last executing test programs: 37.803655537s ago: executing program 0 (id=2268): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x8, 0x3ff, 0x1, 0x104, 0xfffffffc, &(0x7f00000002c0)}) 37.634659413s ago: executing program 0 (id=2272): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) 37.361669343s ago: executing program 0 (id=2285): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x6, 0x4, {0x6, 0x81c6, 0x1ff, {0x2, 0xb}, {0x5, 0x1}, @condition=[{0x4, 0x6, 0x800, 0x5, 0x200}, {0x6, 0xff, 0x7fff, 0x7, 0xb, 0x9}]}, {0x7ff, 0x2, 0x0, {0xf}, {0x0, 0x2}, @rumble={0x2, 0xdc}}}) 37.247632451s ago: executing program 0 (id=2280): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 37.10006143s ago: executing program 0 (id=2283): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 36.480312711s ago: executing program 0 (id=2296): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) 36.093630202s ago: executing program 32 (id=2296): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) 1.79752422s ago: executing program 3 (id=2835): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x200002) 1.415753128s ago: executing program 3 (id=2841): r0 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) recvmsg$auto(r0, 0x0, 0xe) 1.189208884s ago: executing program 1 (id=2844): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r0, 0x900064b7, r0) 1.177874579s ago: executing program 2 (id=2845): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) 1.098986623s ago: executing program 4 (id=2846): r0 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r0) 1.083529024s ago: executing program 3 (id=2847): r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x101101, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) 986.948988ms ago: executing program 2 (id=2848): r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r0, 0x0, 0x0) 976.620181ms ago: executing program 1 (id=2849): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 919.846082ms ago: executing program 4 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000040)={'bridge_slave_1\x00'}) 739.231109ms ago: executing program 1 (id=2851): r0 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$auto(r0, 0x0, 0x5) 713.286765ms ago: executing program 2 (id=2852): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 700.783813ms ago: executing program 3 (id=2853): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000280)="7bae", 0x107}, 0x4) 687.493778ms ago: executing program 4 (id=2854): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ima/parameters/ahash_bufsize\x00', 0x62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 545.447124ms ago: executing program 1 (id=2855): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x1) 531.289668ms ago: executing program 2 (id=2856): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/mtrr\x00', 0x1, 0x5) 469.543655ms ago: executing program 4 (id=2857): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 344.838273ms ago: executing program 2 (id=2858): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) 322.62393ms ago: executing program 3 (id=2859): r0 = socket(0x28, 0x5, 0x0) connect$auto(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56) 292.22665ms ago: executing program 4 (id=2860): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceClass\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/17, 0x11) 236.794838ms ago: executing program 1 (id=2861): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) lseek$auto(0x3, 0x2, 0x4) 118.713277ms ago: executing program 2 (id=2862): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/queue/nr_requests\x00', 0xa801, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 70.756218ms ago: executing program 4 (id=2863): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c40)=""/25, 0x19) 13.910906ms ago: executing program 1 (id=2864): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) 0s ago: executing program 3 (id=2865): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="b2", 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 82.243963][ T5848] cgroup: Unknown subsys name 'net' [ 82.422746][ T5848] cgroup: Unknown subsys name 'cpuset' [ 82.432250][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.972910][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.956023][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.958454][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.964907][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.981566][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.989973][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.999713][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.000609][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.008579][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.022773][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.030580][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.032836][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.039592][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.053290][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.061240][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.061832][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.080051][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.088297][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.095955][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.108298][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.116248][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.548531][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.711708][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 86.790746][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.798036][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.805902][ T5861] bridge_slave_0: entered allmulticast mode [ 86.814299][ T5861] bridge_slave_0: entered promiscuous mode [ 86.870083][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.877248][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.884757][ T5861] bridge_slave_1: entered allmulticast mode [ 86.891815][ T5861] bridge_slave_1: entered promiscuous mode [ 87.021618][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.034883][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.072105][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 87.107661][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 87.123511][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.131779][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.141867][ T5857] bridge_slave_0: entered allmulticast mode [ 87.149917][ T5857] bridge_slave_0: entered promiscuous mode [ 87.195143][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.208195][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.215678][ T5857] bridge_slave_1: entered allmulticast mode [ 87.227217][ T5857] bridge_slave_1: entered promiscuous mode [ 87.247151][ T5861] team0: Port device team_slave_0 added [ 87.305573][ T5861] team0: Port device team_slave_1 added [ 87.356961][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.378230][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.386031][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.412428][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.437817][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.456886][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.464113][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.490361][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.558064][ T5857] team0: Port device team_slave_0 added [ 87.589955][ T5857] team0: Port device team_slave_1 added [ 87.596515][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.605049][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.612886][ T5858] bridge_slave_0: entered allmulticast mode [ 87.621272][ T5858] bridge_slave_0: entered promiscuous mode [ 87.672661][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.683734][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.691438][ T5858] bridge_slave_1: entered allmulticast mode [ 87.698552][ T5858] bridge_slave_1: entered promiscuous mode [ 87.717460][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.724842][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.732459][ T5860] bridge_slave_0: entered allmulticast mode [ 87.740227][ T5860] bridge_slave_0: entered promiscuous mode [ 87.775888][ T5861] hsr_slave_0: entered promiscuous mode [ 87.783329][ T5861] hsr_slave_1: entered promiscuous mode [ 87.790567][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.798285][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.806006][ T5860] bridge_slave_1: entered allmulticast mode [ 87.813372][ T5860] bridge_slave_1: entered promiscuous mode [ 87.820931][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.828378][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.855075][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.895485][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.903053][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.929273][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.943045][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.956226][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.011530][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.024502][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.079724][ T5863] Bluetooth: hci0: command tx timeout [ 88.097267][ T5858] team0: Port device team_slave_0 added [ 88.106403][ T5858] team0: Port device team_slave_1 added [ 88.140523][ T5860] team0: Port device team_slave_0 added [ 88.169099][ T5863] Bluetooth: hci3: command tx timeout [ 88.175944][ T5863] Bluetooth: hci2: command tx timeout [ 88.195127][ T5860] team0: Port device team_slave_1 added [ 88.223763][ T5857] hsr_slave_0: entered promiscuous mode [ 88.231296][ T5857] hsr_slave_1: entered promiscuous mode [ 88.238041][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 88.244167][ T5863] Bluetooth: hci1: command tx timeout [ 88.244287][ T5857] Cannot create hsr debugfs directory [ 88.275445][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.282833][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.310811][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.344753][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.352087][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.378539][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.392213][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.399359][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.425731][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.451416][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.458477][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.485359][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.626008][ T5858] hsr_slave_0: entered promiscuous mode [ 88.632498][ T5858] hsr_slave_1: entered promiscuous mode [ 88.638631][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 88.644969][ T5858] Cannot create hsr debugfs directory [ 88.682666][ T5860] hsr_slave_0: entered promiscuous mode [ 88.691875][ T5860] hsr_slave_1: entered promiscuous mode [ 88.698324][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 88.704472][ T5860] Cannot create hsr debugfs directory [ 88.996030][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.010568][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.054003][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.087610][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.174081][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.185750][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.196208][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.212093][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.332710][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.346282][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.367564][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.382646][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.473874][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.486401][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.521079][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.536705][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.566143][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.648613][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.659442][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.707906][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.715568][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.736591][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.763448][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.770718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.802387][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.809713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.842651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.849825][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.885713][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.981734][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.002977][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.034408][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.043172][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.073526][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.093604][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.100875][ T3974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.135327][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.142834][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.169347][ T5863] Bluetooth: hci0: command tx timeout [ 90.239006][ T5863] Bluetooth: hci3: command tx timeout [ 90.244466][ T5863] Bluetooth: hci2: command tx timeout [ 90.277010][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.284690][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.320827][ T5875] Bluetooth: hci1: command tx timeout [ 90.657390][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.671974][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.783690][ T5861] veth0_vlan: entered promiscuous mode [ 90.830998][ T5857] veth0_vlan: entered promiscuous mode [ 90.862651][ T5861] veth1_vlan: entered promiscuous mode [ 90.872256][ T5857] veth1_vlan: entered promiscuous mode [ 90.955262][ T5857] veth0_macvtap: entered promiscuous mode [ 90.973442][ T5857] veth1_macvtap: entered promiscuous mode [ 90.994142][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.002507][ T5861] veth0_macvtap: entered promiscuous mode [ 91.016769][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.026605][ T5861] veth1_macvtap: entered promiscuous mode [ 91.066763][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.082469][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.104303][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.118148][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.159759][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.202795][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213185][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.237740][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.247574][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.258501][ T5860] veth0_vlan: entered promiscuous mode [ 91.275438][ T5858] veth0_vlan: entered promiscuous mode [ 91.304225][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.320979][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330804][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345376][ T5860] veth1_vlan: entered promiscuous mode [ 91.396510][ T5858] veth1_vlan: entered promiscuous mode [ 91.486910][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.496197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.507724][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.516166][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.532976][ T5860] veth0_macvtap: entered promiscuous mode [ 91.568811][ T5860] veth1_macvtap: entered promiscuous mode [ 91.597471][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.623473][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.633627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.652155][ T5858] veth0_macvtap: entered promiscuous mode [ 91.696334][ T5858] veth1_macvtap: entered promiscuous mode [ 91.707268][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.725305][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740499][ T1320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.741516][ T3974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.757892][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.777003][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.777884][ T3974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.804010][ T1320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816965][ T1320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.831391][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.917142][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.965091][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975665][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086941][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.101227][ T10] cfg80211: failed to load regulatory.db [ 92.218667][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.226752][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.239780][ T5875] Bluetooth: hci0: command tx timeout [ 92.320985][ T5875] Bluetooth: hci2: command tx timeout [ 92.326629][ T5875] Bluetooth: hci3: command tx timeout [ 92.401078][ T5875] Bluetooth: hci1: command tx timeout [ 92.444932][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.471834][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.513967][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.529024][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.676749][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.691215][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.405512][ T6001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.319244][ T5875] Bluetooth: hci0: command tx timeout [ 94.400061][ T5875] Bluetooth: hci3: command tx timeout [ 94.405784][ T5875] Bluetooth: hci2: command tx timeout [ 94.418556][ T6042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.479483][ T5875] Bluetooth: hci1: command tx timeout [ 94.567207][ T30] audit: type=1800 audit(1754630024.923:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.48" name="features" dev="configfs" ino=7310 res=0 errno=0 [ 98.042093][ T30] audit: type=1800 audit(1754630028.403:3): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.124" name="lu_gp_id" dev="configfs" ino=8549 res=0 errno=0 [ 98.976338][ T6236] Process accounting resumed [ 105.231357][ T5875] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 107.287871][ T6622] syz.2.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.093284][ T6700] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.683977][ T6725] ======================================================= [ 109.683977][ T6725] WARNING: The mand mount option has been deprecated and [ 109.683977][ T6725] and is ignored by this kernel. Remove the mand [ 109.683977][ T6725] option from the mount to silence this warning. [ 109.683977][ T6725] ======================================================= [ 114.893384][ T6938] ima: policy update failed [ 114.938950][ T30] audit: type=1802 audit(1843104522.880:4): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.490" res=0 errno=0 [ 115.568528][ T6969] capability: warning: `syz.3.505' uses deprecated v2 capabilities in a way that may be insecure [ 117.573887][ T7069] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.797168][ T7131] random: crng reseeded on system resumption [ 119.417823][ T7161] nfs: Bad value for 'source' [ 119.744972][ T5875] Bluetooth: hci0: unexpected event 0x06 length: 124 > 3 [ 121.346562][ T30] audit: type=1800 audit(1843104529.300:5): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.648" name="dummy_udc" dev="gadgetfs" ino=6023 res=0 errno=0 [ 122.244541][ T7295] Invalid ELF header magic: != ELF [ 122.664684][ T30] audit: type=1800 audit(1843104530.620:6): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.676" name="trace_pipe" dev="tracefs" ino=1121 res=0 errno=0 [ 123.935887][ T30] audit: type=1800 audit(1843104534.884:7): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.706" name="version" dev="configfs" ino=11589 res=0 errno=0 [ 125.408639][ T7453] Unable to find swap-space signature [ 126.865993][ T30] audit: type=1326 audit(1843104537.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.0.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b418ebe9 code=0x0 [ 128.281383][ T7591] syz.3.812(7591): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 128.785786][ T7617] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.199924][ T7639] futex_wake_op: syz.1.836 tries to shift op by -2048; fix this program [ 130.309831][ T7690] ptrace attach of "./syz-executor exec"[5861] was attempted by "./syz-executor exec"[7690] [ 132.607594][ T30] audit: type=1800 audit(1843104543.554:9): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.912" name="discovery_nqn" dev="configfs" ino=12890 res=0 errno=0 [ 133.304088][ T7829] Unable to find swap-space signature [ 134.506534][ T7889] Unable to find swap-space signature [ 134.762348][ T30] audit: type=1800 audit(1843104545.714:10): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.964" name="dbroot" dev="configfs" ino=13342 res=0 errno=0 [ 135.178495][ T7921] Unable to find swap-space signature [ 136.573635][ T5875] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 138.165579][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.192525][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.577796][ T8374] syz_tun: tun_chr_ioctl cmd 1074025679 [ 146.736180][ T8317] kexec: Could not allocate control_code_buffer [ 148.618584][ T8490] mmap: syz.2.1254 (8490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.009112][ T8576] syz_tun: tun_chr_ioctl cmd 1074025680 [ 150.441813][ T30] audit: type=1800 audit(4294967303.227:11): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1308" name="trace_pipe" dev="tracefs" ino=1078 res=0 errno=0 [ 151.235775][ T8652] syz_tun: tun_chr_ioctl cmd 2147767520 [ 153.436633][ T8795] delete_channel: no stack [ 153.704516][ T8816] block2mtd: device name too long [ 153.852076][ T8824] binder: 8823:8824 ioctl 541b 38 returned -22 [ 154.094392][ T5950] Process accounting resumed [ 154.376544][ T8858] syz.2.1435 (8858): drop_caches: 0 [ 156.085580][ T8967] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 157.089637][ T9021] vhci_hcd: invalid port number 16 [ 157.130038][ T9021] vhci_hcd: invalid port number 16 [ 158.123926][ T8997] kexec: Could not allocate control_code_buffer [ 158.250356][ T9070] delete_channel: no stack [ 158.305948][ T9077] kAFS: Invalid Command on /proc/fs/afs/cells file [ 158.386706][ T9079] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.2.1543: 7 [ 159.633651][ T9140] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 160.040314][ T9087] kexec: Could not allocate control_code_buffer [ 160.195838][ T9168] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 161.442757][ T30] audit: type=1800 audit(4294967314.284:12): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="trace_pipe" dev="tracefs" ino=1078 res=0 errno=0 [ 162.817500][ T9318] kAFS: Invalid Command on /proc/fs/afs/cells file [ 163.209615][ T9336] vhci_hcd: invalid port number 16 [ 163.214785][ T9336] vhci_hcd: invalid port number 16 [ 163.277990][ T9340] kAFS: Invalid Command on /proc/fs/afs/cells file [ 163.392870][ T9338] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 163.413855][ T9338] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 163.420761][ T9346] vhci_hcd: invalid port number 16 [ 163.427527][ T9346] vhci_hcd: invalid port number 16 [ 163.428408][ T9338] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 163.454341][ T9338] page_type: f5(slab) [ 163.473058][ T9338] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 163.503476][ T9338] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 163.550994][ T9338] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 163.582900][ T9338] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 163.592897][ T9338] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 163.610443][ T9338] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 163.626116][ T9338] page dumped because: unmovable page [ 163.641277][ T9338] page_owner tracks the page as allocated [ 163.650534][ T9338] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8959, tgid 8959 (syz-executor), ts 155960651303, free_ts 155949429156 [ 163.686935][ T9338] post_alloc_hook+0x1c0/0x230 [ 163.691871][ T9338] get_page_from_freelist+0x132b/0x38e0 [ 163.706181][ T9338] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 163.712381][ T9338] alloc_pages_mpol+0x1fb/0x550 [ 163.719605][ T9338] new_slab+0x247/0x330 [ 163.729692][ T9338] ___slab_alloc+0xcf2/0x1740 [ 163.744728][ T9338] __slab_alloc.constprop.0+0x56/0xb0 [ 163.760967][ T9338] __kmalloc_noprof+0x2f2/0x510 [ 163.769095][ T9358] binder: 9357:9358 ioctl 541b 38 returned -22 [ 163.776817][ T9338] tomoyo_realpath_from_path+0xc2/0x6e0 [ 163.782965][ T9338] tomoyo_path_perm+0x274/0x460 [ 163.793103][ T9338] tomoyo_path_symlink+0x97/0xe0 [ 163.798509][ T9338] security_path_symlink+0x152/0x2e0 [ 163.807083][ T9338] do_symlinkat+0x10d/0x310 [ 163.811738][ T9338] __x64_sys_symlinkat+0x93/0xc0 [ 163.818847][ T9338] do_syscall_64+0xcd/0x490 [ 163.823513][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.834452][ T9338] page last free pid 5857 tgid 5857 stack trace: [ 163.856202][ T9338] __free_frozen_pages+0x7d5/0x10f0 [ 163.875977][ T9338] __put_partials+0x165/0x1c0 [ 163.881203][ T9338] qlist_free_all+0x4d/0x120 [ 163.900489][ T9338] kasan_quarantine_reduce+0x195/0x1e0 [ 163.911120][ T9338] __kasan_slab_alloc+0x69/0x90 [ 163.921480][ T9338] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 163.931583][ T9338] vm_area_dup+0x27/0x8d0 [ 163.943448][ T9338] dup_mmap+0x877/0x21d0 [ 163.952718][ T9338] copy_process+0x4081/0x7690 [ 163.965483][ T9338] kernel_clone+0xfc/0x930 [ 163.970544][ T9338] __do_sys_clone+0xce/0x120 [ 163.975413][ T9338] do_syscall_64+0xcd/0x490 [ 163.985363][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.636686][ T9401] [ 167.430730][ T9551] hub 1-0:1.0: USB hub found [ 167.445092][ T9551] hub 1-0:1.0: 1 port detected [ 167.771549][ T9575] kAFS: Invalid Command on /proc/fs/afs/cells file [ 168.359844][ T9613] bond0: option mode: unable to set because the bond device is up [ 169.511359][ T9688] blktrace: Concurrent blktraces are not allowed on loop2 [ 169.912477][ T9715] blktrace: Concurrent blktraces are not allowed on loop2 [ 170.099019][ T9724] ima: policy update failed [ 170.103787][ T30] audit: type=1802 audit(4294967322.999:13): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1862" res=0 errno=0 [ 172.813762][ T9895] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 172.814354][ T9894] ima: policy update failed [ 172.839315][ T30] audit: type=1802 audit(4294967325.733:14): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1944" res=0 errno=0 [ 173.743658][ T9953] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 174.331822][ T9986] ceph: Failed to parse sending metrics switch value 'P^' [ 174.436990][ T9989] nvme_fcloop: unknown parameter or missing value '^/]' [ 176.838815][T10118] syz.1.2055: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.898772][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.1.2055 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 176.898811][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.898829][T10118] Call Trace: [ 176.898838][T10118] [ 176.898848][T10118] dump_stack_lvl+0x16c/0x1f0 [ 176.898883][T10118] warn_alloc+0x248/0x3a0 [ 176.898914][T10118] ? __pfx_warn_alloc+0x10/0x10 [ 176.898959][T10118] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 176.898987][T10118] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 176.899012][T10118] ? __pfx___might_resched+0x10/0x10 [ 176.899039][T10118] ? rcu_is_watching+0x12/0xc0 [ 176.899064][T10118] ? trace_contention_end+0xdd/0x130 [ 176.899094][T10118] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 176.899123][T10118] ? tomoyo_path_number_perm+0x295/0x580 [ 176.899155][T10118] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.899187][T10118] ? __pfx___mutex_lock+0x10/0x10 [ 176.899218][T10118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.899252][T10118] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 176.899282][T10118] __vmalloc_node_noprof+0xad/0xf0 [ 176.899302][T10118] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 176.899335][T10118] dvb_dvr_do_ioctl+0x15d/0x290 [ 176.899368][T10118] dvb_usercopy+0x164/0x340 [ 176.899396][T10118] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 176.899427][T10118] ? __pfx_dvb_usercopy+0x10/0x10 [ 176.899470][T10118] ? __fget_files+0x20e/0x3c0 [ 176.899506][T10118] dvb_dvr_ioctl+0x29/0x40 [ 176.899533][T10118] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 176.899560][T10118] __x64_sys_ioctl+0x18e/0x210 [ 176.899600][T10118] do_syscall_64+0xcd/0x490 [ 176.899630][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.899653][T10118] RIP: 0033:0x7fd5d138ebe9 [ 176.899682][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.899705][T10118] RSP: 002b:00007fd5d21fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.899729][T10118] RAX: ffffffffffffffda RBX: 00007fd5d15b5fa0 RCX: 00007fd5d138ebe9 [ 176.899744][T10118] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 176.899760][T10118] RBP: 00007fd5d1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 176.899775][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.899788][T10118] R13: 00007fd5d15b6038 R14: 00007fd5d15b5fa0 R15: 00007ffc6db5a678 [ 176.899823][T10118] [ 176.899833][T10118] Mem-Info: [ 177.151701][T10118] active_anon:4944 inactive_anon:0 isolated_anon:0 [ 177.151701][T10118] active_file:13990 inactive_file:39960 isolated_file:0 [ 177.151701][T10118] unevictable:768 dirty:446 writeback:0 [ 177.151701][T10118] slab_reclaimable:10941 slab_unreclaimable:91558 [ 177.151701][T10118] mapped:24083 shmem:1357 pagetables:1113 [ 177.151701][T10118] sec_pagetables:0 bounce:0 [ 177.151701][T10118] kernel_misc_reclaimable:0 [ 177.151701][T10118] free:1337123 free_pcp:11712 free_cma:0 [ 177.231607][T10118] Node 0 active_anon:19676kB inactive_anon:0kB active_file:55900kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96328kB dirty:1780kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11148kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.280235][T10118] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.317669][T10118] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.414238][T10118] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 177.427705][T10118] Node 0 DMA32 free:1434808kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19632kB inactive_anon:0kB active_file:55900kB inactive_file:158260kB unevictable:1536kB writepending:1780kB present:3129332kB managed:2539660kB mlocked:0kB bounce:0kB free_pcp:31664kB local_pcp:19280kB free_cma:0kB [ 177.461582][T10118] lowmem_reserve[]: 0 0 1 1 1 [ 177.473072][T10118] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 177.533697][T10118] lowmem_reserve[]: 0 0 0 0 0 [ 177.554650][T10118] Node 1 Normal free:3898316kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:256kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15552kB local_pcp:8416kB free_cma:0kB [ 177.601224][T10118] lowmem_reserve[]: 0 0 0 0 0 [ 177.607054][T10118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.624809][T10118] Node 0 DMA32: 1384*4kB (M) 1917*8kB (UME) 1541*16kB (UME) 1445*32kB (UM) 563*64kB (UME) 199*128kB (UME) 122*256kB (UM) 56*512kB (UME) 33*1024kB (UME) 12*2048kB (UME) 284*4096kB (M) = 1434808kB [ 177.675999][T10118] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 177.691993][T10118] Node 1 Normal: 197*4kB (UME) 31*8kB (U) 38*16kB (UE) 125*32kB (UE) 37*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3898316kB [ 177.717394][T10118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.727501][T10118] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.742187][T10118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.752107][T10118] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.796834][T10118] 55300 total pagecache pages [ 177.801592][T10118] 0 pages in swap cache [ 177.813486][T10118] Free swap = 124996kB [ 177.817705][T10118] Total swap = 124996kB [ 177.832303][T10118] 2097051 pages RAM [ 177.839082][T10118] 0 pages HighMem/MovableOnly [ 177.867109][T10118] 430174 pages reserved [ 177.871384][T10118] 0 pages cma reserved [ 177.895046][T10162] ceph: Failed to parse sending metrics switch value 'P^' [ 178.143188][T10177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.405153][T10190] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 179.203645][T10238] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 179.203645][T10238] [ 179.797951][T10275] hub 1-0:1.0: USB hub found [ 179.826869][T10275] hub 1-0:1.0: 1 port detected [ 181.184849][T10363] hub 1-0:1.0: USB hub found [ 181.200274][T10363] hub 1-0:1.0: 1 port detected [ 181.749466][T10397] hub 1-0:1.0: USB hub found [ 181.754569][T10397] hub 1-0:1.0: 1 port detected [ 182.251681][T10428] hub 1-0:1.0: USB hub found [ 182.281837][T10428] hub 1-0:1.0: 1 port detected [ 182.934936][T10458] hub 1-0:1.0: USB hub found [ 182.966392][T10458] hub 1-0:1.0: 1 port detected [ 183.165241][T10468] hub 1-0:1.0: USB hub found [ 183.187585][T10468] hub 1-0:1.0: 1 port detected [ 183.472547][ T5953] smpboot: CPU 1 is now offline [ 186.232917][ T3974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.353403][ T3974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.501693][ T3974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.900661][ T3974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.229268][T10643] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 187.358616][ T3974] bridge_slave_1: left allmulticast mode [ 187.372599][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.384922][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.395811][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.406345][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.416139][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.466582][ T3974] bridge_slave_1: left promiscuous mode [ 187.499994][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.618518][ T3974] bridge_slave_0: left allmulticast mode [ 187.662395][ T3974] bridge_slave_0: left promiscuous mode [ 187.668314][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.492798][ T5863] Bluetooth: hci1: command tx timeout [ 189.516812][ T3974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.543570][ T3974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.602829][ T3974] bond0 (unregistering): Released all slaves [ 190.861587][T10648] chnl_net:caif_netlink_parms(): no params data found [ 190.974394][T10755] bond0: Unable to set down delay as MII monitoring is disabled [ 191.061547][ T3974] hsr_slave_0: left promiscuous mode [ 191.096354][ T3974] hsr_slave_1: left promiscuous mode [ 191.136687][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.173147][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.239413][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.302528][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.514282][ T3974] veth1_macvtap: left promiscuous mode [ 191.520084][ T3974] veth0_macvtap: left promiscuous mode [ 191.562054][ T5863] Bluetooth: hci1: command tx timeout [ 191.584385][ T3974] veth1_vlan: left promiscuous mode [ 191.589886][ T3974] veth0_vlan: left promiscuous mode [ 192.946546][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.476326][ T3974] team0 (unregistering): Port device team_slave_1 removed [ 193.595654][ T3974] team0 (unregistering): Port device team_slave_0 removed [ 193.633154][ T5863] Bluetooth: hci1: command tx timeout [ 193.879104][T10843] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 193.901230][T10843] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 193.923919][T10843] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 193.945631][T10843] page_type: f5(slab) [ 193.958517][T10843] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 193.979155][T10843] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 194.036568][T10843] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 194.055194][T10843] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 194.081263][T10843] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 194.102214][T10843] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 194.125557][T10843] page dumped because: unmovable page [ 194.141796][T10843] page_owner tracks the page as allocated [ 194.152348][T10843] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 193429485350, free_ts 193315725876 [ 194.175823][T10843] post_alloc_hook+0x1c0/0x230 [ 194.180911][T10843] get_page_from_freelist+0x132b/0x38e0 [ 194.186630][T10843] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 194.198184][T10843] alloc_pages_mpol+0x1fb/0x550 [ 194.203647][T10843] new_slab+0x247/0x330 [ 194.207959][T10843] ___slab_alloc+0xcf2/0x1740 [ 194.214296][T10843] __slab_alloc.constprop.0+0x56/0xb0 [ 194.221544][T10843] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 194.229846][T10843] kmalloc_reserve+0xef/0x2c0 [ 194.234754][T10843] __alloc_skb+0x166/0x380 [ 194.240376][T10843] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 194.246243][T10843] process_one_work+0x9cc/0x1b70 [ 194.252942][T10843] worker_thread+0x6c8/0xf10 [ 194.258875][T10843] kthread+0x3c5/0x780 [ 194.263157][T10843] ret_from_fork+0x5d7/0x6f0 [ 194.269599][T10843] ret_from_fork_asm+0x1a/0x30 [ 194.274606][T10843] page last free pid 3974 tgid 3974 stack trace: [ 194.282864][T10843] __free_frozen_pages+0x7d5/0x10f0 [ 194.289722][T10843] __put_partials+0x165/0x1c0 [ 194.294598][T10843] qlist_free_all+0x4d/0x120 [ 194.303149][T10843] kasan_quarantine_reduce+0x195/0x1e0 [ 194.310348][T10843] __kasan_slab_alloc+0x69/0x90 [ 194.315415][T10843] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 194.322234][T10843] netdevice_event+0x365/0x9d0 [ 194.327119][T10843] notifier_call_chain+0xbc/0x410 [ 194.342707][T10843] call_netdevice_notifiers_info+0xbe/0x140 [ 194.358160][T10843] unregister_netdevice_many_notify+0xf76/0x24c0 [ 194.371219][T10843] default_device_exit_batch+0x853/0xaf0 [ 194.377099][T10843] ops_undo_list+0x363/0xab0 [ 194.383030][T10843] cleanup_net+0x408/0x890 [ 194.389243][T10843] process_one_work+0x9cc/0x1b70 [ 194.394297][T10843] worker_thread+0x6c8/0xf10 [ 194.402351][T10843] kthread+0x3c5/0x780 [ 195.043236][T10648] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.089641][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.130014][T10648] bridge_slave_0: entered allmulticast mode [ 195.164299][T10648] bridge_slave_0: entered promiscuous mode [ 195.202800][T10648] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.248181][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.283127][T10648] bridge_slave_1: entered allmulticast mode [ 195.322548][T10648] bridge_slave_1: entered promiscuous mode [ 195.529968][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.595414][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.702089][ T5863] Bluetooth: hci1: command tx timeout [ 195.768339][T10648] team0: Port device team_slave_0 added [ 195.802791][T10648] team0: Port device team_slave_1 added [ 195.957063][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.001033][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.130329][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.186226][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.216988][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.387322][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.675159][T10648] hsr_slave_0: entered promiscuous mode [ 196.700918][T10648] hsr_slave_1: entered promiscuous mode [ 196.725803][T10648] debugfs: 'hsr0' already exists in 'hsr' [ 196.754120][T10648] Cannot create hsr debugfs directory [ 197.062972][T10913] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 197.292274][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 197.298971][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.332623][ T9] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 197.453177][T10648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.531700][T10648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.618480][T10648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.701006][T10648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.018920][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.025410][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.133459][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.241338][T10648] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.343317][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.350591][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.448210][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.455499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.687541][T10648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.367373][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.375230][ T9] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 199.405142][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.242146][T11036] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 200.411621][T10648] veth0_vlan: entered promiscuous mode [ 200.479857][T10648] veth1_vlan: entered promiscuous mode [ 200.612654][T10648] veth0_macvtap: entered promiscuous mode [ 200.679610][T10648] veth1_macvtap: entered promiscuous mode [ 200.783361][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.847460][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.913484][ T1320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.958421][ T1320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.043668][ T1320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.065879][T11064] Invalid ELF header magic: != ELF [ 201.119364][ T1320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.305795][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.371082][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.433699][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.521803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.579283][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.189617][T11105] nvme_fcloop: unknown parameter or missing value '7' [ 205.768413][T11255] syz.1.2541 uses obsolete (PF_INET,SOCK_PACKET) [ 207.035512][ T30] audit: type=1806 audit(4294967360.121:15): res=-14 [ 207.531330][T11318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.718843][T11318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.753366][ T30] audit: type=1800 audit(4294967360.835:16): pid=11330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2573" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 207.923297][T11318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.119305][T11318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.354718][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 208.540015][T11351] kAFS: Invalid Command on /proc/fs/afs/cells file [ 210.877185][T11454] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 211.540105][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 212.060423][T11512] vhci_hcd: vhci_device speed not set [ 213.888624][T11602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 217.264194][T11765] nvme_fcloop: unknown parameter or missing value '7' [ 218.217551][T11810] mmap: syz.1.2793 (11810): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 220.999024][T11924] Setting dangerous option i915.mitigations - tainting kernel [ 221.061385][T11924] Bad "i915.mitigations=!hóì@ÛSÌ", 'hóì@ÛSÌ' is unknown [ 221.683464][T11948] ima: policy update failed [ 221.725674][ T30] audit: type=1802 audit(4294967374.878:17): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2848" res=0 errno=0 [ 221.743071][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.039175][ T30] audit: type=1800 audit(4294967375.199:18): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2853" name="discovery_nqn" dev="configfs" ino=26653 res=0 errno=0 [ 222.060128][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.613086][T11983] [ 222.615593][T11983] ====================================================== [ 222.622825][T11983] WARNING: possible circular locking dependency detected [ 222.629930][T11983] 6.16.0-syzkaller-12016-gbec077162bd0 #0 Tainted: G U [ 222.638290][T11983] ------------------------------------------------------ [ 222.645320][T11983] syz.2.2862/11983 is trying to acquire lock: [ 222.651450][T11983] ffff888142bed468 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 222.661444][T11983] [ 222.661444][T11983] but task is already holding lock: [ 222.668876][T11983] ffff888142becf28 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 222.680088][T11983] [ 222.680088][T11983] which lock already depends on the new lock. [ 222.680088][T11983] [ 222.690650][T11983] [ 222.690650][T11983] the existing dependency chain (in reverse order) is: [ 222.699711][T11983] [ 222.699711][T11983] -> #3 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 222.708454][T11983] blk_alloc_queue+0x619/0x760 [ 222.713741][T11983] blk_mq_alloc_queue+0x172/0x280 [ 222.719281][T11983] __blk_mq_alloc_disk+0x29/0x120 [ 222.725125][T11983] loop_add+0x490/0xb70 [ 222.729809][T11983] loop_init+0x164/0x270 [ 222.734585][T11983] do_one_initcall+0x120/0x6e0 [ 222.739860][T11983] kernel_init_freeable+0x5c2/0x910 [ 222.745691][T11983] kernel_init+0x1c/0x2b0 [ 222.750582][T11983] ret_from_fork+0x5d7/0x6f0 [ 222.755706][T11983] ret_from_fork_asm+0x1a/0x30 [ 222.760980][T11983] [ 222.760980][T11983] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 222.768199][T11983] fs_reclaim_acquire+0x102/0x150 [ 222.773740][T11983] prepare_alloc_pages+0x162/0x610 [ 222.779386][T11983] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 222.785790][T11983] __alloc_pages_noprof+0xb/0x1b0 [ 222.791327][T11983] pcpu_populate_chunk+0x110/0xb00 [ 222.796944][T11983] pcpu_alloc_noprof+0x86a/0x1470 [ 222.802569][T11983] __alloc+0xa8/0x190 [ 222.807073][T11983] alloc_bulk+0x413/0xc80 [ 222.811937][T11983] bpf_mem_alloc_init+0x84b/0xd40 [ 222.817508][T11983] htab_map_alloc+0xe95/0x1570 [ 222.822815][T11983] map_create+0x58f/0x1f80 [ 222.827783][T11983] __sys_bpf+0x44d2/0x4de0 [ 222.833008][T11983] __x64_sys_bpf+0x78/0xc0 [ 222.838031][T11983] do_syscall_64+0xcd/0x490 [ 222.843109][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.849633][T11983] [ 222.849633][T11983] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 222.857365][T11983] __mutex_lock+0x193/0x10b0 [ 222.862655][T11983] pcpu_alloc_noprof+0xb4c/0x1470 [ 222.868199][T11983] sbitmap_init_node+0x2fd/0x770 [ 222.874015][T11983] sbitmap_queue_init_node+0x41/0x560 [ 222.879921][T11983] blk_mq_init_tags+0x12d/0x2b0 [ 222.885391][T11983] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 222.891465][T11983] blk_mq_init_sched+0x30c/0x610 [ 222.897147][T11983] elevator_switch+0x1e1/0x7f0 [ 222.902497][T11983] elevator_change+0x2ac/0x400 [ 222.907787][T11983] elevator_set_default+0x2c4/0x360 [ 222.913510][T11983] blk_register_queue+0x393/0x4f0 [ 222.919139][T11983] __add_disk+0x74a/0xf00 [ 222.923985][T11983] add_disk_fwnode+0x13f/0x5d0 [ 222.929272][T11983] nbd_dev_add+0x783/0xbb0 [ 222.934310][T11983] nbd_init+0x181/0x320 [ 222.939188][T11983] do_one_initcall+0x120/0x6e0 [ 222.944465][T11983] kernel_init_freeable+0x5c2/0x910 [ 222.950272][T11983] kernel_init+0x1c/0x2b0 [ 222.955120][T11983] ret_from_fork+0x5d7/0x6f0 [ 222.960247][T11983] ret_from_fork_asm+0x1a/0x30 [ 222.965542][T11983] [ 222.965542][T11983] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 222.973361][T11983] __lock_acquire+0x12a6/0x1ce0 [ 222.978736][T11983] lock_acquire+0x179/0x350 [ 222.983844][T11983] __mutex_lock+0x193/0x10b0 [ 222.989127][T11983] queue_requests_store+0x1c7/0x310 [ 222.995207][T11983] queue_attr_store+0x26b/0x310 [ 223.000838][T11983] sysfs_kf_write+0xf2/0x150 [ 223.005963][T11983] kernfs_fop_write_iter+0x354/0x510 [ 223.011851][T11983] vfs_write+0x6c4/0x1150 [ 223.016854][T11983] ksys_write+0x12a/0x250 [ 223.021893][T11983] do_syscall_64+0xcd/0x490 [ 223.027013][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.033609][T11983] [ 223.033609][T11983] other info that might help us debug this: [ 223.033609][T11983] [ 223.044003][T11983] Chain exists of: [ 223.044003][T11983] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 223.044003][T11983] [ 223.058567][T11983] Possible unsafe locking scenario: [ 223.058567][T11983] [ 223.066446][T11983] CPU0 CPU1 [ 223.071813][T11983] ---- ---- [ 223.077185][T11983] lock(&q->q_usage_counter(io)#22); [ 223.082670][T11983] lock(fs_reclaim); [ 223.089256][T11983] lock(&q->q_usage_counter(io)#22); [ 223.097235][T11983] lock(&q->elevator_lock); [ 223.101824][T11983] [ 223.101824][T11983] *** DEADLOCK *** [ 223.101824][T11983] [ 223.110005][T11983] 6 locks held by syz.2.2862/11983: [ 223.115365][T11983] #0: ffff888075106d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 223.124416][T11983] #1: ffff8880249bc428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 223.133576][T11983] #2: ffff888028bae488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 223.143696][T11983] #3: ffff888141f451e8 (kn->active#236){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 223.153812][T11983] #4: ffff888142becf28 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 223.165570][T11983] #5: ffff888142becf60 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 223.178113][T11983] [ 223.178113][T11983] stack backtrace: [ 223.184104][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.2.2862 Tainted: G U 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 223.184152][T11983] Tainted: [U]=USER [ 223.184162][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.184180][T11983] Call Trace: [ 223.184187][T11983] [ 223.184194][T11983] dump_stack_lvl+0x116/0x1f0 [ 223.184214][T11983] print_circular_bug+0x275/0x350 [ 223.184234][T11983] check_noncircular+0x14c/0x170 [ 223.184253][T11983] __lock_acquire+0x12a6/0x1ce0 [ 223.184273][T11983] lock_acquire+0x179/0x350 [ 223.184290][T11983] ? queue_requests_store+0x1c7/0x310 [ 223.184310][T11983] ? __pfx___might_resched+0x10/0x10 [ 223.184327][T11983] ? queue_requests_store+0x1c7/0x310 [ 223.184344][T11983] __mutex_lock+0x193/0x10b0 [ 223.184360][T11983] ? queue_requests_store+0x1c7/0x310 [ 223.184378][T11983] ? mark_held_locks+0x49/0x80 [ 223.184394][T11983] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.184408][T11983] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.184422][T11983] ? __pfx___mutex_lock+0x10/0x10 [ 223.184439][T11983] ? __pfx_autoremove_wake_function+0x10/0x10 [ 223.184458][T11983] ? queue_requests_store+0x1c7/0x310 [ 223.184475][T11983] queue_requests_store+0x1c7/0x310 [ 223.184493][T11983] ? __pfx_queue_requests_store+0x10/0x10 [ 223.184511][T11983] ? __mutex_trylock_common+0xe9/0x250 [ 223.184530][T11983] ? __pfx_queue_requests_store+0x10/0x10 [ 223.184548][T11983] queue_attr_store+0x26b/0x310 [ 223.184564][T11983] ? __pfx_queue_attr_store+0x10/0x10 [ 223.184585][T11983] ? find_held_lock+0x2b/0x80 [ 223.184598][T11983] ? sysfs_file_kobj+0xe4/0x290 [ 223.184621][T11983] ? __pfx_queue_attr_store+0x10/0x10 [ 223.184638][T11983] sysfs_kf_write+0xf2/0x150 [ 223.184653][T11983] kernfs_fop_write_iter+0x354/0x510 [ 223.184665][T11983] ? __pfx_sysfs_kf_write+0x10/0x10 [ 223.184680][T11983] vfs_write+0x6c4/0x1150 [ 223.184696][T11983] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 223.184710][T11983] ? __pfx___mutex_lock+0x10/0x10 [ 223.184725][T11983] ? __pfx_vfs_write+0x10/0x10 [ 223.184744][T11983] ksys_write+0x12a/0x250 [ 223.184759][T11983] ? __pfx_ksys_write+0x10/0x10 [ 223.184777][T11983] do_syscall_64+0xcd/0x490 [ 223.184793][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.184807][T11983] RIP: 0033:0x7f919538ebe9 [ 223.184819][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.184833][T11983] RSP: 002b:00007f91961d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.184846][T11983] RAX: ffffffffffffffda RBX: 00007f91955b5fa0 RCX: 00007f919538ebe9 [ 223.184855][T11983] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003 [ 223.184864][T11983] RBP: 00007f9195411e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.184872][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.184880][T11983] R13: 00007f91955b6038 R14: 00007f91955b5fa0 R15: 00007ffe7538a9f8 [ 223.184893][T11983] [ 223.480240][ C0] vkms_vblank_simulate: vblank timer overrun