last executing test programs: 1.493758939s ago: executing program 3 (id=4940): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000240)='}[,&*}\x00', 0x8002, &(0x7f0000000280)={0xa, 0x1fe, 0xd, @raw=0x3d77}, 0x7) 1.19719664s ago: executing program 1 (id=4946): r0 = socket(0x1e, 0x4, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x3}}, 0x10) 1.135989941s ago: executing program 3 (id=4948): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='8', 0x1) 1.035975492s ago: executing program 1 (id=4950): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x2c00, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 899.401923ms ago: executing program 3 (id=4953): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x1000, 0x401000, 0x4) 897.020044ms ago: executing program 1 (id=4954): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 832.405411ms ago: executing program 2 (id=4956): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) 750.560827ms ago: executing program 0 (id=4957): r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r0, 0x0, 0x0) 744.673226ms ago: executing program 1 (id=4958): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000000c0)='Y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xe21\xdeD\x82\xed\xdbJ\xda^\xceY\xa4\xbe\x06\x7fKE\xa2\xa5\v\"e\xe4\xb9\xe2\t\a_\xe5\xd0\xfd\xbb\xdb\xba{4\xba\x85\x85\x18\xbbQ\x85\xfeG<\xdd\xb1XS\xc3\xaa\xce\xf9\x87\xc1\x18\xb48\x7f\xec\x94\\5\x98\x1fl\x9d\xe0m\'\xc2v9\xce\x14d3\xf4M\xe3\xf9\x1bY\x9c\xbei|\xd0\xa7Q\x03?\x97(b\xb9\x8bK$\x96%\x9aBUw\xd9\f\xd8h\x96u\xe8\xf4@\xdb\xc7\xfe\xd7\xa0\n0\xbc\x82\xea', 0x7) 629.067943ms ago: executing program 2 (id=4959): r0 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r0, &(0x7f0000000100)=""/78, 0x4e) 596.877579ms ago: executing program 0 (id=4960): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x60400, 0x0) read$auto(r0, 0x0, 0x0) 574.509885ms ago: executing program 3 (id=4961): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x482, 0x400, 0x9}]}) 476.120231ms ago: executing program 2 (id=4962): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) 461.505993ms ago: executing program 0 (id=4963): r0 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000200)=""/36, 0x24) 333.244027ms ago: executing program 2 (id=4964): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 308.528735ms ago: executing program 3 (id=4965): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/dirty_bytes\x00', 0x141241, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 305.201569ms ago: executing program 0 (id=4966): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop8\x00', 0x2c381, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 200.232522ms ago: executing program 1 (id=4967): r0 = fanotify_init$auto(0x5, 0x1) fanotify_mark$auto(r0, 0x205, 0x100002, 0x4, 0x0) 160.8692ms ago: executing program 2 (id=4968): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000040)='noadinicb', 0x7f) 148.469489ms ago: executing program 0 (id=4969): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 74.685947ms ago: executing program 3 (id=4970): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r0, r0, 0x0, 0x3fffff) 46.287563ms ago: executing program 1 (id=4971): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x121041, 0x0) write$auto(r0, &(0x7f0000000080)='/sys/kernel/security\xf9\x1cntegrity/evm/evm_xat\x99rs\x00B\b\xbd\x9f\x15\x81\x15\xb6h\xae', 0x1000000006) 20.603164ms ago: executing program 2 (id=4972): r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x60041, 0x0) write$auto_drm_connector_fops_drm_debugfs(r0, &(0x7f0000001240)="b3827964b69f25ba34ba41a7", 0xc) 0s ago: executing program 0 (id=4973): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 71.403864][ T5813] cgroup: Unknown subsys name 'net' [ 71.510417][ T5813] cgroup: Unknown subsys name 'cpuset' [ 71.519327][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.953536][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.417007][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.753889][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.762883][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.774011][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.782654][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.790943][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.287633][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.296210][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.310778][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.320623][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.330242][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.354902][ T6011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.373160][ T6013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.382694][ T6013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.390625][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.398654][ T6016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.399981][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.413966][ T6016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.418076][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.429365][ T6016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.430222][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.438347][ T6016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.444560][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.458358][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.485804][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.503386][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.238395][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 82.352192][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 82.376212][ T6007] chnl_net:caif_netlink_parms(): no params data found [ 82.479528][ T6009] chnl_net:caif_netlink_parms(): no params data found [ 82.563120][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.570958][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.579006][ T6008] bridge_slave_0: entered allmulticast mode [ 82.586065][ T6008] bridge_slave_0: entered promiscuous mode [ 82.625971][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.633479][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.640778][ T6008] bridge_slave_1: entered allmulticast mode [ 82.648378][ T6008] bridge_slave_1: entered promiscuous mode [ 82.738237][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.745380][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.753250][ T6005] bridge_slave_0: entered allmulticast mode [ 82.760565][ T6005] bridge_slave_0: entered promiscuous mode [ 82.777553][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.784687][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.792243][ T6007] bridge_slave_0: entered allmulticast mode [ 82.800036][ T6007] bridge_slave_0: entered promiscuous mode [ 82.811035][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.821215][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.828420][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.835644][ T6005] bridge_slave_1: entered allmulticast mode [ 82.842902][ T6005] bridge_slave_1: entered promiscuous mode [ 82.860888][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.868377][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.875716][ T6007] bridge_slave_1: entered allmulticast mode [ 82.882981][ T6007] bridge_slave_1: entered promiscuous mode [ 82.892558][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.922703][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.930278][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.937609][ T6009] bridge_slave_0: entered allmulticast mode [ 82.944681][ T6009] bridge_slave_0: entered promiscuous mode [ 82.982092][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.989513][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.996650][ T6009] bridge_slave_1: entered allmulticast mode [ 83.006328][ T6009] bridge_slave_1: entered promiscuous mode [ 83.028204][ T6008] team0: Port device team_slave_0 added [ 83.036392][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.058700][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.071250][ T6008] team0: Port device team_slave_1 added [ 83.079568][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.116093][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.146235][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.179972][ T6005] team0: Port device team_slave_0 added [ 83.186533][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.193803][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.219918][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.234314][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.255895][ T6005] team0: Port device team_slave_1 added [ 83.270806][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.277943][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.304166][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.331706][ T6007] team0: Port device team_slave_0 added [ 83.340757][ T6007] team0: Port device team_slave_1 added [ 83.391914][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.399025][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.425373][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.438016][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.445061][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.471353][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.489298][ T6011] Bluetooth: hci0: command tx timeout [ 83.500701][ T6009] team0: Port device team_slave_0 added [ 83.515847][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.523035][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.549178][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.557252][ T5148] Bluetooth: hci1: command tx timeout [ 83.565493][ T5148] Bluetooth: hci3: command tx timeout [ 83.572020][ T6011] Bluetooth: hci2: command tx timeout [ 83.573454][ T6009] team0: Port device team_slave_1 added [ 83.598466][ T6008] hsr_slave_0: entered promiscuous mode [ 83.604949][ T6008] hsr_slave_1: entered promiscuous mode [ 83.612619][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.620045][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.646214][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.679152][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.686112][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.712113][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.753641][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.760929][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.786875][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.842113][ T6005] hsr_slave_0: entered promiscuous mode [ 83.848406][ T6005] hsr_slave_1: entered promiscuous mode [ 83.854477][ T6005] debugfs: 'hsr0' already exists in 'hsr' [ 83.860439][ T6005] Cannot create hsr debugfs directory [ 83.880464][ T6007] hsr_slave_0: entered promiscuous mode [ 83.886896][ T6007] hsr_slave_1: entered promiscuous mode [ 83.893212][ T6007] debugfs: 'hsr0' already exists in 'hsr' [ 83.899005][ T6007] Cannot create hsr debugfs directory [ 83.975630][ T6009] hsr_slave_0: entered promiscuous mode [ 83.982394][ T6009] hsr_slave_1: entered promiscuous mode [ 83.989499][ T6009] debugfs: 'hsr0' already exists in 'hsr' [ 83.995240][ T6009] Cannot create hsr debugfs directory [ 84.418596][ T6008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.434713][ T6008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.448577][ T6008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.460057][ T6008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.535505][ T6007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.545955][ T6007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.573340][ T6007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.585541][ T6007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.676960][ T6005] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.702231][ T6005] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.712132][ T6005] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.745454][ T6005] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.812449][ T6009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.822489][ T6009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.832559][ T6009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.843624][ T6009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.885747][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.941970][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.955700][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.978335][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.985674][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.009860][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.017006][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.044109][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.071494][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.078688][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.106818][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.113998][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.169523][ T6008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.209952][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.222609][ T6007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.234515][ T6007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.341381][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.366329][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.386785][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.394036][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.429784][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.436982][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.478447][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.523760][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.531024][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.562727][ T6011] Bluetooth: hci0: command tx timeout [ 85.563408][ T6005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.582373][ T6005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.614418][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.621561][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.640416][ T6011] Bluetooth: hci2: command tx timeout [ 85.645883][ T6011] Bluetooth: hci3: command tx timeout [ 85.653725][ T5148] Bluetooth: hci1: command tx timeout [ 85.663478][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.793973][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.824487][ T6008] veth0_vlan: entered promiscuous mode [ 85.850917][ T6008] veth1_vlan: entered promiscuous mode [ 85.951775][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.974911][ T6008] veth0_macvtap: entered promiscuous mode [ 86.004971][ T6008] veth1_macvtap: entered promiscuous mode [ 86.027559][ T6007] veth0_vlan: entered promiscuous mode [ 86.052386][ T6007] veth1_vlan: entered promiscuous mode [ 86.080813][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.114951][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.150701][ T6005] veth0_vlan: entered promiscuous mode [ 86.177389][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186659][ T6007] veth0_macvtap: entered promiscuous mode [ 86.202060][ T6007] veth1_macvtap: entered promiscuous mode [ 86.209811][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219825][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.238771][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.255404][ T6005] veth1_vlan: entered promiscuous mode [ 86.295942][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.324170][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.338650][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.392107][ T1116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402282][ T1116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.419876][ T1116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.428908][ T1116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.454496][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.471777][ T6005] veth0_macvtap: entered promiscuous mode [ 86.477849][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.509234][ T6005] veth1_macvtap: entered promiscuous mode [ 86.591923][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.603893][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.612195][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.632449][ T6009] veth0_vlan: entered promiscuous mode [ 86.647526][ T6009] veth1_vlan: entered promiscuous mode [ 86.663625][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.709582][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.732920][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.743589][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.760696][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.784463][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.801135][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.840058][ T1222] cfg80211: failed to load regulatory.db [ 86.879645][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.883851][ T6009] veth0_macvtap: entered promiscuous mode [ 86.912747][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.950191][ T6009] veth1_macvtap: entered promiscuous mode [ 87.093480][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.152783][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.191261][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.207372][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.241196][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.257385][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.328574][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.346840][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.489059][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.497096][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.577377][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.585242][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.637129][ T5148] Bluetooth: hci0: command tx timeout [ 87.717511][ T5148] Bluetooth: hci1: command tx timeout [ 87.722944][ T5148] Bluetooth: hci3: command tx timeout [ 87.728847][ T6011] Bluetooth: hci2: command tx timeout [ 87.805742][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.874684][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.201204][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.722613][ T5148] Bluetooth: hci0: command tx timeout [ 89.798232][ T5148] Bluetooth: hci3: command tx timeout [ 89.803711][ T6016] Bluetooth: hci2: command tx timeout [ 89.810199][ T6016] Bluetooth: hci1: command tx timeout [ 95.156519][ T6481] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.263660][ T6485] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.995638][ T6727] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.464197][ T6749] Invalid ELF header magic: != ELF [ 102.357511][ T6841] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.859192][ T6863] can: request_module (can-proto-5) failed. [ 103.108987][ T5148] Bluetooth: hci0: unknown advertising packet type: 0xea [ 104.181991][ T6933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.847231][ T7075] mmap: syz.1.593 (7075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.087126][ T5148] Bluetooth: hci2: unexpected event 0x22 length: 726 > 260 [ 107.087179][ T5148] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 108.470082][ T7153] ptrace attach of "./syz-executor exec"[6009] was attempted by "./syz-executor exec"[7153] [ 109.244627][ T5148] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 109.444135][ T7198] Process accounting resumed [ 110.232177][ T30] audit: type=1800 audit(1843106587.287:2): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.678" name="features" dev="configfs" ino=12166 res=0 errno=0 [ 112.661809][ T5148] Bluetooth: hci2: unexpected event 0x3c length: 254 > 7 [ 114.485613][ T7450] Unable to find swap-space signature [ 116.920563][ T30] audit: type=1800 audit(1843106594.022:3): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.839" name="members" dev="configfs" ino=13697 res=0 errno=0 [ 117.310410][ T30] audit: type=1326 audit(1843106594.393:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.1.850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55c659c819 code=0x0 [ 117.808571][ T7621] syz.0.864 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.838113][ T7623] random: crng reseeded on system resumption [ 121.378443][ T7693] kexec: Could not allocate control_code_buffer [ 121.753892][ T30] audit: type=1800 audit(1843124942.876:5): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.953" name="trace_pipe" dev="tracefs" ino=559 res=0 errno=0 [ 123.821931][ T30] audit: type=1800 audit(1843124944.947:6): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1005" name="features" dev="configfs" ino=14413 res=0 errno=0 [ 124.321568][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 720 > 260 [ 124.758981][ T30] audit: type=1800 audit(1843124945.892:7): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="lu_gp_id" dev="configfs" ino=14432 res=0 errno=0 [ 126.069045][ T7915] kexec: Could not allocate control_code_buffer [ 126.541217][ T8016] syz_tun: tun_chr_ioctl cmd 1074025675 [ 126.563680][ T8016] syz_tun: persist enabled [ 128.249601][ T8020] kexec: Could not allocate control_code_buffer [ 129.781535][ T8168] syz_tun: tun_chr_ioctl cmd 1074025680 [ 130.675258][ T8207] capability: warning: `syz.1.1153' uses deprecated v2 capabilities in a way that may be insecure [ 132.756505][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765746][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114261][ T8336] syz_tun: tun_chr_ioctl cmd 1074025677 [ 133.120128][ T8336] syz_tun: Linktype set failed because interface is up [ 134.330021][ T8389] Unable to find swap-space signature [ 138.438360][ T8529] futex_wake_op: syz.3.1310 tries to shift op by -2048; fix this program [ 139.486676][ T8560] Process accounting paused [ 141.432481][ T5148] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 144.445229][ T5148] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 146.966959][ T5148] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 150.678987][ T30] audit: type=1800 audit(4294968330.555:8): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1558" name="trace_pipe" dev="tracefs" ino=604 res=0 errno=0 [ 151.085000][ T9052] ptrace attach of "./syz-executor exec"[6009] was attempted by "./syz-executor exec"[9052] [ 151.179394][ T9057] futex_wake_op: syz.0.1571 tries to shift op by -1; fix this program [ 151.448082][ T9070] __vm_enough_memory: pid: 9070, comm: syz.3.1578, bytes: 4398046511104 not enough memory for the allocation [ 152.403212][ T9126] syz_tun: tun_chr_ioctl cmd 1074025678 [ 152.409003][ T9126] syz_tun: group set to 23693 [ 154.296079][ T9229] nfs: Bad value for 'source' [ 155.985999][ T30] audit: type=1800 audit(4294968335.903:9): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1703" name="version" dev="configfs" ino=18705 res=0 errno=0 [ 156.262320][ T9335] ======================================================= [ 156.262320][ T9335] WARNING: The mand mount option has been deprecated and [ 156.262320][ T9335] and is ignored by this kernel. Remove the mand [ 156.262320][ T9335] option from the mount to silence this warning. [ 156.262320][ T9335] ======================================================= [ 156.692430][ T5148] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 157.050330][ T9378] queue_state_write: operation too long [ 157.121407][ T9378] queue_state_write: use 'run', 'start' or 'kick' [ 159.509394][ T9511] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 160.736877][ T9582] kfence: disabled [ 160.743255][ T9581] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.301176][ T9608] binder: binder_mmap: 9607 0-1000 bad vm_flags failed -1 [ 161.691254][ T9627] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 161.704276][ T9627] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 163.366157][ T9703] kafs: addr_prefs: Invalid Command [ 163.663027][ T9716] WARNING! power/level is deprecated; use power/control instead [ 163.943972][ T9727] delete_channel: no stack [ 165.583444][ T5148] Bluetooth: hci0: Malformed LE Event: 0x1d [ 165.834051][ T9805] ptrace attach of "./syz-executor exec"[6009] was attempted by ""[9805] [ 166.630985][ T9842] syz.1.1960 (9842): drop_caches: 0 [ 167.592806][ T9894] __vm_enough_memory: pid: 9894, comm: syz.1.1987, bytes: 9223372036854775808 not enough memory for the allocation [ 169.483469][ T9982] Process accounting resumed [ 171.337521][T10087] hub 1-0:1.0: USB hub found [ 171.356276][T10087] hub 1-0:1.0: 1 port detected [ 171.530136][T10094] i2c i2c-0: new_device: Missing parameters [ 171.671670][T10073] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 171.776332][T10099] vhci_hcd vhci_hcd.1: invalid port number 14 [ 172.291426][T10133] [U] ^R [ 172.661863][T10151] cougar: G6 mapped to F18 [ 172.811897][T10159] nvme_fcloop: unknown parameter or missing value '1' [ 172.873065][T10163] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.954257][T10167] kAFS: Invalid Command on /proc/fs/afs/cells file [ 173.645739][T10205] kAFS: Invalid Command on /proc/fs/afs/cells file [ 175.310419][T10296] vivid-007: ================= START STATUS ================= [ 175.322815][T10296] vivid-007: Generate PTS: true [ 175.328037][T10296] vivid-007: Generate SCR: true [ 175.333749][T10296] tpg source WxH: 320x240 (Y'CbCr) [ 175.339546][T10296] tpg field: 1 [ 175.342951][T10296] tpg crop: (0,0)/320x240 [ 175.347919][T10296] tpg compose: (0,0)/320x240 [ 175.352776][T10296] tpg colorspace: 8 [ 175.364210][T10296] tpg transfer function: 0/0 [ 175.368839][T10296] tpg Y'CbCr encoding: 0/0 [ 175.384194][T10296] tpg quantization: 0/0 [ 175.391145][T10296] tpg RGB range: 0/2 [ 175.403959][T10296] vivid-007: ================== END STATUS ================== [ 176.327845][T10354] : Can't lookup blockdev [ 177.281027][T10417] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 177.654921][T10441] bond0: invalid ARP target specified [ 178.639754][T10487] could not allocate digest TFM handle [ 178.761792][T10501] hub 1-0:1.0: USB hub found [ 178.772869][T10501] hub 1-0:1.0: 1 port detected [ 180.915741][T10626] warning: `syz.0.2340' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.336932][T10696] blkio.reset_stats is deprecated [ 182.345457][T10697] binder: 10695:10697 ioctl 40046205 0 returned -22 [ 182.480193][T10701] random: crng reseeded on system resumption [ 183.704590][ T5148] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 185.475165][T10834] vhci_hcd vhci_hcd.2: invalid port number 253 [ 185.503360][T10834] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 185.740707][ T6011] Bluetooth: hci1: command 0x2016 tx timeout [ 186.023664][T10865] nfsd: Unknown parameter 'ԣ' [ 187.212931][T10935] sd 0:0:1:0: PR command failed: 1026 [ 187.242859][T10935] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 187.260565][T10935] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 187.325115][ T5148] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 187.810052][ T6016] Bluetooth: hci1: command 0x2016 tx timeout [ 188.298060][T11013] [U]  [ 188.371236][ T6011] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 189.402047][ T6016] Bluetooth: hci3: command 0x2016 tx timeout [ 190.091718][T11145] sysfs_service_op_store: Client not running :-5: [ 190.437815][ T6011] Bluetooth: hci2: command 0x2016 tx timeout [ 190.502042][ T6016] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 191.125167][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 191.133100][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 191.144475][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 191.144514][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.144535][ T51] Workqueue: hci3 hci_rx_work [ 191.144584][ T51] Call Trace: [ 191.144594][ T51] [ 191.144604][ T51] dump_stack_lvl+0x100/0x190 [ 191.144650][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 191.144689][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 191.144730][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.144770][ T51] ? find_held_lock+0x2b/0x80 [ 191.144798][ T51] ? kobject_add_internal+0x25f/0x930 [ 191.144831][ T51] ? kobject_add_internal+0x25f/0x930 [ 191.144869][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 191.144913][ T51] kobject_add_internal+0x2c8/0x930 [ 191.144963][ T51] kobject_add+0x16a/0x1e0 [ 191.144997][ T51] ? __pfx_kobject_add+0x10/0x10 [ 191.145029][ T51] ? class_to_subsys+0x10f/0x150 [ 191.145075][ T51] ? kobject_put+0xb9/0x640 [ 191.145105][ T51] ? _raw_spin_unlock+0x28/0x50 [ 191.145157][ T51] device_add+0x294/0x1950 [ 191.145195][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 191.145238][ T51] ? __pfx_device_add+0x10/0x10 [ 191.145276][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 191.145327][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 191.145373][ T51] le_conn_complete_evt+0x11cb/0x1f40 [ 191.145414][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 191.145449][ T51] ? __pfx_bt_warn+0x10/0x10 [ 191.145485][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 191.145525][ T51] ? skb_pull_data+0x15f/0x1e0 [ 191.145560][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 191.145602][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 191.145647][ T51] hci_event_packet+0x682/0x11c0 [ 191.145683][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 191.145723][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 191.145769][ T51] ? kcov_remote_start+0x384/0x660 [ 191.145805][ T51] hci_rx_work+0x451/0xfc0 [ 191.145853][ T51] process_one_work+0xa23/0x19a0 [ 191.145913][ T51] ? __pfx_process_one_work+0x10/0x10 [ 191.145973][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 191.146016][ T51] worker_thread+0x5ef/0xe50 [ 191.146074][ T51] ? kthread+0x13a/0x450 [ 191.146106][ T51] ? __pfx_worker_thread+0x10/0x10 [ 191.146144][ T51] kthread+0x370/0x450 [ 191.146178][ T51] ? __pfx_kthread+0x10/0x10 [ 191.146217][ T51] ret_from_fork+0x754/0xd80 [ 191.146260][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 191.146305][ T51] ? __switch_to+0x7b4/0x1120 [ 191.146337][ T51] ? __pfx_kthread+0x10/0x10 [ 191.146378][ T51] ret_from_fork_asm+0x1a/0x30 [ 191.146428][ T51] [ 191.146463][ T51] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.421672][ T51] Bluetooth: hci3: failed to register connection device [ 191.473807][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 192.505588][ T51] Bluetooth: hci2: command 0x2016 tx timeout [ 192.513575][ T5962] Bluetooth: hci0: command 0x2016 tx timeout [ 193.519553][T11366] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 193.541271][ T6011] Bluetooth: hci3: command 0x2016 tx timeout [ 193.865481][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.871977][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.115820][T11408] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.584876][ T5148] Bluetooth: hci0: command 0x2016 tx timeout [ 194.674480][ T5962] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 194.674517][ T5962] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 195.013711][ T5962] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 195.619390][ T5962] Bluetooth: hci3: command 0x2016 tx timeout [ 196.946114][ T6011] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 196.954037][ T6011] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 196.965102][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 196.965143][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.965163][ T6011] Workqueue: hci1 hci_rx_work [ 196.965207][ T6011] Call Trace: [ 196.965216][ T6011] [ 196.965227][ T6011] dump_stack_lvl+0x100/0x190 [ 196.965275][ T6011] sysfs_warn_dup.cold+0x1c/0x28 [ 196.965317][ T6011] sysfs_create_dir_ns+0x24b/0x2b0 [ 196.965359][ T6011] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 196.965406][ T6011] ? find_held_lock+0x2b/0x80 [ 196.965439][ T6011] ? kobject_add_internal+0x25f/0x930 [ 196.965495][ T6011] ? kobject_add_internal+0x25f/0x930 [ 196.965540][ T6011] ? do_raw_spin_unlock+0x145/0x1e0 [ 196.965595][ T6011] kobject_add_internal+0x2c8/0x930 [ 196.965643][ T6011] kobject_add+0x16a/0x1e0 [ 196.965678][ T6011] ? __pfx_kobject_add+0x10/0x10 [ 196.965711][ T6011] ? class_to_subsys+0x10f/0x150 [ 196.965759][ T6011] ? kobject_put+0xb9/0x640 [ 196.965785][ T6011] ? _raw_spin_unlock+0x28/0x50 [ 196.965832][ T6011] device_add+0x294/0x1950 [ 196.965868][ T6011] ? __pfx_dev_set_name+0x10/0x10 [ 196.965909][ T6011] ? __pfx_device_add+0x10/0x10 [ 196.965944][ T6011] ? mgmt_send_event_skb+0x2fb/0x460 [ 196.965993][ T6011] hci_conn_add_sysfs+0x1a3/0x260 [ 196.966043][ T6011] le_conn_complete_evt+0x11cb/0x1f40 [ 196.966090][ T6011] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 196.966126][ T6011] ? __pfx_bt_warn+0x10/0x10 [ 196.966169][ T6011] hci_le_conn_complete_evt+0x23c/0x3a0 [ 196.966210][ T6011] ? skb_pull_data+0x15f/0x1e0 [ 196.966251][ T6011] hci_le_meta_evt+0x34a/0x5f0 [ 196.966299][ T6011] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 196.966348][ T6011] hci_event_packet+0x682/0x11c0 [ 196.966398][ T6011] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 196.966444][ T6011] ? __pfx_hci_event_packet+0x10/0x10 [ 196.966491][ T6011] ? kcov_remote_start+0x374/0x660 [ 196.966522][ T6011] ? lockdep_hardirqs_on+0x78/0x100 [ 196.966560][ T6011] hci_rx_work+0x451/0xfc0 [ 196.966609][ T6011] process_one_work+0xa23/0x19a0 [ 196.966669][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 196.966724][ T6011] ? __pfx_hci_rx_work+0x10/0x10 [ 196.966769][ T6011] worker_thread+0x5ef/0xe50 [ 196.966827][ T6011] ? kthread+0x13a/0x450 [ 196.966864][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 196.966899][ T6011] kthread+0x370/0x450 [ 196.966933][ T6011] ? __pfx_kthread+0x10/0x10 [ 196.966968][ T6011] ret_from_fork+0x754/0xd80 [ 196.967009][ T6011] ? __pfx_ret_from_fork+0x10/0x10 [ 196.967049][ T6011] ? __switch_to+0x7b4/0x1120 [ 196.967078][ T6011] ? __pfx_kthread+0x10/0x10 [ 196.967115][ T6011] ret_from_fork_asm+0x1a/0x30 [ 196.967160][ T6011] [ 196.967192][ T6011] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 197.250919][ T6011] Bluetooth: hci1: failed to register connection device [ 197.258953][ T6011] Bluetooth: hci1: command 0x2016 tx timeout [ 197.981415][T11610] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 197.989413][T11610] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 197.999763][T11610] CPU: 0 UID: 0 PID: 11610 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 197.999802][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.999822][T11610] Workqueue: hci1 hci_rx_work [ 197.999865][T11610] Call Trace: [ 197.999875][T11610] [ 197.999885][T11610] dump_stack_lvl+0x100/0x190 [ 197.999929][T11610] sysfs_warn_dup.cold+0x1c/0x28 [ 197.999969][T11610] sysfs_create_dir_ns+0x24b/0x2b0 [ 198.000011][T11610] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 198.000051][T11610] ? find_held_lock+0x2b/0x80 [ 198.000079][T11610] ? kobject_add_internal+0x25f/0x930 [ 198.000113][T11610] ? kobject_add_internal+0x25f/0x930 [ 198.000150][T11610] ? do_raw_spin_unlock+0x145/0x1e0 [ 198.000195][T11610] kobject_add_internal+0x2c8/0x930 [ 198.000242][T11610] kobject_add+0x16a/0x1e0 [ 198.000275][T11610] ? __pfx_kobject_add+0x10/0x10 [ 198.000305][T11610] ? class_to_subsys+0x10f/0x150 [ 198.000348][T11610] ? kobject_put+0xb9/0x640 [ 198.000375][T11610] ? _raw_spin_unlock+0x28/0x50 [ 198.000428][T11610] device_add+0x294/0x1950 [ 198.000467][T11610] ? __pfx_dev_set_name+0x10/0x10 [ 198.000510][T11610] ? __pfx_device_add+0x10/0x10 [ 198.000548][T11610] ? mgmt_send_event_skb+0x2fb/0x460 [ 198.000599][T11610] hci_conn_add_sysfs+0x1a3/0x260 [ 198.000647][T11610] le_conn_complete_evt+0x11cb/0x1f40 [ 198.000696][T11610] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 198.000734][T11610] ? __pfx_bt_warn+0x10/0x10 [ 198.000776][T11610] hci_le_conn_complete_evt+0x23c/0x3a0 [ 198.000818][T11610] ? skb_pull_data+0x15f/0x1e0 [ 198.000857][T11610] hci_le_meta_evt+0x34a/0x5f0 [ 198.000900][T11610] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 198.000947][T11610] hci_event_packet+0x682/0x11c0 [ 198.000987][T11610] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 198.001032][T11610] ? __pfx_hci_event_packet+0x10/0x10 [ 198.001076][T11610] ? kcov_remote_start+0x374/0x660 [ 198.001104][T11610] ? lockdep_hardirqs_on+0x78/0x100 [ 198.001141][T11610] hci_rx_work+0x451/0xfc0 [ 198.001188][T11610] process_one_work+0xa23/0x19a0 [ 198.001252][T11610] ? __pfx_process_one_work+0x10/0x10 [ 198.001307][T11610] ? __pfx_hci_rx_work+0x10/0x10 [ 198.001351][T11610] worker_thread+0x5ef/0xe50 [ 198.001400][T11610] ? __pfx_worker_thread+0x10/0x10 [ 198.001440][T11610] ? kthread+0x13a/0x450 [ 198.001474][T11610] ? __pfx_worker_thread+0x10/0x10 [ 198.001517][T11610] kthread+0x370/0x450 [ 198.001555][T11610] ? __pfx_kthread+0x10/0x10 [ 198.001598][T11610] ret_from_fork+0x754/0xd80 [ 198.001645][T11610] ? __pfx_ret_from_fork+0x10/0x10 [ 198.001683][T11610] ? __switch_to+0x7b4/0x1120 [ 198.001711][T11610] ? __pfx_kthread+0x10/0x10 [ 198.001747][T11610] ret_from_fork_asm+0x1a/0x30 [ 198.001798][T11610] [ 198.001831][T11610] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.296766][T11610] Bluetooth: hci1: failed to register connection device [ 199.349460][T11610] Bluetooth: hci1: command 0x2016 tx timeout [ 199.864045][T11719] Process accounting paused [ 200.411652][T11610] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 200.488750][T11603] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 200.716393][T11812] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 201.420554][T11812] Bluetooth: hci1: command 0x2016 tx timeout [ 201.568163][T11812] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 203.238922][T11989] udc dummy_udc.0: soft-connect without a gadget driver [ 203.438622][T12004] QAT: failed to copy from user. [ 203.489086][T11812] Bluetooth: hci1: command 0x2016 tx timeout [ 205.340925][T12097] bond0: invalid ARP target specified [ 205.537675][T12110] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 205.538442][T12107] ima: policy update failed [ 205.558935][ T30] audit: type=1802 audit(4294968385.720:10): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2889" res=0 errno=0 [ 205.576442][T12026] Bluetooth: hci1: command 0x2016 tx timeout [ 205.604671][T12114] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 205.604671][T12114] M' is too long [ 205.639109][T12114] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 205.639109][T12114] W ' is too long [ 205.862913][ T30] audit: type=1800 audit(4294968386.032:11): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2899" name="members" dev="configfs" ino=26927 res=0 errno=0 [ 205.913957][T12134] ceph: Failed to parse sending metrics switch value 'P^' [ 206.119595][T12026] Bluetooth: hci0: command 0x2016 tx timeout [ 206.127282][T12026] Bluetooth: hci3: command 0x2016 tx timeout [ 206.133328][T12026] Bluetooth: hci2: command 0x2016 tx timeout [ 206.524488][T12169] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 207.633694][T11603] Bluetooth: hci1: command 0x2016 tx timeout [ 208.042451][T11603] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 208.467306][T12331] aoe: invalid device specification [ 209.699868][T11603] Bluetooth: hci1: command 0x2016 tx timeout [ 210.295460][ T30] audit: type=1400 audit(4294968390.485:12): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12449 comm="syz.1.3015" [ 211.083100][T11603] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 212.044911][T12584] i2c i2c-0: delete_device: Can't parse I2C address [ 213.267947][T12666] [U] ^Z [ 213.641211][T12686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.791885][T12686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.928425][T12686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.032098][T12686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.098649][T12846] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 217.522130][T12936] binder: 12935:12936 ioctl c00c6211 9 returned -14 [ 219.777772][T13061] bonding: no command found in bonding_masters - use +ifname or -ifname [ 220.631691][T13102] Scaler: ================= START STATUS ================= [ 220.658659][T13102] Scaler: ================== END STATUS ================== [ 221.759783][T13160] kAFS: unparsable volume name [ 223.218089][T13251] aoe: can't write to that file. [ 223.749889][T13287] random: crng reseeded on system resumption [ 224.124996][T13309] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 224.688305][T13342] random: crng reseeded on system resumption [ 225.906784][T13420] i8042 aux 00:02: in use; can't configure [ 227.876970][T13500] i2c i2c-0: delete_device: Extra parameters [ 229.772385][T13612] Process accounting resumed [ 229.842192][ T30] audit: type=1800 audit(4294968410.137:13): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3544" name="discovery_nqn" dev="configfs" ino=30572 res=0 errno=0 [ 231.666496][T13722] zram0: detected capacity change from 0 to 16 [ 231.867297][T13733] tipc: Can't bind to reserved service type 0 [ 232.229755][ T30] audit: type=1800 audit(4294968412.539:14): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3610" name="dbroot" dev="configfs" ino=31493 res=0 errno=0 [ 232.263792][T13752] db_root: cannot open: /dev/audio1 [ 232.288362][T13752] db_root: not a directory: /dev/audio1 [ 232.500061][T13764] ubi0: attaching mtd0 [ 232.504384][T13764] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 232.635194][T13772] delete_channel: no stack [ 233.783643][T13835] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 233.808071][T13833] ima: policy update failed [ 233.846554][ T30] audit: type=1802 audit(4294968414.157:15): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3648" res=0 errno=0 [ 234.174884][ T30] audit: type=1800 audit(4294968414.489:16): pid=13855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3660" name="lu_gp_id" dev="configfs" ino=31667 res=0 errno=0 [ 234.218750][T13855] kstrtoul() returned -22 for lu_gp_id [ 234.374642][ T30] audit: type=1800 audit(4294968414.690:17): pid=13867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3668" name="dbroot" dev="configfs" ino=31687 res=0 errno=0 [ 234.397627][T13867] db_root: cannot open: /dev/audio1 [ 234.402861][T13867] db_root: not a directory: /dev/audio1 [ 237.723429][T14077] : Can't lookup blockdev [ 238.884496][T14149] sysfs_service_op_show: Client not running :-5: [ 239.057754][T14157] vhci_hcd vhci_hcd.1: invalid port number 16 [ 239.093254][T14157] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 240.334009][T14240] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.215979][T14368] kernel read not supported for file /\*)A (pid: 14368 comm: syz.2.3904) [ 242.251665][ T30] audit: type=1800 audit(4294968422.611:18): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3904" name="\*)A" dev="mqueue" ino=16351 res=0 errno=0 [ 243.569584][T14450] : Can't lookup blockdev [ 244.220798][T14480] random: crng reseeded on system resumption [ 244.611410][T14502] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 245.756380][T14569] program syz.2.3999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.973095][T11603] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 245.983204][T11603] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 246.193454][T14620] block loop4: the capability attribute has been deprecated. [ 246.766592][T14652] block2mtd: illegal erase size [ 249.008671][T14795] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 249.062159][T11603] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 249.069106][T14795] CIFS mount error: No usable UNC path provided in device string! [ 249.069106][T14795] [ 249.069948][T11603] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 249.083935][T14795] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.290109][T14830] Setting dangerous option i915.mitigations - tainting kernel [ 249.297658][T14830] Bad "i915.mitigations=CmâUQF\ ", 'CmâUQF\' is unknown [ 250.827887][T14915] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 251.981832][T11595] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 252.397372][T14996] ubi31: attaching mtd0 [ 252.417792][T14996] ubi31: scanning is finished [ 252.422581][T14996] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 252.606521][T14996] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 253.895831][T15082] usb usb4: usbfs: process 15082 (syz.0.4219) did not claim interface 0 before use [ 254.423043][T15114] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.0.4235: 7 [ 254.994991][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.001444][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.416047][T15177] QAT: failed to copy from user cfg_data. [ 255.703274][T15196] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 257.466763][T15280] smpboot: CPU 1 is now offline [ 258.197572][T15304] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 258.245569][T15304] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 258.306362][T15304] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 258.360511][T15304] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 258.432180][T15304] page dumped because: unmovable page [ 258.453588][T15304] page_owner info is not present (never set?) [ 259.034489][T15330] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 259.623355][T15354] Process accounting paused [ 260.221776][T15383] [U] 0="/ [ 260.238422][T15383] [U] [ 260.241240][T15383] [U] EeQ@ [ 260.294744][T15382] [U]  [ 260.624770][T15403] vhci_hcd vhci_hcd.2: invalid port number 16 [ 260.674130][T15403] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 263.583864][T15517] block2mtd: illegal erase size [ 263.827062][T11595] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 263.879148][T15534] syz.2.4437: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 263.899110][T15535] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 263.978542][T15534] CPU: 0 UID: 0 PID: 15534 Comm: syz.2.4437 Tainted: G U syzkaller #0 PREEMPT(full) [ 263.978569][T15534] Tainted: [U]=USER [ 263.978579][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.978588][T15534] Call Trace: [ 263.978594][T15534] [ 263.978599][T15534] dump_stack_lvl+0x100/0x190 [ 263.978628][T15534] warn_alloc.cold+0x95/0x1c1 [ 263.978654][T15534] ? __pfx_warn_alloc+0x10/0x10 [ 263.978678][T15534] ? __lock_acquire+0x4a5/0x2630 [ 263.978707][T15534] __vmalloc_node_range_noprof+0x1252/0x1530 [ 263.978729][T15534] ? rcu_is_watching+0x12/0xc0 [ 263.978751][T15534] ? trace_contention_end+0x140/0x180 [ 263.978772][T15534] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 263.978791][T15534] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 263.978806][T15534] ? tomoyo_path_number_perm+0x28f/0x580 [ 263.978824][T15534] ? tomoyo_path_number_perm+0x28f/0x580 [ 263.978844][T15534] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.978863][T15534] ? __pfx___mutex_lock+0x10/0x10 [ 263.978882][T15534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.978899][T15534] ? futex_wait+0x125/0x380 [ 263.978924][T15534] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 263.978940][T15534] __vmalloc_node_noprof+0xad/0xf0 [ 263.978959][T15534] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 263.978977][T15534] dvb_dvr_do_ioctl+0x15d/0x270 [ 263.978998][T15534] dvb_usercopy+0x167/0x340 [ 263.979013][T15534] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 263.979030][T15534] ? __pfx_dvb_usercopy+0x10/0x10 [ 263.979053][T15534] ? __fget_files+0x21f/0x3d0 [ 263.979072][T15534] dvb_dvr_ioctl+0x29/0x40 [ 263.979087][T15534] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 263.979103][T15534] __x64_sys_ioctl+0x18e/0x210 [ 263.979127][T15534] do_syscall_64+0x106/0xf80 [ 263.979141][T15534] ? clear_bhb_loop+0x40/0x90 [ 263.979158][T15534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.979173][T15534] RIP: 0033:0x7f25a1b9c819 [ 263.979197][T15534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.979212][T15534] RSP: 002b:00007f25a2b08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.979230][T15534] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b9c819 [ 263.979240][T15534] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 263.979249][T15534] RBP: 00007f25a1c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 263.979258][T15534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.979266][T15534] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffc29100028 [ 263.979285][T15534] [ 263.979291][T15534] Mem-Info: [ 264.771678][T15534] active_anon:4489 inactive_anon:1202 isolated_anon:0 [ 264.771678][T15534] active_file:16360 inactive_file:39866 isolated_file:0 [ 264.771678][T15534] unevictable:768 dirty:143 writeback:0 [ 264.771678][T15534] slab_reclaimable:12107 slab_unreclaimable:90101 [ 264.771678][T15534] mapped:24260 shmem:1374 pagetables:1109 [ 264.771678][T15534] sec_pagetables:0 bounce:0 [ 264.771678][T15534] kernel_misc_reclaimable:0 [ 264.771678][T15534] free:1334497 free_pcp:2274 free_cma:0 [ 265.066975][T15534] Node 0 active_anon:17956kB inactive_anon:2468kB active_file:65120kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96756kB dirty:572kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11008kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.236841][T15534] Node 1 active_anon:0kB inactive_anon:0kB active_file:320kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.425806][T15534] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.606831][T15534] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 265.612638][T15534] Node 0 DMA32 free:1377552kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17956kB inactive_anon:1928kB active_file:65136kB inactive_file:159328kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2537292kB mlocked:0kB bounce:0kB free_pcp:12008kB local_pcp:12008kB free_cma:0kB [ 265.842623][T15534] lowmem_reserve[]: 0 0 1 1 1 [ 265.866960][T15534] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 266.042791][T15534] lowmem_reserve[]: 0 0 0 0 0 [ 266.073609][T15534] Node 1 Normal free:3944856kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:232kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.217842][T15534] lowmem_reserve[]: 0 0 0 0 0 [ 266.237353][T15534] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.295919][T15534] Node 0 DMA32: 922*4kB (UME) 2799*8kB (UME) 1743*16kB (UME) 756*32kB (UME) 479*64kB (UME) 320*128kB (UME) 257*256kB (UM) 197*512kB (UM) 124*1024kB (UME) 42*2048kB (UME) 207*4096kB (UM) = 1377296kB [ 266.403009][T15534] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 266.445994][T15534] Node 1 Normal: 12*4kB (UM) 9*8kB (UM) 12*16kB (UM) 11*32kB (UM) 10*64kB (UM) 5*128kB (U) 2*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944856kB [ 266.522267][T15534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.564918][T15534] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.613594][T15534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.656150][T15534] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.696117][T15534] 50727 total pagecache pages [ 266.722727][T15534] 0 pages in swap cache [ 266.726894][T15534] Free swap = 124996kB [ 266.763453][T15534] Total swap = 124996kB [ 266.767629][T15534] 2097051 pages RAM [ 266.796605][T15534] 0 pages HighMem/MovableOnly [ 266.816133][T15534] 430849 pages reserved [ 266.828551][T15534] 0 pages cma reserved [ 267.800081][T15683] QAT: Invalid ioctl 21531 [ 268.877157][T15746] zram: Can't change algorithm for initialized device [ 269.063701][T15758] random: crng reseeded on system resumption [ 269.227080][T15763] zram0: detected capacity change from 16 to 0 [ 270.159840][T15807] vhci_hcd vhci_hcd.2: invalid port number 16 [ 270.191090][T15807] vhci_hcd vhci_hcd.2: invalid port number 16 [ 273.112659][T15936] phram: not enough arguments [ 274.135195][T15973] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 274.177317][T15973] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 275.807912][ T30] audit: type=1800 audit(4294986800.344:19): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4668" name="lu_gp_id" dev="configfs" ino=39476 res=0 errno=0 [ 276.189023][T16077] wlan1: mtu less than device minimum [ 276.861297][T16112] vmstat_refresh: nr_hugetlb -2048 [ 277.692148][T16157] kafs: addr_prefs: Invalid Command [ 277.697532][T16156] block2mtd: Using custom MTD label '' for dev [ 277.712169][T16156] block2mtd: error: cannot open device [ 277.965464][T16170] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 279.619865][T16266] nvme_fcloop: unknown parameter or missing value '0' [ 281.320354][T16354] bond0: Unable to set down delay as MII monitoring is disabled [ 282.199476][T16396] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 283.477057][T16469] futex_wake_op: syz.3.4846 tries to shift op by -2048; fix this program [ 283.520535][T16469] futex_wake_op: syz.3.4846 tries to shift op by -2048; fix this program [ 283.928031][T16495] writes to the poll attribute are ignored. [ 283.960541][T16495] please use driver specific parameters instead. [ 286.734164][T16652] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 287.415867][T16690] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 287.992974][T16719] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 288.794334][ T1596] ================================================================== [ 288.794356][ T1596] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 288.794386][ T1596] Write of size 8 at addr ffffc90004049be0 by task kworker/0:2/1596 [ 288.794399][ T1596] [ 288.794408][ T1596] CPU: 0 UID: 0 PID: 1596 Comm: kworker/0:2 Tainted: G U I syzkaller #0 PREEMPT(full) [ 288.794430][ T1596] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 288.794436][ T1596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.794446][ T1596] Workqueue: events_power_efficient fb_flashcursor [ 288.794464][ T1596] Call Trace: [ 288.794468][ T1596] [ 288.794476][ T1596] dump_stack_lvl+0x100/0x190 [ 288.794499][ T1596] print_report+0x156/0x4c9 [ 288.794519][ T1596] ? kfree_skbmem+0x19a/0x210 [ 288.794537][ T1596] ? _raw_spin_lock_irqsave+0x52/0x60 [ 288.794558][ T1596] ? __virt_addr_valid+0x81/0x620 [ 288.794582][ T1596] ? sys_imageblit+0x19fb/0x1d60 [ 288.794603][ T1596] kasan_report+0xdf/0x1e0 [ 288.794619][ T1596] ? sys_imageblit+0x19fb/0x1d60 [ 288.794646][ T1596] sys_imageblit+0x19fb/0x1d60 [ 288.794670][ T1596] ? __pfx_sys_imageblit+0x10/0x10 [ 288.794692][ T1596] ? update_cfs_rq_load_avg+0x51/0x550 [ 288.794710][ T1596] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 288.794729][ T1596] soft_cursor+0x524/0xa10 [ 288.794748][ T1596] ? fb_get_color_depth+0x120/0x250 [ 288.794766][ T1596] bit_cursor+0xe58/0x16f0 [ 288.794786][ T1596] ? __pfx_bit_cursor+0x10/0x10 [ 288.794806][ T1596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.794822][ T1596] ? get_color+0x1da/0x450 [ 288.794837][ T1596] ? __pfx_bit_cursor+0x10/0x10 [ 288.794854][ T1596] fb_flashcursor+0x338/0x430 [ 288.794869][ T1596] process_one_work+0xa23/0x19a0 [ 288.794894][ T1596] ? __pfx_process_one_work+0x10/0x10 [ 288.794917][ T1596] ? __pfx_fb_flashcursor+0x10/0x10 [ 288.794933][ T1596] worker_thread+0x5ef/0xe50 [ 288.794957][ T1596] ? kthread+0x13a/0x450 [ 288.794975][ T1596] ? __pfx_worker_thread+0x10/0x10 [ 288.794998][ T1596] kthread+0x370/0x450 [ 288.795017][ T1596] ? __pfx_kthread+0x10/0x10 [ 288.795036][ T1596] ret_from_fork+0x754/0xd80 [ 288.795058][ T1596] ? __pfx_ret_from_fork+0x10/0x10 [ 288.795079][ T1596] ? __switch_to+0x7b4/0x1120 [ 288.795095][ T1596] ? __pfx_kthread+0x10/0x10 [ 288.795115][ T1596] ret_from_fork_asm+0x1a/0x30 [ 288.795135][ T1596] [ 288.795140][ T1596] [ 288.795144][ T1596] The buggy address belongs to a vmalloc virtual mapping [ 288.795162][ T1596] Memory state around the buggy address: [ 288.795169][ T1596] ffffc90004049a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 288.795179][ T1596] ffffc90004049b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 288.795189][ T1596] >ffffc90004049b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 288.795196][ T1596] ^ [ 288.795204][ T1596] ffffc90004049c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 288.795214][ T1596] ffffc90004049c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 288.795221][ T1596] ================================================================== [ 288.795229][ T1596] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.795239][ T1596] CPU: 0 UID: 0 PID: 1596 Comm: kworker/0:2 Tainted: G U I syzkaller #0 PREEMPT(full) [ 288.795260][ T1596] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 288.795265][ T1596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.795274][ T1596] Workqueue: events_power_efficient fb_flashcursor [ 288.795289][ T1596] Call Trace: [ 288.795293][ T1596] [ 288.795298][ T1596] dump_stack_lvl+0x100/0x190 [ 288.795319][ T1596] vpanic+0x552/0x970 [ 288.795333][ T1596] ? __pfx_vpanic+0x10/0x10 [ 288.795346][ T1596] ? __pfx_vprintk_emit+0x10/0x10 [ 288.795362][ T1596] ? sys_imageblit+0x19fb/0x1d60 [ 288.795383][ T1596] panic+0xd1/0xe0 [ 288.795398][ T1596] ? __pfx_panic+0x10/0x10 [ 288.795414][ T1596] ? sys_imageblit+0x19fb/0x1d60 [ 288.795435][ T1596] ? check_panic_on_warn+0x1f/0x90 [ 288.795457][ T1596] check_panic_on_warn.cold+0x19/0x34 [ 288.795472][ T1596] end_report.part.0+0x3a/0x90 [ 288.795492][ T1596] kasan_report.cold+0xe/0x18 [ 288.795512][ T1596] ? sys_imageblit+0x19fb/0x1d60 [ 288.795535][ T1596] sys_imageblit+0x19fb/0x1d60 [ 288.795559][ T1596] ? __pfx_sys_imageblit+0x10/0x10 [ 288.795582][ T1596] ? update_cfs_rq_load_avg+0x51/0x550 [ 288.795599][ T1596] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 288.795616][ T1596] soft_cursor+0x524/0xa10 [ 288.795636][ T1596] ? fb_get_color_depth+0x120/0x250 [ 288.795653][ T1596] bit_cursor+0xe58/0x16f0 [ 288.795673][ T1596] ? __pfx_bit_cursor+0x10/0x10 [ 288.795693][ T1596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.795708][ T1596] ? get_color+0x1da/0x450 [ 288.795723][ T1596] ? __pfx_bit_cursor+0x10/0x10 [ 288.795740][ T1596] fb_flashcursor+0x338/0x430 [ 288.795756][ T1596] process_one_work+0xa23/0x19a0 [ 288.795780][ T1596] ? __pfx_process_one_work+0x10/0x10 [ 288.795803][ T1596] ? __pfx_fb_flashcursor+0x10/0x10 [ 288.795819][ T1596] worker_thread+0x5ef/0xe50 [ 288.795843][ T1596] ? kthread+0x13a/0x450 [ 288.795861][ T1596] ? __pfx_worker_thread+0x10/0x10 [ 288.795881][ T1596] kthread+0x370/0x450 [ 288.795899][ T1596] ? __pfx_kthread+0x10/0x10 [ 288.795918][ T1596] ret_from_fork+0x754/0xd80 [ 288.795940][ T1596] ? __pfx_ret_from_fork+0x10/0x10 [ 288.795964][ T1596] ? __switch_to+0x7b4/0x1120 [ 288.795980][ T1596] ? __pfx_kthread+0x10/0x10 [ 288.796000][ T1596] ret_from_fork_asm+0x1a/0x30 [ 288.796022][ T1596] [ 288.796075][ T1596] Kernel Offset: disabled