last executing test programs: 2.511714639s ago: executing program 0 (id=4976): setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x18, 0x1, 0x0) 2.17257242s ago: executing program 0 (id=4980): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x6) 1.845871124s ago: executing program 0 (id=4984): r0 = socket(0x23, 0x805, 0x0) accept$auto(r0, 0x0, 0x0) 1.701914837s ago: executing program 2 (id=4985): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x60002, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)={0x30db, 0x6}) 1.55093081s ago: executing program 3 (id=4986): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x40000e6) 1.535170202s ago: executing program 1 (id=4987): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) 1.413417608s ago: executing program 0 (id=4988): getxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, &(0x7f00000000c0)='nbd\x00', 0x0, 0x1000) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x5f, 0x7ff}, 0x6f4) 1.306841851s ago: executing program 2 (id=4989): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0x2}, 0xa) 1.198359903s ago: executing program 3 (id=4990): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_uinput_fops_uinput(r0, 0x0, 0x0) 1.19677679s ago: executing program 1 (id=4991): socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x2a, 0x0, 0x10001) 954.868951ms ago: executing program 2 (id=4992): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) 852.436313ms ago: executing program 3 (id=4993): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/167, 0xa7) 836.041835ms ago: executing program 1 (id=4994): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0c0128e, r0) 540.133642ms ago: executing program 2 (id=4995): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) 539.581273ms ago: executing program 1 (id=4996): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) 537.703026ms ago: executing program 3 (id=4997): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) 306.553587ms ago: executing program 0 (id=4998): openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x40042, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x4) 299.943522ms ago: executing program 1 (id=4999): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20440, 0x0) ioctl$auto(0x3, 0x40045436, 0x2) 261.818032ms ago: executing program 2 (id=5000): mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) 260.433663ms ago: executing program 3 (id=5001): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 56.862645ms ago: executing program 2 (id=5002): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/2/effective_affinity_list\x00', 0xc0180, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa) 37.578282ms ago: executing program 0 (id=5003): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 28.244911ms ago: executing program 1 (id=5004): bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 0s ago: executing program 3 (id=5005): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 103.486456][ T25] cfg80211: failed to load regulatory.db [ 104.538481][ T5808] cgroup: Unknown subsys name 'net' [ 104.662380][ T5808] cgroup: Unknown subsys name 'cpuset' [ 104.675395][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.736196][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.798833][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.810923][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.810950][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.815327][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.836772][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.841426][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.856864][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.866886][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.867540][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.875082][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.892526][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.893366][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.903197][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.919612][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.927541][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.941138][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.950437][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.973768][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.973769][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.983309][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.673067][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 109.752587][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 109.794138][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 109.969374][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 110.105140][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.112891][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.121986][ T5825] bridge_slave_0: entered allmulticast mode [ 110.131412][ T5825] bridge_slave_0: entered promiscuous mode [ 110.155831][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.163676][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.171972][ T5823] bridge_slave_0: entered allmulticast mode [ 110.180253][ T5823] bridge_slave_0: entered promiscuous mode [ 110.190472][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.198202][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.205501][ T5824] bridge_slave_0: entered allmulticast mode [ 110.213971][ T5824] bridge_slave_0: entered promiscuous mode [ 110.223463][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.231906][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.240069][ T5824] bridge_slave_1: entered allmulticast mode [ 110.248201][ T5824] bridge_slave_1: entered promiscuous mode [ 110.257122][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.265069][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.273144][ T5825] bridge_slave_1: entered allmulticast mode [ 110.282308][ T5825] bridge_slave_1: entered promiscuous mode [ 110.297891][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.305432][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.313232][ T5823] bridge_slave_1: entered allmulticast mode [ 110.321454][ T5823] bridge_slave_1: entered promiscuous mode [ 110.428550][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.441943][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.469520][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.483782][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.497928][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.525168][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.602616][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.610207][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.618241][ T5826] bridge_slave_0: entered allmulticast mode [ 110.627154][ T5826] bridge_slave_0: entered promiscuous mode [ 110.638502][ T5824] team0: Port device team_slave_0 added [ 110.644537][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.652227][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.660102][ T5826] bridge_slave_1: entered allmulticast mode [ 110.668494][ T5826] bridge_slave_1: entered promiscuous mode [ 110.679381][ T5823] team0: Port device team_slave_0 added [ 110.719373][ T5824] team0: Port device team_slave_1 added [ 110.727694][ T5823] team0: Port device team_slave_1 added [ 110.750373][ T5825] team0: Port device team_slave_0 added [ 110.793733][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.809041][ T5825] team0: Port device team_slave_1 added [ 110.843687][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.879932][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.888135][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.923694][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.938589][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.946449][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.975284][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.997057][ T5830] Bluetooth: hci0: command tx timeout [ 110.997059][ T5143] Bluetooth: hci2: command tx timeout [ 111.033954][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.042175][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.071278][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.083131][ T5143] Bluetooth: hci1: command tx timeout [ 111.083840][ T5830] Bluetooth: hci3: command tx timeout [ 111.099123][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.106680][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.133955][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.149039][ T5826] team0: Port device team_slave_0 added [ 111.156886][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.164645][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.193321][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.229590][ T5826] team0: Port device team_slave_1 added [ 111.237790][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.245517][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.273470][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.396378][ T5824] hsr_slave_0: entered promiscuous mode [ 111.404413][ T5824] hsr_slave_1: entered promiscuous mode [ 111.413308][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.421266][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.452418][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.509801][ T5825] hsr_slave_0: entered promiscuous mode [ 111.517579][ T5825] hsr_slave_1: entered promiscuous mode [ 111.526517][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 111.532800][ T5825] Cannot create hsr debugfs directory [ 111.541211][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.549990][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.579570][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.600486][ T5823] hsr_slave_0: entered promiscuous mode [ 111.609508][ T5823] hsr_slave_1: entered promiscuous mode [ 111.617091][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 111.623394][ T5823] Cannot create hsr debugfs directory [ 111.819544][ T5826] hsr_slave_0: entered promiscuous mode [ 111.827048][ T5826] hsr_slave_1: entered promiscuous mode [ 111.833847][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 111.841118][ T5826] Cannot create hsr debugfs directory [ 112.322128][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.339406][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.358518][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.384256][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.467181][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.486124][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.507467][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.535567][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.658416][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.674410][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.698551][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.712108][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.823280][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.853705][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.881306][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.905037][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.913057][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.943880][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.978958][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.987014][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.054237][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.062475][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.076531][ T5830] Bluetooth: hci2: command tx timeout [ 113.076962][ T5143] Bluetooth: hci0: command tx timeout [ 113.152052][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.160525][ T5143] Bluetooth: hci1: command tx timeout [ 113.168013][ T5143] Bluetooth: hci3: command tx timeout [ 113.269950][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.332100][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.339779][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.371911][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.414191][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.422126][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.480200][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.520304][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.528956][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.569149][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.576949][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.625412][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.682917][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.744382][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.752203][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.773001][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.780936][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.804924][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.032885][ T5824] veth0_vlan: entered promiscuous mode [ 114.078094][ T5824] veth1_vlan: entered promiscuous mode [ 114.198610][ T5824] veth0_macvtap: entered promiscuous mode [ 114.228641][ T5824] veth1_macvtap: entered promiscuous mode [ 114.245348][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.304314][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.353942][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.388772][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.418331][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.442721][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.475956][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.508040][ T5825] veth0_vlan: entered promiscuous mode [ 114.555234][ T5825] veth1_vlan: entered promiscuous mode [ 114.634546][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.651666][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.659957][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.683918][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.782652][ T5825] veth0_macvtap: entered promiscuous mode [ 114.791127][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.803783][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.844156][ T5825] veth1_macvtap: entered promiscuous mode [ 114.904184][ T5823] veth0_vlan: entered promiscuous mode [ 114.942107][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.959701][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.980097][ T5823] veth1_vlan: entered promiscuous mode [ 115.003502][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.040378][ T5826] veth0_vlan: entered promiscuous mode [ 115.079312][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.104239][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.132808][ T5826] veth1_vlan: entered promiscuous mode [ 115.149775][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.159758][ T5143] Bluetooth: hci0: command tx timeout [ 115.166942][ T5143] Bluetooth: hci2: command tx timeout [ 115.198538][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.237474][ T5143] Bluetooth: hci1: command tx timeout [ 115.243165][ T5143] Bluetooth: hci3: command tx timeout [ 115.340457][ T5823] veth0_macvtap: entered promiscuous mode [ 115.381591][ T5823] veth1_macvtap: entered promiscuous mode [ 115.391306][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.412156][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.444810][ T5826] veth0_macvtap: entered promiscuous mode [ 115.527295][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.538691][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.551990][ T5826] veth1_macvtap: entered promiscuous mode [ 115.563712][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.582434][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.617096][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.632113][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.666603][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.689251][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.736805][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.791477][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.933529][ T5143] Bluetooth: hci0: unexpected event 0x3c length: 254 > 7 [ 115.936703][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.013354][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.049438][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098697][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.128481][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.159241][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.365776][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.374324][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.519022][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.549005][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.698094][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.726071][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.237826][ T5143] Bluetooth: hci2: command tx timeout [ 117.241375][ T5830] Bluetooth: hci0: command tx timeout [ 117.316920][ T5830] Bluetooth: hci1: command tx timeout [ 117.322941][ T5830] Bluetooth: hci3: command tx timeout [ 118.655555][ T5990] ======================================================= [ 118.655555][ T5990] WARNING: The mand mount option has been deprecated and [ 118.655555][ T5990] and is ignored by this kernel. Remove the mand [ 118.655555][ T5990] option from the mount to silence this warning. [ 118.655555][ T5990] ======================================================= [ 119.897970][ T6029] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.126763][ T6068] syz.2.79 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.827894][ T31] audit: type=1800 audit(4294967301.180:2): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.105" name="version" dev="configfs" ino=8053 res=0 errno=0 [ 123.066548][ T6127] Invalid ELF header magic: != ELF [ 124.016215][ T6158] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.065332][ T31] audit: type=1800 audit(4294967302.420:3): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.124" name="trace_pipe" dev="tracefs" ino=725 res=0 errno=0 [ 128.548045][ T6295] Unable to find swap-space signature [ 129.242440][ T5830] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 130.091408][ T6281] kexec: Could not allocate control_code_buffer [ 132.753630][ T31] audit: type=1800 audit(4294969359.131:4): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="dbroot" dev="configfs" ino=8889 res=0 errno=0 [ 133.564303][ T5830] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 135.094107][ T6499] futex_wake_op: syz.0.290 tries to shift op by -1; fix this program [ 135.906908][ T6523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.195093][ T6531] nfs: Bad value for 'source' [ 137.541823][ T5830] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 139.277172][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.296252][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.130950][ T6598] kexec: Could not allocate control_code_buffer [ 140.617886][ T6662] Unable to find swap-space signature [ 141.796704][ T6691] mmap: syz.3.378 (6691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.564867][ T6675] kexec: Could not allocate control_code_buffer [ 143.409052][ T31] audit: type=1800 audit(4294969369.827:5): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.400" name="lu_gp_id" dev="configfs" ino=10351 res=0 errno=0 [ 146.455794][ T5830] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 149.845617][ T6999] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.927653][ T7081] __vm_enough_memory: pid: 7081, comm: syz.1.569, bytes: 4398046511104 not enough memory for the allocation [ 152.651908][ T5830] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 153.776225][ T7151] Process accounting resumed [ 155.563381][ T7221] futex_wake_op: syz.0.638 tries to shift op by -2048; fix this program [ 156.072524][ T7241] ima: policy update failed [ 156.079163][ T31] audit: type=1802 audit(4294969382.573:6): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.649" res=0 errno=0 [ 157.325667][ T5830] Bluetooth: hci1: unexpected event 0x34 length: 11 > 6 [ 161.193404][ T7439] capability: warning: `syz.0.746' uses deprecated v2 capabilities in a way that may be insecure [ 162.091590][ T7472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.794397][ T5830] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 165.152403][ T7594] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7594] [ 166.786262][ T7654] random: crng reseeded on system resumption [ 168.438154][ T7712] can: request_module (can-proto-5) failed. [ 169.011915][ T31] audit: type=1800 audit(4294970422.568:7): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.893" name="features" dev="configfs" ino=13519 res=0 errno=0 [ 170.321151][ T31] audit: type=1800 audit(4294970423.895:8): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.920" name="features" dev="configfs" ino=13574 res=0 errno=0 [ 170.984130][ T31] audit: type=1800 audit(4294970424.549:9): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.931" name="features" dev="configfs" ino=13180 res=0 errno=0 [ 171.653693][ T31] audit: type=1800 audit(4294970425.232:10): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.945" name="features" dev="configfs" ino=13626 res=0 errno=0 [ 174.938725][ T7949] capability: warning: `syz.2.999' uses 32-bit capabilities (legacy support in use) [ 174.953335][ T7948] syz.0.997(7948): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 178.133777][ T8045] smpboot: CPU 1 is now offline [ 180.056319][ T8090] futex_wake_op: syz.3.1069 tries to shift op by -2048; fix this program [ 180.106379][ T8090] futex_wake_op: syz.3.1069 tries to shift op by -2048; fix this program [ 180.516365][ T31] audit: type=1806 audit(4294970434.128:11): res=-14 [ 182.427828][ T8148] i2c i2c-0: delete_device: Extra parameters [ 183.389083][ T8175] block nbd0: NBD_DISCONNECT [ 183.790054][ T8183] Process accounting paused [ 185.595920][ T8238] : Can't lookup blockdev [ 187.025043][ T8279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.756647][ T8302] binder: 8301:8302 ioctl 40046205 0 returned -22 [ 189.289797][ T8350] QAT: Stopping all acceleration devices. [ 190.094439][ T8374] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.362279][ T5830] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 196.996194][ T8578] vhci_hcd vhci_hcd.2: invalid port number 16 [ 197.050890][ T8578] vhci_hcd vhci_hcd.2: invalid port number 16 [ 197.721237][ T8601] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 197.883623][ T8601] CIFS mount error: No usable UNC path provided in device string! [ 197.883623][ T8601] [ 197.953633][ T8601] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.126726][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.134206][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.521157][ T8659] warning: `syz.1.1331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.895204][ T8699] kafs: addr_prefs: Invalid Command [ 205.096228][ T8841] syz.3.1418 (8841): drop_caches: 0 [ 205.417884][ T8853] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.384546][ T8952] program syz.2.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.758751][ T31] audit: type=1800 audit(4294970465.531:12): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1525" name="discovery_nqn" dev="configfs" ino=17711 res=0 errno=0 [ 211.920058][ T9068] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 213.906722][ T9120] Process accounting resumed [ 215.149021][ T9176] WARNING! power/level is deprecated; use power/control instead [ 215.401382][ T9186] QAT: failed to copy from user cfg_data. [ 218.449955][ T9287] QAT: failed to copy from user. [ 222.466580][ T9411] ACPI: Can not change Invalid GPE/Fixed Event status [ 222.866458][ T31] audit: type=1326 audit(4294970476.709:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.2.1704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab7cf9c799 code=0x0 [ 224.256500][ T9472] ptp ptp0: only physical clock in use now [ 225.526072][ T9514] sd 0:0:1:0: PR command failed: 1026 [ 225.558754][ T9514] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 225.595632][ T9514] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 226.925377][ T9560] misc userio: Invalid payload size [ 227.590483][ T9582] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 227.867711][ T9593] batman_adv: Routing algorithm '7' is not supported [ 233.026298][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 233.034098][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 233.042269][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 233.049384][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 235.886521][ T9858] [U] ^Z [ 239.049604][ T5828] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 239.601803][ T9964] QAT: failed to copy from user cfg_data. [ 240.292565][ T9982] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 240.940438][ T31] audit: type=1804 audit(4294970494.873:14): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1985" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 241.777600][T10030] nvme_fcloop: unknown parameter or missing value '0' [ 243.288012][T10082] block2mtd: parameter too long [ 243.304394][T10081] synth uevent: /module/au0828: unknown uevent action string [ 244.038930][T10094] Process accounting paused [ 248.106779][T10226] hub 1-0:1.0: USB hub found [ 248.152253][T10226] hub 1-0:1.0: 1 port detected [ 250.308866][T10294] bond0: option slaves: interface - does not exist! [ 250.463516][T10297] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[10297] [ 250.741658][T10306] Line length is too long: Should be less than 4094 [ 252.609323][T10368] Malformed UNC in devname [ 252.609323][T10368] [ 252.617151][T10368] CIFS: VFS: Malformed UNC in devname [ 252.731680][ T31] audit: type=1800 audit(4294970506.734:15): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2174" name="dbroot" dev="configfs" ino=21948 res=0 errno=0 [ 253.478635][T10397] nfsd: Unknown parameter 'ԣ' [ 255.456167][T10462] Format for deleting device is "id" (uint). [ 257.437440][ T31] audit: type=1800 audit(4294970511.458:16): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2236" name="features" dev="configfs" ino=22399 res=0 errno=0 [ 260.295275][T10602] delete_channel: no stack [ 260.959413][T10624] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 261.530896][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.539618][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.810221][T10646] ICMPv6: process `syz.3.2299' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 263.452701][T10695] usb usb27: usbfs: interface 0 claimed by hub while 'syz.0.2321' sets config #131073 [ 263.989257][ T31] audit: type=1400 audit(4294970518.042:17): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10709 comm="syz.2.2331" [ 265.074324][T10739] aoe: invalid device specification [ 266.873228][T10790] zram: Added device: zram1 [ 270.222065][T10887] delete_channel: no stack [ 274.012106][T10975] Process accounting resumed [ 274.561473][T10980] could not allocate digest TFM handle [ 276.712627][T11050] program syz.2.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.775383][T11050] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.693834][T11114] [ 278.947011][T11121] vivid-007: ================= START STATUS ================= [ 279.009906][T11121] vivid-007: Enable Output Cropping: true [ 279.063080][T11121] vivid-007: Enable Output Composing: true [ 279.093173][T11121] vivid-007: Enable Output Scaler: true [ 279.135177][T11121] vivid-007: Tx RGB Quantization Range: Automatic [ 279.182700][T11121] vivid-007: Transmit Mode: HDMI [ 279.218310][T11121] vivid-007: Hotplug Present: 0x00000000 [ 279.253877][T11121] vivid-007: RxSense Present: 0x00000000 [ 279.290470][T11121] vivid-007: EDID Present: 0x00000000 [ 279.310016][T11121] vivid-007: ================== END STATUS ================== [ 280.240367][T11151] vivid-007: ================= START STATUS ================= [ 280.304909][T11151] vivid-007: Generate PTS: true [ 280.310846][T11151] vivid-007: Generate SCR: true [ 280.377146][T11151] tpg source WxH: 320x240 (Y'CbCr) [ 280.419886][T11151] tpg field: 1 [ 280.429469][T11151] tpg crop: (0,0)/320x240 [ 280.472507][T11151] tpg compose: (0,0)/320x240 [ 280.482565][T11151] tpg colorspace: 8 [ 280.544083][T11151] tpg transfer function: 0/0 [ 280.573587][T11151] tpg Y'CbCr encoding: 0/0 [ 280.603292][T11151] tpg quantization: 0/0 [ 280.633594][T11151] tpg RGB range: 0/2 [ 280.664930][T11151] vivid-007: ================== END STATUS ================== [ 282.060266][T11195] TCP: TCP_TX_DELAY enabled [ 282.484067][ T5828] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 285.194636][ T5828] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 285.204284][ T5828] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 285.810238][T11297] [ 286.964796][T11333] vhci_hcd vhci_hcd.2: invalid port number 0 [ 287.326676][T11343] : Can't lookup blockdev [ 291.935480][T11484] sd 0:0:1:0: PR command failed: 1026 [ 291.941594][T11484] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 292.020864][T11484] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 292.048924][T11486] nvme_fcloop: unknown parameter or missing value '' [ 293.439736][T11524] kafs: addr_prefs: Too many elements in string [ 293.830201][ T31] audit: type=1800 audit(4294970548.048:18): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2722" name="dbroot" dev="configfs" ino=25661 res=0 errno=0 [ 294.202305][ T5835] Bluetooth: hci2: unexpected event 0x3e length: 0 < 1 [ 295.134691][T11580] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 295.685112][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 297.732517][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 297.789609][T11653] < [ 298.738387][T11667] zswap: compressor - not available [ 298.951461][T11681] kafs: addr_prefs: Invalid Command [ 299.802787][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 302.564525][T11778] nvme_fcloop: unknown parameter or missing value '1' [ 302.841589][T11785] ubi31: attaching mtd0 [ 302.873242][T11785] ubi31: scanning is finished [ 302.917403][T11785] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 303.179841][T11785] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 303.903061][T11817] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 303.937243][T11814] Process accounting paused [ 304.252456][T11829] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.829520][T11847] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 305.496302][T11861] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 306.207466][T11884] cougar: G6 mapped to space [ 307.766808][T11935] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 307.892056][T11936] [U]  syzkaller syzkaller login: [ 309.869750][ T5828] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 311.890788][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 312.016635][T12051] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 312.537917][T12068] block2mtd: illegal erase size [ 313.962774][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 314.658970][T12133] random: crng reseeded on system resumption [ 316.567499][T12192] Scaler: ================= START STATUS ================= [ 316.615579][T12192] Scaler: ================== END STATUS ================== [ 318.406755][T12244] binder: 12243:12244 ioctl c0046209 9 returned -22 [ 320.724242][T12321] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 320.991001][T12329] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 321.003896][T12331] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 321.465111][T12341] tipc: Can't bind to reserved service type 1 [ 321.546144][T12347] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 321.592770][T12347] ep_00: uevent: failed to send synthetic uevent: -22 [ 321.750994][ T5831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.781523][ T5831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.810386][ T5831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.818240][ T5831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.890799][ T5831] rtc rtc0: __rtc_set_alarm: err=-22 [ 322.404078][T12371] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 322.639383][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.652173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.704727][T12381] Setting dangerous option i915.mitigations - tainting kernel [ 324.469678][T12432] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 325.937899][T12471] ecryptfs_miscdev_write: Invalid packet size [192] [ 327.389188][T12522] sd 0:0:1:0: PR command failed: 1026 [ 327.409944][T12522] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 327.417812][T12522] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 328.280201][T12549] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 330.025957][T12601] vhci_hcd vhci_hcd.1: invalid port number 16 [ 330.058187][T12601] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 330.260062][T12609] random: crng reseeded on system resumption [ 332.295653][T12677] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 333.087560][T12704] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 333.914563][T12724] Process accounting resumed [ 335.893670][T12795] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 337.446588][T12847] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 338.159707][T12870] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 342.736209][T12955] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 343.737973][T13024] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 343.791873][T13024] vhci_hcd vhci_hcd.2: invalid port number 0 [ 344.853888][T13054] ICMPv6: process `syz.0.3459' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 346.168394][ T31] audit: type=1800 audit(4294988944.651:19): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3478" name="discovery_nqn" dev="configfs" ino=30805 res=0 errno=0 [ 349.422374][T13182] i2c i2c-0: new_device: Invalid device name [ 349.445620][T13183] program syz.1.3523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.506781][T13183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 351.077967][T13225] CIFS mount error: No usable UNC path provided in device string! [ 351.077967][T13225] [ 351.138680][T13225] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.861500][T13250] program syz.3.3555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.607612][T13308] [U] 0="/ [ 353.633596][T13308] [U] [ 353.636623][T13308] [U] EeQ@ [ 353.660607][T13305] [U]  [ 354.523396][T13338] aoe: can't write to that file. [ 354.697978][T13344] mmap: syz.1.3602 (13344): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 355.738538][T13380] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 355.746065][T13378] ima: policy update failed [ 355.805803][ T31] audit: type=1802 audit(4294988954.331:20): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3620" res=0 errno=0 [ 357.124953][T13428] usb usb24: usbfs: process 13428 (syz.0.3642) did not claim interface 0 before use [ 358.346811][T13468] ecryptfs_parse_packet_length: Error parsing packet length [ 358.380411][T13468] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 362.949268][T13618] Debayer A: ================= START STATUS ================= [ 362.995605][T13618] Debayer A: Debayer Mean Window Size: 3 [ 363.032479][T13618] Debayer A: ================== END STATUS ================== [ 363.884503][T13645] Process accounting paused [ 366.700927][ T31] audit: type=1400 audit(4294988965.298:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13734 comm="syz.3.3794" [ 371.053206][T13869] vhci_hcd: not connected 4 [ 371.716943][ T5835] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 371.717005][ T5835] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 371.734657][ T5835] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 372.685655][T13907] usb usb15: usbfs: process 13907 (syz.0.3880) did not claim interface 0 before use [ 374.044085][ T5835] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 376.840393][T14037] bond0: option mode: unable to set because the bond device is up [ 379.523587][T14110] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 379.523587][T14110] [ 382.511493][T14211] block2mtd: illegal erase size [ 383.772802][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.782020][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.989458][T14240] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 387.292634][T14312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.246965][T14376] i8042 aux 00:02: in use; can't configure [ 390.959446][T14436] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 393.853448][T14523] process 'syz.3.4182' launched '/dev/fd/3' with NULL argv: empty string added [ 393.951307][T14521] Process accounting resumed [ 394.702288][T14547] ima: policy update failed [ 394.721775][ T31] audit: type=1802 audit(4294988993.443:22): pid=14547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4194" res=0 errno=0 [ 395.229544][T14564] hub 3-0:1.0: USB hub found [ 395.267079][T14564] hub 3-0:1.0: 1 port detected [ 395.369621][T14564] usb usb3: authorized to connect [ 396.631284][T14610] Setting dangerous option i915.mitigations - tainting kernel [ 396.675662][T14610] Bad "i915.mitigations=CmâUQF\ ", 'CmâUQF\' is unknown [ 397.506641][T14635] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 397.558381][T14635] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 397.616907][T14635] memcg:ffff888078400811 [ 397.627022][T14635] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 397.666381][T14635] page_type: f5(slab) [ 397.686663][T14635] raw: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122 [ 397.735120][T14635] raw: 0000000000000000 0000100000080008 00000000f5000000 ffff888078400811 [ 397.784061][T14635] head: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122 [ 397.851153][T14635] head: 0000000000000000 0000100000080008 00000000f5000000 ffff888078400811 [ 397.893470][T14635] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 397.941674][T14635] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 397.993103][T14635] page dumped because: unmovable page [ 398.030337][T14635] page_owner tracks the page as allocated [ 398.053807][T14635] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14060, tgid 14059 (syz.3.3952), ts 377852211002, free_ts 377793976634 [ 398.157393][T14635] post_alloc_hook+0x153/0x170 [ 398.190237][T14635] get_page_from_freelist+0x111d/0x3140 [ 398.283757][T14635] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 398.327045][T14635] new_slab+0xa6/0x6c0 [ 398.345118][T14635] refill_objects+0x26b/0x400 [ 398.375189][T14635] __pcs_replace_empty_main+0x1ab/0x600 [ 398.403488][T14635] __kmalloc_cache_noprof+0x493/0x6f0 [ 398.430833][T14635] ipv6_add_dev+0x1c9/0x1520 [ 398.464321][T14635] addrconf_notify+0x563/0x19c0 [ 398.500135][T14635] notifier_call_chain+0x99/0x420 [ 398.540296][T14635] call_netdevice_notifiers_info+0xbe/0x110 [ 398.560585][T14635] register_netdevice+0x16e6/0x2210 [ 398.566412][T14635] register_netdev+0x34/0x50 [ 398.615460][T14635] ip6gre_init_net+0x2aa/0x420 [ 398.645539][T14635] ops_init+0x1e2/0x5f0 [ 398.676017][T14635] setup_net+0x118/0x3a0 [ 398.686279][T14635] page last free pid 5823 tgid 5823 stack trace: [ 398.730588][T14635] __free_frozen_pages+0x7e1/0x10d0 [ 398.736164][T14635] qlist_free_all+0x47/0xe0 [ 398.777659][T14635] kasan_quarantine_reduce+0x1a0/0x1f0 [ 398.803532][T14635] __kasan_slab_alloc+0x69/0x90 [ 398.835352][T14635] kmem_cache_alloc_noprof+0x241/0x6e0 [ 398.868443][T14635] do_getname+0x35/0x390 [ 398.873206][T14635] user_path_at+0x26/0x60 [ 398.893243][T14635] __x64_sys_umount+0x10a/0x1a0 [ 398.938879][T14635] do_syscall_64+0x106/0xf80 [ 398.944192][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.568829][ T5835] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 399.640330][T14695] qrtr: Invalid version 0 [ 402.188101][T14777] __vm_enough_memory: pid: 14777, comm: syz.0.4303, bytes: 9223372036854775808 not enough memory for the allocation [ 402.758281][T14800] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 410.306885][T15041] ICMPv6: process `syz.1.4429' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 411.847515][T15094] bond0: invalid ARP target specified [ 412.837862][ T31] audit: type=1800 audit(4294989011.668:23): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4469" name="lu_gp_id" dev="configfs" ino=37330 res=0 errno=0 [ 413.593902][T15150] usb usb4: usbfs: process 15150 (syz.0.4482) did not claim interface 0 before use [ 414.800698][T14848] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 417.678400][T15279] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 417.715613][T15279] pci 0000:00:01.3: PCI INT A: no GSI [ 417.948678][T15287] synth uevent: /bus/mei: unknown uevent action string [ 423.915260][T15434] Process accounting paused [ 424.102171][T15445] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 424.870914][ T31] audit: type=1807 audit(4294989023.760:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 424.896530][T15454] ima: policy update failed [ 424.964404][ T31] audit: type=1802 audit(4294989023.790:25): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.4634" res=0 errno=0 [ 425.091888][ T31] audit: type=1802 audit(4294989023.790:26): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4634" res=0 errno=0 [ 426.392126][T15485] binder: 15484:15485 ioctl c0306201 200000000000 returned -14 [ 426.653858][T15489] bonding: no command found in bonding_masters - use +ifname or -ifname [ 427.071530][ T31] audit: type=1800 audit(4294989025.972:27): pid=15499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4654" name="members" dev="configfs" ino=38522 res=0 errno=0 [ 428.743869][T15550] block2mtd: device name too long [ 431.271080][T15630] syz.1.4719 (15630): attempted to duplicate a private mapping with mremap. This is not supported. [ 431.438512][T15635] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b108da (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 431.462973][T15635] Call Trace: [ 431.467396][T15635] [ 431.471838][T15635] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 431.479740][T15635] ? __pfx_debug_object_deactivate+0x10/0x10 [ 431.486889][T15635] mce_cpu_restart+0xd5/0x1f0 [ 431.492526][T15635] ? __pfx_mce_cpu_restart+0x10/0x10 [ 431.499334][T15635] smp_call_function_many_cond+0x11fc/0x1500 [ 431.505843][T15635] ? __pfx_mce_cpu_restart+0x10/0x10 [ 431.512099][T15635] ? mark_held_locks+0x40/0x70 [ 431.517445][T15635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.523579][T15635] ? lockdep_hardirqs_on+0x78/0x100 [ 431.529624][T15635] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 431.536061][T15635] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 431.543220][T15635] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 431.550480][T15635] ? __timer_delete_sync+0x151/0x1c0 [ 431.556211][T15635] ? __pfx_mce_cpu_restart+0x10/0x10 [ 431.562809][T15635] on_each_cpu_cond_mask+0x40/0x90 [ 431.568202][T15635] set_bank+0x240/0x3a0 [ 431.572696][T15635] ? __pfx_set_bank+0x10/0x10 [ 431.577583][T15635] ? find_held_lock+0x2b/0x80 [ 431.582743][T15635] ? sysfs_file_kobj+0xe4/0x290 [ 431.588252][T15635] ? sysfs_file_kobj+0xe4/0x290 [ 431.593539][T15635] ? __pfx_set_bank+0x10/0x10 [ 431.598421][T15635] dev_attr_store+0x58/0x80 [ 431.604043][T15635] ? __pfx_dev_attr_store+0x10/0x10 [ 431.610462][T15635] sysfs_kf_write+0xf2/0x150 [ 431.615491][T15635] kernfs_fop_write_iter+0x3e0/0x5f0 [ 431.620948][T15635] ? __pfx_sysfs_kf_write+0x10/0x10 [ 431.626754][T15635] vfs_write+0x6ac/0x1070 [ 431.631486][T15635] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 431.638181][T15635] ? __pfx_vfs_write+0x10/0x10 [ 431.643637][T15635] ksys_write+0x12a/0x250 [ 431.648293][T15635] ? __pfx_ksys_write+0x10/0x10 [ 431.653773][T15635] do_syscall_64+0x106/0xf80 [ 431.658990][T15635] ? clear_bhb_loop+0x40/0x90 [ 431.664267][T15635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.670490][T15635] RIP: 0033:0x7fca6859c799 [ 431.675494][T15635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.696440][T15635] RSP: 002b:00007fca69520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.705961][T15635] RAX: ffffffffffffffda RBX: 00007fca68815fa0 RCX: 00007fca6859c799 [ 431.714683][T15635] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 431.723246][T15635] RBP: 00007fca68632c99 R08: 0000000000000000 R09: 0000000000000000 [ 431.731888][T15635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.740476][T15635] R13: 00007fca68816038 R14: 00007fca68815fa0 R15: 00007ffcaf2c2348 [ 431.749031][T15635] [ 433.450249][T15689] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 434.177308][T15716] zram0: detected capacity change from 0 to 16 [ 437.911456][T15820] bcache: register_bcache() error : failed to open device [ 438.884133][T15847] Invalid ELF header magic: != ELF [ 442.072706][T15938] : Can't lookup blockdev [ 442.703555][T15956] usb usb2: usbfs: process 15956 (syz.2.4869) did not claim interface 4 before use [ 442.849237][T15959] block2mtd: too many arguments [ 444.898115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.906459][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.053674][T16114] rnbd_client L213: map_device: Parameters missing [ 451.647913][T16201] binder: binder_mmap: 16199 0-1000 bad vm_flags failed -1 [ 452.998582][T16238] program syz.3.4978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.846057][T16254] Process accounting resumed [ 454.350365][T14759] Bluetooth: hci2: command 0x0406 tx timeout [ 454.362861][ T5831] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 455.335338][T16299] ================================================================== [ 455.335363][T16299] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 455.335444][T16299] Write of size 8 at addr ffffc90004589000 by task syz.3.5005/16299 [ 455.335465][T16299] [ 455.335487][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.3.5005 Tainted: G U I syzkaller #0 PREEMPT(full) [ 455.335525][T16299] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 455.335535][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 455.335551][T16299] Call Trace: [ 455.335560][T16299] [ 455.335569][T16299] dump_stack_lvl+0x100/0x190 [ 455.335608][T16299] print_report+0x156/0x4c9 [ 455.335643][T16299] ? _raw_spin_lock_irqsave+0x52/0x60 [ 455.335671][T16299] ? __virt_addr_valid+0x81/0x620 [ 455.335711][T16299] ? sys_fillrect+0x174a/0x1910 [ 455.335740][T16299] kasan_report+0xdf/0x1e0 [ 455.335766][T16299] ? sys_fillrect+0x174a/0x1910 [ 455.335799][T16299] sys_fillrect+0x174a/0x1910 [ 455.335837][T16299] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 455.335931][T16299] bit_clear+0x17d/0x220 [ 455.335957][T16299] ? __pfx_bit_clear+0x10/0x10 [ 455.335980][T16299] ? fb_get_color_depth+0x120/0x250 [ 455.336051][T16299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.336107][T16299] __fbcon_clear+0x633/0x760 [ 455.336146][T16299] ? __pfx_bit_clear+0x10/0x10 [ 455.336178][T16299] fbcon_scroll+0x48b/0x650 [ 455.336217][T16299] con_scroll+0x464/0x690 [ 455.336279][T16299] do_con_write+0x6883/0x8540 [ 455.336320][T16299] ? __pfx_do_con_write+0x10/0x10 [ 455.336359][T16299] con_write+0x23/0xb0 [ 455.336389][T16299] n_tty_write+0x44f/0x12d0 [ 455.336472][T16299] ? __pfx_n_tty_write+0x10/0x10 [ 455.336509][T16299] ? trace_kmalloc+0x101/0x130 [ 455.336537][T16299] ? __pfx_woken_wake_function+0x10/0x10 [ 455.336574][T16299] ? rcu_is_watching+0x12/0xc0 [ 455.336615][T16299] ? file_tty_write.isra.0+0x694/0x890 [ 455.336644][T16299] ? kfree+0x2ec/0x6b0 [ 455.336674][T16299] ? __pfx_n_tty_write+0x10/0x10 [ 455.336715][T16299] file_tty_write.isra.0+0x4d2/0x890 [ 455.336763][T16299] redirected_tty_write+0xd4/0x120 [ 455.336794][T16299] vfs_write+0x6ac/0x1070 [ 455.336834][T16299] ? __pfx_redirected_tty_write+0x10/0x10 [ 455.336866][T16299] ? __pfx_vfs_write+0x10/0x10 [ 455.336902][T16299] ? find_held_lock+0x2b/0x80 [ 455.336934][T16299] ksys_write+0x12a/0x250 [ 455.336954][T16299] ? __pfx_ksys_write+0x10/0x10 [ 455.336981][T16299] do_syscall_64+0x106/0xf80 [ 455.337011][T16299] ? clear_bhb_loop+0x40/0x90 [ 455.337040][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.337065][T16299] RIP: 0033:0x7fca6859c799 [ 455.337088][T16299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.337112][T16299] RSP: 002b:00007fca69520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.337135][T16299] RAX: ffffffffffffffda RBX: 00007fca68815fa0 RCX: 00007fca6859c799 [ 455.337152][T16299] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 455.337174][T16299] RBP: 00007fca68632c99 R08: 0000000000000000 R09: 0000000000000000 [ 455.337189][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.337204][T16299] R13: 00007fca68816038 R14: 00007fca68815fa0 R15: 00007ffcaf2c2348 [ 455.337229][T16299] [ 455.337238][T16299] [ 455.337246][T16299] The buggy address belongs to a vmalloc virtual mapping [ 455.337266][T16299] Memory state around the buggy address: [ 455.337280][T16299] ffffc90004588f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 455.337299][T16299] ffffc90004588f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 455.337316][T16299] >ffffc90004589000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 455.337329][T16299] ^ [ 455.337342][T16299] ffffc90004589080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 455.337359][T16299] ffffc90004589100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 455.337373][T16299] ================================================================== [ 455.337390][T16299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 455.337409][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.3.5005 Tainted: G U I syzkaller #0 PREEMPT(full) [ 455.337448][T16299] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 455.337458][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 455.337473][T16299] Call Trace: [ 455.337481][T16299] [ 455.337490][T16299] dump_stack_lvl+0x100/0x190 [ 455.337527][T16299] vpanic+0x552/0x970 [ 455.337551][T16299] ? __pfx_vpanic+0x10/0x10 [ 455.337575][T16299] ? __pfx_vprintk_emit+0x10/0x10 [ 455.337601][T16299] ? sys_fillrect+0x174a/0x1910 [ 455.337631][T16299] panic+0xd1/0xe0 [ 455.337652][T16299] ? __pfx_panic+0x10/0x10 [ 455.337681][T16299] ? sys_fillrect+0x174a/0x1910 [ 455.337711][T16299] check_panic_on_warn.cold+0x19/0x34 [ 455.337757][T16299] end_report.part.0+0x3a/0x90 [ 455.337792][T16299] kasan_report.cold+0xe/0x18 [ 455.337826][T16299] ? sys_fillrect+0x174a/0x1910 [ 455.337859][T16299] sys_fillrect+0x174a/0x1910 [ 455.337895][T16299] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 455.337934][T16299] bit_clear+0x17d/0x220 [ 455.337956][T16299] ? __pfx_bit_clear+0x10/0x10 [ 455.337980][T16299] ? fb_get_color_depth+0x120/0x250 [ 455.338020][T16299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.338064][T16299] __fbcon_clear+0x633/0x760 [ 455.338102][T16299] ? __pfx_bit_clear+0x10/0x10 [ 455.338126][T16299] fbcon_scroll+0x48b/0x650 [ 455.338170][T16299] con_scroll+0x464/0x690 [ 455.338202][T16299] do_con_write+0x6883/0x8540 [ 455.338243][T16299] ? __pfx_do_con_write+0x10/0x10 [ 455.338282][T16299] con_write+0x23/0xb0 [ 455.338313][T16299] n_tty_write+0x44f/0x12d0 [ 455.338358][T16299] ? __pfx_n_tty_write+0x10/0x10 [ 455.338394][T16299] ? trace_kmalloc+0x101/0x130 [ 455.338420][T16299] ? __pfx_woken_wake_function+0x10/0x10 [ 455.338457][T16299] ? rcu_is_watching+0x12/0xc0 [ 455.338493][T16299] ? file_tty_write.isra.0+0x694/0x890 [ 455.338523][T16299] ? kfree+0x2ec/0x6b0 [ 455.338553][T16299] ? __pfx_n_tty_write+0x10/0x10 [ 455.338590][T16299] file_tty_write.isra.0+0x4d2/0x890 [ 455.338625][T16299] redirected_tty_write+0xd4/0x120 [ 455.338656][T16299] vfs_write+0x6ac/0x1070 [ 455.338719][T16299] ? __pfx_redirected_tty_write+0x10/0x10 [ 455.338773][T16299] ? __pfx_vfs_write+0x10/0x10 [ 455.338809][T16299] ? find_held_lock+0x2b/0x80 [ 455.338841][T16299] ksys_write+0x12a/0x250 [ 455.338861][T16299] ? __pfx_ksys_write+0x10/0x10 [ 455.338887][T16299] do_syscall_64+0x106/0xf80 [ 455.338917][T16299] ? clear_bhb_loop+0x40/0x90 [ 455.338945][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.338974][T16299] RIP: 0033:0x7fca6859c799 [ 455.338993][T16299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.339018][T16299] RSP: 002b:00007fca69520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.339042][T16299] RAX: ffffffffffffffda RBX: 00007fca68815fa0 RCX: 00007fca6859c799 [ 455.339059][T16299] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 455.339075][T16299] RBP: 00007fca68632c99 R08: 0000000000000000 R09: 0000000000000000 [ 455.339090][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.339106][T16299] R13: 00007fca68816038 R14: 00007fca68815fa0 R15: 00007ffcaf2c2348 [ 455.339131][T16299] [ 455.339217][T16299] Kernel Offset: disabled