last executing test programs: 1.068383295s ago: executing program 0 (id=3217): r0 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r0, 0x0, 0x0) 1.005040878s ago: executing program 3 (id=3220): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 922.854365ms ago: executing program 0 (id=3221): socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x6b) 838.72579ms ago: executing program 1 (id=3223): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/mb_groups\x00', 0x60400, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) 779.206786ms ago: executing program 0 (id=3224): socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x0) 735.588901ms ago: executing program 2 (id=3225): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5O\x93\xe6\x19\b\x9f\x92\xe9\x04\xaf\x02\x0flp\xe8\xafe\xe64\xa7R\x02\xf0\xce\x9d\xad\xc9^\x10\xbc\x15\xbc\aX\xf1=l\xd3Q7\xf6\rE\x94\xe6z}\x1d1o\xadGs\v\x9cu', 0x110) 666.585048ms ago: executing program 1 (id=3226): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x40002, 0x0) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x81000000) 652.599338ms ago: executing program 3 (id=3227): r0 = socket(0xa, 0x2, 0x88) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f0000000340)='\x00', &(0x7f0000000380)=0x8) 568.909917ms ago: executing program 0 (id=3228): openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) 529.931155ms ago: executing program 2 (id=3229): setresuid$auto(0x0, 0x7, 0x8080) unshare$auto(0x20000) 490.603815ms ago: executing program 1 (id=3230): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0xf2) 473.275626ms ago: executing program 3 (id=3231): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_setup$auto(0x80000000, 0x0) 415.469205ms ago: executing program 0 (id=3232): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/lapb3/testing\x00', 0xa880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)=""/102, 0x66) 402.368592ms ago: executing program 2 (id=3233): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)=""/217, 0xd9) 351.319984ms ago: executing program 1 (id=3234): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r0, 0x9, 0x0) 340.761821ms ago: executing program 3 (id=3235): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="0c0da407", 0x4) 278.029534ms ago: executing program 0 (id=3236): mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) 271.68946ms ago: executing program 2 (id=3237): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) 185.931448ms ago: executing program 1 (id=3238): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) 148.431311ms ago: executing program 3 (id=3239): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) 89.817614ms ago: executing program 2 (id=3240): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c03, 0x0) 31.769219ms ago: executing program 1 (id=3241): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) 831.566µs ago: executing program 3 (id=3242): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/enabled\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="34ae", 0x2) 0s ago: executing program 2 (id=3243): r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 79.034383][ T5808] cgroup: Unknown subsys name 'net' [ 79.169199][ T5808] cgroup: Unknown subsys name 'cpuset' [ 79.178811][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.664092][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.604914][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.085783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.093759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.265137][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.287624][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.862113][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 85.977027][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.984403][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.995773][ T5906] bridge_slave_0: entered allmulticast mode [ 86.003255][ T5906] bridge_slave_0: entered promiscuous mode [ 86.027479][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.035592][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.043142][ T5906] bridge_slave_1: entered allmulticast mode [ 86.051537][ T5906] bridge_slave_1: entered promiscuous mode [ 86.085693][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.101742][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.142566][ T5906] team0: Port device team_slave_0 added [ 86.153547][ T5906] team0: Port device team_slave_1 added [ 86.180906][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.187982][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.214598][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.227784][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.234773][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.262698][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.308426][ T5906] hsr_slave_0: entered promiscuous mode [ 86.314759][ T5906] hsr_slave_1: entered promiscuous mode [ 86.450199][ T5906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.463090][ T5906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.473326][ T5906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.484320][ T5906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.515991][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.523555][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.531739][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539169][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.590437][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.608462][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.619457][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.637520][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.651299][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.658477][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.672645][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.679864][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.857680][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.902699][ T5906] veth0_vlan: entered promiscuous mode [ 86.914143][ T5906] veth1_vlan: entered promiscuous mode [ 86.943710][ T5906] veth0_macvtap: entered promiscuous mode [ 86.957120][ T5906] veth1_macvtap: entered promiscuous mode [ 86.978354][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.994613][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.011192][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020192][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.031445][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.041817][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.747949][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.759752][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.776116][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.784529][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.795378][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.806770][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.814372][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.814713][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.824207][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.830237][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.837013][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.844393][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.862965][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.864068][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.879483][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.908437][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.924154][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.933511][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.942600][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.952528][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.124846][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.435041][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 89.539416][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 89.633950][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 89.648488][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.656868][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.664711][ T5942] bridge_slave_0: entered allmulticast mode [ 89.673184][ T5942] bridge_slave_0: entered promiscuous mode [ 89.716424][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.725148][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.733479][ T5942] bridge_slave_1: entered allmulticast mode [ 89.740968][ T5942] bridge_slave_1: entered promiscuous mode [ 89.797044][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 89.845552][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.852709][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.860170][ T5945] bridge_slave_0: entered allmulticast mode [ 89.867887][ T5945] bridge_slave_0: entered promiscuous mode [ 89.894800][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.908495][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.915783][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.923226][ T5945] bridge_slave_1: entered allmulticast mode [ 89.930726][ T5945] bridge_slave_1: entered promiscuous mode [ 89.964032][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.012060][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.019313][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.027454][ T5939] bridge_slave_0: entered allmulticast mode [ 90.034749][ T5939] bridge_slave_0: entered promiscuous mode [ 90.044641][ T5942] team0: Port device team_slave_0 added [ 90.065126][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.075574][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.082977][ T5939] bridge_slave_1: entered allmulticast mode [ 90.090519][ T5939] bridge_slave_1: entered promiscuous mode [ 90.099537][ T5942] team0: Port device team_slave_1 added [ 90.121541][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.136784][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.214493][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.227351][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.281357][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.288672][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.316483][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.330244][ T5945] team0: Port device team_slave_0 added [ 90.336683][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.343839][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.351671][ T5948] bridge_slave_0: entered allmulticast mode [ 90.359165][ T5948] bridge_slave_0: entered promiscuous mode [ 90.377140][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.384121][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.411446][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.432993][ T5945] team0: Port device team_slave_1 added [ 90.439290][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.446995][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.454407][ T5948] bridge_slave_1: entered allmulticast mode [ 90.462788][ T5948] bridge_slave_1: entered promiscuous mode [ 90.471881][ T5939] team0: Port device team_slave_0 added [ 90.480893][ T5939] team0: Port device team_slave_1 added [ 90.506287][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.601170][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.612917][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.620062][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.646835][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.658877][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.666625][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.692842][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.709000][ T5942] hsr_slave_0: entered promiscuous mode [ 90.715361][ T5942] hsr_slave_1: entered promiscuous mode [ 90.721860][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 90.727869][ T5942] Cannot create hsr debugfs directory [ 90.736319][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.754931][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.770891][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.777974][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.805680][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.817646][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.824783][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.851759][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.910402][ T5948] team0: Port device team_slave_0 added [ 90.947340][ T5950] Bluetooth: hci2: command tx timeout [ 90.953241][ T5950] Bluetooth: hci1: command tx timeout [ 90.959708][ T5946] Bluetooth: hci0: command tx timeout [ 90.975180][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.992142][ T5948] team0: Port device team_slave_1 added [ 91.035633][ T5946] Bluetooth: hci3: command tx timeout [ 91.086123][ T5939] hsr_slave_0: entered promiscuous mode [ 91.092500][ T5939] hsr_slave_1: entered promiscuous mode [ 91.099719][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 91.106044][ T5939] Cannot create hsr debugfs directory [ 91.123388][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.130701][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.158153][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.170864][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.178033][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.204798][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.241796][ T5945] hsr_slave_0: entered promiscuous mode [ 91.248256][ T5945] hsr_slave_1: entered promiscuous mode [ 91.254296][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 91.260283][ T5945] Cannot create hsr debugfs directory [ 91.447359][ T5948] hsr_slave_0: entered promiscuous mode [ 91.453649][ T5948] hsr_slave_1: entered promiscuous mode [ 91.460240][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 91.466040][ T5948] Cannot create hsr debugfs directory [ 91.606359][ T1138] bridge_slave_1: left allmulticast mode [ 91.612181][ T1138] bridge_slave_1: left promiscuous mode [ 91.619161][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.630340][ T1138] bridge_slave_0: left allmulticast mode [ 91.636448][ T1138] bridge_slave_0: left promiscuous mode [ 91.642193][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.821461][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.832553][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.842655][ T1138] bond0 (unregistering): Released all slaves [ 92.084978][ T1138] hsr_slave_0: left promiscuous mode [ 92.109612][ T1138] hsr_slave_1: left promiscuous mode [ 92.126707][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.134179][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.167008][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.174439][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.206282][ T1138] veth1_macvtap: left promiscuous mode [ 92.211930][ T1138] veth0_macvtap: left promiscuous mode [ 92.232077][ T1138] veth1_vlan: left promiscuous mode [ 92.245890][ T1138] veth0_vlan: left promiscuous mode [ 92.657526][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 92.671744][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 93.025979][ T5946] Bluetooth: hci0: command tx timeout [ 93.026007][ T5950] Bluetooth: hci2: command tx timeout [ 93.031760][ T5946] Bluetooth: hci1: command tx timeout [ 93.105999][ T5946] Bluetooth: hci3: command tx timeout [ 93.114055][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.133108][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.148398][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.179205][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.312687][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.341571][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.390656][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.432079][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.561167][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.586099][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.598869][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.616690][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.700942][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.719668][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.730263][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.741108][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.767643][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.837304][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.848612][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.896655][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.904055][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.914781][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.922177][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.934974][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.962683][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.970056][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.002965][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.010174][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.073308][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.087322][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.131969][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.152710][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.178610][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.185775][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.217035][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.224142][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.234302][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.241558][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.258109][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.265210][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.411369][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.773056][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.810888][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.878221][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.898242][ T5942] veth0_vlan: entered promiscuous mode [ 94.944030][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.968514][ T5942] veth1_vlan: entered promiscuous mode [ 94.987599][ T5939] veth0_vlan: entered promiscuous mode [ 95.029766][ T5939] veth1_vlan: entered promiscuous mode [ 95.063183][ T5945] veth0_vlan: entered promiscuous mode [ 95.097543][ T5942] veth0_macvtap: entered promiscuous mode [ 95.106256][ T5946] Bluetooth: hci1: command tx timeout [ 95.111780][ T5946] Bluetooth: hci2: command tx timeout [ 95.117924][ T51] Bluetooth: hci0: command tx timeout [ 95.124000][ T5948] veth0_vlan: entered promiscuous mode [ 95.144588][ T5945] veth1_vlan: entered promiscuous mode [ 95.158397][ T5942] veth1_macvtap: entered promiscuous mode [ 95.174083][ T5939] veth0_macvtap: entered promiscuous mode [ 95.185665][ T5946] Bluetooth: hci3: command tx timeout [ 95.193541][ T5939] veth1_macvtap: entered promiscuous mode [ 95.209199][ T5948] veth1_vlan: entered promiscuous mode [ 95.230494][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.248452][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.273698][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.289225][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.312313][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.321766][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341562][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.350667][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.373516][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383480][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.414256][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.423831][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.435184][ T5945] veth0_macvtap: entered promiscuous mode [ 95.447514][ T5945] veth1_macvtap: entered promiscuous mode [ 95.466458][ T5948] veth0_macvtap: entered promiscuous mode [ 95.480388][ T5948] veth1_macvtap: entered promiscuous mode [ 95.524922][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.590603][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.600715][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.617026][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.625126][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.669207][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.678710][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.688438][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708846][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718295][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.734135][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.742896][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.754343][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786147][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799649][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.824602][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.855169][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.863943][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.882153][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.892408][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.981435][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.008580][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.128688][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.152917][ T6057] nfs: Bad value for 'source' [ 96.161081][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.299408][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.328202][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.385902][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.403455][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.051758][ T29] cfg80211: failed to load regulatory.db [ 97.187036][ T51] Bluetooth: hci0: command tx timeout [ 97.192513][ T51] Bluetooth: hci1: command tx timeout [ 97.199267][ T5946] Bluetooth: hci2: command tx timeout [ 97.267997][ T51] Bluetooth: hci3: command tx timeout [ 99.590288][ T6188] futex_wake_op: syz.3.117 tries to shift op by -2048; fix this program [ 105.312520][ T51] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 105.312563][ T51] Bluetooth: hci2: unexpected subevent 0x0c length: 727 > 5 [ 107.597503][ T6517] syz.0.281 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.473791][ T6556] ptrace attach of "./syz-executor exec"[5945] was attempted by "./syz-executor exec"[6556] [ 111.102071][ T51] Bluetooth: hci1: unexpected event 0x3e length: 720 > 260 [ 112.994548][ T6778] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.737476][ T6816] syz.0.430 (6816): attempted to duplicate a private mapping with mremap. This is not supported. [ 114.066435][ T30] audit: type=1800 audit(1770910880.634:2): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.436" name="version" dev="configfs" ino=11797 res=0 errno=0 [ 114.499895][ T6850] __vm_enough_memory: pid: 6850, comm: syz.1.454, bytes: 4398046511104 not enough memory for the allocation [ 114.813508][ T6865] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.676902][ T30] audit: type=1326 audit(1770910882.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.1.472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf68b9bf79 code=0x0 [ 116.037546][ T30] audit: type=1800 audit(1770910882.603:4): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.482" name="version" dev="configfs" ino=11949 res=0 errno=0 [ 117.288016][ T6980] ptrace attach of "./syz-executor exec"[5942] was attempted by "./syz-executor exec"[6980] [ 117.997146][ T30] audit: type=1800 audit(1843104520.189:5): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.522" name="version" dev="configfs" ino=12656 res=0 errno=0 [ 118.744900][ T7042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.216227][ T7185] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.441314][ T30] audit: type=1800 audit(1843104524.637:6): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.617" name="trace_pipe" dev="tracefs" ino=1186 res=0 errno=0 [ 122.660914][ T7200] capability: warning: `syz.2.619' uses deprecated v2 capabilities in a way that may be insecure [ 126.163283][ T51] Bluetooth: hci0: unexpected event 0x3c length: 254 > 7 [ 129.273314][ T7469] mmap: syz.0.750 (7469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.435521][ T7471] can: request_module (can-proto-5) failed. [ 129.537594][ T51] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 133.894074][ T7617] kexec: Could not allocate control_code_buffer [ 137.001255][ T51] Bluetooth: hci0: unknown advertising packet type: 0xea [ 137.173698][ T51] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 138.009853][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.031266][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.974297][ T7909] syz.0.963(7909): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 139.492638][ T30] audit: type=1800 audit(1843104541.691:7): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.976" name="dbroot" dev="configfs" ino=15102 res=0 errno=0 [ 140.493028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.502145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.351263][ T30] audit: type=1800 audit(4294967298.749:8): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1103" name="lu_gp_id" dev="configfs" ino=16544 res=0 errno=0 [ 144.851399][ T8217] capability: warning: `syz.3.1118' uses 32-bit capabilities (legacy support in use) [ 149.502313][ T8468] futex_wake_op: syz.3.1241 tries to shift op by -1; fix this program [ 153.982011][ T8671] random: crng reseeded on system resumption [ 154.362476][ T8690] ======================================================= [ 154.362476][ T8690] WARNING: The mand mount option has been deprecated and [ 154.362476][ T8690] and is ignored by this kernel. Remove the mand [ 154.362476][ T8690] option from the mount to silence this warning. [ 154.362476][ T8690] ======================================================= [ 155.748436][ T8751] Process accounting resumed [ 156.386921][ T8780] Invalid ELF header magic: != ELF [ 157.427860][ T30] audit: type=1800 audit(4294969359.831:9): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1422" name="dummy_udc" dev="gadgetfs" ino=9127 res=0 errno=0 [ 157.749915][ T30] audit: type=1800 audit(4294969360.163:10): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1431" name="features" dev="configfs" ino=17861 res=0 errno=0 [ 162.132332][ T30] audit: type=1800 audit(4294969364.566:11): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1547" name="members" dev="configfs" ino=18240 res=0 errno=0 [ 165.723731][ T9274] Unable to find swap-space signature [ 166.207046][ T9299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.712466][ T51] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 167.370376][ T30] audit: type=1800 audit(4294969369.833:12): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1676" name="trace_pipe" dev="tracefs" ino=1142 res=0 errno=0 [ 168.228038][ T51] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 169.808883][ T9443] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 170.583952][ T9473] usb usb4: usbfs: process 9473 (syz.3.1739) did not claim interface 0 before use [ 171.350929][ T9505] Invalid ELF header magic: != ELF [ 173.281379][ T9574] program syz.1.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.704065][ T9592] block2mtd: illegal erase size [ 175.492958][ T9669] ubi31: attaching mtd0 [ 175.518459][ T9669] ubi31: scanning is finished [ 175.533216][ T9669] ubi31: empty MTD device detected [ 175.756921][ T9669] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.780428][ T9669] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 175.812245][ T9669] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.849048][ T9669] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 175.894104][ T9669] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.931932][ T9669] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 175.951239][ T9669] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 863830363 [ 175.988367][ T9669] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 176.024158][ T9681] ubi31: background thread "ubi_bgt31d" started, PID 9681 [ 176.132785][ T9692] QAT: Invalid ioctl 21531 [ 176.467938][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.475259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.631325][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81aff81a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 176.646941][ C0] Call Trace: [ 176.650589][ C0] [ 176.653466][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 176.660262][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 176.666191][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 176.671580][ C0] mce_cpu_restart+0xd5/0x1f0 [ 176.676370][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 176.682589][ C0] __sysvec_call_function_single+0x80/0x3b0 [ 176.688533][ C0] sysvec_call_function_single+0x9e/0xc0 [ 176.694312][ C0] [ 176.697252][ C0] [ 176.700357][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 176.706873][ C0] RIP: 0010:inode_to_bdi+0x69/0x160 [ 176.712083][ C0] Code: 48 c7 c0 78 1a f3 8d 48 8b 6b 28 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 c1 00 00 00 48 3b 2d 7f f8 a5 0b <74> 5b e8 00 4b b9 ff 48 8d bd 68 01 00 00 48 b8 00 00 00 00 00 fc [ 176.731909][ C0] RSP: 0000:ffffc9000eac7b78 EFLAGS: 00000206 [ 176.738083][ C0] RAX: 1ffffffff1be634f RBX: ffff888072e08c38 RCX: ffffffff82541723 [ 176.746410][ C0] RDX: dffffc0000000000 RSI: ffffffff824d21b0 RDI: ffff888072e08c60 [ 176.754443][ C0] RBP: ffff88803559a000 R08: 0000000000000005 R09: 0000000000000000 [ 176.762617][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 176.770703][ C0] R13: ffff888072e08c38 R14: ffff888033695d00 R15: ffff888072e08e58 [ 176.780176][ C0] ? fault_dirty_shared_page+0x453/0x690 [ 176.786287][ C0] ? inode_to_bdi+0x20/0x160 [ 176.790998][ C0] ? inode_to_bdi+0x20/0x160 [ 176.795701][ C0] ? do_fault+0x447/0x1990 [ 176.800245][ C0] balance_dirty_pages_ratelimited_flags+0x44/0x1170 [ 176.806952][ C0] fault_dirty_shared_page+0x582/0x690 [ 176.812452][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 176.818124][ C0] do_fault+0x447/0x1990 [ 176.822495][ C0] ? __lock_acquire+0x4a5/0x2630 [ 176.827473][ C0] __handle_mm_fault+0x1807/0x2b50 [ 176.832723][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 176.838108][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.843593][ C0] ? lock_vma_under_rcu+0x17c/0x5a0 [ 176.848842][ C0] handle_mm_fault+0x36d/0xa20 [ 176.853637][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 176.858961][ C0] exc_page_fault+0x6f/0xd0 [ 176.863496][ C0] asm_exc_page_fault+0x26/0x30 [ 176.868355][ C0] RIP: 0033:0x7f7afbc70780 [ 176.872802][ C0] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 11 95 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 176.892631][ C0] RSP: 002b:00007ffcb4cdb4c0 EFLAGS: 00010202 [ 176.898910][ C0] RAX: 0000001b30124000 RBX: ffffffff81f65abc RCX: 0000001b30123ff8 [ 176.906895][ C0] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f7afcb45700 [ 176.914926][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f7afc002000 [ 176.923085][ C0] R10: 00007f7afcb45700 R11: 0000000000000000 R12: 00007f7afc016038 [ 176.931235][ C0] R13: 0000000000000002 R14: ffffffff81f655b8 R15: 00007f7afcb45720 [ 176.939311][ C0] ? do_setitimer+0x198/0x590 [ 176.944027][ C0] ? __x64_sys_getitimer+0xfc/0x210 [ 176.949789][ C0] [ 177.665019][ T9755] ubi: mtd0 is already attached to ubi31 [ 178.136705][ T9783] random: crng reseeded on system resumption [ 179.800768][ T9874] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 180.714538][ T51] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 181.121862][ T9925] program syz.0.1956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.178804][ T9925] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 182.197624][ T30] audit: type=1800 audit(4294969384.730:13): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1980" name="members" dev="configfs" ino=21624 res=0 errno=0 [ 182.361453][ T9982] block2mtd: illegal erase size [ 183.573880][T10036] sd 0:0:1:0: PR command failed: 1026 [ 183.616782][T10036] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 183.661571][T10036] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 184.441480][T10078] usb usb15: usbfs: process 10078 (syz.3.2030) did not claim interface 0 before use syzkaller syzkaller login: [ 185.406706][T10120] WARNING! power/level is deprecated; use power/control instead [ 185.789644][T10114] Process accounting paused [ 186.360752][T10173] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 187.183029][T10223] ACPI: Can not change Invalid GPE/Fixed Event status [ 188.841433][T10331] random: crng reseeded on system resumption [ 189.536216][T10372] ptp ptp0: only physical clock in use now [ 189.553089][T10376] bond0: option mode: unable to set because the bond device is up [ 190.242304][T10414] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 190.639847][T10431] Setting dangerous option i915.mitigations - tainting kernel [ 191.439546][T10475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.504619][T10532] udc dummy_udc.0: soft-connect without a gadget driver [ 193.051541][T10560] usbcore.quirks: string doesn't fit in 127 chars. [ 194.325547][T10624] syz.1.2294: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.367585][T10624] CPU: 0 UID: 0 PID: 10624 Comm: syz.1.2294 Tainted: G U I syzkaller #0 PREEMPT(full) [ 194.367654][T10624] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 194.367663][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.367678][T10624] Call Trace: [ 194.367687][T10624] [ 194.367697][T10624] dump_stack_lvl+0x100/0x190 [ 194.367760][T10624] warn_alloc.cold+0x95/0x1c1 [ 194.367805][T10624] ? __pfx_warn_alloc+0x10/0x10 [ 194.367832][T10624] ? __lock_acquire+0x4a5/0x2630 [ 194.367879][T10624] __vmalloc_node_range_noprof+0x1252/0x1530 [ 194.367920][T10624] ? __pfx___might_resched+0x10/0x10 [ 194.367959][T10624] ? rcu_is_watching+0x12/0xc0 [ 194.367992][T10624] ? trace_contention_end+0xd6/0x110 [ 194.368018][T10624] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 194.368053][T10624] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 194.368092][T10624] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.368120][T10624] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.368167][T10624] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.368206][T10624] ? __pfx___mutex_lock+0x10/0x10 [ 194.368257][T10624] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.368281][T10624] ? futex_wait+0x125/0x380 [ 194.368316][T10624] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 194.368347][T10624] __vmalloc_node_noprof+0xad/0xf0 [ 194.368383][T10624] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 194.368415][T10624] dvb_dvr_do_ioctl+0x15d/0x270 [ 194.368451][T10624] dvb_usercopy+0x167/0x340 [ 194.368482][T10624] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 194.368511][T10624] ? __pfx_dvb_usercopy+0x10/0x10 [ 194.368549][T10624] ? __fget_files+0x21f/0x3d0 [ 194.368577][T10624] dvb_dvr_ioctl+0x29/0x40 [ 194.368603][T10624] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 194.368628][T10624] __x64_sys_ioctl+0x18e/0x210 [ 194.368663][T10624] do_syscall_64+0x106/0xf80 [ 194.368696][T10624] ? clear_bhb_loop+0x40/0x90 [ 194.368725][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.368751][T10624] RIP: 0033:0x7fdf68b9bf79 [ 194.368774][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.368800][T10624] RSP: 002b:00007fdf69ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.368824][T10624] RAX: ffffffffffffffda RBX: 00007fdf68e15fa0 RCX: 00007fdf68b9bf79 [ 194.368840][T10624] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 194.368857][T10624] RBP: 00007fdf68c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 194.368872][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.368888][T10624] R13: 00007fdf68e16038 R14: 00007fdf68e15fa0 R15: 00007fff5372d968 [ 194.368924][T10624] [ 194.368948][T10624] Mem-Info: [ 194.651800][T10624] active_anon:9546 inactive_anon:0 isolated_anon:0 [ 194.651800][T10624] active_file:18807 inactive_file:39672 isolated_file:0 [ 194.651800][T10624] unevictable:768 dirty:117 writeback:0 [ 194.651800][T10624] slab_reclaimable:11177 slab_unreclaimable:92297 [ 194.651800][T10624] mapped:24218 shmem:5933 pagetables:1239 [ 194.651800][T10624] sec_pagetables:0 bounce:0 [ 194.651800][T10624] kernel_misc_reclaimable:0 [ 194.651800][T10624] free:1306316 free_pcp:29840 free_cma:0 [ 194.702508][T10624] Node 0 active_anon:37084kB inactive_anon:0kB active_file:75228kB inactive_file:158500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96872kB dirty:468kB writeback:0kB shmem:20896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11200kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.744933][T10624] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.794290][T10624] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.884977][T10624] lowmem_reserve[]: 0 2479 2480 2480 2480 [ 194.891301][T10624] Node 0 DMA32 free:1342024kB boost:0kB min:34072kB low:42588kB high:51104kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26732kB inactive_anon:0kB active_file:75228kB inactive_file:158492kB unevictable:1536kB writepending:528kB zspages:0kB present:3129332kB managed:2538784kB mlocked:0kB bounce:0kB free_pcp:60844kB local_pcp:33520kB free_cma:0kB [ 194.964477][T10624] lowmem_reserve[]: 0 0 1 1 1 [ 194.971745][T10624] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 195.029432][T10624] lowmem_reserve[]: 0 0 0 0 0 [ 195.034449][T10624] Node 1 Normal free:3883312kB boost:0kB min:55808kB low:69760kB high:83712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54784kB local_pcp:25720kB free_cma:0kB [ 195.091532][T10624] lowmem_reserve[]: 0 0 0 0 0 [ 195.101997][T10624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.126957][T10624] Node 0 DMA32: 2168*4kB (UME) 2202*8kB (UM) 1080*16kB (UM) 652*32kB (UME) 331*64kB (UM) 107*128kB (UME) 112*256kB (UM) 57*512kB (UME) 38*1024kB (UME) 5*2048kB (UME) 279*4096kB (UM) = 1349104kB [ 195.158358][T10624] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 195.221748][T10624] Node 1 Normal: 2*4kB (U) 5*8kB (U) 18*16kB (UE) 9*32kB (UE) 9*64kB (UE) 5*128kB (U) 4*256kB (UM) 7*512kB (UM) 8*1024kB (UME) 5*2048kB (UE) 942*4096kB (UM) = 3883312kB [ 195.241730][T10624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.255998][T10624] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.298687][T10624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.324220][T10624] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.341092][T10624] 59849 total pagecache pages [ 195.348334][T10624] 0 pages in swap cache [ 195.353651][T10624] Free swap = 124996kB [ 195.357851][T10624] Total swap = 124996kB [ 195.362126][T10624] 2097051 pages RAM [ 195.366617][T10624] 0 pages HighMem/MovableOnly [ 195.371579][T10624] 430400 pages reserved [ 195.376476][T10624] 0 pages cma reserved [ 197.060064][T10758] warning: `syz.3.2361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.346992][T10773] block2mtd: Using custom MTD label '' for dev [ 197.373288][T10773] block2mtd: error: cannot open device [ 197.751402][T10796] ima: policy update failed [ 197.759577][ T30] audit: type=1802 audit(4294969400.371:14): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2379" res=0 errno=0 [ 198.247438][T10822] program syz.1.2392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.721470][ T51] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 198.829784][T10863] synth uevent: /bus/mei: unknown uevent action string [ 199.227727][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.234815][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.944110][T10922] nvme_fcloop: unknown parameter or missing value '0' [ 201.988089][T11030] Debayer A: ================= START STATUS ================= [ 201.997002][T11030] Debayer A: Debayer Mean Window Size: 3 [ 202.027079][T11030] Debayer A: ================== END STATUS ================== [ 202.107947][T11038] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 204.869931][T11195] Malformed UNC in devname [ 204.869931][T11195] [ 204.891989][T11195] CIFS: VFS: Malformed UNC in devname [ 205.026921][T11204] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 205.042495][T11204] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 205.101844][T11204] CIFS mount error: No usable UNC path provided in device string! [ 205.101844][T11204] [ 205.122797][T11204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.578120][T11274] nfsd: Unknown parameter '^B-' [ 208.074281][T11368] ptrace attach of "./syz-executor exec"[5939] was attempted by "./syz-executor exec"[11368] [ 208.289056][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 208.794647][ T5946] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 209.119561][ T30] audit: type=1800 audit(4294969411.790:15): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2686" name="lu_gp_id" dev="configfs" ino=26850 res=0 errno=0 [ 209.151019][T11426] kstrtoul() returned -22 for lu_gp_id [ 209.316533][T11438] program syz.0.2693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.337243][T11438] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.369564][T11470] Bluetooth: hci2: command 0x2016 tx timeout [ 211.023091][T11537] deleting an unspecified loop device is not supported. [ 211.218708][ T30] audit: type=1400 audit(4294969413.901:16): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11548 comm="syz.0.2746" [ 211.382602][T11560] usb usb15: usbfs: process 11560 (syz.0.2751) did not claim interface 0 before use [ 211.480369][T11470] Bluetooth: hci1: command 0x0406 tx timeout [ 211.487291][T11470] Bluetooth: hci3: command 0x0406 tx timeout [ 211.494669][T11496] Bluetooth: hci0: command 0x0406 tx timeout [ 211.553480][T11567] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 212.377093][T11567] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 212.434251][T11565] Bluetooth: hci2: command 0x2016 tx timeout [ 212.473597][T11624] bond0: invalid ARP target specified [ 212.667796][T11635] futex_wake_op: syz.0.2786 tries to shift op by -2048; fix this program [ 212.685225][T11635] futex_wake_op: syz.0.2786 tries to shift op by -2048; fix this program [ 212.719940][T11633] smpboot: CPU 1 is now offline [ 213.863119][T11684] process 'syz.0.2809' launched '/dev/fd/3' with NULL argv: empty string added [ 214.425190][T11565] Bluetooth: hci1: command 0x0406 tx timeout [ 214.511105][T11567] Bluetooth: hci2: command 0x2016 tx timeout [ 215.443612][T11567] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 215.794946][T11760] Process accounting resumed [ 216.493880][T11470] Bluetooth: hci1: command 0x0406 tx timeout [ 217.532860][T11565] Bluetooth: hci3: command 0x0406 tx timeout [ 217.955756][T11849] syz_tun: tun_chr_ioctl cmd 35108 [ 219.551366][T11567] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 219.551399][T11567] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 219.568464][T11567] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 219.609502][T11567] Bluetooth: hci3: command 0x0406 tx timeout [ 219.825853][T11905] misc userio: Invalid payload size [ 220.529361][T11936] block2mtd: device name too long [ 222.505068][T12010] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 222.514512][T12009] sd 0:0:1:0: PR command failed: 1026 [ 222.535919][T12009] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 222.553076][T12014] kAFS: No cell specified [ 222.586014][T12009] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 224.478578][T12104] program syz.0.3015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.597826][T12209] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 227.333608][T12246] CIFS mount error: No usable UNC path provided in device string! [ 227.333608][T12246] [ 227.370756][ T30] audit: type=1800 audit(4294969430.145:17): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3082" name="dbroot" dev="configfs" ino=29206 res=0 errno=0 [ 227.398022][T12246] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 228.110886][T12283] futex_wake_op: syz.1.3099 tries to shift op by -2048; fix this program [ 228.156463][T12283] futex_wake_op: syz.1.3099 tries to shift op by -2048; fix this program [ 228.523691][T12304] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.567909][T12304] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 228.768689][T12316] block2mtd: illegal erase size [ 229.213520][T12342] QAT: failed to copy from user. [ 229.883374][T12377] : Can't lookup blockdev [ 230.232884][T12392] QAT: failed to copy from user cfg_data. [ 230.473191][ T30] audit: type=1804 audit(4294969433.261:18): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3157" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 230.907273][T11567] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 231.550905][T12459] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 231.550905][T12459] M' is too long [ 231.636745][T12459] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 231.636745][T12459] W ' is too long [ 231.666774][T12462] [U] ^\ [ 231.842869][T12472] mmap: syz.3.3193 (12472): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 231.992809][ T30] audit: type=1326 audit(4294969434.789:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.3195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7afbd9bf79 code=0x0 [ 232.162046][T12486] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 232.322863][T12493] block nbd0: NBD_DISCONNECT [ 232.572638][T12508] qrtr: Invalid version 0 [ 233.653285][T12557] bonding: no command found in bonding_masters - use +ifname or -ifname [ 233.942419][T12570] ================================================================== [ 233.942438][T12570] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 233.942476][T12570] Write of size 8 at addr ffffc900035ed000 by task syz.1.3241/12570 [ 233.942490][T12570] [ 233.942501][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.1.3241 Tainted: G U I syzkaller #0 PREEMPT(full) [ 233.942524][T12570] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 233.942530][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.942539][T12570] Call Trace: [ 233.942544][T12570] [ 233.942550][T12570] dump_stack_lvl+0x100/0x190 [ 233.942570][T12570] print_report+0x156/0x4c9 [ 233.942589][T12570] ? queue_work_on+0x11b/0x1e0 [ 233.942606][T12570] ? __virt_addr_valid+0x81/0x620 [ 233.942622][T12570] ? sys_fillrect+0x174a/0x1910 [ 233.942639][T12570] kasan_report+0xdf/0x1a0 [ 233.942658][T12570] ? sys_fillrect+0x174a/0x1910 [ 233.942678][T12570] sys_fillrect+0x174a/0x1910 [ 233.942699][T12570] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 233.942722][T12570] bit_clear+0x17d/0x220 [ 233.942736][T12570] ? __pfx_bit_clear+0x10/0x10 [ 233.942752][T12570] ? fb_get_color_depth+0x120/0x250 [ 233.942766][T12570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.942786][T12570] __fbcon_clear+0x633/0x760 [ 233.942800][T12570] ? __pfx_bit_clear+0x10/0x10 [ 233.942815][T12570] fbcon_scroll+0x48b/0x650 [ 233.942828][T12570] con_scroll+0x464/0x690 [ 233.942846][T12570] do_con_write+0x6888/0x8550 [ 233.942869][T12570] ? __pfx_do_con_write+0x10/0x10 [ 233.942890][T12570] con_write+0x23/0xb0 [ 233.942907][T12570] n_tty_write+0x44f/0x12d0 [ 233.942931][T12570] ? __pfx_n_tty_write+0x10/0x10 [ 233.942952][T12570] ? __pfx_woken_wake_function+0x10/0x10 [ 233.942970][T12570] ? rcu_is_watching+0x12/0xc0 [ 233.942988][T12570] ? kfree+0x2a0/0x670 [ 233.943007][T12570] ? __pfx_n_tty_write+0x10/0x10 [ 233.943028][T12570] file_tty_write.isra.0+0x4d2/0x890 [ 233.943048][T12570] redirected_tty_write+0xd4/0x120 [ 233.943066][T12570] vfs_write+0x6ac/0x1070 [ 233.943080][T12570] ? __pfx_redirected_tty_write+0x10/0x10 [ 233.943098][T12570] ? __pfx_vfs_write+0x10/0x10 [ 233.943111][T12570] ? find_held_lock+0x2b/0x80 [ 233.943134][T12570] ksys_write+0x12a/0x250 [ 233.943148][T12570] ? __pfx_ksys_write+0x10/0x10 [ 233.943164][T12570] do_syscall_64+0x106/0xf80 [ 233.943185][T12570] ? clear_bhb_loop+0x40/0x90 [ 233.943201][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.943216][T12570] RIP: 0033:0x7fdf68b9bf79 [ 233.943229][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.943243][T12570] RSP: 002b:00007fdf69ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.943257][T12570] RAX: ffffffffffffffda RBX: 00007fdf68e15fa0 RCX: 00007fdf68b9bf79 [ 233.943267][T12570] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 233.943278][T12570] RBP: 00007fdf68c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 233.943287][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.943296][T12570] R13: 00007fdf68e16038 R14: 00007fdf68e15fa0 R15: 00007fff5372d968 [ 233.943311][T12570] [ 233.943316][T12570] [ 233.943321][T12570] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc900035e9000 allocated at vcalloc_noprof+0x43/0x70 [ 233.943452][T12570] Memory state around the buggy address: [ 233.943485][T12570] ffffc900035ecf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.943501][T12570] ffffc900035ecf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.943512][T12570] >ffffc900035ed000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.943520][T12570] ^ [ 233.943528][T12570] ffffc900035ed080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.943538][T12570] ffffc900035ed100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 233.943546][T12570] ================================================================== [ 233.943559][T12570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 233.943571][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.1.3241 Tainted: G U I syzkaller #0 PREEMPT(full) [ 233.943595][T12570] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 233.943601][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.943610][T12570] Call Trace: [ 233.943616][T12570] [ 233.943621][T12570] dump_stack_lvl+0x100/0x190 [ 233.943642][T12570] vpanic+0x20d/0x630 [ 233.943657][T12570] panic+0xd1/0xd1 [ 233.943670][T12570] ? __pfx_panic+0x10/0x10 [ 233.943686][T12570] ? sys_fillrect+0x174a/0x1910 [ 233.943706][T12570] check_panic_on_warn.cold+0x19/0x34 [ 233.943721][T12570] end_report.part.0+0x3a/0x90 [ 233.943741][T12570] kasan_report.cold+0xe/0x18 [ 233.943761][T12570] ? sys_fillrect+0x174a/0x1910 [ 233.943784][T12570] sys_fillrect+0x174a/0x1910 [ 233.943806][T12570] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 233.943832][T12570] bit_clear+0x17d/0x220 [ 233.943847][T12570] ? __pfx_bit_clear+0x10/0x10 [ 233.943863][T12570] ? fb_get_color_depth+0x120/0x250 [ 233.943878][T12570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.943899][T12570] __fbcon_clear+0x633/0x760 [ 233.943912][T12570] ? __pfx_bit_clear+0x10/0x10 [ 233.943928][T12570] fbcon_scroll+0x48b/0x650 [ 233.943942][T12570] con_scroll+0x464/0x690 [ 233.943960][T12570] do_con_write+0x6888/0x8550 [ 233.943982][T12570] ? __pfx_do_con_write+0x10/0x10 [ 233.944004][T12570] con_write+0x23/0xb0 [ 233.944021][T12570] n_tty_write+0x44f/0x12d0 [ 233.944046][T12570] ? __pfx_n_tty_write+0x10/0x10 [ 233.944067][T12570] ? __pfx_woken_wake_function+0x10/0x10 [ 233.944085][T12570] ? rcu_is_watching+0x12/0xc0 [ 233.944103][T12570] ? kfree+0x2a0/0x670 [ 233.944122][T12570] ? __pfx_n_tty_write+0x10/0x10 [ 233.944144][T12570] file_tty_write.isra.0+0x4d2/0x890 [ 233.944164][T12570] redirected_tty_write+0xd4/0x120 [ 233.944182][T12570] vfs_write+0x6ac/0x1070 [ 233.944196][T12570] ? __pfx_redirected_tty_write+0x10/0x10 [ 233.944214][T12570] ? __pfx_vfs_write+0x10/0x10 [ 233.944227][T12570] ? find_held_lock+0x2b/0x80 [ 233.944251][T12570] ksys_write+0x12a/0x250 [ 233.944265][T12570] ? __pfx_ksys_write+0x10/0x10 [ 233.944281][T12570] do_syscall_64+0x106/0xf80 [ 233.944302][T12570] ? clear_bhb_loop+0x40/0x90 [ 233.944318][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.944334][T12570] RIP: 0033:0x7fdf68b9bf79 [ 233.944347][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.944360][T12570] RSP: 002b:00007fdf69ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.944374][T12570] RAX: ffffffffffffffda RBX: 00007fdf68e15fa0 RCX: 00007fdf68b9bf79 [ 233.944384][T12570] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 233.944393][T12570] RBP: 00007fdf68c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 233.944402][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.944411][T12570] R13: 00007fdf68e16038 R14: 00007fdf68e15fa0 R15: 00007fff5372d968 [ 233.944426][T12570] [ 233.944490][T12570] Kernel Offset: disabled