last executing test programs: 1.64064228s ago: executing program 0 (id=5024): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000400)="352c8efa614a572c01096bbbc2ce7db19c429be7137d848ef31b00000000000000000000134a3229dd8f3f3b41ced10c6b240002e78e9d7d20e2a019824a0057a3f2b7ec4acd451daf32a4feb36b107ab95aaf13a7da31f9cf740f145e9c9071cbcd962b736fcc80eb", 0x69) 1.463991139s ago: executing program 0 (id=5027): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) 1.212628708s ago: executing program 0 (id=5033): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/dynamic_events\x00', 0x2080, 0x0) read$auto(0x3, 0x0, 0x7) 1.026803805s ago: executing program 0 (id=5036): r0 = socket(0x18, 0x4, 0x2) write$auto(r0, 0x0, 0x1ff) 1.003183057s ago: executing program 1 (id=5037): prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 906.041833ms ago: executing program 3 (id=5038): io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0xd, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) 885.491863ms ago: executing program 2 (id=5039): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b5fb0", 0x2d) 849.584758ms ago: executing program 0 (id=5040): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/stats/shmem_alloc\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/8, 0x8) 819.354377ms ago: executing program 1 (id=5041): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) 723.517668ms ago: executing program 2 (id=5042): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/block/ram12/events\x00', 0x101480, 0x0) read$auto(r0, 0x0, 0x9) 713.17584ms ago: executing program 3 (id=5043): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) 688.979025ms ago: executing program 0 (id=5044): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 655.526863ms ago: executing program 1 (id=5045): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r0, 0x6f2d, r0) 551.549238ms ago: executing program 2 (id=5046): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) 546.779578ms ago: executing program 3 (id=5047): epoll_create$auto(0x4) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) 489.568881ms ago: executing program 1 (id=5048): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40900, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 368.41339ms ago: executing program 3 (id=5049): r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 367.154087ms ago: executing program 2 (id=5050): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="de91b83a075c", 0x6) 288.468056ms ago: executing program 1 (id=5051): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) 170.185677ms ago: executing program 2 (id=5052): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCGEXCL2(r0, 0x80045440, &(0x7f0000000040)=0x2) 167.710565ms ago: executing program 3 (id=5053): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 106.965118ms ago: executing program 1 (id=5054): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 15.930678ms ago: executing program 2 (id=5055): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/nfc/nfc1/rfkill1/persistent\x00', 0x80000, 0x0) pread64$auto(r0, 0x0, 0x4000000800e, 0x3) 0s ago: executing program 3 (id=5056): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/rel\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 81.134530][ T5837] cgroup: Unknown subsys name 'net' [ 81.304127][ T5837] cgroup: Unknown subsys name 'cpuset' [ 81.313056][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.857717][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.797538][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.807479][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.831759][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.850131][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.859243][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.886326][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.896121][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.905189][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.920643][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.928450][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.936851][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.945168][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.953463][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.960766][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.970592][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.987497][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.995279][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.003362][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.014651][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.023995][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.376353][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.536499][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 85.626193][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 85.684199][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.691782][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.699483][ T5846] bridge_slave_0: entered allmulticast mode [ 85.706840][ T5846] bridge_slave_0: entered promiscuous mode [ 85.750177][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.757486][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.765523][ T5846] bridge_slave_1: entered allmulticast mode [ 85.772753][ T5846] bridge_slave_1: entered promiscuous mode [ 85.780104][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.787259][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.794564][ T5852] bridge_slave_0: entered allmulticast mode [ 85.802725][ T5852] bridge_slave_0: entered promiscuous mode [ 85.848513][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.855720][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.863191][ T5852] bridge_slave_1: entered allmulticast mode [ 85.871202][ T5852] bridge_slave_1: entered promiscuous mode [ 85.889142][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.949862][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.996799][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.004205][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.011975][ T5850] bridge_slave_0: entered allmulticast mode [ 86.019510][ T5850] bridge_slave_0: entered promiscuous mode [ 86.042012][ T5846] team0: Port device team_slave_0 added [ 86.052127][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.067682][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.077691][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.085628][ T5850] bridge_slave_1: entered allmulticast mode [ 86.095969][ T5850] bridge_slave_1: entered promiscuous mode [ 86.119020][ T5846] team0: Port device team_slave_1 added [ 86.139768][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.213747][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.227230][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.237119][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.263701][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.279043][ T5852] team0: Port device team_slave_0 added [ 86.285373][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 86.298805][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.308718][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.316426][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.342444][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.355641][ T5852] team0: Port device team_slave_1 added [ 86.445650][ T5850] team0: Port device team_slave_0 added [ 86.454772][ T5850] team0: Port device team_slave_1 added [ 86.461502][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.468482][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.494796][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.508030][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.515070][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.541098][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.629334][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.636730][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.662803][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.708223][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.715440][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.741527][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.786439][ T5846] hsr_slave_0: entered promiscuous mode [ 86.794296][ T5846] hsr_slave_1: entered promiscuous mode [ 86.821086][ T5852] hsr_slave_0: entered promiscuous mode [ 86.827405][ T5852] hsr_slave_1: entered promiscuous mode [ 86.834321][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.842706][ T5852] Cannot create hsr debugfs directory [ 86.849857][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.857332][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.864662][ T5859] bridge_slave_0: entered allmulticast mode [ 86.872644][ T5859] bridge_slave_0: entered promiscuous mode [ 86.935398][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.943218][ T51] Bluetooth: hci0: command tx timeout [ 86.943420][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.958417][ T5859] bridge_slave_1: entered allmulticast mode [ 86.966564][ T5859] bridge_slave_1: entered promiscuous mode [ 87.022188][ T51] Bluetooth: hci1: command tx timeout [ 87.039564][ T5850] hsr_slave_0: entered promiscuous mode [ 87.047113][ T5850] hsr_slave_1: entered promiscuous mode [ 87.054077][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.065043][ T5850] Cannot create hsr debugfs directory [ 87.100145][ T51] Bluetooth: hci2: command tx timeout [ 87.100223][ T5849] Bluetooth: hci3: command tx timeout [ 87.183961][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.197112][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.351774][ T5859] team0: Port device team_slave_0 added [ 87.391139][ T5859] team0: Port device team_slave_1 added [ 87.509865][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.517605][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.544882][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.557226][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.564514][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.590840][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.700494][ T5859] hsr_slave_0: entered promiscuous mode [ 87.706765][ T5859] hsr_slave_1: entered promiscuous mode [ 87.714117][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.721783][ T5859] Cannot create hsr debugfs directory [ 87.764765][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.778643][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.813431][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.846104][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.954376][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.978058][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.988210][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.009414][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.066989][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.089608][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.113364][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.125062][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.205848][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.218466][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.238492][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.251133][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.354537][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.414148][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.444010][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.466498][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.473951][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.508196][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.515346][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.525734][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.539162][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.567281][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.574492][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.584394][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.591535][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.619821][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.676210][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.683423][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.709889][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.717043][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.742237][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.777417][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.813672][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.820922][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.849726][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.856964][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.023202][ T5849] Bluetooth: hci0: command tx timeout [ 89.101300][ T5849] Bluetooth: hci1: command tx timeout [ 89.180661][ T5849] Bluetooth: hci3: command tx timeout [ 89.180727][ T51] Bluetooth: hci2: command tx timeout [ 89.374737][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.405476][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.523525][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.544935][ T5852] veth0_vlan: entered promiscuous mode [ 89.579611][ T5846] veth0_vlan: entered promiscuous mode [ 89.595804][ T5852] veth1_vlan: entered promiscuous mode [ 89.607223][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.645360][ T5846] veth1_vlan: entered promiscuous mode [ 89.653592][ T5859] veth0_vlan: entered promiscuous mode [ 89.691199][ T5859] veth1_vlan: entered promiscuous mode [ 89.745262][ T5852] veth0_macvtap: entered promiscuous mode [ 89.764142][ T5846] veth0_macvtap: entered promiscuous mode [ 89.774701][ T5852] veth1_macvtap: entered promiscuous mode [ 89.794128][ T5850] veth0_vlan: entered promiscuous mode [ 89.806459][ T5846] veth1_macvtap: entered promiscuous mode [ 89.825304][ T5850] veth1_vlan: entered promiscuous mode [ 89.846135][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.859240][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.887065][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896849][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906626][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916674][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.927888][ T5859] veth0_macvtap: entered promiscuous mode [ 89.947377][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.962269][ T5859] veth1_macvtap: entered promiscuous mode [ 89.998383][ T5850] veth0_macvtap: entered promiscuous mode [ 90.008479][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.033506][ T5850] veth1_macvtap: entered promiscuous mode [ 90.043244][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.053272][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.063378][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.072882][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106459][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.135680][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.177704][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.188193][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.201790][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.209733][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.249440][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.258446][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.267802][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.276887][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.288535][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298260][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308170][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.317563][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389778][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.401194][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.436994][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.445747][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.543170][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.562071][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.593337][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.659368][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.683347][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.772270][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806776][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.841727][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.849584][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.952299][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.978647][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.100590][ T51] Bluetooth: hci0: command tx timeout [ 91.180381][ T51] Bluetooth: hci1: command tx timeout [ 91.260995][ T51] Bluetooth: hci3: command tx timeout [ 91.265590][ T5849] Bluetooth: hci2: command tx timeout [ 91.992162][ T3627] cfg80211: failed to load regulatory.db [ 93.182397][ T5849] Bluetooth: hci0: command tx timeout [ 93.260054][ T5849] Bluetooth: hci1: command tx timeout [ 93.344665][ T5849] Bluetooth: hci2: command tx timeout [ 93.344673][ T51] Bluetooth: hci3: command tx timeout [ 93.398547][ T6039] ubi0: attaching mtd0 [ 93.402932][ T6039] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 93.596351][ T6047] QAT: Stopping all acceleration devices. [ 94.297114][ T6073] vhci_hcd: invalid port number 16 [ 94.330539][ T6073] vhci_hcd: invalid port number 16 [ 96.072108][ T6141] mmap: syz.1.98 (6141): VmData 45809664 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 96.635824][ T6162] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 98.079246][ T6221] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 98.823482][ T6256] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 98.823950][ T6252] ima: policy update failed [ 98.851273][ T30] audit: type=1802 audit(1752486089.072:2): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.155" res=0 errno=0 [ 99.056229][ T30] audit: type=1800 audit(1752486089.282:3): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.158" name="members" dev="configfs" ino=7934 res=0 errno=0 [ 100.856968][ T6332] nvme_fcloop: unknown parameter or missing value '7' [ 104.933207][ T6502] Setting dangerous option i915.mitigations - tainting kernel [ 104.950636][ T6502] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 106.390607][ T30] audit: type=1806 audit(1752486096.612:4): xattr=2EC7871B res=-22 [ 106.955499][ T5894] smpboot: CPU 1 is now offline [ 107.472142][ T6607] writes to the poll attribute are ignored. [ 107.511989][ T6607] please use driver specific parameters instead. [ 107.778585][ T6621] vivid-007: ================= START STATUS ================= [ 107.852007][ T6621] vivid-007: Generate PTS: true [ 107.857217][ T6621] vivid-007: Generate SCR: true [ 107.916830][ T6621] tpg source WxH: 320x240 (Y'CbCr) [ 107.923865][ T6624] block nbd0: NBD_DISCONNECT [ 107.942915][ T6621] tpg field: 1 [ 107.954969][ T6621] tpg crop: (0,0)/320x240 [ 107.972544][ T6621] tpg compose: (0,0)/320x240 [ 108.011891][ T6621] tpg colorspace: 8 [ 108.038399][ T6621] tpg transfer function: 0/0 [ 108.066660][ T6621] tpg Y'CbCr encoding: 0/0 [ 108.098803][ T6621] tpg quantization: 0/0 [ 108.117245][ T6621] tpg RGB range: 0/2 [ 108.134673][ T6621] vivid-007: ================== END STATUS ================== [ 108.725934][ T6653] process 'syz.0.351' launched '/dev/fd/3' with NULL argv: empty string added [ 109.824555][ T6700] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 110.844738][ T5849] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 110.844766][ T5849] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 110.864142][ T5849] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 112.859145][ T6813] XFS: irix_symlink_mode sysctl option is deprecated. [ 117.226471][ T6982] kAFS: Invalid Command on /proc/fs/afs/cells file [ 119.037633][ T7054] ubi0: attaching mtd0 [ 119.069083][ T7054] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 121.229438][ T7133] bond0: option packets_per_slave: invalid value ( Xnp) [ 121.299843][ T7133] bond0: option packets_per_slave: allowed values 0 - 65535 [ 124.360270][ T7249] vhci_hcd: invalid port number 21 [ 124.365404][ T7249] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 125.480732][ T7297] ACPI: Can not change Invalid GPE/Fixed Event status [ 126.500169][ T7335] blkio.reset_stats is deprecated [ 127.171219][ T7364] kAFS: unparsable volume name [ 128.688274][ T5849] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 128.857365][ T7428] ecryptfs_parse_packet_length: Error parsing packet length [ 128.932686][ T7428] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 129.525932][ T7450] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 130.098469][ T7474] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 131.320117][ T7517] ubi0: attaching mtd0 [ 131.326155][ T7517] ubi0: scanning is finished [ 131.384714][ T7517] ubi0: empty MTD device detected [ 131.389820][ T7517] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 131.562797][ T7517] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 132.951590][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962151][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.423439][ T7671] ceph: Failed to parse sending metrics switch value 'P^' [ 135.748195][ T5849] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 136.567224][ T7712] kAFS: No cell specified [ 138.975326][ T7806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.579254][ T7829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.691856][ T5938] Process accounting resumed [ 140.218547][ T7845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.845778][ T7940] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 142.911376][ T30] audit: type=1400 audit(1752486133.132:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7941 comm="syz.1.983" [ 142.928708][ T7940] ep_00: uevent: failed to send synthetic uevent: -22 [ 145.333469][ T8033] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 145.634027][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 145.634053][ T5849] Bluetooth: hci1: unexpected subevent 0x03 length: 727 > 9 [ 149.057082][ T8169] QAT: failed to copy from user cfg_data. [ 149.108945][ T8172] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 149.179345][ T8172] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.233934][ T8172] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.253001][ T8177] program syz.3.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.281532][ T8172] page_type: f5(slab) [ 149.296030][ T8172] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 149.350449][ T8172] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 149.430173][ T8172] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 149.476828][ T8172] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 149.525153][ T8172] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 149.585586][ T8172] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 149.636474][ T8172] page dumped because: unmovable page [ 149.662518][ T8172] page_owner tracks the page as allocated [ 149.702141][ T8172] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5220, tgid 5220 (udevd), ts 144907082082, free_ts 144848693184 [ 149.722373][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.831798][ T8172] post_alloc_hook+0x1c0/0x230 [ 149.861561][ T8172] get_page_from_freelist+0x1321/0x3890 [ 149.903760][ T8172] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.909731][ T8172] alloc_pages_mpol+0x1fb/0x550 [ 149.978348][ T8172] new_slab+0x23b/0x330 [ 149.994919][ T8172] ___slab_alloc+0xd9c/0x1940 [ 150.029430][ T8172] __slab_alloc.constprop.0+0x56/0xb0 [ 150.062412][ T8172] __kmalloc_noprof+0x2f2/0x510 [ 150.067304][ T8172] tomoyo_realpath_from_path+0xc2/0x6e0 [ 150.130164][ T8172] tomoyo_check_open_permission+0x2ab/0x3c0 [ 150.136118][ T8172] tomoyo_file_open+0x6b/0x90 [ 150.198336][ T8172] security_file_open+0x84/0x1e0 [ 150.239736][ T8172] do_dentry_open+0x596/0x1c10 [ 150.280253][ T8172] vfs_open+0x82/0x3f0 [ 150.300146][ T8172] path_openat+0x1de4/0x2cb0 [ 150.304865][ T8172] do_filp_open+0x20b/0x470 [ 150.356127][ T8172] page last free pid 5220 tgid 5220 stack trace: [ 150.389785][ T8172] __free_frozen_pages+0x7fe/0x1180 [ 150.417928][ T8172] __put_partials+0x16d/0x1c0 [ 150.462055][ T8172] qlist_free_all+0x4d/0x120 [ 150.481616][ T8172] kasan_quarantine_reduce+0x195/0x1e0 [ 150.510182][ T8172] __kasan_slab_alloc+0x69/0x90 [ 150.515349][ T8172] __kmalloc_noprof+0x1d4/0x510 [ 150.558714][ T8172] tomoyo_realpath_from_path+0xc2/0x6e0 [ 150.578388][ T8172] tomoyo_path_perm+0x274/0x460 [ 150.610817][ T8172] security_inode_getattr+0x116/0x290 [ 150.621159][ T8172] vfs_fstat+0x4b/0xe0 [ 150.625275][ T8172] __do_sys_newfstat+0x87/0x100 [ 150.662217][ T8172] do_syscall_64+0xcd/0x490 [ 150.666776][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.668058][ T8246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 151.703976][ T8251] kAFS: Invalid Command on /proc/fs/afs/cells file [ 152.031063][ T8260] vhci_hcd: invalid port number 255 [ 152.901714][ T8296] QAT: failed to copy from user cfg_data. [ 153.384669][ T8317] zram0: detected capacity change from 0 to 8 [ 153.577774][ T8325] QAT: failed to copy from user cfg_data. [ 154.363595][ T8357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 154.627512][ T8365] i2c i2c-0: delete_device: Can't parse I2C address [ 154.853810][ T8371] bond0: option mode: unable to set because the bond device is up [ 155.591499][ T8408] usb usb6: usbfs: process 8408 (syz.3.1201) did not claim interface 0 before use [ 156.187671][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 156.590266][ T8446] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 157.445004][ T8479] syz.1.1237 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.554902][ T8378] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 157.798255][ T8495] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 157.904214][ T8500] synth uevent: /bus/mei: unknown uevent action string [ 159.266542][ T8557] i2c i2c-0: delete_device: Extra parameters [ 159.295085][ T8560] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 159.434981][ T8560] CIFS mount error: No usable UNC path provided in device string! [ 159.434981][ T8560] [ 159.504092][ T8560] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.928943][ T8585] sysfs_service_op_store: Client not running :-5: [ 160.145567][ T8378] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.151770][ T5938] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 161.274147][ T8378] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 161.453377][ T8652] syz.2.1319 (8652): attempted to duplicate a private mapping with mremap. This is not supported. [ 162.221077][ T8378] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.239810][ T5938] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 162.337371][ T8686] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 162.337371][ T8686] program syz.1.1347 not setting count and/or reply_len properly [ 163.241894][ T8728] usbip-vudc usbip-vudc.0: gadget not bound [ 164.397047][ T8378] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.405014][ T5938] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 164.910526][ T8796] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 165.054231][ T8378] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 165.054257][ T8378] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 165.876515][ T30] audit: type=1800 audit(1752486156.102:6): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1412" name="lu_gp_id" dev="configfs" ino=16431 res=0 errno=0 [ 165.914458][ T8838] kstrtoul() returned -22 for lu_gp_id [ 167.013336][ T8886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 167.065582][ T8886] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 167.125453][ T8886] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 167.161617][ T8886] page_type: f5(slab) [ 167.200075][ T8886] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 167.229466][ T8886] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 167.282635][ T8886] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 167.322417][ T8886] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 167.353255][ T8886] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 167.381718][ T8886] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 167.442496][ T8886] page dumped because: unmovable page [ 167.469674][ T8886] page_owner tracks the page as allocated [ 167.497501][ T8886] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5524, tgid 5524 (dhcpcd-run-hook), ts 53679672699, free_ts 53577490209 [ 167.610163][ T8886] post_alloc_hook+0x1c0/0x230 [ 167.627633][ T8886] get_page_from_freelist+0x1321/0x3890 [ 167.677928][ T8886] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 167.700022][ T8886] alloc_pages_mpol+0x1fb/0x550 [ 167.717451][ T8886] new_slab+0x23b/0x330 [ 167.737007][ T8886] ___slab_alloc+0xd9c/0x1940 [ 167.760049][ T8886] __slab_alloc.constprop.0+0x56/0xb0 [ 167.807995][ T8886] __kmalloc_noprof+0x2f2/0x510 [ 167.862925][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 167.877316][ T8886] tomoyo_init_log+0x1385/0x2140 [ 167.989972][ T8886] tomoyo_supervisor+0x302/0x13b0 [ 168.008383][ T8886] tomoyo_env_perm+0x191/0x200 [ 168.021104][ T8886] tomoyo_find_next_domain+0xec2/0x20b0 [ 168.026712][ T8886] tomoyo_bprm_check_security+0x12e/0x1d0 [ 168.050027][ T8886] security_bprm_check+0x1b9/0x1e0 [ 168.055285][ T8886] bprm_execve+0x810/0x1650 [ 168.059790][ T8886] do_execveat_common.isra.0+0x4a5/0x610 [ 168.110419][ T8886] page last free pid 5519 tgid 5519 stack trace: [ 168.116772][ T8886] __free_frozen_pages+0x7fe/0x1180 [ 168.184047][ T8886] __put_partials+0x16d/0x1c0 [ 168.188829][ T8886] qlist_free_all+0x4d/0x120 [ 168.220162][ T8886] kasan_quarantine_reduce+0x195/0x1e0 [ 168.229687][ T8886] __kasan_slab_alloc+0x69/0x90 [ 168.252380][ T8886] __kmalloc_noprof+0x1d4/0x510 [ 168.272858][ T8886] tomoyo_supervisor+0x45b/0x13b0 [ 168.277929][ T8886] tomoyo_path_permission+0x270/0x3b0 [ 168.332412][ T8886] tomoyo_check_open_permission+0x349/0x3c0 [ 168.338403][ T8886] tomoyo_file_open+0x6b/0x90 [ 168.380050][ T8886] security_file_open+0x84/0x1e0 [ 168.418467][ T8886] do_dentry_open+0x596/0x1c10 [ 168.438414][ T8886] vfs_open+0x82/0x3f0 [ 168.467148][ T8886] path_openat+0x1de4/0x2cb0 [ 168.485803][ T8886] do_filp_open+0x20b/0x470 [ 168.511017][ T8886] do_sys_openat2+0x11b/0x1d0 [ 168.721519][ T8942] syz.0.1461 uses obsolete (PF_INET,SOCK_PACKET) [ 169.062959][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 169.086599][ T8955] ubi0: attaching mtd0 [ 169.179179][ T8955] ubi0: scanning is finished [ 169.198383][ T8955] ubi0: empty MTD device detected [ 169.318358][ T8961] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078001000 pfn:0x78000 [ 169.350887][ T8961] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.380313][ T8961] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 169.388995][ T8955] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 169.399101][ T8961] page_type: f5(slab) [ 169.403590][ T8955] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 169.420474][ T8961] raw: 00fff00000000240 ffff88801b841dc0 ffffea0001e70810 ffffea00009f3410 [ 169.429333][ T8955] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 169.452601][ T8961] raw: ffff888078001000 000000000010000f 00000000f5000000 0000000000000000 [ 169.463404][ T8955] ubi0: VID header offset: 514 (aligned 514), data offset: 578 [ 169.487427][ T8961] head: 00fff00000000240 ffff88801b841dc0 ffffea0001e70810 ffffea00009f3410 [ 169.496331][ T8955] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 169.520047][ T8955] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 169.528170][ T8961] head: ffff888078001000 000000000010000f 00000000f5000000 0000000000000000 [ 169.587434][ T8955] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 331243764 [ 169.605229][ T8961] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 169.650231][ T8955] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 169.662658][ T8961] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 169.730097][ T8961] page dumped because: unmovable page [ 169.740186][ T8962] ubi0: background thread "ubi_bgt0d" started, PID 8962 [ 169.770982][ T8961] page_owner tracks the page as allocated [ 169.800072][ T8961] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5524, tgid 5524 (dhcpcd-run-hook), ts 53679672699, free_ts 53577490209 [ 169.923109][ T8961] post_alloc_hook+0x1c0/0x230 [ 169.933230][ T8961] get_page_from_freelist+0x1321/0x3890 [ 169.997522][ T8961] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 170.030022][ T8961] alloc_pages_mpol+0x1fb/0x550 [ 170.057029][ T8961] new_slab+0x23b/0x330 [ 170.078971][ T8961] ___slab_alloc+0xd9c/0x1940 [ 170.160185][ T8961] __slab_alloc.constprop.0+0x56/0xb0 [ 170.165626][ T8961] __kmalloc_noprof+0x2f2/0x510 [ 170.233708][ T8961] tomoyo_init_log+0x1385/0x2140 [ 170.270323][ T8961] tomoyo_supervisor+0x302/0x13b0 [ 170.275443][ T8961] tomoyo_env_perm+0x191/0x200 [ 170.314123][ T8961] tomoyo_find_next_domain+0xec2/0x20b0 [ 170.343274][ T8961] tomoyo_bprm_check_security+0x12e/0x1d0 [ 170.349046][ T8961] security_bprm_check+0x1b9/0x1e0 [ 170.387334][ T8961] bprm_execve+0x810/0x1650 [ 170.420137][ T8961] do_execveat_common.isra.0+0x4a5/0x610 [ 170.445787][ T8961] page last free pid 5519 tgid 5519 stack trace: [ 170.480032][ T8961] __free_frozen_pages+0x7fe/0x1180 [ 170.510078][ T8961] __put_partials+0x16d/0x1c0 [ 170.514866][ T8961] qlist_free_all+0x4d/0x120 [ 170.519463][ T8961] kasan_quarantine_reduce+0x195/0x1e0 [ 170.560312][ T8961] __kasan_slab_alloc+0x69/0x90 [ 170.565320][ T8961] __kmalloc_noprof+0x1d4/0x510 [ 170.580067][ T8961] tomoyo_supervisor+0x45b/0x13b0 [ 170.585168][ T8961] tomoyo_path_permission+0x270/0x3b0 [ 170.593331][ T8961] tomoyo_check_open_permission+0x349/0x3c0 [ 170.599258][ T8961] tomoyo_file_open+0x6b/0x90 [ 170.604332][ T8961] security_file_open+0x84/0x1e0 [ 170.610169][ T8961] do_dentry_open+0x596/0x1c10 [ 170.615021][ T8961] vfs_open+0x82/0x3f0 [ 170.619091][ T8961] path_openat+0x1de4/0x2cb0 [ 170.624494][ T8961] do_filp_open+0x20b/0x470 [ 170.629081][ T8961] do_sys_openat2+0x11b/0x1d0 [ 172.242602][ T9059] kAFS: Invalid Command on /proc/fs/afs/cells file [ 173.739302][ T9118] delete_channel: no stack [ 174.926655][ T9172] random: crng reseeded on system resumption [ 175.169855][ T9182] Setting dangerous option i915.mitigations - tainting kernel [ 176.386597][ T9234] QAT: Invalid ioctl 21531 [ 179.070791][ T9348] random: crng reseeded on system resumption [ 180.456161][ T9407] Setting dangerous option i915.mitigations - tainting kernel [ 181.030122][ T9427] aoe: invalid device specification [ 181.125379][ T9428] ima: policy update failed [ 181.164197][ T30] audit: type=1802 audit(1752486171.382:7): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1693" res=0 errno=0 [ 182.086158][ T9471] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 183.212357][ T9523] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 183.245490][ T9527] random: crng reseeded on system resumption [ 184.493162][ T9574] db_root: cannot open: Y [ 184.590791][ T9579] block nbd14: the capability attribute has been deprecated. [ 188.060293][ T9727] vhci_hcd: invalid port number 16 [ 188.065798][ T9727] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 192.636613][ T9919] block2mtd: illegal erase size [ 194.385780][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392884][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487621][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.241621][T10016] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 195.885992][T10040] ICMPv6: process `syz.1.1987' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 195.923467][T10043] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 195.941452][T10044] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 195.994866][T10044] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 196.035985][T10044] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 196.087590][T10044] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 196.141532][T10044] page dumped because: unmovable page [ 196.159585][T10044] page_owner info is not present (never set?) [ 197.087183][T10091] __vm_enough_memory: pid: 10091, comm: syz.0.2013, bytes: 4398046511104 not enough memory for the allocation [ 198.465478][ T30] audit: type=1800 audit(1752486188.692:8): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2041" name="dbroot" dev="configfs" ino=20611 res=0 errno=0 [ 198.850703][ T8378] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 198.850728][ T8378] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 198.866433][ T8378] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 198.866490][ T8378] Bluetooth: hci2: Malformed LE Event: 0x0d [ 199.263250][T10180] delete_channel: no stack [ 201.098551][T10265] kAFS: Invalid Command on /proc/fs/afs/cells file [ 202.177223][T10317] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 202.833060][T10341] zram: Added device: zram1 [ 203.554373][T10374] vhci_hcd: invalid port number 16 [ 203.592810][T10374] vhci_hcd: invalid port number 16 [ 203.761594][T10386] random: crng reseeded on system resumption [ 205.978732][T10489] usb usb24: usbfs: process 10489 (syz.1.2211) did not claim interface 0 before use [ 207.292975][T10551] binder: 10550:10551 ioctl c0306201 0 returned -14 [ 210.904918][T10714] random: crng reseeded on system resumption [ 211.825192][T10668] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832390][T10668] Bluetooth: hci1: command 0x0406 tx timeout [ 211.838391][T10668] Bluetooth: hci0: command 0x0406 tx timeout syzkaller syzkaller login: [ 212.658619][T10791] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 212.659144][T10790] ima: policy update failed [ 212.742789][ T30] audit: type=1802 audit(1752486202.972:9): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2358" res=0 errno=0 [ 214.232101][T10864] [ 214.583091][T10882] QAT: failed to copy from user. [ 218.292214][T11042] QAT: failed to copy from user. [ 218.500014][T11050] block2mtd: device name too long [ 219.378229][T11090] Invalid ELF header magic: != ELF [ 219.418930][T11094] block2mtd: parameter too long [ 221.271167][ T30] audit: type=1800 audit(1752486211.502:10): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2542" name="lu_gp_id" dev="configfs" ino=23780 res=0 errno=0 [ 221.340290][T11171] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 221.340290][T11171] M' is too long [ 221.386076][T11171] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 221.386076][T11171] W ' is too long [ 221.758720][ T30] audit: type=1400 audit(1752486211.982:11): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11184 comm="syz.1.2552" [ 222.244148][T11210] afs: Bad value for 'source' [ 222.353463][ T30] audit: type=1400 audit(1752486212.582:12): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11211 comm="syz.1.2564" [ 223.043281][T11232] could not allocate digest TFM handle [ 224.573284][T11309] QAT: Device 250 not found [ 224.780595][T11316] hub 1-0:1.0: USB hub found [ 224.800383][T11316] hub 1-0:1.0: 1 port detected [ 226.384421][T11356] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 227.586952][T11423] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 228.470813][T11460] hub 1-0:1.0: USB hub found [ 228.504432][T11460] hub 1-0:1.0: 1 port detected [ 229.504148][T11509] phram: not enough arguments [ 230.104699][T11537] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 230.262532][ T30] audit: type=1800 audit(1752486220.492:13): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2725" name="dbroot" dev="configfs" ino=24954 res=0 errno=0 [ 230.292164][T11541] db_root: not a directory: /dev/audio1 [ 231.030057][T11575] udc dummy_udc.0: soft-connect without a gadget driver [ 231.225994][T11585] zram0: detected capacity change from 8 to 0 [ 231.656008][T11602] ima: policy update failed [ 231.684368][ T30] audit: type=1802 audit(1752486221.912:14): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2757" res=0 errno=0 [ 232.589033][ T30] audit: type=1806 audit(1752486222.812:15): res=-14 [ 233.214334][T11673] Format for deleting device is "id" (uint). [ 235.177827][T11749] program syz.0.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.110007][T12199] usb usb2: usbfs: process 12199 (syz.1.3045) did not claim interface 1 before use [ 246.458653][T12207] program syz.3.3049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.721590][T12407] WARNING! power/level is deprecated; use power/control instead [ 252.179263][T12424] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 254.415870][T12530] ICMPv6: process `syz.3.3207' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 255.823778][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.830849][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.893480][T12642] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[12642] [ 257.242347][T12656] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 257.402493][T12664] ecryptfs_miscdev_write: Error while inspecting packet size [ 257.658519][T12676] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[12676] [ 257.805613][T12682] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 258.340441][T12705] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 260.006932][T12781] bond0: Unable to set down delay as MII monitoring is disabled [ 260.244485][T12795] nfsd: Unknown parameter '^B-' [ 261.884146][ T8485] Bluetooth: hci2: unexpected event 0x3e length: 0 < 1 [ 263.742074][T12949] ======================================================= [ 263.742074][T12949] WARNING: The mand mount option has been deprecated and [ 263.742074][T12949] and is ignored by this kernel. Remove the mand [ 263.742074][T12949] option from the mount to silence this warning. [ 263.742074][T12949] ======================================================= [ 263.777432][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.069214][T12962] : Can't lookup blockdev [ 264.474698][T12983] nvme_fcloop: unknown parameter or missing value '7' [ 266.208318][T13065] vhci_hcd: vhci_device speed not set [ 268.929112][T13181] ICMPv6: process `syz.0.3522' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 269.248801][ T8485] Bluetooth: hci1: unexpected event 0x3e length: 0 < 1 [ 269.515281][T13205] syz.1.3535 (13205): drop_caches: 0 [ 269.738616][T13215] mmap: syz.1.3539 (13215) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.170569][T13316] vhci_hcd: invalid port number 16 [ 272.175713][T13316] vhci_hcd: invalid port number 16 [ 272.533427][T13334] random: crng reseeded on system resumption [ 273.952716][T13400] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163ed79 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 273.968531][T13400] Call Trace: [ 273.971815][T13400] [ 273.974752][T13400] ? __pfx_mce_cpu_restart+0x10/0x10 [ 273.980064][T13400] mce_cpu_restart+0x98/0xb0 [ 273.984651][T13400] smp_call_function_many_cond+0xef9/0x1510 [ 273.990536][T13400] ? __pfx_mce_cpu_restart+0x10/0x10 [ 273.995830][T13400] ? mark_held_locks+0x49/0x80 [ 274.000586][T13400] ? _raw_spin_unlock_irq+0x11/0x50 [ 274.005777][T13400] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.010973][T13400] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 274.016773][T13400] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 274.023093][T13400] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 274.029076][T13400] ? __pfx_mce_cpu_restart+0x10/0x10 [ 274.034363][T13400] on_each_cpu_cond_mask+0x40/0x90 [ 274.039464][T13400] set_bank+0x240/0x3a0 [ 274.043614][T13400] ? __pfx_set_bank+0x10/0x10 [ 274.048457][T13400] ? find_held_lock+0x2b/0x80 [ 274.053130][T13400] ? __pfx_set_bank+0x10/0x10 [ 274.057813][T13400] dev_attr_store+0x55/0x80 [ 274.062312][T13400] ? __pfx_dev_attr_store+0x10/0x10 [ 274.067500][T13400] sysfs_kf_write+0xef/0x150 [ 274.072084][T13400] kernfs_fop_write_iter+0x351/0x510 [ 274.077359][T13400] ? __pfx_sysfs_kf_write+0x10/0x10 [ 274.082552][T13400] vfs_write+0x6c7/0x1150 [ 274.086878][T13400] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 274.092675][T13400] ? __pfx___mutex_lock+0x10/0x10 [ 274.097716][T13400] ? __pfx_vfs_write+0x10/0x10 [ 274.102509][T13400] ksys_write+0x12a/0x250 [ 274.106845][T13400] ? __pfx_ksys_write+0x10/0x10 [ 274.111693][T13400] do_syscall_64+0xcd/0x490 [ 274.116194][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.122076][T13400] RIP: 0033:0x7f067758e929 [ 274.126498][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.146096][T13400] RSP: 002b:00007f0678480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.154500][T13400] RAX: ffffffffffffffda RBX: 00007f06777b5fa0 RCX: 00007f067758e929 [ 274.162459][T13400] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 274.170417][T13400] RBP: 00007f0677610b39 R08: 0000000000000000 R09: 0000000000000000 [ 274.178377][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.186334][T13400] R13: 0000000000000000 R14: 00007f06777b5fa0 R15: 00007ffe43c36c28 [ 274.194303][T13400] [ 276.512120][ T8485] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 277.161519][T13539] cougar: G6 mapped to space [ 277.846909][T13569] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 278.480178][ T8485] Bluetooth: hci0: unexpected event 0x3e length: 0 < 1 [ 279.728618][T13652] i2c i2c-0: new_device: Missing parameters [ 280.475800][ T8485] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 282.239158][T13763] CIFS mount error: No usable UNC path provided in device string! [ 282.239158][T13763] [ 282.260040][T13766] program syz.0.3806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.281419][T13763] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 287.733338][T14006] cougar: G6 mapped to F18 [ 288.208968][T14023] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 14023 comm: syz.3.3929) [ 288.325436][ T30] audit: type=1800 audit(1752486278.552:16): pid=14023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3929" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=32901 res=0 errno=0 [ 288.713698][T14037] program syz.3.3937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.768996][T14037] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.810293][T14041] usb usb24: check_ctrlrecip: process 14041 (syz.1.3939) requesting ep 01 but needs 81 [ 288.858901][T14041] usb usb24: usbfs: process 14041 (syz.1.3939) did not claim interface 0 before use [ 291.030977][T14118] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 291.081407][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.090596][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.078987][T14153] [U]  [ 292.670211][ T30] audit: type=1806 audit(1752486282.892:17): xattr="" res=-22 [ 295.719567][T14327] Invalid input. Must be >= 4608 [ 297.258106][T14401] warning: `syz.1.4118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 298.893482][T14475] Debayer A: ================= START STATUS ================= [ 298.919155][T14475] Debayer A: Debayer Mean Window Size: 3 [ 298.955786][T14475] Debayer A: ================== END STATUS ================== [ 301.780264][T14603] delete_channel: no stack [ 302.900867][T14658] synth uevent: /devices/virtual/block/nbd6: unknown uevent action string [ 302.961869][T14658] block nbd6: uevent: failed to send synthetic uevent: -22 [ 303.554529][T14685] __vm_enough_memory: pid: 14685, comm: syz.0.4258, bytes: 9223372036854775808 not enough memory for the allocation [ 305.740553][T14780] i2c i2c-0: new_device: Invalid device name [ 306.258992][T14803] < [ 306.759204][T14825] bond0: no command found in slaves file - use +ifname or -ifname [ 306.807730][T14830] ima: policy update failed [ 306.832279][ T30] audit: type=1802 audit(1752486297.062:18): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4329" res=0 errno=0 [ 308.545498][T14899] random: crng reseeded on system resumption [ 312.054918][T15038] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 312.054918][T15038] [ 312.433024][T15052] : Can't lookup blockdev [ 313.364147][T15094] block2mtd: Using custom MTD label '' for dev [ 313.410011][T15094] block2mtd: error: cannot open device [ 315.280120][T15169] overlayfs: "check_copy_up" module option is obsolete [ 315.528447][T15178] block2mtd: illegal erase size [ 317.266600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.281977][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.408283][ T8485] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 318.503917][T15298] Line length is too long: Should be less than 4094 [ 319.699267][T15342] program syz.1.4576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.417545][T15500] delete_channel: no stack [ 323.985913][ T30] audit: type=1804 audit(1752486322.198:19): pid=15528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4665" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 324.011960][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.649383][ T30] audit: type=1800 audit(1752486322.868:20): pid=15553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4678" name="members" dev="configfs" ino=37792 res=0 errno=0 syzkaller syzkaller login: [ 328.353178][ T8485] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 331.417080][T15942] kafs: addr_prefs: Invalid Command [ 332.133444][T15979] [ 334.003801][ T8485] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 337.471935][ T8485] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 338.629138][ T30] audit: type=1800 audit(1752486336.848:21): pid=16291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4921" name="discovery_nqn" dev="configfs" ino=39422 res=0 errno=0 [ 340.401057][T16376] random: crng reseeded on system resumption [ 343.180851][T16559] vhci_hcd: invalid port number 16 [ 343.217368][T16559] vhci_hcd: invalid port number 16 [ 343.800078][T16592] i2c i2c-0: new_device: Can't parse I2C address [ 345.061867][T16661] [ 345.064213][T16661] ====================================================== [ 345.071240][T16661] WARNING: possible circular locking dependency detected [ 345.078241][T16661] 6.16.0-rc6-syzkaller #0 Tainted: G U I [ 345.085335][T16661] ------------------------------------------------------ [ 345.092329][T16661] syz.1.5054/16661 is trying to acquire lock: [ 345.098375][T16661] ffff888142304090 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 345.108188][T16661] [ 345.108188][T16661] but task is already holding lock: [ 345.115811][T16661] ffff888142303b58 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.127041][T16661] [ 345.127041][T16661] which lock already depends on the new lock. [ 345.127041][T16661] [ 345.137442][T16661] [ 345.137442][T16661] the existing dependency chain (in reverse order) is: [ 345.146699][T16661] [ 345.146699][T16661] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 345.155378][T16661] blk_alloc_queue+0x619/0x760 [ 345.160653][T16661] blk_mq_alloc_queue+0x175/0x290 [ 345.166189][T16661] __blk_mq_alloc_disk+0x29/0x120 [ 345.171728][T16661] nbd_dev_add+0x4a0/0xbc0 [ 345.176657][T16661] nbd_init+0x181/0x320 [ 345.181325][T16661] do_one_initcall+0x120/0x6e0 [ 345.186594][T16661] kernel_init_freeable+0x5c2/0x900 [ 345.192390][T16661] kernel_init+0x1c/0x2b0 [ 345.197224][T16661] ret_from_fork+0x5d7/0x6f0 [ 345.202327][T16661] ret_from_fork_asm+0x1a/0x30 [ 345.207598][T16661] [ 345.207598][T16661] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 345.214813][T16661] fs_reclaim_acquire+0x102/0x150 [ 345.220355][T16661] prepare_alloc_pages+0x162/0x610 [ 345.225973][T16661] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 345.232395][T16661] __alloc_pages_noprof+0xb/0x1b0 [ 345.237944][T16661] pcpu_populate_chunk+0x110/0xb00 [ 345.243571][T16661] pcpu_alloc_noprof+0x86a/0x1470 [ 345.249107][T16661] xt_percpu_counter_alloc+0x13e/0x1b0 [ 345.255092][T16661] find_check_entry.constprop.0+0xbc/0x9b0 [ 345.261432][T16661] translate_table+0xc98/0x1720 [ 345.266815][T16661] ipt_register_table+0x102/0x430 [ 345.272774][T16661] iptable_nat_table_init+0x4b/0x250 [ 345.278580][T16661] xt_find_table_lock+0x2e4/0x520 [ 345.284114][T16661] xt_request_find_table_lock+0x28/0xf0 [ 345.290170][T16661] get_info+0x190/0x610 [ 345.294833][T16661] do_ipt_get_ctl+0x169/0xa10 [ 345.300025][T16661] nf_getsockopt+0x79/0xe0 [ 345.304944][T16661] ip_getsockopt+0x18c/0x1e0 [ 345.310044][T16661] tcp_getsockopt+0xa1/0x100 [ 345.315160][T16661] do_sock_getsockopt+0x3ff/0x800 [ 345.320797][T16661] __sys_getsockopt+0x123/0x1b0 [ 345.326167][T16661] __x64_sys_getsockopt+0xbd/0x160 [ 345.331791][T16661] do_syscall_64+0xcd/0x490 [ 345.336805][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.343203][T16661] [ 345.343203][T16661] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 345.350916][T16661] __mutex_lock+0x199/0xb90 [ 345.355937][T16661] pcpu_alloc_noprof+0xb4c/0x1470 [ 345.361469][T16661] sbitmap_init_node+0x2fd/0x770 [ 345.366910][T16661] sbitmap_queue_init_node+0x41/0x560 [ 345.372794][T16661] blk_mq_init_tags+0x12d/0x2b0 [ 345.378251][T16661] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 345.384303][T16661] blk_mq_init_sched+0x30c/0x610 [ 345.389744][T16661] elevator_switch+0x1e1/0x7f0 [ 345.395016][T16661] elevator_change+0x2ac/0x400 [ 345.400281][T16661] elevator_set_default+0x292/0x320 [ 345.405985][T16661] blk_register_queue+0x393/0x4f0 [ 345.411515][T16661] __add_disk+0x74a/0xf00 [ 345.416362][T16661] add_disk_fwnode+0x13f/0x5d0 [ 345.421645][T16661] nbd_dev_add+0x791/0xbc0 [ 345.426581][T16661] nbd_init+0x181/0x320 [ 345.431244][T16661] do_one_initcall+0x120/0x6e0 [ 345.436510][T16661] kernel_init_freeable+0x5c2/0x900 [ 345.442220][T16661] kernel_init+0x1c/0x2b0 [ 345.447059][T16661] ret_from_fork+0x5d7/0x6f0 [ 345.452160][T16661] ret_from_fork_asm+0x1a/0x30 [ 345.457433][T16661] [ 345.457433][T16661] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 345.465239][T16661] __lock_acquire+0x126f/0x1c90 [ 345.470601][T16661] lock_acquire+0x179/0x350 [ 345.475616][T16661] __mutex_lock+0x199/0xb90 [ 345.480632][T16661] queue_requests_store+0x1c7/0x310 [ 345.486336][T16661] queue_attr_store+0x279/0x320 [ 345.491697][T16661] sysfs_kf_write+0xef/0x150 [ 345.496795][T16661] kernfs_fop_write_iter+0x351/0x510 [ 345.502586][T16661] iter_file_splice_write+0x91c/0x1150 [ 345.508553][T16661] direct_splice_actor+0x18f/0x6c0 [ 345.514204][T16661] splice_direct_to_actor+0x345/0xa30 [ 345.520360][T16661] do_splice_direct+0x174/0x240 [ 345.525732][T16661] do_sendfile+0xb06/0xe50 [ 345.530664][T16661] __x64_sys_sendfile64+0x1d8/0x220 [ 345.536369][T16661] do_syscall_64+0xcd/0x490 [ 345.541392][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.547789][T16661] [ 345.547789][T16661] other info that might help us debug this: [ 345.547789][T16661] [ 345.557999][T16661] Chain exists of: [ 345.557999][T16661] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 345.557999][T16661] [ 345.571717][T16661] Possible unsafe locking scenario: [ 345.571717][T16661] [ 345.579161][T16661] CPU0 CPU1 [ 345.584519][T16661] ---- ---- [ 345.589870][T16661] lock(&q->q_usage_counter(io)#59); [ 345.595253][T16661] lock(fs_reclaim); [ 345.601754][T16661] lock(&q->q_usage_counter(io)#59); [ 345.609736][T16661] lock(&q->elevator_lock); [ 345.614347][T16661] [ 345.614347][T16661] *** DEADLOCK *** [ 345.614347][T16661] [ 345.622470][T16661] 5 locks held by syz.1.5054/16661: [ 345.627653][T16661] #0: ffff888036392428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 345.637652][T16661] #1: ffff88805d45cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 345.647384][T16661] #2: ffff8881433bc968 (kn->active#205){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 345.657464][T16661] #3: ffff888142303b58 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.669114][T16661] #4: ffff888142303b90 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.681016][T16661] [ 345.681016][T16661] stack backtrace: [ 345.687081][T16661] CPU: 0 UID: 0 PID: 16661 Comm: syz.1.5054 Tainted: G U I 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 345.687128][T16661] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 345.687140][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.687161][T16661] Call Trace: [ 345.687168][T16661] [ 345.687174][T16661] dump_stack_lvl+0x116/0x1f0 [ 345.687196][T16661] print_circular_bug+0x275/0x350 [ 345.687214][T16661] check_noncircular+0x14c/0x170 [ 345.687233][T16661] __lock_acquire+0x126f/0x1c90 [ 345.687252][T16661] ? __lock_acquire+0xb8a/0x1c90 [ 345.687269][T16661] lock_acquire+0x179/0x350 [ 345.687286][T16661] ? queue_requests_store+0x1c7/0x310 [ 345.687299][T16661] ? __pfx___might_resched+0x10/0x10 [ 345.687313][T16661] ? do_raw_spin_lock+0x12c/0x2b0 [ 345.687333][T16661] __mutex_lock+0x199/0xb90 [ 345.687353][T16661] ? queue_requests_store+0x1c7/0x310 [ 345.687365][T16661] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 345.687382][T16661] ? queue_requests_store+0x1c7/0x310 [ 345.687393][T16661] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.687410][T16661] ? __pfx___mutex_lock+0x10/0x10 [ 345.687431][T16661] ? __pfx_autoremove_wake_function+0x10/0x10 [ 345.687449][T16661] ? queue_requests_store+0x1c7/0x310 [ 345.687461][T16661] queue_requests_store+0x1c7/0x310 [ 345.687473][T16661] ? __pfx_queue_requests_store+0x10/0x10 [ 345.687487][T16661] ? __mutex_trylock_common+0xe9/0x250 [ 345.687507][T16661] ? __pfx_queue_requests_store+0x10/0x10 [ 345.687519][T16661] queue_attr_store+0x279/0x320 [ 345.687539][T16661] ? __pfx_queue_attr_store+0x10/0x10 [ 345.687557][T16661] ? __lock_acquire+0x622/0x1c90 [ 345.687578][T16661] ? find_held_lock+0x2b/0x80 [ 345.687591][T16661] ? sysfs_file_kobj+0xe4/0x290 [ 345.687607][T16661] ? __pfx_queue_attr_store+0x10/0x10 [ 345.687626][T16661] sysfs_kf_write+0xef/0x150 [ 345.687641][T16661] kernfs_fop_write_iter+0x351/0x510 [ 345.687654][T16661] ? __pfx_sysfs_kf_write+0x10/0x10 [ 345.687670][T16661] iter_file_splice_write+0x91c/0x1150 [ 345.687692][T16661] ? __pfx_iter_file_splice_write+0x10/0x10 [ 345.687711][T16661] ? __pfx_copy_splice_read+0x10/0x10 [ 345.687731][T16661] ? __pfx_iter_file_splice_write+0x10/0x10 [ 345.687755][T16661] direct_splice_actor+0x18f/0x6c0 [ 345.687776][T16661] splice_direct_to_actor+0x345/0xa30 [ 345.687793][T16661] ? __pfx_direct_splice_actor+0x10/0x10 [ 345.687813][T16661] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 345.687831][T16661] do_splice_direct+0x174/0x240 [ 345.687847][T16661] ? __pfx_do_splice_direct+0x10/0x10 [ 345.687863][T16661] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 345.687880][T16661] ? rw_verify_area+0xcf/0x680 [ 345.687897][T16661] do_sendfile+0xb06/0xe50 [ 345.687916][T16661] ? __pfx_do_sendfile+0x10/0x10 [ 345.687932][T16661] ? handle_mm_fault+0x2ab/0xd10 [ 345.687949][T16661] ? __x64_sys_futex+0x1e0/0x4c0 [ 345.687965][T16661] ? __x64_sys_futex+0x1e9/0x4c0 [ 345.687981][T16661] __x64_sys_sendfile64+0x1d8/0x220 [ 345.687994][T16661] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 345.688009][T16661] do_syscall_64+0xcd/0x490 [ 345.688029][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.688042][T16661] RIP: 0033:0x7f067758e929 [ 345.688055][T16661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.688067][T16661] RSP: 002b:00007f0678480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 345.688079][T16661] RAX: ffffffffffffffda RBX: 00007f06777b5fa0 RCX: 00007f067758e929 [ 345.688088][T16661] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 345.688096][T16661] RBP: 00007f0677610b39 R08: 0000000000000000 R09: 0000000000000000 [ 345.688104][T16661] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 345.688111][T16661] R13: 0000000000000000 R14: 00007f06777b5fa0 R15: 00007ffe43c36c28 [ 345.688124][T16661] [ 345.688144][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.067939][ C0] vkms_vblank_simulate: vblank timer overrun