last executing test programs: 3.582230309s ago: executing program 1 (id=4367): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto_SO_BSDCOMPAT(r0, 0x6, 0xe, &(0x7f0000000000), 0x80001) 3.408131046s ago: executing program 1 (id=4370): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-1024kB/stats/anon_fault_fallback\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003800)=""/168, 0xa8) 3.234899812s ago: executing program 1 (id=4375): mlockall$auto(0x3) mlockall$auto(0x7) 814.239355ms ago: executing program 0 (id=4419): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1361fef8e0e23a77846b4e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c358cc121ffefc1e0f3a31c079ae368fd33dedc87d100f7f3eafc4e10d22e8e8d6c27ef8c0e1b12f18389c2473fbc695cbf8d352993273c0382ab671751b4d", 0xb9) 769.833937ms ago: executing program 2 (id=4420): setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0xffffffffffffffff}, 0xcf) 746.128929ms ago: executing program 3 (id=4421): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0x100000001) 670.736589ms ago: executing program 0 (id=4422): socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c) 622.462098ms ago: executing program 2 (id=4423): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) close_range$auto(0x2, 0x8, 0x0) 598.148636ms ago: executing program 3 (id=4424): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/irq/4/smp_affinity\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2020207e5cc0023af10e9bfa1babfa2037", 0x13) 528.319354ms ago: executing program 0 (id=4425): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/tunl0/addr_assign_type\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000800)=""/184, 0xb8) 458.912163ms ago: executing program 2 (id=4426): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "00ff00", "01000002", "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) 446.208405ms ago: executing program 3 (id=4427): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r0, &(0x7f0000000380)='1Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0xa) 377.431305ms ago: executing program 0 (id=4428): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) 327.491568ms ago: executing program 1 (id=4429): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/223, 0xdf) 310.123642ms ago: executing program 2 (id=4430): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 294.75858ms ago: executing program 3 (id=4431): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/interface_authorized_default\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 220.675707ms ago: executing program 0 (id=4432): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd3/size\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) 176.817051ms ago: executing program 1 (id=4433): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty17\x00', 0x20001, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000380)="976f09bd68850edbe36136c8dda8a7f1165cca065833fd9b640f0000000000f6c02b55fba44503225c5a3b744483659ef0c4613e29c45e81dc254bfbf94d8d9e", 0x40) 160.619711ms ago: executing program 2 (id=4434): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x6, 0x0, 0xcf9) 141.710871ms ago: executing program 3 (id=4435): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r0, 0x2275, &(0x7f0000000240)="6880ffcf") 70.454581ms ago: executing program 0 (id=4436): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) 15.268704ms ago: executing program 1 (id=4437): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/net/protocols\x00', 0x610000, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e80)='/proc/thread-self/net/protocols\x00', 0x0, 0x0, 0x0) 427.166µs ago: executing program 2 (id=4438): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) 0s ago: executing program 3 (id=4439): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mincore$auto(0x200000000000, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 76.824982][ T5616] cgroup: Unknown subsys name 'net' [ 76.946830][ T5616] cgroup: Unknown subsys name 'cpuset' [ 76.955611][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.389277][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.599191][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.619960][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.638856][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.648326][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.650099][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.666225][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.667624][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.674128][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.681607][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.689901][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.696530][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.705343][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.710311][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.717062][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.726677][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.731168][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.738671][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.746346][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.751486][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.768273][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.900526][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.907772][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.915030][ T5637] bridge_slave_0: entered allmulticast mode [ 81.922089][ T5637] bridge_slave_0: entered promiscuous mode [ 81.944574][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.952047][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.959343][ T5637] bridge_slave_1: entered allmulticast mode [ 81.966919][ T5637] bridge_slave_1: entered promiscuous mode [ 82.024386][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.059620][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.118530][ T5637] team0: Port device team_slave_0 added [ 82.152739][ T5637] team0: Port device team_slave_1 added [ 82.227334][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.235329][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.262387][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.280452][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.287541][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.313843][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.505194][ T5637] hsr_slave_0: entered promiscuous mode [ 82.512153][ T5637] hsr_slave_1: entered promiscuous mode [ 82.579343][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.586639][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.593998][ T5630] bridge_slave_0: entered allmulticast mode [ 82.600957][ T5630] bridge_slave_0: entered promiscuous mode [ 82.615799][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.623030][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.630194][ T5628] bridge_slave_0: entered allmulticast mode [ 82.637436][ T5628] bridge_slave_0: entered promiscuous mode [ 82.658156][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.665316][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.672433][ T5630] bridge_slave_1: entered allmulticast mode [ 82.679701][ T5630] bridge_slave_1: entered promiscuous mode [ 82.694833][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.701981][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.709220][ T5628] bridge_slave_1: entered allmulticast mode [ 82.716306][ T5628] bridge_slave_1: entered promiscuous mode [ 82.809745][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.827238][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.844365][ T5635] Bluetooth: hci1: command tx timeout [ 82.844368][ T4948] Bluetooth: hci3: command tx timeout [ 82.844839][ T50] Bluetooth: hci0: command tx timeout [ 82.852175][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.856075][ T5643] Bluetooth: hci2: command tx timeout [ 82.900790][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.954877][ T5630] team0: Port device team_slave_0 added [ 82.960639][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.967992][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.975337][ T5629] bridge_slave_0: entered allmulticast mode [ 82.982334][ T5629] bridge_slave_0: entered promiscuous mode [ 83.008930][ T5630] team0: Port device team_slave_1 added [ 83.014830][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.021988][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.029381][ T5629] bridge_slave_1: entered allmulticast mode [ 83.036386][ T5629] bridge_slave_1: entered promiscuous mode [ 83.045615][ T5628] team0: Port device team_slave_0 added [ 83.076415][ T5628] team0: Port device team_slave_1 added [ 83.127100][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.134291][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.160784][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.174935][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.202452][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.209572][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.235716][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.248927][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.258769][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.265756][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.291664][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.328336][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.335515][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.361506][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.405731][ T5629] team0: Port device team_slave_0 added [ 83.445694][ T5629] team0: Port device team_slave_1 added [ 83.456360][ T5630] hsr_slave_0: entered promiscuous mode [ 83.462553][ T5630] hsr_slave_1: entered promiscuous mode [ 83.469120][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 83.475245][ T5630] Cannot create hsr debugfs directory [ 83.520950][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.528181][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.554308][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.584356][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.591383][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.617709][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.633963][ T5628] hsr_slave_0: entered promiscuous mode [ 83.640205][ T5628] hsr_slave_1: entered promiscuous mode [ 83.646503][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 83.652226][ T5628] Cannot create hsr debugfs directory [ 83.789380][ T5629] hsr_slave_0: entered promiscuous mode [ 83.795715][ T5629] hsr_slave_1: entered promiscuous mode [ 83.801695][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 83.808370][ T5629] Cannot create hsr debugfs directory [ 83.825847][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.838936][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.847212][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.856441][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.878476][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.888054][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.926439][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.936960][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.207391][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.218120][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.226553][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.236474][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.245679][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.256183][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.272336][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.284660][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.380157][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.390187][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.398718][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.410276][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.418890][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.428952][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.442321][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.455141][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.464906][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.521263][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.563193][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.570379][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.598634][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.609080][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.621127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.628247][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.644904][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.654489][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.669314][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.678797][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.696379][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.707321][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.779937][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.854206][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.878871][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.885988][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.914476][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.923255][ T5643] Bluetooth: hci2: command tx timeout [ 84.923272][ T5635] Bluetooth: hci3: command tx timeout [ 84.923301][ T5635] Bluetooth: hci1: command tx timeout [ 84.930066][ T50] Bluetooth: hci0: command tx timeout [ 84.967518][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.974723][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.079288][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.116922][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.124112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.166676][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.173915][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.206728][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.321257][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.356028][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.363251][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.392481][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.399712][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.677088][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.854663][ T5637] veth0_vlan: entered promiscuous mode [ 85.880418][ T5637] veth1_vlan: entered promiscuous mode [ 85.978324][ T5637] veth0_macvtap: entered promiscuous mode [ 86.020368][ T5637] veth1_macvtap: entered promiscuous mode [ 86.080470][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.113866][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.148784][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.194043][ T1047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.229810][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.254875][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.266099][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.339593][ T5630] veth0_vlan: entered promiscuous mode [ 86.400772][ T5630] veth1_vlan: entered promiscuous mode [ 86.484881][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.506818][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.520424][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.535409][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.581854][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.591387][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.595576][ T5630] veth0_macvtap: entered promiscuous mode [ 86.620909][ T5630] veth1_macvtap: entered promiscuous mode [ 86.699234][ T995] cfg80211: failed to load regulatory.db [ 86.701627][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.741082][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.782130][ T5628] veth0_vlan: entered promiscuous mode [ 86.835618][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.890042][ T5628] veth1_vlan: entered promiscuous mode [ 86.908746][ T143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.932945][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.957608][ T5629] veth0_vlan: entered promiscuous mode [ 86.967570][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.986673][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006240][ T50] Bluetooth: hci0: command tx timeout [ 87.006278][ T5635] Bluetooth: hci2: command tx timeout [ 87.011697][ T5643] Bluetooth: hci3: command tx timeout [ 87.020449][ T4948] Bluetooth: hci1: command tx timeout [ 87.106029][ T5629] veth1_vlan: entered promiscuous mode [ 87.182452][ T5628] veth0_macvtap: entered promiscuous mode [ 87.237110][ T5628] veth1_macvtap: entered promiscuous mode [ 87.344925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.351859][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.365330][ T5629] veth0_macvtap: entered promiscuous mode [ 87.378200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.382161][ T5629] veth1_macvtap: entered promiscuous mode [ 87.424017][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.498808][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.510360][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.535991][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.545117][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559004][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.575113][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.584178][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.628495][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.659148][ T5797] syz.3.10(5797): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 87.690605][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.699939][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.749458][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.775771][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.894517][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.919995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.055263][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.082572][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.156069][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.188845][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.296398][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.328358][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.576631][ T5820] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.084026][ T4948] Bluetooth: hci1: command tx timeout [ 89.085543][ T50] Bluetooth: hci0: command tx timeout [ 89.089483][ T5635] Bluetooth: hci2: command tx timeout [ 89.094859][ T5643] Bluetooth: hci3: command tx timeout [ 89.373168][ T5853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.804762][ T5912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.393602][ T5936] syz.1.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.827685][ T5635] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 93.956773][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 94.788567][ T30] audit: type=1326 audit(1780004997.346:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.153" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe3f99ce59 code=0x0 [ 96.337004][ T6159] capability: warning: `syz.2.187' uses 32-bit capabilities (legacy support in use) [ 97.772270][ T5635] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 101.120947][ T6363] Unable to find swap-space signature [ 101.940101][ T6396] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6396] [ 104.460443][ T5635] Bluetooth: hci3: unexpected event 0x01 length: 124 > 1 [ 104.556308][ T6506] Unable to find swap-space signature [ 105.079235][ T5635] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17 [ 107.414893][ T6617] nfs: Bad value for 'source' [ 110.078451][ T6706] Process accounting resumed [ 112.042142][ T6761] Process accounting resumed [ 113.235886][ T6803] mmap: syz.3.500 (6803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.186356][ T6870] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.505329][ T6916] Process accounting resumed [ 119.297315][ T30] audit: type=1800 audit(1780007069.912:3): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.617" name="features" dev="configfs" ino=11126 res=0 errno=0 [ 120.047201][ T7079] ======================================================= [ 120.047201][ T7079] WARNING: The mand mount option has been deprecated and [ 120.047201][ T7079] and is ignored by this kernel. Remove the mand [ 120.047201][ T7079] option from the mount to silence this warning. [ 120.047201][ T7079] ======================================================= [ 122.226867][ T30] audit: type=1800 audit(1780007072.847:4): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.673" name="features" dev="configfs" ino=12432 res=0 errno=0 [ 122.912711][ T30] audit: type=1800 audit(1780007073.541:5): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.686" name="dummy_udc" dev="gadgetfs" ino=7400 res=0 errno=0 [ 122.985792][ T7187] futex_wake_op: syz.0.687 tries to shift op by -2048; fix this program [ 123.525480][ T30] audit: type=1800 audit(1780007074.154:6): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.696" name="trace_pipe" dev="tracefs" ino=2891 res=0 errno=0 [ 127.038949][ T5635] Bluetooth: hci0: unexpected event 0x03 length: 123 > 11 [ 128.208330][ T7393] Invalid ELF header magic: != ELF [ 129.398273][ T7449] Unable to find swap-space signature [ 131.887566][ T5635] Bluetooth: hci2: unexpected subevent 0x03 length: 123 > 9 [ 132.651496][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660049][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.521374][ T30] audit: type=1800 audit(1780007084.206:7): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.917" name="trace_pipe" dev="tracefs" ino=2929 res=0 errno=0 [ 134.730984][ T7714] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7714] [ 135.297668][ T7735] can: request_module (can-proto-5) failed. [ 135.611144][ T7755] syz.3.967 (7755): attempted to duplicate a private mapping with mremap. This is not supported. [ 138.980633][ T7919] random: crng reseeded on system resumption [ 139.667232][ T30] audit: type=1800 audit(1843104524.498:8): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="version" dev="configfs" ino=13992 res=0 errno=0 [ 139.985531][ T7964] Process accounting paused [ 140.031830][ T30] audit: type=1800 audit(1843104524.860:9): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1074" name="dbroot" dev="configfs" ino=14020 res=0 errno=0 [ 141.367207][ T5635] Bluetooth: hci1: unexpected event 0x18 length: 726 > 23 [ 141.943449][ T8057] Process accounting paused [ 142.206191][ T5635] Bluetooth: hci0: unexpected event 0x3c length: 124 > 7 [ 142.954721][ T30] audit: type=1800 audit(1843104527.805:10): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="members" dev="configfs" ino=14261 res=0 errno=0 [ 143.863554][ T5635] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 143.930313][ T5635] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 143.937874][ T5635] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 144.073586][ T5635] Bluetooth: hci2: unexpected event 0x34 length: 726 > 6 [ 145.159709][ T30] audit: type=1800 audit(1843104530.017:11): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1198" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 146.491656][ T8284] Process accounting paused [ 146.623343][ T5635] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 147.636791][ T5635] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 149.430736][ T8414] __vm_enough_memory: pid: 8414, comm: syz.0.1294, bytes: 4398046511104 not enough memory for the allocation [ 154.234438][ T8650] ima: policy update failed [ 154.239213][ T30] audit: type=1802 audit(1843104539.154:12): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1406" res=0 errno=0 [ 154.306207][ T8655] syz_tun: tun_chr_ioctl cmd 1074025672 [ 154.327559][ T8655] syz_tun: ignored: set checksum disabled [ 156.119012][ T8677] kexec: Could not allocate control_code_buffer [ 158.241138][ T8793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.263313][ T8793] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.284895][ T8793] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.310193][ T8793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.331066][ T8793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.354676][ T8793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.370622][ T8793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.382599][ T8793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.412035][ T8793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.468698][ T8793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.486436][ T8793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.519694][ T8793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.468095][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.352400][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.431822][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.501680][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.539070][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.413009][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.491199][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.582141][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.669640][ T5635] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 162.885830][ T9078] : Can't lookup blockdev [ 163.605490][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.692970][ T30] audit: type=1804 audit(1843104548.653:13): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1637" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace" dev="tracefs" ino=2930 res=1 errno=0 [ 164.281468][ T30] audit: type=1806 audit(1843104549.236:14): xattr="." res=0 [ 164.483066][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.560402][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.640358][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.070809][ T30] audit: type=1807 audit(1843104550.040:15): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 165.087115][ T9201] ima: policy update failed [ 165.100143][ T30] audit: type=1802 audit(1843104550.050:16): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1676" res=0 errno=0 [ 165.147438][ T30] audit: type=1802 audit(1843104550.060:17): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1676" res=0 errno=0 [ 167.268089][ T30] audit: type=1800 audit(1843104552.241:18): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1737" name="discovery_nqn" dev="configfs" ino=18133 res=0 errno=0 [ 168.796003][ T9332] kexec: Could not allocate control_code_buffer [ 168.932401][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.940387][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.034228][ T9391] [U] ^R [ 169.262414][ T9405] mmap: syz.3.1776 (9405): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 169.878468][ T9437] Process accounting resumed [ 170.970542][ T9506] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 170.994051][ T9508] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.005161][ T9508] vhci_hcd vhci_hcd.2: invalid port number 0 [ 171.720750][ T9550] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 171.846424][ T9558] Process accounting resumed [ 172.026843][ T9572] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.049350][ T9572] vhci_hcd vhci_hcd.2: invalid port number 0 [ 172.671149][ T9614] QAT: failed to copy from user. [ 173.093993][ T9641] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 173.115960][ T9641] vhci_hcd vhci_hcd.2: invalid port number 0 [ 173.374418][ T9660] syz_tun: tun_chr_ioctl cmd 1074025698 [ 173.508015][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0deaa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 173.523605][ C0] Call Trace: [ 173.526902][ C0] [ 173.529753][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 173.536445][ C0] ? sched_clock+0x38/0x60 [ 173.540880][ C0] ? sched_clock_cpu+0x6c/0x570 [ 173.545756][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 173.551049][ C0] mce_cpu_restart+0xd5/0x1f0 [ 173.555734][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 173.561911][ C0] __sysvec_call_function_single+0x83/0x440 [ 173.567821][ C0] sysvec_call_function_single+0x9e/0xc0 [ 173.573471][ C0] [ 173.576397][ C0] [ 173.579326][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 173.585320][ C0] RIP: 0010:__schedule+0x3266/0x67a0 [ 173.590616][ C0] Code: e8 fe ff ff e8 1b 43 ed f6 41 c7 86 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7e 48 e8 b2 ea 01 00 e8 2d 99 88 f6 fb 31 ff 37 e0 ff ff 49 8d be 88 0e 00 00 48 b8 00 00 00 00 00 fc ff df [ 173.610226][ C0] RSP: 0018:ffffc90005edefd8 EFLAGS: 00000246 [ 173.616312][ C0] RAX: 0000000000000a8b RBX: 0000000000000008 RCX: 0000000000000080 [ 173.624294][ C0] RDX: 0000000000000000 RSI: ffffffff8df19d81 RDI: 0000000000000000 [ 173.632263][ C0] RBP: ffffc90005edf138 R08: 0000000000000001 R09: 0000000000000000 [ 173.640231][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880772e9f00 [ 173.648203][ C0] R13: 0000000000000001 R14: ffff8880b843b3c0 R15: ffff8880772e9f00 [ 173.656192][ C0] ? __schedule+0x3263/0x67a0 [ 173.660891][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.666965][ C0] ? arch_stack_walk+0x88/0xf0 [ 173.671740][ C0] ? __pfx___schedule+0x10/0x10 [ 173.676604][ C0] ? mark_held_locks+0x40/0x70 [ 173.681387][ C0] preempt_schedule_irq+0x50/0x90 [ 173.686444][ C0] irqentry_exit+0x205/0x970 [ 173.691059][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.697048][ C0] RIP: 0010:lock_release+0x8d/0x310 [ 173.702262][ C0] Code: 00 00 65 4c 8b 25 fb 55 25 12 41 8b bc 24 8c 0b 00 00 85 ff 0f 85 21 01 00 00 48 81 3b 00 27 10 94 0f 84 14 01 00 00 9c 41 5e 48 c7 c7 75 ae 00 8e e8 d6 c0 a2 09 65 ff 05 37 9d 25 12 8b 35 [ 173.721876][ C0] RSP: 0018:ffffc90005edf258 EFLAGS: 00000202 [ 173.727944][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e5420 RCX: ffffffff8280fc90 [ 173.735913][ C0] RDX: 0000000000000000 RSI: ffffffff8c1c4300 RDI: 0000000000000000 [ 173.743884][ C0] RBP: ffffffff8280fc63 R08: 0000000000000001 R09: 0000000000000000 [ 173.751856][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880772e9f00 [ 173.759825][ C0] R13: 0000000000000001 R14: 0000000000000202 R15: ffff88801e0c33bc [ 173.767799][ C0] ? __page_table_check_zero+0x333/0x410 [ 173.773486][ C0] ? __page_table_check_zero+0x360/0x410 [ 173.779143][ C0] __page_table_check_zero+0x338/0x410 [ 173.784618][ C0] free_unref_folios+0xa35/0x1730 [ 173.789673][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 173.795494][ C0] folios_put_refs+0x571/0xa90 [ 173.800267][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 173.805558][ C0] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 173.811654][ C0] free_pages_and_swap_cache+0x22d/0x3b0 [ 173.817307][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 173.823521][ C0] ? __pfx___might_resched+0x10/0x10 [ 173.828810][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 173.834378][ C0] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 173.840378][ C0] tlb_flush_mmu+0xe9/0x590 [ 173.844906][ C0] __zap_vma_range+0x223f/0x4a30 [ 173.849878][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 173.855180][ C0] ? find_held_lock+0x2b/0x80 [ 173.859878][ C0] unmap_vmas+0x299/0x5f0 [ 173.864223][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 173.869104][ C0] exit_mmap+0x1ef/0xa10 [ 173.873364][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 173.878140][ C0] ? trace_contention_end+0x122/0x170 [ 173.883520][ C0] ? uprobe_clear_state+0x5f/0x260 [ 173.888650][ C0] ? uprobe_clear_state+0x5f/0x260 [ 173.893786][ C0] ? __lock_acquire+0x4a5/0x2630 [ 173.898754][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 173.904406][ C0] __mmput+0x12a/0x410 [ 173.908487][ C0] mmput+0x67/0x80 [ 173.912216][ C0] do_exit+0x8b2/0x2af0 [ 173.916387][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 173.921774][ C0] ? __pfx_do_exit+0x10/0x10 [ 173.926379][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 173.931771][ C0] do_group_exit+0xd5/0x2a0 [ 173.936290][ C0] __x64_sys_exit_group+0x3e/0x50 [ 173.941329][ C0] x64_sys_call+0x102c/0x1530 [ 173.946013][ C0] do_syscall_64+0x115/0x840 [ 173.950628][ C0] ? clear_bhb_loop+0x40/0x90 [ 173.955575][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.961474][ C0] RIP: 0033:0x7fbe3f99ce59 [ 173.965902][ C0] Code: Unable to access opcode bytes at 0x7fbe3f99ce2f. [ 173.972910][ C0] RSP: 002b:00007ffe8a183478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 173.981326][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbe3f99ce59 [ 173.989296][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.997265][ C0] RBP: 00007ffe8a1834dc R08: 0000000000000000 R09: 00000000000927c0 [ 174.005235][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001c9 [ 174.013204][ C0] R13: 00000000000927c0 R14: 000000000002a54d R15: 00007ffe8a183530 [ 174.021197][ C0] [ 174.129947][ T9669] kAFS: Invalid Command on /proc/fs/afs/cells file [ 176.434276][ T9815] Process accounting resumed [ 176.449728][ T9820] vhci_hcd vhci_hcd.2: invalid port number 16 [ 176.457431][ T9820] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 176.913347][ T9852] sd 0:0:1:0: PR command failed: 1026 [ 176.927934][ T9852] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 176.934727][ T9852] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 177.280647][ T9875] sysfs_service_op_store: Client not running :-5: [ 177.714812][ T9901] < [ 178.117404][ T9930] usb usb13: check_ctrlrecip: process 9930 (syz.3.2009) requesting ep 01 but needs 81 [ 178.133133][ T9930] usb usb13: usbfs: process 9930 (syz.3.2009) did not claim interface 0 before use [ 180.074475][T10055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.219480][T10112] program syz.2.2089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.727586][T10141] block2mtd: parameter too long [ 183.533627][T10194] : Can't lookup blockdev [ 184.192001][T10234] smpboot: CPU 1 is now offline [ 184.972381][T10278] Invalid input. Must be >= 4608 [ 185.181377][T10287] futex_wake_op: syz.2.2162 tries to shift op by -1; fix this program [ 185.871761][T10306] could not allocate digest TFM handle [ 186.120156][ T30] audit: type=1800 audit(1843104571.190:19): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2182" name="dbroot" dev="configfs" ino=21661 res=0 errno=0 [ 187.839558][T10428] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 189.072769][T10493] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[10493] [ 191.519938][T10648] ICMPv6: process `syz.1.2312' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 192.202604][T10682] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 193.271896][T10745] Line length is too long: Should be less than 4094 [ 193.776732][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.784700][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.191157][T10804] __vm_enough_memory: pid: 10804, comm: syz.0.2378, bytes: 9223372036854775808 not enough memory for the allocation [ 195.416409][T10873] sysfs_service_op_show: Client not running :-5: [ 199.794556][T11090] Process accounting paused [ 200.559398][T11127] program syz.3.2513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.953594][T11150] synth uevent: /bus/mei: unknown uevent action string [ 201.161822][T11161] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.771621][T11198] syz.0.2543 uses obsolete (PF_INET,SOCK_PACKET) [ 201.799996][T11200] bond0: Unable to set down delay as MII monitoring is disabled [ 201.830671][T11199] Process accounting paused [ 206.341002][T11383] Process accounting paused [ 208.064993][T11454] bond0: invalid ARP target specified [ 209.905861][T11530] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 210.065584][T11530] CIFS mount error: No usable UNC path provided in device string! [ 210.065584][T11530] [ 210.114006][T11530] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.698612][T11569] vivid-003: ================= START STATUS ================= [ 210.733981][T11569] vivid-003: Radio HW Seek Mode: Bounded [ 210.775033][T11569] vivid-003: Radio Programmable HW Seek: false [ 210.811851][T11569] vivid-003: RDS Rx I/O Mode: Block I/O [ 210.846438][T11569] vivid-003: Generate RBDS Instead of RDS: false [ 210.872389][T11569] vivid-003: RDS Reception: true [ 210.895847][T11569] vivid-003: RDS Program Type: 0 inactive [ 210.939398][T11569] vivid-003: RDS PS Name: inactive [ 210.976329][T11569] vivid-003: RDS Radio Text: inactive [ 210.998709][T11569] vivid-003: RDS Traffic Announcement: false inactive [ 211.029835][T11569] vivid-003: RDS Traffic Program: false inactive [ 211.065386][T11569] vivid-003: RDS Music: false inactive [ 211.096683][T11569] vivid-003: ================== END STATUS ================== [ 213.193341][T11703] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.806429][ T30] audit: type=1800 audit(1843104600.029:20): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2793" name="members" dev="configfs" ino=25605 res=0 errno=0 [ 214.856416][T11783] program syz.1.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.997360][T11836] QAT: Device 250 not found [ 216.160768][T11845] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 217.433168][T11904] virtio-pci 0000:00:03.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 218.292582][T11949] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.938543][T11986] bcache: register_bcache() error : failed to open device [ 219.149833][T11993] usbip-vudc usbip-vudc.0: gadget not bound [ 219.697494][ T30] audit: type=1400 audit(1843104604.944:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12015 comm="syz.0.2895" [ 220.116735][T12040] syz.3.2906 (12040): drop_caches: 0 [ 223.994710][T12191] vhci_hcd vhci_hcd.2: invalid port number 253 [ 224.027553][T12191] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 224.042898][T12193] CIFS: VFS: UNC: path must begin with // or \\ [ 224.067837][T12193] Malformed UNC in devname [ 224.067837][T12193] [ 224.096142][T12193] CIFS: VFS: Malformed UNC in devname [ 225.400126][T12270] vhci_hcd: not connected 4 [ 226.413289][T12320] kAFS: Invalid Command on /proc/fs/afs/cells file [ 226.581053][T12328] i2c i2c-0: new_device: Invalid device name [ 226.832282][T12331] zswap: compressor Z(u not available [ 226.930006][ T5635] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 227.418561][T12383] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 228.374171][T12430] vhci_hcd: not connected 4 [ 228.620308][T12433] zswap: compressor Z(u not available [ 229.392986][T12476] [ 229.690290][T12443] Process accounting resumed [ 230.000539][T12509] vmstat_refresh: nr_hugetlb -2048 [ 230.457445][T12530] capability: warning: `syz.3.3109' uses deprecated v2 capabilities in a way that may be insecure [ 231.813149][T12587] Process accounting resumed [ 232.586016][T12621] dyndbg: expected <4096 bytes into control Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 233.565822][ T5635] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 236.260003][T12830] Process accounting resumed [ 236.992832][T12874] binder: 12873:12874 ioctl c0306201 200000000000 returned -14 [ 238.118635][T12921] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 238.819380][T12957] vhci_hcd vhci_hcd.2: invalid port number 194 [ 238.849831][T12957] vhci_hcd vhci_hcd.2: invalid port number 194 [ 239.881602][T13014] ima: policy update failed [ 239.901601][ T30] audit: type=1802 audit(1843104625.249:22): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3312" res=0 errno=0 [ 240.354838][T13037] : Can't lookup blockdev [ 242.728889][T13126] program syz.2.3357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.742683][T13128] usb usb26: usbfs: process 13128 (syz.3.3358) did not claim interface 0 before use [ 247.193353][ T5635] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 248.242560][ T30] audit: type=1800 audit(1843104633.643:23): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3473" name="dbroot" dev="configfs" ino=30096 res=0 errno=0 [ 248.861016][T13451] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 250.171922][T13507] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 251.207978][T13560] vhci_hcd vhci_hcd.2: invalid port number 135 [ 251.251510][T13560] vhci_hcd vhci_hcd.2: invalid port number 135 [ 251.832852][T13589] WARNING! power/level is deprecated; use power/control instead [ 252.055546][T13601] blkio.reset_stats is deprecated [ 252.447100][T13610] nvme_fabrics: missing parameter 'transport=%s' [ 252.472140][T13610] nvme_fabrics: missing parameter 'nqn=%s' [ 253.443577][T13660] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 257.464965][ T30] audit: type=1800 audit(1843104642.911:24): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3646" name="dbroot" dev="configfs" ino=31303 res=0 errno=0 [ 257.500023][T13864] db_root: cannot open: /sy] [ 258.365660][T13903] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 258.694621][T13920] [U]  [ 258.858181][T13931] ceph: Failed to parse sending metrics switch value 'P^' [ 259.577855][T13966] Process accounting paused [ 259.603616][T13971] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 259.613099][T13969] ima: policy update failed [ 259.667986][ T30] audit: type=1802 audit(1843104645.132:25): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3693" res=0 errno=0 [ 260.569182][T14041] block2mtd: illegal erase size [ 262.391298][T14148] syz.1.3749: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.476405][T14148] CPU: 0 UID: 0 PID: 14148 Comm: syz.1.3749 Tainted: G I syzkaller #0 PREEMPT(full) [ 262.476432][T14148] Tainted: [I]=FIRMWARE_WORKAROUND [ 262.476438][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.476447][T14148] Call Trace: [ 262.476454][T14148] [ 262.476460][T14148] dump_stack_lvl+0x100/0x190 [ 262.476491][T14148] warn_alloc.cold+0x95/0x1c1 [ 262.476508][T14148] ? __pfx_warn_alloc+0x10/0x10 [ 262.476535][T14148] ? check_irq_usage+0xe5/0x810 [ 262.476559][T14148] ? __bfs+0x150/0x2a0 [ 262.476577][T14148] ? stack_trace_save+0x8e/0xc0 [ 262.476604][T14148] __vmalloc_node_range_noprof+0x136c/0x1630 [ 262.476625][T14148] ? add_lock_to_list+0x99/0x110 [ 262.476646][T14148] ? lockdep_unlock+0x5a/0xc0 [ 262.476666][T14148] ? disksize_store+0x11a/0x4e0 [ 262.476692][T14148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.476721][T14148] ? __pfx___might_resched+0x10/0x10 [ 262.476743][T14148] ? disksize_store+0x11a/0x4e0 [ 262.476763][T14148] __vmalloc_node_noprof+0xad/0xf0 [ 262.476783][T14148] ? disksize_store+0x11a/0x4e0 [ 262.476806][T14148] disksize_store+0x11a/0x4e0 [ 262.476828][T14148] ? sysfs_file_kobj+0xe4/0x290 [ 262.476852][T14148] ? __pfx_disksize_store+0x10/0x10 [ 262.476871][T14148] dev_attr_store+0x58/0x80 [ 262.476888][T14148] ? __pfx_dev_attr_store+0x10/0x10 [ 262.476903][T14148] sysfs_kf_write+0xf2/0x150 [ 262.476919][T14148] kernfs_fop_write_iter+0x3e0/0x5f0 [ 262.476939][T14148] ? __pfx_sysfs_kf_write+0x10/0x10 [ 262.476964][T14148] vfs_write+0x6ac/0x1070 [ 262.476982][T14148] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 262.477004][T14148] ? __pfx_vfs_write+0x10/0x10 [ 262.477034][T14148] ksys_write+0x12a/0x250 [ 262.477051][T14148] ? __pfx_ksys_write+0x10/0x10 [ 262.477070][T14148] ? rcu_is_watching+0x12/0xc0 [ 262.477090][T14148] do_syscall_64+0x115/0x840 [ 262.477110][T14148] ? clear_bhb_loop+0x40/0x90 [ 262.477128][T14148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.477143][T14148] RIP: 0033:0x7fbe3f99ce59 [ 262.477158][T14148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.477172][T14148] RSP: 002b:00007fbe408d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.477187][T14148] RAX: ffffffffffffffda RBX: 00007fbe3fc15fa0 RCX: 00007fbe3f99ce59 [ 262.477197][T14148] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000003 [ 262.477206][T14148] RBP: 00007fbe3fa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.477217][T14148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.477226][T14148] R13: 00007fbe3fc16038 R14: 00007fbe3fc15fa0 R15: 00007ffe8a183138 [ 262.477247][T14148] [ 262.811895][T14123] Process accounting paused [ 262.823301][T14148] Mem-Info: [ 262.827484][T14148] active_anon:5324 inactive_anon:2 isolated_anon:0 [ 262.827484][T14148] active_file:5762 inactive_file:45810 isolated_file:0 [ 262.827484][T14148] unevictable:768 dirty:55 writeback:0 [ 262.827484][T14148] slab_reclaimable:10517 slab_unreclaimable:90616 [ 262.827484][T14148] mapped:24195 shmem:1284 pagetables:1064 [ 262.827484][T14148] sec_pagetables:0 bounce:0 [ 262.827484][T14148] kernel_misc_reclaimable:0 [ 262.827484][T14148] free:1343120 free_pcp:2437 free_cma:0 [ 262.872725][T14148] Node 0 active_anon:21296kB inactive_anon:8kB active_file:23048kB inactive_file:182980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96772kB dirty:220kB writeback:0kB shmem:3600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11264kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.907226][T14148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.940773][T14148] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.971343][T14148] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 262.977795][T14148] Node 0 DMA32 free:1421784kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21296kB inactive_anon:8kB active_file:23048kB inactive_file:182980kB unevictable:1536kB writepending:220kB zspages:8kB present:3129332kB managed:2537520kB mlocked:0kB bounce:0kB free_pcp:9748kB local_pcp:9748kB free_cma:0kB [ 263.011399][T14148] lowmem_reserve[]: 0 0 1 1 1 [ 263.016137][T14148] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.046581][T14148] lowmem_reserve[]: 0 0 0 0 0 [ 263.051858][T14148] Node 1 Normal free:3935336kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.090034][T14148] lowmem_reserve[]: 0 0 0 0 0 [ 263.105324][T14148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.131511][T14148] Node 0 DMA32: 5016*4kB (UM) 2813*8kB (UME) 1615*16kB (UM) 495*32kB (UM) 489*64kB (UME) 427*128kB (UME) 281*256kB (UME) 128*512kB (UME) 44*1024kB (UM) 10*2048kB (ME) 256*4096kB (M) = 1421784kB [ 263.213450][T14148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 263.270966][T14148] Node 1 Normal: 10*4kB (UM) 10*8kB (UM) 9*16kB (UM) 11*32kB (UM) 4*64kB (U) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3935336kB [ 263.327717][T14148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.368638][T14148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.399577][T14148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.433071][T14148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.477660][T14148] 52852 total pagecache pages [ 263.497355][T14148] 0 pages in swap cache [ 263.510656][T14148] Free swap = 124988kB [ 263.533453][T14148] Total swap = 124996kB [ 263.547553][T14148] 2097051 pages RAM [ 263.558101][T14148] 0 pages HighMem/MovableOnly [ 263.572655][T14148] 430778 pages reserved [ 263.586598][T14148] 0 pages cma reserved [ 263.704561][T14180] kafs: addr_prefs: Invalid Command [ 264.252420][T14207] vhci_hcd vhci_hcd.1: invalid port number 14 [ 264.301477][T14207] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 264.682577][T14230] binder: 14228:14230 ioctl c018620c 200000000040 returned -1 [ 265.022658][T14251] Setting dangerous option i915.mitigations - tainting kernel [ 265.060279][T14251] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 266.558824][T14355] bond0: option arp_interval: invalid value () [ 266.597751][T14355] bond0: option arp_interval: allowed values 0 - 2147483647 [ 266.713374][T14314] Process accounting paused [ 266.842875][T14366] cougar: G6 mapped to F18 [ 267.611462][T14407] usb usb11: usbfs: interface 0 claimed by hub while 'syz.0.3850' sets config #7 [ 267.772374][ T5635] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 267.782795][ T5635] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 269.069006][T14507] usbcore.quirks: string doesn't fit in 127 chars. [ 269.164688][T14511] bonding: no command found in bonding_masters - use +ifname or -ifname [ 270.435037][T14598] QAT: Invalid ioctl 21531 [ 272.682487][T14720] bond0: no command found in slaves file - use +ifname or -ifname [ 273.938418][T14797] queue_state_write: operation too long [ 273.957662][T14797] queue_state_write: use 'run', 'start' or 'kick' [ 274.739572][T14852] vhci_hcd vhci_hcd.0: invalid port number 16 [ 276.178042][T14931] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 277.312754][T14997] block nbd0: NBD_DISCONNECT [ 277.692867][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 277.700361][ T5635] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 277.978537][ T30] audit: type=1326 audit(1843104663.527:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.3.4078" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd55319ce59 code=0x0 [ 278.954381][T15100] [U] 0="/ [ 278.979165][T15100] [U] [ 278.991941][T15100] [U] EeQ@ [ 279.018722][T15097] [U]  [ 280.629799][T15195] vivid-007: ================= START STATUS ================= [ 280.659330][T15195] vivid-007: Enable Output Cropping: true [ 280.686285][T15195] vivid-007: Enable Output Composing: true [ 280.718916][T15195] vivid-007: Enable Output Scaler: true [ 280.740408][T15195] vivid-007: Tx RGB Quantization Range: Automatic [ 280.775820][T15195] vivid-007: Transmit Mode: HDMI [ 280.797217][T15195] vivid-007: Hotplug Present: 0x00000000 [ 280.824504][T15195] vivid-007: RxSense Present: 0x00000000 [ 280.852567][T15195] vivid-007: EDID Present: 0x00000000 [ 280.870234][T15195] vivid-007: ================== END STATUS ================== [ 282.253939][ T30] audit: type=1800 audit(1843104667.829:27): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4173" name="dbroot" dev="configfs" ino=34963 res=0 errno=0 [ 285.579342][T15424] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 285.647107][T15424] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 285.696725][T15424] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 285.756695][T15424] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 285.811213][T15424] page dumped because: unmovable page [ 285.845578][T15424] page_owner info is not present (never set?) [ 289.301893][T15619] usb usb22: usbfs: process 15619 (syz.1.4308) did not claim interface 1 before use [ 289.507577][T15624] Process accounting resumed [ 290.047118][T15658] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 290.093886][T15658] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 290.131093][T15658] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 290.163064][T15663] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 290.188761][T15658] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 290.220332][T15658] page dumped because: unmovable page [ 290.244113][T15658] page_owner tracks the page as allocated [ 290.272988][T15658] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1430590646, free_ts 0 [ 290.354146][T15658] register_early_stack+0x74/0xaf [ 290.376627][T15658] init_page_owner+0x4c/0xa10 [ 290.407242][T15658] page_ext_init+0x71d/0x780 [ 290.422633][T15658] mm_core_init+0x229/0x270 [ 290.448724][T15658] page_owner free stack trace missing [ 292.533331][T15787] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 292.722845][T15792] Process accounting resumed [ 293.197056][T15816] block2mtd: Using custom MTD label '' for dev [ 293.236808][T15816] block2mtd: error: cannot open device [ 295.576485][T15929] ================================================================== [ 295.576498][T15929] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 295.576522][T15929] Write of size 8 at addr ffffc90004c01000 by task syz.2.4438/15929 [ 295.576535][T15929] [ 295.576547][T15929] CPU: 0 UID: 0 PID: 15929 Comm: syz.2.4438 Tainted: G U I syzkaller #0 PREEMPT(full) [ 295.576586][T15929] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 295.576596][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.576612][T15929] Call Trace: [ 295.576617][T15929] [ 295.576623][T15929] dump_stack_lvl+0x100/0x190 [ 295.576646][T15929] print_report+0x13d/0x4b0 [ 295.576667][T15929] ? _raw_spin_lock_irqsave+0x52/0x60 [ 295.576687][T15929] ? sys_fillrect+0x174a/0x1910 [ 295.576704][T15929] kasan_report+0xdf/0x1d0 [ 295.576721][T15929] ? sys_fillrect+0x174a/0x1910 [ 295.576741][T15929] sys_fillrect+0x174a/0x1910 [ 295.576761][T15929] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 295.576786][T15929] bit_clear+0x17d/0x220 [ 295.576800][T15929] ? __pfx_bit_clear+0x10/0x10 [ 295.576814][T15929] ? fb_get_color_depth+0x120/0x250 [ 295.576836][T15929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.576858][T15929] __fbcon_clear+0x633/0x760 [ 295.576880][T15929] ? __pfx_bit_clear+0x10/0x10 [ 295.576895][T15929] fbcon_scroll+0x48b/0x650 [ 295.576916][T15929] con_scroll+0x464/0x690 [ 295.576935][T15929] csi_ECMA.constprop.0+0x1238/0x3b60 [ 295.576954][T15929] ? find_held_lock+0x2b/0x80 [ 295.576972][T15929] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 295.576994][T15929] do_con_write+0x3946/0x4a10 [ 295.577011][T15929] ? trace_contention_end+0x122/0x170 [ 295.577030][T15929] ? __pfx_do_con_write+0x10/0x10 [ 295.577052][T15929] con_write+0x23/0xb0 [ 295.577069][T15929] n_tty_write+0x431/0x11c0 [ 295.577094][T15929] ? __pfx_n_tty_write+0x10/0x10 [ 295.577115][T15929] ? trace_kmalloc+0xe3/0x110 [ 295.577134][T15929] ? __pfx_woken_wake_function+0x10/0x10 [ 295.577151][T15929] ? rcu_is_watching+0x12/0xc0 [ 295.577166][T15929] ? file_tty_write.isra.0+0x694/0x890 [ 295.577184][T15929] ? kfree+0x1dd/0x6c0 [ 295.577203][T15929] ? __pfx_n_tty_write+0x10/0x10 [ 295.577224][T15929] file_tty_write.isra.0+0x4d2/0x890 [ 295.577244][T15929] redirected_tty_write+0xd4/0x120 [ 295.577263][T15929] vfs_write+0x6ac/0x1070 [ 295.577280][T15929] ? __pfx_redirected_tty_write+0x10/0x10 [ 295.577299][T15929] ? __pfx_vfs_write+0x10/0x10 [ 295.577314][T15929] ? find_held_lock+0x2b/0x80 [ 295.577336][T15929] ksys_write+0x12a/0x250 [ 295.577352][T15929] ? __pfx_ksys_write+0x10/0x10 [ 295.577368][T15929] ? rcu_is_watching+0x12/0xc0 [ 295.577391][T15929] do_syscall_64+0x115/0x840 [ 295.577412][T15929] ? clear_bhb_loop+0x40/0x90 [ 295.577429][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.577445][T15929] RIP: 0033:0x7ff08399ce59 [ 295.577457][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.577471][T15929] RSP: 002b:00007ff08491d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.577486][T15929] RAX: ffffffffffffffda RBX: 00007ff083c15fa0 RCX: 00007ff08399ce59 [ 295.577496][T15929] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 295.577506][T15929] RBP: 00007ff083a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 295.577514][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.577524][T15929] R13: 00007ff083c16038 R14: 00007ff083c15fa0 R15: 00007ffd80389608 [ 295.577538][T15929] [ 295.577543][T15929] [ 295.577547][T15929] The buggy address belongs to a vmalloc virtual mapping [ 295.577559][T15929] Memory state around the buggy address: [ 295.577566][T15929] ffffc90004c00f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.577577][T15929] ffffc90004c00f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.577587][T15929] >ffffc90004c01000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.577595][T15929] ^ [ 295.577603][T15929] ffffc90004c01080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.577613][T15929] ffffc90004c01100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.577630][T15929] ================================================================== [ 295.584075][T15929] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.584092][T15929] CPU: 0 UID: 0 PID: 15929 Comm: syz.2.4438 Tainted: G U I syzkaller #0 PREEMPT(full) [ 295.584116][T15929] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 295.584123][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.584132][T15929] Call Trace: [ 295.584137][T15929] [ 295.584143][T15929] dump_stack_lvl+0x100/0x190 [ 295.584171][T15929] vpanic+0x552/0x970 [ 295.584185][T15929] ? __pfx_vpanic+0x10/0x10 [ 295.584199][T15929] ? mark_held_locks+0x40/0x70 [ 295.584223][T15929] ? sys_fillrect+0x174a/0x1910 [ 295.584241][T15929] panic+0xd1/0xe0 [ 295.584253][T15929] ? __pfx_panic+0x10/0x10 [ 295.584267][T15929] ? sys_fillrect+0x174a/0x1910 [ 295.584284][T15929] ? preempt_schedule_common+0x42/0xc0 [ 295.584306][T15929] check_panic_on_warn.cold+0x19/0x34 [ 295.584322][T15929] end_report.part.0+0x3a/0x90 [ 295.584341][T15929] kasan_report.cold+0xe/0x18 [ 295.584362][T15929] ? sys_fillrect+0x174a/0x1910 [ 295.584382][T15929] sys_fillrect+0x174a/0x1910 [ 295.584411][T15929] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 295.584436][T15929] bit_clear+0x17d/0x220 [ 295.584451][T15929] ? __pfx_bit_clear+0x10/0x10 [ 295.584466][T15929] ? fb_get_color_depth+0x120/0x250 [ 295.584488][T15929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.584510][T15929] __fbcon_clear+0x633/0x760 [ 295.584532][T15929] ? __pfx_bit_clear+0x10/0x10 [ 295.584547][T15929] fbcon_scroll+0x48b/0x650 [ 295.584569][T15929] con_scroll+0x464/0x690 [ 295.584588][T15929] csi_ECMA.constprop.0+0x1238/0x3b60 [ 295.584608][T15929] ? find_held_lock+0x2b/0x80 [ 295.584625][T15929] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 295.584647][T15929] do_con_write+0x3946/0x4a10 [ 295.584665][T15929] ? trace_contention_end+0x122/0x170 [ 295.584683][T15929] ? __pfx_do_con_write+0x10/0x10 [ 295.584706][T15929] con_write+0x23/0xb0 [ 295.584724][T15929] n_tty_write+0x431/0x11c0 [ 295.584749][T15929] ? __pfx_n_tty_write+0x10/0x10 [ 295.584769][T15929] ? trace_kmalloc+0xe3/0x110 [ 295.584786][T15929] ? __pfx_woken_wake_function+0x10/0x10 [ 295.584803][T15929] ? rcu_is_watching+0x12/0xc0 [ 295.584819][T15929] ? file_tty_write.isra.0+0x694/0x890 [ 295.584837][T15929] ? kfree+0x1dd/0x6c0 [ 295.584856][T15929] ? __pfx_n_tty_write+0x10/0x10 [ 295.584878][T15929] file_tty_write.isra.0+0x4d2/0x890 [ 295.584898][T15929] redirected_tty_write+0xd4/0x120 [ 295.584916][T15929] vfs_write+0x6ac/0x1070 [ 295.584933][T15929] ? __pfx_redirected_tty_write+0x10/0x10 [ 295.584952][T15929] ? __pfx_vfs_write+0x10/0x10 [ 295.584967][T15929] ? find_held_lock+0x2b/0x80 [ 295.584990][T15929] ksys_write+0x12a/0x250 [ 295.585005][T15929] ? __pfx_ksys_write+0x10/0x10 [ 295.585022][T15929] ? rcu_is_watching+0x12/0xc0 [ 295.585039][T15929] do_syscall_64+0x115/0x840 [ 295.585059][T15929] ? clear_bhb_loop+0x40/0x90 [ 295.585075][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.585090][T15929] RIP: 0033:0x7ff08399ce59 [ 295.585103][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.585117][T15929] RSP: 002b:00007ff08491d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.585132][T15929] RAX: ffffffffffffffda RBX: 00007ff083c15fa0 RCX: 00007ff08399ce59 [ 295.585142][T15929] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 295.585152][T15929] RBP: 00007ff083a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 295.585161][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.585170][T15929] R13: 00007ff083c16038 R14: 00007ff083c15fa0 R15: 00007ffd80389608 [ 295.585185][T15929] [ 295.585246][T15929] Kernel Offset: disabled