806919][T16854] __get_user_pages+0x241/0x34d0 [ 390.806957][T16854] ? down_read_killable+0x30e/0x4c0 [ 390.806992][T16854] ? __pfx___get_user_pages+0x10/0x10 [ 390.807030][T16854] __gup_longterm_locked+0x87d/0x16f0 [ 390.807060][T16854] ? is_bpf_text_address+0x8a/0x1a0 [ 390.807108][T16854] ? __pfx___gup_longterm_locked+0x10/0x10 [ 390.807150][T16854] ? find_held_lock+0x2b/0x80 [ 390.807174][T16854] ? gup_fast_fallback+0x7e5/0x2460 [ 390.807211][T16854] gup_fast_fallback+0x18c6/0x2460 [ 390.807263][T16854] ? __pfx_gup_fast_fallback+0x10/0x10 [ 390.807307][T16854] get_user_pages_fast+0xa7/0xf0 [ 390.807338][T16854] ? __pfx_get_user_pages_fast+0x10/0x10 [ 390.807378][T16854] get_futex_key+0x2c8/0x1620 [ 390.807413][T16854] ? __pfx_get_futex_key+0x10/0x10 [ 390.807446][T16854] ? kasan_save_track+0x14/0x30 [ 390.807469][T16854] ? __kasan_kmalloc+0xaa/0xb0 [ 390.807495][T16854] futex_lock_pi+0x1dc/0x7b0 [ 390.807538][T16854] ? __pfx_futex_lock_pi+0x10/0x10 [ 390.807581][T16854] ? tomoyo_path_number_perm+0x46d/0x580 [ 390.807621][T16854] ? find_held_lock+0x2b/0x80 [ 390.807653][T16854] ? tomoyo_path_number_perm+0x188/0x580 [ 390.807694][T16854] ? __pfx_futex_wake_mark+0x10/0x10 [ 390.807739][T16854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 390.807768][T16854] ? __lock_acquire+0x4a5/0x2630 [ 390.807804][T16854] do_futex+0x18a/0x350 [ 390.807838][T16854] ? __pfx_do_futex+0x10/0x10 [ 390.807881][T16854] ? do_raw_spin_lock+0x128/0x260 [ 390.807924][T16854] __x64_sys_futex+0x34f/0x4d0 [ 390.807960][T16854] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 390.808003][T16854] ? __pfx___x64_sys_futex+0x10/0x10 [ 390.808039][T16854] ? kcov_ioctl+0x16a/0x720 [ 390.808070][T16854] do_syscall_64+0x106/0xf80 [ 390.808095][T16854] ? clear_bhb_loop+0x40/0x90 [ 390.808131][T16854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.808157][T16854] RIP: 0033:0x7f3fb879c819 [ 390.808178][T16854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.808202][T16854] RSP: 002b:00007f3fb9704028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.808231][T16854] RAX: ffffffffffffffda RBX: 00007f3fb8a16090 RCX: 00007f3fb879c819 [ 390.808247][T16854] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 390.808261][T16854] RBP: 00007f3fb8832c91 R08: 0000000000000000 R09: 0000000080000001 [ 390.808276][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.808291][T16854] R13: 00007f3fb8a16128 R14: 00007f3fb8a16090 R15: 00007ffded334bc8 [ 390.808322][T16854] [ 391.222580][T16863] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 391.471423][T14113] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.789998][T16903] binder: 16901:16903 ioctl c0046209 ffffffffffffffff returned -22 [ 392.695760][T16933] [U] ^\ [ 395.898046][T17057] random: crng reseeded on system resumption [ 395.975318][T17057] Restarting kernel threads ... [ 396.017008][T17057] Done restarting kernel threads. [ 396.718108][T17086] bond0: invalid ARP target specified [ 398.544559][T17169] ecryptfs_miscdev_write: Invalid packet size [192] [ 400.722485][T17238] i2c i2c-0: new_device: Invalid device name [ 407.227003][T17469] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 407.269068][T17469] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 408.214543][T17504] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 409.275209][T17556] queue_state_write: operation too long [ 409.321595][T17556] queue_state_write: use 'run', 'start' or 'kick' [ 410.189979][T17585] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 410.829126][T17607] bond0: invalid ARP target specified [ 411.315958][T17620] Process accounting paused [ 411.421044][ T30] audit: type=1800 audit(4295007330.422:24): pid=17627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5599" name="features" dev="configfs" ino=44905 res=0 errno=0 [ 411.822453][T17643] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b121fa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 411.838685][T17643] Call Trace: [ 411.841997][T17643] [ 411.845028][T17643] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 411.852200][T17643] ? __pfx___schedule+0x10/0x10 [ 411.857466][T17643] mce_cpu_restart+0xd5/0x1f0 [ 411.862382][T17643] ? __pfx_mce_cpu_restart+0x10/0x10 [ 411.868478][T17643] smp_call_function_many_cond+0x11fc/0x1500 [ 411.874993][T17643] ? __pfx_mce_cpu_restart+0x10/0x10 [ 411.880544][T17643] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 411.886953][T17643] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 411.893529][T17643] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 411.899820][T17643] ? __timer_delete_sync+0x151/0x1c0 [ 411.905187][T17643] ? __pfx_mce_cpu_restart+0x10/0x10 [ 411.910617][T17643] on_each_cpu_cond_mask+0x40/0x90 [ 411.915979][T17643] set_bank+0x240/0x3a0 [ 411.920480][T17643] ? __pfx_set_bank+0x10/0x10 [ 411.925444][T17643] ? find_held_lock+0x2b/0x80 [ 411.930352][T17643] ? sysfs_file_kobj+0xe4/0x290 [ 411.935293][T17643] ? sysfs_file_kobj+0xe4/0x290 [ 411.940562][T17643] ? __pfx_set_bank+0x10/0x10 [ 411.945923][T17643] dev_attr_store+0x58/0x80 [ 411.950505][T17643] ? __pfx_dev_attr_store+0x10/0x10 [ 411.956039][T17643] sysfs_kf_write+0xf2/0x150 [ 411.961246][T17643] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.967066][T17643] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.972594][T17643] vfs_write+0x6ac/0x1070 [ 411.977071][T17643] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 411.983169][T17643] ? __pfx_vfs_write+0x10/0x10 [ 411.988242][T17643] ksys_write+0x12a/0x250 [ 411.992696][T17643] ? __pfx_ksys_write+0x10/0x10 [ 411.997602][T17643] do_syscall_64+0x106/0xf80 [ 412.002535][T17643] ? clear_bhb_loop+0x40/0x90 [ 412.007534][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.013591][T17643] RIP: 0033:0x7ff7faf9c819 [ 412.018081][T17643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.038779][T17643] RSP: 002b:00007ff7fbe28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.047417][T17643] RAX: ffffffffffffffda RBX: 00007ff7fb215fa0 RCX: 00007ff7faf9c819 [ 412.055520][T17643] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 412.063642][T17643] RBP: 00007ff7fb032c91 R08: 0000000000000000 R09: 0000000000000000 [ 412.072010][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.080323][T17643] R13: 00007ff7fb216038 R14: 00007ff7fb215fa0 R15: 00007ffcfdb87d18 [ 412.088699][T17643] [ 413.815178][T17699] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 418.759711][T17872] sysfs_service_op_store: Client not running :-5: [ 421.243733][T17960] QAT: failed to copy from user cfg_data. [ 427.012881][T18161] block2mtd: illegal erase size [ 427.610852][T14072] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 427.610892][T14072] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 427.626035][T14072] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 431.351696][T18326] binder: binder_mmap: 18324 0-1000 bad vm_flags failed -1 [ 433.422235][T18390] writes to the poll attribute are ignored. [ 433.455260][T18390] please use driver specific parameters instead. [ 434.181495][T18363] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 435.828691][T18462] synth uevent: /bus/mei: unknown uevent action string [ 437.125500][T18511] qrtr: Invalid version 0 [ 438.186609][T18555] nvme_fcloop: unknown parameter or missing value '7' [ 439.045471][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.052859][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.181403][T18666] Process accounting resumed [ 441.809392][T18691] syz.0.6118 uses obsolete (PF_INET,SOCK_PACKET) [ 442.290305][T18710] [U] ^R [ 445.308510][T18820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 445.447763][T18824] block2mtd: Using custom MTD label '' for dev [ 445.469942][T18824] block2mtd: error: cannot open device [ 446.139095][T18853] i2c i2c-0: new_device: Missing parameters [ 446.969360][ T30] audit: type=1800 audit(4295007366.167:25): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6211" name="discovery_nqn" dev="configfs" ino=48852 res=0 errno=0 [ 449.404607][T18981] overlayfs: "check_copy_up" module option is obsolete [ 450.046068][T19005] ima: policy update failed [ 450.099521][ T30] audit: type=1802 audit(4295007369.303:26): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6270" res=0 errno=0 [ 450.285421][T19016] vivid-007: ================= START STATUS ================= [ 450.321840][T19016] vivid-007: Generate PTS: true [ 450.351757][T19016] vivid-007: Generate SCR: true [ 450.388081][T19016] tpg source WxH: 320x240 (Y'CbCr) [ 450.423410][T19016] tpg field: 1 [ 450.433764][T19016] tpg crop: (0,0)/320x240 [ 450.460356][T19016] tpg compose: (0,0)/320x240 [ 450.480428][T19016] tpg colorspace: 8 [ 450.505204][T19016] tpg transfer function: 0/0 [ 450.527390][T19016] tpg Y'CbCr encoding: 0/0 [ 450.547384][T19016] tpg quantization: 0/0 [ 450.560564][T19016] tpg RGB range: 0/2 [ 450.596917][T19016] vivid-007: ================== END STATUS ================== [ 454.802777][T19187] bond0: option mode: unable to set because the bond device is up [ 455.178660][T14072] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 456.158525][ T30] audit: type=1806 audit(4295007375.394:27): xattr="." res=0 [ 457.191576][T14072] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.025692][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.032473][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.253938][T19207] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.569561][ T30] audit: type=1807 audit(4295007378.832:28): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 459.593857][T19379] ima: policy update failed [ 459.669132][ T30] audit: type=1802 audit(4295007378.862:29): pid=19381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.6435" res=0 errno=0 [ 459.789088][ T30] audit: type=1802 audit(4295007378.862:30): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6435" res=0 errno=0 [ 460.554379][T19411] Setting dangerous option i915.mitigations - tainting kernel [ 461.238093][T19437] program syz.1.6462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.048961][T19545] kAFS: Invalid Command on /proc/fs/afs/cells file [ 465.433908][T19595] vhci_hcd vhci_hcd.2: invalid port number 135 [ 465.464248][T19595] vhci_hcd vhci_hcd.2: invalid port number 135 [ 465.700481][T19605] futex_wake_op: syz.2.6543 tries to shift op by -2048; fix this program [ 465.757069][T19605] futex_wake_op: syz.2.6543 tries to shift op by -2048; fix this program [ 466.728057][T14072] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 468.804254][T19207] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.160812][T19754] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 469.650716][T19772] usb usb13: check_ctrlrecip: process 19772 (syz.3.6614) requesting ep 01 but needs 81 [ 469.689522][T19772] usb usb13: usbfs: process 19772 (syz.3.6614) did not claim interface 0 before use [ 469.813315][T19778] warning: `syz.2.6617' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 470.120060][T19791] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 470.873475][T14072] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.076766][T19822] Process accounting paused [ 471.479329][T19207] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 472.528381][T19207] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 472.950854][T19916] bonding: no command found in bonding_masters - use +ifname or -ifname [ 473.497834][T14072] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.620149][T19941] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 474.263960][T19965] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 475.569344][T19207] Bluetooth: hci0: command 0x0c1a tx timeout [ 475.589740][T20015] ecryptfs_miscdev_write: Error while inspecting packet size [ 476.233145][T20040] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 476.279613][T20042] ptp ptp0: only physical clock in use now [ 476.701191][T20057] i2c i2c-0: new_device: Can't parse I2C address [ 477.041082][T20062] zram: Added device: zram1 [ 478.326476][T20108] cougar: G6 mapped to space [ 479.081475][T20132] delete_channel: no stack [ 481.984577][T20236] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 484.921770][T20334] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 485.279865][ T30] audit: type=1800 audit(4295007404.676:31): pid=20346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6879" name="lu_gp_id" dev="configfs" ino=53312 res=0 errno=0 [ 485.307593][T20346] kstrtoul() returned -22 for lu_gp_id [ 488.209056][T14072] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 489.682175][T20529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 489.970952][T20540] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 490.438986][T20558] [U] 0="/ [ 490.454533][T20558] [U] [ 490.457383][T20558] [U] EeQ@ [ 490.501967][T20556] [U]  [ 492.293570][T20632] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 492.294083][T20631] ima: policy update failed [ 492.359797][ T30] audit: type=1802 audit(4295007411.793:32): pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7010" res=0 errno=0 [ 493.677943][T20683] ima: policy update failed [ 493.713386][ T30] audit: type=1802 audit(4295007413.150:33): pid=20683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.7036" res=0 errno=0 [ 495.184411][T20746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.051080][T20786] random: crng reseeded on system resumption [ 496.713022][T20810] QAT: failed to copy from user. [ 496.734473][T20813] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 497.377434][ T30] audit: type=1400 audit(4295007416.839:34): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20833 comm="syz.3.7103" [ 500.091588][T20934] zswap: compressor Z(u not available [ 500.175715][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.186492][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.893733][T20974] bonding: no command found in bonding_masters - use +ifname or -ifname [ 501.025943][T20976] Process accounting resumed [ 501.638979][ T30] audit: type=1800 audit(4295007421.121:35): pid=21003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7183" name="dbroot" dev="configfs" ino=55298 res=0 errno=0 [ 501.684676][T21003] db_root: cannot open: /dev/audio1 [ 501.690184][T21003] db_root: not a directory: /dev/audio1 [ 502.120107][ T30] audit: type=1800 audit(4295007421.593:36): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7192" name="lu_gp_id" dev="configfs" ino=55355 res=0 errno=0 [ 502.156092][T21021] ALUA LU Group already has a valid ID, ignoring request [ 503.395321][T21073] random: crng reseeded on system resumption [ 506.180137][T21175] kAFS: No cell specified [ 506.315595][T14072] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 507.675430][T21248] i2c i2c-0: delete_device: Extra parameters [ 510.274486][T21348] program syz.0.7341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.594001][ T30] audit: type=1400 audit(4295007433.143:37): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=21477 comm="syz.2.7404" [ 513.996025][ T9] Process accounting resumed [ 517.223094][T21609] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 517.270247][T21609] cec cec26: uevent: failed to send synthetic uevent: -22 [ 518.105908][T21643] capability: warning: `syz.1.7483' uses deprecated v2 capabilities in a way that may be insecure [ 519.656469][T21698] phram: not enough arguments [ 522.102603][T21778] program syz.0.7550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.377121][T21784] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 523.610690][T21829] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 523.661610][T21829] ep_00: uevent: failed to send synthetic uevent: -22 [ 523.726615][T21833] program syz.3.7577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.582634][T21899] : Can't lookup blockdev [ 525.828482][T21909] : Can't lookup blockdev [ 526.488737][T21934] kafs: addr_prefs: Invalid Command [ 528.365431][T22003] ima: policy update failed [ 528.370438][ T30] audit: type=1802 audit(4295007447.990:38): pid=22003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7662" res=0 errno=0 [ 528.823758][T22023] usbip-vudc usbip-vudc.0: gadget not bound [ 529.035238][T22030] i2c i2c-0: delete_device: Can't find device in list [ 529.575422][T22049] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 529.575854][T22048] ima: policy update failed [ 529.655914][ T30] audit: type=1802 audit(4295007449.277:39): pid=22048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.7684" res=0 errno=0 [ 530.963899][T22096] Process accounting paused [ 531.105654][ T30] audit: type=1800 audit(4295007450.734:40): pid=22107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7711" name="dbroot" dev="configfs" ino=58763 res=0 errno=0 [ 532.444158][T22153] synth uevent: /module/null_blk: unknown uevent action string [ 532.632055][T22161] kAFS: Invalid Command on /proc/fs/afs/cells file [ 533.114213][T22176] ceph: Failed to parse sending metrics switch value 'P^' [ 535.916058][T22284] process 'syz.2.7793' launched './file0' with NULL argv: empty string added [ 537.083445][T22331] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 537.374655][T22343] usb usb2: usbfs: process 22343 (syz.0.7818) did not claim interface 4 before use [ 537.620238][T22353] bond0: invalid ARP target specified [ 540.628946][T22456] sd 0:0:1:0: PR command failed: 1026 [ 540.650764][T22456] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 540.676680][T22456] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 541.744862][T22494] Setting dangerous option i915.mitigations - tainting kernel [ 541.894620][ T30] audit: type=1800 audit(4295007461.590:41): pid=22498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7893" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 544.031140][T22574] ptrace attach of "./syz-executor exec"[6011] was attempted by ""[22574] [ 548.963995][T22771] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 549.008115][T22771] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 549.056441][T22771] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 549.096664][T22771] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 549.134523][T22771] page dumped because: unmovable page [ 549.157201][T22771] page_owner info is not present (never set?) [ 549.752070][T22796] sd 0:0:1:0: PR command failed: 1026 [ 549.770799][T22796] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 549.807113][T22796] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 550.018147][T22804] kfence: disabled [ 551.679268][T22857] hub 27-0:1.0: USB hub found [ 551.711474][T22857] hub 27-0:1.0: 1 port detected [ 554.958331][T22969] netlink: 'syz.0.8107': attribute type 23 has an invalid length. [ 555.026229][T22970] ======================================================= [ 555.026229][T22970] WARNING: The mand mount option has been deprecated and [ 555.026229][T22970] and is ignored by this kernel. Remove the mand [ 555.026229][T22970] option from the mount to silence this warning. [ 555.026229][T22970] ======================================================= [ 555.146528][T22973] netlink: 'syz.2.8108': attribute type 11 has an invalid length. [ 555.176484][T22973] netlink: 'syz.2.8108': attribute type 11 has an invalid length. [ 555.224467][T22973] netlink: 'syz.2.8108': attribute type 11 has an invalid length. [ 557.116379][T23019] openvswitch: netlink: Missing valid actions attribute. [ 557.233364][ T30] audit: type=1326 audit(4294967313.422:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.3.8130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3dc59c819 code=0x0 [ 557.589633][T23029] netlink: Setting conntrack mark requires 'commit' flag. [ 559.771938][T23096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8164'. [ 560.654065][T23122] syz.0.8176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 560.855777][T23127] Process accounting resumed [ 560.900334][T23131] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 560.900382][T23131] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 560.979604][T23132] ================================================================== [ 560.979624][T23132] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 560.979675][T23132] Write of size 8 at addr ffffc90004179000 by task syz.2.8180/23132 [ 560.979695][T23132] [ 560.979714][T23132] CPU: 0 UID: 0 PID: 23132 Comm: syz.2.8180 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 560.979754][T23132] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 560.979766][T23132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.979781][T23132] Call Trace: [ 560.979789][T23132] [ 560.979798][T23132] dump_stack_lvl+0x100/0x190 [ 560.979836][T23132] print_report+0x156/0x4c9 [ 560.979870][T23132] ? _raw_spin_lock_irqsave+0x52/0x60 [ 560.979921][T23132] ? sys_fillrect+0x174a/0x1910 [ 560.979959][T23132] kasan_report+0xdf/0x1e0 [ 560.979987][T23132] ? sys_fillrect+0x174a/0x1910 [ 560.980034][T23132] sys_fillrect+0x174a/0x1910 [ 560.980079][T23132] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 560.980110][T23132] bit_clear+0x17d/0x220 [ 560.980142][T23132] ? __pfx_bit_clear+0x10/0x10 [ 560.980174][T23132] ? fb_get_color_depth+0x120/0x250 [ 560.980203][T23132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.980231][T23132] __fbcon_clear+0x633/0x760 [ 560.980261][T23132] ? __pfx_bit_clear+0x10/0x10 [ 560.980294][T23132] fbcon_scroll+0x48b/0x650 [ 560.980324][T23132] con_scroll+0x464/0x690 [ 560.980364][T23132] do_con_write+0x6883/0x8540 [ 560.980395][T23132] ? __pfx_do_con_write+0x10/0x10 [ 560.980418][T23132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.980450][T23132] ? con_write+0x93/0xb0 [ 560.980473][T23132] con_write+0x23/0xb0 [ 560.980494][T23132] n_tty_write+0x44f/0x12d0 [ 560.980530][T23132] ? __pfx_n_tty_write+0x10/0x10 [ 560.980561][T23132] ? trace_kmalloc+0x101/0x130 [ 560.980588][T23132] ? __pfx_woken_wake_function+0x10/0x10 [ 560.980629][T23132] ? rcu_is_watching+0x12/0xc0 [ 560.980668][T23132] ? file_tty_write.isra.0+0x694/0x890 [ 560.980708][T23132] ? kfree+0x2ec/0x6b0 [ 560.980741][T23132] ? __pfx_n_tty_write+0x10/0x10 [ 560.980770][T23132] file_tty_write.isra.0+0x4d2/0x890 [ 560.980815][T23132] redirected_tty_write+0xd4/0x120 [ 560.980855][T23132] vfs_write+0x6ac/0x1070 [ 560.980879][T23132] ? __pfx_redirected_tty_write+0x10/0x10 [ 560.980928][T23132] ? __pfx_vfs_write+0x10/0x10 [ 560.980950][T23132] ? find_held_lock+0x2b/0x80 [ 560.980984][T23132] ksys_write+0x12a/0x250 [ 560.981007][T23132] ? __pfx_ksys_write+0x10/0x10 [ 560.981035][T23132] do_syscall_64+0x106/0xf80 [ 560.981061][T23132] ? clear_bhb_loop+0x40/0x90 [ 560.981089][T23132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.981115][T23132] RIP: 0033:0x7f3fb879c819 [ 560.981134][T23132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.981158][T23132] RSP: 002b:00007f3fb9725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.981182][T23132] RAX: ffffffffffffffda RBX: 00007f3fb8a15fa0 RCX: 00007f3fb879c819 [ 560.981199][T23132] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 560.981214][T23132] RBP: 00007f3fb8832c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.981229][T23132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.981244][T23132] R13: 00007f3fb8a16038 R14: 00007f3fb8a15fa0 R15: 00007ffded334bc8 [ 560.981268][T23132] [ 560.981276][T23132] [ 560.981282][T23132] The buggy address belongs to a vmalloc virtual mapping [ 560.981299][T23132] Memory state around the buggy address: [ 560.981311][T23132] ffffc90004178f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.981329][T23132] ffffc90004178f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.981346][T23132] >ffffc90004179000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.981359][T23132] ^ [ 560.981371][T23132] ffffc90004179080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.981388][T23132] ffffc90004179100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.981402][T23132] ================================================================== [ 560.997751][T23132] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 560.997776][T23132] CPU: 0 UID: 0 PID: 23132 Comm: syz.2.8180 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 560.997817][T23132] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 560.997829][T23132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.997845][T23132] Call Trace: [ 560.997853][T23132] [ 560.997862][T23132] dump_stack_lvl+0x100/0x190 [ 560.997904][T23132] vpanic+0x552/0x970 [ 560.997927][T23132] ? __pfx_vpanic+0x10/0x10 [ 560.997955][T23132] ? sys_fillrect+0x174a/0x1910 [ 560.997993][T23132] panic+0xd1/0xe0 [ 560.998016][T23132] ? __pfx_panic+0x10/0x10 [ 560.998041][T23132] ? sys_fillrect+0x174a/0x1910 [ 560.998079][T23132] ? preempt_schedule_common+0x42/0xc0 [ 560.998108][T23132] check_panic_on_warn.cold+0x19/0x34 [ 560.998135][T23132] end_report.part.0+0x3a/0x90 [ 560.998170][T23132] kasan_report.cold+0xe/0x18 [ 560.998206][T23132] ? sys_fillrect+0x174a/0x1910 [ 560.998248][T23132] sys_fillrect+0x174a/0x1910 [ 560.998293][T23132] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 560.998325][T23132] bit_clear+0x17d/0x220 [ 560.998356][T23132] ? __pfx_bit_clear+0x10/0x10 [ 560.998389][T23132] ? fb_get_color_depth+0x120/0x250 [ 560.998419][T23132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.998448][T23132] __fbcon_clear+0x633/0x760 [ 560.998478][T23132] ? __pfx_bit_clear+0x10/0x10 [ 560.998512][T23132] fbcon_scroll+0x48b/0x650 [ 560.998542][T23132] con_scroll+0x464/0x690 [ 560.998584][T23132] do_con_write+0x6883/0x8540 [ 560.998616][T23132] ? __pfx_do_con_write+0x10/0x10 [ 560.998639][T23132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.998671][T23132] ? con_write+0x93/0xb0 [ 560.998694][T23132] con_write+0x23/0xb0 [ 560.998716][T23132] n_tty_write+0x44f/0x12d0 [ 560.998762][T23132] ? __pfx_n_tty_write+0x10/0x10 [ 560.998792][T23132] ? trace_kmalloc+0x101/0x130 [ 560.998820][T23132] ? __pfx_woken_wake_function+0x10/0x10 [ 560.998861][T23132] ? rcu_is_watching+0x12/0xc0 [ 560.998901][T23132] ? file_tty_write.isra.0+0x694/0x890 [ 560.998941][T23132] ? kfree+0x2ec/0x6b0 [ 560.998974][T23132] ? __pfx_n_tty_write+0x10/0x10 [ 560.999004][T23132] file_tty_write.isra.0+0x4d2/0x890 [ 560.999049][T23132] redirected_tty_write+0xd4/0x120 [ 560.999090][T23132] vfs_write+0x6ac/0x1070 [ 560.999114][T23132] ? __pfx_redirected_tty_write+0x10/0x10 [ 560.999157][T23132] ? __pfx_vfs_write+0x10/0x10 [ 560.999180][T23132] ? find_held_lock+0x2b/0x80 [ 560.999214][T23132] ksys_write+0x12a/0x250 [ 560.999237][T23132] ? __pfx_ksys_write+0x10/0x10 [ 560.999265][T23132] do_syscall_64+0x106/0xf80 [ 560.999291][T23132] ? clear_bhb_loop+0x40/0x90 [ 560.999320][T23132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.999345][T23132] RIP: 0033:0x7f3fb879c819 [ 560.999365][T23132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.999389][T23132] RSP: 002b:00007f3fb9725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.999414][T23132] RAX: ffffffffffffffda RBX: 00007f3fb8a15fa0 RCX: 00007f3fb879c819 [ 560.999431][T23132] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 560.999447][T23132] RBP: 00007f3fb8832c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.999463][T23132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.999478][T23132] R13: 00007f3fb8a16038 R14: 00007f3fb8a15fa0 R15: 00007ffded334bc8 [ 560.999503][T23132] [ 560.999573][T23132] Kernel Offset: disabled