last executing test programs: 1.028818836s ago: executing program 0 (id=8527): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.0287483s ago: executing program 1 (id=8528): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0xa, 0xa, 0x7fffffff, 0x108800000, 0xff, 0x6, 0x2be2b3fd, 0x8000, 0x10000, 0x2, 0x7, 0xfffff890, 0x1, 0x2}, 0x80) 910.904109ms ago: executing program 1 (id=8531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_GROUPS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3b4}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x4) 875.073407ms ago: executing program 3 (id=8532): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 842.143951ms ago: executing program 2 (id=8533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) 753.758039ms ago: executing program 1 (id=8534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dedbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) 705.703751ms ago: executing program 3 (id=8535): r0 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 702.792472ms ago: executing program 2 (id=8536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010329bd7000fedbdf250c000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 684.228599ms ago: executing program 0 (id=8537): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5453, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) 594.214768ms ago: executing program 1 (id=8538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 558.599553ms ago: executing program 3 (id=8539): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0xa0, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x8c, 0x2a, "3684a660bdccd1367bc48d95c45654a7d4ef122b5aaf580986f36c8305d02a0134617098711133f1352d29a8989d6853d2b62e6876842b9141c1f1baed01823c40a15b3a9b06aaa8c7fe2bcb43f0e02ab341b1480fd251e4695746cad00d4417d34c9d41ed33d62e634ac67f4a04ac804817cea529436086a5355b67030a24cc223223926569c0ee"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 555.116023ms ago: executing program 2 (id=8540): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) 517.953978ms ago: executing program 0 (id=8541): select$auto(0x9, 0x0, &(0x7f0000000100)={[0x5, 0x1, 0x8000000008, 0x8, 0x6, 0x9, 0x0, 0x5, 0xf8, 0xffffffffffff4029, 0x800, 0x60000000, 0x40, 0x4, 0x87, 0x4]}, 0x0, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) 432.147763ms ago: executing program 1 (id=8542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000004180)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x9f}]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 409.764145ms ago: executing program 2 (id=8543): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) 400.117545ms ago: executing program 3 (id=8544): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 372.227991ms ago: executing program 0 (id=8545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r1, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 257.798509ms ago: executing program 1 (id=8546): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) 249.031144ms ago: executing program 2 (id=8547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 206.394626ms ago: executing program 0 (id=8548): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 161.630659ms ago: executing program 3 (id=8549): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_queues\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x7) 95.612064ms ago: executing program 2 (id=8550): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0x7) 69.66806ms ago: executing program 0 (id=8551): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) 0s ago: executing program 3 (id=8552): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x20008800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 77.094358][ T5817] cgroup: Unknown subsys name 'net' [ 77.205111][ T5817] cgroup: Unknown subsys name 'cpuset' [ 77.213700][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.704088][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.474542][ T5909] mmap: syz.0.72 (5909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.172617][ T6029] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.239793][ T6050] chnl_net:caif_netlink_parms(): no params data found [ 85.398054][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.406806][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.414566][ T6050] bridge_slave_0: entered allmulticast mode [ 85.421994][ T6050] bridge_slave_0: entered promiscuous mode [ 85.490970][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.519657][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.530101][ T6050] bridge_slave_1: entered allmulticast mode [ 85.538462][ T6050] bridge_slave_1: entered promiscuous mode [ 85.592663][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.622330][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.697381][ T6050] team0: Port device team_slave_0 added [ 85.706468][ T6050] team0: Port device team_slave_1 added [ 85.735365][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.742441][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.770318][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.785105][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.792123][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.818273][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.857814][ T6050] hsr_slave_0: entered promiscuous mode [ 85.864150][ T6050] hsr_slave_1: entered promiscuous mode [ 85.990722][ T6050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.003878][ T6050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.014734][ T6050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.025948][ T6050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.099194][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.127031][ T6050] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.140474][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.148063][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.164843][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.171987][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.335093][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.381183][ T6050] veth0_vlan: entered promiscuous mode [ 86.393143][ T6050] veth1_vlan: entered promiscuous mode [ 86.420217][ T6050] veth0_macvtap: entered promiscuous mode [ 86.429800][ T6050] veth1_macvtap: entered promiscuous mode [ 86.451349][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.465216][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.480355][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.490321][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.500151][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.509666][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489955][ T6106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.499629][ T6106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.508577][ T6106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.519775][ T6107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.529853][ T6107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.538470][ T6107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.546571][ T6107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.554689][ T6107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.565013][ T6107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.576634][ T6107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.622446][ T6107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.631734][ T6107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.639496][ T6107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.647741][ T6107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.660766][ T6107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.768452][ T6107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.777670][ T6107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.789692][ T6107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.799184][ T6107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.806902][ T6107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.988922][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.310873][ T6101] chnl_net:caif_netlink_parms(): no params data found [ 89.327669][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 89.404203][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 89.483925][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 89.573309][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.580573][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.588427][ T6101] bridge_slave_0: entered allmulticast mode [ 89.595597][ T6101] bridge_slave_0: entered promiscuous mode [ 89.638378][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.645922][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.653633][ T6101] bridge_slave_1: entered allmulticast mode [ 89.660617][ T6101] bridge_slave_1: entered promiscuous mode [ 89.673696][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.680867][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.688558][ T6102] bridge_slave_0: entered allmulticast mode [ 89.695851][ T6102] bridge_slave_0: entered promiscuous mode [ 89.729545][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.737168][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.744785][ T6102] bridge_slave_1: entered allmulticast mode [ 89.752312][ T6102] bridge_slave_1: entered promiscuous mode [ 89.793265][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.800507][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.807986][ T6108] bridge_slave_0: entered allmulticast mode [ 89.815233][ T6108] bridge_slave_0: entered promiscuous mode [ 89.825590][ T6101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.854639][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.862194][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.869348][ T6108] bridge_slave_1: entered allmulticast mode [ 89.876732][ T6108] bridge_slave_1: entered promiscuous mode [ 89.885813][ T6101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.906513][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.936582][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.943912][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.951061][ T6111] bridge_slave_0: entered allmulticast mode [ 89.958446][ T6111] bridge_slave_0: entered promiscuous mode [ 89.968278][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.997515][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.004800][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.016829][ T6111] bridge_slave_1: entered allmulticast mode [ 90.024128][ T6111] bridge_slave_1: entered promiscuous mode [ 90.041539][ T6108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.054710][ T6101] team0: Port device team_slave_0 added [ 90.083520][ T6108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.094360][ T6101] team0: Port device team_slave_1 added [ 90.107774][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.133801][ T6102] team0: Port device team_slave_0 added [ 90.161178][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.172595][ T6102] team0: Port device team_slave_1 added [ 90.200159][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.219650][ T6108] team0: Port device team_slave_0 added [ 90.237490][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.253319][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.260278][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.287153][ T6101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.322356][ T6108] team0: Port device team_slave_1 added [ 90.328745][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.336039][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.362447][ T6101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.384845][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.392128][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.418506][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.445948][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.466307][ T6111] team0: Port device team_slave_0 added [ 90.473152][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.480584][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.507611][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.540930][ T6111] team0: Port device team_slave_1 added [ 90.572610][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.579741][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.602790][ T5151] Bluetooth: hci1: command tx timeout [ 90.607590][ T6108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.627656][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.636516][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.662675][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.681908][ T5151] Bluetooth: hci0: command tx timeout [ 90.690291][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.697328][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.723572][ T6108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.742741][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.749816][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.761961][ T5151] Bluetooth: hci2: command tx timeout [ 90.776917][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.819051][ T6101] hsr_slave_0: entered promiscuous mode [ 90.825559][ T6101] hsr_slave_1: entered promiscuous mode [ 90.831888][ T6101] debugfs: 'hsr0' already exists in 'hsr' [ 90.837939][ T6101] Cannot create hsr debugfs directory [ 90.904974][ T6102] hsr_slave_0: entered promiscuous mode [ 90.911982][ T6102] hsr_slave_1: entered promiscuous mode [ 90.918049][ T6102] debugfs: 'hsr0' already exists in 'hsr' [ 90.923944][ T5151] Bluetooth: hci3: command tx timeout [ 90.930074][ T6102] Cannot create hsr debugfs directory [ 90.979151][ T6108] hsr_slave_0: entered promiscuous mode [ 90.985586][ T6108] hsr_slave_1: entered promiscuous mode [ 90.992346][ T6108] debugfs: 'hsr0' already exists in 'hsr' [ 90.998100][ T6108] Cannot create hsr debugfs directory [ 91.032335][ T6111] hsr_slave_0: entered promiscuous mode [ 91.038637][ T6111] hsr_slave_1: entered promiscuous mode [ 91.045567][ T6111] debugfs: 'hsr0' already exists in 'hsr' [ 91.051306][ T6111] Cannot create hsr debugfs directory [ 91.203524][ T13] bridge_slave_1: left allmulticast mode [ 91.209316][ T13] bridge_slave_1: left promiscuous mode [ 91.215803][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.226948][ T13] bridge_slave_0: left allmulticast mode [ 91.234027][ T13] bridge_slave_0: left promiscuous mode [ 91.240242][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.494088][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.505078][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.515344][ T13] bond0 (unregistering): Released all slaves [ 91.746624][ T13] hsr_slave_0: left promiscuous mode [ 91.752832][ T13] hsr_slave_1: left promiscuous mode [ 91.758934][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.766454][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.774597][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.782055][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.798763][ T13] veth1_macvtap: left promiscuous mode [ 91.805328][ T13] veth0_macvtap: left promiscuous mode [ 91.810899][ T13] veth1_vlan: left promiscuous mode [ 91.816432][ T13] veth0_vlan: left promiscuous mode [ 91.967077][ T49] cfg80211: failed to load regulatory.db [ 92.134594][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.162953][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.586404][ T6101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.604697][ T6101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.620656][ T6101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.637596][ T6101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.698912][ T5151] Bluetooth: hci1: command tx timeout [ 92.763399][ T5151] Bluetooth: hci0: command tx timeout [ 92.848637][ T5151] Bluetooth: hci2: command tx timeout [ 92.866783][ T6101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.938317][ T6101] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.975728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.983032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.002688][ T5151] Bluetooth: hci3: command tx timeout [ 93.040357][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.047651][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.060364][ T6108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.108338][ T6108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.144382][ T6108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.179297][ T6108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.246522][ T6102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.276964][ T6102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.307189][ T6102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.327245][ T6102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.401640][ T6111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.422881][ T6111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.453430][ T6111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.472281][ T6111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.661531][ T6101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.707134][ T6108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.759891][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.834739][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.858910][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.890252][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.897576][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.925500][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.932806][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.964653][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.971862][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.987091][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.996723][ T6101] veth0_vlan: entered promiscuous mode [ 94.021325][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.028553][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.098373][ T6101] veth1_vlan: entered promiscuous mode [ 94.129306][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.177492][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.184717][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.209118][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.216254][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.291226][ T6101] veth0_macvtap: entered promiscuous mode [ 94.318535][ T6101] veth1_macvtap: entered promiscuous mode [ 94.399376][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.426456][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.468950][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.493106][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.513427][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.542292][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646102][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.756983][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.769432][ T5151] Bluetooth: hci1: command tx timeout [ 94.793548][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.843659][ T5151] Bluetooth: hci0: command tx timeout [ 94.858364][ T6102] veth0_vlan: entered promiscuous mode [ 94.867798][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.879747][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.897922][ T6102] veth1_vlan: entered promiscuous mode [ 94.918811][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.936613][ T5151] Bluetooth: hci2: command tx timeout [ 94.982253][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.084967][ T5151] Bluetooth: hci3: command tx timeout [ 95.135943][ T6102] veth0_macvtap: entered promiscuous mode [ 95.168133][ T6111] veth0_vlan: entered promiscuous mode [ 95.204295][ T6102] veth1_macvtap: entered promiscuous mode [ 95.236532][ T6108] veth0_vlan: entered promiscuous mode [ 95.254567][ T6111] veth1_vlan: entered promiscuous mode [ 95.297368][ T6108] veth1_vlan: entered promiscuous mode [ 95.309422][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.344106][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.374722][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388791][ T6111] veth0_macvtap: entered promiscuous mode [ 95.398752][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.425825][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.451336][ T6111] veth1_macvtap: entered promiscuous mode [ 95.474140][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509105][ T6108] veth0_macvtap: entered promiscuous mode [ 95.547632][ T6108] veth1_macvtap: entered promiscuous mode [ 95.598043][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.659985][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.687506][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.717954][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.754385][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.763586][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.773529][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.791272][ T1100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820130][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.830312][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.847221][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.876208][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.928919][ T3466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.960404][ T3466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011194][ T3466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.042501][ T3466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.235683][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.244601][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.354494][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.378572][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.425061][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.451721][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.479682][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.508906][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.842043][ T5151] Bluetooth: hci1: command tx timeout [ 96.913985][ T6254] Unable to find swap-space signature [ 96.922419][ T5151] Bluetooth: hci0: command tx timeout [ 97.003592][ T5151] Bluetooth: hci2: command tx timeout [ 97.162807][ T5151] Bluetooth: hci3: command tx timeout [ 98.794411][ T6332] __vm_enough_memory: pid: 6332, comm: syz.0.255, bytes: 4398046511104 not enough memory for the allocation [ 99.601721][ T30] audit: type=1800 audit(1767448855.664:2): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.272" name="features" dev="configfs" ino=9811 res=0 errno=0 [ 99.878841][ T30] audit: type=1800 audit(1767448855.944:3): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.280" name="lu_gp_id" dev="configfs" ino=10491 res=0 errno=0 [ 102.678549][ T5151] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 103.868943][ T5151] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 105.370765][ T6610] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.081252][ T5151] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 112.044354][ T6906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.068415][ T30] audit: type=1800 audit(1767450916.192:4): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.537" name="trace_pipe" dev="tracefs" ino=1235 res=0 errno=0 [ 114.593902][ T7026] futex_wake_op: syz.0.593 tries to shift op by -1; fix this program [ 120.841869][ T30] audit: type=1800 audit(1843104524.960:5): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.731" name="members" dev="configfs" ino=12959 res=0 errno=0 [ 121.118254][ T7319] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.168684][ T30] audit: type=1800 audit(1843104525.292:6): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.737" name="trace_pipe" dev="tracefs" ino=1279 res=0 errno=0 [ 125.236446][ T5151] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 130.501161][ T7629] kexec: Could not allocate control_code_buffer [ 133.896095][ T7871] syz_tun: tun_chr_ioctl cmd 2147767511 [ 135.167789][ T7920] ptrace attach of "./syz-executor exec"[6108] was attempted by "./syz-executor exec"[7920] [ 137.637834][ T5151] Bluetooth: hci1: unknown advertising packet type: 0xea [ 137.850112][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.869988][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.968062][ T7958] kexec: Could not allocate control_code_buffer [ 140.313164][ T8076] Unable to find swap-space signature [ 140.627796][ T8028] kexec: Could not allocate control_code_buffer [ 141.585039][ T8128] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.861327][ T8114] kexec: Could not allocate control_code_buffer [ 144.783617][ T8200] kexec: Could not allocate control_code_buffer [ 147.190252][ T8397] syz_tun: tun_chr_ioctl cmd 2147767520 [ 148.751907][ T8454] syz.0.1295(8454): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 149.347600][ T8405] kexec: Could not allocate control_code_buffer [ 150.408241][ T30] audit: type=1326 audit(6138071849.683:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.1335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cd338f7c9 code=0x0 [ 151.229185][ T30] audit: type=1800 audit(6138071850.517:8): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1360" name="version" dev="configfs" ino=16220 res=0 errno=0 [ 154.118772][ T5151] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 154.739798][ T8763] can: request_module (can-proto-5) failed. [ 156.497156][ T8845] random: crng reseeded on system resumption [ 157.020170][ T8868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.484957][ T8890] random: crng reseeded on system resumption [ 157.732490][ T8900] futex_wake_op: syz.1.1514 tries to shift op by -2048; fix this program [ 158.850712][ T8951] Process accounting resumed [ 159.724627][ T8997] Process accounting resumed [ 161.859102][ T9113] capability: warning: `syz.0.1620' uses deprecated v2 capabilities in a way that may be insecure [ 166.712426][ T9369] ubi31: attaching mtd0 [ 167.557355][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8165afda (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 167.573029][ C0] Call Trace: [ 167.576330][ C0] [ 167.579190][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 167.585992][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 167.591303][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 167.596592][ C0] mce_cpu_restart+0xd9/0x1f0 [ 167.601292][ C0] __flush_smp_call_function_queue+0x27d/0x8b0 [ 167.607474][ C0] __sysvec_call_function_single+0x87/0x3b0 [ 167.613375][ C0] sysvec_call_function_single+0x9f/0xc0 [ 167.619019][ C0] [ 167.622128][ C0] [ 167.625057][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 167.631038][ C0] RIP: 0010:unwind_next_frame+0x88/0x20b0 [ 167.636770][ C0] Code: df 49 8d 6d 48 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 a4 18 00 00 49 8b 45 48 48 89 44 24 08 49 8d 45 38 48 89 c2 48 89 04 24 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 5d 18 [ 167.656558][ C0] RSP: 0018:ffffc90003fff970 EFLAGS: 00000246 [ 167.662645][ C0] RAX: ffffc90003fffa68 RBX: 0000000000000001 RCX: ffffc90003fffac8 [ 167.670619][ C0] RDX: ffffc90003fffa68 RSI: ffffffff8daa4b08 RDI: ffffc90003fffa30 [ 167.678591][ C0] RBP: ffffc90003fffa78 R08: 0000000000000001 R09: 00000000ffffffff [ 167.686596][ C0] R10: 0000000000000002 R11: 0000000000006cab R12: fffff520007fff48 [ 167.694671][ C0] R13: ffffc90003fffa30 R14: ffffc90003fffa30 R15: ffffc90003fffa38 [ 167.702691][ C0] ? arch_stack_walk+0x73/0x100 [ 167.707561][ C0] __unwind_start+0x45f/0x7f0 [ 167.712241][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 167.718406][ C0] arch_stack_walk+0x73/0x100 [ 167.723238][ C0] ? arch_stack_walk+0x73/0x100 [ 167.728111][ C0] stack_trace_save+0x8e/0xc0 [ 167.732888][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 167.738288][ C0] ? __lock_acquire+0x436/0x2890 [ 167.743244][ C0] kasan_save_stack+0x33/0x60 [ 167.747964][ C0] kasan_save_track+0x14/0x30 [ 167.752643][ C0] kasan_save_free_info+0x3b/0x60 [ 167.757676][ C0] __kasan_slab_free+0x5f/0x80 [ 167.762445][ C0] kmem_cache_free+0x2d8/0x770 [ 167.767331][ C0] ? putname+0xf5/0x1a0 [ 167.771594][ C0] ? putname+0xf5/0x1a0 [ 167.775754][ C0] putname+0xf5/0x1a0 [ 167.779762][ C0] user_path_at+0x44/0x60 [ 167.784115][ C0] __x64_sys_umount+0x10a/0x1a0 [ 167.788990][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 167.794385][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 167.799858][ C0] ? rcu_is_watching+0x12/0xc0 [ 167.804632][ C0] do_syscall_64+0xcd/0xf80 [ 167.809148][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.815221][ C0] RIP: 0033:0x7f9cd3390af7 [ 167.819642][ C0] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 167.839284][ C0] RSP: 002b:00007ffff6160848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 167.847797][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cd3390af7 [ 167.855783][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6160900 [ 167.863938][ C0] RBP: 00007ffff6160900 R08: 0000000000000000 R09: 0000000000000000 [ 167.871924][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff6161990 [ 167.880068][ C0] R13: 00007f9cd3413d7d R14: 0000000000028fb8 R15: 00007ffff61619d0 [ 167.888162][ C0] [ 169.573444][ T9513] kAFS: Invalid Command on /proc/fs/afs/cells file [ 170.439014][ T9563] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 170.439014][ T9563] program syz.0.1838 not setting count and/or reply_len properly [ 170.645038][ T9575] syz.0.1852 uses obsolete (PF_INET,SOCK_PACKET) [ 172.952903][ T9699] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 173.591240][ T5151] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 175.285317][ T9835] vhci_hcd vhci_hcd.2: invalid port number 0 [ 176.287078][ T9889] program syz.0.1997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.085712][ T9924] usbip-vudc usbip-vudc.0: gadget not bound [ 177.458222][ T9947] zram: Added device: zram1 [ 177.463084][ T9949] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 177.463120][ T9949] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 177.463142][ T9949] CIFS mount error: No usable UNC path provided in device string! [ 177.463142][ T9949] [ 177.463348][ T9949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 178.136733][ T9985] syz.0.2044: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.189113][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.0.2044 Not tainted syzkaller #0 PREEMPT(full) [ 178.189149][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.189165][ T9985] Call Trace: [ 178.189174][ T9985] [ 178.189184][ T9985] dump_stack_lvl+0x16c/0x1f0 [ 178.189230][ T9985] warn_alloc+0x248/0x3a0 [ 178.189280][ T9985] ? __pfx_warn_alloc+0x10/0x10 [ 178.189315][ T9985] ? __lock_acquire+0x436/0x2890 [ 178.189358][ T9985] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 178.189384][ T9985] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 178.189412][ T9985] ? __pfx___might_resched+0x10/0x10 [ 178.189449][ T9985] ? rcu_is_watching+0x12/0xc0 [ 178.189489][ T9985] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 178.189514][ T9985] ? find_held_lock+0x2b/0x80 [ 178.189544][ T9985] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 178.189569][ T9985] ? tomoyo_path_number_perm+0x295/0x580 [ 178.189602][ T9985] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.189627][ T9985] ? __pfx___mutex_lock+0x10/0x10 [ 178.189666][ T9985] ? tomoyo_path_number_perm+0x18d/0x580 [ 178.189699][ T9985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.189738][ T9985] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 178.189761][ T9985] __vmalloc_node_noprof+0xad/0xf0 [ 178.189792][ T9985] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 178.189820][ T9985] dvb_dvr_do_ioctl+0x15d/0x290 [ 178.189851][ T9985] dvb_usercopy+0x167/0x340 [ 178.189888][ T9985] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 178.189915][ T9985] ? __pfx_dvb_usercopy+0x10/0x10 [ 178.189967][ T9985] ? __fget_files+0x20e/0x3c0 [ 178.190010][ T9985] dvb_dvr_ioctl+0x29/0x40 [ 178.190032][ T9985] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 178.190056][ T9985] __x64_sys_ioctl+0x18e/0x210 [ 178.190090][ T9985] do_syscall_64+0xcd/0xf80 [ 178.190130][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.190157][ T9985] RIP: 0033:0x7f9cd338f7c9 [ 178.190179][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.190203][ T9985] RSP: 002b:00007f9cd42ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.190228][ T9985] RAX: ffffffffffffffda RBX: 00007f9cd35e5fa0 RCX: 00007f9cd338f7c9 [ 178.190254][ T9985] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 178.190272][ T9985] RBP: 00007f9cd3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.190288][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.190304][ T9985] R13: 00007f9cd35e6038 R14: 00007f9cd35e5fa0 R15: 00007ffff61615b8 [ 178.190341][ T9985] [ 178.190352][ T9985] Mem-Info: [ 178.353512][ T9993] ima: policy update failed [ 178.358101][ T9985] active_anon:5670 inactive_anon:0 isolated_anon:0 [ 178.358101][ T9985] active_file:13390 inactive_file:40030 isolated_file:0 [ 178.358101][ T9985] unevictable:768 dirty:301 writeback:0 [ 178.358101][ T9985] slab_reclaimable:10617 slab_unreclaimable:93369 [ 178.358101][ T9985] mapped:24222 shmem:1355 pagetables:1189 [ 178.358101][ T9985] sec_pagetables:0 bounce:0 [ 178.358101][ T9985] kernel_misc_reclaimable:0 [ 178.358101][ T9985] free:1327265 free_pcp:18207 free_cma:0 [ 178.404794][ T30] audit: type=1802 audit(6138091248.835:9): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2048" res=0 errno=0 [ 178.424012][ T9985] Node 0 active_anon:22580kB inactive_anon:0kB active_file:53560kB inactive_file:159916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96888kB dirty:1200kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11544kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.563797][ T9985] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.596899][ T9985] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.629974][ T9985] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 178.636102][ T9985] Node 0 DMA32 free:1436308kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22408kB inactive_anon:0kB active_file:53560kB inactive_file:159916kB unevictable:1536kB writepending:1284kB zspages:0kB present:3129332kB managed:2541020kB mlocked:0kB bounce:0kB free_pcp:35048kB local_pcp:13892kB free_cma:0kB [ 178.695812][ T9985] lowmem_reserve[]: 0 0 1 1 1 [ 178.712165][ T9985] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.749638][ T9985] lowmem_reserve[]: 0 0 0 0 0 [ 178.787097][ T9985] Node 1 Normal free:3857608kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38496kB local_pcp:10464kB free_cma:0kB [ 178.823724][T10007] kstrtoul() returned -22 for lu_gp_id [ 178.843416][ T30] audit: type=1800 audit(6138091249.247:10): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2055" name="lu_gp_id" dev="configfs" ino=21193 res=0 errno=0 [ 178.863949][ T9985] lowmem_reserve[]: 0 0 0 0 0 [ 178.872046][ T9985] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.921681][ T9985] Node 0 DMA32: 4077*4kB (UM) 1958*8kB (UME) 1001*16kB (UME) 1048*32kB (UME) 436*64kB (UME) 333*128kB (UM) 230*256kB (UM) 105*512kB (UME) 33*1024kB (UM) 4*2048kB (UM) 276*4096kB (UM) = 1437172kB [ 178.956395][ T9985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.969069][ T9985] Node 1 Normal: 176*4kB (UM) 39*8kB (UME) 23*16kB (UME) 57*32kB (UME) 17*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 937*4096kB (UM) = 3857608kB [ 179.019369][ T9985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.029249][ T9985] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 179.090911][ T9985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.119856][ T9985] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 179.150498][ T9985] 54771 total pagecache pages [ 179.155683][ T9985] 0 pages in swap cache [ 179.170409][ T9985] Free swap = 124996kB [ 179.174617][ T9985] Total swap = 124996kB [ 179.178793][ T9985] 2097051 pages RAM [ 179.200363][ T9985] 0 pages HighMem/MovableOnly [ 179.205180][ T9985] 429770 pages reserved [ 179.230039][ T9985] 0 pages cma reserved [ 179.309546][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.309566][ T6090] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 180.700790][T10101] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 181.155896][T10120] usb usb36: usbfs: process 10120 (syz.0.2107) did not claim interface 0 before use [ 181.379862][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.380222][ T6090] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 182.433515][ T5151] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 182.554258][T10200] : Can't lookup blockdev [ 183.397969][T10244] program syz.3.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.527777][ T6090] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 183.528540][ T6107] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.687343][T10261] block2mtd: Using custom MTD label '' for dev [ 183.702700][T10261] block2mtd: error: cannot open device [ 184.226617][T10289] binder: 10288:10289 ioctl 40046205 0 returned -22 [ 184.486541][ T5151] Bluetooth: hci3: command 0x2016 tx timeout [ 185.008631][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.016802][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.087151][T10340] ecryptfs_parse_packet_length: Error parsing packet length [ 185.106290][T10340] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 185.442043][T10360] capability: warning: `syz.3.2223' uses 32-bit capabilities (legacy support in use) [ 185.834484][T10376] zswap: compressor _ not available [ 186.553564][ T6107] Bluetooth: hci3: command 0x2016 tx timeout [ 187.481421][T10472] WARNING! power/level is deprecated; use power/control instead [ 188.397900][T10523] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 188.598569][ T5151] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 189.271143][T10543] Process accounting paused [ 189.542674][T10568] nvme_fcloop: unknown parameter or missing value 'ٛ' [ 190.610926][ T6107] Bluetooth: hci0: command 0x2016 tx timeout [ 191.536172][T10648] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.693318][ T6107] Bluetooth: hci0: command 0x2016 tx timeout [ 193.627422][T10551] Process accounting paused [ 194.337278][T10769] : Can't lookup blockdev [ 194.440531][T10773] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 195.332948][T10818] ICMPv6: process `syz.1.2445' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 195.886292][ T5151] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 197.009293][T10904] syz.3.2487 (10904): drop_caches: 0 [ 197.327834][T10922] kAFS: Invalid Command on /proc/fs/afs/cells file [ 197.675008][T10944] random: crng reseeded on system resumption [ 197.942794][ T6107] Bluetooth: hci1: command 0x2016 tx timeout [ 198.977832][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.984288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.007964][ T6107] Bluetooth: hci1: command 0x2016 tx timeout [ 200.433631][T11044] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.304858][T11168] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 203.804969][T11194] syz_tun: tun_chr_ioctl cmd 1074025680 [ 206.339086][T11304] ICMPv6: process `syz.3.2685' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 206.957696][T11329] hub 8-0:1.0: USB hub found [ 206.967420][T11329] hub 8-0:1.0: 1 port detected [ 206.976535][T11331] bond0: no command found in slaves file - use +ifname or -ifname [ 207.883771][T11372] Debayer A: ================= START STATUS ================= [ 207.900983][T11372] Debayer A: Debayer Mean Window Size: 3 [ 207.906960][T11372] Debayer A: ================== END STATUS ================== [ 208.597386][T11407] kAFS: Invalid Command on /proc/fs/afs/cells file [ 209.304154][T11446] hub 8-0:1.0: USB hub found [ 209.324644][T11446] hub 8-0:1.0: 1 port detected [ 209.647740][T11458] bond0: Unable to set down delay as MII monitoring is disabled [ 210.859434][T11515] hub 8-0:1.0: USB hub found [ 210.873353][T11515] hub 8-0:1.0: 1 port detected [ 211.224105][ T53] Bluetooth: hci0: command 0x2016 tx timeout [ 211.230745][ T53] Bluetooth: hci3: command 0x2016 tx timeout [ 211.237959][ T53] Bluetooth: hci1: command 0x2016 tx timeout [ 212.816663][ T30] audit: type=1804 audit(6138091283.393:11): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2840" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 213.014914][T11634] cifs: Unknown parameter ';4.հhf[GL̺_,"̒ |TeVז+#L/V")WbH#' [ 213.040891][T11634] CIFS mount error: No usable UNC path provided in device string! [ 213.040891][T11634] [ 213.054446][T11634] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.353751][T11652] futex_wake_op: syz.0.2857 tries to shift op by -1; fix this program [ 213.885993][T11682] sd 0:0:1:0: PR command failed: 1026 [ 213.904714][T11682] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 213.919762][T11682] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 216.334569][T11823] vhci_hcd vhci_hcd.2: invalid port number 16 [ 216.349082][T11823] vhci_hcd vhci_hcd.2: invalid port number 16 [ 216.721473][ T30] audit: type=1800 audit(6138091287.344:12): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2951" name="members" dev="configfs" ino=27254 res=0 errno=0 [ 216.870341][ T1099] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.500140][T11897] bonding: no command found in bonding_masters - use +ifname or -ifname [ 217.665565][T11906] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 217.683623][T11906] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 218.419333][T11952] program syz.1.3002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.123518][T11992] Process accounting resumed [ 220.461296][T12080] nvme_fcloop: unknown parameter or missing value '7' [ 220.788401][T12102] tipc: Can't bind to reserved service type 0 [ 222.780599][T12230] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 222.851169][T12238] ptrace attach of "./syz-executor exec"[6102] was attempted by ""[12238] [ 223.482960][T12266] Process accounting resumed [ 224.360615][T12340] vhci_hcd vhci_hcd.2: invalid port number 16 [ 224.387070][T12340] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 226.554086][T12464] vhci_hcd vhci_hcd.2: invalid port number 16 [ 226.560244][T12464] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 227.601170][T12536] nvme_fcloop: unknown parameter or missing value '7' [ 227.733187][T12542] usb usb15: usbfs: process 12542 (syz.3.3231) did not claim interface 0 before use [ 229.233906][T12615] : Can't lookup blockdev [ 229.827036][T12642] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 230.776685][ T30] audit: type=1800 audit(6138091301.477:13): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3295" name="features" dev="configfs" ino=30021 res=0 errno=0 [ 231.559003][T12732] ceph: Failed to parse sending metrics switch value 'P^' [ 231.957664][T12751] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 233.022728][T12804] Invalid input. Must be >= 4608 [ 233.159353][T12812] : Can't lookup blockdev [ 233.707303][T12841] zswap: compressor *E;3߃L MapCMcsyF*srHDU}]$rm+8ጅY7TU9d L@saXfmY6  =KԿ_+ gX not available [ 233.883124][T12848] ima: policy update failed [ 233.887962][ T30] audit: type=1807 audit(6138091304.593:14): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 233.924302][ T30] audit: type=1802 audit(6138091304.593:15): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3360" res=0 errno=0 [ 233.985387][ T30] audit: type=1802 audit(6138091304.623:16): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3360" res=0 errno=0 [ 234.243188][T12869] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 235.183512][T12920] hub 8-0:1.0: USB hub found [ 235.202597][T12920] hub 8-0:1.0: 1 port detected [ 235.674574][T12955] nfs: Unknown parameter 'w`_' Ijn9_UVQ8j@:Un M%Ux0 [ 236.684156][T13004] blkio.reset_stats is deprecated [ 236.733068][T13010] QAT: Invalid ioctl 21531 [ 239.649236][T13175] random: crng reseeded on system resumption [ 240.089778][T13193] nvme_fabrics: missing parameter 'transport=%s' [ 240.099718][T13193] nvme_fabrics: missing parameter 'nqn=%s' [ 240.782613][T13235] kAFS: No cell specified [ 241.166957][ T6107] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 241.166997][ T6107] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 241.182081][ T6107] Bluetooth: hci0: Dropping invalid advertising data [ 241.192498][ T6107] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 241.624823][T13281] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.049309][T13307] random: crng reseeded on system resumption [ 243.296918][T13377] i2c i2c-0: new_device: Can't parse I2C address [ 243.618844][T13394] kAFS: No cell specified [ 243.939794][T13416] Scaler: ================= START STATUS ================= [ 243.989547][T13416] Scaler: ================== END STATUS ================== [ 244.550409][T13451] synth uevent: /bus/mei: unknown uevent action string [ 244.737799][T13450] could not allocate digest TFM handle [ 245.133095][T13483] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 245.146037][T13483] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.146098][T13483] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.146128][T13483] page_type: f5(slab) [ 245.146154][T13483] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 245.146181][T13483] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 245.146220][T13483] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 245.146246][T13483] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 245.146275][T13483] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 245.146301][T13483] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 245.146318][T13483] page dumped because: unmovable page [ 245.146512][T13483] page_owner tracks the page as allocated [ 245.154815][T13483] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5215, tgid 5215 (udevadm), ts 36171238030, free_ts 29784417152 [ 245.154878][T13483] post_alloc_hook+0x1af/0x220 [ 245.154911][T13483] get_page_from_freelist+0xd0b/0x31a0 [ 245.154941][T13483] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 245.154972][T13483] alloc_pages_mpol+0x1fb/0x550 [ 245.155009][T13483] new_slab+0x2c3/0x430 [ 245.155034][T13483] ___slab_alloc+0xe18/0x1c90 [ 245.155060][T13483] __slab_alloc.constprop.0+0x63/0x110 [ 245.155089][T13483] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 245.155121][T13483] alloc_inode+0xc3/0x240 [ 245.155148][T13483] iget_locked+0x1d9/0x6d0 [ 245.155176][T13483] kernfs_get_inode+0x46/0x470 [ 245.155202][T13483] kernfs_iop_lookup+0x1a7/0x2d0 [ 245.155232][T13483] __lookup_slow+0x251/0x460 [ 245.155259][T13483] lookup_slow+0x50/0x70 [ 245.155285][T13483] link_path_walk+0x12d8/0x1c70 [ 245.155315][T13483] path_lookupat+0x74/0xc40 [ 245.155346][T13483] page last free pid 1 tgid 1 stack trace: [ 245.155362][T13483] __free_frozen_pages+0x7df/0x1170 [ 245.155388][T13483] free_contig_range+0x183/0x4a0 [ 245.155414][T13483] destroy_args+0xb95/0x14e0 [ 245.155461][T13483] debug_vm_pgtable+0x2220/0x38d0 [ 245.155501][T13483] do_one_initcall+0x123/0x680 [ 245.155536][T13483] kernel_init_freeable+0x5c8/0x920 [ 245.155561][T13483] kernel_init+0x1c/0x2b0 [ 245.155589][T13483] ret_from_fork+0x983/0xb10 [ 245.155615][T13483] ret_from_fork_asm+0x1a/0x30 [ 246.659871][T13567] ima: policy update failed [ 246.666500][ T30] audit: type=1802 audit(6138091317.450:17): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3635" res=0 errno=0 [ 246.822279][T13580] kAFS: Invalid Command on /proc/fs/afs/cells file [ 247.719348][T13634] usb usb2: usbfs: process 13634 (syz.1.3663) did not claim interface 0 before use [ 248.474146][T13684] < [ 248.999118][T13713] Process accounting paused [ 252.774433][T13946] i2c i2c-0: delete_device: Can't find device in list [ 252.881097][ T6107] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 253.283444][T13978] ICMPv6: process `syz.3.3806' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 253.464145][T13979] Process accounting paused [ 253.480741][T13987] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 254.772334][T14070] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 255.177246][T14093] bond0: invalid ARP target specified [ 256.819778][T14198] bonding: no command found in bonding_masters - use +ifname or -ifname [ 257.050002][T14213] synth uevent: /module/button: unknown uevent action string [ 257.930767][T14258] binder: 14257:14258 ioctl c00c6211 0 returned -14 [ 258.608617][T14293] bonding: no command found in bonding_masters - use +ifname or -ifname [ 260.110451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.116894][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.389170][T14403] bcache: register_bcache() error : failed to open device [ 261.530859][T14407] delete_channel: no stack [ 261.838806][T14422] sysfs_service_op_store: Client not running :-5: [ 262.001659][T14430] rtc_cmos 00:00: Alarms can be up to one day in the future [ 262.458707][ T30] audit: type=1326 audit(6138091333.332:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.4016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b8458f7c9 code=0x0 [ 264.252072][T14547] block2mtd: too many arguments [ 264.482142][T14563] qrtr: Invalid version 0 [ 266.067119][T14659] block ram6: the capability attribute has been deprecated. [ 267.257451][ T30] audit: type=1800 audit(6138091338.147:19): pid=14732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4156" name="members" dev="configfs" ino=34650 res=0 errno=0 [ 267.826271][T14768] sysfs_service_op_show: Client not running :-5: [ 268.086553][T14782] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 268.642338][T14817] kafs: addr_prefs: Too many elements in string [ 268.807311][T14829] hub 27-0:1.0: USB hub found [ 268.812625][T14829] hub 27-0:1.0: 1 port detected [ 269.017173][T14843] program syz.3.4211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.260342][ T90] smpboot: CPU 1 is now offline [ 272.808075][T15050] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.027411][T15057] i8042 aux 00:02: in use; can't configure [ 273.928953][ T30] audit: type=1800 audit(6138091344.851:20): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4323" name="sr0" dev="devtmpfs" ino=2847 res=0 errno=0 [ 274.564408][T15130] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 274.602066][T15130] CIFS mount error: No usable UNC path provided in device string! [ 274.602066][T15130] [ 274.659392][T15130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.425767][T15164] [U]  [ 276.954132][T15239] program syz.2.4390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.006945][T15239] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.176600][T15249] futex_wake_op: syz.2.4395 tries to shift op by -2048; fix this program [ 277.222062][T15249] futex_wake_op: syz.2.4395 tries to shift op by -2048; fix this program [ 278.920176][T15347] usb usb36: usbfs: process 15347 (syz.0.4432) did not claim interface 0 before use [ 279.041394][T15347] Process accounting resumed [ 279.179312][T15376] Line length is too long: Should be less than 4094 [ 279.312765][T15380] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 279.378232][T15378] ima: policy update failed [ 279.491791][ T30] audit: type=1802 audit(6138091350.450:21): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4437" res=0 errno=0 [ 279.710689][T15394] kafs: addr_prefs: Invalid Command [ 279.754163][T15399] random: crng reseeded on system resumption [ 280.166192][T15418] usb usb37: usbfs: process 15418 (syz.2.4456) did not claim interface 0 before use [ 280.922598][ T30] audit: type=1400 audit(6138091351.878:22): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15459 comm="syz.3.4477" [ 282.069951][T15540] usb usb4: usbfs: process 15540 (syz.2.4506) did not claim interface 0 before use [ 282.805580][T15583] ecryptfs_miscdev_write: Error while inspecting packet size [ 283.387407][T15623] Process accounting resumed [ 285.362242][T15705] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 285.929904][T15769] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 286.288546][T15785] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 287.030424][T15828] ecryptfs_miscdev_write: Invalid packet size [192] [ 287.426963][T15849] vivid-007: ================= START STATUS ================= [ 287.460704][T15849] vivid-007: Generate PTS: true [ 287.465788][T15849] vivid-007: Generate SCR: true [ 287.510712][T15849] tpg source WxH: 320x240 (Y'CbCr) [ 287.527587][T15849] tpg field: 1 [ 287.545576][T15849] tpg crop: (0,0)/320x240 [ 287.571548][T15849] tpg compose: (0,0)/320x240 [ 287.592557][T15849] tpg colorspace: 8 [ 287.605403][T15849] tpg transfer function: 0/0 [ 287.620759][T15849] tpg Y'CbCr encoding: 0/0 [ 287.630844][T15859] usb usb36: usbfs: process 15859 (syz.3.4640) did not claim interface 0 before use [ 287.651424][T15849] tpg quantization: 0/0 [ 287.666517][T15849] tpg RGB range: 0/2 [ 287.686619][T15849] vivid-007: ================== END STATUS ================== [ 288.043291][T15880] ubi31: attaching mtd0 [ 288.070301][T15880] ubi31: scanning is finished [ 288.102384][T15880] ubi31: empty MTD device detected [ 288.366010][T15880] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 288.402568][T15880] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 288.446680][T15880] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 288.490847][T15880] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 288.506125][T15918] Setting dangerous option i915.mitigations - tainting kernel [ 288.542521][T15880] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 288.592637][T15880] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 288.655043][T15880] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2642386696 [ 288.721526][T15880] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 288.788786][T15914] ubi31: background thread "ubi_bgt31d" started, PID 15914 [ 288.796381][T15923] delete_channel: no stack [ 291.319383][ T6107] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 291.740299][T16073] sysfs_service_op_store: Client not running :-5: [ 293.379459][T16170] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 295.852114][T16304] ima: policy update failed [ 295.873551][ T30] audit: type=1802 audit(6138091366.916:23): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4842" res=0 errno=0 [ 295.927794][T16309] vivid-003: ================= START STATUS ================= [ 295.964138][T16309] vivid-003: Radio HW Seek Mode: Bounded [ 295.990932][T16309] vivid-003: Radio Programmable HW Seek: false [ 296.018513][T16309] vivid-003: RDS Rx I/O Mode: Block I/O [ 296.040866][T16309] vivid-003: Generate RBDS Instead of RDS: false [ 296.073893][T16309] vivid-003: RDS Reception: true [ 296.093302][T16309] vivid-003: RDS Program Type: 0 inactive [ 296.130051][T16309] vivid-003: RDS PS Name: inactive [ 296.151878][T16309] vivid-003: RDS Radio Text: inactive [ 296.192149][T16309] vivid-003: RDS Traffic Announcement: false inactive [ 296.240849][T16309] vivid-003: RDS Traffic Program: false inactive [ 296.260389][T16309] vivid-003: RDS Music: false inactive [ 296.287237][T16309] vivid-003: ================== END STATUS ================== [ 297.064489][T16351] ptrace attach of "./syz-executor exec"[6102] was attempted by "./syz-executor exec"[16351] [ 297.685100][T16376] bond0: no command found in slaves file - use +ifname or -ifname [ 299.244393][T16464] dyndbg: expected <4096 bytes into control [ 299.953827][T16497] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 300.690045][T16539] program syz.2.4957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.892375][T16603] sysfs_service_op_show: Client not running :-5: [ 302.197722][T16617] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 305.670969][T16778] udc dummy_udc.0: soft-connect without a gadget driver [ 306.172836][T16797] i2c i2c-0: delete_device: Can't parse I2C address [ 308.159766][T16892] ======================================================= [ 308.159766][T16892] WARNING: The mand mount option has been deprecated and [ 308.159766][T16892] and is ignored by this kernel. Remove the mand [ 308.159766][T16892] option from the mount to silence this warning. [ 308.159766][T16892] ======================================================= [ 308.912917][T16914] Process accounting paused [ 310.586984][T17003] i2c i2c-0: new_device: Invalid device name [ 311.188643][T17033] ACPI: Can not change Invalid GPE/Fixed Event status [ 312.375495][T17092] sd 0:0:1:0: PR command failed: 1026 [ 312.404671][T17092] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 312.442524][T17092] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 313.316151][T17133] Process accounting paused [ 314.220741][T17172] zswap: compressor - not available [ 314.968671][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.975139][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.438581][T17277] QAT: Stopping all acceleration devices. [ 318.227799][T17413] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 318.733164][T17436] Setting dangerous option i915.mitigations - tainting kernel [ 318.774307][T17436] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 320.489523][T17526] QAT: failed to copy from user. [ 321.037275][T17557] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 321.037275][T17557] [ 321.221473][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.240661][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.654867][T17716] Malformed UNC in devname [ 323.654867][T17716] [ 323.705811][T17716] CIFS: VFS: Malformed UNC in devname [ 325.274377][T17812] random: crng reseeded on system resumption [ 326.079493][T17859] queue_state_write: operation too long [ 326.085101][T17859] queue_state_write: use 'run', 'start' or 'kick' [ 327.792343][T17954] bond0: invalid ARP target specified [ 329.449558][T18056] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 329.549592][ T30] audit: type=1800 audit(6138091400.771:24): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5635" name="dbroot" dev="configfs" ino=45268 res=0 errno=0 [ 329.940840][T18080] vivid-007: ================= START STATUS ================= [ 329.977780][T18080] vivid-007: Enable Output Cropping: true [ 329.983742][T18080] vivid-007: Enable Output Composing: true [ 330.033346][T18080] vivid-007: Enable Output Scaler: true [ 330.064322][T18080] vivid-007: Tx RGB Quantization Range: Automatic [ 330.091985][T18080] vivid-007: Transmit Mode: HDMI [ 330.119529][T18080] vivid-007: Hotplug Present: 0x00000000 [ 330.135988][T18090] bond0: no command found in slaves file - use +ifname or -ifname [ 330.155143][T18080] vivid-007: RxSense Present: 0x00000000 [ 330.170954][T18080] vivid-007: EDID Present: 0x00000000 [ 330.203042][T18080] vivid-007: ================== END STATUS ================== [ 332.235857][T18179] syz_tun: tun_chr_ioctl cmd 21731 [ 333.847987][T18270] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 334.152208][T18284] binder: binder_mmap: 18283 0-1000 bad vm_flags failed -1 [ 334.489815][T18300] syz_tun: tun_chr_ioctl cmd 1074025675 [ 334.508836][T18300] syz_tun: persist enabled [ 334.628254][T18298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.275343][T18440] kafs: addr_prefs: Invalid Command [ 337.567394][ T30] audit: type=1800 audit(6138091408.832:25): pid=18451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5799" name="dbroot" dev="configfs" ino=46390 res=0 errno=0 [ 337.608669][T18451] db_root: not a directory: /dev/audio1 [ 338.330081][T18485] block2mtd: illegal erase size [ 338.772767][T18504] vhci_hcd vhci_hcd.2: invalid port number 16 [ 338.778913][T18504] vhci_hcd vhci_hcd.2: invalid port number 16 [ 339.052595][T18509] Process accounting resumed [ 339.673898][ T6107] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 339.992181][T18563] kernel read not supported for file /\*)A (pid: 18563 comm: syz.3.5854) [ 340.039380][ T30] audit: type=1800 audit(6138091411.305:26): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5854" name="\*)A" dev="mqueue" ino=46746 res=0 errno=0 [ 340.381506][T18582] mmap: syz.0.5864 (18582): VmData 54243328 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 340.415869][T18586] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 340.865627][ T6107] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 340.865653][ T6107] Bluetooth: hci3: unexpected subevent 0x06 length: 725 > 10 [ 341.572784][T18655] Invalid ELF header magic: != ELF [ 342.940352][ T6107] Bluetooth: hci3: command 0x2016 tx timeout [ 343.163834][T18729] Process accounting resumed [ 343.781405][T18768] program syz.3.5954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.838455][ T30] audit: type=1806 audit(6138091415.125:27): xattr="" res=-22 syzkaller syzkaller login: [ 345.252448][T18843] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 345.414987][T18843] PCI: Can't parse resource_alignment parameter: BFjl [ 349.117282][T19054] random: crng reseeded on system resumption [ 351.616132][T19192] block2mtd: illegal erase size [ 352.047097][T19216] block2mtd: illegal erase size [ 352.646727][T19250] bond0: option mode: unable to set because the bond device is up [ 353.349934][T19290] usb usb2: usbfs: process 19290 (syz.0.6209) did not claim interface 4 before use [ 354.058708][T19327] vhci_hcd vhci_hcd.2: invalid port number 135 [ 354.077962][T19327] vhci_hcd vhci_hcd.2: invalid port number 135 [ 355.398882][T19403] phram: not enough arguments [ 355.566945][T19412] writes to the poll attribute are ignored. [ 355.611638][T19412] please use driver specific parameters instead. [ 357.441079][T19504] block nbd0: NBD_DISCONNECT [ 360.188863][ T30] audit: type=1400 audit(6138091431.560:28): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19646 comm="syz.0.6383" [ 360.496614][ T30] audit: type=1806 audit(6138091431.872:29): xattr="" res=-22 [ 363.010600][T19800] kAFS: unparsable volume name [ 364.070152][T19855] i2c i2c-0: new_device: Missing parameters [ 366.857828][T19988] misc userio: Invalid payload size [ 367.230236][T20004] sd 0:0:1:0: PR command failed: 1026 [ 367.262354][T20004] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 367.269081][T20004] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 367.501309][T20018] process 'syz.2.6560' launched '/dev/fd/3' with NULL argv: empty string added [ 369.001824][T20083] Process accounting paused [ 369.283598][T20100] nvme_fcloop: unknown parameter or missing value '0' [ 369.650052][T20116] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 370.059602][T20136] random: crng reseeded on system resumption [ 370.218705][T20142] i2c i2c-0: delete_device: Extra parameters [ 371.268247][T20197] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 372.773531][T20269] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 373.115466][T20280] Process accounting paused [ 375.433111][ T30] audit: type=1800 audit(6138091446.889:30): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6745" name="discovery_nqn" dev="configfs" ino=52510 res=0 errno=0 [ 376.084893][T20433] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 376.085094][T20432] ima: policy update failed [ 376.148353][ T30] audit: type=1802 audit(6138091447.613:31): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6762" res=0 errno=0 [ 376.577943][T20461] warning: `syz.3.6776' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 376.721039][T20467] cougar: G6 mapped to space [ 377.289181][T20494] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 379.315914][ T6107] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 379.324536][ T6107] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 379.845318][ T6107] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 380.439249][T20677] vhci_hcd vhci_hcd.2: invalid port number 16 [ 380.474412][T20677] vhci_hcd vhci_hcd.2: invalid port number 16 [ 380.847673][T20694] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 380.889114][T20694] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 380.929441][T20694] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 380.960264][T20694] page_type: f5(slab) [ 380.978991][T20694] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 381.023481][T20694] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 381.061398][T20694] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 381.099305][T20694] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 381.143642][T20694] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 381.183823][T20694] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 381.225168][T20694] page dumped because: unmovable page [ 381.247815][T20694] page_owner tracks the page as allocated [ 381.279761][T20694] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5215, tgid 5215 (udevadm), ts 36171238030, free_ts 29784417152 [ 381.373809][T20694] post_alloc_hook+0x1af/0x220 [ 381.406541][T20694] get_page_from_freelist+0xd0b/0x31a0 [ 381.428678][T20694] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 381.447278][T20694] alloc_pages_mpol+0x1fb/0x550 [ 381.487159][T20694] new_slab+0x2c3/0x430 [ 381.497239][T20694] ___slab_alloc+0xe18/0x1c90 [ 381.515551][T20694] __slab_alloc.constprop.0+0x63/0x110 [ 381.545974][T20694] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 381.573303][T20694] alloc_inode+0xc3/0x240 [ 381.589596][T20694] iget_locked+0x1d9/0x6d0 [ 381.609275][T20694] kernfs_get_inode+0x46/0x470 [ 381.667780][T20694] kernfs_iop_lookup+0x1a7/0x2d0 [ 381.672764][T20694] __lookup_slow+0x251/0x460 [ 381.756719][T20694] lookup_slow+0x50/0x70 [ 381.756746][T20694] link_path_walk+0x12d8/0x1c70 [ 381.756766][T20694] path_lookupat+0x74/0xc40 [ 381.756784][T20694] page last free pid 1 tgid 1 stack trace: [ 381.756794][T20694] __free_frozen_pages+0x7df/0x1170 [ 381.756810][T20694] free_contig_range+0x183/0x4a0 [ 381.756824][T20694] destroy_args+0xb95/0x14e0 [ 381.756847][T20694] debug_vm_pgtable+0x2220/0x38d0 [ 381.756869][T20694] do_one_initcall+0x123/0x680 [ 381.756890][T20694] kernel_init_freeable+0x5c8/0x920 [ 381.756906][T20694] kernel_init+0x1c/0x2b0 [ 381.756923][T20694] ret_from_fork+0x983/0xb10 [ 381.756938][T20694] ret_from_fork_asm+0x1a/0x30 [ 382.316609][T20739] program syz.2.6891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.343126][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.349516][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.376043][T20739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 383.827416][T20798] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 384.287595][T20818] Setting dangerous option i915.mitigations - tainting kernel [ 384.561123][ T6107] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 388.025889][T21007] : Can't lookup blockdev [ 388.405223][ T6107] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 388.413750][ T6107] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 389.088876][ T6236] Process accounting resumed [ 389.167884][T21083] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 391.070450][T21183] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 391.098526][T21183] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 391.125707][T21183] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 391.159066][T21183] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 391.184615][T21183] page dumped because: unmovable page [ 391.228100][T21183] page_owner info is not present (never set?) [ 393.248735][T21286] bond0: invalid ARP target specified [ 393.596769][T21304] deleting an unspecified loop device is not supported. [ 394.325270][T21342] random: crng reseeded on system resumption [ 394.393878][T21342] Restarting kernel threads ... [ 394.418314][T21342] Done restarting kernel threads. [ 395.018818][T21375] aoe: can't write to that file. [ 398.544565][T21555] kafs: addr_prefs: Invalid Command [ 398.951512][T21577] sg_write: data in/out 14745563/34144 bytes for SCSI command 0x0-- guessing data in; [ 398.951512][T21577] program syz.3.7285 not setting count and/or reply_len properly [ 402.994135][T21799] usbcore.quirks: string doesn't fit in 127 chars. [ 403.069862][T21796] Process accounting resumed [ 404.712472][T21895] CIFS mount error: No usable UNC path provided in device string! [ 404.712472][T21895] [ 404.770811][T21895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.180251][T21916] kfence: disabled [ 406.257620][T21976] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 406.257620][T21976] M' is too long [ 406.304569][T21976] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 406.304569][T21976] W ' is too long [ 406.722883][T21998] [U] 0="/ [ 406.726483][T21998] [U] [ 406.764599][T21998] [U] EeQ@ [ 406.775909][T21997] [U]  [ 408.718948][T22110] bonding: no command found in bonding_masters - use +ifname or -ifname [ 410.619996][T22243] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 410.838224][T22260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 412.109692][T22326] [U] ^\ [ 412.852700][T22367] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 413.155045][T22383] nbd: couldn't find a device at index 35644 [ 413.277019][T22388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.581907][T22403] netlink: 9924 bytes leftover after parsing attributes in process `syz.3.7646'. [ 413.617808][T22403] netlink: 179 bytes leftover after parsing attributes in process `syz.3.7646'. [ 414.173443][T22431] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 414.280678][T22439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7661'. [ 414.520349][T22452] netlink: 'syz.1.7668': attribute type 2 has an invalid length. [ 414.812306][T22473] netlink: 'syz.3.7675': attribute type 1 has an invalid length. [ 414.844914][T22473] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7675'. [ 415.701411][T22527] netlink: 'syz.0.7689': attribute type 1 has an invalid length. [ 415.825947][T22530] Zero length message leads to an empty skb [ 416.688090][T22566] syz.3.7708 (22566) used greatest stack depth: 19144 bytes left [ 417.012727][T22589] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 417.640814][ T30] audit: type=1326 audit(4294967341.633:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22621 comm="syz.1.7733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f459b98f7c9 code=0x0 [ 418.128004][T22648] netlink: 'syz.3.7745': attribute type 1 has an invalid length. [ 418.200675][T22651] FAULT_INJECTION: forcing a failure. [ 418.200675][T22651] name failslab, interval 1, probability 0, space 0, times 1 [ 418.215771][T22652] misc userio: No port type given on /dev/userio [ 418.244121][T22651] CPU: 0 UID: 0 PID: 22651 Comm: syz.2.7747 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 418.244151][T22651] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 418.244158][T22651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.244178][T22651] Call Trace: [ 418.244185][T22651] [ 418.244191][T22651] dump_stack_lvl+0x16c/0x1f0 [ 418.244220][T22651] should_fail_ex+0x512/0x640 [ 418.244237][T22651] ? __kmalloc_cache_noprof+0x5f/0x800 [ 418.244256][T22651] should_failslab+0xc2/0x120 [ 418.244279][T22651] __kmalloc_cache_noprof+0x80/0x800 [ 418.244296][T22651] ? watch_queue_init+0x45/0x170 [ 418.244316][T22651] ? watch_queue_init+0x45/0x170 [ 418.244332][T22651] watch_queue_init+0x45/0x170 [ 418.244355][T22651] create_pipe_files+0x67f/0x9a0 [ 418.244381][T22651] do_pipe2+0xaf/0x1c0 [ 418.244403][T22651] ? __pfx_do_pipe2+0x10/0x10 [ 418.244426][T22651] ? xfd_validate_state+0x61/0x180 [ 418.244445][T22651] __x64_sys_pipe2+0x54/0x80 [ 418.244467][T22651] do_syscall_64+0xcd/0xf80 [ 418.244491][T22651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.244505][T22651] RIP: 0033:0x7f3dbd18f7c9 [ 418.244518][T22651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.244532][T22651] RSP: 002b:00007f3dbdfa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 418.244546][T22651] RAX: ffffffffffffffda RBX: 00007f3dbd3e5fa0 RCX: 00007f3dbd18f7c9 [ 418.244556][T22651] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 418.244564][T22651] RBP: 00007f3dbd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.244573][T22651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.244581][T22651] R13: 00007f3dbd3e6038 R14: 00007f3dbd3e5fa0 R15: 00007ffe00a3ce28 [ 418.244599][T22651] [ 419.464295][T22197] Bluetooth: hci3: unexpected event 0x2c length: 42 > 17 [ 420.663364][T22197] Bluetooth: hci0: unexpected event 0x30 length: 47 > 3 [ 420.752194][T22821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7790'. [ 422.261526][T22904] ptrace attach of "./syz-executor exec"[6108] was attempted by ""[22904] [ 422.355988][T22907] openvswitch: netlink: Duplicate or invalid key (type 0). [ 422.642191][T22923] nfs: Unknown parameter 'nl802154' [ 422.936024][T22932] CIFS mount error: No usable UNC path provided in device string! [ 422.936024][T22932] [ 422.983877][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7832'. [ 422.993885][T22932] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 424.125095][T22975] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 425.157837][T23034] : entered promiscuous mode [ 425.817755][T23065] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 426.414938][T23088] netlink: 206 bytes leftover after parsing attributes in process `syz.3.7896'. [ 427.612412][T23139] FAULT_INJECTION: forcing a failure. [ 427.612412][T23139] name failslab, interval 1, probability 0, space 0, times 0 [ 427.672694][T23139] CPU: 0 UID: 0 PID: 23139 Comm: syz.3.7921 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 427.672724][T23139] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 427.672731][T23139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.672740][T23139] Call Trace: [ 427.672745][T23139] [ 427.672751][T23139] dump_stack_lvl+0x16c/0x1f0 [ 427.672780][T23139] should_fail_ex+0x512/0x640 [ 427.672796][T23139] ? fs_reclaim_acquire+0xae/0x150 [ 427.672822][T23139] should_failslab+0xc2/0x120 [ 427.672845][T23139] kmem_cache_alloc_noprof+0x83/0x770 [ 427.672863][T23139] ? __pfx_map_id_range_down+0x10/0x10 [ 427.672883][T23139] ? security_inode_alloc+0x3b/0x2b0 [ 427.672902][T23139] ? security_inode_alloc+0x3b/0x2b0 [ 427.672916][T23139] security_inode_alloc+0x3b/0x2b0 [ 427.672931][T23139] inode_init_always_gfp+0xced/0x1040 [ 427.672956][T23139] alloc_inode+0x86/0x240 [ 427.672972][T23139] alloc_anon_inode+0x28/0x3e0 [ 427.672996][T23139] ioctx_alloc+0x4d1/0x2230 [ 427.673016][T23139] ? find_held_lock+0x2b/0x80 [ 427.673035][T23139] ? __pfx_ioctx_alloc+0x10/0x10 [ 427.673047][T23139] ? __might_fault+0x13b/0x190 [ 427.673069][T23139] __x64_sys_io_setup+0xc9/0x230 [ 427.673084][T23139] do_syscall_64+0xcd/0xf80 [ 427.673107][T23139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.673122][T23139] RIP: 0033:0x7f1b8458f7c9 [ 427.673134][T23139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.673147][T23139] RSP: 002b:00007f1b8543d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 427.673162][T23139] RAX: ffffffffffffffda RBX: 00007f1b847e5fa0 RCX: 00007f1b8458f7c9 [ 427.673171][T23139] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 427.673179][T23139] RBP: 00007f1b84613f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.673188][T23139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.673196][T23139] R13: 00007f1b847e6038 R14: 00007f1b847e5fa0 R15: 00007ffdfcb3e708 [ 427.673215][T23139] [ 428.419073][T23148] : entered promiscuous mode [ 428.646663][T23183] openvswitch: netlink: Multiple metadata blocks provided [ 430.646229][T23257] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 431.362105][T22197] Bluetooth: hci2: ACL packet too small [ 432.347355][T23305] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 433.074464][T23323] Process accounting paused [ 433.460198][T23341] ucma_write: process 4119 (syz.2.7992) changed security contexts after opening file descriptor, this is not allowed. [ 433.652198][T23349] netlink: 'syz.0.7996': attribute type 1 has an invalid length. [ 435.094364][T22197] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 435.094393][T22197] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 435.112276][T22197] Bluetooth: hci1: Dropping invalid advertising data [ 435.121764][T22197] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 435.121789][T22197] Bluetooth: hci1: Dropping invalid advertising data [ 435.137611][T22197] Bluetooth: hci1: Malformed LE Event: 0x02 [ 436.015744][T23461] NFSD: Failed to start, no listeners configured. [ 438.240291][T23581] NFSD: Failed to start, no listeners configured. [ 438.721399][T23611] MTRR 1 not used [ 439.844239][T23664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8110'. [ 439.888742][T23664] netlink: 29 bytes leftover after parsing attributes in process `syz.3.8110'. [ 440.978768][T23724] openvswitch: netlink: Flow key attr not present in new flow. [ 442.933509][T23837] netlink: 'syz.1.8174': attribute type 1 has an invalid length. [ 443.094650][T23847] openvswitch: netlink: IP tunnel dst address not specified [ 443.192591][T23851] netlink: del zone limit has 8 unknown bytes [ 443.461363][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.468052][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.941848][T23892] random: crng reseeded on system resumption [ 444.009712][T23892] Restarting kernel threads ... [ 444.016747][T23895] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.033274][T23892] Done restarting kernel threads. [ 444.205467][T23906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.214814][T23903] netlink: zone id is out of range [ 444.635315][T23923] netlink: 'syz.0.8213': attribute type 2 has an invalid length. [ 444.829393][T23933] perf: Dynamic interrupt throttling disabled, can hang your system! [ 445.341990][T23961] openvswitch: netlink: IP tunnel dst address not specified [ 445.410715][T23963] netlink: 'syz.3.8233': attribute type 11 has an invalid length. [ 445.445251][T23963] netlink: 'syz.3.8233': attribute type 11 has an invalid length. [ 445.474801][T23963] netlink: 'syz.3.8233': attribute type 11 has an invalid length. [ 445.501129][T23963] netlink: 'syz.3.8233': attribute type 11 has an invalid length. [ 445.717879][T23983] tipc: Started in network mode [ 445.743669][T23983] tipc: Node identity ffffffff, cluster identity 4711 [ 445.781937][T23983] tipc: Node number set to 4294967295 [ 446.136117][T24004] No such timeout policy "" [ 446.141065][T24004] netlink: Failed to associated timeout policy '' [ 447.508869][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8282'. [ 447.522871][T24071] netlink: 'syz.3.8283': attribute type 4 has an invalid length. [ 447.544911][T24071] netlink: 'syz.3.8283': attribute type 1 has an invalid length. [ 448.514951][T24128] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8308'. [ 448.993699][T24149] openvswitch: netlink: IP tunnel TTL not specified. [ 449.483825][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 449.528065][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 454.465450][T24427] netlink: 'syz.1.8448': attribute type 1 has an invalid length. [ 454.499229][T24427] nbd: error processing sock list [ 455.188654][T24461] nbd: must specify an index to disconnect [ 455.408930][T24469] FAULT_INJECTION: forcing a failure. [ 455.408930][T24469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.484513][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.0.8467 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 455.484562][T24469] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 455.484570][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.484579][T24469] Call Trace: [ 455.484584][T24469] [ 455.484591][T24469] dump_stack_lvl+0x16c/0x1f0 [ 455.484618][T24469] should_fail_ex+0x512/0x640 [ 455.484639][T24469] should_fail_alloc_page+0xe7/0x130 [ 455.484663][T24469] prepare_alloc_pages+0x401/0x670 [ 455.484689][T24469] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 455.484710][T24469] ? folio_remove_rmap_ptes+0x391/0xfb0 [ 455.484729][T24469] ? try_to_migrate_one+0x1405/0x3810 [ 455.484746][T24469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.484775][T24469] ? __pfx_try_to_migrate_one+0x10/0x10 [ 455.484795][T24469] ? __up_read+0x2d1/0x700 [ 455.484813][T24469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.484837][T24469] ? policy_nodemask+0xea/0x4e0 [ 455.484861][T24469] alloc_pages_mpol+0x1fb/0x550 [ 455.484883][T24469] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 455.484910][T24469] folio_alloc_mpol_noprof+0x36/0x2f0 [ 455.484926][T24469] alloc_migration_target_by_mpol+0x246/0x500 [ 455.484943][T24469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 455.484958][T24469] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 455.484974][T24469] ? __pfx___might_resched+0x10/0x10 [ 455.484994][T24469] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 455.485010][T24469] migrate_pages_batch+0x3bc/0x3bb0 [ 455.485027][T24469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 455.485050][T24469] ? __pfx_migrate_pages_batch+0x10/0x10 [ 455.485068][T24469] ? __pfx_walk_pgd_range+0x10/0x10 [ 455.485088][T24469] migrate_pages_sync+0x12d/0x8a0 [ 455.485104][T24469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 455.485123][T24469] ? queue_pages_test_walk+0x279/0x410 [ 455.485146][T24469] ? __pfx_migrate_pages_sync+0x10/0x10 [ 455.485161][T24469] ? walk_page_test+0x9b/0x180 [ 455.485184][T24469] migrate_pages+0x1b0b/0x2350 [ 455.485200][T24469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 455.485221][T24469] ? __pfx_migrate_pages+0x10/0x10 [ 455.485236][T24469] ? mas_next_slot+0x12d3/0x1cb0 [ 455.485250][T24469] ? find_held_lock+0x2b/0x80 [ 455.485273][T24469] ? up_write+0x282/0x4e0 [ 455.485290][T24469] do_mbind+0x6e2/0xf20 [ 455.485310][T24469] ? __pfx_do_mbind+0x10/0x10 [ 455.485335][T24469] ? __pfx_get_nodes+0x10/0x10 [ 455.485358][T24469] kernel_mbind+0x1e3/0x1f0 [ 455.485375][T24469] ? __pfx_kernel_mbind+0x10/0x10 [ 455.485395][T24469] do_syscall_64+0xcd/0xf80 [ 455.485418][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.485433][T24469] RIP: 0033:0x7f9cd338f7c9 [ 455.485445][T24469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.485460][T24469] RSP: 002b:00007f9cd42ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 455.485475][T24469] RAX: ffffffffffffffda RBX: 00007f9cd35e5fa0 RCX: 00007f9cd338f7c9 [ 455.485487][T24469] RDX: 0000000100000000 RSI: 8000000000000001 RDI: 000000000000f000 [ 455.485496][T24469] RBP: 00007f9cd3413f91 R08: 0000000000000006 R09: 0000000000000002 [ 455.485505][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.485513][T24469] R13: 00007f9cd35e6038 R14: 00007f9cd35e5fa0 R15: 00007ffff61615b8 [ 455.485531][T24469] [ 456.537676][T24507] sd 0:0:1:0: PR command failed: 1026 [ 456.549874][T24507] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 456.556652][T24507] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 456.575637][T24508] netlink: 'syz.1.8485': attribute type 2 has an invalid length. [ 456.997953][T24526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8494'. [ 457.232193][T24535] HfR: entered promiscuous mode [ 457.761211][T24583] delete_channel: no stack [ 458.294156][T24608] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.300892][T24608] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 459.275285][T24655] sd 0:0:1:0: PR command failed: 1026 [ 459.307660][T24655] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 459.341386][T24655] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 459.606475][T24670] ================================================================== [ 459.606487][T24670] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 459.606516][T24670] Write of size 8 at addr ffffc90003b09000 by task syz.2.8550/24670 [ 459.606528][T24670] [ 459.606540][T24670] CPU: 0 UID: 0 PID: 24670 Comm: syz.2.8550 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 459.606569][T24670] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 459.606583][T24670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.606594][T24670] Call Trace: [ 459.606599][T24670] [ 459.606605][T24670] dump_stack_lvl+0x116/0x1f0 [ 459.606630][T24670] print_report+0xcd/0x630 [ 459.606652][T24670] ? __virt_addr_valid+0x81/0x610 [ 459.606676][T24670] ? sys_fillrect+0x15d4/0x17b0 [ 459.606697][T24670] kasan_report+0xe0/0x110 [ 459.606718][T24670] ? sys_fillrect+0x15d4/0x17b0 [ 459.606740][T24670] sys_fillrect+0x15d4/0x17b0 [ 459.606762][T24670] ? __pfx_sys_fillrect+0x10/0x10 [ 459.606783][T24670] ? __pfx_bit_putcs+0x10/0x10 [ 459.606799][T24670] ? bit_cursor+0xeca/0x17e0 [ 459.606816][T24670] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 459.606839][T24670] bit_clear+0x17d/0x220 [ 459.606855][T24670] ? __pfx_bit_clear+0x10/0x10 [ 459.606871][T24670] ? fb_get_color_depth+0x120/0x250 [ 459.606886][T24670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.606909][T24670] ? __pfx_bit_clear+0x10/0x10 [ 459.606925][T24670] __fbcon_clear+0x679/0x7d0 [ 459.606942][T24670] fbcon_scroll+0x48b/0x640 [ 459.606957][T24670] con_scroll+0x45f/0x690 [ 459.606978][T24670] do_con_write+0x5565/0x8280 [ 459.607004][T24670] ? __pfx_do_con_write+0x10/0x10 [ 459.607028][T24670] con_write+0x23/0xb0 [ 459.607047][T24670] n_tty_write+0x434/0x1280 [ 459.607068][T24670] ? __pfx_n_tty_write+0x10/0x10 [ 459.607091][T24670] ? __pfx_woken_wake_function+0x10/0x10 [ 459.607111][T24670] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 459.607134][T24670] ? __pfx_n_tty_write+0x10/0x10 [ 459.607149][T24670] file_tty_write.constprop.0+0x503/0x9b0 [ 459.607173][T24670] redirected_tty_write+0xd4/0x120 [ 459.607193][T24670] vfs_write+0x7d3/0x11d0 [ 459.607214][T24670] ? __pfx_redirected_tty_write+0x10/0x10 [ 459.607235][T24670] ? __pfx_vfs_write+0x10/0x10 [ 459.607254][T24670] ? find_held_lock+0x2b/0x80 [ 459.607278][T24670] ksys_write+0x12a/0x250 [ 459.607300][T24670] ? __pfx_ksys_write+0x10/0x10 [ 459.607324][T24670] do_syscall_64+0xcd/0xf80 [ 459.607348][T24670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.607363][T24670] RIP: 0033:0x7f3dbd18f7c9 [ 459.607377][T24670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.607392][T24670] RSP: 002b:00007f3dbdfa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.607406][T24670] RAX: ffffffffffffffda RBX: 00007f3dbd3e5fa0 RCX: 00007f3dbd18f7c9 [ 459.607416][T24670] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.607426][T24670] RBP: 00007f3dbd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.607435][T24670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.607444][T24670] R13: 00007f3dbd3e6038 R14: 00007f3dbd3e5fa0 R15: 00007ffe00a3ce28 [ 459.607459][T24670] [ 459.607464][T24670] [ 459.607469][T24670] The buggy address belongs to a vmalloc virtual mapping [ 459.607480][T24670] Memory state around the buggy address: [ 459.607488][T24670] ffffc90003b08f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 459.607499][T24670] ffffc90003b08f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 459.607509][T24670] >ffffc90003b09000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 459.607516][T24670] ^ [ 459.607524][T24670] ffffc90003b09080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 459.607534][T24670] ffffc90003b09100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 459.607542][T24670] ================================================================== [ 459.607558][T24670] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 459.607570][T24670] CPU: 0 UID: 0 PID: 24670 Comm: syz.2.8550 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 459.607596][T24670] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 459.607603][T24670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.607612][T24670] Call Trace: [ 459.607617][T24670] [ 459.607622][T24670] dump_stack_lvl+0x3d/0x1f0 [ 459.607644][T24670] vpanic+0x640/0x6f0 [ 459.607659][T24670] panic+0xca/0xd0 [ 459.607673][T24670] ? __pfx_panic+0x10/0x10 [ 459.607690][T24670] check_panic_on_warn+0xab/0xb0 [ 459.607706][T24670] end_report+0x107/0x160 [ 459.607726][T24670] kasan_report+0xee/0x110 [ 459.607748][T24670] ? sys_fillrect+0x15d4/0x17b0 [ 459.607771][T24670] sys_fillrect+0x15d4/0x17b0 [ 459.607793][T24670] ? __pfx_sys_fillrect+0x10/0x10 [ 459.607814][T24670] ? __pfx_bit_putcs+0x10/0x10 [ 459.607831][T24670] ? bit_cursor+0xeca/0x17e0 [ 459.607848][T24670] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 459.607871][T24670] bit_clear+0x17d/0x220 [ 459.607887][T24670] ? __pfx_bit_clear+0x10/0x10 [ 459.607904][T24670] ? fb_get_color_depth+0x120/0x250 [ 459.607919][T24670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.607943][T24670] ? __pfx_bit_clear+0x10/0x10 [ 459.607959][T24670] __fbcon_clear+0x679/0x7d0 [ 459.607976][T24670] fbcon_scroll+0x48b/0x640 [ 459.607992][T24670] con_scroll+0x45f/0x690 [ 459.608013][T24670] do_con_write+0x5565/0x8280 [ 459.608039][T24670] ? __pfx_do_con_write+0x10/0x10 [ 459.608063][T24670] con_write+0x23/0xb0 [ 459.608090][T24670] n_tty_write+0x434/0x1280 [ 459.608109][T24670] ? __pfx_n_tty_write+0x10/0x10 [ 459.608124][T24670] ? __pfx_woken_wake_function+0x10/0x10 [ 459.608144][T24670] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 459.608166][T24670] ? __pfx_n_tty_write+0x10/0x10 [ 459.608180][T24670] file_tty_write.constprop.0+0x503/0x9b0 [ 459.608203][T24670] redirected_tty_write+0xd4/0x120 [ 459.608224][T24670] vfs_write+0x7d3/0x11d0 [ 459.608244][T24670] ? __pfx_redirected_tty_write+0x10/0x10 [ 459.608265][T24670] ? __pfx_vfs_write+0x10/0x10 [ 459.608285][T24670] ? find_held_lock+0x2b/0x80 [ 459.608308][T24670] ksys_write+0x12a/0x250 [ 459.608328][T24670] ? __pfx_ksys_write+0x10/0x10 [ 459.608350][T24670] do_syscall_64+0xcd/0xf80 [ 459.608372][T24670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.608386][T24670] RIP: 0033:0x7f3dbd18f7c9 [ 459.608397][T24670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.608411][T24670] RSP: 002b:00007f3dbdfa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.608424][T24670] RAX: ffffffffffffffda RBX: 00007f3dbd3e5fa0 RCX: 00007f3dbd18f7c9 [ 459.608434][T24670] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.608443][T24670] RBP: 00007f3dbd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.608452][T24670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.608461][T24670] R13: 00007f3dbd3e6038 R14: 00007f3dbd3e5fa0 R15: 00007ffe00a3ce28 [ 459.608475][T24670] [ 459.608537][T24670] Kernel Offset: disabled