last executing test programs: 10.787064089s ago: executing program 3 (id=2616): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) clone$auto(0x1000020003b49, 0x1, 0x0, 0x0, 0x2) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0xa, 0x0, 0x4) 10.775544468s ago: executing program 0 (id=2627): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 10.68520632s ago: executing program 3 (id=2619): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) 2.492998876s ago: executing program 1 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r2, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 2.404240547s ago: executing program 1 (id=2621): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) 2.404147536s ago: executing program 3 (id=2623): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) read$auto_tracing_pipe_fops_trace(r0, &(0x7f0000000180)=""/81, 0x51) write$auto(0x1, 0x0, 0x100) 2.396748679s ago: executing program 0 (id=2630): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) 2.221631142s ago: executing program 3 (id=2624): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff) 2.062985806s ago: executing program 0 (id=2625): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) 1.977770669s ago: executing program 3 (id=2626): socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) listen$auto(0x3, 0x81) 1.769761094s ago: executing program 2 (id=2628): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.741126237s ago: executing program 1 (id=2629): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) 1.626570732s ago: executing program 0 (id=2631): sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_ADD(r0, 0x0, 0x40d0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x5, 0x0) 1.48596829s ago: executing program 3 (id=2632): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") 1.485507645s ago: executing program 2 (id=2640): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) 978.713407ms ago: executing program 1 (id=2633): io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x3, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x4}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) 975.680152ms ago: executing program 2 (id=2634): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) bpf$auto(0x6, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0xc, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/023/001\x00', 0xa821, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="028006000000000085"]) 802.137898ms ago: executing program 2 (id=2635): pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) flock$auto(r0, 0x5) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) close_range$auto(0x2, 0x8, 0x0) 801.695308ms ago: executing program 1 (id=2636): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) 677.704876ms ago: executing program 0 (id=2637): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff) 497.248221ms ago: executing program 1 (id=2638): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 497.174328ms ago: executing program 2 (id=2639): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) socketpair$auto(0x2d, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 396.289711ms ago: executing program 0 (id=2641): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 2 (id=2642): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x1000, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, 0xffffffffffffffff, 0x5}, 0x92) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 80.539150][ T5814] cgroup: Unknown subsys name 'net' [ 80.676009][ T5814] cgroup: Unknown subsys name 'cpuset' [ 80.685397][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.149501][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.239736][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.248733][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.256921][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.265291][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.273085][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.355054][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.372568][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.380751][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.394236][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.414640][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.438778][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.447256][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.462691][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.473892][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.481726][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.533607][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.543525][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.553074][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.564047][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.572801][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.722704][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.948782][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.956384][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.964770][ T5823] bridge_slave_0: entered allmulticast mode [ 84.972503][ T5823] bridge_slave_0: entered promiscuous mode [ 84.996078][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.003535][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.010705][ T5823] bridge_slave_1: entered allmulticast mode [ 85.018589][ T5823] bridge_slave_1: entered promiscuous mode [ 85.134966][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.171366][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.248702][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.277421][ T5823] team0: Port device team_slave_0 added [ 85.310235][ T5823] team0: Port device team_slave_1 added [ 85.316834][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.391358][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 85.420143][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.427182][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.454335][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.488899][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.496010][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.522101][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.581837][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.589379][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.596755][ T5828] bridge_slave_0: entered allmulticast mode [ 85.605063][ T5828] bridge_slave_0: entered promiscuous mode [ 85.643688][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.650860][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.658528][ T5828] bridge_slave_1: entered allmulticast mode [ 85.665657][ T5828] bridge_slave_1: entered promiscuous mode [ 85.695732][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.703203][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.710699][ T5830] bridge_slave_0: entered allmulticast mode [ 85.718066][ T5830] bridge_slave_0: entered promiscuous mode [ 85.753492][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.760644][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.768093][ T5830] bridge_slave_1: entered allmulticast mode [ 85.775265][ T5830] bridge_slave_1: entered promiscuous mode [ 85.797890][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.837247][ T5823] hsr_slave_0: entered promiscuous mode [ 85.843953][ T5823] hsr_slave_1: entered promiscuous mode [ 85.853485][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.903265][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.925580][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.932984][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.940341][ T5835] bridge_slave_0: entered allmulticast mode [ 85.948235][ T5835] bridge_slave_0: entered promiscuous mode [ 85.958265][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.981112][ T5828] team0: Port device team_slave_0 added [ 85.998530][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.006071][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.013553][ T5835] bridge_slave_1: entered allmulticast mode [ 86.020617][ T5835] bridge_slave_1: entered promiscuous mode [ 86.040504][ T5828] team0: Port device team_slave_1 added [ 86.066400][ T5830] team0: Port device team_slave_0 added [ 86.108643][ T5830] team0: Port device team_slave_1 added [ 86.136268][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.157783][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.165020][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.191397][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.204134][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.211121][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.237179][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.255772][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.299579][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.306928][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.333781][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.346833][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.353873][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.363272][ T5826] Bluetooth: hci0: command tx timeout [ 86.380231][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.417605][ T5835] team0: Port device team_slave_0 added [ 86.437171][ T5835] team0: Port device team_slave_1 added [ 86.442216][ T5826] Bluetooth: hci1: command tx timeout [ 86.505193][ T5828] hsr_slave_0: entered promiscuous mode [ 86.511770][ T5828] hsr_slave_1: entered promiscuous mode [ 86.518365][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 86.524311][ T5826] Bluetooth: hci2: command tx timeout [ 86.524832][ T5828] Cannot create hsr debugfs directory [ 86.575232][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.582343][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.608909][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.613124][ T5826] Bluetooth: hci3: command tx timeout [ 86.621774][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.632409][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.658616][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.686462][ T5830] hsr_slave_0: entered promiscuous mode [ 86.693238][ T5830] hsr_slave_1: entered promiscuous mode [ 86.699289][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 86.705081][ T5830] Cannot create hsr debugfs directory [ 86.830381][ T5835] hsr_slave_0: entered promiscuous mode [ 86.837327][ T5835] hsr_slave_1: entered promiscuous mode [ 86.843828][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 86.849659][ T5835] Cannot create hsr debugfs directory [ 87.146561][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.185195][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.224262][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.257032][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.334586][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.360056][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.370513][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.381055][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.460384][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.475151][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.488735][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.506467][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.602835][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.626341][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.638763][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.660595][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.774545][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.786850][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.823726][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.854723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.862113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.876714][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.896456][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.911738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.919115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.934002][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.941100][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.974559][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.981787][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.999229][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.029243][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.049086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.056315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.082677][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.089795][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.118838][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.174813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.182022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.199815][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.237944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.245142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.442816][ T5826] Bluetooth: hci0: command tx timeout [ 88.523756][ T5826] Bluetooth: hci1: command tx timeout [ 88.602072][ T5826] Bluetooth: hci2: command tx timeout [ 88.683999][ T5826] Bluetooth: hci3: command tx timeout [ 88.695609][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.745078][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.863927][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.889914][ T5823] veth0_vlan: entered promiscuous mode [ 88.926830][ T5828] veth0_vlan: entered promiscuous mode [ 88.936881][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.947761][ T5823] veth1_vlan: entered promiscuous mode [ 88.998736][ T5828] veth1_vlan: entered promiscuous mode [ 89.014256][ T5830] veth0_vlan: entered promiscuous mode [ 89.028426][ T5830] veth1_vlan: entered promiscuous mode [ 89.116088][ T5828] veth0_macvtap: entered promiscuous mode [ 89.124536][ T5835] veth0_vlan: entered promiscuous mode [ 89.135015][ T5823] veth0_macvtap: entered promiscuous mode [ 89.145934][ T5828] veth1_macvtap: entered promiscuous mode [ 89.163272][ T5830] veth0_macvtap: entered promiscuous mode [ 89.174225][ T5830] veth1_macvtap: entered promiscuous mode [ 89.183602][ T5823] veth1_macvtap: entered promiscuous mode [ 89.196428][ T5835] veth1_vlan: entered promiscuous mode [ 89.227562][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.249486][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.266785][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.277688][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.293775][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.313960][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325178][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.348210][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357582][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.371175][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.385143][ T5835] veth0_macvtap: entered promiscuous mode [ 89.399625][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.422448][ T5835] veth1_macvtap: entered promiscuous mode [ 89.433424][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.449588][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.478587][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.499908][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.531143][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.558459][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.576101][ T1170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.587947][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616585][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.639028][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.648012][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.667555][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.677837][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.702096][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.737406][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.747517][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.749887][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.770847][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780587][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.831665][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.840294][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.875663][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.894763][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.961604][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.992421][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.000301][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.014980][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.052338][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.223689][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.231554][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.525673][ T5826] Bluetooth: hci0: command tx timeout [ 90.612731][ T5826] Bluetooth: hci1: command tx timeout [ 90.683934][ T5826] Bluetooth: hci2: command tx timeout [ 90.772253][ T5826] Bluetooth: hci3: command tx timeout [ 91.866031][ T5962] capability: warning: `syz.2.21' uses 32-bit capabilities (legacy support in use) [ 91.904855][ T5962] sd 0:0:1:0: PR command failed: 1026 [ 91.910331][ T5962] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 91.952888][ T5957] sd 0:0:1:0: PR command failed: 1026 [ 91.974432][ T5957] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 91.993855][ T5957] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.002518][ T5962] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.048746][ T983] cfg80211: failed to load regulatory.db [ 92.626102][ T5826] Bluetooth: hci0: command tx timeout [ 92.682146][ T5826] Bluetooth: hci1: command tx timeout [ 92.762123][ T5826] Bluetooth: hci2: command tx timeout [ 92.842477][ T5826] Bluetooth: hci3: command tx timeout [ 93.013050][ T5989] bridge0: port 3(hsr0) entered blocking state [ 93.062241][ T5989] bridge0: port 3(hsr0) entered disabled state [ 93.068644][ T5989] hsr0: entered allmulticast mode [ 93.138995][ T5989] hsr_slave_0: entered allmulticast mode [ 93.200026][ T5989] hsr_slave_1: entered allmulticast mode [ 93.283728][ T5989] hsr0: entered promiscuous mode [ 93.289711][ T5989] bridge0: port 3(hsr0) entered blocking state [ 93.296207][ T5989] bridge0: port 3(hsr0) entered forwarding state [ 93.484361][ T6000] Zero length message leads to an empty skb [ 94.053851][ T5978] kexec: Could not allocate control_code_buffer [ 94.240566][ T6023] syz.3.47 uses obsolete (PF_INET,SOCK_PACKET) [ 94.423044][ T6028] FAULT_INJECTION: forcing a failure. [ 94.423044][ T6028] name failslab, interval 1, probability 0, space 0, times 1 [ 94.473638][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 94.473673][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.473692][ T6028] Call Trace: [ 94.473700][ T6028] [ 94.473710][ T6028] dump_stack_lvl+0x16c/0x1f0 [ 94.473749][ T6028] should_fail_ex+0x512/0x640 [ 94.473780][ T6028] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 94.473808][ T6028] should_failslab+0xc2/0x120 [ 94.473840][ T6028] kmem_cache_alloc_noprof+0x75/0x6e0 [ 94.473864][ T6028] ? __pmd_alloc+0xbf/0x8b0 [ 94.473903][ T6028] ? __pmd_alloc+0xbf/0x8b0 [ 94.473933][ T6028] __pmd_alloc+0xbf/0x8b0 [ 94.473961][ T6028] ? find_held_lock+0x2b/0x80 [ 94.473987][ T6028] __handle_mm_fault+0xada/0x2aa0 [ 94.474031][ T6028] ? __pfx___handle_mm_fault+0x10/0x10 [ 94.474075][ T6028] ? __pfx_walk_pgd_range+0x10/0x10 [ 94.474134][ T6028] handle_mm_fault+0x589/0xd10 [ 94.474178][ T6028] __get_user_pages+0x54e/0x3530 [ 94.474235][ T6028] ? __pfx___get_user_pages+0x10/0x10 [ 94.474276][ T6028] populate_vma_page_range+0x267/0x3f0 [ 94.474313][ T6028] ? __pfx_populate_vma_page_range+0x10/0x10 [ 94.474345][ T6028] ? __pfx_find_vma_intersection+0x10/0x10 [ 94.474376][ T6028] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 94.474407][ T6028] __mm_populate+0x1d8/0x380 [ 94.474440][ T6028] ? __pfx___mm_populate+0x10/0x10 [ 94.474477][ T6028] ? up_write+0x1b2/0x520 [ 94.474517][ T6028] do_mlock+0x441/0x800 [ 94.474544][ T6028] ? __pfx_do_mlock+0x10/0x10 [ 94.474566][ T6028] ? __x64_sys_futex+0x1e0/0x4c0 [ 94.474598][ T6028] ? __x64_sys_futex+0x1e9/0x4c0 [ 94.474631][ T6028] ? fput+0x9b/0xd0 [ 94.474664][ T6028] ? xfd_validate_state+0x61/0x180 [ 94.474696][ T6028] ? __pfx_ksys_write+0x10/0x10 [ 94.474730][ T6028] __x64_sys_mlock+0x59/0x80 [ 94.474755][ T6028] do_syscall_64+0xcd/0xfa0 [ 94.474786][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.474813][ T6028] RIP: 0033:0x7fcf7998eec9 [ 94.474843][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.474868][ T6028] RSP: 002b:00007fcf7a886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 94.474893][ T6028] RAX: ffffffffffffffda RBX: 00007fcf79be5fa0 RCX: 00007fcf7998eec9 [ 94.474911][ T6028] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 000000000000002a [ 94.474927][ T6028] RBP: 00007fcf79a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.474942][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.474957][ T6028] R13: 00007fcf79be6038 R14: 00007fcf79be5fa0 R15: 00007ffef1fc8308 [ 94.474993][ T6028] [ 95.123056][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.158663][ T6074] netlink: 206 bytes leftover after parsing attributes in process `syz.2.73'. [ 97.093113][ T6110] process 'syz.3.89' launched ':,' with NULL argv: empty string added [ 97.942715][ T5826] Bluetooth: hci3: unknown advertising packet type: 0xea [ 99.420372][ T6186] zswap: compressor not available [ 99.589098][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 100.160052][ T6216] zswap: compressor ћ not available [ 100.651311][ T6249] FAULT_INJECTION: forcing a failure. [ 100.651311][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 100.673373][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) [ 100.673411][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.673427][ T6249] Call Trace: [ 100.673436][ T6249] [ 100.673446][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 100.673482][ T6249] should_fail_ex+0x512/0x640 [ 100.673512][ T6249] ? __kmalloc_noprof+0xca/0x880 [ 100.673555][ T6249] should_failslab+0xc2/0x120 [ 100.673588][ T6249] __kmalloc_noprof+0xdd/0x880 [ 100.673638][ T6249] ? __pfx___might_resched+0x10/0x10 [ 100.673666][ T6249] ? load_msg+0x118/0x4a0 [ 100.673698][ T6249] ? load_msg+0x118/0x4a0 [ 100.673720][ T6249] load_msg+0x118/0x4a0 [ 100.673753][ T6249] do_msgrcv+0x202/0x16c0 [ 100.673779][ T6249] ? do_futex+0x122/0x350 [ 100.673810][ T6249] ? __pfx_do_msg_fill+0x10/0x10 [ 100.673849][ T6249] ? __pfx_do_msgrcv+0x10/0x10 [ 100.673874][ T6249] ? __x64_sys_futex+0x1e0/0x4c0 [ 100.673908][ T6249] ? fput+0x9b/0xd0 [ 100.673941][ T6249] ? xfd_validate_state+0x61/0x180 [ 100.673974][ T6249] ? __pfx_ksys_write+0x10/0x10 [ 100.674010][ T6249] ? do_syscall_64+0xcd/0xfa0 [ 100.674035][ T6249] do_syscall_64+0xcd/0xfa0 [ 100.674065][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.674091][ T6249] RIP: 0033:0x7f154bd8eec9 [ 100.674113][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.674136][ T6249] RSP: 002b:00007f154ccc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 100.674161][ T6249] RAX: ffffffffffffffda RBX: 00007f154bfe5fa0 RCX: 00007f154bd8eec9 [ 100.674178][ T6249] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 100.674194][ T6249] RBP: 00007f154be11f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 100.674210][ T6249] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 100.674225][ T6249] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 100.674262][ T6249] [ 101.064422][ T6256] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 101.133492][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 101.408118][ T6270] FAULT_INJECTION: forcing a failure. [ 101.408118][ T6270] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.452092][ T6272] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 101.452646][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) [ 101.452682][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.452697][ T6270] Call Trace: [ 101.452705][ T6270] [ 101.452715][ T6270] dump_stack_lvl+0x16c/0x1f0 [ 101.452746][ T6270] should_fail_ex+0x512/0x640 [ 101.452780][ T6270] should_fail_alloc_page+0xe7/0x130 [ 101.452815][ T6270] prepare_alloc_pages+0x3c2/0x610 [ 101.452851][ T6270] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 101.452876][ T6270] ? nl80211_send_station.constprop.0+0x15d4/0x35b0 [ 101.452906][ T6270] ? css_rstat_updated+0x1c2/0x510 [ 101.452955][ T6270] ? find_held_lock+0x2b/0x80 [ 101.452983][ T6270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 101.453008][ T6270] ? rcu_read_unlock+0x17/0x60 [ 101.453051][ T6270] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 101.453074][ T6270] ? mark_held_locks+0x49/0x80 [ 101.453105][ T6270] ? interleave_nodes+0x16b/0x410 [ 101.453142][ T6270] ? policy_nodemask+0xea/0x4e0 [ 101.453175][ T6270] alloc_pages_mpol+0x1fb/0x550 [ 101.453208][ T6270] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 101.453236][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.453272][ T6270] alloc_pages_noprof+0x131/0x390 [ 101.453305][ T6270] __pud_alloc+0x3b/0x6b0 [ 101.453338][ T6270] walk_to_pmd+0x35a/0x4c0 [ 101.453373][ T6270] __get_locked_pte+0x25/0xc0 [ 101.453407][ T6270] map_ldt_struct+0x3b0/0xa60 [ 101.453441][ T6270] ? __pfx_map_ldt_struct+0x10/0x10 [ 101.453466][ T6270] ? alloc_pages_noprof+0x23c/0x390 [ 101.453503][ T6270] write_ldt+0x8fa/0xd20 [ 101.453603][ T6270] ? __pfx_write_ldt+0x10/0x10 [ 101.453641][ T6270] ? fput+0x9b/0xd0 [ 101.453678][ T6270] ? __pfx_ksys_write+0x10/0x10 [ 101.453717][ T6270] __x64_sys_modify_ldt+0xb1/0x170 [ 101.453745][ T6270] do_syscall_64+0xcd/0xfa0 [ 101.453777][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.453803][ T6270] RIP: 0033:0x7f1b7518eec9 [ 101.453825][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.453847][ T6270] RSP: 002b:00007f1b760ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 101.453872][ T6270] RAX: ffffffffffffffda RBX: 00007f1b753e5fa0 RCX: 00007f1b7518eec9 [ 101.453890][ T6270] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 101.453905][ T6270] RBP: 00007f1b75211f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.453920][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.453943][ T6270] R13: 00007f1b753e6038 R14: 00007f1b753e5fa0 R15: 00007ffd84083678 [ 101.453980][ T6270] [ 101.792467][ T6272] netlink: 314 bytes leftover after parsing attributes in process `syz.0.164'. [ 102.121075][ T6290] mmap: syz.2.171 (6290) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.651331][ T6309] zswap: compressor not available [ 102.672781][ T6312] Setting dangerous option i915.mitigations - tainting kernel [ 103.098428][ T6329] FAULT_INJECTION: forcing a failure. [ 103.098428][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 103.143079][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.0.187 Tainted: G U syzkaller #0 PREEMPT(full) [ 103.143121][ T6329] Tainted: [U]=USER [ 103.143131][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.143146][ T6329] Call Trace: [ 103.143154][ T6329] [ 103.143164][ T6329] dump_stack_lvl+0x16c/0x1f0 [ 103.143198][ T6329] should_fail_ex+0x512/0x640 [ 103.143229][ T6329] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 103.143260][ T6329] should_failslab+0xc2/0x120 [ 103.143293][ T6329] kmem_cache_alloc_noprof+0x75/0x6e0 [ 103.143320][ T6329] ? __pmd_alloc+0xbf/0x8b0 [ 103.143358][ T6329] ? __pmd_alloc+0xbf/0x8b0 [ 103.143387][ T6329] __pmd_alloc+0xbf/0x8b0 [ 103.143425][ T6329] ? find_held_lock+0x2b/0x80 [ 103.143456][ T6329] __handle_mm_fault+0xada/0x2aa0 [ 103.143505][ T6329] ? __pfx___handle_mm_fault+0x10/0x10 [ 103.143574][ T6329] handle_mm_fault+0x589/0xd10 [ 103.143652][ T6329] __get_user_pages+0x54e/0x3530 [ 103.143709][ T6329] ? __pfx___get_user_pages+0x10/0x10 [ 103.143752][ T6329] populate_vma_page_range+0x267/0x3f0 [ 103.143792][ T6329] ? __pfx_populate_vma_page_range+0x10/0x10 [ 103.143823][ T6329] ? __pfx_find_vma_intersection+0x10/0x10 [ 103.143855][ T6329] ? do_mmap+0x69c/0x1210 [ 103.143889][ T6329] __mm_populate+0x1d8/0x380 [ 103.143925][ T6329] ? __pfx___mm_populate+0x10/0x10 [ 103.143962][ T6329] ? up_write+0x1b2/0x520 [ 103.144021][ T6329] vm_mmap_pgoff+0x37f/0x470 [ 103.144061][ T6329] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 103.144103][ T6329] ? __x64_sys_futex+0x1e0/0x4c0 [ 103.144135][ T6329] ? __x64_sys_futex+0x1e9/0x4c0 [ 103.144172][ T6329] ksys_mmap_pgoff+0x7d/0x5c0 [ 103.144201][ T6329] ? xfd_validate_state+0x61/0x180 [ 103.144234][ T6329] ? __pfx_ksys_write+0x10/0x10 [ 103.144266][ T6329] __x64_sys_mmap+0x125/0x190 [ 103.144307][ T6329] do_syscall_64+0xcd/0xfa0 [ 103.144338][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.144362][ T6329] RIP: 0033:0x7f154bd8eec9 [ 103.144384][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.144408][ T6329] RSP: 002b:00007f154ccc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.144432][ T6329] RAX: ffffffffffffffda RBX: 00007f154bfe5fa0 RCX: 00007f154bd8eec9 [ 103.144450][ T6329] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 103.144466][ T6329] RBP: 00007f154be11f91 R08: 0000000000000002 R09: 0000000000008000 [ 103.144482][ T6329] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 103.144497][ T6329] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 103.144535][ T6329] [ 103.965862][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 104.020403][ T6353] ptrace attach of "./syz-executor exec"[5835] was attempted by "ќ7ЋbIS&%bЗd<дЁітŒЏx6N<да™ХЮз”kфЙачƒШšqАxpЈlг–Е‡›зчk1—> И’;}5кSf\x09L}ўЪw—ьКšЈаЕW<9Л@‚HNA†)’ЗОцЧ]Мб+д\x0cўљ\x1bkLtПgЖ№VY…YБфЊ,ЖJя~ЊШ4ФЋзYЎ7nŸ‡r”† ы+%™0+‘§+˜љЧϘFZ!Ѕ]ў-zz­ШAxPЌЅТЂМ;лБжKцл­ ЪMLЬцрЬ3ё…dЫђСэЂ\x5cью0к-—IAtkЏUкњ.цЁб4охŽ \x1bˆЊ?ы24Шlі\x0cgP\x1bRrI5ьA”lЩuFм,d_оьЇ\x5c„VQcђ|Ш„ТѓЉ”DТQФF;ыјЅюЂу§њбУ•Н?ЉuЌ0ОNŽ8м0[3†\x0dlžп|RфWљ…N„AтНЧЏљэХН–ђЩВи…Pg<м\x0dЛА<-йПџ№…†ѕˆ4fœЈ\x0d4y1ŽЉТNэ•ŸEй{<ЈЦCъScцœР4pИDюŽJ}ыЅЕѕ‹BƒСs\x0d˜*ъ….шgЯ…ˆ:д‹ёусЄл‰ъx№Ÿ-yв1ЖL\x1bз\x0aEЦ\x0d'“Јxѕ0s–[№u\x22_eКЉ!Э\x0cад7]­тЩjŽœ?2эH†Т}UE8шa€aэ+ів\x0b4/їКЅђн6H[iсŽ іЇRYI\x09:#~\x0aШЮВІPо‰њ\x0b\x0cž<–мгŠїРК\x1bv)Ÿ’ё6‹mЄЕмЇQ\x07 ЄрВХмСH lu‹лt;аveЕŽ4\x5ceе`œ%gŠ6•ј яёni˜ŽЇЕвЂКщ@кByX'6жGSŒѕ&ЎжЇКЎkW›[КooХЊ­5|Z•ŒщњћпхжыЪ\x0a‹~бЪЋkŠВпbИо'+œПRXy?чn^;\x22%іЊMY8БtЭяцЏ„ ёŠfЃK%pu1џэпўБЙћbmДя•JЎ}W}‘аСsЕбeМV‹D\x5c\x0aЎъ~ШБiy!˜\x0cvеmъ4ФЊГ\x0 [ 105.772281][ T6421] FAULT_INJECTION: forcing a failure. [ 105.772281][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 105.952015][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.0.228 Tainted: G U syzkaller #0 PREEMPT(full) [ 105.952056][ T6421] Tainted: [U]=USER [ 105.952064][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.952080][ T6421] Call Trace: [ 105.952089][ T6421] [ 105.952099][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 105.952132][ T6421] should_fail_ex+0x512/0x640 [ 105.952163][ T6421] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 105.952194][ T6421] should_failslab+0xc2/0x120 [ 105.952228][ T6421] kmem_cache_alloc_noprof+0x75/0x6e0 [ 105.952254][ T6421] ? sk_prot_alloc+0x60/0x2a0 [ 105.952294][ T6421] ? sk_prot_alloc+0x60/0x2a0 [ 105.952325][ T6421] sk_prot_alloc+0x60/0x2a0 [ 105.952361][ T6421] sk_alloc+0x36/0xc20 [ 105.952388][ T6421] qrtr_create+0x84/0x1d0 [ 105.952426][ T6421] __sock_create+0x335/0x8d0 [ 105.952469][ T6421] __sys_socket+0x14d/0x260 [ 105.952506][ T6421] ? __pfx___sys_socket+0x10/0x10 [ 105.952542][ T6421] ? xfd_validate_state+0x61/0x180 [ 105.952576][ T6421] ? __pfx_ksys_write+0x10/0x10 [ 105.952609][ T6421] __x64_sys_socket+0x72/0xb0 [ 105.952643][ T6421] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.952671][ T6421] do_syscall_64+0xcd/0xfa0 [ 105.952699][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.952724][ T6421] RIP: 0033:0x7f154bd8eec9 [ 105.952744][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.952769][ T6421] RSP: 002b:00007f154ccc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.952793][ T6421] RAX: ffffffffffffffda RBX: 00007f154bfe5fa0 RCX: 00007f154bd8eec9 [ 105.952811][ T6421] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 105.952826][ T6421] RBP: 00007f154be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.952841][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.952856][ T6421] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 105.952892][ T6421] [ 106.829817][ T6441] block nbd7: not configured, cannot reconfigure [ 106.857694][ T6443] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 108.398521][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'. [ 108.918542][ T6514] netlink: Unknown conntrack attr (0) [ 110.053767][ T6489] kexec: Could not allocate control_code_buffer [ 112.281529][ T6619] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 112.582540][ T6629] Invalid ELF header magic: != ELF [ 113.479642][ T6661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.655308][ T6664] __vm_enough_memory: pid: 6664, comm: syz.0.337, bytes: 4398046511104 not enough memory for the allocation [ 114.154266][ T6679] ovs_џў: entered promiscuous mode [ 116.168846][ T6743] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 116.575054][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 116.593662][ T6754] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.942390][ T6800] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[6800] [ 118.718298][ T6831] input: fЌ as /devices/virtual/input/input5 [ 118.988008][ T6835] zswap: compressor not available [ 119.013007][ T6846] lo: entered allmulticast mode [ 119.032743][ T6845] lo: left allmulticast mode [ 119.286117][ T6858] ======================================================= [ 119.286117][ T6858] WARNING: The mand mount option has been deprecated and [ 119.286117][ T6858] and is ignored by this kernel. Remove the mand [ 119.286117][ T6858] option from the mount to silence this warning. [ 119.286117][ T6858] ======================================================= [ 120.445489][ T30] audit: type=1807 audit(1760005149.939:2): UNKNOWN=ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџ [ 120.445765][ T30] audit: type=1802 audit(1760005149.939:3): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.438" res=0 errno=0 [ 120.557195][ T6902] ima: policy update failed [ 120.563547][ T30] audit: type=1802 audit(1760005150.059:4): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.438" res=0 errno=0 [ 120.972549][ T6921] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[6921] [ 122.077107][ T6951] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[6951] [ 122.671957][ T30] audit: type=1807 audit(1760005152.159:5): UNKNOWN=ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџ [ 122.672246][ T30] audit: type=1802 audit(1760005152.159:6): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.464" res=0 errno=0 [ 122.672723][ T6971] ima: policy update failed [ 122.801364][ T30] audit: type=1802 audit(1760005152.289:7): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.464" res=0 errno=0 [ 124.842456][ T7042] input: fЌ as /devices/virtual/input/input6 [ 127.764830][ T7112] sd 0:0:1:0: PR command failed: 1026 [ 127.781992][ T7112] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 127.789011][ T7112] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 128.652574][ T7136] __vm_enough_memory: pid: 7136, comm: syz.1.535, bytes: 4398046511104 not enough memory for the allocation [ 129.912099][ T7164] bridge0: port 3(hsr0) entered blocking state [ 130.023126][ T7164] bridge0: port 3(hsr0) entered disabled state [ 130.043840][ T7164] hsr0: entered allmulticast mode [ 130.058712][ T7164] hsr_slave_0: entered allmulticast mode [ 130.076327][ T7164] hsr_slave_1: entered allmulticast mode [ 130.138996][ T7164] hsr0: entered promiscuous mode [ 130.170123][ T7164] bridge0: port 3(hsr0) entered blocking state [ 130.176540][ T7164] bridge0: port 3(hsr0) entered forwarding state [ 130.892587][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 132.453506][ T7182] kexec: Could not allocate control_code_buffer [ 133.008021][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018082][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.177474][ T7194] kexec: Could not allocate control_code_buffer [ 136.446192][ T7262] sd 0:0:1:0: PR command failed: 1026 [ 136.451666][ T7262] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 136.484079][ T7262] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 136.967795][ T7247] kexec: Could not allocate control_code_buffer [ 144.940051][ T7484] netlink: 206 bytes leftover after parsing attributes in process `syz.0.679'. [ 147.527065][ T7550] zswap: compressor ћ not available [ 148.423860][ T7592] bridge0: port 4(veth1_macvtap) entered blocking state [ 148.433362][ T7592] bridge0: port 4(veth1_macvtap) entered disabled state [ 148.440618][ T7592] veth1_macvtap: entered allmulticast mode [ 148.504695][ T7592] veth1_macvtap: left allmulticast mode [ 151.281681][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 152.318637][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 153.324617][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 156.883304][ T7833] netlink: 350 bytes leftover after parsing attributes in process `syz.3.832'. [ 157.324191][ T7843] netlink: 342 bytes leftover after parsing attributes in process `syz.0.837'. [ 157.882644][ T7860] input: jJЧИэИќ;9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input7 [ 157.903696][ T7858] netlink: 350 bytes leftover after parsing attributes in process `syz.0.844'. [ 158.086431][ T7866] netlink: 342 bytes leftover after parsing attributes in process `syz.3.849'. [ 158.974563][ T7889] netlink: 350 bytes leftover after parsing attributes in process `syz.1.858'. [ 159.254524][ T7894] input: jJЧИэИќ;9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input8 [ 160.270158][ T5826] Bluetooth: hci2: Malformed HCI Event [ 160.863781][ T7934] input: jJЧИэИќ;9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input9 [ 161.899818][ T7965] input: jJЧИэИќ;9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input11 [ 162.704000][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 163.504020][ T5826] Bluetooth: hci3: Malformed HCI Event [ 164.242602][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 165.132425][ T8096] sd 0:0:1:0: device reset [ 166.533908][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 167.259937][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 168.781600][ T8192] input: fЌ as /devices/virtual/input/input14 [ 168.978950][ T8198] random: crng reseeded on system resumption [ 169.386398][ T8204] random: crng reseeded on system resumption [ 169.829009][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 170.193874][ T8235] input: fЌ as /devices/virtual/input/input15 [ 170.882664][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 171.219598][ T8287] random: crng reseeded on system resumption [ 172.083604][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 172.826533][ T8343] zswap: compressor not available [ 174.255511][ T8380] zswap: compressor not available [ 175.138030][ T8419] FAULT_INJECTION: forcing a failure. [ 175.138030][ T8419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.181714][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.3.1085 Tainted: G U syzkaller #0 PREEMPT(full) [ 175.181756][ T8419] Tainted: [U]=USER [ 175.181765][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.181780][ T8419] Call Trace: [ 175.181788][ T8419] [ 175.181802][ T8419] dump_stack_lvl+0x16c/0x1f0 [ 175.181833][ T8419] should_fail_ex+0x512/0x640 [ 175.181870][ T8419] should_fail_alloc_page+0xe7/0x130 [ 175.181905][ T8419] prepare_alloc_pages+0x3c2/0x610 [ 175.181937][ T8419] ? rcu_is_watching+0x12/0xc0 [ 175.181969][ T8419] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 175.181998][ T8419] ? rcu_is_watching+0x12/0xc0 [ 175.182024][ T8419] ? trace_sched_exit_tp+0xd1/0x120 [ 175.182061][ T8419] ? __schedule+0x11a3/0x5de0 [ 175.182084][ T8419] ? __lock_acquire+0x62e/0x1ce0 [ 175.182125][ T8419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.182162][ T8419] ? __lock_acquire+0x62e/0x1ce0 [ 175.182215][ T8419] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.182254][ T8419] ? policy_nodemask+0xea/0x4e0 [ 175.182285][ T8419] alloc_pages_mpol+0x1fb/0x550 [ 175.182315][ T8419] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 175.182342][ T8419] ? __futex_wait+0x24b/0x2f0 [ 175.182377][ T8419] ? __pfx___futex_wait+0x10/0x10 [ 175.182418][ T8419] ___kmalloc_large_node+0xed/0x160 [ 175.182456][ T8419] __kmalloc_large_node_noprof+0x1c/0x70 [ 175.182493][ T8419] __kmalloc_noprof.cold+0xc/0x62 [ 175.182529][ T8419] ? iovec_from_user+0x108/0x140 [ 175.182567][ T8419] ? iovec_from_user+0x108/0x140 [ 175.182596][ T8419] iovec_from_user+0x108/0x140 [ 175.182631][ T8419] __import_iovec+0x88/0x650 [ 175.182673][ T8419] import_iovec+0x86/0xb0 [ 175.182708][ T8419] __do_sys_process_madvise+0x121/0x3c0 [ 175.182746][ T8419] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 175.182781][ T8419] ? __pfx_do_futex+0x10/0x10 [ 175.182849][ T8419] do_syscall_64+0xcd/0xfa0 [ 175.182880][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.182905][ T8419] RIP: 0033:0x7f1b7518eec9 [ 175.182926][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.182949][ T8419] RSP: 002b:00007f1b760ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 175.182974][ T8419] RAX: ffffffffffffffda RBX: 00007f1b753e5fa0 RCX: 00007f1b7518eec9 [ 175.182991][ T8419] RDX: 00000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff [ 175.183007][ T8419] RBP: 00007f1b75211f91 R08: 0000000000000000 R09: 0000000000000000 [ 175.183022][ T8419] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 175.183037][ T8419] R13: 00007f1b753e6038 R14: 00007f1b753e5fa0 R15: 00007ffd84083678 [ 175.183073][ T8419] [ 176.096872][ T8447] FAULT_INJECTION: forcing a failure. [ 176.096872][ T8447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.125586][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.0.1099 Tainted: G U syzkaller #0 PREEMPT(full) [ 176.125629][ T8447] Tainted: [U]=USER [ 176.125639][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.125653][ T8447] Call Trace: [ 176.125662][ T8447] [ 176.125673][ T8447] dump_stack_lvl+0x16c/0x1f0 [ 176.125706][ T8447] should_fail_ex+0x512/0x640 [ 176.125742][ T8447] should_fail_alloc_page+0xe7/0x130 [ 176.125778][ T8447] prepare_alloc_pages+0x3c2/0x610 [ 176.125811][ T8447] ? rcu_is_watching+0x12/0xc0 [ 176.125841][ T8447] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 176.125869][ T8447] ? rcu_is_watching+0x12/0xc0 [ 176.125896][ T8447] ? trace_sched_exit_tp+0xd1/0x120 [ 176.125934][ T8447] ? __schedule+0x11a3/0x5de0 [ 176.125958][ T8447] ? __lock_acquire+0x62e/0x1ce0 [ 176.125999][ T8447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.126027][ T8447] ? __lock_acquire+0x62e/0x1ce0 [ 176.126084][ T8447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.126128][ T8447] ? policy_nodemask+0xea/0x4e0 [ 176.126165][ T8447] alloc_pages_mpol+0x1fb/0x550 [ 176.126200][ T8447] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 176.126231][ T8447] ? __futex_wait+0x24b/0x2f0 [ 176.126272][ T8447] ? __pfx___futex_wait+0x10/0x10 [ 176.126315][ T8447] ___kmalloc_large_node+0xed/0x160 [ 176.126353][ T8447] __kmalloc_large_node_noprof+0x1c/0x70 [ 176.126391][ T8447] __kmalloc_noprof.cold+0xc/0x62 [ 176.126428][ T8447] ? iovec_from_user+0x108/0x140 [ 176.126466][ T8447] ? iovec_from_user+0x108/0x140 [ 176.126495][ T8447] iovec_from_user+0x108/0x140 [ 176.126531][ T8447] __import_iovec+0x88/0x650 [ 176.126571][ T8447] import_iovec+0x86/0xb0 [ 176.126608][ T8447] __do_sys_process_madvise+0x121/0x3c0 [ 176.126646][ T8447] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 176.126681][ T8447] ? __pfx_do_futex+0x10/0x10 [ 176.126748][ T8447] do_syscall_64+0xcd/0xfa0 [ 176.126777][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.126802][ T8447] RIP: 0033:0x7f154bd8eec9 [ 176.126823][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.126847][ T8447] RSP: 002b:00007f154ccc1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 176.126872][ T8447] RAX: ffffffffffffffda RBX: 00007f154bfe5fa0 RCX: 00007f154bd8eec9 [ 176.126889][ T8447] RDX: 00000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff [ 176.126905][ T8447] RBP: 00007f154be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.126920][ T8447] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 176.126936][ T8447] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 176.126973][ T8447] [ 178.218094][ T8538] __vm_enough_memory: pid: 8538, comm: syz.2.1142, bytes: 4398046511104 not enough memory for the allocation [ 179.884889][ T8595] Invalid ELF header len 5 [ 180.533354][ T8630] Invalid ELF header len 5 [ 181.131966][ T30] audit: type=1806 audit(1760005210.609:8): xattr=01 res=-22 [ 182.361261][ T8703] Invalid ELF header len 5 [ 184.200522][ T8767] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.207321][ T8767] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.031660][ T5826] Bluetooth: hci0: SCO packet too small [ 192.257344][ T9112] FAULT_INJECTION: forcing a failure. [ 192.257344][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 192.272103][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.3.1397 Tainted: G U syzkaller #0 PREEMPT(full) [ 192.272145][ T9112] Tainted: [U]=USER [ 192.272154][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.272169][ T9112] Call Trace: [ 192.272177][ T9112] [ 192.272187][ T9112] dump_stack_lvl+0x16c/0x1f0 [ 192.272219][ T9112] should_fail_ex+0x512/0x640 [ 192.272248][ T9112] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 192.272276][ T9112] should_failslab+0xc2/0x120 [ 192.272308][ T9112] kmem_cache_alloc_noprof+0x75/0x6e0 [ 192.272333][ T9112] ? alloc_empty_file+0x55/0x1e0 [ 192.272373][ T9112] ? alloc_empty_file+0x55/0x1e0 [ 192.272402][ T9112] alloc_empty_file+0x55/0x1e0 [ 192.272434][ T9112] path_openat+0xda/0x2cb0 [ 192.272468][ T9112] ? __pfx_path_openat+0x10/0x10 [ 192.272503][ T9112] do_filp_open+0x20b/0x470 [ 192.272530][ T9112] ? __pfx_do_filp_open+0x10/0x10 [ 192.272576][ T9112] ? alloc_fd+0x471/0x7d0 [ 192.272607][ T9112] do_sys_openat2+0x11b/0x1d0 [ 192.272641][ T9112] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.272672][ T9112] ? find_held_lock+0x2b/0x80 [ 192.272698][ T9112] ? handle_mm_fault+0x2ab/0xd10 [ 192.272765][ T9112] __x64_sys_openat+0x174/0x210 [ 192.272800][ T9112] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.272836][ T9112] ? do_user_addr_fault+0x843/0x1370 [ 192.272869][ T9112] do_syscall_64+0xcd/0xfa0 [ 192.272907][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.272933][ T9112] RIP: 0033:0x7f1b7518d710 [ 192.272954][ T9112] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 192.272977][ T9112] RSP: 002b:00007f1b760fef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 192.273001][ T9112] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1b7518d710 [ 192.273017][ T9112] RDX: 0000000000000002 RSI: 00007f1b760fefa0 RDI: 00000000ffffff9c [ 192.273033][ T9112] RBP: 00007f1b760fefa0 R08: 0000000000000000 R09: 0000000000000000 [ 192.273049][ T9112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 192.273064][ T9112] R13: 00007f1b753e6038 R14: 00007f1b753e5fa0 R15: 00007ffd84083678 [ 192.273099][ T9112] [ 193.966084][ T9162] FAULT_INJECTION: forcing a failure. [ 193.966084][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 193.982374][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.3.1418 Tainted: G U syzkaller #0 PREEMPT(full) [ 193.982416][ T9162] Tainted: [U]=USER [ 193.982425][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.982439][ T9162] Call Trace: [ 193.982448][ T9162] [ 193.982457][ T9162] dump_stack_lvl+0x16c/0x1f0 [ 193.982490][ T9162] should_fail_ex+0x512/0x640 [ 193.982520][ T9162] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 193.982550][ T9162] should_failslab+0xc2/0x120 [ 193.982583][ T9162] kmem_cache_alloc_noprof+0x75/0x6e0 [ 193.982607][ T9162] ? net_alloc_generic+0x1e/0x70 [ 193.982635][ T9162] ? copy_net_ns+0xe9/0x690 [ 193.982672][ T9162] ? copy_net_ns+0xe9/0x690 [ 193.982704][ T9162] copy_net_ns+0xe9/0x690 [ 193.982739][ T9162] ? copy_cgroup_ns+0x71/0x6b0 [ 193.982781][ T9162] create_new_namespaces+0x3ea/0xa90 [ 193.982820][ T9162] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 193.982853][ T9162] ksys_unshare+0x45b/0xa40 [ 193.982886][ T9162] ? __pfx_ksys_unshare+0x10/0x10 [ 193.982920][ T9162] ? xfd_validate_state+0x61/0x180 [ 193.982965][ T9162] __x64_sys_unshare+0x31/0x40 [ 193.982996][ T9162] do_syscall_64+0xcd/0xfa0 [ 193.983026][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.983051][ T9162] RIP: 0033:0x7f1b7518eec9 [ 193.983072][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.983095][ T9162] RSP: 002b:00007f1b760ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 193.983119][ T9162] RAX: ffffffffffffffda RBX: 00007f1b753e5fa0 RCX: 00007f1b7518eec9 [ 193.983137][ T9162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 193.983153][ T9162] RBP: 00007f1b75211f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.983168][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.983183][ T9162] R13: 00007f1b753e6038 R14: 00007f1b753e5fa0 R15: 00007ffd84083678 [ 193.983220][ T9162] [ 194.448037][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481927][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.833402][ T9433] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1532'. [ 201.517659][ T9458] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 201.990112][ T9474] usb usb37: usbfs: process 9474 (syz.2.1550) did not claim interface 0 before use [ 202.255246][ T9483] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1554'. [ 202.405616][ T9492] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1558'. [ 203.008447][ T9516] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1568'. [ 203.791871][ T9545] usb usb37: usbfs: process 9545 (syz.1.1582) did not claim interface 0 before use [ 203.993365][ T9554] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1585'. [ 204.537311][ T9573] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 205.063990][ T9597] usb usb37: usbfs: process 9597 (syz.3.1601) did not claim interface 0 before use [ 205.459709][ T9613] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 206.546142][ T9659] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1630'. [ 206.764207][ T9582] Bluetooth: hci0: command 0x0406 tx timeout [ 206.770498][ T9581] Bluetooth: hci1: command 0x0406 tx timeout [ 206.770855][ T9579] Bluetooth: hci2: command 0x0406 tx timeout [ 206.777348][ T9582] Bluetooth: hci3: command 0x0406 tx timeout [ 207.140007][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1644'. [ 207.605047][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1647'. [ 207.706008][ T9711] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 207.920515][ T9719] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 207.930602][ T9719] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 208.237306][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1662'. [ 210.092031][ T9774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.126447][ T9774] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.150065][ T9774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.171047][ T9774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.255239][ T9774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.261400][ T9774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.294518][ T9774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.300604][ T9774] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 211.444136][ T9825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.451766][ T9825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.458773][ T9825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.465280][ T9825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.855186][ T9887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.899452][ T9887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.909583][ T9887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.954296][ T9887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.441917][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 214.928865][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 214.937009][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 215.001987][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 215.109618][ T9949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.119119][ T9949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.136423][ T9949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.153081][ T9949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.522100][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 217.161993][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 217.163688][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 217.170295][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 217.388830][T10061] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1807'. [ 218.035895][T10092] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 218.312406][T10098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.318714][T10098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.331663][T10098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.346755][T10098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.572756][T10109] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1830'. [ 219.197723][T10137] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1842'. [ 219.358969][ C1] sd 0:0:1:0: [sda] tag#4693 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 219.369537][ C1] sd 0:0:1:0: [sda] tag#4693 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 219.406491][T10145] bonding: no command found in bonding_masters - use +ifname or -ifname [ 220.137766][ C1] sd 0:0:1:0: [sda] tag#4698 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 220.148280][ C1] sd 0:0:1:0: [sda] tag#4698 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 220.362151][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 220.368257][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 220.371737][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 220.374410][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 220.389908][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 220.680518][T10202] bonding: no command found in bonding_masters - use +ifname or -ifname [ 221.306971][T10236] bonding: no command found in bonding_masters - use +ifname or -ifname [ 221.538219][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 221.953691][T10271] bonding: no command found in bonding_masters - use +ifname or -ifname [ 222.289038][T10283] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1910'. [ 222.498406][T10295] bonding: no command found in bonding_masters - use +ifname or -ifname [ 223.135582][T10328] FAULT_INJECTION: forcing a failure. [ 223.135582][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 223.181346][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.0.1926 Tainted: G U syzkaller #0 PREEMPT(full) [ 223.181390][T10328] Tainted: [U]=USER [ 223.181398][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.181413][T10328] Call Trace: [ 223.181423][T10328] [ 223.181433][T10328] dump_stack_lvl+0x16c/0x1f0 [ 223.181468][T10328] should_fail_ex+0x512/0x640 [ 223.181498][T10328] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 223.181527][T10328] ? __pfx_filemap_map_pages+0x10/0x10 [ 223.181549][T10328] should_failslab+0xc2/0x120 [ 223.181583][T10328] kmem_cache_alloc_noprof+0x75/0x6e0 [ 223.181608][T10328] ? __lock_acquire+0xb97/0x1ce0 [ 223.181640][T10328] ? ptlock_alloc+0x1f/0x70 [ 223.181679][T10328] ? __pfx_filemap_map_pages+0x10/0x10 [ 223.181702][T10328] ? ptlock_alloc+0x1f/0x70 [ 223.181736][T10328] ptlock_alloc+0x1f/0x70 [ 223.181774][T10328] pte_alloc_one+0x84/0x350 [ 223.181801][T10328] __do_fault+0x320/0x490 [ 223.181821][T10328] ? do_raw_spin_lock+0x12c/0x2b0 [ 223.181854][T10328] ? __pfx_filemap_map_pages+0x10/0x10 [ 223.181873][T10328] do_pte_missing+0xf4a/0x3ba0 [ 223.181916][T10328] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 223.181954][T10328] ? __pmd_alloc+0x64f/0x8b0 [ 223.181990][T10328] __handle_mm_fault+0x1556/0x2aa0 [ 223.182031][T10328] ? mt_find+0x3e2/0xa20 [ 223.182061][T10328] ? __pfx___handle_mm_fault+0x10/0x10 [ 223.182093][T10328] ? __pfx_mt_find+0x10/0x10 [ 223.182142][T10328] ? find_vma+0xbf/0x140 [ 223.182170][T10328] ? __pfx_find_vma+0x10/0x10 [ 223.182203][T10328] handle_mm_fault+0x589/0xd10 [ 223.182242][T10328] ? __pkru_allows_pkey+0x11/0xb0 [ 223.182281][T10328] do_user_addr_fault+0x7a6/0x1370 [ 223.182309][T10328] ? rcu_is_watching+0x12/0xc0 [ 223.182340][T10328] exc_page_fault+0x64/0xc0 [ 223.182367][T10328] asm_exc_page_fault+0x26/0x30 [ 223.182391][T10328] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 223.182425][T10328] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 223.182449][T10328] RSP: 0018:ffffc900044afd60 EFLAGS: 00050202 [ 223.182470][T10328] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 223.182485][T10328] RDX: fffff52000895fba RSI: 0000000000000000 RDI: ffffc900044afdd0 [ 223.182501][T10328] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000895fba [ 223.182516][T10328] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 223.182530][T10328] R13: ffffc900044afdd0 R14: 0000000000000000 R15: 0000000000000000 [ 223.182564][T10328] _copy_from_user+0x98/0xd0 [ 223.182597][T10328] do_sock_getsockopt+0x3ca/0x440 [ 223.182633][T10328] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 223.182664][T10328] ? __fget_files+0x204/0x3c0 [ 223.182722][T10328] __sys_getsockopt+0x123/0x1b0 [ 223.182759][T10328] __x64_sys_getsockopt+0xbd/0x160 [ 223.182785][T10328] ? do_syscall_64+0x91/0xfa0 [ 223.182812][T10328] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.182838][T10328] do_syscall_64+0xcd/0xfa0 [ 223.182867][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.182891][T10328] RIP: 0033:0x7f154bd8eec9 [ 223.182917][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.182941][T10328] RSP: 002b:00007f154ccc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 223.182964][T10328] RAX: ffffffffffffffda RBX: 00007f154bfe5fa0 RCX: 00007f154bd8eec9 [ 223.182981][T10328] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 223.182995][T10328] RBP: 00007f154be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.183010][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.183024][T10328] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 223.183060][T10328] [ 227.741403][T10487] kexec: Could not allocate control_code_buffer [ 231.361692][T10683] nvme_fabrics: missing parameter 'transport=%s' [ 231.368716][T10683] nvme_fabrics: missing parameter 'nqn=%s' [ 237.393220][T10873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.399924][T10873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.793520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 239.952254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 240.995852][T10977] erspan0: entered allmulticast mode [ 241.776011][T11009] program syz.1.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.049316][T11019] erspan0: entered allmulticast mode [ 243.940844][T11072] erspan0: entered allmulticast mode [ 244.007638][T11076] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2194'. [ 244.905816][T11102] erspan0: entered allmulticast mode [ 245.320775][T11109] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2205'. [ 251.932781][T11303] raw_sendmsg: syz.0.2279 forgot to set AF_INET. Fix it! [ 253.721219][T11370] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2301'. [ 254.446799][T11409] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2319'. [ 254.722845][T11422] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2333'. [ 255.360780][T11443] zswap: compressor 000 not available [ 255.886367][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.892945][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101742][T11472] zswap: compressor 000 not available [ 256.417300][T11497] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 260.349798][T11708] phram: not enough arguments [ 261.176584][T11738] bridge0: port 3(dummy0) entered blocking state [ 261.192007][T11738] bridge0: port 3(dummy0) entered disabled state [ 261.210712][T11738] dummy0: entered allmulticast mode [ 261.218118][T11738] dummy0: entered promiscuous mode [ 261.232524][T11738] bridge0: port 3(dummy0) entered blocking state [ 261.239030][T11738] bridge0: port 3(dummy0) entered forwarding state [ 261.675088][T11761] bridge0: port 3(dummy0) entered blocking state [ 261.681650][T11761] bridge0: port 3(dummy0) entered disabled state [ 261.690418][T11761] dummy0: entered allmulticast mode [ 261.700943][T11761] dummy0: entered promiscuous mode [ 261.710939][T11761] bridge0: port 3(dummy0) entered blocking state [ 261.717489][T11761] bridge0: port 3(dummy0) entered forwarding state [ 262.386698][T11786] phram: not enough arguments [ 262.685074][T11800] FAULT_INJECTION: forcing a failure. [ 262.685074][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 262.701630][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.3.2479 Tainted: G U syzkaller #0 PREEMPT(full) [ 262.701671][T11800] Tainted: [U]=USER [ 262.701680][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.701699][T11800] Call Trace: [ 262.701708][T11800] [ 262.701718][T11800] dump_stack_lvl+0x16c/0x1f0 [ 262.701757][T11800] should_fail_ex+0x512/0x640 [ 262.701785][T11800] ? __kmalloc_noprof+0xca/0x880 [ 262.701823][T11800] should_failslab+0xc2/0x120 [ 262.701855][T11800] __kmalloc_noprof+0xdd/0x880 [ 262.701893][T11800] ? vhost_dev_set_owner+0x20c/0xa50 [ 262.701932][T11800] ? vhost_dev_set_owner+0x20c/0xa50 [ 262.701963][T11800] vhost_dev_set_owner+0x20c/0xa50 [ 262.702010][T11800] vhost_dev_ioctl+0x2eb/0xe20 [ 262.702041][T11800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.702094][T11800] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 262.702142][T11800] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 262.702173][T11800] ? hook_file_ioctl_common+0x145/0x410 [ 262.702216][T11800] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 262.702261][T11800] ? __fget_files+0x20e/0x3c0 [ 262.702293][T11800] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 262.702328][T11800] __x64_sys_ioctl+0x18b/0x210 [ 262.702368][T11800] do_syscall_64+0xcd/0xfa0 [ 262.702400][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.702426][T11800] RIP: 0033:0x7f1b7518eec9 [ 262.702448][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.702471][T11800] RSP: 002b:00007f1b760ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.702497][T11800] RAX: ffffffffffffffda RBX: 00007f1b753e5fa0 RCX: 00007f1b7518eec9 [ 262.702514][T11800] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 262.702530][T11800] RBP: 00007f1b75211f91 R08: 0000000000000000 R09: 0000000000000000 [ 262.702545][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.702560][T11800] R13: 00007f1b753e6038 R14: 00007f1b753e5fa0 R15: 00007ffd84083678 [ 262.702597][T11800] [ 263.121471][T11815] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 263.797652][T11846] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 264.646433][T11875] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 265.026565][ T43] smpboot: CPU 0 is now offline [ 266.786467][T11959] input: jJЧИ-Жš9у%vј“ћЈ as /devices/virtual/input/input16 [ 267.523691][T11988] input: jJЧИ-Жš9у%vј“ћЈ as /devices/virtual/input/input17 [ 268.262523][T12019] input: jJЧИ-Жš9у%vј“ћЈ as /devices/virtual/input/input18 [ 270.654866][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.823988][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.958568][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.164659][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.620402][ T60] dummy0: left allmulticast mode [ 271.646561][ T60] dummy0: left promiscuous mode [ 271.652809][ T60] bridge0: port 3(dummy0) entered disabled state [ 271.774393][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.783440][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.791376][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.799886][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.809965][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.863304][ T60] bridge_slave_1: left allmulticast mode [ 271.894777][ T60] bridge_slave_1: left promiscuous mode [ 271.915396][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.997995][ T60] bridge_slave_0: left allmulticast mode [ 272.017390][ T60] bridge_slave_0: left promiscuous mode [ 272.044026][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.565977][ T60] erspan0 (unregistering): left allmulticast mode [ 273.100096][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.134079][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.176647][ T60] bond0 (unregistering): Released all slaves [ 273.211996][T12117] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2613'. [ 273.272363][ T60] ovs_џў: left promiscuous mode [ 273.883477][ T5147] Bluetooth: hci3: command tx timeout [ 274.499363][ T60] hsr_slave_0: left promiscuous mode [ 274.532085][ T60] hsr_slave_1: left promiscuous mode [ 274.562550][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.570000][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.684038][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.691441][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.837443][ T60] veth1_macvtap: left promiscuous mode [ 274.883838][ T60] veth0_macvtap: left promiscuous mode [ 274.889448][ T60] veth1_vlan: left promiscuous mode [ 274.942197][ T60] veth0_vlan: left promiscuous mode [ 275.963408][ T5147] Bluetooth: hci3: command tx timeout [ 276.432777][ T60] team0 (unregistering): Port device team_slave_1 removed [ 276.592320][ T60] team0 (unregistering): Port device team_slave_0 removed [ 277.955514][T12115] chnl_net:caif_netlink_parms(): no params data found [ 278.049626][ T5147] Bluetooth: hci3: command tx timeout [ 278.344628][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.362143][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.369340][T12115] bridge_slave_0: entered allmulticast mode [ 278.415635][T12115] bridge_slave_0: entered promiscuous mode [ 278.462576][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.469706][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.504565][T12115] bridge_slave_1: entered allmulticast mode [ 278.536902][T12115] bridge_slave_1: entered promiscuous mode [ 278.639280][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.668833][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.784787][T12115] team0: Port device team_slave_0 added [ 278.809170][T12115] team0: Port device team_slave_1 added [ 278.894743][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.901728][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.962043][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.987353][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.013894][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.102005][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.243157][T12115] hsr_slave_0: entered promiscuous mode [ 279.268254][T12115] hsr_slave_1: entered promiscuous mode [ 279.282890][T12115] debugfs: 'hsr0' already exists in 'hsr' [ 279.288637][T12115] Cannot create hsr debugfs directory [ 280.123495][ T5147] Bluetooth: hci3: command tx timeout [ 280.154294][T12115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.194611][T12115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.224470][T12115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.267541][T12115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.497505][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.539911][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.587052][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.594257][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.613506][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.620650][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.948235][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.047383][T12115] veth0_vlan: entered promiscuous mode [ 281.068539][T12115] veth1_vlan: entered promiscuous mode [ 281.124959][T12115] veth0_macvtap: entered promiscuous mode [ 281.158935][T12115] veth1_macvtap: entered promiscuous mode [ 281.206562][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.233736][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.266711][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.291320][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.313003][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.342547][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.429034][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.457839][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.523367][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.543070][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.438849][T12268] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2628'. [ 282.783994][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.963757][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.069826][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.231254][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.639788][ T50] hsr0: left allmulticast mode [ 283.696369][ T50] hsr_slave_0: left allmulticast mode [ 283.714332][ T50] hsr_slave_1: left allmulticast mode [ 283.719762][ T50] hsr0: left promiscuous mode [ 283.793918][ T50] bridge0: port 3(hsr0) entered disabled state [ 283.906446][ T50] bridge_slave_1: left allmulticast mode [ 283.950610][ T50] bridge_slave_1: left promiscuous mode [ 284.005745][ T9423] ------------[ cut here ]------------ [ 284.011225][ T9423] ODEBUG: free active (active state 0) object: ffff888033abd368 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 284.035111][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.102510][ T50] bridge_slave_0: left allmulticast mode [ 284.108173][ T50] bridge_slave_0: left promiscuous mode [ 284.142235][ T9423] WARNING: CPU: 1 PID: 9423 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 284.151872][ T9423] Modules linked in: [ 284.155762][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.0.1527 Tainted: G U syzkaller #0 PREEMPT(full) [ 284.166772][ T9423] Tainted: [U]=USER [ 284.170591][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.180862][ T9423] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 284.186739][ T9423] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 e6 f1 8b 4c 89 e6 48 c7 c7 a0 da f1 8b e8 7f af ca fc 90 <0f> 0b 90 90 58 83 05 f6 dc d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 284.206871][ T9423] RSP: 0018:ffffc900033e7738 EFLAGS: 00010286 [ 284.213069][ T9423] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a5e58 [ 284.221044][ T9423] RDX: ffff88805a7e9e40 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 284.229235][ T9423] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 284.238283][ T9423] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf1e140 [ 284.247363][ T9423] R13: ffffffff8b900fe0 R14: ffffffff8a6b6ca0 R15: ffffc900033e7838 [ 284.255384][ T9423] FS: 0000000000000000(0000) GS:ffff888124ae7000(0000) knlGS:0000000000000000 [ 284.264403][ T9423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.270977][ T9423] CR2: 00007f6a9e25be70 CR3: 000000006423c000 CR4: 00000000003526f0 [ 284.279044][ T9423] Call Trace: [ 284.282601][ T9423] [ 284.285519][ T9423] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 284.290974][ T9423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.296819][ T9423] debug_check_no_obj_freed+0x4b7/0x600 [ 284.302416][ T9423] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 284.308478][ T9423] kfree+0x291/0x6d0 [ 284.312402][ T9423] ? hci_release_dev+0x4ef/0x610 [ 284.317354][ T9423] ? kfree_skbmem+0x1a4/0x1f0 [ 284.322148][ T9423] ? hci_release_dev+0x4ef/0x610 [ 284.327081][ T9423] hci_release_dev+0x4ef/0x610 [ 284.331885][ T9423] ? __pfx_hci_release_dev+0x10/0x10 [ 284.338146][ T9423] ? rcu_is_watching+0x12/0xc0 [ 284.343689][ T9423] ? kfree+0x252/0x6d0 [ 284.347767][ T9423] bt_host_release+0x6a/0xb0 [ 284.352502][ T9423] ? __pfx_bt_host_release+0x10/0x10 [ 284.357775][ T9423] device_release+0xa4/0x240 [ 284.362767][ T9423] kobject_put+0x1e7/0x5a0 [ 284.367224][ T9423] put_device+0x1f/0x30 [ 284.371385][ T9423] vhci_release+0x185/0x230 [ 284.375971][ T9423] ? __pfx_vhci_release+0x10/0x10 [ 284.380987][ T9423] __fput+0x3ff/0xb70 [ 284.385028][ T9423] task_work_run+0x150/0x240 [ 284.389633][ T9423] ? __pfx_task_work_run+0x10/0x10 [ 284.394911][ T9423] do_exit+0x86f/0x2bf0 [ 284.399165][ T9423] ? __pfx_do_exit+0x10/0x10 [ 284.403794][ T9423] ? cgroup_update_frozen_flag+0x107/0x210 [ 284.409617][ T9423] ? find_held_lock+0x2b/0x80 [ 284.414354][ T9423] do_group_exit+0xd3/0x2a0 [ 284.418853][ T9423] get_signal+0x2671/0x26d0 [ 284.423439][ T9423] ? hrtimer_nanosleep+0x187/0x380 [ 284.428572][ T9423] ? __pfx_get_signal+0x10/0x10 [ 284.433480][ T9423] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 284.438676][ T9423] arch_do_signal_or_restart+0x8f/0x790 [ 284.445641][ T9423] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.452661][ T9423] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 284.458821][ T9423] exit_to_user_mode_loop+0x85/0x130 [ 284.464220][ T9423] do_syscall_64+0x426/0xfa0 [ 284.468867][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.474785][ T9423] RIP: 0033:0x7f154bdc1785 [ 284.479273][ T9423] Code: Unable to access opcode bytes at 0x7f154bdc175b. [ 284.486321][ T9423] RSP: 002b:00007f154ccc0f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 284.494767][ T9423] RAX: fffffffffffffdfc RBX: 00007f154bfe5fa0 RCX: 00007f154bdc1785 [ 284.502761][ T9423] RDX: 00007f154ccc0fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.510716][ T9423] RBP: 00007f154be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.518713][ T9423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.526848][ T9423] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 284.534863][ T9423] [ 284.537867][ T9423] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.545316][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.0.1527 Tainted: G U syzkaller #0 PREEMPT(full) [ 284.556147][ T9423] Tainted: [U]=USER [ 284.559931][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.569963][ T9423] Call Trace: [ 284.573228][ T9423] [ 284.576140][ T9423] dump_stack_lvl+0x3d/0x1f0 [ 284.580717][ T9423] vpanic+0x640/0x6f0 [ 284.584689][ T9423] ? debug_print_object+0x1a2/0x2b0 [ 284.589875][ T9423] panic+0xca/0xd0 [ 284.593584][ T9423] ? __pfx_panic+0x10/0x10 [ 284.598011][ T9423] ? check_panic_on_warn+0x1f/0xb0 [ 284.603112][ T9423] check_panic_on_warn+0xab/0xb0 [ 284.608038][ T9423] __warn+0xf6/0x3c0 [ 284.611923][ T9423] ? debug_print_object+0x1a2/0x2b0 [ 284.617114][ T9423] report_bug+0x3c3/0x580 [ 284.621435][ T9423] ? debug_print_object+0x1a2/0x2b0 [ 284.626622][ T9423] handle_bug+0x184/0x210 [ 284.630941][ T9423] exc_invalid_op+0x17/0x50 [ 284.635431][ T9423] asm_exc_invalid_op+0x1a/0x20 [ 284.640267][ T9423] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 284.646070][ T9423] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 e6 f1 8b 4c 89 e6 48 c7 c7 a0 da f1 8b e8 7f af ca fc 90 <0f> 0b 90 90 58 83 05 f6 dc d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 284.665668][ T9423] RSP: 0018:ffffc900033e7738 EFLAGS: 00010286 [ 284.671730][ T9423] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a5e58 [ 284.679686][ T9423] RDX: ffff88805a7e9e40 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 284.687641][ T9423] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 284.695595][ T9423] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf1e140 [ 284.703551][ T9423] R13: ffffffff8b900fe0 R14: ffffffff8a6b6ca0 R15: ffffc900033e7838 [ 284.711510][ T9423] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 284.716968][ T9423] ? __warn_printk+0x198/0x350 [ 284.721727][ T9423] ? __warn_printk+0x1a5/0x350 [ 284.726503][ T9423] ? debug_print_object+0x1a1/0x2b0 [ 284.731718][ T9423] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 284.737172][ T9423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.742972][ T9423] debug_check_no_obj_freed+0x4b7/0x600 [ 284.748506][ T9423] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 284.754565][ T9423] kfree+0x291/0x6d0 [ 284.758451][ T9423] ? hci_release_dev+0x4ef/0x610 [ 284.763381][ T9423] ? kfree_skbmem+0x1a4/0x1f0 [ 284.768051][ T9423] ? hci_release_dev+0x4ef/0x610 [ 284.773065][ T9423] hci_release_dev+0x4ef/0x610 [ 284.777855][ T9423] ? __pfx_hci_release_dev+0x10/0x10 [ 284.783151][ T9423] ? rcu_is_watching+0x12/0xc0 [ 284.787902][ T9423] ? kfree+0x252/0x6d0 [ 284.791965][ T9423] bt_host_release+0x6a/0xb0 [ 284.796547][ T9423] ? __pfx_bt_host_release+0x10/0x10 [ 284.801836][ T9423] device_release+0xa4/0x240 [ 284.806445][ T9423] kobject_put+0x1e7/0x5a0 [ 284.810869][ T9423] put_device+0x1f/0x30 [ 284.815022][ T9423] vhci_release+0x185/0x230 [ 284.819530][ T9423] ? __pfx_vhci_release+0x10/0x10 [ 284.824546][ T9423] __fput+0x3ff/0xb70 [ 284.828527][ T9423] task_work_run+0x150/0x240 [ 284.833120][ T9423] ? __pfx_task_work_run+0x10/0x10 [ 284.838321][ T9423] do_exit+0x86f/0x2bf0 [ 284.842486][ T9423] ? __pfx_do_exit+0x10/0x10 [ 284.847072][ T9423] ? cgroup_update_frozen_flag+0x107/0x210 [ 284.852871][ T9423] ? find_held_lock+0x2b/0x80 [ 284.857534][ T9423] do_group_exit+0xd3/0x2a0 [ 284.862028][ T9423] get_signal+0x2671/0x26d0 [ 284.866523][ T9423] ? hrtimer_nanosleep+0x187/0x380 [ 284.871621][ T9423] ? __pfx_get_signal+0x10/0x10 [ 284.876482][ T9423] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 284.881685][ T9423] arch_do_signal_or_restart+0x8f/0x790 [ 284.887221][ T9423] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.893363][ T9423] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 284.899509][ T9423] exit_to_user_mode_loop+0x85/0x130 [ 284.904784][ T9423] do_syscall_64+0x426/0xfa0 [ 284.909378][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.915255][ T9423] RIP: 0033:0x7f154bdc1785 [ 284.919650][ T9423] Code: Unable to access opcode bytes at 0x7f154bdc175b. [ 284.926647][ T9423] RSP: 002b:00007f154ccc0f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 284.935044][ T9423] RAX: fffffffffffffdfc RBX: 00007f154bfe5fa0 RCX: 00007f154bdc1785 [ 284.942998][ T9423] RDX: 00007f154ccc0fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.950987][ T9423] RBP: 00007f154be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.958963][ T9423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.966918][ T9423] R13: 00007f154bfe6038 R14: 00007f154bfe5fa0 R15: 00007ffc7a41c638 [ 284.974885][ T9423] [ 284.977956][ T9423] Kernel Offset: disabled [ 284.982274][ T9423] Rebooting in 86400 seconds..