last executing test programs: 5m33.001269295s ago: executing program 0 (id=7665): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000280)='<') 5m32.776754992s ago: executing program 0 (id=7669): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop5/hctx0/tags\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000100)=""/169, 0xa9) 5m32.595143107s ago: executing program 0 (id=7673): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/suspend_stats/last_failed_errno\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) 5m32.387428629s ago: executing program 0 (id=7677): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x80200, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x80044dfe, &(0x7f0000000140)="ca3d6a5ebd9aec38cd5e6138191b76900443c636e66d1b24ccd3cdff8a253b71a55c235a41a02d9526053ec40db9eba17dd281a1a153a55d6eab270f3cf95466065640fc46f5d4aedcc0037417c90a02cb4440e88fbb17fbf3f6bdc1f95d9fa559b881214c222dffdcb17dd3ee83e522615ee4cf5557dc51f77cd192c5a72201c71c3cc2e59ec9bce562f5e9f2642ae175030e2fc0a3223ec5c5c0cb4b1efc7bcf9e50b3f20e575871d2c639a0da3e06caf02996aca62ad000a22b0dac3b427cd0d2e5406a7f1f9fff643445242939364deca2a92ad0755d7598ac07b039423d31696a8b3d6bc6f9cb44") 5m32.13673055s ago: executing program 0 (id=7680): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 5m31.389057542s ago: executing program 0 (id=7689): mprotect$auto(0x1ffffffff000, 0x1000000000004, 0xa) syz_clone(0x8008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="8ab8") 5m30.886236303s ago: executing program 32 (id=7689): mprotect$auto(0x1ffffffff000, 0x1000000000004, 0xa) syz_clone(0x8008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="8ab8") 5.873932747s ago: executing program 3 (id=11799): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec26\x00', 0x1a1600, 0x0) ioctl$auto_CEC_RECEIVE(r0, 0xc0386106, 0x0) 5.756479915s ago: executing program 4 (id=11800): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 5.031714796s ago: executing program 4 (id=11805): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_ABSBIT(r0, 0x40045567, 0x0) 4.666474008s ago: executing program 4 (id=11806): setns(0xc9, 0x0) socket(0x27, 0x2, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x53) 4.637740876s ago: executing program 2 (id=11807): mmap$auto(0x200000000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) 4.404965124s ago: executing program 4 (id=11809): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = io_uring_setup$auto(0x7f, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vbi4\x00', 0x40200, 0x0) ioctl$auto(r1, 0xc0845658, r0) 4.35003093s ago: executing program 3 (id=11810): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) 4.317199265s ago: executing program 2 (id=11811): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown$auto(0x200000003, 0x2) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, 0x0, 0x0, 0x8) 4.307014864s ago: executing program 1 (id=11812): r0 = socket(0xa, 0x3, 0x5) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x80108907, 0x38) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 4.166410686s ago: executing program 4 (id=11813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0xa, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) 4.12072107s ago: executing program 3 (id=11814): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) io_uring_setup$auto(0x6, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1ff000) 4.037254079s ago: executing program 1 (id=11815): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x207fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 3.907692193s ago: executing program 4 (id=11816): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) gettimeofday$auto(&(0x7f00000000c0)={0x0, 0x4c}, 0x0) 3.852110002s ago: executing program 3 (id=11817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0x5, 0x0) 3.796868601s ago: executing program 2 (id=11818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) 3.7873778s ago: executing program 1 (id=11819): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25c7dbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) 3.620733247s ago: executing program 3 (id=11820): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x3b70, 0x0) 3.592354318s ago: executing program 2 (id=11821): socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2=0x7f000001, 0x4}, 0x6b) 3.581180781s ago: executing program 1 (id=11822): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40201, 0x0) ioctl$auto(r1, 0xc040564b, r0) 3.417136966s ago: executing program 3 (id=11823): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771fdc19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 3.391770933s ago: executing program 2 (id=11824): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0x5, 0x0, 0x400) 3.373917767s ago: executing program 1 (id=11825): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) write$auto(r0, 0x0, 0x6) 3.192905768s ago: executing program 2 (id=11826): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x9, 0x2) 0s ago: executing program 1 (id=11827): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x6a) kernel console output (not intermixed with test programs): 0 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.662473][T22422] RSP: 002b:00007efea2b059f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 553.662532][T22422] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007efea1b9e019 [ 553.662547][T22422] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 553.662562][T22422] RBP: 00007efea2b06030 R08: 0000000000000001 R09: 000000000000000b [ 553.662576][T22422] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 553.662590][T22422] R13: 00007efea1e26038 R14: 00007efea1e25fa0 R15: 00007ffdb7632b28 [ 553.662620][T22422] [ 553.877231][T22422] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 553.886084][T22422] audit: out of memory in audit_log_start [ 554.248103][T22436] tipc: Started in network mode [ 554.267448][T22436] tipc: Node identity ee00, cluster identity 4711 [ 554.294746][T22436] tipc: Node number set to 60928 [ 556.973364][T22512] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 557.164719][T22516] MTRR 1 not used [ 557.986186][T22537] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 559.314249][ T29] audit: type=1326 audit(4294967472.624:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.8212" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47b7d9e019 code=0x0 [ 560.071681][T22575] netlink: 342 bytes leftover after parsing attributes in process `syz.3.8220'. [ 560.152280][T22575] Zero length message leads to an empty skb [ 560.424734][T22581] block nbd2: not configured, cannot reconfigure [ 560.876503][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.887429][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.164798][T22597] tipc: Started in network mode [ 561.202479][T22597] tipc: Node identity ee00, cluster identity 4711 [ 561.255686][T22597] tipc: Node number set to 60928 [ 561.821379][T22615] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 561.868509][T22619] program syz.2.8240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.275517][T22654] netlink: 'syz.4.8258': attribute type 11 has an invalid length. [ 563.323910][T22654] netlink: 'syz.4.8258': attribute type 11 has an invalid length. [ 563.378621][T22654] netlink: 'syz.4.8258': attribute type 11 has an invalid length. [ 563.424041][T22654] netlink: 'syz.4.8258': attribute type 11 has an invalid length. [ 565.679262][T22717] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 566.321465][T22734] aoe: could not set interface list: too many interfaces [ 566.555485][T22736] netlink: 'syz.4.8294': attribute type 4 has an invalid length. [ 566.604022][T22736] netlink: 'syz.4.8294': attribute type 1 has an invalid length. [ 568.816953][T22795] netlink: 'syz.4.8321': attribute type 1 has an invalid length. [ 568.966413][T22799] netlink: 'syz.2.8323': attribute type 1 has an invalid length. [ 569.491962][T22814] netlink: 'syz.2.8330': attribute type 12 has an invalid length. [ 570.515205][T22850] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 572.277085][T22897] netlink: 'syz.2.8370': attribute type 1 has an invalid length. [ 572.819395][T22913] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 572.873799][T22913] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 573.776433][T22942] netlink: 'syz.1.8390': attribute type 1 has an invalid length. [ 574.119283][T22951] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.558561][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8401'. [ 575.749675][T22993] netlink: 'syz.3.8414': attribute type 11 has an invalid length. [ 576.264094][T23006] netlink: 'syz.3.8418': attribute type 1 has an invalid length. [ 577.078655][T22990] kexec: Could not allocate control_code_buffer [ 577.208969][T23023] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 577.416627][T23027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 578.430203][T23060] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 578.809536][T23052] could not allocate digest TFM handle [ 579.052796][T10961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.237145][T10961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.441039][T10961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.744257][T10961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.915776][T16034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.933488][T16034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.945651][T16034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.953949][T16034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.965323][T16034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.291981][T23094] netlink: 'syz.2.8460': attribute type 1 has an invalid length. [ 580.767171][T10961] bridge_slave_1: left allmulticast mode [ 580.810888][T10961] bridge_slave_1: left promiscuous mode [ 580.857333][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.933688][T10961] bridge_slave_0: left allmulticast mode [ 580.976970][T10961] bridge_slave_0: left promiscuous mode [ 581.010990][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.592454][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.628997][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.649766][T10961] bond0 (unregistering): Released all slaves [ 581.765483][T10961] : left promiscuous mode [ 582.039098][T16034] Bluetooth: hci3: command tx timeout [ 582.259459][T23142] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 582.746827][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 583.756787][T10961] hsr_slave_0: left promiscuous mode [ 583.788492][T10961] hsr_slave_1: left promiscuous mode [ 583.828618][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.873946][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.929514][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.973995][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.028620][T23181] openvswitch: netlink: IPv4 tunnel dst address is zero [ 584.108612][T16034] Bluetooth: hci3: command tx timeout [ 584.114917][T10961] veth1_macvtap: left promiscuous mode [ 584.158378][T10961] veth0_macvtap: left promiscuous mode [ 584.207541][T10961] veth1_vlan: left promiscuous mode [ 584.230774][T10961] veth0_vlan: left promiscuous mode [ 585.214587][T10961] team0 (unregistering): Port device team_slave_1 removed [ 585.257798][T10961] team0 (unregistering): Port device team_slave_0 removed [ 585.602146][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 586.185547][T16034] Bluetooth: hci3: command tx timeout [ 586.815250][T23082] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.848922][T23082] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.883775][T23082] bridge_slave_0: entered allmulticast mode [ 586.925933][T23082] bridge_slave_0: entered promiscuous mode [ 586.967916][T23082] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.027169][T23082] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.072638][T23082] bridge_slave_1: entered allmulticast mode [ 587.125921][T23082] bridge_slave_1: entered promiscuous mode [ 587.298097][T23082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.379355][T23082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.625449][T23082] team0: Port device team_slave_0 added [ 587.680801][T23082] team0: Port device team_slave_1 added [ 587.900515][T23082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.944307][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.100947][T23082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.160373][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 588.199924][T23082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.232135][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.270186][T16034] Bluetooth: hci3: command tx timeout [ 588.316292][T23265] netlink: Conntrack attr has 5 unknown bytes [ 588.358952][T23082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.603968][T23082] hsr_slave_0: entered promiscuous mode [ 588.639055][T23082] hsr_slave_1: entered promiscuous mode [ 588.671365][T23082] debugfs: 'hsr0' already exists in 'hsr' [ 588.696746][T23082] Cannot create hsr debugfs directory [ 589.310017][T23287] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 591.441978][T23331] netlink: NAT attribute has 5 unknown bytes [ 591.986119][T23082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 592.484167][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.535910][T23082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 592.637049][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.681213][T23082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 592.777230][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.825123][T23082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 592.987960][T23082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.464509][T23082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.586887][T23082] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.706809][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.714035][T11761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.791111][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.798363][T11761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.247003][T23398] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 594.323143][T23398] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 594.604464][T23384] FAULT_INJECTION: forcing a failure. [ 594.604464][T23384] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 594.701908][T23384] CPU: 0 UID: 0 PID: 23384 Comm: syz.2.8554 Tainted: G U L syzkaller #0 PREEMPT(full) [ 594.701949][T23384] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 594.701958][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.701972][T23384] Call Trace: [ 594.701980][T23384] [ 594.701988][T23384] dump_stack_lvl+0x100/0x190 [ 594.702022][T23384] should_fail_ex.cold+0x5/0xa [ 594.702046][T23384] ? prepare_alloc_pages+0x16d/0x5f0 [ 594.702085][T23384] should_fail_alloc_page+0xeb/0x140 [ 594.702123][T23384] prepare_alloc_pages+0x1f0/0x5f0 [ 594.702159][T23384] ? rcu_read_unlock+0x17/0x60 [ 594.702200][T23384] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 594.702231][T23384] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 594.702260][T23384] ? try_to_migrate_one+0x119e/0x3000 [ 594.702288][T23384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.702321][T23384] ? __pfx_try_to_migrate_one+0x10/0x10 [ 594.702343][T23384] ? __lock_acquire+0x49f/0x1a40 [ 594.702393][T23384] ? reacquire_held_locks+0xce/0x1e0 [ 594.702432][T23384] ? folio_lock_anon_vma_read+0x348/0xe30 [ 594.702460][T23384] ? rcu_is_watching+0x12/0xc0 [ 594.702489][T23384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.702528][T23384] ? policy_nodemask+0xed/0x4f0 [ 594.702566][T23384] alloc_pages_mpol+0x1fb/0x540 [ 594.702603][T23384] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 594.702654][T23384] folio_alloc_mpol_noprof+0x36/0x260 [ 594.702697][T23384] alloc_migration_target_by_mpol+0x2c1/0x650 [ 594.702745][T23384] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 594.702789][T23384] ? __pfx___might_resched+0x10/0x10 [ 594.702828][T23384] ? folio_get_anon_vma+0x16b/0x980 [ 594.702855][T23384] migrate_pages_batch+0x5dc/0x45c0 [ 594.702897][T23384] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 594.702950][T23384] ? __pfx_migrate_pages_batch+0x10/0x10 [ 594.702997][T23384] ? __pfx_remove_migration_pte+0x10/0x10 [ 594.703044][T23384] migrate_pages_sync+0x12c/0x880 [ 594.703084][T23384] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 594.703129][T23384] ? vma_migratable+0x380/0x450 [ 594.703169][T23384] ? __pfx_migrate_pages_sync+0x10/0x10 [ 594.703205][T23384] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 594.703257][T23384] migrate_pages+0x1a83/0x2850 [ 594.703300][T23384] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 594.703349][T23384] ? __pfx_migrate_pages+0x10/0x10 [ 594.703388][T23384] ? mas_next_slot+0x10a3/0x1960 [ 594.703500][T23384] ? do_mbind+0x555/0xfd0 [ 594.703533][T23384] do_mbind+0x5a4/0xfd0 [ 594.703564][T23384] ? __pfx_do_mbind+0x10/0x10 [ 594.703588][T23384] ? find_held_lock+0x2b/0x80 [ 594.703630][T23384] ? ksys_write+0x190/0x250 [ 594.703665][T23384] ? __pfx_get_nodes+0x10/0x10 [ 594.703705][T23384] kernel_mbind+0x1b7/0x200 [ 594.703731][T23384] ? __pfx_kernel_mbind+0x10/0x10 [ 594.703764][T23384] do_syscall_64+0x115/0x840 [ 594.703794][T23384] ? clear_bhb_loop+0x40/0x90 [ 594.703825][T23384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.703849][T23384] RIP: 0033:0x7f47b7d9e019 [ 594.703870][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.703893][T23384] RSP: 002b:00007f47b8d12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 594.703917][T23384] RAX: ffffffffffffffda RBX: 00007f47b8025fa0 RCX: 00007f47b7d9e019 [ 594.703933][T23384] RDX: 0000000100000000 RSI: 0800000100000004 RDI: 0000000000002000 [ 594.703948][T23384] RBP: 00007f47b7e3500c R08: 0000000000001003 R09: 0000000000000002 [ 594.703962][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.703976][T23384] R13: 00007f47b8026038 R14: 00007f47b8025fa0 R15: 00007fff87d7ddc8 [ 594.704006][T23384] [ 596.819563][T23082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.036720][T23082] veth0_vlan: entered promiscuous mode [ 597.112133][T23082] veth1_vlan: entered promiscuous mode [ 597.288990][T23082] veth0_macvtap: entered promiscuous mode [ 597.366461][T23082] veth1_macvtap: entered promiscuous mode [ 597.435795][T23453] netlink: 'syz.4.8572': attribute type 11 has an invalid length. [ 597.473828][T23082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.495618][T16034] Bluetooth: hci1: SCO packet too small [ 597.550814][T23082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.657546][T10961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.724267][T10961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.860238][T10961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.915253][T10961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.051277][T23464] netlink: 'syz.1.8576': attribute type 23 has an invalid length. [ 598.427557][T10961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.486134][T10961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.622193][T23063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.689692][T23063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.127473][T23517] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 601.017509][T23542] &#$@\]\-: entered promiscuous mode [ 602.218088][T23578] openvswitch: netlink: Flow key attr not present in new flow. [ 603.042090][T23600] netlink: 'syz.4.8628': attribute type 1 has an invalid length. [ 603.763228][T23625] ucma_write: process 4351 (syz.2.8640) changed security contexts after opening file descriptor, this is not allowed. [ 604.065912][T23635] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 604.543207][T23654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.566432][T23716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8683'. [ 607.509275][T23745] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12) [ 608.951194][T23795] netlink: Setting conntrack mark requires 'commit' flag. [ 609.792735][T16034] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 610.126959][T23822] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 610.684824][T23837] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 610.768582][T23837] CPU: 0 UID: 0 PID: 23837 Comm: syz.1.8738 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.768623][T23837] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.768632][T23837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.768647][T23837] Call Trace: [ 610.768654][T23837] [ 610.768663][T23837] dump_stack_lvl+0x100/0x190 [ 610.768694][T23837] sysfs_warn_dup.cold+0x1c/0x28 [ 610.768732][T23837] sysfs_do_create_link_sd+0x113/0x140 [ 610.768774][T23837] sysfs_create_link+0x61/0xc0 [ 610.768811][T23837] device_add+0x675/0x1970 [ 610.768856][T23837] ? __pfx_device_add+0x10/0x10 [ 610.768895][T23837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.768933][T23837] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 610.769048][T23837] wiphy_register+0x2151/0x3110 [ 610.769082][T23837] ? __pfx_wiphy_register+0x10/0x10 [ 610.769107][T23837] ? __asan_memset+0x23/0x50 [ 610.769134][T23837] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 610.769233][T23837] ieee80211_register_hw+0x3053/0x4580 [ 610.769307][T23837] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 610.769342][T23837] ? __pfx___debug_object_init+0x10/0x10 [ 610.769394][T23837] ? find_held_lock+0x2b/0x80 [ 610.769427][T23837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.769465][T23837] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 610.769494][T23837] ? __hrtimer_setup+0x208/0x330 [ 610.769524][T23837] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 610.769599][T23837] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 610.769636][T23837] ? hwsim_new_radio_nl+0xbcf/0x13f0 [ 610.769675][T23837] hwsim_new_radio_nl+0xc6b/0x13f0 [ 610.769712][T23837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.769755][T23837] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 610.769832][T23837] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 610.769872][T23837] genl_family_rcv_msg_doit+0x214/0x300 [ 610.769906][T23837] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.769938][T23837] ? genl_get_cmd+0x3e7/0x760 [ 610.769973][T23837] ? bpf_lsm_capable+0x9/0x10 [ 610.770001][T23837] ? security_capable+0x80/0x260 [ 610.770064][T23837] ? ns_capable+0xd2/0xf0 [ 610.770092][T23837] genl_rcv_msg+0x560/0x800 [ 610.770127][T23837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.770160][T23837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.770204][T23837] netlink_rcv_skb+0x159/0x420 [ 610.770231][T23837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.770263][T23837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.770301][T23837] ? netlink_deliver_tap+0x1ae/0xcc0 [ 610.770330][T23837] genl_rcv+0x28/0x40 [ 610.770356][T23837] netlink_unicast+0x585/0x850 [ 610.770394][T23837] ? __pfx_netlink_unicast+0x10/0x10 [ 610.770430][T23837] netlink_sendmsg+0x8b0/0xda0 [ 610.770461][T23837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.770492][T23837] ? apparmor_socket_sendmsg+0x15b/0x270 [ 610.770552][T23837] ____sys_sendmsg+0xa4d/0xbe0 [ 610.770596][T23837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.770625][T23837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.770663][T23837] ___sys_sendmsg+0x190/0x1e0 [ 610.770702][T23837] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.770726][T23837] ? __lock_acquire+0x49f/0x1a40 [ 610.770812][T23837] __sys_sendmsg+0x160/0x210 [ 610.770848][T23837] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.770898][T23837] do_syscall_64+0x115/0x840 [ 610.770928][T23837] ? clear_bhb_loop+0x40/0x90 [ 610.770958][T23837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.770983][T23837] RIP: 0033:0x7fb70859e019 [ 610.771004][T23837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.771026][T23837] RSP: 002b:00007fb709429028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.771049][T23837] RAX: ffffffffffffffda RBX: 00007fb708825fa0 RCX: 00007fb70859e019 [ 610.771065][T23837] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 610.771080][T23837] RBP: 00007fb70863500c R08: 0000000000000000 R09: 0000000000000000 [ 610.771094][T23837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.771108][T23837] R13: 00007fb708826038 R14: 00007fb708825fa0 R15: 00007ffea937bf88 [ 610.771139][T23837] [ 612.015352][T23868] openvswitch: netlink: Missing valid actions attribute. [ 612.549199][T23884] dyndbg: expected <4096 bytes into control [ 613.266164][T23906] netlink: 'syz.4.8771': attribute type 3 has an invalid length. [ 614.229664][T23936] phram: parameter too long [ 614.441162][T23948] openvswitch: netlink: Multiple metadata blocks provided [ 614.935025][T23962] netlink: 'syz.3.8798': attribute type 1 has an invalid length. [ 615.521365][T23981] vmstat_refresh: nr_hugetlb -2048 [ 615.991416][T23993] netlink: 'syz.1.8813': attribute type 11 has an invalid length. [ 616.331039][T23998] &#$@\]\-: entered promiscuous mode [ 619.449705][T24082] netlink: 'syz.2.8856': attribute type 3 has an invalid length. [ 619.748846][T24091] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 619.817536][T24091] CPU: 0 UID: 0 PID: 24091 Comm: syz.2.8859 Tainted: G U L syzkaller #0 PREEMPT(full) [ 619.817577][T24091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 619.817586][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.817600][T24091] Call Trace: [ 619.817608][T24091] [ 619.817617][T24091] dump_stack_lvl+0x100/0x190 [ 619.817649][T24091] sysfs_warn_dup.cold+0x1c/0x28 [ 619.817686][T24091] sysfs_do_create_link_sd+0x113/0x140 [ 619.817727][T24091] sysfs_create_link+0x61/0xc0 [ 619.817764][T24091] device_add+0x675/0x1970 [ 619.817807][T24091] ? __pfx_device_add+0x10/0x10 [ 619.817845][T24091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.817894][T24091] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 619.817936][T24091] wiphy_register+0x2151/0x3110 [ 619.817970][T24091] ? __pfx_wiphy_register+0x10/0x10 [ 619.817995][T24091] ? __asan_memset+0x23/0x50 [ 619.818022][T24091] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 619.818070][T24091] ieee80211_register_hw+0x3053/0x4580 [ 619.818119][T24091] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 619.818153][T24091] ? __pfx___debug_object_init+0x10/0x10 [ 619.818197][T24091] ? find_held_lock+0x2b/0x80 [ 619.818229][T24091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.818265][T24091] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 619.818292][T24091] ? __hrtimer_setup+0x208/0x330 [ 619.818322][T24091] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 619.818378][T24091] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 619.818414][T24091] ? hwsim_new_radio_nl+0xbcf/0x13f0 [ 619.818453][T24091] hwsim_new_radio_nl+0xc6b/0x13f0 [ 619.818489][T24091] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 619.818531][T24091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 619.818565][T24091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 619.818604][T24091] genl_family_rcv_msg_doit+0x214/0x300 [ 619.818638][T24091] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.818668][T24091] ? genl_get_cmd+0x3e7/0x760 [ 619.818703][T24091] ? bpf_lsm_capable+0x9/0x10 [ 619.818730][T24091] ? security_capable+0x80/0x260 [ 619.818756][T24091] ? ns_capable+0xd2/0xf0 [ 619.818783][T24091] genl_rcv_msg+0x560/0x800 [ 619.818817][T24091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.818854][T24091] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 619.818907][T24091] netlink_rcv_skb+0x159/0x420 [ 619.818933][T24091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.818965][T24091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.819004][T24091] ? netlink_deliver_tap+0x1ae/0xcc0 [ 619.819032][T24091] genl_rcv+0x28/0x40 [ 619.819059][T24091] netlink_unicast+0x585/0x850 [ 619.819089][T24091] ? __pfx_netlink_unicast+0x10/0x10 [ 619.819123][T24091] netlink_sendmsg+0x8b0/0xda0 [ 619.819154][T24091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.819184][T24091] ? apparmor_socket_sendmsg+0x15b/0x270 [ 619.819215][T24091] ____sys_sendmsg+0xa4d/0xbe0 [ 619.819237][T24091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.819266][T24091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.819288][T24091] ? futex_hash+0x311/0x400 [ 619.819317][T24091] ? plist_del+0x308/0x510 [ 619.819343][T24091] ___sys_sendmsg+0x190/0x1e0 [ 619.819371][T24091] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.819394][T24091] ? __lock_acquire+0x49f/0x1a40 [ 619.819432][T24091] ? futex_wake+0x220/0x5e0 [ 619.819495][T24091] __sys_sendmsg+0x160/0x210 [ 619.819529][T24091] ? __pfx___sys_sendmsg+0x10/0x10 [ 619.819578][T24091] do_syscall_64+0x115/0x840 [ 619.819608][T24091] ? clear_bhb_loop+0x40/0x90 [ 619.819637][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.819661][T24091] RIP: 0033:0x7f47b7d9e019 [ 619.819700][T24091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.819723][T24091] RSP: 002b:00007f47b8d12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.819746][T24091] RAX: ffffffffffffffda RBX: 00007f47b8025fa0 RCX: 00007f47b7d9e019 [ 619.819761][T24091] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 619.819776][T24091] RBP: 00007f47b7e3500c R08: 0000000000000000 R09: 0000000000000000 [ 619.819790][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.819804][T24091] R13: 00007f47b8026038 R14: 00007f47b8025fa0 R15: 00007fff87d7ddc8 [ 619.819835][T24091] [ 621.970759][T24139] openvswitch: netlink: Key type 29 is not supported [ 621.994771][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.002900][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.867648][T24195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8908'. [ 624.140333][T24201] process 'syz.3.8911' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 624.950522][T24225] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 626.598879][T24266] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 627.396498][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8951'. [ 627.453854][T24283] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 627.995003][ T29] audit: type=1107 audit(4294967541.661:40): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 628.086392][ T29] audit: type=1107 audit(4294967541.711:41): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 629.021646][T24328] netlink: 'syz.1.8970': attribute type 2 has an invalid length. [ 629.338421][T24340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8974'. [ 634.090690][T24474] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 634.253839][T24478] openvswitch: netlink: Multiple metadata blocks provided [ 635.133925][T24501] .^: entered promiscuous mode [ 635.547850][T24512] FAULT_INJECTION: forcing a failure. [ 635.547850][T24512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.632929][T24512] CPU: 0 UID: 0 PID: 24512 Comm: syz.3.9055 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.632971][T24512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.632980][T24512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.632994][T24512] Call Trace: [ 635.633002][T24512] [ 635.633011][T24512] dump_stack_lvl+0x100/0x190 [ 635.633043][T24512] should_fail_ex.cold+0x5/0xa [ 635.633066][T24512] ? prepare_alloc_pages+0x16d/0x5f0 [ 635.633104][T24512] should_fail_alloc_page+0xeb/0x140 [ 635.633141][T24512] prepare_alloc_pages+0x1f0/0x5f0 [ 635.633177][T24512] ? rcu_is_watching+0x12/0xc0 [ 635.633209][T24512] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 635.633251][T24512] ? find_held_lock+0x2b/0x80 [ 635.633282][T24512] ? rcu_read_unlock+0x17/0x60 [ 635.633320][T24512] ? rcu_read_unlock+0x17/0x60 [ 635.633358][T24512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.633386][T24512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.633417][T24512] ? rcu_is_watching+0x12/0xc0 [ 635.633446][T24512] ? trace_mm_page_alloc+0x164/0x1c0 [ 635.633483][T24512] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 635.633518][T24512] ? __lock_acquire+0x49f/0x1a40 [ 635.633555][T24512] ? __css_rstat_updated+0x1ce/0x5a0 [ 635.633598][T24512] ? __lock_acquire+0x49f/0x1a40 [ 635.633634][T24512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.633680][T24512] ? policy_nodemask+0xed/0x4f0 [ 635.633719][T24512] alloc_pages_mpol+0x1fb/0x540 [ 635.633756][T24512] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 635.633793][T24512] ? find_held_lock+0x2b/0x80 [ 635.633822][T24512] ? __pud_alloc+0x4f6/0x690 [ 635.633857][T24512] ? __pud_alloc+0x4f6/0x690 [ 635.633896][T24512] alloc_pages_noprof+0x1a/0x160 [ 635.633919][T24512] __pmd_alloc+0x3b/0x950 [ 635.633953][T24512] ? __pud_alloc+0x4fb/0x690 [ 635.633990][T24512] walk_to_pmd+0x3a3/0x4c0 [ 635.634030][T24512] get_locked_pte+0x25/0xc0 [ 635.634068][T24512] map_ldt_struct+0x3c1/0xa70 [ 635.634111][T24512] ? __pfx_map_ldt_struct+0x10/0x10 [ 635.634147][T24512] ? alloc_pages_noprof+0xf9/0x160 [ 635.634174][T24512] write_ldt+0x6d3/0xd40 [ 635.634213][T24512] ? __pfx_write_ldt+0x10/0x10 [ 635.634249][T24512] ? xfd_validate_state+0x129/0x190 [ 635.634286][T24512] __x64_sys_modify_ldt+0xb1/0x170 [ 635.634322][T24512] do_syscall_64+0x115/0x840 [ 635.634353][T24512] ? clear_bhb_loop+0x40/0x90 [ 635.634387][T24512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.634412][T24512] RIP: 0033:0x7fcbd3b9e019 [ 635.634432][T24512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.634455][T24512] RSP: 002b:00007fcbd1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 635.634478][T24512] RAX: ffffffffffffffda RBX: 00007fcbd3e25fa0 RCX: 00007fcbd3b9e019 [ 635.634494][T24512] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 635.634508][T24512] RBP: 00007fcbd3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 635.634523][T24512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.634537][T24512] R13: 00007fcbd3e26038 R14: 00007fcbd3e25fa0 R15: 00007ffcb4011ad8 [ 635.634567][T24512] [ 637.140269][T24553] .^: entered promiscuous mode [ 639.361091][T24610] netlink: 'syz.4.9105': attribute type 1 has an invalid length. [ 640.314067][T24638] nbd: must specify a size in bytes for the device [ 642.394981][T24708] ======================================================= [ 642.394981][T24708] WARNING: The mand mount option has been deprecated and [ 642.394981][T24708] and is ignored by this kernel. Remove the mand [ 642.394981][T24708] option from the mount to silence this warning. [ 642.394981][T24708] ======================================================= [ 642.680307][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9148'. [ 642.736120][T24718] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 644.443817][T10881] Bluetooth: hci0: command 0x0406 tx timeout [ 644.801503][T24786] FAULT_INJECTION: forcing a failure. [ 644.801503][T24786] name failslab, interval 1, probability 0, space 0, times 0 [ 644.905786][T24786] CPU: 0 UID: 0 PID: 24786 Comm: syz.2.9179 Tainted: G U L syzkaller #0 PREEMPT(full) [ 644.905828][T24786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 644.905837][T24786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.905857][T24786] Call Trace: [ 644.905864][T24786] [ 644.905873][T24786] dump_stack_lvl+0x100/0x190 [ 644.905906][T24786] should_fail_ex.cold+0x5/0xa [ 644.905933][T24786] should_failslab+0xc2/0x120 [ 644.905968][T24786] kmem_cache_alloc_noprof+0x91/0x6a0 [ 644.905998][T24786] ? d_instantiate+0x8a/0xb0 [ 644.906027][T24786] ? d_instantiate+0x8a/0xb0 [ 644.906062][T24786] ? alloc_empty_file+0x5b/0x1c0 [ 644.906099][T24786] alloc_empty_file+0x5b/0x1c0 [ 644.906138][T24786] alloc_file_pseudo+0x183/0x290 [ 644.906172][T24786] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 644.906213][T24786] __shmem_file_setup+0x205/0x460 [ 644.906252][T24786] ? __pfx___shmem_file_setup+0x10/0x10 [ 644.906292][T24786] ? vm_area_alloc+0x1f/0x160 [ 644.906318][T24786] shmem_zero_setup+0x96/0x1b0 [ 644.906348][T24786] __mmap_region+0x24ef/0x2db0 [ 644.906379][T24786] ? __pfx___mmap_region+0x10/0x10 [ 644.906406][T24786] ? do_raw_spin_lock+0x128/0x260 [ 644.906434][T24786] ? find_held_lock+0x2b/0x80 [ 644.906463][T24786] ? debug_object_activate+0x343/0x4b0 [ 644.906500][T24786] ? debug_object_activate+0x343/0x4b0 [ 644.906543][T24786] ? debug_object_activate+0x343/0x4b0 [ 644.906583][T24786] ? __pfx_debug_object_activate+0x10/0x10 [ 644.906619][T24786] ? __lock_acquire+0x49f/0x1a40 [ 644.906661][T24786] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 644.906715][T24786] ? lockdep_hardirqs_on+0x78/0x100 [ 644.906745][T24786] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 644.906812][T24786] ? preempt_schedule_thunk+0x16/0x40 [ 644.906863][T24786] mmap_region+0x35d/0x620 [ 644.906892][T24786] ? rcu_is_watching+0x12/0xc0 [ 644.906922][T24786] ? __pfx_mmap_region+0x10/0x10 [ 644.906952][T24786] ? cap_mmap_addr+0x4b/0x120 [ 644.907043][T24786] ? bpf_lsm_mmap_addr+0x9/0x30 [ 644.907066][T24786] ? security_mmap_addr+0x71/0x1e0 [ 644.907100][T24786] ? __get_unmapped_area+0x255/0x3e0 [ 644.907139][T24786] do_mmap+0xc63/0x12f0 [ 644.907178][T24786] ? __pfx_do_mmap+0x10/0x10 [ 644.907213][T24786] ? __pfx_down_write_killable+0x10/0x10 [ 644.907253][T24786] vm_mmap_pgoff+0x29e/0x470 [ 644.907292][T24786] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 644.907331][T24786] ? __pfx_do_futex+0x10/0x10 [ 644.907363][T24786] ksys_mmap_pgoff+0xe4/0x610 [ 644.907397][T24786] ? __x64_sys_futex+0x358/0x4d0 [ 644.907424][T24786] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 644.907458][T24786] ? xfd_validate_state+0x129/0x190 [ 644.907492][T24786] __x64_sys_mmap+0x125/0x190 [ 644.907525][T24786] do_syscall_64+0x115/0x840 [ 644.907554][T24786] ? clear_bhb_loop+0x40/0x90 [ 644.907583][T24786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.907608][T24786] RIP: 0033:0x7f47b7d9e019 [ 644.907628][T24786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.907651][T24786] RSP: 002b:00007f47b8d12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 644.907673][T24786] RAX: ffffffffffffffda RBX: 00007f47b8025fa0 RCX: 00007f47b7d9e019 [ 644.907689][T24786] RDX: 0000000000000004 RSI: 000000000202000d RDI: 0000000000000000 [ 644.907704][T24786] RBP: 00007f47b7e3500c R08: ffffffffffffffff R09: 0000000000008000 [ 644.907719][T24786] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 644.907733][T24786] R13: 00007f47b8026038 R14: 00007f47b8025fa0 R15: 00007fff87d7ddc8 [ 644.907763][T24786] [ 645.520596][T24797] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.025578][T24844] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 647.541515][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9215'. [ 648.186003][T24876] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 648.258883][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9223'. [ 648.358981][T24882] netlink: 206 bytes leftover after parsing attributes in process `syz.2.9225'. [ 648.973153][T24895] NFSD: Failed to start, no listeners configured. [ 650.579151][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9252'. [ 650.647942][T24939] netlink: 29 bytes leftover after parsing attributes in process `syz.3.9252'. [ 651.084980][T24953] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 651.384692][T24967] nbd: must specify an index to disconnect [ 652.107597][T24987] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 652.815706][T25010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9286'. [ 652.851279][T25010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9286'. [ 653.126610][T25016] can: request_module (can-proto-3) failed. [ 653.787881][T25041] netlink: 'syz.3.9299': attribute type 2 has an invalid length. [ 654.675905][T25073] netlink: 'syz.2.9314': attribute type 2 has an invalid length. [ 655.595647][T25093] NFSD: Failed to start, no listeners configured. [ 656.185745][T25110] futex_wake_op: syz.3.9332 tries to shift op by -2048; fix this program [ 656.243731][T25110] futex_wake_op: syz.3.9332 tries to shift op by -2048; fix this program [ 656.843260][T25124] netlink: Invalid conntrack helper [ 658.520653][T25175] netlink: 'syz.2.9362': attribute type 8 has an invalid length. [ 658.793746][T25186] program syz.2.9368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.723582][T25207] netlink: ct family unspecified [ 659.853684][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9380'. [ 660.609957][T25237] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 661.255783][T25257] netlink: 'syz.4.9402': attribute type 11 has an invalid length. [ 661.297809][T25257] netlink: 'syz.4.9402': attribute type 11 has an invalid length. [ 661.344782][T25257] netlink: 'syz.4.9402': attribute type 11 has an invalid length. [ 664.952937][T25364] NFSD: Failed to start, no listeners configured. [ 665.351962][T25374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9457'. [ 666.038614][T25394] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9467'. [ 666.949501][T25421] NFSD: Failed to start, no listeners configured. [ 667.153113][T25429] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 668.163621][T25457] NFSD: Failed to start, no listeners configured. [ 671.552254][T25550] NFSD: Failed to start, no listeners configured. [ 673.384647][T25602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9567'. [ 673.582045][T25606] netlink: zone id is out of range [ 673.621455][T25606] netlink: zone id is out of range [ 673.639700][T25606] netlink: zone id is out of range [ 673.667524][T25606] netlink: zone id is out of range [ 673.693253][T25606] netlink: zone id is out of range [ 673.731106][T25606] netlink: zone id is out of range [ 673.765082][T25606] netlink: zone id is out of range [ 673.800804][T25606] netlink: zone id is out of range [ 673.830266][T25606] netlink: zone id is out of range [ 673.860229][T25606] netlink: zone id is out of range [ 674.209816][T25621] NFSD: Failed to start, no listeners configured. [ 677.891184][T25717] CIFS: VFS: Invalid SecurityFlags: [ 679.514964][T25769] net_ratelimit: 315 callbacks suppressed [ 679.514984][T25769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 682.148978][T25827] openvswitch: netlink: IP tunnel dst address not specified [ 682.179338][T25825] NFSD: Failed to start, no listeners configured. [ 683.117163][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.123672][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.217699][T25854] binder: 25852:25854 ioctl 400c620e 200000001f40 returned -22 [ 683.295951][T25853] NFSD: Failed to start, no listeners configured. [ 684.345320][T25886] NFSD: Failed to start, no listeners configured. [ 684.467798][T16034] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 684.537924][T25892] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 684.546245][T25892] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 684.558348][T25892] CPU: 0 UID: 0 PID: 25892 Comm: kworker/u11:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.558389][T25892] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.558398][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.558415][T25892] Workqueue: hci3 hci_rx_work [ 684.558447][T25892] Call Trace: [ 684.558455][T25892] [ 684.558465][T25892] dump_stack_lvl+0x100/0x190 [ 684.558494][T25892] sysfs_warn_dup.cold+0x1c/0x28 [ 684.558532][T25892] sysfs_create_dir_ns+0x24b/0x2b0 [ 684.558569][T25892] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 684.558605][T25892] ? find_held_lock+0x2b/0x80 [ 684.558635][T25892] ? kobject_add_internal+0x25f/0x930 [ 684.558675][T25892] ? kobject_add_internal+0x25f/0x930 [ 684.558717][T25892] ? do_raw_spin_unlock+0x145/0x1e0 [ 684.558746][T25892] kobject_add_internal+0x2c8/0x930 [ 684.558790][T25892] kobject_add+0x16a/0x1e0 [ 684.558811][T25892] ? __pfx_kobject_add+0x10/0x10 [ 684.558832][T25892] ? class_to_subsys+0x10f/0x150 [ 684.558861][T25892] ? kobject_put+0xb9/0x640 [ 684.558896][T25892] ? _raw_spin_unlock+0x28/0x50 [ 684.558928][T25892] device_add+0x294/0x1970 [ 684.558971][T25892] ? __pfx_dev_set_name+0x10/0x10 [ 684.558998][T25892] ? __pfx_device_add+0x10/0x10 [ 684.559037][T25892] ? mgmt_send_event_skb+0x2fb/0x460 [ 684.559076][T25892] hci_conn_add_sysfs+0x1a3/0x260 [ 684.559119][T25892] le_conn_complete_evt+0x11eb/0x1f60 [ 684.559157][T25892] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 684.559185][T25892] ? __pfx_bt_warn+0x10/0x10 [ 684.559206][T25892] ? hci_event_packet+0x186/0xcd0 [ 684.559241][T25892] hci_le_conn_complete_evt+0x23c/0x3a0 [ 684.559272][T25892] ? skb_pull_data+0x15f/0x1e0 [ 684.559300][T25892] hci_le_meta_evt+0x34a/0x5f0 [ 684.559332][T25892] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 684.559366][T25892] hci_event_packet+0x51c/0xcd0 [ 684.559395][T25892] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 684.559427][T25892] ? __pfx_hci_event_packet+0x10/0x10 [ 684.559459][T25892] ? kcov_remote_start+0x384/0x670 [ 684.559494][T25892] ? lockdep_hardirqs_on+0x78/0x100 [ 684.559531][T25892] hci_rx_work+0x451/0xfc0 [ 684.559565][T25892] process_one_work+0xa23/0x1940 [ 684.559614][T25892] ? __pfx_process_one_work+0x10/0x10 [ 684.559659][T25892] ? __pfx_hci_rx_work+0x10/0x10 [ 684.559690][T25892] worker_thread+0x5ef/0xe50 [ 684.559733][T25892] ? __pfx_worker_thread+0x10/0x10 [ 684.559771][T25892] ? kthread+0x13a/0x450 [ 684.559803][T25892] ? __pfx_worker_thread+0x10/0x10 [ 684.559837][T25892] kthread+0x370/0x450 [ 684.559869][T25892] ? __pfx_kthread+0x10/0x10 [ 684.559904][T25892] ret_from_fork+0x72b/0xd50 [ 684.559935][T25892] ? __pfx_ret_from_fork+0x10/0x10 [ 684.559965][T25892] ? rcu_is_watching+0x12/0xc0 [ 684.559994][T25892] ? __switch_to+0x800/0x10f0 [ 684.560032][T25892] ? __switch_to_asm+0x39/0x70 [ 684.560065][T25892] ? __pfx_kthread+0x10/0x10 [ 684.560106][T25892] ret_from_fork_asm+0x1a/0x30 [ 684.560154][T25892] [ 684.560302][T25892] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 684.884051][T25892] Bluetooth: hci3: failed to register connection device [ 686.541095][T25892] Bluetooth: hci3: command 0x2016 tx timeout [ 688.349723][T25892] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 688.398271][T25990] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 688.408459][T25990] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 688.419166][T25990] CPU: 0 UID: 0 PID: 25990 Comm: kworker/u11:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.419206][T25990] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.419216][T25990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.419233][T25990] Workqueue: hci1 hci_rx_work [ 688.419265][T25990] Call Trace: [ 688.419273][T25990] [ 688.419281][T25990] dump_stack_lvl+0x100/0x190 [ 688.419311][T25990] sysfs_warn_dup.cold+0x1c/0x28 [ 688.419348][T25990] sysfs_create_dir_ns+0x24b/0x2b0 [ 688.419387][T25990] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 688.419423][T25990] ? find_held_lock+0x2b/0x80 [ 688.419453][T25990] ? kobject_add_internal+0x25f/0x930 [ 688.419493][T25990] ? kobject_add_internal+0x25f/0x930 [ 688.419535][T25990] ? do_raw_spin_unlock+0x145/0x1e0 [ 688.419565][T25990] kobject_add_internal+0x2c8/0x930 [ 688.419610][T25990] kobject_add+0x16a/0x1e0 [ 688.419632][T25990] ? __pfx_kobject_add+0x10/0x10 [ 688.419652][T25990] ? class_to_subsys+0x10f/0x150 [ 688.419681][T25990] ? kobject_put+0xb9/0x640 [ 688.419716][T25990] ? _raw_spin_unlock+0x28/0x50 [ 688.419749][T25990] device_add+0x294/0x1970 [ 688.419789][T25990] ? __pfx_dev_set_name+0x10/0x10 [ 688.419816][T25990] ? __pfx_device_add+0x10/0x10 [ 688.419856][T25990] ? mgmt_send_event_skb+0x2fb/0x460 [ 688.419903][T25990] hci_conn_add_sysfs+0x1a3/0x260 [ 688.419940][T25990] le_conn_complete_evt+0x11eb/0x1f60 [ 688.419979][T25990] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 688.420007][T25990] ? __pfx_bt_warn+0x10/0x10 [ 688.420028][T25990] ? hci_event_packet+0x186/0xcd0 [ 688.420064][T25990] hci_le_conn_complete_evt+0x23c/0x3a0 [ 688.420095][T25990] ? skb_pull_data+0x15f/0x1e0 [ 688.420123][T25990] hci_le_meta_evt+0x34a/0x5f0 [ 688.420160][T25990] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 688.420194][T25990] hci_event_packet+0x51c/0xcd0 [ 688.420224][T25990] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 688.420256][T25990] ? __pfx_hci_event_packet+0x10/0x10 [ 688.420289][T25990] ? kcov_remote_start+0x384/0x670 [ 688.420324][T25990] ? lockdep_hardirqs_on+0x78/0x100 [ 688.420361][T25990] hci_rx_work+0x451/0xfc0 [ 688.420398][T25990] process_one_work+0xa23/0x1940 [ 688.420447][T25990] ? __pfx_process_one_work+0x10/0x10 [ 688.420492][T25990] ? __pfx_hci_rx_work+0x10/0x10 [ 688.420524][T25990] worker_thread+0x5ef/0xe50 [ 688.420568][T25990] ? __pfx_worker_thread+0x10/0x10 [ 688.420605][T25990] ? kthread+0x13a/0x450 [ 688.420636][T25990] ? __pfx_worker_thread+0x10/0x10 [ 688.420671][T25990] kthread+0x370/0x450 [ 688.420703][T25990] ? __pfx_kthread+0x10/0x10 [ 688.420738][T25990] ret_from_fork+0x72b/0xd50 [ 688.420770][T25990] ? __pfx_ret_from_fork+0x10/0x10 [ 688.420802][T25990] ? __switch_to+0x800/0x10f0 [ 688.420839][T25990] ? __switch_to_asm+0x39/0x70 [ 688.420872][T25990] ? __pfx_kthread+0x10/0x10 [ 688.420913][T25990] ret_from_fork_asm+0x1a/0x30 [ 688.420961][T25990] [ 688.421013][T25990] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 688.754027][T25990] Bluetooth: hci1: failed to register connection device [ 688.761939][T25990] Bluetooth: hci3: command 0x2016 tx timeout [ 690.284517][T26034] HfR: entered promiscuous mode [ 690.435155][T16034] Bluetooth: hci1: command 0x0c1a tx timeout [ 690.522786][T26044] netlink: 'syz.1.9775': attribute type 1 has an invalid length. [ 690.561907][T26044] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9775'. [ 690.588319][T26046] netlink: 'syz.4.9777': attribute type 1 has an invalid length. [ 690.619582][T26046] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9777'. [ 690.833055][T16034] Bluetooth: hci3: command 0x2016 tx timeout [ 692.119840][T26081] syz.3.9794 (26081) used greatest stack depth: 18472 bytes left [ 692.504573][T16034] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.902582][T16034] Bluetooth: hci3: command 0x2016 tx timeout [ 693.411019][T26126] openvswitch: netlink: Key type 261 is out of range max 32 [ 693.914764][T26139] netlink: Invalid conntrack timeout [ 694.175379][T16034] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 694.217473][T16034] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 694.226118][T16034] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 694.235610][T16034] CPU: 0 UID: 0 PID: 16034 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 694.235646][T16034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 694.235655][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.235670][T16034] Workqueue: hci0 hci_rx_work [ 694.235700][T16034] Call Trace: [ 694.235707][T16034] [ 694.235715][T16034] dump_stack_lvl+0x100/0x190 [ 694.235744][T16034] sysfs_warn_dup.cold+0x1c/0x28 [ 694.235779][T16034] sysfs_create_dir_ns+0x24b/0x2b0 [ 694.235814][T16034] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.235846][T16034] ? find_held_lock+0x2b/0x80 [ 694.235874][T16034] ? kobject_add_internal+0x25f/0x930 [ 694.235910][T16034] ? kobject_add_internal+0x25f/0x930 [ 694.235948][T16034] ? do_raw_spin_unlock+0x145/0x1e0 [ 694.235974][T16034] kobject_add_internal+0x2c8/0x930 [ 694.236013][T16034] kobject_add+0x16a/0x1e0 [ 694.236033][T16034] ? __pfx_kobject_add+0x10/0x10 [ 694.236051][T16034] ? class_to_subsys+0x10f/0x150 [ 694.236078][T16034] ? kobject_put+0xb9/0x640 [ 694.236109][T16034] ? _raw_spin_unlock+0x28/0x50 [ 694.236139][T16034] device_add+0x294/0x1970 [ 694.236176][T16034] ? __pfx_dev_set_name+0x10/0x10 [ 694.236199][T16034] ? __pfx_device_add+0x10/0x10 [ 694.236235][T16034] ? mgmt_send_event_skb+0x2fb/0x460 [ 694.236269][T16034] hci_conn_add_sysfs+0x1a3/0x260 [ 694.236310][T16034] le_conn_complete_evt+0x11eb/0x1f60 [ 694.236344][T16034] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.236369][T16034] ? __pfx_bt_warn+0x10/0x10 [ 694.236388][T16034] ? hci_event_packet+0x186/0xcd0 [ 694.236419][T16034] hci_le_conn_complete_evt+0x23c/0x3a0 [ 694.236447][T16034] ? skb_pull_data+0x15f/0x1e0 [ 694.236473][T16034] hci_le_meta_evt+0x34a/0x5f0 [ 694.236501][T16034] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 694.236532][T16034] hci_event_packet+0x51c/0xcd0 [ 694.236558][T16034] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.236587][T16034] ? __pfx_hci_event_packet+0x10/0x10 [ 694.236616][T16034] ? kcov_remote_start+0x384/0x670 [ 694.236648][T16034] ? lockdep_hardirqs_on+0x78/0x100 [ 694.236681][T16034] hci_rx_work+0x451/0xfc0 [ 694.236711][T16034] process_one_work+0xa23/0x1940 [ 694.236755][T16034] ? __pfx_process_one_work+0x10/0x10 [ 694.236795][T16034] ? __pfx_hci_rx_work+0x10/0x10 [ 694.236823][T16034] worker_thread+0x5ef/0xe50 [ 694.236862][T16034] ? __pfx_worker_thread+0x10/0x10 [ 694.236894][T16034] ? kthread+0x13a/0x450 [ 694.236927][T16034] ? __pfx_worker_thread+0x10/0x10 [ 694.236958][T16034] kthread+0x370/0x450 [ 694.237006][T16034] ? __pfx_kthread+0x10/0x10 [ 694.237039][T16034] ret_from_fork+0x72b/0xd50 [ 694.237070][T16034] ? __pfx_ret_from_fork+0x10/0x10 [ 694.237100][T16034] ? __switch_to+0x800/0x10f0 [ 694.237136][T16034] ? __switch_to_asm+0x39/0x70 [ 694.237167][T16034] ? __pfx_kthread+0x10/0x10 [ 694.237200][T16034] ret_from_fork_asm+0x1a/0x30 [ 694.237246][T16034] [ 694.237381][T16034] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.573589][T25992] Bluetooth: hci1: command 0x0c1a tx timeout [ 694.582928][T16034] Bluetooth: hci0: failed to register connection device [ 695.178020][T26163] netlink: 'syz.3.9832': attribute type 1 has an invalid length. [ 695.244954][T26163] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9832'. [ 696.245376][T25892] Bluetooth: hci0: command 0x0406 tx timeout [ 696.643784][T25892] Bluetooth: hci1: command 0x0c1a tx timeout [ 697.924654][T26251] netlink: 'syz.4.9875': attribute type 2 has an invalid length. [ 698.314380][T25892] Bluetooth: hci0: command 0x0406 tx timeout [ 700.303378][T25892] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 700.334502][T16034] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 700.342316][T16034] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 700.351807][T16034] CPU: 0 UID: 0 PID: 16034 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.351853][T16034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.351863][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.351879][T16034] Workqueue: hci2 hci_rx_work [ 700.351910][T16034] Call Trace: [ 700.351918][T16034] [ 700.351927][T16034] dump_stack_lvl+0x100/0x190 [ 700.351956][T16034] sysfs_warn_dup.cold+0x1c/0x28 [ 700.351994][T16034] sysfs_create_dir_ns+0x24b/0x2b0 [ 700.352032][T16034] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 700.352071][T16034] ? find_held_lock+0x2b/0x80 [ 700.352101][T16034] ? kobject_add_internal+0x25f/0x930 [ 700.352141][T16034] ? kobject_add_internal+0x25f/0x930 [ 700.352184][T16034] ? do_raw_spin_unlock+0x145/0x1e0 [ 700.352213][T16034] kobject_add_internal+0x2c8/0x930 [ 700.352257][T16034] kobject_add+0x16a/0x1e0 [ 700.352279][T16034] ? __pfx_kobject_add+0x10/0x10 [ 700.352299][T16034] ? class_to_subsys+0x10f/0x150 [ 700.352328][T16034] ? kobject_put+0xb9/0x640 [ 700.352364][T16034] ? _raw_spin_unlock+0x28/0x50 [ 700.352397][T16034] device_add+0x294/0x1970 [ 700.352437][T16034] ? __pfx_dev_set_name+0x10/0x10 [ 700.352464][T16034] ? __pfx_device_add+0x10/0x10 [ 700.352504][T16034] ? mgmt_send_event_skb+0x2fb/0x460 [ 700.352542][T16034] hci_conn_add_sysfs+0x1a3/0x260 [ 700.352578][T16034] le_conn_complete_evt+0x11eb/0x1f60 [ 700.352616][T16034] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 700.352643][T16034] ? __pfx_bt_warn+0x10/0x10 [ 700.352665][T16034] ? hci_event_packet+0x186/0xcd0 [ 700.352700][T16034] hci_le_conn_complete_evt+0x23c/0x3a0 [ 700.352731][T16034] ? skb_pull_data+0x15f/0x1e0 [ 700.352758][T16034] hci_le_meta_evt+0x34a/0x5f0 [ 700.352790][T16034] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 700.352824][T16034] hci_event_packet+0x51c/0xcd0 [ 700.352860][T16034] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 700.352893][T16034] ? __pfx_hci_event_packet+0x10/0x10 [ 700.352925][T16034] ? kcov_remote_start+0x384/0x670 [ 700.352960][T16034] ? lockdep_hardirqs_on+0x78/0x100 [ 700.352997][T16034] hci_rx_work+0x451/0xfc0 [ 700.353030][T16034] process_one_work+0xa23/0x1940 [ 700.353079][T16034] ? __pfx_process_one_work+0x10/0x10 [ 700.353124][T16034] ? __pfx_hci_rx_work+0x10/0x10 [ 700.353155][T16034] worker_thread+0x5ef/0xe50 [ 700.353199][T16034] ? __pfx_worker_thread+0x10/0x10 [ 700.353236][T16034] ? kthread+0x13a/0x450 [ 700.353268][T16034] ? __pfx_worker_thread+0x10/0x10 [ 700.353302][T16034] kthread+0x370/0x450 [ 700.353334][T16034] ? __pfx_kthread+0x10/0x10 [ 700.353369][T16034] ret_from_fork+0x72b/0xd50 [ 700.353401][T16034] ? __pfx_ret_from_fork+0x10/0x10 [ 700.353433][T16034] ? __switch_to+0x800/0x10f0 [ 700.353470][T16034] ? __switch_to_asm+0x39/0x70 [ 700.353504][T16034] ? __pfx_kthread+0x10/0x10 [ 700.353539][T16034] ret_from_fork_asm+0x1a/0x30 [ 700.353587][T16034] [ 700.870542][T25992] Bluetooth: hci0: command 0x0406 tx timeout [ 700.949313][T16034] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 700.964561][T16034] Bluetooth: hci2: failed to register connection device [ 702.373314][T16034] Bluetooth: hci2: command 0x0c1a tx timeout [ 702.922817][T26369] unsupported nla_type 113 [ 702.930538][T25892] Bluetooth: hci0: command 0x0406 tx timeout [ 703.461400][T26387] netlink: Unknown NAT attribute (type=262, max=9) [ 703.998719][T26405] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 704.442198][T25892] Bluetooth: hci2: command 0x0c1a tx timeout [ 705.221062][T26438] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 705.558625][T25892] Bluetooth: hci3: command 0x2016 tx timeout [ 705.671027][T26447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9961'. [ 705.950542][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9965'. [ 706.511473][T25990] Bluetooth: hci2: command 0x0c1a tx timeout [ 707.348867][T26497] openvswitch: netlink: Message has 4 unknown bytes. [ 707.433917][T26499] netlink: 'syz.2.9986': attribute type 2 has an invalid length. [ 708.581487][T16034] Bluetooth: hci2: command 0x0c1a tx timeout [ 709.661804][T16034] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 709.686848][T16034] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 709.694565][T16034] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 709.704210][T16034] CPU: 0 UID: 0 PID: 16034 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 709.704250][T16034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 709.704259][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.704275][T16034] Workqueue: hci1 hci_rx_work [ 709.704306][T16034] Call Trace: [ 709.704314][T16034] [ 709.704323][T16034] dump_stack_lvl+0x100/0x190 [ 709.704353][T16034] sysfs_warn_dup.cold+0x1c/0x28 [ 709.704391][T16034] sysfs_create_dir_ns+0x24b/0x2b0 [ 709.704428][T16034] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 709.704464][T16034] ? find_held_lock+0x2b/0x80 [ 709.704494][T16034] ? kobject_add_internal+0x25f/0x930 [ 709.704533][T16034] ? kobject_add_internal+0x25f/0x930 [ 709.704576][T16034] ? do_raw_spin_unlock+0x145/0x1e0 [ 709.704605][T16034] kobject_add_internal+0x2c8/0x930 [ 709.704652][T16034] kobject_add+0x16a/0x1e0 [ 709.704674][T16034] ? __pfx_kobject_add+0x10/0x10 [ 709.704695][T16034] ? class_to_subsys+0x10f/0x150 [ 709.704724][T16034] ? kobject_put+0xb9/0x640 [ 709.704760][T16034] ? _raw_spin_unlock+0x28/0x50 [ 709.704793][T16034] device_add+0x294/0x1970 [ 709.704832][T16034] ? __pfx_dev_set_name+0x10/0x10 [ 709.704859][T16034] ? __pfx_device_add+0x10/0x10 [ 709.704899][T16034] ? mgmt_send_event_skb+0x2fb/0x460 [ 709.704938][T16034] hci_conn_add_sysfs+0x1a3/0x260 [ 709.704974][T16034] le_conn_complete_evt+0x11eb/0x1f60 [ 709.705010][T16034] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 709.705038][T16034] ? __pfx_bt_warn+0x10/0x10 [ 709.705059][T16034] ? hci_event_packet+0x186/0xcd0 [ 709.705094][T16034] hci_le_conn_complete_evt+0x23c/0x3a0 [ 709.705125][T16034] ? skb_pull_data+0x15f/0x1e0 [ 709.705153][T16034] hci_le_meta_evt+0x34a/0x5f0 [ 709.705185][T16034] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 709.705225][T16034] hci_event_packet+0x51c/0xcd0 [ 709.705255][T16034] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 709.705287][T16034] ? __pfx_hci_event_packet+0x10/0x10 [ 709.705319][T16034] ? kcov_remote_start+0x384/0x670 [ 709.705355][T16034] ? lockdep_hardirqs_on+0x78/0x100 [ 709.705392][T16034] hci_rx_work+0x451/0xfc0 [ 709.705425][T16034] process_one_work+0xa23/0x1940 [ 709.705473][T16034] ? __pfx_process_one_work+0x10/0x10 [ 709.705518][T16034] ? __pfx_hci_rx_work+0x10/0x10 [ 709.705549][T16034] worker_thread+0x5ef/0xe50 [ 709.705593][T16034] ? __pfx_worker_thread+0x10/0x10 [ 709.705630][T16034] ? kthread+0x13a/0x450 [ 709.705661][T16034] ? __pfx_worker_thread+0x10/0x10 [ 709.705695][T16034] kthread+0x370/0x450 [ 709.705727][T16034] ? __pfx_kthread+0x10/0x10 [ 709.705762][T16034] ret_from_fork+0x72b/0xd50 [ 709.705794][T16034] ? __pfx_ret_from_fork+0x10/0x10 [ 709.705826][T16034] ? __switch_to+0x800/0x10f0 [ 709.705863][T16034] ? __switch_to_asm+0x39/0x70 [ 709.705896][T16034] ? __pfx_kthread+0x10/0x10 [ 709.705931][T16034] ret_from_fork_asm+0x1a/0x30 [ 709.705978][T16034] [ 710.302200][T16034] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 710.319485][T16034] Bluetooth: hci1: failed to register connection device [ 711.685096][T16034] Bluetooth: hci1: command 0x0c1a tx timeout [ 711.793587][T26607] netlink: 'syz.3.10034': attribute type 1 has an invalid length. [ 712.049504][T26613] capability: warning: `syz.1.10038' uses 32-bit capabilities (legacy support in use) [ 712.307993][T26619] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10041'. [ 712.803545][ T187] Process accounting resumed [ 713.006729][T26644] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10054'. [ 713.755828][T16034] Bluetooth: hci1: command 0x0c1a tx timeout [ 714.168919][T26679] syz_tun: tun_chr_ioctl cmd 35108 [ 715.409763][ T187] Process accounting resumed [ 715.823186][T16034] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.159534][T26745] netlink: 'syz.4.10101': attribute type 2 has an invalid length. [ 717.686964][T26791] netlink: 178 bytes leftover after parsing attributes in process `syz.4.10125'. [ 717.892611][T25990] Bluetooth: hci1: command 0x0c1a tx timeout [ 717.981466][T26803] syz.2.10130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 721.150236][T26896] netlink: 'syz.3.10174': attribute type 2 has an invalid length. [ 721.202944][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10174'. [ 722.395520][T26937] netlink: 'syz.2.10193': attribute type 1 has an invalid length. [ 724.727171][T27020] netlink: zone id is out of range [ 724.762625][T27020] netlink: zone id is out of range [ 724.790390][T27020] netlink: zone id is out of range [ 724.823036][T27020] netlink: zone id is out of range [ 724.853625][T27020] netlink: zone id is out of range [ 724.880184][T27020] netlink: zone id is out of range [ 724.907583][T27020] netlink: zone id is out of range [ 724.934727][T27020] netlink: zone id is out of range [ 724.961259][T27020] netlink: zone id is out of range [ 724.999222][T27020] netlink: zone id is out of range [ 725.117643][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10236'. [ 726.521329][T27077] nbd: couldn't find device at index 158 [ 730.453920][T27210] net_ratelimit: 52 callbacks suppressed [ 730.453939][T27210] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 730.787698][T27221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10327'. [ 732.222129][T27266] netlink: 'syz.3.10350': attribute type 11 has an invalid length. [ 732.264931][T27266] netlink: 'syz.3.10350': attribute type 11 has an invalid length. [ 732.310727][T27266] netlink: 'syz.3.10350': attribute type 11 has an invalid length. [ 733.027638][T27292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 735.888413][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10401'. [ 736.914971][T25990] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 738.330731][T27450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10437'. [ 738.668672][T27458] nbd: illegal input index -1024 [ 740.611428][T25990] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 740.611461][T25990] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 740.627467][T25990] Bluetooth: hci1: Dropping invalid advertising data [ 740.635159][T25990] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 740.635180][T25990] Bluetooth: hci1: Dropping invalid advertising data [ 740.649135][T25990] Bluetooth: hci1: unknown advertising packet type: 0x79 [ 740.649172][T25990] Bluetooth: hci1: Malformed LE Event: 0x02 [ 742.182380][T27560] netlink: 334 bytes leftover after parsing attributes in process `syz.4.10490'. [ 743.358452][T27594] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 743.517133][T27598] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.10508:27598 [ 744.246759][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.253120][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.125018][T27647] sd 0:0:1:0: PR command failed: 1026 [ 745.162799][T27647] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 745.180569][T27647] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 749.561052][T27771] FAULT_INJECTION: forcing a failure. [ 749.561052][T27771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.649676][T27771] CPU: 0 UID: 0 PID: 27771 Comm: syz.3.10592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 749.649719][T27771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 749.649728][T27771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.649743][T27771] Call Trace: [ 749.649751][T27771] [ 749.649760][T27771] dump_stack_lvl+0x100/0x190 [ 749.649793][T27771] should_fail_ex.cold+0x5/0xa [ 749.649825][T27771] ? prepare_alloc_pages+0x16d/0x5f0 [ 749.649868][T27771] should_fail_alloc_page+0xeb/0x140 [ 749.649906][T27771] prepare_alloc_pages+0x1f0/0x5f0 [ 749.649946][T27771] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 749.649978][T27771] ? __pfx___css_rstat_updated+0x10/0x10 [ 749.650026][T27771] ? rcu_is_watching+0x12/0xc0 [ 749.650055][T27771] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 749.650086][T27771] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 749.650117][T27771] ? find_held_lock+0x2b/0x80 [ 749.650146][T27771] ? rcu_read_unlock+0x17/0x60 [ 749.650183][T27771] ? rcu_read_unlock+0x17/0x60 [ 749.650226][T27771] ? __folio_mod_stat+0x1ce/0x250 [ 749.650288][T27771] ? split_huge_pmd_locked+0x31e/0x3040 [ 749.650317][T27771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.650362][T27771] ? policy_nodemask+0xed/0x4f0 [ 749.650400][T27771] alloc_pages_mpol+0x1fb/0x540 [ 749.650445][T27771] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 749.650484][T27771] ? do_raw_spin_unlock+0x145/0x1e0 [ 749.650515][T27771] alloc_pages_noprof+0x1a/0x160 [ 749.650538][T27771] pte_alloc_one+0x1c/0x3d0 [ 749.650577][T27771] __pte_alloc+0x6d/0x3e0 [ 749.650609][T27771] ? __pfx___pte_alloc+0x10/0x10 [ 749.650641][T27771] ? _raw_spin_unlock+0x28/0x50 [ 749.650666][T27771] ? __pmd_alloc+0x3fb/0x950 [ 749.650708][T27771] move_page_tables+0x2ec4/0x4610 [ 749.650738][T27771] ? __pfx_copy_vma+0x10/0x10 [ 749.650774][T27771] ? __pfx_move_page_tables+0x10/0x10 [ 749.650829][T27771] copy_vma_and_data+0x25c/0x7c0 [ 749.650860][T27771] ? __pfx_copy_vma_and_data+0x10/0x10 [ 749.650900][T27771] ? __vma_start_write+0x17f/0x280 [ 749.650940][T27771] ? __pfx___vma_start_write+0x10/0x10 [ 749.650987][T27771] move_vma+0x574/0x1920 [ 749.651018][T27771] ? __pfx_move_vma+0x10/0x10 [ 749.651047][T27771] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 749.651084][T27771] ? cap_mmap_addr+0x4b/0x120 [ 749.651110][T27771] ? bpf_lsm_mmap_addr+0x9/0x30 [ 749.651133][T27771] ? security_mmap_addr+0x71/0x1e0 [ 749.651167][T27771] ? __get_unmapped_area+0x255/0x3e0 [ 749.651210][T27771] ? vrm_set_new_addr+0x204/0x290 [ 749.651255][T27771] mremap_to+0x234/0x4c0 [ 749.651293][T27771] ? mas_walk+0x6ef/0x9b0 [ 749.651330][T27771] ? __pfx_mremap_to+0x10/0x10 [ 749.651364][T27771] __do_sys_mremap+0x88c/0x1850 [ 749.651400][T27771] ? __pfx___do_sys_mremap+0x10/0x10 [ 749.651426][T27771] ? ksys_write+0x190/0x250 [ 749.651456][T27771] ? __pfx_do_futex+0x10/0x10 [ 749.651492][T27771] ? __x64_sys_futex+0x34f/0x4d0 [ 749.651535][T27771] do_syscall_64+0x115/0x840 [ 749.651565][T27771] ? clear_bhb_loop+0x40/0x90 [ 749.651595][T27771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.651620][T27771] RIP: 0033:0x7fcbd3b9e019 [ 749.651641][T27771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.651665][T27771] RSP: 002b:00007fcbd1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 749.651688][T27771] RAX: ffffffffffffffda RBX: 00007fcbd3e25fa0 RCX: 00007fcbd3b9e019 [ 749.651704][T27771] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 749.651719][T27771] RBP: 00007fcbd3c3500c R08: 0000000100000000 R09: 0000000000000000 [ 749.651734][T27771] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 749.651751][T27771] R13: 00007fcbd3e26038 R14: 00007fcbd3e25fa0 R15: 00007ffcb4011ad8 [ 749.651781][T27771] [ 750.126784][T27777] netlink: 'syz.2.10595': attribute type 1 has an invalid length. [ 750.688815][T27799] netlink: 'syz.2.10605': attribute type 1 has an invalid length. [ 750.822341][T27801] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 750.979611][T27808] FAULT_INJECTION: forcing a failure. [ 750.979611][T27808] name failslab, interval 1, probability 0, space 0, times 0 [ 751.026843][T27808] CPU: 0 UID: 0 PID: 27808 Comm: syz.3.10611 Tainted: G U L syzkaller #0 PREEMPT(full) [ 751.026885][T27808] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 751.026895][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.026910][T27808] Call Trace: [ 751.026918][T27808] [ 751.026926][T27808] dump_stack_lvl+0x100/0x190 [ 751.026959][T27808] should_fail_ex.cold+0x5/0xa [ 751.026986][T27808] should_failslab+0xc2/0x120 [ 751.027022][T27808] __kmalloc_node_noprof+0x101/0x830 [ 751.027052][T27808] ? __kmalloc_noprof+0x311/0x820 [ 751.027082][T27808] ? get_callchain_buffers+0x1e5/0x380 [ 751.027121][T27808] get_callchain_buffers+0x1e5/0x380 [ 751.027154][T27808] ? security_capable+0x80/0x260 [ 751.027190][T27808] stack_map_alloc+0x316/0x610 [ 751.027223][T27808] map_create+0x874/0x3120 [ 751.027267][T27808] ? __lock_acquire+0x49f/0x1a40 [ 751.027313][T27808] ? __pfx_map_create+0x10/0x10 [ 751.027359][T27808] ? __might_fault+0xc5/0x140 [ 751.027397][T27808] __sys_bpf+0x2a6e/0x4e80 [ 751.027432][T27808] ? __pfx___sys_bpf+0x10/0x10 [ 751.027456][T27808] ? __pfx_futex_hash+0x10/0x10 [ 751.027480][T27808] ? get_pid_task+0xfc/0x250 [ 751.027510][T27808] ? get_pid_task+0xfc/0x250 [ 751.027547][T27808] ? futex_wait+0x11e/0x370 [ 751.027579][T27808] ? __pfx_futex_wait+0x10/0x10 [ 751.027610][T27808] ? find_held_lock+0x2b/0x80 [ 751.027647][T27808] ? rcu_read_lock_any_held+0x6a/0xa0 [ 751.027680][T27808] ? find_held_lock+0x2b/0x80 [ 751.027709][T27808] ? ksys_write+0x190/0x250 [ 751.027731][T27808] ? ksys_write+0x190/0x250 [ 751.027770][T27808] ? __x64_sys_futex+0x34f/0x4d0 [ 751.027796][T27808] ? __x64_sys_futex+0x358/0x4d0 [ 751.027826][T27808] ? xfd_validate_state+0x129/0x190 [ 751.027862][T27808] ? __x64_sys_bpf+0xce/0x140 [ 751.027888][T27808] __x64_sys_bpf+0xce/0x140 [ 751.027916][T27808] ? do_syscall_64+0x90/0x840 [ 751.027949][T27808] do_syscall_64+0x115/0x840 [ 751.027979][T27808] ? clear_bhb_loop+0x40/0x90 [ 751.028009][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.028034][T27808] RIP: 0033:0x7fcbd3b9e019 [ 751.028055][T27808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.028079][T27808] RSP: 002b:00007fcbd1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 751.028102][T27808] RAX: ffffffffffffffda RBX: 00007fcbd3e25fa0 RCX: 00007fcbd3b9e019 [ 751.028118][T27808] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 751.028133][T27808] RBP: 00007fcbd3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 751.028148][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.028163][T27808] R13: 00007fcbd3e26038 R14: 00007fcbd3e25fa0 R15: 00007ffcb4011ad8 [ 751.028198][T27808] [ 751.441836][T27817] sctp: [Deprecated]: syz.1.10615 (pid 27817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 751.441836][T27817] Use struct sctp_sack_info instead [ 751.926562][T27831] netlink: 'syz.4.10621': attribute type 1 has an invalid length. [ 752.654117][T27852] ksmbd: Unknown IPC event: 14, ignore. [ 753.386870][T27873] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 753.707913][T27881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10645'. [ 754.433540][T27909] nfsd: Unknown parameter '' [ 757.251216][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 758.218472][T28036] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 758.732777][ T29] audit: type=1326 audit(4294967345.068:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28051 comm="syz.3.10731" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbd3b9e019 code=0x0 [ 760.154627][T28093] netlink: 'syz.2.10750': attribute type 1 has an invalid length. [ 760.207270][T28093] nbd: error processing sock list [ 763.952343][T28210] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 764.350747][T28224] openvswitch: netlink: IP tunnel dst address not specified [ 764.611392][T28232] random: crng reseeded on system resumption [ 764.902671][T28245] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 765.133070][T28251] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 766.143113][T28282] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 767.120667][T28315] openvswitch: netlink: IP tunnel dst address not specified [ 769.013618][T28379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10884'. [ 771.147769][T28451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10920'. [ 771.407846][T28457] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 771.915021][T25990] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 773.612127][T28530] netlink: 'syz.1.10957': attribute type 2 has an invalid length. [ 774.371934][T28556] openvswitch: netlink: IP tunnel dst address not specified [ 775.109036][T28580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 776.142967][T25990] Bluetooth: hci0: ACL packet too small [ 776.761223][T28636] netlink: 'syz.1.11010': attribute type 1 has an invalid length. [ 777.088760][T28648] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 777.105223][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11015'. [ 777.312148][ T6137] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 777.356221][T28646] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 778.015405][T28677] openvswitch: netlink: IP tunnel TTL not specified. [ 779.207456][T28719] IPVS: length: 131 != 8 [ 780.947011][T28779] netlink: 'syz.4.11079': attribute type 2 has an invalid length. [ 781.220170][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11083'. [ 782.014625][T28813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11096'. [ 782.831967][T28836] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 782.868905][T28836] vhci_hcd vhci_hcd.3: invalid port number 108 [ 782.907275][T28836] vhci_hcd vhci_hcd.3: default hub control req: 2e2f v6966 i006c l48 [ 783.761518][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11120'. [ 784.773290][T28893] Device name cannot be null; rc = [-22] [ 787.340070][T28963] GUP no longer grows the stack in syz.1.11166 (28963): 5000-401000 (4000) [ 787.391874][T28963] CPU: 0 UID: 0 PID: 28963 Comm: syz.1.11166 Tainted: G U L syzkaller #0 PREEMPT(full) [ 787.391917][T28963] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 787.391927][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.391942][T28963] Call Trace: [ 787.391950][T28963] [ 787.391958][T28963] dump_stack_lvl+0x100/0x190 [ 787.391990][T28963] gup_vma_lookup.cold+0x83/0x96 [ 787.392029][T28963] __get_user_pages+0x241/0x32a0 [ 787.392073][T28963] ? down_read_killable+0x35e/0x520 [ 787.392112][T28963] ? __pfx___get_user_pages+0x10/0x10 [ 787.392147][T28963] ? __lock_acquire+0x49f/0x1a40 [ 787.392193][T28963] __gup_longterm_locked+0x87d/0x16f0 [ 787.392238][T28963] ? __pfx___gup_longterm_locked+0x10/0x10 [ 787.392276][T28963] ? lock_acquire+0x1b9/0x370 [ 787.392325][T28963] gup_fast_fallback+0x16dc/0x2790 [ 787.392381][T28963] ? __pfx_gup_fast_fallback+0x10/0x10 [ 787.392422][T28963] ? __lock_acquire+0x49f/0x1a40 [ 787.392461][T28963] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 787.392497][T28963] ? lockdep_hardirqs_on+0x78/0x100 [ 787.392554][T28963] get_user_pages_fast+0xa7/0xf0 [ 787.392593][T28963] ? __pfx_get_user_pages_fast+0x10/0x10 [ 787.392638][T28963] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 787.392775][T28963] ? pipe_lock+0x69/0x80 [ 787.392800][T28963] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 787.392841][T28963] ? __pfx___mutex_lock+0x10/0x10 [ 787.392875][T28963] ? iovec_from_user+0xda/0x140 [ 787.392919][T28963] iov_iter_get_pages2+0xa3/0x100 [ 787.392956][T28963] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 787.392994][T28963] ? wait_for_space+0x2ca/0x3b0 [ 787.393064][T28963] __do_sys_vmsplice+0x7dd/0x13c0 [ 787.393103][T28963] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 787.393137][T28963] ? __pfx_futex_wait+0x10/0x10 [ 787.393168][T28963] ? __do_sys_mremap+0x9a5/0x1850 [ 787.393206][T28963] ? __pfx___do_sys_mremap+0x10/0x10 [ 787.393269][T28963] ? do_syscall_64+0x115/0x840 [ 787.393298][T28963] do_syscall_64+0x115/0x840 [ 787.393328][T28963] ? clear_bhb_loop+0x40/0x90 [ 787.393357][T28963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.393381][T28963] RIP: 0033:0x7fb70859e019 [ 787.393402][T28963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.393425][T28963] RSP: 002b:00007fb709429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 787.393448][T28963] RAX: ffffffffffffffda RBX: 00007fb708825fa0 RCX: 00007fb70859e019 [ 787.393465][T28963] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 787.393479][T28963] RBP: 00007fb70863500c R08: 0000000000000000 R09: 0000000000000000 [ 787.393494][T28963] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 787.393515][T28963] R13: 00007fb708826038 R14: 00007fb708825fa0 R15: 00007ffea937bf88 [ 787.393546][T28963] [ 788.473789][T28991] IPVS: length: 537396514 != 24 [ 790.328341][T29042] bridge0: port 3(dummy0) entered blocking state [ 790.369623][T29042] bridge0: port 3(dummy0) entered disabled state [ 790.396261][T29042] dummy0: entered allmulticast mode [ 790.468713][T29042] dummy0: entered promiscuous mode [ 790.509256][T29042] bridge0: port 3(dummy0) entered blocking state [ 790.517265][T29042] bridge0: port 3(dummy0) entered forwarding state [ 792.168348][T29092] IPVS: length: 537396514 != 24 [ 792.462231][T29100] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[23082] was attempted by "Ury(Ewn=+M^[7J9& vT\x0dǒQl 9=jc\x22H5$XW;=Sg<--ta2pq\x1b,6`?)lf/ެ 5l`1\x07$*W,p qp@m9sO?\x09~ k2$'BLvEƒ|Z/N\x22LH|\x22\x0aa;3V{j͆¬Ag&ʩT\x22-CLKd7ga7Lt6䥭g]hX:;rd'y>w.1rDW1wyѨ\x0942H7feHWqa9T^\x07FNx|ew,hnƂ ~{z) 9^DŽioBl*Y\x22fɗHS4ǰ&\x078z'Rs$\x09\x22GIY.f2T=2\x09CE ۭԃXA)APcVjUAYD]\x0a}l%mvw\x5cX2\x0dWQfrE\x1bNHF?ڪvO[M{ [ 798.986243][T29254] dump_stack_lvl+0x100/0x190 [ 798.986273][T29254] should_fail_ex.cold+0x5/0xa [ 798.986300][T29254] should_failslab+0xc2/0x120 [ 798.986336][T29254] __kmalloc_noprof+0xfc/0x820 [ 798.986366][T29254] ? security_inode_alloc+0x3b/0x2c0 [ 798.986395][T29254] ? sk_prot_alloc+0x10b/0x2a0 [ 798.986422][T29254] sk_prot_alloc+0x10b/0x2a0 [ 798.986447][T29254] sk_alloc+0x36/0xe80 [ 798.986480][T29254] packet_create+0x127/0x8e0 [ 798.986513][T29254] __sock_create+0x339/0x860 [ 798.986543][T29254] __sys_socket+0x14d/0x260 [ 798.986570][T29254] ? __pfx___sys_socket+0x10/0x10 [ 798.986605][T29254] __x64_sys_socket+0x72/0xb0 [ 798.986631][T29254] ? lockdep_hardirqs_on+0x78/0x100 [ 798.986675][T29254] do_syscall_64+0x115/0x840 [ 798.986711][T29254] ? clear_bhb_loop+0x40/0x90 [ 798.986742][T29254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.986766][T29254] RIP: 0033:0x7fb70859e019 [ 798.986786][T29254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.986811][T29254] RSP: 002b:00007fb709429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 798.986835][T29254] RAX: ffffffffffffffda RBX: 00007fb708825fa0 RCX: 00007fb70859e019 [ 798.986851][T29254] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 798.986866][T29254] RBP: 00007fb70863500c R08: 0000000000000000 R09: 0000000000000000 [ 798.986880][T29254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.986895][T29254] R13: 00007fb708826038 R14: 00007fb708825fa0 R15: 00007ffea937bf88 [ 798.986925][T29254] [ 799.583679][T29262] sctp: [Deprecated]: syz.1.11297 (pid 29262) Use of int in maxseg socket option. [ 799.583679][T29262] Use struct sctp_assoc_value instead [ 799.877445][T29271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11302'. [ 802.632949][T29333] netlink: 5316 bytes leftover after parsing attributes in process `syz.3.11330'. [ 803.824644][T29360] bridge_slave_0: left allmulticast mode [ 803.868526][T29360] bridge_slave_0: left promiscuous mode [ 803.925280][T29360] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.321656][T29394] netlink: Unknown conntrack attr (0) [ 805.360751][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.367111][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.385904][T29398] netlink: 350 bytes leftover after parsing attributes in process `syz.1.11359'. [ 805.829538][T29408] device-mapper: ioctl: Invalid ioctl structure: uuid H, name , dev 1000000000000 [ 806.885505][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11377'. [ 807.573106][T29456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11386'. [ 809.703253][T29513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11412'. [ 810.386500][T29533] netlink: 350 bytes leftover after parsing attributes in process `syz.2.11420'. [ 810.625405][T29540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11423'. [ 810.880079][T29550] futex_wake_op: syz.2.11428 tries to shift op by -2048; fix this program [ 810.924933][T29550] futex_wake_op: syz.2.11428 tries to shift op by -2048; fix this program [ 811.035623][T29549] mac80211.ieee80211_default_rc_algo: string parameter too long [ 812.055348][T29577] FAULT_INJECTION: forcing a failure. [ 812.055348][T29577] name failslab, interval 1, probability 0, space 0, times 0 [ 812.101836][T29581] FAULT_INJECTION: forcing a failure. [ 812.101836][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 812.123731][T29577] CPU: 0 UID: 0 PID: 29577 Comm: syz.4.11440 Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.123780][T29577] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.123789][T29577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.123804][T29577] Call Trace: [ 812.123812][T29577] [ 812.123821][T29577] dump_stack_lvl+0x100/0x190 [ 812.123853][T29577] should_fail_ex.cold+0x5/0xa [ 812.123880][T29577] should_failslab+0xc2/0x120 [ 812.123916][T29577] kmem_cache_alloc_noprof+0x91/0x6a0 [ 812.123950][T29577] ? mas_preallocate+0x1105/0x14a0 [ 812.124006][T29577] mas_preallocate+0x1105/0x14a0 [ 812.124049][T29577] ? __pfx_mas_preallocate+0x10/0x10 [ 812.124094][T29577] ? anon_vma_name+0x5a/0x250 [ 812.124136][T29577] __split_vma+0x33d/0xda0 [ 812.124181][T29577] ? __pfx___split_vma+0x10/0x10 [ 812.124203][T29577] ? vma_link+0x5ee/0x8d0 [ 812.124241][T29577] vms_gather_munmap_vmas+0x1d2/0x1720 [ 812.124274][T29577] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 812.124300][T29577] ? alloc_new_pud+0x217/0x320 [ 812.124324][T29577] ? get_old_pud+0xd8/0x360 [ 812.124349][T29577] ? move_page_tables+0x11c/0x4610 [ 812.124377][T29577] ? __pfx_copy_vma+0x10/0x10 [ 812.124413][T29577] do_vmi_align_munmap+0x287/0x5f0 [ 812.124443][T29577] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 812.124521][T29577] do_vmi_munmap+0x1f8/0x3e0 [ 812.124549][T29577] move_vma+0xe5b/0x1920 [ 812.124579][T29577] ? __pfx_move_vma+0x10/0x10 [ 812.124607][T29577] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 812.124651][T29577] ? vrm_set_new_addr+0x204/0x290 [ 812.124679][T29577] mremap_to+0x234/0x4c0 [ 812.124702][T29577] ? mas_walk+0x6ef/0x9b0 [ 812.124731][T29577] ? __pfx_mremap_to+0x10/0x10 [ 812.124755][T29577] ? check_prep_vma+0x912/0xe60 [ 812.124790][T29577] __do_sys_mremap+0x88c/0x1850 [ 812.124826][T29577] ? __pfx___do_sys_mremap+0x10/0x10 [ 812.124850][T29577] ? ksys_write+0x190/0x250 [ 812.124879][T29577] ? __pfx_do_futex+0x10/0x10 [ 812.124912][T29577] ? __x64_sys_futex+0x34f/0x4d0 [ 812.124959][T29577] do_syscall_64+0x115/0x840 [ 812.124987][T29577] ? clear_bhb_loop+0x40/0x90 [ 812.125016][T29577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.125039][T29577] RIP: 0033:0x7f280299e019 [ 812.125058][T29577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.125081][T29577] RSP: 002b:00007f28037c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 812.125103][T29577] RAX: ffffffffffffffda RBX: 00007f2802c25fa0 RCX: 00007f280299e019 [ 812.125119][T29577] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 812.125133][T29577] RBP: 00007f2802a3500c R08: 0000000100000000 R09: 0000000000000000 [ 812.125148][T29577] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 812.125162][T29577] R13: 00007f2802c26038 R14: 00007f2802c25fa0 R15: 00007ffeed498238 [ 812.125191][T29577] [ 812.451942][T29583] sock: sock_timestamping_bind_phc: sock not bind to device [ 812.481583][T29581] CPU: 0 UID: 0 PID: 29581 Comm: syz.3.11442 Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.481625][T29581] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.481634][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.481648][T29581] Call Trace: [ 812.481655][T29581] [ 812.481663][T29581] dump_stack_lvl+0x100/0x190 [ 812.481695][T29581] should_fail_ex.cold+0x5/0xa [ 812.481723][T29581] should_failslab+0xc2/0x120 [ 812.481757][T29581] __kmalloc_noprof+0xfc/0x820 [ 812.481787][T29581] ? trace_kmalloc+0xeb/0x110 [ 812.481840][T29581] ? lsm_blob_alloc+0x68/0x90 [ 812.481884][T29581] lsm_blob_alloc+0x68/0x90 [ 812.481923][T29581] security_sk_alloc+0x2d/0x290 [ 812.482029][T29581] sk_prot_alloc+0x12a/0x2a0 [ 812.482055][T29581] sk_alloc+0x36/0xe80 [ 812.482087][T29581] mctp_pf_create+0xe8/0x360 [ 812.482157][T29581] __sock_create+0x339/0x860 [ 812.482188][T29581] __sys_socket+0x14d/0x260 [ 812.482214][T29581] ? __pfx___sys_socket+0x10/0x10 [ 812.482256][T29581] __x64_sys_socket+0x72/0xb0 [ 812.482282][T29581] ? lockdep_hardirqs_on+0x78/0x100 [ 812.482312][T29581] do_syscall_64+0x115/0x840 [ 812.482343][T29581] ? clear_bhb_loop+0x40/0x90 [ 812.482372][T29581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.482397][T29581] RIP: 0033:0x7fcbd3b9e019 [ 812.482417][T29581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.482441][T29581] RSP: 002b:00007fcbd1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 812.482464][T29581] RAX: ffffffffffffffda RBX: 00007fcbd3e25fa0 RCX: 00007fcbd3b9e019 [ 812.482481][T29581] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 812.482495][T29581] RBP: 00007fcbd3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 812.482510][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.482524][T29581] R13: 00007fcbd3e26038 R14: 00007fcbd3e25fa0 R15: 00007ffcb4011ad8 [ 812.482556][T29581] [ 812.771142][T29585] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 813.491056][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11456'. [ 815.424287][T29671] syz_tun: tun_chr_ioctl cmd 21731 [ 815.873635][T29690] netlink: 21 bytes leftover after parsing attributes in process `syz.1.11495'. [ 818.318822][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11524'. [ 822.954449][T29840] NFSD: Failed to start, no listeners configured. [ 823.144109][T29845] ovs_: entered promiscuous mode [ 823.170006][T29847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11566'. [ 823.703651][T29861] bridge0: port 3(veth0_to_bridge) entered blocking state [ 823.741595][T29861] bridge0: port 3(veth0_to_bridge) entered disabled state [ 823.780919][T29861] veth0_to_bridge: entered allmulticast mode [ 823.827409][T29861] veth0_to_bridge: entered promiscuous mode [ 823.865348][T29861] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.922826][T29861] bridge0: port 3(veth0_to_bridge) entered blocking state [ 823.930138][T29861] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 825.998845][T29922] FAULT_INJECTION: forcing a failure. [ 825.998845][T29922] name failslab, interval 1, probability 0, space 0, times 0 [ 826.073362][T29922] CPU: 0 UID: 0 PID: 29922 Comm: syz.3.11599 Tainted: G U L syzkaller #0 PREEMPT(full) [ 826.073404][T29922] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 826.073414][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.073428][T29922] Call Trace: [ 826.073436][T29922] [ 826.073445][T29922] dump_stack_lvl+0x100/0x190 [ 826.073479][T29922] should_fail_ex.cold+0x5/0xa [ 826.073507][T29922] should_failslab+0xc2/0x120 [ 826.073543][T29922] kmem_cache_alloc_noprof+0x91/0x6a0 [ 826.073575][T29922] ? key_alloc+0x3c5/0x1310 [ 826.073708][T29922] key_alloc+0x3c5/0x1310 [ 826.073752][T29922] ? __pfx_key_alloc+0x10/0x10 [ 826.073786][T29922] ? lsm_blob_alloc+0x68/0x90 [ 826.073831][T29922] keyring_alloc+0x44/0xc0 [ 826.073871][T29922] install_thread_keyring_to_cred+0xc1/0x140 [ 826.073905][T29922] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 826.073935][T29922] __do_sys_keyctl+0x316/0x5a0 [ 826.073964][T29922] do_syscall_64+0x115/0x840 [ 826.073998][T29922] ? clear_bhb_loop+0x40/0x90 [ 826.074028][T29922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.074053][T29922] RIP: 0033:0x7fcbd3b9e019 [ 826.074073][T29922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.074110][T29922] RSP: 002b:00007fcbd1df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 826.074132][T29922] RAX: ffffffffffffffda RBX: 00007fcbd3e25fa0 RCX: 00007fcbd3b9e019 [ 826.074148][T29922] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 826.074162][T29922] RBP: 00007fcbd3c3500c R08: 0000000000000008 R09: 0000000000000000 [ 826.074176][T29922] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 826.074190][T29922] R13: 00007fcbd3e26038 R14: 00007fcbd3e25fa0 R15: 00007ffcb4011ad8 [ 826.074219][T29922] [ 826.378181][T29928] bridge0: port 1(veth0_to_bridge) entered blocking state [ 826.385458][T29928] bridge0: port 1(veth0_to_bridge) entered disabled state [ 826.392772][T29928] veth0_to_bridge: entered allmulticast mode [ 826.401467][T29928] veth0_to_bridge: entered promiscuous mode [ 826.407872][T29928] bridge0: port 1(veth0_to_bridge) entered blocking state [ 826.415069][T29928] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 827.282133][T29952] sctp: [Deprecated]: syz.3.11615 (pid 29952) Use of int in max_burst socket option. [ 827.282133][T29952] Use struct sctp_assoc_value instead [ 827.930020][T29969] NFSD: Failed to start, no listeners configured. [ 829.279653][T30001] NFSD: Failed to start, no listeners configured. [ 830.595688][T30036] netlink: 338 bytes leftover after parsing attributes in process `syz.2.11652'. [ 833.570068][T30118] ovs_: entered promiscuous mode [ 833.973369][T30128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11691'. [ 834.573755][T30143] block nbd1: Unsupported socket: should be TCP or UNIX. [ 837.972410][T30233] NFSD: Failed to start, no listeners configured. [ 838.263472][T30244] netlink: 346 bytes leftover after parsing attributes in process `syz.2.11737'. [ 838.879631][T30264] netlink: 'syz.2.11748': attribute type 33 has an invalid length. [ 839.850055][T30296] netlink: 186 bytes leftover after parsing attributes in process `syz.2.11761'. [ 841.144714][T30326] tunl0: entered allmulticast mode [ 843.666655][T30398] FAULT_INJECTION: forcing a failure. [ 843.666655][T30398] name failslab, interval 1, probability 0, space 0, times 0 [ 843.733642][T30398] CPU: 0 UID: 0 PID: 30398 Comm: syz.4.11800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 843.733686][T30398] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 843.733695][T30398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.733713][T30398] Call Trace: [ 843.733720][T30398] [ 843.733729][T30398] dump_stack_lvl+0x100/0x190 [ 843.733759][T30398] should_fail_ex.cold+0x5/0xa [ 843.733786][T30398] should_failslab+0xc2/0x120 [ 843.733819][T30398] kmem_cache_alloc_noprof+0x91/0x6a0 [ 843.733849][T30398] ? trace_kmem_cache_alloc+0xdd/0x100 [ 843.733883][T30398] ? security_file_alloc+0x34/0x2c0 [ 843.733922][T30398] security_file_alloc+0x34/0x2c0 [ 843.733956][T30398] init_file+0x95/0x480 [ 843.733989][T30398] alloc_empty_file+0x79/0x1c0 [ 843.734019][T30398] path_openat+0xe7/0x4280 [ 843.734042][T30398] ? __kasan_slab_alloc+0x89/0x90 [ 843.734073][T30398] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 843.734101][T30398] ? do_getname+0x35/0x390 [ 843.734129][T30398] ? do_sys_openat2+0xc7/0x1e0 [ 843.734158][T30398] ? __x64_sys_openat+0x12d/0x210 [ 843.734189][T30398] ? do_syscall_64+0x115/0x840 [ 843.734219][T30398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.734251][T30398] ? __pfx_path_openat+0x10/0x10 [ 843.734282][T30398] do_file_open+0x20e/0x430 [ 843.734309][T30398] ? __pfx_do_file_open+0x10/0x10 [ 843.734352][T30398] ? alloc_fd+0x471/0x7a0 [ 843.734377][T30398] ? do_getname+0x191/0x390 [ 843.734410][T30398] do_sys_openat2+0x10f/0x1e0 [ 843.734449][T30398] ? __pfx_do_sys_openat2+0x10/0x10 [ 843.734482][T30398] ? find_held_lock+0x2b/0x80 [ 843.734520][T30398] __x64_sys_openat+0x12d/0x210 [ 843.734553][T30398] ? __pfx___x64_sys_openat+0x10/0x10 [ 843.734597][T30398] do_syscall_64+0x115/0x840 [ 843.734626][T30398] ? clear_bhb_loop+0x40/0x90 [ 843.734654][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.734678][T30398] RIP: 0033:0x7f280295e84e [ 843.734697][T30398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 843.734720][T30398] RSP: 002b:00007f28037c2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 843.734742][T30398] RAX: ffffffffffffffda RBX: 00007f28037c36c0 RCX: 00007f280295e84e [ 843.734758][T30398] RDX: 0000000000000002 RSI: 00007f28037c2f90 RDI: ffffffffffffff9c [ 843.734773][T30398] RBP: 00007f2802a3500c R08: 0000000000000000 R09: 0000000000000000 [ 843.734787][T30398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.734801][T30398] R13: 00007f2802c26038 R14: 00007f2802c25fa0 R15: 00007ffeed498238 [ 843.734835][T30398] [ 844.256875][T30405] input: f as /devices/virtual/input/input25 [ 846.012384][T30454] netlink: 'syz.3.11823': attribute type 1 has an invalid length. [ 846.108940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 846.121455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.133744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.147488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 846.159798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.172185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.185510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 846.197837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.210164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.223354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 851.090169][ C0] net_ratelimit: 8501 callbacks suppressed [ 851.090189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 851.108460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.120826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.133993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 851.146307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.158810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.172047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 851.184401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.196712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.209836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 856.074515][ C0] net_ratelimit: 8399 callbacks suppressed [ 856.074543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 856.092980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.105347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.118554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 856.130945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.143328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.156537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 856.168836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.181173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.194519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 861.058637][ C0] net_ratelimit: 8948 callbacks suppressed [ 861.058659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 861.076859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.089260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.102388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 861.114644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.126918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.139962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 861.152252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.164518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.177615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 866.042722][ C0] net_ratelimit: 8975 callbacks suppressed [ 866.042744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 866.060967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.073311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.086424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 866.098767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.111940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.125153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 866.137492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.149813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.163020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 871.025778][ C0] net_ratelimit: 10186 callbacks suppressed [ 871.025802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.044114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.057208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 871.069555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.081836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.094135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.107255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 871.119597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.131911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.144252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.010027][ C0] net_ratelimit: 10326 callbacks suppressed [ 876.010048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.028362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.041473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 876.053741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.066035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.078347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.091427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 876.103761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.116030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.128479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.994063][ C0] net_ratelimit: 10211 callbacks suppressed [ 880.994085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.013119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 881.025416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.037666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.049996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.063117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 881.075405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.087682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.099993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.113240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 882.249690][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.978513][ C0] net_ratelimit: 10103 callbacks suppressed [ 885.978534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 885.996821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.009095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.021441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.034593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 886.046907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.059164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.071486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.084611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 886.097058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.963000][ C0] net_ratelimit: 10198 callbacks suppressed [ 890.963033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 890.981333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.993599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 891.005948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.019029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 891.031349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.043623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 891.055909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.069029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 891.081444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.947068][ C0] net_ratelimit: 10394 callbacks suppressed [ 895.947089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 895.965338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.977570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 895.989891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.002988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 896.015333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.027588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.039924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.053011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 896.065554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.931035][ C0] net_ratelimit: 10358 callbacks suppressed [ 900.931057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 900.949259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.961586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.973866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.987001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 900.999395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.011664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 901.024000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.037143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 901.049506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.915047][ C0] net_ratelimit: 10158 callbacks suppressed [ 905.915069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 905.933336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.945546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 905.957820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.970950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 905.983444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.995708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 906.008010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.021118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 906.033414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.898698][ C0] net_ratelimit: 10237 callbacks suppressed [ 910.898720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.917768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 910.930147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.942502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 910.954879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.968109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 910.980435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.992700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 911.005031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.018195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 915.882847][ C0] net_ratelimit: 10314 callbacks suppressed [ 915.882869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.901962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 915.914315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.926604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 915.938893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.951957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 915.964268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.976536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 915.988884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.001982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 920.866911][ C0] net_ratelimit: 10327 callbacks suppressed [ 920.866932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 920.885220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.897472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 920.910010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.923143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 920.935497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.947758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 920.960088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.973125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 920.985415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.851476][ C0] net_ratelimit: 10158 callbacks suppressed [ 925.851498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 925.869822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.882104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 925.894441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.907546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 925.919866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.932166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 925.944455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.957504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 925.969743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.835508][ C0] net_ratelimit: 10102 callbacks suppressed [ 930.835529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 930.853792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.866046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 930.878367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.891503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 930.903858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.916131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 930.929305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.942451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 930.954802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.818899][ C0] net_ratelimit: 10197 callbacks suppressed [ 935.818921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.838012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 935.850565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.862901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 935.875286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.888357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 935.900721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.913065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 935.925420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.939345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 940.803070][ C0] net_ratelimit: 10287 callbacks suppressed [ 940.803092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 940.821350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.833729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 940.846114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.859247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 940.871577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.883847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 940.896175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.909395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 940.921739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.787457][ C0] net_ratelimit: 10198 callbacks suppressed [ 945.787479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 945.805822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.818100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.830429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.843580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 945.855977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.868272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.880598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.893674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 945.906027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 950.582021][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 950.589051][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6061/1:b..l [ 950.597578][ C0] rcu: (detected by 0, t=10502 jiffies, g=310613, q=813 ncpus=1) [ 950.605382][ C0] task:syz-executor state:R running task stack:22376 pid:6061 tgid:6061 ppid:6055 task_flags:0x400140 flags:0x00080000 [ 950.620062][ C0] Call Trace: [ 950.623362][ C0] [ 950.626325][ C0] __schedule+0x125c/0x6730 [ 950.630876][ C0] ? __pfx___schedule+0x10/0x10 [ 950.635740][ C0] ? mark_held_locks+0x40/0x70 [ 950.640531][ C0] preempt_schedule_irq+0x50/0x90 [ 950.645563][ C0] irqentry_exit+0x205/0xa00 [ 950.650170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 950.656161][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 950.661378][ C0] Code: 05 7b 94 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 06 51 3d 0f 0f 82 ac 02 00 00 8b 35 ae 84 3d 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 94 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 950.680991][ C0] RSP: 0018:ffffc90003f8f5c0 EFLAGS: 00000206 [ 950.687062][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 950.695038][ C0] RDX: 0000000000000000 RSI: ffffffff8e183485 RDI: ffffffff8c400a80 [ 950.703014][ C0] RBP: ffffffff8ebe8000 R08: 00000000a5dba12a R09: 0000000000000007 [ 950.711086][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 950.719054][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.727039][ C0] ? unwind_next_frame+0x3be/0x2090 [ 950.732259][ C0] ? unwind_next_frame+0x3be/0x2090 [ 950.737477][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.743650][ C0] unwind_next_frame+0xd1/0x2090 [ 950.748606][ C0] ? unwind_next_frame+0xbd/0x2090 [ 950.753754][ C0] ? tomoyo_path_perm+0x276/0x460 [ 950.758860][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.765028][ C0] arch_stack_walk+0x94/0xf0 [ 950.769641][ C0] ? tomoyo_path_perm+0x276/0x460 [ 950.774692][ C0] ? tomoyo_realpath_from_path+0x19c/0x690 [ 950.780535][ C0] stack_trace_save+0x8e/0xc0 [ 950.785219][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 950.790607][ C0] ? kasan_save_track+0x14/0x30 [ 950.795478][ C0] ? __lock_acquire+0x49f/0x1a40 [ 950.800454][ C0] ? do_syscall_64+0x115/0x840 [ 950.805237][ C0] kasan_save_stack+0x30/0x50 [ 950.809928][ C0] ? kasan_save_stack+0x30/0x50 [ 950.814812][ C0] ? kasan_save_track+0x14/0x30 [ 950.819677][ C0] ? kasan_save_free_info+0x3b/0x70 [ 950.824890][ C0] ? __kasan_slab_free+0x5f/0x80 [ 950.829840][ C0] ? kfree+0x22b/0x6c0 [ 950.833910][ C0] ? tomoyo_realpath_from_path+0x19c/0x690 [ 950.839739][ C0] ? tomoyo_path_perm+0x276/0x460 [ 950.844824][ C0] kasan_save_track+0x14/0x30 [ 950.849518][ C0] kasan_save_free_info+0x3b/0x70 [ 950.854547][ C0] __kasan_slab_free+0x5f/0x80 [ 950.859333][ C0] ? tomoyo_realpath_from_path+0x160/0x690 [ 950.865157][ C0] kfree+0x22b/0x6c0 [ 950.869063][ C0] tomoyo_realpath_from_path+0x19c/0x690 [ 950.874718][ C0] tomoyo_path_perm+0x276/0x460 [ 950.879594][ C0] ? tomoyo_path_perm+0x262/0x460 [ 950.884632][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 950.890026][ C0] ? mntput+0x70/0xa0 [ 950.894143][ C0] ? __d_lookup+0x25c/0x4a0 [ 950.898710][ C0] tomoyo_path_unlink+0x91/0xe0 [ 950.903655][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 950.909227][ C0] ? lookup_dcache+0x66/0x170 [ 950.913941][ C0] security_path_unlink+0x145/0x2b0 [ 950.919169][ C0] filename_unlinkat+0x316/0x730 [ 950.924124][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 950.929607][ C0] ? do_getname+0x191/0x390 [ 950.934139][ C0] __x64_sys_unlink+0x46/0x70 [ 950.938826][ C0] do_syscall_64+0x115/0x840 [ 950.943448][ C0] ? clear_bhb_loop+0x40/0x90 [ 950.948169][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.954074][ C0] RIP: 0033:0x7f47b7d9d107 [ 950.958503][ C0] RSP: 002b:00007fff87d7d038 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 950.967026][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47b7d9d107 [ 950.975018][ C0] RDX: 00007fff87d7d060 RSI: 00007fff87d7d0f0 RDI: 00007fff87d7d0f0 [ 950.983018][ C0] RBP: 00007fff87d7d0f0 R08: 00007fff87d7e0f0 R09: 00000000ffffffff [ 950.990995][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff87d7e180 [ 950.998974][ C0] R13: 00007f47b7e3445c R14: 00000000000cf719 R15: 00007fff87d7e1c0 [ 951.006978][ C0] [ 951.010803][ C0] net_ratelimit: 9773 callbacks suppressed [ 951.010821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.029783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 951.042116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.054431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.066829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.079992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 951.092341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.104637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.116995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.130212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 954.994194][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.892578][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.994175][ C0] net_ratelimit: 8445 callbacks suppressed [ 955.994196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.012396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.025584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 956.037952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.050284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.062645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.075822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:07:31:5e:e6:bc, vlan:0) [ 956.088107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.100411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.112839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.189782][ T1315] ieee802154 phy1 wpan1: encryption failed: -22