last executing test programs: 4m36.343545605s ago: executing program 1 (id=5023): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/devices\x00', 0x40140, 0x0) lseek$auto(0x3, 0x8, 0x1) 4m36.156916101s ago: executing program 1 (id=5027): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r0, 0x0, 0xf) 4m36.023529434s ago: executing program 1 (id=5032): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x2, 0x0) pread64$auto(r0, &(0x7f00000001c0)='\xc6\xf5GC\xc1\xd9\x92A)\x0e\xb6\x8e\xe7.\xbeL:elj\x02\xc7\xd3\xe4\xad\xdf\xbc8\xeeG1\xc7I\xe8\xd2\x95r\a\xc0\x11\x8e\xf5\xf1\x18\xcf\x9d\xf3Du\xaf\xba\xaa\xffc$\x8cs0\x1ci\xf1\x81\x1a\xbc\xa7\xff\xf9{\x05\xe9\xa1\x16\v?U\xd8\xce\\\xc2\xc8|\xce\xabl>]\xd1\xbf\x87Y\x8b[\xec|', 0x10002, 0x74) 4m35.870171818s ago: executing program 1 (id=5037): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/031/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x81085520, r0) 4m35.758635053s ago: executing program 1 (id=5038): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m35.289256269s ago: executing program 1 (id=5049): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x6) 4m34.979159856s ago: executing program 32 (id=5049): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x6) 1.920581359s ago: executing program 3 (id=10021): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) setuid$auto(0xe) bpf$auto(0x5, 0x0, 0x6) 1.781006535s ago: executing program 3 (id=10024): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2c, 0x3, 0x10000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) 1.153536461s ago: executing program 0 (id=10032): open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xfffffffffffffffd) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1.056676401s ago: executing program 0 (id=10035): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) fdatasync$auto(0xffffffffffffffff) write$auto(0x3, 0x0, 0x5c8) 957.861288ms ago: executing program 0 (id=10038): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 880.395065ms ago: executing program 2 (id=10039): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) 872.663799ms ago: executing program 4 (id=10040): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2275, r0) 752.549582ms ago: executing program 2 (id=10041): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYBLOB='^\x00\'', @ANYRESOCT=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40890) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 729.99157ms ago: executing program 4 (id=10042): mmap$auto(0x0, 0x20009, 0xf, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, 0x0, 0x1) 633.039972ms ago: executing program 3 (id=10043): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e0, 0x38) 586.977547ms ago: executing program 0 (id=10044): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x84) setrlimit$auto(0x1000000007, 0x0) accept$auto(r0, 0x0, 0x0) 582.951169ms ago: executing program 2 (id=10045): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x20) 532.463826ms ago: executing program 4 (id=10046): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) stat$auto(&(0x7f0000000000)='./file0\x00', 0x0) 442.861851ms ago: executing program 3 (id=10047): io_uring_setup$auto(0xb, &(0x7f0000000100)={0x3, 0x7, 0x9, 0x1, 0x2, 0x82, 0xffffffffffffffff, [0xfffffff7, 0xaa6, 0x3], {0x3, 0x1, 0x1, 0xd6d, 0x6, 0x1, 0x10, 0x10, 0x9}, {0x7, 0xcc9, 0x9, 0xa, 0x81, 0x9, 0x63, 0x43, 0x4}}) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x52) r0 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) 398.829174ms ago: executing program 0 (id=10048): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb1, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r0, 0x3, 0x81, @uprobe_multi={0x81, 0x1fb, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) 382.364603ms ago: executing program 2 (id=10049): r0 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x100000004, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x9, 0xffffffff80000000, 0xffffffff7fffffff, 0x65, 0x103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 336.152081ms ago: executing program 4 (id=10050): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xd, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x2000003, 0x1ff, 0x2000061, 0x7fffffdd, 0x4, 0x6d3f, 0x8001, 0x6]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) 253.589745ms ago: executing program 3 (id=10051): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(r0, 0x114, 0x1, 0x0, 0x1b) 153.658993ms ago: executing program 2 (id=10052): sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 148.549125ms ago: executing program 4 (id=10053): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x3, 0x3040, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x4, 0x3, 0x7c1e, 0x3, 0x7c, 0x104, 0x101, 0xffffffffffffffff}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x100076c5, 0x10000008, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) read$auto(r0, 0x0, 0x5) 139.102597ms ago: executing program 0 (id=10054): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 88.918084ms ago: executing program 3 (id=10055): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mseal$auto(0x0, 0x7dda, 0x0) 12.046375ms ago: executing program 4 (id=10056): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='j\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 2 (id=10057): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) kernel console output (not intermixed with test programs): ge_slave_1) entered blocking state [ 319.852819][T12212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.310702][T16590] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 320.498752][T11793] Bluetooth: hci1: command tx timeout [ 320.878189][T16207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.369975][T16207] veth0_vlan: entered promiscuous mode [ 321.405652][T16207] veth1_vlan: entered promiscuous mode [ 321.468556][T16207] veth0_macvtap: entered promiscuous mode [ 321.480223][T16207] veth1_macvtap: entered promiscuous mode [ 321.518951][T16207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.562820][T16207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.630713][T12211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.720859][T12211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.770850][T12211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.797967][T12211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.891724][T12166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.914124][T12166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.011497][T11800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.034339][T11800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.193431][T16207] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 322.218965][T16680] vmstat_refresh: nr_hugetlb -2048 [ 323.657744][T16763] cifs: Unknown parameter 'knjeRaBt$Mi' [ 324.089350][T16786] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 324.216012][T16793] mmap: syz.3.5294 (16793): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 327.223265][T11793] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 327.865649][T16998] : Can't lookup blockdev [ 329.142293][T17063] ecryptfs_miscdev_write: Error while inspecting packet size [ 329.224876][T17068] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 330.043147][T17107] kAFS: No cell specified [ 330.478983][T17129] syz_tun: tun_chr_ioctl cmd 1074025698 [ 335.126883][T17358] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 337.787253][ T29] audit: type=1800 audit(4294967489.983:31): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5603" name="sr0" dev="devtmpfs" ino=2817 res=0 errno=0 [ 338.399359][T17511] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 339.618951][T17567] Process accounting resumed [ 339.831288][T17585] : Can't lookup blockdev [ 340.509048][T17617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 340.524718][T17617] ep_00: uevent: failed to send synthetic uevent: -22 [ 340.836532][T11793] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 340.836570][T11793] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 340.851662][T11793] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 341.446796][T17666] cougar: G6 mapped to F18 [ 341.503225][T17669] serial 00:02: in use; can't configure [ 341.743296][T17682] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 341.743296][T17682] M' is too long [ 341.769444][T17682] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 341.769444][T17682] W ' is too long [ 342.177510][T17705] nvme_fcloop: unknown parameter or missing value '7' [ 343.392799][T17771] i2c i2c-0: delete_device: Extra parameters [ 344.190993][T17815] sd 0:0:1:0: PR command failed: 1026 [ 344.212555][T17815] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 344.225864][T17815] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 345.456907][T17877] Scaler: ================= START STATUS ================= [ 345.484941][T17877] Scaler: ================== END STATUS ================== [ 346.679718][T17942] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 346.679718][T17942] [ 346.965812][T17960] bond0: invalid ARP target specified [ 347.491589][T17980] zram: Added device: zram1 [ 348.084559][T18022] syz.4.5865 (18022): drop_caches: 0 [ 348.544397][T18046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 348.576885][T18046] CIFS mount error: No usable UNC path provided in device string! [ 348.576885][T18046] [ 348.578018][T18045] zram: Added device: zram2 [ 348.588058][T18046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 348.807790][T18057] binder: 18055:18057 ioctl c00c6211 0 returned -14 [ 349.257786][T18078] zram: Added device: zram3 [ 349.979357][T18108] zram: Added device: zram4 [ 351.101529][ T24] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 352.338582][T18234] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 352.348702][T18220] smpboot: CPU 1 is now offline [ 353.473574][T18276] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 355.574441][T18350] bond0: option slaves: interface -]=,Do does not exist! [ 355.815481][T18359] CIFS: VFS: UNC: path must begin with // or \\ [ 355.851573][T18359] Malformed UNC in devname [ 355.851573][T18359] [ 355.888483][T18359] CIFS: VFS: Malformed UNC in devname [ 359.563855][T18533] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 362.295218][T18662] binder: 18660:18662 ioctl c0306201 2000000000c0 returned -14 [ 363.690439][T18720] FAULT_INJECTION: forcing a failure. [ 363.690439][T18720] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 363.769439][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.4.6210 Tainted: G U L syzkaller #0 PREEMPT(full) [ 363.769467][T18720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 363.769480][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.769492][T18720] Call Trace: [ 363.769497][T18720] [ 363.769503][T18720] dump_stack_lvl+0x100/0x190 [ 363.769524][T18720] should_fail_ex.cold+0x5/0xa [ 363.769539][T18720] ? prepare_alloc_pages+0x16d/0x5f0 [ 363.769563][T18720] should_fail_alloc_page+0xeb/0x140 [ 363.769584][T18720] prepare_alloc_pages+0x1f0/0x5f0 [ 363.769607][T18720] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 363.769636][T18720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.769652][T18720] ? __pfx_get_page_from_freelist+0x10/0x10 [ 363.769669][T18720] ? rcu_is_watching+0x12/0xc0 [ 363.769686][T18720] ? trace_mm_page_alloc+0x164/0x1c0 [ 363.769706][T18720] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 363.769727][T18720] ? __kernel_text_address+0xd/0x30 [ 363.769747][T18720] ? unwind_get_return_address+0x59/0xa0 [ 363.769768][T18720] ? arch_stack_walk+0xa6/0xf0 [ 363.769789][T18720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.769810][T18720] ? policy_nodemask+0xed/0x4f0 [ 363.769832][T18720] alloc_pages_mpol+0x1fb/0x540 [ 363.769853][T18720] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 363.769878][T18720] alloc_pages_noprof+0x1a/0x160 [ 363.769892][T18720] kimage_alloc_pages+0x72/0x380 [ 363.769914][T18720] kimage_alloc_control_pages+0x157/0xa20 [ 363.769938][T18720] ? alloc_pages_mpol+0x25a/0x540 [ 363.769957][T18720] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 363.769983][T18720] alloc_pgt_page+0xc/0xa0 [ 363.769998][T18720] machine_kexec_prepare+0x159/0x1270 [ 363.770013][T18720] ? alloc_pages_noprof+0xf9/0x160 [ 363.770031][T18720] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 363.770048][T18720] ? __pfx_alloc_pgt_page+0x10/0x10 [ 363.770065][T18720] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 363.770091][T18720] do_kexec_load+0x32c/0x810 [ 363.770113][T18720] ? __pfx_do_kexec_load+0x10/0x10 [ 363.770136][T18720] ? _copy_from_user+0x59/0xd0 [ 363.770160][T18720] __x64_sys_kexec_load+0x1bf/0x230 [ 363.770183][T18720] do_syscall_64+0x115/0x840 [ 363.770202][T18720] ? clear_bhb_loop+0x40/0x90 [ 363.770236][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.770251][T18720] RIP: 0033:0x7fcf6af9e019 [ 363.770265][T18720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.770279][T18720] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 363.770297][T18720] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 363.770306][T18720] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 363.770315][T18720] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 363.770324][T18720] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 363.770332][T18720] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 363.770351][T18720] [ 365.460564][T18782] netlink: 'syz.0.6241': attribute type 1 has an invalid length. [ 365.608425][T18787] nbd: must specify an index to disconnect [ 365.727125][T18793] futex_wake_op: syz.4.6246 tries to shift op by -2048; fix this program [ 365.781024][T18793] futex_wake_op: syz.4.6246 tries to shift op by -2048; fix this program [ 366.759550][T18812] syz.3.6254 (18812) used greatest stack depth: 19768 bytes left [ 366.799030][T11793] Bluetooth: hci1: ISO packet for unknown connection handle 4095 [ 367.168380][T18849] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 367.263720][T18849] nbd: error processing sock list [ 368.193863][T18881] HfR: entered promiscuous mode [ 368.420791][T18898] netlink: 'syz.4.6295': attribute type 1 has an invalid length. [ 368.741459][T18914] syz_tun: tun_chr_ioctl cmd 1074025698 [ 369.719153][T18937] Process accounting paused [ 370.068503][T18958] netlink: zone id is out of range [ 370.102794][T18958] netlink: zone id is out of range [ 370.130360][T18958] netlink: zone id is out of range [ 370.150506][T18958] netlink: zone id is out of range [ 370.174168][T18958] netlink: zone id is out of range [ 370.204445][T18958] netlink: zone id is out of range [ 370.232544][T18958] netlink: zone id is out of range [ 370.255681][T18958] netlink: zone id is out of range [ 370.274663][T18958] netlink: zone id is out of range [ 370.295755][T18958] netlink: zone id is out of range [ 370.558099][T18978] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6335'. [ 371.166174][T19006] HfR: entered promiscuous mode [ 372.896130][T19072] netlink: 'syz.3.6378': attribute type 11 has an invalid length. [ 372.939292][T19072] netlink: 'syz.3.6378': attribute type 11 has an invalid length. [ 372.995360][T19072] netlink: 'syz.3.6378': attribute type 11 has an invalid length. [ 373.033187][T19072] netlink: 'syz.3.6378': attribute type 11 has an invalid length. [ 375.999143][T19202] binder: 19200:19202 ioctl 400c620e 200000001f40 returned -22 [ 376.040005][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.050317][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.417244][T19220] Zero length message leads to an empty skb [ 378.776525][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6489'. [ 379.093414][T19328] net_ratelimit: 50 callbacks suppressed [ 379.093428][T19328] netlink: ct family unspecified [ 381.293673][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6535'. [ 383.643903][T19501] FAULT_INJECTION: forcing a failure. [ 383.643903][T19501] name failslab, interval 1, probability 0, space 0, times 1 [ 383.721844][T19501] CPU: 0 UID: 0 PID: 19501 Comm: syz.2.6575 Tainted: G U L syzkaller #0 PREEMPT(full) [ 383.721872][T19501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 383.721877][T19501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.721886][T19501] Call Trace: [ 383.721891][T19501] [ 383.721897][T19501] dump_stack_lvl+0x100/0x190 [ 383.721919][T19501] should_fail_ex.cold+0x5/0xa [ 383.721938][T19501] should_failslab+0xc2/0x120 [ 383.721959][T19501] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 383.721978][T19501] ? __mod_timer+0x40e/0xca0 [ 383.721992][T19501] ? __d_alloc+0x35/0xa50 [ 383.722011][T19501] __d_alloc+0x35/0xa50 [ 383.722028][T19501] d_alloc_pseudo+0x1c/0xc0 [ 383.722049][T19501] alloc_file_pseudo+0x118/0x290 [ 383.722069][T19501] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 383.722087][T19501] ? alloc_fd+0x471/0x7a0 [ 383.722105][T19501] sock_alloc_file+0x50/0x210 [ 383.722127][T19501] __sys_socket+0x1c0/0x260 [ 383.722144][T19501] ? __pfx___sys_socket+0x10/0x10 [ 383.722166][T19501] __x64_sys_socket+0x72/0xb0 [ 383.722182][T19501] ? lockdep_hardirqs_on+0x78/0x100 [ 383.722201][T19501] do_syscall_64+0x115/0x840 [ 383.722219][T19501] ? clear_bhb_loop+0x40/0x90 [ 383.722237][T19501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.722252][T19501] RIP: 0033:0x7f4d7239e019 [ 383.722265][T19501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.722278][T19501] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 383.722292][T19501] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 383.722302][T19501] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 383.722310][T19501] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 383.722319][T19501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.722327][T19501] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 383.722345][T19501] [ 384.203475][T19516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 385.066598][T12166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.269714][T12166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.449809][T12166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.731671][T15354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.746695][T15354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.758994][T15354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.767110][T15354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.776975][T15354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.829108][T12166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.680695][T12166] bridge_slave_1: left allmulticast mode [ 386.715021][T12166] bridge_slave_1: left promiscuous mode [ 386.758500][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.774309][T19586] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 386.829287][T12166] bridge_slave_0: left allmulticast mode [ 386.866833][T12166] bridge_slave_0: left promiscuous mode [ 386.903498][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.019907][T19596] netlink: 'syz.3.6617': attribute type 1 has an invalid length. [ 387.343070][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.370589][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.393002][T12166] bond0 (unregistering): Released all slaves [ 387.818117][T11793] Bluetooth: hci0: command tx timeout [ 387.843213][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 388.407944][T12166] hsr_slave_0: left promiscuous mode [ 388.442575][T12166] hsr_slave_1: left promiscuous mode [ 388.468777][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.486880][T19632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6628'. [ 388.514789][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.569080][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.618333][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.730295][T12166] veth1_macvtap: left promiscuous mode [ 388.765816][T12166] veth0_macvtap: left promiscuous mode [ 388.808279][T12166] veth1_vlan: left promiscuous mode [ 388.861948][T12166] veth0_vlan: left promiscuous mode [ 389.136880][T19652] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 389.845989][T12166] team0 (unregistering): Port device team_slave_1 removed [ 389.885110][T11793] Bluetooth: hci0: command tx timeout [ 389.923238][T12166] team0 (unregistering): Port device team_slave_0 removed [ 390.103564][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 390.133434][T19676] : entered promiscuous mode [ 391.044957][T19707] netlink: 'syz.3.6655': attribute type 1 has an invalid length. [ 391.241897][T19549] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.283022][T19549] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.333613][T19549] bridge_slave_0: entered allmulticast mode [ 391.387230][T19549] bridge_slave_0: entered promiscuous mode [ 391.442725][T19549] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.484949][T19549] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.540129][T19549] bridge_slave_1: entered allmulticast mode [ 391.582269][T19549] bridge_slave_1: entered promiscuous mode [ 391.741342][T19549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.809416][T19549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.958904][T11793] Bluetooth: hci0: command tx timeout [ 392.077965][T19549] team0: Port device team_slave_0 added [ 392.129829][T19549] team0: Port device team_slave_1 added [ 392.197913][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 392.259403][T19549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.301588][T19549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.395306][T19549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.439297][T19549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.486122][T19549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.602832][T19549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.950773][T19549] hsr_slave_0: entered promiscuous mode [ 393.020125][T19549] hsr_slave_1: entered promiscuous mode [ 393.054418][T19549] debugfs: 'hsr0' already exists in 'hsr' [ 393.092215][T19549] Cannot create hsr debugfs directory [ 393.275800][T19791] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 394.023851][T11793] Bluetooth: hci0: command tx timeout [ 395.721790][T19871] vmstat_refresh: nr_hugetlb -2048 [ 396.525140][T19549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.579930][T19549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.615344][T19549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.686412][T19549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.726253][T19549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.758002][T19909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.785210][T19549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.828383][T19549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.890633][T19549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.974769][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6732'. [ 397.001951][T19925] netlink: 178 bytes leftover after parsing attributes in process `syz.4.6733'. [ 397.280618][T19549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.398814][T19549] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.470987][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.478181][T12211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.580259][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.587450][T11800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.635327][T19946] block nbd2: not configured, cannot reconfigure [ 397.890584][T19957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6745'. [ 399.357025][T19549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.562467][T20021] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 399.600343][T20018] Process accounting resumed [ 399.630905][T19549] veth0_vlan: entered promiscuous mode [ 399.717679][T19549] veth1_vlan: entered promiscuous mode [ 399.873203][T19549] veth0_macvtap: entered promiscuous mode [ 399.957453][T19549] veth1_macvtap: entered promiscuous mode [ 400.071067][T20037] CIFS: VFS: Invalid SecurityFlags: [ 400.117738][T19549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.200467][T19549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.322170][T11800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.422453][T11800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.456607][T20049] netlink: 'syz.2.6777': attribute type 11 has an invalid length. [ 400.499685][T11800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.590254][T11800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.832480][T11800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.891735][T11800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.041641][T11796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.098007][T11796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.332722][T20112] MTRR 1 not used [ 403.106709][T20143] netlink: 'syz.2.6812': attribute type 11 has an invalid length. [ 403.172775][T20143] netlink: 'syz.2.6812': attribute type 11 has an invalid length. [ 403.225769][T20143] netlink: 'syz.2.6812': attribute type 11 has an invalid length. [ 403.274868][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6813'. [ 403.937032][T20175] netlink: 'syz.2.6823': attribute type 1 has an invalid length. [ 404.282475][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6828'. [ 404.337611][T20188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.547874][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 406.141156][T20260] FAULT_INJECTION: forcing a failure. [ 406.141156][T20260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.215195][T20260] CPU: 0 UID: 0 PID: 20260 Comm: syz.4.6861 Tainted: G U L syzkaller #0 PREEMPT(full) [ 406.215224][T20260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 406.215230][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.215239][T20260] Call Trace: [ 406.215246][T20260] [ 406.215252][T20260] dump_stack_lvl+0x100/0x190 [ 406.215273][T20260] should_fail_ex.cold+0x5/0xa [ 406.215288][T20260] ? prepare_alloc_pages+0x16d/0x5f0 [ 406.215313][T20260] should_fail_alloc_page+0xeb/0x140 [ 406.215335][T20260] prepare_alloc_pages+0x1f0/0x5f0 [ 406.215356][T20260] ? rcu_is_watching+0x12/0xc0 [ 406.215375][T20260] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 406.215401][T20260] ? find_held_lock+0x2b/0x80 [ 406.215419][T20260] ? rcu_read_unlock+0x17/0x60 [ 406.215441][T20260] ? rcu_read_unlock+0x17/0x60 [ 406.215462][T20260] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 406.215478][T20260] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 406.215496][T20260] ? rcu_is_watching+0x12/0xc0 [ 406.215513][T20260] ? trace_mm_page_alloc+0x164/0x1c0 [ 406.215534][T20260] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 406.215555][T20260] ? __lock_acquire+0x49f/0x1a40 [ 406.215575][T20260] ? __css_rstat_updated+0x1ce/0x5a0 [ 406.215599][T20260] ? __lock_acquire+0x49f/0x1a40 [ 406.215619][T20260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 406.215641][T20260] ? policy_nodemask+0xed/0x4f0 [ 406.215663][T20260] alloc_pages_mpol+0x1fb/0x540 [ 406.215684][T20260] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 406.215704][T20260] ? find_held_lock+0x2b/0x80 [ 406.215721][T20260] ? __pud_alloc+0x4f6/0x690 [ 406.215740][T20260] ? __pud_alloc+0x4f6/0x690 [ 406.215762][T20260] alloc_pages_noprof+0x1a/0x160 [ 406.215776][T20260] __pmd_alloc+0x3b/0x950 [ 406.215795][T20260] ? __pud_alloc+0x4fb/0x690 [ 406.215817][T20260] walk_to_pmd+0x3a3/0x4c0 [ 406.215839][T20260] get_locked_pte+0x25/0xc0 [ 406.215860][T20260] map_ldt_struct+0x3c1/0xa70 [ 406.215885][T20260] ? __pfx_map_ldt_struct+0x10/0x10 [ 406.215905][T20260] ? alloc_pages_noprof+0xf9/0x160 [ 406.215921][T20260] write_ldt+0x6d3/0xd40 [ 406.215944][T20260] ? __pfx_write_ldt+0x10/0x10 [ 406.215965][T20260] ? xfd_validate_state+0x129/0x190 [ 406.215986][T20260] __x64_sys_modify_ldt+0xb1/0x170 [ 406.216007][T20260] do_syscall_64+0x115/0x840 [ 406.216026][T20260] ? clear_bhb_loop+0x40/0x90 [ 406.216045][T20260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.216060][T20260] RIP: 0033:0x7fcf6af9e019 [ 406.216075][T20260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.216088][T20260] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 406.216103][T20260] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 406.216112][T20260] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 406.216121][T20260] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 406.216129][T20260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.216138][T20260] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 406.216164][T20260] [ 407.118600][ T29] audit: type=1326 audit(4294967327.548:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.2.6874" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d7239e019 code=0x0 [ 407.156694][T20287] openvswitch: netlink: IP tunnel dst address not specified [ 408.395911][T20331] netlink: 'syz.3.6894': attribute type 12 has an invalid length. [ 410.792928][T20420] netlink: 'syz.0.6936': attribute type 2 has an invalid length. [ 410.871648][T20424] syz_tun: tun_chr_ioctl cmd 2147767519 [ 412.693161][T20494] netlink: NAT attribute has 5 unknown bytes [ 413.227690][T20508] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 414.692091][T20550] openvswitch: netlink: Message has 4 unknown bytes. [ 414.767600][T20553] netlink: 'syz.2.7001': attribute type 2 has an invalid length. [ 415.257901][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7007'. [ 416.454567][T20595] FAULT_INJECTION: forcing a failure. [ 416.454567][T20595] name failslab, interval 1, probability 0, space 0, times 0 [ 416.514358][T20595] CPU: 0 UID: 0 PID: 20595 Comm: syz.2.7021 Tainted: G U L syzkaller #0 PREEMPT(full) [ 416.514387][T20595] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 416.514392][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.514401][T20595] Call Trace: [ 416.514406][T20595] [ 416.514412][T20595] dump_stack_lvl+0x100/0x190 [ 416.514436][T20595] should_fail_ex.cold+0x5/0xa [ 416.514454][T20595] should_failslab+0xc2/0x120 [ 416.514475][T20595] __kvmalloc_node_noprof+0x116/0x970 [ 416.514494][T20595] ? percpu_ref_init+0xec/0x3f0 [ 416.514512][T20595] ? io_alloc_cache_init+0x38/0x170 [ 416.514534][T20595] io_alloc_cache_init+0x38/0x170 [ 416.514553][T20595] io_uring_setup.cold+0x450/0x1c2e [ 416.514575][T20595] ? ksys_write+0x190/0x250 [ 416.514588][T20595] ? ksys_write+0x190/0x250 [ 416.514601][T20595] ? __pfx_io_uring_setup+0x10/0x10 [ 416.514617][T20595] ? do_futex+0x190/0x440 [ 416.514633][T20595] ? __pfx_do_futex+0x10/0x10 [ 416.514657][T20595] ? xfd_validate_state+0x129/0x190 [ 416.514678][T20595] __x64_sys_io_uring_setup+0xc2/0x170 [ 416.514695][T20595] do_syscall_64+0x115/0x840 [ 416.514713][T20595] ? clear_bhb_loop+0x40/0x90 [ 416.514730][T20595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.514744][T20595] RIP: 0033:0x7f4d7239e019 [ 416.514757][T20595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.514770][T20595] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 416.514785][T20595] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 416.514794][T20595] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000b63 [ 416.514802][T20595] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 416.514811][T20595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.514819][T20595] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 416.514837][T20595] [ 419.510858][T20698] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 419.548450][T20698] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7071'. [ 420.542001][T20738] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 423.434713][T20840] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 423.469940][T20840] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 423.767151][T20849] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 425.078726][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7170'. [ 425.441758][T20922] FAULT_INJECTION: forcing a failure. [ 425.441758][T20922] name failslab, interval 1, probability 0, space 0, times 0 [ 425.487240][T20922] CPU: 0 UID: 0 PID: 20922 Comm: syz.0.7177 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.487277][T20922] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.487283][T20922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.487294][T20922] Call Trace: [ 425.487300][T20922] [ 425.487306][T20922] dump_stack_lvl+0x100/0x190 [ 425.487327][T20922] should_fail_ex.cold+0x5/0xa [ 425.487345][T20922] should_failslab+0xc2/0x120 [ 425.487366][T20922] __kmalloc_cache_noprof+0x91/0x6c0 [ 425.487382][T20922] ? proc_self_get_link+0x189/0x1f0 [ 425.487409][T20922] proc_self_get_link+0x189/0x1f0 [ 425.487431][T20922] pick_link+0xac2/0x13c0 [ 425.487451][T20922] ? __pfx_proc_self_get_link+0x10/0x10 [ 425.487475][T20922] step_into_slowpath+0x9ba/0xf90 [ 425.487504][T20922] ? __pfx_step_into_slowpath+0x10/0x10 [ 425.487528][T20922] ? lookup_fast+0x2da/0x600 [ 425.487546][T20922] ? inode_permission+0x374/0x620 [ 425.487567][T20922] link_path_walk+0xf28/0x1cc0 [ 425.487595][T20922] path_openat+0x1c9/0x4280 [ 425.487609][T20922] ? __kasan_slab_alloc+0x89/0x90 [ 425.487627][T20922] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 425.487643][T20922] ? do_getname+0x35/0x390 [ 425.487660][T20922] ? __x64_sys_openat+0x12d/0x210 [ 425.487684][T20922] ? __pfx_path_openat+0x10/0x10 [ 425.487704][T20922] do_file_open+0x20e/0x430 [ 425.487720][T20922] ? __pfx_do_file_open+0x10/0x10 [ 425.487748][T20922] ? alloc_fd+0x471/0x7a0 [ 425.487764][T20922] ? do_getname+0x191/0x390 [ 425.487783][T20922] do_sys_openat2+0x10f/0x1e0 [ 425.487802][T20922] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.487821][T20922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.487850][T20922] __x64_sys_openat+0x12d/0x210 [ 425.487870][T20922] ? __pfx___x64_sys_openat+0x10/0x10 [ 425.487903][T20922] do_syscall_64+0x115/0x840 [ 425.487922][T20922] ? clear_bhb_loop+0x40/0x90 [ 425.487940][T20922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.487955][T20922] RIP: 0033:0x7f4f1cb9e019 [ 425.487968][T20922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.487983][T20922] RSP: 002b:00007f4f1da9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 425.487998][T20922] RAX: ffffffffffffffda RBX: 00007f4f1ce25fa0 RCX: 00007f4f1cb9e019 [ 425.488007][T20922] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 425.488016][T20922] RBP: 00007f4f1cc3500c R08: 0000000000000000 R09: 0000000000000000 [ 425.488024][T20922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.488033][T20922] R13: 00007f4f1ce26038 R14: 00007f4f1ce25fa0 R15: 00007fff52d00978 [ 425.488052][T20922] [ 426.925234][ T5652] udevd[5652]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 428.806010][T21022] openvswitch: netlink: IP tunnel dst address not specified [ 429.580930][T21045] Process accounting paused [ 430.526376][T21089] No such timeout policy "" [ 430.557665][T21089] netlink: Failed to associated timeout policy '' [ 431.903492][T21077] kexec: Could not allocate control_code_buffer [ 432.110080][T21131] openvswitch: netlink: Flow key attr not present in new flow. [ 432.268648][T11793] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 433.600960][T21191] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 433.852074][T21202] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 434.664529][T21223] openvswitch: netlink: Key type 29 is not supported [ 434.987238][T21234] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7323'. [ 435.412340][T15354] Bluetooth: hci1: command 0x0406 tx timeout [ 435.574026][T21258] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 436.092709][T21274] openvswitch: netlink: Flow key attr not present in new flow. [ 436.505778][T21289] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 436.764924][T21293] dump_stack_lvl+0x100/0x190 [ 436.764946][T21293] should_fail_ex.cold+0x5/0xa [ 436.764963][T21293] should_failslab+0xc2/0x120 [ 436.764985][T21293] __kmalloc_cache_noprof+0x91/0x6c0 [ 436.765001][T21293] ? call_usermodehelper_setup+0xaf/0x360 [ 436.765026][T21293] ? __pfx_free_modprobe_argv+0x10/0x10 [ 436.765043][T21293] call_usermodehelper_setup+0xaf/0x360 [ 436.765068][T21293] __request_module+0x3c7/0x6a0 [ 436.765084][T21293] ? __pfx___request_module+0x10/0x10 [ 436.765107][T21293] ? find_held_lock+0x2b/0x80 [ 436.765124][T21293] ? inet6_create+0xb9f/0x12b0 [ 436.765144][T21293] inet6_create+0xd65/0x12b0 [ 436.765161][T21293] ? inet6_create+0x7f/0x12b0 [ 436.765179][T21293] __sock_create+0x339/0x860 [ 436.765199][T21293] __sys_socket+0x14d/0x260 [ 436.765216][T21293] ? __pfx___sys_socket+0x10/0x10 [ 436.765237][T21293] __x64_sys_socket+0x72/0xb0 [ 436.765252][T21293] ? lockdep_hardirqs_on+0x78/0x100 [ 436.765271][T21293] do_syscall_64+0x115/0x840 [ 436.765295][T21293] ? clear_bhb_loop+0x40/0x90 [ 436.765313][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.765328][T21293] RIP: 0033:0x7f4d7239e019 [ 436.765341][T21293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.765355][T21293] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 436.765369][T21293] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 436.765379][T21293] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 436.765387][T21293] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 436.765395][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.765403][T21293] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 436.765420][T21293] [ 437.689077][T21315] openvswitch: netlink: IP tunnel dst address not specified [ 438.436993][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.448850][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.535811][T21409] netlink: set zone limit has 4 unknown bytes [ 441.054682][T21432] netlink: 'syz.0.7416': attribute type 2 has an invalid length. [ 441.580957][T21446] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 441.621892][T21448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7424'. [ 442.200784][T21471] netlink: 'syz.2.7434': attribute type 1 has an invalid length. [ 442.450483][T21481] FAULT_INJECTION: forcing a failure. [ 442.450483][T21481] name failslab, interval 1, probability 0, space 0, times 0 [ 442.522515][T21481] CPU: 0 UID: 0 PID: 21481 Comm: syz.4.7440 Tainted: G U L syzkaller #0 PREEMPT(full) [ 442.522541][T21481] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 442.522547][T21481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.522556][T21481] Call Trace: [ 442.522560][T21481] [ 442.522566][T21481] dump_stack_lvl+0x100/0x190 [ 442.522588][T21481] should_fail_ex.cold+0x5/0xa [ 442.522605][T21481] should_failslab+0xc2/0x120 [ 442.522626][T21481] __kmalloc_cache_noprof+0x91/0x6c0 [ 442.522647][T21481] ? call_usermodehelper_setup+0xaf/0x360 [ 442.522673][T21481] ? __pfx_free_modprobe_argv+0x10/0x10 [ 442.522689][T21481] call_usermodehelper_setup+0xaf/0x360 [ 442.522748][T21481] __request_module+0x3c7/0x6a0 [ 442.522765][T21481] ? __pfx___request_module+0x10/0x10 [ 442.522789][T21481] ? find_held_lock+0x2b/0x80 [ 442.522806][T21481] ? inet6_create+0xb9f/0x12b0 [ 442.522826][T21481] inet6_create+0xd65/0x12b0 [ 442.522843][T21481] ? inet6_create+0x7f/0x12b0 [ 442.522861][T21481] __sock_create+0x339/0x860 [ 442.522881][T21481] __sys_socket+0x14d/0x260 [ 442.522897][T21481] ? __pfx___sys_socket+0x10/0x10 [ 442.522918][T21481] __x64_sys_socket+0x72/0xb0 [ 442.522933][T21481] ? lockdep_hardirqs_on+0x78/0x100 [ 442.522952][T21481] do_syscall_64+0x115/0x840 [ 442.522970][T21481] ? clear_bhb_loop+0x40/0x90 [ 442.522988][T21481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.523004][T21481] RIP: 0033:0x7fcf6af9e019 [ 442.523017][T21481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.523030][T21481] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 442.523046][T21481] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 442.523056][T21481] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 442.523064][T21481] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 442.523072][T21481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.523080][T21481] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 442.523100][T21481] [ 442.935044][T21492] netlink: 'syz.0.7444': attribute type 1 has an invalid length. [ 443.144783][T21496] NFSD: Failed to start, no listeners configured. [ 443.871493][T21518] netlink: 'syz.0.7458': attribute type 1 has an invalid length. [ 445.733914][T21561] openvswitch: netlink: IP tunnel dst address not specified [ 446.016802][ T809] Process accounting resumed [ 447.234281][T21605] .^: entered promiscuous mode [ 447.407082][T21612] HSR: entered promiscuous mode [ 447.902015][T21631] FAULT_INJECTION: forcing a failure. [ 447.902015][T21631] name failslab, interval 1, probability 0, space 0, times 0 [ 447.963191][T21631] CPU: 0 UID: 0 PID: 21631 Comm: syz.2.7514 Tainted: G U L syzkaller #0 PREEMPT(full) [ 447.963219][T21631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 447.963224][T21631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.963233][T21631] Call Trace: [ 447.963239][T21631] [ 447.963245][T21631] dump_stack_lvl+0x100/0x190 [ 447.963266][T21631] should_fail_ex.cold+0x5/0xa [ 447.963284][T21631] should_failslab+0xc2/0x120 [ 447.963303][T21631] kmem_cache_alloc_noprof+0x91/0x6a0 [ 447.963322][T21631] ? __pfx_map_id_range_down+0x10/0x10 [ 447.963344][T21631] ? security_inode_alloc+0x3b/0x2c0 [ 447.963364][T21631] security_inode_alloc+0x3b/0x2c0 [ 447.963385][T21631] inode_init_always_gfp+0xc77/0xfb0 [ 447.963403][T21631] alloc_inode+0x8e/0x250 [ 447.963421][T21631] sock_alloc+0x44/0x280 [ 447.963442][T21631] ? security_socket_create+0x7f/0x250 [ 447.963459][T21631] __sock_create+0xc2/0x860 [ 447.963474][T21631] ? lockdep_init_map_type+0x5c/0x250 [ 447.963491][T21631] smc_create+0x163/0x290 [ 447.963511][T21631] __sock_create+0x339/0x860 [ 447.963529][T21631] __sys_socket+0x14d/0x260 [ 447.963546][T21631] ? __pfx___sys_socket+0x10/0x10 [ 447.963568][T21631] __x64_sys_socket+0x72/0xb0 [ 447.963584][T21631] ? lockdep_hardirqs_on+0x78/0x100 [ 447.963602][T21631] do_syscall_64+0x115/0x840 [ 447.963620][T21631] ? clear_bhb_loop+0x40/0x90 [ 447.963637][T21631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.963651][T21631] RIP: 0033:0x7f4d7239e019 [ 447.963664][T21631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.963677][T21631] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 447.963691][T21631] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 447.963700][T21631] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 447.963708][T21631] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 447.963716][T21631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.963724][T21631] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 447.963742][T21631] [ 447.963762][T21631] socket: no more sockets [ 448.250589][T21639] FAULT_INJECTION: forcing a failure. [ 448.250589][T21639] name failslab, interval 1, probability 0, space 0, times 0 [ 448.290230][T21639] CPU: 0 UID: 0 PID: 21639 Comm: syz.4.7518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 448.290259][T21639] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 448.290265][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.290274][T21639] Call Trace: [ 448.290280][T21639] [ 448.290286][T21639] dump_stack_lvl+0x100/0x190 [ 448.290308][T21639] should_fail_ex.cold+0x5/0xa [ 448.290325][T21639] should_failslab+0xc2/0x120 [ 448.290346][T21639] kmem_cache_alloc_noprof+0x91/0x6a0 [ 448.290366][T21639] ? __pmd_alloc+0xbf/0x950 [ 448.290391][T21639] __pmd_alloc+0xbf/0x950 [ 448.290413][T21639] move_page_tables+0x2f7c/0x4610 [ 448.290430][T21639] ? __pfx_copy_vma+0x10/0x10 [ 448.290453][T21639] ? __pfx_move_page_tables+0x10/0x10 [ 448.290483][T21639] copy_vma_and_data+0x25c/0x7c0 [ 448.290500][T21639] ? __pfx_copy_vma_and_data+0x10/0x10 [ 448.290523][T21639] ? __vma_start_write+0x17f/0x280 [ 448.290537][T21639] ? __pfx___vma_start_write+0x10/0x10 [ 448.290564][T21639] move_vma+0x574/0x1920 [ 448.290583][T21639] ? __pfx_move_vma+0x10/0x10 [ 448.290600][T21639] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 448.290621][T21639] ? cap_mmap_addr+0x4b/0x120 [ 448.290635][T21639] ? bpf_lsm_mmap_addr+0x9/0x30 [ 448.290649][T21639] ? security_mmap_addr+0x71/0x1e0 [ 448.290669][T21639] ? __get_unmapped_area+0x255/0x3e0 [ 448.290691][T21639] ? vrm_set_new_addr+0x204/0x290 [ 448.290708][T21639] mremap_to+0x234/0x4c0 [ 448.290723][T21639] ? mas_walk+0x6ef/0x9b0 [ 448.290742][T21639] ? __pfx_mremap_to+0x10/0x10 [ 448.290762][T21639] __do_sys_mremap+0x88c/0x1850 [ 448.290783][T21639] ? __pfx___do_sys_mremap+0x10/0x10 [ 448.290798][T21639] ? ksys_write+0x190/0x250 [ 448.290816][T21639] ? __pfx_do_futex+0x10/0x10 [ 448.290841][T21639] ? __x64_sys_futex+0x34f/0x4d0 [ 448.290868][T21639] do_syscall_64+0x115/0x840 [ 448.290894][T21639] ? clear_bhb_loop+0x40/0x90 [ 448.290912][T21639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.290927][T21639] RIP: 0033:0x7fcf6af9e019 [ 448.290940][T21639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.290953][T21639] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 448.290967][T21639] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 448.290977][T21639] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 448.290985][T21639] RBP: 00007fcf6b03500c R08: 0000000100000000 R09: 0000000000000000 [ 448.290993][T21639] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 448.291001][T21639] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 448.291021][T21639] [ 451.184405][T21722] netlink: 'syz.2.7556': attribute type 1 has an invalid length. [ 451.709419][T21741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.927835][T21750] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 452.105188][T21760] netlink: 'syz.3.7574': attribute type 1 has an invalid length. [ 452.909432][T21792] NFSD: Failed to start, no listeners configured. [ 453.371244][T21815] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 453.720116][T21828] syz.0.7605(21828): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 453.781296][T21833] netlink: 'syz.3.7608': attribute type 1 has an invalid length. [ 454.836821][T21870] NFSD: Failed to start, no listeners configured. [ 455.815417][T21907] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 456.333697][T21930] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 457.597895][T21983] netlink: Setting conntrack mark requires 'commit' flag. [ 459.140593][T22053] netlink: 'syz.2.7714': attribute type 3 has an invalid length. [ 460.096952][T22066] Process accounting resumed [ 460.934832][T22131] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 461.018969][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7753'. [ 461.164340][T22139] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 462.219947][T22184] openvswitch: netlink: Multiple metadata blocks provided [ 462.425791][ T29] audit: type=1326 audit(4295032920.214:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22195 comm="syz.2.7785" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d7239e019 code=0x0 [ 462.822603][T22213] tipc: Started in network mode [ 462.842001][T22213] tipc: Node identity ee00, cluster identity 4711 [ 462.873256][T22213] tipc: Node number set to 60928 [ 463.453807][T22239] netlink: 'syz.4.7814': attribute type 3 has an invalid length. [ 464.225555][T22268] netlink: zone id is out of range [ 464.248769][T22268] netlink: get zone limit has 8 unknown bytes [ 464.343625][T22272] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12) [ 464.595138][T22285] netlink: 'syz.4.7828': attribute type 2 has an invalid length. [ 495.654800][T15354] Bluetooth: hci1: command 0x0406 tx timeout [ 496.171632][T23588] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 497.951634][T23669] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 499.285080][T23728] netlink: Failed to add  helper -22 [ 499.558368][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.568079][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.623996][T23749] openvswitch: netlink: Missing valid actions attribute. [ 499.802202][T23758] netlink: 'syz.0.8535': attribute type 2 has an invalid length. [ 500.484789][T23794] nbd: must specify a device to reconfigure [ 500.543146][ T29] audit: type=1107 audit(4294967303.785:34): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.602743][ T29] audit: type=1107 audit(4294967303.815:35): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.676790][T23800] netlink: Unknown NAT attribute (type=262, max=9) [ 500.726283][T23805] netlink: 'syz.0.8557': attribute type 1 has an invalid length. [ 500.851094][T23810] random: crng reseeded on system resumption [ 500.941951][T23814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 501.047047][T15354] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 501.092530][T15354] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 501.102143][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 501.111574][T15354] CPU: 0 UID: 0 PID: 15354 Comm: kworker/u12:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 501.111601][T15354] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 501.111607][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.111617][T15354] Workqueue: hci3 hci_rx_work [ 501.111639][T15354] Call Trace: [ 501.111644][T15354] [ 501.111651][T15354] dump_stack_lvl+0x100/0x190 [ 501.111677][T15354] sysfs_warn_dup.cold+0x1c/0x28 [ 501.111699][T15354] sysfs_create_dir_ns+0x24b/0x2b0 [ 501.111723][T15354] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 501.111743][T15354] ? find_held_lock+0x2b/0x80 [ 501.111761][T15354] ? kobject_add_internal+0x25f/0x930 [ 501.111775][T15354] ? kobject_add_internal+0x25f/0x930 [ 501.111795][T15354] ? do_raw_spin_unlock+0x145/0x1e0 [ 501.111816][T15354] kobject_add_internal+0x2c8/0x930 [ 501.111834][T15354] kobject_add+0x16a/0x1e0 [ 501.111849][T15354] ? __pfx_kobject_add+0x10/0x10 [ 501.111862][T15354] ? class_to_subsys+0x10f/0x150 [ 501.111881][T15354] ? kobject_put+0xb9/0x640 [ 501.111901][T15354] ? _raw_spin_unlock+0x28/0x50 [ 501.111922][T15354] device_add+0x294/0x1970 [ 501.111936][T15354] ? __pfx_dev_set_name+0x10/0x10 [ 501.111952][T15354] ? __pfx_device_add+0x10/0x10 [ 501.111966][T15354] ? mgmt_send_event_skb+0x2fb/0x460 [ 501.111990][T15354] hci_conn_add_sysfs+0x1a3/0x260 [ 501.112011][T15354] le_conn_complete_evt+0x11eb/0x1f60 [ 501.112035][T15354] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 501.112051][T15354] ? __pfx_bt_warn+0x10/0x10 [ 501.112063][T15354] ? hci_event_packet+0x186/0xcd0 [ 501.112084][T15354] hci_le_conn_complete_evt+0x23c/0x3a0 [ 501.112103][T15354] ? skb_pull_data+0x15f/0x1e0 [ 501.112121][T15354] hci_le_meta_evt+0x34a/0x5f0 [ 501.112140][T15354] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 501.112160][T15354] hci_event_packet+0x51c/0xcd0 [ 501.112178][T15354] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.112197][T15354] ? __pfx_hci_event_packet+0x10/0x10 [ 501.112217][T15354] ? kcov_remote_start+0x384/0x670 [ 501.112237][T15354] ? lockdep_hardirqs_on+0x78/0x100 [ 501.112260][T15354] hci_rx_work+0x451/0xfc0 [ 501.112280][T15354] process_one_work+0xa23/0x1940 [ 501.112309][T15354] ? __pfx_process_one_work+0x10/0x10 [ 501.112335][T15354] ? __pfx_hci_rx_work+0x10/0x10 [ 501.112353][T15354] worker_thread+0x5ef/0xe50 [ 501.112379][T15354] ? __pfx_worker_thread+0x10/0x10 [ 501.112399][T15354] ? kthread+0x13a/0x450 [ 501.112417][T15354] ? __pfx_worker_thread+0x10/0x10 [ 501.112436][T15354] kthread+0x370/0x450 [ 501.112454][T15354] ? __pfx_kthread+0x10/0x10 [ 501.112473][T15354] ret_from_fork+0x72b/0xd50 [ 501.112492][T15354] ? __pfx_ret_from_fork+0x10/0x10 [ 501.112510][T15354] ? __switch_to+0x800/0x10f0 [ 501.112531][T15354] ? __switch_to_asm+0x39/0x70 [ 501.112549][T15354] ? __pfx_kthread+0x10/0x10 [ 501.112569][T15354] ret_from_fork_asm+0x1a/0x30 [ 501.112597][T15354] [ 501.114118][T15354] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.435902][T15354] Bluetooth: hci3: failed to register connection device [ 502.564918][T15354] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 502.604002][T23866] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 502.613382][T23866] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 502.623071][T23866] CPU: 0 UID: 0 PID: 23866 Comm: kworker/u12:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.623099][T23866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.623105][T23866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.623116][T23866] Workqueue: hci0 hci_rx_work [ 502.623138][T23866] Call Trace: [ 502.623144][T23866] [ 502.623150][T23866] dump_stack_lvl+0x100/0x190 [ 502.623170][T23866] sysfs_warn_dup.cold+0x1c/0x28 [ 502.623192][T23866] sysfs_create_dir_ns+0x24b/0x2b0 [ 502.623222][T23866] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.623243][T23866] ? find_held_lock+0x2b/0x80 [ 502.623261][T23866] ? kobject_add_internal+0x25f/0x930 [ 502.623275][T23866] ? kobject_add_internal+0x25f/0x930 [ 502.623291][T23866] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.623308][T23866] kobject_add_internal+0x2c8/0x930 [ 502.623326][T23866] kobject_add+0x16a/0x1e0 [ 502.623340][T23866] ? __pfx_kobject_add+0x10/0x10 [ 502.623353][T23866] ? class_to_subsys+0x10f/0x150 [ 502.623372][T23866] ? kobject_put+0xb9/0x640 [ 502.623392][T23866] ? _raw_spin_unlock+0x28/0x50 [ 502.623413][T23866] device_add+0x294/0x1970 [ 502.623427][T23866] ? __pfx_dev_set_name+0x10/0x10 [ 502.623444][T23866] ? __pfx_device_add+0x10/0x10 [ 502.623459][T23866] ? mgmt_send_event_skb+0x2fb/0x460 [ 502.623483][T23866] hci_conn_add_sysfs+0x1a3/0x260 [ 502.623504][T23866] le_conn_complete_evt+0x11eb/0x1f60 [ 502.623527][T23866] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.623544][T23866] ? __pfx_bt_warn+0x10/0x10 [ 502.623556][T23866] ? hci_event_packet+0x186/0xcd0 [ 502.623578][T23866] hci_le_conn_complete_evt+0x23c/0x3a0 [ 502.623618][T23866] ? skb_pull_data+0x15f/0x1e0 [ 502.623638][T23866] hci_le_meta_evt+0x34a/0x5f0 [ 502.623658][T23866] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 502.623680][T23866] hci_event_packet+0x51c/0xcd0 [ 502.623699][T23866] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.623719][T23866] ? __pfx_hci_event_packet+0x10/0x10 [ 502.623740][T23866] ? kcov_remote_start+0x384/0x670 [ 502.623760][T23866] ? lockdep_hardirqs_on+0x78/0x100 [ 502.623782][T23866] hci_rx_work+0x451/0xfc0 [ 502.623803][T23866] process_one_work+0xa23/0x1940 [ 502.623832][T23866] ? __pfx_process_one_work+0x10/0x10 [ 502.623858][T23866] ? __pfx_hci_rx_work+0x10/0x10 [ 502.623877][T23866] worker_thread+0x5ef/0xe50 [ 502.623902][T23866] ? __pfx_worker_thread+0x10/0x10 [ 502.623923][T23866] ? kthread+0x13a/0x450 [ 502.623941][T23866] ? __pfx_worker_thread+0x10/0x10 [ 502.623960][T23866] kthread+0x370/0x450 [ 502.623978][T23866] ? __pfx_kthread+0x10/0x10 [ 502.623997][T23866] ret_from_fork+0x72b/0xd50 [ 502.624016][T23866] ? __pfx_ret_from_fork+0x10/0x10 [ 502.624035][T23866] ? __switch_to+0x800/0x10f0 [ 502.624056][T23866] ? __switch_to_asm+0x39/0x70 [ 502.624074][T23866] ? __pfx_kthread+0x10/0x10 [ 502.624094][T23866] ret_from_fork_asm+0x1a/0x30 [ 502.624123][T23866] [ 502.624145][T23866] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.948731][T23866] Bluetooth: hci0: failed to register connection device [ 503.056450][T23866] Bluetooth: hci3: command 0x0406 tx timeout [ 504.191731][T23911] nbd: couldn't find device at index 158 [ 504.292759][T23915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 504.650503][T23866] Bluetooth: hci0: command 0x2016 tx timeout [ 504.846511][T23937] openvswitch: netlink: Flow key attribute not present in set flow. [ 505.127226][T23866] Bluetooth: hci3: command 0x0406 tx timeout [ 505.448753][T23967] openvswitch: netlink: IP tunnel TTL not specified. [ 506.717570][T23866] Bluetooth: hci0: command 0x2016 tx timeout [ 507.013627][T23866] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 507.061957][T24048] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 507.069959][T24048] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 507.082115][T24048] CPU: 0 UID: 0 PID: 24048 Comm: kworker/u12:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 507.082145][T24048] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 507.082151][T24048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.082163][T24048] Workqueue: hci2 hci_rx_work [ 507.082187][T24048] Call Trace: [ 507.082195][T24048] [ 507.082202][T24048] dump_stack_lvl+0x100/0x190 [ 507.082223][T24048] sysfs_warn_dup.cold+0x1c/0x28 [ 507.082246][T24048] sysfs_create_dir_ns+0x24b/0x2b0 [ 507.082269][T24048] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 507.082289][T24048] ? find_held_lock+0x2b/0x80 [ 507.082308][T24048] ? kobject_add_internal+0x25f/0x930 [ 507.082323][T24048] ? kobject_add_internal+0x25f/0x930 [ 507.082340][T24048] ? do_raw_spin_unlock+0x145/0x1e0 [ 507.082358][T24048] kobject_add_internal+0x2c8/0x930 [ 507.082376][T24048] kobject_add+0x16a/0x1e0 [ 507.082395][T24048] ? __pfx_kobject_add+0x10/0x10 [ 507.082409][T24048] ? class_to_subsys+0x10f/0x150 [ 507.082434][T24048] ? kobject_put+0xb9/0x640 [ 507.082455][T24048] ? _raw_spin_unlock+0x28/0x50 [ 507.082477][T24048] device_add+0x294/0x1970 [ 507.082493][T24048] ? __pfx_dev_set_name+0x10/0x10 [ 507.082510][T24048] ? __pfx_device_add+0x10/0x10 [ 507.082524][T24048] ? mgmt_send_event_skb+0x2fb/0x460 [ 507.082547][T24048] hci_conn_add_sysfs+0x1a3/0x260 [ 507.082569][T24048] le_conn_complete_evt+0x11eb/0x1f60 [ 507.082592][T24048] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 507.082609][T24048] ? __pfx_bt_warn+0x10/0x10 [ 507.082621][T24048] ? hci_event_packet+0x186/0xcd0 [ 507.082642][T24048] hci_le_conn_complete_evt+0x23c/0x3a0 [ 507.082661][T24048] ? skb_pull_data+0x15f/0x1e0 [ 507.082679][T24048] hci_le_meta_evt+0x34a/0x5f0 [ 507.082698][T24048] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 507.082718][T24048] hci_event_packet+0x51c/0xcd0 [ 507.082736][T24048] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 507.082755][T24048] ? __pfx_hci_event_packet+0x10/0x10 [ 507.082775][T24048] ? kcov_remote_start+0x384/0x670 [ 507.082794][T24048] ? lockdep_hardirqs_on+0x78/0x100 [ 507.082817][T24048] hci_rx_work+0x451/0xfc0 [ 507.082838][T24048] process_one_work+0xa23/0x1940 [ 507.082867][T24048] ? __pfx_process_one_work+0x10/0x10 [ 507.082893][T24048] ? __pfx_hci_rx_work+0x10/0x10 [ 507.082912][T24048] worker_thread+0x5ef/0xe50 [ 507.082937][T24048] ? __pfx_worker_thread+0x10/0x10 [ 507.082958][T24048] ? kthread+0x13a/0x450 [ 507.082982][T24048] ? __pfx_worker_thread+0x10/0x10 [ 507.083002][T24048] kthread+0x370/0x450 [ 507.083021][T24048] ? __pfx_kthread+0x10/0x10 [ 507.083042][T24048] ret_from_fork+0x72b/0xd50 [ 507.083062][T24048] ? __pfx_ret_from_fork+0x10/0x10 [ 507.083079][T24048] ? rcu_is_watching+0x12/0xc0 [ 507.083096][T24048] ? __switch_to+0x800/0x10f0 [ 507.083117][T24048] ? __switch_to_asm+0x39/0x70 [ 507.083135][T24048] ? __pfx_kthread+0x10/0x10 [ 507.083155][T24048] ret_from_fork_asm+0x1a/0x30 [ 507.083183][T24048] [ 507.084064][T24048] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 507.405329][T11793] Bluetooth: hci3: command 0x0406 tx timeout [ 507.418824][T24048] Bluetooth: hci2: failed to register connection device [ 508.787420][T24048] Bluetooth: hci0: command 0x2016 tx timeout [ 509.025612][T15354] Bluetooth: hci2: command 0x0406 tx timeout [ 509.383682][T24141] netlink: 'syz.3.8718': attribute type 11 has an invalid length. [ 509.421426][T24141] netlink: 'syz.3.8718': attribute type 11 has an invalid length. [ 509.429720][T23866] Bluetooth: hci3: command 0x0406 tx timeout [ 509.477849][T24141] netlink: 'syz.3.8718': attribute type 11 has an invalid length. [ 510.300101][T24187] netlink: 'syz.4.8740': attribute type 2 has an invalid length. [ 510.855768][T24048] Bluetooth: hci0: command 0x2016 tx timeout [ 511.094911][T23866] Bluetooth: hci2: command 0x0406 tx timeout [ 511.667965][T24259] nbd: illegal input index -1024 [ 512.029201][T24274] netlink: 'syz.2.8781': attribute type 1 has an invalid length. [ 512.800685][T24315] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 512.925567][T23866] Bluetooth: hci0: command 0x2016 tx timeout [ 513.163968][T23866] Bluetooth: hci2: command 0x0406 tx timeout [ 514.224990][T24385] netlink: 'syz.3.8836': attribute type 8 has an invalid length. [ 514.514105][T24396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 514.648082][T24402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8844'. [ 515.233339][T15354] Bluetooth: hci2: command 0x0406 tx timeout [ 515.325096][T24409] could not allocate digest TFM handle [ 517.069009][T24476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'. [ 517.130161][T24478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8879'. [ 518.802325][T24545] netlink: 'syz.4.8910': attribute type 11 has an invalid length. [ 518.853946][T24545] netlink: 'syz.4.8910': attribute type 11 has an invalid length. [ 518.894703][T24545] netlink: 'syz.4.8910': attribute type 11 has an invalid length. [ 519.064255][T24540] phram: parameter too long [ 520.280904][T24589] Process accounting resumed [ 520.291908][T24597] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8936'. [ 521.593130][T24643] phram: parameter too long [ 521.684895][ T29] audit: type=1326 audit(4294967325.045:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24659 comm="syz.3.8967" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3e19e019 code=0x0 [ 522.337446][ T29] audit: type=1800 audit(4294967325.698:37): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8976" name=22050820 dev="tmpfs" ino=11813 res=0 errno=0 [ 522.534901][T24682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8977'. [ 522.943587][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8986'. [ 523.459941][T24715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8993'. [ 524.162273][T24741] netlink: 'syz.2.9003': attribute type 1 has an invalid length. [ 526.453676][T24810] netlink: 206 bytes leftover after parsing attributes in process `syz.4.9035'. [ 527.292322][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9047'. [ 527.481817][T24839] ovs_?: entered promiscuous mode [ 528.025117][T24855] kAFS: No cell specified [ 528.212674][T24859] ovs_?: entered promiscuous mode [ 530.599310][T24961] IPVS: length: 537396514 != 24 [ 530.826332][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9113'. [ 531.750156][T25021] FAULT_INJECTION: forcing a failure. [ 531.750156][T25021] name failslab, interval 1, probability 0, space 0, times 0 [ 531.821085][T25021] CPU: 0 UID: 0 PID: 25021 Comm: syz.2.9135 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.821113][T25021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.821120][T25021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.821129][T25021] Call Trace: [ 531.821134][T25021] [ 531.821140][T25021] dump_stack_lvl+0x100/0x190 [ 531.821162][T25021] should_fail_ex.cold+0x5/0xa [ 531.821180][T25021] should_failslab+0xc2/0x120 [ 531.821201][T25021] __kmalloc_noprof+0xfc/0x820 [ 531.821219][T25021] ? rcu_is_watching+0x12/0xc0 [ 531.821236][T25021] ? tomoyo_realpath_from_path+0xb6/0x690 [ 531.821366][T25021] tomoyo_realpath_from_path+0xb6/0x690 [ 531.821393][T25021] tomoyo_mkdev_perm+0x231/0x570 [ 531.821413][T25021] ? tomoyo_mkdev_perm+0x21d/0x570 [ 531.821432][T25021] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 531.821451][T25021] ? do_raw_spin_lock+0x128/0x260 [ 531.821472][T25021] ? do_raw_spin_unlock+0x145/0x1e0 [ 531.821500][T25021] ? simple_lookup+0xfc/0x1d0 [ 531.821547][T25021] tomoyo_path_mknod+0xe2/0x190 [ 531.821563][T25021] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 531.821580][T25021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.821605][T25021] security_path_mknod+0x161/0x300 [ 531.821657][T25021] filename_mknodat+0x241/0x7f0 [ 531.821677][T25021] ? __pfx_filename_mknodat+0x10/0x10 [ 531.821693][T25021] ? strncpy_from_user+0x19d/0x2d0 [ 531.821752][T25021] ? do_getname+0x191/0x390 [ 531.821773][T25021] __x64_sys_mknod+0x8f/0xc0 [ 531.821790][T25021] do_syscall_64+0x115/0x840 [ 531.821809][T25021] ? clear_bhb_loop+0x40/0x90 [ 531.821828][T25021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.821843][T25021] RIP: 0033:0x7f4d7239e019 [ 531.821858][T25021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.821872][T25021] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 531.821887][T25021] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 531.821897][T25021] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 531.821906][T25021] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 531.821915][T25021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.821924][T25021] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 531.821943][T25021] [ 531.821956][T25021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.108343][T25023] ovs_?: entered promiscuous mode [ 532.664712][T25047] ovs_?: entered promiscuous mode [ 533.313592][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9159'. [ 533.370947][T25076] FAULT_INJECTION: forcing a failure. [ 533.370947][T25076] name failslab, interval 1, probability 0, space 0, times 0 [ 533.426954][T25076] CPU: 0 UID: 0 PID: 25076 Comm: syz.4.9161 Tainted: G U L syzkaller #0 PREEMPT(full) [ 533.426982][T25076] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 533.426988][T25076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.426997][T25076] Call Trace: [ 533.427002][T25076] [ 533.427008][T25076] dump_stack_lvl+0x100/0x190 [ 533.427030][T25076] should_fail_ex.cold+0x5/0xa [ 533.427047][T25076] should_failslab+0xc2/0x120 [ 533.427068][T25076] kmem_cache_alloc_noprof+0x91/0x6a0 [ 533.427085][T25076] ? stack_trace_save+0x8e/0xc0 [ 533.427105][T25076] ? alloc_empty_file+0x5b/0x1c0 [ 533.427126][T25076] alloc_empty_file+0x5b/0x1c0 [ 533.427144][T25076] path_openat+0xe7/0x4280 [ 533.427158][T25076] ? __kasan_slab_alloc+0x89/0x90 [ 533.427189][T25076] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 533.427207][T25076] ? do_getname+0x35/0x390 [ 533.427224][T25076] ? do_sys_openat2+0xc7/0x1e0 [ 533.427243][T25076] ? __x64_sys_openat+0x12d/0x210 [ 533.427261][T25076] ? do_syscall_64+0x115/0x840 [ 533.427280][T25076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.427300][T25076] ? __pfx_path_openat+0x10/0x10 [ 533.427319][T25076] do_file_open+0x20e/0x430 [ 533.427335][T25076] ? __pfx_do_file_open+0x10/0x10 [ 533.427362][T25076] ? alloc_fd+0x471/0x7a0 [ 533.427378][T25076] ? do_getname+0x191/0x390 [ 533.427398][T25076] do_sys_openat2+0x10f/0x1e0 [ 533.427424][T25076] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.427444][T25076] ? find_held_lock+0x2b/0x80 [ 533.427467][T25076] __x64_sys_openat+0x12d/0x210 [ 533.427488][T25076] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.427514][T25076] do_syscall_64+0x115/0x840 [ 533.427532][T25076] ? clear_bhb_loop+0x40/0x90 [ 533.427548][T25076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.427563][T25076] RIP: 0033:0x7fcf6af5e84e [ 533.427576][T25076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.427589][T25076] RSP: 002b:00007fcf6bdd6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.427604][T25076] RAX: ffffffffffffffda RBX: 00007fcf6bdd76c0 RCX: 00007fcf6af5e84e [ 533.427614][T25076] RDX: 0000000000000002 RSI: 00007fcf6bdd6f90 RDI: ffffffffffffff9c [ 533.427623][T25076] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 533.427631][T25076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.427640][T25076] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 533.427658][T25076] [ 535.324441][T25152] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.333903][T25152] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.592782][ T29] audit: type=1800 audit(4294967340.022:38): pid=25203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9219" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 539.273391][T25308] FAULT_INJECTION: forcing a failure. [ 539.273391][T25308] name failslab, interval 1, probability 0, space 0, times 0 [ 539.327496][T25308] CPU: 0 UID: 0 PID: 25308 Comm: syz.3.9268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.327523][T25308] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.327529][T25308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.327538][T25308] Call Trace: [ 539.327546][T25308] [ 539.327553][T25308] dump_stack_lvl+0x100/0x190 [ 539.327575][T25308] should_fail_ex.cold+0x5/0xa [ 539.327594][T25308] should_failslab+0xc2/0x120 [ 539.327615][T25308] kmem_cache_alloc_noprof+0x91/0x6a0 [ 539.327633][T25308] ? __fget_files+0x215/0x3d0 [ 539.327648][T25308] ? create_new_namespaces+0x30/0xac0 [ 539.327667][T25308] create_new_namespaces+0x30/0xac0 [ 539.327686][T25308] __do_sys_setns+0x213/0x1f30 [ 539.327704][T25308] ? __pfx___do_sys_setns+0x10/0x10 [ 539.327733][T25308] do_syscall_64+0x115/0x840 [ 539.327754][T25308] ? clear_bhb_loop+0x40/0x90 [ 539.327773][T25308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.327788][T25308] RIP: 0033:0x7f6f3e19e019 [ 539.327801][T25308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.327815][T25308] RSP: 002b:00007f6f3eff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 539.327829][T25308] RAX: ffffffffffffffda RBX: 00007f6f3e425fa0 RCX: 00007f6f3e19e019 [ 539.327839][T25308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 539.327847][T25308] RBP: 00007f6f3e23500c R08: 0000000000000000 R09: 0000000000000000 [ 539.327855][T25308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.327863][T25308] R13: 00007f6f3e426038 R14: 00007f6f3e425fa0 R15: 00007ffcad834e48 [ 539.327882][T25308] [ 539.622506][T25316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9273'. [ 541.812721][T25411] syz_tun: tun_chr_ioctl cmd 2147767506 [ 543.457964][T25479] bridge0: port 3(ipvlan1) entered blocking state [ 543.492978][T25479] bridge0: port 3(ipvlan1) entered disabled state [ 543.530091][T25479] ipvlan1: entered allmulticast mode [ 543.557583][T25479] veth0_vlan: entered allmulticast mode [ 543.596997][T25479] ipvlan1: left allmulticast mode [ 543.622237][T25479] veth0_vlan: left allmulticast mode [ 547.035772][T25633] bridge0: port 3(ipvlan1) entered blocking state [ 547.049901][T25633] bridge0: port 3(ipvlan1) entered disabled state [ 547.070424][T25633] ipvlan1: entered allmulticast mode [ 547.087852][T25633] veth0_vlan: entered allmulticast mode [ 547.138018][T25633] ipvlan1: left allmulticast mode [ 547.151853][T25633] veth0_vlan: left allmulticast mode [ 549.593684][T25722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9450'. [ 549.916964][T25734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9455'. [ 550.049228][T25676] kexec: Could not allocate control_code_buffer [ 550.347587][T25731] Process accounting paused [ 550.796671][T25768] FAULT_INJECTION: forcing a failure. [ 550.796671][T25768] name failslab, interval 1, probability 0, space 0, times 0 [ 550.873757][T25768] CPU: 0 UID: 0 PID: 25768 Comm: syz.4.9465 Tainted: G U L syzkaller #0 PREEMPT(full) [ 550.873785][T25768] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 550.873791][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.873801][T25768] Call Trace: [ 550.873806][T25768] [ 550.873812][T25768] dump_stack_lvl+0x100/0x190 [ 550.873834][T25768] should_fail_ex.cold+0x5/0xa [ 550.873852][T25768] should_failslab+0xc2/0x120 [ 550.873874][T25768] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 550.873892][T25768] ? lockdep_hardirqs_on+0x78/0x100 [ 550.873913][T25768] ? sock_alloc_inode+0x26/0x2c0 [ 550.873997][T25768] ? __pfx_sock_alloc_inode+0x10/0x10 [ 550.874012][T25768] sock_alloc_inode+0x26/0x2c0 [ 550.874028][T25768] ? __pfx_sock_alloc_inode+0x10/0x10 [ 550.874043][T25768] alloc_inode+0x68/0x250 [ 550.874062][T25768] sock_alloc+0x44/0x280 [ 550.874109][T25768] ? security_socket_create+0x7f/0x250 [ 550.874155][T25768] __sock_create+0xc2/0x860 [ 550.874175][T25768] smc_create_clcsk+0x37/0xd0 [ 550.874232][T25768] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 550.874302][T25768] inet6_create+0xb1a/0x12b0 [ 550.874362][T25768] ? inet6_create+0x7f/0x12b0 [ 550.874381][T25768] __sock_create+0x339/0x860 [ 550.874401][T25768] __sys_socket+0x14d/0x260 [ 550.874418][T25768] ? __pfx___sys_socket+0x10/0x10 [ 550.874440][T25768] __x64_sys_socket+0x72/0xb0 [ 550.874456][T25768] ? lockdep_hardirqs_on+0x78/0x100 [ 550.874474][T25768] do_syscall_64+0x115/0x840 [ 550.874502][T25768] ? clear_bhb_loop+0x40/0x90 [ 550.874520][T25768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.874536][T25768] RIP: 0033:0x7fcf6af9e019 [ 550.874551][T25768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.874564][T25768] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 550.874579][T25768] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 550.874589][T25768] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 550.874598][T25768] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 550.874607][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.874616][T25768] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 550.874635][T25768] [ 550.874699][T25768] socket: no more sockets [ 551.220328][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9469'. [ 552.772418][T25820] zswap: compressor F not available [ 554.351191][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9511'. [ 555.248416][T25922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9525'. [ 555.674127][T25934] FAULT_INJECTION: forcing a failure. [ 555.674127][T25934] name failslab, interval 1, probability 0, space 0, times 0 [ 555.688697][T25934] CPU: 0 UID: 0 PID: 25934 Comm: syz.3.9530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.688724][T25934] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.688730][T25934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.688739][T25934] Call Trace: [ 555.688746][T25934] [ 555.688753][T25934] dump_stack_lvl+0x100/0x190 [ 555.688776][T25934] should_fail_ex.cold+0x5/0xa [ 555.688790][T25934] ? dev_map_alloc+0x29/0x4a0 [ 555.688832][T25934] should_failslab+0xc2/0x120 [ 555.688854][T25934] kmem_cache_alloc_noprof+0x91/0x6a0 [ 555.688879][T25934] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 555.688958][T25934] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 555.688979][T25934] idr_get_free+0x52e/0xa00 [ 555.689004][T25934] idr_alloc_u32+0x1ac/0x320 [ 555.689025][T25934] ? __pfx_idr_alloc_u32+0x10/0x10 [ 555.689047][T25934] ? lock_acquire+0x1b9/0x370 [ 555.689072][T25934] idr_alloc_cyclic+0x10b/0x230 [ 555.689092][T25934] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 555.689111][T25934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.689127][T25934] ? kfree+0x1e5/0x6c0 [ 555.689143][T25934] map_create+0x1476/0x3120 [ 555.689212][T25934] ? __pfx_map_create+0x10/0x10 [ 555.689242][T25934] ? __might_fault+0xc5/0x140 [ 555.689265][T25934] __sys_bpf+0x2a6e/0x4e80 [ 555.689286][T25934] ? __pfx___sys_bpf+0x10/0x10 [ 555.689300][T25934] ? find_held_lock+0x2b/0x80 [ 555.689317][T25934] ? futex_wake+0x4ea/0x5e0 [ 555.689340][T25934] ? futex_wait+0x11e/0x370 [ 555.689358][T25934] ? __pfx_futex_wait+0x10/0x10 [ 555.689380][T25934] ? rcu_read_lock_any_held+0x6a/0xa0 [ 555.689398][T25934] ? find_held_lock+0x2b/0x80 [ 555.689415][T25934] ? ksys_write+0x190/0x250 [ 555.689428][T25934] ? ksys_write+0x190/0x250 [ 555.689451][T25934] ? __x64_sys_futex+0x34f/0x4d0 [ 555.689466][T25934] ? __x64_sys_futex+0x358/0x4d0 [ 555.689483][T25934] ? xfd_validate_state+0x129/0x190 [ 555.689502][T25934] ? __x64_sys_bpf+0xce/0x140 [ 555.689517][T25934] __x64_sys_bpf+0xce/0x140 [ 555.689533][T25934] ? do_syscall_64+0x90/0x840 [ 555.689552][T25934] do_syscall_64+0x115/0x840 [ 555.689570][T25934] ? clear_bhb_loop+0x40/0x90 [ 555.689587][T25934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.689602][T25934] RIP: 0033:0x7f6f3e19e019 [ 555.689617][T25934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.689631][T25934] RSP: 002b:00007f6f3eff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.689646][T25934] RAX: ffffffffffffffda RBX: 00007f6f3e425fa0 RCX: 00007f6f3e19e019 [ 555.689659][T25934] RDX: 00000000000006f4 RSI: 00002000000001c0 RDI: 0000000000000000 [ 555.689668][T25934] RBP: 00007f6f3e23500c R08: 0000000000000000 R09: 0000000000000000 [ 555.689676][T25934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.689684][T25934] R13: 00007f6f3e426038 R14: 00007f6f3e425fa0 R15: 00007ffcad834e48 [ 555.689703][T25934] [ 556.374505][T25941] sock: sock_timestamping_bind_phc: sock not bind to device [ 557.094158][T25955] zswap: compressor not available [ 558.653663][T26009] zswap: compressor F not available [ 559.390118][T26046] sctp: [Deprecated]: syz.4.9575 (pid 26046) Use of int in maxseg socket option. [ 559.390118][T26046] Use struct sctp_assoc_value instead [ 560.682935][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.692503][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.750372][T26082] tunl0: entered allmulticast mode [ 561.445781][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9601'. [ 562.498673][T26134] nbd: socks must be embedded in a SOCK_ITEM attr [ 562.920779][T26159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9623'. [ 563.172708][T26170] bridge0: port 3(team0) entered blocking state [ 563.207690][T26170] bridge0: port 3(team0) entered disabled state [ 563.238918][T26170] team0: entered allmulticast mode [ 563.262326][T26170] team_slave_0: entered allmulticast mode [ 563.287226][T26170] team_slave_1: entered allmulticast mode [ 563.321895][T26170] team0: entered promiscuous mode [ 563.348128][T26170] team_slave_0: entered promiscuous mode [ 563.379179][T26170] team_slave_1: entered promiscuous mode [ 563.423790][T26170] bridge0: port 3(team0) entered blocking state [ 563.432468][T26170] bridge0: port 3(team0) entered forwarding state [ 563.878454][T26189] syz_tun: tun_chr_ioctl cmd 1074025680 [ 564.683211][T26218] FAULT_INJECTION: forcing a failure. [ 564.683211][T26218] name failslab, interval 1, probability 0, space 0, times 0 [ 564.736541][T26218] CPU: 0 UID: 0 PID: 26218 Comm: syz.2.9649 Tainted: G U L syzkaller #0 PREEMPT(full) [ 564.736570][T26218] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 564.736575][T26218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.736585][T26218] Call Trace: [ 564.736590][T26218] [ 564.736596][T26218] dump_stack_lvl+0x100/0x190 [ 564.736619][T26218] should_fail_ex.cold+0x5/0xa [ 564.736636][T26218] should_failslab+0xc2/0x120 [ 564.736658][T26218] __kmalloc_noprof+0xfc/0x820 [ 564.736676][T26218] ? trace_kmem_cache_alloc+0xdd/0x100 [ 564.736695][T26218] ? lsm_blob_alloc+0x68/0x90 [ 564.736713][T26218] lsm_blob_alloc+0x68/0x90 [ 564.736726][T26218] security_prepare_creds+0x2d/0x290 [ 564.736748][T26218] prepare_creds+0x5d6/0x950 [ 564.736771][T26218] __sys_setregid+0x109/0x910 [ 564.736787][T26218] do_syscall_64+0x115/0x840 [ 564.736806][T26218] ? clear_bhb_loop+0x40/0x90 [ 564.736824][T26218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.736839][T26218] RIP: 0033:0x7f4d7239e019 [ 564.736852][T26218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.736866][T26218] RSP: 002b:00007f4d73304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 564.736881][T26218] RAX: ffffffffffffffda RBX: 00007f4d72625fa0 RCX: 00007f4d7239e019 [ 564.736890][T26218] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 564.736899][T26218] RBP: 00007f4d7243500c R08: 0000000000000000 R09: 0000000000000000 [ 564.736907][T26218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.736916][T26218] R13: 00007f4d72626038 R14: 00007f4d72625fa0 R15: 00007ffd9e4d3788 [ 564.736934][T26218] [ 564.946685][T26223] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9652'. [ 565.076721][T26227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9654'. [ 565.461598][T26245] netlink: 'syz.0.9663': attribute type 2 has an invalid length. [ 565.518626][T15354] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 565.518760][T15354] Bluetooth: hci3: unexpected event for opcode 0x647c [ 566.401759][T26276] NFSD: Failed to start, no listeners configured. [ 566.822783][T26291] NFSD: Failed to start, no listeners configured. [ 568.354697][T26361] netlink: 'syz.3.9718': attribute type 2 has an invalid length. [ 568.958870][T26389] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 569.169758][T26401] bridge0: port 3(team0) entered blocking state [ 569.213618][T26401] bridge0: port 3(team0) entered disabled state [ 569.233575][T26397] NFSD: Failed to start, no listeners configured. [ 569.246885][T26401] team0: entered allmulticast mode [ 569.261149][T26401] team_slave_0: entered allmulticast mode [ 569.281019][T26401] team_slave_1: entered allmulticast mode [ 569.295358][T26404] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5659] was attempted by "\x09\x0aB졄ͣSLy$0׭1pv;b\x1b{_nDw+3UݩQۥ&S\x1bk7x;\x22.RI@<~ed~b{8>\x0dgIi}gQ֯y准K꯿8i}}Bf\x22\x5cH'*+7n~?qw/ > igbֳ\x07ѱ[4lve}ׅUڱSW{\x09+,s`*`Dמr&f P`Hb%[\x0dpxysmAE\x0cq@s-l2݌ʮ\x22\x22ה%)=0lߺ6K9LтDc\x0a \x5c\x09t[::DI+`\x07zb̃j]M;dA+:X&ܳgQtERګtԶ;} [ 569.307377][T26401] team0: entered promiscuous mode [ 569.585373][T26401] team_slave_0: entered promiscuous mode [ 569.608806][T26401] team_slave_1: entered promiscuous mode [ 569.631418][T26401] bridge0: port 3(team0) entered blocking state [ 569.637900][T26401] bridge0: port 3(team0) entered forwarding state [ 570.076267][T26435] random: crng reseeded on system resumption [ 570.888395][T26475] Device name cannot be null; rc = [-22] [ 572.271591][T26518] netlink: 350 bytes leftover after parsing attributes in process `syz.2.9791'. [ 572.801858][T26537] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5665] was attempted by "cU$/֒Ak_4^ xإcѢ\x5c*V19ӳ2su*\x0c0O^V3(2+\x0c*Ԓߛd anM{*rT\x0d1]eqO,4v\x0be%LHܪM6\x22\x1b;oot3a9[)zVP֪5`y{>p^J)!\x09;O_2*qUb\x0bi\x0a |uQŦmJ1Rb2~J,[b= &Uh\x1bWR)BE5p6y%z7YǛG~c۹14˙Y( G\x0aQ=aًY#HQ~}aI\x0a\x22?P3bv`PyXlNH+%GlK}wS-xfdh4tÅݕCQ`8R`k& \x22\x09=P(HӺe8DN.u*2+vŮ@+VlΟR/lY\x0b\x09ݬ3zptn]6!{v'c$΄NjI_!n!\x0c8_+?:m]\x0cȣ7&@j,ѫhdzǐ&od0{F RlG8\x1bԷ?21!%\x09.xxԊqܻ$f֛3 +\x09#dnx^Lʗ3e1ǐ\x0a^X7LL\x0drvlm&Ȝ\x0c9%@霠5N= [ 574.299382][T26587] dump_stack_lvl+0x100/0x190 [ 574.299405][T26587] should_fail_ex.cold+0x5/0xa [ 574.299423][T26587] should_failslab+0xc2/0x120 [ 574.299444][T26587] kmem_cache_alloc_noprof+0x91/0x6a0 [ 574.299464][T26587] ? anon_vma_clone+0x2ba/0xcd0 [ 574.299490][T26587] anon_vma_clone+0x2ba/0xcd0 [ 574.299517][T26587] __split_vma+0x51f/0xda0 [ 574.299534][T26587] ? __pfx___split_vma+0x10/0x10 [ 574.299547][T26587] ? vma_link+0x5ee/0x8d0 [ 574.299570][T26587] vms_gather_munmap_vmas+0x1d2/0x1720 [ 574.299590][T26587] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 574.299605][T26587] ? alloc_new_pud+0x217/0x320 [ 574.299620][T26587] ? get_old_pud+0xd8/0x360 [ 574.299635][T26587] ? move_page_tables+0x11c/0x4610 [ 574.299652][T26587] ? __pfx_copy_vma+0x10/0x10 [ 574.299673][T26587] do_vmi_align_munmap+0x287/0x5f0 [ 574.299692][T26587] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 574.299733][T26587] do_vmi_munmap+0x1f8/0x3e0 [ 574.299751][T26587] move_vma+0xe5b/0x1920 [ 574.299777][T26587] ? __pfx_move_vma+0x10/0x10 [ 574.299795][T26587] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 574.299824][T26587] ? vrm_set_new_addr+0x204/0x290 [ 574.299841][T26587] mremap_to+0x234/0x4c0 [ 574.299856][T26587] ? mas_walk+0x6ef/0x9b0 [ 574.299875][T26587] ? __pfx_mremap_to+0x10/0x10 [ 574.299889][T26587] ? check_prep_vma+0x912/0xe60 [ 574.299909][T26587] __do_sys_mremap+0x88c/0x1850 [ 574.299932][T26587] ? __pfx___do_sys_mremap+0x10/0x10 [ 574.299946][T26587] ? ksys_write+0x190/0x250 [ 574.299965][T26587] ? __pfx_do_futex+0x10/0x10 [ 574.299986][T26587] ? __x64_sys_futex+0x34f/0x4d0 [ 574.300013][T26587] do_syscall_64+0x115/0x840 [ 574.300031][T26587] ? clear_bhb_loop+0x40/0x90 [ 574.300048][T26587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.300063][T26587] RIP: 0033:0x7fcf6af9e019 [ 574.300078][T26587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.300093][T26587] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 574.300108][T26587] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 574.300117][T26587] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 574.300126][T26587] RBP: 00007fcf6b03500c R08: 0000000100000000 R09: 0000000000000000 [ 574.300135][T26587] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 574.300144][T26587] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 574.300164][T26587] [ 574.955206][T26592] NFSD: Failed to start, no listeners configured. [ 575.356818][T26624] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9839'. [ 576.962580][T26673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.986219][T26673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 577.179223][T26673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.202458][T26673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.229074][T26673] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 577.278052][T26673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.305470][T26673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 577.360557][T26673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.396059][T26673] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 577.627429][T26714] bridge0: port 3(veth0_to_bridge) entered blocking state [ 577.668466][T26714] bridge0: port 3(veth0_to_bridge) entered disabled state [ 577.694378][T26714] veth0_to_bridge: entered allmulticast mode [ 577.728413][T26714] veth0_to_bridge: entered promiscuous mode [ 577.765108][T26714] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.839873][T26714] bridge0: port 3(veth0_to_bridge) entered blocking state [ 577.847116][T26714] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 578.337933][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9896'. [ 578.385207][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9896'. [ 578.982292][T15354] Bluetooth: hci2: command 0x0406 tx timeout [ 579.220820][T15354] Bluetooth: hci3: command 0x0406 tx timeout [ 579.253848][T26792] futex_wake_op: syz.3.9915 tries to shift op by -2048; fix this program [ 579.303059][T15354] Bluetooth: hci1: command 0x0406 tx timeout [ 579.318505][T26792] futex_wake_op: syz.3.9915 tries to shift op by -2048; fix this program [ 579.379512][T15354] Bluetooth: hci0: command 0x2016 tx timeout [ 579.629876][T26804] NFSD: Failed to start, no listeners configured. [ 580.005580][T26826] sctp: [Deprecated]: syz.0.9931 (pid 26826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.005580][T26826] Use struct sctp_sack_info instead [ 580.184486][T26836] bridge0: port 4(veth0_to_bridge) entered blocking state [ 580.209349][T26836] bridge0: port 4(veth0_to_bridge) entered disabled state [ 580.234738][T26836] veth0_to_bridge: entered allmulticast mode [ 580.258013][T26836] veth0_to_bridge: entered promiscuous mode [ 580.280874][T26836] bridge0: port 4(veth0_to_bridge) entered blocking state [ 580.288166][T26836] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 580.432414][T26836] Process accounting resumed [ 580.817305][T26865] bridge0: port 5(batadv0) entered blocking state [ 580.853558][T26865] bridge0: port 5(batadv0) entered disabled state [ 580.889048][T26865] batadv0: entered allmulticast mode [ 580.938581][T26865] batadv0: entered promiscuous mode [ 580.958259][T26865] bridge0: port 5(batadv0) entered blocking state [ 580.964882][T26865] bridge0: port 5(batadv0) entered forwarding state [ 581.058884][T15354] Bluetooth: hci2: command 0x0406 tx timeout [ 581.290367][T15354] Bluetooth: hci3: command 0x0406 tx timeout [ 581.359359][T12212] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 581.369194][T12212] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 581.380262][T15354] Bluetooth: hci1: command 0x0406 tx timeout [ 581.450650][T15354] Bluetooth: hci0: command 0x2016 tx timeout [ 581.940408][T26910] random: crng reseeded on system resumption [ 582.161226][T26919] FAULT_INJECTION: forcing a failure. [ 582.161226][T26919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.225069][T26919] CPU: 0 UID: 0 PID: 26919 Comm: syz.4.9971 Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.225106][T26919] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.225112][T26919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.225121][T26919] Call Trace: [ 582.225127][T26919] [ 582.225133][T26919] dump_stack_lvl+0x100/0x190 [ 582.225155][T26919] should_fail_ex.cold+0x5/0xa [ 582.225169][T26919] ? prepare_alloc_pages+0x16d/0x5f0 [ 582.225193][T26919] should_fail_alloc_page+0xeb/0x140 [ 582.225215][T26919] prepare_alloc_pages+0x1f0/0x5f0 [ 582.225235][T26919] ? stack_trace_save+0x8e/0xc0 [ 582.225257][T26919] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 582.225276][T26919] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 582.225293][T26919] ? kasan_save_stack+0x3f/0x50 [ 582.225310][T26919] ? kasan_save_track+0x14/0x30 [ 582.225330][T26919] ? __lock_acquire+0x49f/0x1a40 [ 582.225352][T26919] ? do_syscall_64+0x115/0x840 [ 582.225372][T26919] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 582.225392][T26919] ? __lock_acquire+0x49f/0x1a40 [ 582.225445][T26919] ? __lock_acquire+0x49f/0x1a40 [ 582.225467][T26919] ? find_held_lock+0x2b/0x80 [ 582.225485][T26919] ? xa_load+0x149/0x2c0 [ 582.225506][T26919] ? xa_load+0x149/0x2c0 [ 582.225527][T26919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 582.225549][T26919] ? policy_nodemask+0xed/0x4f0 [ 582.225571][T26919] alloc_pages_mpol+0x1fb/0x540 [ 582.225592][T26919] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 582.225617][T26919] alloc_pages_noprof+0x1a/0x160 [ 582.225632][T26919] pte_alloc_one+0x1c/0x3d0 [ 582.225676][T26919] do_huge_pmd_anonymous_page+0x2bf/0x1530 [ 582.225696][T26919] ? _raw_spin_unlock+0x28/0x50 [ 582.225713][T26919] ? __pmd_alloc+0x3fb/0x950 [ 582.225735][T26919] __handle_mm_fault+0x239e/0x2a00 [ 582.225753][T26919] ? mt_find+0x45e/0x8e0 [ 582.225775][T26919] ? __pfx___handle_mm_fault+0x10/0x10 [ 582.225788][T26919] ? __pfx_mt_find+0x10/0x10 [ 582.225818][T26919] ? find_vma+0xbf/0x140 [ 582.225835][T26919] ? __pfx_find_vma+0x10/0x10 [ 582.225855][T26919] handle_mm_fault+0x37b/0xa30 [ 582.225873][T26919] do_user_addr_fault+0x74c/0x12f0 [ 582.225898][T26919] exc_page_fault+0x6f/0xd0 [ 582.225917][T26919] asm_exc_page_fault+0x26/0x30 [ 582.225931][T26919] RIP: 0010:strnlen_user+0x55/0x190 [ 582.225954][T26919] Code: fc 4d 85 ff 0f 8e 49 01 00 00 e8 d6 68 b9 fc 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 0f 01 cb 49 89 dd 49 83 e5 f8 <4d> 8b 75 00 e8 b2 68 b9 fc 48 8b 4c 24 10 83 e3 07 b8 01 00 00 00 [ 582.225968][T26919] RSP: 0018:ffffc90005277e60 EFLAGS: 00050246 [ 582.225981][T26919] RAX: 00007ffffffff000 RBX: 0000000000000000 RCX: ffffc9000f81c000 [ 582.225991][T26919] RDX: 0000000000080000 RSI: ffffffff8550482a RDI: ffff888029530000 [ 582.226000][T26919] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 582.226008][T26919] R10: 0000000000001000 R11: 0000000000000000 R12: fffffffffffffff2 [ 582.226023][T26919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001000 [ 582.226042][T26919] ? strnlen_user+0x3a/0x190 [ 582.226070][T26919] strndup_user+0x27/0xe0 [ 582.226099][T26919] __x64_sys_fsopen+0x9e/0x220 [ 582.226194][T26919] do_syscall_64+0x115/0x840 [ 582.226213][T26919] ? clear_bhb_loop+0x40/0x90 [ 582.226230][T26919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.226245][T26919] RIP: 0033:0x7fcf6af9e019 [ 582.226258][T26919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.226272][T26919] RSP: 002b:00007fcf6bdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 582.226286][T26919] RAX: ffffffffffffffda RBX: 00007fcf6b225fa0 RCX: 00007fcf6af9e019 [ 582.226296][T26919] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 582.226304][T26919] RBP: 00007fcf6b03500c R08: 0000000000000000 R09: 0000000000000000 [ 582.226313][T26919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.226321][T26919] R13: 00007fcf6b226038 R14: 00007fcf6b225fa0 R15: 00007ffdc8422d88 [ 582.226341][T26919] [ 582.955374][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9985'. [ 583.184076][T15354] Bluetooth: hci2: command 0x0406 tx timeout [ 583.490213][T26968] netlink: 346 bytes leftover after parsing attributes in process `syz.3.9995'. [ 583.693778][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9997'. [ 584.409458][T27002] zswap: compressor not available [ 584.586422][ T29] audit: type=1800 audit(4294967388.272:39): pid=27017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10014" name=04 dev="tmpfs" ino=12840 res=0 errno=0 [ 584.757039][T27025] dlm: non-version read from control device 2147479540 [ 585.078247][T27038] FAULT_INJECTION: forcing a failure. [ 585.078247][T27038] name failslab, interval 1, probability 0, space 0, times 0 [ 585.149978][T27038] CPU: 0 UID: 0 PID: 27038 Comm: syz.3.10024 Tainted: G U L syzkaller #0 PREEMPT(full) [ 585.150007][T27038] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 585.150013][T27038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.150022][T27038] Call Trace: [ 585.150035][T27038] [ 585.150041][T27038] dump_stack_lvl+0x100/0x190 [ 585.150063][T27038] should_fail_ex.cold+0x5/0xa [ 585.150081][T27038] should_failslab+0xc2/0x120 [ 585.150102][T27038] kmem_cache_alloc_noprof+0x91/0x6a0 [ 585.150120][T27038] ? __pfx_map_id_range_down+0x10/0x10 [ 585.150140][T27038] ? security_inode_alloc+0x3b/0x2c0 [ 585.150161][T27038] security_inode_alloc+0x3b/0x2c0 [ 585.150179][T27038] inode_init_always_gfp+0xc77/0xfb0 [ 585.150196][T27038] alloc_inode+0x8e/0x250 [ 585.150214][T27038] sock_alloc+0x44/0x280 [ 585.150237][T27038] ? security_socket_create+0x7f/0x250 [ 585.150254][T27038] __sock_create+0xc2/0x860 [ 585.150273][T27038] __sys_socket+0x14d/0x260 [ 585.150288][T27038] ? exc_page_fault+0x6f/0xd0 [ 585.150308][T27038] ? __pfx___sys_socket+0x10/0x10 [ 585.150329][T27038] __x64_sys_socket+0x72/0xb0 [ 585.150344][T27038] ? lockdep_hardirqs_on+0x78/0x100 [ 585.150363][T27038] do_syscall_64+0x115/0x840 [ 585.150382][T27038] ? clear_bhb_loop+0x40/0x90 [ 585.150399][T27038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.150413][T27038] RIP: 0033:0x7f6f3e19f887 [ 585.150426][T27038] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.150440][T27038] RSP: 002b:00007f6f3eff5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 585.150455][T27038] RAX: ffffffffffffffda RBX: 00007f6f3e425fa0 RCX: 00007f6f3e19f887 [ 585.150464][T27038] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 585.150473][T27038] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 585.150484][T27038] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 585.150493][T27038] R13: 00007f6f3e426038 R14: 00007f6f3e425fa0 R15: 00007ffcad834e48 [ 585.150512][T27038] [ 585.156160][T27038] socket: no more sockets [ 585.880456][T27070] bridge0: port 3(syz_tun) entered blocking state [ 585.919273][T27070] bridge0: port 3(syz_tun) entered disabled state [ 585.939696][T27070] syz_tun: entered allmulticast mode [ 585.959837][T27070] syz_tun: entered promiscuous mode [ 585.985906][T27070] bridge0: port 3(syz_tun) entered blocking state [ 585.992506][T27070] bridge0: port 3(syz_tun) entered forwarding state [ 586.500990][T27093] netlink: 13 bytes leftover after parsing attributes in process `syz.2.10049'. [ 601.433533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.447061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.460704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.474458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.488201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.502051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.515744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.529483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.543333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 601.557035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.408914][ C0] net_ratelimit: 3239 callbacks suppressed [ 606.408931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.428574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.442215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.455927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.469792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.483500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.497308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.511956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.525779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 606.539424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.393549][ C0] net_ratelimit: 3230 callbacks suppressed [ 611.393566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.413152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.426962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.440669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.454315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.468054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.481984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.495823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.509503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 611.524388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 616.377395][ C0] net_ratelimit: 6498 callbacks suppressed [ 616.377412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.395685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.409087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 616.421849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.434217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.447646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 616.461379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.473812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.487196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 616.499867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.361289][ C0] net_ratelimit: 6532 callbacks suppressed [ 621.361305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 621.379971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.392478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.405925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 621.418681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.431151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.444549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 621.457274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.469662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.483071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 626.346193][ C0] net_ratelimit: 6536 callbacks suppressed [ 626.346210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 626.364809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.377242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.390658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 626.403361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.416325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.429692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 626.442624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.455116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.468580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 631.329397][ C0] net_ratelimit: 6645 callbacks suppressed [ 631.329414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.347844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.361451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 631.374295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.386745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.400242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 631.413044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.425632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.439157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 631.451970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.314140][ C0] net_ratelimit: 6550 callbacks suppressed [ 636.314157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 636.332738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.345162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.358715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 636.371574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.384033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.397466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 636.410578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.423096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.436589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 641.298049][ C0] net_ratelimit: 6524 callbacks suppressed [ 641.298068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 641.316690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.329189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.342712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 641.355608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.368052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.381550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 641.394384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.406799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.420215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 646.281882][ C0] net_ratelimit: 8901 callbacks suppressed [ 646.281898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.301089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 646.313858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.326073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.338296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.350793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.364251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 646.376993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.389551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.401859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.265597][ C0] net_ratelimit: 9339 callbacks suppressed [ 651.265614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.283854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.297570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 651.310305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.322607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.334919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.347457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.360843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 651.373645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.385922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.080871][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 656.250066][ C0] net_ratelimit: 7457 callbacks suppressed [ 656.250084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 656.268679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.281839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.294202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.306707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.320199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 656.332958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.346115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.358413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.371041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.234722][ C0] net_ratelimit: 6970 callbacks suppressed [ 661.234738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 661.253259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.266537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.278868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.291309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.304794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 661.317580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.330738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.343009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.355451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.218375][ C0] net_ratelimit: 6970 callbacks suppressed [ 666.218392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 666.236923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.250103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.262438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.274886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.288386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 666.301279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.314538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.326904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.339323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.202904][ C0] net_ratelimit: 7080 callbacks suppressed [ 671.202921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 671.221484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.234631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.246885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.259262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.272552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 671.285338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.298628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.310910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.323307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.186074][ C0] net_ratelimit: 7095 callbacks suppressed [ 676.186090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 676.204637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.217734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.229987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.242389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.255887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 676.268712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.281823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.294130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.306530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.170685][ C0] net_ratelimit: 6598 callbacks suppressed [ 681.170702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 681.189293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.203204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.215500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.227817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.240287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.253833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 681.266628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.280621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.292909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.154228][ C0] net_ratelimit: 6437 callbacks suppressed [ 686.154248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.172332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.184770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.198080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 686.210791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.225257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.237573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.249802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.262265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.275604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 691.138441][ C0] net_ratelimit: 6378 callbacks suppressed [ 691.138458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.158395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.170652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.182902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.195388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.209380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 691.222121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.236026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.247924][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 691.247947][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16207/1:b..l P27105/1:b..l [ 691.248648][ C0] rcu: (detected by 0, t=10502 jiffies, g=174449, q=898 ncpus=1) [ 691.248662][ C0] task:syz.3.10055 state:R running task stack:27256 pid:27105 tgid:27104 ppid:5659 task_flags:0x40054c flags:0x00080000 [ 691.248718][ C0] Call Trace: [ 691.248723][ C0] [ 691.248732][ C0] __schedule+0x125c/0x6730 [ 691.248761][ C0] ? lock_acquire+0x1b9/0x370 [ 691.248787][ C0] ? find_held_lock+0x2b/0x80 [ 691.248807][ C0] ? __pfx___schedule+0x10/0x10 [ 691.248826][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 691.248850][ C0] preempt_schedule_common+0x42/0xc0 [ 691.248869][ C0] preempt_schedule_thunk+0x16/0x40 [ 691.248894][ C0] _raw_spin_unlock+0x3e/0x50 [ 691.248910][ C0] __zap_vma_range+0x16f7/0x4a30 [ 691.248947][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 691.248970][ C0] ? find_held_lock+0x2b/0x80 [ 691.248991][ C0] unmap_vmas+0x299/0x5f0 [ 691.249013][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 691.249044][ C0] exit_mmap+0x1ef/0xa00 [ 691.249066][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 691.249086][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.249106][ C0] ? uprobe_clear_state+0x49/0x260 [ 691.249121][ C0] ? find_held_lock+0x2b/0x80 [ 691.249137][ C0] ? uprobe_clear_state+0x5f/0x260 [ 691.249155][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 691.249182][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 691.249205][ C0] __mmput+0x12a/0x410 [ 691.249222][ C0] mmput+0x67/0x80 [ 691.249237][ C0] do_exit+0x8b1/0x2ae0 [ 691.249259][ C0] ? __pfx_do_exit+0x10/0x10 [ 691.249277][ C0] ? do_raw_spin_lock+0x128/0x260 [ 691.249293][ C0] ? find_held_lock+0x2b/0x80 [ 691.249310][ C0] ? get_signal+0x7e0/0x21e0 [ 691.249334][ C0] do_group_exit+0xd5/0x2a0 [ 691.249355][ C0] get_signal+0x1ec7/0x21e0 [ 691.249370][ C0] ? __pfx_futex_wake+0x10/0x10 [ 691.249395][ C0] ? __pfx_get_signal+0x10/0x10 [ 691.249412][ C0] ? do_futex+0x190/0x440 [ 691.249429][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 691.249445][ C0] ? do_mseal+0x37a/0x4e0 [ 691.249462][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 691.249496][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 691.249511][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.249529][ C0] do_syscall_64+0x652/0x840 [ 691.249547][ C0] ? clear_bhb_loop+0x40/0x90 [ 691.249566][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.249582][ C0] RIP: 0033:0x7f6f3e19e019 [ 691.249595][ C0] RSP: 002b:00007f6f3eff70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 691.249609][ C0] RAX: 0000000000000001 RBX: 00007f6f3e425fa8 RCX: 00007f6f3e19e019 [ 691.249618][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6f3e425fac [ 691.249628][ C0] RBP: 00007f6f3e425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 691.249636][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.249645][ C0] R13: 00007f6f3e426038 R14: 00007ffcad834d60 R15: 00007ffcad834e48 [ 691.249664][ C0] [ 691.249670][ C0] task:syz-executor state:R running task stack:23224 pid:16207 tgid:16207 ppid:16194 task_flags:0x400140 flags:0x00080000 [ 691.249714][ C0] Call Trace: [ 691.249719][ C0] [ 691.249726][ C0] __schedule+0x125c/0x6730 [ 691.249747][ C0] ? stack_trace_save+0x8e/0xc0 [ 691.249771][ C0] ? __pfx___schedule+0x10/0x10 [ 691.249789][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.249807][ C0] preempt_schedule_irq+0x50/0x90 [ 691.249825][ C0] irqentry_exit+0x205/0xa00 [ 691.249846][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.249862][ C0] RIP: 0010:lock_acquire+0x147/0x370 [ 691.249884][ C0] Code: 0f 0b 90 e9 1d ff ff ff 48 8b 74 24 68 48 89 ef e8 3e bf 93 00 8b 0d 4c 85 3d 0f 85 c9 0f 84 bd 00 00 00 65 8b 05 89 f8 7e 12 <85> c0 0f 85 ae 00 00 00 65 48 8b 05 c1 b1 7e 12 8b 90 9c 0b 00 00 [ 691.249898][ C0] RSP: 0018:ffffc90005c1f980 EFLAGS: 00000202 [ 691.249909][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 691.249918][ C0] RDX: 0000000000000000 RSI: ffffffff8281bb71 RDI: fffffbfff1d7d000 [ 691.249927][ C0] RBP: ffffffff8ebe8000 R08: 0000000000000000 R09: 0000000000000000 [ 691.249936][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000002 [ 691.249944][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.249958][ C0] ? get_mem_cgroup_from_objcg+0x31/0x1f0 [ 691.249983][ C0] get_mem_cgroup_from_objcg+0x31/0x1f0 [ 691.249999][ C0] ? get_mem_cgroup_from_objcg+0x1d/0x1f0 [ 691.250017][ C0] obj_cgroup_charge_pages+0x12/0x1d0 [ 691.250039][ C0] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 691.250063][ C0] memcg_charge_kernel_stack+0xc1/0x1f0 [ 691.250079][ C0] ? memcpy_and_pad+0x5a/0x90 [ 691.250170][ C0] copy_process+0x3f68/0x8030 [ 691.250189][ C0] ? do_wp_page+0x173c/0x4350 [ 691.250215][ C0] ? __pfx_copy_process+0x10/0x10 [ 691.250231][ C0] ? do_raw_spin_lock+0x128/0x260 [ 691.250254][ C0] kernel_clone+0x176/0x9d0 [ 691.250272][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 691.250294][ C0] ? find_held_lock+0x2b/0x80 [ 691.250310][ C0] ? __might_fault+0xc5/0x140 [ 691.250334][ C0] __do_sys_clone+0xd9/0x120 [ 691.250351][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 691.250382][ C0] do_syscall_64+0x115/0x840 [ 691.250399][ C0] ? clear_bhb_loop+0x40/0x90 [ 691.250416][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.250430][ C0] RIP: 0033:0x7fcf6afc6a92 [ 691.250441][ C0] RSP: 002b:00007ffdc8422fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 691.250455][ C0] RAX: ffffffffffffffda RBX: 00007ffdc8422fa0 RCX: 00007fcf6afc6a92 [ 691.250464][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 691.250473][ C0] RBP: 00007ffdc842312c R08: 0000000000000000 R09: 0000000000000001 [ 691.250482][ C0] R10: 00005555665da7d0 R11: 0000000000000246 R12: 0000000000000001 [ 691.250491][ C0] R13: 00000000000927c0 R14: 000000000008fd4b R15: 00007ffdc8423180 [ 691.250509][ C0] [ 691.250518][ C0] rcu: rcu_preempt kthread starved for 233 jiffies! g174449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 691.250534][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 691.250541][ C0] rcu: RCU grace-period kthread stack dump: [ 691.250546][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 691.250593][ C0] Call Trace: [ 691.250597][ C0] [ 691.250604][ C0] __schedule+0x125c/0x6730 [ 691.250631][ C0] ? __pfx___schedule+0x10/0x10 [ 691.250646][ C0] ? find_held_lock+0x2b/0x80 [ 691.250663][ C0] ? schedule+0x225/0x2c0 [ 691.250681][ C0] schedule+0xdd/0x2c0 [ 691.250697][ C0] schedule_timeout+0x127/0x280 [ 691.250711][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 691.250726][ C0] ? __pfx_process_timeout+0x10/0x10 [ 691.250747][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.250764][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 691.250787][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 691.250808][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 691.250831][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 691.250852][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 691.250871][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.250887][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 691.250906][ C0] rcu_gp_kthread+0x179/0x230 [ 691.250926][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 691.250946][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 691.250964][ C0] ? __kthread_parkme+0x18c/0x230 [ 691.250982][ C0] ? kthread+0x13a/0x450 [ 691.250998][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 691.251018][ C0] kthread+0x370/0x450 [ 691.251035][ C0] ? __pfx_kthread+0x10/0x10 [ 691.251054][ C0] ret_from_fork+0x72b/0xd50 [ 691.251072][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 691.251090][ C0] ? __switch_to+0x800/0x10f0 [ 691.251109][ C0] ? __switch_to_asm+0x39/0x70 [ 691.251127][ C0] ? __pfx_kthread+0x10/0x10 [ 691.251146][ C0] ret_from_fork_asm+0x1a/0x30 [ 691.251172][ C0] [ 691.251177][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 691.251192][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.251213][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.251219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 691.251229][ C0] Workqueue: bat_events batadv_tt_purge [ 691.251279][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 691.251297][ C0] Code: 00 e8 71 0a 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 0f b7 21 00 48 85 ed 0f 85 d7 01 00 00 e8 61 bc 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 691.251310][ C0] RSP: 0018:ffffc90000007008 EFLAGS: 00000246 [ 691.251321][ C0] RAX: ffffffff8f9af8d8 RBX: ffffffff8f9af880 RCX: ffffffff81e7f491 [ 691.251336][ C0] RDX: ffff8880335abe00 RSI: ffffffff81e7f49f RDI: ffff8880335abe00 [ 691.251345][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 691.251353][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000012aa [ 691.251361][ C0] R13: ffffffff8f9af8d8 R14: ffffc90000007088 R15: dffffc0000000000 [ 691.251371][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 691.251384][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.251393][ C0] CR2: 00007f4f1ce25fac CR3: 000000007fa30000 CR4: 00000000003526f0 [ 691.251402][ C0] Call Trace: [ 691.251407][ C0] [ 691.251416][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 691.251432][ C0] ? __lock_acquire+0x49f/0x1a40 [ 691.251457][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 691.251477][ C0] console_unlock+0x103/0x260 [ 691.251494][ C0] ? __pfx_console_unlock+0x10/0x10 [ 691.251514][ C0] ? _printk+0xcf/0x110 [ 691.251529][ C0] vprintk_emit+0x407/0x6b0 [ 691.251547][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 691.251568][ C0] _printk+0xcf/0x110 [ 691.251581][ C0] ? __pfx__printk+0x10/0x10 [ 691.251593][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.251613][ C0] ? __pfx____ratelimit+0x10/0x10 [ 691.251634][ C0] br_fdb_update.cold+0x72/0x7e [ 691.251649][ C0] ? br_allowed_ingress+0xdd/0x1440 [ 691.251702][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 691.251747][ C0] br_handle_frame_finish+0xeba/0x1fa0 [ 691.251793][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.251816][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 691.251834][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 691.251880][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 691.251897][ C0] ? nf_hook_slow+0x167/0x220 [ 691.251949][ C0] br_nf_hook_thresh+0x30d/0x420 [ 691.251985][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.252008][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 691.252024][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.252045][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 691.252103][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.252123][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.252144][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 691.252158][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.252183][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 691.252198][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 691.252212][ C0] ? lock_acquire+0x1b9/0x370 [ 691.252234][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 691.252249][ C0] ? net_generic+0xea/0x2a0 [ 691.252293][ C0] br_nf_pre_routing+0x90f/0x1560 [ 691.252310][ C0] br_handle_frame+0xce9/0x1540 [ 691.252338][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 691.252361][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.252385][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 691.252406][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 691.252479][ C0] ? kmem_cache_free+0x127/0x6b0 [ 691.252494][ C0] ? skb_release_data+0x6ca/0x8e0 [ 691.252514][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 691.252533][ C0] ? kfree_skbmem+0x19f/0x210 [ 691.252548][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 691.252569][ C0] ? ip6_mc_input+0x51a/0xf50 [ 691.252614][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 691.252635][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 691.252658][ C0] ? __lock_acquire+0x49f/0x1a40 [ 691.252681][ C0] ? process_backlog+0x32a/0x1580 [ 691.252696][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 691.252714][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 691.252732][ C0] ? lock_acquire+0x1b9/0x370 [ 691.252753][ C0] ? process_backlog+0x32a/0x1580 [ 691.252771][ C0] ? process_backlog+0x32a/0x1580 [ 691.252786][ C0] __netif_receive_skb+0x1f/0x120 [ 691.252803][ C0] process_backlog+0x37a/0x1580 [ 691.252824][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 691.252842][ C0] net_rx_action+0xa40/0xf20 [ 691.252864][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 691.252882][ C0] ? mark_held_locks+0x40/0x70 [ 691.252902][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 691.252921][ C0] ? tmigr_handle_remote+0x132/0x380 [ 691.252945][ C0] ? run_timer_base+0x121/0x190 [ 691.252965][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 691.252988][ C0] handle_softirqs+0x1ea/0x9b0 [ 691.253004][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 691.253019][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 691.253033][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 691.253053][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 691.253067][ C0] do_softirq+0xac/0xe0 [ 691.253081][ C0] [ 691.253086][ C0] [ 691.253091][ C0] __local_bh_enable_ip+0xf8/0x120 [ 691.253107][ C0] batadv_tt_purge+0x25d/0xbd0 [ 691.253125][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 691.253143][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.253162][ C0] process_one_work+0xa23/0x1940 [ 691.253188][ C0] ? __pfx_process_one_work+0x10/0x10 [ 691.253213][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 691.253228][ C0] rescuer_thread+0x905/0x14a0 [ 691.253253][ C0] ? rescuer_thread+0x240/0x14a0 [ 691.253272][ C0] ? rescuer_thread+0x118/0x14a0 [ 691.253291][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 691.253310][ C0] ? __kthread_parkme+0x18c/0x230 [ 691.253332][ C0] ? kthread+0x13a/0x450 [ 691.253349][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 691.253367][ C0] kthread+0x370/0x450 [ 691.253384][ C0] ? __pfx_kthread+0x10/0x10 [ 691.253403][ C0] ret_from_fork+0x72b/0xd50 [ 691.253421][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 691.253438][ C0] ? __switch_to+0x800/0x10f0 [ 691.253457][ C0] ? __switch_to_asm+0x39/0x70 [ 691.253475][ C0] ? __pfx_kthread+0x10/0x10 [ 691.253494][ C0] ret_from_fork_asm+0x1a/0x30 [ 691.253520][ C0] [ 692.664696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.677004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.123160][ C0] net_ratelimit: 4609 callbacks suppressed [ 696.123177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 696.141679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.155652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.167913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.180215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.192633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.206055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 696.218741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.232690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.244941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.106935][ C0] net_ratelimit: 6512 callbacks suppressed [ 701.106952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 701.125532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.139691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.151969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.164387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.176807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.190215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:01:52:46:cb, vlan:0) [ 701.203032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.217031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.229421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)