last executing test programs: 8m27.81400763s ago: executing program 2 (id=1359): io_setup$auto(0xffff, &(0x7f0000000580)) 8m27.476307398s ago: executing program 2 (id=1367): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) 8m27.316896566s ago: executing program 2 (id=1371): syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff) 8m27.171348454s ago: executing program 2 (id=1375): msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) 8m27.043358596s ago: executing program 2 (id=1380): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 8m26.617212766s ago: executing program 2 (id=1390): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 8m26.301506691s ago: executing program 32 (id=1390): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 6m57.626647685s ago: executing program 4 (id=3274): fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)="50a54f6ba2eabf1c36410848849a", 0xfffffffffffffffe) bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x0, 0x2, 0x3, @prog_cnt=0xc, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91) 6m57.436600424s ago: executing program 4 (id=3279): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x300) 6m57.270185961s ago: executing program 4 (id=3284): r0 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) 6m57.093124474s ago: executing program 4 (id=3288): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd0/sched/write1_fifo_list\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000000c0)=""/120, 0x78) 6m57.002317685s ago: executing program 4 (id=3289): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 6m56.472594621s ago: executing program 4 (id=3300): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064be, 0x1e6) 6m56.13171037s ago: executing program 33 (id=3300): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064be, 0x1e6) 4m39.424906256s ago: executing program 3 (id=5992): r0 = socket(0xa, 0x2, 0x88) setsockopt$auto(r0, 0x0, 0x6, 0xfffffffffffffffe, 0x0) 4m39.231845222s ago: executing program 3 (id=5996): ioperm$auto(0x7, 0x6, 0x2) fchmod$auto(0xffffffffffffffff, 0x4) 4m39.020075659s ago: executing program 3 (id=6000): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m38.837332892s ago: executing program 3 (id=6003): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) 4m38.64134072s ago: executing program 3 (id=6007): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 4m38.143938071s ago: executing program 3 (id=6015): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4m37.638864516s ago: executing program 34 (id=6015): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.874821497s ago: executing program 6 (id=9766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) 1.647538154s ago: executing program 6 (id=9769): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video33\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0845657, r0) 1.395300973s ago: executing program 6 (id=9773): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram5\x00', 0x80, 0x0) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) 1.374063669s ago: executing program 1 (id=9774): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0) 1.299935876s ago: executing program 5 (id=9775): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x8) 1.170548905s ago: executing program 0 (id=9776): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0xfe5c) 1.13239887s ago: executing program 1 (id=9777): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd7/queue/iosched/async_depth\x00', 0x8a601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) 1.078218937s ago: executing program 5 (id=9778): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram1\x00', 0x0, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) 919.437355ms ago: executing program 0 (id=9779): sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c000) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa) 871.419616ms ago: executing program 1 (id=9780): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5521, r0) 824.845705ms ago: executing program 5 (id=9781): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) fcntl$auto(0x0, 0x6, 0x0) 710.069976ms ago: executing program 6 (id=9782): r0 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 637.812304ms ago: executing program 0 (id=9783): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/shm_rmid_forced\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) 593.432597ms ago: executing program 1 (id=9784): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) 556.257398ms ago: executing program 5 (id=9785): open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C_', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) 419.233596ms ago: executing program 0 (id=9786): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) 397.412346ms ago: executing program 6 (id=9787): set_mempolicy$auto(0x1, 0x0, 0x8) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000002c0)=""/119, 0x77) 318.613903ms ago: executing program 1 (id=9788): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0x2) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)) 304.957268ms ago: executing program 5 (id=9789): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x10, 0x2, 0xc) write$auto(r0, &(0x7f0000000000)='\x13\x00', 0x2fe) 203.208254ms ago: executing program 0 (id=9790): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) 138.439823ms ago: executing program 1 (id=9791): openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x28800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0xc1007c01, 0x38) 113.825378ms ago: executing program 5 (id=9792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x4}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 110.211812ms ago: executing program 6 (id=9793): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) exit$auto(0x5) 0s ago: executing program 0 (id=9794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001600)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000d}, 0x24048804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 85.222627][ T5819] cgroup: Unknown subsys name 'net' [ 85.346901][ T5819] cgroup: Unknown subsys name 'cpuset' [ 85.358047][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.910810][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.963954][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.735855][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.753481][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.912118][ T5970] mmap: syz.0.97 (5970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.014015][ T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.022076][ T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.029783][ T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.038511][ T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.046200][ T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.136538][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.152586][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.524375][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 92.683298][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.690511][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.697838][ T5961] bridge_slave_0: entered allmulticast mode [ 92.704995][ T5961] bridge_slave_0: entered promiscuous mode [ 92.713586][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.720710][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.727969][ T5961] bridge_slave_1: entered allmulticast mode [ 92.735413][ T5961] bridge_slave_1: entered promiscuous mode [ 92.773510][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.785990][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.826413][ T5961] team0: Port device team_slave_0 added [ 92.835266][ T5961] team0: Port device team_slave_1 added [ 92.867579][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.874613][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.901734][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.914703][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.921652][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.949360][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.993556][ T5961] hsr_slave_0: entered promiscuous mode [ 92.999808][ T5961] hsr_slave_1: entered promiscuous mode [ 93.140145][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.151905][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.172614][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.183253][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.257240][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.279875][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.291737][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.299001][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.315095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.322276][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.493536][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.539274][ T5961] veth0_vlan: entered promiscuous mode [ 93.551266][ T5961] veth1_vlan: entered promiscuous mode [ 93.588325][ T5961] veth0_macvtap: entered promiscuous mode [ 93.598555][ T5961] veth1_macvtap: entered promiscuous mode [ 93.618894][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.634466][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.648017][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.657728][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667928][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677789][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.113921][ T57] Bluetooth: hci0: command tx timeout [ 96.193378][ T57] Bluetooth: hci0: command tx timeout [ 96.834891][ T10] cfg80211: failed to load regulatory.db [ 97.129055][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.138147][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.146075][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.169619][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.192071][ T5976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.200288][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.208989][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.216874][ T5976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.225715][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.233409][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.285900][ T3562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.329820][ T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.343802][ T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.351432][ T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.364225][ T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.372643][ T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.413936][ T3562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.436074][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.444314][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.451873][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.459939][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.468519][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.498897][ T3562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.556179][ T3562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.857149][ T6001] chnl_net:caif_netlink_parms(): no params data found [ 97.982393][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 98.030361][ T3562] bridge_slave_1: left allmulticast mode [ 98.036540][ T3562] bridge_slave_1: left promiscuous mode [ 98.043025][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.055487][ T3562] bridge_slave_0: left allmulticast mode [ 98.061132][ T3562] bridge_slave_0: left promiscuous mode [ 98.067124][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.342352][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.354818][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.365848][ T3562] bond0 (unregistering): Released all slaves [ 98.410264][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.420238][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.427957][ T6001] bridge_slave_0: entered allmulticast mode [ 98.438784][ T6001] bridge_slave_0: entered promiscuous mode [ 98.488714][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.497027][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.504503][ T6001] bridge_slave_1: entered allmulticast mode [ 98.511556][ T6001] bridge_slave_1: entered promiscuous mode [ 98.659452][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.668197][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.676211][ T5999] bridge_slave_0: entered allmulticast mode [ 98.684873][ T5999] bridge_slave_0: entered promiscuous mode [ 98.695429][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.746384][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.754137][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.761259][ T5999] bridge_slave_1: entered allmulticast mode [ 98.772052][ T5999] bridge_slave_1: entered promiscuous mode [ 98.792287][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.839094][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.908602][ T3562] hsr_slave_0: left promiscuous mode [ 98.915452][ T3562] hsr_slave_1: left promiscuous mode [ 98.921255][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.929291][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.939058][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.946628][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.964037][ T3562] veth1_macvtap: left promiscuous mode [ 98.969729][ T3562] veth0_macvtap: left promiscuous mode [ 98.975782][ T3562] veth1_vlan: left promiscuous mode [ 98.981123][ T3562] veth0_vlan: left promiscuous mode [ 99.254063][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 99.279895][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 99.313141][ T57] Bluetooth: hci1: command tx timeout [ 99.313147][ T5143] Bluetooth: hci0: command tx timeout [ 99.394811][ T57] Bluetooth: hci2: command tx timeout [ 99.527701][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.550770][ T6001] team0: Port device team_slave_0 added [ 99.556624][ T57] Bluetooth: hci3: command tx timeout [ 99.571759][ T6001] team0: Port device team_slave_1 added [ 99.618205][ T5999] team0: Port device team_slave_0 added [ 99.627744][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 99.662187][ T5999] team0: Port device team_slave_1 added [ 99.676363][ T6007] chnl_net:caif_netlink_parms(): no params data found [ 99.742207][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.749297][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.775472][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.787986][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.795034][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.820960][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.841218][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.848383][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.874440][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.911720][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.918817][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.944971][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.025717][ T6001] hsr_slave_0: entered promiscuous mode [ 100.032107][ T6001] hsr_slave_1: entered promiscuous mode [ 100.169850][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.177399][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.187893][ T6007] bridge_slave_0: entered allmulticast mode [ 100.196705][ T6007] bridge_slave_0: entered promiscuous mode [ 100.223074][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.230191][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.238232][ T6005] bridge_slave_0: entered allmulticast mode [ 100.245681][ T6005] bridge_slave_0: entered promiscuous mode [ 100.254775][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.261913][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.269513][ T6005] bridge_slave_1: entered allmulticast mode [ 100.277669][ T6005] bridge_slave_1: entered promiscuous mode [ 100.289163][ T5999] hsr_slave_0: entered promiscuous mode [ 100.295603][ T5999] hsr_slave_1: entered promiscuous mode [ 100.302025][ T5999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.309853][ T5999] Cannot create hsr debugfs directory [ 100.334491][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.341726][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.349194][ T6007] bridge_slave_1: entered allmulticast mode [ 100.356908][ T6007] bridge_slave_1: entered promiscuous mode [ 100.446899][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.518006][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.546027][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.580398][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.692072][ T6005] team0: Port device team_slave_0 added [ 100.748862][ T6005] team0: Port device team_slave_1 added [ 100.774568][ T6007] team0: Port device team_slave_0 added [ 100.822475][ T6007] team0: Port device team_slave_1 added [ 100.848904][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.858923][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.890041][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.903372][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.910385][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.937221][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.027048][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.034107][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.060099][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.073076][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.080034][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.107237][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.177083][ T6007] hsr_slave_0: entered promiscuous mode [ 101.186787][ T6007] hsr_slave_1: entered promiscuous mode [ 101.192990][ T6007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.200601][ T6007] Cannot create hsr debugfs directory [ 101.248994][ T6005] hsr_slave_0: entered promiscuous mode [ 101.255555][ T6005] hsr_slave_1: entered promiscuous mode [ 101.261693][ T6005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.269977][ T6005] Cannot create hsr debugfs directory [ 101.395880][ T57] Bluetooth: hci1: command tx timeout [ 101.395919][ T5143] Bluetooth: hci0: command tx timeout [ 101.472728][ T5143] Bluetooth: hci2: command tx timeout [ 101.601801][ T5999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.620310][ T5999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.630578][ T5999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.637502][ T5143] Bluetooth: hci3: command tx timeout [ 101.648098][ T5999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.746122][ T6001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.776863][ T6001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.804514][ T6001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.817244][ T6001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.914594][ T6007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.954533][ T6007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.969434][ T6007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.017637][ T6007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.057633][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.168943][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.179233][ T6005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.219531][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.226789][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.238043][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.245242][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.258576][ T6005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.295964][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.303941][ T6005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.316500][ T6005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.400487][ T6001] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.462645][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.469793][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.503335][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.510493][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.618693][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.696455][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.717886][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.747431][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.778412][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.785578][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.850381][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.857611][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.894751][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.901948][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.015228][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.022427][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.110276][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.258040][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.315964][ T5999] veth0_vlan: entered promiscuous mode [ 103.347151][ T5999] veth1_vlan: entered promiscuous mode [ 103.454634][ T6001] veth0_vlan: entered promiscuous mode [ 103.481453][ T6001] veth1_vlan: entered promiscuous mode [ 103.487693][ T5143] Bluetooth: hci0: command tx timeout [ 103.487705][ T57] Bluetooth: hci1: command tx timeout [ 103.507064][ T5999] veth0_macvtap: entered promiscuous mode [ 103.535187][ T5999] veth1_macvtap: entered promiscuous mode [ 103.554984][ T57] Bluetooth: hci2: command tx timeout [ 103.581606][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.615636][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.645045][ T5999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.654041][ T5999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.662842][ T5999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.671551][ T5999] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.707960][ T6001] veth0_macvtap: entered promiscuous mode [ 103.715166][ T57] Bluetooth: hci3: command tx timeout [ 103.727731][ T6001] veth1_macvtap: entered promiscuous mode [ 103.769109][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.781422][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.794129][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.805621][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.841147][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.851737][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.865212][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.881257][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.914146][ T6001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.923910][ T6001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.933268][ T6001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.942012][ T6001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.969528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.986514][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.057876][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.069133][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.111401][ T6007] veth0_vlan: entered promiscuous mode [ 104.137555][ T6005] veth0_vlan: entered promiscuous mode [ 104.148430][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.165123][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.183321][ T6007] veth1_vlan: entered promiscuous mode [ 104.235179][ T6005] veth1_vlan: entered promiscuous mode [ 104.266999][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.280865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.416952][ T6007] veth0_macvtap: entered promiscuous mode [ 104.449504][ T6005] veth0_macvtap: entered promiscuous mode [ 104.465409][ T6007] veth1_macvtap: entered promiscuous mode [ 104.511641][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.572628][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.583000][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.608482][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.632175][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.641458][ T6005] veth1_macvtap: entered promiscuous mode [ 104.686285][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.733462][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.753016][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.764622][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.777841][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.806454][ T6007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.815269][ T6007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.852648][ T6007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.861382][ T6007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.903060][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.923723][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.962639][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.977532][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.988066][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.999023][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.010349][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.064619][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.110713][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.121274][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.131882][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.148045][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.166111][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.184025][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.262448][ T6005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.284223][ T6005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.301338][ T6005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.310741][ T6005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.470563][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.499155][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.553272][ T57] Bluetooth: hci1: command tx timeout [ 105.553855][ T5143] Bluetooth: hci0: command tx timeout [ 105.616122][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.627187][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.634754][ T5143] Bluetooth: hci2: command tx timeout [ 105.734648][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.775992][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.793783][ T5143] Bluetooth: hci3: command tx timeout [ 105.868220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.893996][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.046631][ T6140] syz.0.124(6140): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 110.679648][ T30] audit: type=1800 audit(1746156123.653:2): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="trace_pipe" dev="tracefs" ino=254 res=0 errno=0 [ 110.977123][ T30] audit: type=1800 audit(1746156123.943:3): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.236" name="dbroot" dev="configfs" ino=8908 res=0 errno=0 [ 111.137254][ T30] audit: type=1800 audit(1746156124.103:4): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.240" name="dummy_udc" dev="gadgetfs" ino=7130 res=0 errno=0 [ 112.129562][ T30] audit: type=1800 audit(1746156125.103:5): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.262" name="dbroot" dev="configfs" ino=9786 res=0 errno=0 [ 112.149489][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.039221][ T30] audit: type=1800 audit(1746156126.013:6): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.288" name="dbroot" dev="configfs" ino=9039 res=0 errno=0 [ 114.140428][ T30] audit: type=1800 audit(1746156127.113:7): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.315" name="dbroot" dev="configfs" ino=9989 res=0 errno=0 [ 114.169216][ T30] audit: type=1800 audit(1746156127.143:8): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.322" name="members" dev="configfs" ino=9990 res=0 errno=0 [ 116.424581][ T5143] Bluetooth: hci1: unexpected event 0x32 length: 10 > 9 [ 117.214070][ T6682] Unable to find swap-space signature [ 119.871247][ T30] audit: type=1800 audit(6041123610.837:9): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="trace_pipe" dev="tracefs" ino=212 res=0 errno=0 [ 122.053582][ T30] audit: type=1326 audit(6041123613.027:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f095518e969 code=0x0 [ 122.983252][ T5143] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 124.133024][ T7035] __vm_enough_memory: pid: 7035, comm: syz.1.560, bytes: 4398046511104 not enough memory for the allocation [ 124.150564][ T7036] capability: warning: `syz.3.563' uses 32-bit capabilities (legacy support in use) [ 127.262509][ T7166] ptrace attach of "./syz-executor exec"[6007] was attempted by "./syz-executor exec"[7166] [ 128.663488][ T7229] nfs: Bad value for 'source' [ 135.455034][ T7523] futex_wake_op: syz.0.807 tries to shift op by 64; fix this program [ 135.984446][ T5143] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 137.705649][ T7643] can: request_module (can-proto-3) failed. [ 137.797118][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.808148][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.908420][ T7715] syz.2.894 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.601548][ T7809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.412178][ T8025] ptrace attach of "./syz-executor exec"[6007] was attempted by "./syz-executor exec"[8025] [ 145.211335][ T5143] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 148.182779][ T5143] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 148.192479][ T5143] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 152.153676][ T30] audit: type=1800 audit(6041127741.131:11): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1252" name="members" dev="configfs" ino=16127 res=0 errno=0 [ 155.199841][ T5143] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 156.359247][ T30] audit: type=1800 audit(6041127757.360:12): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1360" name="discovery_nqn" dev="configfs" ino=16540 res=0 errno=0 [ 156.617439][ T8674] ima: policy update failed [ 156.622229][ T30] audit: type=1802 audit(6041127757.631:13): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1366" res=0 errno=0 [ 157.688718][ T3504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.809931][ T3504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.987464][ T3504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.208702][ T3504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.557776][ T3504] bridge_slave_1: left allmulticast mode [ 158.571227][ T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.579643][ T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.587300][ T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.603787][ T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.610905][ T3504] bridge_slave_1: left promiscuous mode [ 158.616967][ T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.639069][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.674534][ T3504] bridge_slave_0: left allmulticast mode [ 158.680223][ T3504] bridge_slave_0: left promiscuous mode [ 158.686038][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.835890][ T57] Bluetooth: hci1: Malformed LE Event: 0x0b [ 159.691974][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.738817][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.778290][ T3504] bond0 (unregistering): Released all slaves [ 160.664851][ T3504] hsr_slave_0: left promiscuous mode [ 160.700521][ T57] Bluetooth: hci2: command tx timeout [ 160.712762][ T3504] hsr_slave_1: left promiscuous mode [ 160.741223][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.748639][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.788526][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.806993][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.877319][ T3504] veth1_macvtap: left promiscuous mode [ 160.895327][ T3504] veth0_macvtap: left promiscuous mode [ 160.908883][ T3504] veth1_vlan: left promiscuous mode [ 160.916227][ T3504] veth0_vlan: left promiscuous mode [ 162.041244][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 162.149351][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 162.769664][ T57] Bluetooth: hci2: command tx timeout [ 163.549378][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 163.968055][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.991272][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.012526][ T8754] bridge_slave_0: entered allmulticast mode [ 164.025155][ T8754] bridge_slave_0: entered promiscuous mode [ 164.057763][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.083291][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.090492][ T8754] bridge_slave_1: entered allmulticast mode [ 164.108574][ T8754] bridge_slave_1: entered promiscuous mode [ 164.293568][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.324752][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.471023][ T8754] team0: Port device team_slave_0 added [ 164.499711][ T8754] team0: Port device team_slave_1 added [ 164.642737][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.666177][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.696813][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.710355][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.717337][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.781976][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.838913][ T57] Bluetooth: hci2: command tx timeout [ 165.052638][ T8754] hsr_slave_0: entered promiscuous mode [ 165.062123][ T8754] hsr_slave_1: entered promiscuous mode [ 165.102731][ T8754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.114325][ T8754] Cannot create hsr debugfs directory [ 165.615703][ T9073] Process accounting resumed [ 165.713982][ T8754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.743117][ T8754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.791836][ T8754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.826405][ T8754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.129670][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.186232][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.225429][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.232618][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.280248][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.287824][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.908182][ T57] Bluetooth: hci2: command tx timeout [ 167.002763][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.788130][ T8754] veth0_vlan: entered promiscuous mode [ 167.839786][ T8754] veth1_vlan: entered promiscuous mode [ 167.935318][ T8754] veth0_macvtap: entered promiscuous mode [ 167.978856][ T8754] veth1_macvtap: entered promiscuous mode [ 168.033902][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.057788][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.079094][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.096567][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.108162][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.121127][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.138239][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.166433][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.183299][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.221267][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.261623][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.277469][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.292224][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.304680][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.324155][ T8754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.361205][ T8754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.369974][ T8754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.440106][ T8754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.712078][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.732373][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.861480][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.874536][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.751192][ T9362] capability: warning: `syz.3.1645' uses deprecated v2 capabilities in a way that may be insecure [ 176.450424][ T9470] kexec: Could not allocate control_code_buffer [ 179.683051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.691888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 180.723939][ T57] Bluetooth: hci0: unexpected event 0x17 length: 123 > 6 [ 183.884507][ T9895] syz_tun: tun_chr_ioctl cmd 1074025675 [ 183.956853][ T9895] syz_tun: persist disabled [ 185.793093][T10001] Unable to find swap-space signature [ 187.187652][T10068] nfsd: Unknown parameter '^B-' [ 188.357289][T10111] random: crng reseeded on system resumption [ 189.299299][T10055] kexec: Could not allocate control_code_buffer [ 190.830814][T10229] random: crng reseeded on system resumption [ 191.240748][T10247] delete_channel: no stack [ 191.670546][T10268] block2mtd: Using custom MTD label '' for dev [ 191.696206][T10268] block2mtd: error: cannot open device [ 191.818341][T10275] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 193.697960][T10285] kexec: Could not allocate control_code_buffer [ 194.030193][T10364] kAFS: Invalid Command on /proc/fs/afs/cells file [ 194.397895][ T30] audit: type=1800 audit(4294967312.977:14): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2083" name="discovery_nqn" dev="configfs" ino=22274 res=0 errno=0 [ 195.207946][T10427] Scaler: ================= START STATUS ================= [ 195.217340][T10427] Scaler: ================== END STATUS ================== [ 197.710864][T10554] blkio.reset_stats is deprecated [ 198.985876][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.995092][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.398467][T10603] zram0: detected capacity change from 0 to 8 [ 199.657267][T10561] kexec: Could not allocate control_code_buffer [ 200.224449][T10638] WARNING! power/level is deprecated; use power/control instead [ 200.885914][T10666] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 201.688704][T10633] kexec: Could not allocate control_code_buffer [ 201.820171][T10703] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 203.003004][T10757] zram: Cannot change disksize for initialized device [ 203.013678][T10759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.277104][T10769] vivid-003: ================= START STATUS ================= [ 203.306133][T10769] vivid-003: Radio HW Seek Mode: Bounded [ 203.313022][T10769] vivid-003: Radio Programmable HW Seek: false [ 203.320458][T10769] vivid-003: RDS Rx I/O Mode: Block I/O [ 203.341841][T10769] vivid-003: Generate RBDS Instead of RDS: false [ 203.352006][T10769] vivid-003: RDS Reception: true [ 203.365695][T10769] vivid-003: RDS Program Type: 0 inactive [ 203.386813][T10769] vivid-003: RDS PS Name: inactive [ 203.400631][T10769] vivid-003: RDS Radio Text: inactive [ 203.424086][T10769] vivid-003: RDS Traffic Announcement: false inactive [ 203.443649][T10769] vivid-003: RDS Traffic Program: false inactive [ 203.455109][T10769] vivid-003: RDS Music: false inactive [ 203.461716][T10769] vivid-003: ================== END STATUS ================== [ 203.627842][T10785] zram: Cannot change disksize for initialized device [ 204.518926][T10831] binder: 10829:10831 ioctl 40046205 0 returned -22 [ 204.935797][ T30] audit: type=1800 audit(4294967323.562:15): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2307" name="dbroot" dev="configfs" ino=22999 res=0 errno=0 [ 204.968271][T10847] db_root: not a directory: /dev/audio1 [ 206.220487][T10827] kexec: Could not allocate control_code_buffer [ 207.793109][T10967] syz_tun: tun_chr_ioctl cmd 2147767507 [ 208.298985][T10991] nvme_fabrics: missing parameter 'transport=%s' [ 208.322884][T10991] nvme_fabrics: missing parameter 'nqn=%s' [ 209.685097][ T57] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 212.271053][ T5923] Process accounting resumed [ 216.264789][T11355] ptrace attach of "./syz-executor exec"[8754] was attempted by ""[11355] [ 218.299236][ T57] Bluetooth: hci3: Malformed Event: 0x13 [ 218.734307][T11443] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 221.426197][T11470] Bluetooth: hci0: command 0x0406 tx timeout [ 221.432551][ T6004] Bluetooth: hci1: command 0x0406 tx timeout [ 221.441478][T11470] Bluetooth: hci3: command 0x0406 tx timeout [ 222.773898][T11622] bond0: no command found in slaves file - use +ifname or -ifname [ 223.070065][T11639] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2686' sets config #5 syzkaller syzkaller login: [ 224.568056][T11716] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 224.654687][T11722] queue_state_write: operation too long [ 224.680111][T11722] queue_state_write: use 'run', 'start' or 'kick' [ 225.532755][T11769] block2mtd: parameter too long [ 227.638106][T11879] [ 228.798481][T11939] program syz.4.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.832035][T11939] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 228.979747][T11951] warning: `syz.1.2842' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.980357][T11948] delete_channel: no stack [ 230.098840][T12006] usbip-vudc usbip-vudc.0: gadget not bound [ 231.209071][T12063] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 231.209071][T12063] program syz.0.2895 not setting count and/or reply_len properly [ 232.378721][T12126] kAFS: Invalid Command on /proc/fs/afs/cells file [ 233.090593][T12160] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 236.864953][T12357] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 238.354920][T12436] syz.4.3076 uses obsolete (PF_INET,SOCK_PACKET) [ 238.804896][T12456] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 245.636526][T12799] binder: 12798:12799 ioctl c0306201 200000002380 returned -14 [ 247.544224][T12890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.728282][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.828905][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.986548][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.169588][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.227827][T12912] futex_wake_op: syz.0.3308 tries to shift op by 64; fix this program [ 248.498869][ T12] bridge_slave_1: left allmulticast mode [ 248.512616][ T12] bridge_slave_1: left promiscuous mode [ 248.541331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.550205][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.559168][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.568362][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.585469][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.595544][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.596491][ T12] bridge_slave_0: left allmulticast mode [ 248.616961][T12923] udc dummy_udc.0: soft-connect without a gadget driver [ 248.643274][ T12] bridge_slave_0: left promiscuous mode [ 248.655271][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.731423][T12929] program syz.1.3315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.535367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.588644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.604324][ T12] bond0 (unregistering): Released all slaves [ 250.382286][ T12] hsr_slave_0: left promiscuous mode [ 250.413937][ T12] hsr_slave_1: left promiscuous mode [ 250.420795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.438702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.480784][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.493539][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.572830][ T12] veth1_macvtap: left promiscuous mode [ 250.593337][ T12] veth0_macvtap: left promiscuous mode [ 250.599067][ T12] veth1_vlan: left promiscuous mode [ 250.632840][ T12] veth0_vlan: left promiscuous mode [ 250.638953][ T5976] Bluetooth: hci2: command tx timeout [ 251.630931][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.703087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.711837][ T5976] Bluetooth: hci2: command tx timeout [ 252.909644][T12920] chnl_net:caif_netlink_parms(): no params data found [ 253.303241][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.310954][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.318255][T12920] bridge_slave_0: entered allmulticast mode [ 253.326903][T12920] bridge_slave_0: entered promiscuous mode [ 253.338677][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.345939][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.366616][T12920] bridge_slave_1: entered allmulticast mode [ 253.384186][T12920] bridge_slave_1: entered promiscuous mode [ 253.530152][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.574815][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.824592][T12920] team0: Port device team_slave_0 added [ 253.862921][T12920] team0: Port device team_slave_1 added [ 254.005698][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.012671][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.038539][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.073700][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.088539][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.105909][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.131797][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.167931][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.340555][T12920] hsr_slave_0: entered promiscuous mode [ 254.352010][T12920] hsr_slave_1: entered promiscuous mode [ 254.358511][T12920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.369617][T12920] Cannot create hsr debugfs directory [ 254.781289][ T5976] Bluetooth: hci2: command tx timeout [ 255.074693][T12920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.120715][T12920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.170758][T12920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.202764][T12920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.435555][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.492774][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.526531][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.533749][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.623938][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.631150][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.308991][T13268] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 256.336409][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.853509][ T5976] Bluetooth: hci2: command tx timeout [ 257.023863][T12920] veth0_vlan: entered promiscuous mode [ 257.096750][T12920] veth1_vlan: entered promiscuous mode [ 257.223930][T12920] veth0_macvtap: entered promiscuous mode [ 257.278670][T12920] veth1_macvtap: entered promiscuous mode [ 257.324839][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.352864][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.377678][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.395002][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.407673][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.431915][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.455994][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.486733][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.518400][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.544081][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.562849][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.579284][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.596315][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.617959][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.676975][T12920] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.686369][T12920] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.695100][T12920] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.729046][T12920] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.987845][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.034578][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.058455][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.081150][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.175986][T13351] kAFS: No cell specified [ 258.406622][ T30] audit: type=1800 audit(4294967299.171:16): pid=13365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3301" name="lu_gp_id" dev="configfs" ino=31486 res=0 errno=0 [ 258.409832][T13365] kstrtoul() returned -22 for lu_gp_id [ 258.426973][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.802813][T13381] syz_tun: tun_chr_ioctl cmd 1074025694 [ 258.994108][T13387] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 259.803290][T13432] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 260.111934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.124663][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.806792][T13460] i2c i2c-0: delete_device: Can't parse I2C address [ 262.733694][T13543] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 262.734170][T13542] ima: policy update failed [ 262.769754][ T30] audit: type=1802 audit(4294967303.553:17): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3549" res=0 errno=0 [ 263.000142][T13558] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 263.687047][T13591] ======================================================= [ 263.687047][T13591] WARNING: The mand mount option has been deprecated and [ 263.687047][T13591] and is ignored by this kernel. Remove the mand [ 263.687047][T13591] option from the mount to silence this warning. [ 263.687047][T13591] ======================================================= [ 263.721962][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.396379][T13625] rnbd_client L213: map_device: Parameters missing [ 264.576269][ T5976] Bluetooth: hci0: Malformed Event: 0x02 [ 266.164729][ T5976] Bluetooth: hci1: Malformed Event: 0x02 [ 266.295302][T13720] vivid-007: ================= START STATUS ================= [ 266.339424][T13720] vivid-007: Generate PTS: true [ 266.350472][T13720] vivid-007: Generate SCR: true [ 266.355814][T13720] tpg source WxH: 640x360 (Y'CbCr) [ 266.361358][T13720] tpg field: 1 [ 266.364757][T13720] tpg crop: (0,0)/640x360 [ 266.371128][T13720] tpg compose: (0,0)/640x360 [ 266.378461][T13720] tpg colorspace: 8 [ 266.394231][T13720] tpg transfer function: 0/0 [ 266.398949][T13720] tpg Y'CbCr encoding: 0/0 [ 266.403562][T13720] tpg quantization: 0/0 [ 266.415311][T13720] tpg RGB range: 0/2 [ 266.425674][T13720] vivid-007: ================== END STATUS ================== [ 267.224392][T13761] program syz.0.3645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.967419][ T5976] Bluetooth: hci2: Malformed Event: 0x02 [ 269.011285][ T5976] Bluetooth: hci3: Malformed Event: 0x02 [ 270.423381][T13906] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 270.462871][T13907] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 270.775059][T13924] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 272.097137][T13995] usbcore.quirks: string doesn't fit in 127 chars. [ 273.025525][T14041] dyndbg: bad flag-op , at start of [ 273.041045][T14041] dyndbg: flags parse failed [ 273.065591][T14041] dyndbg: bad flag-op , at start of [ 273.095998][T14041] dyndbg: flags parse failed [ 273.173806][ T5976] Bluetooth: hci2: Malformed Event: 0x02 [ 276.077538][ T5976] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 276.077581][ T5976] Bluetooth: hci2: unexpected subevent 0x05 length: 725 > 12 [ 276.874331][ T5976] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 276.874370][ T5976] Bluetooth: hci0: unexpected subevent 0x05 length: 725 > 12 [ 277.194847][ T30] audit: type=1400 audit(4294967318.048:18): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14230 comm="syz.1.3839" [ 277.722360][ T5976] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 277.722402][ T5976] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 278.098873][T14272] Invalid ELF header magic: != ELF [ 278.105344][ T5976] Bluetooth: hci2: command tx timeout [ 278.888529][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 279.059958][T14331] ICMPv6: process `syz.5.3877' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 279.771370][ T5976] Bluetooth: hci1: command 0x0406 tx timeout [ 280.414964][T14389] QAT: failed to copy from user cfg_data. [ 282.993087][T14510] Invalid ELF header magic: != ELF [ 283.388579][T14530] binder: 14529:14530 ioctl c0046209 0 returned -22 [ 284.712874][T14599] zram: Can't change algorithm for initialized device [ 286.472185][T14680] vmstat_refresh: nr_hugetlb -4096 [ 286.975697][T14706] kAFS: Invalid Command on /proc/fs/afs/cells file [ 291.729460][T14928] process 'syz.5.4156' launched '/dev/fd/3' with NULL argv: empty string added [ 293.004850][T14996] Unable to find swap-space signature [ 297.662292][T15233] : Can't lookup blockdev [ 300.990397][T15368] zram0: detected capacity change from 8 to 0 [ 301.305229][ T5976] Bluetooth: hci2: unexpected event 0x3e length: 0 < 1 [ 301.727990][T15386] i2c i2c-0: new_device: Missing parameters [ 302.851540][T15438] hub 8-0:1.0: Interface 0 is not authorized for usage [ 302.863548][T15438] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 304.814421][T15531] block2mtd: illegal erase size [ 307.186564][ T30] audit: type=1800 audit(4294967348.204:19): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4497" name="features" dev="configfs" ino=39137 res=0 errno=0 [ 307.206935][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.504551][T15669] aoe: can't write to that file. [ 310.982936][T15773] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 311.022726][T15773] ep_00: uevent: failed to send synthetic uevent: -22 [ 312.490202][T15842] ptrace attach of "./syz-executor exec"[5999] was attempted by "./syz-executor exec"[15842] [ 312.895735][T15825] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 313.527515][ T30] audit: type=1800 audit(4294967354.577:20): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4624" name="members" dev="configfs" ino=39547 res=0 errno=0 [ 316.269854][T16018] ima: policy update failed [ 316.284308][ T30] audit: type=1802 audit(4294967357.352:21): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4689" res=0 errno=0 [ 316.573190][T16033] ICMPv6: process `syz.0.4696' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 318.018724][T16111] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 318.054656][T16114] kAFS: Invalid Command on /proc/fs/afs/cells file [ 318.671211][T16148] Format for deleting device is "id" (uint). [ 319.082801][T16171] block2mtd: illegal erase size [ 320.399091][T16248] i2c i2c-0: delete_device: Can't find device in list [ 321.012468][T16282] [U] y [ 321.015953][T16282] [U] 9zG-aoP]:]V [ 321.231398][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.241856][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.940787][T16335] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 322.248300][T16354] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 322.248300][T16354] [ 322.876664][T16391] vivid-007: ================= START STATUS ================= [ 322.911615][T16391] vivid-007: Enable Output Cropping: true [ 322.933873][T16391] vivid-007: Enable Output Composing: true [ 322.940784][T16391] vivid-007: Enable Output Scaler: true [ 322.951358][T16391] vivid-007: Tx RGB Quantization Range: Automatic [ 322.961752][T16391] vivid-007: Transmit Mode: HDMI [ 322.989149][T16391] vivid-007: Hotplug Present: 0x00000000 [ 322.995604][T16391] vivid-007: RxSense Present: 0x00000000 [ 323.003343][T16391] vivid-007: EDID Present: 0x00000000 [ 323.010610][T16391] vivid-007: ================== END STATUS ================== [ 323.132608][T16402] [U] UU|@3*gv SdbƱ)݄spAg; [ 323.150978][T16402] [U] ]73å^Jdz׹VWw+ [ 323.165566][T16402] [U] WM ?rBzp^GfѿaG`u2k0[LҽA/U5'~  [ 324.568001][T16485] bond0: option packets_per_slave: invalid value ( Xnp) [ 324.576308][T16485] bond0: option packets_per_slave: allowed values 0 - 65535 [ 326.972441][T16598] afs: Bad value for 'source' [ 327.124179][T16606] ecryptfs_parse_packet_length: Error parsing packet length [ 327.140981][T16606] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 327.615143][T16631] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 329.169458][T16721] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 329.195670][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.247263][T16721] CIFS mount error: No usable UNC path provided in device string! [ 329.247263][T16721] [ 329.274224][T16721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.490469][T16866] mmap: syz.1.5061 (16866): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 334.413759][T16954] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 334.414378][T16953] ima: policy update failed [ 334.453198][ T30] audit: type=1802 audit(4294967375.606:22): pid=16953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5092" res=0 errno=0 [ 334.477383][T16956] kafs: addr_prefs: Too many elements in string [ 336.993505][T17059] misc userio: Invalid payload size [ 338.012407][T17093] QAT: Invalid ioctl 21531 [ 339.663190][T17168] block nbd14: the capability attribute has been deprecated. [ 340.323967][ T30] audit: type=1800 audit(4294967381.507:23): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5177" name="members" dev="configfs" ino=42841 res=0 errno=0 [ 340.390922][T17203] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 340.390922][T17203] program syz.5.5178 not setting count and/or reply_len properly [ 341.448385][T17252] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 341.448385][T17252] M' is too long [ 341.495999][T17252] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 341.495999][T17252] W ' is too long [ 346.699146][ T30] audit: type=1806 audit(4294967387.910:24): xattr="" res=-22 [ 347.495897][ T30] audit: type=1400 audit(4294967388.724:25): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17525 comm="syz.3.5294" [ 348.652202][T17594] syz.5.5321 (17594): drop_caches: 0 [ 348.896144][T17606] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 348.927203][T17606] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.936289][T17606] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 348.949026][T17606] page_type: f5(slab) [ 348.969317][T17606] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 348.993253][T17606] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 349.002328][T17606] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 349.012607][T17606] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 349.041181][T17606] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 349.094445][T17606] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 349.110528][T17606] page dumped because: unmovable page [ 349.128319][T17606] page_owner tracks the page as allocated [ 349.135600][T17606] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5358, tgid 5358 (v4l_id), ts 48607989875, free_ts 32735300871 [ 349.179287][T17606] post_alloc_hook+0x181/0x1b0 [ 349.190659][T17606] get_page_from_freelist+0x135c/0x3920 [ 349.196352][T17606] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 349.218674][T17606] alloc_pages_mpol+0x1fb/0x550 [ 349.230471][T17606] new_slab+0x244/0x340 [ 349.234701][T17606] ___slab_alloc+0xd9c/0x1940 [ 349.252315][T17606] __slab_alloc.constprop.0+0x56/0xb0 [ 349.257808][T17606] __kmalloc_noprof+0x2f2/0x510 [ 349.292616][T17606] tomoyo_realpath_from_path+0xc2/0x6e0 [ 349.298272][T17606] tomoyo_check_open_permission+0x2ab/0x3c0 [ 349.332123][T17606] tomoyo_file_open+0x6b/0x90 [ 349.336883][T17606] security_file_open+0x84/0x1e0 [ 349.359239][T17606] do_dentry_open+0x596/0x1c10 [ 349.372094][T17606] vfs_open+0x82/0x3f0 [ 349.399114][T17606] path_openat+0x1e5e/0x2d40 [ 349.416409][T17606] do_filp_open+0x20b/0x470 [ 349.431330][T17606] page last free pid 1 tgid 1 stack trace: [ 349.458970][T17606] __free_frozen_pages+0x69d/0xff0 [ 349.468892][T17606] free_contig_range+0x135/0x3f0 [ 349.486391][T17606] destroy_args+0x66f/0x830 [ 349.501902][T17606] debug_vm_pgtable+0x130e/0x2d50 [ 349.529934][T17606] do_one_initcall+0x120/0x6e0 [ 349.538290][T17606] kernel_init_freeable+0x5c2/0x900 [ 349.548271][T17606] kernel_init+0x1c/0x2b0 [ 349.560367][T17606] ret_from_fork+0x45/0x80 [ 349.565012][T17606] ret_from_fork_asm+0x1a/0x30 [ 350.492690][T17682] Setting dangerous option i915.mitigations - tainting kernel [ 351.370180][T17718] ecryptfs_miscdev_write: Invalid packet size [192] [ 352.514618][T17765] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 354.327070][T17835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78028 [ 354.378216][T17835] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 354.398650][T17835] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 354.422959][T17835] page_type: f5(slab) [ 354.442806][T17835] raw: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 354.451876][T17835] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 354.479350][T17835] head: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 354.502517][T17835] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 354.521653][T17835] head: 00fff00000000003 ffffea0001e00a01 00000000ffffffff 00000000ffffffff [ 354.550508][T17835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 354.587685][T17835] page dumped because: unmovable page [ 354.593428][T17835] page_owner tracks the page as allocated [ 354.599251][T17835] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17403, tgid 17403 (dhcpcd-run-hook), ts 344998840706, free_ts 344897363024 [ 354.621253][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.660077][T17835] post_alloc_hook+0x181/0x1b0 [ 354.670734][T17835] get_page_from_freelist+0x135c/0x3920 [ 354.691569][T17835] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 354.697539][T17835] alloc_pages_mpol+0x1fb/0x550 [ 354.721297][T17835] new_slab+0x244/0x340 [ 354.725540][T17835] ___slab_alloc+0xd9c/0x1940 [ 354.730276][T17835] __slab_alloc.constprop.0+0x56/0xb0 [ 354.751430][T17835] kmem_cache_alloc_noprof+0xef/0x3b0 [ 354.756860][T17835] getname_kernel+0x52/0x370 [ 354.771310][T17835] kern_path+0x1d/0x50 [ 354.775520][T17835] tomoyo_realpath_nofollow+0x87/0xf0 [ 354.781378][T17835] tomoyo_find_next_domain+0x2a8/0x20b0 [ 354.791195][T17835] tomoyo_bprm_check_security+0x12e/0x1d0 [ 354.796982][T17835] security_bprm_check+0x1b9/0x1e0 [ 354.822394][T17835] bprm_execve+0x810/0x1650 [ 354.826965][T17835] do_execveat_common.isra.0+0x4a5/0x610 [ 354.850302][T17835] page last free pid 6001 tgid 6001 stack trace: [ 354.870549][T17835] __free_frozen_pages+0x69d/0xff0 [ 354.876207][T17835] __put_partials+0x16d/0x1c0 [ 354.893571][T17835] qlist_free_all+0x4e/0x120 [ 354.898221][T17835] kasan_quarantine_reduce+0x195/0x1e0 [ 354.925743][T17835] __kasan_slab_alloc+0x69/0x90 [ 354.940184][T17835] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 354.945717][T17835] getname_flags.part.0+0x4c/0x550 [ 354.960056][T17835] getname_flags+0x93/0xf0 [ 354.964541][T17835] user_path_at+0x24/0x60 [ 354.968939][T17835] __x64_sys_umount+0x10a/0x1a0 [ 354.992299][T17835] do_syscall_64+0xcd/0x230 [ 354.996951][T17835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.124041][T17870] i2c i2c-0: delete_device: Extra parameters [ 355.252757][T17874] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 355.716187][T17902] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 356.254370][ T5976] Bluetooth: hci2: SCO packet too small [ 356.838469][T17965] zram: Added device: zram1 [ 358.632597][T18066] zram: Added device: zram2 [ 359.152504][T18099] zram: Added device: zram3 [ 359.702066][ T5976] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 360.373114][T18186] sysfs_service_op_store: Client not running :-5: [ 362.688661][ T5923] smpboot: CPU 1 is now offline [ 362.919842][T18344] sysfs_service_op_show: Client not running :-5: [ 363.752866][T18377] Debayer A: ================= START STATUS ================= [ 363.795027][T18377] Debayer A: Debayer Mean Window Size: 3 [ 363.800920][T18377] Debayer A: ================== END STATUS ================== [ 365.097423][T18429] ima: policy update failed [ 365.102056][ T30] audit: type=1802 audit(4294967406.416:26): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5667" res=0 errno=0 [ 366.478969][T18484] [U] α{=@cBhPZ4:zI [ 366.507628][T18484] [U] 9zG-aoP]:]V [ 367.300193][T18516] Setting dangerous option i915.mitigations - tainting kernel [ 367.935310][T18537] Ignoring unsupported numa_zonelist_order value: [ 367.935310][T18537] [ 368.796926][T18562] [U] UU|@3*gv SdbƱ)݄spAgu [ 370.409872][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 371.438761][T18660] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 374.314425][T18775] nvme_fcloop: unknown parameter or missing value '7' [ 377.114960][T18865] kAFS: Invalid Command on /proc/fs/afs/cells file [ 378.224044][ T30] audit: type=1800 audit(4294967419.614:27): pid=18905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5889" name="dbroot" dev="configfs" ino=48995 res=0 errno=0 [ 378.458401][T18913] block nbd8: NBD_DISCONNECT [ 381.905693][T19021] bond0: Unable to set down delay as MII monitoring is disabled [ 382.331378][T19037] ICMPv6: process `syz.5.5953' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 382.371716][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.389187][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.400442][T19041] program syz.1.5952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.814324][T19054] ACPI: Can not change Invalid GPE/Fixed Event status [ 382.978081][T19060] ubi0: attaching mtd0 [ 383.013557][T19060] ubi0: scanning is finished [ 383.046727][T19060] ubi0: empty MTD device detected [ 383.051815][T19060] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 383.303583][T19060] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 384.453564][ T30] audit: type=1806 audit(4294967425.856:28): res=-14 [ 386.141139][ T3504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.259511][ T3504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.333668][ T3504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.463810][ T3504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.500568][T19182] ima: policy update failed [ 386.515270][ T30] audit: type=1807 audit(4294967427.927:29): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 386.581044][ T30] audit: type=1802 audit(4294967427.927:30): pid=19184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.6021" res=0 errno=0 [ 386.715717][ T30] audit: type=1802 audit(4294967427.967:31): pid=19182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6021" res=0 errno=0 [ 387.035767][ T3504] bridge_slave_1: left allmulticast mode [ 387.041442][ T3504] bridge_slave_1: left promiscuous mode [ 387.108206][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.155652][ T3504] bridge_slave_0: left allmulticast mode [ 387.186534][ T3504] bridge_slave_0: left promiscuous mode [ 387.222733][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.564239][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.575424][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.583834][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.592488][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.599943][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.695842][ T5143] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 387.695869][ T5143] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 387.711500][ T5143] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 387.711562][ T5143] Bluetooth: hci2: Malformed LE Event: 0x0d [ 388.353334][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.402801][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.438478][ T3504] bond0 (unregistering): Released all slaves [ 389.661991][ T3504] hsr_slave_0: left promiscuous mode [ 389.670589][ T5143] Bluetooth: hci1: command tx timeout [ 389.697158][ T3504] hsr_slave_1: left promiscuous mode [ 389.727160][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.762790][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.849031][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.880562][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.977851][ T3504] veth1_macvtap: left promiscuous mode [ 390.005669][ T3504] veth0_macvtap: left promiscuous mode [ 390.042895][ T3504] veth1_vlan: left promiscuous mode [ 390.075521][ T3504] veth0_vlan: left promiscuous mode [ 391.555543][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 391.695410][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 391.739330][ T5143] Bluetooth: hci1: command tx timeout [ 392.930894][T19216] chnl_net:caif_netlink_parms(): no params data found [ 393.517647][T19525] block2mtd: device name too long [ 393.547312][T19216] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.593622][T19216] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.646542][T19216] bridge_slave_0: entered allmulticast mode [ 393.686107][T19216] bridge_slave_0: entered promiscuous mode [ 393.780950][T19216] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.809697][ T5143] Bluetooth: hci1: command tx timeout [ 393.843633][T19216] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.876114][T19216] bridge_slave_1: entered allmulticast mode [ 393.916138][T19216] bridge_slave_1: entered promiscuous mode [ 394.208475][T19216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.290393][T19216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.609970][T19216] team0: Port device team_slave_0 added [ 394.647850][T19216] team0: Port device team_slave_1 added [ 394.975484][T19216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.010329][T19216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.036252][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.172311][T19216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.227571][T19216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.269595][T19216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.392134][T19216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.643543][T19691] synth uevent: /bus/memstick: unknown uevent action string [ 395.706471][T19216] hsr_slave_0: entered promiscuous mode [ 395.776027][T19216] hsr_slave_1: entered promiscuous mode [ 395.877818][ T5143] Bluetooth: hci1: command tx timeout [ 396.907131][T19216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.984116][T19216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.065138][T19216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.133937][T19216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.587768][T19216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.776140][T19216] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.848360][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.855512][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.961834][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.969014][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.154514][T19216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.314853][T19216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.261683][T19216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.372000][T19216] veth0_vlan: entered promiscuous mode [ 400.445287][T19216] veth1_vlan: entered promiscuous mode [ 400.582799][T19216] veth0_macvtap: entered promiscuous mode [ 400.658666][T19216] veth1_macvtap: entered promiscuous mode [ 400.784123][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.850383][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.922789][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.985310][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.047044][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.109130][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.161883][T19954] Invalid input. Must be >= 4608 [ 401.168322][T19216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.269335][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.315458][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.390570][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.437694][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.480383][T19216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.504138][T19216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.531168][T19216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.619915][T19216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.692637][T19216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.717239][T19216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.726279][T19216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.127259][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.194625][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.319968][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.376892][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.116823][T20262] i2c i2c-0: new_device: Invalid device name [ 409.790047][T20292] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 412.537637][T20388] ICMPv6: process `syz.0.6328' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 414.526940][T20459] usb usb24: check_ctrlrecip: process 20459 (syz.5.6353) requesting ep 01 but needs 81 [ 414.589128][T20459] usb usb24: usbfs: process 20459 (syz.5.6353) did not claim interface 0 before use [ 418.015966][T20586] deleting an unspecified loop device is not supported. [ 421.535377][T20713] QAT: failed to copy from user. [ 426.489018][T20894] program syz.1.6526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.650648][T20937] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81630039 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 427.666183][T20937] Call Trace: [ 427.669470][T20937] [ 427.672411][T20937] mce_cpu_restart+0x98/0xb0 [ 427.677015][T20937] ? __pfx_mce_cpu_restart+0x10/0x10 [ 427.682309][T20937] smp_call_function_many_cond+0xd7d/0x1290 [ 427.688224][T20937] ? __pfx_mce_cpu_restart+0x10/0x10 [ 427.693530][T20937] ? __pfx_mce_cpu_restart+0x10/0x10 [ 427.698832][T20937] on_each_cpu_cond_mask+0x40/0x90 [ 427.703968][T20937] set_bank+0x240/0x3a0 [ 427.708149][T20937] ? __pfx_set_bank+0x10/0x10 [ 427.712852][T20937] ? find_held_lock+0x2b/0x80 [ 427.717559][T20937] ? __pfx_set_bank+0x10/0x10 [ 427.722274][T20937] dev_attr_store+0x55/0x80 [ 427.726796][T20937] ? __pfx_dev_attr_store+0x10/0x10 [ 427.732013][T20937] sysfs_kf_write+0xef/0x150 [ 427.736632][T20937] kernfs_fop_write_iter+0x351/0x510 [ 427.741941][T20937] ? __pfx_sysfs_kf_write+0x10/0x10 [ 427.747170][T20937] vfs_write+0x5ba/0x1180 [ 427.751517][T20937] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 427.757349][T20937] ? __pfx___mutex_lock+0x10/0x10 [ 427.762396][T20937] ? __pfx_vfs_write+0x10/0x10 [ 427.767186][T20937] ksys_write+0x12a/0x240 [ 427.771527][T20937] ? __pfx_ksys_write+0x10/0x10 [ 427.776384][T20937] ? rcu_is_watching+0x12/0xc0 [ 427.781164][T20937] do_syscall_64+0xcd/0x230 [ 427.785687][T20937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.791583][T20937] RIP: 0033:0x7fdd6f38e969 [ 427.796005][T20937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.816057][T20937] RSP: 002b:00007fdd70143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.824483][T20937] RAX: ffffffffffffffda RBX: 00007fdd6f5b5fa0 RCX: 00007fdd6f38e969 [ 427.832458][T20937] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 427.840438][T20937] RBP: 00007fdd6f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 427.848413][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.856396][T20937] R13: 0000000000000000 R14: 00007fdd6f5b5fa0 R15: 00007fffc7a53558 [ 427.864388][T20937] [ 427.867522][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.508525][T20997] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 429.603671][T21002] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 434.568901][T21188] i2c i2c-0: new_device: Can't parse I2C address [ 434.815728][T21199] ceph: Failed to parse sending metrics switch value 'P^' [ 436.110246][T21251] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 443.475274][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.482905][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.611857][T21564] writes to the poll attribute are ignored. [ 443.618760][T21564] please use driver specific parameters instead. [ 450.162734][T21826] CIFS mount error: No usable UNC path provided in device string! [ 450.162734][T21826] [ 450.210339][T21826] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 450.599766][T21840] Line length is too long: Should be less than 4094 [ 452.646232][T21917] ubi0: attaching mtd0 [ 452.671287][T21917] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 453.274337][ T30] audit: type=1400 audit(4294967503.045:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=21935 comm="syz.1.6943" [ 459.035300][T22149] binder: binder_mmap: 22148 0-1000 bad vm_flags failed -1 [ 459.127862][T22155] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 462.066896][T22250] cougar: G6 mapped to F18 [ 463.112671][T22287] delete_channel: no stack [ 467.641658][T22460] overlayfs: "check_copy_up" module option is obsolete [ 470.107015][T22554] syz_tun: tun_chr_ioctl cmd 2147767519 [ 473.528702][T22684] : Can't lookup blockdev [ 474.103141][T22702] tipc: Can't bind to reserved service type 1 [ 476.746922][T22781] delete_channel: no stack [ 477.484876][T22803] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 478.428343][T22831] binder: 22830:22831 ioctl 400c620e 200000001b00 returned -22 [ 482.055999][T22959] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 483.268480][ T5143] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 483.268520][ T5143] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 484.504215][T23066] Setting dangerous option i915.mitigations - tainting kernel [ 488.191651][T23219] ima: policy update failed [ 488.226566][ T30] audit: type=1802 audit(4294967538.177:33): pid=23219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.7489" res=0 errno=0 [ 492.140547][ T30] audit: type=1806 audit(4294967542.117:34): xattr=2EC7871B res=-22 [ 494.618656][T23456] block2mtd: illegal erase size [ 498.960829][T23604] : Can't lookup blockdev [ 500.620155][T23671] usb usb15: usbfs: process 23671 (syz.6.7672) did not claim interface 0 before use [ 501.580852][T23679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.608923][T23679] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 501.699581][T23679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.740895][T23679] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 501.819746][T23679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.854824][T23679] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.910515][T23679] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.941567][T23679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 501.998186][T23679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 502.412573][T23754] openvswitch: netlink: Multiple metadata blocks provided [ 502.633345][T23761] binder: 23759:23761 ioctl c0306201 0 returned -14 [ 502.922594][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 503.718671][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 503.876374][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 503.955629][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 504.239074][T23805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 504.597127][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.604361][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.990737][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 505.789812][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 505.945726][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 506.024960][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 506.517840][T23904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.824392][T23910] HSR: entered promiscuous mode [ 508.087222][T23983] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.096071][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.281171][T23950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.302957][T23950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.352703][T23950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.392857][T23950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.420268][T24018] svc: failed to register nfsdv3 RPC service (errno 111). [ 509.462304][T24018] svc: failed to register nfsaclv3 RPC service (errno 111). [ 509.689849][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 510.070334][T24046] ubi0: attaching mtd0 [ 510.093205][T24046] ubi0: scanning is finished [ 510.136923][T24046] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 510.296633][T24046] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 510.322353][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 510.405088][ T5976] Bluetooth: hci1: command 0x0c1a tx timeout [ 510.412289][ T5976] Bluetooth: hci2: command 0x0406 tx timeout [ 510.844594][T24069] svc: failed to register nfsdv3 RPC service (errno 111). [ 510.873963][T24069] svc: failed to register nfsaclv3 RPC service (errno 111). [ 510.895508][T24079] sd 0:0:1:0: PR command failed: 1026 [ 510.929775][T24079] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 510.936566][T24079] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 512.115504][T24108] ima: policy update failed [ 512.165304][ T30] audit: type=1802 audit(4294967562.252:35): pid=24108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.7824" res=0 errno=0 [ 513.320557][T24144] svc: failed to register nfsdv3 RPC service (errno 111). [ 513.366664][T24144] svc: failed to register nfsaclv3 RPC service (errno 111). [ 514.122147][T24178] openvswitch: netlink: IP tunnel dst address not specified [ 517.679308][T24284] netlink: 'syz.1.7892': attribute type 2 has an invalid length. [ 518.397325][T24311] QAT: Device 0 not found [ 519.547153][T24342] svc: failed to register nfsdv3 RPC service (errno 111). [ 519.579404][T24342] svc: failed to register nfsaclv3 RPC service (errno 111). [ 520.756009][T24385] svc: failed to register nfsdv3 RPC service (errno 111). [ 520.832064][T24385] svc: failed to register nfsaclv3 RPC service (errno 111). [ 522.974769][T24444] Zero length message leads to an empty skb [ 525.216580][T24499] netlink: 'syz.6.7978': attribute type 1 has an invalid length. [ 527.031503][T24569] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 527.839487][T24590] svc: failed to register nfsdv3 RPC service (errno 111). [ 527.876660][T24590] svc: failed to register nfsaclv3 RPC service (errno 111). [ 528.825762][T24630] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 529.302952][T24647] netlink: set zone limit has 8 unknown bytes [ 529.424664][T24655] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 529.552620][T24657] netlink: 'syz.6.8043': attribute type 1 has an invalid length. [ 529.904219][T24669] openvswitch: netlink: IPv6 tunnel dst address is zero [ 530.406440][T24682] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.524092][T24717] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8070'. [ 532.230890][T24747] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 532.557040][T24756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.705573][T24742] kexec: Could not allocate control_code_buffer [ 534.389156][T24813] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 534.993084][T24830] netlink: set zone limit has 8 unknown bytes [ 536.354807][T24881] openvswitch: netlink: IP tunnel dst address not specified [ 536.962646][T24898] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 537.026157][T24901] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 540.846289][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8207'. [ 541.630960][T25066] netlink: 'syz.5.8219': attribute type 1 has an invalid length. [ 542.425310][T25091] netlink: 'syz.6.8231': attribute type 1 has an invalid length. [ 546.429636][T25221] netlink: 'syz.6.8288': attribute type 1 has an invalid length. [ 546.828536][T25234] sctp: [Deprecated]: syz.1.8294 (pid 25234) Use of int in max_burst socket option deprecated. [ 546.828536][T25234] Use struct sctp_assoc_value instead [ 547.363893][T25256] program syz.0.8304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.411789][T25289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8318'. [ 549.339370][T25318] openvswitch: netlink: Flow key attr not present in new flow. [ 551.046218][T25373] netlink: Unknown conntrack attr (type=146, max=9) [ 552.267079][ T30] audit: type=1800 audit(4294967602.560:36): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8380" name="features" dev="configfs" ino=67106 res=0 errno=0 [ 554.083837][T25467] netlink: 'syz.1.8403': attribute type 2 has an invalid length. [ 554.264222][T25472] netlink: del zone limit has 4 unknown bytes [ 554.619976][T25484] netlink: 'syz.5.8410': attribute type 1 has an invalid length. [ 555.351572][ T30] audit: type=1800 audit(4294967605.646:37): pid=25504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8420" name="features" dev="configfs" ino=67398 res=0 errno=0 [ 555.956847][T25526] netlink: 29 bytes leftover after parsing attributes in process `syz.6.8431'. [ 556.271888][T25534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 556.295241][T25538] nbd: must specify at least one socket [ 556.301705][T25534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 563.955395][T25737] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 564.210807][T25753] netlink: 'syz.1.8529': attribute type 2 has an invalid length. [ 564.418156][T25761] netlink: 'syz.5.8530': attribute type 1 has an invalid length. [ 564.463507][T25761] netlink: 33 bytes leftover after parsing attributes in process `syz.5.8530'. [ 564.570250][T25744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 565.722382][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.732999][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.342996][ T30] audit: type=1800 audit(4294967617.708:38): pid=25855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8563" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 568.880526][T25889] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.405773][T25903] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 570.524426][T25934] sg_read: process 2633 (syz.5.8599) changed security contexts after opening file descriptor, this is not allowed. [ 571.023617][T25948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.075714][T25948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.930413][T25972] netlink: 'syz.6.8614': attribute type 10 has an invalid length. [ 573.426850][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8637'. [ 573.508402][T26025] openvswitch: netlink: Duplicate or invalid key (type 0). [ 576.392181][T26122] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 576.633568][T26130] netlink: 342 bytes leftover after parsing attributes in process `syz.0.8687'. [ 576.691172][T26132] MTRR 1 not used [ 576.731611][T26134] dyndbg: expected <4096 bytes into control [ 577.682983][T26162] sctp: [Deprecated]: syz.0.8702 (pid 26162) Use of int in max_burst socket option deprecated. [ 577.682983][T26162] Use struct sctp_assoc_value instead [ 580.581214][T26262] vivid-007: ================= START STATUS ================= [ 580.619502][T26262] vivid-007: Generate PTS: true [ 580.624397][T26262] vivid-007: Generate SCR: true [ 580.679024][T26262] tpg source WxH: 640x360 (Y'CbCr) [ 580.684161][T26262] tpg field: 1 [ 580.728732][T26262] tpg crop: (0,0)/640x360 [ 580.745559][T26262] tpg compose: (0,0)/640x360 [ 580.774058][T26262] tpg colorspace: 8 [ 580.788217][T26262] tpg transfer function: 0/2 [ 580.812309][T26262] tpg Y'CbCr encoding: 0/1 [ 580.837678][T26262] tpg quantization: 0/2 [ 580.869748][T26262] tpg RGB range: 0/2 [ 580.888349][T26262] vivid-007: ================== END STATUS ================== [ 583.790166][T26351] vivid-003: ================= START STATUS ================= [ 583.797850][T26351] vivid-003: Radio HW Seek Mode: Bounded [ 583.852358][T26351] vivid-003: Radio Programmable HW Seek: false [ 583.889654][T26351] vivid-003: RDS Rx I/O Mode: Block I/O [ 583.920897][T26351] vivid-003: Generate RBDS Instead of RDS: false [ 583.960483][T26351] vivid-003: RDS Reception: true [ 583.996486][T26351] vivid-003: RDS Program Type: 0 inactive [ 584.026158][T26351] vivid-003: RDS PS Name: inactive [ 584.059583][T26351] vivid-003: RDS Radio Text: inactive [ 584.086556][T26351] vivid-003: RDS Traffic Announcement: false inactive [ 584.128415][T26351] vivid-003: RDS Traffic Program: false inactive [ 584.147968][T26351] vivid-003: RDS Music: false inactive [ 584.179362][T26351] vivid-003: ================== END STATUS ================== [ 585.067495][T26395] ksmbd: Unknown IPC event: 14, ignore. [ 585.932374][T26425] CIFS: VFS: Invalid SecurityFlags: [ 586.469674][T26443] aoe: copy from user failed [ 586.496578][T26443] aoe: could not set interface list: too many interfaces [ 586.833840][T26452] __vm_enough_memory: pid: 26452, comm: syz.5.8831, bytes: 4503599627366400 not enough memory for the allocation [ 587.349901][T26466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8837'. [ 587.784091][T26481] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 587.986035][T26487] openvswitch: netlink: Missing valid actions attribute. [ 588.352796][T26499] syz_tun: tun_chr_ioctl cmd 1074025684 [ 588.988603][T26520] netlink: 'syz.0.8863': attribute type 3 has an invalid length. [ 589.356716][T26534] nbd: couldn't find device at index 33904 [ 590.173982][T26562] sd 0:0:1:0: PR command failed: 1026 [ 590.212208][T26562] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 590.255374][T26562] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 590.266694][T26566] netlink: 'syz.0.8883': attribute type 2 has an invalid length. [ 591.670420][T26615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8905'. [ 592.296079][T26631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8912'. [ 592.478369][T26637] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 593.012568][T26646] sd 0:0:1:0: PR command failed: 1026 [ 593.017998][T26646] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 593.065093][T26646] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 593.512716][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.731741][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.816648][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.971565][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.617683][ T12] bridge_slave_1: left allmulticast mode [ 594.623362][ T12] bridge_slave_1: left promiscuous mode [ 594.724752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.785359][ T12] bridge_slave_0: left allmulticast mode [ 594.832835][ T12] bridge_slave_0: left promiscuous mode [ 594.874652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.280853][T26722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.294472][T26722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.311110][T26722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.325764][T26722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.333713][T26722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.893667][T26740] netlink: 'syz.1.8947': attribute type 1 has an invalid length. [ 596.660740][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.682413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.727906][ T12] bond0 (unregistering): Released all slaves [ 596.885090][ T12] HSR: left promiscuous mode [ 597.399360][T26722] Bluetooth: hci2: command tx timeout [ 597.490895][T26809] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 598.256440][T26719] chnl_net:caif_netlink_parms(): no params data found [ 599.136954][ T12] hsr_slave_0: left promiscuous mode [ 599.175205][ T12] hsr_slave_1: left promiscuous mode [ 599.215202][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.252298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.286665][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.328576][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.408133][ T12] veth1_macvtap: left promiscuous mode [ 599.450619][ T12] veth0_macvtap: left promiscuous mode [ 599.462077][T26722] Bluetooth: hci2: command tx timeout [ 599.497165][ T12] veth1_vlan: left promiscuous mode [ 599.518782][ T12] veth0_vlan: left promiscuous mode [ 600.865224][ T12] team0 (unregistering): Port device team_slave_1 removed [ 600.949495][ T12] team0 (unregistering): Port device team_slave_0 removed [ 601.531968][T26722] Bluetooth: hci2: command tx timeout [ 601.755192][T26998] netlink: 206 bytes leftover after parsing attributes in process `syz.6.8986'. [ 602.047836][T26719] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.103013][T26719] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.161751][T26719] bridge_slave_0: entered allmulticast mode [ 602.213501][T26719] bridge_slave_0: entered promiscuous mode [ 602.277828][T26719] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.346295][T26719] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.376042][T26719] bridge_slave_1: entered allmulticast mode [ 602.421085][T26719] bridge_slave_1: entered promiscuous mode [ 602.783549][T26719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.846150][T27097] netlink: 'syz.0.9000': attribute type 1 has an invalid length. [ 602.882824][T26719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.212510][T26719] team0: Port device team_slave_0 added [ 603.270784][T26719] team0: Port device team_slave_1 added [ 603.520060][T26719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.527110][T26719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.611756][T26722] Bluetooth: hci2: command tx timeout [ 603.665459][T26719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.742550][T26719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.794370][T26719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.913506][T26719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.019011][T27184] batman_adv: Routing algorithm '' is not supported [ 604.191506][T26719] hsr_slave_0: entered promiscuous mode [ 604.226697][T26719] hsr_slave_1: entered promiscuous mode [ 604.252275][T26719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.280195][T26719] Cannot create hsr debugfs directory [ 604.728130][ T30] audit: type=1800 audit(4294967655.293:39): pid=27268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9015" name="members" dev="configfs" ino=71939 res=0 errno=0 [ 604.804404][T27266] netlink: 'syz.6.9014': attribute type 2 has an invalid length. [ 605.343709][T27305] program syz.6.9022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.555075][T26719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.638354][T26719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.721625][T26719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.756085][T26719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 606.782536][T27378] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 607.142919][T26719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.264224][T26719] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.365660][T19341] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.372794][T19341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.467957][T19341] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.475080][T19341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.750441][T26719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.579822][T26719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.654411][T26719] veth0_vlan: entered promiscuous mode [ 609.761429][T26719] veth1_vlan: entered promiscuous mode [ 609.788807][T27464] netlink: 'syz.1.9061': attribute type 1 has an invalid length. [ 609.926916][T26719] veth0_macvtap: entered promiscuous mode [ 609.978314][T26719] veth1_macvtap: entered promiscuous mode [ 610.062200][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.109829][T27474] netlink: 306 bytes leftover after parsing attributes in process `syz.1.9064'. [ 610.144101][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.216682][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.283837][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.353105][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.424605][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.469286][T26719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.559151][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.628501][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.699499][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.759883][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.829501][T26719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.910529][T26719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.985986][T26719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.084420][T26719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.153980][T26719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.224647][T26719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.284831][T26719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.679165][T27520] netlink: 'syz.6.9079': attribute type 1 has an invalid length. [ 611.904969][T19341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.912915][T19341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.067797][T19341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.111200][T19341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.235626][T27697] vivid-003: ================= START STATUS ================= [ 617.280718][T27697] vivid-003: Radio HW Seek Mode: Bounded [ 617.310439][T27697] vivid-003: Radio Programmable HW Seek: false [ 617.346814][T27697] vivid-003: RDS Rx I/O Mode: Block I/O [ 617.375109][T27697] vivid-003: Generate RBDS Instead of RDS: false [ 617.404818][T27697] vivid-003: RDS Reception: true [ 617.440002][T27697] vivid-003: RDS Program Type: 0 inactive [ 617.465105][T27697] vivid-003: RDS PS Name: inactive [ 617.492488][T27697] vivid-003: RDS Radio Text: inactive [ 617.516220][T27697] vivid-003: RDS Traffic Announcement: false inactive [ 617.555123][T27697] vivid-003: RDS Traffic Program: false inactive [ 617.582228][T27697] vivid-003: RDS Music: false inactive [ 617.614992][T27697] vivid-003: ================== END STATUS ================== [ 618.585131][T27734] program syz.6.9150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.205732][T27759] ucma_write: process 4721 (syz.1.9159) changed security contexts after opening file descriptor, this is not allowed. [ 619.623812][T27771] netlink: 'syz.0.9164': attribute type 1 has an invalid length. [ 620.113741][ T30] audit: type=1800 audit(4294967670.763:40): pid=27789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9173" name="lu_gp_id" dev="configfs" ino=73734 res=0 errno=0 [ 620.397028][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9177'. [ 620.727262][T27809] random: crng reseeded on system resumption [ 622.293143][T27856] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 622.747162][T27865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9207'. [ 623.181369][T27881] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 624.028886][T27907] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 625.648732][T27960] random: crng reseeded on system resumption [ 626.845876][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.855399][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.937307][T27999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9268'. [ 627.152839][T28005] tipc: Enabling of bearer rejected, media not registered [ 627.777250][T28026] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 628.261095][T28047] netlink: zone id is out of range [ 628.281387][T28047] netlink: get zone limit has 4 unknown bytes [ 628.546322][T28057] netlink: 'syz.5.9294': attribute type 1 has an invalid length. [ 630.806179][T28129] netlink: 'syz.1.9326': attribute type 11 has an invalid length. [ 630.814024][T28129] netlink: 'syz.1.9326': attribute type 11 has an invalid length. [ 630.896241][T28129] netlink: 'syz.1.9326': attribute type 11 has an invalid length. [ 630.938984][T28129] netlink: 'syz.1.9326': attribute type 11 has an invalid length. [ 631.263653][T28148] perf: Dynamic interrupt throttling disabled, can hang your system! [ 631.368623][T28149] svc: failed to register nfsdv3 RPC service (errno 111). [ 631.412851][T28149] svc: failed to register nfsaclv3 RPC service (errno 111). [ 632.080938][T28182] netlink: 'syz.0.9347': attribute type 22 has an invalid length. [ 632.351402][T28188] Console: switching to colour VGA+ 80x25 [ 633.218917][T28218] netlink: 'syz.0.9362': attribute type 11 has an invalid length. [ 633.252905][T28218] netlink: 'syz.0.9362': attribute type 11 has an invalid length. [ 633.291566][T28218] netlink: 'syz.0.9362': attribute type 11 has an invalid length. [ 634.703749][T28263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 635.721470][T28301] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 635.740659][T28303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 636.996722][T28335] delete_channel: no stack [ 639.020645][T28404] ubi0: attaching mtd0 [ 639.047296][T28404] ubi0: scanning is finished [ 639.051970][T28404] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 639.278537][T28404] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 641.846644][T28507] netlink: 'syz.6.9488': attribute type 11 has an invalid length. [ 641.890476][T28507] netlink: 'syz.6.9488': attribute type 11 has an invalid length. [ 641.934244][T28507] netlink: 'syz.6.9488': attribute type 11 has an invalid length. [ 642.249616][T28520] nbd: must specify a device to reconfigure [ 644.273861][T28590] netlink: zone id is out of range [ 644.305222][T28590] netlink: zone id is out of range [ 644.332814][T28590] netlink: zone id is out of range [ 644.371206][T28590] netlink: zone id is out of range [ 644.397176][T28590] netlink: zone id is out of range [ 644.432721][T28590] netlink: zone id is out of range [ 644.456306][T28590] netlink: zone id is out of range [ 644.493643][T28595] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 644.502744][T28590] netlink: zone id is out of range [ 644.527645][T28590] netlink: zone id is out of range [ 645.269942][T28620] zram: Removed device: zram0 [ 647.119630][T28694] MTRR 1 not used [ 647.824029][T28710] syz_tun: tun_chr_ioctl cmd 1074025688 [ 650.275743][T28802] netlink: 'syz.0.9608': attribute type 11 has an invalid length. [ 650.312005][T28802] netlink: 'syz.0.9608': attribute type 11 has an invalid length. [ 650.356358][T28802] netlink: 'syz.0.9608': attribute type 11 has an invalid length. [ 650.742298][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9614'. [ 651.035106][T28823] Invalid ELF header magic: != ELF [ 652.493243][T28867] net_ratelimit: 51 callbacks suppressed [ 652.493260][T28867] openvswitch: netlink: IP tunnel dst address not specified [ 652.693878][T28873] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 653.207277][T28891] netlink: 'syz.1.9643': attribute type 11 has an invalid length. [ 653.249965][T28891] netlink: 'syz.1.9643': attribute type 11 has an invalid length. [ 653.284656][T28891] netlink: 'syz.1.9643': attribute type 11 has an invalid length. [ 653.572874][T28904] program syz.5.9647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.830986][ T30] audit: type=1326 audit(4294967704.648:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28910 comm="syz.1.9650" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfe058e969 code=0x0 [ 655.043663][T28942] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 656.568022][T28990] netlink: Conntrack attr has 16 unknown bytes [ 656.680405][T28993] nbd: must specify an index to disconnect [ 657.937265][T29030] netlink: 'syz.1.9704': attribute type 2 has an invalid length. [ 658.648920][T29053] perf: Dynamic interrupt throttling disabled, can hang your system! [ 658.893049][T29062] netlink: 206 bytes leftover after parsing attributes in process `syz.1.9718'. [ 659.809257][T29090] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 660.457516][T29113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.471504][T29223] nbd: illegal input index 2147483647 [ 687.967521][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.985262][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.596374][T26722] Bluetooth: hci2: command 0x0406 tx timeout [ 749.093545][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.103505][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.211366][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.219048][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.116525][ T31] INFO: task jbd2/sda1-8:5165 blocked for more than 143 seconds. [ 819.124455][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 819.139202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.149081][ T31] task:jbd2/sda1-8 state:D stack:25400 pid:5165 tgid:5165 ppid:2 task_flags:0x240040 flags:0x00004000 [ 819.162663][ T31] Call Trace: [ 819.166611][ T31] [ 819.169695][ T31] __schedule+0x116f/0x5de0 [ 819.174208][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 819.183274][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 819.189598][ T31] ? __pfx___schedule+0x10/0x10 [ 819.194471][ T31] ? find_held_lock+0x2b/0x80 [ 819.202759][ T31] ? schedule+0x2d7/0x3a0 [ 819.207832][ T31] schedule+0xe7/0x3a0 [ 819.211920][ T31] io_schedule+0xbf/0x130 [ 819.218236][ T31] bit_wait_io+0x15/0xe0 [ 819.222624][ T31] __wait_on_bit+0x62/0x180 [ 819.227983][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 819.232947][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 819.242031][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 819.249577][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 819.255054][ T31] ? __pfx___might_resched+0x10/0x10 [ 819.262350][ T31] __wait_on_buffer+0x64/0x70 [ 819.267804][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 819.274176][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 819.288580][ T31] ? crc32_le_arch+0x30/0xb0 [ 819.293208][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 819.301839][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 819.308347][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 819.314379][ T31] ? find_held_lock+0x2b/0x80 [ 819.320823][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 819.327652][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.332448][ T31] kjournald2+0x1f4/0x760 [ 819.338715][ T31] ? __pfx_kjournald2+0x10/0x10 [ 819.343587][ T31] ? find_held_lock+0x2b/0x80 [ 819.351124][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 819.360796][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.367037][ T31] ? __kthread_parkme+0x19e/0x250 [ 819.372083][ T31] ? __pfx_kjournald2+0x10/0x10 [ 819.378927][ T31] kthread+0x3c2/0x780 [ 819.384167][ T31] ? __pfx_kthread+0x10/0x10 [ 819.390297][ T31] ? __pfx_kthread+0x10/0x10 [ 819.398630][ T31] ? __pfx_kthread+0x10/0x10 [ 819.403891][ T31] ? __pfx_kthread+0x10/0x10 [ 819.409370][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.414141][ T31] ? __pfx_kthread+0x10/0x10 [ 819.420446][ T31] ret_from_fork+0x45/0x80 [ 819.425558][ T31] ? __pfx_kthread+0x10/0x10 [ 819.430163][ T31] ret_from_fork_asm+0x1a/0x30 [ 819.437360][ T31] [ 819.440473][ T31] INFO: task syz-executor:5819 blocked for more than 143 seconds. [ 819.449223][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 819.461956][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.471958][ T31] task:syz-executor state:D stack:22552 pid:5819 tgid:5819 ppid:5817 task_flags:0x440100 flags:0x00000002 [ 819.487375][ T31] Call Trace: [ 819.491257][ T31] [ 819.494192][ T31] __schedule+0x116f/0x5de0 [ 819.499102][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 819.508804][ T31] ? __pfx___schedule+0x10/0x10 [ 819.513697][ T31] ? find_held_lock+0x2b/0x80 [ 819.519564][ T31] ? schedule+0x2d7/0x3a0 [ 819.523914][ T31] schedule+0xe7/0x3a0 [ 819.530329][ T31] io_schedule+0xbf/0x130 [ 819.534840][ T31] bit_wait_io+0x15/0xe0 [ 819.539102][ T31] __wait_on_bit+0x62/0x180 [ 819.543609][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 819.550861][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 819.556447][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 819.562441][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 819.572136][ T31] do_get_write_access+0x93d/0x12a0 [ 819.578354][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 819.587575][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 819.595043][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 819.600620][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 819.609023][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 819.615925][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 819.621924][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.629082][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 819.634891][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 819.640099][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 819.648062][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 819.653955][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 819.658902][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 819.667189][ T31] ext4_dirty_inode+0xd9/0x130 [ 819.671966][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.679052][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 819.688233][ T31] generic_update_time+0xcf/0xf0 [ 819.693417][ T31] file_update_time+0x17d/0x1c0 [ 819.699093][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 819.707357][ T31] ? tcp_recvmsg+0x1f9/0x680 [ 819.711988][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 819.717224][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 819.722688][ T31] ? vm_normal_page+0x13b/0x2b0 [ 819.731193][ T31] ? find_held_lock+0x2b/0x80 [ 819.736232][ T31] ? find_held_lock+0x2b/0x80 [ 819.740935][ T31] do_page_mkwrite+0x171/0x380 [ 819.748195][ T31] do_wp_page+0xb9e/0x58e0 [ 819.752657][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 819.757874][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 819.765098][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 819.770492][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 819.775895][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 819.781029][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 819.792247][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 819.799867][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 819.807220][ T31] handle_mm_fault+0x3fe/0xad0 [ 819.813386][ T31] do_user_addr_fault+0x60c/0x1370 [ 819.818524][ T31] exc_page_fault+0x5c/0xc0 [ 819.825541][ T31] asm_exc_page_fault+0x26/0x30 [ 819.830448][ T31] RIP: 0033:0x7fd118077dcf [ 819.840316][ T31] RSP: 002b:00007fff7511e300 EFLAGS: 00010202 [ 819.848892][ T31] RAX: 00007fd1167b0000 RBX: 0000555566a44780 RCX: 0000000000000004 [ 819.857135][ T31] RDX: 1ffffffff1564534 RSI: 0000555566a4a508 RDI: 0000000000000010 [ 819.867478][ T31] RBP: 00007fff7511e5f0 R08: 0000555566a4a6c0 R09: 00000000000008a6 [ 819.875665][ T31] R10: 0000000000000001 R11: 00007fff7511e800 R12: 00007fff7511e650 [ 819.885732][ T31] R13: 0000000000000004 R14: 00007fff7511e370 R15: 00007fff7511e440 [ 819.897033][ T31] [ 819.900693][ T31] INFO: task syz.5.9792:29241 blocked for more than 144 seconds. [ 819.912719][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 819.921923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.933034][ T31] task:syz.5.9792 state:D stack:28312 pid:29241 tgid:29241 ppid:26719 task_flags:0x440040 flags:0x00004004 [ 819.947536][ T31] Call Trace: [ 819.950835][ T31] [ 819.955677][ T31] __schedule+0x116f/0x5de0 [ 819.960212][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 819.965986][ T31] ? __pfx___schedule+0x10/0x10 [ 819.970854][ T31] ? find_held_lock+0x2b/0x80 [ 819.978407][ T31] ? schedule+0x2d7/0x3a0 [ 819.983482][ T31] schedule+0xe7/0x3a0 [ 819.987569][ T31] io_schedule+0xbf/0x130 [ 819.996277][ T31] bit_wait_io+0x15/0xe0 [ 820.001162][ T31] __wait_on_bit+0x62/0x180 [ 820.009234][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 820.017097][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 820.023209][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 820.029213][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 820.036423][ T31] do_get_write_access+0x93d/0x12a0 [ 820.042375][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 820.048378][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 820.057905][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 820.064359][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 820.069854][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 820.077963][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 820.084791][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.089570][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 820.098510][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 820.105173][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 820.110835][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 820.123086][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 820.128050][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 820.135451][ T31] ext4_dirty_inode+0xd9/0x130 [ 820.140238][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.146005][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 820.152983][ T31] generic_update_time+0xcf/0xf0 [ 820.157949][ T31] file_update_time+0x17d/0x1c0 [ 820.165050][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 820.170101][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 820.177956][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 820.184196][ T31] ? pte_alloc_one+0x2b1/0x380 [ 820.188986][ T31] do_page_mkwrite+0x171/0x380 [ 820.195690][ T31] do_pte_missing+0x29c/0x3fb0 [ 820.202395][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 820.208362][ T31] ? __pmd_alloc+0x3c2/0x870 [ 820.215040][ T31] __handle_mm_fault+0x103d/0x2a40 [ 820.223960][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 820.229439][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 820.237403][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 820.243431][ T31] handle_mm_fault+0x3fe/0xad0 [ 820.248233][ T31] do_user_addr_fault+0x60c/0x1370 [ 820.256216][ T31] exc_page_fault+0x5c/0xc0 [ 820.261653][ T31] asm_exc_page_fault+0x26/0x30 [ 820.266526][ T31] RIP: 0033:0x7f54d266547b [ 820.274121][ T31] RSP: 002b:00007fff3a245ea0 EFLAGS: 00010246 [ 820.281092][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 820.289077][ T31] RDX: 0000001b2ec20000 RSI: 0000000000600000 RDI: 00007f54d2898d50 [ 820.301013][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 820.309660][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 820.320595][ T31] R13: 00000000000927c0 R14: 00000000000a2b4e R15: 00007fff3a246150 [ 820.328609][ T31] [ 820.336105][ T31] INFO: task syz.1.9791:29242 blocked for more than 144 seconds. [ 820.344828][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 820.356171][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.365028][ T31] task:syz.1.9791 state:D stack:28472 pid:29242 tgid:29242 ppid:5999 task_flags:0x440040 flags:0x00004004 [ 820.379304][ T31] Call Trace: [ 820.384284][ T31] [ 820.387231][ T31] __schedule+0x116f/0x5de0 [ 820.396879][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 820.403222][ T31] ? __pfx___schedule+0x10/0x10 [ 820.408813][ T31] ? find_held_lock+0x2b/0x80 [ 820.415978][ T31] ? schedule+0x2d7/0x3a0 [ 820.421083][ T31] schedule+0xe7/0x3a0 [ 820.425169][ T31] io_schedule+0xbf/0x130 [ 820.431721][ T31] bit_wait_io+0x15/0xe0 [ 820.435979][ T31] __wait_on_bit+0x62/0x180 [ 820.442573][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 820.447535][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 820.455973][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 820.462169][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 820.467650][ T31] do_get_write_access+0x93d/0x12a0 [ 820.475622][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 820.481819][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 820.487911][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 820.496996][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 820.504309][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 820.512366][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 820.518373][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.524315][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 820.532023][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 820.537231][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 820.543117][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 820.553489][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 820.558447][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 820.564769][ T31] ext4_dirty_inode+0xd9/0x130 [ 820.571576][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.576344][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 820.581650][ T31] generic_update_time+0xcf/0xf0 [ 820.586602][ T31] file_update_time+0x17d/0x1c0 [ 820.593811][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 820.600464][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 820.607159][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 820.615376][ T31] ? pte_alloc_one+0x2b1/0x380 [ 820.620351][ T31] do_page_mkwrite+0x171/0x380 [ 820.625750][ T31] do_pte_missing+0x29c/0x3fb0 [ 820.633196][ T31] __handle_mm_fault+0x103d/0x2a40 [ 820.638771][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 820.644231][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 820.651710][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 820.656954][ T31] handle_mm_fault+0x3fe/0xad0 [ 820.664015][ T31] do_user_addr_fault+0x60c/0x1370 [ 820.672394][ T31] exc_page_fault+0x5c/0xc0 [ 820.676917][ T31] asm_exc_page_fault+0x26/0x30 [ 820.682060][ T31] RIP: 0033:0x7fdfe046eada [ 820.686475][ T31] RSP: 002b:00007fff9364b0c0 EFLAGS: 00010202 [ 820.694763][ T31] RAX: 0000001b32e20000 RBX: 00007fdfe12e5720 RCX: 0000001b32e1fff8 [ 820.702989][ T31] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fdfe12e5700 [ 820.716641][ T31] RBP: ffffffff822fa567 R08: 00007fdfe07b6038 R09: 00007fdfe07a2000 [ 820.725056][ T31] R10: 00007fdfdfbff008 R11: 0000000000000000 R12: 0000000000000000 [ 820.736143][ T31] R13: 0000000000000001 R14: ffffffff822fac0d R15: 0000000000000001 [ 820.744357][ T31] ? __x64_sys_openat+0x6d/0x210 [ 820.751696][ T31] ? file_open_name+0x407/0x450 [ 820.756573][ T31] [ 820.759873][ T31] INFO: task syz.6.9793:29244 blocked for more than 145 seconds. [ 820.767593][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 820.777183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.791169][ T31] task:syz.6.9793 state:D stack:28792 pid:29244 tgid:29244 ppid:19216 task_flags:0x440040 flags:0x00004004 [ 820.803653][ T31] Call Trace: [ 820.806929][ T31] [ 820.813133][ T31] __schedule+0x116f/0x5de0 [ 820.819834][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 820.824796][ T31] ? __pfx___schedule+0x10/0x10 [ 820.832369][ T31] ? find_held_lock+0x2b/0x80 [ 820.837057][ T31] ? schedule+0x2d7/0x3a0 [ 820.841672][ T31] schedule+0xe7/0x3a0 [ 820.845747][ T31] io_schedule+0xbf/0x130 [ 820.852229][ T31] bit_wait_io+0x15/0xe0 [ 820.856492][ T31] __wait_on_bit+0x62/0x180 [ 820.861398][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 820.866346][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 820.877648][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 820.883658][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 820.892270][ T31] do_get_write_access+0x93d/0x12a0 [ 820.900332][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 820.906329][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 820.915326][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 820.922142][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 820.931289][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 820.936693][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 820.943427][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.949908][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 820.955548][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 820.961704][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 820.969155][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 820.974799][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 820.980481][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 820.985855][ T31] ext4_dirty_inode+0xd9/0x130 [ 820.992624][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.999553][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 821.004595][ T31] generic_update_time+0xcf/0xf0 [ 821.014291][ T31] file_update_time+0x17d/0x1c0 [ 821.020394][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 821.025435][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 821.035227][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 821.042692][ T31] ? pte_alloc_one+0x2b1/0x380 [ 821.049266][ T31] do_page_mkwrite+0x171/0x380 [ 821.054043][ T31] do_pte_missing+0x29c/0x3fb0 [ 821.059548][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 821.064761][ T31] ? __pmd_alloc+0x3c2/0x870 [ 821.071040][ T31] __handle_mm_fault+0x103d/0x2a40 [ 821.076867][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 821.082331][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 821.089514][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 821.094750][ T31] handle_mm_fault+0x3fe/0xad0 [ 821.100431][ T31] do_user_addr_fault+0x60c/0x1370 [ 821.105569][ T31] exc_page_fault+0x5c/0xc0 [ 821.115275][ T31] asm_exc_page_fault+0x26/0x30 [ 821.122816][ T31] RIP: 0033:0x7fdd6f26547b [ 821.129664][ T31] RSP: 002b:00007fffc7a536c0 EFLAGS: 00010246 [ 821.137290][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 821.145282][ T31] RDX: 0000001b32920000 RSI: 0000000000600000 RDI: 00007fdd6f498d50 [ 821.156749][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 821.164818][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 821.174004][ T31] R13: 00000000000927c0 R14: 00000000000a2b52 R15: 00007fffc7a53970 [ 821.183207][ T31] [ 821.187365][ T31] INFO: task syz.0.9794:29245 blocked for more than 145 seconds. [ 821.195081][ T31] Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 821.206637][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.219486][ T31] task:syz.0.9794 state:D stack:28632 pid:29245 tgid:29245 ppid:6007 task_flags:0x440040 flags:0x00000004 [ 821.236554][ T31] Call Trace: [ 821.239841][ T31] [ 821.242793][ T31] __schedule+0x116f/0x5de0 [ 821.248913][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 821.253876][ T31] ? __pfx___schedule+0x10/0x10 [ 821.261325][ T31] ? find_held_lock+0x2b/0x80 [ 821.268104][ T31] ? schedule+0x2d7/0x3a0 [ 821.272466][ T31] schedule+0xe7/0x3a0 [ 821.277865][ T31] io_schedule+0xbf/0x130 [ 821.282213][ T31] bit_wait_io+0x15/0xe0 [ 821.287752][ T31] __wait_on_bit+0x62/0x180 [ 821.292277][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 821.298788][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 821.304201][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 821.311696][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 821.319726][ T31] do_get_write_access+0x93d/0x12a0 [ 821.328394][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 821.334401][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 821.343600][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 821.350886][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 821.357597][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 821.362994][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 821.371669][ T31] ? rcu_is_watching+0x12/0xc0 [ 821.378416][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 821.384073][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 821.390507][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 821.397329][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 821.402979][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 821.409356][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 821.415899][ T31] ext4_dirty_inode+0xd9/0x130 [ 821.421810][ T31] ? rcu_is_watching+0x12/0xc0 [ 821.429739][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 821.437501][ T31] generic_update_time+0xcf/0xf0 [ 821.443080][ T31] file_update_time+0x17d/0x1c0 [ 821.450611][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 821.457123][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 821.462600][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 821.469722][ T31] ? pte_alloc_one+0x2b1/0x380 [ 821.476975][ T31] do_page_mkwrite+0x171/0x380 [ 821.481760][ T31] do_pte_missing+0x29c/0x3fb0 [ 821.487783][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 821.493011][ T31] ? __pmd_alloc+0x3c2/0x870 [ 821.499034][ T31] __handle_mm_fault+0x103d/0x2a40 [ 821.505913][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 821.511381][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 821.518795][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 821.526314][ T31] handle_mm_fault+0x3fe/0xad0 [ 821.531681][ T31] do_user_addr_fault+0x60c/0x1370 [ 821.538271][ T31] exc_page_fault+0x5c/0xc0 [ 821.543412][ T31] asm_exc_page_fault+0x26/0x30 [ 821.551076][ T31] RIP: 0033:0x7f3e9ba6547b [ 821.558098][ T31] RSP: 002b:00007ffda73f1aa0 EFLAGS: 00010246 [ 821.565332][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 821.573305][ T31] RDX: 0000001b32720000 RSI: 0000000000600000 RDI: 00007f3e9bc98d50 [ 821.582565][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 821.593402][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 821.601383][ T31] R13: 00000000000927c0 R14: 00000000000a2bef R15: 00007ffda73f1d50 [ 821.611081][ T31] [ 821.614327][ T31] [ 821.614327][ T31] Showing all locks held in the system: [ 821.622036][ T31] 1 lock held by khungtaskd/31: [ 821.631021][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 821.648246][ T31] 1 lock held by klogd/5192: [ 821.652848][ T31] 3 locks held by syz-executor/5819: [ 821.659975][ T31] #0: ffff8880324ed1c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 821.673977][ T31] #1: ffff88807d986518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 821.684642][ T31] #2: ffff88807d98a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 821.696718][ T31] 2 locks held by getty/25958: [ 821.701483][ T31] #0: ffff888034e520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 821.712454][ T31] #1: ffffc9000c0e92f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 821.725838][ T31] 3 locks held by syz.5.9792/29241: [ 821.731038][ T31] #0: ffff88802522a6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 821.741378][ T31] #1: ffff88807d986518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 821.753661][ T31] #2: ffff88807d98a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 821.766158][ T31] 3 locks held by syz.1.9791/29242: [ 821.771359][ T31] #0: ffff8880557ded08 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 821.784121][ T31] #1: ffff88807d986518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 821.794299][ T31] #2: ffff88807d98a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 821.806915][ T31] 3 locks held by syz.6.9793/29244: [ 821.812139][ T31] #0: ffff8880758d9088 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 821.822142][ T31] #1: ffff88807d986518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 821.835682][ T31] #2: ffff88807d98a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 821.847498][ T31] 3 locks held by syz.0.9794/29245: [ 821.853354][ T31] #0: ffff88807dbc4e48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 821.864321][ T31] #1: ffff88807d986518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 821.876197][ T31] #2: ffff88807d98a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 821.888877][ T31] [ 821.891204][ T31] ============================================= [ 821.891204][ T31] [ 821.900964][ T31] NMI backtrace for cpu 0 [ 821.900984][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 821.901013][ T31] Tainted: [U]=USER [ 821.901019][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 821.901030][ T31] Call Trace: [ 821.901036][ T31] [ 821.901042][ T31] dump_stack_lvl+0x116/0x1f0 [ 821.901070][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 821.901091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 821.901128][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 821.901150][ T31] watchdog+0xf70/0x12c0 [ 821.901181][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.901205][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 821.901232][ T31] ? __kthread_parkme+0x19e/0x250 [ 821.901257][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.901282][ T31] kthread+0x3c2/0x780 [ 821.901310][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901336][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901362][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901388][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901414][ T31] ? rcu_is_watching+0x12/0xc0 [ 821.901433][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901461][ T31] ret_from_fork+0x45/0x80 [ 821.901490][ T31] ? __pfx_kthread+0x10/0x10 [ 821.901518][ T31] ret_from_fork_asm+0x1a/0x30 [ 821.901557][ T31] [ 821.901569][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 822.039419][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 822.052784][ T31] Tainted: [U]=USER [ 822.056575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 822.066625][ T31] Call Trace: [ 822.069898][ T31] [ 822.072911][ T31] dump_stack_lvl+0x3d/0x1f0 [ 822.077518][ T31] panic+0x71c/0x800 [ 822.081429][ T31] ? __pfx_panic+0x10/0x10 [ 822.085851][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 822.090794][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 822.096517][ T31] ? irq_work_queue+0xce/0x100 [ 822.101290][ T31] ? watchdog+0xdda/0x12c0 [ 822.105708][ T31] ? watchdog+0xdcd/0x12c0 [ 822.110129][ T31] watchdog+0xdeb/0x12c0 [ 822.114378][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.119055][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.124259][ T31] ? __kthread_parkme+0x19e/0x250 [ 822.129301][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.133992][ T31] kthread+0x3c2/0x780 [ 822.138087][ T31] ? __pfx_kthread+0x10/0x10 [ 822.142697][ T31] ? __pfx_kthread+0x10/0x10 [ 822.147298][ T31] ? __pfx_kthread+0x10/0x10 [ 822.151897][ T31] ? __pfx_kthread+0x10/0x10 [ 822.156494][ T31] ? rcu_is_watching+0x12/0xc0 [ 822.161266][ T31] ? __pfx_kthread+0x10/0x10 [ 822.165865][ T31] ret_from_fork+0x45/0x80 [ 822.170293][ T31] ? __pfx_kthread+0x10/0x10 [ 822.174887][ T31] ret_from_fork_asm+0x1a/0x30 [ 822.179667][ T31] [ 822.182728][ T31] Kernel Offset: disabled [ 822.187048][ T31] Rebooting in 86400 seconds..