last executing test programs: 11m37.127234736s ago: executing program 2 (id=1261): adjtimex$auto(&(0x7f0000000500)={0x3ffa34bb, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x3, 0x9, 0x26ab, 0x0, 0x8, 0xa, 0x0, {0x9, 0x3}, 0x10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x5, 0x8, 0x8001, 0x51b, 0x3}) 11m36.945707743s ago: executing program 2 (id=1265): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) 11m36.724714303s ago: executing program 2 (id=1270): seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") 11m36.560458312s ago: executing program 2 (id=1273): prctl$auto_PR_SET_PDEATHSIG(0x1, 0xc2ab, 0x0, 0x7, 0xb) 11m36.349970203s ago: executing program 2 (id=1278): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 11m35.848988502s ago: executing program 2 (id=1288): setresgid$auto(0x0, 0x0, 0x0) 11m35.43527446s ago: executing program 32 (id=1288): setresgid$auto(0x0, 0x0, 0x0) 10m49.255441786s ago: executing program 4 (id=2059): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) 10m48.814892813s ago: executing program 4 (id=2069): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r0, 0x4008556c, 0x81) 10m48.668146236s ago: executing program 4 (id=2071): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0000f4ff", 0x8, 0x0, 0x0, 0xd, 0x5, "4bc14986c0683dda578949825682f5", "99c03486", "a685df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30cf7db90000001a00", "d3feec57878d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) 10m48.467413281s ago: executing program 4 (id=2075): socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) 10m48.257959325s ago: executing program 4 (id=2080): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 10m47.785635568s ago: executing program 4 (id=2089): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) write$auto(r0, &(0x7f0000000040)='\xd5\x88X\xd9\x1c\x13\xf3\x98\x94\xf2\x8c,\x11\xf2\x8f\x94\xe3a\x7fz\xd5\xbeoC\x91)\xda\x98z\x94n\xc1\xdd\xb3\xe9\xd88{K\x88\xe3I^&gq\xce\x80Lx\x91\xfb[\x02\x84\a\xa3Rl\xa7\x89f\xef=\xf8\x9c\x01\x83\x0ek\x88\x1e\xee\x17\xb3\r\xfew\xfc\xeb\t\xf9E\xc4@l\x1a\x9a\xae\xe3\x9c\x89rjc\xe8\v\x19\x86\x13\x17\x8e\x0fGdl\xe6\xc1\xb9my\x96,\xdf`\x10{\x13\xd5\xe5\xd6\xc8\r\x82\xde&\r\x9c\x1fQH', 0x2) 10m47.416294814s ago: executing program 33 (id=2089): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) write$auto(r0, &(0x7f0000000040)='\xd5\x88X\xd9\x1c\x13\xf3\x98\x94\xf2\x8c,\x11\xf2\x8f\x94\xe3a\x7fz\xd5\xbeoC\x91)\xda\x98z\x94n\xc1\xdd\xb3\xe9\xd88{K\x88\xe3I^&gq\xce\x80Lx\x91\xfb[\x02\x84\a\xa3Rl\xa7\x89f\xef=\xf8\x9c\x01\x83\x0ek\x88\x1e\xee\x17\xb3\r\xfew\xfc\xeb\t\xf9E\xc4@l\x1a\x9a\xae\xe3\x9c\x89rjc\xe8\v\x19\x86\x13\x17\x8e\x0fGdl\xe6\xc1\xb9my\x96,\xdf`\x10{\x13\xd5\xe5\xd6\xc8\r\x82\xde&\r\x9c\x1fQH', 0x2) 9m9.567353784s ago: executing program 1 (id=3895): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/snmp6\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) 9m9.398282255s ago: executing program 1 (id=3899): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/131, 0x83) 9m9.197465314s ago: executing program 1 (id=3904): r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto_full_fops_mem(r0, 0x0, 0x0) 9m9.092902366s ago: executing program 1 (id=3907): futex$auto(&(0x7f0000000080)=0x80000001, 0x6, 0x152, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0xf3b, 0x0, 0x0, 0x440a48ce) 9m8.101066454s ago: executing program 1 (id=3928): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 9m7.608408032s ago: executing program 1 (id=3938): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) 9m7.286058267s ago: executing program 34 (id=3938): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) 7m47.831791065s ago: executing program 0 (id=4936): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/active\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40) 7m47.474520696s ago: executing program 0 (id=4940): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000480)="f21a9a3c5c2d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a5c7b6842c879c1d95cb259d6f9d41f61ca07abf17751e78a05499207ce95baa061f1a04b2347ce07de09000000000000006e6dfd937bec82c2de33188e7e0a", 0x97) 7m47.117245676s ago: executing program 0 (id=4944): r0 = socket(0x2, 0x6, 0x0) setsockopt$auto(r0, 0x10d, 0x6, 0x0, 0x2) 7m46.81879322s ago: executing program 0 (id=4948): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb1/dormant\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/124, 0x7c) 7m46.495281382s ago: executing program 0 (id=4952): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)={0x5}) 7m46.173815133s ago: executing program 0 (id=4956): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/19, 0x13) 7m31.026787568s ago: executing program 35 (id=4956): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/19, 0x13) 24.415786399s ago: executing program 6 (id=10319): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) 24.22405963s ago: executing program 6 (id=10322): sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0xa2, 0x13, 0x0, 0x1, [@generic="56cbfa42c40766659aa29e5e977fd8c0c5ea07452724775bbe2a991a68ffcde27d30d9539f5af41857c946a10ab75d4455ff05a8c7e2dd82a1b193c14603e7d524459341b3e50ef2aa9f0036e435055f7ced71ecabd242d2772183e1ecccd5862bebfb0c8f2d4aeb08712114c79f828805a9f502ad2cf56faf93edaa4aed6a9f231f9ebe64ef8a62707c3d2a42aedbf90b43fa34f4d09b7d0ddf85188101"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) 23.968979014s ago: executing program 6 (id=10327): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x7, 0x0, 0x7) 23.810755595s ago: executing program 6 (id=10329): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc0905664, r0) 23.646598183s ago: executing program 6 (id=10332): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 23.1321745s ago: executing program 6 (id=10338): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 22.612503403s ago: executing program 36 (id=10338): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 3.711314048s ago: executing program 7 (id=10497): syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) setsockopt$auto(0x4, 0x29, 0x1, 0x0, 0x8) 3.320290746s ago: executing program 7 (id=10502): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r0 = clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 2.499666529s ago: executing program 3 (id=10511): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/macvtap0/ignore_routes_with_linkdown\x00', 0x2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/macvtap0/regen_min_advance\x00', 0x20202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) 2.246350761s ago: executing program 3 (id=10515): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) process_madvise$auto(0x3, 0x0, 0xb, 0x40000c15, 0x8000000000000000) 2.089491004s ago: executing program 7 (id=10517): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) 1.745426189s ago: executing program 7 (id=10519): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) msgget$auto(0x0, 0x800e) 1.426387904s ago: executing program 8 (id=10522): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/nfsfs/servers\x00', 0x400, 0x0) setreuid$auto(0x0, 0x20000000004) fchown$auto(r0, 0x0, 0x0) 1.299345868s ago: executing program 3 (id=10524): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 1.294639918s ago: executing program 7 (id=10525): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) 1.109748653s ago: executing program 8 (id=10526): r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r1 = dup$auto(r0) ioctl$auto_XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000040)={0xf, 0xc4, 0x1, 0x2, 0x77f}) 1.106325408s ago: executing program 5 (id=10527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x8092) 920.920962ms ago: executing program 3 (id=10528): mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x80000, 0x0) lseek$auto(r0, 0x9, 0x0) 904.414087ms ago: executing program 8 (id=10529): mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) 858.642768ms ago: executing program 5 (id=10530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r1, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 691.021672ms ago: executing program 8 (id=10531): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x88302, 0x0) sendfile$auto(r1, r0, 0x0, 0x48) 629.93655ms ago: executing program 5 (id=10532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 485.069786ms ago: executing program 8 (id=10533): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', &(0x7f00000002c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xecs\xb6\xf2\x15Zi\xc4S6\'\x14\x05\t\x8cU?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\fO\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xf2S\xf2\xc2pF9a\x0e\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xdfbM{4RQ\x00\x9d)\x17\xbby\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\x02m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=;\x92\xda\x13\xfe\x00\xfb\xc6\xd8>\x01\xd4\x14<\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x465e, 0x0) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)={0x8, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x8000000000000001, {[0x6, 0x3]}, 0x9a, 0x7, 0xfffffffffffff7c9, [0x8, 0x9, 0x6269, 0xfffffffffffffffa]}) 480.981542ms ago: executing program 3 (id=10534): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 428.202173ms ago: executing program 5 (id=10535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) 369.882145ms ago: executing program 7 (id=10536): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) 210.796089ms ago: executing program 5 (id=10537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 209.596276ms ago: executing program 8 (id=10545): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000200)={0x1a2005180, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x11) 4.010264ms ago: executing program 5 (id=10538): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0xa, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) 0s ago: executing program 3 (id=10539): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5c7f8e169 code=0x0 [ 159.640411][ T30] audit: type=1800 audit(1745212816.621:6): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1033" name="lu_gp_id" dev="configfs" ino=12853 res=0 errno=0 [ 161.797793][ T30] audit: type=1800 audit(1745212818.780:7): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1073" name="members" dev="configfs" ino=13405 res=0 errno=0 [ 165.376112][ T7956] kexec: Could not allocate control_code_buffer [ 165.902629][ T30] audit: type=1800 audit(1745212822.878:8): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1133" name="trace_pipe" dev="tracefs" ino=90 res=0 errno=0 [ 167.644604][ T8027] kexec: Could not allocate control_code_buffer [ 171.966730][ T6161] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 173.037148][ T8283] Process accounting resumed [ 173.165933][ T8291] futex_wake_op: syz.1.1268 tries to shift op by 64; fix this program [ 174.276516][ T1112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.385338][ T1112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.525858][ T1112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.731393][ T1112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.263122][ T1112] bridge_slave_1: left allmulticast mode [ 175.269046][ T1112] bridge_slave_1: left promiscuous mode [ 175.317331][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.398164][ T1112] bridge_slave_0: left allmulticast mode [ 175.427549][ T1112] bridge_slave_0: left promiscuous mode [ 175.428450][ T6114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.439608][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.452374][ T6114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.462233][ T6114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.480726][ T6114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.488667][ T6114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.854735][ T8374] Process accounting resumed [ 176.452051][ T8393] Process accounting resumed [ 176.552174][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.570422][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.584489][ T1112] bond0 (unregistering): Released all slaves [ 177.550421][ T6161] Bluetooth: hci3: command tx timeout [ 177.669832][ T1112] hsr_slave_0: left promiscuous mode [ 177.683601][ T1112] hsr_slave_1: left promiscuous mode [ 177.691156][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.705256][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.730958][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.757841][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.878679][ T1112] veth1_macvtap: left promiscuous mode [ 177.916568][ T1112] veth0_macvtap: left promiscuous mode [ 177.934751][ T1112] veth1_vlan: left promiscuous mode [ 177.956078][ T1112] veth0_vlan: left promiscuous mode [ 177.969946][ T8448] ptrace attach of "./syz-executor exec"[6156] was attempted by "./syz-executor exec"[8448] [ 179.529643][ T30] audit: type=1800 audit(1745212836.494:9): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1359" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 179.633757][ T6161] Bluetooth: hci3: command tx timeout [ 180.021519][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 180.146194][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 181.709414][ T6161] Bluetooth: hci3: command tx timeout [ 182.036161][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 182.614393][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.630414][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.648765][ T8363] bridge_slave_0: entered allmulticast mode [ 182.667256][ T8363] bridge_slave_0: entered promiscuous mode [ 182.701641][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.730847][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.738133][ T8363] bridge_slave_1: entered allmulticast mode [ 182.790371][ T8363] bridge_slave_1: entered promiscuous mode [ 182.998689][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.243890][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.452046][ T8363] team0: Port device team_slave_0 added [ 183.542902][ T8363] team0: Port device team_slave_1 added [ 183.742001][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.763375][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.789365][ T6161] Bluetooth: hci3: command tx timeout [ 183.809737][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.848363][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.861162][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.890230][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.060832][ T8363] hsr_slave_0: entered promiscuous mode [ 184.067751][ T8363] hsr_slave_1: entered promiscuous mode [ 184.086715][ T8363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.119480][ T8363] Cannot create hsr debugfs directory [ 185.128896][ T8363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.224591][ T8363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.283729][ T8363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.356430][ T8363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.619348][ T30] audit: type=1800 audit(1745213869.581:10): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1453" name="version" dev="configfs" ino=16513 res=0 errno=0 [ 185.672991][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.771568][ T8363] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.795586][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.802828][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.865203][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.872467][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.481143][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.843268][ T8363] veth0_vlan: entered promiscuous mode [ 186.865188][ T8363] veth1_vlan: entered promiscuous mode [ 186.918781][ T8363] veth0_macvtap: entered promiscuous mode [ 186.936199][ T8363] veth1_macvtap: entered promiscuous mode [ 186.963983][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.975849][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.986913][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.998311][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.008424][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.018994][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.030885][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.050211][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.062415][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.073668][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.084269][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.094239][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.104780][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.116242][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.127788][ T8363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.137742][ T8363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.146888][ T8363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.156002][ T8363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.256664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.271306][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.316097][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.325378][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.132230][ T8841] ======================================================= [ 189.132230][ T8841] WARNING: The mand mount option has been deprecated and [ 189.132230][ T8841] and is ignored by this kernel. Remove the mand [ 189.132230][ T8841] option from the mount to silence this warning. [ 189.132230][ T8841] ======================================================= [ 191.941378][ T8967] random: crng reseeded on system resumption [ 195.434900][ T6161] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 195.482405][ T30] audit: type=1800 audit(4294967302.070:11): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1605" name="discovery_nqn" dev="configfs" ino=17534 res=0 errno=0 [ 195.548832][ T9121] syz_tun: tun_chr_ioctl cmd 1074025678 [ 196.046069][ T9143] random: crng reseeded on system resumption [ 198.905573][ T30] audit: type=1326 audit(4294969353.513:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.1.1677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f796158e169 code=0x0 [ 199.462517][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.468901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.292476][ T9454] Process accounting paused [ 204.086119][ T9497] syz_tun: tun_chr_ioctl cmd 1074025684 [ 205.825663][ T9573] can: request_module (can-proto-3) failed. [ 206.488248][ T9603] Process accounting paused [ 206.756109][ T6161] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 209.367466][ T9723] program syz.3.1868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.398021][ T9723] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.425855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.434843][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.121211][ T6161] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 212.301092][ T9843] Setting dangerous option i915.mitigations - tainting kernel [ 212.317876][ T9843] Bad "i915.mitigations=$", '$' is unknown [ 214.677247][ T9948] syz.3.1952 (9948): drop_caches: 0 [ 215.172303][ T6114] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 216.160482][ T9995] tipc: Can't bind to reserved service type 1 [ 217.662666][T10055] program syz.3.2005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.129083][T10070] ubi0: attaching mtd0 [ 218.142101][T10070] ubi0: scanning is finished [ 218.164452][T10070] ubi0: empty MTD device detected [ 218.169629][T10070] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 218.300745][T10070] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 218.853757][T10098] synth uevent: /module/qat_c62x: unknown uevent action string [ 219.068927][ T30] audit: type=1800 audit(4294969373.768:13): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2031" name="lu_gp_id" dev="configfs" ino=19915 res=0 errno=0 [ 219.089359][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.103244][T10109] kstrtoul() returned -22 for lu_gp_id [ 220.313681][T10148] Malformed UNC in devname [ 220.313681][T10148] [ 220.320519][T10148] CIFS: VFS: Malformed UNC in devname [ 221.818984][T10213] sysfs_service_op_show: Client not running :-5: [ 222.281035][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.372076][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.462579][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.646016][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.118835][ T12] bridge_slave_1: left allmulticast mode [ 223.124930][ T12] bridge_slave_1: left promiscuous mode [ 223.138671][T10251] Setting dangerous option i915.mitigations - tainting kernel [ 223.170468][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.242700][ T12] bridge_slave_0: left allmulticast mode [ 223.268351][ T12] bridge_slave_0: left promiscuous mode [ 223.298294][ T12] bridge0: port 1(bridge_slave_0) entered disabled state syzkaller syzkaller login: [ 223.564467][ T6161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.573692][ T6161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.593388][ T6161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.607487][ T6161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.617856][ T6161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.632085][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.656984][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.678849][ T12] bond0 (unregistering): Released all slaves [ 225.224038][T10321] sysfs_service_op_show: Client not running :-5: [ 225.715229][ T6161] Bluetooth: hci3: command tx timeout [ 225.843999][ T12] hsr_slave_0: left promiscuous mode [ 225.858824][ T12] hsr_slave_1: left promiscuous mode [ 225.865826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.873273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.926138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.953747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.067176][ T12] veth1_macvtap: left promiscuous mode [ 226.083325][ T12] veth0_macvtap: left promiscuous mode [ 226.089075][ T12] veth1_vlan: left promiscuous mode [ 226.124256][ T12] veth0_vlan: left promiscuous mode [ 227.403376][ T12] team0 (unregistering): Port device team_slave_1 removed [ 227.521637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 227.796273][ T6161] Bluetooth: hci3: command tx timeout [ 228.678718][T10265] chnl_net:caif_netlink_parms(): no params data found [ 229.209084][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.216369][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.228866][T10265] bridge_slave_0: entered allmulticast mode [ 229.248878][T10265] bridge_slave_0: entered promiscuous mode [ 229.287081][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.295421][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.329937][T10265] bridge_slave_1: entered allmulticast mode [ 229.338399][T10265] bridge_slave_1: entered promiscuous mode [ 229.563268][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.643500][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.856197][ T6161] Bluetooth: hci3: command tx timeout [ 229.879288][T10265] team0: Port device team_slave_0 added [ 229.939576][T10265] team0: Port device team_slave_1 added [ 230.158726][ T30] audit: type=1800 audit(4294969384.916:14): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2183" name="discovery_nqn" dev="configfs" ino=21531 res=0 errno=0 [ 230.203383][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.211427][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.289507][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.349980][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.381000][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.450556][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.526627][T10479] syz.3.2188 uses obsolete (PF_INET,SOCK_PACKET) [ 230.683708][T10265] hsr_slave_0: entered promiscuous mode [ 230.713688][T10265] hsr_slave_1: entered promiscuous mode [ 230.730570][T10265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.738183][T10265] Cannot create hsr debugfs directory [ 231.569620][T10265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.628364][T10265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.701959][T10265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.768787][T10265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.923566][ T5151] Bluetooth: hci3: command tx timeout [ 232.011018][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.070738][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.082131][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 232.088720][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 232.097680][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 232.137865][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.145127][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.216403][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.223656][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.798580][T10561] queue_state_write: unsupported operation '' [ 232.811266][T10561] queue_state_write: use 'run', 'start' or 'kick' [ 233.006443][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.261100][T10578] Process accounting resumed [ 233.858666][T10265] veth0_vlan: entered promiscuous mode [ 233.889223][T10265] veth1_vlan: entered promiscuous mode [ 234.001945][T10265] veth0_macvtap: entered promiscuous mode [ 234.048342][T10265] veth1_macvtap: entered promiscuous mode [ 234.126238][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.162459][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.191644][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.211177][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.231497][T10617] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 234.246687][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.281018][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.312718][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.334480][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.362520][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.396092][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.418423][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.438581][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.460836][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.485076][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.584069][T10265] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642858][T10265] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.668539][T10265] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.677312][T10265] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.941833][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.970607][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.051527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.072615][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.839771][T10678] Process accounting resumed [ 238.249810][T10778] : Can't lookup blockdev [ 239.154935][T10815] kafs: addr_prefs: Invalid Command [ 239.741321][ T30] audit: type=1400 audit(4294969394.546:15): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10839 comm="syz.1.2320" [ 240.764784][T10883] Invalid ELF header magic: != ELF [ 241.211117][T10910] Setting dangerous option i915.mitigations - tainting kernel [ 244.348513][T11057] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 247.206958][T11195] bond0: option mode: unable to set because the bond device is up [ 247.424689][ T6161] Bluetooth: hci0: Malformed Event: 0x13 [ 252.327926][T11418] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 252.330649][T11417] ima: policy update failed [ 252.369226][ T30] audit: type=1802 audit(4294969407.251:16): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2578" res=0 errno=0 [ 259.115472][ T30] audit: type=1800 audit(4294969414.016:17): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2676" name="dbroot" dev="configfs" ino=24465 res=0 errno=0 [ 259.137323][T11695] db_root: cannot open: [ 260.598036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.604602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.143250][T11789] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.605117][T11808] process 'syz.1.2731' launched '/dev/fd/3' with NULL argv: empty string added [ 261.931903][T11824] aoe: invalid device specification [ 263.126087][T11872] Process accounting paused [ 266.744481][T12013] Process accounting paused [ 268.391465][ T6161] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 268.391510][ T6161] Bluetooth: hci2: unexpected subevent 0x05 length: 725 > 12 [ 268.880715][T12080] kAFS: No cell specified [ 270.442942][ T6161] Bluetooth: hci2: command 0x0406 tx timeout [ 271.970181][T12180] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 273.518932][T12242] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 276.416343][ T30] audit: type=1800 audit(4294969431.416:18): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3002" name="dbroot" dev="configfs" ino=26536 res=0 errno=0 [ 276.433395][T12364] db_root: not a directory: /dev/audio1 [ 278.562769][T12449] mmap: syz.1.3044 (12449): VmData 37527552 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 278.748660][T12456] sysfs_service_op_store: Client not running :-5: [ 279.817929][ T30] audit: type=1400 audit(4294969434.844:19): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12491 comm="syz.1.3065" [ 283.129989][T12631] blktrace: Concurrent blktraces are not allowed on ram7 [ 285.659412][T12734] nvme_fcloop: unknown parameter or missing value '^/]' [ 286.987234][T12795] block2mtd: device name too long [ 287.081919][T12800] rnbd_client L213: map_device: Parameters missing [ 287.508350][T12819] ubi0: attaching mtd0 [ 287.533739][T12819] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 288.089284][T12844] block2mtd: device name too long [ 289.012704][T12878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078404000 pfn:0x78400 [ 289.059111][T12878] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.093223][T12878] memcg:ffff888025009801 [ 289.114324][T12878] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 289.129094][T12878] page_type: f5(slab) [ 289.133161][T12878] raw: 00fff00000000240 ffff88801b44b3c0 ffffea00017ecc10 ffffea00014d0010 [ 289.144928][T12878] raw: ffff888078404000 0000000000080007 00000000f5000000 ffff888025009801 [ 289.157277][T12878] head: 00fff00000000240 ffff88801b44b3c0 ffffea00017ecc10 ffffea00014d0010 [ 289.187098][T12878] head: ffff888078404000 0000000000080007 00000000f5000000 ffff888025009801 [ 289.214897][T12878] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 289.229729][T12878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 289.242301][T12878] page dumped because: unmovable page [ 289.253753][T12878] page_owner tracks the page as allocated [ 289.262032][T12878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 97388135211, free_ts 96923106381 [ 289.292694][T12878] post_alloc_hook+0x181/0x1b0 [ 289.300080][T12878] get_page_from_freelist+0x135c/0x3920 [ 289.311948][T12878] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 289.318429][T12878] alloc_pages_mpol+0x1fb/0x550 [ 289.323495][T12878] new_slab+0x244/0x340 [ 289.331535][T12878] ___slab_alloc+0xd9c/0x1940 [ 289.336930][T12878] __slab_alloc.constprop.0+0x56/0xb0 [ 289.342446][T12878] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 289.354957][T12878] kmemdup_noprof+0x29/0x60 [ 289.359687][T12878] neigh_sysctl_register+0xb2/0x670 [ 289.369473][T12878] devinet_sysctl_register+0xb6/0x200 [ 289.382002][T12878] inetdev_init+0x2b8/0x5a0 [ 289.402152][T12878] inetdev_event+0xc5f/0x18a0 [ 289.418366][T12878] notifier_call_chain+0xb9/0x410 [ 289.423870][T12878] call_netdevice_notifiers_info+0xbe/0x140 [ 289.430623][T12888] i2c i2c-0: new_device: Missing parameters [ 289.440089][T12878] register_netdevice+0x182e/0x2270 [ 289.460213][T12878] page last free pid 5826 tgid 5826 stack trace: [ 289.493483][T12878] free_unref_folios+0x999/0x1630 [ 289.513404][T12878] folios_put_refs+0x56f/0x740 [ 289.518270][T12878] free_pages_and_swap_cache+0x245/0x4a0 [ 289.570737][T12878] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 289.576919][T12878] tlb_finish_mmu+0x168/0x7b0 [ 289.587249][T12878] vms_clear_ptes+0x55e/0x770 [ 289.592008][T12878] vms_complete_munmap_vmas+0x1ca/0x970 [ 289.597878][T12878] do_vmi_align_munmap+0x43b/0x7d0 [ 289.629303][T12878] do_vmi_munmap+0x208/0x3e0 [ 289.638787][T12878] __vm_munmap+0x19a/0x390 [ 289.648108][T12878] __x64_sys_munmap+0x59/0x80 [ 289.658981][T12878] do_syscall_64+0xcd/0x230 [ 289.668312][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.261351][T12987] ima: policy update failed [ 292.267359][ T30] audit: type=1807 audit(4294969447.349:20): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 292.293275][ T30] audit: type=1802 audit(4294969447.349:21): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3307" res=0 errno=0 [ 292.345631][ T30] audit: type=1802 audit(4294969447.349:22): pid=12987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3307" res=0 errno=0 [ 293.126861][T13010] Process accounting resumed [ 296.715422][T13090] Process accounting resumed [ 296.815132][T13094] kAFS: Invalid Command on /proc/fs/afs/cells file [ 297.719995][T13124] program syz.5.3373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.856070][ T30] audit: type=1800 audit(4294969452.968:23): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3376" name="discovery_nqn" dev="configfs" ino=30792 res=0 errno=0 [ 304.062693][T13399] bond0: Unable to set down delay as MII monitoring is disabled [ 305.332121][T13465] Debayer A: ================= START STATUS ================= [ 305.340246][T13465] Debayer A: Debayer Mean Window Size: 3 [ 305.347946][T13465] Debayer A: ================== END STATUS ================== [ 305.880330][T13490] block2mtd: illegal erase size [ 306.935802][T13541] kafs: addr_prefs: Invalid Command [ 309.341911][T13654] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 310.987269][T13741] usb usb2: usbfs: process 13741 (syz.3.3675) did not claim interface 1 before use [ 312.838736][T13838] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 316.461767][T14031] i2c i2c-0: delete_device: Extra parameters [ 317.089409][T14060] WARNING! power/level is deprecated; use power/control instead [ 317.236331][T14068] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 317.277441][ T6161] Bluetooth: hci1: Malformed Event: 0x02 [ 317.544876][T14079] Invalid input. Must be >= 4608 [ 317.623919][T14080] ima: policy update failed [ 317.642413][ T30] audit: type=1802 audit(4294969472.861:24): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3833" res=0 errno=0 [ 319.057427][T14143] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 319.463096][T14163] ima: policy update failed [ 319.471771][ T30] audit: type=1802 audit(4294969474.700:25): pid=14163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3873" res=0 errno=0 [ 321.710279][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.718762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.406993][ T988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.558424][ T988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.703542][ T988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.878069][ T988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.062527][T14316] Process accounting paused [ 323.317948][ T988] bridge_slave_1: left allmulticast mode [ 323.333220][ T988] bridge_slave_1: left promiscuous mode [ 323.354350][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.393779][ T988] bridge_slave_0: left allmulticast mode [ 323.404721][ T988] bridge_slave_0: left promiscuous mode [ 323.414595][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.452407][ T6163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.461787][ T6163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.473282][ T6163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.491468][ T6163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.501049][ T6163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.194558][T14356] Setting dangerous option i915.mitigations - tainting kernel [ 324.490918][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.534349][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.557466][ T988] bond0 (unregistering): Released all slaves [ 325.516662][ T6161] Bluetooth: hci1: command tx timeout [ 325.742084][ T988] hsr_slave_0: left promiscuous mode [ 325.765675][ T988] hsr_slave_1: left promiscuous mode [ 325.773034][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.804361][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.831537][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.851831][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.926219][ T988] veth1_macvtap: left promiscuous mode [ 325.932015][ T988] veth0_macvtap: left promiscuous mode [ 325.966016][ T988] veth1_vlan: left promiscuous mode [ 325.972365][ T988] veth0_vlan: left promiscuous mode [ 327.118025][T14474] aoe: can't write to that file. [ 327.303707][ T988] team0 (unregistering): Port device team_slave_1 removed [ 327.405262][ T988] team0 (unregistering): Port device team_slave_0 removed [ 327.585425][ T6161] Bluetooth: hci1: command tx timeout [ 328.265142][T14328] chnl_net:caif_netlink_parms(): no params data found [ 328.640848][T14328] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.648212][T14328] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.655871][T14328] bridge_slave_0: entered allmulticast mode [ 328.666727][T14328] bridge_slave_0: entered promiscuous mode [ 328.691513][T14328] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.717580][T14328] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.742159][T14328] bridge_slave_1: entered allmulticast mode [ 328.761761][T14328] bridge_slave_1: entered promiscuous mode [ 328.931731][T14328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.974485][T14328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.123730][T14328] team0: Port device team_slave_0 added [ 329.160555][T14328] team0: Port device team_slave_1 added [ 329.364328][T14328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.399342][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.462987][T14328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.507448][T14328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.528173][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.581745][T14328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.658840][ T6161] Bluetooth: hci1: command tx timeout [ 329.752242][T14328] hsr_slave_0: entered promiscuous mode [ 329.801188][T14328] hsr_slave_1: entered promiscuous mode [ 329.819095][T14328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.846790][T14328] Cannot create hsr debugfs directory [ 330.473656][T14328] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.525983][T14328] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.555322][T14328] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.618808][T14328] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.956054][T14328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.993591][T14328] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.041917][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.049149][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.084633][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.088378][T14617] ecryptfs_miscdev_write: Invalid packet size [192] [ 331.091879][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.733829][ T6161] Bluetooth: hci1: command tx timeout [ 331.819153][T14328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.005488][ T6161] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 332.005533][ T6161] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 332.020681][ T6161] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 332.020782][ T6161] Bluetooth: hci0: Malformed LE Event: 0x0d [ 332.598462][T14328] veth0_vlan: entered promiscuous mode [ 332.646774][T14328] veth1_vlan: entered promiscuous mode [ 332.784888][T14328] veth0_macvtap: entered promiscuous mode [ 332.823387][T14328] veth1_macvtap: entered promiscuous mode [ 332.897179][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.932403][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.947266][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.958348][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.987535][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.017124][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.045209][T14328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.080389][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.125159][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.152845][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.183419][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.207298][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.236005][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.262862][T14328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.340515][T14328] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.380777][T14328] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.415018][T14328] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.423817][T14328] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.692152][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.733263][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.866939][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.881663][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.831998][T14761] i2c i2c-0: delete_device: Can't parse I2C address [ 338.385795][T14879] blkio.reset_stats is deprecated [ 338.475037][T14882] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 338.688063][ T6161] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 340.523008][T14970] warning: `syz.3.4203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 342.294465][T15051] program syz.5.4236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.326651][T15051] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 344.905669][ T6192] smpboot: CPU 1 is now offline [ 346.464035][T15210] delete_channel: no stack [ 347.010041][ T6163] Bluetooth: hci3: command 0x0406 tx timeout [ 350.914426][T15348] block2mtd: illegal erase size [ 352.901391][ T6161] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 352.971267][T15409] Process accounting resumed [ 357.704757][T15557] vivid-007: ================= START STATUS ================= [ 357.797854][T15557] vivid-007: Generate PTS: true [ 357.828343][T15557] vivid-007: Generate SCR: true [ 357.834209][T15557] tpg source WxH: 640x360 (Y'CbCr) [ 357.880083][T15557] tpg field: 1 [ 357.923069][T15557] tpg crop: (0,0)/640x360 [ 357.967412][T15557] tpg compose: (0,0)/640x360 [ 357.990784][T15557] tpg colorspace: 8 [ 358.019859][T15557] tpg transfer function: 0/0 [ 358.071392][T15557] tpg Y'CbCr encoding: 0/0 [ 358.096818][T15557] tpg quantization: 0/0 [ 358.141159][T15557] tpg RGB range: 0/2 [ 358.158605][T15557] vivid-007: ================== END STATUS ================== [ 358.778219][T15586] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 360.224200][T15633] misc userio: Invalid payload size [ 360.940005][ T6161] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 367.695836][T15860] : Can't lookup blockdev [ 370.877428][T15963] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 372.921538][T16031] Line length is too long: Should be less than 4094 [ 379.984296][T16251] vivid-007: ================= START STATUS ================= [ 379.992003][T16251] vivid-007: Enable Output Cropping: true [ 380.065119][T16251] vivid-007: Enable Output Composing: true [ 380.124239][T16251] vivid-007: Enable Output Scaler: true [ 380.155743][T16251] vivid-007: Tx RGB Quantization Range: Automatic [ 380.188867][T16251] vivid-007: Transmit Mode: HDMI [ 380.231583][T16251] vivid-007: Hotplug Present: 0x00000000 [ 380.267573][T16251] vivid-007: RxSense Present: 0x00000000 [ 380.305824][T16251] vivid-007: EDID Present: 0x00000000 [ 380.346978][T16251] vivid-007: ================== END STATUS ================== [ 382.828148][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.834488][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.214661][T16349] Process accounting paused [ 386.545045][ T30] audit: type=1800 audit(4294967323.105:26): pid=16448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4765" name="discovery_nqn" dev="configfs" ino=40600 res=0 errno=0 [ 386.565862][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.983048][T16521] < [ 397.866553][T16751] vivid-003: ================= START STATUS ================= [ 397.900681][T16751] vivid-003: Radio HW Seek Mode: Bounded [ 397.923264][T16751] vivid-003: Radio Programmable HW Seek: false [ 397.948347][T16751] vivid-003: RDS Rx I/O Mode: Block I/O [ 397.972741][T16751] vivid-003: Generate RBDS Instead of RDS: false [ 398.000583][T16751] vivid-003: RDS Reception: true [ 398.019614][T16751] vivid-003: RDS Program Type: 0 inactive [ 398.047808][T16751] vivid-003: RDS PS Name: inactive [ 398.084256][T16751] vivid-003: RDS Radio Text: inactive [ 398.133640][T16751] vivid-003: RDS Traffic Announcement: false inactive [ 398.177714][T16751] vivid-003: RDS Traffic Program: false inactive [ 398.219402][T16751] vivid-003: RDS Music: false inactive [ 398.246682][T16751] vivid-003: ================== END STATUS ================== [ 400.637702][T16816] QAT: failed to copy from user. [ 405.918984][T16973] : Can't lookup blockdev [ 409.350238][ T30] audit: type=1400 audit(4294967346.023:27): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17057 comm="syz.6.5007" [ 412.211543][ T30] audit: type=1800 audit(4294967348.898:28): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5029" name="features" dev="configfs" ino=42486 res=0 errno=0 [ 412.708505][T17138] QAT: Invalid ioctl 21531 [ 414.724596][T17193] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 418.988866][ T6156] Process accounting resumed [ 420.331889][ T6163] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.340540][ T6163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.349005][ T6163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.366471][ T6163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.374042][ T6163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.078637][ T1112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.311236][ T1112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.606954][ T1112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.833644][ T1112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.953763][T17324] chnl_net:caif_netlink_parms(): no params data found [ 422.452708][ T6163] Bluetooth: hci4: command tx timeout [ 422.702082][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.709213][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.813749][T17324] bridge_slave_0: entered allmulticast mode [ 422.869122][T17324] bridge_slave_0: entered promiscuous mode [ 422.928320][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.975071][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.028667][T17324] bridge_slave_1: entered allmulticast mode [ 423.087024][T17324] bridge_slave_1: entered promiscuous mode [ 423.124218][ T1112] bridge_slave_1: left allmulticast mode [ 423.134714][ T1112] bridge_slave_1: left promiscuous mode [ 423.187586][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.245726][T17395] Process accounting resumed [ 423.313911][ T1112] bridge_slave_0: left allmulticast mode [ 423.357566][ T1112] bridge_slave_0: left promiscuous mode [ 423.403304][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.999733][ T30] audit: type=1800 audit(4294967360.749:29): pid=17420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5164" name="members" dev="configfs" ino=43557 res=0 errno=0 [ 424.404686][T17430] i2c i2c-0: new_device: Can't parse I2C address [ 424.521936][ T6163] Bluetooth: hci4: command tx timeout [ 425.522767][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.566401][ T30] audit: type=1806 audit(4294967362.317:30): xattr=2EC7871B res=-22 [ 425.606402][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.658485][ T1112] bond0 (unregistering): Released all slaves [ 426.207434][T17324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.297415][T17324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.594050][ T6163] Bluetooth: hci4: command tx timeout [ 426.738116][T17324] team0: Port device team_slave_0 added [ 426.799826][T17324] team0: Port device team_slave_1 added [ 427.267042][ T1112] hsr_slave_0: left promiscuous mode [ 427.285514][ T1112] hsr_slave_1: left promiscuous mode [ 427.337192][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.344613][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.470982][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.525488][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.662703][ T1112] veth1_macvtap: left promiscuous mode [ 427.720940][ T1112] veth0_macvtap: left promiscuous mode [ 427.763397][ T1112] veth1_vlan: left promiscuous mode [ 427.799006][ T1112] veth0_vlan: left promiscuous mode [ 428.665953][ T6163] Bluetooth: hci4: command tx timeout [ 429.082978][T17544] vmstat_refresh: nr_hugetlb -3072 [ 429.739404][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 429.821663][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 430.655987][T17324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.668993][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.754801][T17324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.824112][T17324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.877088][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.052588][T17324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.421625][T17324] hsr_slave_0: entered promiscuous mode [ 431.494162][T17324] hsr_slave_1: entered promiscuous mode [ 431.538122][T17324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.569826][T17324] Cannot create hsr debugfs directory [ 432.832294][T17324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 432.903426][T17324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.008340][T17324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.076200][T17324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.602232][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.690389][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.812842][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.819975][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.871738][T17635] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 433.871738][T17635] [ 433.925900][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.945735][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.064842][T17324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.380205][T17324] veth0_vlan: entered promiscuous mode [ 436.463983][T17324] veth1_vlan: entered promiscuous mode [ 436.642240][T17324] veth0_macvtap: entered promiscuous mode [ 436.724385][T17324] veth1_macvtap: entered promiscuous mode [ 436.822587][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.886868][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.930051][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.009940][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.057010][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.112940][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.154159][T17324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.248424][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.304638][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.348125][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.384185][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.427194][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.469109][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.520678][T17324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.598537][T17324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.686036][T17324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.751729][T17324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.805591][T17324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.211313][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.219160][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.481978][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.527471][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.206230][T17810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.247195][T17810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 441.454942][T17810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.521454][T17810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 441.666817][T17810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.698493][T17810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 441.810062][T17810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 441.914352][T17810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 441.920321][T17810] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 442.030033][T17810] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 442.667747][ T6163] Bluetooth: hci2: command 0x0406 tx timeout [ 442.759431][T17866] kAFS: Invalid Command on /proc/fs/afs/cells file [ 443.467486][ T6163] Bluetooth: hci3: command 0x0406 tx timeout [ 443.714192][ T6163] Bluetooth: hci1: command 0x0c1a tx timeout [ 443.954523][ T6163] Bluetooth: hci4: command 0x0c1a tx timeout [ 443.961127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.967410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.737758][ T6163] Bluetooth: hci2: command 0x0406 tx timeout [ 444.928415][T17930] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 445.422599][T17944] [ 445.532479][ T6163] Bluetooth: hci3: command 0x0406 tx timeout [ 445.771034][ T6163] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.013414][ T6163] Bluetooth: hci4: command 0x0c1a tx timeout [ 447.703883][T18019] rtc_cmos 00:00: Alarms can be up to one day in the future [ 447.840042][ T6163] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.082684][ T6163] Bluetooth: hci4: command 0x0c1a tx timeout [ 453.155105][T18179] Process accounting paused [ 454.569254][T18230] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.765705][T18360] ima: policy update failed [ 458.770356][ T30] audit: type=1802 audit(4294967395.700:31): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5543" res=0 errno=0 [ 459.531464][T18382] : Can't lookup blockdev [ 460.254462][T18401] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 460.254843][T18397] ima: policy update failed [ 460.409368][ T30] audit: type=1802 audit(4294967397.339:32): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5557" res=0 errno=0 [ 461.556063][T18433] block2mtd: Using custom MTD label '' for dev [ 461.619157][T18433] block2mtd: error: cannot open device [ 468.890998][T18663] block2mtd: parameter too long [ 469.979363][T18697] writes to the poll attribute are ignored. [ 470.010987][T18697] please use driver specific parameters instead. [ 473.498281][ T30] audit: type=1800 audit(4294967410.497:33): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5720" name="members" dev="configfs" ino=47995 res=0 errno=0 [ 477.350467][T18929] Scaler: ================= START STATUS ================= [ 477.382284][T18929] Scaler: ================== END STATUS ================== [ 480.622322][T19033] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 480.816140][T19033] CIFS mount error: No usable UNC path provided in device string! [ 480.816140][T19033] [ 480.865057][T19033] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 481.372500][T19058] synth uevent: /bus/memstick: unknown uevent action string [ 483.125966][T19104] Process accounting resumed [ 487.642382][T19254] nvme_fabrics: missing parameter 'transport=%s' [ 487.682824][T19254] nvme_fabrics: missing parameter 'nqn=%s' [ 491.457686][ T6163] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 503.134191][T19760] queue_state_write: operation too long [ 503.166820][T19760] queue_state_write: use 'run', 'start' or 'kick' [ 505.077441][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.085965][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.737274][T19884] overlayfs: "check_copy_up" module option is obsolete [ 508.680783][T19911] bond0: option packets_per_slave: invalid value ( Xnp) [ 508.733629][T19911] bond0: option packets_per_slave: allowed values 0 - 65535 [ 512.211263][T20005] nfsd: Unknown parameter '^B-' [ 513.213349][T20031] Process accounting paused [ 519.444847][T20207] ima: policy update failed [ 519.478612][ T30] audit: type=1802 audit(4294967456.726:34): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.6353" res=0 errno=0 [ 520.256490][T20229] usbcore.quirks: string doesn't fit in 127 chars. [ 521.428758][T20256] afs: Bad value for 'source' [ 523.825714][T20323] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 524.779254][T20347] ICMPv6: process `syz.7.6420' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 524.981287][T20353] kAFS: Invalid Command on /proc/fs/afs/cells file [ 525.088729][T20355] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 526.221226][ T6163] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 526.221255][ T6163] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 527.566319][T20438] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 529.296199][T20441] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 529.822411][T20492] zram: Added device: zram1 [ 530.172099][T20506] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 530.794750][T20527] deleting an unspecified loop device is not supported. [ 531.054550][T20536] program syz.6.6512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.975174][T20663] kAFS: Invalid Command on /proc/fs/afs/cells file [ 536.067860][T20697] ceph: Failed to parse sending metrics switch value 'P^' [ 536.892784][T20723] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 541.410927][T20868] ptrace attach of "./syz-executor exec"[17324] was attempted by ""[20868] [ 541.937996][T20882] program syz.6.6682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.147222][T20914] Process accounting resumed [ 544.057241][T20939] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 544.203601][T20943] QAT: failed to copy from user cfg_data. [ 544.401313][T20908] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 544.607976][T20953] nvme_fcloop: unknown parameter or missing value '7' [ 544.785956][T20958] delete_channel: no stack [ 549.295824][T21113] cougar: G6 mapped to space [ 549.769478][ T30] audit: type=1800 audit(4294967487.173:35): pid=21130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6805" name="lu_gp_id" dev="configfs" ino=55122 res=0 errno=0 [ 550.846883][T21161] ima: policy update failed [ 550.867441][ T30] audit: type=1802 audit(4294967488.259:36): pid=21161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.6820" res=0 errno=0 [ 551.379011][T21177] netlink: 'syz.5.6827': attribute type 1 has an invalid length. [ 552.087474][T21198] ICMPv6: process `syz.6.6838' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 554.140819][T21262] Zero length message leads to an empty skb [ 554.497995][T21273] netlink: 'syz.5.6875': attribute type 1 has an invalid length. [ 554.729794][T21278] usb usb34: usbfs: process 21278 (syz.7.6877) did not claim interface 0 before use [ 556.049488][T21321] nbd: couldn't find device at index 33904 [ 557.730983][T21374] netlink: 'syz.5.6922': attribute type 11 has an invalid length. [ 557.791317][T21374] netlink: 'syz.5.6922': attribute type 11 has an invalid length. [ 557.838115][T21374] netlink: 'syz.5.6922': attribute type 11 has an invalid length. [ 558.403372][T21391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.483169][T21391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.498586][T21396] netlink: 'syz.3.6932': attribute type 11 has an invalid length. [ 558.805013][T21405] openvswitch: netlink: Message has 4 unknown bytes. [ 559.810629][T21433] nbd: must specify an index to disconnect [ 563.042521][ T30] audit: type=1326 audit(4294967500.512:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.7.6983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddcbf8e169 code=0x0 [ 563.148101][T21509] netlink: 'syz.5.6985': attribute type 1 has an invalid length. [ 563.318004][T21511] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 563.969097][T21529] openvswitch: netlink: Flow key attribute not present in set flow. [ 566.210327][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.220132][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.303054][T21594] dyndbg: expected <4096 bytes into control [ 566.817595][T21605] capability: warning: `syz.5.7030' uses 32-bit capabilities (legacy support in use) [ 567.852761][T21633] usb usb18: usbfs: process 21633 (syz.5.7042) did not claim interface 0 before use [ 568.870031][T21659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.599989][T21679] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 570.053023][T21689] HfR: entered promiscuous mode [ 570.343725][ T30] audit: type=1800 audit(4294967507.850:38): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7073" name="lu_gp_id" dev="configfs" ino=57225 res=0 errno=0 [ 572.600388][ T30] audit: type=1326 audit(4294967510.122:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21744 comm="syz.7.7095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddcbf8e169 code=0x0 [ 572.689842][T21749] netlink: 260 bytes leftover after parsing attributes in process `syz.5.7096'. [ 573.054901][T21740] Process accounting paused [ 573.353118][T21758] .^: entered promiscuous mode [ 574.468845][T21786] HfR: entered promiscuous mode [ 575.475287][T21812] HfR: entered promiscuous mode [ 578.027257][T21872] netlink: 306 bytes leftover after parsing attributes in process `syz.7.7153'. [ 579.422781][T21916] openvswitch: netlink: IP tunnel dst address not specified [ 581.841265][T21974] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 582.339220][T21983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 582.392444][T21983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 582.667881][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7209'. [ 583.219569][T22004] sctp: [Deprecated]: syz.3.7216 (pid 22004) Use of int in max_burst socket option deprecated. [ 583.219569][T22004] Use struct sctp_assoc_value instead [ 586.268926][T22097] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 586.768041][T22112] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 593.216716][ T30] audit: type=1800 audit(4294967530.849:40): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7349" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 595.031585][T22351] : entered promiscuous mode [ 595.326127][T22359] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7376'. [ 598.786591][T22466] netlink: 'syz.7.7422': attribute type 8 has an invalid length. [ 600.595812][T22516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 601.607478][T22543] sg_write: process 3909 (syz.3.7458) changed security contexts after opening file descriptor, this is not allowed. [ 602.998596][T22575] Process accounting resumed [ 603.428380][T22586] netlink: zone id is out of range [ 603.475977][T22586] netlink: zone id is out of range [ 603.489686][T22586] netlink: zone id is out of range [ 603.575197][T22586] netlink: zone id is out of range [ 603.716202][T22586] netlink: set zone limit has 8 unknown bytes [ 604.116608][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7485'. [ 605.848520][T22656] program syz.7.7507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.377421][T22700] netlink: 'syz.6.7526': attribute type 10 has an invalid length. [ 608.673393][T22743] MTRR 1 not used [ 610.656778][T22805] nbd: must specify a size in bytes for the device [ 612.447583][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7599'. [ 614.512076][T22916] HSR: entered promiscuous mode [ 615.005110][T22924] svc: failed to register nfsdv3 RPC service (errno 111). [ 615.071301][T22924] svc: failed to register nfsaclv3 RPC service (errno 111). [ 615.946668][T22944] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 617.347486][ T6163] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 619.198893][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7669'. [ 620.143228][T23048] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 620.962611][T23068] .SR: entered promiscuous mode [ 621.499812][T23085] openvswitch: netlink: IP tunnel dst address not specified [ 621.907960][T22986] Bluetooth: hci2: ACL packet too small [ 622.138984][T23097] svc: failed to register nfsdv3 RPC service (errno 111). [ 622.179786][T23097] svc: failed to register nfsaclv3 RPC service (errno 111). [ 622.298448][T23105] netlink: 'syz.7.7711': attribute type 2 has an invalid length. [ 622.790232][T23120] netlink: 'syz.6.7718': attribute type 2 has an invalid length. [ 623.284326][T23134] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 623.362724][T23128] svc: failed to register nfsdv3 RPC service (errno 111). [ 623.486915][T23128] svc: failed to register nfsaclv3 RPC service (errno 111). [ 625.336551][ T30] audit: type=1800 audit(4294967563.136:41): pid=23182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7746" name="discovery_nqn" dev="configfs" ino=62315 res=0 errno=0 [ 626.675920][T23213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.316967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.323275][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.588692][T23237] svc: failed to register nfsdv3 RPC service (errno 111). [ 627.639812][T23237] svc: failed to register nfsaclv3 RPC service (errno 111). [ 628.270390][T23255] openvswitch: netlink: Missing valid actions attribute. [ 629.393571][T22986] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 630.375354][T23311] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 630.784771][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7806'. [ 631.503746][T23340] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 631.580200][T23340] CPU: 0 UID: 0 PID: 23340 Comm: syz.5.7816 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 631.580242][T23340] Tainted: [U]=USER [ 631.580249][T23340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.580264][T23340] Call Trace: [ 631.580270][T23340] [ 631.580280][T23340] dump_stack_lvl+0x16c/0x1f0 [ 631.580322][T23340] sysfs_warn_dup+0x7f/0xa0 [ 631.580341][T23340] sysfs_do_create_link_sd+0x124/0x140 [ 631.580363][T23340] sysfs_create_link+0x61/0xc0 [ 631.580381][T23340] device_add+0x62c/0x1a70 [ 631.580407][T23340] ? __pfx_device_add+0x10/0x10 [ 631.580427][T23340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 631.580458][T23340] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 631.580493][T23340] wiphy_register+0x1c9c/0x2850 [ 631.580532][T23340] ? netdev_run_todo+0x864/0x1320 [ 631.580575][T23340] ? __dev_printk+0x1d0/0x270 [ 631.580607][T23340] ? __pfx_wiphy_register+0x10/0x10 [ 631.580641][T23340] ieee80211_register_hw+0x2432/0x4020 [ 631.580671][T23340] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 631.580695][T23340] ? find_held_lock+0x2b/0x80 [ 631.580716][T23340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 631.580762][T23340] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 631.580796][T23340] ? __hrtimer_setup+0x176/0x280 [ 631.580831][T23340] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 631.580874][T23340] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 631.580910][T23340] hwsim_new_radio_nl+0xb51/0x12c0 [ 631.580939][T23340] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 631.580974][T23340] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 631.581011][T23340] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 631.581054][T23340] genl_family_rcv_msg_doit+0x206/0x2f0 [ 631.581091][T23340] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.581126][T23340] ? trace_cap_capable+0x18d/0x200 [ 631.581155][T23340] ? bpf_lsm_capable+0x9/0x10 [ 631.581178][T23340] ? security_capable+0x7e/0x260 [ 631.581199][T23340] ? ns_capable+0xd7/0x110 [ 631.581226][T23340] genl_rcv_msg+0x55c/0x800 [ 631.581249][T23340] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.581268][T23340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 631.581300][T23340] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 631.581330][T23340] ? __lock_acquire+0xaa4/0x1ba0 [ 631.581364][T23340] netlink_rcv_skb+0x16a/0x440 [ 631.581394][T23340] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.581416][T23340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.581460][T23340] ? __pfx_down_read+0x10/0x10 [ 631.581479][T23340] ? netlink_deliver_tap+0x1ae/0xd30 [ 631.581512][T23340] genl_rcv+0x28/0x40 [ 631.581542][T23340] netlink_unicast+0x53a/0x7f0 [ 631.581576][T23340] ? __pfx_netlink_unicast+0x10/0x10 [ 631.581604][T23340] ? __lock_acquire+0xaa4/0x1ba0 [ 631.581640][T23340] netlink_sendmsg+0x8d1/0xdd0 [ 631.581675][T23340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.581716][T23340] ____sys_sendmsg+0xa95/0xc70 [ 631.581737][T23340] ? copy_msghdr_from_user+0x10a/0x160 [ 631.581764][T23340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.581797][T23340] ___sys_sendmsg+0x134/0x1d0 [ 631.581827][T23340] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.581889][T23340] __sys_sendmsg+0x16d/0x220 [ 631.581917][T23340] ? __pfx___sys_sendmsg+0x10/0x10 [ 631.581945][T23340] ? __x64_sys_futex+0x1e0/0x4c0 [ 631.581976][T23340] ? rcu_is_watching+0x12/0xc0 [ 631.582005][T23340] do_syscall_64+0xcd/0x230 [ 631.582038][T23340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.582059][T23340] RIP: 0033:0x7fac45f8e169 [ 631.582076][T23340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.582096][T23340] RSP: 002b:00007fac43df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.582115][T23340] RAX: ffffffffffffffda RBX: 00007fac461b5fa0 RCX: 00007fac45f8e169 [ 631.582129][T23340] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 631.582142][T23340] RBP: 00007fac46010a68 R08: 0000000000000000 R09: 0000000000000000 [ 631.582154][T23340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.582167][T23340] R13: 0000000000000000 R14: 00007fac461b5fa0 R15: 00007ffe15576e78 [ 631.582194][T23340] [ 633.011762][T23349] Process accounting paused [ 634.948267][T23397] netlink: 'syz.7.7840': attribute type 11 has an invalid length. [ 635.046459][T23397] netlink: 'syz.7.7840': attribute type 11 has an invalid length. [ 635.122092][T23397] netlink: 'syz.7.7840': attribute type 11 has an invalid length. [ 635.226394][T23397] netlink: 'syz.7.7840': attribute type 11 has an invalid length. [ 635.287582][T23397] netlink: 'syz.7.7840': attribute type 11 has an invalid length. [ 637.435380][T23459] netlink: 'syz.3.7868': attribute type 1 has an invalid length. [ 638.972661][T23500] openvswitch: netlink: Key type 29 is not supported [ 640.389992][T23541] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 640.572602][T23543] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 640.722837][ T6161] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 641.471681][T23567] svc: failed to register nfsdv3 RPC service (errno 111). [ 641.510969][T23567] svc: failed to register nfsaclv3 RPC service (errno 111). [ 643.325524][T22986] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 643.699403][T23623] openvswitch: netlink: Key type 261 is out of range max 32 [ 646.886406][T23714] netlink: zone id is out of range [ 649.534175][ T6161] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 649.541792][ T6161] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 650.875563][T23825] could not allocate digest TFM handle [ 650.980807][T23829] could not allocate digest TFM handle [ 652.514802][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8051'. [ 654.130286][T23929] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 654.907551][T23959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 657.114664][T24021] netlink: zone id is out of range [ 657.148739][T24021] netlink: zone id is out of range [ 657.174101][T24021] netlink: zone id is out of range [ 657.195583][T24021] netlink: zone id is out of range [ 657.234467][T24021] netlink: zone id is out of range [ 657.274353][T24021] netlink: zone id is out of range [ 657.294330][T24021] netlink: zone id is out of range [ 657.324247][T24021] netlink: zone id is out of range [ 657.979460][T24049] netlink: 'syz.5.8134': attribute type 2 has an invalid length. [ 660.049809][T24120] netlink: 'syz.5.8166': attribute type 1 has an invalid length. [ 661.556501][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.774657][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.869057][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.081310][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.614773][ T1091] bridge_slave_1: left allmulticast mode [ 662.620446][ T1091] bridge_slave_1: left promiscuous mode [ 662.723903][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.840217][ T1091] bridge_slave_0: left allmulticast mode [ 662.899597][ T1091] bridge_slave_0: left promiscuous mode [ 662.947110][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.321255][ T6161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.331446][ T6161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.340243][ T6161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.350076][ T6161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.361491][ T6161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.308534][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.346448][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.377794][ T1091] bond0 (unregistering): Released all slaves [ 664.564769][ T1091] .^: left promiscuous mode [ 664.723211][ T1091] HfR: left promiscuous mode [ 664.848834][ T1091] HSR: left promiscuous mode [ 664.983856][ T1091] .SR: left promiscuous mode [ 665.221832][T24221] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 665.429416][ T6161] Bluetooth: hci0: command tx timeout [ 665.673397][T24181] chnl_net:caif_netlink_parms(): no params data found [ 665.842897][T24235] ksmbd: Unknown IPC event: 14, ignore. [ 666.403476][T24181] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.457450][T24181] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.485410][T24181] bridge_slave_0: entered allmulticast mode [ 666.517345][T24181] bridge_slave_0: entered promiscuous mode [ 666.601266][T24181] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.629121][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.656604][T24181] bridge_slave_1: entered allmulticast mode [ 666.699768][T24181] bridge_slave_1: entered promiscuous mode [ 666.817962][ T1091] hsr_slave_0: left promiscuous mode [ 666.871247][ T1091] hsr_slave_1: left promiscuous mode [ 666.887979][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.916131][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.961388][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.983691][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.094289][ T1091] veth1_macvtap: left promiscuous mode [ 667.118457][ T1091] veth0_macvtap: left promiscuous mode [ 667.154022][ T1091] veth1_vlan: left promiscuous mode [ 667.188258][ T1091] veth0_vlan: left promiscuous mode [ 667.497877][ T6161] Bluetooth: hci0: command tx timeout [ 667.678907][T24277] program syz.7.8225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.981069][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 669.119969][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 669.573342][ T6161] Bluetooth: hci0: command tx timeout [ 669.854667][T24181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.957514][T24181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.164293][T24329] nbd: illegal input index 2147483647 [ 670.296768][T24181] team0: Port device team_slave_0 added [ 670.374514][T24181] team0: Port device team_slave_1 added [ 670.627714][T24181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.692550][T24181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.902177][T24181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.983010][T24181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.036048][T24181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.079318][T24353] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 671.203575][T24181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.632778][T24181] hsr_slave_0: entered promiscuous mode [ 671.638486][ T6161] Bluetooth: hci0: command tx timeout [ 671.686598][T24181] hsr_slave_1: entered promiscuous mode [ 671.719923][ T30] audit: type=1800 audit(4294967609.757:42): pid=24371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8264" name="members" dev="configfs" ino=66655 res=0 errno=0 [ 674.056062][T24181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.213479][T24181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.285753][T24181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.366789][T24181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.805848][T24181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.929839][T24181] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.044458][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.051619][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.127327][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.134463][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.341299][T24181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.362923][T24450] netlink: 'syz.6.8291': attribute type 1 has an invalid length. [ 676.219340][T24181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.450915][T24181] veth0_vlan: entered promiscuous mode [ 676.533841][T24181] veth1_vlan: entered promiscuous mode [ 676.637451][T24484] Invalid ELF header magic: != ELF [ 676.697238][T24181] veth0_macvtap: entered promiscuous mode [ 676.760998][T24181] veth1_macvtap: entered promiscuous mode [ 676.854610][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.921367][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.981672][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.056860][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.136627][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.211842][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.251963][T24500] net_ratelimit: 23 callbacks suppressed [ 677.251977][T24500] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 677.294033][T24181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.370921][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.391305][ T6161] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 677.391329][ T6161] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 677.407900][ T6161] Bluetooth: hci3: Dropping invalid advertising data [ 677.414919][ T6161] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 677.414941][ T6161] Bluetooth: hci3: Dropping invalid advertising data [ 677.430553][ T6161] Bluetooth: hci3: Malformed LE Event: 0x02 [ 677.473408][T24505] openvswitch: netlink: IP tunnel dst address not specified [ 677.484536][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.547691][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.598357][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.647566][T24181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.701212][T24181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.786373][T24181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.873538][T24181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.951351][T24181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.012515][T24181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.080449][T24181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.524295][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.580426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.732894][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.801766][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.796991][T24602] perf: Dynamic interrupt throttling disabled, can hang your system! [ 682.472973][T24654] netlink: 342 bytes leftover after parsing attributes in process `syz.6.8356'. [ 684.709564][T24724] netlink: set zone limit has 8 unknown bytes [ 688.459040][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.465352][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.835716][T24907] netlink: 'syz.7.8466': attribute type 1 has an invalid length. [ 690.982858][T24909] openvswitch: netlink: IP tunnel dst address not specified [ 691.909472][T24936] openvswitch: netlink: IP tunnel dst address not specified [ 692.463239][T24952] netlink: 'syz.3.8486': attribute type 2 has an invalid length. [ 693.322559][T24978] netlink: 'syz.3.8498': attribute type 1 has an invalid length. [ 693.505516][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8499'. [ 694.083184][T24993] svc: failed to register nfsdv3 RPC service (errno 111). [ 694.125261][T24993] svc: failed to register nfsaclv3 RPC service (errno 111). [ 695.010768][T25013] program syz.7.8514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.199106][T25043] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 696.637042][T25056] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 696.781294][T25061] openvswitch: netlink: Message has 20 unknown bytes. [ 697.503248][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8543'. [ 698.122382][T25053] kexec: Could not allocate control_code_buffer [ 698.785592][T25115] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 699.210886][T25127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8565'. [ 699.601817][T25141] ptrace attach of "./syz-executor exec"[24181] was attempted by "./syz-executor exec"[25141] [ 700.165284][T25160] netlink: 'syz.6.8582': attribute type 1 has an invalid length. [ 700.740900][T25183] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 701.479313][T25200] block nbd0: not configured, cannot reconfigure [ 701.581828][T25206] netlink: zone id is out of range [ 701.620265][T25206] netlink: zone id is out of range [ 701.625388][T25206] netlink: zone id is out of range [ 701.684870][T25206] netlink: zone id is out of range [ 701.709806][T25206] netlink: zone id is out of range [ 701.740295][T25206] netlink: zone id is out of range [ 701.765208][T25206] netlink: zone id is out of range [ 701.792338][T25206] netlink: zone id is out of range [ 701.826452][T25206] netlink: zone id is out of range [ 701.841001][T25206] netlink: zone id is out of range [ 701.861707][T25213] sd 0:0:1:0: PR command failed: 1026 [ 701.870420][T25206] netlink: zone id is out of range [ 701.898800][T25213] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 701.906152][T25206] netlink: zone id is out of range [ 701.924826][T25206] netlink: zone id is out of range [ 701.930122][T25213] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 701.947287][T25206] netlink: zone id is out of range [ 701.980315][T25206] netlink: zone id is out of range [ 702.001308][T25206] netlink: zone id is out of range [ 702.615268][T25227] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8611'. [ 703.089095][T25247] ima: policy update failed [ 703.102087][ T30] audit: type=1802 audit(4294967641.301:43): pid=25247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.8619" res=0 errno=0 [ 706.618111][T25343] dyndbg: bad flag-op , at start of [ 706.656361][T25343] dyndbg: flags parse failed [ 706.742737][T25345] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 707.658876][ T30] audit: type=1804 audit(4294967645.874:44): pid=25368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8671" name="/newroot/1575/file0" dev="tmpfs" ino=7930 res=1 errno=0 [ 707.783288][ T30] audit: type=1800 audit(4294967645.884:45): pid=25368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8671" name="file0" dev="tmpfs" ino=7930 res=0 errno=0 [ 707.803932][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.855249][T25423] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8697'. [ 710.535731][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8705'. [ 711.747701][T25476] svc: failed to register nfsdv3 RPC service (errno 111). [ 711.807322][T25476] svc: failed to register nfsaclv3 RPC service (errno 111). [ 712.980499][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8738'. [ 713.027389][T25515] net_ratelimit: 13 callbacks suppressed [ 713.027405][T25515] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 713.393707][T25523] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:0 is already present [ 713.812296][T25532] cifs: Unknown parameter '' [ 714.310504][T25549] netlink: 29 bytes leftover after parsing attributes in process `syz.5.8754'. [ 715.118334][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8764'. [ 715.162299][T25568] tc_dump_action: action bad kind [ 716.255504][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8778'. [ 717.219668][T25631] netlink: 'syz.5.8794': attribute type 22 has an invalid length. [ 717.889164][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.063875][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.200084][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.321978][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.937427][ T53] bridge_slave_1: left allmulticast mode [ 718.984067][ T53] bridge_slave_1: left promiscuous mode [ 718.989828][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.131741][ T53] bridge_slave_0: left allmulticast mode [ 719.137403][ T53] bridge_slave_0: left promiscuous mode [ 719.190953][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.478803][T22986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.489868][T22986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.498016][T22986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.508056][T22986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.515532][T22986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.218361][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.270642][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.317987][ T53] bond0 (unregistering): Released all slaves [ 720.444414][T25703] sctp: [Deprecated]: syz.7.8829 (pid 25703) Use of int in maxseg socket option. [ 720.444414][T25703] Use struct sctp_assoc_value instead [ 720.905613][T25717] openvswitch: netlink: Duplicate or invalid key (type 0). [ 721.447383][ T53] hsr_slave_0: left promiscuous mode [ 721.507080][ T53] hsr_slave_1: left promiscuous mode [ 721.513913][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.590071][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.626249][ T6161] Bluetooth: hci2: command tx timeout [ 721.658934][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.692205][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.789882][ T53] veth1_macvtap: left promiscuous mode [ 721.817827][ T53] veth0_macvtap: left promiscuous mode [ 721.832053][ T53] veth1_vlan: left promiscuous mode [ 721.853648][ T53] veth0_vlan: left promiscuous mode [ 722.629770][ T53] team0 (unregistering): Port device team_slave_1 removed [ 722.699374][ T53] team0 (unregistering): Port device team_slave_0 removed [ 723.460675][T25764] netlink: Conntrack attr has 16 unknown bytes [ 723.514154][T25681] chnl_net:caif_netlink_parms(): no params data found [ 723.688452][ T6161] Bluetooth: hci2: command tx timeout [ 724.177001][T25681] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.246556][T25681] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.306720][T25681] bridge_slave_0: entered allmulticast mode [ 724.344616][T25681] bridge_slave_0: entered promiscuous mode [ 724.476631][T25681] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.545283][T25681] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.598126][T25681] bridge_slave_1: entered allmulticast mode [ 724.639311][T25681] bridge_slave_1: entered promiscuous mode [ 724.871643][T25681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.941537][T25681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.243750][T25681] team0: Port device team_slave_0 added [ 725.304929][T25681] team0: Port device team_slave_1 added [ 725.486998][T25681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.522180][T25681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.667630][T25681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.734135][T25681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.756808][ T6161] Bluetooth: hci2: command tx timeout [ 725.787367][T25681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.901463][T25681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.315336][T25681] hsr_slave_0: entered promiscuous mode [ 726.360971][T25681] hsr_slave_1: entered promiscuous mode [ 727.748353][T25878] netlink: 'syz.5.8887': attribute type 1 has an invalid length. [ 727.825141][ T6161] Bluetooth: hci2: command tx timeout [ 728.342400][T25681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 728.397946][T25681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 728.446968][T25681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 728.497070][T25681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.927050][T25681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.084991][T25681] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.181279][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.188422][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.271366][T25907] openvswitch: netlink: Message has 1 unknown bytes. [ 729.305658][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.312798][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.249187][T25681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.457314][T25681] veth0_vlan: entered promiscuous mode [ 730.519129][T25681] veth1_vlan: entered promiscuous mode [ 730.688038][T25681] veth0_macvtap: entered promiscuous mode [ 730.753962][T25681] veth1_macvtap: entered promiscuous mode [ 730.862157][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.946041][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.010901][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.071400][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.122965][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.182673][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.235444][T25681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.322399][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.392632][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.467272][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.518550][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.578763][T25681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.617637][T25681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.678481][T25681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.762100][T25681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.815766][T25681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.835259][T25964] netlink: 'syz.6.8909': attribute type 2 has an invalid length. [ 731.872788][T25681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.881918][T25681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.342302][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.384643][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.519273][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.566802][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.019946][T25992] nbd: must specify at least one socket [ 733.303173][T25997] device-mapper: ioctl: name not supplied when creating device [ 733.626872][T26008] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 733.905392][T26015] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 736.661200][T26099] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 736.847530][T26102] netlink: 'syz.6.8961': attribute type 2 has an invalid length. [ 739.987106][T26192] CIFS: VFS: Invalid SecurityFlags: [ 742.490566][T26264] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 745.736195][T26346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9078'. [ 746.824584][T26370] openvswitch: netlink: Message has 1 unknown bytes. [ 746.958567][T26372] netlink: Conntrack attr has 16 unknown bytes [ 747.774099][T26393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9091'. [ 749.567489][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.573909][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.205230][T26475] netlink: 'syz.5.9129': attribute type 2 has an invalid length. [ 752.803003][T26519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9150'. [ 752.846167][T26519] tc_dump_action: action bad kind [ 753.446628][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9156'. [ 754.523543][T26571] netlink: 'syz.5.9173': attribute type 2 has an invalid length. [ 754.713193][T26577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 754.720387][T26577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 755.032656][T26589] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 755.294042][T26598] openvswitch: netlink: Duplicate key (type 15). [ 755.715895][T17324] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 756.070581][ T1112] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.255518][ T1112] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.430218][ T1112] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.669668][ T1112] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.906022][T26620] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 757.225567][ T1112] bridge_slave_1: left allmulticast mode [ 757.262823][ T1112] bridge_slave_1: left promiscuous mode [ 757.303015][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.400970][ T1112] bridge_slave_0: left allmulticast mode [ 757.440004][ T1112] bridge_slave_0: left promiscuous mode [ 757.445714][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.609842][T22986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.621672][T22986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.630631][T22986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 757.638297][T22986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 757.646508][T22986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 758.491811][T26645] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 758.518225][T26648] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.524635][T26648] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.548400][T26645] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 759.363841][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.413234][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.501344][ T1112] bond0 (unregistering): Released all slaves [ 759.742696][T22986] Bluetooth: hci4: command tx timeout [ 759.756671][ T1112] HfR: left promiscuous mode [ 760.764425][T26631] chnl_net:caif_netlink_parms(): no params data found [ 761.476594][T26631] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.506193][T26725] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 761.514617][T26631] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.548558][T26725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 761.557797][T26631] bridge_slave_0: entered allmulticast mode [ 761.591013][T26631] bridge_slave_0: entered promiscuous mode [ 761.702549][T26631] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.758327][T26631] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.765489][T26631] bridge_slave_1: entered allmulticast mode [ 761.810193][T22986] Bluetooth: hci4: command tx timeout [ 761.861771][T26631] bridge_slave_1: entered promiscuous mode [ 762.055005][ T1112] hsr_slave_0: left promiscuous mode [ 762.080721][ T1112] hsr_slave_1: left promiscuous mode [ 762.106251][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.113654][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.213451][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.248789][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.309421][ T1112] veth1_macvtap: left promiscuous mode [ 762.340850][ T1112] veth0_macvtap: left promiscuous mode [ 762.385221][ T1112] veth1_vlan: left promiscuous mode [ 762.407826][ T1112] veth0_vlan: left promiscuous mode [ 762.961034][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 763.000758][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 763.377525][T26631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.431613][T26631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.633499][T26631] team0: Port device team_slave_0 added [ 763.708260][T26631] team0: Port device team_slave_1 added [ 763.876635][T22986] Bluetooth: hci4: command tx timeout [ 764.015523][T26631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.066065][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.219591][T26631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.310830][T26631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.351791][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.542155][T26631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.947653][T26631] hsr_slave_0: entered promiscuous mode [ 764.996291][T26631] hsr_slave_1: entered promiscuous mode [ 765.037183][T26786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 765.070793][T26631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.078380][T26631] Cannot create hsr debugfs directory [ 765.945967][T22986] Bluetooth: hci4: command tx timeout [ 766.976546][T26829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 767.419324][T26631] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 767.492788][T26631] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 767.552087][T26631] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 767.609363][T26631] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 768.014751][T26631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.119496][T26631] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.238101][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.245238][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.324632][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.331772][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.535393][T26631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.287764][T26631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.624593][T26903] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 769.849137][T26910] ubi0: attaching mtd0 [ 769.897503][T26910] ubi0: scanning is finished [ 769.935068][T26910] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 770.149001][T26910] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 770.347648][T26631] veth0_vlan: entered promiscuous mode [ 770.426033][T26631] veth1_vlan: entered promiscuous mode [ 770.561619][T26631] veth0_macvtap: entered promiscuous mode [ 770.653908][T26631] veth1_macvtap: entered promiscuous mode [ 770.746222][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.845299][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.912245][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.979617][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.042278][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.109793][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.161640][T26631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.246164][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.316961][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.373116][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.443411][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.506713][T26631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.576377][T26631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.718125][T26631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.764754][T26959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 771.809788][T26631] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.875126][T26631] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.883845][T26631] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.981228][T26631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.441982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.477028][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.615143][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.686852][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.668520][T27009] ubi0: attaching mtd0 [ 773.684206][T27009] ubi0: scanning is finished [ 773.708271][T27009] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 773.849605][T27009] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 776.315744][T27095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9345'. [ 778.206875][T27150] svc: failed to register nfsdv3 RPC service (errno 111). [ 778.250616][T27150] svc: failed to register nfsaclv3 RPC service (errno 111). [ 778.604170][T27165] openvswitch: netlink: IP tunnel dst address not specified [ 778.826038][T27170] openvswitch: netlink: Message has 4 unknown bytes. [ 779.319613][T27188] program syz.3.9381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.940565][T27234] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 780.959354][T27235] netlink: 'syz.7.9403': attribute type 1 has an invalid length. [ 781.201083][T27243] openvswitch: netlink: Flow key attr not present in new flow. [ 782.011319][T27261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 782.183024][T27265] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 782.898498][T27289] futex_wake_op: syz.5.9428 tries to shift op by 64; fix this program [ 783.116828][T27293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 783.168631][T27296] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 783.206013][T27297] sd 0:0:1:0: PR command failed: 1026 [ 783.234055][T27297] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 783.273999][T27297] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 784.095543][T27319] futex_wake_op: syz.6.9440 tries to shift op by 64; fix this program [ 785.268608][T27356] netlink: 'syz.3.9459': attribute type 11 has an invalid length. [ 785.551294][T27366] netlink: 'syz.7.9463': attribute type 1 has an invalid length. [ 786.088478][T27382] netlink: 'syz.7.9473': attribute type 11 has an invalid length. [ 786.656065][T27405] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek rejected, media not registered [ 841.701822][T29178] netlink: 'syz.3.10263': attribute type 1 has an invalid length. [ 841.744428][T29178] nbd: error processing sock list [ 842.003657][T29186] netlink: 'syz.3.10266': attribute type 11 has an invalid length. [ 842.054163][T29186] netlink: 'syz.3.10266': attribute type 11 has an invalid length. [ 842.122781][T29186] netlink: 'syz.3.10266': attribute type 11 has an invalid length. [ 842.155134][T29186] netlink: 'syz.3.10266': attribute type 11 has an invalid length. [ 843.308278][T22986] Bluetooth: hci2: command 0x0406 tx timeout [ 843.504520][T29234] tipc: Enabling of bearer rejected, media not registered [ 846.256703][T29324] netlink: 206 bytes leftover after parsing attributes in process `syz.3.10331'. [ 846.847688][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.020173][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.165505][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.310541][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.909630][ T53] bridge_slave_1: left allmulticast mode [ 847.915298][ T53] bridge_slave_1: left promiscuous mode [ 847.967280][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.092573][ T53] bridge_slave_0: left allmulticast mode [ 848.098232][ T53] bridge_slave_0: left promiscuous mode [ 848.181500][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.434133][T22986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 848.444557][T22986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 848.453341][T22986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 848.461513][T22986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 848.469583][T22986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 848.483288][T29367] netlink: ct family unspecified [ 849.550678][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.574967][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.600290][ T53] bond0 (unregistering): Released all slaves [ 850.060678][T29401] netlink: 206 bytes leftover after parsing attributes in process `syz.7.10360'. [ 850.545815][T22986] Bluetooth: hci1: command tx timeout [ 850.848768][T29369] chnl_net:caif_netlink_parms(): no params data found [ 851.074445][ T53] hsr_slave_0: left promiscuous mode [ 851.122813][ T53] hsr_slave_1: left promiscuous mode [ 851.143771][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.151175][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.252783][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.260199][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.403286][ T53] veth1_macvtap: left promiscuous mode [ 851.408840][ T53] veth0_macvtap: left promiscuous mode [ 851.488741][ T53] veth1_vlan: left promiscuous mode [ 851.520991][ T53] veth0_vlan: left promiscuous mode [ 852.615405][T22986] Bluetooth: hci1: command tx timeout [ 852.730130][ T53] team0 (unregistering): Port device team_slave_1 removed [ 852.802151][ T53] team0 (unregistering): Port device team_slave_0 removed [ 853.569843][T29471] netlink: 206 bytes leftover after parsing attributes in process `syz.5.10385'. [ 853.977599][T29369] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.038452][T29369] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.046103][T29369] bridge_slave_0: entered allmulticast mode [ 854.112189][T29369] bridge_slave_0: entered promiscuous mode [ 854.154417][T29369] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.219820][T29369] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.266474][T29369] bridge_slave_1: entered allmulticast mode [ 854.323912][T29369] bridge_slave_1: entered promiscuous mode [ 854.576642][T29369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.649719][T29369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.684305][T22986] Bluetooth: hci1: command tx timeout [ 854.906964][T29369] team0: Port device team_slave_0 added [ 854.990864][T29369] team0: Port device team_slave_1 added [ 855.225668][T29369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.274027][T29369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.429785][T29369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.495431][T29369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.535966][T29369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.690979][T29369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.971915][T29369] hsr_slave_0: entered promiscuous mode [ 856.001278][T29369] hsr_slave_1: entered promiscuous mode [ 856.024724][T29369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.058974][T29369] Cannot create hsr debugfs directory [ 856.754216][T22986] Bluetooth: hci1: command tx timeout [ 857.108375][T29369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 857.204245][T29369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 857.253009][T29369] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 857.339971][T29369] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 857.773647][T29369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.882993][T29369] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.022316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.029552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.099449][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.106611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.194357][T29369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.218147][T29369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.555280][T29369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.990204][T29369] veth0_vlan: entered promiscuous mode [ 859.025194][T29369] veth1_vlan: entered promiscuous mode [ 859.095868][T29369] veth0_macvtap: entered promiscuous mode [ 859.117712][T29369] veth1_macvtap: entered promiscuous mode [ 859.155403][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.174995][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.185701][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.200056][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.210072][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.227230][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.240271][T29369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.271600][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.303374][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.326504][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.352687][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.377452][T29369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.413787][T29369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.432862][T29369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.469108][T29369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.490280][T29369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.517868][T29369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.542073][T29369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.744728][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.775861][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.841435][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.870964][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.314290][T29743] netlink: 206 bytes leftover after parsing attributes in process `syz.5.10463'. [ 864.462856][T29780] netlink: 206 bytes leftover after parsing attributes in process `syz.8.10477'. [ 871.811083][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.817544][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.067552][T22986] Bluetooth: hci4: command 0x0406 tx timeout [ 927.805334][ T5211] udevd[5211]: worker [14787] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 932.938344][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.944644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.646950][T30073] Bluetooth: hci1: command 0x0406 tx timeout [ 994.062332][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.068629][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.971090][ T31] INFO: task kworker/u8:3:53 blocked for more than 143 seconds. [ 1030.984400][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1030.996790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1031.010028][ T31] task:kworker/u8:3 state:D stack:22536 pid:53 tgid:53 ppid:2 task_flags:0x4248160 flags:0x00004000 [ 1031.023030][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 1031.031160][ T31] Call Trace: [ 1031.034439][ T31] [ 1031.037645][ T31] __schedule+0x116f/0x5de0 [ 1031.042168][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 1031.051487][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1031.056468][ T31] ? __pfx___schedule+0x10/0x10 [ 1031.062315][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 1031.070749][ T31] ? find_held_lock+0x2b/0x80 [ 1031.075451][ T31] ? schedule+0x2d7/0x3a0 [ 1031.080088][ T31] schedule+0xe7/0x3a0 [ 1031.084174][ T31] io_schedule+0xbf/0x130 [ 1031.095233][ T31] bit_wait_io+0x15/0xe0 [ 1031.101251][ T31] __wait_on_bit+0x62/0x180 [ 1031.105809][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1031.113780][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1031.120215][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1031.126224][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1031.134632][ T31] do_get_write_access+0x93d/0x12a0 [ 1031.140113][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1031.146114][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1031.154535][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 1031.160286][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1031.169230][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1031.175245][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1031.180886][ T31] ? __pfx___might_resched+0x10/0x10 [ 1031.186190][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1031.194170][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1031.205427][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1031.213761][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1031.218901][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1031.224369][ T31] ext4_dirty_inode+0xd9/0x130 [ 1031.232274][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.237300][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1031.242371][ T31] ext4_da_update_reserve_space+0x2b4/0x750 [ 1031.250610][ T31] ext4_es_insert_extent+0xbf1/0x11b0 [ 1031.256216][ T31] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1031.262036][ T31] ? lock_acquire+0x179/0x350 [ 1031.269665][ T31] ? ext4_es_lookup_extent+0x7d6/0xc50 [ 1031.275150][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.280793][ T31] ? ext4_es_lookup_extent+0xc7/0xc50 [ 1031.289257][ T31] ext4_map_blocks+0x902/0x1390 [ 1031.294138][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1031.300420][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1031.313303][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1031.319342][ T31] ext4_do_writepages+0x1a2c/0x3490 [ 1031.324664][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1031.332562][ T31] ? ext4_writepages+0x37a/0x7d0 [ 1031.338298][ T31] ext4_writepages+0x37a/0x7d0 [ 1031.343071][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1031.350648][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 1031.356014][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1031.361324][ T31] do_writepages+0x1b2/0x820 [ 1031.370043][ T31] ? __pfx_do_writepages+0x10/0x10 [ 1031.375175][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1031.380831][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 1031.388341][ T31] __writeback_single_inode+0x160/0xfb0 [ 1031.393910][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 1031.401632][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1031.409555][ T31] writeback_sb_inodes+0x601/0xf90 [ 1031.414698][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1031.426891][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1031.431770][ T31] ? move_expired_inodes+0x5a0/0x850 [ 1031.438250][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 1031.443470][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1031.456774][ T31] ? queue_io+0x3f6/0x520 [ 1031.461125][ T31] wb_writeback+0x7f3/0xb70 [ 1031.467587][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 1031.473272][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 1031.479404][ T31] wb_workfn+0x8ca/0xbe0 [ 1031.483673][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1031.494717][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 1031.499939][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.510727][ T31] process_one_work+0x9cc/0x1b70 [ 1031.515910][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1031.521295][ T31] ? assign_work+0x1a0/0x250 [ 1031.532418][ T31] worker_thread+0x6c8/0xf10 [ 1031.537398][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1031.542534][ T31] kthread+0x3c2/0x780 [ 1031.548779][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.553392][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.559050][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.563669][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.570574][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.576141][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.580753][ T31] ret_from_fork+0x45/0x80 [ 1031.587232][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.591841][ T31] ret_from_fork_asm+0x1a/0x30 [ 1031.596949][ T31] [ 1031.610564][ T31] INFO: task jbd2/sda1-8:5173 blocked for more than 144 seconds. [ 1031.630596][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1031.646085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1031.654968][ T31] task:jbd2/sda1-8 state:D stack:26008 pid:5173 tgid:5173 ppid:2 task_flags:0x240040 flags:0x00004000 [ 1031.669907][ T31] Call Trace: [ 1031.673196][ T31] [ 1031.677746][ T31] __schedule+0x116f/0x5de0 [ 1031.682298][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1031.690057][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1031.695233][ T31] ? __pfx___schedule+0x10/0x10 [ 1031.700105][ T31] ? find_held_lock+0x2b/0x80 [ 1031.707573][ T31] ? schedule+0x2d7/0x3a0 [ 1031.713116][ T31] schedule+0xe7/0x3a0 [ 1031.717505][ T31] io_schedule+0xbf/0x130 [ 1031.721847][ T31] bit_wait_io+0x15/0xe0 [ 1031.729188][ T31] __wait_on_bit+0x62/0x180 [ 1031.733928][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1031.738898][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1031.750312][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1031.756678][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1031.763146][ T31] ? __pfx___might_resched+0x10/0x10 [ 1031.770810][ T31] __wait_on_buffer+0x64/0x70 [ 1031.776404][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 1031.785421][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1031.792130][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1031.798295][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1031.806575][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1031.812588][ T31] ? find_held_lock+0x2b/0x80 [ 1031.818971][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1031.826871][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.831686][ T31] kjournald2+0x1f4/0x760 [ 1031.837326][ T31] ? __pfx_kjournald2+0x10/0x10 [ 1031.842241][ T31] ? find_held_lock+0x2b/0x80 [ 1031.849436][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1031.860035][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.867704][ T31] ? __kthread_parkme+0x19e/0x250 [ 1031.873039][ T31] ? __pfx_kjournald2+0x10/0x10 [ 1031.877937][ T31] kthread+0x3c2/0x780 [ 1031.885451][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.890064][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.894970][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.899580][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.906691][ T31] ? rcu_is_watching+0x12/0xc0 [ 1031.911469][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.917671][ T31] ret_from_fork+0x45/0x80 [ 1031.922106][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.928436][ T31] ret_from_fork_asm+0x1a/0x30 [ 1031.933938][ T31] [ 1031.945869][ T31] INFO: task syz-executor:5826 blocked for more than 144 seconds. [ 1031.956447][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1031.973467][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1031.984519][ T31] task:syz-executor state:D stack:21368 pid:5826 tgid:5826 ppid:5824 task_flags:0x440100 flags:0x00000002 [ 1031.997862][ T31] Call Trace: [ 1032.001154][ T31] [ 1032.010231][ T31] __schedule+0x116f/0x5de0 [ 1032.015493][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1032.021694][ T31] ? __pfx___schedule+0x10/0x10 [ 1032.028271][ T31] ? find_held_lock+0x2b/0x80 [ 1032.033645][ T31] ? schedule+0x2d7/0x3a0 [ 1032.038111][ T31] schedule+0xe7/0x3a0 [ 1032.043918][ T31] io_schedule+0xbf/0x130 [ 1032.048265][ T31] bit_wait_io+0x15/0xe0 [ 1032.054248][ T31] __wait_on_bit+0x62/0x180 [ 1032.058775][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1032.065712][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1032.071131][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1032.084411][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1032.089907][ T31] do_get_write_access+0x93d/0x12a0 [ 1032.096697][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1032.105065][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1032.112430][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 1032.117993][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1032.126305][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1032.132485][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1032.138476][ T31] ? rcu_is_watching+0x12/0xc0 [ 1032.144994][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1032.150652][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1032.156816][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1032.166217][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1032.172784][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1032.177737][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1032.188539][ T31] ext4_dirty_inode+0xd9/0x130 [ 1032.195285][ T31] ? rcu_is_watching+0x12/0xc0 [ 1032.200078][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1032.207426][ T31] generic_update_time+0xcf/0xf0 [ 1032.214177][ T31] file_update_time+0x17d/0x1c0 [ 1032.219043][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 1032.226822][ T31] ? anon_pipe_read+0xc85/0x1210 [ 1032.232477][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1032.237953][ T31] ? vm_normal_page+0x13b/0x2b0 [ 1032.244994][ T31] ? find_held_lock+0x2b/0x80 [ 1032.249684][ T31] ? find_held_lock+0x2b/0x80 [ 1032.255196][ T31] do_page_mkwrite+0x171/0x380 [ 1032.260026][ T31] do_wp_page+0xb9e/0x58e0 [ 1032.266242][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 1032.272822][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1032.277862][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1032.285393][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 1032.294580][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 1032.299721][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1032.307122][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1032.314348][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1032.319595][ T31] handle_mm_fault+0x3fe/0xad0 [ 1032.328455][ T31] do_user_addr_fault+0x60c/0x1370 [ 1032.334270][ T31] exc_page_fault+0x5c/0xc0 [ 1032.338792][ T31] asm_exc_page_fault+0x26/0x30 [ 1032.345309][ T31] RIP: 0033:0x7fbb64c681e5 [ 1032.349728][ T31] RSP: 002b:00007ffd335fc420 EFLAGS: 00010216 [ 1032.356618][ T31] RAX: 00007fbb61ff8744 RBX: 00007ffd335fc520 RCX: 0000000000000000 [ 1032.366398][ T31] RDX: 00007fbb61ff8740 RSI: 0000000000000008 RDI: 00007ffd335fc520 [ 1032.375054][ T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 1032.385836][ T31] R10: 00007ffd335fc500 R11: 0000000000000000 R12: 0000000000000000 [ 1032.395149][ T31] R13: 00000000000078bc R14: ffffffffffff8744 R15: 00000000000078bc [ 1032.409510][ T31] [ 1032.413441][ T31] INFO: task syz.8.10545:29925 blocked for more than 144 seconds. [ 1032.426116][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1032.436728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1032.447015][ T31] task:syz.8.10545 state:D stack:26488 pid:29925 tgid:29925 ppid:29369 task_flags:0x440040 flags:0x00000004 [ 1032.461232][ T31] Call Trace: [ 1032.464522][ T31] [ 1032.467454][ T31] __schedule+0x116f/0x5de0 [ 1032.472345][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1032.477336][ T31] ? __pfx___schedule+0x10/0x10 [ 1032.484951][ T31] ? find_held_lock+0x2b/0x80 [ 1032.491379][ T31] ? schedule+0x2d7/0x3a0 [ 1032.495760][ T31] schedule+0xe7/0x3a0 [ 1032.502081][ T31] io_schedule+0xbf/0x130 [ 1032.506433][ T31] bit_wait_io+0x15/0xe0 [ 1032.514059][ T31] __wait_on_bit+0x62/0x180 [ 1032.519225][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1032.528167][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1032.534391][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1032.543361][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1032.548844][ T31] do_get_write_access+0x93d/0x12a0 [ 1032.554303][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1032.562461][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1032.568549][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 1032.574388][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1032.582071][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1032.587466][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1032.594298][ T31] ? rcu_is_watching+0x12/0xc0 [ 1032.602125][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1032.607779][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1032.613271][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1032.624918][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1032.632143][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1032.637101][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1032.646038][ T31] ext4_dirty_inode+0xd9/0x130 [ 1032.651638][ T31] ? rcu_is_watching+0x12/0xc0 [ 1032.656417][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1032.664127][ T31] generic_update_time+0xcf/0xf0 [ 1032.669292][ T31] file_update_time+0x17d/0x1c0 [ 1032.674159][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 1032.681336][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1032.686806][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 1032.692547][ T31] ? pte_alloc_one+0x2b1/0x380 [ 1032.697963][ T31] do_page_mkwrite+0x171/0x380 [ 1032.705006][ T31] do_pte_missing+0x29c/0x3fb0 [ 1032.710844][ T31] __handle_mm_fault+0x103d/0x2a40 [ 1032.715981][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1032.725135][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1032.735170][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1032.742858][ T31] handle_mm_fault+0x3fe/0xad0 [ 1032.747642][ T31] do_user_addr_fault+0x60c/0x1370 [ 1032.753737][ T31] exc_page_fault+0x5c/0xc0 [ 1032.761149][ T31] asm_exc_page_fault+0x26/0x30 [ 1032.766015][ T31] RIP: 0033:0x7f4b7926e2fa [ 1032.775751][ T31] RSP: 002b:00007ffcdf50aca0 EFLAGS: 00010202 [ 1032.784123][ T31] RAX: 0000001b2da20000 RBX: 00007f4b7a0e5720 RCX: 0000001b2da1fff8 [ 1032.792308][ T31] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007f4b7a0e5700 [ 1032.803188][ T31] RBP: ffffffff815e0f60 R08: 00007f4b795b6038 R09: 00007f4b795a2000 [ 1032.811390][ T31] R10: 00007f4b789ff008 R11: 0000000000000000 R12: 0000000000000000 [ 1032.822184][ T31] R13: 0000000000000001 R14: ffffffff815e060a R15: 0000000000000001 [ 1032.831343][ T31] ? __x64_sys_mmap+0x1a/0x190 [ 1032.837253][ T31] ? arch_get_unmapped_area+0x630/0x6b0 [ 1032.848588][ T31] [ 1032.859922][ T31] INFO: task syz.5.10538:29929 blocked for more than 145 seconds. [ 1032.870486][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1032.883229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1032.892586][ T31] task:syz.5.10538 state:D stack:27432 pid:29929 tgid:29929 ppid:10265 task_flags:0x440040 flags:0x00000004 [ 1032.906751][ T31] Call Trace: [ 1032.910716][ T31] [ 1032.913650][ T31] __schedule+0x116f/0x5de0 [ 1032.919934][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1032.925418][ T31] ? __pfx___schedule+0x10/0x10 [ 1032.931835][ T31] ? find_held_lock+0x2b/0x80 [ 1032.939469][ T31] ? schedule+0x2d7/0x3a0 [ 1032.943833][ T31] schedule+0xe7/0x3a0 [ 1032.952567][ T31] io_schedule+0xbf/0x130 [ 1032.956915][ T31] bit_wait_io+0x15/0xe0 [ 1032.963266][ T31] __wait_on_bit+0x62/0x180 [ 1032.969044][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1032.974005][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1032.981785][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1032.988712][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1032.994193][ T31] do_get_write_access+0x93d/0x12a0 [ 1033.001846][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1033.008529][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1033.014606][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 1033.021942][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1033.028677][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1033.034070][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1033.047687][ T31] ? rcu_is_watching+0x12/0xc0 [ 1033.052467][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1033.062760][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1033.069887][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1033.075539][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1033.082738][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1033.090776][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1033.096248][ T31] ext4_dirty_inode+0xd9/0x130 [ 1033.102419][ T31] ? rcu_is_watching+0x12/0xc0 [ 1033.108807][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1033.113939][ T31] generic_update_time+0xcf/0xf0 [ 1033.119920][ T31] file_update_time+0x17d/0x1c0 [ 1033.125456][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 1033.132760][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1033.140012][ T31] do_page_mkwrite+0x171/0x380 [ 1033.144799][ T31] do_pte_missing+0x29c/0x3fb0 [ 1033.152140][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 1033.158106][ T31] __handle_mm_fault+0x103d/0x2a40 [ 1033.163236][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1033.173839][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1033.179891][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1033.185127][ T31] handle_mm_fault+0x3fe/0xad0 [ 1033.192765][ T31] do_user_addr_fault+0x60c/0x1370 [ 1033.199818][ T31] exc_page_fault+0x5c/0xc0 [ 1033.204934][ T31] asm_exc_page_fault+0x26/0x30 [ 1033.211680][ T31] RIP: 0033:0x7fac45e6e2fa [ 1033.216874][ T31] RSP: 002b:00007ffe15576eb0 EFLAGS: 00010202 [ 1033.222983][ T31] RAX: 0000001b3351d000 RBX: 00007fac46ce5720 RCX: 0000001b3351cff8 [ 1033.233457][ T31] RDX: 0000001b3312021c RSI: 0000000000000008 RDI: 00007fac46ce5720 [ 1033.243419][ T31] RBP: ffffffff8a129b29 R08: 00007fac461b6038 R09: 00007fac461a2000 [ 1033.253038][ T31] R10: 00007fac455ff008 R11: 0000000000000001 R12: 0000000000000001 [ 1033.262491][ T31] R13: 0000000000000113 R14: ffffffff8a129be2 R15: 0000000000000180 [ 1033.272185][ T31] ? inet6_create+0x392/0x1300 [ 1033.282043][ T31] ? inet6_create+0x2d9/0x1300 [ 1033.289383][ T31] [ 1033.292459][ T31] INFO: task syz.3.10539:29932 blocked for more than 145 seconds. [ 1033.302187][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1033.317040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1033.328534][ T31] task:syz.3.10539 state:D stack:28632 pid:29932 tgid:29932 ppid:25681 task_flags:0x440040 flags:0x00000004 [ 1033.343721][ T31] Call Trace: [ 1033.347680][ T31] [ 1033.350620][ T31] __schedule+0x116f/0x5de0 [ 1033.357553][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1033.362517][ T31] ? __pfx___schedule+0x10/0x10 [ 1033.368859][ T31] ? find_held_lock+0x2b/0x80 [ 1033.373565][ T31] ? schedule+0x2d7/0x3a0 [ 1033.379799][ T31] schedule+0xe7/0x3a0 [ 1033.383887][ T31] io_schedule+0xbf/0x130 [ 1033.392716][ T31] bit_wait_io+0x15/0xe0 [ 1033.398918][ T31] __wait_on_bit+0x62/0x180 [ 1033.403443][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1033.410476][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1033.418087][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1033.424086][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1033.430283][ T31] do_get_write_access+0x93d/0x12a0 [ 1033.439511][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1033.447282][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1033.453364][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 1033.462290][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1033.468555][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1033.473958][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1033.482861][ T31] ? rcu_is_watching+0x12/0xc0 [ 1033.488378][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1033.494031][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1033.505346][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1033.512650][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1033.522045][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1033.528234][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1033.533614][ T31] ext4_dirty_inode+0xd9/0x130 [ 1033.540701][ T31] ? rcu_is_watching+0x12/0xc0 [ 1033.547286][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1033.552334][ T31] generic_update_time+0xcf/0xf0 [ 1033.559140][ T31] file_update_time+0x17d/0x1c0 [ 1033.564663][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 1033.569706][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1033.576864][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 1033.582339][ T31] ? pte_alloc_one+0x2b1/0x380 [ 1033.588574][ T31] do_page_mkwrite+0x171/0x380 [ 1033.593377][ T31] do_pte_missing+0x29c/0x3fb0 [ 1033.600017][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1033.608979][ T31] ? __pmd_alloc+0x3c2/0x870 [ 1033.617054][ T31] __handle_mm_fault+0x103d/0x2a40 [ 1033.622189][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1033.628993][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1033.636502][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 1033.642333][ T31] handle_mm_fault+0x3fe/0xad0 [ 1033.648897][ T31] do_user_addr_fault+0x60c/0x1370 [ 1033.655725][ T31] exc_page_fault+0x5c/0xc0 [ 1033.660263][ T31] asm_exc_page_fault+0x26/0x30 [ 1033.665966][ T31] RIP: 0033:0x7f5acec64c9b [ 1033.670396][ T31] RSP: 002b:00007ffe2a556ea0 EFLAGS: 00010246 [ 1033.678614][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 1033.687248][ T31] RDX: 0000001b2f220000 RSI: 0000000000400000 RDI: 00007f5acee98eb0 [ 1033.698199][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 1033.706844][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.719921][ T31] R13: 00000000000927c0 R14: 00000000000d528e R15: 00007ffe2a557150 [ 1033.729223][ T31] [ 1033.732285][ T31] [ 1033.732285][ T31] Showing all locks held in the system: [ 1033.744234][ T31] 1 lock held by khungtaskd/31: [ 1033.750239][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1033.762710][ T31] 6 locks held by kworker/u8:3/53: [ 1033.768531][ T31] #0: ffff88801f6e4148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1033.781036][ T31] #1: ffffc90000be7d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1033.795160][ T31] #2: ffff88814e8e00e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1033.806535][ T31] #3: ffff88814e8e2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 1033.819507][ T31] #4: ffff88814e8e4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1033.832404][ T31] #5: ffff88807bb2c820 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 1033.846071][ T31] 3 locks held by syz-executor/5826: [ 1033.855906][ T31] #0: ffff888035554a88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 1033.865611][ T31] #1: ffff88814e8e0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 1033.877310][ T31] #2: ffff88814e8e4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1033.887155][ T31] 3 locks held by syz.8.10545/29925: [ 1033.894447][ T31] #0: ffff888063348448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 1033.903973][ T31] #1: ffff88814e8e0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 1033.916799][ T31] #2: ffff88814e8e4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1033.926601][ T31] 3 locks held by syz.5.10538/29929: [ 1033.931894][ T31] #0: ffff888052b016c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 1033.947737][ T31] #1: ffff88814e8e0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 1033.961266][ T31] #2: ffff88814e8e4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1033.971687][ T31] 3 locks held by syz.3.10539/29932: [ 1033.979013][ T31] #0: ffff888033d0ce48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 1033.988522][ T31] #1: ffff88814e8e0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 1034.000063][ T31] #2: ffff88814e8e4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1034.009839][ T31] 2 locks held by getty/29945: [ 1034.016882][ T31] #0: ffff888035f1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1034.028047][ T31] #1: ffffc90002f962f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1034.040340][ T31] [ 1034.047089][ T31] ============================================= [ 1034.047089][ T31] [ 1034.058977][ T31] NMI backtrace for cpu 0 [ 1034.058993][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1034.059024][ T31] Tainted: [U]=USER [ 1034.059030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1034.059041][ T31] Call Trace: [ 1034.059047][ T31] [ 1034.059054][ T31] dump_stack_lvl+0x116/0x1f0 [ 1034.059084][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1034.059106][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1034.059125][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1034.059148][ T31] watchdog+0xf70/0x12c0 [ 1034.059179][ T31] ? __pfx_watchdog+0x10/0x10 [ 1034.059204][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.059231][ T31] ? __kthread_parkme+0x19e/0x250 [ 1034.059257][ T31] ? __pfx_watchdog+0x10/0x10 [ 1034.059282][ T31] kthread+0x3c2/0x780 [ 1034.059310][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059336][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059362][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059389][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059415][ T31] ? rcu_is_watching+0x12/0xc0 [ 1034.059441][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059470][ T31] ret_from_fork+0x45/0x80 [ 1034.059488][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.059517][ T31] ret_from_fork_asm+0x1a/0x30 [ 1034.059558][ T31] [ 1034.059567][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1034.197527][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1034.210890][ T31] Tainted: [U]=USER [ 1034.214684][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1034.224730][ T31] Call Trace: [ 1034.228000][ T31] [ 1034.230924][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1034.235520][ T31] panic+0x71c/0x800 [ 1034.239425][ T31] ? __pfx_panic+0x10/0x10 [ 1034.243847][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1034.248795][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1034.254515][ T31] ? irq_work_queue+0xce/0x100 [ 1034.259284][ T31] ? watchdog+0xdda/0x12c0 [ 1034.263706][ T31] ? watchdog+0xdcd/0x12c0 [ 1034.268129][ T31] watchdog+0xdeb/0x12c0 [ 1034.272382][ T31] ? __pfx_watchdog+0x10/0x10 [ 1034.277066][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.282267][ T31] ? __kthread_parkme+0x19e/0x250 [ 1034.287294][ T31] ? __pfx_watchdog+0x10/0x10 [ 1034.291990][ T31] kthread+0x3c2/0x780 [ 1034.296079][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.300672][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.305275][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.309879][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.314474][ T31] ? rcu_is_watching+0x12/0xc0 [ 1034.319240][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.323844][ T31] ret_from_fork+0x45/0x80 [ 1034.328255][ T31] ? __pfx_kthread+0x10/0x10 [ 1034.332850][ T31] ret_from_fork_asm+0x1a/0x30 [ 1034.337640][ T31] [ 1034.340703][ T31] Kernel Offset: disabled [ 1034.345037][ T31] Rebooting in 86400 seconds..