last executing test programs: 1.257698762s ago: executing program 3 (id=5841): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x1f) 1.179822873s ago: executing program 1 (id=5842): socket(0x18, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) 1.15989201s ago: executing program 0 (id=5843): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, r0, 0x0) 1.077711019s ago: executing program 2 (id=5844): r0 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r0, 0x107, 0x100, 0x0, 0x0) 1.06975407s ago: executing program 3 (id=5845): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000040)=""/4099, 0xfd98) 969.219404ms ago: executing program 1 (id=5846): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r0, 0x4141, 0x0) 935.187839ms ago: executing program 0 (id=5847): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000100)='\xe6q\x00\x00\x00\xde\xff\xff?\xf989\x12`[\x00', 0x2) 849.916508ms ago: executing program 2 (id=5848): r0 = socket(0x28, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x0, 0x0, 0x2) 767.186845ms ago: executing program 1 (id=5849): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/firmware/acpi/tables/FACS\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) 736.091998ms ago: executing program 0 (id=5850): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x80, 0x0) ioctl$auto_MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000040)={0x86, 0x0, 0x10001, 0x8000000000000000}) 703.152735ms ago: executing program 3 (id=5851): r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x5, 0x0, 0x0) 649.987303ms ago: executing program 2 (id=5852): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) 540.862557ms ago: executing program 1 (id=5853): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) 524.036641ms ago: executing program 0 (id=5854): r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0c, &(0x7f00000001c0)) 503.542428ms ago: executing program 3 (id=5855): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x8, 0x5, 0x5}) 442.94281ms ago: executing program 2 (id=5856): prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) 318.59482ms ago: executing program 1 (id=5857): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r0, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) 289.795004ms ago: executing program 3 (id=5858): r0 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$auto_FIONREAD(r0, 0xaa00, 0x0) 253.844081ms ago: executing program 0 (id=5859): r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) 187.031849ms ago: executing program 2 (id=5860): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) ioctl$auto(r0, 0x92106409, 0xffffffffffffffff) 110.300102ms ago: executing program 1 (id=5861): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) 86.148023ms ago: executing program 3 (id=5862): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f00000000c0)="c80d1b5d399b4d11", 0x8) 59.697661ms ago: executing program 0 (id=5863): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r0, 0x4b3a, 0x1) 0s ago: executing program 2 (id=5864): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4aee3769c2a0794a, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x5, &(0x7f0000000080)='ethtool\x00', 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 89.922434][ T5612] cgroup: Unknown subsys name 'net' [ 90.038704][ T5612] cgroup: Unknown subsys name 'cpuset' [ 90.048183][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.923199][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.297478][ T42] cfg80211: failed to load regulatory.db [ 97.946734][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.958370][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.967235][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.976707][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.985543][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.085606][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.095809][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.103754][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.126214][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.136647][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.195648][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.207923][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.217073][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.231408][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.240076][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.249243][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.258207][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.266499][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.288183][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.296829][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.606298][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.614680][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.622005][ T5630] bridge_slave_0: entered allmulticast mode [ 99.630091][ T5630] bridge_slave_0: entered promiscuous mode [ 99.669984][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.677551][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.684933][ T5630] bridge_slave_1: entered allmulticast mode [ 99.693102][ T5630] bridge_slave_1: entered promiscuous mode [ 99.800257][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.813760][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.983933][ T5630] team0: Port device team_slave_0 added [ 100.017501][ T5630] team0: Port device team_slave_1 added [ 100.020846][ T5631] Bluetooth: hci0: command tx timeout [ 100.062943][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.070283][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.077747][ T5635] bridge_slave_0: entered allmulticast mode [ 100.085620][ T5635] bridge_slave_0: entered promiscuous mode [ 100.100320][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.107542][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.133712][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.157556][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.165039][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.172236][ T5635] bridge_slave_1: entered allmulticast mode [ 100.178902][ T5631] Bluetooth: hci1: command tx timeout [ 100.184758][ T5635] bridge_slave_1: entered promiscuous mode [ 100.202831][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.209856][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236096][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.334706][ T4941] Bluetooth: hci2: command tx timeout [ 100.340205][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.350535][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.352011][ T5631] Bluetooth: hci3: command tx timeout [ 100.427463][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.434871][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.442357][ T5640] bridge_slave_0: entered allmulticast mode [ 100.450797][ T5640] bridge_slave_0: entered promiscuous mode [ 100.460417][ T5635] team0: Port device team_slave_0 added [ 100.491023][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.498720][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.508279][ T5640] bridge_slave_1: entered allmulticast mode [ 100.517162][ T5640] bridge_slave_1: entered promiscuous mode [ 100.527807][ T5635] team0: Port device team_slave_1 added [ 100.551846][ T5630] hsr_slave_0: entered promiscuous mode [ 100.558946][ T5630] hsr_slave_1: entered promiscuous mode [ 100.592036][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.599697][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.607674][ T5638] bridge_slave_0: entered allmulticast mode [ 100.615573][ T5638] bridge_slave_0: entered promiscuous mode [ 100.625142][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.632336][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.639742][ T5638] bridge_slave_1: entered allmulticast mode [ 100.647471][ T5638] bridge_slave_1: entered promiscuous mode [ 100.706502][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.716505][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.723646][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.750306][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.783354][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.793465][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.800731][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.827517][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.853540][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.892155][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.917387][ T5640] team0: Port device team_slave_0 added [ 100.959890][ T5640] team0: Port device team_slave_1 added [ 100.987070][ T5638] team0: Port device team_slave_0 added [ 101.026857][ T5638] team0: Port device team_slave_1 added [ 101.058543][ T5635] hsr_slave_0: entered promiscuous mode [ 101.065533][ T5635] hsr_slave_1: entered promiscuous mode [ 101.071799][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 101.078537][ T5635] Cannot create hsr debugfs directory [ 101.095902][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.102882][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.129372][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.173474][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.180719][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.206916][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.237201][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.244537][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.270962][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.283818][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.291056][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.317858][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.455192][ T5640] hsr_slave_0: entered promiscuous mode [ 101.461877][ T5640] hsr_slave_1: entered promiscuous mode [ 101.468542][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 101.474388][ T5640] Cannot create hsr debugfs directory [ 101.516480][ T5638] hsr_slave_0: entered promiscuous mode [ 101.522967][ T5638] hsr_slave_1: entered promiscuous mode [ 101.529370][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 101.536848][ T5638] Cannot create hsr debugfs directory [ 101.827733][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.842106][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.850489][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.861386][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.869668][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.885746][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.922315][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.936060][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.057973][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.073050][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.082646][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.094870][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.103343][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.110467][ T5631] Bluetooth: hci0: command tx timeout [ 102.121508][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.130333][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.140272][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.251052][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.260580][ T5631] Bluetooth: hci1: command tx timeout [ 102.272241][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.282033][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.292446][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.301008][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.313456][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.321997][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.332356][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.415336][ T4941] Bluetooth: hci2: command tx timeout [ 102.420849][ T5631] Bluetooth: hci3: command tx timeout [ 102.442999][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.453786][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.463247][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.476864][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.485332][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.496093][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.504752][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.517918][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.621241][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.698278][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.713645][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.734899][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.742587][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.768453][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.775669][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.807842][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.842553][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.849742][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.860125][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.867304][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.890914][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.944894][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.985523][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.992705][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.016060][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.028309][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.035680][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.122292][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.188945][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.196217][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.238416][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.245692][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.177047][ T5631] Bluetooth: hci0: command tx timeout [ 104.210635][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.334663][ T5631] Bluetooth: hci1: command tx timeout [ 104.368012][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.391829][ T5630] veth0_vlan: entered promiscuous mode [ 104.424458][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.432663][ T5630] veth1_vlan: entered promiscuous mode [ 104.495323][ T5631] Bluetooth: hci3: command tx timeout [ 104.501315][ T5631] Bluetooth: hci2: command tx timeout [ 104.600983][ T5630] veth0_macvtap: entered promiscuous mode [ 104.636530][ T5630] veth1_macvtap: entered promiscuous mode [ 104.647165][ T5640] veth0_vlan: entered promiscuous mode [ 104.669333][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.685981][ T5635] veth0_vlan: entered promiscuous mode [ 104.709000][ T5640] veth1_vlan: entered promiscuous mode [ 104.723659][ T5635] veth1_vlan: entered promiscuous mode [ 104.755734][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.780022][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.831504][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.841174][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.860782][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.869843][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.913136][ T5640] veth0_macvtap: entered promiscuous mode [ 104.930958][ T5638] veth0_vlan: entered promiscuous mode [ 104.942550][ T5640] veth1_macvtap: entered promiscuous mode [ 104.961648][ T5635] veth0_macvtap: entered promiscuous mode [ 104.978444][ T5635] veth1_macvtap: entered promiscuous mode [ 105.012319][ T5638] veth1_vlan: entered promiscuous mode [ 105.092348][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.102054][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.125889][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.141444][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.151414][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.165346][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.217773][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.227759][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.250729][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.259814][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.274058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.282366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.298738][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.308329][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.335096][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.344314][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.384792][ T5638] veth0_macvtap: entered promiscuous mode [ 105.444260][ T5638] veth1_macvtap: entered promiscuous mode [ 105.498199][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.557185][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.578484][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.593041][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.682743][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.706974][ T5774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.747439][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.762104][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.784488][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.806006][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.815648][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.822575][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.888592][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.910317][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.978877][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.019276][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.151156][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.181485][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.254174][ T5631] Bluetooth: hci0: command tx timeout [ 106.362420][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.406579][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.415050][ T5631] Bluetooth: hci1: command tx timeout [ 106.574447][ T4941] Bluetooth: hci3: command tx timeout [ 106.580077][ T5631] Bluetooth: hci2: command tx timeout [ 107.932249][ T5831] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.991002][ T5631] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 110.312767][ T5915] capability: warning: `syz.2.72' uses 32-bit capabilities (legacy support in use) [ 110.529223][ T5922] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.110942][ T5631] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 119.785785][ T5631] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 122.606597][ T6309] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6309] [ 125.940959][ T5631] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 126.518424][ T5631] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 129.889175][ T6467] can: request_module (can-proto-5) failed. [ 132.764950][ T29] audit: type=1800 audit(1777878275.010:2): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.372" name="trace_pipe" dev="tracefs" ino=3468 res=0 errno=0 [ 133.152490][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165151][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.702102][ T29] audit: type=1800 audit(1777878277.950:3): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.421" name="members" dev="configfs" ino=10050 res=0 errno=0 [ 139.080812][ T6753] Unable to find swap-space signature [ 139.715238][ T29] audit: type=1800 audit(1777878281.960:4): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.487" name="members" dev="configfs" ino=11309 res=0 errno=0 [ 140.983264][ T6821] Unable to find swap-space signature [ 141.143783][ T6827] mmap: syz.1.511 (6827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.505353][ T29] audit: type=1326 audit(1777878283.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.0.519" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5e119cdd9 code=0x0 [ 142.854973][ T6882] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 145.228176][ T6932] syz_tun: tun_chr_ioctl cmd 2147767507 [ 149.311652][ T29] audit: type=1800 audit(1777880339.567:6): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.623" name="lu_gp_id" dev="configfs" ino=11716 res=0 errno=0 [ 153.784140][ T5631] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 156.529646][ T7334] nfs: Bad value for 'source' [ 159.512384][ T29] audit: type=1800 audit(1843104526.981:7): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.820" name="version" dev="configfs" ino=12844 res=0 errno=0 [ 160.835924][ T7498] Process accounting resumed [ 161.473210][ T7527] syz_tun: tun_chr_ioctl cmd 1074025675 [ 161.517959][ T7527] syz_tun: persist enabled [ 162.478533][ T5631] Bluetooth: hci1: unexpected subevent 0x03 length: 123 > 9 [ 166.090323][ T29] audit: type=1800 audit(1843104533.595:8): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.953" name="features" dev="configfs" ino=13208 res=0 errno=0 [ 167.651818][ T7714] kexec: Could not allocate control_code_buffer [ 171.633356][ T5631] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 173.352248][ T8035] Invalid ELF header magic: != ELF [ 173.449667][ T8040] syz_tun: tun_chr_ioctl cmd 2147767520 [ 175.007128][ T29] audit: type=1800 audit(4294967301.772:9): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name="dummy_udc" dev="gadgetfs" ino=6661 res=0 errno=0 [ 176.006859][ T8152] Invalid ELF header magic: != ELF [ 176.890604][ T5631] Bluetooth: hci2: unexpected event 0x01 length: 124 > 1 [ 178.107828][ T8252] ima: policy update failed [ 178.124381][ T29] audit: type=1802 audit(4294967304.927:10): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1220" res=0 errno=0 [ 178.745063][ T8280] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8280] [ 178.852319][ T5631] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 179.102661][ T4941] Bluetooth: hci1: unknown advertising packet type: 0xea [ 180.890427][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 182.040770][ T29] audit: type=1800 audit(4294967308.855:11): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1303" name="trace_pipe" dev="tracefs" ino=3506 res=0 errno=0 [ 182.964273][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 184.442413][ T8530] syz_tun: tun_chr_ioctl cmd 1074025677 [ 184.458658][ T8530] syz_tun: Linktype set failed because interface is up [ 185.625825][ T8544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.634015][ T8544] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.703818][ T8544] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.748314][ T8544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.754578][ T8544] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.780921][ T8544] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.813444][ T8544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.839386][ T8544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.871158][ T8544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.894617][ T8544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.910296][ T8544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.941653][ T8544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.437449][ T8620] Unable to find swap-space signature [ 186.616828][ T8626] syz.3.1402 (8626): attempted to duplicate a private mapping with mremap. This is not supported. [ 186.862621][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.706930][ T8679] syz_tun: tun_chr_ioctl cmd 1074025672 [ 187.738369][ T8679] syz_tun: ignored: set checksum disabled [ 187.817841][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.823983][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.897651][ T5631] Bluetooth: hci3: command 0x2016 tx timeout [ 188.785494][ T8732] Unable to find swap-space signature [ 188.942640][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.888333][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.894500][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.969045][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 190.630425][ T8760] kexec: Could not allocate control_code_buffer [ 190.970501][ T8803] Process accounting paused [ 191.003916][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.959550][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.965680][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.052650][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 192.732514][ T8826] kexec: Could not allocate control_code_buffer [ 192.926186][ T8893] syz_tun: tun_chr_ioctl cmd 1074025676 [ 192.937055][ T8893] syz_tun: owner set to 111 [ 193.027348][ T29] audit: type=1800 audit(4294967319.887:12): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1523" name="dbroot" dev="configfs" ino=17605 res=0 errno=0 [ 193.567652][ T29] audit: type=1800 audit(4294967320.429:13): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1536" name="features" dev="configfs" ino=17647 res=0 errno=0 [ 193.950353][ T8941] futex_wake_op: syz.1.1544 tries to shift op by -2048; fix this program [ 194.041662][ T8947] random: crng reseeded on system resumption [ 194.361038][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367530][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.287992][ T8967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.302844][ T8967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.320695][ T8967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.328037][ T8967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.540326][ T9013] __vm_enough_memory: pid: 9013, comm: syz.0.1580, bytes: 4398046511104 not enough memory for the allocation [ 195.705666][ T9019] random: crng reseeded on system resumption [ 196.225165][ T9040] __vm_enough_memory: pid: 9040, comm: syz.3.1593, bytes: 4398046511104 not enough memory for the allocation [ 196.290117][ T4941] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 196.297640][ T4941] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 196.507162][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.375028][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 197.381288][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.381313][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.734394][ T9163] syz_tun: tun_chr_ioctl cmd 1074025678 [ 198.758263][ T9163] syz_tun: group set to 23693 [ 200.264586][ T29] audit: type=1800 audit(4294967327.161:14): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1686" name="sr0" dev="devtmpfs" ino=2793 res=0 errno=0 [ 201.176174][ T9268] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 203.758917][ T9385] warning: `syz.1.1764' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.818353][ T9390] program syz.3.1766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.855406][ T9390] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 204.612524][ T9424] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 205.169363][ T5644] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 205.169406][ T5644] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 205.184954][ T5644] Bluetooth: hci2: Dropping invalid advertising data [ 205.191825][ T5644] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 205.191868][ T5644] Bluetooth: hci2: unknown advertising packet type: 0x8b [ 205.199154][ T5644] Bluetooth: hci2: unknown advertising packet type: 0xee [ 206.472220][ T29] audit: type=1804 audit(4294967333.390:15): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1822" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1082 res=1 errno=0 [ 208.527830][ T9606] bond0: invalid ARP target specified [ 210.064875][ T9680] syz.3.1908 uses obsolete (PF_INET,SOCK_PACKET) [ 210.318600][ T29] audit: type=1807 audit(4294967337.268:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 210.349850][ T9686] ima: policy update failed [ 210.362667][ T29] audit: type=1802 audit(4294967337.298:17): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1911" res=0 errno=0 [ 210.447432][ T29] audit: type=1802 audit(4294967337.328:18): pid=9686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1911" res=0 errno=0 [ 210.685775][ T9704] block2mtd: too many arguments [ 210.893599][ T9714] QAT: Stopping all acceleration devices. [ 213.926652][ T9807] usb usb4: usbfs: process 9807 (syz.2.1968) did not claim interface 0 before use [ 214.431757][ T9825] WARNING! power/level is deprecated; use power/control instead [ 216.877743][ T9901] sysfs_service_op_store: Client not running :-5: [ 217.204455][ T9907] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 219.134997][ T9986] bond0: option mode: unable to set because the bond device is up [ 219.470635][T10003] syz.3.2063 (10003): drop_caches: 0 [ 219.484107][T10004] sysfs_service_op_store: Client not running :-5: [ 220.008347][T10027] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 220.008347][T10027] M' is too long [ 220.037982][T10027] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 220.037982][T10027] W ' is too long [ 220.141249][ T29] audit: type=1800 audit(4294967347.134:19): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2079" name="dbroot" dev="configfs" ino=21012 res=0 errno=0 [ 220.837270][T10066] Process accounting resumed [ 222.014974][T10129] aoe: invalid device specification [ 223.936942][ T29] audit: type=1400 audit(4294967350.942:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10205 comm="syz.0.2163" [ 224.366015][T10221] [U] ^R [ 224.845220][ T29] audit: type=1800 audit(4294967351.866:21): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2182" name="dbroot" dev="configfs" ino=21812 res=0 errno=0 [ 224.891549][T10246] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 225.024705][ T29] audit: type=1400 audit(4294967352.047:22): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10249 comm="syz.1.2194" [ 225.913946][T10288] mmap: syz.1.2203 (10288): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 226.752587][T10327] block2mtd: device name too long [ 227.042124][T10339] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.2.2230: 7 [ 227.245404][T10353] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 229.150869][ T5644] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 232.483700][T10582] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 233.517560][T10619] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 233.539872][T10619] ep_00: uevent: failed to send synthetic uevent: -22 [ 234.730313][T10670] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x3-- guessing data in; [ 234.730313][T10670] program syz.3.2393 not setting count and/or reply_len properly [ 235.074084][T10679] cougar: G6 mapped to F18 [ 236.540574][T10741] bonding: no command found in bonding_masters - use +ifname or -ifname [ 237.349779][T10773] cougar: G6 mapped to F18 [ 238.008157][T10797] vhci_hcd vhci_hcd.2: invalid port number 16 [ 238.031546][T10797] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 238.774630][T10824] vivid-007: ================= START STATUS ================= [ 238.792875][T10824] vivid-007: Generate PTS: true [ 238.813661][T10824] vivid-007: Generate SCR: true [ 238.832653][T10824] tpg source WxH: 320x240 (Y'CbCr) [ 238.849731][T10824] tpg field: 1 [ 238.857724][T10824] tpg crop: (0,0)/320x240 [ 238.867100][T10824] tpg compose: (0,0)/320x240 [ 238.873946][T10824] tpg colorspace: 8 [ 238.878409][T10824] tpg transfer function: 0/0 [ 238.883141][T10824] tpg Y'CbCr encoding: 0/0 [ 238.892758][T10824] tpg quantization: 0/0 [ 238.905928][T10824] tpg RGB range: 0/2 [ 238.914099][T10824] vivid-007: ================== END STATUS ================== [ 240.040382][T10881] usb usb15: usbfs: process 10881 (syz.3.2497) did not claim interface 0 before use [ 240.228709][T10889] zram0: detected capacity change from 0 to 16 [ 240.575665][T10905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 240.719857][T10911] syz.1.2512 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 241.407712][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0da7a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 241.423382][ C0] Call Trace: [ 241.426699][ C0] [ 241.429585][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 241.436440][ C0] ? sched_clock+0x38/0x60 [ 241.440997][ C0] ? sched_clock_cpu+0x6c/0x570 [ 241.445914][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 241.451254][ C0] mce_cpu_restart+0xd5/0x1f0 [ 241.456035][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 241.462303][ C0] __sysvec_call_function_single+0x83/0x440 [ 241.468273][ C0] sysvec_call_function_single+0x9e/0xc0 [ 241.473962][ C0] [ 241.476926][ C0] [ 241.479886][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 241.485924][ C0] RIP: 0010:write_comp_data+0x40/0x90 [ 241.491374][ C0] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 cc 16 00 00 85 c0 74 f1 8b 87 a8 16 00 00 <83> f8 03 75 e6 48 8b 87 b0 16 00 00 8b bf ac 16 00 00 48 8b 30 48 [ 241.511046][ C0] RSP: 0018:ffffc90004f677a8 EFLAGS: 00000246 [ 241.517169][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8258d1f9 [ 241.525291][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880436e9ec0 [ 241.533317][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 241.541342][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880446d9880 [ 241.549356][ C0] R13: ffffea0001cd00c0 R14: ffff88802d881010 R15: 8000000073403027 [ 241.557377][ C0] ? __zap_vma_range+0x12d9/0x4bf0 [ 241.562632][ C0] __zap_vma_range+0x12d9/0x4bf0 [ 241.567647][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 241.573078][ C0] ? find_held_lock+0x2b/0x80 [ 241.577814][ C0] unmap_vmas+0x299/0x5f0 [ 241.582205][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 241.587102][ C0] ? mas_next_slot+0x10a3/0x1960 [ 241.592108][ C0] exit_mmap+0x1ef/0xa10 [ 241.596662][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 241.601470][ C0] ? trace_contention_end+0x122/0x170 [ 241.606898][ C0] ? uprobe_clear_state+0x5f/0x260 [ 241.612131][ C0] ? uprobe_clear_state+0x5f/0x260 [ 241.617288][ C0] ? __lock_acquire+0x4a5/0x2630 [ 241.622282][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 241.627969][ C0] __mmput+0x12a/0x410 [ 241.632092][ C0] mmput+0x67/0x80 [ 241.635868][ C0] do_exit+0x833/0x2a60 [ 241.640092][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 241.645518][ C0] ? __pfx_do_exit+0x10/0x10 [ 241.650169][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 241.655607][ C0] do_group_exit+0xd5/0x2a0 [ 241.660163][ C0] __x64_sys_exit_group+0x3e/0x50 [ 241.665248][ C0] x64_sys_call+0x102c/0x1530 [ 241.669968][ C0] do_syscall_64+0x10b/0xf80 [ 241.674603][ C0] ? clear_bhb_loop+0x40/0x90 [ 241.679429][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.685362][ C0] RIP: 0033:0x7f98ed39cdd9 [ 241.689817][ C0] Code: Unable to access opcode bytes at 0x7f98ed39cdaf. [ 241.697050][ C0] RSP: 002b:00007fffe985fec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 241.705607][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f98ed39cdd9 [ 241.713607][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.721610][ C0] RBP: 00007fffe985ff2c R08: 0000000000000000 R09: 00000000000927c0 [ 241.729612][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000024c [ 241.737617][ C0] R13: 00000000000927c0 R14: 000000000003afb6 R15: 00007fffe985ff80 [ 241.745641][ C0] [ 246.231617][T11060] Setting dangerous option i915.mitigations - tainting kernel [ 246.862777][T11090] kAFS: Invalid Command on /proc/fs/afs/cells file [ 247.108003][T11101] kafs: addr_prefs: Too many elements in string [ 247.633379][T11125] kAFS: Invalid Command on /proc/fs/afs/cells file [ 250.880077][T11286] Process accounting paused [ 250.976899][T11296] i2c i2c-0: new_device: Invalid device name [ 251.678843][T11329] vhci_hcd vhci_hcd.2: invalid port number 194 [ 251.707868][T11329] vhci_hcd vhci_hcd.2: invalid port number 194 [ 254.570845][T11473] vhci_hcd vhci_hcd.2: invalid port number 194 [ 254.601826][T11473] vhci_hcd vhci_hcd.2: invalid port number 194 [ 255.503301][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511464][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.572304][T11566] cougar: G6 mapped to space [ 258.046324][ T5644] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 258.998418][T11680] aoe: copy from user failed [ 259.019483][T11680] aoe: could not set interface list: too many interfaces [ 262.219313][T11832] scsi_mod.scan: string doesn't fit in 6 chars. [ 262.817770][T11856] kafs: addr_prefs: Invalid Command [ 263.136885][T11870] Setting dangerous option i915.mitigations - tainting kernel [ 267.245000][T12015] : Can't lookup blockdev [ 267.468627][T12017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.731622][T12017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.862552][T12017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.006923][T12017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.131774][ T5644] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 280.459068][T12574] block2mtd: illegal erase size [ 280.847842][T12593] Process accounting resumed [ 281.465530][T12623] CIFS: VFS: UNC: path must begin with // or \\ [ 281.472195][T12623] Malformed UNC in devname [ 281.472195][T12623] [ 281.482050][T12623] CIFS: VFS: Malformed UNC in devname [ 282.235579][T12648] hub 1-0:1.0: USB hub found [ 282.257569][T12648] hub 1-0:1.0: 1 port detected [ 282.996562][T12677] hub 1-0:1.0: USB hub found [ 283.014622][T12677] hub 1-0:1.0: 1 port detected [ 283.305070][T12694] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 283.701402][T12709] hub 1-0:1.0: USB hub found [ 283.712223][T12709] hub 1-0:1.0: 1 port detected [ 285.097381][T12768] queue_state_write: operation too long [ 285.137704][T12768] queue_state_write: use 'run', 'start' or 'kick' [ 285.535299][T12772] ceph: Failed to parse sending metrics switch value 'P^' [ 287.106393][T12852] queue_state_write: operation too long [ 287.112503][T12852] queue_state_write: use 'run', 'start' or 'kick' [ 288.843903][T12928] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.013853][T12938] hub 1-0:1.0: USB hub found [ 289.034597][T12938] hub 1-0:1.0: 1 port detected [ 289.402504][T12956] bond0: Unable to set down delay as MII monitoring is disabled [ 290.184370][ T29] audit: type=1800 audit(4294967364.014:23): pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3521" name="dbroot" dev="configfs" ino=31312 res=0 errno=0 [ 290.196676][T12997] db_root: cannot open: /dev/audio1 [ 290.211541][T12997] db_root: not a directory: /dev/audio1 [ 290.529681][T13003] hub 1-0:1.0: USB hub found [ 290.569912][T13003] hub 1-0:1.0: 1 port detected [ 294.965150][T13198] QAT: Device 250 not found [ 295.194964][T13211] program syz.3.3605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.225733][T13211] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.562573][T13259] tipc: Can't bind to reserved service type 63 [ 297.173618][T13283] kernel profiling enabled (shift: 0) [ 298.388689][T13334] block2mtd: Using custom MTD label '' for dev [ 298.407164][T13334] block2mtd: error: cannot open device [ 303.419523][T13586] : Can't lookup blockdev [ 303.898048][T13610] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 303.898889][T13609] ima: policy update failed [ 303.928101][ T29] audit: type=1802 audit(4294967377.828:24): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3796" res=0 errno=0 [ 305.057927][ T5644] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 306.322974][T13732] bond0: option packets_per_slave: invalid value ( Xnp) [ 306.331599][T13732] bond0: option packets_per_slave: allowed values 0 - 65535 [ 307.094115][T13766] : Can't lookup blockdev [ 307.245278][ T5644] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 307.451078][T13742] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 307.523628][T13779] [U] ^\ [ 307.719380][T13785] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 307.808675][ T5644] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 307.808722][ T5644] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 307.823800][ T5644] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 308.110790][ T5644] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 308.501625][T13817] ima: policy update failed [ 308.506517][ T29] audit: type=1802 audit(4294967382.430:25): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3894" res=0 errno=0 [ 308.762429][T13829] block2mtd: illegal erase size [ 309.125638][T13850] Invalid ELF header magic: != ELF [ 310.800072][T13940] Process accounting paused [ 313.690744][T14102] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 313.710597][T14102] cec cec26: uevent: failed to send synthetic uevent: -22 [ 314.289579][T14135] vmstat_refresh: nr_hugetlb -2048 [ 314.763542][T14162] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 314.822825][T14162] CIFS mount error: No usable UNC path provided in device string! [ 314.822825][T14162] [ 314.857127][T14162] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.231486][T14181] program syz.3.4072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.668019][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.674844][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.163459][T14254] nvme_fcloop: unknown parameter or missing value '' [ 317.986288][ T5644] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 318.322932][T14302] ubi1: attaching mtd0 [ 318.363076][T14302] ubi1 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 318.664899][ T5644] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 318.672528][ T5644] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 319.480502][ T5644] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 319.925551][T14353] syz.1.4149: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.942076][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.1.4149 Tainted: G U syzkaller #0 PREEMPT(full) [ 319.942128][T14353] Tainted: [U]=USER [ 319.942140][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.942161][T14353] Call Trace: [ 319.942171][T14353] [ 319.942184][T14353] dump_stack_lvl+0x100/0x190 [ 319.942230][T14353] warn_alloc.cold+0x95/0x1c1 [ 319.942267][T14353] ? __pfx_warn_alloc+0x10/0x10 [ 319.942327][T14353] ? __lock_acquire+0x4a5/0x2630 [ 319.942375][T14353] __vmalloc_node_range_noprof+0x136c/0x1630 [ 319.942431][T14353] ? rcu_is_watching+0x12/0xc0 [ 319.942472][T14353] ? trace_contention_end+0x122/0x170 [ 319.942509][T14353] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 319.942546][T14353] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 319.942578][T14353] ? find_held_lock+0x2b/0x80 [ 319.942620][T14353] ? tomoyo_path_number_perm+0x28f/0x580 [ 319.942654][T14353] ? tomoyo_path_number_perm+0x28f/0x580 [ 319.942692][T14353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.942740][T14353] ? __pfx___mutex_lock+0x10/0x10 [ 319.942795][T14353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.942829][T14353] ? futex_wait+0x11e/0x370 [ 319.942891][T14353] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 319.942926][T14353] __vmalloc_node_noprof+0xad/0xf0 [ 319.942973][T14353] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 319.943013][T14353] dvb_dvr_do_ioctl+0x15d/0x270 [ 319.943055][T14353] dvb_usercopy+0x167/0x340 [ 319.943087][T14353] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 319.943129][T14353] ? __pfx_dvb_usercopy+0x10/0x10 [ 319.943178][T14353] ? __fget_files+0x21f/0x3d0 [ 319.943227][T14353] dvb_dvr_ioctl+0x29/0x40 [ 319.943260][T14353] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 319.943294][T14353] __x64_sys_ioctl+0x18e/0x210 [ 319.943331][T14353] do_syscall_64+0x10b/0xf80 [ 319.943375][T14353] ? clear_bhb_loop+0x40/0x90 [ 319.943417][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.943452][T14353] RIP: 0033:0x7f98ed39cdd9 [ 319.943481][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.943514][T14353] RSP: 002b:00007f98ee316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.943547][T14353] RAX: ffffffffffffffda RBX: 00007f98ed615fa0 RCX: 00007f98ed39cdd9 [ 319.943568][T14353] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 319.943589][T14353] RBP: 00007f98ed432d69 R08: 0000000000000000 R09: 0000000000000000 [ 319.943608][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.943627][T14353] R13: 00007f98ed616038 R14: 00007f98ed615fa0 R15: 00007fffe985fb88 [ 319.943670][T14353] [ 319.943725][T14353] Mem-Info: [ 320.225288][T14353] active_anon:32709 inactive_anon:5 isolated_anon:0 [ 320.225288][T14353] active_file:7234 inactive_file:51726 isolated_file:0 [ 320.225288][T14353] unevictable:768 dirty:68 writeback:0 [ 320.225288][T14353] slab_reclaimable:11154 slab_unreclaimable:89197 [ 320.225288][T14353] mapped:34519 shmem:28825 pagetables:1511 [ 320.225288][T14353] sec_pagetables:0 bounce:0 [ 320.225288][T14353] kernel_misc_reclaimable:0 [ 320.225288][T14353] free:1106382 free_pcp:11422 free_cma:0 [ 320.295135][T14353] Node 0 active_anon:130436kB inactive_anon:20kB active_file:28936kB inactive_file:206672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138048kB dirty:272kB writeback:0kB shmem:113464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11164kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.390060][T14353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.470485][T14353] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.551401][T14353] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 320.577745][T14353] Node 0 DMA32 free:474092kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127304kB inactive_anon:20kB active_file:28936kB inactive_file:206672kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2537392kB mlocked:0kB bounce:0kB free_pcp:44172kB local_pcp:10304kB free_cma:0kB [ 320.699369][T14353] lowmem_reserve[]: 0 0 1 1 1 [ 320.718163][T14353] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 320.794992][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 320.818787][T14353] Node 1 Normal free:3936128kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5292kB local_pcp:3896kB free_cma:0kB [ 320.894178][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 320.899061][T14353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.914578][T14353] Node 0 DMA32: 333*4kB (UME) 9*8kB (UE) 1*16kB (M) 2*32kB (UM) 56*64kB (UME) 274*128kB (U) 248*256kB (UM) 176*512kB (UM) 90*1024kB (UME) 22*2048kB (UME) 34*4096kB (M) = 470220kB [ 320.947886][T14353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.987988][T14353] Node 1 Normal: 11*4kB (UM) 13*8kB (UM) 6*16kB (UM) 12*32kB (UM) 7*64kB (UM) 9*128kB (UM) 3*256kB (UM) 2*512kB (U) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936180kB [ 321.044744][T14353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.076548][T14353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.106354][T14353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.129901][T14353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.147842][T14353] 85184 total pagecache pages [ 321.154329][T14353] 0 pages in swap cache [ 321.163786][T14353] Free swap = 124996kB [ 321.171840][T14353] Total swap = 124996kB [ 321.179910][T14353] 2097051 pages RAM [ 321.187266][T14353] 0 pages HighMem/MovableOnly [ 321.198761][T14353] 430813 pages reserved [ 321.210072][T14353] 0 pages cma reserved [ 322.741168][T14434] CIFS mount error: No usable UNC path provided in device string! [ 322.741168][T14434] [ 322.780390][T14434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.323512][ T29] audit: type=1800 audit(4294967397.320:26): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4197" name="discovery_nqn" dev="configfs" ino=35720 res=0 errno=0 [ 324.388795][ T29] audit: type=1800 audit(4294967398.385:27): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4224" name="discovery_nqn" dev="configfs" ino=35903 res=0 errno=0 [ 325.054453][ T29] audit: type=1400 audit(4294967399.058:28): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=14544 comm="syz.3.4240" [ 328.082756][T14687] QAT: failed to copy from user cfg_data. [ 331.426661][ T5644] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 331.436089][ T5644] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 333.019887][T14766] ima: policy update failed [ 333.036945][ T29] audit: type=1802 audit(4294967407.075:29): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4347" res=0 errno=0 [ 333.236678][T14775] nvme_fcloop: unknown parameter or missing value '0' [ 333.284173][T14778] process 'syz.2.4352' launched '/dev/fd/3' with NULL argv: empty string added [ 333.516249][T14786] CIFS mount error: No usable UNC path provided in device string! [ 333.516249][T14786] [ 333.547118][T14786] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 333.870462][T14800] nvme_fcloop: unknown parameter or missing value '0' [ 334.939805][T14859] binder: binder_mmap: 14858 0-1000 bad vm_flags failed -1 [ 334.953124][T14857] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 335.607488][T14894] syz.1.4406 (14894): attempted to duplicate a private mapping with mremap. This is not supported. [ 335.862137][T14904] kfence: disabled [ 335.928540][ T29] audit: type=1800 audit(4294967409.979:30): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4416" name="members" dev="configfs" ino=37423 res=0 errno=0 [ 336.426396][T14938] bond0: invalid ARP target specified [ 336.563303][T14943] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 336.579973][ T29] audit: type=1107 audit(4294967410.632:31): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 336.719251][T14952] overlayfs: "check_copy_up" module option is obsolete [ 337.040121][T14970] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 337.349341][T14982] zram: Added device: zram1 [ 337.593212][T14997] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 337.958234][ T5644] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 337.970384][ T5644] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 338.071171][T15021] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 338.095647][T15023] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 338.848531][ T5631] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 338.856735][ T5631] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 340.289685][ T29] audit: type=1107 audit(4294967414.359:32): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 340.724659][T15112] Process accounting resumed [ 340.936512][ T29] audit: type=1107 audit(4294967415.002:33): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 342.762849][T15223] binder: 15222:15223 ioctl c0306201 0 returned -14 [ 343.022395][T15239] dyndbg: bad flag-op , at start of Ƶao)^itmk90}#s4 [ 343.051536][T15239] dyndbg: flags parse failed [ 343.063930][T15239] dyndbg: bad flag-op , at start of [ 343.069840][T15239] dyndbg: flags parse failed [ 343.194157][T15248] bond0: invalid ARP target specified [ 343.336119][ T5631] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 343.336164][ T5631] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 343.352035][ T5631] Bluetooth: hci3: Malformed LE Event: 0x1b [ 345.105469][T15359] syz.0.4631 uses obsolete (PF_INET,SOCK_PACKET) [ 345.657795][ T5631] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 345.783483][T15392] hub 3-0:1.0: USB hub found [ 345.809417][T15392] hub 3-0:1.0: 1 port detected [ 345.898482][T15392] usb usb3: authorized to connect [ 346.817674][T15433] RGB/YUV Input: ================= START STATUS ================= [ 346.826177][T15433] RGB/YUV Input: Test Pattern: 75% Colorbar [ 346.836259][T15433] RGB/YUV Input: Show Information: All [ 346.842380][T15433] RGB/YUV Input: Vertical Flip: false [ 346.849546][T15433] RGB/YUV Input: Horizontal Flip: false [ 346.855984][T15433] RGB/YUV Input: Brightness: 128 [ 346.862288][T15433] RGB/YUV Input: Contrast: 128 [ 346.867274][T15433] RGB/YUV Input: Hue: 0 [ 346.872019][T15433] RGB/YUV Input: Saturation: 128 [ 346.877557][T15433] RGB/YUV Input: Pixel Rate: 160000000 [ 346.883791][T15433] RGB/YUV Input: Horizontal Blanking: 800 [ 346.889927][T15433] RGB/YUV Input: Vertical Blanking: 3223 [ 346.896271][T15433] RGB/YUV Input: ================== END STATUS ================== [ 347.709190][ T5644] Bluetooth: hci3: command 0x2016 tx timeout [ 349.422410][T15541] QAT: failed to copy from user. [ 349.495670][ T29] audit: type=1326 audit(4294967423.603:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.4719" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dafb9cdd9 code=0x0 [ 349.652499][ T24] Process accounting resumed [ 349.776589][ T5631] Bluetooth: hci3: command 0x2016 tx timeout [ 350.768189][T15577] RGB/YUV Input: ================= START STATUS ================= [ 350.790535][T15577] RGB/YUV Input: Test Pattern: 75% Colorbar [ 350.801804][T15577] RGB/YUV Input: Show Information: All [ 350.833469][T15577] RGB/YUV Input: Vertical Flip: false [ 350.838963][T15577] RGB/YUV Input: Horizontal Flip: false [ 350.869386][T15581] vivid-007: ================= START STATUS ================= [ 350.882051][T15577] RGB/YUV Input: Brightness: 128 [ 350.887127][T15577] RGB/YUV Input: Contrast: 128 [ 350.902570][T15581] vivid-007: Enable Output Cropping: true [ 350.912642][T15577] RGB/YUV Input: Hue: 0 [ 350.922753][T15577] RGB/YUV Input: Saturation: 128 [ 350.936276][T15581] vivid-007: Enable Output Composing: true [ 350.941347][T15577] RGB/YUV Input: Pixel Rate: 160000000 [ 350.956569][T15577] RGB/YUV Input: Horizontal Blanking: 800 [ 350.960838][T15581] vivid-007: Enable Output Scaler: true [ 350.974453][T15577] RGB/YUV Input: Vertical Blanking: 3223 [ 350.996858][T15577] RGB/YUV Input: ================== END STATUS ================== [ 351.000151][T15581] vivid-007: Tx RGB Quantization Range: Automatic [ 351.019734][T15581] vivid-007: Transmit Mode: HDMI [ 351.035693][T15581] vivid-007: Hotplug Present: 0x00000000 [ 351.057330][T15581] vivid-007: RxSense Present: 0x00000000 [ 351.125820][T15581] vivid-007: EDID Present: 0x00000000 [ 351.169198][T15581] vivid-007: ================== END STATUS ================== [ 351.762454][T15604] RGB/YUV Input: ================= START STATUS ================= [ 351.777355][T15604] RGB/YUV Input: Test Pattern: 75% Colorbar [ 351.784866][T15604] RGB/YUV Input: Show Information: All [ 351.802876][T15604] RGB/YUV Input: Vertical Flip: false [ 351.817046][T15604] RGB/YUV Input: Horizontal Flip: false [ 351.826655][T15604] RGB/YUV Input: Brightness: 128 [ 351.838107][T15604] RGB/YUV Input: Contrast: 128 [ 351.848638][T15604] RGB/YUV Input: Hue: 0 [ 351.856888][T15604] RGB/YUV Input: Saturation: 128 [ 351.863154][ T29] audit: type=1800 audit(4294967425.984:35): pid=15606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4750" name="members" dev="configfs" ino=38742 res=0 errno=0 [ 351.897646][T15604] RGB/YUV Input: Pixel Rate: 160000000 [ 351.904411][T15604] RGB/YUV Input: Horizontal Blanking: 800 [ 351.911281][T15604] RGB/YUV Input: Vertical Blanking: 3223 [ 351.918643][T15604] RGB/YUV Input: ================== END STATUS ================== [ 352.123252][T15611] batman_adv: Routing algorithm '7' is not supported [ 352.899270][ T5644] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 353.568859][T15651] binder: 15650:15651 ioctl c0046209 0 returned -22 [ 354.060924][T15660] TCP: TCP_TX_DELAY enabled [ 354.952398][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.985150][T15687] vhci_hcd vhci_hcd.2: invalid port number 16 [ 354.991578][T15687] vhci_hcd vhci_hcd.2: invalid port number 16 [ 356.063455][T15743] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 357.031051][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 357.634360][T15802] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 358.407152][T15839] synth uevent: /bus/mei: unknown uevent action string [ 359.822833][T15918] ubi31: attaching mtd0 [ 359.842758][T15918] ubi31: scanning is finished [ 359.847693][T15918] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 359.885068][T15922] block2mtd: parameter too long [ 360.029671][T15918] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 360.690670][T15962] vhci_hcd vhci_hcd.2: invalid port number 253 [ 360.702038][T15962] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 361.147652][T15987] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 361.312061][T15997] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 361.508874][ T5631] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 362.360536][T16044] binder: 16043:16044 ioctl 541b 0 returned -22 [ 363.045796][T16084] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 363.045796][T16084] [ 363.552122][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.178408][T16123] QAT: failed to copy from user cfg_data. [ 364.922550][T16165] vivid-003: ================= START STATUS ================= [ 364.951158][T16165] vivid-003: Radio HW Seek Mode: Bounded [ 364.971404][T16165] vivid-003: Radio Programmable HW Seek: false [ 364.979749][T16165] vivid-003: RDS Rx I/O Mode: Block I/O [ 364.985808][T16165] vivid-003: Generate RBDS Instead of RDS: false [ 364.993834][T16165] vivid-003: RDS Reception: true [ 364.999762][T16165] vivid-003: RDS Program Type: 0 inactive [ 365.007760][T16165] vivid-003: RDS PS Name: inactive [ 365.017856][T16165] vivid-003: RDS Radio Text: inactive [ 365.032892][T16165] vivid-003: RDS Traffic Announcement: false inactive [ 365.044420][T16165] vivid-003: RDS Traffic Program: false inactive [ 365.067569][T16165] vivid-003: RDS Music: false inactive [ 365.081093][T16165] vivid-003: ================== END STATUS ================== [ 365.180567][T16173] zram: Can't change algorithm for initialized device [ 365.321587][T16175] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 365.348044][T16175] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 365.372384][T16175] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 365.391491][T16175] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 365.423019][T16175] page dumped because: unmovable page [ 365.431087][T16175] page_owner info is not present (never set?) [ 365.632026][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.177095][T16221] usb usb3: usbfs: process 16221 (syz.2.5047) did not claim interface 0 before use [ 367.287730][ T29] audit: type=1800 audit(4294967441.486:36): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5076" name="lu_gp_id" dev="configfs" ino=42017 res=0 errno=0 [ 367.466339][T16293] phram: not enough arguments [ 369.287874][T16390] ecryptfs_miscdev_write: Error while inspecting packet size [ 369.471508][T16401] binder: 16400:16401 ioctl 40046205 0 returned -22 [ 370.276746][T16442] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 370.688734][T16461] Process accounting paused [ 370.762423][T16470] ecryptfs_parse_packet_length: Error parsing packet length [ 370.770327][T16470] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 371.353795][T16497] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 371.511067][T16507] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 371.511067][T16507] program syz.0.5186 not setting count and/or reply_len properly [ 371.748675][T16515] : Can't lookup blockdev [ 376.174750][T16715] syz_tun: tun_chr_ioctl cmd 2147767517 [ 376.189473][T16717] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 376.373631][T16725] : Can't lookup blockdev [ 377.814613][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.822955][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.787321][T16832] kAFS: Invalid Command on /proc/fs/afs/cells file [ 379.933815][T16881] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 380.029431][T16881] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 380.040489][T16881] pci 0000:00:01.3: PCI INT A: no GSI [ 380.113715][T16885] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 380.495770][T16900] bcache: register_bcache() error : failed to open device [ 380.995925][T16928] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 383.219960][T17032] i2c i2c-0: new_device: Can't parse I2C address [ 383.354060][T17041] sg_write: data in/out 262364/16 bytes for SCSI command 0x61-- guessing data in; [ 383.354060][T17041] program syz.0.5443 not setting count and/or reply_len properly [ 384.484103][T17107] usb usb22: usbfs: process 17107 (syz.0.5476) did not claim interface 1 before use [ 384.778747][ T29] audit: type=1800 audit(4294967459.058:37): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5484" name="discovery_nqn" dev="configfs" ino=43854 res=0 errno=0 [ 386.244699][T17205] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 386.265095][T17205] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 387.143228][T17245] random: crng reseeded on system resumption [ 387.187620][T17245] Restarting kernel threads ... [ 387.198596][T17245] Done restarting kernel threads. [ 390.057894][T17376] random: crng reseeded on system resumption [ 390.072944][T17374] capability: warning: `syz.1.5606' uses deprecated v2 capabilities in a way that may be insecure [ 390.093271][T17376] Restarting kernel threads ... [ 390.101394][T17376] Done restarting kernel threads. [ 391.824416][ T29] audit: type=1806 audit(4294967466.132:38): xattr="" res=-22 [ 392.173672][T17464] vhci_hcd: not connected 4 [ 392.476227][T17481] syz_tun: tun_chr_ioctl cmd 35111 [ 393.563056][T17532] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 393.854772][T17539] smpboot: CPU 1 is now offline [ 394.465457][T17567] mmap: syz.2.5701 (17567) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 395.481492][T17604] usb usb13: check_ctrlrecip: process 17604 (syz.3.5718) requesting ep 01 but needs 81 [ 395.528229][T17604] usb usb13: usbfs: process 17604 (syz.3.5718) did not claim interface 0 before use [ 395.768353][T17616] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 395.926828][T17622] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 397.112893][T17656] kAFS: No cell specified [ 399.252326][T17731] syz_tun: tun_chr_ioctl cmd 21731 [ 400.071535][T17761] usbip-vudc usbip-vudc.0: gadget not bound [ 400.634690][T17776] Process accounting resumed [ 400.815551][T17787] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 403.342021][T17878] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 403.767448][T17895] ================================================================== [ 403.767465][T17895] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 403.767509][T17895] Write of size 8 at addr ffffc90004b59000 by task syz.3.5862/17895 [ 403.767529][T17895] [ 403.767542][T17895] CPU: 0 UID: 0 PID: 17895 Comm: syz.3.5862 Tainted: G U syzkaller #0 PREEMPT(full) [ 403.767577][T17895] Tainted: [U]=USER [ 403.767585][T17895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.767600][T17895] Call Trace: [ 403.767608][T17895] [ 403.767616][T17895] dump_stack_lvl+0x100/0x190 [ 403.767642][T17895] print_report+0x13d/0x4b0 [ 403.767678][T17895] ? _raw_spin_lock_irqsave+0x52/0x60 [ 403.767709][T17895] ? sys_fillrect+0x174a/0x1910 [ 403.767744][T17895] kasan_report+0xdf/0x1d0 [ 403.767773][T17895] ? sys_fillrect+0x174a/0x1910 [ 403.767812][T17895] sys_fillrect+0x174a/0x1910 [ 403.767853][T17895] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 403.767883][T17895] bit_clear+0x17d/0x220 [ 403.767911][T17895] ? __pfx_bit_clear+0x10/0x10 [ 403.767940][T17895] ? fb_get_color_depth+0x120/0x250 [ 403.767965][T17895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.768006][T17895] __fbcon_clear+0x633/0x760 [ 403.768031][T17895] ? __pfx_bit_clear+0x10/0x10 [ 403.768062][T17895] fbcon_scroll+0x48b/0x650 [ 403.768088][T17895] con_scroll+0x464/0x690 [ 403.768125][T17895] csi_ECMA.constprop.0+0x1238/0x3b60 [ 403.768164][T17895] ? find_held_lock+0x2b/0x80 [ 403.768197][T17895] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 403.768240][T17895] do_con_write+0x3946/0x4a10 [ 403.768276][T17895] ? trace_contention_end+0x122/0x170 [ 403.768302][T17895] ? __mutex_lock+0x26d/0x1b10 [ 403.768342][T17895] ? __pfx_do_con_write+0x10/0x10 [ 403.768393][T17895] con_write+0x23/0xb0 [ 403.768430][T17895] n_tty_write+0x431/0x11c0 [ 403.768461][T17895] ? __pfx_n_tty_write+0x10/0x10 [ 403.768485][T17895] ? trace_kmalloc+0xe3/0x110 [ 403.768517][T17895] ? __pfx_woken_wake_function+0x10/0x10 [ 403.768548][T17895] ? rcu_is_watching+0x12/0xc0 [ 403.768576][T17895] ? file_tty_write.isra.0+0x694/0x890 [ 403.768613][T17895] ? kfree+0x1dd/0x6c0 [ 403.768647][T17895] ? __pfx_n_tty_write+0x10/0x10 [ 403.768672][T17895] file_tty_write.isra.0+0x4d2/0x890 [ 403.768713][T17895] redirected_tty_write+0xd4/0x120 [ 403.768749][T17895] vfs_write+0x6ac/0x1070 [ 403.768777][T17895] ? __pfx_redirected_tty_write+0x10/0x10 [ 403.768816][T17895] ? __pfx_vfs_write+0x10/0x10 [ 403.768842][T17895] ? find_held_lock+0x2b/0x80 [ 403.768884][T17895] ksys_write+0x12a/0x250 [ 403.768911][T17895] ? __pfx_ksys_write+0x10/0x10 [ 403.768940][T17895] ? rcu_is_watching+0x12/0xc0 [ 403.768971][T17895] do_syscall_64+0x10b/0xf80 [ 403.769002][T17895] ? clear_bhb_loop+0x40/0x90 [ 403.769030][T17895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.769055][T17895] RIP: 0033:0x7f11e5b9cdd9 [ 403.769074][T17895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.769098][T17895] RSP: 002b:00007f11e6998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.769121][T17895] RAX: ffffffffffffffda RBX: 00007f11e5e15fa0 RCX: 00007f11e5b9cdd9 [ 403.769138][T17895] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 403.769153][T17895] RBP: 00007f11e5c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 403.769168][T17895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.769183][T17895] R13: 00007f11e5e16038 R14: 00007f11e5e15fa0 R15: 00007ffe4a70c7e8 [ 403.769207][T17895] [ 403.769215][T17895] [ 403.769222][T17895] The buggy address belongs to a vmalloc virtual mapping [ 403.769239][T17895] Memory state around the buggy address: [ 403.769252][T17895] ffffc90004b58f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.769270][T17895] ffffc90004b58f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.769287][T17895] >ffffc90004b59000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.769300][T17895] ^ [ 403.769312][T17895] ffffc90004b59080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.769330][T17895] ffffc90004b59100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.769343][T17895] ================================================================== [ 403.786623][T17895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.786646][T17895] CPU: 0 UID: 0 PID: 17895 Comm: syz.3.5862 Tainted: G U syzkaller #0 PREEMPT(full) [ 403.786682][T17895] Tainted: [U]=USER [ 403.786690][T17895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.786705][T17895] Call Trace: [ 403.786713][T17895] [ 403.786723][T17895] dump_stack_lvl+0x100/0x190 [ 403.786753][T17895] vpanic+0x552/0x970 [ 403.786777][T17895] ? __pfx_vpanic+0x10/0x10 [ 403.786804][T17895] ? sys_fillrect+0x174a/0x1910 [ 403.786839][T17895] panic+0xd1/0xe0 [ 403.786861][T17895] ? __pfx_panic+0x10/0x10 [ 403.786887][T17895] ? sys_fillrect+0x174a/0x1910 [ 403.786922][T17895] ? preempt_schedule_common+0x42/0xc0 [ 403.786957][T17895] check_panic_on_warn.cold+0x19/0x34 [ 403.786983][T17895] end_report.part.0+0x3a/0x90 [ 403.787019][T17895] kasan_report.cold+0xe/0x18 [ 403.787056][T17895] ? sys_fillrect+0x174a/0x1910 [ 403.787095][T17895] sys_fillrect+0x174a/0x1910 [ 403.787137][T17895] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 403.787167][T17895] bit_clear+0x17d/0x220 [ 403.787195][T17895] ? __pfx_bit_clear+0x10/0x10 [ 403.787224][T17895] ? fb_get_color_depth+0x120/0x250 [ 403.787250][T17895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.787290][T17895] __fbcon_clear+0x633/0x760 [ 403.787316][T17895] ? __pfx_bit_clear+0x10/0x10 [ 403.787347][T17895] fbcon_scroll+0x48b/0x650 [ 403.787382][T17895] con_scroll+0x464/0x690 [ 403.787419][T17895] csi_ECMA.constprop.0+0x1238/0x3b60 [ 403.787459][T17895] ? find_held_lock+0x2b/0x80 [ 403.787492][T17895] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 403.787535][T17895] do_con_write+0x3946/0x4a10 [ 403.787572][T17895] ? trace_contention_end+0x122/0x170 [ 403.787598][T17895] ? __mutex_lock+0x26d/0x1b10 [ 403.787638][T17895] ? __pfx_do_con_write+0x10/0x10 [ 403.787683][T17895] con_write+0x23/0xb0 [ 403.787720][T17895] n_tty_write+0x431/0x11c0 [ 403.787751][T17895] ? __pfx_n_tty_write+0x10/0x10 [ 403.787776][T17895] ? trace_kmalloc+0xe3/0x110 [ 403.787805][T17895] ? __pfx_woken_wake_function+0x10/0x10 [ 403.787835][T17895] ? rcu_is_watching+0x12/0xc0 [ 403.787864][T17895] ? file_tty_write.isra.0+0x694/0x890 [ 403.787901][T17895] ? kfree+0x1dd/0x6c0 [ 403.787935][T17895] ? __pfx_n_tty_write+0x10/0x10 [ 403.787961][T17895] file_tty_write.isra.0+0x4d2/0x890 [ 403.788002][T17895] redirected_tty_write+0xd4/0x120 [ 403.788039][T17895] vfs_write+0x6ac/0x1070 [ 403.788067][T17895] ? __pfx_redirected_tty_write+0x10/0x10 [ 403.788106][T17895] ? __pfx_vfs_write+0x10/0x10 [ 403.788137][T17895] ? find_held_lock+0x2b/0x80 [ 403.788179][T17895] ksys_write+0x12a/0x250 [ 403.788206][T17895] ? __pfx_ksys_write+0x10/0x10 [ 403.788235][T17895] ? rcu_is_watching+0x12/0xc0 [ 403.788267][T17895] do_syscall_64+0x10b/0xf80 [ 403.788299][T17895] ? clear_bhb_loop+0x40/0x90 [ 403.788327][T17895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.788358][T17895] RIP: 0033:0x7f11e5b9cdd9 [ 403.788378][T17895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.788402][T17895] RSP: 002b:00007f11e6998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.788425][T17895] RAX: ffffffffffffffda RBX: 00007f11e5e15fa0 RCX: 00007f11e5b9cdd9 [ 403.788442][T17895] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 403.788458][T17895] RBP: 00007f11e5c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 403.788474][T17895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.788489][T17895] R13: 00007f11e5e16038 R14: 00007f11e5e15fa0 R15: 00007ffe4a70c7e8 [ 403.788514][T17895] [ 403.788584][T17895] Kernel Offset: disabled