last executing test programs: 7.22200391s ago: executing program 2 (id=1999): bpf$auto(0x0, &(0x7f0000000040)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x5}, 0x92) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x88882, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0x40084d02, r2) getdents$auto(r1, 0x0, 0x3f1) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r3) sendmsg$auto_TIPC_NL_MEDIA_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff94, 0xfd3, 0x2, 0xec, 0x4, 0x100000000, 0x6, 0x8000000000000000, 0xfffffffffffffff8, 0x1}) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r6) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) writev$auto(r5, &(0x7f0000000280)={&(0x7f0000000440)="8e2588b506f60fc33c76d9e12061ef516d344eadcb10271787535320dcdce232b4722338882ed9efb589921eaa08ada3a217bbc437141f0394c325ba83cb7ddf79eac354ef8719b9917567ea5420b2ea9d29d4ac2d12e860e7e22077e710da19549bb98258b5608dbdee8597624ed06e9e0c117b680c6f56592660b8e55f9343c6a99ae07d067c568ac5f8f2d681c9169ed031f7886288e91ca84d088429ff55e23d1fdbb088c3affc4722603a1731e0827623d928f71965c3a9db2b92f764922ecf5c9401dee6dc02f9c9", 0x4}, 0x1ff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r8) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) writev$auto(0x3, &(0x7f0000000140)={&(0x7f0000000000), 0xdc7}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x10007}, 0x3, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) (async) prctl$auto(0x3, 0xa4c, 0x0, 0x0, 0x7) (async) getdents$auto(r1, 0x0, 0xa2b0) pread64$auto(r0, &(0x7f0000000140)='\xe8\xaa\n\x99\x92\x0ef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) socket(0x10, 0x2, 0x5) (async, rerun: 32) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) (async, rerun: 32) prctl$auto(0x1000000003b, 0x80001, 0x0, 0x200000005, 0x100000000000007) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 5.045410044s ago: executing program 1 (id=2007): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', 0x0, 0x0, 0x8002, 0x200) readv$auto(r0, 0x0, 0x2006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/zswap/parameters/compressor\x00', 0x4c0002, 0x0) mremap$auto(0x8000000000000001, 0x4, 0x9, 0x8, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/memory_hotplug/parameters/memmap_on_memory\x00', 0x80, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x40001b, 0x1, 0x0, 0x3, 0x100010009) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c9282, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) lstat$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40200, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af20, r3) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x20100, 0x0) ioctl$auto_UI_SET_SNDBIT(r5, 0x4004556a, &(0x7f0000001240)=0x5) 4.031926216s ago: executing program 0 (id=2010): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = epoll_create$auto(0x3e) flock$auto(r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) ioctl$auto(r2, 0x401, r3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f00000000c0)={0xd, 0xb2, 0x0, 0x5, 0x5, 0x800000000000c, 0x801, 0xfffffffffffffff9, 0x3, 0x480000, 0x81}, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r6 = socket(0x18, 0x5, 0x1) connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 3.709453034s ago: executing program 0 (id=2012): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb5, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0xa) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="07454f0000000000df250a"], 0x14}}, 0x10004010) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, r2) madvise$auto(0x8000, 0x87fff, 0xc) madvise$auto(0x4, 0x4, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004812}, 0x4000800) 3.460254937s ago: executing program 2 (id=2014): r0 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000d80)=ANY=[@ANYBLOB="e4170000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf251500000004000880360108804a002e8008001a00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04007d806a1349800400ce0046002480dea14d08004800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04008880901166805b005880052ae2ef575f0fde8b1885d8e08b5e2b58ef0cb3a908001b00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0400b500080037001d590b46582a2a1c4fed7191d39aa75670f65adbd1e96a51ae626b2a7710a66fc51097c990de2a3c78771ee0c55e1e9525913b81e4d7cc8e874607b62727afe12d23848e92d3c952d6862d7781e98783621c3dfe720845574d0ce4425c7077babb79a3e808742f49f805328ef4bb4875bdb51a31bd2d2e569a6c522812c8002b4a4cbb71f217566c0f53cfcae9eefba31b553e75d24b310810196637c3e87796b49c58570e6db21f", @ANYRES32=0x0, @ANYBLOB="000014002200fe880000000000000000000000000001"], 0x17e4}, 0x1, 0x0, 0x0, 0xf01b2c2d550e28a7}, 0x4000804) open(&(0x7f0000000000)='./file0\x00', 0x1213c2, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) syz_clone(0x8000400, &(0x7f0000000840)="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", 0x501, 0x0, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) r2 = socket(0x10, 0x2, 0x0) set_mempolicy$auto(0xfffffffe, &(0x7f0000000040)=0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1ac}}, 0x4048000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x129002, 0x0) r4 = socket(0x2, 0x1, 0x106) setsockopt$auto(r4, 0x1, 0xd, 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x82d) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) sendfile$auto(r6, 0x3, 0x0, 0x400000000006) write$auto(r3, 0x0, 0xc) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x10) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r7 = getsockopt$auto(r1, 0x4, 0x415, 0x0, &(0x7f0000000100)=0x7ffe) write$auto_console_fops_tty_io(r7, &(0x7f0000000280)="0c5f8b1eeb75017b8150dc", 0xb) 3.458342141s ago: executing program 0 (id=2015): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) 3.308805206s ago: executing program 1 (id=2016): mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x200204, 0x14) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) getsockopt$auto_SO_PEEK_OFF(r0, 0x1, 0x2a, &(0x7f0000000000)='/@/\\\x00', &(0x7f0000000040)) 3.259620174s ago: executing program 0 (id=2017): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) r1 = prctl$auto_PR_SYS_DISPATCH_ON(0x3ff, 0x1, 0xffffffffffffffff, 0x6, 0x5) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r2, 0x0, 0x2, 0x0) waitid$auto(0x0, r1, &(0x7f0000000040)={@_si_pad}, 0x1ff, &(0x7f00000000c0)={{0x801, 0x81}, {0xfffffffffffffffb, 0x800}, 0x3, 0xfffffffffffffff7, 0xb8, 0x2, 0x6, 0x8, 0x6, 0xb0bf, 0x7, 0x0, 0x1000, 0x2, 0xa, 0x8}) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r3, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x3, 0x0, 0x3) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, 0x0) 2.730059084s ago: executing program 1 (id=2018): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20048014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0xa040) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x60, 0x80000000, 0x9, 0x9ce9, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 2.51374152s ago: executing program 3 (id=2019): r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x8000) capset$auto(0x0, 0x0) read$auto_trace_fops_debugfs(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) 2.317361804s ago: executing program 1 (id=2020): socket(0x24, 0x0, 0x0) (async) socket(0x24, 0x0, 0x0) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000ca858c4e1e6aa90920080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008) 2.312601499s ago: executing program 3 (id=2021): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x6) (async) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) (async) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) (async) unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) r2 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x2004081) (async) write$auto(0x3, 0x0, 0x1e) (async, rerun: 64) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) ioctl$auto_RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000001c0)=0x1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r3, 0x100, 0x2070bd26, 0x25dfdb78, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8011}, 0x80) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (rerun: 64) read$auto(r5, 0x0, 0x1) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) ioctl$auto_BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\xff'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) 2.214621718s ago: executing program 2 (id=2022): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/bcdDevice\x00', 0x6442, 0x0) read$auto(r1, 0x0, 0x20) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) (async, rerun: 64) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x0, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000004040)) (async) swapon$auto(0x0, 0x8000004) 1.747474396s ago: executing program 1 (id=2023): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000005f40)='/sys/kernel/debug/clk/clk_dump\x00', 0x8800, 0x0) socket(0x11, 0x80003, 0x300) r0 = socket(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x200183, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/devices\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto_KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)={0x5}) 1.747291607s ago: executing program 3 (id=2024): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000000c0)={0x3, 0x2, 0x7fffffff, 0x10, 0x6, 0x800, "dcd2aa299ba72ac5018b992439823e22", 0x10, 0x1, 0x0, 0x7e, 0x7, 0x6, 0x4}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x38d, 0x10, 0x1}]}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, r0, 0x0) (async) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) (async) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000000c0)={0x3, 0x2, 0x7fffffff, 0x10, 0x6, 0x800, "dcd2aa299ba72ac5018b992439823e22", 0x10, 0x1, 0x0, 0x7e, 0x7, 0x6, 0x4}) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x38d, 0x10, 0x1}]}) (async) 1.33904698s ago: executing program 3 (id=2025): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', 0x0, 0x0, 0x8002, 0x200) readv$auto(r0, 0x0, 0x2006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/zswap/parameters/compressor\x00', 0x4c0002, 0x0) mremap$auto(0x8000000000000001, 0x4, 0x9, 0x8, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/memory_hotplug/parameters/memmap_on_memory\x00', 0x80, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x40001b, 0x1, 0x0, 0x3, 0x100010009) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c9282, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) lstat$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40200, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af20, r3) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x20100, 0x0) ioctl$auto_UI_SET_SNDBIT(r5, 0x4004556a, &(0x7f0000001240)=0x5) 1.055503533s ago: executing program 1 (id=2026): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) (async) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)="85f3fb1553598ec47684db1391b13104cecd41f8be06fc90431b916c8446c26b3c40032338db061ac5ca08be6bcb96d4e6127582af833024c4df") prctl$auto(0xe, 0x0, 0x3, 0x4, 0x400) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, 0x0, 0x20080055) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="10002abdff0f0000df25020000000400ae00"], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) (async) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)="7f07d3") (async) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)="7f07d3") socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) swapon$auto(&(0x7f0000000100)='\',\x00', 0x113) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x163b02, 0x0) read$auto(r5, 0x0, 0x7ff) 598.627693ms ago: executing program 0 (id=2027): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x800, 0x0) ioctl$auto_SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)='\'?') setsockopt$auto(r0, 0x11, 0xa, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x2, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x800, 0x0) (async) ioctl$auto_SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)='\'?') (async) setsockopt$auto(r0, 0x11, 0xa, 0x0, 0x8) (async) 375.437976ms ago: executing program 0 (id=2028): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) fchdir$auto(0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1c, 0x131, 0x0, 0x1, [@NL80211_ATTR_PMKID={0x15, 0x55, "9da6b8c2443745ef10de92b9528279a9a0"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20048014) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, 0x0, 0xa040) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x60, 0x80000000, 0x9, 0x9ce9, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 316.008925ms ago: executing program 3 (id=2029): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20048014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0xa040) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x60, 0x80000000, 0x9, 0x9ce9, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 0s ago: executing program 3 (id=2030): socket(0xa, 0x1, 0x3a) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0x0, 0x100, 0x2) write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000000)="4f7b22f6c0dc27db37d94f87", 0xc) kernel console output (not intermixed with test programs): ] do_syscall_64+0x106/0xf80 [ 114.758991][ T6264] ? clear_bhb_loop+0x40/0x90 [ 114.759032][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.759076][ T6264] RIP: 0033:0x7f6a3f39c799 [ 114.759105][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.759137][ T6264] RSP: 002b:00007f6a402620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.759168][ T6264] RAX: ffffffffffffffda RBX: 00007f6a3f616098 RCX: 00007f6a3f39c799 [ 114.759191][ T6264] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6a3f61609c [ 114.759210][ T6264] RBP: 00007f6a3f616090 R08: 0000000000000000 R09: 0000000000000000 [ 114.759229][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.759247][ T6264] R13: 00007f6a3f616128 R14: 00007ffd1925f820 R15: 00007ffd1925f908 [ 114.759288][ T6264] [ 115.018638][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.031823][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 115.070992][ T6271] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.205274][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.338652][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.418545][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.153593][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 116.271747][ T6289] zswap: compressor not available [ 117.258739][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.353562][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 117.498514][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.911159][ T6358] Invalid input. Must be >= 4608 [ 120.118685][ T6361] TCP: TCP_TX_DELAY enabled [ 121.929704][ T6385] syz.2.100 (6385) used greatest stack depth: 19672 bytes left [ 122.544121][ T30] audit: type=1800 audit(1772179878.482:3): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="members" dev="configfs" ino=9993 res=0 errno=0 [ 124.719038][ T6443] NFSD: Failed to start, no listeners configured. [ 125.777267][ T6461] FAULT_INJECTION: forcing a failure. [ 125.777267][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.791849][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 125.791894][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.791914][ T6461] Call Trace: [ 125.791923][ T6461] [ 125.791935][ T6461] dump_stack_lvl+0x100/0x190 [ 125.792011][ T6461] should_fail_ex.cold+0x5/0xa [ 125.792052][ T6461] _copy_from_user+0x2e/0xd0 [ 125.792105][ T6461] __x64_sys_epoll_ctl+0x131/0x1e0 [ 125.792153][ T6461] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 125.792215][ T6461] do_syscall_64+0x106/0xf80 [ 125.792251][ T6461] ? clear_bhb_loop+0x40/0x90 [ 125.792303][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.792335][ T6461] RIP: 0033:0x7f8511f9c799 [ 125.792366][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.792396][ T6461] RSP: 002b:00007f8512e39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 125.792430][ T6461] RAX: ffffffffffffffda RBX: 00007f8512215fa0 RCX: 00007f8511f9c799 [ 125.792451][ T6461] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000004 [ 125.792470][ T6461] RBP: 00007f8512032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 125.792489][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.792506][ T6461] R13: 00007f8512216038 R14: 00007f8512215fa0 R15: 00007ffda91c5738 [ 125.792546][ T6461] [ 126.192185][ T6472] FAULT_INJECTION: forcing a failure. [ 126.192185][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 126.238816][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(full) [ 126.238862][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.238884][ T6472] Call Trace: [ 126.238895][ T6472] [ 126.238908][ T6472] dump_stack_lvl+0x100/0x190 [ 126.238967][ T6472] should_fail_ex.cold+0x5/0xa [ 126.239008][ T6472] should_failslab+0xc2/0x120 [ 126.239041][ T6472] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 126.239098][ T6472] ? ima_inode_get+0x11f/0x580 [ 126.239151][ T6472] ima_inode_get+0x11f/0x580 [ 126.239198][ T6472] process_measurement+0x1213/0x2350 [ 126.239257][ T6472] ? __pfx_process_measurement+0x10/0x10 [ 126.239311][ T6472] ? find_held_lock+0x2b/0x80 [ 126.239341][ T6472] ? rcu_read_unlock+0x17/0x60 [ 126.239373][ T6472] ? rcu_read_unlock+0x17/0x60 [ 126.239405][ T6472] ? obj_cgroup_charge_account+0x2c4/0x640 [ 126.239476][ T6472] ? seq_open+0x116/0x170 [ 126.239514][ T6472] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 126.239566][ T6472] ? single_open+0x15f/0x1d0 [ 126.239606][ T6472] ? inode_to_bdi+0x9e/0x160 [ 126.239661][ T6472] ima_file_check+0xcc/0x120 [ 126.239704][ T6472] ? __pfx_ima_file_check+0x10/0x10 [ 126.239757][ T6472] security_file_post_open+0xc4/0x210 [ 126.239843][ T6472] path_openat+0x1418/0x31a0 [ 126.239889][ T6472] ? __pfx_path_openat+0x10/0x10 [ 126.239937][ T6472] do_file_open+0x20e/0x430 [ 126.239972][ T6472] ? __pfx_do_file_open+0x10/0x10 [ 126.240035][ T6472] ? alloc_fd+0x476/0x790 [ 126.240097][ T6472] ? do_getname+0x191/0x390 [ 126.240140][ T6472] do_sys_openat2+0x10d/0x1e0 [ 126.240181][ T6472] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.240224][ T6472] ? __fget_files+0x21f/0x3d0 [ 126.240281][ T6472] __x64_sys_openat+0x12d/0x210 [ 126.240322][ T6472] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.240379][ T6472] do_syscall_64+0x106/0xf80 [ 126.240415][ T6472] ? clear_bhb_loop+0x40/0x90 [ 126.240455][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.240489][ T6472] RIP: 0033:0x7f90c379c799 [ 126.240532][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.240563][ T6472] RSP: 002b:00007f90c45a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.240595][ T6472] RAX: ffffffffffffffda RBX: 00007f90c3a16270 RCX: 00007f90c379c799 [ 126.240616][ T6472] RDX: 0000000000000442 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 126.240635][ T6472] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.240654][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.240672][ T6472] R13: 00007f90c3a16308 R14: 00007f90c3a16270 R15: 00007ffe082bfff8 [ 126.240714][ T6472] [ 130.690021][ T6556] Invalid ELF header magic: != ELF [ 133.033672][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040338][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.943578][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 134.844290][ T6655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.171'. [ 137.419234][ T5829] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 137.423067][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 137.425693][ T5145] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 137.432996][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 137.438711][ T5825] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 137.446495][ T5832] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 137.452182][ T6669] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 137.458715][ T5834] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 137.466696][ T5837] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 137.478585][ T6668] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 137.499733][ T6671] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 137.507695][ T6674] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 137.523472][ T6670] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 137.581819][ T6680] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 137.588517][ T6679] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 137.590124][ T6684] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 137.596887][ T6681] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 137.608996][ T6686] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 137.615616][ T6688] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 137.658748][ T6693] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 137.658804][ T6690] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 137.678493][ T6689] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 137.685196][ T6692] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 137.691751][ T6691] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 137.743088][ T6696] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 137.743664][ T6694] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 137.750288][ T6704] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 137.755935][ T6698] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 137.769254][ T6703] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 137.769260][ T6700] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 137.769865][ T6695] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 137.775990][ T6708] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 137.782486][ T6702] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 137.792168][ T6697] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 137.809365][ T6699] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 137.815967][ T6701] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 137.822409][ T6705] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 137.828675][ T6710] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 137.829229][ T6709] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 137.835099][ T6706] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 137.842060][ T6707] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 137.854725][ T6711] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 137.862745][ T6713] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 137.911666][ T6720] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 137.911685][ T6726] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 137.924504][ T6721] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 137.930967][ T6712] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 137.931459][ T6722] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 137.937324][ T6719] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 137.978977][ T6723] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 137.979043][ T6725] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 137.985426][ T6732] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 137.992354][ T6731] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 137.998696][ T6737] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 138.005655][ T6734] Bluetooth: hci59: Opcode 0x0c03 failed: -110 [ 138.012574][ T6735] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 138.058649][ T6740] Bluetooth: hci60: Opcode 0x0c03 failed: -110 [ 138.070431][ T6743] Bluetooth: hci62: Opcode 0x0c03 failed: -110 [ 138.077798][ T6739] Bluetooth: hci61: Opcode 0x0c03 failed: -110 [ 138.141495][ T6742] Bluetooth: hci64: Opcode 0x0c03 failed: -110 [ 138.149333][ T6744] Bluetooth: hci63: Opcode 0x0c03 failed: -110 [ 138.228525][ T6745] Bluetooth: hci65: Opcode 0x0c03 failed: -110 [ 138.303777][ T6747] Bluetooth: hci67: Opcode 0x0c03 failed: -110 [ 138.311188][ T6748] Bluetooth: hci66: Opcode 0x0c03 failed: -110 [ 138.317987][ T6750] Bluetooth: hci68: Opcode 0x0c03 failed: -110 [ 138.758780][ T6750] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 138.758906][ T6750] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 139.208846][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 141.284461][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 144.999644][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 148.134110][ T6941] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 149.432446][ T6959] Invalid ELF header magic: != ELF [ 153.493345][ T6991] netlink: 'syz.2.230': attribute type 4 has an invalid length. [ 153.504926][ T6991] netlink: 'syz.2.230': attribute type 4 has an invalid length. [ 157.149199][ T7035] netlink: 'syz.3.242': attribute type 4 has an invalid length. [ 158.681563][ T7063] FAULT_INJECTION: forcing a failure. [ 158.681563][ T7063] name fail_futex, interval 1, probability 0, space 0, times 0 [ 158.695259][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT(full) [ 158.695298][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.695316][ T7063] Call Trace: [ 158.695332][ T7063] [ 158.695342][ T7063] dump_stack_lvl+0x100/0x190 [ 158.695392][ T7063] should_fail_ex.cold+0x5/0xa [ 158.695426][ T7063] should_fail_futex+0x4c/0x60 [ 158.695459][ T7063] futex_lock_pi_atomic+0x12d/0xaf0 [ 158.695510][ T7063] futex_lock_pi+0x246/0x7b0 [ 158.695556][ T7063] ? __pfx_futex_lock_pi+0x10/0x10 [ 158.695600][ T7063] ? __pfx___futex_wait+0x10/0x10 [ 158.695641][ T7063] ? lockdep_hardirqs_on+0x78/0x100 [ 158.695703][ T7063] ? __pfx_futex_wake_mark+0x10/0x10 [ 158.695753][ T7063] ? ksys_write+0x190/0x250 [ 158.695793][ T7063] ? ksys_write+0x190/0x250 [ 158.695842][ T7063] do_futex+0x18a/0x350 [ 158.695879][ T7063] ? __pfx_do_futex+0x10/0x10 [ 158.695943][ T7063] __x64_sys_futex+0x34f/0x4d0 [ 158.695985][ T7063] ? __pfx___x64_sys_futex+0x10/0x10 [ 158.696037][ T7063] do_syscall_64+0x106/0xf80 [ 158.696068][ T7063] ? clear_bhb_loop+0x40/0x90 [ 158.696105][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.696134][ T7063] RIP: 0033:0x7f90c379c799 [ 158.696158][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.696186][ T7063] RSP: 002b:00007f90c45c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.696214][ T7063] RAX: ffffffffffffffda RBX: 00007f90c3a16180 RCX: 00007f90c379c799 [ 158.696233][ T7063] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 158.696250][ T7063] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 000000008000fff5 [ 158.696268][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.696285][ T7063] R13: 00007f90c3a16218 R14: 00007f90c3a16180 R15: 00007ffe082bfff8 [ 158.696333][ T7063] [ 159.784874][ T7079] Invalid ELF header magic: != ELF [ 160.122362][ T7083] sp0: Synchronizing with TNC [ 161.551783][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.632712][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.641746][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.659927][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.688229][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.783994][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.830864][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.857152][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.896125][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 161.908722][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 162.057298][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 162.081343][ T7102] netlink: 338 bytes leftover after parsing attributes in process `syz.3.255'. [ 164.980136][ T7154] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 165.032990][ T7156] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 165.110210][ T7156] CIFS mount error: No usable UNC path provided in device string! [ 165.110210][ T7156] [ 165.160654][ T7156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.243053][ T7216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.251506][ T7216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.260586][ T7216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.287572][ T7216] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.335658][ T7216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.854713][ T7206] Invalid ELF header magic: != ELF [ 169.108123][ T7246] futex_wake_op: syz.2.288 tries to shift op by -2048; fix this program [ 169.130991][ T7246] futex_wake_op: syz.2.288 tries to shift op by -2048; fix this program [ 169.413191][ T7249] : Can't lookup blockdev [ 170.322026][ T6750] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.322893][ T6747] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.328156][ T6750] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.381508][ T6750] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.505398][ T7278] __nla_validate_parse: 56 callbacks suppressed [ 171.505428][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 172.080560][ T7305] GUP no longer grows the stack in syz.3.301 (7305): 5000-401000 (4000) [ 172.118844][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(full) [ 172.118887][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.118905][ T7305] Call Trace: [ 172.118915][ T7305] [ 172.118927][ T7305] dump_stack_lvl+0x100/0x190 [ 172.118983][ T7305] gup_vma_lookup.cold+0x83/0x96 [ 172.119032][ T7305] __get_user_pages+0x241/0x34d0 [ 172.119078][ T7305] ? down_read_killable+0x30e/0x4c0 [ 172.119122][ T7305] ? __lock_acquire+0x4a5/0x2630 [ 172.119164][ T7305] ? __pfx___get_user_pages+0x10/0x10 [ 172.119211][ T7305] __gup_longterm_locked+0x87d/0x16f0 [ 172.119269][ T7305] ? __pfx___gup_longterm_locked+0x10/0x10 [ 172.119309][ T7305] ? try_get_folio+0x262/0x750 [ 172.119381][ T7305] ? find_held_lock+0x2b/0x80 [ 172.119413][ T7305] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 172.119456][ T7305] gup_fast_fallback+0x18c6/0x2460 [ 172.119524][ T7305] ? __pfx_gup_fast_fallback+0x10/0x10 [ 172.119564][ T7305] ? __lock_acquire+0x4a5/0x2630 [ 172.119605][ T7305] ? bio_associate_blkg_from_css+0xe33/0x13f0 [ 172.119641][ T7305] ? bio_associate_blkg+0x10c/0x2a0 [ 172.119677][ T7305] ? pcpu_block_update+0x20b/0x690 [ 172.119724][ T7305] pin_user_pages_fast+0xa7/0xf0 [ 172.119761][ T7305] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 172.119801][ T7305] ? find_held_lock+0x2b/0x80 [ 172.119831][ T7305] ? __debug_object_init+0x2de/0x3d0 [ 172.119875][ T7305] ? __debug_object_init+0x2de/0x3d0 [ 172.119925][ T7305] iov_iter_extract_pages+0xa0d/0x1ef0 [ 172.119993][ T7305] ? __lock_acquire+0x4a5/0x2630 [ 172.120035][ T7305] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 172.120098][ T7305] ? __lock_acquire+0x4a5/0x2630 [ 172.120150][ T7305] iov_iter_extract_bvecs+0x10e/0xf40 [ 172.120215][ T7305] ? find_held_lock+0x2b/0x80 [ 172.120251][ T7305] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 172.120293][ T7305] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 172.120353][ T7305] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 172.120401][ T7305] bio_iov_iter_get_pages+0x26a/0x970 [ 172.120470][ T7305] __blkdev_direct_IO_simple+0x3a7/0x890 [ 172.120521][ T7305] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 172.120599][ T7305] ? __lock_acquire+0x4a5/0x2630 [ 172.120653][ T7305] blkdev_direct_IO+0xc76/0x1fb0 [ 172.120713][ T7305] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 172.120753][ T7305] ? rcu_is_watching+0x12/0xc0 [ 172.120830][ T7305] ? __mark_inode_dirty+0x55c/0x1790 [ 172.120877][ T7305] ? filemap_check_errors+0xa9/0x150 [ 172.120923][ T7305] blkdev_write_iter+0x703/0xd70 [ 172.120973][ T7305] vfs_write+0x6ac/0x1070 [ 172.121025][ T7305] ? __pfx_blkdev_write_iter+0x10/0x10 [ 172.121069][ T7305] ? __pfx_vfs_write+0x10/0x10 [ 172.121117][ T7305] ? find_held_lock+0x2b/0x80 [ 172.121175][ T7305] ksys_write+0x12a/0x250 [ 172.121233][ T7305] ? __pfx_ksys_write+0x10/0x10 [ 172.121297][ T7305] do_syscall_64+0x106/0xf80 [ 172.121335][ T7305] ? clear_bhb_loop+0x40/0x90 [ 172.121377][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.121413][ T7305] RIP: 0033:0x7f90c379c799 [ 172.121441][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.121474][ T7305] RSP: 002b:00007f90c45e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.121505][ T7305] RAX: ffffffffffffffda RBX: 00007f90c3a16090 RCX: 00007f90c379c799 [ 172.121527][ T7305] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000005 [ 172.121546][ T7305] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 172.121566][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.121585][ T7305] R13: 00007f90c3a16128 R14: 00007f90c3a16090 R15: 00007ffe082bfff8 [ 172.121629][ T7305] [ 172.546664][ T7313] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 172.632482][ T6750] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.715411][ T7325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.739410][ T7325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.798484][ T7325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.844115][ T7325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.123462][ T7350] FAULT_INJECTION: forcing a failure. [ 175.123462][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 175.140997][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 175.141037][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.141056][ T7350] Call Trace: [ 175.141066][ T7350] [ 175.141078][ T7350] dump_stack_lvl+0x100/0x190 [ 175.141130][ T7350] should_fail_ex.cold+0x5/0xa [ 175.141166][ T7350] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 175.141196][ T7350] should_failslab+0xc2/0x120 [ 175.141228][ T7350] __kmalloc_noprof+0xe0/0x850 [ 175.141282][ T7350] kernfs_fop_write_iter+0x26a/0x5f0 [ 175.141318][ T7350] vfs_write+0x6ac/0x1070 [ 175.141366][ T7350] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.141399][ T7350] ? __pfx_vfs_write+0x10/0x10 [ 175.141469][ T7350] ksys_write+0x12a/0x250 [ 175.141514][ T7350] ? __pfx_ksys_write+0x10/0x10 [ 175.141573][ T7350] do_syscall_64+0x106/0xf80 [ 175.141607][ T7350] ? clear_bhb_loop+0x40/0x90 [ 175.141655][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.141685][ T7350] RIP: 0033:0x7f90c379c799 [ 175.141711][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.141739][ T7350] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.141766][ T7350] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 175.141785][ T7350] RDX: 00000000fffffc49 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.141802][ T7350] RBP: 00007f90c4609090 R08: 0000000000000000 R09: 0000000000000000 [ 175.141819][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.141837][ T7350] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 175.141877][ T7350] [ 175.454157][ T6750] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.785546][ T6750] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.865625][ T6750] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.867904][ T6747] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.973348][ T7453] netlink: 326 bytes leftover after parsing attributes in process `syz.1.345'. [ 184.014841][ T7528] binder: 7527:7528 ioctl c0306201 0 returned -14 [ 184.988119][ T7570] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.165127][ T7573] smpboot: CPU 1 is now offline [ 187.537608][ T7609] futex_wake_op: syz.2.377 tries to shift op by -2048; fix this program [ 187.807232][ T7625] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 187.840281][ T7625] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 190.490627][ T7648] process 'syz.1.385' launched '/dev/fd/3' with NULL argv: empty string added [ 193.103639][ T7704] syz.2.403 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.480889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.489145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.697604][ T7768] FAULT_INJECTION: forcing a failure. [ 195.697604][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 195.743871][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.3.417 Not tainted syzkaller #0 PREEMPT(full) [ 195.743901][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.743915][ T7768] Call Trace: [ 195.743922][ T7768] [ 195.743945][ T7768] dump_stack_lvl+0x100/0x190 [ 195.743989][ T7768] should_fail_ex.cold+0x5/0xa [ 195.744014][ T7768] should_failslab+0xc2/0x120 [ 195.744035][ T7768] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.744062][ T7768] ? kernfs_fop_open+0x23d/0xd50 [ 195.744090][ T7768] kernfs_fop_open+0x23d/0xd50 [ 195.744118][ T7768] do_dentry_open+0x6d8/0x1660 [ 195.744152][ T7768] ? __pfx_kernfs_fop_open+0x10/0x10 [ 195.744180][ T7768] vfs_open+0x82/0x3f0 [ 195.744209][ T7768] path_openat+0x208c/0x31a0 [ 195.744239][ T7768] ? __pfx_path_openat+0x10/0x10 [ 195.744269][ T7768] do_file_open+0x20e/0x430 [ 195.744292][ T7768] ? __pfx_do_file_open+0x10/0x10 [ 195.744332][ T7768] ? alloc_fd+0x476/0x790 [ 195.744369][ T7768] ? do_getname+0x191/0x390 [ 195.744397][ T7768] do_sys_openat2+0x10d/0x1e0 [ 195.744424][ T7768] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.744451][ T7768] ? apparmor_capable+0x1d7/0x4d0 [ 195.744489][ T7768] __x64_sys_openat+0x12d/0x210 [ 195.744516][ T7768] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.744554][ T7768] do_syscall_64+0x106/0xf80 [ 195.744578][ T7768] ? clear_bhb_loop+0x40/0x90 [ 195.744606][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.744629][ T7768] RIP: 0033:0x7f90c379c799 [ 195.744647][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.744668][ T7768] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.744690][ T7768] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 195.744704][ T7768] RDX: 0000000000182b02 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 195.744718][ T7768] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 195.744731][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.744744][ T7768] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 195.744772][ T7768] [ 197.024868][ T7763] futex_wake_op: syz.0.414 tries to shift op by -2048; fix this program [ 198.355609][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 198.571389][ T7809] team0 (unregistering): Port device team_slave_0 removed [ 198.611040][ T7809] team0 (unregistering): Port device team_slave_1 removed [ 198.869563][ T6747] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 198.869596][ T6747] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 198.885230][ T6747] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 198.885283][ T6747] Bluetooth: hci0: adv larger than maximum supported [ 198.892924][ T6747] Bluetooth: hci0: Unknown advertising packet type: 0x7e [ 198.899900][ T6747] Bluetooth: hci0: adv larger than maximum supported [ 198.910198][ T6747] Bluetooth: hci0: Malformed LE Event: 0x0d [ 198.950193][ T7815] bridge0: port 3(vlan0) entered blocking state [ 198.978076][ T7815] bridge0: port 3(vlan0) entered disabled state [ 199.011125][ T7815] vlan0: entered allmulticast mode [ 199.039344][ T7815] veth0_vlan: entered allmulticast mode [ 199.063316][ T7815] vlan0: entered promiscuous mode [ 199.091651][ T7815] bridge0: port 3(vlan0) entered blocking state [ 199.098098][ T7815] bridge0: port 3(vlan0) entered forwarding state [ 199.596428][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 199.729194][ T7833] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 200.286366][ T7839] netlink: 338 bytes leftover after parsing attributes in process `syz.1.434'. [ 200.471885][ T7840] netlink: 338 bytes leftover after parsing attributes in process `syz.1.434'. [ 203.996138][ T7919] mmap: syz.2.452 (7919): VmData 46010368 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 204.369751][ T6747] Bluetooth: hci3: Malformed LE Event: 0x0b [ 204.650736][ T7927] zswap: compressor not available [ 205.961223][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 208.386834][ T6747] Bluetooth: hci1: Malformed LE Event: 0x0b [ 212.375100][ T6747] Bluetooth: hci0: Malformed LE Event: 0x0b [ 213.029469][ T8047] binder: 8046:8047 unknown command 49 [ 213.044441][ T8047] binder: 8046:8047 ioctl c0306201 0 returned -22 [ 214.564382][ T8084] netlink: 326 bytes leftover after parsing attributes in process `syz.2.492'. [ 214.606284][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.613899][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.184819][ T8112] sd 0:0:1:0: PR command failed: 1026 [ 215.190379][ T8112] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 215.255093][ T8112] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 215.279153][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 216.406592][ T8127] zswap: compressor not available [ 217.052465][ T8127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.144084][ T8127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.175053][ T8127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.209509][ T8127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.882326][ T8159] FAULT_INJECTION: forcing a failure. [ 218.882326][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 218.982330][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 218.982361][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.982375][ T8159] Call Trace: [ 218.982382][ T8159] [ 218.982391][ T8159] dump_stack_lvl+0x100/0x190 [ 218.982430][ T8159] should_fail_ex.cold+0x5/0xa [ 218.982468][ T8159] ? sk_prot_alloc+0x10b/0x2a0 [ 218.982497][ T8159] should_failslab+0xc2/0x120 [ 218.982518][ T8159] __kmalloc_noprof+0xe0/0x850 [ 218.982555][ T8159] sk_prot_alloc+0x10b/0x2a0 [ 218.982586][ T8159] sk_alloc+0x36/0xe80 [ 218.982608][ T8159] packet_create+0x127/0x8e0 [ 218.982643][ T8159] __sock_create+0x339/0x860 [ 218.982679][ T8159] __sys_socket+0x14d/0x260 [ 218.982712][ T8159] ? __pfx___sys_socket+0x10/0x10 [ 218.982753][ T8159] __x64_sys_socket+0x72/0xb0 [ 218.982784][ T8159] ? lockdep_hardirqs_on+0x78/0x100 [ 218.982809][ T8159] do_syscall_64+0x106/0xf80 [ 218.982832][ T8159] ? clear_bhb_loop+0x40/0x90 [ 218.982878][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.982900][ T8159] RIP: 0033:0x7f90c379c799 [ 218.982918][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.982940][ T8159] RSP: 002b:00007f90c45e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 218.982962][ T8159] RAX: ffffffffffffffda RBX: 00007f90c3a16090 RCX: 00007f90c379c799 [ 218.982977][ T8159] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000011 [ 218.982990][ T8159] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 218.983004][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.983017][ T8159] R13: 00007f90c3a16128 R14: 00007f90c3a16090 R15: 00007ffe082bfff8 [ 218.983053][ T8159] [ 219.464254][ T6747] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.470869][ T6747] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.485935][ T6747] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.492012][ T6747] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.902383][ T8188] netlink: 322 bytes leftover after parsing attributes in process `syz.2.513'. [ 220.008144][ T8168] cgroup: fork rejected by pids controller in /syz1 [ 221.242985][ T8214] netlink: 330 bytes leftover after parsing attributes in process `syz.3.517'. [ 222.913763][ T8241] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 222.973036][ T8248] netlink: 322 bytes leftover after parsing attributes in process `syz.3.524'. [ 223.920941][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 226.201053][ T8287] futex_wake_op: syz.1.529 tries to shift op by -2048; fix this program [ 226.781382][ T8287] futex_wake_op: syz.1.529 tries to shift op by -2048; fix this program [ 227.710921][ T8353] .^: entered promiscuous mode [ 235.248937][ T8191] syz.1.512 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 235.709353][ T8191] CPU: 0 UID: 0 PID: 8191 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(full) [ 235.709382][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.709395][ T8191] Call Trace: [ 235.709402][ T8191] [ 235.709411][ T8191] dump_stack_lvl+0x100/0x190 [ 235.709449][ T8191] dump_header+0xfb/0x606 [ 235.709474][ T8191] oom_kill_process.cold+0xd/0x330 [ 235.709500][ T8191] out_of_memory+0x340/0x14f0 [ 235.709537][ T8191] ? __pfx_out_of_memory+0x10/0x10 [ 235.709575][ T8191] mem_cgroup_out_of_memory+0xc6/0x130 [ 235.709611][ T8191] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 235.709639][ T8191] ? find_held_lock+0x2b/0x80 [ 235.709664][ T8191] ? do_raw_spin_unlock+0x145/0x1e0 [ 235.709697][ T8191] ? _raw_spin_unlock+0x28/0x50 [ 235.709720][ T8191] try_charge_memcg+0x652/0xc90 [ 235.709747][ T8191] ? __pfx_try_charge_memcg+0x10/0x10 [ 235.709768][ T8191] ? find_held_lock+0x2b/0x80 [ 235.709786][ T8191] ? rcu_read_unlock+0x17/0x60 [ 235.709807][ T8191] ? rcu_read_unlock+0x17/0x60 [ 235.709838][ T8191] charge_memcg+0xa6/0x280 [ 235.709858][ T8191] __mem_cgroup_charge+0x2b/0x1e0 [ 235.709885][ T8191] shmem_alloc_and_add_folio+0x451/0xd40 [ 235.709924][ T8191] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 235.709958][ T8191] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 235.709996][ T8191] shmem_get_folio_gfp+0x6ab/0x1900 [ 235.710033][ T8191] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 235.710073][ T8191] shmem_write_begin+0x1a4/0x420 [ 235.710108][ T8191] ? __pfx_shmem_write_begin+0x10/0x10 [ 235.710141][ T8191] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 235.710165][ T8191] ? lockdep_hardirqs_on+0x78/0x100 [ 235.710192][ T8191] generic_perform_write+0x292/0xa40 [ 235.710231][ T8191] ? __pfx_generic_perform_write+0x10/0x10 [ 235.710265][ T8191] ? file_update_time_flags+0x373/0x500 [ 235.710294][ T8191] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 235.710315][ T8191] shmem_file_write_iter+0x10e/0x140 [ 235.710339][ T8191] __kernel_write_iter+0x2ac/0x920 [ 235.710376][ T8191] ? __pfx___kernel_write_iter+0x10/0x10 [ 235.710409][ T8191] ? __up_read+0x2c5/0x700 [ 235.710443][ T8191] ? dump_user_range+0x73b/0xb50 [ 235.710465][ T8191] ? copy_mc_enhanced_fast_string+0x6/0xf [ 235.710502][ T8191] dump_user_range+0x3f9/0xb50 [ 235.710530][ T8191] ? __pfx_dump_user_range+0x10/0x10 [ 235.710562][ T8191] ? __pfx_writenote+0x10/0x10 [ 235.710592][ T8191] elf_core_dump+0x2d5f/0x3d10 [ 235.710658][ T8191] ? __pfx_elf_core_dump+0x10/0x10 [ 235.710692][ T8191] ? find_held_lock+0x2b/0x80 [ 235.710713][ T8191] ? 0xffffffffff600000 [ 235.710732][ T8191] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.710755][ T8191] ? lockdep_hardirqs_on+0x78/0x100 [ 235.710823][ T8191] ? vfs_coredump+0x27bc/0x5570 [ 235.710844][ T8191] vfs_coredump+0x27bc/0x5570 [ 235.710879][ T8191] ? __pfx_vfs_coredump+0x10/0x10 [ 235.710904][ T8191] ? __lock_acquire+0x4a5/0x2630 [ 235.710944][ T8191] ? lock_acquire+0x1cf/0x380 [ 235.710984][ T8191] ? is_bpf_text_address+0x8a/0x1a0 [ 235.711019][ T8191] ? bpf_ksym_find+0x124/0x1c0 [ 235.711051][ T8191] ? __kernel_text_address+0xd/0x30 [ 235.711084][ T8191] ? unwind_get_return_address+0x59/0xa0 [ 235.711108][ T8191] ? arch_stack_walk+0xa6/0xf0 [ 235.711139][ T8191] ? __sigqueue_free+0xbe/0x2a0 [ 235.711169][ T8191] ? stack_trace_save+0x8e/0xc0 [ 235.711190][ T8191] ? __pfx_stack_trace_save+0x10/0x10 [ 235.711212][ T8191] ? stack_depot_save_flags+0x27/0x9d0 [ 235.711251][ T8191] ? __lock_acquire+0x4a5/0x2630 [ 235.711326][ T8191] ? proc_coredump_connector+0x2d3/0x4f0 [ 235.711353][ T8191] ? __pfx_proc_coredump_connector+0x10/0x10 [ 235.711384][ T8191] ? rcu_is_watching+0x12/0xc0 [ 235.711423][ T8191] get_signal+0x1f2a/0x21e0 [ 235.711457][ T8191] ? __pfx_get_signal+0x10/0x10 [ 235.711478][ T8191] ? __pfx_force_sig_fault+0x10/0x10 [ 235.711508][ T8191] arch_do_signal_or_restart+0x91/0x770 [ 235.711538][ T8191] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 235.711574][ T8191] ? do_user_addr_fault+0x8d6/0x12f0 [ 235.711624][ T8191] irqentry_exit+0x1f8/0x670 [ 235.711652][ T8191] asm_exc_page_fault+0x26/0x30 [ 235.711675][ T8191] RIP: 0033:0x7f8511f9c7a1 [ 235.711692][ T8191] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 235.711714][ T8191] RSP: 002b:0000080000000002 EFLAGS: 00010217 [ 235.711732][ T8191] RAX: 0000000000000000 RBX: 00007f8512215fa0 RCX: 00007f8511f9c799 [ 235.711747][ T8191] RDX: 0000000000000000 RSI: 0000080000000002 RDI: 0100000020003b49 [ 235.711761][ T8191] RBP: 00007f8512032bd9 R08: 0000000000000004 R09: 0000000000000000 [ 235.711774][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.711787][ T8191] R13: 00007f8512216038 R14: 00007f8512215fa0 R15: 00007ffda91c5738 [ 235.711817][ T8191] [ 235.711825][ T8191] memory: usage 307192kB, limit 307200kB, failcnt 29117 [ 236.503734][ T8453] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 236.905927][ T8191] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0 [ 236.943303][ T8191] kmem: usage 3280kB, limit 9007199254740988kB, failcnt 0 [ 236.970531][ T8191] Memory cgroup stats for /syz1: [ 236.970787][ T8191] cache 302759936 [ 237.011715][ T8191] rss 8364032 [ 237.026831][ T8191] rss_huge 4194304 [ 237.044300][ T8191] shmem 302759936 [ 237.082828][ T8191] mapped_file 12820480 [ 237.105880][ T8191] dirty 0 [ 237.118012][ T8191] writeback 0 [ 237.131236][ T8191] workingset_refault_anon 1568 [ 237.169480][ T8191] workingset_refault_file 31 [ 237.200689][ T8191] swap 127905792 [ 237.237107][ T8191] swapcached 140283904 [ 237.274758][ T8191] pgpgin 229138 [ 237.314949][ T8191] pgpgout 161938 [ 237.318546][ T8191] pgfault 86570 [ 237.372665][ T8191] pgmajfault 231 [ 237.395076][ T8191] inactive_anon 283430912 [ 237.399456][ T8191] active_anon 27783168 [ 237.403541][ T8191] inactive_file 0 [ 237.451314][ T8191] active_file 0 [ 237.464885][ T8191] unevictable 0 [ 237.485227][ T8191] hierarchical_memory_limit 314572800 [ 237.490693][ T8191] hierarchical_memsw_limit 9223372036854771712 [ 237.540301][ T8191] total_cache 302759936 [ 237.544548][ T8191] total_rss 8364032 [ 237.577056][ T8191] total_rss_huge 4194304 [ 237.577121][ T8191] total_shmem 302759936 [ 237.577131][ T8191] total_mapped_file 12820480 [ 237.577140][ T8191] total_dirty 0 [ 237.577149][ T8191] total_writeback 0 [ 237.577158][ T8191] total_workingset_refault_anon 1568 [ 237.577169][ T8191] total_workingset_refault_file 31 [ 237.577179][ T8191] total_swap 127905792 [ 237.577188][ T8191] total_swapcached 140283904 [ 237.577198][ T8191] total_pgpgin 229138 [ 237.577207][ T8191] total_pgpgout 161938 [ 237.577217][ T8191] total_pgfault 86570 [ 237.577226][ T8191] total_pgmajfault 231 [ 237.577235][ T8191] total_inactive_anon 283430912 [ 237.577245][ T8191] total_active_anon 27783168 [ 237.577255][ T8191] total_inactive_file 0 [ 237.577264][ T8191] total_active_file 0 [ 237.577273][ T8191] total_unevictable 0 [ 237.577282][ T8191] anon_cost 17239 [ 237.577291][ T8191] file_cost 15 [ 237.577301][ T8191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.512,pid=8202,uid=0 [ 237.578519][ T8191] Memory cgroup out of memory: Killed process 8202 (syz.1.512) total-vm:131812kB, anon-rss:5440kB, file-rss:21548kB, shmem-rss:12520kB, UID:0 pgtables:160kB oom_score_adj:0 [ 237.886677][ T8468] block nbd7: not configured, cannot reconfigure [ 239.865258][ T32] oom_reaper: reaped process 8202 (syz.1.512), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 241.184554][ T8496] Invalid ELF header magic: != ELF [ 241.509832][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 245.874813][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 247.722510][ T8583] could not allocate digest TFM handle [ 249.494514][ T8624] netlink: 342 bytes leftover after parsing attributes in process `syz.2.593'. [ 250.370675][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 250.455149][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 251.154428][ T30] audit: type=1326 audit(4294972505.543:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.1.596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8511f9c799 code=0x0 [ 252.426356][ T8661] Invalid ELF header magic: != ELF [ 255.965386][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972247][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.938924][ T8738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 257.998673][ T30] audit: type=1800 audit(4294972512.390:5): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.615" name="discovery_nqn" dev="configfs" ino=21408 res=0 errno=0 [ 259.961091][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 261.587298][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 263.730233][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 264.314666][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.422267][ T8857] bridge_slave_1 (unregistering): left allmulticast mode [ 264.506483][ T8857] bridge_slave_1 (unregistering): left promiscuous mode [ 264.546648][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.912695][ T8889] netlink: 346 bytes leftover after parsing attributes in process `syz.2.646'. [ 265.261254][ T8901] __vm_enough_memory: pid: 8901, comm: syz.3.648, bytes: 4398046511104 not enough memory for the allocation [ 267.610088][ T8964] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 270.076388][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 270.152082][ T9003] bridge0: port 2(gretap0) entered blocking state [ 270.189198][ T9003] bridge0: port 2(gretap0) entered disabled state [ 270.209632][ T9003] gretap0: entered allmulticast mode [ 270.241749][ T9003] gretap0: entered promiscuous mode [ 270.268056][ T9003] bridge0: port 2(gretap0) entered blocking state [ 270.274672][ T9003] bridge0: port 2(gretap0) entered forwarding state [ 271.524486][ T9029] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 276.533458][ T9131] can: request_module (can-proto-0) failed. [ 277.039022][ T9152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.109761][ T9152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.155310][ T9152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.219110][ T9156] futex_wake_op: syz.3.703 tries to shift op by -2048; fix this program [ 277.260342][ T9152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.325941][ T9156] futex_wake_op: syz.3.703 tries to shift op by -2048; fix this program [ 279.003563][ T9190] cgroup: fork rejected by pids controller in /syz0 [ 279.074456][ T6750] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.156045][ T6750] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.235383][ T6750] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.315195][ T6750] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.461857][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.724'. [ 281.709883][ T9366] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 282.394621][ T30] audit: type=1804 audit(4327282165.775:6): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.734" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=3633 res=1 errno=0 [ 282.552093][ T30] audit: type=1804 audit(4327282165.835:7): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.734" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=3633 res=1 errno=0 [ 284.546727][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 285.354020][ T9428] openvswitch: netlink: IP tunnel dst address not specified [ 288.154866][ T9482] netlink: 326 bytes leftover after parsing attributes in process `syz.1.755'. [ 288.360326][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.368048][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.569389][ T9546] nvme_fcloop: unknown parameter or missing value '7' [ 297.837475][ T9682] netlink: 330 bytes leftover after parsing attributes in process `syz.1.800'. [ 298.377168][ T9691] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 298.386745][ T6750] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 300.678383][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.811'. [ 301.060773][ T9729] bond0: (slave bond_slave_1): Releasing backup interface [ 301.775506][ T9745] Invalid ELF header magic: != ELF [ 302.416191][ T9756] futex_wake_op: syz.1.822 tries to shift op by -2048; fix this program [ 302.469529][ T9756] futex_wake_op: syz.1.822 tries to shift op by -2048; fix this program [ 302.537268][ T9756] futex_wake_op: syz.1.822 tries to shift op by -2048; fix this program [ 302.675116][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'. [ 303.997486][ T9790] netlink: 25 bytes leftover after parsing attributes in process `syz.0.829'. [ 306.835501][ T9841] FAULT_INJECTION: forcing a failure. [ 306.835501][ T9841] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 306.895643][ T9843] futex_wake_op: syz.1.832 tries to shift op by -2048; fix this program [ 306.964914][ T9836] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 306.986928][ T9843] futex_wake_op: syz.1.832 tries to shift op by -2048; fix this program [ 307.035920][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.3.831 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.035961][ T9841] Tainted: [L]=SOFTLOCKUP [ 307.035969][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.035985][ T9841] Call Trace: [ 307.035993][ T9841] [ 307.036002][ T9841] dump_stack_lvl+0x100/0x190 [ 307.036042][ T9841] should_fail_ex.cold+0x5/0xa [ 307.036064][ T9841] ? prepare_alloc_pages+0x16d/0x5f0 [ 307.036091][ T9841] should_fail_alloc_page+0xeb/0x140 [ 307.036115][ T9841] prepare_alloc_pages+0x1f0/0x5f0 [ 307.036144][ T9841] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 307.036179][ T9841] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.036215][ T9841] ? find_held_lock+0x2b/0x80 [ 307.036236][ T9841] ? folios_put_refs+0x66d/0x840 [ 307.036274][ T9841] ? __pfx_folios_put_refs+0x10/0x10 [ 307.036306][ T9841] ? _raw_spin_unlock_irq+0x2e/0x50 [ 307.036328][ T9841] ? mlock_folio_batch+0xca4/0x50d0 [ 307.036360][ T9841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.036412][ T9841] ? munlock_folio+0x3a6/0x700 [ 307.036444][ T9841] ? munlock_folio+0x3a6/0x700 [ 307.036482][ T9841] ? munlock_folio+0x3d2/0x700 [ 307.036524][ T9841] ? folio_remove_rmap_pmd+0x69c/0xed0 [ 307.036560][ T9841] ? split_huge_pmd_locked+0x3ba/0x3cf0 [ 307.036590][ T9841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.036632][ T9841] ? policy_nodemask+0xed/0x4f0 [ 307.036657][ T9841] alloc_pages_mpol+0x1fb/0x550 [ 307.036681][ T9841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 307.036701][ T9841] ? __split_huge_pmd+0x203/0x350 [ 307.036730][ T9841] ? __split_huge_pmd+0x203/0x350 [ 307.036765][ T9841] alloc_pages_noprof+0x131/0x390 [ 307.036789][ T9841] pte_alloc_one+0x1e/0x3e0 [ 307.036816][ T9841] __pte_alloc+0x6d/0x3f0 [ 307.036837][ T9841] ? __pfx___pte_alloc+0x10/0x10 [ 307.036859][ T9841] ? _raw_spin_unlock+0x28/0x50 [ 307.036879][ T9841] ? __pmd_alloc+0x6aa/0x9c0 [ 307.036907][ T9841] move_page_tables+0x257e/0x4500 [ 307.036942][ T9841] ? __pfx_copy_vma+0x10/0x10 [ 307.036985][ T9841] ? __pfx_move_page_tables+0x10/0x10 [ 307.037034][ T9841] ? finish_task_switch.isra.0+0x200/0xb80 [ 307.037074][ T9841] copy_vma_and_data+0x25c/0x7c0 [ 307.037108][ T9841] ? __pfx_copy_vma_and_data+0x10/0x10 [ 307.037152][ T9841] ? __vma_start_write+0x17f/0x280 [ 307.037179][ T9841] ? __pfx___vma_start_write+0x10/0x10 [ 307.037215][ T9841] move_vma+0x51b/0x1890 [ 307.037250][ T9841] ? __pfx_move_vma+0x10/0x10 [ 307.037284][ T9841] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 307.037309][ T9841] ? cap_mmap_addr+0x4b/0x120 [ 307.037338][ T9841] ? bpf_lsm_mmap_addr+0x9/0x30 [ 307.037372][ T9841] ? security_mmap_addr+0x71/0x1e0 [ 307.037412][ T9841] ? __get_unmapped_area+0x255/0x3e0 [ 307.037439][ T9841] ? vrm_set_new_addr+0x204/0x290 [ 307.037473][ T9841] mremap_to+0x1b7/0x450 [ 307.037515][ T9841] do_mremap+0xb76/0x2130 [ 307.037561][ T9841] ? __pfx_do_mremap+0x10/0x10 [ 307.037600][ T9841] ? ksys_write+0x190/0x250 [ 307.037644][ T9841] __do_sys_mremap+0x126/0x170 [ 307.037677][ T9841] ? __pfx___do_sys_mremap+0x10/0x10 [ 307.037718][ T9841] ? __x64_sys_futex+0x34f/0x4d0 [ 307.037767][ T9841] do_syscall_64+0x106/0xf80 [ 307.037792][ T9841] ? clear_bhb_loop+0x40/0x90 [ 307.037821][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.037845][ T9841] RIP: 0033:0x7f90c379c799 [ 307.037865][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.037888][ T9841] RSP: 002b:00007f90c45e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 307.037916][ T9841] RAX: ffffffffffffffda RBX: 00007f90c3a16090 RCX: 00007f90c379c799 [ 307.037932][ T9841] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 307.037946][ T9841] RBP: 00007f90c3832bd9 R08: 0000000100000000 R09: 0000000000000000 [ 307.037960][ T9841] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 307.037974][ T9841] R13: 00007f90c3a16128 R14: 00007f90c3a16090 R15: 00007ffe082bfff8 [ 307.038005][ T9841] [ 309.758973][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 313.211962][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 313.790880][ T9922] FAULT_INJECTION: forcing a failure. [ 313.790880][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 313.963203][ T9922] CPU: 0 UID: 0 PID: 9922 Comm: syz.3.850 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.963241][ T9922] Tainted: [L]=SOFTLOCKUP [ 313.963249][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.963264][ T9922] Call Trace: [ 313.963271][ T9922] [ 313.963280][ T9922] dump_stack_lvl+0x100/0x190 [ 313.963322][ T9922] should_fail_ex.cold+0x5/0xa [ 313.963350][ T9922] should_failslab+0xc2/0x120 [ 313.963373][ T9922] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 313.963407][ T9922] ? alloc_empty_file+0x55/0x1c0 [ 313.963441][ T9922] alloc_empty_file+0x55/0x1c0 [ 313.963469][ T9922] dentry_open+0x46/0xd0 [ 313.963497][ T9922] ima_calc_file_hash+0x2ad/0x480 [ 313.963534][ T9922] ima_collect_measurement+0x887/0xa40 [ 313.963568][ T9922] ? ima_file_check+0xcc/0x120 [ 313.963604][ T9922] ? __pfx_ima_collect_measurement+0x10/0x10 [ 313.963640][ T9922] ? lock_acquire+0x1cf/0x380 [ 313.963684][ T9922] ? process_measurement+0x5ab/0x2350 [ 313.963714][ T9922] ? is_bad_inode+0xd/0x40 [ 313.963747][ T9922] ? xattr_resolve_name+0x27d/0x3f0 [ 313.963829][ T9922] ? vfs_getxattr_alloc+0xec/0x350 [ 313.963873][ T9922] ? ima_get_hash_algo+0x22d/0x400 [ 313.963912][ T9922] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 313.963945][ T9922] ? process_measurement+0xdfe/0x2350 [ 313.963999][ T9922] process_measurement+0xdfe/0x2350 [ 313.964040][ T9922] ? __pfx_process_measurement+0x10/0x10 [ 313.964081][ T9922] ? find_held_lock+0x2b/0x80 [ 313.964102][ T9922] ? rcu_read_unlock+0x17/0x60 [ 313.964125][ T9922] ? rcu_read_unlock+0x17/0x60 [ 313.964183][ T9922] ? mutex_init_lockep+0x110/0x150 [ 313.964216][ T9922] ? seq_open+0x116/0x170 [ 313.964266][ T9922] ? inode_to_bdi+0x9e/0x160 [ 313.964307][ T9922] ima_file_check+0xcc/0x120 [ 313.964338][ T9922] ? __pfx_ima_file_check+0x10/0x10 [ 313.964376][ T9922] security_file_post_open+0xc4/0x210 [ 313.964415][ T9922] path_openat+0x1418/0x31a0 [ 313.964447][ T9922] ? __pfx_path_openat+0x10/0x10 [ 313.964479][ T9922] do_file_open+0x20e/0x430 [ 313.964504][ T9922] ? __pfx_do_file_open+0x10/0x10 [ 313.964546][ T9922] ? alloc_fd+0x476/0x790 [ 313.964587][ T9922] ? do_getname+0x191/0x390 [ 313.964617][ T9922] do_sys_openat2+0x10d/0x1e0 [ 313.964646][ T9922] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.964686][ T9922] __x64_sys_openat+0x12d/0x210 [ 313.964716][ T9922] ? __pfx___x64_sys_openat+0x10/0x10 [ 313.964757][ T9922] do_syscall_64+0x106/0xf80 [ 313.964783][ T9922] ? clear_bhb_loop+0x40/0x90 [ 313.964812][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.964836][ T9922] RIP: 0033:0x7f90c379c799 [ 313.964856][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.964879][ T9922] RSP: 002b:00007f90c45e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.964903][ T9922] RAX: ffffffffffffffda RBX: 00007f90c3a16090 RCX: 00007f90c379c799 [ 313.964918][ T9922] RDX: 0000000000020803 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 313.964933][ T9922] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 313.964948][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.964967][ T9922] R13: 00007f90c3a16128 R14: 00007f90c3a16090 R15: 00007ffe082bfff8 [ 313.964997][ T9922] [ 316.714679][ T30] audit: type=1800 audit(4327290000.105:8): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.850" name="set_event_notrace_pid" dev="tracefs" ino=29 res=0 errno=0 [ 317.400692][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407429][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.430788][ T9981] FAULT_INJECTION: forcing a failure. [ 319.430788][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 319.610674][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.3.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.610713][ T9981] Tainted: [L]=SOFTLOCKUP [ 319.610720][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.610734][ T9981] Call Trace: [ 319.610741][ T9981] [ 319.610750][ T9981] dump_stack_lvl+0x100/0x190 [ 319.610789][ T9981] should_fail_ex.cold+0x5/0xa [ 319.610816][ T9981] should_failslab+0xc2/0x120 [ 319.610838][ T9981] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 319.610876][ T9981] ? mas_alloc_nodes+0x280/0x390 [ 319.610919][ T9981] mas_alloc_nodes+0x280/0x390 [ 319.610960][ T9981] mas_preallocate+0x39c/0xf10 [ 319.610987][ T9981] ? __memcg_slab_post_alloc_hook+0x480/0x9a0 [ 319.611017][ T9981] ? __pfx_mas_preallocate+0x10/0x10 [ 319.611053][ T9981] ? anon_vma_name+0x5a/0x250 [ 319.611084][ T9981] __split_vma+0x33d/0xd90 [ 319.611117][ T9981] ? __pfx___split_vma+0x10/0x10 [ 319.611153][ T9981] ? __pfx___vma_start_write+0x10/0x10 [ 319.611181][ T9981] ? __pfx_mas_prev+0x10/0x10 [ 319.611216][ T9981] vms_gather_munmap_vmas+0x39f/0x1500 [ 319.611254][ T9981] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 319.611290][ T9981] ? mas_walk+0x6ef/0x9b0 [ 319.611322][ T9981] __mmap_region+0x492/0x29e0 [ 319.611355][ T9981] ? update_cfs_rq_load_avg+0x51/0x550 [ 319.611382][ T9981] ? __pfx___mmap_region+0x10/0x10 [ 319.611427][ T9981] ? set_next_entity+0x11b/0x9c0 [ 319.611465][ T9981] ? __lock_acquire+0x4a5/0x2630 [ 319.611494][ T9981] ? update_cfs_rq_load_avg+0x51/0x550 [ 319.611529][ T9981] ? lock_acquire+0x1cf/0x380 [ 319.611556][ T9981] ? find_held_lock+0x2b/0x80 [ 319.611576][ T9981] ? finish_task_switch.isra.0+0x200/0xb80 [ 319.611600][ T9981] ? finish_task_switch.isra.0+0x200/0xb80 [ 319.611635][ T9981] ? trace_sched_exit_tp+0x13a/0x180 [ 319.611663][ T9981] ? __schedule+0x1000/0x60e0 [ 319.611722][ T9981] ? rcu_is_watching+0x12/0xc0 [ 319.611757][ T9981] ? cap_capable+0x107/0x460 [ 319.611792][ T9981] mmap_region+0x180/0x3e0 [ 319.611830][ T9981] do_mmap+0xc63/0x12f0 [ 319.611859][ T9981] ? __pfx_do_mmap+0x10/0x10 [ 319.611882][ T9981] ? __pfx_down_write_killable+0x10/0x10 [ 319.611918][ T9981] vm_mmap_pgoff+0x29e/0x470 [ 319.611948][ T9981] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.611973][ T9981] ? do_futex+0x192/0x350 [ 319.612004][ T9981] ? __pfx_do_futex+0x10/0x10 [ 319.612038][ T9981] ksys_mmap_pgoff+0xe1/0x650 [ 319.612060][ T9981] ? __x64_sys_futex+0x34f/0x4d0 [ 319.612089][ T9981] ? __x64_sys_futex+0x358/0x4d0 [ 319.612126][ T9981] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 319.612149][ T9981] ? xfd_validate_state+0x129/0x190 [ 319.612187][ T9981] __x64_sys_mmap+0x125/0x190 [ 319.612224][ T9981] do_syscall_64+0x106/0xf80 [ 319.612249][ T9981] ? clear_bhb_loop+0x40/0x90 [ 319.612277][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.612300][ T9981] RIP: 0033:0x7f90c379c799 [ 319.612319][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.612342][ T9981] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.612364][ T9981] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 319.612379][ T9981] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 319.612392][ T9981] RBP: 00007f90c3832bd9 R08: 0000000000000002 R09: 0000000000008000 [ 319.612413][ T9981] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 319.612427][ T9981] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 319.612456][ T9981] [ 326.798107][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 326.845231][T10092] netlink: 354 bytes leftover after parsing attributes in process `syz.1.889'. [ 332.349510][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 332.849014][T10170] Invalid ELF header magic: != ELF [ 335.554231][T10209] Invalid ELF header magic: != ELF [ 335.629625][T10225] bcache: register_bcache() error : failed to open device [ 336.253867][T10234] netlink: 346 bytes leftover after parsing attributes in process `syz.1.924'. [ 337.135200][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 337.191958][T10259] __vm_enough_memory: pid: 10259, comm: syz.0.933, bytes: 4398046511104 not enough memory for the allocation [ 339.919065][T10295] netlink: 'syz.2.943': attribute type 4 has an invalid length. [ 339.979821][T10295] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 340.836784][T10314] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 341.867321][T10323] netlink: 'syz.2.949': attribute type 2 has an invalid length. [ 342.422994][ T6750] Bluetooth: Frame is too long (len 122, expected len 4) [ 343.941476][T10330] kexec: Could not allocate control_code_buffer [ 344.094594][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 344.549573][T10352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 345.395956][T10365] netlink: 330 bytes leftover after parsing attributes in process `syz.2.955'. [ 345.437951][T10364] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 345.584703][T10364] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 346.284786][T10383] netlink: 'syz.3.959': attribute type 11 has an invalid length. [ 348.159746][T10426] can: request_module (can-proto-5) failed. [ 348.279952][T10434] netlink: 'syz.3.965': attribute type 2 has an invalid length. [ 352.399269][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'. [ 352.530222][T10508] i: entered promiscuous mode [ 354.349495][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 354.607855][T10548] netlink: 'syz.0.993': attribute type 11 has an invalid length. [ 358.654827][T10615] netlink: zone id is out of range [ 358.659992][T10615] netlink: zone id is out of range [ 358.741880][T10615] netlink: zone id is out of range [ 358.800508][T10615] netlink: zone id is out of range [ 358.950261][T10615] netlink: set zone limit has 8 unknown bytes [ 359.460935][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 365.596748][T10743] netlink: 'syz.1.1037': attribute type 11 has an invalid length. [ 365.996827][T10750] netlink: 'syz.2.1038': attribute type 11 has an invalid length. [ 366.750959][T10764] Invalid ELF header magic: != ELF [ 368.113311][T10788] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 368.183605][T10788] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 368.224469][T10788] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 368.264533][T10788] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 370.196677][T10843] netlink: 'syz.0.1061': attribute type 11 has an invalid length. [ 370.310002][T10845] netlink: 'syz.3.1063': attribute type 11 has an invalid length. [ 370.496117][T10852] netlink: 'syz.2.1064': attribute type 11 has an invalid length. [ 373.298095][T10913] __vm_enough_memory: pid: 10913, comm: syz.2.1078, bytes: 4398046511104 not enough memory for the allocation [ 373.392113][T10911] netlink: 'syz.3.1076': attribute type 11 has an invalid length. [ 374.575333][T10938] delete_channel: no stack [ 376.414270][T10977] netlink: 'syz.1.1093': attribute type 11 has an invalid length. [ 377.360642][T10991] netlink: 'syz.0.1097': attribute type 11 has an invalid length. [ 378.848181][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854686][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.872988][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.879157][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.885348][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.891190][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.897254][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.904168][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.910360][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.922315][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.930924][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.936956][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.943353][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.949154][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.955736][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.961498][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.967361][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.973252][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.979133][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.984889][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.991218][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 378.997802][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.003849][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.010567][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.016386][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.022481][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.028325][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.034022][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.044500][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.050326][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.056089][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.061892][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.067733][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.073503][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.083391][ T6750] Bluetooth: hci1: Malformed Event: 0x02 [ 379.898062][T11043] netlink: 'syz.1.1110': attribute type 11 has an invalid length. [ 380.679808][T11055] netlink: 'syz.3.1112': attribute type 11 has an invalid length. [ 381.946632][T11075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.968675][T11075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.035340][T11075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.041376][T11075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 382.129695][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1119'. [ 382.200768][T11075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.546132][T11128] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[11128] [ 383.962498][ T6750] Bluetooth: hci0: command 0x0c1a tx timeout [ 384.036424][ T6750] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.114890][ T6750] Bluetooth: hci1: command 0x0c1a tx timeout [ 384.276982][ T6750] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.924870][T11158] raw_sendmsg: syz.3.1135 forgot to set AF_INET. Fix it! [ 385.229562][T11161] netlink: 'syz.3.1137': attribute type 11 has an invalid length. [ 386.194566][ T6750] Bluetooth: hci1: command 0x0c1a tx timeout [ 386.318545][T11184] netlink: 'syz.0.1142': attribute type 11 has an invalid length. [ 386.409804][T11187] netlink: 'syz.2.1143': attribute type 11 has an invalid length. [ 388.862707][T11229] netlink: 'syz.2.1152': attribute type 11 has an invalid length. [ 389.883175][T11245] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1158'. [ 390.231473][T11259] netlink: 130 bytes leftover after parsing attributes in process `syz.3.1160'. [ 390.284490][T11259] netlink: 130 bytes leftover after parsing attributes in process `syz.3.1160'. [ 392.080146][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'. [ 392.123561][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.165741][T11294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.228599][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.255519][T11294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.270281][T11335] netlink: 'syz.0.1182': attribute type 11 has an invalid length. [ 395.417420][T11338] netlink: 'syz.2.1181': attribute type 11 has an invalid length. [ 395.520962][T11340] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 396.295482][T11361] capability: warning: `syz.3.1185' uses 32-bit capabilities (legacy support in use) [ 396.821340][T11368] Invalid ELF header magic: != ELF [ 396.844815][T11372] netlink: 'syz.2.1188': attribute type 11 has an invalid length. [ 397.125973][ T6750] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 397.134714][ T6750] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 398.151580][T11407] netlink: 'syz.3.1193': attribute type 11 has an invalid length. [ 398.813699][T11424] netlink: 'syz.0.1197': attribute type 11 has an invalid length. [ 398.872633][T11425] netlink: 'syz.2.1196': attribute type 11 has an invalid length. [ 399.511592][ T6750] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 399.630435][T11442] netlink: 'syz.0.1199': attribute type 11 has an invalid length. [ 401.055124][T11479] netlink: 'syz.3.1207': attribute type 11 has an invalid length. [ 402.123539][ T6750] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 403.474630][T11544] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.710728][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.760291][T11561] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 403.818306][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.891557][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.989675][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 404.089455][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 404.167738][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 404.270391][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 404.328768][ T6750] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 404.381428][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 404.587941][T11573] netlink: 'syz.2.1229': attribute type 11 has an invalid length. [ 404.606952][T11556] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1221'. [ 405.114033][T11581] netlink: 'syz.0.1230': attribute type 11 has an invalid length. [ 405.545543][T11597] FAULT_INJECTION: forcing a failure. [ 405.545543][T11597] name fail_futex, interval 1, probability 0, space 0, times 0 [ 405.594856][T11598] netlink: 'syz.2.1235': attribute type 11 has an invalid length. [ 405.602888][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.3.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.602923][T11597] Tainted: [L]=SOFTLOCKUP [ 405.602930][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.602944][T11597] Call Trace: [ 405.602951][T11597] [ 405.602960][T11597] dump_stack_lvl+0x100/0x190 [ 405.603000][T11597] should_fail_ex.cold+0x5/0xa [ 405.603026][T11597] get_futex_key+0x1d2/0x1620 [ 405.603057][T11597] ? __pfx_get_futex_key+0x10/0x10 [ 405.603093][T11597] futex_wait_setup+0x81/0x500 [ 405.603135][T11597] __futex_wait+0x19f/0x300 [ 405.603187][T11597] ? __pfx___futex_wait+0x10/0x10 [ 405.603226][T11597] ? __pfx_futex_wake_mark+0x10/0x10 [ 405.603264][T11597] ? futex_hash+0x2c5/0x380 [ 405.603299][T11597] futex_wait+0xed/0x380 [ 405.603334][T11597] ? __pfx_futex_wait+0x10/0x10 [ 405.603378][T11597] ? do_raw_spin_lock+0x128/0x260 [ 405.603415][T11597] do_futex+0x1ef/0x350 [ 405.603444][T11597] ? __pfx_do_futex+0x10/0x10 [ 405.603472][T11597] ? _raw_spin_unlock_irq+0x2e/0x50 [ 405.603494][T11597] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 405.603530][T11597] __x64_sys_futex+0x34f/0x4d0 [ 405.603561][T11597] ? __x64_sys_close_range+0x30f/0x5d0 [ 405.603584][T11597] ? __pfx___x64_sys_futex+0x10/0x10 [ 405.603614][T11597] ? __pfx___x64_sys_close_range+0x10/0x10 [ 405.603645][T11597] do_syscall_64+0x106/0xf80 [ 405.603670][T11597] ? clear_bhb_loop+0x40/0x90 [ 405.603697][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.603721][T11597] RIP: 0033:0x7f90c379c799 [ 405.603739][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.603761][T11597] RSP: 002b:00007f90c46090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 405.603783][T11597] RAX: ffffffffffffffda RBX: 00007f90c3a15fa8 RCX: 00007f90c379c799 [ 405.603798][T11597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90c3a15fa8 [ 405.603812][T11597] RBP: 00007f90c3a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 405.603826][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.603839][T11597] R13: 00007f90c3a16038 R14: 00007ffe082bff10 R15: 00007ffe082bfff8 [ 405.603868][T11597] [ 406.270119][T11604] veth1_macvtap: left promiscuous mode [ 407.338169][T11634] netlink: 'syz.2.1245': attribute type 11 has an invalid length. [ 408.117168][T11660] netlink: 'syz.2.1248': attribute type 11 has an invalid length. [ 409.794356][T11704] netlink: 'syz.3.1254': attribute type 11 has an invalid length. [ 409.851848][T11704] netlink: 'syz.3.1254': attribute type 11 has an invalid length. [ 410.565821][T11727] netlink: 'syz.2.1258': attribute type 11 has an invalid length. [ 414.799887][T11803] FAULT_INJECTION: forcing a failure. [ 414.799887][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 414.946242][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.3.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.946281][T11803] Tainted: [L]=SOFTLOCKUP [ 414.946289][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.946303][T11803] Call Trace: [ 414.946310][T11803] [ 414.946318][T11803] dump_stack_lvl+0x100/0x190 [ 414.946362][T11803] should_fail_ex.cold+0x5/0xa [ 414.946389][T11803] should_failslab+0xc2/0x120 [ 414.946419][T11803] __kmalloc_cache_noprof+0x7a/0x6f0 [ 414.946449][T11803] ? copy_mount_options+0x55/0x190 [ 414.946484][T11803] copy_mount_options+0x55/0x190 [ 414.946516][T11803] __x64_sys_mount+0x1ab/0x310 [ 414.946543][T11803] ? __pfx___x64_sys_mount+0x10/0x10 [ 414.946577][T11803] do_syscall_64+0x106/0xf80 [ 414.946603][T11803] ? clear_bhb_loop+0x40/0x90 [ 414.946633][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.946660][T11803] RIP: 0033:0x7f90c379c799 [ 414.946679][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.946702][T11803] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.946724][T11803] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 414.946740][T11803] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 414.946754][T11803] RBP: 00007f90c3832bd9 R08: 0000200000000280 R09: 0000000000000000 [ 414.946769][T11803] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 414.946782][T11803] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 414.946812][T11803] [ 416.439838][T11828] netlink: 'syz.0.1279': attribute type 11 has an invalid length. [ 417.072319][T11853] __nla_validate_parse: 7 callbacks suppressed [ 417.073494][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 418.413781][T11845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.466230][T11882] netlink: 'syz.2.1294': attribute type 11 has an invalid length. [ 418.477693][T11845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.625936][T11845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.666678][T11845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.988564][ T6750] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.654319][T11911] bridge0: port 3(gretap0) entered blocking state [ 419.694959][T11911] bridge0: port 3(gretap0) entered disabled state [ 419.745058][T11911] gretap0: entered allmulticast mode [ 419.806824][T11911] gretap0: entered promiscuous mode [ 420.017702][T11925] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1305'. [ 420.213352][T11928] netlink: 'syz.0.1306': attribute type 11 has an invalid length. [ 420.510412][ T6750] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.669455][ T6750] Bluetooth: hci3: command 0x0c1a tx timeout [ 420.676234][ T6747] Bluetooth: hci1: command 0x0c1a tx timeout [ 424.283595][T12020] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1325'. [ 424.293111][T12012] futex_wake_op: syz.2.1324 tries to shift op by -2048; fix this program [ 424.447859][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 425.432516][T12038] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1330'. [ 426.909679][T12059] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1335'. [ 427.400407][T12069] netlink: 'syz.1.1338': attribute type 11 has an invalid length. [ 428.111059][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 430.057909][T12108] Invalid ELF header magic: != ELF [ 431.073955][T12121] netlink: 'syz.1.1349': attribute type 11 has an invalid length. [ 432.259291][T12151] netlink: get zone limit has 8 unknown bytes [ 432.787045][T12155] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[12155] [ 434.340091][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 434.755048][T12173] nbd: must specify at least one socket [ 435.149630][T12180] netlink: 'syz.1.1360': attribute type 11 has an invalid length. [ 435.204152][ T6750] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 436.111484][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 437.206837][T12237] netlink: 'syz.1.1372': attribute type 11 has an invalid length. [ 439.478365][T12277] netlink: 'syz.1.1381': attribute type 11 has an invalid length. [ 440.264158][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.273841][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.464794][T12305] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[12305] [ 442.976607][ T6750] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 443.671275][T12355] netlink: 'syz.3.1394': attribute type 11 has an invalid length. [ 444.554564][T12376] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[12376] [ 445.827021][T12403] netlink: 'syz.2.1406': attribute type 11 has an invalid length. [ 446.401241][T12427] netlink: 'syz.2.1410': attribute type 11 has an invalid length. [ 447.700782][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 447.848513][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.880262][T12477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.936273][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.961218][T12477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.832250][T12515] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 449.720462][T12527] FAULT_INJECTION: forcing a failure. [ 449.720462][T12527] name failslab, interval 1, probability 0, space 0, times 0 [ 449.786860][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.3.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.786899][T12527] Tainted: [L]=SOFTLOCKUP [ 449.786906][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.786920][T12527] Call Trace: [ 449.786928][T12527] [ 449.786936][T12527] dump_stack_lvl+0x100/0x190 [ 449.786977][T12527] should_fail_ex.cold+0x5/0xa [ 449.787004][T12527] should_failslab+0xc2/0x120 [ 449.787026][T12527] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 449.787059][T12527] ? alloc_empty_file+0x55/0x1c0 [ 449.787091][T12527] alloc_empty_file+0x55/0x1c0 [ 449.787118][T12527] alloc_file_pseudo+0x13a/0x230 [ 449.787146][T12527] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 449.787174][T12527] ? alloc_fd+0x476/0x790 [ 449.787215][T12527] sock_alloc_file+0x50/0x210 [ 449.787245][T12527] __sys_socket+0x1c0/0x260 [ 449.787280][T12527] ? __pfx___sys_socket+0x10/0x10 [ 449.787323][T12527] __x64_sys_socket+0x72/0xb0 [ 449.787357][T12527] ? lockdep_hardirqs_on+0x78/0x100 [ 449.787388][T12527] do_syscall_64+0x106/0xf80 [ 449.787413][T12527] ? clear_bhb_loop+0x40/0x90 [ 449.787441][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.787465][T12527] RIP: 0033:0x7f90c379c799 [ 449.787484][T12527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.787506][T12527] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 449.787528][T12527] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 449.787543][T12527] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 449.787556][T12527] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 449.787570][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.787583][T12527] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 449.787612][T12527] [ 451.331785][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 452.421341][T12590] netlink: 'syz.0.1440': attribute type 11 has an invalid length. [ 452.482599][T12583] Invalid ELF header magic: != ELF [ 453.746631][T12620] vhci_hcd vhci_hcd.2: invalid port number 16 [ 453.785541][T12620] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 453.849432][T12620] ptp ptp0: only physical clock in use now [ 454.680399][T12627] can: request_module (can-proto-4) failed. [ 455.141016][T12640] netlink: 'syz.0.1449': attribute type 11 has an invalid length. [ 455.576049][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'. [ 456.083554][T12669] netlink: zone id is out of range [ 456.140421][T12661] netlink: zone id is out of range [ 456.170329][T12669] netlink: zone id is out of range [ 456.202999][T12661] netlink: zone id is out of range [ 456.237030][T12669] netlink: zone id is out of range [ 456.283043][T12661] netlink: zone id is out of range [ 456.316544][T12669] netlink: zone id is out of range [ 456.357089][T12661] netlink: zone id is out of range [ 456.393674][T12669] netlink: zone id is out of range [ 456.443508][T12661] netlink: zone id is out of range [ 456.926541][T12686] netlink: 'syz.2.1462': attribute type 11 has an invalid length. [ 457.476577][T12702] syz.2.1464(12702): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 457.820794][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 458.691585][T12733] netlink: 'syz.1.1472': attribute type 11 has an invalid length. [ 459.226550][ T6750] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 459.226580][ T6750] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 459.241559][ T6750] Bluetooth: hci2: Dropping invalid advertising data [ 459.249490][ T6750] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 459.496532][ T6750] Bluetooth: hci0: hcon ffff888080abc000 sent 0 < count 256 [ 459.777614][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'. [ 459.801543][T12773] bridge0: port 3(vlan0) entered disabled state [ 459.810489][T12773] vlan0 (unregistering): left allmulticast mode [ 459.818150][T12773] veth0_vlan: left allmulticast mode [ 459.824084][T12773] vlan0 (unregistering): left promiscuous mode [ 459.830596][T12773] bridge0: port 3(vlan0) entered disabled state [ 460.443490][T12790] netlink: 'syz.2.1485': attribute type 11 has an invalid length. [ 460.860356][T12796] futex_wake_op: syz.1.1487 tries to shift op by -2048; fix this program [ 460.983985][T12796] futex_wake_op: syz.1.1487 tries to shift op by -2048; fix this program [ 461.704264][T12820] netlink: 'syz.0.1494': attribute type 11 has an invalid length. [ 461.773009][T12823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 462.409007][T12836] netlink: 'syz.0.1496': attribute type 11 has an invalid length. [ 463.042582][T12841] can: request_module (can-proto-4) failed. [ 463.243213][T12850] futex_wake_op: syz.1.1499 tries to shift op by -2048; fix this program [ 464.313219][T12872] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 465.142635][T12890] netlink: 'syz.2.1506': attribute type 11 has an invalid length. [ 466.027631][T12904] [U]  [ 471.503248][T13031] FAULT_INJECTION: forcing a failure. [ 471.503248][T13031] name fail_futex, interval 1, probability 0, space 0, times 0 [ 471.682431][T13031] CPU: 0 UID: 0 PID: 13031 Comm: syz.3.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.682468][T13031] Tainted: [L]=SOFTLOCKUP [ 471.682475][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.682489][T13031] Call Trace: [ 471.682496][T13031] [ 471.682505][T13031] dump_stack_lvl+0x100/0x190 [ 471.682549][T13031] should_fail_ex.cold+0x5/0xa [ 471.682571][T13031] ? rcu_is_watching+0x12/0xc0 [ 471.682609][T13031] get_futex_key+0x295/0x1620 [ 471.682640][T13031] ? __pfx_get_futex_key+0x10/0x10 [ 471.682665][T13031] ? lock_acquire+0x1cf/0x380 [ 471.682703][T13031] futex_wake+0xea/0x530 [ 471.682740][T13031] ? __pfx_futex_wake+0x10/0x10 [ 471.682775][T13031] ? exit_mm_release+0x19/0x30 [ 471.682810][T13031] do_futex+0x32b/0x350 [ 471.682840][T13031] ? __pfx_do_futex+0x10/0x10 [ 471.682867][T13031] ? __might_fault+0xc5/0x140 [ 471.682905][T13031] mm_release+0x24a/0x2f0 [ 471.682928][T13031] do_exit+0x675/0x2aa0 [ 471.682962][T13031] ? __pfx_do_exit+0x10/0x10 [ 471.682991][T13031] ? do_raw_spin_lock+0x128/0x260 [ 471.683024][T13031] ? find_held_lock+0x2b/0x80 [ 471.683044][T13031] ? get_signal+0x7e0/0x21e0 [ 471.683069][T13031] do_group_exit+0xd5/0x2a0 [ 471.683102][T13031] get_signal+0x1ec7/0x21e0 [ 471.683130][T13031] ? __might_fault+0xc5/0x140 [ 471.683164][T13031] ? __pfx_get_signal+0x10/0x10 [ 471.683206][T13031] ? do_futex+0x192/0x350 [ 471.683238][T13031] arch_do_signal_or_restart+0x91/0x770 [ 471.683266][T13031] ? __sys_connect+0xe4/0x170 [ 471.683287][T13031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 471.683323][T13031] ? __pfx___x64_sys_futex+0x10/0x10 [ 471.683359][T13031] exit_to_user_mode_loop+0x86/0x4a0 [ 471.683391][T13031] do_syscall_64+0x668/0xf80 [ 471.683416][T13031] ? clear_bhb_loop+0x40/0x90 [ 471.683443][T13031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.683466][T13031] RIP: 0033:0x7f90c379c799 [ 471.683485][T13031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.683506][T13031] RSP: 002b:00007f90c45c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 471.683528][T13031] RAX: fffffffffffffe00 RBX: 00007f90c3a16188 RCX: 00007f90c379c799 [ 471.683548][T13031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90c3a16188 [ 471.683561][T13031] RBP: 00007f90c3a16180 R08: 0000000000000000 R09: 0000000000000000 [ 471.683575][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.683588][T13031] R13: 00007f90c3a16218 R14: 00007ffe082bff10 R15: 00007ffe082bfff8 [ 471.683617][T13031] [ 478.794422][ T6750] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 478.794453][ T6750] Bluetooth: hci2: unexpected subevent 0x06 length: 725 > 10 [ 479.240310][T13113] net_ratelimit: 444 callbacks suppressed [ 479.240331][T13113] openvswitch: netlink: IPv6 tunnel dst address is zero [ 479.283593][T13112] netlink: 'syz.3.1557': attribute type 11 has an invalid length. [ 479.922728][T13123] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1558'. [ 480.054556][T13123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1558'. [ 480.815915][ T6750] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.892357][ T30] audit: type=1804 audit(4294967370.972:9): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1562" name="file0" dev="tmpfs" ino=2206 res=1 errno=0 [ 481.372015][T13126] Process accounting resumed [ 481.412657][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 481.870825][T13160] netlink: 'syz.1.1567': attribute type 11 has an invalid length. [ 483.257785][T13184] bridge0: port 3(team0) entered blocking state [ 483.351582][T13184] bridge0: port 3(team0) entered disabled state [ 483.431999][T13184] team0: entered allmulticast mode [ 483.474504][T13184] team_slave_0: entered allmulticast mode [ 483.541409][T13184] team_slave_1: entered allmulticast mode [ 483.599946][T13184] team0: entered promiscuous mode [ 483.662079][T13184] team_slave_0: entered promiscuous mode [ 483.728049][T13184] team_slave_1: entered promiscuous mode [ 484.941522][T13203] netlink: 'syz.1.1576': attribute type 11 has an invalid length. [ 486.605130][T13241] netlink: 'syz.2.1586': attribute type 11 has an invalid length. [ 489.416187][T13294] zero sized request [ 489.729960][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 489.828608][T13302] i: entered promiscuous mode [ 489.876599][T13305] netlink: 'syz.2.1598': attribute type 11 has an invalid length. [ 491.899321][T13362] netlink: 'syz.1.1611': attribute type 11 has an invalid length. [ 492.748104][T13377] netlink: 'syz.0.1623': attribute type 11 has an invalid length. [ 493.357509][T13398] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.100336][T13433] bridge0: port 3(veth0_to_bridge) entered blocking state [ 495.203109][T13433] bridge0: port 3(veth0_to_bridge) entered disabled state [ 495.293061][T13433] veth0_to_bridge: entered allmulticast mode [ 495.370679][T13433] veth0_to_bridge: entered promiscuous mode [ 495.415274][T13433] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.550181][T13433] bridge0: port 3(veth0_to_bridge) entered blocking state [ 495.557570][T13433] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 497.388565][T13480] bridge0: port 4(bond0) entered blocking state [ 497.417754][T13480] bridge0: port 4(bond0) entered disabled state [ 497.455942][T13480] bond0: entered allmulticast mode [ 497.492517][T13480] bond_slave_0: entered allmulticast mode [ 497.527481][T13480] bond_slave_1: entered allmulticast mode [ 497.565189][T13480] bond0: entered promiscuous mode [ 497.599155][T13480] bond_slave_0: entered promiscuous mode [ 497.625909][T13480] bond_slave_1: entered promiscuous mode [ 499.217991][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 501.146800][T13572] bridge0: port 4(bond0) entered blocking state [ 501.185443][T13572] bridge0: port 4(bond0) entered disabled state [ 501.231749][T13572] bond0: entered allmulticast mode [ 501.258308][T13572] bond_slave_0: entered allmulticast mode [ 501.283846][T13572] bond_slave_1: entered allmulticast mode [ 501.313868][T13572] bond0: entered promiscuous mode [ 501.329225][T13572] bond_slave_0: entered promiscuous mode [ 501.337875][T13572] bond_slave_1: entered promiscuous mode [ 501.698812][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.706970][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.134230][T13620] zswap: compressor not available [ 506.461271][T13686] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1689'. [ 507.471722][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 508.540853][T13709] could not allocate digest TFM handle [ 511.023226][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 513.261799][T13828] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1727'. [ 516.726959][T13896] netlink: 'syz.3.1744': attribute type 11 has an invalid length. [ 517.353116][T13904] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1746'. [ 517.432897][T13906] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1746'. [ 518.550407][T13922] netlink: 'syz.2.1753': attribute type 11 has an invalid length. [ 519.249147][T13947] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1758'. [ 519.290352][T13947] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1758'. [ 521.274581][T13986] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1770'. [ 521.320128][T13986] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1770'. [ 522.645750][T14010] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 522.713315][T14010] batman_adv: Routing algorithm '' is not supported [ 527.907790][T14149] NFSD: Failed to start, no listeners configured. [ 528.089057][T14155] FAULT_INJECTION: forcing a failure. [ 528.089057][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 528.140246][T14155] CPU: 0 UID: 0 PID: 14155 Comm: syz.3.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.140285][T14155] Tainted: [L]=SOFTLOCKUP [ 528.140293][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.140307][T14155] Call Trace: [ 528.140314][T14155] [ 528.140324][T14155] dump_stack_lvl+0x100/0x190 [ 528.140366][T14155] should_fail_ex.cold+0x5/0xa [ 528.140394][T14155] should_failslab+0xc2/0x120 [ 528.140416][T14155] __kmalloc_cache_noprof+0x7a/0x6f0 [ 528.140445][T14155] ? do_eventfd+0x67/0x2b0 [ 528.140483][T14155] do_eventfd+0x67/0x2b0 [ 528.140516][T14155] __x64_sys_eventfd+0x32/0x50 [ 528.140548][T14155] do_syscall_64+0x106/0xf80 [ 528.140574][T14155] ? clear_bhb_loop+0x40/0x90 [ 528.140603][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.140627][T14155] RIP: 0033:0x7f90c379c799 [ 528.140647][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.140669][T14155] RSP: 002b:00007f90c4609028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 528.140691][T14155] RAX: ffffffffffffffda RBX: 00007f90c3a15fa0 RCX: 00007f90c379c799 [ 528.140707][T14155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 528.140720][T14155] RBP: 00007f90c3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 528.140735][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.140748][T14155] R13: 00007f90c3a16038 R14: 00007f90c3a15fa0 R15: 00007ffe082bfff8 [ 528.140788][T14155] [ 528.433822][T14161] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 528.732763][T14169] nfs4: Unknown parameter 'ܕULpHcJY%Go' [ 530.478060][T14204] NFSD: Failed to start, no listeners configured. [ 534.626003][T14325] zswap: compressor not available [ 534.968252][ T30] audit: type=1326 audit(2147483648.609:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14346 comm="syz.2.1873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a3f39c799 code=0x0 [ 535.071287][T14351] netlink: 'syz.1.1874': attribute type 11 has an invalid length. [ 536.930431][T14389] Invalid ELF header magic: != ELF [ 537.427302][T14393] netlink: 'syz.0.1885': attribute type 11 has an invalid length. [ 539.840468][T14420] netlink: 'syz.0.1895': attribute type 11 has an invalid length. [ 541.470927][T14459] netlink: 'syz.1.1909': attribute type 11 has an invalid length. [ 541.805757][T14467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.937893][ T6750] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 543.094297][T14499] netlink: 'syz.0.1923': attribute type 11 has an invalid length. [ 543.835719][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 544.059692][T14523] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1933'. [ 544.132321][T14537] netlink: 'syz.0.1933': attribute type 23 has an invalid length. [ 544.888746][T14554] : entered promiscuous mode [ 545.074633][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 545.105514][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 546.010693][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1944'. [ 547.303512][T14606] netlink: 'syz.2.1949': attribute type 11 has an invalid length. [ 548.454763][T14616] Invalid ELF header magic: != ELF [ 548.729717][ T6750] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 549.080195][T14647] netlink: 'syz.0.1961': attribute type 11 has an invalid length. [ 549.752859][T14659] netlink: 'syz.2.1965': attribute type 23 has an invalid length. [ 550.292193][T14668] Invalid ELF header magic: != ELF [ 552.176225][T14720] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1983'. [ 552.625353][T14730] netlink: 'syz.0.1984': attribute type 11 has an invalid length. [ 554.185306][T14734] kexec: Could not allocate control_code_buffer [ 554.726629][T14770] netlink: 'syz.1.1995': attribute type 11 has an invalid length. [ 557.203117][T14816] futex_wake_op: syz.2.2003 tries to shift op by -2048; fix this program [ 557.221054][T14816] futex_wake_op: syz.2.2003 tries to shift op by -2048; fix this program [ 559.701059][T14849] netlink: 'syz.3.2013': attribute type 11 has an invalid length. [ 560.782100][T14870] Invalid ELF header magic: != ELF [ 561.090614][T14882] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2020'. [ 561.140802][T14884] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2020'. [ 561.682853][T14891] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2023'. [ 562.841525][T14918] netlink: 'syz.0.2028': attribute type 11 has an invalid length. [ 563.157609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.170239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.182602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.194896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.207167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.219449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.231813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.244072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.256355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.268641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.434953][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.164230][ C0] net_ratelimit: 15169 callbacks suppressed [ 568.164251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.182586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.194904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.207240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.219560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.231890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.244268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.256636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.268961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.281292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.823171][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.176672][ C0] net_ratelimit: 15097 callbacks suppressed [ 573.176694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.195038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.207381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.219693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.232032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.244364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.256725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.269075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.281462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.293885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.963240][ C0] sched: DL replenish lagged too much [ 578.189431][ C0] net_ratelimit: 14356 callbacks suppressed [ 578.189453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.207770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.220244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.232623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.244982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.257329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.269646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.281983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.294347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.307095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.201708][ C0] net_ratelimit: 14514 callbacks suppressed [ 583.201729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 583.220053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.232374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 583.244829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.257122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 583.269614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.281937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 583.294325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.306627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 583.318997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.214262][ C0] net_ratelimit: 14856 callbacks suppressed [ 588.214282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 588.232668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.245081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.257568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.269961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 588.282344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.294709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.307113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.319415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 588.331794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.226906][ C0] net_ratelimit: 14357 callbacks suppressed [ 593.226928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.245396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 593.257847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.270177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.282585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.294854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 593.307308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.319803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.332235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.344544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 598.239176][ C0] net_ratelimit: 14455 callbacks suppressed [ 598.239199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 598.257588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.269924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.282379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.294667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 598.307200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.319551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.332025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.344689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 598.357572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.251653][ C0] net_ratelimit: 15424 callbacks suppressed [ 603.251674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.270019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.282336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 603.294723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.307035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.319427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.331726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 603.344296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.356571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.368933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.264134][ C0] net_ratelimit: 15560 callbacks suppressed [ 608.264156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 608.282542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.295038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.307591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.319970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 608.332386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.344803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.357197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.369679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 608.382089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.276923][ C0] net_ratelimit: 14209 callbacks suppressed [ 613.276956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.295396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 613.307913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.320281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.332755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.345145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 613.357594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.369906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.382309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.394671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 618.289203][ C0] net_ratelimit: 14447 callbacks suppressed [ 618.289225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 618.307843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.320182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.332709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.345131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 618.357618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.369959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.382408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.394765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 618.407180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.301608][ C0] net_ratelimit: 14300 callbacks suppressed [ 623.301629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.320089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.332399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 623.344796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.357065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.369461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.381817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 623.394338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.406635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.419043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.314155][ C0] net_ratelimit: 14306 callbacks suppressed [ 628.314178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.332579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.344906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 628.357433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.369816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.382264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.394673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 628.407087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.419414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.431830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.326659][ C0] net_ratelimit: 14237 callbacks suppressed [ 633.326681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.345066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.357485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.369799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 633.382347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.394653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.407062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.419343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 633.431952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.444308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.023810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.339215][ C0] net_ratelimit: 15494 callbacks suppressed [ 638.339238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.357510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.370492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.382827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 638.395248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.407549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.420118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.432395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 638.444760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.457051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.351742][ C0] net_ratelimit: 15590 callbacks suppressed [ 643.351763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.370004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.382437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.394768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 643.407217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.419538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.431956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.444257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 643.456630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.468971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.364266][ C0] net_ratelimit: 14288 callbacks suppressed [ 648.364288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.382733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 648.395186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.407499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.419948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.432297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 648.444944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.457289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.469702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.482020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 653.376696][ C0] net_ratelimit: 14146 callbacks suppressed [ 653.376717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.395198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 653.407664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.420111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.432593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.444992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 653.457453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.469762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.482200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.494545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 658.389190][ C0] net_ratelimit: 14227 callbacks suppressed [ 658.389211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 658.407677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.420071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.432502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.444843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 658.457215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.469596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.482046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.494403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 658.506853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.401900][ C0] net_ratelimit: 14150 callbacks suppressed [ 663.401923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 663.420368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.432856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.445393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.457748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 663.470193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.482534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.494960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.507265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 663.519754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.224031][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 668.231035][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14719/1:b..l [ 668.239455][ C0] rcu: (detected by 0, t=10502 jiffies, g=87569, q=749 ncpus=1) [ 668.247202][ C0] task:syz.2.1979 state:R running task stack:22976 pid:14719 tgid:14719 ppid:5833 task_flags:0x40064c flags:0x00080001 [ 668.261686][ C0] Call Trace: [ 668.264993][ C0] [ 668.267976][ C0] __schedule+0xfee/0x60e0 [ 668.272426][ C0] ? __lock_acquire+0x4a5/0x2630 [ 668.277391][ C0] ? lock_acquire+0x1cf/0x380 [ 668.282083][ C0] ? __pfx___schedule+0x10/0x10 [ 668.286979][ C0] ? rcu_is_watching+0x12/0xc0 [ 668.291837][ C0] preempt_schedule_irq+0x50/0x90 [ 668.297572][ C0] irqentry_exit+0x17b/0x670 [ 668.302182][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.308177][ C0] RIP: 0010:lock_release+0x19e/0x320 [ 668.313475][ C0] Code: ff 65 0f c1 05 cb 0e 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d c7 28 12 0f 85 63 01 00 00 48 83 c4 [ 668.333105][ C0] RSP: 0018:ffffc90002e76ef8 EFLAGS: 00000206 [ 668.339181][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e9220 RCX: ffffc90002e76f04 [ 668.347337][ C0] RDX: 0000000000000000 RSI: ffffffff8de54dd3 RDI: ffffffff8c1aefa0 [ 668.355314][ C0] RBP: ffffffff81b7adde R08: 0000000000000001 R09: 0000000000000007 [ 668.363286][ C0] R10: 0000000000000200 R11: 0000000000018e63 R12: ffff888032295ac0 [ 668.371261][ C0] R13: ffffc90002e76fb0 R14: 0000000000000202 R15: 0000000000000001 [ 668.379239][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 668.384466][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 668.389499][ C0] ? dput.part.0+0x456/0x570 [ 668.394107][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.400287][ C0] arch_stack_walk+0x94/0xf0 [ 668.404890][ C0] ? dput+0x1f/0x30 [ 668.408713][ C0] stack_trace_save+0x8e/0xc0 [ 668.413399][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 668.418779][ C0] ? __lock_acquire+0x4a5/0x2630 [ 668.423730][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.429546][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 668.434761][ C0] save_stack+0x162/0x1e0 [ 668.439111][ C0] ? __pfx_save_stack+0x10/0x10 [ 668.443986][ C0] ? free_unref_folios+0xaea/0x1790 [ 668.449200][ C0] ? folios_put_refs+0x53c/0x840 [ 668.454155][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 668.459283][ C0] ? shmem_evict_inode+0x39e/0xbd0 [ 668.464422][ C0] ? evict+0x3c2/0xad0 [ 668.468499][ C0] ? iput.part.0+0x605/0xf50 [ 668.473101][ C0] ? iput+0x35/0x40 [ 668.476942][ C0] ? dentry_unlink_inode+0x2a1/0x490 [ 668.482244][ C0] ? __dentry_kill+0x1d0/0x600 [ 668.487021][ C0] ? finish_dput+0x76/0x480 [ 668.491540][ C0] ? dput.part.0+0x456/0x570 [ 668.496149][ C0] ? page_ext_put+0x3e/0xd0 [ 668.500678][ C0] __reset_page_owner+0x84/0x190 [ 668.505636][ C0] free_unref_folios+0xaea/0x1790 [ 668.510702][ C0] ? rcu_is_watching+0x12/0xc0 [ 668.515490][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.521308][ C0] folios_put_refs+0x53c/0x840 [ 668.526090][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 668.531396][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 668.537771][ C0] shmem_undo_range+0x5e5/0x1570 [ 668.542739][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 668.548279][ C0] shmem_evict_inode+0x39e/0xbd0 [ 668.553260][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 668.558999][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 668.564494][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 668.570599][ C0] ? find_held_lock+0x2b/0x80 [ 668.575283][ C0] ? evict+0x37e/0xad0 [ 668.579360][ C0] ? evict+0x37e/0xad0 [ 668.583441][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 668.588952][ C0] evict+0x3c2/0xad0 [ 668.592877][ C0] ? find_held_lock+0x2b/0x80 [ 668.597563][ C0] ? __pfx_evict+0x10/0x10 [ 668.602006][ C0] ? iput.part.0+0x5fd/0xf50 [ 668.606612][ C0] iput.part.0+0x605/0xf50 [ 668.611037][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 668.616365][ C0] iput+0x35/0x40 [ 668.620038][ C0] dentry_unlink_inode+0x2a1/0x490 [ 668.625163][ C0] __dentry_kill+0x1d0/0x600 [ 668.629772][ C0] finish_dput+0x76/0x480 [ 668.634123][ C0] dput.part.0+0x456/0x570 [ 668.638637][ C0] dput+0x1f/0x30 [ 668.642282][ C0] __fput+0x519/0xb40 [ 668.646282][ C0] task_work_run+0x150/0x240 [ 668.650900][ C0] ? __pfx_task_work_run+0x10/0x10 [ 668.656045][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 668.661277][ C0] do_exit+0x829/0x2aa0 [ 668.665455][ C0] ? __pfx_do_exit+0x10/0x10 [ 668.670057][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 668.676054][ C0] do_group_exit+0xd5/0x2a0 [ 668.680589][ C0] get_signal+0x1ec7/0x21e0 [ 668.685134][ C0] ? __pfx_get_signal+0x10/0x10 [ 668.690002][ C0] arch_do_signal_or_restart+0x91/0x770 [ 668.695565][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 668.701739][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 668.707055][ C0] irqentry_exit+0x1f8/0x670 [ 668.711849][ C0] asm_exc_page_fault+0x26/0x30 [ 668.716797][ C0] RIP: 0033:0x401000 [ 668.720713][ C0] RSP: 002b:0000000000000048 EFLAGS: 00010202 [ 668.726818][ C0] RAX: 0000000000000000 RBX: 00007f6a3f616090 RCX: 00007f6a3f39c799 [ 668.734799][ C0] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 668.742794][ C0] RBP: 00007f6a3f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 668.750770][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.758835][ C0] R13: 00007f6a3f616128 R14: 00007f6a3f616090 R15: 00007ffd1925f908 [ 668.766839][ C0] [ 668.770293][ C0] net_ratelimit: 13663 callbacks suppressed [ 668.770310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.788608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.800992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.813272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 668.828061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.840416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.852799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.865093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 668.877435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.889738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.106894][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 673.776960][ C0] net_ratelimit: 14389 callbacks suppressed [ 673.776983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 673.795480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.807884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.820342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.832716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 673.845152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.857490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.869918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.882271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:a7:51:e0:fb:ce, vlan:0) [ 673.894664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)