last executing test programs: 2.856768038s ago: executing program 2 (id=1778): r0 = memfd_secret$auto(0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x1, &(0x7f0000000240)="02c9") 2.68726733s ago: executing program 2 (id=1781): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0x0, 0x1000) 2.564227423s ago: executing program 2 (id=1784): get_mempolicy$auto(0x0, &(0x7f0000000140)=0x1, 0x2, 0x86, 0x9) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0xc0000001, 0x8}, 0x6f4) 1.045013594s ago: executing program 2 (id=1808): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r0, 0xa0) 1.029647178s ago: executing program 1 (id=1809): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x101) 977.958207ms ago: executing program 3 (id=1810): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21) 852.490878ms ago: executing program 2 (id=1811): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x1432a0091, 0x0, 0x0, 0x0, 0x0, 0x0) 850.798209ms ago: executing program 1 (id=1812): r0 = socket(0x11, 0x3, 0x6) ioctl$auto_FIOCLEX(r0, 0x5451, 0xffffffffffffffff) 849.58ms ago: executing program 3 (id=1813): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 683.526385ms ago: executing program 0 (id=1814): r0 = socket(0xa, 0x2, 0x88) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f0000000340)='\x00', &(0x7f0000000380)=0x8) 673.11991ms ago: executing program 3 (id=1815): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='-\b\x1c\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x81) 634.9045ms ago: executing program 1 (id=1816): socket(0x2, 0x1, 0x106) getsockopt$auto(0x3, 0x6, 0x1f, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=0x9) 489.869325ms ago: executing program 3 (id=1817): r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r0, 0x0, 0x2) 467.784446ms ago: executing program 0 (id=1818): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) read$auto(r0, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1) 466.688546ms ago: executing program 1 (id=1820): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5c7820d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) 374.156034ms ago: executing program 0 (id=1821): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 303.685677ms ago: executing program 0 (id=1822): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0) 242.343096ms ago: executing program 3 (id=1823): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r0, &(0x7f0000000040)=',,\x00', 0x8) 222.151626ms ago: executing program 0 (id=1824): r0 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) readv$auto(r0, &(0x7f0000000180)={&(0x7f0000000140), 0x9}, 0x4) 175.210721ms ago: executing program 1 (id=1825): munmap$auto(0x20001000, 0x4) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000013c0)) 160.538233ms ago: executing program 2 (id=1826): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000140)) 16.142859ms ago: executing program 0 (id=1827): r0 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/auxv\x00', 0x8040, 0x0) readv$auto(r0, &(0x7f0000000900)={&(0x7f0000000800), 0x3ff}, 0x2) 11.868543ms ago: executing program 1 (id=1828): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/queue/nr_requests\x00', 0x1a1842, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) 0s ago: executing program 3 (id=1829): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/is_otg\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 90.980194][ T5826] cgroup: Unknown subsys name 'net' [ 91.100168][ T5826] cgroup: Unknown subsys name 'cpuset' [ 91.109464][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.104480][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.311220][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.319485][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.328825][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.336348][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.344749][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.353084][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.360579][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.361671][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.377035][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.386874][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.387154][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.394745][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.411103][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.422760][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.431576][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.439799][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.448531][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.455815][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.465660][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.473880][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.927083][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.066945][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.172555][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.195698][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.203212][ T5835] bridge_slave_0: entered allmulticast mode [ 96.211704][ T5835] bridge_slave_0: entered promiscuous mode [ 96.221547][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.230362][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.238029][ T5835] bridge_slave_1: entered allmulticast mode [ 96.245092][ T5835] bridge_slave_1: entered promiscuous mode [ 96.252969][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 96.279620][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.340636][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.373881][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.484485][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.491857][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.499206][ T5838] bridge_slave_0: entered allmulticast mode [ 96.506705][ T5838] bridge_slave_0: entered promiscuous mode [ 96.522492][ T5835] team0: Port device team_slave_0 added [ 96.532295][ T5835] team0: Port device team_slave_1 added [ 96.558840][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.566393][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.573870][ T5838] bridge_slave_1: entered allmulticast mode [ 96.581455][ T5838] bridge_slave_1: entered promiscuous mode [ 96.658346][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.665870][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.673075][ T5839] bridge_slave_0: entered allmulticast mode [ 96.680813][ T5839] bridge_slave_0: entered promiscuous mode [ 96.689585][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.697341][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.704726][ T5839] bridge_slave_1: entered allmulticast mode [ 96.712169][ T5839] bridge_slave_1: entered promiscuous mode [ 96.743513][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.750973][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.777025][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.816966][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.829379][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.842253][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.849542][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.857327][ T5836] bridge_slave_0: entered allmulticast mode [ 96.864368][ T5836] bridge_slave_0: entered promiscuous mode [ 96.872609][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.881590][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.907641][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.928105][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.939835][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.949648][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.956974][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.964198][ T5836] bridge_slave_1: entered allmulticast mode [ 96.971575][ T5836] bridge_slave_1: entered promiscuous mode [ 97.044889][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.092972][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.109090][ T5838] team0: Port device team_slave_0 added [ 97.122042][ T24] cfg80211: failed to load regulatory.db [ 97.122653][ T5839] team0: Port device team_slave_0 added [ 97.181477][ T5838] team0: Port device team_slave_1 added [ 97.201577][ T5839] team0: Port device team_slave_1 added [ 97.226549][ T5835] hsr_slave_0: entered promiscuous mode [ 97.233114][ T5835] hsr_slave_1: entered promiscuous mode [ 97.243739][ T5836] team0: Port device team_slave_0 added [ 97.266782][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.273782][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.300919][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.313749][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.320948][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.347118][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.360649][ T5836] team0: Port device team_slave_1 added [ 97.426419][ T55] Bluetooth: hci1: command tx timeout [ 97.426752][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.441090][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.467347][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.505637][ T55] Bluetooth: hci2: command tx timeout [ 97.505643][ T5846] Bluetooth: hci3: command tx timeout [ 97.509026][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.517058][ T5846] Bluetooth: hci0: command tx timeout [ 97.528359][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.556568][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.568581][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.575864][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.602073][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.622542][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.629693][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.655980][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.741524][ T5838] hsr_slave_0: entered promiscuous mode [ 97.749999][ T5838] hsr_slave_1: entered promiscuous mode [ 97.756849][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.764598][ T5838] Cannot create hsr debugfs directory [ 97.864267][ T5836] hsr_slave_0: entered promiscuous mode [ 97.871594][ T5836] hsr_slave_1: entered promiscuous mode [ 97.878099][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.885864][ T5836] Cannot create hsr debugfs directory [ 97.903362][ T5839] hsr_slave_0: entered promiscuous mode [ 97.909837][ T5839] hsr_slave_1: entered promiscuous mode [ 97.916766][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.924389][ T5839] Cannot create hsr debugfs directory [ 98.214984][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.254810][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.267160][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.310780][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.436991][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.451473][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.463625][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.480091][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.589121][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.624371][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.637078][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.683585][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.710373][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.723391][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.734649][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.760832][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.847142][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.910691][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.944765][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.952215][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.969556][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.998369][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.005626][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.052437][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.092970][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100218][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.152680][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.159870][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.217310][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.282629][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.315670][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.335273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.342596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.397464][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.404640][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.439046][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.506920][ T5846] Bluetooth: hci1: command tx timeout [ 99.522374][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.586415][ T5846] Bluetooth: hci2: command tx timeout [ 99.592057][ T5846] Bluetooth: hci0: command tx timeout [ 99.594659][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.598107][ T55] Bluetooth: hci3: command tx timeout [ 99.604743][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.643667][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.650944][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.710622][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.920268][ T5835] veth0_vlan: entered promiscuous mode [ 99.957251][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.991690][ T5835] veth1_vlan: entered promiscuous mode [ 100.096659][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.139029][ T5838] veth0_vlan: entered promiscuous mode [ 100.174695][ T5835] veth0_macvtap: entered promiscuous mode [ 100.202589][ T5835] veth1_macvtap: entered promiscuous mode [ 100.268883][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.278949][ T5836] veth0_vlan: entered promiscuous mode [ 100.285551][ T5838] veth1_vlan: entered promiscuous mode [ 100.302245][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.320469][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.343488][ T5836] veth1_vlan: entered promiscuous mode [ 100.358500][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.369252][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378717][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388491][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.457657][ T5838] veth0_macvtap: entered promiscuous mode [ 100.489608][ T5836] veth0_macvtap: entered promiscuous mode [ 100.508947][ T5838] veth1_macvtap: entered promiscuous mode [ 100.523868][ T5836] veth1_macvtap: entered promiscuous mode [ 100.602115][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.613911][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.626251][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.640731][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.653634][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.664128][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.676798][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.688048][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.695695][ T5839] veth0_vlan: entered promiscuous mode [ 100.734212][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.745372][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.758213][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.769385][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.780115][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.792380][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.806885][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.819124][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.837333][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.845369][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.863015][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.873878][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.886844][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.895798][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.913373][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.922439][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.931889][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.941378][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.974583][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.975371][ T5839] veth1_vlan: entered promiscuous mode [ 100.982554][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.161086][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.201094][ T5839] veth0_macvtap: entered promiscuous mode [ 101.230780][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.244515][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.259230][ T5839] veth1_macvtap: entered promiscuous mode [ 101.359850][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.374930][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.394741][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.406550][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.418274][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.420025][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.430577][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.447203][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.467186][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.478054][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.491896][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.565002][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.580843][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.593140][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.604501][ T5849] Bluetooth: hci1: command tx timeout [ 101.610869][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.621285][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.632517][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.645245][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.666390][ T5849] Bluetooth: hci3: command tx timeout [ 101.666457][ T55] Bluetooth: hci0: command tx timeout [ 101.672535][ T5849] Bluetooth: hci2: command tx timeout [ 101.694505][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.716241][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.725014][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.730066][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.744391][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.754295][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.061502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.099808][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.279861][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.308322][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.727556][ T5930] WARNING! power/level is deprecated; use power/control instead [ 103.252749][ T30] audit: type=1807 audit(1743450963.676:2): UNKNOWN= res=0 [ 103.277336][ T5946] ima: policy update failed [ 103.295469][ T30] audit: type=1802 audit(1743450963.706:3): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.21" res=0 errno=0 [ 103.362525][ T30] audit: type=1802 audit(1743450963.716:4): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.21" res=0 errno=0 [ 103.666258][ T5849] Bluetooth: hci1: command tx timeout [ 103.746254][ T5849] Bluetooth: hci0: command tx timeout [ 103.747445][ T55] Bluetooth: hci3: command tx timeout [ 103.751744][ T5849] Bluetooth: hci2: command tx timeout [ 104.431461][ T5981] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[5981] [ 104.824038][ T5998] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 110.355631][ T6201] < [ 111.841026][ T6262] block2mtd: device name too long [ 113.445518][ T6317] Process accounting resumed [ 115.436334][ T6401] program syz.3.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.797186][ T6415] misc userio: Invalid payload size [ 118.722708][ T6530] i2c i2c-0: delete_device: Can't parse I2C address [ 118.779693][ T6534] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 120.441207][ T6594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.425818][ T6633] usb usb15: usbfs: process 6633 (syz.2.356) did not claim interface 0 before use [ 122.088978][ T6663] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 123.183545][ T6693] process 'syz.0.385' launched '/dev/fd/3' with NULL argv: empty string added [ 124.105633][ T6729] aoe: can't write to that file. [ 124.347290][ T6739] Setting dangerous option i915.mitigations - tainting kernel [ 124.529173][ T6746] Invalid input. Must be >= 4608 [ 126.375002][ T6814] < [ 127.016777][ T6837] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 127.032012][ T6836] ima: policy update failed [ 127.108247][ T30] audit: type=1802 audit(1743450987.516:5): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.456" res=0 errno=0 [ 130.085635][ T6964] delete_channel: no stack [ 132.627818][ T7064] Invalid ELF header magic: != ELF [ 135.497717][ T5849] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 137.778568][ T7240] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.821791][ T7240] CIFS mount error: No usable UNC path provided in device string! [ 137.821791][ T7240] [ 137.848755][ T7240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.073451][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.080717][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.999713][ T7282] bond0: no command found in slaves file - use +ifname or -ifname [ 139.618487][ T7302] QAT: failed to copy from user. [ 140.476659][ T7324] nvme_fabrics: missing parameter 'transport=%s' [ 140.483371][ T7324] nvme_fabrics: missing parameter 'nqn=%s' [ 140.708819][ T7337] overlayfs: "check_copy_up" module option is obsolete [ 140.756755][ T5849] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 143.160048][ T5849] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 143.168329][ T5849] Bluetooth: hci0: unexpected subevent 0x05 length: 725 > 12 [ 143.479436][ T7423] Process accounting paused [ 145.190656][ T5849] Bluetooth: hci0: command tx timeout [ 146.496730][ T5849] Bluetooth: hci1: Malformed Event: 0x02 [ 151.302992][ T5849] Bluetooth: hci3: Malformed Event: 0x02 [ 157.629146][ T5849] Bluetooth: hci0: Malformed Event: 0x02 [ 158.318173][ T7914] syz.3.957 uses obsolete (PF_INET,SOCK_PACKET) [ 163.344990][ T8072] ubi0: attaching mtd0 [ 163.369235][ T8072] ubi0: scanning is finished [ 163.383648][ T8072] ubi0: empty MTD device detected [ 163.401339][ T8072] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 163.525618][ T8072] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 166.055576][ T8183] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 166.539830][ T8198] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 166.565859][ T8201] mmap: syz.3.1097 (8201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.559969][ T8237] sysfs_service_op_show: Client not running :-5: [ 168.182991][ T8265] i2c i2c-0: new_device: Invalid device name [ 172.824018][ T8447] ceph: Failed to parse sending metrics switch value 'P^' [ 173.056720][ T8459] queue_state_write: unsupported operation '' [ 173.063772][ T8459] queue_state_write: use 'run', 'start' or 'kick' [ 173.563319][ T8464] Process accounting resumed [ 175.695587][ T8564] Scaler: ================= START STATUS ================= [ 175.703108][ T8564] Scaler: ================== END STATUS ================== [ 176.411291][ T30] audit: type=1800 audit(1743451036.836:6): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1292" name="discovery_nqn" dev="configfs" ino=15070 res=0 errno=0 [ 179.462153][ T8706] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 181.069636][ T8770] vivid-003: ================= START STATUS ================= [ 181.081309][ T8770] vivid-003: Radio HW Seek Mode: Bounded [ 181.094319][ T8770] vivid-003: Radio Programmable HW Seek: false [ 181.107876][ T8770] vivid-003: RDS Rx I/O Mode: Block I/O [ 181.120354][ T8770] vivid-003: Generate RBDS Instead of RDS: false [ 181.136286][ T8770] vivid-003: RDS Reception: true [ 181.147059][ T8770] vivid-003: RDS Program Type: 0 inactive [ 181.164576][ T8770] vivid-003: RDS PS Name: inactive [ 181.173637][ T8770] vivid-003: RDS Radio Text: inactive [ 181.180615][ T8770] vivid-003: RDS Traffic Announcement: false inactive [ 181.191746][ T8770] vivid-003: RDS Traffic Program: false inactive [ 181.199115][ T8770] vivid-003: RDS Music: false inactive [ 181.213987][ T8770] vivid-003: ================== END STATUS ================== [ 183.002399][ T8851] vivid-007: ================= START STATUS ================= [ 183.030686][ T8851] vivid-007: Enable Output Cropping: true [ 183.050579][ T8851] vivid-007: Enable Output Composing: true [ 183.060707][ T8851] vivid-007: Enable Output Scaler: true [ 183.073632][ T8851] vivid-007: Tx RGB Quantization Range: Automatic [ 183.083784][ T8851] vivid-007: Transmit Mode: HDMI [ 183.094793][ T8851] vivid-007: Hotplug Present: 0x00000000 [ 183.104536][ T8851] vivid-007: RxSense Present: 0x00000000 [ 183.111147][ T8851] vivid-007: EDID Present: 0x00000000 [ 183.117121][ T8851] vivid-007: ================== END STATUS ================== [ 184.786081][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.792527][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.346350][ T8958] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 186.569070][ T9016] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 187.091992][ T5849] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 189.110310][ T9129] synth uevent: /module/qat_c62x: unknown uevent action string [ 190.824688][ T9200] syz.2.1589: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.847612][ T9200] CPU: 1 UID: 0 PID: 9200 Comm: syz.2.1589 Tainted: G U 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 190.847669][ T9200] Tainted: [U]=USER [ 190.847680][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.847699][ T9200] Call Trace: [ 190.847710][ T9200] [ 190.847727][ T9200] dump_stack_lvl+0x16c/0x1f0 [ 190.847786][ T9200] warn_alloc+0x248/0x3a0 [ 190.847831][ T9200] ? __pfx_warn_alloc+0x10/0x10 [ 190.847903][ T9200] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 190.847940][ T9200] ? __pfx___might_resched+0x10/0x10 [ 190.847990][ T9200] ? rcu_is_watching+0x12/0xc0 [ 190.848032][ T9200] ? trace_contention_end+0xdd/0x130 [ 190.848067][ T9200] ? __mutex_lock+0x1ca/0xb90 [ 190.848119][ T9200] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 190.848160][ T9200] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 190.848204][ T9200] ? __pfx___mutex_lock+0x10/0x10 [ 190.848256][ T9200] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.848302][ T9200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.848353][ T9200] ? do_vfs_ioctl+0x512/0x1990 [ 190.848407][ T9200] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 190.848449][ T9200] vmalloc_noprof+0x6b/0x90 [ 190.848483][ T9200] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 190.848523][ T9200] dvb_dvr_do_ioctl+0x15d/0x290 [ 190.848571][ T9200] dvb_usercopy+0x164/0x340 [ 190.848608][ T9200] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 190.848651][ T9200] ? __pfx_dvb_usercopy+0x10/0x10 [ 190.848706][ T9200] ? __fget_files+0x20e/0x3c0 [ 190.848752][ T9200] dvb_dvr_ioctl+0x29/0x40 [ 190.848789][ T9200] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 190.848829][ T9200] __x64_sys_ioctl+0x190/0x200 [ 190.848885][ T9200] do_syscall_64+0xcd/0x260 [ 190.848940][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.848973][ T9200] RIP: 0033:0x7f1c59b8d169 [ 190.848999][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.849030][ T9200] RSP: 002b:00007f1c5aacb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.849062][ T9200] RAX: ffffffffffffffda RBX: 00007f1c59da5fa0 RCX: 00007f1c59b8d169 [ 190.849084][ T9200] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 190.849105][ T9200] RBP: 00007f1c59c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.849125][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.849144][ T9200] R13: 0000000000000000 R14: 00007f1c59da5fa0 R15: 00007ffeaf920ba8 [ 190.849186][ T9200] [ 190.849198][ T9200] Mem-Info: [ 191.109834][ T9200] active_anon:5260 inactive_anon:0 isolated_anon:0 [ 191.109834][ T9200] active_file:10243 inactive_file:39250 isolated_file:0 [ 191.109834][ T9200] unevictable:768 dirty:141 writeback:0 [ 191.109834][ T9200] slab_reclaimable:9869 slab_unreclaimable:94386 [ 191.109834][ T9200] mapped:23512 shmem:1427 pagetables:844 [ 191.109834][ T9200] sec_pagetables:0 bounce:0 [ 191.109834][ T9200] kernel_misc_reclaimable:0 [ 191.109834][ T9200] free:1346942 free_pcp:280 free_cma:0 [ 191.155625][ T9200] Node 0 active_anon:21040kB inactive_anon:0kB active_file:40972kB inactive_file:156996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94048kB dirty:564kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10424kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 191.190249][ T9200] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 191.220492][ T9200] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.248026][ T9200] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 191.253878][ T9200] Node 0 DMA32 free:1469692kB boost:0kB min:34356kB low:42944kB high:51532kB reserved_highatomic:0KB active_anon:20796kB inactive_anon:0kB active_file:40972kB inactive_file:155168kB unevictable:1536kB writepending:564kB present:3129332kB managed:2543948kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:740kB free_cma:0kB [ 191.303115][ T9200] lowmem_reserve[]: 0 0 1 1 1 [ 191.377112][ T9200] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.476779][ T9215] kAFS: Invalid Command on /proc/fs/afs/cells file [ 191.486315][ T9200] lowmem_reserve[]: 0 0 0 0 0 [ 191.491144][ T9200] Node 1 Normal free:3902004kB boost:0kB min:55520kB low:69400kB high:83280kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.585924][ T9200] lowmem_reserve[]: 0 0 0 0 0 [ 191.590820][ T9200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.625531][ T9200] Node 0 DMA32: 436*4kB (UM) 644*8kB (UME) 609*16kB (UME) 518*32kB (UME) 304*64kB (UME) 52*128kB (UME) 16*256kB (UM) 10*512kB (UM) 7*1024kB (UM) 1*2048kB (M) 340*4096kB (ME) = 1470400kB [ 191.740521][ T9200] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 191.794645][ T9200] Node 1 Normal: 239*4kB (UME) 71*8kB (UME) 46*16kB (UME) 227*32kB (UME) 104*64kB (UME) 36*128kB (UME) 13*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 942*4096kB (M) = 3902004kB [ 191.822487][ T9200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.842674][ T9200] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 191.870158][ T9200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.892376][ T9200] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 191.913013][ T9200] 50920 total pagecache pages [ 191.924874][ T9200] 0 pages in swap cache [ 191.929472][ T30] audit: type=1400 audit(1743451052.346:7): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9230 comm="syz.1.1604" [ 191.939854][ T9200] Free swap = 124996kB [ 191.973561][ T9200] Total swap = 124996kB [ 191.986577][ T9200] 2097051 pages RAM [ 191.990456][ T9200] 0 pages HighMem/MovableOnly [ 191.995216][ T9200] 428958 pages reserved [ 192.022671][ T9200] 0 pages cma reserved [ 193.173732][ T9287] ICMPv6: process `syz.0.1632' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 193.404390][ T30] audit: type=1806 audit(1743451053.826:8): res=-14 [ 193.652362][ T9311] bcache: register_bcache() error : failed to open device [ 196.170471][ T30] audit: type=1800 audit(1743452079.599:9): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1691" name="lu_gp_id" dev="configfs" ino=17371 res=0 errno=0 [ 196.236404][ T9410] kstrtoul() returned -22 for lu_gp_id [ 197.197461][ T9448] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 197.296441][ T9452] usb usb15: usbfs: process 9452 (syz.1.1712) did not claim interface 0 before use [ 199.534002][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.540639][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.020989][ T9665] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.506171][ T9684] block2mtd: Using custom MTD label '' for dev [ 203.535647][ T9684] block2mtd: error: cannot open device [ 203.720664][ T9690] [ 203.723107][ T9690] ====================================================== [ 203.730147][ T9690] WARNING: possible circular locking dependency detected [ 203.737186][ T9690] 6.14.0-syzkaller-11125-g609706855d90 #0 Tainted: G U [ 203.745958][ T9690] ------------------------------------------------------ [ 203.752990][ T9690] syz.1.1828/9690 is trying to acquire lock: [ 203.758978][ T9690] ffff8880264c2cd8 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 203.769248][ T9690] [ 203.769248][ T9690] but task is already holding lock: [ 203.776791][ T9690] ffff8880264c27a8 (&q->q_usage_counter(io)#61){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 203.788113][ T9690] [ 203.788113][ T9690] which lock already depends on the new lock. [ 203.788113][ T9690] [ 203.798553][ T9690] [ 203.798553][ T9690] the existing dependency chain (in reverse order) is: [ 203.807585][ T9690] [ 203.807585][ T9690] -> #2 (&q->q_usage_counter(io)#61){++++}-{0:0}: [ 203.816228][ T9690] blk_alloc_queue+0x619/0x760 [ 203.821629][ T9690] blk_mq_alloc_queue+0x179/0x290 [ 203.827286][ T9690] __blk_mq_alloc_disk+0x29/0x120 [ 203.832861][ T9690] nbd_dev_add+0x49d/0xbb0 [ 203.837835][ T9690] nbd_init+0x181/0x320 [ 203.842536][ T9690] do_one_initcall+0x120/0x6e0 [ 203.847856][ T9690] kernel_init_freeable+0x5c2/0x900 [ 203.853613][ T9690] kernel_init+0x1c/0x2b0 [ 203.858519][ T9690] ret_from_fork+0x45/0x80 [ 203.863495][ T9690] ret_from_fork_asm+0x1a/0x30 [ 203.868846][ T9690] [ 203.868846][ T9690] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 203.876092][ T9690] fs_reclaim_acquire+0x102/0x150 [ 203.881663][ T9690] blk_mq_alloc_and_init_hctx+0x503/0x11c0 [ 203.888029][ T9690] blk_mq_realloc_hw_ctxs+0x8f6/0xc00 [ 203.893948][ T9690] blk_mq_init_allocated_queue+0x3af/0x1230 [ 203.901312][ T9690] blk_mq_alloc_queue+0x1c2/0x290 [ 203.907521][ T9690] __blk_mq_alloc_disk+0x29/0x120 [ 203.913635][ T9690] loop_add+0x496/0xb70 [ 203.918363][ T9690] loop_init+0x164/0x270 [ 203.923266][ T9690] do_one_initcall+0x120/0x6e0 [ 203.928687][ T9690] kernel_init_freeable+0x5c2/0x900 [ 203.934453][ T9690] kernel_init+0x1c/0x2b0 [ 203.939328][ T9690] ret_from_fork+0x45/0x80 [ 203.944299][ T9690] ret_from_fork_asm+0x1a/0x30 [ 203.949928][ T9690] [ 203.949928][ T9690] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 203.957807][ T9690] __lock_acquire+0x1173/0x1ba0 [ 203.963212][ T9690] lock_acquire+0x179/0x350 [ 203.968289][ T9690] __mutex_lock+0x199/0xb90 [ 203.973348][ T9690] queue_requests_store+0x1c7/0x310 [ 203.979100][ T9690] queue_attr_store+0x270/0x310 [ 203.984507][ T9690] sysfs_kf_write+0x117/0x170 [ 203.989725][ T9690] kernfs_fop_write_iter+0x351/0x510 [ 203.995574][ T9690] vfs_write+0x5ba/0x1180 [ 204.000451][ T9690] ksys_write+0x12a/0x240 [ 204.005340][ T9690] do_syscall_64+0xcd/0x260 [ 204.010404][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.016839][ T9690] [ 204.016839][ T9690] other info that might help us debug this: [ 204.016839][ T9690] [ 204.027169][ T9690] Chain exists of: [ 204.027169][ T9690] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#61 [ 204.027169][ T9690] [ 204.040970][ T9690] Possible unsafe locking scenario: [ 204.040970][ T9690] [ 204.048465][ T9690] CPU0 CPU1 [ 204.053849][ T9690] ---- ---- [ 204.059330][ T9690] lock(&q->q_usage_counter(io)#61); [ 204.064850][ T9690] lock(fs_reclaim); [ 204.071389][ T9690] lock(&q->q_usage_counter(io)#61); [ 204.079449][ T9690] lock(&q->elevator_lock); [ 204.084156][ T9690] [ 204.084156][ T9690] *** DEADLOCK *** [ 204.084156][ T9690] [ 204.092309][ T9690] 6 locks held by syz.1.1828/9690: [ 204.097463][ T9690] #0: ffff88802a171438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 204.106574][ T9690] #1: ffff8880301c6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 204.115599][ T9690] #2: ffff888078ba7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 204.125407][ T9690] #3: ffff888143f071e8 (kn->active#316){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 204.135584][ T9690] #4: ffff8880264c27a8 (&q->q_usage_counter(io)#61){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 204.147341][ T9690] #5: ffff8880264c27e0 (&q->q_usage_counter(queue)#13){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 204.159349][ T9690] [ 204.159349][ T9690] stack backtrace: [ 204.165262][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.1.1828 Tainted: G U 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 204.165303][ T9690] Tainted: [U]=USER [ 204.165311][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.165327][ T9690] Call Trace: [ 204.165336][ T9690] [ 204.165346][ T9690] dump_stack_lvl+0x116/0x1f0 [ 204.165393][ T9690] print_circular_bug+0x275/0x350 [ 204.165437][ T9690] check_noncircular+0x14c/0x170 [ 204.165484][ T9690] __lock_acquire+0x1173/0x1ba0 [ 204.165510][ T9690] ? __lock_acquire+0xaa4/0x1ba0 [ 204.165535][ T9690] lock_acquire+0x179/0x350 [ 204.165558][ T9690] ? queue_requests_store+0x1c7/0x310 [ 204.165600][ T9690] ? __pfx___might_resched+0x10/0x10 [ 204.165642][ T9690] __mutex_lock+0x199/0xb90 [ 204.165683][ T9690] ? queue_requests_store+0x1c7/0x310 [ 204.165723][ T9690] ? mark_held_locks+0x49/0x80 [ 204.165745][ T9690] ? queue_requests_store+0x1c7/0x310 [ 204.165785][ T9690] ? __pfx___mutex_lock+0x10/0x10 [ 204.165827][ T9690] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 204.165865][ T9690] ? __pfx_autoremove_wake_function+0x10/0x10 [ 204.165910][ T9690] ? queue_requests_store+0x1c7/0x310 [ 204.165949][ T9690] queue_requests_store+0x1c7/0x310 [ 204.165990][ T9690] ? __pfx_queue_requests_store+0x10/0x10 [ 204.166031][ T9690] ? __mutex_trylock_common+0xe9/0x250 [ 204.166058][ T9690] ? __pfx_queue_requests_store+0x10/0x10 [ 204.166098][ T9690] queue_attr_store+0x270/0x310 [ 204.166143][ T9690] ? __pfx_queue_attr_store+0x10/0x10 [ 204.166181][ T9690] ? __lock_acquire+0x5ca/0x1ba0 [ 204.166206][ T9690] ? kernfs_fop_write_iter+0x28f/0x510 [ 204.166258][ T9690] ? __pfx_queue_attr_store+0x10/0x10 [ 204.166295][ T9690] sysfs_kf_write+0x117/0x170 [ 204.166320][ T9690] kernfs_fop_write_iter+0x351/0x510 [ 204.166363][ T9690] ? __pfx_sysfs_kf_write+0x10/0x10 [ 204.166389][ T9690] vfs_write+0x5ba/0x1180 [ 204.166417][ T9690] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 204.166460][ T9690] ? __pfx___mutex_lock+0x10/0x10 [ 204.166501][ T9690] ? __pfx_vfs_write+0x10/0x10 [ 204.166537][ T9690] ksys_write+0x12a/0x240 [ 204.166564][ T9690] ? __pfx_ksys_write+0x10/0x10 [ 204.166590][ T9690] ? rcu_is_watching+0x12/0xc0 [ 204.166629][ T9690] do_syscall_64+0xcd/0x260 [ 204.166671][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.166698][ T9690] RIP: 0033:0x7f3b6d98d169 [ 204.166719][ T9690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.166744][ T9690] RSP: 002b:00007f3b6e708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.166768][ T9690] RAX: ffffffffffffffda RBX: 00007f3b6dba5fa0 RCX: 00007f3b6d98d169 [ 204.166785][ T9690] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.166801][ T9690] RBP: 00007f3b6da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.166817][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.166832][ T9690] R13: 0000000000000000 R14: 00007f3b6dba5fa0 R15: 00007ffe6bbcfc58 [ 204.166856][ T9690] [ 204.479283][ T9688] Process accounting paused