last executing test programs: 1.90282928s ago: executing program 1 (id=6943): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto_SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0)) 1.530007388s ago: executing program 1 (id=6950): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r0, 0x0, 0x202, 0xfffff000) 1.228339443s ago: executing program 2 (id=6956): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) ioctl$auto(r0, 0x901064ac, 0x5) 1.196987207s ago: executing program 1 (id=6957): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/traceSMB\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000), 0x10) 1.047952713s ago: executing program 2 (id=6960): r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(r0, 0x6f2d, r0) 996.794814ms ago: executing program 0 (id=6961): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/type\x00', 0x180102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 880.317879ms ago: executing program 2 (id=6963): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0xa8002, 0x0) write$auto(r0, 0x0, 0xa0000000) 879.711234ms ago: executing program 1 (id=6964): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) 810.21864ms ago: executing program 3 (id=6965): r0 = getpid() rt_tgsigqueueinfo$auto(r0, r0, 0x0, &(0x7f0000002440)={@siginfo_0_0={0x9, 0x2, 0xffffffc4, @_sigsys={0x0, 0x10000, 0x4}}}) 784.914386ms ago: executing program 0 (id=6966): r0 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x181002, 0x0) read$auto_tracing_saved_cmdlines_size_fops_trace(r0, 0x0, 0x0) 707.302264ms ago: executing program 2 (id=6967): madvise$auto(0x8400000000000000, 0x7fffffffffffffff, 0xa) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 659.571446ms ago: executing program 3 (id=6968): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x42901, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 634.102439ms ago: executing program 0 (id=6969): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio15/name\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001280)=""/4124, 0x101c) 549.885873ms ago: executing program 2 (id=6970): socket(0x18, 0x5, 0x2) bind$auto(0x3, &(0x7f0000000000), 0x6b) 521.126066ms ago: executing program 1 (id=6971): r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0x40) 495.111696ms ago: executing program 3 (id=6972): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0x800000ff, 0xffffff71, 0x10000}) 423.120173ms ago: executing program 0 (id=6973): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_REUSEADDR(r0, 0x1, 0x2, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', &(0x7f0000000180)=0xde1) 379.848259ms ago: executing program 2 (id=6974): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 328.673039ms ago: executing program 3 (id=6975): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) 269.55764ms ago: executing program 0 (id=6976): r0 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x800, 0x45e) 197.075863ms ago: executing program 1 (id=6977): r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) pread64$auto(r0, 0x0, 0x2, 0x7a) 167.260276ms ago: executing program 3 (id=6978): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) 93.314117ms ago: executing program 0 (id=6979): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d1b5d399b3b4d90a2", 0xa) 0s ago: executing program 3 (id=6980): r0 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000980), 0x1000, 0x0) pread64$auto(r0, &(0x7f0000002b80)='nl80211\x00', 0x1, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 77.280347][ T5611] cgroup: Unknown subsys name 'net' [ 77.389525][ T5611] cgroup: Unknown subsys name 'cpuset' [ 77.397981][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.804390][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.263437][ T5658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.274579][ T5658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.283527][ T5658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.291588][ T5658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.299732][ T5658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.307182][ T5658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.319192][ T5662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.329408][ T5667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.329664][ T5662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.346312][ T5662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.352454][ T5658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.362173][ T5658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.374318][ T5667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.383928][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.397886][ T5658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.423971][ T5658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.437732][ T5658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.446596][ T5658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.459598][ T5658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.467452][ T5658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.770353][ T808] cfg80211: failed to load regulatory.db [ 86.996371][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.016591][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.029482][ T5655] bridge_slave_0: entered allmulticast mode [ 87.039231][ T5655] bridge_slave_0: entered promiscuous mode [ 87.085536][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.093304][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.100759][ T5655] bridge_slave_1: entered allmulticast mode [ 87.108649][ T5655] bridge_slave_1: entered promiscuous mode [ 87.233698][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.265680][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.306951][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.314156][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.321733][ T5670] bridge_slave_0: entered allmulticast mode [ 87.329760][ T5670] bridge_slave_0: entered promiscuous mode [ 87.361718][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368981][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.376343][ T5670] bridge_slave_1: entered allmulticast mode [ 87.383304][ T5670] bridge_slave_1: entered promiscuous mode [ 87.395879][ T5664] Bluetooth: hci0: command tx timeout [ 87.424157][ T5655] team0: Port device team_slave_0 added [ 87.448145][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.456148][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.463357][ T5654] bridge_slave_0: entered allmulticast mode [ 87.470570][ T5654] bridge_slave_0: entered promiscuous mode [ 87.474936][ T5664] Bluetooth: hci1: command tx timeout [ 87.482429][ T5658] Bluetooth: hci2: command tx timeout [ 87.483445][ T5655] team0: Port device team_slave_1 added [ 87.511085][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.518538][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.526084][ T5654] bridge_slave_1: entered allmulticast mode [ 87.533121][ T5654] bridge_slave_1: entered promiscuous mode [ 87.550101][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.559358][ T5664] Bluetooth: hci3: command tx timeout [ 87.565577][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.572680][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.580216][ T5656] bridge_slave_0: entered allmulticast mode [ 87.587195][ T5656] bridge_slave_0: entered promiscuous mode [ 87.594803][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.602564][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.609845][ T5656] bridge_slave_1: entered allmulticast mode [ 87.616858][ T5656] bridge_slave_1: entered promiscuous mode [ 87.645122][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.676846][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.683795][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.709740][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.743776][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.754079][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.761169][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.787111][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.809744][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.821143][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.853703][ T5670] team0: Port device team_slave_0 added [ 87.861913][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.896599][ T5670] team0: Port device team_slave_1 added [ 87.913181][ T5654] team0: Port device team_slave_0 added [ 87.921936][ T5654] team0: Port device team_slave_1 added [ 87.937159][ T5656] team0: Port device team_slave_0 added [ 87.971280][ T5656] team0: Port device team_slave_1 added [ 87.997170][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.004217][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.030222][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.057653][ T5655] hsr_slave_0: entered promiscuous mode [ 88.064150][ T5655] hsr_slave_1: entered promiscuous mode [ 88.071735][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.078836][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.104794][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.116392][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.123433][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.149609][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.171679][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.178728][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.204676][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.224016][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.231044][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.256982][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.286741][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.293731][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.319946][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.399080][ T5654] hsr_slave_0: entered promiscuous mode [ 88.405458][ T5654] hsr_slave_1: entered promiscuous mode [ 88.411715][ T5654] debugfs: 'hsr0' already exists in 'hsr' [ 88.417794][ T5654] Cannot create hsr debugfs directory [ 88.447299][ T5670] hsr_slave_0: entered promiscuous mode [ 88.453485][ T5670] hsr_slave_1: entered promiscuous mode [ 88.459821][ T5670] debugfs: 'hsr0' already exists in 'hsr' [ 88.465640][ T5670] Cannot create hsr debugfs directory [ 88.533233][ T5656] hsr_slave_0: entered promiscuous mode [ 88.539573][ T5656] hsr_slave_1: entered promiscuous mode [ 88.546018][ T5656] debugfs: 'hsr0' already exists in 'hsr' [ 88.551754][ T5656] Cannot create hsr debugfs directory [ 88.940007][ T5655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.952691][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.960768][ T5655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.971150][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.981789][ T5655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.991453][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.006765][ T5655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.018170][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.073392][ T5654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.086573][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.099623][ T5654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.109447][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.118043][ T5654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.128281][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.136989][ T5654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.146473][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.229670][ T5656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.239562][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.256985][ T5656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.266925][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.276879][ T5656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.287569][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.309072][ T5656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.319141][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.409254][ T5670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.418761][ T5670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.434257][ T5670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.443479][ T5670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.452255][ T5670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.462914][ T5670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.475071][ T5664] Bluetooth: hci0: command tx timeout [ 89.478784][ T5670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.489885][ T5670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.544673][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.555995][ T5658] Bluetooth: hci2: command tx timeout [ 89.561762][ T5664] Bluetooth: hci1: command tx timeout [ 89.604145][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.623254][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.635065][ T5664] Bluetooth: hci3: command tx timeout [ 89.650514][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.658036][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.682244][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.689367][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.730609][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.752799][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.768601][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.775749][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.818393][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.825594][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.843654][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.873332][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.880532][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.924753][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.931886][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.976114][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.054399][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.086898][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.094093][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.136953][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.144146][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.949830][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.019414][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.054784][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.125179][ T5655] veth0_vlan: entered promiscuous mode [ 91.156061][ T5655] veth1_vlan: entered promiscuous mode [ 91.253673][ T5654] veth0_vlan: entered promiscuous mode [ 91.268268][ T5656] veth0_vlan: entered promiscuous mode [ 91.280756][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.300886][ T5654] veth1_vlan: entered promiscuous mode [ 91.316551][ T5655] veth0_macvtap: entered promiscuous mode [ 91.332023][ T5656] veth1_vlan: entered promiscuous mode [ 91.341946][ T5655] veth1_macvtap: entered promiscuous mode [ 91.389309][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.418840][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.447422][ T5670] veth0_vlan: entered promiscuous mode [ 91.453931][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.464086][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482675][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.491729][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.512494][ T5654] veth0_macvtap: entered promiscuous mode [ 91.520207][ T5656] veth0_macvtap: entered promiscuous mode [ 91.531653][ T5670] veth1_vlan: entered promiscuous mode [ 91.542014][ T5654] veth1_macvtap: entered promiscuous mode [ 91.556050][ T5664] Bluetooth: hci0: command tx timeout [ 91.566034][ T5656] veth1_macvtap: entered promiscuous mode [ 91.631787][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.639319][ T5664] Bluetooth: hci1: command tx timeout [ 91.644719][ T5658] Bluetooth: hci2: command tx timeout [ 91.669873][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.687130][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.715888][ T5658] Bluetooth: hci3: command tx timeout [ 91.716686][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.737464][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.746320][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.756313][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773079][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.790941][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.800938][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.810208][ T5670] veth0_macvtap: entered promiscuous mode [ 91.829682][ T128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.839165][ T128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.882294][ T128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.894193][ T128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.909800][ T5670] veth1_macvtap: entered promiscuous mode [ 91.962205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.974289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.019831][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.029872][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.033662][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.094022][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.102128][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.114188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.127454][ T5655] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.185549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.202038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.223104][ T128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232793][ T128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.258299][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.266494][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.279499][ T128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296217][ T128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.563921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.588561][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.747662][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.789964][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.639140][ T5658] Bluetooth: hci0: command tx timeout [ 93.715587][ T5658] Bluetooth: hci1: command tx timeout [ 93.716086][ T5664] Bluetooth: hci2: command tx timeout [ 93.795184][ T5664] Bluetooth: hci3: command tx timeout [ 95.760784][ T5664] Bluetooth: hci3: unexpected event 0x01 length: 124 > 1 [ 95.893420][ T5664] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 96.510115][ T5981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.784500][ T5974] kexec: Could not allocate control_code_buffer [ 101.620195][ T6216] capability: warning: `syz.0.202' uses 32-bit capabilities (legacy support in use) [ 106.203352][ T6395] capability: warning: `syz.3.288' uses deprecated v2 capabilities in a way that may be insecure [ 107.084518][ T6430] Unable to find swap-space signature [ 107.402874][ T6442] futex_wake_op: syz.3.309 tries to shift op by -2048; fix this program [ 112.563647][ T6634] Process accounting resumed [ 114.238390][ T6718] mmap: syz.0.443 (6718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.420068][ T30] audit: type=1800 audit(1843105561.366:2): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.447" name="members" dev="configfs" ino=11398 res=0 errno=0 [ 116.766259][ T6844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.929451][ T30] audit: type=1800 audit(1843105563.875:3): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.506" name="members" dev="configfs" ino=10755 res=0 errno=0 [ 117.127108][ T5664] Bluetooth: hci2: unknown advertising packet type: 0xea [ 117.687471][ T6884] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5655] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6884] [ 118.856308][ T5664] Bluetooth: hci0: unexpected event 0x34 length: 726 > 6 [ 120.921388][ T7039] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5655] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7039] [ 123.516141][ T30] audit: type=1326 audit(1843105570.452:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.662" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe74099ce59 code=0x0 [ 124.402021][ T7206] syz_tun: tun_chr_ioctl cmd 1074025678 [ 124.415556][ T7206] syz_tun: group set to 23693 [ 124.696664][ T7219] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.196645][ T30] audit: type=1800 audit(1843105573.131:5): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.722" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 129.358632][ T5664] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 130.899757][ T7470] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.095905][ T5664] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10 [ 132.317689][ T7535] ======================================================= [ 132.317689][ T7535] WARNING: The mand mount option has been deprecated and [ 132.317689][ T7535] and is ignored by this kernel. Remove the mand [ 132.317689][ T7535] option from the mount to silence this warning. [ 132.317689][ T7535] ======================================================= [ 132.852478][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860951][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.080923][ T30] audit: type=1800 audit(1843105581.017:6): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.885" name="trace_pipe" dev="tracefs" ino=3610 res=0 errno=0 [ 134.424588][ T7626] random: crng reseeded on system resumption [ 135.265664][ T7593] kexec: Could not allocate control_code_buffer [ 135.732676][ T7677] syz.3.917 (7677): attempted to duplicate a private mapping with mremap. This is not supported. [ 139.066221][ T5664] Bluetooth: hci0: unexpected event 0x3c length: 124 > 7 [ 139.448295][ T7845] can: request_module (can-proto-5) failed. [ 140.504544][ T7888] Invalid ELF header magic: != ELF [ 141.215344][ T7917] Invalid ELF header magic: != ELF [ 142.735615][ T7970] Process accounting paused [ 147.389154][ T30] audit: type=1800 audit(1843105594.310:7): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="trace_pipe" dev="tracefs" ino=3648 res=0 errno=0 [ 149.525667][ T30] audit: type=1800 audit(1843105596.429:8): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1204" name="dbroot" dev="configfs" ino=14809 res=0 errno=0 [ 149.991184][ T30] audit: type=1800 audit(1843105596.909:9): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1216" name="version" dev="configfs" ino=14838 res=0 errno=0 [ 150.442962][ T8305] syz.3.1233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.104609][ T30] audit: type=1800 audit(1843105598.028:10): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1239" name="lu_gp_id" dev="configfs" ino=16166 res=0 errno=0 [ 151.502134][ T30] audit: type=1800 audit(1843105598.428:11): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1248" name="dbroot" dev="configfs" ino=14967 res=0 errno=0 [ 151.806334][ T8366] __vm_enough_memory: pid: 8366, comm: syz.0.1255, bytes: 4398046511104 not enough memory for the allocation [ 152.579581][ T30] audit: type=1800 audit(1843105599.507:12): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1271" name="dbroot" dev="configfs" ino=16247 res=0 errno=0 [ 155.428861][ T8529] ima: policy update failed [ 155.444755][ T30] audit: type=1802 audit(1843105602.366:13): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1337" res=0 errno=0 [ 157.503297][ T30] audit: type=1800 audit(1843105604.415:14): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1387" name="features" dev="configfs" ino=16666 res=0 errno=0 [ 157.775248][ T8643] syz.1.1394(8643): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 158.056294][ T5664] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 158.059487][ T5664] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 159.486491][ T30] audit: type=1800 audit(1843105606.404:15): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1434" name="features" dev="configfs" ino=16863 res=0 errno=0 [ 161.849553][ T30] audit: type=1800 audit(1843105608.763:16): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1486" name="features" dev="configfs" ino=17594 res=0 errno=0 [ 161.853793][ T8833] syz_tun: tun_chr_ioctl cmd 1074025680 [ 166.400582][ T5664] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17 [ 167.922991][ T30] audit: type=1800 audit(1843105614.830:17): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1630" name="dummy_udc" dev="gadgetfs" ino=7813 res=0 errno=0 [ 169.776058][ T5664] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 172.688298][ T9359] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5656] was attempted by ""[9359] [ 172.783302][ T9358] Process accounting resumed [ 173.644498][ T9403] Invalid ELF header magic: != ELF [ 179.103945][ T30] audit: type=1800 audit(1843107674.058:18): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1851" name="lu_gp_id" dev="configfs" ino=19279 res=0 errno=0 [ 179.560726][ T10] Process accounting resumed [ 179.756312][ T9689] usb usb22: usbfs: process 9689 (syz.2.1867) did not claim interface 1 before use [ 179.988931][ T9700] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 180.288126][ T9716] i2c i2c-0: new_device: Can't parse I2C address [ 180.695020][ T5664] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 182.484837][ T9818] usbip-vudc usbip-vudc.0: gadget not bound [ 183.133135][ T9846] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 183.592357][ T9868] process 'syz.2.1953' launched '/dev/fd/3' with NULL argv: empty string added [ 184.198906][ T9898] [U] ^\ [ 184.688762][ T9921] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 186.228916][ T9989] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 186.452500][T10001] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.692560][ T5664] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 186.729107][T10014] kafs: addr_prefs: Too many elements in string [ 187.617520][T10057] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 187.769672][T10064] Setting dangerous option i915.mitigations - tainting kernel [ 188.082761][T10077] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 188.256891][T10086] syz.3.2060 uses obsolete (PF_INET,SOCK_PACKET) [ 188.772751][ T5664] Bluetooth: hci0: command 0x2016 tx timeout [ 188.917212][T10117] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 189.190189][T10127] nvme_fcloop: unknown parameter or missing value '' [ 189.712180][ T5664] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 189.807957][T10156] [U] ^R [ 190.508657][T10177] ICMPv6: process `syz.2.2104' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 190.840574][ T5664] Bluetooth: hci0: command 0x2016 tx timeout [ 191.797468][ T5658] Bluetooth: hci3: command 0x2016 tx timeout [ 192.008351][ T50] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 192.008392][ T50] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 192.025587][ T50] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 192.543681][ T50] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 192.543720][ T50] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 192.558559][ T50] Bluetooth: hci3: Malformed LE Event: 0x1b [ 192.699016][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 192.906500][T10277] random: crng reseeded on system resumption [ 193.736884][T10308] vhci_hcd vhci_hcd.2: invalid port number 16 [ 193.752592][T10308] vhci_hcd vhci_hcd.2: invalid port number 16 [ 193.866774][ T5664] Bluetooth: hci3: command 0x2016 tx timeout [ 194.187883][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195755][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.417260][T10336] sysfs_service_op_store: Client not running :-5: [ 194.742167][ T5658] Bluetooth: hci1: command 0x2016 tx timeout [ 194.908308][ T30] audit: type=1800 audit(1843107689.943:19): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2192" name="dbroot" dev="configfs" ino=21930 res=0 errno=0 [ 194.935080][T10359] db_root: cannot open: /dev/audio1 [ 194.962530][T10359] db_root: not a directory: /dev/audio1 [ 195.745687][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 195.753702][ T50] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 196.464975][T10424] vhci_hcd vhci_hcd.2: invalid port number 135 [ 196.492232][T10424] vhci_hcd vhci_hcd.2: invalid port number 135 [ 196.716034][T10434] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.812661][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 197.306247][ T30] audit: type=1800 audit(1843107692.354:20): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2241" name="dbroot" dev="configfs" ino=22837 res=0 errno=0 [ 197.308827][T10460] db_root: cannot open: /dev/audio1 [ 197.332823][T10460] db_root: not a directory: /dev/audio1 [ 200.244516][T10581] nvme_fabrics: missing parameter 'transport=%s' [ 200.260183][T10581] nvme_fabrics: missing parameter 'nqn=%s' [ 202.672803][T10698] Process accounting paused [ 203.553973][T10741] smpboot: CPU 1 is now offline [ 203.755968][ T5658] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 203.763741][ T5658] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 207.270682][T10889] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 207.403603][ T5658] Bluetooth: hci1: command 0x2016 tx timeout [ 207.579648][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 207.587297][ T50] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 208.247697][ T30] audit: type=1800 audit(1843107703.345:21): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2465" name="members" dev="configfs" ino=24275 res=0 errno=0 [ 211.546195][ T5662] Bluetooth: hci0: command 0x2016 tx timeout [ 211.552255][ T5667] Bluetooth: hci2: command 0x0406 tx timeout [ 211.558797][ T5667] Bluetooth: hci3: command 0x2016 tx timeout [ 213.673904][ T30] audit: type=1806 audit(1843107708.791:22): res=-14 [ 215.089798][T11197] usb usb26: usbfs: process 11197 (syz.3.2596) did not claim interface 0 before use [ 218.791294][T11350] vhci_hcd vhci_hcd.2: invalid port number 194 [ 218.827132][T11350] vhci_hcd vhci_hcd.2: invalid port number 194 [ 219.077149][T11363] < [ 222.305980][T11483] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 223.035142][T11513] [ 223.275700][T11527] kernel profiling enabled (shift: 0) [ 224.503262][T11563] cougar: G6 mapped to F18 [ 226.849218][T11620] i2c i2c-0: delete_device: Can't find device in list [ 227.620965][ T5664] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 229.813887][T11731] mmap: syz.3.2854 (11731): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 230.371177][T11744] hub 1-0:1.0: USB hub found [ 230.401805][T11744] hub 1-0:1.0: 1 port detected [ 230.835547][T11752] could not allocate digest TFM handle [ 231.069293][T11771] hub 1-0:1.0: USB hub found [ 231.109947][T11771] hub 1-0:1.0: 1 port detected [ 232.602793][T11825] hub 1-0:1.0: USB hub found [ 232.630540][T11825] hub 1-0:1.0: 1 port detected [ 232.777491][T11825] Process accounting resumed [ 233.454670][T11863] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.844716][T11879] : Can't lookup blockdev [ 234.137909][T11892] synth uevent: /bus/mei: unknown uevent action string [ 234.796911][T11918] program syz.0.2944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.260039][T11940] aoe: copy from user failed [ 235.287427][T11940] aoe: could not set interface list: too many interfaces [ 237.815594][T12027] hub 1-0:1.0: USB hub found [ 237.844781][T12027] hub 1-0:1.0: 1 port detected [ 240.103494][T12114] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 240.744868][T12141] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 240.792747][T12141] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 243.914608][T12247] zswap: compressor Z(u not available [ 245.311777][T12309] vhci_hcd: not connected 4 [ 245.899616][ T5664] Bluetooth: hci1: unexpected event 0x3e length: 0 < 1 [ 246.807529][T12364] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.1.3154: 7 [ 247.810591][T12410] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 248.015667][T12419] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 248.019420][T12417] ima: policy update failed [ 248.099432][ T30] audit: type=1802 audit(1843107743.383:23): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3182" res=0 errno=0 [ 248.532176][T12441] binder: 12440:12441 ioctl 40046205 0 returned -22 [ 249.343660][T12476] usbcore.quirks: string doesn't fit in 127 chars. [ 249.819613][ T5664] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 250.435522][T12523] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 251.918185][T12572] kAFS: unparsable volume name [ 253.932389][T12649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.339342][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.355871][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058099][T12746] kfence: disabled [ 257.557339][T12805] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.613696][T12809] program syz.0.3373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.666910][T12809] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 258.880950][T12860] qrtr: Invalid version 0 [ 259.009651][T12862] ICMPv6: process `syz.1.3399' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 260.002315][T12895] Setting dangerous option i915.mitigations - tainting kernel [ 260.151937][T12900] block2mtd: device name too long [ 261.319537][T12951] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 261.550636][T12951] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 261.616287][T12951] pci 0000:00:01.3: PCI INT A: no GSI [ 262.687518][T12997] Process accounting paused [ 264.123497][T13065] overlayfs: "check_copy_up" module option is obsolete [ 269.901077][T13291] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 269.959550][T13291] ep_00: uevent: failed to send synthetic uevent: -22 [ 270.110852][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.117191][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.891966][T13367] ecryptfs_miscdev_write: Invalid packet size [192] [ 272.877714][ T30] audit: type=1800 audit(1843107768.269:24): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3668" name="discovery_nqn" dev="configfs" ino=32135 res=0 errno=0 [ 273.944128][T13462] usb usb13: check_ctrlrecip: process 13462 (syz.1.3693) requesting ep 01 but needs 81 [ 274.001956][T13462] usb usb13: usbfs: process 13462 (syz.1.3693) did not claim interface 0 before use [ 274.029995][T13464] WARNING! power/level is deprecated; use power/control instead [ 274.270430][T13473] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 274.332924][T13473] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 274.383114][T13473] memcg:ffff88805702b001 [ 274.411221][T13473] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 274.458075][T13473] page_type: f5(slab) [ 274.489622][T13473] raw: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 274.531691][T13473] raw: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 274.569915][T13473] head: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 274.624682][T13473] head: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 274.683294][T13473] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 274.722886][T13473] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 274.780966][T13473] page dumped because: unmovable page [ 274.812915][T13473] page_owner tracks the page as allocated [ 274.852901][T13473] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 32048716553, free_ts 25611754047 [ 274.986206][T13473] post_alloc_hook+0x153/0x170 [ 275.010202][T13473] get_page_from_freelist+0x11a6/0x33b0 [ 275.068974][T13473] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 275.153093][T13473] new_slab+0xa6/0x6c0 [ 275.199041][T13473] refill_objects+0x277/0x420 [ 275.227817][T13473] __pcs_replace_empty_main+0x375/0x650 [ 275.258500][T13473] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 275.296515][T13473] alloc_inode+0x183/0x250 [ 275.321674][T13473] iget_locked+0x1d9/0x6d0 [ 275.341197][T13473] kernfs_get_inode+0x46/0x470 [ 275.361522][T13473] kernfs_iop_lookup+0x1a7/0x2d0 [ 275.389897][T13473] __lookup_slow+0x251/0x460 [ 275.417864][T13473] lookup_slow+0x50/0x70 [ 275.444584][T13473] path_lookupat+0x5e8/0xc40 [ 275.469999][T13473] filename_lookup+0x202/0x590 [ 275.493968][T13473] do_readlinkat+0xd3/0x370 [ 275.513609][T13473] page last free pid 1 tgid 1 stack trace: [ 275.539765][T13473] __free_frozen_pages+0x747/0x1040 [ 275.567307][T13473] free_contig_range+0xda/0x140 [ 275.600672][T13473] destroy_args+0xa8/0x7a0 [ 275.626214][T13473] debug_vm_pgtable+0x1d69/0x3490 [ 275.654898][T13473] do_one_initcall+0x121/0x750 [ 275.674015][T13473] kernel_init_freeable+0x6ea/0x7b0 [ 275.698791][T13473] kernel_init+0x1f/0x1e0 [ 275.732010][T13473] ret_from_fork+0x72b/0xd50 [ 275.757938][T13473] ret_from_fork_asm+0x1a/0x30 [ 276.014947][ T5664] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 276.014970][ T5664] Bluetooth: hci0: unexpected subevent 0x06 length: 725 > 10 [ 276.523129][T13563] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 276.862115][T13580] block nbd0: NBD_DISCONNECT [ 278.030610][ T5664] Bluetooth: hci0: command 0x2016 tx timeout [ 279.946968][T13710] vivid-007: ================= START STATUS ================= [ 279.982033][T13710] vivid-007: Enable Output Cropping: true [ 280.032783][T13710] vivid-007: Enable Output Composing: true [ 280.067141][T13710] vivid-007: Enable Output Scaler: true [ 280.098594][T13710] vivid-007: Tx RGB Quantization Range: Automatic [ 280.126780][T13710] vivid-007: Transmit Mode: HDMI [ 280.149570][T13710] vivid-007: Hotplug Present: 0x00000000 [ 280.179291][T13710] vivid-007: RxSense Present: 0x00000000 [ 280.212638][T13710] vivid-007: EDID Present: 0x00000000 [ 280.248773][T13710] vivid-007: ================== END STATUS ================== [ 281.373403][T13766] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 281.425482][T13766] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.463116][T13766] memcg:ffff88805702b001 [ 281.481388][T13766] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 281.522258][T13766] page_type: f5(slab) [ 281.544694][T13766] raw: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 281.591072][T13766] raw: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 281.629949][T13766] head: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 281.669772][T13766] head: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 281.710663][T13766] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 281.748856][T13766] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 281.790091][T13766] page dumped because: unmovable page [ 281.815189][T13766] page_owner tracks the page as allocated [ 281.848448][T13766] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 32048716553, free_ts 25611754047 [ 281.952008][T13766] post_alloc_hook+0x153/0x170 [ 281.979069][T13766] get_page_from_freelist+0x11a6/0x33b0 [ 282.012844][T13766] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 282.039359][T13766] new_slab+0xa6/0x6c0 [ 282.056602][T13766] refill_objects+0x277/0x420 [ 282.069038][T13793] bond0: no command found in slaves file - use +ifname or -ifname [ 282.085967][T13766] __pcs_replace_empty_main+0x375/0x650 [ 282.108907][T13766] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 282.144187][T13766] alloc_inode+0x183/0x250 [ 282.172837][T13766] iget_locked+0x1d9/0x6d0 [ 282.218554][T13766] kernfs_get_inode+0x46/0x470 [ 282.261924][T13766] kernfs_iop_lookup+0x1a7/0x2d0 [ 282.296053][T13766] __lookup_slow+0x251/0x460 [ 282.323510][T13766] lookup_slow+0x50/0x70 [ 282.338938][T13766] path_lookupat+0x5e8/0xc40 [ 282.358733][T13766] filename_lookup+0x202/0x590 [ 282.377472][T13766] do_readlinkat+0xd3/0x370 [ 282.399703][T13766] page last free pid 1 tgid 1 stack trace: [ 282.423528][T13766] __free_frozen_pages+0x747/0x1040 [ 282.452049][T13766] free_contig_range+0xda/0x140 [ 282.479351][T13766] destroy_args+0xa8/0x7a0 [ 282.502196][T13766] debug_vm_pgtable+0x1d69/0x3490 [ 282.525233][T13766] do_one_initcall+0x121/0x750 [ 282.546738][T13766] kernel_init_freeable+0x6ea/0x7b0 [ 282.568952][T13766] kernel_init+0x1f/0x1e0 [ 282.599728][T13766] ret_from_fork+0x72b/0xd50 [ 282.629948][T13766] ret_from_fork_asm+0x1a/0x30 [ 283.028989][T13828] sd 0:0:1:0: PR command failed: 1026 [ 283.052554][T13828] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 283.096094][T13828] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 283.598882][ T5664] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 284.489752][T13890] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 284.714118][T13898] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 284.764443][T13898] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 284.808167][T13898] memcg:ffff88805702b001 [ 284.832089][T13898] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 284.875520][T13898] page_type: f5(slab) [ 284.902272][T13898] raw: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 284.952734][T13898] raw: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 284.999550][T13898] head: 00fff00000000040 ffff88801ce948c0 dead000000000100 dead000000000122 [ 285.044452][T13898] head: 0000000000000000 00000008000d000d 00000000f5000000 ffff88805702b001 [ 285.104287][T13898] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 285.150234][T13898] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 285.199601][T13898] page dumped because: unmovable page [ 285.228871][T13898] page_owner tracks the page as allocated [ 285.255199][T13898] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5005, tgid 5005 (udevadm), ts 32048716553, free_ts 25611754047 [ 285.369648][T13898] post_alloc_hook+0x153/0x170 [ 285.404405][T13898] get_page_from_freelist+0x11a6/0x33b0 [ 285.432594][T13898] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 285.464591][T13898] new_slab+0xa6/0x6c0 [ 285.493476][T13898] refill_objects+0x277/0x420 [ 285.529400][T13898] __pcs_replace_empty_main+0x375/0x650 [ 285.569515][T13898] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 285.620311][T13898] alloc_inode+0x183/0x250 [ 285.645475][T13898] iget_locked+0x1d9/0x6d0 [ 285.664265][T13898] kernfs_get_inode+0x46/0x470 [ 285.681035][T13898] kernfs_iop_lookup+0x1a7/0x2d0 [ 285.695343][T13898] __lookup_slow+0x251/0x460 [ 285.711597][T13898] lookup_slow+0x50/0x70 [ 285.726077][T13898] path_lookupat+0x5e8/0xc40 [ 285.739015][T13898] filename_lookup+0x202/0x590 [ 285.755578][T13898] do_readlinkat+0xd3/0x370 [ 285.773829][T13898] page last free pid 1 tgid 1 stack trace: [ 285.797795][T13898] __free_frozen_pages+0x747/0x1040 [ 285.820652][T13898] free_contig_range+0xda/0x140 [ 285.837985][T13898] destroy_args+0xa8/0x7a0 [ 285.856821][T13898] debug_vm_pgtable+0x1d69/0x3490 [ 285.872157][T13898] do_one_initcall+0x121/0x750 [ 285.892846][T13898] kernel_init_freeable+0x6ea/0x7b0 [ 285.918441][T13898] kernel_init+0x1f/0x1e0 [ 285.938006][T13898] ret_from_fork+0x72b/0xd50 [ 285.956857][T13898] ret_from_fork_asm+0x1a/0x30 [ 286.159598][T13949] program syz.2.3933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.072895][T13992] sysfs_service_op_show: Client not running :-5: [ 290.488686][ T30] audit: type=1800 audit(1843107785.972:25): pid=14127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4021" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 291.765177][T14174] usb usb11: usbfs: interface 0 claimed by hub while 'syz.1.4044' sets config #7 [ 292.622507][T14206] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 292.636633][T14202] Process accounting resumed [ 293.185414][T14233] usb usb11: usbfs: interface 0 claimed by hub while 'syz.2.4073' sets config #7 [ 293.289337][T14235] ubi31: attaching mtd0 [ 293.352988][T14235] ubi31: scanning is finished [ 293.374832][T14235] ubi31: empty MTD device detected [ 293.694303][T14235] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 293.743705][T14235] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 293.797618][T14235] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 293.839255][T14235] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 293.882599][T14235] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 293.929866][T14235] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 293.987058][T14235] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 461298149 [ 294.049426][T14235] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 294.159687][T14253] ubi31: background thread "ubi_bgt31d" started, PID 14253 [ 294.289334][T14272] QAT: failed to copy from user cfg_data. [ 295.338139][T14320] ubi: mtd0 is already attached to ubi31 [ 296.158644][T14358] bond0: option slaves: interface - does not exist! [ 296.386376][T14368] QAT: failed to copy from user cfg_data. [ 297.550725][T14419] misc userio: Invalid payload size [ 297.740035][T14429] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. syzkaller syzkaller login: [ 299.598428][T14519] nvme_fcloop: unknown parameter or missing value '7' [ 300.148764][ T5664] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 300.148790][ T5664] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 300.165800][ T5664] Bluetooth: hci1: Dropping invalid advertising data [ 300.172663][ T5664] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 300.172686][ T5664] Bluetooth: hci1: unknown advertising packet type: 0x8b Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 300.179811][ T5664] Bluetooth: hci1: unknown advertising packet type: 0xee [ 302.349369][T14618] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 302.978178][T14635] block2mtd: Using custom MTD label '' for dev [ 303.017763][T14635] block2mtd: error: cannot open device [ 303.386170][T14657] i2c i2c-0: delete_device: Extra parameters [ 304.031074][T14687] bond0: invalid ARP target specified [ 305.055823][T14732] kAFS: No cell specified [ 305.718886][T14763] busy [ 306.125868][T14779] Scaler: ================= START STATUS ================= [ 306.181901][T14779] Scaler: ================== END STATUS ================== [ 306.700787][T14757] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 307.439024][ T30] audit: type=1800 audit(1843107803.002:26): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4371" name="dbroot" dev="configfs" ino=36645 res=0 errno=0 [ 308.447732][ T5796] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 308.685220][T14897] binder: 14896:14897 ioctl c0306201 200000000000 returned -14 [ 310.289314][T14965] binder: 14963:14965 ioctl 541b 0 returned -22 [ 310.465078][T14972] usb usb15: usbfs: process 14972 (syz.2.4435) did not claim interface 0 before use [ 310.803903][T14986] QAT: Stopping all acceleration devices. [ 311.303492][T15009] bond0: Unable to set down delay as MII monitoring is disabled [ 312.491468][T15062] kAFS: Invalid Command on /proc/fs/afs/cells file [ 313.051120][T15087] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ef5a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 313.066748][T15087] Call Trace: [ 313.070022][T15087] [ 313.072937][T15087] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 313.079607][T15087] mce_cpu_restart+0xd5/0x1f0 [ 313.084269][T15087] ? __pfx_mce_cpu_restart+0x10/0x10 [ 313.089541][T15087] smp_call_function_many_cond+0x13d4/0x1700 [ 313.095516][T15087] ? __pfx_mce_cpu_restart+0x10/0x10 [ 313.100790][T15087] ? mark_held_locks+0x40/0x70 [ 313.105540][T15087] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 313.111337][T15087] ? lockdep_hardirqs_on+0x78/0x100 [ 313.116528][T15087] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 313.122328][T15087] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 313.128644][T15087] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 313.134621][T15087] ? __timer_delete_sync+0x151/0x1c0 [ 313.139929][T15087] ? __pfx_mce_cpu_restart+0x10/0x10 [ 313.145232][T15087] on_each_cpu_cond_mask+0x40/0x90 [ 313.150344][T15087] set_bank+0x240/0x3a0 [ 313.154485][T15087] ? __pfx_set_bank+0x10/0x10 [ 313.159153][T15087] ? find_held_lock+0x2b/0x80 [ 313.163817][T15087] ? sysfs_file_kobj+0xe4/0x290 [ 313.168662][T15087] ? sysfs_file_kobj+0xe4/0x290 [ 313.173504][T15087] ? __pfx_set_bank+0x10/0x10 [ 313.178167][T15087] dev_attr_store+0x58/0x80 [ 313.182660][T15087] ? __pfx_dev_attr_store+0x10/0x10 [ 313.187859][T15087] sysfs_kf_write+0xf2/0x150 [ 313.192437][T15087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 313.197711][T15087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 313.202892][T15087] vfs_write+0x6ac/0x1070 [ 313.207215][T15087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 313.213015][T15087] ? __pfx_vfs_write+0x10/0x10 [ 313.217780][T15087] ksys_write+0x12a/0x250 [ 313.222093][T15087] ? __pfx_ksys_write+0x10/0x10 [ 313.227035][T15087] ? rcu_is_watching+0x12/0xc0 [ 313.231790][T15087] do_syscall_64+0x10b/0xf80 [ 313.236382][T15087] ? clear_bhb_loop+0x40/0x90 [ 313.241047][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.246923][T15087] RIP: 0033:0x7f8d9ab9ce59 [ 313.251335][T15087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.270948][T15087] RSP: 002b:00007f8d9ba09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.279352][T15087] RAX: ffffffffffffffda RBX: 00007f8d9ae15fa0 RCX: 00007f8d9ab9ce59 [ 313.287303][T15087] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 313.295257][T15087] RBP: 00007f8d9ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 313.303208][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.311176][T15087] R13: 00007f8d9ae16038 R14: 00007f8d9ae15fa0 R15: 00007fffac18e918 [ 313.319143][T15087] [ 313.544598][T15093] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 313.656146][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.666776][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.693927][T15093] CIFS mount error: No usable UNC path provided in device string! [ 313.693927][T15093] [ 313.724683][T15093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 314.380482][T15119] kafs: addr_prefs: Invalid Command [ 314.626022][T15127] vhci_hcd vhci_hcd.2: invalid port number 16 [ 314.657417][T15127] vhci_hcd vhci_hcd.2: invalid port number 16 [ 316.064171][T15152] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 316.494239][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.500782][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.541585][T15235] aoe: can't write to that file. [ 317.855200][T15211] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 318.177825][T15260] program syz.0.4574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.234030][T15260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 320.278448][T15344] hub 3-0:1.0: USB hub found [ 320.309445][T15344] hub 3-0:1.0: 1 port detected [ 320.426008][T15344] usb usb3: authorized to connect [ 321.560407][T15380] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 321.618244][T15380] vhci_hcd vhci_hcd.2: invalid port number 0 [ 322.627813][T15422] Process accounting paused [ 323.973118][T15480] cougar: G6 mapped to space [ 324.748965][ T30] audit: type=1800 audit(4294967319.042:27): pid=15511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4698" name="lu_gp_id" dev="configfs" ino=38784 res=0 errno=0 [ 325.755538][T15542] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 326.668544][T15584] kAFS: Invalid Command on /proc/fs/afs/cells file [ 328.056620][T15622] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 330.507273][T15709] bonding: no command found in bonding_masters - use +ifname or -ifname [ 331.552402][T15747] wlan1: mtu less than device minimum [ 336.113082][T15925] Invalid input. Must be >= 4608 [ 336.686825][T15947] block2mtd: illegal erase size [ 339.815893][T16073] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 340.253772][T16094] vhci_hcd vhci_hcd.2: invalid port number 253 [ 340.286909][T16094] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 340.305561][T16096] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5654] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16096] [ 341.588820][T16151] bond0: invalid ARP target specified [ 344.231739][T16261] sg_write: data in/out 262108/20 bytes for SCSI command 0x61-- guessing data in; [ 344.231739][T16261] program syz.3.5031 not setting count and/or reply_len properly [ 344.459052][T16269] sd 0:0:1:0: PR command failed: 1026 [ 344.487392][T16269] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 344.521421][T16269] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 345.719799][T16314] [U] ^Z [ 346.515147][T16355] i2c i2c-0: new_device: Missing parameters [ 347.227596][T16388] QAT: failed to copy from user cfg_data. [ 349.221906][T16488] ecryptfs_miscdev_write: Error while inspecting packet size [ 350.987043][T16567] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 351.032961][T16567] net gretap0: uevent: failed to send synthetic uevent: -22 [ 351.041126][T16572] syz.3.5181 (16572): /proc/16571/oom_adj is deprecated, please use /proc/16571/oom_score_adj instead. [ 352.555036][T16638] Process accounting resumed [ 352.727153][T16650] block2mtd: too many arguments [ 354.075812][T16713] __vm_enough_memory: pid: 16713, comm: syz.1.5250, bytes: 9223372036854775808 not enough memory for the allocation [ 354.400069][T16725] block loop4: the capability attribute has been deprecated. [ 354.487482][T16728] phram: not enough arguments [ 354.698002][T16729] zram: Added device: zram1 [ 356.022583][T16797] futex_wake_op: syz.2.5292 tries to shift op by -2048; fix this program [ 356.078799][T16797] futex_wake_op: syz.2.5292 tries to shift op by -2048; fix this program [ 356.243470][T16805] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 356.389074][T16807] zram: Added device: zram2 [ 357.824765][T16862] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 359.102356][T16909] ICMPv6: process `syz.3.5347' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 359.365077][ T30] audit: type=1800 audit(4294967353.825:28): pid=16920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5352" name="sr0" dev="devtmpfs" ino=2860 res=0 errno=0 [ 363.278927][ T5659] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 365.546066][ T30] audit: type=1800 audit(4294967360.034:29): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5460" name="dbroot" dev="configfs" ino=44092 res=0 errno=0 [ 365.593064][T17139] db_root: cannot open: /sy] [ 365.993014][T17157] hub 27-0:1.0: USB hub found [ 366.022668][T17157] hub 27-0:1.0: 1 port detected [ 366.465447][T17177] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 366.888425][T17192] [ 368.999360][T17295] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 369.388433][T17316] binder: binder_mmap: 17315 0-1000 bad vm_flags failed -1 [ 371.080998][T17387] TCP: TCP_TX_DELAY enabled [ 372.033602][T17422] zram0: detected capacity change from 0 to 16 [ 374.202172][T17522] vivid-003: ================= START STATUS ================= [ 374.253591][T17522] vivid-003: Radio HW Seek Mode: Bounded [ 374.325418][T17522] vivid-003: Radio Programmable HW Seek: false [ 374.367382][T17522] vivid-003: RDS Rx I/O Mode: Block I/O [ 374.413321][T17522] vivid-003: Generate RBDS Instead of RDS: false [ 374.456368][T17522] vivid-003: RDS Reception: true [ 374.489885][T17522] vivid-003: RDS Program Type: 0 inactive [ 374.534265][T17522] vivid-003: RDS PS Name: inactive [ 374.573987][T17522] vivid-003: RDS Radio Text: inactive [ 374.595050][T17534] binder: 17533:17534 ioctl 400c620e 0 returned -14 [ 374.616879][T17522] vivid-003: RDS Traffic Announcement: false inactive [ 374.653915][T17522] vivid-003: RDS Traffic Program: false inactive [ 374.695386][T17522] vivid-003: RDS Music: false inactive [ 374.754800][T17522] vivid-003: ================== END STATUS ================== [ 375.019218][ T30] audit: type=1800 audit(4294967369.548:30): pid=17549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5650" name="dbroot" dev="configfs" ino=45392 res=0 errno=0 [ 375.915311][T17582] : Can't lookup blockdev [ 376.095262][T17589] warning: `syz.0.5667' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 376.429143][T17603] sd 0:0:1:0: PR command failed: 1026 [ 376.460021][T17603] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 376.502839][T17603] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 377.621692][T17656] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 377.645575][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.651909][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.449454][T17819] kafs: addr_prefs: Invalid Command [ 382.518090][T17860] Process accounting paused [ 383.298522][T17895] aoe: invalid device specification [ 390.310471][ T10] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 392.342296][T18274] QAT: failed to copy from user. [ 393.161780][T18317] hub 1-0:1.0: USB hub found [ 393.196442][T18317] hub 1-0:1.0: 1 port detected [ 393.606470][T18336] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 394.668894][T18392] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 394.668894][T18392] M' is too long [ 394.714649][T18392] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 394.714649][T18392] W ' is too long [ 395.473643][T18434] usb usb4: usbfs: process 18434 (syz.0.6039) did not claim interface 0 before use [ 396.860632][T18519] usb usb4: usbfs: process 18519 (syz.1.6068) did not claim interface 0 before use [ 398.443945][T18608] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 398.921713][T18636] Line length is too long: Should be less than 4094 [ 399.114627][T18644] virtio-pci 0000:00:03.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 399.822675][T18664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.281525][T18664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.530800][T18664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.707717][T18664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.504025][T18768] hub 1-0:1.0: USB hub found [ 401.545783][T18768] hub 1-0:1.0: 1 port detected [ 403.040328][T18846] binder: 18844:18846 ioctl c0306201 0 returned -14 [ 403.071806][T18848] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 404.371061][T18893] ima: policy update failed [ 404.401857][ T30] audit: type=1802 audit(4294985743.069:31): pid=18893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6199" res=0 errno=0 [ 405.432976][T18925] i2c i2c-0: delete_device: Can't parse I2C address [ 405.615832][T18935] bond0: invalid ARP target specified [ 408.943337][T19114] program syz.1.6278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.675511][T19157] Format for deleting device is "id" (uint). [ 409.734392][T19160] zram: Cannot change disksize for initialized device [ 409.982231][T19177] binder: 19176:19177 ioctl c00c6211 0 returned -14 [ 410.615875][T19214] writes to the poll attribute are ignored. [ 410.670061][T19214] please use driver specific parameters instead. [ 411.943213][T19297] kAFS: Invalid Command on /proc/fs/afs/cells file [ 412.463658][T19323] Process accounting resumed [ 412.694271][T19341] dyndbg: expected <4096 bytes into control [ 412.781653][T19348] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 412.800360][T19347] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 412.840781][T19347] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 412.908255][T19354] zram: Can't change algorithm for initialized device [ 413.358221][T19376] ICMPv6: process `syz.3.6372' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 416.179834][T19527] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.845573][T19562] queue_state_write: operation too long [ 416.889839][T19562] queue_state_write: use 'run', 'start' or 'kick' [ 417.103314][ T30] audit: type=1800 audit(4294985755.829:32): pid=19576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6444" name="lu_gp_id" dev="configfs" ino=50500 res=0 errno=0 [ 417.136159][T19576] kstrtoul() returned -22 for lu_gp_id [ 417.530689][T19601] : Can't lookup blockdev [ 417.550859][T19603] busy [ 420.941329][T19796] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 421.365057][T19820] rnbd_client L213: map_device: Parameters missing [ 423.520470][T19948] blkio.reset_stats is deprecated [ 423.761295][T19963] ptp ptp0: only physical clock in use now [ 425.306830][T20049] : Can't lookup blockdev [ 425.692166][T20074] RGB/YUV Input: ================= START STATUS ================= [ 425.742725][T20074] RGB/YUV Input: Test Pattern: 75% Colorbar [ 425.790522][T20074] RGB/YUV Input: Show Information: All [ 425.829944][T20074] RGB/YUV Input: Vertical Flip: false [ 425.867445][T20074] RGB/YUV Input: Horizontal Flip: false [ 425.899948][T20074] RGB/YUV Input: Brightness: 128 [ 425.927021][T20074] RGB/YUV Input: Contrast: 128 [ 425.953706][T20074] RGB/YUV Input: Hue: 0 [ 425.980171][T20074] RGB/YUV Input: Saturation: 128 [ 426.011838][T20074] RGB/YUV Input: Pixel Rate: 160000000 [ 426.036956][T20074] RGB/YUV Input: Horizontal Blanking: 800 [ 426.065343][T20074] RGB/YUV Input: Vertical Blanking: 3223 [ 426.101135][T20074] RGB/YUV Input: ================== END STATUS ================== [ 426.937290][T20141] ima: policy update failed [ 426.960176][ T30] audit: type=1802 audit(4294985765.735:33): pid=20141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6647" res=0 errno=0 [ 428.510229][T20234] QAT: Invalid ioctl 21531 [ 429.407703][T20288] ACPI: Can not change Invalid GPE/Fixed Event status [ 430.543338][T20351] ecryptfs_parse_packet_length: Error parsing packet length [ 430.588873][T20351] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 431.734137][T20419] vhci_hcd vhci_hcd.2: invalid port number 16 [ 431.754770][T20419] vhci_hcd vhci_hcd.2: invalid port number 16 [ 435.019133][T20563] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 435.311855][T20577] ceph: Failed to parse sending metrics switch value 'P^' [ 436.243686][T20620] block2mtd: illegal erase size [ 436.994429][T20653] syz.2.6832 (20653): drop_caches: 0 [ 438.797994][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.807316][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.429578][T20762] block2mtd: parameter too long [ 439.682000][T20773] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 440.322752][T20807] sg_write: data in/out 124/3 bytes for SCSI command 0x61-- guessing data in; [ 440.322752][T20807] program syz.3.6888 not setting count and/or reply_len properly [ 440.549248][T20818] ima: policy update failed [ 440.576135][ T30] audit: type=1802 audit(4294985779.409:34): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.6892" res=0 errno=0 [ 441.780656][ T30] audit: type=1806 audit(4294985780.625:35): xattr="." res=0 [ 442.421690][T20918] Process accounting paused [ 442.932207][T20951] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 445.012546][T21063] ================================================================== [ 445.012559][T21063] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 445.012667][T21063] Write of size 8 at addr ffffc90004c69000 by task syz.0.6979/21063 [ 445.012680][T21063] [ 445.012696][T21063] CPU: 0 UID: 0 PID: 21063 Comm: syz.0.6979 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 445.012722][T21063] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 445.012729][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.012738][T21063] Call Trace: [ 445.012767][T21063] [ 445.012774][T21063] dump_stack_lvl+0x100/0x190 [ 445.012803][T21063] print_report+0x13d/0x4b0 [ 445.012830][T21063] ? _raw_spin_lock_irqsave+0x52/0x60 [ 445.012878][T21063] ? sys_fillrect+0x174a/0x1910 [ 445.012902][T21063] kasan_report+0xdf/0x1d0 [ 445.012928][T21063] ? sys_fillrect+0x174a/0x1910 [ 445.012952][T21063] sys_fillrect+0x174a/0x1910 [ 445.012977][T21063] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 445.012998][T21063] bit_clear+0x17d/0x220 [ 445.013016][T21063] ? __pfx_bit_clear+0x10/0x10 [ 445.013034][T21063] ? fb_get_color_depth+0x120/0x250 [ 445.013076][T21063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.013100][T21063] __fbcon_clear+0x633/0x760 [ 445.013116][T21063] ? __pfx_bit_clear+0x10/0x10 [ 445.013135][T21063] fbcon_scroll+0x48b/0x650 [ 445.013153][T21063] con_scroll+0x464/0x690 [ 445.013175][T21063] csi_ECMA.constprop.0+0x1238/0x3b60 [ 445.013198][T21063] ? find_held_lock+0x2b/0x80 [ 445.013223][T21063] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 445.013256][T21063] do_con_write+0x3946/0x4a10 [ 445.013272][T21063] ? trace_contention_end+0x122/0x170 [ 445.013294][T21063] ? __pfx_do_con_write+0x10/0x10 [ 445.013311][T21063] con_write+0x23/0xb0 [ 445.013323][T21063] n_tty_write+0x431/0x11c0 [ 445.013344][T21063] ? __pfx_n_tty_write+0x10/0x10 [ 445.013359][T21063] ? trace_kmalloc+0xe3/0x110 [ 445.013377][T21063] ? __pfx_woken_wake_function+0x10/0x10 [ 445.013400][T21063] ? rcu_is_watching+0x12/0xc0 [ 445.013417][T21063] ? file_tty_write.isra.0+0x694/0x890 [ 445.013473][T21063] ? kfree+0x1dd/0x6c0 [ 445.013493][T21063] ? __pfx_n_tty_write+0x10/0x10 [ 445.013509][T21063] file_tty_write.isra.0+0x4d2/0x890 [ 445.013534][T21063] redirected_tty_write+0xd4/0x120 [ 445.013556][T21063] vfs_write+0x6ac/0x1070 [ 445.013574][T21063] ? __pfx_redirected_tty_write+0x10/0x10 [ 445.013596][T21063] ? __pfx_vfs_write+0x10/0x10 [ 445.013611][T21063] ? find_held_lock+0x2b/0x80 [ 445.013635][T21063] ksys_write+0x12a/0x250 [ 445.013651][T21063] ? __pfx_ksys_write+0x10/0x10 [ 445.013667][T21063] ? rcu_is_watching+0x12/0xc0 [ 445.013685][T21063] do_syscall_64+0x10b/0xf80 [ 445.013737][T21063] ? clear_bhb_loop+0x40/0x90 [ 445.013754][T21063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.013770][T21063] RIP: 0033:0x7f8d9ab9ce59 [ 445.013782][T21063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.013796][T21063] RSP: 002b:00007f8d9ba09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.013811][T21063] RAX: ffffffffffffffda RBX: 00007f8d9ae15fa0 RCX: 00007f8d9ab9ce59 [ 445.013822][T21063] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000003 [ 445.013831][T21063] RBP: 00007f8d9ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 445.013840][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.013849][T21063] R13: 00007f8d9ae16038 R14: 00007f8d9ae15fa0 R15: 00007fffac18e918 [ 445.013863][T21063] [ 445.013868][T21063] [ 445.013873][T21063] The buggy address belongs to a vmalloc virtual mapping [ 445.013884][T21063] Memory state around the buggy address: [ 445.013893][T21063] ffffc90004c68f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 445.013903][T21063] ffffc90004c68f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 445.013914][T21063] >ffffc90004c69000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 445.013922][T21063] ^ [ 445.013930][T21063] ffffc90004c69080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 445.013940][T21063] ffffc90004c69100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 445.013949][T21063] ================================================================== [ 445.025088][T21063] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 445.025105][T21063] CPU: 0 UID: 0 PID: 21063 Comm: syz.0.6979 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 445.025132][T21063] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 445.025139][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.025149][T21063] Call Trace: [ 445.025154][T21063] [ 445.025160][T21063] dump_stack_lvl+0x100/0x190 [ 445.025181][T21063] vpanic+0x552/0x970 [ 445.025196][T21063] ? __pfx_vpanic+0x10/0x10 [ 445.025211][T21063] ? mark_held_locks+0x40/0x70 [ 445.025227][T21063] ? sys_fillrect+0x174a/0x1910 [ 445.025256][T21063] panic+0xd1/0xe0 [ 445.025270][T21063] ? __pfx_panic+0x10/0x10 [ 445.025285][T21063] ? sys_fillrect+0x174a/0x1910 [ 445.025309][T21063] ? preempt_schedule_common+0x42/0xc0 [ 445.025333][T21063] check_panic_on_warn.cold+0x19/0x34 [ 445.025348][T21063] end_report.part.0+0x3a/0x90 [ 445.025369][T21063] kasan_report.cold+0xe/0x18 [ 445.025390][T21063] ? sys_fillrect+0x174a/0x1910 [ 445.025414][T21063] sys_fillrect+0x174a/0x1910 [ 445.025438][T21063] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 445.025458][T21063] bit_clear+0x17d/0x220 [ 445.025475][T21063] ? __pfx_bit_clear+0x10/0x10 [ 445.025494][T21063] ? fb_get_color_depth+0x120/0x250 [ 445.025511][T21063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.025534][T21063] __fbcon_clear+0x633/0x760 [ 445.025550][T21063] ? __pfx_bit_clear+0x10/0x10 [ 445.025569][T21063] fbcon_scroll+0x48b/0x650 [ 445.025587][T21063] con_scroll+0x464/0x690 [ 445.025610][T21063] csi_ECMA.constprop.0+0x1238/0x3b60 [ 445.025633][T21063] ? find_held_lock+0x2b/0x80 [ 445.025651][T21063] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 445.025676][T21063] do_con_write+0x3946/0x4a10 [ 445.025689][T21063] ? trace_contention_end+0x122/0x170 [ 445.025710][T21063] ? __pfx_do_con_write+0x10/0x10 [ 445.025727][T21063] con_write+0x23/0xb0 [ 445.025739][T21063] n_tty_write+0x431/0x11c0 [ 445.025759][T21063] ? __pfx_n_tty_write+0x10/0x10 [ 445.025774][T21063] ? trace_kmalloc+0xe3/0x110 [ 445.025791][T21063] ? __pfx_woken_wake_function+0x10/0x10 [ 445.025809][T21063] ? rcu_is_watching+0x12/0xc0 [ 445.025826][T21063] ? file_tty_write.isra.0+0x694/0x890 [ 445.025848][T21063] ? kfree+0x1dd/0x6c0 [ 445.025867][T21063] ? __pfx_n_tty_write+0x10/0x10 [ 445.025883][T21063] file_tty_write.isra.0+0x4d2/0x890 [ 445.025907][T21063] redirected_tty_write+0xd4/0x120 [ 445.025929][T21063] vfs_write+0x6ac/0x1070 [ 445.025946][T21063] ? __pfx_redirected_tty_write+0x10/0x10 [ 445.025968][T21063] ? __pfx_vfs_write+0x10/0x10 [ 445.025984][T21063] ? find_held_lock+0x2b/0x80 [ 445.026007][T21063] ksys_write+0x12a/0x250 [ 445.026023][T21063] ? __pfx_ksys_write+0x10/0x10 [ 445.026040][T21063] ? rcu_is_watching+0x12/0xc0 [ 445.026059][T21063] do_syscall_64+0x10b/0xf80 [ 445.026080][T21063] ? clear_bhb_loop+0x40/0x90 [ 445.026097][T21063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.026112][T21063] RIP: 0033:0x7f8d9ab9ce59 [ 445.026124][T21063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.026138][T21063] RSP: 002b:00007f8d9ba09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.026153][T21063] RAX: ffffffffffffffda RBX: 00007f8d9ae15fa0 RCX: 00007f8d9ab9ce59 [ 445.026164][T21063] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000003 [ 445.026174][T21063] RBP: 00007f8d9ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 445.026184][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.026193][T21063] R13: 00007f8d9ae16038 R14: 00007f8d9ae15fa0 R15: 00007fffac18e918 [ 445.026208][T21063] [ 445.026287][T21063] Kernel Offset: disabled