last executing test programs: 5.09639761s ago: executing program 3 (id=3712): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x400) 4.931474589s ago: executing program 3 (id=3717): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) 4.775074403s ago: executing program 3 (id=3722): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(&(0x7f00000000c0)='macvlan1\x00', &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7fffffdf, 0x0) 4.638822154s ago: executing program 3 (id=3726): openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0) write$auto(0x3, 0x0, 0xfdef) 4.530814108s ago: executing program 3 (id=3730): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r0, &(0x7f0000000240)={0x0, 0x101}, 0x9) 4.44205836s ago: executing program 3 (id=3733): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000100)=""/123, 0x7b) 1.144634876s ago: executing program 0 (id=3806): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) 1.118381975s ago: executing program 2 (id=3807): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x5, 0xffffffffffffffff) 928.178623ms ago: executing program 1 (id=3809): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x3, 0x6, "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"}) 908.923751ms ago: executing program 2 (id=3810): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)="0400") 765.719957ms ago: executing program 0 (id=3811): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x4b31, 0xffffffffffffffff) 668.582502ms ago: executing program 1 (id=3812): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r0, &(0x7f0000000240)='5\x00\\\x1cj\xf0\xa4\x9cje\xdc\"F\x12', 0x81) 562.382804ms ago: executing program 0 (id=3813): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r0) 547.013875ms ago: executing program 2 (id=3814): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 507.906298ms ago: executing program 1 (id=3815): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/firmware/acpi/interrupts/sci\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 393.427282ms ago: executing program 0 (id=3816): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) 361.729864ms ago: executing program 2 (id=3817): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 330.522745ms ago: executing program 1 (id=3818): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3) 204.906962ms ago: executing program 0 (id=3819): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/midi2\x00', 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x4, 0x1, 0xff, "50b892b172b4cfaaca8e00"}) 192.738469ms ago: executing program 2 (id=3820): r0 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) readv$auto(r0, &(0x7f0000001440)={&(0x7f0000000440), 0x41d}, 0x6) 186.360926ms ago: executing program 1 (id=3821): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b72", 0x25) 79.547898ms ago: executing program 0 (id=3822): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) 13.190665ms ago: executing program 2 (id=3823): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="f21a9a3c5c5903f3492d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c77eed1672bb713aca464b9bbc23b50000000000000004c635fc08000000152ad1f7fa092703e98f867fefbe1470283d09f6e868f537ce22547d21bd301d757a77633ba27c09072f5127f2f9c0780c6ace813067c43272c56e84c6db276391b2cc83f52156ec61fab5bcd3ca74c584441d7e66b26f24c273716f0b2cce71b2a376dfb4031a386233914d8f5ed727e5f783953de50a", 0xbe) 0s ago: executing program 1 (id=3824): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)={0x0, 0xc7, {0xfffffffb, 0x7, 0x5, 0x0, 0x0, 0x1, 0x101, 0x7, 0x2}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 70.605351][ T5805] cgroup: Unknown subsys name 'net' [ 70.734783][ T5805] cgroup: Unknown subsys name 'cpuset' [ 70.744865][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.526822][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.533462][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.214612][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.364642][ T6130] mmap: syz.3.300 (6130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.183504][ T6183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.192033][ T6183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.211479][ T6183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.231208][ T6183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.251171][ T6183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.595920][ T6179] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.319791][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.346856][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.980980][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.000955][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.624133][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.648232][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.656588][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.666800][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.682278][ T6257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.690818][ T6257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.692847][ T6253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.698688][ T6257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.717809][ T6253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.717831][ T6257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.718458][ T6257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.731164][ T6253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.742312][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.754171][ T6253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.754805][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.773090][ T6253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.774840][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.789863][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.798629][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.806403][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.510065][ T6256] chnl_net:caif_netlink_parms(): no params data found [ 84.540239][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 84.597479][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 84.693298][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 84.810159][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.818430][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.825885][ T6256] bridge_slave_0: entered allmulticast mode [ 84.833160][ T6256] bridge_slave_0: entered promiscuous mode [ 84.846570][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.854117][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.861358][ T6254] bridge_slave_0: entered allmulticast mode [ 84.869139][ T6254] bridge_slave_0: entered promiscuous mode [ 84.896044][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.903291][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.910647][ T6256] bridge_slave_1: entered allmulticast mode [ 84.918249][ T6256] bridge_slave_1: entered promiscuous mode [ 84.930479][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.937747][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.945037][ T6254] bridge_slave_1: entered allmulticast mode [ 84.952302][ T6254] bridge_slave_1: entered promiscuous mode [ 84.968508][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.976056][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.983282][ T6251] bridge_slave_0: entered allmulticast mode [ 84.990417][ T6251] bridge_slave_0: entered promiscuous mode [ 85.023052][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.030229][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.037748][ T6251] bridge_slave_1: entered allmulticast mode [ 85.045082][ T6251] bridge_slave_1: entered promiscuous mode [ 85.085642][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.097414][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.135042][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.146741][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.156091][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.163489][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.170665][ T6249] bridge_slave_0: entered allmulticast mode [ 85.178139][ T6249] bridge_slave_0: entered promiscuous mode [ 85.215889][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.223126][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.230366][ T6249] bridge_slave_1: entered allmulticast mode [ 85.238549][ T6249] bridge_slave_1: entered promiscuous mode [ 85.248060][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.260813][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.271888][ T6254] team0: Port device team_slave_0 added [ 85.319684][ T6254] team0: Port device team_slave_1 added [ 85.327055][ T6256] team0: Port device team_slave_0 added [ 85.344494][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.365541][ T6256] team0: Port device team_slave_1 added [ 85.384336][ T6251] team0: Port device team_slave_0 added [ 85.392373][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.425344][ T6251] team0: Port device team_slave_1 added [ 85.455878][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.463382][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.489994][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.503017][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.510107][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.537364][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.574575][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.581961][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.608314][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.620489][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.627532][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.653655][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.665309][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.672316][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.700097][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.713447][ T6249] team0: Port device team_slave_0 added [ 85.735447][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.742580][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.768719][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.782253][ T6249] team0: Port device team_slave_1 added [ 85.838717][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.846638][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.846785][ T5140] Bluetooth: hci0: command tx timeout [ 85.873039][ T51] Bluetooth: hci2: command tx timeout [ 85.878938][ T6183] Bluetooth: hci1: command tx timeout [ 85.885181][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.890641][ T6257] Bluetooth: hci3: command tx timeout [ 85.903608][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.913050][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.939291][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.977631][ T6254] hsr_slave_0: entered promiscuous mode [ 85.984194][ T6254] hsr_slave_1: entered promiscuous mode [ 86.011782][ T6256] hsr_slave_0: entered promiscuous mode [ 86.018151][ T6256] hsr_slave_1: entered promiscuous mode [ 86.024726][ T6256] debugfs: 'hsr0' already exists in 'hsr' [ 86.030517][ T6256] Cannot create hsr debugfs directory [ 86.104546][ T6249] hsr_slave_0: entered promiscuous mode [ 86.111214][ T6249] hsr_slave_1: entered promiscuous mode [ 86.117546][ T6249] debugfs: 'hsr0' already exists in 'hsr' [ 86.123987][ T6249] Cannot create hsr debugfs directory [ 86.134560][ T6251] hsr_slave_0: entered promiscuous mode [ 86.141317][ T6251] hsr_slave_1: entered promiscuous mode [ 86.147455][ T6251] debugfs: 'hsr0' already exists in 'hsr' [ 86.153447][ T6251] Cannot create hsr debugfs directory [ 86.618324][ T6254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.633269][ T6254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.653233][ T6254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.664182][ T6254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.709860][ T6256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.736568][ T6256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.747416][ T6256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.758380][ T6256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.843245][ T6251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.872429][ T6251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.884681][ T6251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.893636][ T24] cfg80211: failed to load regulatory.db [ 86.905136][ T6251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.007296][ T6249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.019385][ T6249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.030191][ T6249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.050072][ T6249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.102371][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.187202][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.210305][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.232098][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.239398][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.278817][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.286114][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.301776][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.318912][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.340509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.347672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.368066][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.375210][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.423921][ T6254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.435350][ T6254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.463411][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.499673][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.534854][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.542147][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.573275][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.580466][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.712622][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.744673][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.751872][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.796776][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.803923][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.863629][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.933912][ T6257] Bluetooth: hci2: command tx timeout [ 87.934005][ T5140] Bluetooth: hci3: command tx timeout [ 87.939355][ T6257] Bluetooth: hci0: command tx timeout [ 87.945028][ T6183] Bluetooth: hci1: command tx timeout [ 87.968909][ T6254] veth0_vlan: entered promiscuous mode [ 88.034424][ T6254] veth1_vlan: entered promiscuous mode [ 88.100029][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.116726][ T6254] veth0_macvtap: entered promiscuous mode [ 88.142889][ T6254] veth1_macvtap: entered promiscuous mode [ 88.215692][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.256337][ T6256] veth0_vlan: entered promiscuous mode [ 88.275209][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.300529][ T6256] veth1_vlan: entered promiscuous mode [ 88.324374][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.345045][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.355240][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.373409][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.385705][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.411267][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.502713][ T6256] veth0_macvtap: entered promiscuous mode [ 88.558414][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.572458][ T6251] veth0_vlan: entered promiscuous mode [ 88.582593][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.590384][ T6256] veth1_macvtap: entered promiscuous mode [ 88.637647][ T6249] veth0_vlan: entered promiscuous mode [ 88.646676][ T6251] veth1_vlan: entered promiscuous mode [ 88.667788][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.667864][ T6249] veth1_vlan: entered promiscuous mode [ 88.686760][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.692636][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.737564][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.806730][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.824654][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.834859][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848412][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.866750][ T6251] veth0_macvtap: entered promiscuous mode [ 88.885664][ T6249] veth0_macvtap: entered promiscuous mode [ 88.914523][ T6251] veth1_macvtap: entered promiscuous mode [ 88.936664][ T6249] veth1_macvtap: entered promiscuous mode [ 88.990505][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.036198][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.064123][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.100712][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.109707][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.115383][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131930][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.147056][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.163274][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.172335][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.227415][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.242648][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256507][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.265290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.284124][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.293985][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.419047][ T606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.435224][ T606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.612613][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.642632][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.900699][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.909774][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.004247][ T6257] Bluetooth: hci0: command tx timeout [ 90.009698][ T6257] Bluetooth: hci3: command tx timeout [ 90.015560][ T51] Bluetooth: hci1: command tx timeout [ 90.016646][ T5140] Bluetooth: hci2: command tx timeout [ 90.068085][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.131322][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.800803][ T6386] Unable to find swap-space signature [ 92.090986][ T5140] Bluetooth: hci3: command tx timeout [ 92.091002][ T6257] Bluetooth: hci1: command tx timeout [ 92.091035][ T6257] Bluetooth: hci2: command tx timeout [ 92.096418][ T5140] Bluetooth: hci0: command tx timeout [ 93.116597][ T6481] can: request_module (can-proto-5) failed. [ 94.807296][ T6560] syz.2.463 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.611864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.621316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.845127][ T29] audit: type=1800 audit(1771145038.348:2): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="members" dev="configfs" ino=10580 res=0 errno=0 [ 97.751438][ T6663] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.216183][ T29] audit: type=1800 audit(1771145041.728:3): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="members" dev="configfs" ino=11413 res=0 errno=0 [ 99.962474][ T29] audit: type=1800 audit(1771145042.478:4): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.557" name="version" dev="configfs" ino=11440 res=0 errno=0 [ 101.151394][ T29] audit: type=1800 audit(1771145043.658:5): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.586" name="members" dev="configfs" ino=10967 res=0 errno=0 [ 108.891481][ T7192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.370575][ T29] audit: type=1800 audit(4294967302.330:6): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.778" name="dummy_udc" dev="gadgetfs" ino=9507 res=0 errno=0 [ 110.758841][ T7283] ptrace attach of "./syz-executor exec"[6249] was attempted by "./syz-executor exec"[7283] [ 110.865517][ T7289] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.925129][ T29] audit: type=1800 audit(4294967303.890:7): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.815" name="trace_pipe" dev="tracefs" ino=376 res=0 errno=0 [ 111.571643][ T7328] futex_wake_op: syz.0.833 tries to shift op by -1; fix this program [ 112.396895][ T6257] Bluetooth: hci1: unexpected event 0x34 length: 11 > 6 [ 117.211695][ T6257] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 117.223228][ T6257] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 117.240751][ T6257] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 118.339909][ T7641] capability: warning: `syz.0.993' uses 32-bit capabilities (legacy support in use) [ 119.181123][ T6257] Bluetooth: hci1: unknown advertising packet type: 0xea [ 119.430417][ T7681] Process accounting resumed [ 120.300152][ T7728] syz.2.1027(7728): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 120.860152][ T29] audit: type=1800 audit(4294977762.825:8): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="trace_pipe" dev="tracefs" ino=421 res=0 errno=0 [ 120.904799][ T7751] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.864752][ T7779] random: crng reseeded on system resumption [ 122.664489][ T6257] Bluetooth: hci3: unexpected event 0x3c length: 254 > 7 [ 122.874602][ T7827] ======================================================= [ 122.874602][ T7827] WARNING: The mand mount option has been deprecated and [ 122.874602][ T7827] and is ignored by this kernel. Remove the mand [ 122.874602][ T7827] option from the mount to silence this warning. [ 122.874602][ T7827] ======================================================= [ 124.815699][ T7911] ptrace attach of "./syz-executor exec"[6254] was attempted by "./syz-executor exec"[7911] [ 131.887237][ T8281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.263542][ T8301] __vm_enough_memory: pid: 8301, comm: syz.2.1312, bytes: 4398046511104 not enough memory for the allocation [ 132.980990][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165930][ T29] audit: type=1800 audit(1843104524.320:9): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1335" name="lu_gp_id" dev="configfs" ino=16467 res=0 errno=0 [ 133.748215][ T29] audit: type=1800 audit(1843105551.902:10): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1351" name="features" dev="configfs" ino=15834 res=0 errno=0 [ 137.972035][ T8593] Unable to find swap-space signature [ 138.337180][ T6257] Bluetooth: hci0: unexpected event 0x3e length: 720 > 260 [ 139.632452][ T29] audit: type=1800 audit(1843105557.782:11): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1500" name="dbroot" dev="configfs" ino=16345 res=0 errno=0 [ 142.426030][ T8830] futex_wake_op: syz.3.1577 tries to shift op by -2048; fix this program [ 143.124586][ T6257] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 143.124633][ T6257] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 143.766796][ T8897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.010061][ T8962] syz.3.1642 (8962): attempted to duplicate a private mapping with mremap. This is not supported. [ 145.295975][ T8978] capability: warning: `syz.2.1650' uses deprecated v2 capabilities in a way that may be insecure [ 145.809877][ T6257] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 145.980763][ T9014] nfs: Bad value for 'source' [ 148.172559][ T29] audit: type=1326 audit(1843107614.351:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.0.1723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb315b9bf79 code=0x0 [ 151.442248][ T29] audit: type=1800 audit(1843107617.638:13): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1799" name="features" dev="configfs" ino=18885 res=0 errno=0 [ 153.974354][ T29] audit: type=1800 audit(1843107620.191:14): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1853" name="dummy_udc" dev="gadgetfs" ino=9507 res=0 errno=0 [ 156.015483][ T6257] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10 [ 157.330987][ T9529] synth uevent: /module/au0828: unknown uevent action string [ 157.393658][ T9457] kexec: Could not allocate control_code_buffer Ijn9_UVQ8j@:Un M%Ux0 [ 158.943382][ T9606] vhci_hcd vhci_hcd.1: invalid port number 109 [ 158.993296][ T9606] vhci_hcd vhci_hcd.1: default hub control req: 9cb1 v5db3 i006d l45317 [ 159.230102][ T9623] program syz.0.1967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.293339][ T9675] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.315431][ T9675] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 161.137663][ T9720] kAFS: Invalid Command on /proc/fs/afs/cells file [ 161.700140][ T9746] vhci_hcd vhci_hcd.0: invalid port number 16 [ 162.574601][ T9796] cougar: G6 mapped to F18 [ 163.690106][ T9859] bond0: option mode: unable to set because the bond device is up [ 166.253175][ T9903] kexec: Could not allocate control_code_buffer [ 166.883162][T10009] syz.0.2156 uses obsolete (PF_INET,SOCK_PACKET) [ 167.429835][T10040] block loop4: the capability attribute has been deprecated. [ 169.206731][T10143] random: crng reseeded on system resumption [ 169.892696][T10183] kafs: addr_prefs: Invalid Command [ 170.394081][T10214] usb usb13: check_ctrlrecip: process 10214 (syz.0.2256) requesting ep 01 but needs 81 [ 170.405239][T10214] usb usb13: usbfs: process 10214 (syz.0.2256) did not claim interface 0 before use [ 171.577319][T10285] i2c i2c-0: delete_device: Can't find device in list [ 171.903103][T10304] Setting dangerous option i915.mitigations - tainting kernel [ 172.640132][T10345] ubi31: attaching mtd0 [ 172.657450][T10345] ubi31: scanning is finished [ 172.675067][T10345] ubi31: empty MTD device detected [ 172.870671][T10345] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 172.903748][T10345] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 172.911195][T10345] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 172.934076][T10345] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 172.951952][T10345] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 172.973281][T10345] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 172.993198][T10345] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 300367718 [ 173.028489][T10345] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 173.054065][T10353] ubi31: background thread "ubi_bgt31d" started, PID 10353 [ 173.636597][T10380] bonding: no command found in bonding_masters - use +ifname or -ifname [ 180.111683][T10717] QAT: failed to copy from user. [ 181.263243][ T29] audit: type=1806 audit(1843107647.613:15): xattr="." res=0 [ 182.483416][T10854] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 183.091692][T10856] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 185.759751][T11024] : Can't lookup blockdev [ 185.797620][T11026] [U] 0="/ [ 185.826207][T11026] [U] [ 185.836347][T11026] [U] EeQ@ [ 185.843219][T11025] [U]  [ 187.270237][T11097] i2c i2c-0: new_device: Missing parameters [ 187.400418][T11104] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 188.572653][T11144] batman_adv: Routing algorithm '7' is not supported [ 188.644414][T11146] vivid-003: ================= START STATUS ================= [ 188.653158][T11146] vivid-003: Radio HW Seek Mode: Bounded [ 188.692792][T11146] vivid-003: Radio Programmable HW Seek: false [ 188.699116][T11146] vivid-003: RDS Rx I/O Mode: Block I/O [ 188.721549][T11146] vivid-003: Generate RBDS Instead of RDS: false [ 188.731680][T11146] vivid-003: RDS Reception: true [ 188.751277][T11146] vivid-003: RDS Program Type: 0 inactive [ 188.757159][T11146] vivid-003: RDS PS Name: inactive [ 188.763886][T11146] vivid-003: RDS Radio Text: inactive [ 188.782183][T11146] vivid-003: RDS Traffic Announcement: false inactive [ 188.789112][T11146] vivid-003: RDS Traffic Program: false inactive [ 188.811311][T11146] vivid-003: RDS Music: false inactive [ 188.818196][T11146] vivid-003: ================== END STATUS ================== [ 189.607492][T11187] bond0: invalid ARP target specified [ 190.342583][T11234] program syz.0.2753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.957448][T11265] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 191.227024][T11280] bond0: option slaves: interface - does not exist! [ 191.950148][T11311] usb usb16: usbfs: process 11311 (syz.1.2791) did not claim interface 0 before use [ 192.474715][T11332] zram0: detected capacity change from 0 to 8 [ 194.150422][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.157720][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.690535][ T6257] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.696704][ T6210] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 196.139022][T11496] bonding: no command found in bonding_masters - use +ifname or -ifname [ 196.759624][ T6257] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.768080][ T6210] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 196.824988][T11538] zram: Can't change algorithm for initialized device [ 197.033296][T11550] usb usb4: usbfs: process 11550 (syz.3.2888) did not claim interface 0 before use [ 197.080598][T11555] binder: 11554:11555 ioctl c0306201 200000000540 returned -14 [ 197.256627][T11562] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 198.403856][T11632] mmap: syz.2.2921 (11632): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 198.909576][ T6257] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.909634][ T6210] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 200.281958][T11745] ima: policy update failed [ 200.291707][ T29] audit: type=1802 audit(1843107666.752:16): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2966" res=0 errno=0 [ 200.463876][T11757] syz.3.2970 (11757): drop_caches: 0 [ 201.164081][T11801] overlayfs: "check_copy_up" module option is obsolete [ 202.076467][T11846] writes to the poll attribute are ignored. [ 202.084464][T11846] please use driver specific parameters instead. [ 203.962793][T11931] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 203.983033][T11931] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 204.015385][T11931] CIFS mount error: No usable UNC path provided in device string! [ 204.015385][T11931] [ 204.027946][T11931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.844522][T12022] synth uevent: /bus/mei: unknown uevent action string [ 206.391483][ T6259] Bluetooth: hci1: command 0x0406 tx timeout [ 206.392009][ T6183] Bluetooth: hci0: command 0x0406 tx timeout [ 206.397548][ T6253] Bluetooth: hci3: command 0x0406 tx timeout [ 206.652380][T12070] ICMPv6: process `syz.3.3124' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 206.689016][T12072] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 207.258516][T12107] aoe: can't write to that file. [ 207.394424][ T29] audit: type=1804 audit(1843107673.869:17): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3145" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 209.576776][T12233] block2mtd: too many arguments [ 210.594488][ T5140] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 211.148453][T12313] binder: binder_mmap: 12312 0-1000 bad vm_flags failed -1 [ 211.400909][T12327] kafs: addr_prefs: Invalid Command [ 213.676851][T12440] program syz.0.3305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.716339][T12481] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 215.203756][T12505] udc dummy_udc.0: soft-connect without a gadget driver [ 216.477385][T12572] nfs: Unknown parameter 'BlY 7wEɮHs[' [ 216.729820][ T29] audit: type=1800 audit(4294967305.639:18): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3378" name="discovery_nqn" dev="configfs" ino=29811 res=0 errno=0 [ 216.855222][T12595] block2mtd: Using custom MTD label '' for dev [ 216.861682][T12595] block2mtd: error: cannot open device [ 216.897760][T12600] block2mtd: illegal erase size [ 216.925162][T12601] vhci_hcd vhci_hcd.2: invalid port number 135 [ 216.931488][T12601] vhci_hcd vhci_hcd.2: invalid port number 135 [ 217.360013][T12629] block2mtd: illegal erase size [ 217.700500][T12647] ACPI: Can not change Invalid GPE/Fixed Event status [ 218.427217][T12692] usb usb3: usbfs: process 12692 (syz.3.3429) did not claim interface 0 before use [ 219.045213][ T5140] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 219.504893][T12757] nvme_fcloop: unknown parameter or missing value '7' [ 220.038633][T12791] sysfs_service_op_show: Client not running :-5: [ 221.113857][ T6257] Bluetooth: hci3: command 0x0406 tx timeout [ 222.151233][T12925] sd 0:0:1:0: PR command failed: 1026 [ 222.156713][T12925] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 222.176045][T12925] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.995378][ T5140] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 223.182192][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 223.667042][T12985] bond0: invalid ARP target specified [ 223.929826][ T29] audit: type=1400 audit(4294967312.877:19): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12995 comm="syz.1.3579" [ 224.393368][T13018] syz_tun: tun_chr_ioctl cmd 35111 [ 225.012790][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 227.085978][ T6257] Bluetooth: hci0: command 0x0406 tx timeout [ 227.118566][T13168] ICMPv6: process `syz.0.3664' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 227.137137][ T29] audit: type=1800 audit(4294967316.073:20): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3663" name="members" dev="configfs" ino=30856 res=0 errno=0 [ 227.143544][T13170] bond0: Unable to set down delay as MII monitoring is disabled [ 227.234972][T13172] queue_state_write: operation too long [ 227.262163][T13172] queue_state_write: use 'run', 'start' or 'kick' [ 227.289862][T13174] zram: Added device: zram1 [ 228.072879][T13223] vhci_hcd vhci_hcd.2: invalid port number 194 [ 228.095476][T13223] vhci_hcd vhci_hcd.2: invalid port number 194 [ 228.199311][T13231] sysfs_service_op_store: Client not running :-5: [ 229.071041][T13290] program syz.0.3723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.156602][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.163582][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.331641][ T29] audit: type=1800 audit(4294967318.305:21): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3732" name="members" dev="configfs" ino=31973 res=0 errno=0 [ 230.342949][T13354] warning: `syz.0.3754' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 230.962037][ T1161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.144529][T13434] usb usb15: usbfs: process 13434 (syz.0.3794) did not claim interface 0 before use [ 232.701365][T13460] program syz.2.3807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.732264][T13460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 233.740370][T13494] ================================================================== [ 233.740395][T13494] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 233.740451][T13494] Write of size 8 at addr ffffc900044a9000 by task syz.0.3822/13494 [ 233.740476][T13494] [ 233.740501][T13494] CPU: 1 UID: 0 PID: 13494 Comm: syz.0.3822 Tainted: G U syzkaller #0 PREEMPT(full) [ 233.740541][T13494] Tainted: [U]=USER [ 233.740550][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.740571][T13494] Call Trace: [ 233.740580][T13494] [ 233.740595][T13494] dump_stack_lvl+0x100/0x190 [ 233.740636][T13494] print_report+0x156/0x4c9 [ 233.740674][T13494] ? _raw_spin_lock_irqsave+0x52/0x60 [ 233.740706][T13494] ? __virt_addr_valid+0x81/0x620 [ 233.740744][T13494] ? sys_fillrect+0x174a/0x1910 [ 233.740782][T13494] kasan_report+0xdf/0x1e0 [ 233.740824][T13494] ? sys_fillrect+0x174a/0x1910 [ 233.740867][T13494] sys_fillrect+0x174a/0x1910 [ 233.740913][T13494] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 233.740944][T13494] bit_clear+0x17d/0x220 [ 233.740977][T13494] ? __pfx_bit_clear+0x10/0x10 [ 233.741010][T13494] ? fb_get_color_depth+0x120/0x250 [ 233.741040][T13494] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.741085][T13494] __fbcon_clear+0x633/0x760 [ 233.741115][T13494] ? __pfx_bit_clear+0x10/0x10 [ 233.741150][T13494] fbcon_scroll+0x48b/0x650 [ 233.741185][T13494] con_scroll+0x464/0x690 [ 233.741226][T13494] do_con_write+0x6883/0x8540 [ 233.741286][T13494] ? __pfx_do_con_write+0x10/0x10 [ 233.741337][T13494] con_write+0x23/0xb0 [ 233.741377][T13494] n_tty_write+0x44f/0x12d0 [ 233.741416][T13494] ? __pfx_n_tty_write+0x10/0x10 [ 233.741445][T13494] ? trace_kmalloc+0x101/0x130 [ 233.741485][T13494] ? __pfx_woken_wake_function+0x10/0x10 [ 233.741525][T13494] ? rcu_is_watching+0x12/0xc0 [ 233.741564][T13494] ? file_tty_write.isra.0+0x694/0x890 [ 233.741603][T13494] ? kfree+0x2ec/0x6b0 [ 233.741632][T13494] ? __pfx_n_tty_write+0x10/0x10 [ 233.741662][T13494] file_tty_write.isra.0+0x4d2/0x890 [ 233.741707][T13494] redirected_tty_write+0xd4/0x120 [ 233.741748][T13494] vfs_write+0x6ac/0x1070 [ 233.741785][T13494] ? __pfx_redirected_tty_write+0x10/0x10 [ 233.741828][T13494] ? __pfx_vfs_write+0x10/0x10 [ 233.741863][T13494] ? find_held_lock+0x2b/0x80 [ 233.741916][T13494] ksys_write+0x12a/0x250 [ 233.741952][T13494] ? __pfx_ksys_write+0x10/0x10 [ 233.741994][T13494] do_syscall_64+0x106/0xf80 [ 233.742028][T13494] ? clear_bhb_loop+0x40/0x90 [ 233.742060][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.742089][T13494] RIP: 0033:0x7fb315b9bf79 [ 233.742116][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.742145][T13494] RSP: 002b:00007fb3169df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.742176][T13494] RAX: ffffffffffffffda RBX: 00007fb315e15fa0 RCX: 00007fb315b9bf79 [ 233.742196][T13494] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 233.742214][T13494] RBP: 00007fb315c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 233.742232][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.742250][T13494] R13: 00007fb315e16038 R14: 00007fb315e15fa0 R15: 00007ffe09097c68 [ 233.742284][T13494] [ 233.742294][T13494] [ 233.742302][T13494] The buggy address belongs to a vmalloc virtual mapping [ 233.742323][T13494] Memory state around the buggy address: [ 233.742338][T13494] ffffc900044a8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.742362][T13494] ffffc900044a8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.742382][T13494] >ffffc900044a9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.742397][T13494] ^ [ 233.742412][T13494] ffffc900044a9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.742431][T13494] ffffc900044a9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.742447][T13494] ================================================================== [ 233.742674][T13494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 233.742697][T13494] CPU: 1 UID: 0 PID: 13494 Comm: syz.0.3822 Tainted: G U syzkaller #0 PREEMPT(full) [ 233.742743][T13494] Tainted: [U]=USER [ 233.742753][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.742770][T13494] Call Trace: [ 233.742780][T13494] [ 233.742790][T13494] dump_stack_lvl+0x100/0x190 [ 233.742830][T13494] vpanic+0x552/0x970 [ 233.742857][T13494] ? __pfx_vpanic+0x10/0x10 [ 233.742890][T13494] ? sys_fillrect+0x174a/0x1910 [ 233.742928][T13494] panic+0xd1/0xe0 [ 233.742954][T13494] ? __pfx_panic+0x10/0x10 [ 233.742982][T13494] ? sys_fillrect+0x174a/0x1910 [ 233.743020][T13494] ? preempt_schedule_common+0x42/0xc0 [ 233.743060][T13494] check_panic_on_warn.cold+0x19/0x34 [ 233.743090][T13494] end_report.part.0+0x3a/0x90 [ 233.743128][T13494] kasan_report.cold+0xe/0x18 [ 233.743168][T13494] ? sys_fillrect+0x174a/0x1910 [ 233.743211][T13494] sys_fillrect+0x174a/0x1910 [ 233.743258][T13494] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 233.743294][T13494] bit_clear+0x17d/0x220 [ 233.743328][T13494] ? __pfx_bit_clear+0x10/0x10 [ 233.743362][T13494] ? fb_get_color_depth+0x120/0x250 [ 233.743393][T13494] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.743440][T13494] __fbcon_clear+0x633/0x760 [ 233.743472][T13494] ? __pfx_bit_clear+0x10/0x10 [ 233.743507][T13494] fbcon_scroll+0x48b/0x650 [ 233.743534][T13494] con_scroll+0x464/0x690 [ 233.743576][T13494] do_con_write+0x6883/0x8540 [ 233.743630][T13494] ? __pfx_do_con_write+0x10/0x10 [ 233.743680][T13494] con_write+0x23/0xb0 [ 233.743721][T13494] n_tty_write+0x44f/0x12d0 [ 233.743759][T13494] ? __pfx_n_tty_write+0x10/0x10 [ 233.743788][T13494] ? trace_kmalloc+0x101/0x130 [ 233.743829][T13494] ? __pfx_woken_wake_function+0x10/0x10 [ 233.743869][T13494] ? rcu_is_watching+0x12/0xc0 [ 233.743907][T13494] ? file_tty_write.isra.0+0x694/0x890 [ 233.743948][T13494] ? kfree+0x2ec/0x6b0 [ 233.743976][T13494] ? __pfx_n_tty_write+0x10/0x10 [ 233.744007][T13494] file_tty_write.isra.0+0x4d2/0x890 [ 233.744053][T13494] redirected_tty_write+0xd4/0x120 [ 233.744094][T13494] vfs_write+0x6ac/0x1070 [ 233.744132][T13494] ? __pfx_redirected_tty_write+0x10/0x10 [ 233.744175][T13494] ? __pfx_vfs_write+0x10/0x10 [ 233.744210][T13494] ? find_held_lock+0x2b/0x80 [ 233.744263][T13494] ksys_write+0x12a/0x250 [ 233.744305][T13494] ? __pfx_ksys_write+0x10/0x10 [ 233.744348][T13494] do_syscall_64+0x106/0xf80 [ 233.744384][T13494] ? clear_bhb_loop+0x40/0x90 [ 233.744416][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.744445][T13494] RIP: 0033:0x7fb315b9bf79 [ 233.744468][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.744495][T13494] RSP: 002b:00007fb3169df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.744523][T13494] RAX: ffffffffffffffda RBX: 00007fb315e15fa0 RCX: 00007fb315b9bf79 [ 233.744543][T13494] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 233.744562][T13494] RBP: 00007fb315c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 233.744580][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.744597][T13494] R13: 00007fb315e16038 R14: 00007fb315e15fa0 R15: 00007ffe09097c68 [ 233.744626][T13494] [ 233.745087][T13494] Kernel Offset: disabled