last executing test programs: 1.631546843s ago: executing program 1 (id=8605): set_mempolicy$auto(0x1, 0x0, 0x21) unshare$auto(0x40000080) 1.437844159s ago: executing program 2 (id=8609): r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000080), 0x82642, 0x0) write$auto_lowpan_control_fops_6lowpan(r0, 0x0, 0x0) 1.225168111s ago: executing program 2 (id=8612): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/amidi2\x00', 0x2, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001d00)=0x800) 1.13762608s ago: executing program 0 (id=8613): r0 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0) read$auto_buffer_percent_fops_trace(r0, 0x0, 0x0) 1.086115273s ago: executing program 3 (id=8614): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lowpan0/ifalias\x00', 0xa0001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)='\n', 0x1) 1.030518238s ago: executing program 2 (id=8615): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 951.848553ms ago: executing program 0 (id=8616): r0 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r0, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) 944.404236ms ago: executing program 1 (id=8617): socket(0x15, 0x5, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) 877.611305ms ago: executing program 3 (id=8618): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064ba, 0x1e6) 733.396491ms ago: executing program 0 (id=8619): r0 = socket(0xa, 0x2, 0x0) connect$auto(r0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x7) 732.182334ms ago: executing program 1 (id=8620): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x23) 651.429355ms ago: executing program 3 (id=8621): r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/ns/cgroup\x00', 0x480, 0x0) ioctl$auto_NS_GET_USERNS(r0, 0xb701, 0x0) 564.69196ms ago: executing program 2 (id=8622): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x3}, 0x3) 556.00877ms ago: executing program 0 (id=8623): r0 = socket(0x10, 0x3, 0xb) bind$auto(r0, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) 537.984098ms ago: executing program 1 (id=8624): r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x29, 0x23, &(0x7f00000002c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\x9c\x97\xcb\x97\x19V-\x1f\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\x85|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84\xda\xceKj_\f\x19\x9b\xd3\xe3\xee\x1e \'\xddTx\x15\x8fdq\a\x86\xb0\xe3[>P\xf1\f\xf5\xba|\xd1\xa5\x15 \xb2\x9b`\xf9\x9e\xd9Q\xd2\xe3\xe9\xf7\xcf\xbd\xba\x8a\xbb\x8b\xe3\xdaj\xfe\x85\x8a*FS\xdfi\x0eD\x10\xcdBz\xa8\x06\xe0\x14\xcc*\xad{\xb2\xf8\xb6\xbb>\x1fO\x96k5\xd1M9\xf0\x9a\xda\xa1\xaa~X\xd7&\xde\xa3\rI\xad\xc4A\x12\xeae*/\x8f}\xb6\xe7\v\xaa\xe5c\x88\x03\xf9\xe8S\xd4\xe2<\x88\xc4+\xf4w\x0e\xfe\x13|\x05\xf0\xfc\xa4\xb4\xf5\xf8\xb1\xf2\x8dyE\xf4\xfc\xf4\x99\x00\xfb\xc9\x7f\x142d\x99U$^\xbc\xf6`\x9b=bC\xb4uME#\xc4\x99\x87\xb9~\x8cv\x84\xd6M/j>j\xd5j\xb2\xb1\xf7\xcbL\xfe\xd6\xce\xf1\x81\xea\xfc@\xd4\xbb\xd6\xf4\xad\xc4\xf0\xfd\x8f\xbc?\xf1\x80\xb5J\nn|*\x81\x96\xe1M\xebS\'\x85\xcd\xc1\x95\n\x8a>\xd6\xf8\xf3\x11\xc6{\xba\x1f\xd7qK\x92\x95\x109\x80\x8c\x8f\x86j\xac\xdc\xb6\xe0\x88\xab}\xb3\xd6\xa3\x0f\xb4\xcd\x1f\xb1\x98\f=', 0x3ff) 456.895897ms ago: executing program 3 (id=8625): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, 0x0) 343.311801ms ago: executing program 1 (id=8626): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000180)="976f29bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb125fbc752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0x7f) 304.132017ms ago: executing program 0 (id=8627): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='7\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) 212.285328ms ago: executing program 3 (id=8628): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_OTPSELECT(r0, 0x80044d0d, &(0x7f00000002c0)) 190.980295ms ago: executing program 2 (id=8629): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x40300, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) 130.572051ms ago: executing program 1 (id=8630): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x11, 0x0, 0x10) 80.126918ms ago: executing program 0 (id=8631): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(r0, 0x405c5504, 0x81) 20.791276ms ago: executing program 3 (id=8632): r0 = socket(0x18, 0x80003, 0x1) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) 0s ago: executing program 2 (id=8633): r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000300)="2101c273d975ae15d3c161d0a6c3e2e27d907fdc58906569e2e509db", 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 80.503962][ T5619] cgroup: Unknown subsys name 'net' [ 80.619320][ T5619] cgroup: Unknown subsys name 'cpuset' [ 80.628465][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.389781][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.017277][ T5766] mmap: syz.0.128 (5766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.401200][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.159798][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.180115][ T4948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.203501][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.209622][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.211755][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.220633][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.230064][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.232798][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.239720][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.247433][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.262892][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.264912][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.282887][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.289086][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.305811][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.367497][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.381003][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.398102][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.411442][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.423450][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.238188][ T1224] cfg80211: failed to load regulatory.db [ 93.306583][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.313953][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.321738][ T5832] bridge_slave_0: entered allmulticast mode [ 93.331081][ T5832] bridge_slave_0: entered promiscuous mode [ 93.337579][ T5840] Bluetooth: hci0: command tx timeout [ 93.345237][ T5840] Bluetooth: hci1: command tx timeout [ 93.372791][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.380431][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.388112][ T5832] bridge_slave_1: entered allmulticast mode [ 93.395353][ T5832] bridge_slave_1: entered promiscuous mode [ 93.414953][ T5840] Bluetooth: hci2: command tx timeout [ 93.454011][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.461631][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.468994][ T5831] bridge_slave_0: entered allmulticast mode [ 93.476444][ T5831] bridge_slave_0: entered promiscuous mode [ 93.494983][ T5840] Bluetooth: hci3: command tx timeout [ 93.522188][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.529503][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.537304][ T5831] bridge_slave_1: entered allmulticast mode [ 93.544414][ T5831] bridge_slave_1: entered promiscuous mode [ 93.556808][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.566325][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.573576][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.581897][ T5843] bridge_slave_0: entered allmulticast mode [ 93.589292][ T5843] bridge_slave_0: entered promiscuous mode [ 93.621549][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.631233][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.638860][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.646268][ T5843] bridge_slave_1: entered allmulticast mode [ 93.653541][ T5843] bridge_slave_1: entered promiscuous mode [ 93.660752][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.668021][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.676486][ T5839] bridge_slave_0: entered allmulticast mode [ 93.686007][ T5839] bridge_slave_0: entered promiscuous mode [ 93.740379][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.747723][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.756047][ T5839] bridge_slave_1: entered allmulticast mode [ 93.763260][ T5839] bridge_slave_1: entered promiscuous mode [ 93.773095][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.787387][ T5832] team0: Port device team_slave_0 added [ 93.815051][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.826577][ T5832] team0: Port device team_slave_1 added [ 93.834935][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.883545][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.898241][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.944482][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.955885][ T5831] team0: Port device team_slave_0 added [ 93.962582][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.969649][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.996023][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.032348][ T5831] team0: Port device team_slave_1 added [ 94.038939][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.046228][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.072584][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.086246][ T5843] team0: Port device team_slave_0 added [ 94.122443][ T5843] team0: Port device team_slave_1 added [ 94.129913][ T5839] team0: Port device team_slave_0 added [ 94.160436][ T5839] team0: Port device team_slave_1 added [ 94.181749][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.188913][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.215637][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.262511][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.270315][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.297114][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.308931][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.316021][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.341986][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.366673][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.373771][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.399939][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.419369][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.426660][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.453169][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.469804][ T5832] hsr_slave_0: entered promiscuous mode [ 94.476947][ T5832] hsr_slave_1: entered promiscuous mode [ 94.484085][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.491361][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.517439][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.597002][ T5831] hsr_slave_0: entered promiscuous mode [ 94.603809][ T5831] hsr_slave_1: entered promiscuous mode [ 94.610356][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 94.616398][ T5831] Cannot create hsr debugfs directory [ 94.639896][ T5843] hsr_slave_0: entered promiscuous mode [ 94.646792][ T5843] hsr_slave_1: entered promiscuous mode [ 94.652959][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 94.658758][ T5843] Cannot create hsr debugfs directory [ 94.700800][ T5839] hsr_slave_0: entered promiscuous mode [ 94.707535][ T5839] hsr_slave_1: entered promiscuous mode [ 94.713786][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 94.719693][ T5839] Cannot create hsr debugfs directory [ 95.215694][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.232767][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.241286][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.251893][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.266087][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.278796][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.287417][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.300861][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.394702][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.406701][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.416158][ T5840] Bluetooth: hci1: command tx timeout [ 95.417457][ T4948] Bluetooth: hci0: command tx timeout [ 95.433453][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.448469][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.456974][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.468946][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.478977][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.490374][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.498545][ T4948] Bluetooth: hci2: command tx timeout [ 95.575590][ T4948] Bluetooth: hci3: command tx timeout [ 95.604308][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.617533][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.633115][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.644568][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.654249][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.665729][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.681264][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.692797][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.818074][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.830583][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.838830][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.850320][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.860399][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.872953][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.890921][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.901139][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.949084][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.023499][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.058242][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.066755][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.104649][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.112136][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.128860][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.232629][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.247089][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.294113][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.301402][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.344683][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.352070][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.393058][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.407523][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.437978][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.445317][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.484090][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.491432][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.561525][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.604538][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.611822][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.669100][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.676396][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.242225][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.461106][ T5832] veth0_vlan: entered promiscuous mode [ 97.492241][ T5832] veth1_vlan: entered promiscuous mode [ 97.498885][ T4948] Bluetooth: hci1: command tx timeout [ 97.506820][ T5840] Bluetooth: hci0: command tx timeout [ 97.576194][ T4948] Bluetooth: hci2: command tx timeout [ 97.602765][ T5832] veth0_macvtap: entered promiscuous mode [ 97.622765][ T5832] veth1_macvtap: entered promiscuous mode [ 97.655658][ T4948] Bluetooth: hci3: command tx timeout [ 97.718197][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.759045][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.783524][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.814542][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.851982][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.877274][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.910745][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.042037][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.148337][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.162738][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.171258][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.198740][ T5843] veth0_vlan: entered promiscuous mode [ 98.243363][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.248942][ T5843] veth1_vlan: entered promiscuous mode [ 98.257857][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.357523][ T5831] veth0_vlan: entered promiscuous mode [ 98.396237][ T5843] veth0_macvtap: entered promiscuous mode [ 98.420950][ T5843] veth1_macvtap: entered promiscuous mode [ 98.457212][ T5831] veth1_vlan: entered promiscuous mode [ 98.479212][ T5839] veth0_vlan: entered promiscuous mode [ 98.528523][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.570041][ T5979] syz.1.172 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.570719][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.594465][ T5839] veth1_vlan: entered promiscuous mode [ 98.636985][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.655672][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.690442][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.702311][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.716428][ T5831] veth0_macvtap: entered promiscuous mode [ 98.769249][ T5831] veth1_macvtap: entered promiscuous mode [ 98.887124][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.907495][ T5839] veth0_macvtap: entered promiscuous mode [ 98.930354][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.963720][ T5839] veth1_macvtap: entered promiscuous mode [ 99.027276][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.037244][ T1008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.050331][ T1008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.052662][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.089003][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.100979][ T1008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.143498][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.240453][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.252952][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.261304][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.324115][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.344360][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.374171][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.396920][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.576158][ T4948] Bluetooth: hci1: command tx timeout [ 99.576444][ T5840] Bluetooth: hci0: command tx timeout [ 99.633467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.652678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.667473][ T5840] Bluetooth: hci2: command tx timeout [ 99.735885][ T5840] Bluetooth: hci3: command tx timeout [ 99.854623][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.873182][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.972653][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.007233][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.139238][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.172552][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.343452][ T30] audit: type=1326 audit(1780138498.491:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.2.205" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb5df9ce59 code=0x0 [ 101.892753][ T5840] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 105.590753][ T6215] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.334626][ T6239] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.836260][ T6308] kexec: Could not allocate control_code_buffer [ 111.964709][ T6433] syz.2.393(6433): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 115.618827][ T5840] Bluetooth: hci2: unexpected event 0x3c length: 124 > 7 [ 120.014380][ T6704] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.198078][ T6747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.215535][ T6747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.270208][ T6747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.364374][ T6747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.393778][ T6747] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.407649][ T6772] __vm_enough_memory: pid: 6772, comm: syz.3.560, bytes: 4398046511104 not enough memory for the allocation [ 122.472739][ T6747] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.518586][ T6747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.541307][ T6747] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.583309][ T6747] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.637630][ T6747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.662840][ T6747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.709187][ T6747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.422841][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.390487][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.543540][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.713769][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.507097][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.472473][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.624840][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.738237][ T5840] Bluetooth: hci1: unexpected subevent 0x03 length: 123 > 9 [ 126.786439][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.057667][ T5840] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 127.585434][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.147144][ T6905] can: request_module (can-proto-5) failed. [ 128.545558][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.709239][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.866444][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.653405][ T6900] kexec: Could not allocate control_code_buffer [ 131.190870][ T7010] Unable to find swap-space signature [ 131.260607][ T5840] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 131.260650][ T5840] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 132.304805][ T5840] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 133.200438][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.216314][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.621478][ T7108] Invalid ELF header magic: != ELF [ 138.011957][ T30] audit: type=1800 audit(1780139558.161:3): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.802" name="features" dev="configfs" ino=12419 res=0 errno=0 [ 138.525630][ T7303] ======================================================= [ 138.525630][ T7303] WARNING: The mand mount option has been deprecated and [ 138.525630][ T7303] and is ignored by this kernel. Remove the mand [ 138.525630][ T7303] option from the mount to silence this warning. [ 138.525630][ T7303] ======================================================= [ 138.898698][ T30] audit: type=1800 audit(1780139559.041:4): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.818" name="members" dev="configfs" ino=13387 res=0 errno=0 [ 139.476232][ T7338] syz.3.829 (7338): attempted to duplicate a private mapping with mremap. This is not supported. [ 139.856510][ T30] audit: type=1800 audit(1780139560.000:5): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.838" name="features" dev="configfs" ino=12512 res=0 errno=0 [ 144.549926][ T7546] Process accounting resumed [ 144.850456][ T7558] capability: warning: `syz.1.933' uses deprecated v2 capabilities in a way that may be insecure [ 148.582071][ T5840] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 148.582129][ T5840] Bluetooth: hci3: unexpected event for opcode 0x647c [ 150.306738][ T5840] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 153.190208][ T5840] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 153.811016][ T7894] capability: warning: `syz.0.1096' uses 32-bit capabilities (legacy support in use) [ 156.360612][ T5840] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 157.102528][ T8023] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5831] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8023] [ 157.667981][ T8044] Unable to find swap-space signature [ 157.757330][ T30] audit: type=1800 audit(1843104524.257:6): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1172" name="trace_pipe" dev="tracefs" ino=3484 res=0 errno=0 [ 160.222727][ T8153] ima: policy update failed [ 160.243017][ T30] audit: type=1802 audit(1843104526.736:7): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1221" res=0 errno=0 [ 164.729803][ T30] audit: type=1800 audit(1843104531.223:8): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1314" name="dbroot" dev="configfs" ino=14921 res=0 errno=0 [ 167.094547][ T30] audit: type=1800 audit(1843104533.582:9): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1361" name="lu_gp_id" dev="configfs" ino=16163 res=0 errno=0 [ 167.240274][ T8443] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5839] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8443] [ 169.456154][ T8540] random: crng reseeded on system resumption [ 171.341120][ T8617] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 172.090549][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 172.458986][ T5840] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 174.595883][ T8748] Process accounting paused [ 176.753707][ T5840] Bluetooth: hci0: unknown advertising packet type: 0xea [ 178.839299][ T30] audit: type=1800 audit(1843106593.377:10): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1608" name="trace_pipe" dev="tracefs" ino=3446 res=0 errno=0 [ 181.131541][ T5840] Bluetooth: hci2: unexpected event 0x34 length: 726 > 6 [ 181.759324][ T30] audit: type=1800 audit(1843106596.300:11): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1672" name="features" dev="configfs" ino=17246 res=0 errno=0 [ 182.325488][ T5840] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 182.325533][ T5840] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 182.342388][ T5840] Bluetooth: hci2: Unknown advertising packet type: 0x3e [ 183.160341][ T30] audit: type=1800 audit(1843106597.717:12): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1703" name="version" dev="configfs" ino=18038 res=0 errno=0 [ 183.685286][ T5840] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 184.573766][ T9186] futex_wake_op: syz.1.1733 tries to shift op by -2048; fix this program [ 186.815581][ T30] audit: type=1807 audit(1843106601.384:13): UNKNOWN=nl80211 res=0 [ 186.834910][ T30] audit: type=1802 audit(1843106601.404:14): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1772" res=0 errno=0 [ 186.860872][ T9269] ima: policy update failed [ 186.889127][ T30] audit: type=1802 audit(1843106601.465:15): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1772" res=0 errno=0 [ 189.274241][ T9363] Format for deleting device is "id" (uint). [ 192.213103][ T9492] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.729049][ T9517] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 192.755595][ T9517] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 193.803901][ T9568] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 194.187287][ T9580] smpboot: CPU 1 is now offline [ 194.235827][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244397][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.453413][ T9719] program syz.0.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.520409][ T5840] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 202.108834][ T9745] program syz.1.2000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.082715][ T9781] CIFS: VFS: UNC: path must begin with // or \\ [ 203.112541][ T9781] Malformed UNC in devname [ 203.112541][ T9781] [ 203.146041][ T9781] CIFS: VFS: Malformed UNC in devname [ 204.043657][ T9819] vhci_hcd vhci_hcd.1: invalid port number 16 [ 204.083644][ T9819] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 208.493093][ T9979] [U]  [ 208.597037][ T9987] CIFS: VFS: UNC: path must begin with // or \\ [ 208.643966][ T9987] Malformed UNC in devname [ 208.643966][ T9987] [ 208.702650][ T9987] CIFS: VFS: Malformed UNC in devname [ 210.449894][T10046] phram: not enough arguments [ 211.443289][T10072] writes to the poll attribute are ignored. [ 211.477914][T10072] please use driver specific parameters instead. [ 212.137442][T10091] mmap: syz.0.2167 (10091): VmData 45805568 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 212.274200][T10097] dyndbg: bad flag-op , at start of i2? [ 212.307750][T10097] dyndbg: flags parse failed [ 212.349317][T10097] dyndbg: bad flag-op , at start of XT\ [ 212.385494][T10097] dyndbg: flags parse failed [ 214.387296][T10176] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 215.421892][T10215] writes to the poll attribute are ignored. [ 215.450813][T10215] please use driver specific parameters instead. [ 215.504110][T10219] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 215.504110][T10219] program syz.1.2229 not setting count and/or reply_len properly [ 216.614090][T10257] usbcore.quirks: string doesn't fit in 127 chars. [ 217.749093][T10302] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.749258][T10381] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 219.749258][T10381] program syz.2.2305 not setting count and/or reply_len properly [ 220.310498][T10400] ecryptfs_parse_packet_length: Error parsing packet length [ 220.343036][T10400] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 222.358260][T10469] hub 1-0:1.0: USB hub found [ 222.382821][T10469] hub 1-0:1.0: 1 port detected [ 225.490399][ T5840] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 225.498113][ T5840] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 227.677526][T10630] kAFS: No cell specified [ 227.761956][T10634] : Can't lookup blockdev [ 228.086589][T10642] Scaler: ================= START STATUS ================= [ 228.122945][T10642] Scaler: ================== END STATUS ================== [ 229.590336][T10677] vhci_hcd vhci_hcd.2: invalid port number 16 [ 229.616393][T10677] vhci_hcd vhci_hcd.2: invalid port number 16 [ 231.982132][T10743] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 233.745775][T10785] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 235.519967][T10810] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 236.114214][T10834] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 236.139822][T10838] usbip-vudc usbip-vudc.0: gadget not bound [ 236.148968][T10834] pci 0000:00:01.3: PCI INT A: no GSI [ 236.588436][T10853] aoe: can't write to that file. [ 237.232083][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 237.240777][ T5840] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 238.540955][ T5840] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 238.548767][ T5840] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 241.198640][T11025] Setting dangerous option i915.mitigations - tainting kernel [ 241.238883][T11025] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 242.730789][T11083] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 243.598535][T11110] sysfs_service_op_store: Client not running :-5: [ 248.006027][T11242] i2c i2c-0: delete_device: Can't find device in list [ 248.681707][T11270] vhci_hcd vhci_hcd.1: invalid port number 14 [ 248.724477][T11270] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 250.028134][T11318] QAT: failed to copy from user. [ 251.040312][ T30] audit: type=1400 audit(1843125009.910:16): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11356 comm="syz.3.2778" [ 251.248888][T11365] program syz.3.2782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.302170][T11365] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 253.738440][T11435] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 253.738440][T11435] program syz.2.2815 not setting count and/or reply_len properly [ 255.691272][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700127][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.700719][T11616] QAT: failed to copy from user cfg_data. [ 261.010822][T11693] syz_tun: tun_chr_ioctl cmd 1074025688 [ 261.618066][T11712] sd 0:0:1:0: PR command failed: 1026 [ 261.667990][T11712] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 261.691679][ T30] audit: type=1800 audit(1843125020.610:17): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2952" name="SYSVff7fffff" dev="tmpfs" ino=0 res=0 errno=0 [ 261.733396][T11712] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 262.498108][T11739] cougar: G6 mapped to space [ 264.225886][T11789] warning: `syz.3.2990' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 265.926223][T11844] program syz.0.3017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.032870][T12066] zram0: detected capacity change from 0 to 16 [ 272.398574][T12080] program syz.1.3117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.496874][T12227] bond0: Unable to set down delay as MII monitoring is disabled [ 278.078475][T12273] bond0: option fail_over_mac: invalid value () [ 278.261848][T12277] syz.3.3210 uses obsolete (PF_INET,SOCK_PACKET) [ 279.523500][T12321] sysfs_service_op_show: Client not running :-5: [ 282.484532][T12420] binder: 12418:12420 ioctl c0046209 38 returned -22 [ 288.465963][T12622] ICMPv6: process `syz.1.3379' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 288.772536][T12633] ceph: Failed to parse sending metrics switch value 'P^' [ 289.301909][T12649] binder: 12648:12649 ioctl c00c6211 0 returned -14 [ 290.863499][T12706] usb usb15: usbfs: process 12706 (syz.3.3419) did not claim interface 0 before use [ 291.152473][T12718] block2mtd: too many arguments [ 291.736621][T12740] misc userio: Invalid payload size [ 292.777122][T12778] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 293.101751][T12792] ubi6: attaching mtd0 [ 293.160802][T12792] ubi6: scanning is finished [ 293.192109][T12792] ubi6: empty MTD device detected [ 293.531648][T12792] ubi6: attached mtd0 (name "mtdram test device", size 0 MiB) [ 293.577564][T12792] ubi6: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 293.631348][T12792] ubi6: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 293.674405][T12792] ubi6: VID header offset: 514 (aligned 514), data offset: 578 [ 293.724643][T12792] ubi6: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 293.724678][T12792] ubi6: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 293.724693][T12792] ubi6: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1617329095 [ 293.724710][T12792] ubi6: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 293.727181][T12805] ubi6: background thread "ubi_bgt6d" started, PID 12805 [ 294.271338][T12825] __vm_enough_memory: pid: 12825, comm: syz.2.3476, bytes: 9223372036854775808 not enough memory for the allocation [ 295.500057][T12871] ubi: mtd0 is already attached to ubi6 [ 295.928408][T12887] kAFS: Invalid Command on /proc/fs/afs/cells file [ 296.435798][T12909] __vm_enough_memory: pid: 12909, comm: syz.1.3518, bytes: 9223372036854775808 not enough memory for the allocation [ 296.989025][T12930] QAT: Device 250 not found [ 298.360698][T12981] serial 00:02: in use; can't configure [ 299.807390][T13038] Invalid input. Must be >= 4608 [ 300.425823][T13061] bcache: register_bcache() error : failed to open device [ 301.972798][T13121] QAT: Stopping all acceleration devices. [ 305.647269][ T30] audit: type=1806 audit(1843125064.777:18): res=-14 [ 307.881797][T13313] nvme_fabrics: missing parameter 'transport=%s' [ 307.909728][T13313] nvme_fabrics: missing parameter 'nqn=%s' [ 308.490061][T13342] aoe: invalid device specification [ 311.521032][T13447] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 313.383020][T13503] bond0: invalid ARP target specified [ 314.265102][T13539] [ 314.781658][T13560] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 315.062305][T13570] block2mtd: Using custom MTD label '' for dev [ 315.104728][T13570] block2mtd: error: cannot open device [ 316.959553][T13639] usb usb13: check_ctrlrecip: process 13639 (syz.1.3871) requesting ep 01 but needs 81 [ 316.991440][T13639] usb usb13: usbfs: process 13639 (syz.1.3871) did not claim interface 0 before use [ 317.107212][T13642] i2c i2c-0: new_device: Can't parse I2C address [ 317.173897][T13646] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 318.546723][T13695] vivid-007: ================= START STATUS ================= [ 318.585274][T13695] vivid-007: Generate PTS: true [ 318.619091][T13695] vivid-007: Generate SCR: true [ 318.655033][T13695] tpg source WxH: 320x240 (Y'CbCr) [ 318.679379][T13695] tpg field: 1 [ 318.699889][T13695] tpg crop: (0,0)/320x240 [ 318.717771][T13695] tpg compose: (0,0)/320x240 [ 318.742316][T13695] tpg colorspace: 8 [ 318.761761][T13695] tpg transfer function: 0/0 [ 318.788910][T13695] tpg Y'CbCr encoding: 0/0 [ 318.818492][T13695] tpg quantization: 0/0 [ 318.839555][T13695] tpg RGB range: 0/2 [ 318.859784][T13695] vivid-007: ================== END STATUS ================== [ 320.145088][T13751] overlayfs: "check_copy_up" module option is obsolete [ 320.537327][T13761] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 320.921842][T13774] vhci_hcd vhci_hcd.2: invalid port number 194 [ 320.967851][T13774] vhci_hcd vhci_hcd.2: invalid port number 194 [ 322.023121][T13785] binder: 13782:13785 ioctl c018620c 200000000040 returned -22 [ 322.722172][ T30] audit: type=1800 audit(1843125081.937:19): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3971" name="sr0" dev="devtmpfs" ino=2833 res=0 errno=0 [ 323.002775][ T5840] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6 [ 323.983273][T13885] vivid-003: ================= START STATUS ================= [ 324.054016][T13885] vivid-003: Radio HW Seek Mode: Bounded [ 324.120037][T13885] vivid-003: Radio Programmable HW Seek: false [ 324.150991][T13888] vivid-007: ================= START STATUS ================= [ 324.169517][T13885] vivid-003: RDS Rx I/O Mode: Block I/O [ 324.196444][T13885] vivid-003: Generate RBDS Instead of RDS: false [ 324.203149][T13888] vivid-007: Enable Output Cropping: true [ 324.217937][T13890] [U] 0="/ [ 324.235568][T13888] vivid-007: Enable Output Composing: [ 324.235684][T13885] vivid-003: RDS Reception: [ 324.246615][T13890] [U] [ 324.258045][T13888] true [ 324.267706][T13888] vivid-007: Enable Output Scaler: true [ 324.276638][T13885] true [ 324.292888][T13890] [U] EeQ@ [ 324.297878][T13885] vivid-003: RDS Program Type: 0 inactive [ 324.306138][T13888] vivid-007: Tx RGB Quantization Range: Automatic [ 324.318001][T13889] [U]  [ 324.338298][T13885] vivid-003: RDS PS Name: inactive [ 324.349037][T13888] vivid-007: Transmit Mode: HDMI [ 324.372736][T13885] vivid-003: RDS Radio Text: inactive [ 324.386463][T13888] vivid-007: Hotplug Present: 0x00000000 [ 324.408817][T13885] vivid-003: RDS Traffic Announcement: false inactive [ 324.426712][T13888] vivid-007: RxSense Present: 0x00000000 [ 324.448773][T13885] vivid-003: RDS Traffic Program: false inactive [ 324.460361][T13888] vivid-007: EDID Present: 0x00000000 [ 324.487653][T13885] vivid-003: RDS Music: false inactive [ 324.497803][T13888] vivid-007: ================== END STATUS ================== [ 324.520082][T13885] vivid-003: ================== END STATUS ================== [ 326.265298][ T30] audit: type=1804 audit(1843125085.494:20): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4029" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1063 res=1 errno=0 [ 328.173802][T14014] zram: Added device: zram1 [ 329.015866][T14051] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 329.058270][T14051] vhci_hcd vhci_hcd.2: invalid port number 0 [ 330.143417][T14088] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 330.143417][T14088] [ 333.048321][T14180] nvme_fcloop: unknown parameter or missing value '7' [ 336.351504][ T30] audit: type=1800 audit(1843125095.621:21): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4197" name="discovery_nqn" dev="configfs" ino=34707 res=0 errno=0 [ 336.761211][T14309] zram: Added device: zram2 [ 337.096283][T14319] program syz.2.4207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.846357][ T30] audit: type=1806 audit(1843125097.128:22): xattr="." res=0 [ 339.849953][T14412] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 339.975751][T14412] CIFS mount error: No usable UNC path provided in device string! [ 339.975751][T14412] [ 340.030305][T14412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 341.809374][T14484] usb usb11: usbfs: interface 0 claimed by hub while 'syz.2.4287' sets config #7 [ 342.633408][T14512] blkio.reset_stats is deprecated [ 343.687142][T14545] RGB/YUV Input: ================= START STATUS ================= [ 343.730603][T14545] RGB/YUV Input: Test Pattern: 75% Colorbar [ 343.783726][T14545] RGB/YUV Input: Show Information: All [ 343.819368][T14545] RGB/YUV Input: Vertical Flip: false [ 343.849663][T14545] RGB/YUV Input: Horizontal Flip: false [ 343.875170][T14545] RGB/YUV Input: Brightness: 128 [ 343.908884][T14545] RGB/YUV Input: Contrast: 128 [ 343.930460][T14545] RGB/YUV Input: Hue: 0 [ 343.953313][T14545] RGB/YUV Input: Saturation: 128 [ 343.994653][T14545] RGB/YUV Input: Pixel Rate: 160000000 [ 344.025153][T14545] RGB/YUV Input: Horizontal Blanking: 800 [ 344.051164][T14545] RGB/YUV Input: Vertical Blanking: 3223 [ 344.085211][T14545] RGB/YUV Input: ================== END STATUS ================== [ 348.082952][T14654] virtio-pci 0000:00:03.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 349.896998][T14702] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 349.938026][T14702] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 351.470487][T14756] batman_adv: Routing algorithm '' is not supported [ 353.407108][T14811] usb usb4: usbfs: process 14811 (syz.2.4447) did not claim interface 0 before use [ 354.083922][T14840] vhci_hcd vhci_hcd.0: invalid port number 16 [ 354.866174][T14871] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 356.001008][T14911] vhci_hcd vhci_hcd.0: invalid port number 16 [ 356.137437][T14915] syz.2.4496 (14915): /proc/14913/oom_adj is deprecated, please use /proc/14913/oom_score_adj instead. [ 362.153935][T15115] usb usb22: usbfs: process 15115 (syz.3.4592) did not claim interface 1 before use [ 362.232018][T15119] ICMPv6: process `syz.2.4594' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 362.737433][T15136] bond0: option slaves: interface - does not exist! [ 367.486243][T15288] kafs: addr_prefs: Too many elements in string [ 371.886332][T15437] [U] ^\ [ 373.184191][ T30] audit: type=1326 audit(1843125132.635:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.0.4775" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa0879ce59 code=0x0 [ 376.894907][T15619] could not allocate digest TFM handle [ 377.540182][T15655] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 378.119855][T15671] program syz.1.4862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.397635][ T30] audit: type=1800 audit(1843125138.874:24): pid=15710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4881" name="dbroot" dev="configfs" ino=39170 res=0 errno=0 [ 380.316201][T15737] kernel read not supported for file /\*)A (pid: 15737 comm: syz.2.4892) [ 380.367507][ T30] audit: type=1800 audit(1843125139.848:25): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4892" name="\*)A" dev="mqueue" ino=23435 res=0 errno=0 [ 380.533868][T15740] usb usb26: usbfs: process 15740 (syz.1.4894) did not claim interface 0 before use [ 381.317353][ T5840] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 381.699388][T15774] zram: Can't change algorithm for initialized device [ 383.325446][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 385.396494][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 386.053085][T15870] ecryptfs_miscdev_write: Invalid packet size [192] [ 386.151263][T15873] QAT: failed to copy from user cfg_data. [ 387.908256][T15937] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 389.109116][T15980] bond0: invalid ARP target specified [ 389.164449][T15981] bond0: no command found in slaves file - use +ifname or -ifname [ 389.630074][T15995] CIFS mount error: No usable UNC path provided in device string! [ 389.630074][T15995] [ 389.673957][T15998] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 389.693036][T15995] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 392.214139][T16072] bond0: no command found in slaves file - use +ifname or -ifname [ 392.405493][T16078] program syz.3.5059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.333928][T16120] : Can't lookup blockdev [ 395.033071][T16145] program syz.2.5093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.768951][ T30] audit: type=1326 audit(1843125159.350:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16301 comm="syz.3.5173" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dd199ce59 code=0x0 [ 400.250281][T16321] [ 401.093854][T16345] could not allocate digest TFM handle [ 401.610459][T16366] could not allocate digest TFM handle [ 401.992493][T16393] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 402.636955][T16421] kafs: addr_prefs: Too many elements in string [ 402.935074][T16430] kernel read not supported for file /\*)A (pid: 16430 comm: syz.0.5233) [ 402.975330][ T30] audit: type=1800 audit(1843125162.565:27): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5233" name="\*)A" dev="mqueue" ino=32607 res=0 errno=0 [ 403.789913][ T30] audit: type=1800 audit(1843125163.378:28): pid=16460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5248" name="dbroot" dev="configfs" ino=41600 res=0 errno=0 [ 403.918858][T16465] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 404.032939][T16470] zram: Can't change algorithm for initialized device [ 404.230660][T16476] kafs: addr_prefs: Too many elements in string [ 404.363006][T16478] ACPI: Can not change Invalid GPE/Fixed Event status [ 404.701985][ T30] audit: type=1800 audit(1843125164.293:29): pid=16488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5261" name="dbroot" dev="configfs" ino=41689 res=0 errno=0 [ 405.018490][T16501] zram: Can't change algorithm for initialized device [ 405.835424][T16534] ACPI: Can not change Invalid GPE/Fixed Event status [ 406.099200][ T4948] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 407.342265][T16546] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 408.167436][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.363829][T16546] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.556319][T16665] random: crng reseeded on system resumption [ 410.238505][T16546] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.658705][T16704] WARNING! power/level is deprecated; use power/control instead [ 410.726509][ T4948] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 411.432767][T16546] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.760581][T16586] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 412.167903][T16753] random: crng reseeded on system resumption [ 412.785189][T16586] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.852598][T16774] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.116354][T16782] Format for adding new port is "id [perm_addr]" (uint MAC). [ 413.788683][T16812] Format for adding new port is "id [perm_addr]" (uint MAC). [ 413.831035][T16546] Bluetooth: hci2: command 0x0c1a tx timeout [ 414.127742][T16586] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 414.135833][T16586] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 414.145657][T16586] CPU: 0 UID: 0 PID: 16586 Comm: kworker/u9:2 Tainted: G U I syzkaller #0 PREEMPT(full) [ 414.145689][T16586] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 414.145697][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.145708][T16586] Workqueue: hci2 hci_rx_work [ 414.145735][T16586] Call Trace: [ 414.145747][T16586] [ 414.145755][T16586] dump_stack_lvl+0x100/0x190 [ 414.145788][T16586] sysfs_warn_dup.cold+0x1c/0x28 [ 414.145814][T16586] sysfs_create_dir_ns+0x24b/0x2b0 [ 414.145835][T16586] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 414.145854][T16586] ? find_held_lock+0x2b/0x80 [ 414.145876][T16586] ? kobject_add_internal+0x25f/0x930 [ 414.145894][T16586] ? kobject_add_internal+0x25f/0x930 [ 414.145913][T16586] ? do_raw_spin_unlock+0x145/0x1e0 [ 414.145934][T16586] kobject_add_internal+0x2c8/0x930 [ 414.145956][T16586] kobject_add+0x16a/0x1e0 [ 414.145973][T16586] ? __pfx_kobject_add+0x10/0x10 [ 414.145989][T16586] ? class_to_subsys+0x10f/0x150 [ 414.146013][T16586] ? kobject_put+0xb9/0x640 [ 414.146055][T16586] ? _raw_spin_unlock+0x28/0x50 [ 414.146083][T16586] device_add+0x294/0x1950 [ 414.146103][T16586] ? __pfx_dev_set_name+0x10/0x10 [ 414.146126][T16586] ? __pfx_device_add+0x10/0x10 [ 414.146146][T16586] ? mgmt_send_event_skb+0x2fb/0x460 [ 414.146213][T16586] hci_conn_add_sysfs+0x1a3/0x260 [ 414.146241][T16586] le_conn_complete_evt+0x11eb/0x1f60 [ 414.146272][T16586] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 414.146294][T16586] ? __pfx_bt_warn+0x10/0x10 [ 414.146328][T16586] hci_le_conn_complete_evt+0x23c/0x3a0 [ 414.146353][T16586] ? skb_pull_data+0x15f/0x1e0 [ 414.146379][T16586] hci_le_meta_evt+0x34a/0x5f0 [ 414.146403][T16586] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 414.146430][T16586] hci_event_packet+0x51c/0xcd0 [ 414.146454][T16586] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 414.146479][T16586] ? __pfx_hci_event_packet+0x10/0x10 [ 414.146504][T16586] ? kcov_remote_start+0x374/0x660 [ 414.146529][T16586] ? lockdep_hardirqs_on+0x78/0x100 [ 414.146560][T16586] hci_rx_work+0x451/0xfc0 [ 414.146586][T16586] process_one_work+0xa0e/0x1980 [ 414.146613][T16586] ? __pfx_process_one_work+0x10/0x10 [ 414.146636][T16586] ? __pfx_hci_rx_work+0x10/0x10 [ 414.146661][T16586] worker_thread+0x5ef/0xe50 [ 414.146684][T16586] ? __pfx_worker_thread+0x10/0x10 [ 414.146701][T16586] ? kthread+0x13a/0x450 [ 414.146726][T16586] ? __pfx_worker_thread+0x10/0x10 [ 414.146742][T16586] kthread+0x370/0x450 [ 414.146767][T16586] ? __pfx_kthread+0x10/0x10 [ 414.146801][T16586] ret_from_fork+0x72b/0xd50 [ 414.146821][T16586] ? __pfx_ret_from_fork+0x10/0x10 [ 414.146841][T16586] ? __switch_to+0x800/0x1100 [ 414.146864][T16586] ? __switch_to_asm+0x39/0x70 [ 414.146886][T16586] ? __pfx_kthread+0x10/0x10 [ 414.146914][T16586] ret_from_fork_asm+0x1a/0x30 [ 414.146949][T16586] [ 414.146991][T16586] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 414.462397][T16586] Bluetooth: hci2: failed to register connection device [ 414.857379][T16586] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.890611][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.141066][T16913] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 417.960974][T16546] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.995608][T16941] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 418.118374][T16943] bond0: no command found in slaves file - use +ifname or -ifname [ 418.473048][T16959] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 420.031028][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.256686][T17027] i2c i2c-0: delete_device: Extra parameters [ 420.487067][T16546] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 421.254530][T17062] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 421.572304][T17076] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5832] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17076] [ 421.625054][T16546] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 422.499707][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.634412][T17115] Setting dangerous option i915.mitigations - tainting kernel [ 422.737108][T17119] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 423.509807][T17148] vhci_hcd vhci_hcd.2: invalid port number 253 [ 423.543475][T17148] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 423.693939][T16546] Bluetooth: hci2: command 0x0c1a tx timeout [ 424.221709][T16586] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 424.570587][T17171] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.764629][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 426.137991][ T30] audit: type=1800 audit(1843125185.833:30): pid=17233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5619" name="dbroot" dev="configfs" ino=44248 res=0 errno=0 [ 426.243396][T16546] Bluetooth: hci3: command 0x0c1a tx timeout [ 428.312413][T16546] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.444848][T17437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.257546][T16586] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 435.813960][T17618] vhci_hcd vhci_hcd.2: invalid port number 135 [ 435.844241][T17618] vhci_hcd vhci_hcd.2: invalid port number 135 [ 436.106140][T17632] dyndbg: expected <4096 bytes into control [ 437.491753][T17678] kafs: addr_prefs: Invalid Command [ 437.741563][T17687] futex_wake_op: syz.0.5845 tries to shift op by -1; fix this program [ 440.476296][T17794] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 440.512009][T17794] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 440.977771][T17814] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 441.164541][T17820] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 441.201005][T17820] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 441.232767][ T30] audit: type=1800 audit(1843125200.994:31): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5913" name="members" dev="configfs" ino=46109 res=0 errno=0 [ 442.468325][T17875] QAT: failed to copy from user cfg_data. [ 443.284675][ T30] audit: type=1800 audit(1843125203.064:32): pid=17905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5952" name="members" dev="configfs" ino=46373 res=0 errno=0 [ 443.699101][T17917] queue_state_write: operation too long [ 443.728775][T17917] queue_state_write: use 'run', 'start' or 'kick' [ 444.051451][T17931] QAT: failed to copy from user cfg_data. [ 444.097306][T17932] ima: policy update failed [ 444.131147][ T30] audit: type=1802 audit(1843125203.908:33): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5966" res=0 errno=0 [ 445.616738][ T30] audit: type=1800 audit(1843125205.405:34): pid=17984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5988" name="members" dev="configfs" ino=46609 res=0 errno=0 syzkaller syzkaller login: [ 449.894639][T18148] Setting dangerous option i915.mitigations - tainting kernel syzkaller syzkaller login: [ 455.924698][T18392] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 455.925222][T18390] ima: policy update failed [ 455.985772][ T30] audit: type=1802 audit(1843125215.824:35): pid=18390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.6189" res=0 errno=0 [ 458.268227][T18498] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 458.268551][T18494] ima: policy update failed [ 458.325641][ T30] audit: type=1802 audit(1843125218.175:36): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6241" res=0 errno=0 [ 460.119234][T18564] vmstat_refresh: nr_hugetlb -2048 [ 462.451606][T18661] vmstat_refresh: nr_hugetlb -2048 [ 463.006102][T18686] i2c i2c-0: delete_device: Can't parse I2C address [ 463.822014][T18718] nvme_fcloop: unknown parameter or missing value '' [ 465.004448][T18766] i2c i2c-0: delete_device: Can't parse I2C address [ 465.476952][ T30] audit: type=1400 audit(1843125225.358:37): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18780 comm="syz.1.6382" [ 466.216602][T18807] nvme_fcloop: unknown parameter or missing value '' [ 466.943915][T18839] syz.1.6410 (18839): drop_caches: 0 [ 467.325911][T18858] block2mtd: illegal erase size [ 469.164047][T18923] syz.0.6452 (18923): drop_caches: 0 [ 470.039139][T18957] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 470.577714][T18981] syz.2.6481 (18981): drop_caches: 0 [ 471.912327][T19036] kAFS: Invalid Command on /proc/fs/afs/cells file [ 472.353533][ T30] audit: type=1800 audit(1843125232.261:38): pid=19055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6517" name="dbroot" dev="configfs" ino=50119 res=0 errno=0 [ 473.917484][T19109] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 473.973374][T19109] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 474.019468][T19109] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 474.062352][T19109] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 474.099937][T19109] page dumped because: unmovable page [ 474.145540][T19109] page_owner tracks the page as allocated [ 474.198458][T19109] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1767466319, free_ts 0 [ 474.249475][T19109] register_early_stack+0x74/0xaf [ 474.280406][T19109] init_page_owner+0x4c/0xa10 [ 474.306307][T19109] page_ext_init+0x71d/0x780 [ 474.329299][T19109] mm_core_init+0x229/0x270 [ 474.348782][T19109] page_owner free stack trace missing [ 475.718051][ T30] audit: type=1800 audit(1843125235.646:39): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6577" name="dbroot" dev="configfs" ino=50543 res=0 errno=0 [ 477.971286][T19263] bond0: option arp_interval: invalid value () [ 478.011121][T19263] bond0: option arp_interval: allowed values 0 - 2147483647 [ 480.443298][T19365] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5839] was attempted by ""[19365] [ 482.277914][T19420] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 482.758100][T19441] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5831] was attempted by ""[19441] [ 483.029196][T19454] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.0.6714: 7 [ 484.279307][T19493] ima: policy update failed [ 484.300278][ T30] audit: type=1802 audit(1843125244.267:40): pid=19493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6735" res=0 errno=0 [ 485.181720][ T30] audit: type=1800 audit(1843125245.151:41): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6756" name="members" dev="configfs" ino=51830 res=0 errno=0 [ 485.326892][T19541] Invalid ELF header magic: != ELF [ 485.818600][T19561] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78016 [ 485.855119][T19561] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 485.891397][T19561] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 485.930392][T19561] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 485.966708][T19561] page dumped because: unmovable page [ 485.998479][T19561] page_owner tracks the page as allocated [ 486.023862][T19561] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5832, tgid 5832 (syz-executor), ts 125944085055, free_ts 125927452616 [ 486.041621][T19567] Invalid ELF header magic: != ELF [ 486.063653][T19570] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.1.6772: 7 [ 486.091806][T19561] post_alloc_hook+0xfd/0x120 [ 486.121776][T19561] get_page_from_freelist+0x11a6/0x3410 [ 486.146000][T19561] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 486.167009][T19561] alloc_pages_bulk_noprof+0x649/0x1360 [ 486.193136][T19561] __kasan_populate_vmalloc+0xf0/0x210 [ 486.223303][T19561] alloc_vmap_area+0x95d/0x2b70 [ 486.261582][T19561] __get_vm_area_node+0x1ca/0x330 [ 486.290548][T19561] __vmalloc_node_range_noprof+0x228/0x1630 [ 486.326228][T19561] __vmalloc_node_noprof+0xad/0xf0 [ 486.342437][T19561] do_ipt_get_ctl+0x632/0xa10 [ 486.366933][T19561] nf_getsockopt+0x7c/0xe0 [ 486.380642][T19561] ip_getsockopt+0x192/0x1e0 [ 486.403151][T19561] tcp_getsockopt+0xa1/0x110 [ 486.428051][T19561] do_sock_getsockopt+0x50a/0x6e0 [ 486.444802][T19561] __sys_getsockopt+0x133/0x1d0 [ 486.459193][T19561] __x64_sys_getsockopt+0xbd/0x160 [ 486.498345][T19561] page last free pid 6836 tgid 6835 stack trace: [ 486.509862][T19561] __free_frozen_pages+0x794/0x10a0 [ 486.532908][T19561] tlb_finish_mmu+0x27d/0x810 [ 486.555826][T19561] exit_mmap+0x454/0xa10 [ 486.574412][T19561] __mmput+0x12a/0x410 [ 486.593278][T19561] mmput+0x67/0x80 [ 486.625286][T19561] do_exit+0x8b2/0x2af0 [ 486.667277][T19561] do_group_exit+0xd5/0x2a0 [ 486.707442][T19561] get_signal+0x20ff/0x2210 [ 486.741218][T19561] arch_do_signal_or_restart+0x91/0x7a0 [ 486.771255][T19561] exit_to_user_mode_loop+0x98/0x670 [ 486.794171][T19561] do_syscall_64+0x652/0x840 [ 486.817045][T19561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.384611][T19610] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 487.565901][T19616] bond0: option packets_per_slave: invalid value ( Xnp) [ 487.627428][T19616] bond0: option packets_per_slave: allowed values 0 - 65535 [ 487.695687][T19621] [U] ^R [ 489.017334][T19676] synth uevent: /bus/mei: unknown uevent action string [ 489.422041][T19695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 489.466534][T19695] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 489.505726][T19695] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 489.550929][T19695] page_type: f5(slab) [ 489.572276][T19695] raw: 00fff00000000040 ffff88813fe31140 dead000000000122 0000000000000000 [ 489.610620][T19695] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 489.661869][T19695] head: 00fff00000000040 ffff88813fe31140 dead000000000122 0000000000000000 [ 489.700008][T19695] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 489.751947][T19695] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 489.790028][T19695] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 489.836007][T19695] page dumped because: unmovable page [ 489.869013][T19695] page_owner tracks the page as allocated [ 489.900506][T19695] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 486602996653, free_ts 486590503414 [ 489.958956][T19715] bond0: option packets_per_slave: invalid value ( Xnp) [ 489.988275][T19715] bond0: option packets_per_slave: allowed values 0 - 65535 [ 489.999857][T19695] post_alloc_hook+0xfd/0x120 [ 490.013118][T19695] get_page_from_freelist+0x11a6/0x3410 [ 490.034784][T19695] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 490.058900][T19695] new_slab+0xa6/0x6c0 [ 490.080343][T19695] refill_objects+0x277/0x420 [ 490.111512][T19695] __pcs_replace_empty_main+0x375/0x650 [ 490.136994][T19695] __kmalloc_noprof+0x688/0x850 [ 490.159801][T19695] tomoyo_realpath_from_path+0xb6/0x690 [ 490.185112][T19695] tomoyo_path_number_perm+0x23c/0x580 [ 490.211158][T19695] tomoyo_path_mkdir+0x9b/0xe0 [ 490.236544][T19695] security_path_mkdir+0x154/0x2e0 [ 490.296238][T19695] filename_mkdirat+0x168/0x5e0 [ 490.342842][T19695] __x64_sys_mkdirat+0x89/0xc0 [ 490.386520][T19695] do_syscall_64+0x115/0x840 [ 490.409398][T19695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.437811][T19695] page last free pid 5831 tgid 5831 stack trace: [ 490.472591][T19695] __free_frozen_pages+0x794/0x10a0 [ 490.502139][T19695] __folio_put+0x3b4/0x5f0 [ 490.521385][T19695] skb_release_data+0x649/0x8e0 [ 490.546148][T19695] __kfree_skb+0x4f/0x70 [ 490.562063][T19695] tcp_ack+0x2086/0x7670 [ 490.585425][T19695] tcp_rcv_established+0x1132/0x3910 [ 490.617573][T19695] tcp_v4_do_rcv+0xbb6/0x1260 [ 490.643974][T19695] tcp_v4_rcv+0x2ec3/0x4840 [ 490.666686][T19695] ip_protocol_deliver_rcu+0xba/0x4d0 [ 490.696522][T19695] ip_local_deliver_finish+0x3f2/0x6e0 [ 490.723030][T19695] ip_local_deliver+0x19a/0x1f0 [ 490.746997][T19695] ip_list_rcv_finish+0xa14/0xce0 [ 490.773067][T19695] ip_list_rcv+0x338/0x450 [ 490.792787][T19695] __netif_receive_skb_list_core+0x74c/0x940 [ 490.828808][T19695] netif_receive_skb_list_internal+0x722/0xd40 [ 490.859263][T19695] napi_complete_done+0x221/0x940 [ 491.096126][T19752] program syz.1.6863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.541980][T19771] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 491.572964][T19774] synth uevent: /bus/mei: unknown uevent action string [ 491.581789][T19771] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 491.632569][T19771] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 491.676466][T19771] page_type: f5(slab) [ 491.700014][T19771] raw: 00fff00000000040 ffff88813fe31140 dead000000000122 0000000000000000 [ 491.737233][T19771] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 491.780782][T19771] head: 00fff00000000040 ffff88813fe31140 dead000000000122 0000000000000000 [ 491.830564][T19771] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 491.879497][T19771] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 491.918401][T19771] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 491.957256][T19771] page dumped because: unmovable page [ 491.982340][T19771] page_owner tracks the page as allocated [ 492.011340][T19771] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 486602996653, free_ts 486590503414 [ 492.105762][T19771] post_alloc_hook+0xfd/0x120 [ 492.127675][T19771] get_page_from_freelist+0x11a6/0x3410 [ 492.154977][T19771] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 492.182257][T19771] new_slab+0xa6/0x6c0 [ 492.202165][T19771] refill_objects+0x277/0x420 [ 492.221118][T19771] __pcs_replace_empty_main+0x375/0x650 [ 492.246338][T19771] __kmalloc_noprof+0x688/0x850 [ 492.268760][T19771] tomoyo_realpath_from_path+0xb6/0x690 [ 492.294272][T19771] tomoyo_path_number_perm+0x23c/0x580 [ 492.320238][T19771] tomoyo_path_mkdir+0x9b/0xe0 [ 492.355760][T19796] synth uevent: /bus/mei: unknown uevent action string [ 492.383704][T19771] security_path_mkdir+0x154/0x2e0 [ 492.428230][T19771] filename_mkdirat+0x168/0x5e0 [ 492.449961][T19771] __x64_sys_mkdirat+0x89/0xc0 [ 492.472585][T19771] do_syscall_64+0x115/0x840 [ 492.495885][T19771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.523454][T19771] page last free pid 5831 tgid 5831 stack trace: [ 492.552509][T19771] __free_frozen_pages+0x794/0x10a0 [ 492.580678][T19771] __folio_put+0x3b4/0x5f0 [ 492.595400][T19771] skb_release_data+0x649/0x8e0 [ 492.618198][T19771] __kfree_skb+0x4f/0x70 [ 492.642771][T19771] tcp_ack+0x2086/0x7670 [ 492.661599][T19771] tcp_rcv_established+0x1132/0x3910 [ 492.683772][T19771] tcp_v4_do_rcv+0xbb6/0x1260 [ 492.707902][T19771] tcp_v4_rcv+0x2ec3/0x4840 [ 492.726715][T19771] ip_protocol_deliver_rcu+0xba/0x4d0 [ 492.754883][T19771] ip_local_deliver_finish+0x3f2/0x6e0 [ 492.775632][T19771] ip_local_deliver+0x19a/0x1f0 [ 492.798879][T19771] ip_list_rcv_finish+0xa14/0xce0 [ 492.823490][T19771] ip_list_rcv+0x338/0x450 [ 492.843134][T19771] __netif_receive_skb_list_core+0x74c/0x940 [ 492.867682][T19771] netif_receive_skb_list_internal+0x722/0xd40 [ 492.893102][T19771] napi_complete_done+0x221/0x940 [ 492.898973][T19810] phram: not enough arguments [ 493.100928][T19815] block2mtd: device name too long [ 493.415679][T19828] program syz.2.6900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.812927][T19846] process 'syz.2.6909' launched './file0' with NULL argv: empty string added [ 494.190329][T19860] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 495.965169][T19938] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 500.062525][T20101] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 502.806687][T20208] vhci_hcd vhci_hcd.2: invalid port number 16 [ 502.838130][T20208] vhci_hcd vhci_hcd.2: invalid port number 16 [ 503.782146][T20250] vhci_hcd vhci_hcd.2: invalid port number 16 [ 503.820149][T20250] vhci_hcd vhci_hcd.2: invalid port number 16 [ 510.043875][T20473] block2mtd: illegal erase size [ 513.715289][T20631] random: crng reseeded on system resumption [ 514.187737][T20647] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5832] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[20647] [ 514.385008][T20657] Line length is too long: Should be less than 4094 [ 517.249187][T20759] ubi: mtd0 is already attached to ubi6 [ 517.280765][T20760] rnbd_client L213: map_device: Parameters missing [ 517.724691][T20769] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 517.725320][T20768] ima: policy update failed [ 517.786405][ T30] audit: type=1802 audit(1843125277.914:42): pid=20768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7350" res=0 errno=0 [ 517.983744][T20778] < [ 518.606379][ T30] audit: type=1800 audit(1843125278.738:43): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7365" name="dbroot" dev="configfs" ino=55997 res=0 errno=0 [ 519.129166][T20820] hub 3-0:1.0: USB hub found [ 519.163338][T20820] hub 3-0:1.0: 1 port detected [ 519.279992][T20820] usb usb3: authorized to connect [ 524.964606][T21027] sg_write: data in/out 262108/14 bytes for SCSI command 0x61-- guessing data in; [ 524.964606][T21027] program syz.2.7478 not setting count and/or reply_len properly [ 526.986179][T21093] syz_tun: tun_chr_ioctl cmd 2147767511 [ 529.226199][T21180] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 529.880753][T21204] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 531.838778][T21282] random: crng reseeded on system resumption [ 532.331202][T21304] Line length is too long: Should be less than 4094 [ 534.766335][T21403] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 534.770581][T21402] ima: policy update failed [ 534.850883][ T30] audit: type=1802 audit(1843125295.054:44): pid=21402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.7660" res=0 errno=0 [ 535.445464][T21431] bond0: invalid ARP target specified [ 535.830840][T21443] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 536.631185][T21478] i2c i2c-0: new_device: Invalid device name [ 537.748970][T21528] bonding: no command found in bonding_masters - use +ifname or -ifname [ 539.963925][ T30] audit: type=1800 audit(1843125300.198:45): pid=21620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7768" name="lu_gp_id" dev="configfs" ino=58564 res=0 errno=0 [ 540.007215][T21620] kstrtoul() returned -22 for lu_gp_id [ 540.699592][T21650] binder: binder_mmap: 21648 0-1000 bad vm_flags failed -1 [ 543.339038][T21753] random: crng reseeded on system resumption [ 544.036673][T21783] random: crng reseeded on system resumption [ 544.562233][ T30] audit: type=1807 audit(1843125304.820:46): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 544.575207][T21798] ima: policy update failed [ 544.631235][ T30] audit: type=1802 audit(1843125304.820:47): pid=21799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.7852" res=0 errno=0 [ 544.749981][ T30] audit: type=1802 audit(1843125304.850:48): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7852" res=0 errno=0 [ 545.358106][T21826] binder: binder_mmap: 21825 0-1000 bad vm_flags failed -1 [ 546.392452][T21870] program syz.1.7886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.442491][T21870] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 547.831537][T21923] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 550.477109][T22027] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 559.178808][T22318] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 565.457685][T22550] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 565.501472][T22550] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 566.778361][T22584] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 566.828539][T22584] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 566.875360][T22584] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 566.920674][T22584] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 566.957343][T22584] page dumped because: unmovable page [ 566.981931][T22584] page_owner info is not present (never set?) [ 567.578305][T22615] hub 27-0:1.0: USB hub found [ 567.631936][T22615] hub 27-0:1.0: 1 port detected [ 567.934592][T22625] qrtr: Invalid version 0 [ 568.787268][T21688] Bluetooth: hci0: SCO packet too small [ 569.395543][T22682] TCP: TCP_TX_DELAY enabled [ 570.437037][T22729] usb usb3: usbfs: process 22729 (syz.1.8299) did not claim interface 0 before use [ 571.102075][T22753] QAT: Invalid ioctl 21531 [ 575.275486][T22896] bond0: invalid ARP target specified [ 576.492888][T22943] random: crng reseeded on system resumption [ 578.142534][ T30] audit: type=1804 audit(1843125338.548:49): pid=22999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8431" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace" dev="tracefs" ino=3485 res=1 errno=0 [ 578.584648][T23015] kfence: disabled [ 579.256815][T23041] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 579.751401][T23063] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 579.935213][T23069] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 580.210350][ T30] audit: type=1800 audit(1843125340.628:50): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8471" name="dbroot" dev="configfs" ino=63452 res=0 errno=0 [ 580.262648][T23079] db_root: cannot open: /dev/audio1 [ 580.290822][T23079] db_root: not a directory: /dev/audio1 [ 580.877307][T23102] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0dfda (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 580.893083][T23102] Call Trace: [ 580.896399][T23102] [ 580.899351][T23102] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 580.906045][T23102] ? __pfx___schedule+0x10/0x10 [ 580.910925][T23102] ? irqentry_exit+0x24d/0x970 [ 580.915721][T23102] mce_cpu_restart+0xd5/0x1f0 [ 580.920416][T23102] ? __pfx_mce_cpu_restart+0x10/0x10 [ 580.925705][T23102] smp_call_function_many_cond+0x13d4/0x1700 [ 580.931799][T23102] ? __pfx_mce_cpu_restart+0x10/0x10 [ 580.937122][T23102] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 580.943040][T23102] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 580.949391][T23102] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 580.955407][T23102] ? __timer_delete_sync+0x151/0x1c0 [ 580.960704][T23102] ? __pfx_mce_cpu_restart+0x10/0x10 [ 580.965996][T23102] on_each_cpu_cond_mask+0x40/0x90 [ 580.971233][T23102] set_bank+0x240/0x3a0 [ 580.975401][T23102] ? __pfx_set_bank+0x10/0x10 [ 580.980166][T23102] ? find_held_lock+0x2b/0x80 [ 580.984877][T23102] ? sysfs_file_kobj+0xe4/0x290 [ 580.989770][T23102] ? sysfs_file_kobj+0xe4/0x290 [ 580.994650][T23102] ? __pfx_set_bank+0x10/0x10 [ 580.999329][T23102] dev_attr_store+0x58/0x80 [ 581.003852][T23102] ? __pfx_dev_attr_store+0x10/0x10 [ 581.009314][T23102] sysfs_kf_write+0xf2/0x150 [ 581.013945][T23102] kernfs_fop_write_iter+0x3e0/0x5f0 [ 581.019334][T23102] ? __pfx_sysfs_kf_write+0x10/0x10 [ 581.024571][T23102] vfs_write+0x6ac/0x1070 [ 581.028911][T23102] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 581.034735][T23102] ? __pfx_vfs_write+0x10/0x10 [ 581.039518][T23102] ksys_write+0x12a/0x250 [ 581.044028][T23102] ? __pfx_ksys_write+0x10/0x10 [ 581.048885][T23102] ? rcu_is_watching+0x12/0xc0 [ 581.053761][T23102] do_syscall_64+0x115/0x840 [ 581.058358][T23102] ? clear_bhb_loop+0x40/0x90 [ 581.063048][T23102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.068951][T23102] RIP: 0033:0x7f783b79ce59 [ 581.073453][T23102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.093152][T23102] RSP: 002b:00007f783c67e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.101759][T23102] RAX: ffffffffffffffda RBX: 00007f783ba15fa0 RCX: 00007f783b79ce59 [ 581.109793][T23102] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 581.117779][T23102] RBP: 00007f783b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 581.125767][T23102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.133838][T23102] R13: 00007f783ba16038 R14: 00007f783ba15fa0 R15: 00007ffdde3dbb28 [ 581.141842][T23102] [ 583.554972][T23193] block loop4: the capability attribute has been deprecated. [ 583.796971][ T30] audit: type=1804 audit(1843125344.234:51): pid=23204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8532" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace" dev="tracefs" ino=3485 res=1 errno=0 [ 585.192973][T23259] ICMPv6: process `syz.3.8560' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 586.822245][T23321] kAFS: unparsable volume name [ 587.065021][T23330] bonding: no command found in bonding_masters - use +ifname or -ifname [ 589.167746][ T5906] ================================================================== [ 589.167760][ T5906] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 589.167790][ T5906] Write of size 8 at addr ffffc90004b21000 by task kworker/0:3/5906 [ 589.167805][ T5906] [ 589.167816][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:3 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 589.167845][ T5906] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 589.167854][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.167866][ T5906] Workqueue: events_power_efficient fb_flashcursor [ 589.167895][ T5906] Call Trace: [ 589.167901][ T5906] [ 589.167908][ T5906] dump_stack_lvl+0x100/0x190 [ 589.167938][ T5906] print_report+0x13d/0x4b0 [ 589.167964][ T5906] ? _raw_spin_lock_irqsave+0x52/0x60 [ 589.167989][ T5906] ? sys_imageblit+0x19fb/0x1d60 [ 589.168011][ T5906] kasan_report+0xdf/0x1d0 [ 589.168032][ T5906] ? sys_imageblit+0x19fb/0x1d60 [ 589.168056][ T5906] sys_imageblit+0x19fb/0x1d60 [ 589.168080][ T5906] ? __pfx_sys_imageblit+0x10/0x10 [ 589.168114][ T5906] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 589.168146][ T5906] soft_cursor+0x524/0xa10 [ 589.168166][ T5906] bit_cursor+0xca1/0x1490 [ 589.168186][ T5906] ? __pfx_bit_cursor+0x10/0x10 [ 589.168206][ T5906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.168232][ T5906] ? get_color+0x1da/0x450 [ 589.168258][ T5906] ? __pfx_bit_cursor+0x10/0x10 [ 589.168274][ T5906] fb_flashcursor+0x338/0x430 [ 589.168301][ T5906] process_one_work+0xa0e/0x1980 [ 589.168321][ T5906] ? __pfx_process_one_work+0x10/0x10 [ 589.168341][ T5906] ? __pfx_fb_flashcursor+0x10/0x10 [ 589.168368][ T5906] worker_thread+0x5ef/0xe50 [ 589.168386][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 589.168403][ T5906] ? kthread+0x13a/0x450 [ 589.168429][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 589.168444][ T5906] kthread+0x370/0x450 [ 589.168470][ T5906] ? __pfx_kthread+0x10/0x10 [ 589.168497][ T5906] ret_from_fork+0x72b/0xd50 [ 589.168516][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 589.168534][ T5906] ? __switch_to+0x800/0x1100 [ 589.168558][ T5906] ? __switch_to_asm+0x39/0x70 [ 589.168580][ T5906] ? __pfx_kthread+0x10/0x10 [ 589.168607][ T5906] ret_from_fork_asm+0x1a/0x30 [ 589.168634][ T5906] [ 589.168640][ T5906] [ 589.168645][ T5906] The buggy address belongs to a vmalloc virtual mapping [ 589.168657][ T5906] Memory state around the buggy address: [ 589.168666][ T5906] ffffc90004b20f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.168679][ T5906] ffffc90004b20f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.168691][ T5906] >ffffc90004b21000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.168700][ T5906] ^ [ 589.168709][ T5906] ffffc90004b21080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.168720][ T5906] ffffc90004b21100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.168730][ T5906] ================================================================== [ 589.168739][ T5906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.168753][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:3 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 589.168780][ T5906] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 589.168789][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.168800][ T5906] Workqueue: events_power_efficient fb_flashcursor [ 589.168826][ T5906] Call Trace: [ 589.168832][ T5906] [ 589.168838][ T5906] dump_stack_lvl+0x100/0x190 [ 589.168867][ T5906] vpanic+0x552/0x970 [ 589.168884][ T5906] ? __pfx_vpanic+0x10/0x10 [ 589.168900][ T5906] ? __pfx_vprintk_emit+0x10/0x10 [ 589.168924][ T5906] ? sys_imageblit+0x19fb/0x1d60 [ 589.168946][ T5906] panic+0xd1/0xe0 [ 589.168962][ T5906] ? __pfx_panic+0x10/0x10 [ 589.168980][ T5906] ? sys_imageblit+0x19fb/0x1d60 [ 589.169002][ T5906] ? check_panic_on_warn+0x1f/0x90 [ 589.169031][ T5906] check_panic_on_warn.cold+0x19/0x34 [ 589.169050][ T5906] end_report.part.0+0x3a/0x90 [ 589.169080][ T5906] kasan_report.cold+0xe/0x18 [ 589.169118][ T5906] ? sys_imageblit+0x19fb/0x1d60 [ 589.169142][ T5906] sys_imageblit+0x19fb/0x1d60 [ 589.169167][ T5906] ? __pfx_sys_imageblit+0x10/0x10 [ 589.169193][ T5906] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 589.169223][ T5906] soft_cursor+0x524/0xa10 [ 589.169243][ T5906] bit_cursor+0xca1/0x1490 [ 589.169267][ T5906] ? __pfx_bit_cursor+0x10/0x10 [ 589.169288][ T5906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.169314][ T5906] ? get_color+0x1da/0x450 [ 589.169339][ T5906] ? __pfx_bit_cursor+0x10/0x10 [ 589.169356][ T5906] fb_flashcursor+0x338/0x430 [ 589.169385][ T5906] process_one_work+0xa0e/0x1980 [ 589.169406][ T5906] ? __pfx_process_one_work+0x10/0x10 [ 589.169425][ T5906] ? __pfx_fb_flashcursor+0x10/0x10 [ 589.169452][ T5906] worker_thread+0x5ef/0xe50 [ 589.169471][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 589.169487][ T5906] ? kthread+0x13a/0x450 [ 589.169513][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 589.169529][ T5906] kthread+0x370/0x450 [ 589.169555][ T5906] ? __pfx_kthread+0x10/0x10 [ 589.169582][ T5906] ret_from_fork+0x72b/0xd50 [ 589.169600][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 589.169619][ T5906] ? __switch_to+0x800/0x1100 [ 589.169642][ T5906] ? __switch_to_asm+0x39/0x70 [ 589.169664][ T5906] ? __pfx_kthread+0x10/0x10 [ 589.169693][ T5906] ret_from_fork_asm+0x1a/0x30 [ 589.169723][ T5906] [ 589.169789][ T5906] Kernel Offset: disabled