last executing test programs: 994.97329ms ago: executing program 1 (id=1134): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) write$auto(r0, &(0x7f0000000040)='/sys/kernel/debug/drS/vkms/Wri1/edid_override\x00', 0x20004) 953.946564ms ago: executing program 2 (id=1136): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x169100, 0x0) pread64$auto(r0, 0x0, 0x5000f42a, 0x1f5) 871.043817ms ago: executing program 0 (id=1137): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/173, 0xad) 834.140875ms ago: executing program 1 (id=1138): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) 830.16682ms ago: executing program 3 (id=1139): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) 784.651154ms ago: executing program 2 (id=1140): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/current_speed\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/206, 0xce) 665.177221ms ago: executing program 0 (id=1141): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0) 656.2128ms ago: executing program 3 (id=1142): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0) close_range$auto(0x2, 0x8, 0x0) 651.173633ms ago: executing program 1 (id=1143): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x141041, 0x0) write$auto(r0, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0xe) 336.577808ms ago: executing program 3 (id=1150): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x10, &(0x7f00000002c0)='\x15!\xa8^Ja\x96F\x8c}\xd5SI\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xf5\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\xbcK.\x95\xf1\x87r4e\xd1\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03yca\x94\xbd\x9b\xe5\xb9\xbdg\xa1\xd1C\xda\xe6\x06V\x94\xf4\x8c\xca\x12\xfbo\xfe\xecK\x90/Z!\xb2\x0e\xc6\xf4=w\xbdQu\x84\xd1\xe6n\xd6\xc2\xa3\xfd\xc6M@k\xbc)-\x99\aZ}\xc5\xef\xe2\xb0\xbe\x93\xf4\xfeb|u\x8b\x94\xed\xb3\xd3Q\x96Ic\xb6=[\xb7\xb0=V\xd4F\\\a\xa5\x9fR*\xe6#\xa8\xb3\xe5-\xd1I\xde\xde7\x83\xe4\xcf8/\xd2J\x89@\xa5\xab\x9b\xe3\x01\x00\xce\xb7J\x8e\xd2\xaf\xf5 7\xff\x05\xcfbq\xda\xf4U\xc7D;S\xd3\x11 \xa7\xbd\xe2\xb4\xbdH\x98\xc9V\x0e\xb3\x19P\xc3\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xfb,\xf2M\xb2\x96B\xf8\xed\x88\xef\xb9\xa5R\xef\xbb\xf2a\x00\xf3\xa4\x8bE r\xbfZ\xe4\xa8a\x8f\xe5\xace\xb8\x04C\xb4\xb1\x05Zk\xe1W\xe3!\x1a\x9b\xd1\x12\xa7\x8d_\x0ec\xb5t\x95\xb8H\x9b94\xad4\xe8 \xc0\a\xc0F\xc3\x8c!\xd3\xf4\x19l{\xab\x8bfu\x96\x89\vj\xe3\xc9\xb6\xdb\xbbvv\xd3\x7f\xd7\xf4\xf0\x96_\x96\xe6\xc4g\x12,E\x19\x8a\xe2\x16sKP\xa9\xee*%+\xc0zZ\xb7\x8c\xda\xf6\xb8M\xe4P\\\x1c0|\"\xc1\x10\x9dl\xb1\xce\xc2\xc3lVF\xf6$\xbcpZ\xf8Z\xa7\xad\x9e\x86Fc\x89F', 0x420b5bf4) 258.879717ms ago: executing program 1 (id=1151): r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x6, 0xd) 207.021544ms ago: executing program 2 (id=1152): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_cpumask\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x1}, 0x7) 179.868116ms ago: executing program 3 (id=1153): socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) 175.689684ms ago: executing program 0 (id=1154): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/random/urandom_min_reseed_secs\x00', 0x80a02, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) 96.737459ms ago: executing program 1 (id=1155): setitimer$auto(0x2, &(0x7f00000002c0)={{0x82, 0x401}, {0x2, 0x8}}, 0x0) setrlimit$auto(0x0, &(0x7f0000000040)={0x3346, 0xffffffffffffffff}) 39.816751ms ago: executing program 2 (id=1156): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, &(0x7f0000000080)='/sys/kernel/security\xf9\x1cntegrity/evm/evm_xat\x99rs\x00B\b\xbd\x9f\x15\x81\x15\xb6h\xae', 0x1000000006) 21.495991ms ago: executing program 3 (id=1157): socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x0, 0x20, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x5) 0s ago: executing program 0 (id=1158): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 68.566798][ T5813] cgroup: Unknown subsys name 'net' [ 68.678650][ T5813] cgroup: Unknown subsys name 'cpuset' [ 68.687780][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.091933][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.432831][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439975][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.645900][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.655150][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.662973][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.671172][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.679018][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.707004][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.715563][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.723247][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.731774][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.739311][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.813630][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.821885][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.831945][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.839901][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.849412][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.873623][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.895533][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.925362][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.938124][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.946115][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.231933][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.379796][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.431330][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.480029][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.487326][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.494534][ T5824] bridge_slave_0: entered allmulticast mode [ 72.502065][ T5824] bridge_slave_0: entered promiscuous mode [ 72.558159][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.565327][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.572497][ T5824] bridge_slave_1: entered allmulticast mode [ 72.579840][ T5824] bridge_slave_1: entered promiscuous mode [ 72.672804][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.698124][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.705367][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.712489][ T5828] bridge_slave_0: entered allmulticast mode [ 72.719812][ T5828] bridge_slave_0: entered promiscuous mode [ 72.729304][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.738861][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 72.760476][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.767727][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.774856][ T5828] bridge_slave_1: entered allmulticast mode [ 72.782934][ T5828] bridge_slave_1: entered promiscuous mode [ 72.819873][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.827892][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.835026][ T5831] bridge_slave_0: entered allmulticast mode [ 72.842232][ T5831] bridge_slave_0: entered promiscuous mode [ 72.871735][ T5824] team0: Port device team_slave_0 added [ 72.877620][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.884771][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.892119][ T5831] bridge_slave_1: entered allmulticast mode [ 72.899491][ T5831] bridge_slave_1: entered promiscuous mode [ 72.928942][ T5824] team0: Port device team_slave_1 added [ 72.963674][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.999705][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.032461][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.052269][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.059353][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.085567][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.109977][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.129661][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.136762][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.162667][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.173681][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.181232][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.189166][ T5833] bridge_slave_0: entered allmulticast mode [ 73.196515][ T5833] bridge_slave_0: entered promiscuous mode [ 73.215364][ T5828] team0: Port device team_slave_0 added [ 73.233090][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.240378][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.247730][ T5833] bridge_slave_1: entered allmulticast mode [ 73.254777][ T5833] bridge_slave_1: entered promiscuous mode [ 73.272839][ T5828] team0: Port device team_slave_1 added [ 73.303350][ T5831] team0: Port device team_slave_0 added [ 73.311691][ T5831] team0: Port device team_slave_1 added [ 73.375447][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.382408][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.408379][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.422299][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.435250][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.452383][ T5824] hsr_slave_0: entered promiscuous mode [ 73.458851][ T5824] hsr_slave_1: entered promiscuous mode [ 73.475587][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.482558][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.508563][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.544296][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.551361][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.577697][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.598988][ T5833] team0: Port device team_slave_0 added [ 73.608163][ T5833] team0: Port device team_slave_1 added [ 73.614818][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.622013][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.648200][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.745743][ T5827] Bluetooth: hci0: command tx timeout [ 73.768722][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.775779][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.802174][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.818266][ T5831] hsr_slave_0: entered promiscuous mode [ 73.824493][ T5831] hsr_slave_1: entered promiscuous mode [ 73.830730][ T5827] Bluetooth: hci1: command tx timeout [ 73.836904][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 73.842762][ T5831] Cannot create hsr debugfs directory [ 73.854603][ T5828] hsr_slave_0: entered promiscuous mode [ 73.860959][ T5828] hsr_slave_1: entered promiscuous mode [ 73.867201][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 73.872926][ T5828] Cannot create hsr debugfs directory [ 73.897718][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.904686][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.931002][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.935298][ T5827] Bluetooth: hci2: command tx timeout [ 73.985316][ T5827] Bluetooth: hci3: command tx timeout [ 74.117976][ T5833] hsr_slave_0: entered promiscuous mode [ 74.124203][ T5833] hsr_slave_1: entered promiscuous mode [ 74.130536][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 74.136383][ T5833] Cannot create hsr debugfs directory [ 74.398494][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.428569][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.445491][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.469243][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.530307][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.558567][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.571068][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.589805][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.654099][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.667875][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.681956][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.692831][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.768714][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.779301][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.790808][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.810380][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.900067][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.937977][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.958331][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.979721][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.987055][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.013461][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.020653][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.058629][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.079856][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.087033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.111781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.118915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.146290][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.157923][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.209523][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.237592][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.248973][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.303096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.310344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.347186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.354340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.398174][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.432658][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.439842][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.474774][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.487539][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.530141][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.537373][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.580113][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.679605][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.777538][ T5824] veth0_vlan: entered promiscuous mode [ 75.819006][ T5824] veth1_vlan: entered promiscuous mode [ 75.829407][ T5827] Bluetooth: hci0: command tx timeout [ 75.843772][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.905741][ T5827] Bluetooth: hci1: command tx timeout [ 75.977978][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.985477][ T5827] Bluetooth: hci2: command tx timeout [ 75.986830][ T5824] veth0_macvtap: entered promiscuous mode [ 76.002578][ T5824] veth1_macvtap: entered promiscuous mode [ 76.062715][ T5831] veth0_vlan: entered promiscuous mode [ 76.068779][ T5827] Bluetooth: hci3: command tx timeout [ 76.080686][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.106391][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.123885][ T5828] veth0_vlan: entered promiscuous mode [ 76.134608][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.150186][ T5831] veth1_vlan: entered promiscuous mode [ 76.167865][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.177566][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.196292][ T5828] veth1_vlan: entered promiscuous mode [ 76.204144][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.213747][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.325673][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.333705][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.381773][ T5831] veth0_macvtap: entered promiscuous mode [ 76.391781][ T5828] veth0_macvtap: entered promiscuous mode [ 76.410859][ T5833] veth0_vlan: entered promiscuous mode [ 76.421276][ T5831] veth1_macvtap: entered promiscuous mode [ 76.429521][ T5828] veth1_macvtap: entered promiscuous mode [ 76.439682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.455498][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.455926][ T5833] veth1_vlan: entered promiscuous mode [ 76.479703][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.527414][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.540581][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.560744][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.584669][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.593572][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609169][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656003][ T5833] veth0_macvtap: entered promiscuous mode [ 76.668150][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.679742][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.698527][ T5833] veth1_macvtap: entered promiscuous mode [ 76.721014][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.742713][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.766015][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796593][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.827631][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.860617][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.961950][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.980559][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.017818][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.035625][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.102965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.123837][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.199395][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.211042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.234700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.235916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.312014][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.324507][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.408113][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.437883][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.517613][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.542379][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.910103][ T5827] Bluetooth: hci0: command tx timeout [ 77.986776][ T5827] Bluetooth: hci1: command tx timeout [ 78.046624][ T5938] Setting dangerous option i915.mitigations - tainting kernel [ 78.066689][ T5827] Bluetooth: hci2: command tx timeout [ 78.145284][ T5827] Bluetooth: hci3: command tx timeout [ 78.288979][ T5948] program syz.3.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.377960][ T5990] ICMPv6: process `syz.3.41' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 79.985966][ T5827] Bluetooth: hci0: command tx timeout [ 80.065575][ T5827] Bluetooth: hci1: command tx timeout [ 80.146682][ T5827] Bluetooth: hci2: command tx timeout [ 80.236573][ T5827] Bluetooth: hci3: command tx timeout syzkaller syzkaller login: [ 82.779114][ T6103] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.527456][ T29] audit: type=1800 audit(4294967305.809:2): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="lu_gp_id" dev="configfs" ino=8442 res=0 errno=0 [ 84.535301][ T6183] kstrtoul() returned -22 for lu_gp_id [ 84.981027][ T6205] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.020347][ T6205] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 85.823539][ T6246] random: crng reseeded on system resumption [ 86.795613][ T9] cfg80211: failed to load regulatory.db [ 87.664493][ T6338] program syz.0.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.215676][ T6356] smpboot: CPU 1 is now offline [ 90.664774][ T6458] usb usb24: usbfs: process 6458 (syz.2.267) did not claim interface 0 before use [ 90.955917][ T29] audit: type=1800 audit(4294967312.249:3): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.273" name="dbroot" dev="configfs" ino=9107 res=0 errno=0 [ 92.048147][ T29] audit: type=1800 audit(4294967313.339:4): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.295" name="members" dev="configfs" ino=10281 res=0 errno=0 [ 92.390875][ T6530] kAFS: Invalid Command on /proc/fs/afs/cells file [ 93.560940][ T6564] zswap: compressor _ not available [ 94.035429][ T6586] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.346574][ T6596] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.438523][ T6599] synth uevent: /module/au0828: unknown uevent action string [ 94.640074][ T6608] random: crng reseeded on system resumption [ 97.445262][ T6692] program syz.0.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.502834][ T6692] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 98.559537][ T6731] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 98.939236][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.947950][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 98.989429][ T5827] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 99.903015][ T6787] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 100.003743][ T6787] net nr1: uevent: failed to send synthetic uevent: -22 [ 100.207802][ T6798] syz.0.430 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.933677][ T6831] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.273874][ T6934] nvme_fcloop: unknown parameter or missing value '0' [ 104.255568][ T6976] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 104.776961][ T6996] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 106.827697][ T7073] [U]  [ 107.077716][ T29] audit: type=1800 audit(4294967328.359:5): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.564" name="sr0" dev="devtmpfs" ino=2812 res=0 errno=0 [ 107.798185][ T7111] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 110.924729][ T7227] i2c i2c-0: new_device: Missing parameters [ 111.793080][ T7263] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.035597][ T7271] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.353242][ T29] audit: type=1326 audit(4294967333.639:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.1.638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e1c99bf79 code=0x0 [ 112.382504][ T7282] usb usb16: usbfs: process 7282 (syz.0.639) did not claim interface 0 before use [ 112.573212][ T7288] bond0: no command found in slaves file - use +ifname or -ifname [ 113.592001][ T7333] binder: 7330:7333 ioctl c00c6211 38 returned -14 [ 114.108457][ T7355] tipc: Can't bind to reserved service type 0 [ 114.428943][ T7370] QAT: Stopping all acceleration devices. [ 117.019588][ T7488] i2c i2c-0: new_device: Can't parse I2C address [ 117.168804][ T7494] vivid-007: ================= START STATUS ================= [ 117.209176][ T7494] vivid-007: Generate PTS: true [ 117.235178][ T7494] vivid-007: Generate SCR: true [ 117.271140][ T7494] tpg source WxH: 320x240 (Y'CbCr) [ 117.305248][ T7494] tpg field: 1 [ 117.325229][ T7494] tpg crop: (0,0)/320x240 [ 117.339540][ T7494] tpg compose: (0,0)/320x240 [ 117.361416][ T7494] tpg colorspace: 8 [ 117.385423][ T7494] tpg transfer function: 0/0 [ 117.412990][ T7494] tpg Y'CbCr encoding: 0/0 [ 117.445358][ T7494] tpg quantization: 0/0 [ 117.466167][ T7494] tpg RGB range: 0/2 [ 117.481566][ T7494] vivid-007: ================== END STATUS ================== [ 120.740647][ T7650] bond0: invalid ARP target specified [ 122.750329][ T29] audit: type=1800 audit(4294967344.039:7): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.858" name="features" dev="configfs" ino=13928 res=0 errno=0 [ 122.960881][ T7748] sd 0:0:1:0: PR command failed: 1026 [ 123.002630][ T7748] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 123.038247][ T7748] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 124.617842][ T7824] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.262694][ T7898] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.563292][ T7908] delete_channel: no stack [ 127.420380][ T7949] block nbd0: NBD_DISCONNECT [ 130.193009][ T8073] warning: `syz.1.1022' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.612535][ T8091] QAT: failed to copy from user. [ 131.462650][ T8133] random: crng reseeded on system resumption [ 132.870696][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877257][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.593761][ T8223] bcache: register_bcache() error : failed to open device [ 136.295058][ T8332] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 136.708416][ T8349] ================================================================== [ 136.708438][ T8349] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 136.708477][ T8349] Write of size 8 at addr ffffc900043c9be0 by task syz.2.1156/8349 [ 136.708490][ T8349] [ 136.708503][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.2.1156 Tainted: G U I syzkaller #0 PREEMPT(full) [ 136.708527][ T8349] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 136.708532][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.708544][ T8349] Call Trace: [ 136.708549][ T8349] [ 136.708558][ T8349] dump_stack_lvl+0x100/0x190 [ 136.708581][ T8349] print_report+0x156/0x4c9 [ 136.708602][ T8349] ? _raw_spin_lock_irqsave+0x52/0x60 [ 136.708618][ T8349] ? __virt_addr_valid+0x81/0x620 [ 136.708639][ T8349] ? sys_imageblit+0x19fb/0x1d60 [ 136.708658][ T8349] kasan_report+0xdf/0x1e0 [ 136.708680][ T8349] ? sys_imageblit+0x19fb/0x1d60 [ 136.708702][ T8349] sys_imageblit+0x19fb/0x1d60 [ 136.708724][ T8349] ? __pfx_sys_imageblit+0x10/0x10 [ 136.708745][ T8349] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 136.708765][ T8349] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 136.708812][ T8349] soft_cursor+0x524/0xa10 [ 136.708832][ T8349] ? fb_get_color_depth+0x120/0x250 [ 136.708849][ T8349] bit_cursor+0xe58/0x16f0 [ 136.708868][ T8349] ? __pfx_bit_cursor+0x10/0x10 [ 136.708888][ T8349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.708910][ T8349] ? get_color+0x1da/0x450 [ 136.708923][ T8349] ? __pfx_bit_cursor+0x10/0x10 [ 136.708939][ T8349] fbcon_cursor+0x43c/0x5e0 [ 136.708954][ T8349] ? add_softcursor+0x1b0/0x290 [ 136.708971][ T8349] ? hide_cursor+0xa3/0x230 [ 136.708988][ T8349] set_cursor+0x1db/0x250 [ 136.709005][ T8349] vcs_write+0xba9/0xd60 [ 136.709022][ T8349] ? futex_wake+0x420/0x530 [ 136.709042][ T8349] ? __pfx_vcs_write+0x10/0x10 [ 136.709058][ T8349] ? bpf_lsm_file_permission+0x9/0x10 [ 136.709078][ T8349] ? security_file_permission+0x76/0x210 [ 136.709095][ T8349] ? rw_verify_area+0xce/0x6d0 [ 136.709112][ T8349] vfs_write+0x2aa/0x1070 [ 136.709131][ T8349] ? __pfx_vcs_write+0x10/0x10 [ 136.709148][ T8349] ? __pfx_vfs_write+0x10/0x10 [ 136.709165][ T8349] ? find_held_lock+0x2b/0x80 [ 136.709185][ T8349] ? __fget_files+0x215/0x3d0 [ 136.709204][ T8349] ? __fget_files+0x215/0x3d0 [ 136.709223][ T8349] ? __fget_files+0x21f/0x3d0 [ 136.709244][ T8349] ksys_write+0x12a/0x250 [ 136.709262][ T8349] ? __pfx_ksys_write+0x10/0x10 [ 136.709283][ T8349] do_syscall_64+0x106/0xf80 [ 136.709300][ T8349] ? clear_bhb_loop+0x40/0x90 [ 136.709317][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.709331][ T8349] RIP: 0033:0x7f9c09d9bf79 [ 136.709348][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.709362][ T8349] RSP: 002b:00007f9c0abed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.709381][ T8349] RAX: ffffffffffffffda RBX: 00007f9c0a015fa0 RCX: 00007f9c09d9bf79 [ 136.709391][ T8349] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 136.709401][ T8349] RBP: 00007f9c09e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 136.709410][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.709419][ T8349] R13: 00007f9c0a016038 R14: 00007f9c0a015fa0 R15: 00007ffcae9f7888 [ 136.709434][ T8349] [ 136.709440][ T8349] [ 136.709444][ T8349] The buggy address belongs to a vmalloc virtual mapping [ 136.709455][ T8349] Memory state around the buggy address: [ 136.709466][ T8349] ffffc900043c9a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 136.709479][ T8349] ffffc900043c9b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 136.709489][ T8349] >ffffc900043c9b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 136.709497][ T8349] ^ [ 136.709505][ T8349] ffffc900043c9c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 136.709515][ T8349] ffffc900043c9c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 136.709523][ T8349] ================================================================== [ 136.709532][ T8349] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.709544][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.2.1156 Tainted: G U I syzkaller #0 PREEMPT(full) [ 136.709566][ T8349] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 136.709572][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.709580][ T8349] Call Trace: [ 136.709585][ T8349] [ 136.709590][ T8349] dump_stack_lvl+0x100/0x190 [ 136.709610][ T8349] vpanic+0x552/0x970 [ 136.709624][ T8349] ? __pfx_vpanic+0x10/0x10 [ 136.709638][ T8349] ? __pfx_vprintk_emit+0x10/0x10 [ 136.709660][ T8349] ? sys_imageblit+0x19fb/0x1d60 [ 136.709680][ T8349] panic+0xd1/0xe0 [ 136.709693][ T8349] ? __pfx_panic+0x10/0x10 [ 136.709708][ T8349] ? sys_imageblit+0x19fb/0x1d60 [ 136.709729][ T8349] check_panic_on_warn.cold+0x19/0x34 [ 136.709744][ T8349] end_report.part.0+0x3a/0x90 [ 136.709763][ T8349] kasan_report.cold+0xe/0x18 [ 136.709790][ T8349] ? sys_imageblit+0x19fb/0x1d60 [ 136.709813][ T8349] sys_imageblit+0x19fb/0x1d60 [ 136.709836][ T8349] ? __pfx_sys_imageblit+0x10/0x10 [ 136.709858][ T8349] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 136.709878][ T8349] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 136.709902][ T8349] soft_cursor+0x524/0xa10 [ 136.709921][ T8349] ? fb_get_color_depth+0x120/0x250 [ 136.709937][ T8349] bit_cursor+0xe58/0x16f0 [ 136.709956][ T8349] ? __pfx_bit_cursor+0x10/0x10 [ 136.709975][ T8349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.709996][ T8349] ? get_color+0x1da/0x450 [ 136.710010][ T8349] ? __pfx_bit_cursor+0x10/0x10 [ 136.710026][ T8349] fbcon_cursor+0x43c/0x5e0 [ 136.710040][ T8349] ? add_softcursor+0x1b0/0x290 [ 136.710057][ T8349] ? hide_cursor+0xa3/0x230 [ 136.710075][ T8349] set_cursor+0x1db/0x250 [ 136.710092][ T8349] vcs_write+0xba9/0xd60 [ 136.710109][ T8349] ? futex_wake+0x420/0x530 [ 136.710132][ T8349] ? __pfx_vcs_write+0x10/0x10 [ 136.710149][ T8349] ? bpf_lsm_file_permission+0x9/0x10 [ 136.710168][ T8349] ? security_file_permission+0x76/0x210 [ 136.710186][ T8349] ? rw_verify_area+0xce/0x6d0 [ 136.710203][ T8349] vfs_write+0x2aa/0x1070 [ 136.710222][ T8349] ? __pfx_vcs_write+0x10/0x10 [ 136.710239][ T8349] ? __pfx_vfs_write+0x10/0x10 [ 136.710257][ T8349] ? find_held_lock+0x2b/0x80 [ 136.710277][ T8349] ? __fget_files+0x215/0x3d0 [ 136.710296][ T8349] ? __fget_files+0x215/0x3d0 [ 136.710316][ T8349] ? __fget_files+0x21f/0x3d0 [ 136.710337][ T8349] ksys_write+0x12a/0x250 [ 136.710355][ T8349] ? __pfx_ksys_write+0x10/0x10 [ 136.710376][ T8349] do_syscall_64+0x106/0xf80 [ 136.710394][ T8349] ? clear_bhb_loop+0x40/0x90 [ 136.710410][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.710424][ T8349] RIP: 0033:0x7f9c09d9bf79 [ 136.710436][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.710450][ T8349] RSP: 002b:00007f9c0abed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.710463][ T8349] RAX: ffffffffffffffda RBX: 00007f9c0a015fa0 RCX: 00007f9c09d9bf79 [ 136.710473][ T8349] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 136.710482][ T8349] RBP: 00007f9c09e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 136.710491][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.710500][ T8349] R13: 00007f9c0a016038 R14: 00007f9c0a015fa0 R15: 00007ffcae9f7888 [ 136.710514][ T8349] [ 136.710570][ T8349] Kernel Offset: disabled