last executing test programs: 1.930547594s ago: executing program 3 (id=11420): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100001000000032, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 1.784551857s ago: executing program 3 (id=11422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) fcntl$auto(0x3, 0x4, 0xa553) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 1.67116908s ago: executing program 0 (id=11425): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x21, 0x0, 0x0) 1.541445851s ago: executing program 0 (id=11427): close_range$auto(0x2, 0x8, 0x2) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x3) 1.463922761s ago: executing program 2 (id=11428): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto_F_GETLEASE(r0, 0x401, 0xf) 1.437080991s ago: executing program 3 (id=11429): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) 1.404218179s ago: executing program 0 (id=11431): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x200300) setsockopt$auto(r0, 0x107, 0x18, 0x0, 0x9) 1.289438113s ago: executing program 0 (id=11433): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 700.63629ms ago: executing program 1 (id=11443): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 663.227385ms ago: executing program 1 (id=11444): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 627.367487ms ago: executing program 1 (id=11445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) 571.406797ms ago: executing program 1 (id=11446): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 538.638659ms ago: executing program 2 (id=11447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, r1, 0x59e638bc4fbb3f7d, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) 490.979964ms ago: executing program 3 (id=11448): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0x24, 0x0, 0x0) 428.152653ms ago: executing program 2 (id=11449): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7e}, 0x40000000000009) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 374.169222ms ago: executing program 3 (id=11450): r0 = gettid() r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, 0x0, 0x0, 0x8) kill$auto(r0, 0x11) 332.572007ms ago: executing program 1 (id=11451): r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) 323.452065ms ago: executing program 0 (id=11452): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}]}, 0x1c}}, 0x20000004) 262.084816ms ago: executing program 2 (id=11453): setresuid$auto(0x0, 0x8, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) 215.701227ms ago: executing program 1 (id=11454): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 203.333768ms ago: executing program 0 (id=11455): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) sysfs$auto(0x2, 0x100000000000036, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 180.893338ms ago: executing program 3 (id=11456): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r0, 0x0, 0x800) 125.309453ms ago: executing program 2 (id=11457): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x13) write$auto_drm_connector_fops_drm_debugfs(r0, &(0x7f0000000080)="cd240089b0", 0x5) 0s ago: executing program 2 (id=11458): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x18000, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x8000000004, 0x7, 0x5, 0xfffffffffffffffe, 0x6, 0x8, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) kernel console output (not intermixed with test programs): 26296][T14279] kernel read not supported for file /\*)A (pid: 14279 comm: syz.2.3724) [ 248.039998][ T29] audit: type=1800 audit(1843108772.907:21): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3724" name="\*)A" dev="mqueue" ino=31539 res=0 errno=0 [ 249.445233][T14369] kafs: addr_prefs: Too many elements in string [ 249.615915][T14381] < [ 250.200308][T14424] ecryptfs_miscdev_write: Invalid packet size [192] [ 250.944968][T14474] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 251.776039][T14525] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 251.910004][T14534] sg_write: data in/out 262108/40 bytes for SCSI command 0x61-- guessing data in; [ 251.910004][T14534] program syz.1.3825 not setting count and/or reply_len properly [ 251.946929][ T29] audit: type=1800 audit(1843108776.837:22): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3826" name="discovery_nqn" dev="configfs" ino=32382 res=0 errno=0 [ 252.131603][T14545] Process accounting resumed [ 252.293689][T14559] vhci_hcd vhci_hcd.2: invalid port number 135 [ 252.309597][T14559] vhci_hcd vhci_hcd.2: invalid port number 135 [ 252.573903][T14576] block2mtd: device name too long [ 252.584615][T14575] vivid-003: ================= START STATUS ================= [ 252.620068][T14575] vivid-003: Radio HW Seek Mode: Bounded [ 252.642670][T14575] vivid-003: Radio Programmable HW Seek: false [ 252.683094][T14575] vivid-003: RDS Rx I/O Mode: Block I/O [ 252.706477][T14575] vivid-003: Generate RBDS Instead of RDS: false [ 252.728542][T14575] vivid-003: RDS Reception: true [ 252.738336][T14575] vivid-003: RDS Program Type: 0 inactive [ 252.758466][T14575] vivid-003: RDS PS Name: inactive [ 252.784712][T14575] vivid-003: RDS Radio Text: inactive [ 252.799710][T14575] vivid-003: RDS Traffic Announcement: false inactive [ 252.807544][T14575] vivid-003: RDS Traffic Program: false inactive [ 252.813999][T14575] vivid-003: RDS Music: false inactive [ 252.821221][T14575] vivid-003: ================== END STATUS ================== [ 253.276924][T14613] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 253.296527][T14613] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 254.279402][T14677] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 254.440877][T14690] QAT: Stopping all acceleration devices. [ 254.878633][T14720] delete_channel: no stack [ 254.940539][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.962813][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.167581][T11552] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 255.167618][T11552] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 255.183307][T11552] Bluetooth: hci1: Malformed LE Event: 0x1b [ 255.318750][T14751] vivid-003: ================= START STATUS ================= [ 255.330251][T14751] vivid-003: Radio HW Seek Mode: Bounded [ 255.337498][T14751] vivid-003: Radio Programmable HW Seek: false [ 255.346454][T14751] vivid-003: RDS Rx I/O Mode: Block I/O [ 255.352074][T14751] vivid-003: Generate RBDS Instead of RDS: false [ 255.373681][T14751] vivid-003: RDS Reception: true [ 255.397970][T14751] vivid-003: RDS Program Type: 0 inactive [ 255.409243][T14751] vivid-003: RDS PS Name: inactive [ 255.416784][T14751] vivid-003: RDS Radio Text: inactive [ 255.422375][T14751] vivid-003: RDS Traffic Announcement: false inactive [ 255.429506][T14751] vivid-003: RDS Traffic Program: false inactive [ 255.437944][T14751] vivid-003: RDS Music: false inactive [ 255.444743][T14751] vivid-003: ================== END STATUS ================== [ 255.884607][T14779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.015023][T14796] vivid-003: ================= START STATUS ================= [ 256.023371][T14796] vivid-003: Radio HW Seek Mode: Bounded [ 256.029169][T14796] vivid-003: Radio Programmable HW Seek: false [ 256.036551][T14796] vivid-003: RDS Rx I/O Mode: Block I/O [ 256.042614][T14796] vivid-003: Generate RBDS Instead of RDS: false [ 256.049173][T14796] vivid-003: RDS Reception: true [ 256.055372][T14796] vivid-003: RDS Program Type: 0 inactive [ 256.061647][T14796] vivid-003: RDS PS Name: inactive [ 256.067051][T14796] vivid-003: RDS Radio Text: inactive [ 256.068453][T14779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.073323][T14796] vivid-003: RDS Traffic Announcement: false inactive [ 256.107714][T14796] vivid-003: RDS Traffic Program: false inactive [ 256.116452][T14796] vivid-003: RDS Music: false inactive [ 256.122400][T14796] vivid-003: ================== END STATUS ================== [ 256.187865][T14779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.317783][T14779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.285550][ T29] audit: type=1800 audit(1843108782.205:23): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3944" name="dbroot" dev="configfs" ino=33257 res=0 errno=0 [ 257.506299][T14856] usb usb13: check_ctrlrecip: process 14856 (syz.1.3949) requesting ep 01 but needs 81 [ 257.521810][T14856] usb usb13: usbfs: process 14856 (syz.1.3949) did not claim interface 0 before use [ 258.115412][T14882] ubi0: attaching mtd0 [ 258.123165][T14882] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 259.345742][T14937] program syz.2.3985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.375629][T14937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 260.318502][T11552] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 260.318562][T11552] Bluetooth: hci0: unexpected subevent 0x06 length: 725 > 10 [ 261.938599][T15088] cougar: G6 mapped to F18 [ 262.337015][T11552] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.952422][T15139] [U]  [ 266.404006][T11552] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 266.404044][T11552] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 266.420819][T11552] Bluetooth: hci3: Dropping invalid advertising data [ 266.428142][T11552] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 266.428182][T11552] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 266.435244][T11552] Bluetooth: hci3: unknown advertising packet type: 0xee [ 266.668578][T15380] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 266.698433][ T29] audit: type=1804 audit(1843108791.664:24): pid=15384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4165" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1070 res=1 errno=0 [ 266.833608][ T29] audit: type=1806 audit(1843108791.795:25): xattr="." res=0 [ 266.914493][T15397] bond0: Unable to set down delay as MII monitoring is disabled [ 268.933665][T15521] block2mtd: Using custom MTD label '' for dev [ 268.962799][T15521] block2mtd: error: cannot open device [ 269.043823][T15527] sd 0:0:1:0: PR command failed: 1026 [ 269.103844][T15527] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 269.131769][T15527] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 269.249371][T15542] vhci_hcd vhci_hcd.2: invalid port number 16 [ 269.267376][T15542] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 269.356874][T15548] ima: policy update failed [ 269.362805][ T29] audit: type=1802 audit(1843108794.338:26): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4230" res=0 errno=0 [ 272.320089][T15743] kernel profiling enabled (shift: 0) [ 272.525921][T15756] Invalid ELF header magic: != ELF [ 273.837232][T15820] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 273.837997][T15819] ima: policy update failed [ 273.859865][ T29] audit: type=1802 audit(1843108798.861:27): pid=15819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4336" res=0 errno=0 [ 275.582266][T15911] mmap: syz.2.4372 (15911) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.553576][T15973] QAT: Device 250 not found [ 278.357084][T16098] : Can't lookup blockdev [ 278.439871][T16100] ima: policy update failed [ 278.455621][ T29] audit: type=1802 audit(1843108803.485:28): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4448" res=0 errno=0 [ 278.547217][T16110] ICMPv6: process `syz.2.4452' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 278.843181][T16127] vhci_hcd vhci_hcd.1: invalid port number 14 [ 278.854895][T16127] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 279.692630][T16189] binder: 16185:16189 ioctl c00c6211 0 returned -14 [ 279.694335][T16190] : Can't lookup blockdev [ 280.210458][T16227] : Can't lookup blockdev [ 280.309700][T16233] WARNING! power/level is deprecated; use power/control instead [ 282.061329][T16341] Process accounting paused [ 283.331227][T16432] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 283.468794][ T29] audit: type=1800 audit(1843108808.511:29): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4581" name="dbroot" dev="configfs" ino=38110 res=0 errno=0 [ 287.020356][T16694] RGB/YUV Input: ================= START STATUS ================= [ 287.020380][T16694] RGB/YUV Input: Test Pattern: 75% Colorbar [ 287.020445][T16694] RGB/YUV Input: Show Information: All [ 287.020475][T16694] RGB/YUV Input: Vertical Flip: false [ 287.020504][T16694] RGB/YUV Input: Horizontal Flip: false [ 287.020533][T16694] RGB/YUV Input: Brightness: 128 [ 287.020563][T16694] RGB/YUV Input: Contrast: 128 [ 287.020591][T16694] RGB/YUV Input: Hue: 0 [ 287.020617][T16694] RGB/YUV Input: Saturation: 128 [ 287.021387][T16694] RGB/YUV Input: Pixel Rate: 160000000 [ 287.021419][T16694] RGB/YUV Input: Horizontal Blanking: 800 [ 287.021448][T16694] RGB/YUV Input: Vertical Blanking: 3223 [ 287.021478][T16694] RGB/YUV Input: ================== END STATUS ================== [ 287.067385][T16696] vhci_hcd vhci_hcd.2: invalid port number 16 [ 287.067414][T16696] vhci_hcd vhci_hcd.2: invalid port number 16 [ 289.548093][ T29] audit: type=1800 audit(1843108814.633:30): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4741" name="lu_gp_id" dev="configfs" ino=38635 res=0 errno=0 [ 289.559221][T16851] ALUA LU Group already has a valid ID, ignoring request [ 289.785388][T16868] binder: 16867:16868 ioctl c018620c 200000000080 returned -1 [ 290.537647][T16917] zram: Can't change algorithm for initialized device [ 290.698016][T11552] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 291.344356][T16984] vivid-007: ================= START STATUS ================= [ 291.355204][T16984] vivid-007: Generate PTS: true [ 291.390456][T16984] vivid-007: Generate SCR: true [ 291.403574][T16984] tpg source WxH: 320x240 (Y'CbCr) [ 291.422374][T16984] tpg field: 1 [ 291.439273][T16984] tpg crop: (0,0)/320x240 [ 291.448889][T16984] tpg compose: (0,0)/320x240 [ 291.465684][T16984] tpg colorspace: 8 [ 291.470249][T16984] tpg transfer function: 0/0 [ 291.478345][T16984] tpg Y'CbCr encoding: 0/0 [ 291.485592][T16984] tpg quantization: 0/0 [ 291.495552][T16984] tpg RGB range: 0/2 [ 291.500354][T16984] vivid-007: ================== END STATUS ================== [ 293.302602][T17109] syz_tun: tun_chr_ioctl cmd 1074025681 [ 294.574701][T11552] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 294.583107][T11552] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 295.023367][T17230] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 295.574108][T17260] vmstat_refresh: nr_hugetlb -2048 [ 295.957918][ T29] audit: type=1400 audit(1843108821.076:31): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17278 comm="syz.2.4869" [ 296.954789][T17341] [U] 0="/ [ 296.958889][T17341] [U] [ 296.966257][T17341] [U] EeQ@ [ 296.984324][T17340] [U]  [ 298.398653][T17432] [U] 0="/ [ 298.417966][T17432] [U] [ 298.423022][T17436] vhci_hcd vhci_hcd.2: invalid port number 16 [ 298.429987][T17432] [U] EeQ@ [ 298.439043][T17436] vhci_hcd vhci_hcd.2: invalid port number 16 [ 298.455652][T17431] [U]  [ 298.464421][T17442] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 300.165822][T17540] [U] 0="/ [ 300.187325][T17540] [U] [ 300.203641][T17540] [U] EeQ@ [ 300.212009][T17539] [U]  [ 300.296359][T17197] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 300.304194][T17197] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 300.414624][T17560] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 301.276208][T17618] Invalid input. Must be >= 4608 [ 301.519377][T17197] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 301.526937][T17197] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 301.910939][T17676] ecryptfs_miscdev_write: Error while inspecting packet size [ 302.580696][T17721] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 302.643721][T17718] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 302.821867][T17736] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 302.875038][T17736] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 303.299060][T17771] tipc: Can't bind to reserved service type 63 [ 303.481660][T17197] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 305.132452][T17197] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 305.140376][T17197] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 307.732093][T18097] block nbd0: NBD_DISCONNECT [ 309.073706][ T807] Process accounting resumed [ 311.286732][T18313] Line length is too long: Should be less than 4094 [ 311.764351][T18335] smpboot: CPU 1 is now offline [ 312.066003][T18351] Process accounting resumed [ 312.744275][T18392] random: crng reseeded on system resumption [ 313.177059][T17197] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 313.184749][T17197] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 313.397032][T18445] vivid-007: ================= START STATUS ================= [ 313.437152][T18445] vivid-007: Enable Output Cropping: true [ 313.467523][T18445] vivid-007: Enable Output Composing: true [ 313.500101][T18445] vivid-007: Enable Output Scaler: true [ 313.538383][T18445] vivid-007: Tx RGB Quantization Range: Automatic [ 313.570422][T18445] vivid-007: Transmit Mode: HDMI [ 313.610738][T18445] vivid-007: Hotplug Present: 0x00000000 [ 313.647354][T18445] vivid-007: RxSense Present: 0x00000000 [ 313.689722][T18445] vivid-007: EDID Present: 0x00000000 [ 313.725235][T18445] vivid-007: ================== END STATUS ================== [ 314.710278][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.716747][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.118417][T18540] random: crng reseeded on system resumption [ 315.705526][T18577] random: crng reseeded on system resumption [ 318.090464][T18724] binder: 18722:18724 ioctl c0046209 9 returned -22 [ 318.374667][T18739] program syz.0.5344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.704961][ T29] audit: type=1800 audit(4294967318.084:32): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5371" name="lu_gp_id" dev="configfs" ino=43326 res=0 errno=0 [ 319.735333][T18818] kstrtoul() returned -22 for lu_gp_id [ 320.240506][T18847] __vm_enough_memory: pid: 18847, comm: syz.3.5382, bytes: 9223372036854775808 not enough memory for the allocation [ 321.114437][T18898] usb usb4: usbfs: process 18898 (syz.0.5400) did not claim interface 0 before use [ 324.120829][T19082] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 324.369324][T19082] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 324.440091][T19082] pci 0000:00:01.3: PCI INT A: no GSI [ 324.586199][T19108] : Can't lookup blockdev [ 326.526230][ T29] audit: type=1800 audit(4294967324.930:33): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5513" name="dbroot" dev="configfs" ino=44249 res=0 errno=0 [ 327.104076][T19255] kafs: addr_prefs: Invalid Command [ 327.684652][T19286] bond0: option packets_per_slave: invalid value ( Xnp) [ 327.728881][T19286] bond0: option packets_per_slave: allowed values 0 - 65535 [ 330.063982][T19419] block2mtd: illegal erase size [ 331.011239][T19469] zram0: detected capacity change from 16 to 0 [ 334.111352][T19607] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 334.289053][T19616] cougar: G6 mapped to space [ 337.416475][T19784] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 337.538774][T19791] QAT: failed to copy from user cfg_data. [ 339.375484][ T29] audit: type=1800 audit(4294967337.857:34): pid=19905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5762" name="sr0" dev="devtmpfs" ino=2821 res=0 errno=0 [ 339.791127][T19927] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 339.831632][T19927] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 339.887092][T19927] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 339.938082][T19927] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 339.979724][T19927] page dumped because: unmovable page [ 340.007317][T19927] page_owner info is not present (never set?) [ 340.262562][T19955] binder: 19953:19955 ioctl 541b 0 returned -22 [ 342.020606][T20055] Process accounting paused [ 344.411886][T20195] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 345.098856][ T5875] usb usb40-port5: attempt power cycle [ 345.747983][ T5875] usb usb40-port5: unable to enumerate USB device [ 345.757000][T20271] program syz.3.5893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.407846][T20305] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 348.386847][T20381] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 349.040181][T20421] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 350.915852][T20469] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 351.957740][T20592] usb usb11: usbfs: interface 0 claimed by hub while 'syz.2.6007' sets config #7 [ 352.668045][T20637] bond0: invalid ARP target specified [ 353.247688][T20675] aoe: could not set interface list: too many interfaces [ 353.451950][T20685] hub 3-0:1.0: USB hub found [ 353.485092][T20685] hub 3-0:1.0: 1 port detected [ 353.628311][T20685] usb usb3: authorized to connect [ 354.191836][T20750] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 355.074076][T20803] blkio.reset_stats is deprecated [ 355.954565][T20851] bond0: no command found in slaves file - use +ifname or -ifname [ 359.831698][T21054] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[21054] [ 359.982746][T21060] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1c88a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 359.998414][T21060] Call Trace: [ 360.001688][T21060] [ 360.004607][T21060] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 360.011369][T21060] mce_cpu_restart+0xd5/0x1f0 [ 360.016032][T21060] ? __pfx_mce_cpu_restart+0x10/0x10 [ 360.021315][T21060] smp_call_function_many_cond+0x13d4/0x1700 [ 360.027303][T21060] ? __pfx_mce_cpu_restart+0x10/0x10 [ 360.032581][T21060] ? mark_held_locks+0x40/0x70 [ 360.037351][T21060] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.043153][T21060] ? lockdep_hardirqs_on+0x78/0x100 [ 360.048346][T21060] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 360.054141][T21060] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 360.060460][T21060] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 360.066437][T21060] ? __timer_delete_sync+0x151/0x1c0 [ 360.071714][T21060] ? __pfx_mce_cpu_restart+0x10/0x10 [ 360.076984][T21060] on_each_cpu_cond_mask+0x40/0x90 [ 360.082093][T21060] set_bank+0x240/0x3a0 [ 360.086236][T21060] ? __pfx_set_bank+0x10/0x10 [ 360.090909][T21060] ? find_held_lock+0x2b/0x80 [ 360.095595][T21060] ? sysfs_file_kobj+0xe4/0x290 [ 360.100442][T21060] ? sysfs_file_kobj+0xe4/0x290 [ 360.105289][T21060] ? __pfx_set_bank+0x10/0x10 [ 360.109961][T21060] dev_attr_store+0x58/0x80 [ 360.114481][T21060] ? __pfx_dev_attr_store+0x10/0x10 [ 360.119673][T21060] sysfs_kf_write+0xf2/0x150 [ 360.124264][T21060] kernfs_fop_write_iter+0x3e0/0x5f0 [ 360.129543][T21060] ? __pfx_sysfs_kf_write+0x10/0x10 [ 360.134735][T21060] vfs_write+0x6ac/0x1070 [ 360.139060][T21060] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 360.144864][T21060] ? __pfx_vfs_write+0x10/0x10 [ 360.149670][T21060] ksys_write+0x12a/0x250 [ 360.154012][T21060] ? __pfx_ksys_write+0x10/0x10 [ 360.158855][T21060] ? rcu_is_watching+0x12/0xc0 [ 360.163621][T21060] do_syscall_64+0x10b/0xf80 [ 360.168234][T21060] ? clear_bhb_loop+0x40/0x90 [ 360.172907][T21060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.178814][T21060] RIP: 0033:0x7ff314f9c819 [ 360.183227][T21060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.202913][T21060] RSP: 002b:00007ff315df9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.211334][T21060] RAX: ffffffffffffffda RBX: 00007ff315215fa0 RCX: 00007ff314f9c819 [ 360.219291][T21060] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 360.227263][T21060] RBP: 00007ff315032c91 R08: 0000000000000000 R09: 0000000000000000 [ 360.235229][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.243212][T21060] R13: 00007ff315216038 R14: 00007ff315215fa0 R15: 00007ffc56d23db8 [ 360.251177][T21060] [ 360.308491][T21065] bond0: option mode: unable to set because the bond device is up [ 360.931532][T21085] usbip-vudc usbip-vudc.0: gadget not bound [ 362.247296][T21144] Format for deleting device is "id" (uint). [ 364.302158][T21261] ICMPv6: process `syz.3.6234' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 365.447873][T21320] overlayfs: "check_copy_up" module option is obsolete [ 365.655745][T21334] random: crng reseeded on system resumption [ 367.867094][T21445] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 367.905931][T21445] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 369.504554][T21542] QAT: failed to copy from user. [ 370.624188][T21620] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 371.584157][T21675] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[21675] [ 371.909331][T21689] Process accounting resumed [ 373.530685][T21791] i2c i2c-0: delete_device: Extra parameters [ 375.459821][T21903] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x3-- guessing data in; [ 375.459821][T21903] program syz.3.6455 not setting count and/or reply_len properly [ 375.528166][T21906] program syz.2.6456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.866402][T21928] sd 0:0:1:0: PR command failed: 1026 [ 375.887457][T21928] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 375.921847][T21928] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 378.069423][T22063] vhci_hcd: not connected 4 syzkaller syzkaller login: [ 380.914296][T22209] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 381.268226][T22226] sysfs_service_op_show: Client not running :-5: [ 383.104751][T22321] : Can't lookup blockdev [ 383.505901][T22334] program syz.1.6590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.826910][T22401] program syz.3.6616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.873975][T22401] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 384.981497][T22409] CIFS mount error: No usable UNC path provided in device string! [ 384.981497][T22409] [ 385.130056][T22409] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 386.632562][ T807] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 389.464572][ T29] audit: type=1800 audit(4294967388.207:35): pid=22654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6699" name="members" dev="configfs" ino=51976 res=0 errno=0 [ 389.889921][T22680] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 391.173971][T22744] could not allocate digest TFM handle [ 391.249362][T22763] delete_channel: no stack [ 391.753383][T22794] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 391.870353][T22802] block2mtd: illegal erase size [ 393.695782][T22910] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 398.227178][T23176] [ 399.274434][ T29] audit: type=1400 audit(4294967398.058:36): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23236 comm="syz.3.6906" [ 400.267173][T23294] i2c i2c-0: delete_device: Can't parse I2C address [ 401.794031][T23373] Process accounting paused [ 402.189024][T23393] nvme_fabrics: missing parameter 'transport=%s' [ 402.229959][T23393] nvme_fabrics: missing parameter 'nqn=%s' [ 404.097800][T23489] deleting an unspecified loop device is not supported. [ 406.264156][T23597] block2mtd: too many arguments [ 407.398467][T23666] phram: not enough arguments [ 412.584190][T23916] serial 00:02: in use; can't configure [ 414.234580][T23998] Scaler: ================= START STATUS ================= [ 414.295612][T23998] Scaler: ================== END STATUS ================== [ 414.520524][T24012] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 415.770394][T24070] queue_state_write: operation too long [ 415.806801][T24070] queue_state_write: use 'run', 'start' or 'kick' [ 415.823336][T24073] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 417.059237][T24131] usb usb22: usbfs: process 24131 (syz.1.7226) did not claim interface 1 before use [ 418.361273][T24202] QAT: failed to copy from user cfg_data. [ 419.732244][T24278] nvme_fcloop: unknown parameter or missing value '7' [ 422.009614][T17197] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 423.073413][T24428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.498471][ T29] audit: type=1800 audit(4294967422.414:37): pid=24470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7343" name="members" dev="configfs" ino=56257 res=0 errno=0 [ 427.018787][T24677] ima: policy update failed [ 427.058884][ T29] audit: type=1802 audit(4294967425.993:38): pid=24677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.7418" res=0 errno=0 [ 427.245962][T24690] aoe: copy from user failed [ 427.273424][T24690] aoe: could not set interface list: too many interfaces [ 427.290619][T24695] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 427.877343][T24726] usb usb15: usbfs: process 24726 (syz.2.7434) did not claim interface 0 before use [ 428.132027][T24741] sd 0:0:1:0: PR command failed: 1026 [ 428.165021][T24741] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 428.209115][T24741] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 428.459914][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.470412][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.362872][T24926] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 431.416924][T24932] ACPI: Can not change Invalid GPE/Fixed Event status [ 431.769325][T24944] Process accounting resumed [ 434.805311][T25110] syz_tun: tun_chr_ioctl cmd 1074812117 [ 435.843601][T25147] Zero length message leads to an empty skb [ 436.111237][T25158] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.119238][T25158] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 437.903875][T25243] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 438.202013][T25258] tc_dump_action: action bad kind [ 438.307342][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.318025][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.882744][T25290] netlink: Conntrack attr has 5 unknown bytes [ 439.979460][T25321] NFSD: Failed to start, no listeners configured. [ 442.520519][T25451] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 443.106301][T25476] program syz.1.7679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.133013][T25538] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 445.730157][T25561] netlink: 'syz.1.7697': attribute type 23 has an invalid length. [ 445.929212][T25568] FAULT_INJECTION: forcing a failure. [ 445.929212][T25568] name failslab, interval 1, probability 0, space 0, times 1 [ 446.027485][T25568] CPU: 0 UID: 0 PID: 25568 Comm: syz.3.7699 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 446.027516][T25568] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 446.027525][T25568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.027537][T25568] Call Trace: [ 446.027542][T25568] [ 446.027548][T25568] dump_stack_lvl+0x100/0x190 [ 446.027568][T25568] should_fail_ex.cold+0x5/0xa [ 446.027590][T25568] should_failslab+0xc2/0x120 [ 446.027607][T25568] __kmalloc_cache_noprof+0x7a/0x6f0 [ 446.027627][T25568] ? watch_queue_init+0x45/0x170 [ 446.027642][T25568] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 446.027660][T25568] watch_queue_init+0x45/0x170 [ 446.027675][T25568] create_pipe_files+0x672/0x970 [ 446.027695][T25568] do_pipe2+0xbd/0x1e0 [ 446.027712][T25568] ? __pfx_do_pipe2+0x10/0x10 [ 446.027729][T25568] ? ksys_write+0x1ac/0x250 [ 446.027750][T25568] __x64_sys_pipe2+0x54/0x80 [ 446.027767][T25568] do_syscall_64+0x10b/0xf80 [ 446.027789][T25568] ? clear_bhb_loop+0x40/0x90 [ 446.027806][T25568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.027821][T25568] RIP: 0033:0x7ff314f9c819 [ 446.027834][T25568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.027847][T25568] RSP: 002b:00007ff315df9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 446.027865][T25568] RAX: ffffffffffffffda RBX: 00007ff315215fa0 RCX: 00007ff314f9c819 [ 446.027874][T25568] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 446.027883][T25568] RBP: 00007ff315032c91 R08: 0000000000000000 R09: 0000000000000000 [ 446.027891][T25568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.027899][T25568] R13: 00007ff315216038 R14: 00007ff315215fa0 R15: 00007ffc56d23db8 [ 446.027918][T25568] [ 446.620297][T25580] tc_dump_action: action bad kind [ 448.053132][T25643] nbd: must specify a device to reconfigure [ 448.735719][T25673] capability: warning: `syz.2.7732' uses 32-bit capabilities (legacy support in use) [ 449.025089][T25688] ======================================================= [ 449.025089][T25688] WARNING: The mand mount option has been deprecated and [ 449.025089][T25688] and is ignored by this kernel. Remove the mand [ 449.025089][T25688] option from the mount to silence this warning. [ 449.025089][T25688] ======================================================= [ 450.819569][T25759] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 452.417248][T25838] vhci_hcd: not connected 4 [ 454.094006][T25933] sg_write: process 4009 (syz.3.7819) changed security contexts after opening file descriptor, this is not allowed. [ 454.300261][T25939] netlink: 'syz.0.7821': attribute type 2 has an invalid length. [ 454.356557][T25939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7821'. [ 455.344978][T25994] netlink: 'syz.2.7837': attribute type 12 has an invalid length. [ 456.728369][T26065] netlink: 'syz.2.7859': attribute type 11 has an invalid length. [ 456.774446][T26065] netlink: 'syz.2.7859': attribute type 11 has an invalid length. [ 456.819861][T26065] netlink: 'syz.2.7859': attribute type 11 has an invalid length. [ 457.230178][T26118] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 458.072580][T26154] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.983223][T26180] ima: policy update failed [ 459.011615][ T29] audit: type=1802 audit(4294967302.307:39): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.7882" res=0 errno=0 [ 459.684402][T26206] ALSA: mixer_oss: invalid OSS volume ',e&ER$o i<\#Z\' [ 461.745058][T26286] Process accounting paused [ 462.081346][T26313] openvswitch: netlink: Message has 4 unknown bytes. [ 462.130637][T26317] FAULT_INJECTION: forcing a failure. [ 462.130637][T26317] name failslab, interval 1, probability 0, space 0, times 0 [ 462.197278][T26317] CPU: 0 UID: 0 PID: 26317 Comm: syz.1.7929 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 462.197308][T26317] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 462.197315][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.197324][T26317] Call Trace: [ 462.197329][T26317] [ 462.197335][T26317] dump_stack_lvl+0x100/0x190 [ 462.197356][T26317] should_fail_ex.cold+0x5/0xa [ 462.197378][T26317] should_failslab+0xc2/0x120 [ 462.197395][T26317] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 462.197416][T26317] ? alloc_vfsmnt+0x23/0x6a0 [ 462.197436][T26317] ? find_held_lock+0x2b/0x80 [ 462.197453][T26317] ? clone_mnt+0x19a/0x930 [ 462.197469][T26317] alloc_vfsmnt+0x23/0x6a0 [ 462.197490][T26317] clone_mnt+0x4b/0x930 [ 462.197503][T26317] ? is_subdir+0x1a8/0x3e0 [ 462.197525][T26317] copy_tree+0x329/0xbf0 [ 462.197547][T26317] copy_mnt_ns+0x3fa/0x1180 [ 462.197570][T26317] ? __pfx_copy_mnt_ns+0x10/0x10 [ 462.197594][T26317] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 462.197615][T26317] ? create_new_namespaces+0x30/0xac0 [ 462.197633][T26317] ? rcu_is_watching+0x12/0xc0 [ 462.197653][T26317] create_new_namespaces+0xd3/0xac0 [ 462.197671][T26317] ? bpf_lsm_capable+0x9/0x10 [ 462.197687][T26317] ? security_capable+0x80/0x260 [ 462.197708][T26317] unshare_nsproxy_namespaces+0xf2/0x220 [ 462.197728][T26317] ksys_unshare+0x438/0xab0 [ 462.197751][T26317] ? __pfx_ksys_unshare+0x10/0x10 [ 462.197771][T26317] ? xfd_validate_state+0x129/0x190 [ 462.197784][T26317] ? ksys_write+0x1ac/0x250 [ 462.197806][T26317] __x64_sys_unshare+0x31/0x40 [ 462.197834][T26317] do_syscall_64+0x10b/0xf80 [ 462.197858][T26317] ? clear_bhb_loop+0x40/0x90 [ 462.197877][T26317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.197892][T26317] RIP: 0033:0x7f381cb9c819 [ 462.197905][T26317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.197919][T26317] RSP: 002b:00007f381d982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 462.197934][T26317] RAX: ffffffffffffffda RBX: 00007f381ce15fa0 RCX: 00007f381cb9c819 [ 462.197944][T26317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 462.197952][T26317] RBP: 00007f381cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 462.197961][T26317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.197970][T26317] R13: 00007f381ce16038 R14: 00007f381ce15fa0 R15: 00007fff71b0c218 [ 462.197989][T26317] [ 462.545383][T26322] netlink: 'syz.3.7932': attribute type 11 has an invalid length. [ 462.553319][T26322] netlink: 'syz.3.7932': attribute type 11 has an invalid length. [ 462.561200][T26322] netlink: 'syz.3.7932': attribute type 11 has an invalid length. [ 463.050679][T26354] mmap: syz.2.7937 (26354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 464.428209][T26414] netlink: 'syz.1.7958': attribute type 1 has an invalid length. [ 465.047674][T26442] No such timeout policy "" [ 465.074292][T26442] netlink: Failed to associated timeout policy '' [ 467.616361][T26561] No such timeout policy "" [ 467.648628][T26561] netlink: Failed to associated timeout policy '' [ 467.889967][T26576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8017'. [ 468.233362][T26591] netlink: 'syz.2.8022': attribute type 1 has an invalid length. [ 468.767486][T26609] netlink: 'syz.3.8028': attribute type 1 has an invalid length. [ 470.909586][T26708] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 472.061137][T26759] netlink: set zone limit has 8 unknown bytes [ 472.286164][T26772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8091'. [ 473.340563][T26822] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 10000000000 [ 473.735836][T26843] openvswitch: netlink: IP tunnel TTL not specified. [ 477.859386][T27030] openvswitch: netlink: Multiple metadata blocks provided [ 480.842475][T27154] netlink: 'syz.2.8229': attribute type 2 has an invalid length. [ 482.295414][T27199] nbd: must specify an index to disconnect [ 482.498282][T27208] openvswitch: netlink: Key type 29 is not supported [ 483.282974][T27233] syz.3.8262 uses obsolete (PF_INET,SOCK_PACKET) [ 484.392958][T27271] tipc: Started in network mode [ 484.454190][T27271] tipc: Node identity ffffffff, cluster identity 4711 [ 484.525158][T27271] tipc: Node number set to 4294967295 [ 486.343585][T27336] process 'syz.1.8301' launched '/dev/fd/3' with NULL argv: empty string added [ 488.114675][T27397] netlink: 'syz.3.8322': attribute type 1 has an invalid length. [ 489.627884][T27462] netlink: Invalid conntrack timeout [ 491.723966][T27564] Process accounting resumed [ 493.217771][T27649] nbd: illegal input index 37139 [ 494.027221][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8441'. [ 494.066910][T27697] netlink: 'syz.3.8443': attribute type 11 has an invalid length. [ 494.710768][T27731] netlink: 'syz.1.8457': attribute type 4 has an invalid length. [ 494.753237][T27731] netlink: 'syz.1.8457': attribute type 1 has an invalid length. [ 495.737240][T27783] mmap: syz.2.8478 (27783): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 496.289061][T27810] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 496.527362][T27820] netlink: NAT attribute has 4 unknown bytes [ 497.910543][T27805] kexec: Could not allocate control_code_buffer [ 498.085448][T27880] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.182661][T27885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8525'. [ 498.263677][T27885] netlink: 29 bytes leftover after parsing attributes in process `syz.3.8525'. [ 498.503063][T27896] netlink: NAT attribute has 4 unknown bytes [ 498.576471][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8531'. [ 498.692397][T27902] nfs: Unknown parameter 'nl802154' [ 498.735965][T27906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.229012][T27930] netlink: 'syz.1.8547': attribute type 1 has an invalid length. [ 499.429484][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.440024][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.825356][T27957] synth uevent: /devices/virtual/thermal/cooling_device0: unknown uevent action string [ 499.899914][T27957] thermal cooling_device0: uevent: failed to send synthetic uevent: -22 [ 501.138540][T28019] IPVS: length: 131 != 8 [ 501.294616][T28026] netlink: 'syz.0.8589': attribute type 1 has an invalid length. [ 501.661967][T28047] synth uevent: /devices/virtual/thermal/cooling_device0: unknown uevent action string [ 501.703775][T28047] thermal cooling_device0: uevent: failed to send synthetic uevent: -22 [ 502.266547][T28072] netlink: ct_mark mask cannot be 0 [ 503.975086][T28150] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 506.222694][T28233] syz.2.8686 (28233) used greatest stack depth: 19720 bytes left [ 506.363237][T28246] openvswitch: netlink: Missing valid actions attribute. [ 506.455612][T28191] kexec: Could not allocate control_code_buffer [ 506.781548][T28265] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 506.954003][T28272] openvswitch: netlink: Missing valid actions attribute. [ 507.077206][T28279] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 507.723801][T28306] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 507.807711][T28309] dyndbg: expected <4096 bytes into control [ 508.632444][T28277] kexec: Could not allocate control_code_buffer [ 510.175705][T28403] MTRR 1 not used [ 510.398653][T28413] FAULT_INJECTION: forcing a failure. [ 510.398653][T28413] name failslab, interval 1, probability 0, space 0, times 0 [ 510.490056][T28413] CPU: 0 UID: 0 PID: 28413 Comm: syz.0.8772 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 510.490103][T28413] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 510.490120][T28413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.490130][T28413] Call Trace: [ 510.490135][T28413] [ 510.490142][T28413] dump_stack_lvl+0x100/0x190 [ 510.490164][T28413] should_fail_ex.cold+0x5/0xa [ 510.490184][T28413] should_failslab+0xc2/0x120 [ 510.490202][T28413] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 510.490224][T28413] ? alloc_empty_file+0x5b/0x1c0 [ 510.490249][T28413] alloc_empty_file+0x5b/0x1c0 [ 510.490269][T28413] alloc_file_pseudo+0x13a/0x230 [ 510.490291][T28413] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 510.490312][T28413] ? _raw_spin_unlock+0x28/0x50 [ 510.490332][T28413] ? alloc_fd+0x476/0x790 [ 510.490350][T28413] __anon_inode_getfile+0xe8/0x280 [ 510.490372][T28413] __anon_inode_getfd+0x5c/0xe0 [ 510.490395][T28413] do_inotify_init+0x483/0x5e0 [ 510.490418][T28413] __x64_sys_inotify_init1+0x30/0x40 [ 510.490440][T28413] do_syscall_64+0x10b/0xf80 [ 510.490462][T28413] ? clear_bhb_loop+0x40/0x90 [ 510.490480][T28413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.490494][T28413] RIP: 0033:0x7fa0ddb9c819 [ 510.490508][T28413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.490521][T28413] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 510.490536][T28413] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 510.490546][T28413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 510.490554][T28413] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 510.490563][T28413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.490571][T28413] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 510.490590][T28413] [ 511.620707][T28464] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 511.639160][T28466] netlink: 'syz.1.8798': attribute type 9 has an invalid length. [ 512.188892][T28478] zero sized request [ 513.596271][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8836'. [ 514.444187][T28578] futex_wake_op: syz.1.8849 tries to shift op by -1; fix this program [ 514.584521][T28587] netlink: zone id is out of range [ 514.618073][T28587] netlink: zone id is out of range [ 514.641978][T28587] netlink: zone id is out of range [ 514.668124][T28587] netlink: zone id is out of range [ 514.694347][T28587] netlink: zone id is out of range [ 514.723405][T28587] netlink: zone id is out of range [ 514.751265][T28587] netlink: zone id is out of range [ 514.774744][T28587] netlink: zone id is out of range [ 514.798545][T28587] netlink: zone id is out of range [ 514.821078][T28587] netlink: zone id is out of range [ 515.735275][T17197] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 515.735299][T17197] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 515.755300][T17197] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 515.755319][T17197] Bluetooth: hci3: adv larger than maximum supported [ 515.762525][T17197] Bluetooth: hci3: Unknown advertising packet type: 0x56 [ 515.770221][T17197] Bluetooth: hci3: Unknown advertising packet type: 0x5f [ 515.778125][T17197] Bluetooth: hci3: Unknown advertising packet type: 0x3e [ 515.785693][T17197] Bluetooth: hci3: Malformed LE Event: 0x0d [ 517.275895][T28671] NFSD: Failed to start, no listeners configured. [ 518.834251][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8924'. [ 519.577620][T28778] net_ratelimit: 5 callbacks suppressed [ 519.577635][T28778] netlink: Unknown NAT attribute (type=262, max=9) [ 519.635617][T28782] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 520.007521][T28799] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 520.150022][T28803] netlink: 'syz.3.8952': attribute type 1 has an invalid length. [ 520.188382][T28803] nbd: error processing sock list [ 520.659657][ T29] audit: type=1800 audit(4294967364.267:40): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8961" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 521.468766][T28863] netlink: 'syz.3.8977': attribute type 1 has an invalid length. [ 521.710604][T28880] netlink: 'syz.0.8983': attribute type 2 has an invalid length. [ 521.730753][T28869] NFSD: Failed to start, no listeners configured. [ 521.777598][T28883] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 532.514658][T17197] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 532.530427][T17197] Bluetooth: hci0: Dropping invalid advertising data [ 532.538284][T17197] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 532.538305][T17197] Bluetooth: hci0: Dropping invalid advertising data [ 532.553344][T17197] Bluetooth: hci0: Malformed LE Event: 0x02 [ 532.913644][T29406] netlink: Setting conntrack mark requires 'commit' flag. [ 534.622615][T29459] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 535.285729][T29489] netlink: 'syz.0.9243': attribute type 1 has an invalid length. [ 535.675067][T17197] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 535.675091][T17197] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 535.692020][T17197] Bluetooth: hci1: Dropping invalid advertising data [ 535.700989][T17197] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 535.701011][T17197] Bluetooth: hci1: Dropping invalid advertising data [ 535.716481][T17197] Bluetooth: hci1: Malformed LE Event: 0x02 [ 538.299834][T29604] netlink: 'syz.1.9279': attribute type 1 has an invalid length. [ 538.311756][T29607] sctp: [Deprecated]: syz.3.9281 (pid 29607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.311756][T29607] Use struct sctp_sack_info instead [ 538.568759][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9287'. [ 539.303303][T29650] ptrace attach of "./syz-executor exec"[5836] was attempted by ""[29650] [ 539.748689][T29666] FAULT_INJECTION: forcing a failure. [ 539.748689][T29666] name failslab, interval 1, probability 0, space 0, times 0 [ 539.810547][T29666] CPU: 0 UID: 0 PID: 29666 Comm: syz.0.9310 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 539.810578][T29666] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 539.810585][T29666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.810594][T29666] Call Trace: [ 539.810599][T29666] [ 539.810605][T29666] dump_stack_lvl+0x100/0x190 [ 539.810626][T29666] should_fail_ex.cold+0x5/0xa [ 539.810647][T29666] should_failslab+0xc2/0x120 [ 539.810664][T29666] __kvmalloc_node_noprof+0xfa/0xa00 [ 539.810678][T29666] ? io_alloc_cache_init+0x38/0x170 [ 539.810697][T29666] ? lockdep_init_map_type+0x5c/0x250 [ 539.810714][T29666] io_alloc_cache_init+0x38/0x170 [ 539.810734][T29666] io_uring_setup.cold+0x3cd/0x1c6e [ 539.810759][T29666] ? __pfx_io_uring_setup+0x10/0x10 [ 539.810775][T29666] ? do_futex+0x192/0x350 [ 539.810791][T29666] ? __pfx_do_futex+0x10/0x10 [ 539.810814][T29666] ? xfd_validate_state+0x129/0x190 [ 539.810828][T29666] ? ksys_write+0x1ac/0x250 [ 539.810848][T29666] __x64_sys_io_uring_setup+0xc2/0x170 [ 539.810863][T29666] do_syscall_64+0x10b/0xf80 [ 539.810885][T29666] ? clear_bhb_loop+0x40/0x90 [ 539.810903][T29666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.810918][T29666] RIP: 0033:0x7fa0ddb9c819 [ 539.810932][T29666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.810945][T29666] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 539.810960][T29666] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 539.810970][T29666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 539.810978][T29666] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.810987][T29666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.810995][T29666] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 539.811013][T29666] [ 540.521048][T17197] Bluetooth: hci2: SCO packet too small [ 541.652659][T29722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9336'. [ 541.781342][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9338'. [ 542.006996][T29736] HSR: entered promiscuous mode [ 542.031603][T29737] tc_dump_action: action bad kind [ 542.333967][T29753] openvswitch: netlink: IP tunnel dst address not specified [ 542.357706][T29756] netlink: zone id is out of range [ 543.065490][T29784] openvswitch: netlink: Message has 4 unknown bytes. [ 543.288951][T29795] openvswitch: netlink: IP tunnel dst address not specified [ 543.594953][T29808] delete_channel: no stack [ 546.435356][T29901] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9419'. [ 547.403536][T29932] delete_channel: no stack [ 548.223331][T29976] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 549.206548][T17197] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 549.206571][T17197] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 549.221348][T17197] Bluetooth: hci3: Dropping invalid advertising data [ 549.228083][T17197] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 549.228103][T17197] Bluetooth: hci3: Dropping invalid advertising data [ 549.241992][T17197] Bluetooth: hci3: Malformed LE Event: 0x02 [ 550.627036][T30090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.669151][T30092] netlink: del zone limit has 4 unknown bytes [ 551.030931][T30110] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 551.340136][T17197] Bluetooth: hci2: ACL packet too small [ 551.838668][T30143] Process accounting resumed [ 551.948013][T30153] netlink: 'syz.2.9524': attribute type 1 has an invalid length. [ 552.065863][T30157] netlink: Invalid conntrack helper [ 552.377765][T30175] bond0: option lp_interval: invalid value () [ 552.414619][T30175] bond0: option lp_interval: allowed values 1 - 2147483647 [ 553.855441][T30241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 554.634790][T30282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 554.960543][T30296] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 556.613445][T30377] netlink: Unknown conntrack attr (type=257, max=9) [ 557.874709][T30435] netlink: 'syz.1.9654': attribute type 11 has an invalid length. [ 557.902158][T30435] netlink: 'syz.1.9654': attribute type 11 has an invalid length. [ 557.932772][T30435] netlink: 'syz.1.9654': attribute type 11 has an invalid length. [ 558.193006][T17197] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 558.193031][T17197] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 559.496896][T30513] openvswitch: netlink: IPv6 tunnel dst address is zero [ 559.832693][T30527] : entered promiscuous mode [ 560.216428][T30549] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 560.550516][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.558053][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.379669][T30606] openvswitch: netlink: Duplicate or invalid key (type 0). [ 561.695152][T30620] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 562.738833][T30673] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 562.773779][T30673] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 562.875706][T30679] FAULT_INJECTION: forcing a failure. [ 562.875706][T30679] name failslab, interval 1, probability 0, space 0, times 0 [ 562.921708][T30679] CPU: 0 UID: 0 PID: 30679 Comm: syz.1.9763 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 562.921738][T30679] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 562.921745][T30679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.921753][T30679] Call Trace: [ 562.921759][T30679] [ 562.921765][T30679] dump_stack_lvl+0x100/0x190 [ 562.921787][T30679] should_fail_ex.cold+0x5/0xa [ 562.921807][T30679] should_failslab+0xc2/0x120 [ 562.921825][T30679] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 562.921848][T30679] ? __d_alloc+0x34/0xa40 [ 562.921874][T30679] __d_alloc+0x34/0xa40 [ 562.921895][T30679] d_alloc_pseudo+0x1c/0xc0 [ 562.921908][T30679] alloc_file_pseudo+0xcf/0x230 [ 562.921930][T30679] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 562.921956][T30679] __shmem_file_setup+0x205/0x460 [ 562.921977][T30679] ? __pfx___shmem_file_setup+0x10/0x10 [ 562.921998][T30679] ? vm_area_alloc+0x1f/0x160 [ 562.922020][T30679] shmem_zero_setup+0x96/0x1b0 [ 562.922036][T30679] __mmap_region+0x24e7/0x2da0 [ 562.922061][T30679] ? __pfx___mmap_region+0x10/0x10 [ 562.922084][T30679] ? __lock_acquire+0x4a5/0x2630 [ 562.922107][T30679] ? rcu_is_watching+0x12/0xc0 [ 562.922124][T30679] ? trace_pelt_se_tp+0x13b/0x190 [ 562.922153][T30679] ? find_held_lock+0x2b/0x80 [ 562.922170][T30679] ? debug_object_activate+0x331/0x490 [ 562.922196][T30679] ? debug_object_activate+0x331/0x490 [ 562.922218][T30679] ? do_raw_spin_unlock+0x145/0x1e0 [ 562.922235][T30679] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 562.922265][T30679] ? find_held_lock+0x2b/0x80 [ 562.922293][T30679] ? rcu_is_watching+0x12/0xc0 [ 562.922310][T30679] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 562.922328][T30679] ? lockdep_hardirqs_on+0x78/0x100 [ 562.922379][T30679] mmap_region+0x35d/0x620 [ 562.922401][T30679] ? rcu_is_watching+0x12/0xc0 [ 562.922418][T30679] ? __pfx_mmap_region+0x10/0x10 [ 562.922442][T30679] ? cap_mmap_addr+0x4b/0x120 [ 562.922460][T30679] ? bpf_lsm_mmap_addr+0x9/0x30 [ 562.922474][T30679] ? security_mmap_addr+0x71/0x1e0 [ 562.922488][T30679] ? __get_unmapped_area+0x255/0x3e0 [ 562.922508][T30679] do_mmap+0xc63/0x12f0 [ 562.922528][T30679] ? __pfx_do_mmap+0x10/0x10 [ 562.922545][T30679] ? __pfx_down_write_killable+0x10/0x10 [ 562.922565][T30679] vm_mmap_pgoff+0x29e/0x470 [ 562.922586][T30679] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 562.922605][T30679] ? do_futex+0x192/0x350 [ 562.922620][T30679] ? __pfx_do_futex+0x10/0x10 [ 562.922639][T30679] ksys_mmap_pgoff+0xe4/0x610 [ 562.922656][T30679] ? __x64_sys_futex+0x358/0x4d0 [ 562.922672][T30679] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 562.922688][T30679] ? xfd_validate_state+0x129/0x190 [ 562.922702][T30679] ? ksys_write+0x1ac/0x250 [ 562.922721][T30679] __x64_sys_mmap+0x125/0x190 [ 562.922739][T30679] do_syscall_64+0x10b/0xf80 [ 562.922760][T30679] ? clear_bhb_loop+0x40/0x90 [ 562.922777][T30679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.922792][T30679] RIP: 0033:0x7f381cb9c819 [ 562.922806][T30679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.922819][T30679] RSP: 002b:00007f381d982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 562.922834][T30679] RAX: ffffffffffffffda RBX: 00007f381ce15fa0 RCX: 00007f381cb9c819 [ 562.922844][T30679] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 562.922853][T30679] RBP: 00007f381cc32c91 R08: fffffffffffffffa R09: 0000000000008000 [ 562.922862][T30679] R10: 0000009000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 562.922872][T30679] R13: 00007f381ce16038 R14: 00007f381ce15fa0 R15: 00007fff71b0c218 [ 562.922891][T30679] [ 563.883986][T30711] netlink: zone id is out of range [ 567.464306][T30873] netlink: 'syz.3.9848': attribute type 11 has an invalid length. [ 567.507218][T30873] netlink: 'syz.3.9848': attribute type 11 has an invalid length. [ 567.545921][T30873] netlink: 'syz.3.9848': attribute type 11 has an invalid length. [ 568.197928][T30911] netlink: 338 bytes leftover after parsing attributes in process `syz.3.9864'. [ 568.252677][T30911] netlink: 338 bytes leftover after parsing attributes in process `syz.3.9864'. [ 569.456885][T30969] netlink: 'syz.0.9889': attribute type 11 has an invalid length. [ 569.630932][T30979] __vm_enough_memory: pid: 30979, comm: syz.0.9901, bytes: 4398046457856 not enough memory for the allocation [ 569.712520][T30982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 569.718979][T30982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.508518][T31017] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 571.496849][T31054] netlink: 'syz.0.9929': attribute type 11 has an invalid length. [ 571.546796][T31054] netlink: 'syz.0.9929': attribute type 11 has an invalid length. [ 571.605248][T31054] netlink: 'syz.0.9929': attribute type 11 has an invalid length. [ 571.651870][T31054] netlink: 'syz.0.9929': attribute type 11 has an invalid length. [ 571.732492][T31062] netlink: 'syz.1.9933': attribute type 11 has an invalid length. [ 571.764548][T31062] netlink: 'syz.1.9933': attribute type 11 has an invalid length. [ 572.374053][T31097] netlink: 'syz.0.9946': attribute type 3 has an invalid length. [ 572.481856][T31101] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9948'. [ 572.654437][T31109] .^: entered promiscuous mode [ 573.367488][T31142] nla_validate_range_unsigned: 1 callbacks suppressed [ 573.367502][T31142] netlink: 'syz.2.9966': attribute type 11 has an invalid length. [ 573.428921][T31142] netlink: 'syz.2.9966': attribute type 11 has an invalid length. [ 573.451316][T31142] netlink: 'syz.2.9966': attribute type 11 has an invalid length. [ 574.688139][T31204] netlink: 'syz.3.9991': attribute type 11 has an invalid length. [ 574.731441][T31204] netlink: 'syz.3.9991': attribute type 11 has an invalid length. [ 574.774439][T31204] netlink: 'syz.3.9991': attribute type 11 has an invalid length. [ 574.809382][T31204] netlink: 'syz.3.9991': attribute type 11 has an invalid length. [ 575.067085][T31222] netlink: 'syz.3.10000': attribute type 11 has an invalid length. [ 575.097403][T31222] netlink: 'syz.3.10000': attribute type 11 has an invalid length. [ 575.125710][T31222] netlink: 'syz.3.10000': attribute type 11 has an invalid length. [ 575.796294][T31245] .^: entered promiscuous mode [ 576.886897][T31300] netlink: 206 bytes leftover after parsing attributes in process `syz.1.10034'. [ 577.256422][T31311] .^: entered promiscuous mode [ 577.445543][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10042'. [ 577.462366][T31320] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd1f [ 579.156721][T31374] FAULT_INJECTION: forcing a failure. [ 579.156721][T31374] name failslab, interval 1, probability 0, space 0, times 0 [ 579.215708][T31374] CPU: 0 UID: 0 PID: 31374 Comm: syz.2.10067 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 579.215737][T31374] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 579.215744][T31374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.215753][T31374] Call Trace: [ 579.215758][T31374] [ 579.215764][T31374] dump_stack_lvl+0x100/0x190 [ 579.215785][T31374] should_fail_ex.cold+0x5/0xa [ 579.215805][T31374] should_failslab+0xc2/0x120 [ 579.215824][T31374] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 579.215845][T31374] ? alloc_empty_file+0x5b/0x1c0 [ 579.215869][T31374] alloc_empty_file+0x5b/0x1c0 [ 579.215890][T31374] alloc_file_pseudo+0x13a/0x230 [ 579.215920][T31374] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 579.215943][T31374] ? hugetlbfs_get_inode+0x3f5/0x700 [ 579.215966][T31374] hugetlb_file_setup+0x2a8/0x5b0 [ 579.215989][T31374] ksys_mmap_pgoff+0x242/0x610 [ 579.216004][T31374] ? __UNIQUE_ID_modinfo_714+0x63da8cab/0xffffffffffec95ab [ 579.216027][T31374] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 579.216046][T31374] ? xfd_validate_state+0x129/0x190 [ 579.216061][T31374] ? ksys_write+0x1ac/0x250 [ 579.216080][T31374] __x64_sys_mmap+0x125/0x190 [ 579.216095][T31374] ? __UNIQUE_ID_modinfo_714+0x63da8cab/0xffffffffffec95ab [ 579.216118][T31374] do_syscall_64+0x10b/0xf80 [ 579.216140][T31374] ? clear_bhb_loop+0x40/0x90 [ 579.216157][T31374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.216173][T31374] RIP: 0033:0x7fb395b9c819 [ 579.216186][T31374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.216200][T31374] RSP: 002b:00007fb396a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 579.216214][T31374] RAX: ffffffffffffffda RBX: 00007fb395e15fa0 RCX: 00007fb395b9c819 [ 579.216224][T31374] RDX: 0000000000000002 RSI: 0000000000000005 RDI: ffffffffff600700 [ 579.216232][T31374] RBP: 00007fb395c32c91 R08: 0000000000000401 R09: 0000300000000000 [ 579.216241][T31374] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 579.216250][T31374] R13: 00007fb395e16038 R14: 00007fb395e15fa0 R15: 00007ffd66b9d208 [ 579.216265][T31374] ? __UNIQUE_ID_modinfo_714+0x63da8cab/0xffffffffffec95ab [ 579.216287][T31374] [ 580.561686][T31420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10089'. [ 581.280274][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10103'. [ 581.320909][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10103'. [ 581.786818][T31469] NFSD: Failed to start, no listeners configured. [ 582.151883][T31478] Process accounting paused [ 582.604737][T31511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10126'. [ 582.857230][T31524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 583.477222][T31554] tc_dump_action: action bad kind [ 583.758146][T31573] FAULT_INJECTION: forcing a failure. [ 583.758146][T31573] name failslab, interval 1, probability 0, space 0, times 0 [ 583.820356][T31573] CPU: 0 UID: 0 PID: 31573 Comm: syz.1.10155 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 583.820386][T31573] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 583.820393][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.820402][T31573] Call Trace: [ 583.820410][T31573] [ 583.820416][T31573] dump_stack_lvl+0x100/0x190 [ 583.820437][T31573] should_fail_ex.cold+0x5/0xa [ 583.820457][T31573] should_failslab+0xc2/0x120 [ 583.820475][T31573] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 583.820497][T31573] ? alloc_empty_file+0x5b/0x1c0 [ 583.820522][T31573] alloc_empty_file+0x5b/0x1c0 [ 583.820543][T31573] alloc_file_pseudo+0x13a/0x230 [ 583.820564][T31573] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 583.820583][T31573] ? alloc_fd+0x476/0x790 [ 583.820601][T31573] ? do_raw_spin_unlock+0x145/0x1e0 [ 583.820620][T31573] __anon_inode_getfile+0xe8/0x280 [ 583.820643][T31573] anon_inode_getfile_fmode+0x37/0xa0 [ 583.820664][T31573] __do_sys_fanotify_init+0xab8/0xe80 [ 583.820682][T31573] do_syscall_64+0x10b/0xf80 [ 583.820703][T31573] ? clear_bhb_loop+0x40/0x90 [ 583.820721][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.820735][T31573] RIP: 0033:0x7f381cb9c819 [ 583.820748][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.820762][T31573] RSP: 002b:00007f381d982028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 583.820777][T31573] RAX: ffffffffffffffda RBX: 00007f381ce15fa0 RCX: 00007f381cb9c819 [ 583.820787][T31573] RDX: 0000000000000000 RSI: 0002010000000000 RDI: 0000000000000200 [ 583.820795][T31573] RBP: 00007f381cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 583.820804][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.820812][T31573] R13: 00007f381ce16038 R14: 00007f381ce15fa0 R15: 00007fff71b0c218 [ 583.820830][T31573] [ 584.257416][T31590] nbd: couldn't find a device at index 18109 [ 584.338708][T31593] openvswitch: netlink: IPv4 tunnel dst address is zero [ 585.390708][T31646] delete_channel: no stack [ 587.996165][T31763] ksmbd: Unknown IPC event: 14, ignore. [ 588.762683][T31821] openvswitch: netlink: IP tunnel dst address not specified [ 589.037470][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10263'. [ 591.310958][T31950] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 591.368156][T31952] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10314'. [ 592.098042][T31989] netlink: 'syz.1.10329': attribute type 11 has an invalid length. [ 592.479344][T32007] FAULT_INJECTION: forcing a failure. [ 592.479344][T32007] name failslab, interval 1, probability 0, space 0, times 0 [ 592.568560][T32007] CPU: 0 UID: 0 PID: 32007 Comm: syz.0.10337 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 592.568591][T32007] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 592.568598][T32007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.568606][T32007] Call Trace: [ 592.568612][T32007] [ 592.568618][T32007] dump_stack_lvl+0x100/0x190 [ 592.568639][T32007] should_fail_ex.cold+0x5/0xa [ 592.568659][T32007] should_failslab+0xc2/0x120 [ 592.568677][T32007] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 592.568700][T32007] ? __d_alloc+0x34/0xa40 [ 592.568717][T32007] ? lockdep_hardirqs_on+0x78/0x100 [ 592.568739][T32007] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 592.568757][T32007] __d_alloc+0x34/0xa40 [ 592.568777][T32007] d_alloc_pseudo+0x1c/0xc0 [ 592.568791][T32007] alloc_file_pseudo+0xcf/0x230 [ 592.568812][T32007] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 592.568831][T32007] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 592.568852][T32007] create_pipe_files+0x360/0x970 [ 592.568872][T32007] do_pipe2+0xbd/0x1e0 [ 592.568888][T32007] ? __pfx_do_pipe2+0x10/0x10 [ 592.568906][T32007] ? ksys_write+0x1ac/0x250 [ 592.568927][T32007] __x64_sys_pipe2+0x54/0x80 [ 592.568944][T32007] do_syscall_64+0x10b/0xf80 [ 592.568965][T32007] ? clear_bhb_loop+0x40/0x90 [ 592.568982][T32007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.568996][T32007] RIP: 0033:0x7fa0ddb9c819 [ 592.569009][T32007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.569022][T32007] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 592.569037][T32007] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 592.569046][T32007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.569055][T32007] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 592.569063][T32007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.569071][T32007] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 592.569090][T32007] [ 592.904433][T32019] netlink: ct family unspecified [ 592.976441][T32023] netlink: 'syz.2.10345': attribute type 1 has an invalid length. [ 593.339437][T31720] udevd[31720]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 594.547743][T32103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10380'. [ 597.527132][T32257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10428'. [ 599.256557][T32323] openvswitch: netlink: IPv4 tunnel dst address is zero [ 604.667884][T32523] zswap: compressor not available [ 605.418384][T32559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10530'. [ 606.284030][T32595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10541'. [ 607.860957][T32642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10556'. [ 608.911449][T32681] FAULT_INJECTION: forcing a failure. [ 608.911449][T32681] name failslab, interval 1, probability 0, space 0, times 0 [ 608.963807][T32681] CPU: 0 UID: 0 PID: 32681 Comm: syz.0.10580 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 608.963837][T32681] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 608.963843][T32681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.963853][T32681] Call Trace: [ 608.963858][T32681] [ 608.963864][T32681] dump_stack_lvl+0x100/0x190 [ 608.963887][T32681] should_fail_ex.cold+0x5/0xa [ 608.963908][T32681] should_failslab+0xc2/0x120 [ 608.963932][T32681] __kmalloc_cache_noprof+0x7a/0x6f0 [ 608.963954][T32681] ? trace_pid_list_alloc+0x232/0x480 [ 608.963979][T32681] trace_pid_list_alloc+0x232/0x480 [ 608.964002][T32681] trace_pid_write+0x110/0x460 [ 608.964022][T32681] ? __pfx_trace_pid_write+0x10/0x10 [ 608.964053][T32681] event_pid_write.isra.0+0x1e4/0x7d0 [ 608.964075][T32681] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 608.964102][T32681] vfs_write+0x2aa/0x1070 [ 608.964119][T32681] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 608.964141][T32681] ? __pfx_vfs_write+0x10/0x10 [ 608.964157][T32681] ? __fget_files+0x215/0x3d0 [ 608.964177][T32681] ? __fget_files+0x21f/0x3d0 [ 608.964198][T32681] ksys_write+0x12a/0x250 [ 608.964214][T32681] ? __pfx_ksys_write+0x10/0x10 [ 608.964231][T32681] ? rcu_is_watching+0x12/0xc0 [ 608.964251][T32681] do_syscall_64+0x10b/0xf80 [ 608.964273][T32681] ? clear_bhb_loop+0x40/0x90 [ 608.964291][T32681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.964305][T32681] RIP: 0033:0x7fa0ddb9c819 [ 608.964318][T32681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.964332][T32681] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.964347][T32681] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 608.964356][T32681] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.964365][T32681] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 608.964373][T32681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.964381][T32681] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 608.964404][T32681] [ 611.871567][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10626'. [ 611.887919][ T337] FAULT_INJECTION: forcing a failure. [ 611.887919][ T337] name failslab, interval 1, probability 0, space 0, times 0 [ 611.937363][ T337] CPU: 0 UID: 0 PID: 337 Comm: syz.0.10627 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 611.937392][ T337] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 611.937399][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.937408][ T337] Call Trace: [ 611.937413][ T337] [ 611.937419][ T337] dump_stack_lvl+0x100/0x190 [ 611.937440][ T337] should_fail_ex.cold+0x5/0xa [ 611.937460][ T337] should_failslab+0xc2/0x120 [ 611.937477][ T337] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 611.937499][ T337] ? sk_prot_alloc+0x60/0x2a0 [ 611.937521][ T337] sk_prot_alloc+0x60/0x2a0 [ 611.937540][ T337] sk_alloc+0x36/0xe80 [ 611.937554][ T337] rxrpc_create+0x116/0x8d0 [ 611.937570][ T337] __sock_create+0x339/0x860 [ 611.937599][ T337] __sys_socket+0x14d/0x260 [ 611.937620][ T337] ? __pfx___sys_socket+0x10/0x10 [ 611.937647][ T337] __x64_sys_socket+0x72/0xb0 [ 611.937666][ T337] ? lockdep_hardirqs_on+0x78/0x100 [ 611.937690][ T337] do_syscall_64+0x10b/0xf80 [ 611.937711][ T337] ? clear_bhb_loop+0x40/0x90 [ 611.937728][ T337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.937743][ T337] RIP: 0033:0x7fa0ddb9c819 [ 611.937756][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.937769][ T337] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 611.937785][ T337] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 611.937797][ T337] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 611.937806][ T337] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 611.937814][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.937822][ T337] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 611.937842][ T337] [ 612.315009][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10626'. [ 612.379456][ T334] Process accounting resumed [ 614.661979][ T462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10661'. [ 621.673644][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.684952][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.121583][ T825] ptrace attach of "./syz-executor exec"[5836] was attempted by "Tڼ\x22FATWM{0(CT{Z?moXTJM(oWwsXVjARُ3-k&}heudv,:٧\x0dBb\x22)Z4} [ 624.600906][ T899] dump_stack_lvl+0x100/0x190 [ 624.600927][ T899] should_fail_ex.cold+0x5/0xa [ 624.600948][ T899] should_failslab+0xc2/0x120 [ 624.600965][ T899] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 624.600988][ T899] ? ptlock_alloc+0x1f/0x70 [ 624.601011][ T899] ? __pfx_filemap_map_pages+0x10/0x10 [ 624.601033][ T899] ptlock_alloc+0x1f/0x70 [ 624.601052][ T899] pte_alloc_one+0x82/0x3d0 [ 624.601073][ T899] __do_fault+0x26c/0x440 [ 624.601089][ T899] do_fault+0x2db/0x1750 [ 624.601106][ T899] ? __pmd_alloc+0x3fb/0x950 [ 624.601125][ T899] __handle_mm_fault+0x187d/0x2a00 [ 624.601149][ T899] ? mt_find+0x45e/0x8e0 [ 624.601164][ T899] ? __pfx___handle_mm_fault+0x10/0x10 [ 624.601184][ T899] ? __pfx_mt_find+0x10/0x10 [ 624.601208][ T899] ? find_vma+0xbf/0x140 [ 624.601223][ T899] ? __pfx_find_vma+0x10/0x10 [ 624.601240][ T899] handle_mm_fault+0x36d/0xa20 [ 624.601264][ T899] do_user_addr_fault+0x74c/0x12f0 [ 624.601284][ T899] ? trace_page_fault_kernel+0x7a/0x200 [ 624.601303][ T899] exc_page_fault+0x6f/0xd0 [ 624.601325][ T899] asm_exc_page_fault+0x26/0x30 [ 624.601340][ T899] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 624.601358][ T899] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 624.601372][ T899] RSP: 0018:ffffc90003defd68 EFLAGS: 00050216 [ 624.601385][ T899] RAX: 000040000007d000 RBX: 0000000000000020 RCX: 0000000000000020 [ 624.601394][ T899] RDX: 0000000000000001 RSI: ffffc90003defdd0 RDI: 0000000000000000 [ 624.601403][ T899] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520007bdfbd [ 624.601415][ T899] R10: ffffc90003defdef R11: 0000000000000000 R12: ffffc90003defdd0 [ 624.601425][ T899] R13: 0000000000000020 R14: 00007ffffffff000 R15: 0000000000000000 [ 624.601451][ T899] _copy_to_user+0xa4/0xd0 [ 624.601475][ T899] ksys_msgctl.constprop.0+0x2cc/0x340 [ 624.601496][ T899] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 624.601526][ T899] ? rcu_is_watching+0x12/0xc0 [ 624.601545][ T899] do_syscall_64+0x10b/0xf80 [ 624.601567][ T899] ? clear_bhb_loop+0x40/0x90 [ 624.601588][ T899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.601603][ T899] RIP: 0033:0x7fb395b9c819 [ 624.601615][ T899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.601629][ T899] RSP: 002b:00007fb396a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 624.601642][ T899] RAX: ffffffffffffffda RBX: 00007fb395e15fa0 RCX: 00007fb395b9c819 [ 624.601652][ T899] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000049e1 [ 624.601660][ T899] RBP: 00007fb395c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 624.601669][ T899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.601677][ T899] R13: 00007fb395e16038 R14: 00007fb395e15fa0 R15: 00007ffd66b9d208 [ 624.601697][ T899] [ 625.104892][ T912] FAULT_INJECTION: forcing a failure. [ 625.104892][ T912] name failslab, interval 1, probability 0, space 0, times 0 [ 625.117803][ T912] CPU: 0 UID: 0 PID: 912 Comm: syz.1.10801 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 625.117832][ T912] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 625.117839][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.117854][ T912] Call Trace: [ 625.117859][ T912] [ 625.117865][ T912] dump_stack_lvl+0x100/0x190 [ 625.117886][ T912] should_fail_ex.cold+0x5/0xa [ 625.117907][ T912] should_failslab+0xc2/0x120 [ 625.117924][ T912] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 625.117946][ T912] ? sk_prot_alloc+0x60/0x2a0 [ 625.117969][ T912] sk_prot_alloc+0x60/0x2a0 [ 625.117988][ T912] sk_alloc+0x36/0xe80 [ 625.118002][ T912] kcm_create+0xfc/0x6a0 [ 625.118026][ T912] __sock_create+0x339/0x860 [ 625.118048][ T912] __sys_socket+0x14d/0x260 [ 625.118068][ T912] ? __pfx___sys_socket+0x10/0x10 [ 625.118087][ T912] ? ksys_write+0x1ac/0x250 [ 625.118108][ T912] __x64_sys_socket+0x72/0xb0 [ 625.118131][ T912] ? lockdep_hardirqs_on+0x78/0x100 [ 625.118153][ T912] do_syscall_64+0x10b/0xf80 [ 625.118174][ T912] ? clear_bhb_loop+0x40/0x90 [ 625.118191][ T912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.118206][ T912] RIP: 0033:0x7f381cb9c819 [ 625.118219][ T912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.118234][ T912] RSP: 002b:00007f381d982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 625.118248][ T912] RAX: ffffffffffffffda RBX: 00007f381ce15fa0 RCX: 00007f381cb9c819 [ 625.118258][ T912] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 625.118266][ T912] RBP: 00007f381cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 625.118275][ T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.118284][ T912] R13: 00007f381ce16038 R14: 00007f381ce15fa0 R15: 00007fff71b0c218 [ 625.118304][ T912] [ 627.078094][ T1019] bridge0: port 3(veth1_macvtap) entered blocking state [ 627.115444][ T1019] bridge0: port 3(veth1_macvtap) entered disabled state [ 627.146737][ T1019] veth1_macvtap: entered allmulticast mode [ 627.207784][ T1019] veth1_macvtap: left allmulticast mode [ 632.066610][ T1223] bridge0: port 3(team0) entered blocking state [ 632.098914][ T1223] bridge0: port 3(team0) entered disabled state [ 632.128343][ T1223] team0: entered allmulticast mode [ 632.154900][ T1223] team_slave_0: entered allmulticast mode [ 632.183219][ T1223] team_slave_1: entered allmulticast mode [ 632.216049][ T1223] team0: entered promiscuous mode [ 632.256025][ T1223] team_slave_0: entered promiscuous mode [ 632.279521][ T1223] team_slave_1: entered promiscuous mode [ 632.316541][ T1223] bridge0: port 3(team0) entered blocking state [ 632.324503][ T1223] bridge0: port 3(team0) entered forwarding state [ 632.888299][ T1262] __vm_enough_memory: pid: 1262, comm: syz.1.10917, bytes: 4398046511104 not enough memory for the allocation [ 633.436661][ T1290] FAULT_INJECTION: forcing a failure. [ 633.436661][ T1290] name failslab, interval 1, probability 0, space 0, times 0 [ 633.496966][ T1290] CPU: 0 UID: 0 PID: 1290 Comm: syz.1.10929 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 633.497000][ T1290] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 633.497007][ T1290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.497015][ T1290] Call Trace: [ 633.497021][ T1290] [ 633.497027][ T1290] dump_stack_lvl+0x100/0x190 [ 633.497049][ T1290] should_fail_ex.cold+0x5/0xa [ 633.497069][ T1290] should_failslab+0xc2/0x120 [ 633.497086][ T1290] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 633.497108][ T1290] ? __d_alloc+0x34/0xa40 [ 633.497132][ T1290] __d_alloc+0x34/0xa40 [ 633.497152][ T1290] d_alloc_pseudo+0x1c/0xc0 [ 633.497165][ T1290] alloc_file_pseudo+0xcf/0x230 [ 633.497187][ T1290] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 633.497206][ T1290] ? alloc_fd+0x476/0x790 [ 633.497224][ T1290] ? do_raw_spin_unlock+0x145/0x1e0 [ 633.497243][ T1290] __anon_inode_getfile+0xe8/0x280 [ 633.497266][ T1290] anon_inode_getfile_fmode+0x37/0xa0 [ 633.497288][ T1290] __do_sys_fanotify_init+0xab8/0xe80 [ 633.497306][ T1290] do_syscall_64+0x10b/0xf80 [ 633.497328][ T1290] ? clear_bhb_loop+0x40/0x90 [ 633.497346][ T1290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.497361][ T1290] RIP: 0033:0x7f381cb9c819 [ 633.497374][ T1290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.497388][ T1290] RSP: 002b:00007f381d982028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 633.497403][ T1290] RAX: ffffffffffffffda RBX: 00007f381ce15fa0 RCX: 00007f381cb9c819 [ 633.497413][ T1290] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 633.497422][ T1290] RBP: 00007f381cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 633.497431][ T1290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.497439][ T1290] R13: 00007f381ce16038 R14: 00007f381ce15fa0 R15: 00007fff71b0c218 [ 633.497458][ T1290] [ 634.215836][ T1302] ovs_: entered promiscuous mode [ 636.047281][ T1385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10957'. [ 636.187101][ T1392] [U] ^C [ 636.963252][ T1433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10975'. [ 637.048505][ T1435] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 637.555440][ T1473] FAULT_INJECTION: forcing a failure. [ 637.555440][ T1473] name failslab, interval 1, probability 0, space 0, times 0 [ 637.643656][ T1473] CPU: 0 UID: 0 PID: 1473 Comm: syz.0.10983 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 637.643688][ T1473] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 637.643695][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.643704][ T1473] Call Trace: [ 637.643710][ T1473] [ 637.643716][ T1473] dump_stack_lvl+0x100/0x190 [ 637.643737][ T1473] should_fail_ex.cold+0x5/0xa [ 637.643758][ T1473] should_failslab+0xc2/0x120 [ 637.643775][ T1473] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 637.643798][ T1473] ? alloc_empty_file+0x5b/0x1c0 [ 637.643822][ T1473] alloc_empty_file+0x5b/0x1c0 [ 637.643843][ T1473] alloc_file_pseudo+0x13a/0x230 [ 637.643864][ T1473] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 637.643885][ T1473] ? _raw_spin_unlock+0x28/0x50 [ 637.643905][ T1473] ? alloc_fd+0x476/0x790 [ 637.643923][ T1473] __anon_inode_getfile+0xe8/0x280 [ 637.643946][ T1473] do_epoll_create+0x329/0x4b0 [ 637.643965][ T1473] __x64_sys_epoll_create+0x45/0x70 [ 637.643985][ T1473] do_syscall_64+0x10b/0xf80 [ 637.644006][ T1473] ? clear_bhb_loop+0x40/0x90 [ 637.644024][ T1473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.644039][ T1473] RIP: 0033:0x7fa0ddb9c819 [ 637.644051][ T1473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.644066][ T1473] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 637.644080][ T1473] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 637.644090][ T1473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 637.644098][ T1473] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 637.644107][ T1473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.644116][ T1473] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 637.644134][ T1473] [ 638.308423][ T1493] FAULT_INJECTION: forcing a failure. [ 638.308423][ T1493] name failslab, interval 1, probability 0, space 0, times 0 [ 638.369764][ T1493] CPU: 0 UID: 0 PID: 1493 Comm: syz.0.10991 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 638.369799][ T1493] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 638.369806][ T1493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.369815][ T1493] Call Trace: [ 638.369821][ T1493] [ 638.369826][ T1493] dump_stack_lvl+0x100/0x190 [ 638.369848][ T1493] should_fail_ex.cold+0x5/0xa [ 638.369869][ T1493] should_failslab+0xc2/0x120 [ 638.369886][ T1493] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 638.369908][ T1493] ? prepare_creds+0x2c/0x950 [ 638.369927][ T1493] prepare_creds+0x2c/0x950 [ 638.369944][ T1493] __sys_setuid+0x9c/0x440 [ 638.369962][ T1493] do_syscall_64+0x10b/0xf80 [ 638.369983][ T1493] ? clear_bhb_loop+0x40/0x90 [ 638.370002][ T1493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.370018][ T1493] RIP: 0033:0x7fa0ddb9c819 [ 638.370031][ T1493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.370046][ T1493] RSP: 002b:00007fa0deb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 638.370061][ T1493] RAX: ffffffffffffffda RBX: 00007fa0dde15fa0 RCX: 00007fa0ddb9c819 [ 638.370071][ T1493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 638.370079][ T1493] RBP: 00007fa0ddc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 638.370087][ T1493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.370096][ T1493] R13: 00007fa0dde16038 R14: 00007fa0dde15fa0 R15: 00007ffee7a6a1a8 [ 638.370115][ T1493] [ 639.079889][ T1516] sctp: [Deprecated]: syz.2.11004 (pid 1516) Use of int in maxseg socket option. [ 639.079889][ T1516] Use struct sctp_assoc_value instead [ 642.363249][ T1659] Process accounting paused [ 645.763631][ T1746] bridge_slave_1: left allmulticast mode [ 645.783136][ T1746] bridge_slave_1: left promiscuous mode [ 645.807274][ T1746] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.497892][ T1809] netlink: 334 bytes leftover after parsing attributes in process `syz.1.11104'. [ 651.733727][ T1947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11153'. [ 652.590870][ T1966] IPVS: length: 7562853 != 24 [ 652.763689][ T1973] netlink: 334 bytes leftover after parsing attributes in process `syz.1.11165'. [ 654.261252][ T2052] ovs_?: entered promiscuous mode [ 655.241627][ T2090] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 655.710859][ T2111] bridge0: port 3(syz_tun) entered blocking state [ 655.741817][ T2111] bridge0: port 3(syz_tun) entered disabled state [ 655.761454][ T2111] syz_tun: entered allmulticast mode [ 655.782720][ T2111] syz_tun: entered promiscuous mode [ 655.801439][ T2111] bridge0: port 3(syz_tun) entered blocking state [ 655.807973][ T2111] bridge0: port 3(syz_tun) entered listening state [ 656.430881][ T2136] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 657.132375][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11238'. [ 657.181846][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11238'. [ 657.368508][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11241'. [ 657.674035][ T2183] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11248'. [ 657.763307][ T2186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11250'. [ 657.930253][ T2193] bridge0: port 3(veth0_to_bridge) entered blocking state [ 657.985731][ T2193] bridge0: port 3(veth0_to_bridge) entered disabled state [ 658.037609][ T2193] veth0_to_bridge: entered allmulticast mode [ 658.130246][ T2193] veth0_to_bridge: entered promiscuous mode [ 658.177082][ T2193] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.245260][ T2193] bridge0: port 3(veth0_to_bridge) entered blocking state [ 658.252508][ T2193] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 658.318098][ T2207] bridge0: port 4(bond0) entered blocking state [ 658.326001][ T2207] bridge0: port 4(bond0) entered disabled state [ 658.348403][ T2207] bond0: entered allmulticast mode [ 658.364956][ T2207] bond_slave_0: entered allmulticast mode [ 658.385949][ T2207] bond_slave_1: entered allmulticast mode [ 658.413436][ T2207] bond0: entered promiscuous mode [ 658.431097][ T2207] bond_slave_0: entered promiscuous mode [ 658.448489][ T2207] bond_slave_1: entered promiscuous mode [ 658.475914][ T2207] bridge0: port 4(bond0) entered blocking state [ 658.482503][ T2207] bridge0: port 4(bond0) entered forwarding state [ 660.328018][ T2279] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 660.592468][ T2296] bridge0: port 4(dummy0) entered blocking state [ 660.627615][ T2296] bridge0: port 4(dummy0) entered disabled state [ 660.656559][ T2296] dummy0: entered allmulticast mode [ 660.687669][ T2296] dummy0: entered promiscuous mode [ 660.710213][ T2296] bridge0: port 4(dummy0) entered blocking state [ 660.716705][ T2296] bridge0: port 4(dummy0) entered forwarding state [ 661.391447][ T29] audit: type=1804 audit(4295033042.730:43): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11308" name="file0" dev="tmpfs" ino=14638 res=1 errno=0 [ 661.632548][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11314'. [ 663.726078][T17197] Bluetooth: hci0: Malformed HCI Event [ 666.112076][ T2629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11399'. [ 667.029624][ T29] audit: type=1800 audit(4295033048.409:44): pid=2694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11421" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 667.208080][ T2700] sctp: [Deprecated]: syz.2.11424 (pid 2700) Use of int in max_burst socket option. [ 667.208080][ T2700] Use struct sctp_assoc_value instead [ 667.457778][ T29] audit: type=1326 audit(4295033048.832:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2713 comm="syz.3.11429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff314f9c819 code=0x0 [ 668.208561][ T2758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11445'. [ 668.850116][ T2787] overlayfs: missing 'lowerdir' [ 668.923820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.936599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.949296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.961622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.973913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.986209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.998602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.010919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.023446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.035748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.337167][ C0] bridge0: port 3(syz_tun) entered learning state [ 673.906942][ C0] net_ratelimit: 16458 callbacks suppressed [ 673.906960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.925166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.937500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.950021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.962535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.974831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.987168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.999455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.011753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.024359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.891091][ C0] net_ratelimit: 17043 callbacks suppressed [ 678.891108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.909383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.921663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.934050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.946463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.958749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.971016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.983307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.995604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.007887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.875178][ C0] net_ratelimit: 17156 callbacks suppressed [ 683.875195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.893572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.905825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.918079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.930321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.942571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.954830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.967120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.979348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.991645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.612037][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 686.618669][ C0] bridge0: topology change detected, propagating [ 688.859027][ C0] net_ratelimit: 17392 callbacks suppressed [ 688.859045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.877273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.889565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.901858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.914175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.926549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.938877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.951201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.963456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.975727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.843368][ C0] net_ratelimit: 17416 callbacks suppressed [ 693.843385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.861596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.873867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.886192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.898579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.910896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.923143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.935509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.947766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.960097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.827355][ C0] net_ratelimit: 17226 callbacks suppressed [ 698.827371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.845809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.858064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.870334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.882571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.894854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.907098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.919395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.931654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.943912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.811306][ C0] net_ratelimit: 17198 callbacks suppressed [ 703.811323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.829663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.841896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.854165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.866400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.878766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.891118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.903533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.915798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.928052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.795570][ C0] net_ratelimit: 17417 callbacks suppressed [ 708.795593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.813795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.826187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.838460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.850743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.863045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.875400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.887859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.900158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.912429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.779571][ C0] net_ratelimit: 17445 callbacks suppressed [ 713.779589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.798132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.810375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.822627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.834943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.847241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.859558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.871887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.884161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.896480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.763771][ C0] net_ratelimit: 17212 callbacks suppressed [ 718.763789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.782018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.794356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.806742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.819034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.831299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.843629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.855935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.868237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.880588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.747627][ C0] net_ratelimit: 17174 callbacks suppressed [ 723.747645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.765900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.778146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.790447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.802725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.814997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.827261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.839571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.851842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.864128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.731726][ C0] net_ratelimit: 17240 callbacks suppressed [ 728.731744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.749970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.762248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.774565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.787473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.799794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.812037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.824331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.836594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.848893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.715908][ C0] net_ratelimit: 17390 callbacks suppressed [ 733.715926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.734140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.746500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.758863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.771181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.783535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.795823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.808107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.820425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.832746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.699981][ C0] net_ratelimit: 17249 callbacks suppressed [ 738.700000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.718189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.730467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.742713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.754969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.767196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.779462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.791744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.804169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.816484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.563215][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.683953][ C0] net_ratelimit: 17097 callbacks suppressed [ 743.683971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.702206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.714490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.726754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.739089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.751394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.763640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.775901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.788267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.800531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.668110][ C0] net_ratelimit: 17229 callbacks suppressed [ 748.668130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.686329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.698605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.710889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.723156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.735470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.747806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.760047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.772300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.784639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.652362][ C0] net_ratelimit: 17363 callbacks suppressed [ 753.652380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.670650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.682932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.695235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.707516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.719797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.732049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.744557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.756832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.769102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.636246][ C0] net_ratelimit: 17119 callbacks suppressed [ 758.636264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.654912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.667201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.679648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.691928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.704169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.716448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.728990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.741780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.754063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.620299][ C0] net_ratelimit: 17052 callbacks suppressed [ 763.620317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.638549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.650934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.663199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.675484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.687791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.700083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.712427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.724790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.737087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.604501][ C0] net_ratelimit: 17107 callbacks suppressed [ 768.604518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.622720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.634952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.647475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.659709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.671977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.684822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.697133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.709407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.721652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.588693][ C0] net_ratelimit: 17096 callbacks suppressed [ 773.588710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.606966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.619321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.631616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.643863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.656115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.669047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.681326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.693619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.705905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.846671][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 775.853648][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P807/2:b..l P2794/1:b..l [ 775.863124][ C0] rcu: (detected by 0, t=10502 jiffies, g=237577, q=583 ncpus=1) [ 775.870909][ C0] task:syz.2.11458 state:R running task stack:27128 pid:2794 tgid:2794 ppid:5842 task_flags:0x40004c flags:0x00080000 [ 775.885493][ C0] Call Trace: [ 775.888798][ C0] [ 775.891720][ C0] __schedule+0x10e9/0x6820 [ 775.896239][ C0] ? __pfx___schedule+0x10/0x10 [ 775.901089][ C0] ? mark_held_locks+0x40/0x70 [ 775.905848][ C0] preempt_schedule_irq+0x50/0x90 [ 775.910864][ C0] irqentry_exit+0x1fe/0x790 [ 775.915558][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 775.921525][ C0] RIP: 0010:unwind_next_frame+0xe09/0x2090 [ 775.927323][ C0] Code: c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 e7 0c 00 00 0f b6 41 04 c0 e8 04 3c 04 0f 84 8c 07 00 00 3c 08 0f 84 ce 06 00 00 <84> c0 0f 84 8d 01 00 00 80 3d 72 41 0c 0f 00 0f 85 2a f5 ff ff e9 [ 775.947009][ C0] RSP: 0018:ffffc90003a1f6b8 EFLAGS: 00000293 [ 775.953340][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91762498 [ 775.961383][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 775.969344][ C0] RBP: ffffc90003a1f770 R08: ffffffff9176249c R09: 0000000000000007 [ 775.977301][ C0] R10: 0000000000000200 R11: 000000000000764c R12: ffffc90003a1f778 [ 775.985270][ C0] R13: ffffc90003a1f728 R14: ffffc90003a1ff08 R15: ffffc90003a1f75c [ 775.993239][ C0] ? unwind_next_frame+0xd07/0x2090 [ 775.998429][ C0] ? x64_sys_call+0x102c/0x1530 [ 776.003268][ C0] ? unwind_get_return_address+0x59/0xa0 [ 776.008897][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.015057][ C0] arch_stack_walk+0x94/0xf0 [ 776.020074][ C0] ? do_syscall_64+0x10b/0xf80 [ 776.024832][ C0] ? tear_down_vmas+0x2a5/0x600 [ 776.029668][ C0] stack_trace_save+0x8e/0xc0 [ 776.034331][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 776.039789][ C0] ? tear_down_vmas+0x2a5/0x600 [ 776.044658][ C0] ? kasan_save_stack+0x3f/0x50 [ 776.049862][ C0] ? kasan_save_stack+0x30/0x50 [ 776.054703][ C0] kasan_save_stack+0x30/0x50 [ 776.059384][ C0] ? kasan_save_stack+0x30/0x50 [ 776.064237][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 776.069598][ C0] ? kmem_cache_free+0x433/0x6c0 [ 776.074528][ C0] ? tear_down_vmas+0x2a5/0x600 [ 776.079368][ C0] ? exit_mmap+0x469/0xa10 [ 776.083777][ C0] ? __mmput+0x12a/0x410 [ 776.088010][ C0] ? mmput+0x67/0x80 [ 776.091906][ C0] ? do_exit+0x833/0x2a60 [ 776.096223][ C0] ? do_group_exit+0xd5/0x2a0 [ 776.100985][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 776.106174][ C0] ? x64_sys_call+0x102c/0x1530 [ 776.111033][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 776.116217][ C0] kmem_cache_free+0x433/0x6c0 [ 776.120968][ C0] tear_down_vmas+0x2a5/0x600 [ 776.125646][ C0] exit_mmap+0x469/0xa10 [ 776.129886][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 776.134635][ C0] ? trace_contention_end+0x122/0x170 [ 776.140001][ C0] ? uprobe_clear_state+0x5f/0x260 [ 776.145106][ C0] ? uprobe_clear_state+0x5f/0x260 [ 776.150208][ C0] ? __lock_acquire+0x4a5/0x2630 [ 776.155166][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 776.160804][ C0] __mmput+0x12a/0x410 [ 776.164870][ C0] mmput+0x67/0x80 [ 776.168598][ C0] do_exit+0x833/0x2a60 [ 776.172749][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 776.178131][ C0] ? __pfx_do_exit+0x10/0x10 [ 776.182719][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 776.188101][ C0] do_group_exit+0xd5/0x2a0 [ 776.192612][ C0] __x64_sys_exit_group+0x3e/0x50 [ 776.197627][ C0] x64_sys_call+0x102c/0x1530 [ 776.202287][ C0] do_syscall_64+0x10b/0xf80 [ 776.206879][ C0] ? clear_bhb_loop+0x40/0x90 [ 776.211551][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.217435][ C0] RIP: 0033:0x7fb395b9c819 [ 776.221919][ C0] RSP: 002b:00007ffd66b9d548 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 776.230344][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb395b9c819 [ 776.238313][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.246276][ C0] RBP: 00007ffd66b9d5ac R08: 0000000000000000 R09: 00000000000927c0 [ 776.254224][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000af1 [ 776.262184][ C0] R13: 00000000000927c0 R14: 00000000000a3fb8 R15: 00007ffd66b9d600 [ 776.270154][ C0] [ 776.273159][ C0] task:kworker/0:2 state:R running task stack:25944 pid:807 tgid:807 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 776.286715][ C0] Workqueue: mld mld_ifc_work [ 776.291392][ C0] Call Trace: [ 776.294655][ C0] [ 776.297616][ C0] __schedule+0x10e9/0x6820 [ 776.302115][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 776.307044][ C0] ? __pfx___schedule+0x10/0x10 [ 776.312142][ C0] ? validate_xmit_xfrm+0x44f/0x1360 [ 776.317421][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 776.322783][ C0] preempt_schedule_common+0x42/0xc0 [ 776.328062][ C0] preempt_schedule_thunk+0x16/0x30 [ 776.333253][ C0] ? __dev_queue_xmit+0x9ef/0x4950 [ 776.338361][ C0] __local_bh_enable_ip+0xff/0x120 [ 776.343474][ C0] ? __dev_queue_xmit+0x9ef/0x4950 [ 776.348586][ C0] __dev_queue_xmit+0xa04/0x4950 [ 776.353516][ C0] ? look_up_lock_class+0x64/0x120 [ 776.358620][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 776.363983][ C0] ? __lock_acquire+0x4a5/0x2630 [ 776.368912][ C0] ? do_raw_spin_lock+0x128/0x260 [ 776.374037][ C0] ? find_held_lock+0x2b/0x80 [ 776.378709][ C0] ? __asan_memcpy+0x3c/0x60 [ 776.383292][ C0] ? eth_header+0x120/0x1f0 [ 776.387794][ C0] neigh_resolve_output+0x51f/0x8f0 [ 776.392993][ C0] ip6_finish_output2+0xb0f/0x1ce0 [ 776.398105][ C0] __ip6_finish_output+0x357/0xdf0 [ 776.403228][ C0] ip6_output+0x2aa/0xa60 [ 776.407549][ C0] ? __pfx_ip6_output+0x10/0x10 [ 776.412399][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 776.417851][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 776.423221][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 776.428521][ C0] ? __pfx_ip6_output+0x10/0x10 [ 776.433373][ C0] NF_HOOK.constprop.0+0x115/0x5a0 [ 776.438834][ C0] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 776.444462][ C0] ? __pfx_dst_output+0x10/0x10 [ 776.449305][ C0] mld_sendpack+0x8f7/0xec0 [ 776.453801][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 776.458822][ C0] mld_ifc_work+0x75a/0xc10 [ 776.463333][ C0] ? rcu_is_watching+0x12/0xc0 [ 776.468085][ C0] process_one_work+0xa0e/0x1980 [ 776.473019][ C0] ? __pfx_process_one_work+0x10/0x10 [ 776.478377][ C0] ? __pfx_mld_ifc_work+0x10/0x10 [ 776.483402][ C0] worker_thread+0x5ef/0xe50 [ 776.488001][ C0] ? kthread+0x13a/0x450 [ 776.492231][ C0] ? __pfx_worker_thread+0x10/0x10 [ 776.497324][ C0] kthread+0x370/0x450 [ 776.501379][ C0] ? __pfx_kthread+0x10/0x10 [ 776.505961][ C0] ret_from_fork+0x72b/0xd50 [ 776.510535][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 776.515633][ C0] ? __switch_to+0x800/0x1100 [ 776.520381][ C0] ? __switch_to_asm+0x39/0x70 [ 776.525157][ C0] ? __pfx_kthread+0x10/0x10 [ 776.529738][ C0] ret_from_fork_asm+0x1a/0x30 [ 776.534496][ C0] [ 776.537506][ C0] rcu: rcu_preempt kthread starved for 1385 jiffies! g237577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 776.548677][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 776.558624][ C0] rcu: RCU grace-period kthread stack dump: [ 776.564488][ C0] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 776.577947][ C0] Call Trace: [ 776.581214][ C0] [ 776.584138][ C0] __schedule+0x10e9/0x6820 [ 776.588644][ C0] ? __pfx___schedule+0x10/0x10 [ 776.593483][ C0] ? find_held_lock+0x2b/0x80 [ 776.598146][ C0] ? schedule+0x2bf/0x390 [ 776.602463][ C0] schedule+0xdd/0x390 [ 776.606515][ C0] schedule_timeout+0x127/0x280 [ 776.611353][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 776.616713][ C0] ? __pfx_process_timeout+0x10/0x10 [ 776.621987][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 776.627792][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 776.633267][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 776.638047][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 776.643323][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 776.648775][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 776.653709][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 776.658901][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 776.664720][ C0] rcu_gp_kthread+0x179/0x230 [ 776.669390][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.674576][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 776.680375][ C0] ? __kthread_parkme+0x18c/0x230 [ 776.685392][ C0] ? kthread+0x13a/0x450 [ 776.689642][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.694854][ C0] kthread+0x370/0x450 [ 776.698910][ C0] ? __pfx_kthread+0x10/0x10 [ 776.703750][ C0] ret_from_fork+0x72b/0xd50 [ 776.708330][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 776.713428][ C0] ? __switch_to+0x800/0x1100 [ 776.718089][ C0] ? __switch_to_asm+0x39/0x70 [ 776.722846][ C0] ? __pfx_kthread+0x10/0x10 [ 776.727429][ C0] ret_from_fork_asm+0x1a/0x30 [ 776.732189][ C0] [ 776.735191][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 776.741846][ C0] CPU: 0 UID: 0 PID: 3426 Comm: kworker/R-bat_e Tainted: G U I L syzkaller #0 PREEMPT(full) [ 776.753109][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 776.760456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.770668][ C0] Workqueue: bat_events batadv_dat_purge [ 776.776290][ C0] RIP: 0010:lock_release+0x240/0x310 [ 776.781571][ C0] Code: fe ff 48 c7 c0 00 2f 87 8e 48 85 c0 0f 84 00 fe ff ff be 04 00 00 00 48 89 c7 e8 1b ab 07 00 65 49 ff 44 24 08 e9 e8 fd ff ff cb 5d 08 00 84 c0 0f 85 f9 fd ff ff 48 8d 3d 2c e2 fa 0e 67 48 [ 776.801418][ C0] RSP: 0018:ffffc90000006ea0 EFLAGS: 00000297 [ 776.807492][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e5260 RCX: ffffffff921c1701 [ 776.815445][ C0] RDX: 0000000000000000 RSI: ffffffff81b851ae RDI: ffffffff8e7e5260 [ 776.823428][ C0] RBP: ffffffff81b851ae R08: 0000000000000001 R09: 0000000000000007 [ 776.831390][ C0] R10: 0000000000000200 R11: 0000000000096f84 R12: ffffc90000006fa8 [ 776.839364][ C0] R13: ffffc90000006f58 R14: ffffc90000007880 R15: ffffc90000006f8c [ 776.847326][ C0] FS: 0000000000000000(0000) GS:ffff8881242e2000(0000) knlGS:0000000000000000 [ 776.856266][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.862838][ C0] CR2: 00007f1608fa4839 CR3: 0000000038006000 CR4: 00000000003526f0 [ 776.870810][ C0] Call Trace: [ 776.874093][ C0] [ 776.877011][ C0] unwind_next_frame+0x3c3/0x2090 [ 776.882033][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 776.887252][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.893410][ C0] arch_stack_walk+0x94/0xf0 [ 776.897992][ C0] ? br_handle_frame+0xcdd/0x1520 [ 776.903007][ C0] stack_trace_save+0x8e/0xc0 [ 776.907670][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 776.913031][ C0] ? __br_multicast_add_group+0x301/0x640 [ 776.918736][ C0] kasan_save_stack+0x30/0x50 [ 776.923416][ C0] ? kasan_save_stack+0x30/0x50 [ 776.928246][ C0] ? kasan_save_track+0x14/0x30 [ 776.933080][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 776.938086][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 776.943704][ C0] ? skb_clone+0x190/0x400 [ 776.948103][ C0] ? maybe_deliver+0xd4/0x180 [ 776.952790][ C0] ? br_flood+0x193/0x650 [ 776.957105][ C0] ? br_handle_frame_finish+0xff4/0x1f60 [ 776.962724][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 776.968084][ C0] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 776.974327][ C0] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 776.979855][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 776.985147][ C0] kasan_save_track+0x14/0x30 [ 776.989810][ C0] __kasan_slab_alloc+0x89/0x90 [ 776.994661][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 777.000111][ C0] ? skb_clone+0x190/0x400 [ 777.004611][ C0] skb_clone+0x190/0x400 [ 777.008837][ C0] maybe_deliver+0xd4/0x180 [ 777.013345][ C0] br_flood+0x193/0x650 [ 777.017492][ C0] br_handle_frame_finish+0xff4/0x1f60 [ 777.022942][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.028827][ C0] ? __lock_acquire+0x4a5/0x2630 [ 777.033759][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 777.039204][ C0] ? nf_hook_slow+0x167/0x220 [ 777.043865][ C0] br_nf_hook_thresh+0x30d/0x420 [ 777.048790][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.054693][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 777.060142][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.066034][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.071921][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.077920][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 777.083899][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.089794][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 777.095165][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 777.101049][ C0] ? lock_acquire+0x1b1/0x370 [ 777.105709][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 777.112197][ C0] ? net_generic+0xea/0x2a0 [ 777.116694][ C0] br_nf_pre_routing+0x90f/0x1560 [ 777.121723][ C0] br_handle_frame+0xcdd/0x1520 [ 777.126592][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.131873][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.137761][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.143034][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 777.149719][ C0] ? kmem_cache_free+0x127/0x6c0 [ 777.154645][ C0] ? skb_release_data+0x6ca/0x8e0 [ 777.159651][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 777.166760][ C0] ? kfree_skbmem+0x19f/0x210 [ 777.171423][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 777.176607][ C0] ? ip6_mc_input+0x51a/0xf50 [ 777.181374][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 777.186392][ C0] ? __lock_acquire+0x4a5/0x2630 [ 777.191319][ C0] ? process_backlog+0x32a/0x1580 [ 777.196328][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 777.202205][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 777.208608][ C0] ? lock_acquire+0x1b1/0x370 [ 777.213273][ C0] ? process_backlog+0x32a/0x1580 [ 777.218298][ C0] ? process_backlog+0x32a/0x1580 [ 777.223310][ C0] __netif_receive_skb+0x1f/0x120 [ 777.228321][ C0] process_backlog+0x37a/0x1580 [ 777.233162][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 777.238963][ C0] net_rx_action+0xa40/0xf20 [ 777.243550][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 777.248658][ C0] ? __print_lock_name+0x60/0x80 [ 777.253598][ C0] ? try_to_wake_up+0x153/0x1900 [ 777.258520][ C0] ? try_to_wake_up+0x153/0x1900 [ 777.263442][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 777.268630][ C0] ? sched_clock+0x38/0x60 [ 777.273123][ C0] ? sched_clock_cpu+0x6c/0x570 [ 777.277965][ C0] ? mark_held_locks+0x40/0x70 [ 777.282718][ C0] handle_softirqs+0x1ea/0xa00 [ 777.287488][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 777.292756][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 777.298388][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 777.304186][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 777.309799][ C0] do_softirq+0xac/0xe0 [ 777.313941][ C0] [ 777.316864][ C0] [ 777.319779][ C0] __local_bh_enable_ip+0xf8/0x120 [ 777.324876][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 777.330583][ C0] batadv_dat_purge+0x4b/0xa0 [ 777.335244][ C0] process_one_work+0xa0e/0x1980 [ 777.340191][ C0] ? __pfx_process_one_work+0x10/0x10 [ 777.345999][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 777.351374][ C0] rescuer_thread+0x905/0x14a0 [ 777.356132][ C0] ? rescuer_thread+0x240/0x14a0 [ 777.361052][ C0] ? rescuer_thread+0x118/0x14a0 [ 777.365976][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 777.371160][ C0] ? __kthread_parkme+0x18c/0x230 [ 777.376349][ C0] ? kthread+0x13a/0x450 [ 777.380580][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 777.385762][ C0] kthread+0x370/0x450 [ 777.389821][ C0] ? __pfx_kthread+0x10/0x10 [ 777.394403][ C0] ret_from_fork+0x72b/0xd50 [ 777.398983][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 777.404107][ C0] ? __switch_to+0x800/0x1100 [ 777.408791][ C0] ? __switch_to_asm+0x39/0x70 [ 777.413555][ C0] ? __pfx_kthread+0x10/0x10 [ 777.418149][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.422910][ C0] [ 778.572495][ C0] net_ratelimit: 10383 callbacks suppressed [ 778.572513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.590772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.603081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.616119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.628429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.640684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.652957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.665207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.677475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.689740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.663671][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.641786][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.657404][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.556626][ C0] net_ratelimit: 13772 callbacks suppressed [ 783.556642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.574873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.587276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.599729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.612057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.624321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.636593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.648849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.661146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.673408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)