last executing test programs: 7m8.37206452s ago: executing program 1 (id=2091): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x0) 7m8.260600697s ago: executing program 1 (id=2093): r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x80) 7m8.122817237s ago: executing program 1 (id=2097): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) 7m7.877509338s ago: executing program 1 (id=2103): setreuid$auto(0x9, 0x1) get_robust_list$auto(0x1, 0x0, 0x0) 7m7.715908642s ago: executing program 1 (id=2106): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 7m7.41121329s ago: executing program 1 (id=2113): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x400, 0x1, 0x6, 0x0, 0x0}) 7m7.054596562s ago: executing program 32 (id=2113): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x400, 0x1, 0x6, 0x0, 0x0}) 3m36.37149722s ago: executing program 4 (id=7010): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x68, 0x10, 0x7fff, 0x5, 0x8000000000b, 0x1, 0x9227, 0x5, 0x5, 0x8, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) 3m35.898429236s ago: executing program 4 (id=7021): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x11, 0x0, 0x0) 3m35.526162323s ago: executing program 4 (id=7032): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_robust_list$auto(0x0, 0x18) 3m35.40654399s ago: executing program 4 (id=7035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_RADIO_NAME={0x6, 0x11, '..'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 3m35.079313585s ago: executing program 4 (id=7042): setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) prlimit64$auto(0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffa}, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x10001, 0xc0000000, 0xffffffffffffffff, 0x7, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0xb, 0xe5, 0x3}, 0x10) 3m33.409513811s ago: executing program 4 (id=7070): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x4, 0x4e, r0, @relative_fd=r0, 0x41}, 0x10) 3m33.141917801s ago: executing program 33 (id=7070): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x4, 0x4e, r0, @relative_fd=r0, 0x41}, 0x10) 42.670891268s ago: executing program 2 (id=10109): setns(0xc9, 0x0) r0 = socket(0x1f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc1) accept$auto(0x3, 0x0, 0x0) 42.437474508s ago: executing program 2 (id=10112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 42.422399098s ago: executing program 5 (id=10113): bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8}, 0xa3) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x3, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) 42.22173337s ago: executing program 2 (id=10115): close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x17, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 42.057190372s ago: executing program 2 (id=10117): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x9, 0x2) 41.953157336s ago: executing program 5 (id=10118): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) 41.918776881s ago: executing program 2 (id=10119): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)="fb", 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_mmio/parameters/device\x00', 0x80480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/4096, 0x1000) 41.836022069s ago: executing program 3 (id=10121): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x6) 41.623475415s ago: executing program 3 (id=10123): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = pipe2$auto(0x0, 0x80) ioctl$auto(r0, 0x5761, 0xffffffffffffffff) 41.565900424s ago: executing program 3 (id=10124): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x10000000084, 0x24, 0x0, 0x8) 41.385830017s ago: executing program 3 (id=10125): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000280)="13") ioctl$auto(0x3, 0x402c542b, 0x38) 40.981377426s ago: executing program 5 (id=10126): r0 = socket(0xa, 0x3, 0x3c) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r0, &(0x7f00000003c0)='+&\x00', 0x273f) 40.920760277s ago: executing program 2 (id=10127): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 40.76629104s ago: executing program 5 (id=10129): mmap$auto(0x0, 0x400008, 0xdf, 0x86b8, 0xffffffffffffffff, 0x40000008000) socketpair$auto(0x200, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xaa0, 0x8) 40.560313894s ago: executing program 3 (id=10131): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) open(0x0, 0x40bc2, 0x1c0) ioctl$auto(r0, 0x4b64, 0x1) 40.454716571s ago: executing program 0 (id=10133): mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x1f00) 40.393135456s ago: executing program 0 (id=10134): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 40.317852239s ago: executing program 0 (id=10135): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x42b8fb73) 40.222854794s ago: executing program 0 (id=10136): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) 40.114110312s ago: executing program 0 (id=10137): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x240080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyu3/power/control\x00', 0x1a1842, 0x0) ftruncate$auto(0x3, 0x400180200000) 39.989082466s ago: executing program 0 (id=10138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002340)={0x2c, r1, 0x801, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="d70b4d9343ea1b12"}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) 39.706321157s ago: executing program 3 (id=10139): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000380)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x4) ioctl$auto(0xc8, 0x54e3, 0x73) 15.449268216s ago: executing program 34 (id=10138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002340)={0x2c, r1, 0x801, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="d70b4d9343ea1b12"}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) 15.434712378s ago: executing program 5 (id=10141): socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x0, 0x20000000004) ioctl$auto(0x3, 0x8916, 0x91) 15.361836498s ago: executing program 35 (id=10127): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 15.238956331s ago: executing program 36 (id=10139): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000380)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x4) ioctl$auto(0xc8, 0x54e3, 0x73) 15.207458442s ago: executing program 5 (id=10144): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd70739b58df963182000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 0s ago: executing program 37 (id=10144): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd70739b58df963182000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) kernel console output (not intermixed with test programs): 377][T25263] create_new_namespaces+0x20a/0xac0 [ 521.310408][T25263] ? security_capable+0x80/0x260 [ 521.310441][T25263] unshare_nsproxy_namespaces+0xf2/0x220 [ 521.310477][T25263] ksys_unshare+0x438/0xab0 [ 521.310514][T25263] ? __pfx_ksys_unshare+0x10/0x10 [ 521.310562][T25263] __x64_sys_unshare+0x31/0x40 [ 521.310596][T25263] do_syscall_64+0x115/0x840 [ 521.310627][T25263] ? clear_bhb_loop+0x40/0x90 [ 521.310660][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.310686][T25263] RIP: 0033:0x7ff45759de99 [ 521.310709][T25263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.310743][T25263] RSP: 002b:00007ff458531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 521.310769][T25263] RAX: ffffffffffffffda RBX: 00007ff457825fa0 RCX: 00007ff45759de99 [ 521.310787][T25263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 521.310805][T25263] RBP: 00007ff457633eaf R08: 0000000000000000 R09: 0000000000000000 [ 521.310821][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.310837][T25263] R13: 00007ff457826038 R14: 00007ff457825fa0 R15: 00007ffcdfbd2e68 [ 521.310873][T25263] [ 522.978338][T25330] FAULT_INJECTION: forcing a failure. [ 522.978338][T25330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.993654][T25330] CPU: 1 UID: 0 PID: 25330 Comm: syz.5.9230 Tainted: G U L syzkaller #0 PREEMPT(full) [ 522.993701][T25330] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 522.993711][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.993727][T25330] Call Trace: [ 522.993735][T25330] [ 522.993744][T25330] dump_stack_lvl+0x100/0x190 [ 522.993779][T25330] should_fail_ex.cold+0x5/0xa [ 522.993802][T25330] ? prepare_alloc_pages+0x16d/0x5f0 [ 522.993841][T25330] should_fail_alloc_page+0xeb/0x140 [ 522.993877][T25330] prepare_alloc_pages+0x1f0/0x5f0 [ 522.993913][T25330] ? rcu_read_unlock+0x17/0x60 [ 522.993952][T25330] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 522.993984][T25330] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 522.994013][T25330] ? try_to_migrate_one+0x119e/0x3000 [ 522.994054][T25330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 522.994086][T25330] ? __pfx_try_to_migrate_one+0x10/0x10 [ 522.994110][T25330] ? __lock_acquire+0x49f/0x1a40 [ 522.994160][T25330] ? reacquire_held_locks+0xce/0x1e0 [ 522.994198][T25330] ? folio_lock_anon_vma_read+0x348/0xe30 [ 522.994229][T25330] ? rcu_is_watching+0x12/0xc0 [ 522.994258][T25330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.994296][T25330] ? policy_nodemask+0xed/0x4f0 [ 522.994332][T25330] alloc_pages_mpol+0x1fb/0x540 [ 522.994368][T25330] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 522.994410][T25330] folio_alloc_mpol_noprof+0x36/0x260 [ 522.994451][T25330] alloc_migration_target_by_mpol+0x2c1/0x650 [ 522.994493][T25330] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 522.994535][T25330] ? __pfx___might_resched+0x10/0x10 [ 522.994573][T25330] ? folio_get_anon_vma+0x16b/0x980 [ 522.994603][T25330] migrate_pages_batch+0x5dc/0x45c0 [ 522.994643][T25330] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 522.994694][T25330] ? __pfx_migrate_pages_batch+0x10/0x10 [ 522.994740][T25330] ? __pfx_remove_migration_pte+0x10/0x10 [ 522.994785][T25330] migrate_pages_sync+0x12c/0x880 [ 522.994824][T25330] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 522.994867][T25330] ? vma_migratable+0x380/0x450 [ 522.994905][T25330] ? __pfx_migrate_pages_sync+0x10/0x10 [ 522.994940][T25330] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 522.994992][T25330] migrate_pages+0x1a83/0x2850 [ 522.995038][T25330] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 522.995087][T25330] ? __pfx_migrate_pages+0x10/0x10 [ 522.995125][T25330] ? mas_next_slot+0x10a3/0x1960 [ 522.995162][T25330] ? do_mbind+0x555/0xfd0 [ 522.995195][T25330] do_mbind+0x5a4/0xfd0 [ 522.995228][T25330] ? __pfx_do_mbind+0x10/0x10 [ 522.995252][T25330] ? find_held_lock+0x2b/0x80 [ 522.995283][T25330] ? ksys_write+0x190/0x250 [ 522.995317][T25330] ? __pfx_get_nodes+0x10/0x10 [ 522.995356][T25330] kernel_mbind+0x1b7/0x200 [ 522.995387][T25330] ? __pfx_kernel_mbind+0x10/0x10 [ 522.995420][T25330] do_syscall_64+0x115/0x840 [ 522.995448][T25330] ? clear_bhb_loop+0x40/0x90 [ 522.995478][T25330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.995502][T25330] RIP: 0033:0x7ff45759de99 [ 522.995525][T25330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.995550][T25330] RSP: 002b:00007ff458531028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 522.995576][T25330] RAX: ffffffffffffffda RBX: 00007ff457825fa0 RCX: 00007ff45759de99 [ 522.995593][T25330] RDX: 0000000100000000 RSI: 0800000100000004 RDI: 0000000000002000 [ 522.995610][T25330] RBP: 00007ff457633eaf R08: 0000000000001003 R09: 0000000000000002 [ 522.995625][T25330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.995640][T25330] R13: 00007ff457826038 R14: 00007ff457825fa0 R15: 00007ffcdfbd2e68 [ 522.995673][T25330] [ 523.912123][T25353] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 524.240477][T25367] netlink: 'syz.2.9247': attribute type 11 has an invalid length. [ 524.267082][T15536] Bluetooth: hci1: ACL packet too small [ 525.822867][T25453] unsupported nla_type 113 [ 526.615255][T25494] netlink: 'syz.5.9306': attribute type 1 has an invalid length. [ 526.623542][T25494] netlink: 33 bytes leftover after parsing attributes in process `syz.5.9306'. [ 526.784661][T25502] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 526.935078][ T29] audit: type=1326 audit(4295032867.271:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.2.9315" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5ab99de99 code=0x0 [ 528.414421][T25562] netlink: Setting conntrack mark requires 'commit' flag. [ 528.824366][T15536] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 528.824407][T15536] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 528.846548][T15536] Bluetooth: hci2: Dropping invalid advertising data [ 528.857379][T15536] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 528.857514][T15536] Bluetooth: hci2: unknown advertising packet type: 0x8b [ 528.864793][T15536] Bluetooth: hci2: unknown advertising packet type: 0xee [ 529.537575][T25619] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 529.912628][T25634] netlink: set zone limit has 4 unknown bytes [ 530.791996][T25673] netlink: Failed to add  helper -22 [ 531.066772][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9398'. [ 531.685530][T25731] netlink: Unknown conntrack attr (type=257, max=9) [ 532.638289][T25780] netlink: 'syz.5.9443': attribute type 1 has an invalid length. [ 533.305900][T25815] FAULT_INJECTION: forcing a failure. [ 533.305900][T25815] name failslab, interval 1, probability 0, space 0, times 0 [ 533.340928][T25815] CPU: 1 UID: 0 PID: 25815 Comm: syz.5.9467 Tainted: G U L syzkaller #0 PREEMPT(full) [ 533.340976][T25815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 533.340985][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 533.341001][T25815] Call Trace: [ 533.341010][T25815] [ 533.341029][T25815] dump_stack_lvl+0x100/0x190 [ 533.341063][T25815] should_fail_ex.cold+0x5/0xa [ 533.341094][T25815] should_failslab+0xc2/0x120 [ 533.341133][T25815] kmem_cache_alloc_noprof+0x91/0x6a0 [ 533.341166][T25815] ? d_instantiate+0x8a/0xb0 [ 533.341198][T25815] ? d_instantiate+0x8a/0xb0 [ 533.341229][T25815] ? alloc_empty_file+0x5b/0x1c0 [ 533.341267][T25815] alloc_empty_file+0x5b/0x1c0 [ 533.341303][T25815] alloc_file_pseudo+0x183/0x290 [ 533.341341][T25815] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 533.341373][T25815] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 533.341422][T25815] create_pipe_files+0x360/0x970 [ 533.341456][T25815] do_pipe2+0xbd/0x1e0 [ 533.341483][T25815] ? __pfx_do_pipe2+0x10/0x10 [ 533.341512][T25815] ? xfd_validate_state+0x129/0x190 [ 533.341555][T25815] __x64_sys_pipe2+0x54/0x80 [ 533.341585][T25815] do_syscall_64+0x115/0x840 [ 533.341617][T25815] ? clear_bhb_loop+0x40/0x90 [ 533.341654][T25815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.341681][T25815] RIP: 0033:0x7ff45759de99 [ 533.341704][T25815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.341731][T25815] RSP: 002b:00007ff458531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 533.341758][T25815] RAX: ffffffffffffffda RBX: 00007ff457825fa0 RCX: 00007ff45759de99 [ 533.341777][T25815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.341792][T25815] RBP: 00007ff457633eaf R08: 0000000000000000 R09: 0000000000000000 [ 533.341808][T25815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.341824][T25815] R13: 00007ff457826038 R14: 00007ff457825fa0 R15: 00007ffcdfbd2e68 [ 533.341861][T25815] [ 533.640061][T25819] netlink: zone id is out of range [ 533.651734][T25819] netlink: get zone limit has 8 unknown bytes [ 534.161228][T25843] netlink: 'syz.0.9473': attribute type 1 has an invalid length. [ 534.416502][T25857] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.440616][T25860] ksmbd: Unknown IPC event: 14, ignore. [ 535.003491][T25885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.038666][T25888] netlink: 'syz.0.9496': attribute type 2 has an invalid length. [ 535.530003][T25914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9508'. [ 536.360934][T25915] syz.3.9509 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 536.396389][T25915] CPU: 1 UID: 0 PID: 25915 Comm: syz.3.9509 Tainted: G U L syzkaller #0 PREEMPT(full) [ 536.396432][T25915] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 536.396441][T25915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 536.396453][T25915] Call Trace: [ 536.396462][T25915] [ 536.396472][T25915] dump_stack_lvl+0x100/0x190 [ 536.396508][T25915] dump_header+0xfb/0x606 [ 536.396538][T25915] oom_kill_process.cold+0xd/0x330 [ 536.396565][T25915] out_of_memory+0x340/0x14f0 [ 536.396609][T25915] ? __pfx_out_of_memory+0x10/0x10 [ 536.396649][T25915] mem_cgroup_out_of_memory+0xc6/0x130 [ 536.396678][T25915] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 536.396706][T25915] ? find_held_lock+0x2b/0x80 [ 536.396745][T25915] ? do_raw_spin_unlock+0x145/0x1e0 [ 536.396775][T25915] ? _raw_spin_unlock+0x28/0x50 [ 536.396806][T25915] try_charge_memcg+0x6e5/0xdf0 [ 536.396851][T25915] ? __pfx_try_charge_memcg+0x10/0x10 [ 536.396886][T25915] ? find_held_lock+0x2b/0x80 [ 536.396916][T25915] ? rcu_read_unlock+0x17/0x60 [ 536.396954][T25915] ? rcu_read_unlock+0x17/0x60 [ 536.396992][T25915] ? find_held_lock+0x2b/0x80 [ 536.397024][T25915] ? rcu_read_unlock+0x17/0x60 [ 536.397069][T25915] charge_memcg+0x187/0x1e0 [ 536.397121][T25915] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 536.397149][T25915] swap_cache_alloc_folio+0x548/0xc50 [ 536.397182][T25915] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 536.397208][T25915] ? swap_cache_get_folio+0x28d/0x360 [ 536.397238][T25915] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 536.397276][T25915] swap_cache_read_folio+0x47/0x140 [ 536.397310][T25915] swap_cluster_readahead+0x387/0x5f0 [ 536.397343][T25915] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 536.397385][T25915] ? __lock_acquire+0x49f/0x1a40 [ 536.397420][T25915] ? get_vma_policy+0x23d/0x3b0 [ 536.397456][T25915] swapin_readahead+0x159/0x1200 [ 536.397492][T25915] ? __pfx_swapin_readahead+0x10/0x10 [ 536.397526][T25915] ? swap_table_get+0x10d/0x2c0 [ 536.397551][T25915] ? swap_cache_get_folio+0x28d/0x360 [ 536.397576][T25915] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 536.397602][T25915] ? __pfx_softleaf_type+0x10/0x10 [ 536.397634][T25915] ? do_swap_page+0xf98/0x5780 [ 536.397659][T25915] do_swap_page+0xf98/0x5780 [ 536.397701][T25915] ? __pfx_do_swap_page+0x10/0x10 [ 536.397725][T25915] ? __lock_acquire+0x49f/0x1a40 [ 536.397759][T25915] ? lockdep_hardirqs_on+0x78/0x100 [ 536.397789][T25915] ? rcu_is_watching+0x12/0xc0 [ 536.397816][T25915] ? __pte_offset_map+0x179/0x310 [ 536.397850][T25915] __handle_mm_fault+0x192f/0x2a00 [ 536.397880][T25915] ? reacquire_held_locks+0xce/0x1e0 [ 536.397916][T25915] ? __pfx___handle_mm_fault+0x10/0x10 [ 536.397945][T25915] ? lock_vma_under_rcu+0x17c/0x590 [ 536.397986][T25915] handle_mm_fault+0x37b/0xa30 [ 536.398017][T25915] do_user_addr_fault+0x5a3/0x12f0 [ 536.398057][T25915] exc_page_fault+0x6f/0xd0 [ 536.398084][T25915] asm_exc_page_fault+0x26/0x30 [ 536.398112][T25915] RIP: 0033:0x7f29e9958fc3 [ 536.398132][T25915] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 86 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 536.398154][T25915] RSP: 002b:00007ffeabf45b60 EFLAGS: 00010246 [ 536.398173][T25915] RAX: 0000000000000000 RBX: 0000555562029500 RCX: 0000000000000000 [ 536.398187][T25915] RDX: 00007ffeabf45ba0 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.398201][T25915] RBP: 00007f29e9c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 536.398215][T25915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000083637 [ 536.398229][T25915] R13: 00007f29e9c25fac R14: 0000000000083331 R15: 00007ffeabf45cd0 [ 536.398261][T25915] [ 536.767879][T25915] memory: usage 3072kB, limit 3072kB, failcnt 37750 [ 536.775309][T25915] memory+swap: usage 3368kB, limit 9007199254740988kB, failcnt 0 [ 536.784334][T25915] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 536.793368][T25915] Memory cgroup stats for /syz3: [ 536.793566][T25915] cache 0 [ 536.801932][T25915] rss 0 [ 536.805127][T25915] rss_huge 0 [ 536.808367][T25915] shmem 0 [ 536.811302][T25915] mapped_file 0 [ 536.823059][T25915] dirty 0 [ 536.826524][T25915] writeback 0 [ 536.829866][T25915] workingset_refault_anon 3599 [ 536.838805][T25915] workingset_refault_file 6679 [ 536.846582][T25915] swap 303104 [ 536.850812][T25915] swapcached 147873792 [ 536.905265][T25915] pgpgin 172761 [ 536.930339][T25915] pgpgout 187122 [ 536.959742][T25915] pgfault 426650 [ 537.000069][T25915] pgmajfault 1678 [ 537.019423][T25915] inactive_anon 0 [ 537.023135][T25915] active_anon 4096 [ 537.027253][T25915] inactive_file 0 [ 537.030900][T25915] active_file 0 [ 537.034416][T25915] unevictable 0 [ 537.037886][T25915] hierarchical_memory_limit 3145728 [ 537.043085][T25915] hierarchical_memsw_limit 9223372036854771712 [ 537.049311][T25915] total_cache 0 [ 537.052789][T25915] total_rss 0 [ 537.056114][T25915] total_rss_huge 0 [ 537.059843][T25915] total_shmem 0 [ 537.063374][T25915] total_mapped_file 0 [ 537.067363][T25915] total_dirty 0 [ 537.070829][T25915] total_writeback 0 [ 537.074742][T25915] total_workingset_refault_anon 3599 [ 537.080168][T25915] total_workingset_refault_file 6679 [ 537.085638][T25915] total_swap 303104 [ 537.089473][T25915] total_swapcached 147873792 [ 537.094133][T25915] total_pgpgin 172761 [ 537.098161][T25915] total_pgpgout 187122 [ 537.102247][T25915] total_pgfault 426650 [ 537.106478][T25915] total_pgmajfault 1678 [ 537.110648][T25915] total_inactive_anon 0 [ 537.115561][T25915] total_active_anon 4096 [ 537.119913][T25915] total_inactive_file 0 [ 537.124161][T25915] total_active_file 0 [ 537.128167][T25915] total_unevictable 0 [ 537.132158][T25915] anon_cost 565 [ 537.135786][T25915] file_cost 0 [ 537.139108][T25915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9509,pid=25915,uid=0 [ 537.158282][T25915] Memory cgroup out of memory: Killed process 25915 (syz.3.9509) total-vm:104292kB, anon-rss:1252kB, file-rss:20988kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 537.516103][T25966] nbd: must specify a device to reconfigure [ 537.536139][T15536] Bluetooth: hci1: command 0x0406 tx timeout [ 538.522343][T19921] bridge_slave_1: left allmulticast mode [ 538.537347][T19921] bridge_slave_1: left promiscuous mode [ 538.554026][T19921] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.583596][T19921] bridge_slave_0: left allmulticast mode [ 538.594778][T19921] bridge_slave_0: left promiscuous mode [ 538.614848][T19921] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.022430][T19921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.070341][T19921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.115659][T19921] bond0 (unregistering): Released all slaves [ 539.134322][T15536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.158526][T15536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.168749][T15536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.177798][T15536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.191043][T15536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.357183][T19921] &#$@\]\-: left promiscuous mode [ 539.454319][T19921] HfR: left promiscuous mode [ 539.845517][T26032] syz_tun: tun_chr_ioctl cmd 1074025698 [ 541.079848][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9599'. [ 541.214601][T19921] hsr_slave_0: left promiscuous mode [ 541.222326][T19921] hsr_slave_1: left promiscuous mode [ 541.229781][T19921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.238074][T19921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.250636][T19921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.258267][T19921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.273640][T13978] Bluetooth: hci2: command tx timeout [ 541.298609][T19921] veth1_macvtap: left promiscuous mode [ 541.306750][T19921] veth0_macvtap: left promiscuous mode [ 541.312396][T19921] veth1_vlan: left promiscuous mode [ 541.333042][T19921] veth0_vlan: left promiscuous mode [ 541.910297][T19921] team0 (unregistering): Port device team_slave_1 removed [ 541.945430][T19921] team0 (unregistering): Port device team_slave_0 removed [ 542.222535][T26034] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.248277][T26034] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.278927][T26034] bridge_slave_0: entered allmulticast mode [ 542.295477][T26034] bridge_slave_0: entered promiscuous mode [ 542.331415][T26034] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.353574][T26034] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.374702][T26034] bridge_slave_1: entered allmulticast mode [ 542.392910][T26034] bridge_slave_1: entered promiscuous mode [ 542.526790][T26034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.562770][T26034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.662778][T26034] team0: Port device team_slave_0 added [ 542.698069][T26034] team0: Port device team_slave_1 added [ 542.791103][T26034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.805054][T26034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.833798][T26034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.879335][T26034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.887491][T26034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.919852][T26034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.083706][T26034] hsr_slave_0: entered promiscuous mode [ 543.091262][T26034] hsr_slave_1: entered promiscuous mode [ 543.343887][T13978] Bluetooth: hci2: command tx timeout [ 543.636430][T26034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.663944][T26034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.674628][T26034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.686481][T26034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.701274][T26034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.726179][T26034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.739203][T26034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.757213][T26034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.955195][T26034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.996624][T26034] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.015099][T13984] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.022345][T13984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.076422][T13984] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.083692][T13984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.412291][T26237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 544.919436][T26034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.042798][T26034] veth0_vlan: entered promiscuous mode [ 545.069443][T26034] veth1_vlan: entered promiscuous mode [ 545.139793][T26034] veth0_macvtap: entered promiscuous mode [ 545.153248][T26034] veth1_macvtap: entered promiscuous mode [ 545.201503][T26034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.231790][T26034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.279974][T13984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.298585][T13984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.334921][T13984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.343748][T13984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.416619][T13978] Bluetooth: hci2: command tx timeout [ 545.437736][T13984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.477970][T13984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.524703][T13977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.532588][T13977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.693408][ T9] Process accounting resumed [ 546.825158][T26342] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 546.864341][T26343] nbd: must specify an index to disconnect [ 547.161205][T26354] Process accounting paused [ 547.285021][T13978] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 547.308452][T13978] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 547.317563][T13978] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 547.328161][T13978] CPU: 0 UID: 0 PID: 13978 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 547.328212][T13978] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 547.328223][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 547.328244][T13978] Workqueue: hci2 hci_rx_work [ 547.328351][T13978] Call Trace: [ 547.328360][T13978] [ 547.328371][T13978] dump_stack_lvl+0x100/0x190 [ 547.328406][T13978] sysfs_warn_dup.cold+0x1c/0x28 [ 547.328448][T13978] sysfs_create_dir_ns+0x24b/0x2b0 [ 547.328487][T13978] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 547.328526][T13978] ? find_held_lock+0x2b/0x80 [ 547.328559][T13978] ? kobject_add_internal+0x25f/0x930 [ 547.328642][T13978] ? kobject_add_internal+0x25f/0x930 [ 547.328688][T13978] ? do_raw_spin_unlock+0x145/0x1e0 [ 547.328721][T13978] kobject_add_internal+0x2c8/0x930 [ 547.328767][T13978] kobject_add+0x16a/0x1e0 [ 547.328806][T13978] ? __pfx_kobject_add+0x10/0x10 [ 547.328846][T13978] ? class_to_subsys+0x10f/0x150 [ 547.328896][T13978] ? kobject_put+0xb9/0x640 [ 547.328933][T13978] ? _raw_spin_unlock+0x28/0x50 [ 547.328972][T13978] device_add+0x294/0x1970 [ 547.329014][T13978] ? __pfx_dev_set_name+0x10/0x10 [ 547.329043][T13978] ? __pfx_device_add+0x10/0x10 [ 547.329087][T13978] ? mgmt_send_event_skb+0x2fb/0x460 [ 547.329173][T13978] hci_conn_add_sysfs+0x1a3/0x260 [ 547.329258][T13978] le_conn_complete_evt+0x11eb/0x1f60 [ 547.329345][T13978] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 547.329374][T13978] ? __pfx_bt_warn+0x10/0x10 [ 547.329407][T13978] ? hci_event_packet+0x186/0xcd0 [ 547.329448][T13978] hci_le_conn_complete_evt+0x23c/0x3a0 [ 547.329483][T13978] ? skb_pull_data+0x15f/0x1e0 [ 547.329518][T13978] hci_le_meta_evt+0x34a/0x5f0 [ 547.329581][T13978] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 547.329622][T13978] hci_event_packet+0x51c/0xcd0 [ 547.329656][T13978] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 547.329691][T13978] ? __pfx_hci_event_packet+0x10/0x10 [ 547.329728][T13978] ? kcov_remote_start+0x384/0x670 [ 547.329768][T13978] ? lockdep_hardirqs_on+0x78/0x100 [ 547.329807][T13978] hci_rx_work+0x451/0xfc0 [ 547.329843][T13978] process_one_work+0xa23/0x1940 [ 547.329906][T13978] ? __pfx_process_one_work+0x10/0x10 [ 547.329950][T13978] ? __pfx_hci_rx_work+0x10/0x10 [ 547.329983][T13978] worker_thread+0x5ef/0xe50 [ 547.330033][T13978] ? kthread+0x13a/0x450 [ 547.330063][T13978] ? __pfx_worker_thread+0x10/0x10 [ 547.330100][T13978] kthread+0x370/0x450 [ 547.330133][T13978] ? __pfx_kthread+0x10/0x10 [ 547.330168][T13978] ret_from_fork+0x72b/0xd50 [ 547.330202][T13978] ? __pfx_ret_from_fork+0x10/0x10 [ 547.330238][T13978] ? __switch_to+0x800/0x10f0 [ 547.330280][T13978] ? __switch_to_asm+0x39/0x70 [ 547.330316][T13978] ? __pfx_kthread+0x10/0x10 [ 547.330356][T13978] ret_from_fork_asm+0x1a/0x30 [ 547.330413][T13978] [ 547.332937][T13978] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 547.654652][T13978] Bluetooth: hci2: failed to register connection device [ 547.667190][T13978] Bluetooth: hci2: command tx timeout [ 548.621640][T26419] netlink: ct family unspecified [ 549.386553][T26458] netlink: 'syz.3.9751': attribute type 1 has an invalid length. [ 549.715412][T13978] Bluetooth: hci2: command 0x2016 tx timeout [ 550.616673][ T29] audit: type=1800 audit(4295032891.072:39): pid=26517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9778" name="lu_gp_id" dev="configfs" ino=80981 res=0 errno=0 [ 551.784242][T13978] Bluetooth: hci2: command 0x2016 tx timeout [ 552.398960][T26480] syz.3.9762 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 552.431685][T26480] CPU: 1 UID: 0 PID: 26480 Comm: syz.3.9762 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.431738][T26480] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.431749][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 552.431766][T26480] Call Trace: [ 552.431775][T26480] [ 552.431785][T26480] dump_stack_lvl+0x100/0x190 [ 552.431827][T26480] dump_header+0xfb/0x606 [ 552.431861][T26480] oom_kill_process.cold+0xd/0x330 [ 552.431897][T26480] out_of_memory+0x340/0x14f0 [ 552.431953][T26480] ? __pfx_out_of_memory+0x10/0x10 [ 552.432009][T26480] mem_cgroup_out_of_memory+0xc6/0x130 [ 552.432043][T26480] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 552.432074][T26480] ? find_held_lock+0x2b/0x80 [ 552.432118][T26480] ? do_raw_spin_unlock+0x145/0x1e0 [ 552.432151][T26480] ? _raw_spin_unlock+0x28/0x50 [ 552.432186][T26480] try_charge_memcg+0x6e5/0xdf0 [ 552.432233][T26480] ? __pfx_try_charge_memcg+0x10/0x10 [ 552.432273][T26480] ? find_held_lock+0x2b/0x80 [ 552.432314][T26480] ? rcu_read_unlock+0x17/0x60 [ 552.432355][T26480] ? rcu_read_unlock+0x17/0x60 [ 552.432397][T26480] ? find_held_lock+0x2b/0x80 [ 552.432437][T26480] ? rcu_read_unlock+0x17/0x60 [ 552.432487][T26480] charge_memcg+0x187/0x1e0 [ 552.432531][T26480] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 552.432566][T26480] swap_cache_alloc_folio+0x548/0xc50 [ 552.432608][T26480] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 552.432639][T26480] ? swap_cache_get_folio+0x28d/0x360 [ 552.432672][T26480] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 552.432705][T26480] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 552.432748][T26480] swap_cache_read_folio+0x47/0x140 [ 552.432786][T26480] swap_cluster_readahead+0x387/0x5f0 [ 552.432824][T26480] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 552.432876][T26480] ? __lock_acquire+0x49f/0x1a40 [ 552.432916][T26480] ? get_vma_policy+0x23d/0x3b0 [ 552.432963][T26480] swapin_readahead+0x159/0x1200 [ 552.433009][T26480] ? __pfx_swapin_readahead+0x10/0x10 [ 552.433052][T26480] ? swap_table_get+0x10d/0x2c0 [ 552.433083][T26480] ? swap_cache_get_folio+0x28d/0x360 [ 552.433117][T26480] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 552.433149][T26480] ? __pfx_softleaf_type+0x10/0x10 [ 552.433189][T26480] ? do_swap_page+0xf98/0x5780 [ 552.433215][T26480] do_swap_page+0xf98/0x5780 [ 552.433250][T26480] ? do_wp_page+0x173c/0x4350 [ 552.433300][T26480] ? __pfx_do_swap_page+0x10/0x10 [ 552.433338][T26480] ? rcu_is_watching+0x12/0xc0 [ 552.433371][T26480] ? __pte_offset_map+0x179/0x310 [ 552.433413][T26480] __handle_mm_fault+0x192f/0x2a00 [ 552.433449][T26480] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 552.433486][T26480] ? __pfx___handle_mm_fault+0x10/0x10 [ 552.433521][T26480] ? pte_offset_map_lock+0x174/0x320 [ 552.433558][T26480] ? find_held_lock+0x2b/0x80 [ 552.433606][T26480] ? follow_page_pte+0x4d0/0x13f0 [ 552.433654][T26480] handle_mm_fault+0x37b/0xa30 [ 552.433692][T26480] __get_user_pages+0x1178/0x32a0 [ 552.433747][T26480] ? __pfx___get_user_pages+0x10/0x10 [ 552.433799][T26480] __gup_longterm_locked+0x87d/0x16f0 [ 552.433852][T26480] ? __pfx___gup_longterm_locked+0x10/0x10 [ 552.433913][T26480] pin_user_pages_remote+0xed/0x140 [ 552.433957][T26480] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 552.434016][T26480] process_vm_rw_core.constprop.0+0x412/0x950 [ 552.434071][T26480] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 552.434111][T26480] ? import_ubuf+0x1b6/0x220 [ 552.434256][T26480] ? iovec_from_user+0xda/0x140 [ 552.434310][T26480] process_vm_rw+0x226/0x2d0 [ 552.434349][T26480] ? __pfx_process_vm_rw+0x10/0x10 [ 552.434387][T26480] ? __lock_acquire+0x49f/0x1a40 [ 552.434433][T26480] ? __pfx___css_rstat_updated+0x10/0x10 [ 552.434494][T26480] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 552.434540][T26480] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 552.434588][T26480] ? xfd_validate_state+0x129/0x190 [ 552.434626][T26480] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 552.434661][T26480] ? do_syscall_64+0x90/0x840 [ 552.434695][T26480] ? lockdep_hardirqs_on+0x78/0x100 [ 552.434728][T26480] do_syscall_64+0x115/0x840 [ 552.434760][T26480] ? clear_bhb_loop+0x40/0x90 [ 552.434794][T26480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.434822][T26480] RIP: 0033:0x7f29e999de99 [ 552.434845][T26480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.434869][T26480] RSP: 002b:00007f29ea7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 552.434895][T26480] RAX: ffffffffffffffda RBX: 00007f29e9c25fa0 RCX: 00007f29e999de99 [ 552.434916][T26480] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000135c [ 552.434935][T26480] RBP: 00007f29e9a33eaf R08: 0000000000000006 R09: 0000000000000000 [ 552.434952][T26480] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 552.434970][T26480] R13: 00007f29e9c26038 R14: 00007f29e9c25fa0 R15: 00007ffeabf45a68 [ 552.435008][T26480] [ 552.933389][T26480] memory: usage 3072kB, limit 3072kB, failcnt 42858 [ 552.940229][T26480] memory+swap: usage 8496kB, limit 9007199254740988kB, failcnt 0 [ 552.948097][T26480] kmem: usage 2276kB, limit 9007199254740988kB, failcnt 0 [ 552.955857][T26480] Memory cgroup stats for /syz3: [ 552.956079][T26480] cache 0 [ 552.967947][T26480] rss 802816 [ 552.971512][T26480] rss_huge 0 [ 552.974758][T26480] shmem 0 [ 552.978064][T26480] mapped_file 0 [ 553.023144][T26480] dirty 0 [ 553.026130][T26480] writeback 4096 [ 553.037422][T26480] workingset_refault_anon 5505 [ 553.042359][T26480] workingset_refault_file 6679 [ 553.047139][T26480] swap 5554176 [ 553.050616][T26480] swapcached 170930176 [ 553.060000][T26480] pgpgin 181188 [ 553.063496][T26480] pgpgout 195351 [ 553.067139][T26480] pgfault 444053 [ 553.070773][T26480] pgmajfault 2040 [ 553.074433][T26480] inactive_anon 409600 [ 553.079422][T26480] active_anon 131072 [ 553.083347][T26480] inactive_file 0 [ 553.086997][T26480] active_file 0 [ 553.090618][T26480] unevictable 0 [ 553.094096][T26480] hierarchical_memory_limit 3145728 [ 553.100066][T26480] hierarchical_memsw_limit 9223372036854771712 [ 553.108619][T26480] total_cache 0 [ 553.112109][T26480] total_rss 802816 [ 553.115842][T26480] total_rss_huge 0 [ 553.119963][T26480] total_shmem 0 [ 553.123439][T26480] total_mapped_file 0 [ 553.127429][T26480] total_dirty 0 [ 553.131046][T26480] total_writeback 4096 [ 553.135239][T26480] total_workingset_refault_anon 5505 [ 553.140919][T26480] total_workingset_refault_file 6679 [ 553.146313][T26480] total_swap 5554176 [ 553.151845][T26480] total_swapcached 170930176 [ 553.156480][T26480] total_pgpgin 181188 [ 553.160663][T26480] total_pgpgout 195351 [ 553.164735][T26480] total_pgfault 444053 [ 553.168861][T26480] total_pgmajfault 2040 [ 553.173027][T26480] total_inactive_anon 409600 [ 553.177673][T26480] total_active_anon 131072 [ 553.182097][T26480] total_inactive_file 0 [ 553.186255][T26480] total_active_file 0 [ 553.190298][T26480] total_unevictable 0 [ 553.194292][T26480] anon_cost 565 [ 553.197820][T26480] file_cost 0 [ 553.201110][T26480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9762,pid=26479,uid=0 [ 553.216099][T26480] Memory cgroup out of memory: Killed process 26479 (syz.3.9762) total-vm:108524kB, anon-rss:1256kB, file-rss:21256kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 553.858484][T13978] Bluetooth: hci2: command 0x2016 tx timeout [ 554.871823][T15536] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 554.871861][T15536] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 554.887279][T15536] Bluetooth: hci3: Dropping invalid advertising data [ 554.904726][T15536] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 554.904754][T15536] Bluetooth: hci3: Dropping invalid advertising data [ 554.923565][T15536] Bluetooth: hci3: unknown advertising packet type: 0x79 [ 554.923653][T15536] Bluetooth: hci3: Malformed LE Event: 0x02 [ 555.652830][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9868'. [ 555.925232][T15536] Bluetooth: hci2: command 0x2016 tx timeout [ 557.257360][T26765] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 557.266066][T26765] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 557.486453][T26774] netlink: 338 bytes leftover after parsing attributes in process `syz.5.9902'. [ 557.998378][ T29] audit: type=1800 audit(4295032898.487:40): pid=26789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9909" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 558.169293][T26775] syz.3.9904 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 558.211327][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.3.9904 Tainted: G U L syzkaller #0 PREEMPT(full) [ 558.211379][T26775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 558.211389][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.211405][T26775] Call Trace: [ 558.211413][T26775] [ 558.211424][T26775] dump_stack_lvl+0x100/0x190 [ 558.211461][T26775] dump_header+0xfb/0x606 [ 558.211491][T26775] oom_kill_process.cold+0xd/0x330 [ 558.211527][T26775] out_of_memory+0x340/0x14f0 [ 558.211576][T26775] ? __pfx_out_of_memory+0x10/0x10 [ 558.211627][T26775] mem_cgroup_out_of_memory+0xc6/0x130 [ 558.211659][T26775] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 558.211688][T26775] ? find_held_lock+0x2b/0x80 [ 558.211728][T26775] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.211759][T26775] ? _raw_spin_unlock+0x28/0x50 [ 558.211789][T26775] try_charge_memcg+0x6e5/0xdf0 [ 558.211833][T26775] ? __pfx_try_charge_memcg+0x10/0x10 [ 558.211869][T26775] ? find_held_lock+0x2b/0x80 [ 558.211900][T26775] ? rcu_read_unlock+0x17/0x60 [ 558.211937][T26775] ? rcu_read_unlock+0x17/0x60 [ 558.211975][T26775] ? find_held_lock+0x2b/0x80 [ 558.212007][T26775] ? rcu_read_unlock+0x17/0x60 [ 558.212052][T26775] charge_memcg+0x187/0x1e0 [ 558.212091][T26775] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 558.212122][T26775] swap_cache_alloc_folio+0x548/0xc50 [ 558.212160][T26775] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 558.212191][T26775] ? swap_cache_get_folio+0x28d/0x360 [ 558.212221][T26775] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 558.212256][T26775] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 558.212295][T26775] swap_cache_read_folio+0x47/0x140 [ 558.212330][T26775] swap_cluster_readahead+0x387/0x5f0 [ 558.212374][T26775] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 558.212424][T26775] ? __lock_acquire+0x49f/0x1a40 [ 558.212463][T26775] ? get_vma_policy+0x23d/0x3b0 [ 558.212504][T26775] swapin_readahead+0x159/0x1200 [ 558.212547][T26775] ? __pfx_swapin_readahead+0x10/0x10 [ 558.212586][T26775] ? swap_table_get+0x10d/0x2c0 [ 558.212614][T26775] ? swap_cache_get_folio+0x28d/0x360 [ 558.212644][T26775] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 558.212672][T26775] ? __pfx_softleaf_type+0x10/0x10 [ 558.212708][T26775] ? do_swap_page+0xf98/0x5780 [ 558.212731][T26775] do_swap_page+0xf98/0x5780 [ 558.212775][T26775] ? __pfx_do_swap_page+0x10/0x10 [ 558.212802][T26775] ? __lock_acquire+0x49f/0x1a40 [ 558.212846][T26775] ? rcu_is_watching+0x12/0xc0 [ 558.212876][T26775] ? __pte_offset_map+0x179/0x310 [ 558.212915][T26775] __handle_mm_fault+0x192f/0x2a00 [ 558.212950][T26775] ? reacquire_held_locks+0xce/0x1e0 [ 558.212990][T26775] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.213024][T26775] ? lock_vma_under_rcu+0x17c/0x590 [ 558.213073][T26775] handle_mm_fault+0x37b/0xa30 [ 558.213108][T26775] do_user_addr_fault+0x5a3/0x12f0 [ 558.213155][T26775] exc_page_fault+0x6f/0xd0 [ 558.213187][T26775] asm_exc_page_fault+0x26/0x30 [ 558.213212][T26775] RIP: 0033:0x7f29e9958fd4 [ 558.213235][T26775] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ee 86 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 [ 558.213260][T26775] RSP: 002b:00007ffeabf45b60 EFLAGS: 00010246 [ 558.213282][T26775] RAX: 0000000000000000 RBX: 0000555562029500 RCX: 0000000000000000 [ 558.213298][T26775] RDX: 00007ffeabf45ba0 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.213314][T26775] RBP: 00007f29e9c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 558.213330][T26775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000088c8d [ 558.213346][T26775] R13: 00007f29e9c25fac R14: 00000000000889ac R15: 00007ffeabf45cd0 [ 558.213389][T26775] [ 558.574249][T26775] memory: usage 3072kB, limit 3072kB, failcnt 44632 [ 558.586912][T26775] memory+swap: usage 11584kB, limit 9007199254740988kB, failcnt 0 [ 558.594831][T26775] kmem: usage 3064kB, limit 9007199254740988kB, failcnt 0 [ 558.602015][T26775] Memory cgroup stats for /syz3: [ 558.602206][T26775] cache 0 [ 558.610082][T26775] rss 0 [ 558.612913][T26775] rss_huge 0 [ 558.616119][T26775] shmem 0 [ 558.619060][T26775] mapped_file 0 [ 558.622562][T26775] dirty 0 [ 558.625589][T26775] writeback 0 [ 558.628876][T26775] workingset_refault_anon 5661 [ 558.633733][T26775] workingset_refault_file 6679 [ 558.638501][T26775] swap 8716288 [ 558.641914][T26775] swapcached 180248576 [ 558.646014][T26775] pgpgin 183984 [ 558.649480][T26775] pgpgout 198344 [ 558.653070][T26775] pgfault 449744 [ 558.656621][T26775] pgmajfault 2139 [ 558.660256][T26775] inactive_anon 4096 [ 558.664214][T26775] active_anon 4096 [ 558.667940][T26775] inactive_file 0 [ 558.673900][T26775] active_file 0 [ 558.677378][T26775] unevictable 0 [ 558.680839][T26775] hierarchical_memory_limit 3145728 [ 558.686203][T26775] hierarchical_memsw_limit 9223372036854771712 [ 558.692441][T26775] total_cache 0 [ 558.695910][T26775] total_rss 0 [ 558.699202][T26775] total_rss_huge 0 [ 558.702973][T26775] total_shmem 0 [ 558.706443][T26775] total_mapped_file 0 [ 558.710430][T26775] total_dirty 0 [ 558.713981][T26775] total_writeback 0 [ 558.717795][T26775] total_workingset_refault_anon 5661 [ 558.723175][T26775] total_workingset_refault_file 6679 [ 558.728464][T26775] total_swap 8716288 [ 558.732416][T26775] total_swapcached 180248576 [ 558.737009][T26775] total_pgpgin 183984 [ 558.741167][T26775] total_pgpgout 198344 [ 558.745293][T26775] total_pgfault 449744 [ 558.749365][T26775] total_pgmajfault 2139 [ 558.753592][T26775] total_inactive_anon 4096 [ 558.758012][T26775] total_active_anon 4096 [ 558.762302][T26775] total_inactive_file 0 [ 558.766463][T26775] total_active_file 0 [ 558.770448][T26775] total_unevictable 0 [ 558.776805][T26775] anon_cost 565 [ 558.780282][T26775] file_cost 0 [ 558.783665][T26775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9892,pid=26752,uid=0 [ 558.802365][T26775] Memory cgroup out of memory: Killed process 26752 (syz.3.9892) total-vm:104292kB, anon-rss:1256kB, file-rss:28540kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 559.128163][T26776] syz.3.9904 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 559.257057][T26776] CPU: 0 UID: 0 PID: 26776 Comm: syz.3.9904 Tainted: G U L syzkaller #0 PREEMPT(full) [ 559.257105][T26776] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 559.257116][T26776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.257132][T26776] Call Trace: [ 559.257142][T26776] [ 559.257152][T26776] dump_stack_lvl+0x100/0x190 [ 559.257191][T26776] dump_header+0xfb/0x606 [ 559.257224][T26776] oom_kill_process.cold+0xd/0x330 [ 559.257258][T26776] out_of_memory+0x340/0x14f0 [ 559.257312][T26776] ? __pfx_out_of_memory+0x10/0x10 [ 559.257367][T26776] mem_cgroup_out_of_memory+0xc6/0x130 [ 559.257401][T26776] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 559.257431][T26776] ? find_held_lock+0x2b/0x80 [ 559.257475][T26776] ? do_raw_spin_unlock+0x145/0x1e0 [ 559.257510][T26776] ? _raw_spin_unlock+0x28/0x50 [ 559.257545][T26776] try_charge_memcg+0x6e5/0xdf0 [ 559.257602][T26776] ? __pfx_try_charge_memcg+0x10/0x10 [ 559.257645][T26776] ? find_held_lock+0x2b/0x80 [ 559.257679][T26776] ? rcu_read_unlock+0x17/0x60 [ 559.257721][T26776] ? rcu_read_unlock+0x17/0x60 [ 559.257777][T26776] obj_cgroup_charge_pages+0x22/0x1d0 [ 559.257822][T26776] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 559.257869][T26776] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 559.257903][T26776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 559.257932][T26776] ? stack_depot_save_flags+0x479/0x9d0 [ 559.257982][T26776] ? kasan_save_stack+0x3f/0x50 [ 559.258016][T26776] ? kasan_save_stack+0x30/0x50 [ 559.258049][T26776] ? kasan_save_track+0x14/0x30 [ 559.258087][T26776] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 559.258119][T26776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.258163][T26776] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 559.258201][T26776] ? __lock_acquire+0x49f/0x1a40 [ 559.258241][T26776] ? __css_rstat_updated+0x1ce/0x5a0 [ 559.258286][T26776] ? __pfx___css_rstat_updated+0x10/0x10 [ 559.258332][T26776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.258376][T26776] ? policy_nodemask+0xed/0x4f0 [ 559.258418][T26776] alloc_pages_mpol+0x1fb/0x540 [ 559.258461][T26776] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 559.258502][T26776] ? find_held_lock+0x2b/0x80 [ 559.258536][T26776] ? rcu_read_unlock+0x17/0x60 [ 559.258584][T26776] ? rcu_read_unlock+0x17/0x60 [ 559.258630][T26776] alloc_pages_noprof+0x1a/0x160 [ 559.258658][T26776] __vmalloc_node_range_noprof+0xaec/0x1630 [ 559.258714][T26776] ? newary+0x185/0xc30 [ 559.258832][T26776] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 559.258875][T26776] ? __lock_acquire+0x49f/0x1a40 [ 559.258921][T26776] ? rcu_is_watching+0x12/0xc0 [ 559.258963][T26776] __kvmalloc_node_noprof+0x3d3/0x970 [ 559.259000][T26776] ? newary+0x185/0xc30 [ 559.259031][T26776] ? __pfx___might_resched+0x10/0x10 [ 559.259073][T26776] ? newary+0x185/0xc30 [ 559.259107][T26776] newary+0x185/0xc30 [ 559.259133][T26776] ? __pfx_down_write+0x10/0x10 [ 559.259176][T26776] ipcget+0xee/0xf50 [ 559.259212][T26776] ? do_futex+0x190/0x440 [ 559.259244][T26776] ? __pfx_do_futex+0x10/0x10 [ 559.259274][T26776] ? ksys_unshare+0x69b/0xab0 [ 559.259310][T26776] ? __pfx_ipcget+0x10/0x10 [ 559.259351][T26776] ? __x64_sys_futex+0x34f/0x4d0 [ 559.259385][T26776] __x64_sys_semget+0x1cb/0x260 [ 559.259418][T26776] ? __pfx___x64_sys_semget+0x10/0x10 [ 559.259449][T26776] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 559.259494][T26776] ? syscall_user_dispatch+0x76/0x130 [ 559.259531][T26776] do_syscall_64+0x115/0x840 [ 559.259572][T26776] ? clear_bhb_loop+0x40/0x90 [ 559.259608][T26776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.259636][T26776] RIP: 0033:0x7f29e999de99 [ 559.259661][T26776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.259688][T26776] RSP: 002b:00007f29ea7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 559.259716][T26776] RAX: ffffffffffffffda RBX: 00007f29e9c25fa0 RCX: 00007f29e999de99 [ 559.259735][T26776] RDX: 0000000000008000 RSI: 0000000000002e4a RDI: 0000000000000000 [ 559.259752][T26776] RBP: 00007f29e9a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 559.259768][T26776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.259784][T26776] R13: 00007f29e9c26038 R14: 00007f29e9c25fa0 R15: 00007ffeabf45a68 [ 559.259824][T26776] [ 559.707095][T26776] memory: usage 3072kB, limit 3072kB, failcnt 44852 [ 559.715697][T26776] memory+swap: usage 3452kB, limit 9007199254740988kB, failcnt 0 [ 559.723712][T26776] kmem: usage 3008kB, limit 9007199254740988kB, failcnt 0 [ 559.730907][T26776] Memory cgroup stats for /syz3: [ 559.731240][T26776] cache 0 [ 559.739365][T26776] rss 0 [ 559.742176][T26776] rss_huge 0 [ 559.745380][T26776] shmem 0 [ 559.748356][T26776] mapped_file 0 [ 559.751997][T26776] dirty 0 [ 559.754977][T26776] writeback 0 [ 559.758295][T26776] workingset_refault_anon 5663 [ 559.763240][T26776] workingset_refault_file 6679 [ 559.768074][T26776] swap 389120 [ 559.771368][T26776] swapcached 180256768 [ 559.775631][T26776] pgpgin 183986 [ 559.819667][T26776] pgpgout 198344 [ 559.831154][T26776] pgfault 449744 [ 559.844597][T26776] pgmajfault 2139 [ 559.856195][T26776] inactive_anon 12288 [ 559.876237][T26776] active_anon 4096 [ 559.888369][T26776] inactive_file 0 [ 559.900207][T26776] active_file 0 [ 559.917881][T26776] unevictable 0 [ 559.931629][T26776] hierarchical_memory_limit 3145728 [ 559.953618][T26776] hierarchical_memsw_limit 9223372036854771712 [ 559.971191][T26776] total_cache 0 [ 559.981523][T26776] total_rss 0 [ 559.992877][T26776] total_rss_huge 0 [ 560.004949][T26776] total_shmem 0 [ 560.015797][T26776] total_mapped_file 0 [ 560.028133][T26776] total_dirty 0 [ 560.038598][T26776] total_writeback 0 [ 560.050039][T26776] total_workingset_refault_anon 5663 [ 560.071152][T26776] total_workingset_refault_file 6679 [ 560.088288][T26776] total_swap 389120 [ 560.111266][T26776] total_swapcached 180256768 [ 560.118107][T26776] total_pgpgin 183986 [ 560.122466][T26776] total_pgpgout 198344 [ 560.127209][T26776] total_pgfault 449744 [ 560.131770][T26776] total_pgmajfault 2139 [ 560.136429][T26776] total_inactive_anon 12288 [ 560.140953][T26776] total_active_anon 4096 [ 560.150680][T26776] total_inactive_file 0 [ 560.158736][T26776] total_active_file 0 [ 560.162768][T26776] total_unevictable 0 [ 560.169295][T26776] anon_cost 565 [ 560.172811][T26776] file_cost 0 [ 560.177848][T26776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9904,pid=26775,uid=0 [ 560.196611][T26776] Memory cgroup out of memory: Killed process 26775 (syz.3.9904) total-vm:104352kB, anon-rss:1344kB, file-rss:21096kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 560.228880][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9921'. [ 560.936881][T15536] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 560.961469][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.969359][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.002726][T15536] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 561.010523][T15536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 561.022242][T15536] CPU: 0 UID: 0 PID: 15536 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 561.022291][T15536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 561.022301][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 561.022320][T15536] Workqueue: hci0 hci_rx_work [ 561.022354][T15536] Call Trace: [ 561.022364][T15536] [ 561.022374][T15536] dump_stack_lvl+0x100/0x190 [ 561.022407][T15536] sysfs_warn_dup.cold+0x1c/0x28 [ 561.022448][T15536] sysfs_create_dir_ns+0x24b/0x2b0 [ 561.022496][T15536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 561.022537][T15536] ? find_held_lock+0x2b/0x80 [ 561.022574][T15536] ? kobject_add_internal+0x25f/0x930 [ 561.022619][T15536] ? kobject_add_internal+0x25f/0x930 [ 561.022665][T15536] ? do_raw_spin_unlock+0x145/0x1e0 [ 561.022699][T15536] kobject_add_internal+0x2c8/0x930 [ 561.022749][T15536] kobject_add+0x16a/0x1e0 [ 561.022794][T15536] ? __pfx_kobject_add+0x10/0x10 [ 561.022834][T15536] ? class_to_subsys+0x10f/0x150 [ 561.022885][T15536] ? kobject_put+0xb9/0x640 [ 561.022923][T15536] ? _raw_spin_unlock+0x28/0x50 [ 561.022964][T15536] device_add+0x294/0x1970 [ 561.023010][T15536] ? __pfx_dev_set_name+0x10/0x10 [ 561.023041][T15536] ? __pfx_device_add+0x10/0x10 [ 561.023086][T15536] ? mgmt_send_event_skb+0x2fb/0x460 [ 561.023130][T15536] hci_conn_add_sysfs+0x1a3/0x260 [ 561.023169][T15536] le_conn_complete_evt+0x11eb/0x1f60 [ 561.023214][T15536] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 561.023243][T15536] ? __pfx_bt_warn+0x10/0x10 [ 561.023268][T15536] ? hci_event_packet+0x186/0xcd0 [ 561.023306][T15536] hci_le_conn_complete_evt+0x23c/0x3a0 [ 561.023341][T15536] ? skb_pull_data+0x15f/0x1e0 [ 561.023373][T15536] hci_le_meta_evt+0x34a/0x5f0 [ 561.023406][T15536] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 561.023445][T15536] hci_event_packet+0x51c/0xcd0 [ 561.023475][T15536] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 561.023516][T15536] ? __pfx_hci_event_packet+0x10/0x10 [ 561.023551][T15536] ? kcov_remote_start+0x384/0x670 [ 561.023590][T15536] ? lockdep_hardirqs_on+0x78/0x100 [ 561.023631][T15536] hci_rx_work+0x451/0xfc0 [ 561.023672][T15536] process_one_work+0xa23/0x1940 [ 561.023730][T15536] ? __pfx_process_one_work+0x10/0x10 [ 561.023784][T15536] ? __pfx_hci_rx_work+0x10/0x10 [ 561.023822][T15536] worker_thread+0x5ef/0xe50 [ 561.023873][T15536] ? __pfx_worker_thread+0x10/0x10 [ 561.023916][T15536] ? kthread+0x13a/0x450 [ 561.023950][T15536] ? __pfx_worker_thread+0x10/0x10 [ 561.023989][T15536] kthread+0x370/0x450 [ 561.024024][T15536] ? __pfx_kthread+0x10/0x10 [ 561.024064][T15536] ret_from_fork+0x72b/0xd50 [ 561.024101][T15536] ? __pfx_ret_from_fork+0x10/0x10 [ 561.024138][T15536] ? __switch_to+0x800/0x10f0 [ 561.024180][T15536] ? __switch_to_asm+0x39/0x70 [ 561.024217][T15536] ? __pfx_kthread+0x10/0x10 [ 561.024257][T15536] ret_from_fork_asm+0x1a/0x30 [ 561.024315][T15536] [ 561.024373][T15536] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 561.349401][T15536] Bluetooth: hci0: failed to register connection device [ 561.987753][T26874] netlink: 'syz.0.9941': attribute type 1 has an invalid length. [ 562.012385][T26874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9941'. [ 562.022651][T26874] netlink: 'syz.0.9941': attribute type 1 has an invalid length. [ 563.014513][T15536] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.212856][T15536] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 563.232255][T15536] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 563.240804][T15536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 563.251081][T15536] CPU: 0 UID: 0 PID: 15536 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.251129][T15536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.251140][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 563.251159][T15536] Workqueue: hci1 hci_rx_work [ 563.251203][T15536] Call Trace: [ 563.251213][T15536] [ 563.251223][T15536] dump_stack_lvl+0x100/0x190 [ 563.251259][T15536] sysfs_warn_dup.cold+0x1c/0x28 [ 563.251304][T15536] sysfs_create_dir_ns+0x24b/0x2b0 [ 563.251348][T15536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 563.251388][T15536] ? find_held_lock+0x2b/0x80 [ 563.251423][T15536] ? kobject_add_internal+0x25f/0x930 [ 563.251466][T15536] ? kobject_add_internal+0x25f/0x930 [ 563.251510][T15536] ? do_raw_spin_unlock+0x145/0x1e0 [ 563.251543][T15536] kobject_add_internal+0x2c8/0x930 [ 563.251590][T15536] kobject_add+0x16a/0x1e0 [ 563.251631][T15536] ? __pfx_kobject_add+0x10/0x10 [ 563.251671][T15536] ? class_to_subsys+0x10f/0x150 [ 563.251707][T15536] ? kobject_put+0xb9/0x640 [ 563.251748][T15536] ? _raw_spin_unlock+0x28/0x50 [ 563.251789][T15536] device_add+0x294/0x1970 [ 563.251835][T15536] ? __pfx_dev_set_name+0x10/0x10 [ 563.251868][T15536] ? __pfx_device_add+0x10/0x10 [ 563.251914][T15536] ? mgmt_send_event_skb+0x2fb/0x460 [ 563.251964][T15536] hci_conn_add_sysfs+0x1a3/0x260 [ 563.252004][T15536] le_conn_complete_evt+0x11eb/0x1f60 [ 563.252047][T15536] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 563.252075][T15536] ? __pfx_bt_warn+0x10/0x10 [ 563.252097][T15536] ? hci_event_packet+0x186/0xcd0 [ 563.252133][T15536] hci_le_conn_complete_evt+0x23c/0x3a0 [ 563.252174][T15536] ? skb_pull_data+0x15f/0x1e0 [ 563.252207][T15536] hci_le_meta_evt+0x34a/0x5f0 [ 563.252244][T15536] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 563.252279][T15536] hci_event_packet+0x51c/0xcd0 [ 563.252311][T15536] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 563.252344][T15536] ? __pfx_hci_event_packet+0x10/0x10 [ 563.252380][T15536] ? kcov_remote_start+0x384/0x670 [ 563.252418][T15536] ? lockdep_hardirqs_on+0x78/0x100 [ 563.252460][T15536] hci_rx_work+0x451/0xfc0 [ 563.252501][T15536] process_one_work+0xa23/0x1940 [ 563.252558][T15536] ? __pfx_process_one_work+0x10/0x10 [ 563.252612][T15536] ? __pfx_hci_rx_work+0x10/0x10 [ 563.252645][T15536] worker_thread+0x5ef/0xe50 [ 563.252692][T15536] ? __pfx_worker_thread+0x10/0x10 [ 563.252733][T15536] ? kthread+0x13a/0x450 [ 563.252768][T15536] ? __pfx_worker_thread+0x10/0x10 [ 563.252807][T15536] kthread+0x370/0x450 [ 563.252842][T15536] ? __pfx_kthread+0x10/0x10 [ 563.252881][T15536] ret_from_fork+0x72b/0xd50 [ 563.252917][T15536] ? __pfx_ret_from_fork+0x10/0x10 [ 563.252954][T15536] ? __switch_to+0x800/0x10f0 [ 563.252994][T15536] ? __switch_to_asm+0x39/0x70 [ 563.253030][T15536] ? __pfx_kthread+0x10/0x10 [ 563.253069][T15536] ret_from_fork_asm+0x1a/0x30 [ 563.253127][T15536] [ 563.253295][T15536] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 563.576728][T15536] Bluetooth: hci1: failed to register connection device [ 563.781612][ T5698] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 563.814622][ T5698] CPU: 0 UID: 0 PID: 5698 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.814668][ T5698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.814678][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 563.814693][ T5698] Call Trace: [ 563.814701][ T5698] [ 563.814711][ T5698] dump_stack_lvl+0x100/0x190 [ 563.814746][ T5698] dump_header+0xfb/0x606 [ 563.814776][ T5698] oom_kill_process.cold+0xd/0x330 [ 563.814803][ T5698] out_of_memory+0x340/0x14f0 [ 563.814849][ T5698] ? __pfx_out_of_memory+0x10/0x10 [ 563.814893][ T5698] mem_cgroup_out_of_memory+0xc6/0x130 [ 563.814922][ T5698] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 563.814949][ T5698] ? find_held_lock+0x2b/0x80 [ 563.814987][ T5698] ? do_raw_spin_unlock+0x145/0x1e0 [ 563.815015][ T5698] ? _raw_spin_unlock+0x28/0x50 [ 563.815044][ T5698] try_charge_memcg+0x6e5/0xdf0 [ 563.815087][ T5698] ? __pfx_try_charge_memcg+0x10/0x10 [ 563.815124][ T5698] ? find_held_lock+0x2b/0x80 [ 563.815151][ T5698] ? rcu_read_unlock+0x17/0x60 [ 563.815193][ T5698] ? rcu_read_unlock+0x17/0x60 [ 563.815227][ T5698] ? find_held_lock+0x2b/0x80 [ 563.815255][ T5698] ? rcu_read_unlock+0x17/0x60 [ 563.815299][ T5698] charge_memcg+0x187/0x1e0 [ 563.815334][ T5698] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 563.815363][ T5698] swap_cache_alloc_folio+0x548/0xc50 [ 563.815398][ T5698] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 563.815428][ T5698] ? swap_cache_get_folio+0x28d/0x360 [ 563.815459][ T5698] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 563.815500][ T5698] swap_cache_read_folio+0x47/0x140 [ 563.815536][ T5698] swap_cluster_readahead+0x387/0x5f0 [ 563.815575][ T5698] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 563.815603][ T5698] ? debug_object_activate+0x343/0x4b0 [ 563.815644][ T5698] ? lock_acquire+0x1b9/0x370 [ 563.815690][ T5698] ? __lock_acquire+0x49f/0x1a40 [ 563.815728][ T5698] ? get_vma_policy+0x23d/0x3b0 [ 563.815769][ T5698] swapin_readahead+0x159/0x1200 [ 563.815799][ T5698] ? lapic_next_event+0x10/0x20 [ 563.815841][ T5698] ? __pfx_swapin_readahead+0x10/0x10 [ 563.815879][ T5698] ? swap_table_get+0x10d/0x2c0 [ 563.815905][ T5698] ? swap_cache_get_folio+0x28d/0x360 [ 563.815935][ T5698] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 563.815963][ T5698] ? __pfx_softleaf_type+0x10/0x10 [ 563.815999][ T5698] ? do_swap_page+0xf98/0x5780 [ 563.816023][ T5698] do_swap_page+0xf98/0x5780 [ 563.816067][ T5698] ? __pfx_do_swap_page+0x10/0x10 [ 563.816093][ T5698] ? __lock_acquire+0x49f/0x1a40 [ 563.816132][ T5698] ? lockdep_hardirqs_on+0x78/0x100 [ 563.816165][ T5698] ? rcu_is_watching+0x12/0xc0 [ 563.816204][ T5698] ? __pte_offset_map+0x179/0x310 [ 563.816242][ T5698] __handle_mm_fault+0x192f/0x2a00 [ 563.816279][ T5698] ? reacquire_held_locks+0xce/0x1e0 [ 563.816320][ T5698] ? __pfx___handle_mm_fault+0x10/0x10 [ 563.816353][ T5698] ? lock_vma_under_rcu+0x17c/0x590 [ 563.816402][ T5698] handle_mm_fault+0x37b/0xa30 [ 563.816437][ T5698] do_user_addr_fault+0x5a3/0x12f0 [ 563.816485][ T5698] exc_page_fault+0x6f/0xd0 [ 563.816517][ T5698] asm_exc_page_fault+0x26/0x30 [ 563.816543][ T5698] RIP: 0033:0x7f29e995e6ce [ 563.816566][ T5698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.816591][ T5698] RSP: 002b:00007ffeabf45d48 EFLAGS: 00010246 [ 563.816612][ T5698] RAX: 0000000000000000 RBX: 0000555562029500 RCX: 00007f29e995e6ce [ 563.816630][ T5698] RDX: 00007ffeabf45da0 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.816646][ T5698] RBP: 00007ffeabf45e0c R08: 0000000000000000 R09: 0000000000000000 [ 563.816661][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 563.816677][ T5698] R13: 00000000000927c0 R14: 0000000000089f2b R15: 00007ffeabf45e60 [ 563.816711][ T5698] [ 563.816745][ T5698] memory: usage 3072kB, limit 3072kB, failcnt 46607 [ 564.216764][ T5698] memory+swap: usage 3460kB, limit 9007199254740988kB, failcnt 0 [ 564.216787][ T5698] kmem: usage 3064kB, limit 9007199254740988kB, failcnt 0 [ 564.216804][ T5698] Memory cgroup stats for /syz3: [ 564.217031][ T5698] cache 0 [ 564.217043][ T5698] rss 0 [ 564.217053][ T5698] rss_huge 0 [ 564.217062][ T5698] shmem 0 [ 564.217070][ T5698] mapped_file 0 [ 564.217090][ T5698] dirty 0 [ 564.217098][ T5698] writeback 0 [ 564.217108][ T5698] workingset_refault_anon 5859 [ 564.217119][ T5698] workingset_refault_file 6679 [ 564.217129][ T5698] swap 397312 [ 564.217137][ T5698] swapcached 188792832 [ 564.217147][ T5698] pgpgin 186516 [ 564.217156][ T5698] pgpgout 200876 [ 564.217165][ T5698] pgfault 453630 [ 564.217175][ T5698] pgmajfault 2214 [ 564.217183][ T5698] inactive_anon 4096 [ 564.217194][ T5698] active_anon 4096 [ 564.217204][ T5698] inactive_file 0 [ 564.217215][ T5698] active_file 0 [ 564.217225][ T5698] unevictable 0 [ 564.217235][ T5698] hierarchical_memory_limit 3145728 [ 564.217246][ T5698] hierarchical_memsw_limit 9223372036854771712 [ 564.217258][ T5698] total_cache 0 [ 564.217268][ T5698] total_rss 0 [ 564.217278][ T5698] total_rss_huge 0 [ 564.217288][ T5698] total_shmem 0 [ 564.217302][ T5698] total_mapped_file 0 [ 564.217312][ T5698] total_dirty 0 [ 564.217323][ T5698] total_writeback 0 [ 564.217334][ T5698] total_workingset_refault_anon 5859 [ 564.217348][ T5698] total_workingset_refault_file 6679 [ 564.217360][ T5698] total_swap 397312 [ 564.217371][ T5698] total_swapcached 188792832 [ 564.217381][ T5698] total_pgpgin 186516 [ 564.217392][ T5698] total_pgpgout 200876 [ 564.217405][ T5698] total_pgfault 453630 [ 564.217415][ T5698] total_pgmajfault 2214 [ 564.217424][ T5698] total_inactive_anon 4096 [ 564.217434][ T5698] total_active_anon 4096 [ 564.217445][ T5698] total_inactive_file 0 [ 564.217454][ T5698] total_active_file 0 [ 564.217464][ T5698] total_unevictable 0 [ 564.217474][ T5698] anon_cost 565 [ 564.217483][ T5698] file_cost 0 [ 564.217493][ T5698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9965,pid=26919,uid=0 [ 564.217704][ T5698] Memory cgroup out of memory: Killed process 26919 (syz.3.9965) total-vm:104292kB, anon-rss:1252kB, file-rss:20812kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 564.230125][T15536] Bluetooth: hci2: Malformed Event: 0x13 [ 565.081778][T26926] Bluetooth: hci0: command 0x0c1a tx timeout [ 565.137404][T26970] sctp: [Deprecated]: syz.5.9985 (pid 26970) Use of int in max_burst socket option. [ 565.137404][T26970] Use struct sctp_assoc_value instead [ 565.639476][T26926] Bluetooth: hci1: command 0x0406 tx timeout [ 565.983899][T27015] ovs_?: entered promiscuous mode [ 566.100444][T27020] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 566.144935][T27020] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 567.096503][T27005] kexec: Could not allocate control_code_buffer [ 567.152201][T26926] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.354172][T27046] bridge0: port 3(veth0_to_bridge) entered blocking state [ 567.377492][T27046] bridge0: port 3(veth0_to_bridge) entered disabled state [ 567.387698][T27046] veth0_to_bridge: entered allmulticast mode [ 567.403345][T27046] veth0_to_bridge: entered promiscuous mode [ 567.410224][T27046] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.438759][T27046] bridge0: port 3(veth0_to_bridge) entered blocking state [ 567.448120][T27046] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 567.487773][T27049] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20524] was attempted by ""[27049] [ 567.623837][T27058] sctp: [Deprecated]: syz.3.10024 (pid 27058) Use of int in maxseg socket option. [ 567.623837][T27058] Use struct sctp_assoc_value instead [ 567.711821][T13978] Bluetooth: hci1: command 0x0406 tx timeout [ 567.764906][T27066] FAULT_INJECTION: forcing a failure. [ 567.764906][T27066] name failslab, interval 1, probability 0, space 0, times 0 [ 567.796315][T27066] CPU: 1 UID: 0 PID: 27066 Comm: syz.2.10027 Tainted: G U L syzkaller #0 PREEMPT(full) [ 567.796367][T27066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 567.796378][T27066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 567.796397][T27066] Call Trace: [ 567.796406][T27066] [ 567.796417][T27066] dump_stack_lvl+0x100/0x190 [ 567.796457][T27066] should_fail_ex.cold+0x5/0xa [ 567.796489][T27066] should_failslab+0xc2/0x120 [ 567.796528][T27066] kmem_cache_alloc_noprof+0x91/0x6a0 [ 567.796566][T27066] ? __pfx_map_id_range_down+0x10/0x10 [ 567.796604][T27066] ? security_inode_alloc+0x3b/0x2c0 [ 567.796639][T27066] security_inode_alloc+0x3b/0x2c0 [ 567.796682][T27066] inode_init_always_gfp+0xc77/0xfb0 [ 567.796719][T27066] alloc_inode+0x8e/0x250 [ 567.796754][T27066] sock_alloc+0x44/0x280 [ 567.796793][T27066] ? security_socket_create+0x7f/0x250 [ 567.796827][T27066] __sock_create+0xc2/0x860 [ 567.796862][T27066] smc_create_clcsk+0x37/0xd0 [ 567.796897][T27066] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 567.797026][T27066] inet6_create+0xb1a/0x12b0 [ 567.797060][T27066] ? inet6_create+0x7f/0x12b0 [ 567.797094][T27066] __sock_create+0x339/0x860 [ 567.797130][T27066] __sys_socket+0x14d/0x260 [ 567.797162][T27066] ? __pfx___sys_socket+0x10/0x10 [ 567.797202][T27066] __x64_sys_socket+0x72/0xb0 [ 567.797230][T27066] ? lockdep_hardirqs_on+0x78/0x100 [ 567.797259][T27066] do_syscall_64+0x115/0x840 [ 567.797294][T27066] ? clear_bhb_loop+0x40/0x90 [ 567.797329][T27066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.797357][T27066] RIP: 0033:0x7f0da179de99 [ 567.797379][T27066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.797407][T27066] RSP: 002b:00007f0da25be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 567.797435][T27066] RAX: ffffffffffffffda RBX: 00007f0da1a25fa0 RCX: 00007f0da179de99 [ 567.797455][T27066] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 567.797471][T27066] RBP: 00007f0da1833eaf R08: 0000000000000000 R09: 0000000000000000 [ 567.797489][T27066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.797505][T27066] R13: 00007f0da1a26038 R14: 00007f0da1a25fa0 R15: 00007ffce667e098 [ 567.797542][T27066] [ 568.024722][T27066] socket: no more sockets [ 568.284816][T27072] zswap: compressor û not available [ 568.346024][T27085] FAULT_INJECTION: forcing a failure. [ 568.346024][T27085] name failslab, interval 1, probability 0, space 0, times 0 [ 568.358954][T27085] CPU: 1 UID: 0 PID: 27085 Comm: syz.5.10037 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.359004][T27085] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.359016][T27085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.359033][T27085] Call Trace: [ 568.359042][T27085] [ 568.359054][T27085] dump_stack_lvl+0x100/0x190 [ 568.359093][T27085] should_fail_ex.cold+0x5/0xa [ 568.359128][T27085] should_failslab+0xc2/0x120 [ 568.359166][T27085] __kmalloc_noprof+0xfc/0x820 [ 568.359199][T27085] ? __lock_acquire+0x49f/0x1a40 [ 568.359244][T27085] ? tomoyo_encode2+0x2f6/0x3c0 [ 568.359403][T27085] tomoyo_encode2+0x2f6/0x3c0 [ 568.359450][T27085] tomoyo_encode+0x29/0x50 [ 568.359491][T27085] tomoyo_mount_acl+0x14c/0x8b0 [ 568.359530][T27085] ? is_bpf_text_address+0x8a/0x1a0 [ 568.359570][T27085] ? bpf_ksym_find+0x124/0x1c0 [ 568.359602][T27085] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 568.359648][T27085] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 568.359694][T27085] ? kernel_text_address+0x8d/0x100 [ 568.359734][T27085] ? __lock_acquire+0x49f/0x1a40 [ 568.359774][T27085] ? unwind_get_return_address+0x59/0xa0 [ 568.359848][T27085] ? tomoyo_domain+0xb2/0x150 [ 568.359875][T27085] ? tomoyo_profile+0x47/0x60 [ 568.359905][T27085] tomoyo_mount_permission+0x214/0x460 [ 568.359944][T27085] ? tomoyo_mount_permission+0x1f6/0x460 [ 568.359986][T27085] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 568.360047][T27085] security_sb_mount+0xdd/0x270 [ 568.360083][T27085] path_mount+0x158/0x23d0 [ 568.360124][T27085] ? __pfx_path_mount+0x10/0x10 [ 568.360153][T27085] ? lockdep_hardirqs_on+0x78/0x100 [ 568.360191][T27085] ? putname+0xb1/0x110 [ 568.360220][T27085] ? kmem_cache_free+0x127/0x6b0 [ 568.360263][T27085] ? __x64_sys_mount+0x293/0x310 [ 568.360294][T27085] __x64_sys_mount+0x293/0x310 [ 568.360329][T27085] ? __pfx___x64_sys_mount+0x10/0x10 [ 568.360374][T27085] do_syscall_64+0x115/0x840 [ 568.360406][T27085] ? clear_bhb_loop+0x40/0x90 [ 568.360440][T27085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.360470][T27085] RIP: 0033:0x7ff45759de99 [ 568.360493][T27085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.360519][T27085] RSP: 002b:00007ff458531028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 568.360548][T27085] RAX: ffffffffffffffda RBX: 00007ff457825fa0 RCX: 00007ff45759de99 [ 568.360568][T27085] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 568.360586][T27085] RBP: 00007ff457633eaf R08: 0000000000000000 R09: 0000000000000000 [ 568.360604][T27085] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 568.360620][T27085] R13: 00007ff457826038 R14: 00007ff457825fa0 R15: 00007ffcdfbd2e68 [ 568.360658][T27085] [ 568.888804][T27098] FAULT_INJECTION: forcing a failure. [ 568.888804][T27098] name failslab, interval 1, probability 0, space 0, times 0 [ 568.961588][T27098] CPU: 0 UID: 0 PID: 27098 Comm: syz.0.10042 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.961651][T27098] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.961663][T27098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.961679][T27098] Call Trace: [ 568.961688][T27098] [ 568.961699][T27098] dump_stack_lvl+0x100/0x190 [ 568.961740][T27098] should_fail_ex.cold+0x5/0xa [ 568.961773][T27098] should_failslab+0xc2/0x120 [ 568.961814][T27098] __kmalloc_noprof+0xfc/0x820 [ 568.961847][T27098] ? trace_kmalloc+0xeb/0x110 [ 568.961884][T27098] ? lsm_blob_alloc+0x68/0x90 [ 568.961934][T27098] lsm_blob_alloc+0x68/0x90 [ 568.961975][T27098] security_sk_alloc+0x2d/0x290 [ 568.962005][T27098] sk_prot_alloc+0x12a/0x2a0 [ 568.962054][T27098] sk_alloc+0x36/0xe80 [ 568.962091][T27098] alg_create+0x9e/0x150 [ 568.962247][T27098] __sock_create+0x339/0x860 [ 568.962283][T27098] __sys_socket+0x14d/0x260 [ 568.962313][T27098] ? __pfx___sys_socket+0x10/0x10 [ 568.962354][T27098] __x64_sys_socket+0x72/0xb0 [ 568.962384][T27098] ? lockdep_hardirqs_on+0x78/0x100 [ 568.962417][T27098] do_syscall_64+0x115/0x840 [ 568.962450][T27098] ? clear_bhb_loop+0x40/0x90 [ 568.962485][T27098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.962512][T27098] RIP: 0033:0x7f653a19de99 [ 568.962534][T27098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.962560][T27098] RSP: 002b:00007f653afd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 568.962585][T27098] RAX: ffffffffffffffda RBX: 00007f653a425fa0 RCX: 00007f653a19de99 [ 568.962613][T27098] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 568.962630][T27098] RBP: 00007f653a233eaf R08: 0000000000000000 R09: 0000000000000000 [ 568.962648][T27098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.962666][T27098] R13: 00007f653a426038 R14: 00007f653a425fa0 R15: 00007ffc1e56b3c8 [ 568.962704][T27098] [ 569.224570][T13978] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.785937][T26926] Bluetooth: hci1: command 0x0406 tx timeout [ 570.597062][T26378] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 570.613021][T26378] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 570.629236][T26378] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 570.639355][T26378] CPU: 0 UID: 0 PID: 26378 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 570.639406][T26378] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 570.639416][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 570.639437][T26378] Workqueue: hci3 hci_rx_work [ 570.639476][T26378] Call Trace: [ 570.639485][T26378] [ 570.639497][T26378] dump_stack_lvl+0x100/0x190 [ 570.639534][T26378] sysfs_warn_dup.cold+0x1c/0x28 [ 570.639577][T26378] sysfs_create_dir_ns+0x24b/0x2b0 [ 570.639619][T26378] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 570.639659][T26378] ? find_held_lock+0x2b/0x80 [ 570.639694][T26378] ? kobject_add_internal+0x25f/0x930 [ 570.639738][T26378] ? kobject_add_internal+0x25f/0x930 [ 570.639784][T26378] ? do_raw_spin_unlock+0x145/0x1e0 [ 570.639820][T26378] kobject_add_internal+0x2c8/0x930 [ 570.639870][T26378] kobject_add+0x16a/0x1e0 [ 570.639922][T26378] ? __pfx_kobject_add+0x10/0x10 [ 570.639964][T26378] ? class_to_subsys+0x10f/0x150 [ 570.640000][T26378] ? kobject_put+0xb9/0x640 [ 570.640039][T26378] ? _raw_spin_unlock+0x28/0x50 [ 570.640079][T26378] device_add+0x294/0x1970 [ 570.640123][T26378] ? __pfx_dev_set_name+0x10/0x10 [ 570.640154][T26378] ? __pfx_device_add+0x10/0x10 [ 570.640197][T26378] ? mgmt_send_event_skb+0x2fb/0x460 [ 570.640243][T26378] hci_conn_add_sysfs+0x1a3/0x260 [ 570.640284][T26378] le_conn_complete_evt+0x11eb/0x1f60 [ 570.640333][T26378] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 570.640364][T26378] ? __pfx_bt_warn+0x10/0x10 [ 570.640389][T26378] ? hci_event_packet+0x186/0xcd0 [ 570.640439][T26378] hci_le_conn_complete_evt+0x23c/0x3a0 [ 570.640475][T26378] ? skb_pull_data+0x15f/0x1e0 [ 570.640513][T26378] hci_le_meta_evt+0x34a/0x5f0 [ 570.640548][T26378] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 570.640582][T26378] hci_event_packet+0x51c/0xcd0 [ 570.640613][T26378] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 570.640648][T26378] ? __pfx_hci_event_packet+0x10/0x10 [ 570.640681][T26378] ? kcov_remote_start+0x384/0x670 [ 570.640719][T26378] ? lockdep_hardirqs_on+0x78/0x100 [ 570.640756][T26378] hci_rx_work+0x451/0xfc0 [ 570.640793][T26378] process_one_work+0xa23/0x1940 [ 570.640846][T26378] ? __pfx_process_one_work+0x10/0x10 [ 570.640898][T26378] ? __pfx_hci_rx_work+0x10/0x10 [ 570.640942][T26378] worker_thread+0x5ef/0xe50 [ 570.640992][T26378] ? __pfx_worker_thread+0x10/0x10 [ 570.641034][T26378] ? kthread+0x13a/0x450 [ 570.641068][T26378] ? __pfx_worker_thread+0x10/0x10 [ 570.641107][T26378] kthread+0x370/0x450 [ 570.641143][T26378] ? __pfx_kthread+0x10/0x10 [ 570.641182][T26378] ret_from_fork+0x72b/0xd50 [ 570.641219][T26378] ? __pfx_ret_from_fork+0x10/0x10 [ 570.641255][T26378] ? __switch_to+0x800/0x10f0 [ 570.641307][T26378] ? __switch_to_asm+0x39/0x70 [ 570.641345][T26378] ? __pfx_kthread+0x10/0x10 [ 570.641386][T26378] ret_from_fork_asm+0x1a/0x30 [ 570.641443][T26378] [ 570.641507][T26378] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 570.960281][T26378] Bluetooth: hci3: failed to register connection device [ 571.136846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.151254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.163701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.176197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.188642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.201180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.213631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.226078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.238577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.250997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.555412][T27151] zswap: compressor û not available [ 572.840436][T27186] zswap: compressor not available [ 576.119875][ C0] net_ratelimit: 9887 callbacks suppressed [ 576.119891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.138172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.150895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 576.163752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.176025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.188497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.201241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 576.214583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.226853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.239363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.381984][T27184] Process accounting resumed [ 580.438918][ T29] audit: type=1804 audit(4295032921.032:41): pid=27224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10095" name="/newroot/2699/file0" dev="tmpfs" ino=13607 res=1 errno=0 [ 581.106700][ C0] net_ratelimit: 8764 callbacks suppressed [ 581.106726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 581.125704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.138224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.150809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.163994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 581.176885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.189327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.201893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.215118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 581.228180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.344630][T27254] Device name cannot be null; rc = [-22] [ 581.607499][T27260] netlink: 'syz.2.10112': attribute type 2 has an invalid length. [ 581.760427][T27265] netlink: 'syz.2.10115': attribute type 23 has an invalid length. [ 581.847621][T26378] Bluetooth: hci1: command 0x0406 tx timeout [ 581.870604][T26378] Bluetooth: hci3: command 0x0c1a tx timeout [ 582.908369][T27274] zswap: compressor û not available [ 583.141445][T27296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10127'. [ 586.092776][ C0] net_ratelimit: 9276 callbacks suppressed [ 586.092796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.111149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.123784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 586.136571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.148852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.161306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.173955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 586.186753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.199143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.211600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.079534][ C0] net_ratelimit: 12740 callbacks suppressed [ 591.079551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 591.098471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.110780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.123238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.135924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 591.148779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.161038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.173506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.186262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 591.199141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.047503][T26378] Bluetooth: hci3: command 0x0c1a tx timeout [ 596.066032][ C0] net_ratelimit: 13394 callbacks suppressed [ 596.066054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 596.084929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.097234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.109651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.122223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 596.135154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.147386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.159856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.172595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 596.185620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.749995][T13978] Bluetooth: hci3: command 0x0c1a tx timeout [ 601.052460][ C0] net_ratelimit: 13526 callbacks suppressed [ 601.052476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 601.071275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.083720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.096222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.109543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.122101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.135032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.147561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 601.160064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.172386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.039082][ C0] net_ratelimit: 13430 callbacks suppressed [ 606.039098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.057458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 606.070311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.082804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 606.095267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.107763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.120739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.133150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.145883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.158482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 611.025917][ C0] net_ratelimit: 12635 callbacks suppressed [ 611.025934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.045210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.057818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.070477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.082875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 611.095593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.107955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 611.120409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.132719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.145788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.993009][T13978] Bluetooth: hci3: command 0x0c1a tx timeout [ 612.753266][T15536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.895597][T15536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.233888][T15536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 613.470727][T14041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.490840][T14041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.508045][T14041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 613.537582][T14041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.699636][T27343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.727215][T14041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 614.276042][T27343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.294370][T27343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.012289][ C0] net_ratelimit: 12971 callbacks suppressed [ 616.012308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.030842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 616.043478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.055891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.068942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.081366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.094200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.106481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 616.119245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.131718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 620.998797][ C0] net_ratelimit: 14459 callbacks suppressed [ 620.998814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.017577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.030100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 621.042934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.055415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 621.067860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.080324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.093598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.106103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.119164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.097138][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.103547][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.985467][ C0] net_ratelimit: 14196 callbacks suppressed [ 625.985483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.004746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.017278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.029890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.042263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 626.054820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.067235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 626.079525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.091936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.104822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.258006][T26378] Bluetooth: hci6: Opcode 0x0c23 failed: -110 [ 630.293489][T13978] Bluetooth: hci5: Opcode 0x0c14 failed: -110 [ 630.308375][T26926] Bluetooth: hci4: Opcode 0x0c14 failed: -110 [ 630.397036][T14041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 630.450741][T26378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.502191][T15536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 630.548515][T27343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 630.606636][T13978] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 630.726338][T27343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.772228][T27343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 630.787499][T13978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.941834][T27343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 630.971983][ C0] net_ratelimit: 13558 callbacks suppressed [ 630.971999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.990999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.003277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.016070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.028385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 631.041146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.053428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 631.065840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.078117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.091108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.128041][T27343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.408685][T15536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 631.443265][T26926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.471700][T13978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 631.487046][T15536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 631.505022][T13978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 631.587766][T15536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 631.603073][T15536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.719061][T27337] Bluetooth: hci5: Opcode 0x0c39 failed: -110 [ 633.727385][T27339] Bluetooth: hci6: Opcode 0x0c38 failed: -110 [ 633.733573][T27334] Bluetooth: hci4: Opcode 0x0c16 failed: -110 [ 635.958668][ C0] net_ratelimit: 14299 callbacks suppressed [ 635.958685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.977145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 635.989606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.002141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.015458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.027990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.041015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.053329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 636.065952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.078278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 640.945500][ C0] net_ratelimit: 13970 callbacks suppressed [ 640.945518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.963929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.976903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.989694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 641.002548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.015104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 641.027576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.040074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.053683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.065964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.738555][T26378] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 643.799089][T26926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 643.838275][T26926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.931784][ C0] net_ratelimit: 13535 callbacks suppressed [ 645.931800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.950703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.963240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 645.977068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.989439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 646.001877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.014215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.027308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.039610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.052463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.936933][T27350] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 650.918932][ C0] net_ratelimit: 14302 callbacks suppressed [ 650.918949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.937718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.950215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 650.963038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.975524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 650.987985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.000455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.013751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.026246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.038889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.904839][ C0] net_ratelimit: 13489 callbacks suppressed [ 655.904856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.923249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 655.935709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.948011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.961006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.973316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.986125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.998453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 656.011145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.023438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 660.891708][ C0] net_ratelimit: 12458 callbacks suppressed [ 660.891725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.911115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.924009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.936574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 660.949455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.961969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 660.974416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.986935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.999804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.012712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.877916][ C0] net_ratelimit: 12924 callbacks suppressed [ 665.877932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 665.896629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.909142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 665.921617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.934142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.947549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.960924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.973780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.986303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.998767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.864807][ C0] net_ratelimit: 12722 callbacks suppressed [ 670.864823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.883989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.896817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.909102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.921467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.933656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.946011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 670.958461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.970835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 670.983098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.851093][ C0] net_ratelimit: 14473 callbacks suppressed [ 675.851109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.869403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.882011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 675.894858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.907361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 675.919702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 675.932074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.944362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.957245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.969966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.837713][ C0] net_ratelimit: 14710 callbacks suppressed [ 680.837729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.856945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.869776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.882281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.894771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.907244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.920032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 680.932868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.945405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 680.957949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 681.054775][T26378] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 681.071191][T15536] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 681.122139][T14041] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 681.323966][T14041] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 681.348561][T13978] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 681.410066][T15536] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 681.503542][T26378] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 681.573638][T13978] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 681.601799][T15536] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 681.711761][T13978] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 681.771326][T26378] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 683.250799][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.257189][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.883217][T27361] Bluetooth: hci9: Opcode 0x1001 failed: -110 [ 685.316588][T27357] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 685.824252][ C0] net_ratelimit: 13538 callbacks suppressed [ 685.824269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.843484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.856347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.868622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.881001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.893209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.905607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 685.918078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.930549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 685.942893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 690.810810][ C0] net_ratelimit: 14284 callbacks suppressed [ 690.810826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.829176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.841629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.854050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.866339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 690.878940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.891199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 690.903643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 690.915901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.928317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.942197][T26378] Bluetooth: hci2: command 0x2016 tx timeout [ 690.967451][T13978] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 690.988445][T15536] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 691.005405][T26926] Bluetooth: hci10: Opcode 0x1001 failed: -110 [ 691.098836][T27366] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 693.199478][T27364] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 695.797202][ C0] net_ratelimit: 14561 callbacks suppressed [ 695.797224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.815642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 695.828133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.840643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 695.853157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 695.865582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.877837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.890897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.903633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.916457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.783836][ C0] net_ratelimit: 14801 callbacks suppressed [ 700.783852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 700.802291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 700.814757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.827261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.840564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.853922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.866749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.879223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.891683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.903922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.770343][ C0] net_ratelimit: 14900 callbacks suppressed [ 705.770365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.788726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.801153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.813570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.826041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 705.838865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.851357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 705.863865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 705.876409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.888910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.757102][ C0] net_ratelimit: 14803 callbacks suppressed [ 710.757121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.775512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 710.788024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 710.800471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.813050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.826589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.839965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.852811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.865306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.877736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.994288][T15536] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 715.743750][ C0] net_ratelimit: 14863 callbacks suppressed [ 715.743766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.762932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.775822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.788335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.800808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.813256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.825751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 715.838547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.850855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 715.863667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 717.475768][T13978] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 717.508027][T26926] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 720.730220][ C0] net_ratelimit: 14848 callbacks suppressed [ 720.730236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.748590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.761034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.773456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.785956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 720.798761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.811023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 720.823511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 720.835762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.848205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.716924][ C0] net_ratelimit: 14966 callbacks suppressed [ 725.716940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.735284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.747740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.760167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.772751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 725.785602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.798128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 725.810674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 725.823130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.835677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.703548][ C0] net_ratelimit: 13580 callbacks suppressed [ 730.703573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 730.722004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:97:d0:22:36:7a, vlan:0) [ 730.734454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.746902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.759701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.772606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.785113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.797537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.809792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.822493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 731.021869][ T30] INFO: task syz.2.10127:27296 blocked for more than 143 seconds. [ 731.029859][ T30] Tainted: G U L syzkaller #0 [ 731.037947][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.053138][ T30] task:syz.2.10127 state:D stack:27056 pid:27296 tgid:27293 ppid:26034 task_flags:0x400140 flags:0x00080002 [ 731.065543][ T30] Call Trace: [ 731.068881][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 731.072224][ T30] __schedule+0x125c/0x6730 [ 731.076813][ T30] ? do_raw_spin_lock+0x128/0x260 [ 731.092081][ T30] ? __pfx___schedule+0x10/0x10 [ 731.098486][ T30] ? find_held_lock+0x2b/0x80 [ 731.111223][ T30] ? schedule+0x225/0x2c0 [ 731.117183][ T30] schedule+0xdd/0x2c0 [ 731.131134][ T30] schedule_preempt_disabled+0x13/0x30 [ 731.136706][ T30] __mutex_lock+0xccc/0x1bd0 [ 731.151023][ T30] ? nl80211_pre_doit+0x30e/0xae0 [ 731.157735][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 731.172069][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 731.189933][ T30] ? __dev_get_by_index+0x102/0x140 [ 731.207178][ T30] ? __pfx___cfg80211_rdev_from_attrs+0x10/0x10 [ 731.224140][ T30] ? __nla_parse+0x40/0x60 [ 731.232204][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 731.250563][ T30] ? nl80211_pre_doit+0x30e/0xae0 [ 731.255692][ T30] nl80211_pre_doit+0x30e/0xae0 [ 731.265128][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 731.274704][ T30] genl_family_rcv_msg_doit+0x1ce/0x300 [ 731.280678][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.286829][ T30] ? genl_get_cmd+0x3e7/0x760 [ 731.293268][ T30] ? bpf_lsm_capable+0x9/0x10 [ 731.301990][ T30] ? security_capable+0x80/0x260 [ 731.307019][ T30] ? ns_capable+0xd2/0xf0 [ 731.311904][ T30] genl_rcv_msg+0x560/0x800 [ 731.316494][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.322006][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 731.327463][ T30] ? __pfx_nl80211_set_coalesce+0x10/0x10 [ 731.333861][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 731.339418][ T30] netlink_rcv_skb+0x159/0x420 [ 731.344700][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.349813][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.355614][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 731.361390][ T30] genl_rcv+0x28/0x40 [ 731.365463][ T30] netlink_unicast+0x585/0x850 [ 731.370719][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 731.376090][ T30] netlink_sendmsg+0x8b0/0xda0 [ 731.381399][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.386767][ T30] ? apparmor_socket_sendmsg+0x15b/0x270 [ 731.393074][ T30] ____sys_sendmsg+0xa4d/0xbe0 [ 731.397923][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.403775][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.409138][ T30] ? futex_hash+0x311/0x400 [ 731.414038][ T30] ? plist_del+0x308/0x510 [ 731.418881][ T30] ___sys_sendmsg+0x190/0x1e0 [ 731.423925][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.429190][ T30] ? __lock_acquire+0x49f/0x1a40 [ 731.434682][ T30] ? futex_wake+0x220/0x5e0 [ 731.439303][ T30] __sys_sendmsg+0x160/0x210 [ 731.444418][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.449993][ T30] do_syscall_64+0x115/0x840 [ 731.454659][ T30] ? clear_bhb_loop+0x40/0x90 [ 731.459380][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.466006][ T30] RIP: 0033:0x7f0da179de99 [ 731.470810][ T30] RSP: 002b:00007f0da25be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.479303][ T30] RAX: ffffffffffffffda RBX: 00007f0da1a25fa0 RCX: 00007f0da179de99 [ 731.487808][ T30] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 731.496202][ T30] RBP: 00007f0da1833eaf R08: 0000000000000000 R09: 0000000000000000 [ 731.504549][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.512933][ T30] R13: 00007f0da1a26038 R14: 00007f0da1a25fa0 R15: 00007ffce667e098 [ 731.521306][ T30] [ 731.524442][ T30] INFO: task syz.0.10138:27318 blocked for more than 143 seconds. [ 731.533860][ T30] Tainted: G U L syzkaller #0 [ 731.544127][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.553217][ T30] task:syz.0.10138 state:D stack:27400 pid:27318 tgid:27317 ppid:5686 task_flags:0x400140 flags:0x00080002 [ 731.565607][ T30] Call Trace: [ 731.568945][ T30] [ 731.572336][ T30] __schedule+0x125c/0x6730 [ 731.576899][ T30] ? do_raw_spin_lock+0x128/0x260 [ 731.582483][ T30] ? __pfx___schedule+0x10/0x10 [ 731.587428][ T30] ? find_held_lock+0x2b/0x80 [ 731.592513][ T30] ? schedule+0x225/0x2c0 [ 731.597324][ T30] schedule+0xdd/0x2c0 [ 731.601785][ T30] schedule_preempt_disabled+0x13/0x30 [ 731.607316][ T30] __mutex_lock+0xccc/0x1bd0 [ 731.612405][ T30] ? macsec_del_rxsc+0x1a7/0x5a0 [ 731.617530][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 731.623327][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 731.629450][ T30] ? genl_rcv+0x28/0x40 [ 731.633678][ T30] ? netlink_unicast+0x585/0x850 [ 731.639115][ T30] ? ___sys_sendmsg+0x190/0x1e0 [ 731.644042][ T30] ? __sys_sendmsg+0x160/0x210 [ 731.649406][ T30] ? macsec_del_rxsc+0x1a7/0x5a0 [ 731.654416][ T30] ? rtnl_lock+0x9/0x20 [ 731.659149][ T30] macsec_del_rxsc+0x1a7/0x5a0 [ 731.663985][ T30] ? __pfx_macsec_del_rxsc+0x10/0x10 [ 731.669875][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 731.675431][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 731.681704][ T30] ? rcu_is_watching+0x12/0xc0 [ 731.686541][ T30] ? trace_kmalloc+0xeb/0x110 [ 731.691768][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 731.696616][ T30] ? __nla_parse+0x40/0x60 [ 731.701566][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 731.708935][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 731.716007][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 731.722063][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.728533][ T30] ? genl_get_cmd+0x3e7/0x760 [ 731.733289][ T30] ? bpf_lsm_capable+0x9/0x10 [ 731.738002][ T30] ? security_capable+0x80/0x260 [ 731.743635][ T30] genl_rcv_msg+0x560/0x800 [ 731.748632][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.753730][ T30] ? __pfx_macsec_del_rxsc+0x10/0x10 [ 731.759567][ T30] netlink_rcv_skb+0x159/0x420 [ 731.764397][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.769905][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.775279][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 731.782180][ T30] genl_rcv+0x28/0x40 [ 731.789918][ T30] netlink_unicast+0x585/0x850 [ 731.794762][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 731.800522][ T30] netlink_sendmsg+0x8b0/0xda0 [ 731.805718][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.811368][ T30] ? apparmor_socket_sendmsg+0x15b/0x270 [ 731.817066][ T30] ____sys_sendmsg+0xa4d/0xbe0 [ 731.822367][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.828041][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.833396][ T30] ? futex_hash+0x311/0x400 [ 731.838485][ T30] ? plist_del+0x308/0x510 [ 731.842966][ T30] ___sys_sendmsg+0x190/0x1e0 [ 731.848149][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.853410][ T30] ? __lock_acquire+0x49f/0x1a40 [ 731.858844][ T30] ? futex_wake+0x220/0x5e0 [ 731.863812][ T30] __sys_sendmsg+0x160/0x210 [ 731.868741][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.873943][ T30] do_syscall_64+0x115/0x840 [ 731.879101][ T30] ? clear_bhb_loop+0x40/0x90 [ 731.883845][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.890212][ T30] RIP: 0033:0x7f653a19de99 [ 731.894684][ T30] RSP: 002b:00007f653afd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.903646][ T30] RAX: ffffffffffffffda RBX: 00007f653a425fa0 RCX: 00007f653a19de99 [ 731.912016][ T30] RDX: 0000000000000040 RSI: 0000200000005380 RDI: 0000000000000003 [ 731.920399][ T30] RBP: 00007f653a233eaf R08: 0000000000000000 R09: 0000000000000000 [ 731.928750][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.936796][ T30] R13: 00007f653a426038 R14: 00007f653a425fa0 R15: 00007ffc1e56b3c8 [ 731.945300][ T30] [ 731.948679][ T30] INFO: task syz.3.10139:27321 blocked for more than 144 seconds. [ 731.956556][ T30] Tainted: G U L syzkaller #0 [ 731.963447][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.972632][ T30] task:syz.3.10139 state:D stack:28776 pid:27321 tgid:27320 ppid:5698 task_flags:0x400040 flags:0x00080002 [ 731.985015][ T30] Call Trace: [ 731.988642][ T30] [ 731.991625][ T30] __schedule+0x125c/0x6730 [ 731.996168][ T30] ? do_raw_spin_lock+0x128/0x260 [ 732.001853][ T30] ? __pfx___schedule+0x10/0x10 [ 732.006773][ T30] ? find_held_lock+0x2b/0x80 [ 732.012002][ T30] ? schedule+0x225/0x2c0 [ 732.016405][ T30] schedule+0xdd/0x2c0 [ 732.021007][ T30] schedule_preempt_disabled+0x13/0x30 [ 732.026534][ T30] __mutex_lock+0xccc/0x1bd0 [ 732.035923][ T30] ? __tun_chr_ioctl+0x4a2/0x47c0 [ 732.041616][ T30] ? tomoyo_path_number_perm+0x28f/0x580 [ 732.047661][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 732.052761][ T30] ? tomoyo_path_number_perm+0x188/0x580 [ 732.059045][ T30] ? __tun_chr_ioctl+0x4a2/0x47c0 [ 732.064139][ T30] ? rtnl_lock+0x9/0x20 [ 732.068918][ T30] __tun_chr_ioctl+0x4a2/0x47c0 [ 732.073848][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 732.083674][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 732.089310][ T30] ? hook_file_ioctl_common+0x140/0x440 [ 732.095332][ T30] ? __fget_files+0x21f/0x3d0 [ 732.100418][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 732.105600][ T30] __x64_sys_ioctl+0x18e/0x210 [ 732.110892][ T30] do_syscall_64+0x115/0x840 [ 732.115544][ T30] ? clear_bhb_loop+0x40/0x90 [ 732.120752][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.127002][ T30] RIP: 0033:0x7f29e999de99 [ 732.131565][ T30] RSP: 002b:00007f29ea7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.140534][ T30] RAX: ffffffffffffffda RBX: 00007f29e9c25fa0 RCX: 00007f29e999de99 [ 732.148921][ T30] RDX: 0000000000000073 RSI: 00000000000054e3 RDI: 00000000000000c8 [ 732.157292][ T30] RBP: 00007f29e9a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 732.165330][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.173818][ T30] R13: 00007f29e9c26038 R14: 00007f29e9c25fa0 R15: 00007ffeabf45a68 [ 732.182232][ T30] [ 732.185357][ T30] [ 732.185357][ T30] Showing all locks held in the system: [ 732.193762][ T30] 1 lock held by khungtaskd/30: [ 732.199014][ T30] #0: ffffffff8ebe7f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 732.209264][ T30] 1 lock held by khugepaged/37: [ 732.214166][ T30] #0: ffffffff8ed45760 (lock#5){+.+.}-{4:4}, at: __lru_add_drain_all+0x6a/0x650 [ 732.223986][ T30] 4 locks held by kworker/0:2/187: [ 732.229435][ T30] 3 locks held by kworker/R-ipv6_/3197: [ 732.235289][ T30] #0: ffff88803301e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.246932][ T30] #1: ffffc9000e0cfc70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.260470][ T30] #2: ffffffff90aa1d80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 732.270447][ T30] 5 locks held by kworker/R-bat_e/3228: [ 732.280933][ T30] 1 lock held by klogd/4981: [ 732.285919][ T30] #0: ffff8880b853b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 732.296404][ T30] 3 locks held by kworker/1:3/5693: [ 732.301673][ T30] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.312695][ T30] #1: ffffc90003797d08 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.326334][ T30] #2: ffffffff90ffb420 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x24/0xf0 [ 732.336445][ T30] 4 locks held by kworker/u11:0/13977: [ 732.341956][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.353026][ T30] #1: ffffc9001024fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.363475][ T30] #2: ffffffff90a89188 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 732.373289][ T30] #3: ffffffff90aa1d80 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 732.383439][ T30] 3 locks held by kworker/u11:1/13984: [ 732.389287][ T30] 3 locks held by kworker/u11:2/13986: [ 732.394802][ T30] 6 locks held by kworker/u11:3/14011: [ 732.400733][ T30] 3 locks held by kworker/u11:4/14014: [ 732.406579][ T30] 3 locks held by kworker/u11:5/18844: [ 732.412091][ T30] 2 locks held by getty/18928: [ 732.417397][ T30] #0: ffff888036be60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 732.427632][ T30] #1: ffffc9000343e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 732.438160][ T30] 3 locks held by kworker/u11:6/19921: [ 732.443684][ T30] 3 locks held by kworker/u12:3/26378: [ 732.449773][ T30] 3 locks held by kworker/u11:7/27164: [ 732.455571][ T30] 3 locks held by kworker/u11:8/27205: [ 732.461081][ T30] 3 locks held by syz.2.10127/27296: [ 732.466794][ T30] #0: ffffffff90b50a68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 732.475514][ T30] #1: ffffffff90aa1d80 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 732.485180][ T30] #2: ffff888053a007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x30e/0xae0 [ 732.495418][ T30] 3 locks held by kworker/u11:9/27295: [ 732.500941][ T30] 3 locks held by syz.0.10138/27318: [ 732.506768][ T30] #0: ffffffff90b50a68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 732.515360][ T30] #1: ffffffff90b50b20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 732.524426][ T30] #2: ffffffff90aa1d80 (rtnl_mutex){+.+.}-{4:4}, at: macsec_del_rxsc+0x1a7/0x5a0 [ 732.538857][ T30] 1 lock held by syz.3.10139/27321: [ 732.544114][ T30] #0: ffffffff90aa1d80 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x4a2/0x47c0 [ 732.554011][ T30] 2 locks held by kworker/u11:10/27323: [ 732.559959][ T30] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.571559][ T30] #1: ffffc9000dd1fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.583579][ T30] 2 locks held by kworker/u11:11/27324: [ 732.589501][ T30] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.601326][ T30] #1: ffffc9000dd2fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.613268][ T30] 3 locks held by modprobe/27325: [ 732.618693][ T30] 2 locks held by syz.5.10144/27332: [ 732.624326][ T30] #0: ffffffff90b50a68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 732.632661][ T30] #1: ffffffff90b50b20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 732.642294][ T30] 3 locks held by kworker/u11:12/27341: [ 732.648226][ T30] 3 locks held by modprobe/27342: [ 732.653306][ T30] 6 locks held by kworker/u12:5/27343: [ 732.659244][ T30] #0: ffff888060dba140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.669917][ T30] #1: ffffc9000dfe7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.682289][ T30] #2: ffff88802c6c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 732.692654][ T30] #3: ffff88802c6c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 732.702899][ T30] #4: ffffffff90d2d800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x370 [ 732.713614][ T30] #5: ffff888033fb82f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6b0 [ 732.723051][ T30] 2 locks held by kworker/u11:13/27344: [ 732.729148][ T30] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 732.740708][ T30] #1: ffffc9000e19fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 732.752708][ T30] 2 locks held by dhcpcd/27347: [ 732.757938][ T30] #0: ffff888075f43bc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 732.768966][ T30] #1: ffffffff8ebf3a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 732.783365][ T30] 1 lock held by dhcpcd/27348: [ 732.789153][ T30] #0: ffff888075f45e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 732.800174][ T30] 1 lock held by dhcpcd/27349: [ 732.805283][ T30] #0: ffff888059b0fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 732.816280][ T30] 2 locks held by dhcpcd/27353: [ 732.821185][ T30] #0: ffff888059b09940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 732.832270][ T30] #1: ffffffff8ebf3a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 732.842774][ T30] 2 locks held by kworker/u11:14/27354: [ 732.848693][ T30] 2 locks held by kworker/u11:13/27355: [ 732.854615][ T30] 1 lock held by dhcpcd/27371: [ 732.859432][ T30] #0: ffff8880330a6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 732.869749][ T30] 2 locks held by syz-executor/27372: [ 732.875537][ T30] #0: ffff888036d26450 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 732.885424][ T30] #1: ffff888075d09640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 732.896521][ T30] 2 locks held by syz-executor/27373: [ 732.901970][ T30] #0: ffff888036d26450 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 732.911992][ T30] #1: ffff888075d09640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 732.923174][ T30] 2 locks held by syz-executor/27374: [ 732.928617][ T30] #0: ffff888036d26450 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 732.938437][ T30] #1: ffff888075d09640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 732.949707][ T30] [ 732.952084][ T30] ============================================= [ 732.952084][ T30] [ 732.961012][ T30] NMI backtrace for cpu 1 [ 732.961040][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 732.961078][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 732.961088][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 732.961102][ T30] Call Trace: [ 732.961110][ T30] [ 732.961119][ T30] dump_stack_lvl+0x100/0x190 [ 732.961163][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 732.961196][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 732.961229][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 732.961274][ T30] sys_info+0x141/0x190 [ 732.961310][ T30] watchdog+0xcb1/0x1030 [ 732.961354][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 732.961384][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.961421][ T30] ? __kthread_parkme+0x18c/0x230 [ 732.961455][ T30] ? kthread+0x13a/0x450 [ 732.961486][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.961519][ T30] kthread+0x370/0x450 [ 732.961552][ T30] ? __pfx_kthread+0x10/0x10 [ 732.961586][ T30] ret_from_fork+0x72b/0xd50 [ 732.961618][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 732.961651][ T30] ? __switch_to+0x800/0x10f0 [ 732.961687][ T30] ? __switch_to_asm+0x39/0x70 [ 732.961720][ T30] ? __pfx_kthread+0x10/0x10 [ 732.961756][ T30] ret_from_fork_asm+0x1a/0x30 [ 732.961807][ T30] [ 732.961816][ T30] Sending NMI from CPU 1 to CPUs 0: [ 733.099703][ C0] NMI backtrace for cpu 0 [ 733.099725][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 733.099764][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 733.099773][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 733.099789][ C0] Workqueue: bat_events batadv_tt_purge [ 733.099925][ C0] RIP: 0010:unwind_next_frame+0xcd3/0x2090 [ 733.099962][ C0] Code: 0f 3c 09 0f 84 ef 0a 00 00 0f b6 41 05 4c 89 44 24 18 83 e0 07 3c 03 0f 84 cc 03 00 00 3c 04 0f 84 05 03 00 00 48 89 4c 24 20 <3c> 02 0f 85 60 f6 ff ff 49 8d 76 f8 ba 08 00 00 00 4d 8d 7d 34 4c [ 733.099985][ C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000293 [ 733.100002][ C0] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff91d2b5f4 [ 733.100017][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 733.100031][ C0] RBP: ffffc900000076d8 R08: ffffffff91d2b5f8 R09: 0000000000000007 [ 733.100046][ C0] R10: 0000000000000200 R11: 0000000000016d41 R12: ffffc900000076e0 [ 733.100061][ C0] R13: ffffc90000007690 R14: ffffc90000007a80 R15: ffffc90000007a20 [ 733.100078][ C0] FS: 0000000000000000(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 733.100100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.100115][ C0] CR2: 000055d94afb4008 CR3: 000000007964a000 CR4: 00000000003526f0 [ 733.100130][ C0] Call Trace: [ 733.100137][ C0] [ 733.100147][ C0] ? kmem_cache_free+0x127/0x6b0 [ 733.100173][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 733.100208][ C0] arch_stack_walk+0x94/0xf0 [ 733.100243][ C0] ? kmem_cache_free+0x127/0x6b0 [ 733.100268][ C0] ? kfree_skbmem+0x19a/0x210 [ 733.100291][ C0] stack_trace_save+0x8e/0xc0 [ 733.100321][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 733.100353][ C0] ? __lock_acquire+0x49f/0x1a40 [ 733.100389][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 733.100450][ C0] kasan_save_stack+0x30/0x50 [ 733.100478][ C0] ? kasan_save_stack+0x30/0x50 [ 733.100506][ C0] ? kasan_save_track+0x14/0x30 [ 733.100533][ C0] ? kasan_save_free_info+0x3b/0x70 [ 733.100555][ C0] ? __kasan_slab_free+0x5f/0x80 [ 733.100583][ C0] ? kmem_cache_free+0x127/0x6b0 [ 733.100629][ C0] kasan_save_track+0x14/0x30 [ 733.100657][ C0] kasan_save_free_info+0x3b/0x70 [ 733.100679][ C0] __kasan_slab_free+0x5f/0x80 [ 733.100709][ C0] kmem_cache_free+0x127/0x6b0 [ 733.100736][ C0] ? skb_release_data+0x6ca/0x8e0 [ 733.100769][ C0] kfree_skbmem+0x19a/0x210 [ 733.100792][ C0] sk_skb_reason_drop+0x10f/0x1b0 [ 733.100832][ C0] ip6_mc_input+0x832/0xf50 [ 733.100867][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 733.100900][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 733.100935][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 733.100967][ C0] ipv6_rcv+0x34c/0x3d0 [ 733.100998][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 733.101028][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 733.101057][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 733.101086][ C0] ? lock_acquire+0x1b9/0x370 [ 733.101128][ C0] ? process_backlog+0x32a/0x1580 [ 733.101155][ C0] ? process_backlog+0x32a/0x1580 [ 733.101180][ C0] __netif_receive_skb+0x1f/0x120 [ 733.101206][ C0] process_backlog+0x37a/0x1580 [ 733.101236][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 733.101265][ C0] net_rx_action+0xa40/0xf20 [ 733.101296][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 733.101323][ C0] ? mark_held_locks+0x40/0x70 [ 733.101358][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 733.101386][ C0] ? tmigr_handle_remote+0x132/0x380 [ 733.101423][ C0] ? run_timer_base+0x121/0x190 [ 733.101457][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 733.101493][ C0] handle_softirqs+0x1ea/0x9b0 [ 733.101520][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 733.101545][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 733.101570][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 733.101601][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 733.101636][ C0] do_softirq+0xac/0xe0 [ 733.101659][ C0] [ 733.101666][ C0] [ 733.101673][ C0] __local_bh_enable_ip+0xf8/0x120 [ 733.101700][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 733.101739][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 733.101777][ C0] batadv_tt_purge+0x8b/0xbd0 [ 733.101810][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 733.101841][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 733.101879][ C0] ? rcu_is_watching+0x12/0xc0 [ 733.101909][ C0] process_one_work+0xa23/0x1940 [ 733.101950][ C0] ? __pfx_process_one_work+0x10/0x10 [ 733.101988][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 733.102024][ C0] rescuer_thread+0x905/0x14a0 [ 733.102062][ C0] ? rescuer_thread+0x240/0x14a0 [ 733.102094][ C0] ? rescuer_thread+0x118/0x14a0 [ 733.102125][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 733.102159][ C0] ? __kthread_parkme+0x18c/0x230 [ 733.102186][ C0] ? kthread+0x13a/0x450 [ 733.102214][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 733.102246][ C0] kthread+0x370/0x450 [ 733.102274][ C0] ? __pfx_kthread+0x10/0x10 [ 733.102305][ C0] ret_from_fork+0x72b/0xd50 [ 733.102333][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 733.102361][ C0] ? __switch_to+0x800/0x10f0 [ 733.102395][ C0] ? __switch_to_asm+0x39/0x70 [ 733.102425][ C0] ? __pfx_kthread+0x10/0x10 [ 733.102456][ C0] ret_from_fork_asm+0x1a/0x30 [ 733.102494][ C0] [ 733.118056][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 733.118083][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 733.118119][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 733.118128][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 733.118141][ T30] Call Trace: [ 733.118149][ T30] [ 733.118158][ T30] dump_stack_lvl+0x100/0x190 [ 733.661222][ T30] vpanic+0x552/0x970 [ 733.665238][ T30] ? __pfx_vpanic+0x10/0x10 [ 733.669770][ T30] ? rcu_is_watching+0x12/0xc0 [ 733.674562][ T30] panic+0xd1/0xe0 [ 733.678311][ T30] ? __pfx_panic+0x10/0x10 [ 733.682753][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 733.688943][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 733.695133][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 733.701324][ T30] ? watchdog.cold+0x1ec/0x234 [ 733.706120][ T30] ? watchdog+0xcc1/0x1030 [ 733.710575][ T30] watchdog.cold+0x1fd/0x234 [ 733.715199][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 733.721038][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.725751][ T30] ? __kthread_parkme+0x18c/0x230 [ 733.730804][ T30] ? kthread+0x13a/0x450 [ 733.735074][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.739781][ T30] kthread+0x370/0x450 [ 733.743878][ T30] ? __pfx_kthread+0x10/0x10 [ 733.748500][ T30] ret_from_fork+0x72b/0xd50 [ 733.753118][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 733.758253][ T30] ? __switch_to+0x800/0x10f0 [ 733.762968][ T30] ? __switch_to_asm+0x39/0x70 [ 733.767763][ T30] ? __pfx_kthread+0x10/0x10 [ 733.772384][ T30] ret_from_fork_asm+0x1a/0x30 [ 733.777197][ T30] [ 733.780392][ T30] Kernel Offset: disabled [ 733.784753][ T30] Rebooting in 86400 seconds..