last executing test programs: 1.007446368s ago: executing program 2 (id=4066): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000800)="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", 0x1000) 880.404881ms ago: executing program 2 (id=4069): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) 771.238823ms ago: executing program 3 (id=4073): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) read$auto(r0, &(0x7f0000000100)='!U\x10', 0x7fff) 725.958797ms ago: executing program 0 (id=4074): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_SNDTIMEO_OLD(r0, 0x6, 0x15, 0x0, &(0x7f0000000080)=0x3ff) 697.785303ms ago: executing program 1 (id=4075): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_merging_pages\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000040)=""/137, 0x89) 582.502053ms ago: executing program 3 (id=4076): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x400, 0x0) ioctl$auto(r0, 0x800064bc, 0x1e6) 582.20972ms ago: executing program 0 (id=4077): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) 558.017238ms ago: executing program 1 (id=4078): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) 500.959988ms ago: executing program 3 (id=4079): socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000100), 0x6b) 498.118646ms ago: executing program 2 (id=4080): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x17, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) 402.932834ms ago: executing program 0 (id=4081): socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x18) 402.822861ms ago: executing program 1 (id=4082): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)='[') 354.766573ms ago: executing program 2 (id=4083): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2003", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) 347.260305ms ago: executing program 3 (id=4084): r0 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$auto_FIONREAD(r0, 0xaa00, 0x0) 259.670532ms ago: executing program 0 (id=4085): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) 259.380173ms ago: executing program 1 (id=4086): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e775f", 0x15) 155.002171ms ago: executing program 3 (id=4087): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x40045564, r0) 154.915215ms ago: executing program 2 (id=4088): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x1) truncate$auto(&(0x7f0000000000)='}[,&*}\x00', 0x5) 133.861313ms ago: executing program 0 (id=4089): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xc0\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc76\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x009\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x99\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\x00\x02H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\x00'/525, 0x7) 119.126558ms ago: executing program 1 (id=4090): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x32, 0x0, 0x13) 22.883936ms ago: executing program 3 (id=4091): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x921064b1, 0x8) 22.793015ms ago: executing program 2 (id=4092): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/uprobe/format/ref_ctr_offset\x00', 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) 7.06039ms ago: executing program 0 (id=4093): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000340)="c80d1b5d50", 0x5) 0s ago: executing program 1 (id=4094): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 70.635183][ T5814] cgroup: Unknown subsys name 'net' [ 70.744765][ T5814] cgroup: Unknown subsys name 'cpuset' [ 70.753264][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.444027][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.450573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.247419][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.202102][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.211708][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.223008][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.228431][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.231430][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.237738][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.246243][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.259982][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.259987][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.275572][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.275813][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.282846][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.291436][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.297423][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.305898][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.312206][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.318927][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.325541][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.339947][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.348388][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.887958][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.930385][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.983566][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 75.062186][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.197299][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.205086][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.213224][ T5827] bridge_slave_0: entered allmulticast mode [ 75.220637][ T5827] bridge_slave_0: entered promiscuous mode [ 75.248420][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.255948][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.263211][ T5825] bridge_slave_0: entered allmulticast mode [ 75.270614][ T5825] bridge_slave_0: entered promiscuous mode [ 75.277872][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.285210][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.292448][ T5831] bridge_slave_0: entered allmulticast mode [ 75.299419][ T5831] bridge_slave_0: entered promiscuous mode [ 75.322172][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.329376][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.336660][ T5827] bridge_slave_1: entered allmulticast mode [ 75.343776][ T5827] bridge_slave_1: entered promiscuous mode [ 75.351403][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.358613][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.367159][ T5825] bridge_slave_1: entered allmulticast mode [ 75.374178][ T5825] bridge_slave_1: entered promiscuous mode [ 75.381263][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.388477][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.396010][ T5831] bridge_slave_1: entered allmulticast mode [ 75.403150][ T5831] bridge_slave_1: entered promiscuous mode [ 75.459573][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.469526][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.477485][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.485010][ T5828] bridge_slave_0: entered allmulticast mode [ 75.492139][ T5828] bridge_slave_0: entered promiscuous mode [ 75.520633][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.540042][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.547334][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.554843][ T5828] bridge_slave_1: entered allmulticast mode [ 75.562369][ T5828] bridge_slave_1: entered promiscuous mode [ 75.571657][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.584031][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.617888][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.629269][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.641345][ T5831] team0: Port device team_slave_0 added [ 75.678207][ T5831] team0: Port device team_slave_1 added [ 75.706236][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.742960][ T5825] team0: Port device team_slave_0 added [ 75.751441][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.763081][ T5827] team0: Port device team_slave_0 added [ 75.777972][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.785645][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.811726][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.825396][ T5825] team0: Port device team_slave_1 added [ 75.849451][ T5827] team0: Port device team_slave_1 added [ 75.868644][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.875950][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.901887][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.936476][ T5828] team0: Port device team_slave_0 added [ 75.953189][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.960548][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.987095][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.012040][ T5828] team0: Port device team_slave_1 added [ 76.018388][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.025535][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.051816][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.064623][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.072004][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.098141][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.110174][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.117210][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.143525][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.220864][ T5831] hsr_slave_0: entered promiscuous mode [ 76.227454][ T5831] hsr_slave_1: entered promiscuous mode [ 76.236617][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.243668][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.269895][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.282370][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.289343][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.315641][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.392026][ T5827] hsr_slave_0: entered promiscuous mode [ 76.398390][ T5827] hsr_slave_1: entered promiscuous mode [ 76.401237][ T51] Bluetooth: hci2: command tx timeout [ 76.404336][ T5840] Bluetooth: hci3: command tx timeout [ 76.410029][ T51] Bluetooth: hci1: command tx timeout [ 76.415751][ T5830] Bluetooth: hci0: command tx timeout [ 76.427352][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 76.433488][ T5827] Cannot create hsr debugfs directory [ 76.452530][ T5825] hsr_slave_0: entered promiscuous mode [ 76.458887][ T5825] hsr_slave_1: entered promiscuous mode [ 76.465186][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 76.470989][ T5825] Cannot create hsr debugfs directory [ 76.538056][ T5828] hsr_slave_0: entered promiscuous mode [ 76.544772][ T5828] hsr_slave_1: entered promiscuous mode [ 76.551678][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 76.557420][ T5828] Cannot create hsr debugfs directory [ 76.981844][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.994232][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.004887][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.025178][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.083640][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.116067][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.129478][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.150034][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.212666][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.223534][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.237802][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.248576][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.334111][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.347246][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.357971][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.373314][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.426347][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.477520][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.505342][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.512784][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.557700][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.564896][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.588182][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.634629][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.659217][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.666440][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.686057][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.693287][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.748054][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.794854][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.817665][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.838975][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.849487][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.856695][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.892474][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.899667][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.934342][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.941476][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.985528][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.992731][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.173623][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.306444][ T5831] veth0_vlan: entered promiscuous mode [ 78.347576][ T5831] veth1_vlan: entered promiscuous mode [ 78.470466][ T5831] veth0_macvtap: entered promiscuous mode [ 78.485284][ T5830] Bluetooth: hci1: command tx timeout [ 78.492245][ T5830] Bluetooth: hci2: command tx timeout [ 78.496126][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.497683][ T5830] Bluetooth: hci0: command tx timeout [ 78.509055][ T5831] veth1_macvtap: entered promiscuous mode [ 78.510813][ T5840] Bluetooth: hci3: command tx timeout [ 78.569388][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.598514][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.643587][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.659728][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.677039][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.686031][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.714646][ T5825] veth0_vlan: entered promiscuous mode [ 78.722786][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756900][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.818229][ T5825] veth1_vlan: entered promiscuous mode [ 78.859009][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.881135][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.923966][ T5825] veth0_macvtap: entered promiscuous mode [ 78.935708][ T5825] veth1_macvtap: entered promiscuous mode [ 78.943085][ T5827] veth0_vlan: entered promiscuous mode [ 78.972514][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.987460][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.994494][ T5827] veth1_vlan: entered promiscuous mode [ 79.015604][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.036561][ T5828] veth0_vlan: entered promiscuous mode [ 79.046782][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.085999][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.102493][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124641][ T5828] veth1_vlan: entered promiscuous mode [ 79.133858][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151402][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.184090][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.226226][ T5827] veth0_macvtap: entered promiscuous mode [ 79.268764][ T5827] veth1_macvtap: entered promiscuous mode [ 79.366712][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.386119][ T5828] veth0_macvtap: entered promiscuous mode [ 79.399389][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.424079][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.439126][ T5828] veth1_macvtap: entered promiscuous mode [ 79.449275][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.485721][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.562939][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568803][ T5918] usbcore.quirks: string doesn't fit in 127 chars. [ 79.584849][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.602791][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613810][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.624411][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.634850][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.664444][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.706979][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725523][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.748735][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.763099][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.833629][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.864344][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.997136][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.040072][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.070994][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.097108][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.174897][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.188959][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.357543][ T5934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 80.564134][ T5830] Bluetooth: hci0: command tx timeout [ 80.569582][ T5830] Bluetooth: hci3: command tx timeout [ 80.575593][ T5840] Bluetooth: hci2: command tx timeout [ 80.581084][ T5148] Bluetooth: hci1: command tx timeout [ 80.902893][ T5953] i2c i2c-0: delete_device: Extra parameters [ 81.703065][ T5987] nfsd: Unknown parameter 'ԣ' [ 82.640598][ T5840] Bluetooth: hci3: command tx timeout [ 82.646062][ T5840] Bluetooth: hci2: command tx timeout [ 82.655658][ T5148] Bluetooth: hci1: command tx timeout [ 82.663723][ T5830] Bluetooth: hci0: command tx timeout [ 83.021276][ T6038] delete_channel: no stack [ 83.560298][ T5830] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 83.814731][ T6074] __vm_enough_memory: pid: 6074, comm: syz.0.76, bytes: 9223372036854775808 not enough memory for the allocation [ 84.476822][ T6098] bond0: option packets_per_slave: invalid value ( Xnp) [ 84.500889][ T6098] bond0: option packets_per_slave: allowed values 0 - 65535 [ 84.697885][ T6108] WARNING! power/level is deprecated; use power/control instead [ 86.805260][ T6204] kstrtoul() returned -22 for lu_gp_id [ 86.812771][ T1216] cfg80211: failed to load regulatory.db [ 86.822171][ T29] audit: type=1800 audit(1773192820.087:2): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.140" name="lu_gp_id" dev="configfs" ino=9308 res=0 errno=0 [ 88.586555][ T6283] nvme_fcloop: unknown parameter or missing value '0' [ 88.884163][ T6295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.382845][ T6361] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 90.689610][ T29] audit: type=1326 audit(1773192823.967:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.1.226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd1599c799 code=0x0 [ 91.242357][ T6395] [U]  [ 91.675556][ T6416] ubi31: attaching mtd0 [ 91.754235][ T6416] ubi31: scanning is finished [ 91.758980][ T6416] ubi31: empty MTD device detected [ 91.768050][ T6422] kAFS: Invalid Command on /proc/fs/afs/cells file [ 91.983855][ T6416] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.015318][ T6416] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 92.039936][ T6416] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.050181][ T6416] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 92.079393][ T6416] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.107111][ T6416] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 92.120683][ T6416] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1191182822 [ 92.138264][ T29] audit: type=1326 audit(1773192825.417:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff6339c799 code=0x0 [ 92.170970][ T6416] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.195072][ T6430] ubi31: background thread "ubi_bgt31d" started, PID 6430 [ 93.310423][ T6477] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 97.124285][ T6643] could not allocate digest TFM handle [ 97.962587][ T6679] zswap: compressor - not available [ 102.644960][ T6905] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[6905] [ 103.551801][ T6947] i2c i2c-0: delete_device: Can't find device in list [ 104.650498][ T7001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.135160][ T7021] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7021] [ 105.852964][ T7056] ubi: mtd0 is already attached to ubi31 [ 107.507628][ T7125] could not allocate digest TFM handle [ 108.306481][ T7163] could not allocate digest TFM handle [ 110.701986][ T7286] binder: 7284:7286 ioctl c0306201 200000000000 returned -14 [ 110.853081][ T5830] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 110.988967][ T7300] Scaler: ================= START STATUS ================= [ 111.029945][ T7300] Scaler: ================== END STATUS ================== [ 111.540227][ T7325] vhci_hcd vhci_hcd.2: invalid port number 194 [ 111.546456][ T7325] vhci_hcd vhci_hcd.2: invalid port number 194 [ 111.908973][ T7341] mmap: syz.0.698 (7341) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.620092][ T7420] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.648378][ T7420] vhci_hcd vhci_hcd.2: invalid port number 0 [ 113.672921][ T7422] syz.3.738 uses obsolete (PF_INET,SOCK_PACKET) [ 115.069004][ T7485] vhci_hcd vhci_hcd.2: invalid port number 135 [ 115.079869][ T7485] vhci_hcd vhci_hcd.2: invalid port number 135 [ 115.109228][ T7487] [U] ^\ [ 115.371492][ T7499] : Can't lookup blockdev [ 115.787791][ T7523] : Can't lookup blockdev [ 119.018597][ T7668] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.898417][ T7710] process 'syz.2.877' launched '/dev/fd/3' with NULL argv: empty string added [ 120.732227][ T7748] nvme_fcloop: unknown parameter or missing value '7' [ 121.106562][ T7770] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.443139][ T7784] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 122.012198][ T7811] udc dummy_udc.0: soft-connect without a gadget driver [ 123.731384][ T7891] bond0: no command found in slaves file - use +ifname or -ifname [ 124.485963][ T7928] Malformed UNC in devname [ 124.485963][ T7928] [ 124.500400][ T7928] CIFS: VFS: Malformed UNC in devname [ 124.827866][ T7943] kAFS: Invalid Command on /proc/fs/afs/cells file [ 125.259953][ T7960] queue_state_write: operation too long [ 125.275237][ T7960] queue_state_write: use 'run', 'start' or 'kick' [ 125.644725][ T7980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.253385][ T8005] block2mtd: illegal erase size [ 127.386248][ T29] audit: type=1806 audit(1773192860.667:5): xattr="." res=0 [ 128.580738][ T8114] [ 130.889357][ T8220] vhci_hcd vhci_hcd.2: invalid port number 253 [ 130.903449][ T8220] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 131.528141][ T8248] zram: Added device: zram1 [ 132.323966][ T8287] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 132.885972][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900134][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.165444][ T8372] vhci_hcd vhci_hcd.1: invalid port number 16 [ 134.189990][ T8372] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 134.480073][ T8387] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8387] [ 134.778929][ T8398] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 135.843008][ T8453] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 135.980814][ T8459] capability: warning: `syz.0.1231' uses deprecated v2 capabilities in a way that may be insecure [ 138.008311][ T8551] rnbd_client L213: map_device: Parameters missing [ 138.840559][ T8586] ICMPv6: process `syz.3.1290' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 139.862663][ T8632] binder: 8631:8632 ioctl 40046205 0 returned -22 [ 140.401796][ T8658] random: crng reseeded on system resumption [ 143.334471][ T8804] random: crng reseeded on system resumption [ 143.573544][ T8811] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 145.102759][ T8880] bond0: no command found in slaves file - use +ifname or -ifname [ 145.962382][ T8920] warning: `syz.0.1456' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.180675][ T8930] TCP: TCP_TX_DELAY enabled [ 147.335178][ T8992] binder: 8991:8992 ioctl c0046209 9 returned -22 [ 149.869687][ T9110] aoe: can't write to that file. [ 149.987165][ T9114] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 150.009994][ T9118] binder: 9116:9118 ioctl 541b 38 returned -22 [ 152.735205][ T9253] syz.3.1622 (9253): attempted to duplicate a private mapping with mremap. This is not supported. [ 153.519601][ T9295] delete_channel: no stack [ 154.985054][ T9365] vhci_hcd: not connected 4 [ 155.328105][ T9378] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 157.229197][ T9448] blkio.reset_stats is deprecated [ 157.576746][ T9463] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 157.758955][ T9474] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.1729: 7 [ 158.332081][ T9494] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 158.382569][ T9494] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 158.409997][ T9494] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 158.464004][ T9494] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 158.482205][ T9494] page dumped because: unmovable page [ 158.495194][ T9494] page_owner info is not present (never set?) [ 158.937105][ T9522] block2mtd: illegal erase size [ 160.120765][ T9576] QAT: Stopping all acceleration devices. [ 161.112989][ T9627] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 163.047909][ T9729] usb usb37: usbfs: process 9729 (syz.1.1855) did not claim interface 0 before use [ 163.671307][ T9761] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 166.961686][ T29] audit: type=1800 audit(1773192900.237:6): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1953" name="dbroot" dev="configfs" ino=21562 res=0 errno=0 [ 167.044845][ T9936] : Can't lookup blockdev [ 167.417217][ T9952] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 170.082926][T10041] mmap: syz.3.2008 (10041): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 171.706291][T10108] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 172.359013][ T5830] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 176.305851][ T29] audit: type=1400 audit(4294967305.670:7): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10336 comm="syz.1.2150" [ 176.678372][ T5830] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 177.718070][T10407] Invalid input. Must be >= 4608 [ 177.929433][ T5840] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 177.929478][ T5840] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 177.944850][ T5840] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 178.120364][T10429] overlayfs: "check_copy_up" module option is obsolete [ 178.476984][ T5840] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 180.886187][T10574] smpboot: CPU 1 is now offline [ 181.555571][T10607] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 181.986968][T10630] QAT: failed to copy from user cfg_data. [ 182.110206][T10634] Setting dangerous option i915.mitigations - tainting kernel [ 183.047535][T10680] usb usb4: usbfs: process 10680 (syz.0.2313) did not claim interface 0 before use [ 184.996935][T10785] kafs: addr_prefs: Invalid Command [ 187.983069][T10927] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 189.214331][T10975] vhci_hcd vhci_hcd.2: invalid port number 0 [ 190.114055][T11009] synth uevent: /bus/mei: unknown uevent action string [ 193.044647][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.056638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.552393][T11143] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 195.319271][T11244] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.467730][T11302] ICMPv6: process `syz.2.2623' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 196.654616][T11307] binder: binder_mmap: 11305 0-1000 bad vm_flags failed -1 [ 196.822758][T11313] aoe: invalid device specification [ 196.828261][T11314] cougar: G6 mapped to space [ 197.043749][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 197.049932][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 197.764519][T11348] ima: policy update failed [ 197.807909][ T29] audit: type=1802 audit(4294967327.170:8): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2647" res=0 errno=0 [ 198.219085][T11371] i8042 aux 00:02: in use; can't configure [ 201.520773][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 201.528556][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 203.360784][T11595] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.448091][T11597] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.538107][T11636] < [ 205.987234][T11707] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.509378][T11736] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 206.710114][T11745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 207.798915][ T29] audit: type=1800 audit(4294967337.160:9): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2868" name="members" dev="configfs" ino=26803 res=0 errno=0 [ 207.982755][T11815] ceph: Failed to parse sending metrics switch value 'P^' [ 207.993208][ T29] audit: type=1804 audit(4294967337.360:10): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2874" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 208.852599][T11860] usb usb2: usbfs: process 11860 (syz.2.2896) did not claim interface 4 before use [ 209.626030][T11903] program syz.0.2918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.907660][ T29] audit: type=1800 audit(4294967339.270:11): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2925" name="members" dev="configfs" ino=27163 res=0 errno=0 [ 211.114864][T11977] program syz.3.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.367638][T12047] QAT: Device 250 not found [ 213.826873][T12121] tipc: Can't bind to reserved service type 1 [ 214.248049][T12137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.775424][T12165] ======================================================= [ 214.775424][T12165] WARNING: The mand mount option has been deprecated and [ 214.775424][T12165] and is ignored by this kernel. Remove the mand [ 214.775424][T12165] option from the mount to silence this warning. [ 214.775424][T12165] ======================================================= [ 216.749968][T12268] block2mtd: parameter too long [ 219.456276][T12383] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 219.694604][T12383] CIFS mount error: No usable UNC path provided in device string! [ 219.694604][T12383] [ 219.740897][T12399] synth uevent: /module/au0828: unknown uevent action string [ 219.786392][T12383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 220.287802][ T29] audit: type=1800 audit(4294967349.650:12): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3175" name="features" dev="configfs" ino=28785 res=0 errno=0 [ 220.678017][T12444] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 224.135925][T12643] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 226.052192][T12743] vivid-007: ================= START STATUS ================= [ 226.087744][T12743] vivid-007: Generate PTS: true [ 226.106680][T12743] vivid-007: Generate SCR: true [ 226.131893][T12743] tpg source WxH: 320x240 (Y'CbCr) [ 226.137031][T12743] tpg field: 1 [ 226.164980][T12743] tpg crop: (0,0)/320x240 [ 226.182567][T12743] tpg compose: (0,0)/320x240 [ 226.215739][T12743] tpg colorspace: 8 [ 226.230788][T12743] tpg transfer function: 0/0 [ 226.247096][T12743] tpg Y'CbCr encoding: 0/0 [ 226.267730][T12743] tpg quantization: 0/0 [ 226.285001][T12743] tpg RGB range: 0/2 [ 226.307280][T12743] vivid-007: ================== END STATUS ================== [ 229.008875][T12913] usbip-vudc usbip-vudc.0: gadget not bound [ 229.145016][T12920] block2mtd: parameter too long [ 231.671306][T13040] QAT: failed to copy from user cfg_data. [ 232.009998][ T5840] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 232.010023][ T5840] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 232.025207][ T5840] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 232.025263][ T5840] Bluetooth: hci0: Malformed LE Event: 0x0d [ 232.430009][T13080] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 232.635550][T13091] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 232.800510][T13100] vivid-003: ================= START STATUS ================= [ 232.833945][T13100] vivid-003: Radio HW Seek Mode: Bounded [ 232.860638][T13100] vivid-003: Radio Programmable HW Seek: false [ 232.889733][T13100] vivid-003: RDS Rx I/O Mode: Block I/O [ 232.922774][T13100] vivid-003: Generate RBDS Instead of RDS: false [ 232.947173][T13100] vivid-003: RDS Reception: true [ 232.972034][T13100] vivid-003: RDS Program Type: 0 inactive [ 232.992247][T13100] vivid-003: RDS PS Name: inactive [ 233.021530][T13100] vivid-003: RDS Radio Text: inactive [ 233.041482][T13100] vivid-003: RDS Traffic Announcement: false inactive [ 233.070959][T13100] vivid-003: RDS Traffic Program: false inactive [ 233.096254][T13100] vivid-003: RDS Music: false inactive [ 233.126699][T13100] vivid-003: ================== END STATUS ================== [ 233.309496][T13124] bond0: invalid ARP target specified [ 233.388403][T13130] sysfs_service_op_show: Client not running :-5: [ 233.895909][T13160] vhci_hcd vhci_hcd.2: invalid port number 16 [ 233.929877][T13160] vhci_hcd vhci_hcd.2: invalid port number 16 [ 236.364160][T13281] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 236.427251][T13281] ep_00: uevent: failed to send synthetic uevent: -22 [ 238.425894][T13391] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 238.983584][T13421] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 240.206400][T13489] mmap: syz.0.3684 (13489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.920550][T13528] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 241.317065][T13554] bond0: no command found in slaves file - use +ifname or -ifname [ 241.496026][T13560] Setting dangerous option i915.mitigations - tainting kernel [ 245.770589][T13790] bond0: Unable to set down delay as MII monitoring is disabled [ 245.972193][T13802] delete_channel: no stack [ 246.088379][T13809] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 247.729487][T13896] QAT: Invalid ioctl 21531 [ 247.829894][T13901] ptp ptp0: only physical clock in use now [ 248.242497][T13925] nvme_fcloop: unknown parameter or missing value '' [ 248.407062][ T5840] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 248.844028][T13956] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 251.699181][T14064] futex_wake_op: syz.2.3940 tries to shift op by -2048; fix this program [ 251.737107][T14064] futex_wake_op: syz.2.3940 tries to shift op by -2048; fix this program [ 252.613192][T14118] block nbd0: NBD_DISCONNECT [ 253.172537][T14147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 253.381788][T14161] process 'syz.0.3987' launched '/dev/fd/3' with NULL argv: empty string added [ 253.703366][T14177] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 254.443385][T14218] wlan1: mtu less than device minimum [ 255.733235][T14285] block loop4: the capability attribute has been deprecated. [ 255.764210][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764264][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212545][T14310] batman_adv: Routing algorithm '7' is not supported [ 257.076057][T14355] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.438188][T14375] ================================================================== [ 257.438211][T14375] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 257.438237][T14375] Write of size 8 at addr ffffc900041f9000 by task syz.1.4094/14375 [ 257.438250][T14375] [ 257.438268][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.1.4094 Tainted: G U syzkaller #0 PREEMPT(full) [ 257.438289][T14375] Tainted: [U]=USER [ 257.438294][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 257.438306][T14375] Call Trace: [ 257.438312][T14375] [ 257.438318][T14375] dump_stack_lvl+0x100/0x190 [ 257.438341][T14375] print_report+0x156/0x4c9 [ 257.438361][T14375] ? _raw_spin_lock_irqsave+0x52/0x60 [ 257.438376][T14375] ? __virt_addr_valid+0x81/0x620 [ 257.438396][T14375] ? sys_fillrect+0x174a/0x1910 [ 257.438413][T14375] kasan_report+0xdf/0x1e0 [ 257.438428][T14375] ? sys_fillrect+0x174a/0x1910 [ 257.438448][T14375] sys_fillrect+0x174a/0x1910 [ 257.438468][T14375] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 257.438490][T14375] bit_clear+0x17d/0x220 [ 257.438504][T14375] ? __pfx_bit_clear+0x10/0x10 [ 257.438517][T14375] ? fb_get_color_depth+0x120/0x250 [ 257.438539][T14375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.438564][T14375] __fbcon_clear+0x633/0x760 [ 257.438585][T14375] ? __pfx_bit_clear+0x10/0x10 [ 257.438599][T14375] fbcon_scroll+0x48b/0x650 [ 257.438621][T14375] con_scroll+0x464/0x690 [ 257.438639][T14375] do_con_write+0x6883/0x8540 [ 257.438657][T14375] ? __mutex_lock+0x26a/0x1b90 [ 257.438678][T14375] ? __pfx___mutex_lock+0x10/0x10 [ 257.438695][T14375] ? __pfx_do_con_write+0x10/0x10 [ 257.438727][T14375] con_write+0x23/0xb0 [ 257.438744][T14375] n_tty_write+0x44f/0x12d0 [ 257.438770][T14375] ? __pfx_n_tty_write+0x10/0x10 [ 257.438790][T14375] ? kasan_quarantine_put+0x104/0x240 [ 257.438820][T14375] ? lockdep_hardirqs_on+0x78/0x100 [ 257.438838][T14375] ? __pfx_woken_wake_function+0x10/0x10 [ 257.438861][T14375] ? file_tty_write.isra.0+0x694/0x890 [ 257.438879][T14375] ? kfree+0x1f6/0x6b0 [ 257.438897][T14375] ? __pfx_n_tty_write+0x10/0x10 [ 257.438918][T14375] file_tty_write.isra.0+0x4d2/0x890 [ 257.438937][T14375] redirected_tty_write+0xd4/0x120 [ 257.438955][T14375] vfs_write+0x6ac/0x1070 [ 257.438977][T14375] ? __pfx_redirected_tty_write+0x10/0x10 [ 257.438995][T14375] ? __pfx_vfs_write+0x10/0x10 [ 257.439015][T14375] ? find_held_lock+0x2b/0x80 [ 257.439034][T14375] ksys_write+0x12a/0x250 [ 257.439046][T14375] ? __pfx_ksys_write+0x10/0x10 [ 257.439061][T14375] do_syscall_64+0x106/0xf80 [ 257.439078][T14375] ? clear_bhb_loop+0x40/0x90 [ 257.439094][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.439109][T14375] RIP: 0033:0x7fbd1599c799 [ 257.439127][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.439142][T14375] RSP: 002b:00007fbd16809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.439160][T14375] RAX: ffffffffffffffda RBX: 00007fbd15c15fa0 RCX: 00007fbd1599c799 [ 257.439171][T14375] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 257.439180][T14375] RBP: 00007fbd15a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 257.439189][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.439198][T14375] R13: 00007fbd15c16038 R14: 00007fbd15c15fa0 R15: 00007ffce43a2ff8 [ 257.439213][T14375] [ 257.439219][T14375] [ 257.439222][T14375] The buggy address belongs to a vmalloc virtual mapping [ 257.439234][T14375] Memory state around the buggy address: [ 257.439241][T14375] ffffc900041f8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 257.439252][T14375] ffffc900041f8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 257.439262][T14375] >ffffc900041f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 257.439270][T14375] ^ [ 257.439278][T14375] ffffc900041f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 257.439288][T14375] ffffc900041f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 257.439297][T14375] ================================================================== [ 257.439306][T14375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 257.439317][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.1.4094 Tainted: G U syzkaller #0 PREEMPT(full) [ 257.439338][T14375] Tainted: [U]=USER [ 257.439342][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 257.439351][T14375] Call Trace: [ 257.439356][T14375] [ 257.439361][T14375] dump_stack_lvl+0x100/0x190 [ 257.439382][T14375] vpanic+0x552/0x970 [ 257.439395][T14375] ? __pfx_vpanic+0x10/0x10 [ 257.439409][T14375] ? __pfx_vprintk_emit+0x10/0x10 [ 257.439425][T14375] ? sys_fillrect+0x174a/0x1910 [ 257.439441][T14375] panic+0xd1/0xe0 [ 257.439454][T14375] ? __pfx_panic+0x10/0x10 [ 257.439469][T14375] ? sys_fillrect+0x174a/0x1910 [ 257.439487][T14375] check_panic_on_warn.cold+0x19/0x34 [ 257.439502][T14375] end_report.part.0+0x3a/0x90 [ 257.439522][T14375] kasan_report.cold+0xe/0x18 [ 257.439541][T14375] ? sys_fillrect+0x174a/0x1910 [ 257.439560][T14375] sys_fillrect+0x174a/0x1910 [ 257.439580][T14375] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 257.439601][T14375] bit_clear+0x17d/0x220 [ 257.439614][T14375] ? __pfx_bit_clear+0x10/0x10 [ 257.439628][T14375] ? fb_get_color_depth+0x120/0x250 [ 257.439649][T14375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.439674][T14375] __fbcon_clear+0x633/0x760 [ 257.439694][T14375] ? __pfx_bit_clear+0x10/0x10 [ 257.439709][T14375] fbcon_scroll+0x48b/0x650 [ 257.439730][T14375] con_scroll+0x464/0x690 [ 257.439750][T14375] do_con_write+0x6883/0x8540 [ 257.439769][T14375] ? __mutex_lock+0x26a/0x1b90 [ 257.439790][T14375] ? __pfx___mutex_lock+0x10/0x10 [ 257.439808][T14375] ? __pfx_do_con_write+0x10/0x10 [ 257.439838][T14375] con_write+0x23/0xb0 [ 257.439855][T14375] n_tty_write+0x44f/0x12d0 [ 257.439881][T14375] ? __pfx_n_tty_write+0x10/0x10 [ 257.439902][T14375] ? kasan_quarantine_put+0x104/0x240 [ 257.439922][T14375] ? lockdep_hardirqs_on+0x78/0x100 [ 257.439938][T14375] ? __pfx_woken_wake_function+0x10/0x10 [ 257.439960][T14375] ? file_tty_write.isra.0+0x694/0x890 [ 257.439977][T14375] ? kfree+0x1f6/0x6b0 [ 257.439994][T14375] ? __pfx_n_tty_write+0x10/0x10 [ 257.440015][T14375] file_tty_write.isra.0+0x4d2/0x890 [ 257.440036][T14375] redirected_tty_write+0xd4/0x120 [ 257.440053][T14375] vfs_write+0x6ac/0x1070 [ 257.440075][T14375] ? __pfx_redirected_tty_write+0x10/0x10 [ 257.440093][T14375] ? __pfx_vfs_write+0x10/0x10 [ 257.440114][T14375] ? find_held_lock+0x2b/0x80 [ 257.440132][T14375] ksys_write+0x12a/0x250 [ 257.440144][T14375] ? __pfx_ksys_write+0x10/0x10 [ 257.440159][T14375] do_syscall_64+0x106/0xf80 [ 257.440175][T14375] ? clear_bhb_loop+0x40/0x90 [ 257.440191][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.440206][T14375] RIP: 0033:0x7fbd1599c799 [ 257.440217][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.440231][T14375] RSP: 002b:00007fbd16809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.440245][T14375] RAX: ffffffffffffffda RBX: 00007fbd15c15fa0 RCX: 00007fbd1599c799 [ 257.440255][T14375] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 257.440264][T14375] RBP: 00007fbd15a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 257.440272][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.440282][T14375] R13: 00007fbd15c16038 R14: 00007fbd15c15fa0 R15: 00007ffce43a2ff8 [ 257.440296][T14375] [ 257.440362][T14375] Kernel Offset: disabled