last executing test programs: 7m4.961723344s ago: executing program 0 (id=3308): r0 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/cec/cec6/status\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x9, 0x1800) 7m4.80551188s ago: executing program 0 (id=3302): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/249, 0xf9) 7m4.63304617s ago: executing program 0 (id=3307): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00') setns(r0, 0x0) 7m4.49227021s ago: executing program 0 (id=3310): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="5a854caf7917", 0x6) 7m4.388612516s ago: executing program 0 (id=3312): mlockall$auto(0x3) madvise$auto(0x110c230000, 0x1fffffe, 0x9) 7m1.412031374s ago: executing program 0 (id=3346): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/manager\x00', 0x1, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000001240)="5c43ae6f8d01055bbf1670d4e10df2517b5ecae0b4dfb85177d6dcd593212ce47ffd15d0e20bc3dd342de91a1d183f342429ed98c02e1416fa1b2b42fbb64283a67795bc02a8bce4dff3c9b50109bac38ffd430e3afa1c920dd37e1b1c1f733a197f0a", 0x63) 7m1.044740427s ago: executing program 32 (id=3346): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/manager\x00', 0x1, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000001240)="5c43ae6f8d01055bbf1670d4e10df2517b5ecae0b4dfb85177d6dcd593212ce47ffd15d0e20bc3dd342de91a1d183f342429ed98c02e1416fa1b2b42fbb64283a67795bc02a8bce4dff3c9b50109bac38ffd430e3afa1c920dd37e1b1c1f733a197f0a", 0x63) 4m26.600482386s ago: executing program 3 (id=6382): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd3/hctx0/flags\x00', 0x48a00, 0x0) read$auto(r0, &(0x7f00000000c0)='\x00', 0x4) 4m26.430926979s ago: executing program 3 (id=6386): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) 4m26.189743674s ago: executing program 3 (id=6390): mprotect$auto(0x200000000000, 0x806124, 0x8) sigaltstack$auto(&(0x7f0000000040)={0x0, 0xffffffff, 0x7}, 0x0) 4m26.000563401s ago: executing program 3 (id=6394): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) finit_module$auto(r0, 0x0, 0x1) 4m25.777923066s ago: executing program 3 (id=6397): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m25.293894367s ago: executing program 3 (id=6404): r0 = socket(0x2, 0x2, 0x1) getsockopt$auto(r0, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', &(0x7f0000000080)=0x9) 4m24.830848558s ago: executing program 33 (id=6404): r0 = socket(0x2, 0x2, 0x1) getsockopt$auto(r0, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', &(0x7f0000000080)=0x9) 2.510496607s ago: executing program 1 (id=9988): mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 2.137825252s ago: executing program 1 (id=9994): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) setreuid$auto(0x3, 0x7) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') 1.744905935s ago: executing program 1 (id=10000): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x5) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 1.684461461s ago: executing program 2 (id=10002): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd70006b68e11636178b6608000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) 1.445029567s ago: executing program 2 (id=10005): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "00000082f4fffffffb487f1000"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.386959873s ago: executing program 1 (id=10007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25100000000c00018008000100", @ANYRES32=r2, @ANYBLOB="08001100"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.224753897s ago: executing program 5 (id=10009): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) 1.044115137s ago: executing program 4 (id=10011): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000034, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.013508044s ago: executing program 5 (id=10012): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x3, 0xffffffffffffffff, [], {0x10, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x10}}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x9, 0x10001, 0x10001, 0x400000000003, 0x3, 0x1, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 1.004319847s ago: executing program 1 (id=10013): fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) 853.548893ms ago: executing program 4 (id=10014): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x0) 839.953998ms ago: executing program 2 (id=10015): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) 743.016335ms ago: executing program 5 (id=10016): r0 = socket(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r0}]}, 0x1c}}, 0xd4) 658.801972ms ago: executing program 4 (id=10017): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf034991380008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 626.366791ms ago: executing program 2 (id=10018): socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) 526.907019ms ago: executing program 5 (id=10019): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r0) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcf70}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x140080e4) 435.518672ms ago: executing program 2 (id=10020): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r0, 0x29, 0x6, 0x0, 0x0) 417.306757ms ago: executing program 4 (id=10021): mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0xd, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x14, 0x0, 0x0) 349.399835ms ago: executing program 5 (id=10022): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = pipe2$auto(0x0, 0x80) ioctl$auto(r0, 0x5761, r0) 233.561667ms ago: executing program 4 (id=10023): socket(0x11, 0xa, 0x300) r0 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1040}, 0x5}, 0x2, 0x100) 150.134871ms ago: executing program 5 (id=10024): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 106.40384ms ago: executing program 1 (id=10025): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x0, 0x3, 0x10000000000003, 0x3da1, 0x7f, 0x8, 0x10000, 0x140000000000, 0x0, 0x7fffffff, 0x6, 0x20001}, 0x171) 48.51124ms ago: executing program 4 (id=10026): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x101, 0x5, 0x0, 0x0, 0x0, 0x200000fa9b, 0xfffffffffffffff9, 0x7ffffffffffffffe, 0x4, 0x3, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 0s ago: executing program 2 (id=10027): mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4a, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x75, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 492.833494][T21203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 492.833501][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.833511][T21203] Call Trace: [ 492.833518][T21203] [ 492.833525][T21203] dump_stack_lvl+0x100/0x190 [ 492.833552][T21203] should_fail_ex.cold+0x5/0xa [ 492.833570][T21203] ? prepare_alloc_pages+0x16d/0x5f0 [ 492.833599][T21203] should_fail_alloc_page+0xeb/0x140 [ 492.833626][T21203] prepare_alloc_pages+0x1f0/0x5f0 [ 492.833653][T21203] ? unwind_get_return_address+0x59/0xa0 [ 492.833718][T21203] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 492.833747][T21203] ? stack_trace_save+0x8e/0xc0 [ 492.833775][T21203] ? __pfx_stack_trace_save+0x10/0x10 [ 492.833801][T21203] ? stack_depot_save_flags+0x27/0x9d0 [ 492.833895][T21203] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.833918][T21203] ? kasan_save_stack+0x30/0x50 [ 492.833940][T21203] ? kasan_save_track+0x14/0x30 [ 492.833963][T21203] ? __kasan_slab_alloc+0x89/0x90 [ 492.833986][T21203] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 492.834008][T21203] ? __pmd_alloc+0xbf/0x950 [ 492.834033][T21203] ? move_page_tables+0x2f7c/0x4610 [ 492.834052][T21203] ? copy_vma_and_data+0x25c/0x7c0 [ 492.834070][T21203] ? move_vma+0x574/0x1920 [ 492.834088][T21203] ? mremap_to+0x234/0x4c0 [ 492.834106][T21203] ? __do_sys_mremap+0x88c/0x1850 [ 492.834125][T21203] ? do_syscall_64+0x115/0x840 [ 492.834148][T21203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.834180][T21203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.834217][T21203] ? policy_nodemask+0xed/0x4f0 [ 492.834245][T21203] alloc_pages_mpol+0x1fb/0x540 [ 492.834272][T21203] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 492.834310][T21203] alloc_pages_noprof+0x1a/0x160 [ 492.834328][T21203] pte_alloc_one+0x1c/0x3d0 [ 492.834356][T21203] __pte_alloc+0x6d/0x3e0 [ 492.834379][T21203] ? __pfx___pte_alloc+0x10/0x10 [ 492.834403][T21203] ? _raw_spin_unlock+0x28/0x50 [ 492.834423][T21203] ? __pmd_alloc+0x3fb/0x950 [ 492.834452][T21203] move_page_tables+0x2ec4/0x4610 [ 492.834474][T21203] ? __pfx_copy_vma+0x10/0x10 [ 492.834502][T21203] ? __pfx_move_page_tables+0x10/0x10 [ 492.834539][T21203] copy_vma_and_data+0x25c/0x7c0 [ 492.834562][T21203] ? __pfx_copy_vma_and_data+0x10/0x10 [ 492.834592][T21203] ? __vma_start_write+0x17f/0x280 [ 492.834618][T21203] ? __pfx___vma_start_write+0x10/0x10 [ 492.834653][T21203] move_vma+0x574/0x1920 [ 492.834676][T21203] ? __pfx_move_vma+0x10/0x10 [ 492.834698][T21203] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 492.834749][T21203] ? cap_mmap_addr+0x4b/0x120 [ 492.834806][T21203] ? bpf_lsm_mmap_addr+0x9/0x30 [ 492.834828][T21203] ? security_mmap_addr+0x71/0x1e0 [ 492.834879][T21203] ? __get_unmapped_area+0x255/0x3e0 [ 492.834908][T21203] ? vrm_set_new_addr+0x204/0x290 [ 492.834929][T21203] mremap_to+0x234/0x4c0 [ 492.834947][T21203] ? mas_walk+0x6ef/0x9b0 [ 492.835002][T21203] ? __pfx_mremap_to+0x10/0x10 [ 492.835029][T21203] __do_sys_mremap+0x88c/0x1850 [ 492.835058][T21203] ? __pfx___do_sys_mremap+0x10/0x10 [ 492.835078][T21203] ? ksys_write+0x190/0x250 [ 492.835101][T21203] ? __pfx_do_futex+0x10/0x10 [ 492.835129][T21203] ? __x64_sys_futex+0x34f/0x4d0 [ 492.835163][T21203] do_syscall_64+0x115/0x840 [ 492.835186][T21203] ? clear_bhb_loop+0x40/0x90 [ 492.835207][T21203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.835226][T21203] RIP: 0033:0x7fd53fb9e0d9 [ 492.835242][T21203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.835260][T21203] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 492.835279][T21203] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 492.835290][T21203] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 492.835301][T21203] RBP: 00007fd53fc35024 R08: 0000000100000000 R09: 0000000000000000 [ 492.835312][T21203] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 492.835322][T21203] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 492.835346][T21203] [ 494.111387][T21237] netlink: Failed to add  helper -22 [ 494.145003][T21242] netlink: 'syz.4.7297': attribute type 2 has an invalid length. [ 494.341998][T21245] FAULT_INJECTION: forcing a failure. [ 494.341998][T21245] name failslab, interval 1, probability 0, space 0, times 0 [ 494.406427][T21245] CPU: 0 UID: 0 PID: 21245 Comm: syz.2.7299 Tainted: G U L syzkaller #0 PREEMPT(full) [ 494.406461][T21245] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 494.406469][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.406480][T21245] Call Trace: [ 494.406486][T21245] [ 494.406493][T21245] dump_stack_lvl+0x100/0x190 [ 494.406519][T21245] should_fail_ex.cold+0x5/0xa [ 494.406539][T21245] should_failslab+0xc2/0x120 [ 494.406564][T21245] kmem_cache_alloc_noprof+0x91/0x6a0 [ 494.406587][T21245] ? __pfx_map_id_range_down+0x10/0x10 [ 494.406614][T21245] ? security_inode_alloc+0x3b/0x2c0 [ 494.406640][T21245] security_inode_alloc+0x3b/0x2c0 [ 494.406663][T21245] inode_init_always_gfp+0xc77/0xfb0 [ 494.406685][T21245] alloc_inode+0x8e/0x250 [ 494.406708][T21245] sock_alloc+0x44/0x280 [ 494.406836][T21245] ? security_socket_create+0x7f/0x250 [ 494.406859][T21245] __sock_create+0xc2/0x860 [ 494.406879][T21245] ? lockdep_init_map_type+0x5c/0x250 [ 494.406910][T21245] smc_create+0x163/0x290 [ 494.406968][T21245] __sock_create+0x339/0x860 [ 494.406992][T21245] __sys_socket+0x14d/0x260 [ 494.407014][T21245] ? __pfx___sys_socket+0x10/0x10 [ 494.407041][T21245] __x64_sys_socket+0x72/0xb0 [ 494.407062][T21245] ? lockdep_hardirqs_on+0x78/0x100 [ 494.407093][T21245] do_syscall_64+0x115/0x840 [ 494.407116][T21245] ? clear_bhb_loop+0x40/0x90 [ 494.407138][T21245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.407157][T21245] RIP: 0033:0x7fd53fb9e0d9 [ 494.407174][T21245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.407191][T21245] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 494.407210][T21245] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 494.407222][T21245] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 494.407234][T21245] RBP: 00007fd53fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 494.407244][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.407255][T21245] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 494.407276][T21245] [ 494.407303][T21245] socket: no more sockets [ 494.840537][T21257] futex_wake_op: syz.1.7302 tries to shift op by -2048; fix this program [ 494.874582][T21257] futex_wake_op: syz.1.7302 tries to shift op by -2048; fix this program [ 495.082448][T21265] netlink: 'syz.4.7307': attribute type 1 has an invalid length. [ 495.892580][T21292] netlink: 'syz.5.7320': attribute type 2 has an invalid length. [ 496.633821][T21321] netlink: 'syz.1.7333': attribute type 2 has an invalid length. [ 497.098422][T14553] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 497.147994][T14509] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 497.156256][T14509] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 497.165610][T14509] CPU: 0 UID: 0 PID: 14509 Comm: kworker/u13:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 497.165641][T14509] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 497.165648][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.165661][T14509] Workqueue: hci3 hci_rx_work [ 497.165760][T14509] Call Trace: [ 497.165767][T14509] [ 497.165775][T14509] dump_stack_lvl+0x100/0x190 [ 497.165800][T14509] sysfs_warn_dup.cold+0x1c/0x28 [ 497.165834][T14509] sysfs_create_dir_ns+0x24b/0x2b0 [ 497.165902][T14509] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 497.165928][T14509] ? find_held_lock+0x2b/0x80 [ 497.165957][T14509] ? kobject_add_internal+0x25f/0x930 [ 497.165986][T14509] ? kobject_add_internal+0x25f/0x930 [ 497.166006][T14509] ? do_raw_spin_unlock+0x145/0x1e0 [ 497.166028][T14509] kobject_add_internal+0x2c8/0x930 [ 497.166050][T14509] kobject_add+0x16a/0x1e0 [ 497.166068][T14509] ? __pfx_kobject_add+0x10/0x10 [ 497.166085][T14509] ? class_to_subsys+0x10f/0x150 [ 497.166161][T14509] ? kobject_put+0xb9/0x640 [ 497.166177][T14509] ? _raw_spin_unlock+0x28/0x50 [ 497.166204][T14509] device_add+0x294/0x1970 [ 497.166236][T14509] ? __pfx_dev_set_name+0x10/0x10 [ 497.166272][T14509] ? __pfx_device_add+0x10/0x10 [ 497.166291][T14509] ? mgmt_send_event_skb+0x2fb/0x460 [ 497.166340][T14509] hci_conn_add_sysfs+0x1a3/0x260 [ 497.166398][T14509] le_conn_complete_evt+0x11eb/0x1f60 [ 497.166453][T14509] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 497.166474][T14509] ? __pfx_bt_warn+0x10/0x10 [ 497.166495][T14509] ? hci_event_packet+0x186/0xcd0 [ 497.166523][T14509] hci_le_conn_complete_evt+0x23c/0x3a0 [ 497.166549][T14509] ? skb_pull_data+0x15f/0x1e0 [ 497.166592][T14509] hci_le_meta_evt+0x34a/0x5f0 [ 497.166635][T14509] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 497.166662][T14509] hci_event_packet+0x51c/0xcd0 [ 497.166685][T14509] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 497.166711][T14509] ? __pfx_hci_event_packet+0x10/0x10 [ 497.166737][T14509] ? kcov_remote_start+0x384/0x670 [ 497.166764][T14509] ? lockdep_hardirqs_on+0x78/0x100 [ 497.166794][T14509] hci_rx_work+0x451/0xfc0 [ 497.166819][T14509] process_one_work+0xa23/0x1940 [ 497.166861][T14509] ? __pfx_process_one_work+0x10/0x10 [ 497.166895][T14509] ? __pfx_hci_rx_work+0x10/0x10 [ 497.166919][T14509] worker_thread+0x5ef/0xe50 [ 497.166965][T14509] ? kthread+0x13a/0x450 [ 497.166988][T14509] ? __pfx_worker_thread+0x10/0x10 [ 497.167013][T14509] kthread+0x370/0x450 [ 497.167037][T14509] ? __pfx_kthread+0x10/0x10 [ 497.167063][T14509] ret_from_fork+0x72b/0xd50 [ 497.167087][T14509] ? __pfx_ret_from_fork+0x10/0x10 [ 497.167112][T14509] ? __switch_to+0x800/0x10f0 [ 497.167146][T14509] ? __switch_to_asm+0x39/0x70 [ 497.167169][T14509] ? __pfx_kthread+0x10/0x10 [ 497.167194][T14509] ret_from_fork_asm+0x1a/0x30 [ 497.167230][T14509] [ 497.735468][T14509] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 497.752256][T14509] Bluetooth: hci3: failed to register connection device [ 498.184221][T21354] netlink: 'syz.5.7348': attribute type 2 has an invalid length. [ 499.165262][T21384] FAULT_INJECTION: forcing a failure. [ 499.165262][T21384] name failslab, interval 1, probability 0, space 0, times 0 [ 499.178466][T21346] Bluetooth: hci3: command 0x0406 tx timeout [ 499.238078][T21384] CPU: 0 UID: 0 PID: 21384 Comm: syz.4.7363 Tainted: G U L syzkaller #0 PREEMPT(full) [ 499.238113][T21384] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 499.238120][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.238130][T21384] Call Trace: [ 499.238138][T21384] [ 499.238145][T21384] dump_stack_lvl+0x100/0x190 [ 499.238171][T21384] should_fail_ex.cold+0x5/0xa [ 499.238192][T21384] should_failslab+0xc2/0x120 [ 499.238219][T21384] kmem_cache_alloc_noprof+0x91/0x6a0 [ 499.238243][T21384] ? __pmd_alloc+0xbf/0x950 [ 499.238274][T21384] __pmd_alloc+0xbf/0x950 [ 499.238302][T21384] move_page_tables+0x2f7c/0x4610 [ 499.238324][T21384] ? __pfx_copy_vma+0x10/0x10 [ 499.238352][T21384] ? __pfx_move_page_tables+0x10/0x10 [ 499.238388][T21384] copy_vma_and_data+0x25c/0x7c0 [ 499.238410][T21384] ? __pfx_copy_vma_and_data+0x10/0x10 [ 499.238439][T21384] ? __vma_start_write+0x17f/0x280 [ 499.238456][T21384] ? __pfx___vma_start_write+0x10/0x10 [ 499.238491][T21384] move_vma+0x574/0x1920 [ 499.238514][T21384] ? __pfx_move_vma+0x10/0x10 [ 499.238536][T21384] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 499.238567][T21384] ? cap_mmap_addr+0x4b/0x120 [ 499.238586][T21384] ? bpf_lsm_mmap_addr+0x9/0x30 [ 499.238603][T21384] ? security_mmap_addr+0x71/0x1e0 [ 499.238628][T21384] ? __get_unmapped_area+0x255/0x3e0 [ 499.238656][T21384] ? vrm_set_new_addr+0x204/0x290 [ 499.238677][T21384] mremap_to+0x234/0x4c0 [ 499.238696][T21384] ? mas_walk+0x6ef/0x9b0 [ 499.238720][T21384] ? __pfx_mremap_to+0x10/0x10 [ 499.238746][T21384] __do_sys_mremap+0x88c/0x1850 [ 499.238774][T21384] ? __pfx___do_sys_mremap+0x10/0x10 [ 499.238793][T21384] ? ksys_write+0x190/0x250 [ 499.238815][T21384] ? __pfx_do_futex+0x10/0x10 [ 499.238842][T21384] ? __x64_sys_futex+0x34f/0x4d0 [ 499.238875][T21384] do_syscall_64+0x115/0x840 [ 499.238899][T21384] ? clear_bhb_loop+0x40/0x90 [ 499.238922][T21384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.238940][T21384] RIP: 0033:0x7f6f7759e0d9 [ 499.238956][T21384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.238974][T21384] RSP: 002b:00007f6f783a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 499.238992][T21384] RAX: ffffffffffffffda RBX: 00007f6f77825fa0 RCX: 00007f6f7759e0d9 [ 499.239004][T21384] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 499.239014][T21384] RBP: 00007f6f77635024 R08: 0000000100000000 R09: 0000000000000000 [ 499.239025][T21384] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 499.239035][T21384] R13: 00007f6f77826038 R14: 00007f6f77825fa0 R15: 00007ffee60622f8 [ 499.239059][T21384] [ 499.861046][T21399] netlink: 'syz.4.7370': attribute type 11 has an invalid length. [ 499.869260][T21399] netlink: 'syz.4.7370': attribute type 11 has an invalid length. [ 499.877150][T21399] netlink: 'syz.4.7370': attribute type 11 has an invalid length. [ 499.885161][T21399] netlink: 'syz.4.7370': attribute type 11 has an invalid length. [ 500.209279][T21409] netlink: 'syz.2.7374': attribute type 1 has an invalid length. [ 500.230112][T21409] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7374'. [ 500.293955][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.300349][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.356668][T21412] FAULT_INJECTION: forcing a failure. [ 500.356668][T21412] name failslab, interval 1, probability 0, space 0, times 0 [ 500.401658][T21412] CPU: 0 UID: 0 PID: 21412 Comm: syz.5.7375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.401692][T21412] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.401699][T21412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.401709][T21412] Call Trace: [ 500.401719][T21412] [ 500.401726][T21412] dump_stack_lvl+0x100/0x190 [ 500.401752][T21412] should_fail_ex.cold+0x5/0xa [ 500.401772][T21412] should_failslab+0xc2/0x120 [ 500.401799][T21412] kmem_cache_alloc_noprof+0x91/0x6a0 [ 500.401823][T21412] ? __pmd_alloc+0xbf/0x950 [ 500.401853][T21412] __pmd_alloc+0xbf/0x950 [ 500.401882][T21412] move_page_tables+0x2f7c/0x4610 [ 500.401904][T21412] ? __pfx_copy_vma+0x10/0x10 [ 500.401933][T21412] ? __pfx_move_page_tables+0x10/0x10 [ 500.401972][T21412] copy_vma_and_data+0x25c/0x7c0 [ 500.402001][T21412] ? __pfx_copy_vma_and_data+0x10/0x10 [ 500.402032][T21412] ? __vma_start_write+0x17f/0x280 [ 500.402049][T21412] ? __pfx___vma_start_write+0x10/0x10 [ 500.402083][T21412] move_vma+0x574/0x1920 [ 500.402106][T21412] ? __pfx_move_vma+0x10/0x10 [ 500.402128][T21412] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 500.402156][T21412] ? cap_mmap_addr+0x4b/0x120 [ 500.402176][T21412] ? bpf_lsm_mmap_addr+0x9/0x30 [ 500.402194][T21412] ? security_mmap_addr+0x71/0x1e0 [ 500.402219][T21412] ? __get_unmapped_area+0x255/0x3e0 [ 500.402248][T21412] ? vrm_set_new_addr+0x204/0x290 [ 500.402269][T21412] mremap_to+0x234/0x4c0 [ 500.402287][T21412] ? mas_walk+0x6ef/0x9b0 [ 500.402312][T21412] ? __pfx_mremap_to+0x10/0x10 [ 500.402338][T21412] __do_sys_mremap+0x88c/0x1850 [ 500.402366][T21412] ? __pfx___do_sys_mremap+0x10/0x10 [ 500.402385][T21412] ? ksys_write+0x190/0x250 [ 500.402408][T21412] ? __pfx_do_futex+0x10/0x10 [ 500.402435][T21412] ? __x64_sys_futex+0x34f/0x4d0 [ 500.402469][T21412] do_syscall_64+0x115/0x840 [ 500.402492][T21412] ? clear_bhb_loop+0x40/0x90 [ 500.402515][T21412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.402534][T21412] RIP: 0033:0x7f307ed9e0d9 [ 500.402550][T21412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.402568][T21412] RSP: 002b:00007f307fb93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 500.402586][T21412] RAX: ffffffffffffffda RBX: 00007f307f025fa0 RCX: 00007f307ed9e0d9 [ 500.402598][T21412] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 500.402609][T21412] RBP: 00007f307ee35024 R08: 0000000100000000 R09: 0000000000000000 [ 500.402620][T21412] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 500.402630][T21412] R13: 00007f307f026038 R14: 00007f307f025fa0 R15: 00007fff7dd9dc38 [ 500.402653][T21412] [ 501.107043][T14553] Bluetooth: hci3: ACL packet too small [ 501.331192][T14553] Bluetooth: hci3: command 0x0406 tx timeout [ 501.606756][T21445] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 502.506210][T21472] nbd: couldn't find device at index 158 [ 502.841139][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7408'. [ 503.397594][T14553] Bluetooth: hci3: command 0x0406 tx timeout [ 503.588422][T21449] kexec: Could not allocate control_code_buffer [ 504.041435][T21518] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 504.059096][T21519] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7426'. [ 504.348892][T21346] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 504.407661][T14553] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 504.417021][T14553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 504.430859][T14553] CPU: 0 UID: 0 PID: 14553 Comm: kworker/u13:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 504.430894][T14553] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 504.430902][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.430914][T14553] Workqueue: hci0 hci_rx_work [ 504.430942][T14553] Call Trace: [ 504.430950][T14553] [ 504.430957][T14553] dump_stack_lvl+0x100/0x190 [ 504.430980][T14553] sysfs_warn_dup.cold+0x1c/0x28 [ 504.431008][T14553] sysfs_create_dir_ns+0x24b/0x2b0 [ 504.431035][T14553] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.431062][T14553] ? find_held_lock+0x2b/0x80 [ 504.431090][T14553] ? kobject_add_internal+0x25f/0x930 [ 504.431109][T14553] ? kobject_add_internal+0x25f/0x930 [ 504.431129][T14553] ? do_raw_spin_unlock+0x145/0x1e0 [ 504.431151][T14553] kobject_add_internal+0x2c8/0x930 [ 504.431173][T14553] kobject_add+0x16a/0x1e0 [ 504.431191][T14553] ? __pfx_kobject_add+0x10/0x10 [ 504.431208][T14553] ? class_to_subsys+0x10f/0x150 [ 504.431232][T14553] ? kobject_put+0xb9/0x640 [ 504.431247][T14553] ? _raw_spin_unlock+0x28/0x50 [ 504.431274][T14553] device_add+0x294/0x1970 [ 504.431292][T14553] ? __pfx_dev_set_name+0x10/0x10 [ 504.431314][T14553] ? __pfx_device_add+0x10/0x10 [ 504.431332][T14553] ? mgmt_send_event_skb+0x2fb/0x460 [ 504.431362][T14553] hci_conn_add_sysfs+0x1a3/0x260 [ 504.431390][T14553] le_conn_complete_evt+0x11eb/0x1f60 [ 504.431420][T14553] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.431441][T14553] ? __pfx_bt_warn+0x10/0x10 [ 504.431456][T14553] ? hci_event_packet+0x186/0xcd0 [ 504.431484][T14553] hci_le_conn_complete_evt+0x23c/0x3a0 [ 504.431509][T14553] ? skb_pull_data+0x15f/0x1e0 [ 504.431538][T14553] hci_le_meta_evt+0x34a/0x5f0 [ 504.431563][T14553] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 504.431591][T14553] hci_event_packet+0x51c/0xcd0 [ 504.431619][T14553] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.431645][T14553] ? __pfx_hci_event_packet+0x10/0x10 [ 504.431670][T14553] ? kcov_remote_start+0x384/0x670 [ 504.431697][T14553] ? lockdep_hardirqs_on+0x78/0x100 [ 504.431727][T14553] hci_rx_work+0x451/0xfc0 [ 504.431753][T14553] process_one_work+0xa23/0x1940 [ 504.431790][T14553] ? __pfx_process_one_work+0x10/0x10 [ 504.431824][T14553] ? __pfx_hci_rx_work+0x10/0x10 [ 504.431848][T14553] worker_thread+0x5ef/0xe50 [ 504.431883][T14553] ? kthread+0x13a/0x450 [ 504.431905][T14553] ? __pfx_worker_thread+0x10/0x10 [ 504.431930][T14553] kthread+0x370/0x450 [ 504.431953][T14553] ? __pfx_kthread+0x10/0x10 [ 504.431979][T14553] ret_from_fork+0x72b/0xd50 [ 504.432002][T14553] ? __pfx_ret_from_fork+0x10/0x10 [ 504.432026][T14553] ? __switch_to+0x800/0x10f0 [ 504.432053][T14553] ? __switch_to_asm+0x39/0x70 [ 504.432077][T14553] ? __pfx_kthread+0x10/0x10 [ 504.432102][T14553] ret_from_fork_asm+0x1a/0x30 [ 504.432138][T14553] [ 505.038677][T14553] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 505.052925][T14553] Bluetooth: hci0: failed to register connection device [ 505.468274][T14553] Bluetooth: hci3: command 0x0406 tx timeout [ 506.300530][T21585] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7456'. [ 506.427256][T14553] Bluetooth: hci0: command 0x2016 tx timeout [ 506.786530][T21604] netlink: 'syz.5.7465': attribute type 1 has an invalid length. [ 507.323988][T21621] netlink: 'syz.1.7473': attribute type 1 has an invalid length. [ 508.077335][T21647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7484'. [ 508.493231][T14553] Bluetooth: hci0: command 0x2016 tx timeout [ 508.622225][T21665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.773914][T21671] random: crng reseeded on system resumption [ 510.563133][T14553] Bluetooth: hci0: command 0x2016 tx timeout [ 510.621472][T21737] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 511.612669][T21715] kexec: Could not allocate control_code_buffer [ 512.634513][T21346] Bluetooth: hci0: command 0x2016 tx timeout [ 512.708480][T21790] CIFS: VFS: Invalid SecurityFlags: [ 513.288751][T21346] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 513.330874][T21346] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 513.345650][T21346] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 513.355407][T21346] CPU: 0 UID: 0 PID: 21346 Comm: kworker/u13:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 513.355441][T21346] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 513.355448][T21346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.355469][T21346] Workqueue: hci2 hci_rx_work [ 513.355501][T21346] Call Trace: [ 513.355508][T21346] [ 513.355516][T21346] dump_stack_lvl+0x100/0x190 [ 513.355539][T21346] sysfs_warn_dup.cold+0x1c/0x28 [ 513.355566][T21346] sysfs_create_dir_ns+0x24b/0x2b0 [ 513.355594][T21346] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 513.355620][T21346] ? find_held_lock+0x2b/0x80 [ 513.355644][T21346] ? kobject_add_internal+0x25f/0x930 [ 513.355664][T21346] ? kobject_add_internal+0x25f/0x930 [ 513.355685][T21346] ? do_raw_spin_unlock+0x145/0x1e0 [ 513.355706][T21346] kobject_add_internal+0x2c8/0x930 [ 513.355729][T21346] kobject_add+0x16a/0x1e0 [ 513.355747][T21346] ? __pfx_kobject_add+0x10/0x10 [ 513.355765][T21346] ? class_to_subsys+0x10f/0x150 [ 513.355795][T21346] ? kobject_put+0xb9/0x640 [ 513.355810][T21346] ? _raw_spin_unlock+0x28/0x50 [ 513.355839][T21346] device_add+0x294/0x1970 [ 513.355857][T21346] ? __pfx_dev_set_name+0x10/0x10 [ 513.355880][T21346] ? __pfx_device_add+0x10/0x10 [ 513.355899][T21346] ? mgmt_send_event_skb+0x2fb/0x460 [ 513.355935][T21346] hci_conn_add_sysfs+0x1a3/0x260 [ 513.355963][T21346] le_conn_complete_evt+0x11eb/0x1f60 [ 513.355993][T21346] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 513.356017][T21346] ? __pfx_bt_warn+0x10/0x10 [ 513.356033][T21346] ? hci_event_packet+0x186/0xcd0 [ 513.356061][T21346] hci_le_conn_complete_evt+0x23c/0x3a0 [ 513.356086][T21346] ? skb_pull_data+0x15f/0x1e0 [ 513.356110][T21346] hci_le_meta_evt+0x34a/0x5f0 [ 513.356134][T21346] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 513.356161][T21346] hci_event_packet+0x51c/0xcd0 [ 513.356185][T21346] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 513.356210][T21346] ? __pfx_hci_event_packet+0x10/0x10 [ 513.356236][T21346] ? kcov_remote_start+0x384/0x670 [ 513.356261][T21346] ? lockdep_hardirqs_on+0x78/0x100 [ 513.356290][T21346] hci_rx_work+0x451/0xfc0 [ 513.356317][T21346] process_one_work+0xa23/0x1940 [ 513.356353][T21346] ? __pfx_process_one_work+0x10/0x10 [ 513.356386][T21346] ? __pfx_hci_rx_work+0x10/0x10 [ 513.356411][T21346] worker_thread+0x5ef/0xe50 [ 513.356443][T21346] ? __pfx_worker_thread+0x10/0x10 [ 513.356470][T21346] ? kthread+0x13a/0x450 [ 513.356492][T21346] ? __pfx_worker_thread+0x10/0x10 [ 513.356517][T21346] kthread+0x370/0x450 [ 513.356546][T21346] ? __pfx_kthread+0x10/0x10 [ 513.356571][T21346] ret_from_fork+0x72b/0xd50 [ 513.356595][T21346] ? __pfx_ret_from_fork+0x10/0x10 [ 513.356619][T21346] ? __switch_to+0x800/0x10f0 [ 513.356645][T21346] ? __switch_to_asm+0x39/0x70 [ 513.356669][T21346] ? __pfx_kthread+0x10/0x10 [ 513.356695][T21346] ret_from_fork_asm+0x1a/0x30 [ 513.356731][T21346] [ 513.356854][T21346] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 513.688701][T21346] Bluetooth: hci2: failed to register connection device [ 514.165387][T21836] nbd: must specify a device to reconfigure [ 515.341456][T21346] Bluetooth: hci2: command 0x0406 tx timeout [ 515.653919][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7593'. [ 515.708311][T21884] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 517.231814][T21346] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 517.270835][T21346] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 517.279244][T21346] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 517.288650][T21346] CPU: 0 UID: 0 PID: 21346 Comm: kworker/u13:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.288681][T21346] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.288688][T21346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.288701][T21346] Workqueue: hci1 hci_rx_work [ 517.288730][T21346] Call Trace: [ 517.288736][T21346] [ 517.288744][T21346] dump_stack_lvl+0x100/0x190 [ 517.288770][T21346] sysfs_warn_dup.cold+0x1c/0x28 [ 517.288800][T21346] sysfs_create_dir_ns+0x24b/0x2b0 [ 517.288844][T21346] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 517.288869][T21346] ? find_held_lock+0x2b/0x80 [ 517.288893][T21346] ? kobject_add_internal+0x25f/0x930 [ 517.288913][T21346] ? kobject_add_internal+0x25f/0x930 [ 517.288933][T21346] ? do_raw_spin_unlock+0x145/0x1e0 [ 517.288956][T21346] kobject_add_internal+0x2c8/0x930 [ 517.288978][T21346] kobject_add+0x16a/0x1e0 [ 517.288997][T21346] ? __pfx_kobject_add+0x10/0x10 [ 517.289014][T21346] ? class_to_subsys+0x10f/0x150 [ 517.289038][T21346] ? kobject_put+0xb9/0x640 [ 517.289053][T21346] ? _raw_spin_unlock+0x28/0x50 [ 517.289079][T21346] device_add+0x294/0x1970 [ 517.289098][T21346] ? __pfx_dev_set_name+0x10/0x10 [ 517.289118][T21346] ? __pfx_device_add+0x10/0x10 [ 517.289136][T21346] ? mgmt_send_event_skb+0x2fb/0x460 [ 517.289166][T21346] hci_conn_add_sysfs+0x1a3/0x260 [ 517.289194][T21346] le_conn_complete_evt+0x11eb/0x1f60 [ 517.289228][T21346] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 517.289249][T21346] ? __pfx_bt_warn+0x10/0x10 [ 517.289265][T21346] ? hci_event_packet+0x186/0xcd0 [ 517.289292][T21346] hci_le_conn_complete_evt+0x23c/0x3a0 [ 517.289317][T21346] ? skb_pull_data+0x15f/0x1e0 [ 517.289339][T21346] hci_le_meta_evt+0x34a/0x5f0 [ 517.289364][T21346] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 517.289391][T21346] hci_event_packet+0x51c/0xcd0 [ 517.289414][T21346] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 517.289438][T21346] ? __pfx_hci_event_packet+0x10/0x10 [ 517.289464][T21346] ? kcov_remote_start+0x384/0x670 [ 517.289491][T21346] ? lockdep_hardirqs_on+0x78/0x100 [ 517.289520][T21346] hci_rx_work+0x451/0xfc0 [ 517.289546][T21346] process_one_work+0xa23/0x1940 [ 517.289583][T21346] ? __pfx_process_one_work+0x10/0x10 [ 517.289616][T21346] ? __pfx_hci_rx_work+0x10/0x10 [ 517.289640][T21346] worker_thread+0x5ef/0xe50 [ 517.289672][T21346] ? __pfx_worker_thread+0x10/0x10 [ 517.289699][T21346] ? kthread+0x13a/0x450 [ 517.289721][T21346] ? __pfx_worker_thread+0x10/0x10 [ 517.289746][T21346] kthread+0x370/0x450 [ 517.289769][T21346] ? __pfx_kthread+0x10/0x10 [ 517.289794][T21346] ret_from_fork+0x72b/0xd50 [ 517.289818][T21346] ? __pfx_ret_from_fork+0x10/0x10 [ 517.289848][T21346] ? __switch_to+0x800/0x10f0 [ 517.289875][T21346] ? __switch_to_asm+0x39/0x70 [ 517.289899][T21346] ? __pfx_kthread+0x10/0x10 [ 517.289925][T21346] ret_from_fork_asm+0x1a/0x30 [ 517.289960][T21346] [ 517.289984][T21346] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 517.618436][T21346] Bluetooth: hci1: failed to register connection device [ 517.626845][T14509] Bluetooth: hci2: command 0x0406 tx timeout [ 518.036119][T21951] netlink: 'syz.2.7624': attribute type 1 has an invalid length. [ 518.297418][T21957] netlink: Unknown NAT attribute (type=262, max=9) [ 519.024968][T21977] netlink: 'syz.2.7637': attribute type 2 has an invalid length. [ 519.244975][T14553] Bluetooth: hci1: command 0x0c1a tx timeout [ 519.641635][T14553] Bluetooth: hci2: command 0x0406 tx timeout [ 519.907550][T22005] netlink: Unknown NAT attribute (type=262, max=9) [ 520.261567][T22014] netlink: Invalid conntrack helper [ 521.312691][T14553] Bluetooth: hci1: command 0x0c1a tx timeout [ 521.695512][T22068] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 521.710986][T14553] Bluetooth: hci2: command 0x0406 tx timeout [ 522.556288][T22101] process 'syz.1.7696' launched '/dev/fd/3' with NULL argv: empty string added [ 522.708617][T22105] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 523.003961][T22118] openvswitch: netlink: IP tunnel TTL not specified. [ 523.212606][T22126] FAULT_INJECTION: forcing a failure. [ 523.212606][T22126] name failslab, interval 1, probability 0, space 0, times 0 [ 523.280328][T22126] CPU: 0 UID: 0 PID: 22126 Comm: syz.1.7708 Tainted: G U L syzkaller #0 PREEMPT(full) [ 523.280363][T22126] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 523.280371][T22126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.280381][T22126] Call Trace: [ 523.280387][T22126] [ 523.280395][T22126] dump_stack_lvl+0x100/0x190 [ 523.280421][T22126] should_fail_ex.cold+0x5/0xa [ 523.280443][T22126] should_failslab+0xc2/0x120 [ 523.280471][T22126] kmem_cache_alloc_noprof+0x91/0x6a0 [ 523.280493][T22126] ? d_instantiate+0x8a/0xb0 [ 523.280515][T22126] ? d_instantiate+0x8a/0xb0 [ 523.280535][T22126] ? alloc_empty_file+0x5b/0x1c0 [ 523.280561][T22126] alloc_empty_file+0x5b/0x1c0 [ 523.280586][T22126] alloc_file_pseudo+0x183/0x290 [ 523.280610][T22126] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 523.280632][T22126] ? alloc_fd+0x471/0x7a0 [ 523.280651][T22126] ? do_raw_spin_unlock+0x145/0x1e0 [ 523.280674][T22126] __anon_inode_getfile+0xe8/0x280 [ 523.280772][T22126] anon_inode_getfile_fmode+0x37/0xa0 [ 523.280797][T22126] __do_sys_fanotify_init+0xa0d/0xe30 [ 523.280846][T22126] do_syscall_64+0x115/0x840 [ 523.280870][T22126] ? clear_bhb_loop+0x40/0x90 [ 523.280892][T22126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.280911][T22126] RIP: 0033:0x7f9301f9e0d9 [ 523.280928][T22126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.280945][T22126] RSP: 002b:00007f9302e71028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 523.280963][T22126] RAX: ffffffffffffffda RBX: 00007f9302225fa0 RCX: 00007f9301f9e0d9 [ 523.280975][T22126] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 523.280986][T22126] RBP: 00007f9302035024 R08: 0000000000000000 R09: 0000000000000000 [ 523.280997][T22126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.281008][T22126] R13: 00007f9302226038 R14: 00007f9302225fa0 R15: 00007ffec520d658 [ 523.281030][T22126] [ 523.642454][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7714'. [ 523.653178][T22136] netlink: 29 bytes leftover after parsing attributes in process `syz.5.7714'. [ 523.700194][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7713'. [ 523.727199][T14553] Bluetooth: hci1: command 0x0c1a tx timeout [ 523.739542][T19586] Process accounting resumed [ 524.868173][T22178] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 525.772178][T19196] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.801678][T22288] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 528.010504][T22297] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 529.953137][T22369] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 530.260722][T22378] block nbd2: not configured, cannot reconfigure [ 530.756465][T19196] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 530.792979][T19196] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 530.801087][T19196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 530.810994][T19196] CPU: 0 UID: 0 PID: 19196 Comm: kworker/u13:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 530.811025][T19196] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 530.811033][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.811044][T19196] Workqueue: hci2 hci_rx_work [ 530.811071][T19196] Call Trace: [ 530.811077][T19196] [ 530.811084][T19196] dump_stack_lvl+0x100/0x190 [ 530.811113][T19196] sysfs_warn_dup.cold+0x1c/0x28 [ 530.811142][T19196] sysfs_create_dir_ns+0x24b/0x2b0 [ 530.811170][T19196] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 530.811197][T19196] ? find_held_lock+0x2b/0x80 [ 530.811220][T19196] ? kobject_add_internal+0x25f/0x930 [ 530.811238][T19196] ? kobject_add_internal+0x25f/0x930 [ 530.811258][T19196] ? do_raw_spin_unlock+0x145/0x1e0 [ 530.811280][T19196] kobject_add_internal+0x2c8/0x930 [ 530.811302][T19196] kobject_add+0x16a/0x1e0 [ 530.811319][T19196] ? __pfx_kobject_add+0x10/0x10 [ 530.811336][T19196] ? class_to_subsys+0x10f/0x150 [ 530.811359][T19196] ? kobject_put+0xb9/0x640 [ 530.811373][T19196] ? _raw_spin_unlock+0x28/0x50 [ 530.811400][T19196] device_add+0x294/0x1970 [ 530.811418][T19196] ? __pfx_dev_set_name+0x10/0x10 [ 530.811438][T19196] ? __pfx_device_add+0x10/0x10 [ 530.811457][T19196] ? mgmt_send_event_skb+0x2fb/0x460 [ 530.811487][T19196] hci_conn_add_sysfs+0x1a3/0x260 [ 530.811514][T19196] le_conn_complete_evt+0x11eb/0x1f60 [ 530.811544][T19196] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 530.811565][T19196] ? __pfx_bt_warn+0x10/0x10 [ 530.811581][T19196] ? hci_event_packet+0x186/0xcd0 [ 530.811615][T19196] hci_le_conn_complete_evt+0x23c/0x3a0 [ 530.811640][T19196] ? skb_pull_data+0x15f/0x1e0 [ 530.811662][T19196] hci_le_meta_evt+0x34a/0x5f0 [ 530.811686][T19196] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 530.811714][T19196] hci_event_packet+0x51c/0xcd0 [ 530.811737][T19196] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 530.811767][T19196] ? __pfx_hci_event_packet+0x10/0x10 [ 530.811793][T19196] ? kcov_remote_start+0x384/0x670 [ 530.811819][T19196] ? lockdep_hardirqs_on+0x78/0x100 [ 530.811847][T19196] hci_rx_work+0x451/0xfc0 [ 530.811874][T19196] process_one_work+0xa23/0x1940 [ 530.811910][T19196] ? __pfx_process_one_work+0x10/0x10 [ 530.811943][T19196] ? __pfx_hci_rx_work+0x10/0x10 [ 530.811968][T19196] worker_thread+0x5ef/0xe50 [ 530.812003][T19196] ? kthread+0x13a/0x450 [ 530.812026][T19196] ? __pfx_worker_thread+0x10/0x10 [ 530.812050][T19196] kthread+0x370/0x450 [ 530.812073][T19196] ? __pfx_kthread+0x10/0x10 [ 530.812099][T19196] ret_from_fork+0x72b/0xd50 [ 530.812123][T19196] ? __pfx_ret_from_fork+0x10/0x10 [ 530.812145][T19196] ? rcu_is_watching+0x12/0xc0 [ 530.812187][T19196] ? __switch_to+0x800/0x10f0 [ 530.812215][T19196] ? __switch_to_asm+0x39/0x70 [ 530.812239][T19196] ? __pfx_kthread+0x10/0x10 [ 530.812266][T19196] ret_from_fork_asm+0x1a/0x30 [ 530.812303][T19196] [ 530.812349][T19196] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 531.129624][T19196] Bluetooth: hci2: failed to register connection device [ 531.170631][T22398] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 532.543560][T22440] FAULT_INJECTION: forcing a failure. [ 532.543560][T22440] name failslab, interval 1, probability 0, space 0, times 0 [ 532.615369][T22440] CPU: 0 UID: 0 PID: 22440 Comm: syz.2.7854 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.615407][T22440] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.615413][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.615424][T22440] Call Trace: [ 532.615430][T22440] [ 532.615437][T22440] dump_stack_lvl+0x100/0x190 [ 532.615463][T22440] should_fail_ex.cold+0x5/0xa [ 532.615484][T22440] should_failslab+0xc2/0x120 [ 532.615510][T22440] __kmalloc_node_noprof+0x101/0x830 [ 532.615532][T22440] ? __kmalloc_noprof+0x311/0x820 [ 532.615555][T22440] ? get_callchain_buffers+0x1e5/0x380 [ 532.615585][T22440] get_callchain_buffers+0x1e5/0x380 [ 532.615609][T22440] ? security_capable+0x80/0x260 [ 532.615642][T22440] stack_map_alloc+0x316/0x610 [ 532.615667][T22440] map_create+0x874/0x3120 [ 532.615701][T22440] ? __lock_acquire+0x49f/0x1a40 [ 532.615735][T22440] ? __pfx_map_create+0x10/0x10 [ 532.615769][T22440] ? __might_fault+0xc5/0x140 [ 532.615798][T22440] __sys_bpf+0x2a6e/0x4e80 [ 532.615826][T22440] ? __pfx___sys_bpf+0x10/0x10 [ 532.615844][T22440] ? __pfx_futex_hash+0x10/0x10 [ 532.615871][T22440] ? get_pid_task+0xfc/0x250 [ 532.615894][T22440] ? get_pid_task+0xfc/0x250 [ 532.615922][T22440] ? futex_wait+0x11e/0x370 [ 532.615946][T22440] ? __pfx_futex_wait+0x10/0x10 [ 532.615975][T22440] ? find_held_lock+0x2b/0x80 [ 532.616003][T22440] ? rcu_read_lock_any_held+0x6a/0xa0 [ 532.616027][T22440] ? find_held_lock+0x2b/0x80 [ 532.616049][T22440] ? ksys_write+0x190/0x250 [ 532.616066][T22440] ? ksys_write+0x190/0x250 [ 532.616103][T22440] ? __x64_sys_futex+0x34f/0x4d0 [ 532.616123][T22440] ? __x64_sys_futex+0x358/0x4d0 [ 532.616149][T22440] ? xfd_validate_state+0x129/0x190 [ 532.616181][T22440] ? __x64_sys_bpf+0xce/0x140 [ 532.616201][T22440] __x64_sys_bpf+0xce/0x140 [ 532.616221][T22440] ? do_syscall_64+0x90/0x840 [ 532.616248][T22440] do_syscall_64+0x115/0x840 [ 532.616272][T22440] ? clear_bhb_loop+0x40/0x90 [ 532.616295][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.616314][T22440] RIP: 0033:0x7fd53fb9e0d9 [ 532.616330][T22440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.616348][T22440] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.616367][T22440] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 532.616379][T22440] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 532.616390][T22440] RBP: 00007fd53fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 532.616400][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.616410][T22440] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 532.616435][T22440] [ 532.966936][T19196] Bluetooth: hci2: command 0x0406 tx timeout [ 534.289553][T22489] FAULT_INJECTION: forcing a failure. [ 534.289553][T22489] name failslab, interval 1, probability 0, space 0, times 0 [ 534.360165][T22489] CPU: 0 UID: 0 PID: 22489 Comm: syz.4.7876 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.360200][T22489] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.360207][T22489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.360218][T22489] Call Trace: [ 534.360224][T22489] [ 534.360231][T22489] dump_stack_lvl+0x100/0x190 [ 534.360256][T22489] should_fail_ex.cold+0x5/0xa [ 534.360278][T22489] should_failslab+0xc2/0x120 [ 534.360303][T22489] __kmalloc_cache_noprof+0x91/0x6c0 [ 534.360323][T22489] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 534.360346][T22489] ? sctp_endpoint_new+0xfc/0xb20 [ 534.360454][T22489] sctp_endpoint_new+0xfc/0xb20 [ 534.360485][T22489] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 534.360515][T22489] ? lockdep_init_map_type+0x5c/0x250 [ 534.360535][T22489] ? lockdep_init_map_type+0x5c/0x250 [ 534.360552][T22489] ? lockdep_init_map_type+0x5c/0x250 [ 534.360573][T22489] sctp_init_sock+0xe2b/0x1300 [ 534.360616][T22489] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 534.360645][T22489] sctp_v6_init_sock+0x16/0x70 [ 534.360672][T22489] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 534.360699][T22489] inet6_create+0xb1a/0x12b0 [ 534.360750][T22489] ? inet6_create+0x7f/0x12b0 [ 534.360773][T22489] __sock_create+0x339/0x860 [ 534.360799][T22489] __sys_socket+0x14d/0x260 [ 534.360820][T22489] ? __pfx___sys_socket+0x10/0x10 [ 534.360847][T22489] __x64_sys_socket+0x72/0xb0 [ 534.360867][T22489] ? lockdep_hardirqs_on+0x78/0x100 [ 534.360891][T22489] do_syscall_64+0x115/0x840 [ 534.360914][T22489] ? clear_bhb_loop+0x40/0x90 [ 534.360939][T22489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.360958][T22489] RIP: 0033:0x7f6f7759e0d9 [ 534.360986][T22489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.361004][T22489] RSP: 002b:00007f6f783a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 534.361023][T22489] RAX: ffffffffffffffda RBX: 00007f6f77825fa0 RCX: 00007f6f7759e0d9 [ 534.361035][T22489] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 534.361046][T22489] RBP: 00007f6f77635024 R08: 0000000000000000 R09: 0000000000000000 [ 534.361058][T22489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.361069][T22489] R13: 00007f6f77826038 R14: 00007f6f77825fa0 R15: 00007ffee60622f8 [ 534.361092][T22489] [ 535.085319][T19196] Bluetooth: hci2: command 0x0406 tx timeout [ 535.982306][T22537] aoe: could not set interface list: too many interfaces [ 536.658999][T22556] openvswitch: netlink: Flow key attr not present in new flow. [ 537.158403][T19196] Bluetooth: hci2: command 0x0406 tx timeout [ 538.502670][T22619] netlink: 178 bytes leftover after parsing attributes in process `syz.5.7938'. [ 539.131887][T22641] dyndbg: expected <4096 bytes into control [ 539.229101][T14553] Bluetooth: hci2: command 0x0406 tx timeout [ 540.239873][T22683] unsupported nla_type 113 [ 540.677599][T22697] netlink: Setting conntrack mark requires 'commit' flag. [ 541.807943][T19586] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 541.860745][T22736] sd 0:0:1:0: PR command failed: 1026 [ 541.886745][T22736] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 541.920877][T22736] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 542.608222][T19586] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 542.654716][T22756] FAULT_INJECTION: forcing a failure. [ 542.654716][T22756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.733203][T22756] CPU: 0 UID: 0 PID: 22756 Comm: syz.4.8002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.733238][T22756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.733245][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.733256][T22756] Call Trace: [ 542.733262][T22756] [ 542.733270][T22756] dump_stack_lvl+0x100/0x190 [ 542.733295][T22756] should_fail_ex.cold+0x5/0xa [ 542.733312][T22756] ? prepare_alloc_pages+0x16d/0x5f0 [ 542.733341][T22756] should_fail_alloc_page+0xeb/0x140 [ 542.733369][T22756] prepare_alloc_pages+0x1f0/0x5f0 [ 542.733400][T22756] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 542.733423][T22756] ? is_bpf_text_address+0x94/0x1a0 [ 542.733450][T22756] ? kernel_text_address+0x8d/0x100 [ 542.733477][T22756] ? __kernel_text_address+0xd/0x30 [ 542.733504][T22756] ? unwind_get_return_address+0x59/0xa0 [ 542.733532][T22756] ? arch_stack_walk+0xa6/0xf0 [ 542.733560][T22756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.733595][T22756] ? stack_trace_save+0x8e/0xc0 [ 542.733620][T22756] ? __pfx_stack_trace_save+0x10/0x10 [ 542.733645][T22756] ? stack_depot_save_flags+0x27/0x9d0 [ 542.733681][T22756] ? kasan_save_track+0x14/0x30 [ 542.733703][T22756] ? __kasan_kmalloc+0xaa/0xb0 [ 542.733725][T22756] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 542.733743][T22756] ? do_kimage_alloc_init+0x40/0x320 [ 542.733767][T22756] ? do_kexec_load+0x11b/0x810 [ 542.733792][T22756] ? __x64_sys_kexec_load+0x1bf/0x230 [ 542.733819][T22756] ? do_syscall_64+0x115/0x840 [ 542.733843][T22756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.733863][T22756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.733891][T22756] ? policy_nodemask+0xed/0x4f0 [ 542.733920][T22756] alloc_pages_mpol+0x1fb/0x540 [ 542.733947][T22756] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 542.733979][T22756] alloc_pages_noprof+0x1a/0x160 [ 542.733997][T22756] kimage_alloc_pages+0x72/0x380 [ 542.734026][T22756] kimage_alloc_control_pages+0x157/0xa20 [ 542.734057][T22756] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 542.734075][T22756] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 542.734129][T22756] do_kexec_load+0x6c1/0x810 [ 542.734158][T22756] ? __pfx_do_kexec_load+0x10/0x10 [ 542.734188][T22756] ? _copy_from_user+0x59/0xd0 [ 542.734221][T22756] __x64_sys_kexec_load+0x1bf/0x230 [ 542.734251][T22756] do_syscall_64+0x115/0x840 [ 542.734274][T22756] ? clear_bhb_loop+0x40/0x90 [ 542.734295][T22756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.734314][T22756] RIP: 0033:0x7f6f7759e0d9 [ 542.734330][T22756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.734348][T22756] RSP: 002b:00007f6f783a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 542.734367][T22756] RAX: ffffffffffffffda RBX: 00007f6f77825fa0 RCX: 00007f6f7759e0d9 [ 542.734378][T22756] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 542.734389][T22756] RBP: 00007f6f77635024 R08: 0000000000000000 R09: 0000000000000000 [ 542.734399][T22756] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 542.734410][T22756] R13: 00007f6f77826038 R14: 00007f6f77825fa0 R15: 00007ffee60622f8 [ 542.734432][T22756] [ 542.734465][T22756] kexec: Could not allocate swap buffer [ 543.719990][T14553] Bluetooth: hci3: SCO packet too small [ 543.978718][T22794] netlink: 'syz.5.8021': attribute type 1 has an invalid length. [ 549.131445][T22943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8092'. [ 549.310000][T22950] IPVS: length: 131 != 8 [ 550.537883][T22987] HSR: entered promiscuous mode [ 550.657689][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8114'. [ 551.115100][T23004] netlink: set zone limit has 4 unknown bytes [ 553.327799][T14553] Bluetooth: hci0: command 0x2016 tx timeout [ 554.714399][T23109] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8171'. [ 555.369927][T23131] netlink: 334 bytes leftover after parsing attributes in process `syz.2.8181'. [ 555.615797][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8185'. [ 556.297481][T20083] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.668352][T20083] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.948930][T14553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 556.965930][T14553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.975472][T14553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 556.995306][T14553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.004838][T14553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.122922][T20083] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.506242][T20083] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.391372][T20083] bridge_slave_1: left allmulticast mode [ 558.434875][T20083] bridge_slave_1: left promiscuous mode [ 558.471986][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.527226][T20083] bridge_slave_0: left allmulticast mode [ 558.566229][T20083] bridge_slave_0: left promiscuous mode [ 558.612230][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.055788][T14553] Bluetooth: hci0: command tx timeout [ 559.380107][T23229] FAULT_INJECTION: forcing a failure. [ 559.380107][T23229] name failslab, interval 1, probability 0, space 0, times 0 [ 559.457746][T23229] CPU: 0 UID: 0 PID: 23229 Comm: syz.1.8221 Tainted: G U L syzkaller #0 PREEMPT(full) [ 559.457781][T23229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 559.457787][T23229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.457798][T23229] Call Trace: [ 559.457805][T23229] [ 559.457812][T23229] dump_stack_lvl+0x100/0x190 [ 559.457838][T23229] should_fail_ex.cold+0x5/0xa [ 559.457858][T23229] should_failslab+0xc2/0x120 [ 559.457885][T23229] __kmalloc_cache_noprof+0x91/0x6c0 [ 559.457905][T23229] ? call_usermodehelper_setup+0xaf/0x360 [ 559.457937][T23229] ? __pfx_free_modprobe_argv+0x10/0x10 [ 559.457958][T23229] call_usermodehelper_setup+0xaf/0x360 [ 559.457990][T23229] __request_module+0x3c7/0x6a0 [ 559.458012][T23229] ? __pfx___request_module+0x10/0x10 [ 559.458041][T23229] ? find_held_lock+0x2b/0x80 [ 559.458063][T23229] ? inet6_create+0xb9f/0x12b0 [ 559.458089][T23229] inet6_create+0xd65/0x12b0 [ 559.458111][T23229] ? inet6_create+0x7f/0x12b0 [ 559.458133][T23229] __sock_create+0x339/0x860 [ 559.458157][T23229] __sys_socket+0x14d/0x260 [ 559.458178][T23229] ? __pfx___sys_socket+0x10/0x10 [ 559.458205][T23229] __x64_sys_socket+0x72/0xb0 [ 559.458225][T23229] ? lockdep_hardirqs_on+0x78/0x100 [ 559.458249][T23229] do_syscall_64+0x115/0x840 [ 559.458279][T23229] ? clear_bhb_loop+0x40/0x90 [ 559.458301][T23229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.458320][T23229] RIP: 0033:0x7f9301f9e0d9 [ 559.458336][T23229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.458354][T23229] RSP: 002b:00007f9302e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 559.458372][T23229] RAX: ffffffffffffffda RBX: 00007f9302225fa0 RCX: 00007f9301f9e0d9 [ 559.458384][T23229] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 559.458394][T23229] RBP: 00007f9302035024 R08: 0000000000000000 R09: 0000000000000000 [ 559.458405][T23229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.458416][T23229] R13: 00007f9302226038 R14: 00007f9302225fa0 R15: 00007ffec520d658 [ 559.458438][T23229] [ 559.877783][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.887223][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.971073][T20083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.068807][T20083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.120166][T20083] bond0 (unregistering): Released all slaves [ 560.287886][T20083] HSR: left promiscuous mode [ 560.559984][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 561.129802][T14553] Bluetooth: hci0: command tx timeout [ 561.447572][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.454316][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.209796][T20083] hsr_slave_0: left promiscuous mode [ 562.267214][T20083] hsr_slave_1: left promiscuous mode [ 562.298232][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.344598][T20083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.387011][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.435792][T20083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.524203][T20083] veth1_macvtap: left promiscuous mode [ 562.558575][T20083] veth0_macvtap: left promiscuous mode [ 562.597544][T20083] veth1_vlan: left promiscuous mode [ 562.639454][T20083] veth0_vlan: left promiscuous mode [ 562.748050][T23315] NFSD: Failed to start, no listeners configured. [ 563.195451][T14553] Bluetooth: hci0: command tx timeout [ 563.685339][T20083] team0 (unregistering): Port device team_slave_1 removed [ 563.737344][T20083] team0 (unregistering): Port device team_slave_0 removed [ 564.135347][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 564.302682][T23164] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.342613][T23164] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.380288][T23164] bridge_slave_0: entered allmulticast mode [ 564.403863][T23164] bridge_slave_0: entered promiscuous mode [ 564.535984][T23349] : entered promiscuous mode [ 564.576086][T23164] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.617316][T23164] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.648218][T23164] bridge_slave_1: entered allmulticast mode [ 564.690070][T23164] bridge_slave_1: entered promiscuous mode [ 564.862540][T23164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.948900][T23164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.178452][T23164] team0: Port device team_slave_0 added [ 565.247419][T23164] team0: Port device team_slave_1 added [ 565.266567][T14553] Bluetooth: hci0: command tx timeout [ 565.422477][T23164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.458158][T23164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.620754][T23164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.705223][T23164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.745581][T23164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.891450][T23164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.198955][T23164] hsr_slave_0: entered promiscuous mode [ 566.236204][T23164] hsr_slave_1: entered promiscuous mode [ 566.277898][T23164] debugfs: 'hsr0' already exists in 'hsr' [ 566.309816][T23164] Cannot create hsr debugfs directory [ 566.750157][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 567.921769][T23445] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 569.717965][T23164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 569.760106][T23164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.795352][T14553] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 569.795382][T14553] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 569.810436][T14553] Bluetooth: hci2: Dropping invalid advertising data [ 569.817197][T14553] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 569.817226][T14553] Bluetooth: hci2: unknown advertising packet type: 0x8b [ 569.824434][T14553] Bluetooth: hci2: unknown advertising packet type: 0xee [ 569.848231][T23164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 569.962818][T23164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.009753][T23164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 570.073493][T23164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.139716][T23164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 570.291905][T23164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.308023][T23513] netlink: 'syz.1.8319': attribute type 1 has an invalid length. [ 570.705054][T23164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.804412][T23164] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.880044][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.887226][T14517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.978086][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.985290][T14517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.767627][T23601] openvswitch: netlink: Flow key attribute not present in set flow. [ 573.125693][T23164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.960206][T23645] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.370706][T23164] veth0_vlan: entered promiscuous mode [ 574.440009][T23164] veth1_vlan: entered promiscuous mode [ 574.602911][T23164] veth0_macvtap: entered promiscuous mode [ 574.671380][T23164] veth1_macvtap: entered promiscuous mode [ 574.787427][T23164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.855433][T23164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.988693][T14508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.058259][T14508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.121069][T14538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.198046][T14538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.490745][T14508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.553277][T14508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.692187][T15096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.755971][T15096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.945055][T23694] usbcore.quirks: string doesn't fit in 127 chars. [ 576.082925][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8377'. [ 577.702752][T23752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8391'. [ 578.102914][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8396'. [ 578.347104][T23772] openvswitch: netlink: IP tunnel dst address not specified [ 582.145036][T23902] MTRR 1 not used [ 588.077345][T24039] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 588.711103][T24056] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.8529:24056 [ 588.787239][T24058] netlink: 'syz.5.8530': attribute type 1 has an invalid length. [ 588.993918][T24064] netlink: 'syz.4.8533': attribute type 2 has an invalid length. [ 589.079271][T24066] nfsd: Unknown parameter 'batadv' [ 590.722758][T24122] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 591.904808][T24155] netlink: Conntrack attr has 5 unknown bytes [ 592.045476][T24160] program syz.1.8578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.756235][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8626'. [ 596.362755][T24321] capability: warning: `syz.1.8655' uses 32-bit capabilities (legacy support in use) [ 599.458057][T24423] nbd: illegal input index -1024 [ 600.038910][T24446] netlink: 'syz.1.8714': attribute type 1 has an invalid length. [ 601.912404][T24510] ucma_write: process 4581 (syz.1.8743) changed security contexts after opening file descriptor, this is not allowed. [ 603.042475][T24551] netlink: Invalid conntrack timeout [ 603.636685][T24574] openvswitch: netlink: IPv4 tunnel dst address is zero [ 605.185913][T24622] netlink: NAT attribute has 5 unknown bytes [ 605.558144][T14553] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 606.283183][T24657] nbd: must specify a size in bytes for the device [ 606.342044][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8815'. [ 607.080268][T24689] netlink: zone id is out of range [ 607.107251][T24689] netlink: get zone limit has 8 unknown bytes [ 613.026028][T24858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8907'. [ 613.598060][T24875] netlink: zone id is out of range [ 614.253732][T24898] netlink: 'syz.1.8926': attribute type 2 has an invalid length. [ 614.868259][T24918] openvswitch: netlink: Key type 29 is not supported [ 617.285231][T24990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8966'. [ 617.364179][T24988] NFSD: Failed to start, no listeners configured. [ 620.883870][T25101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9013'. [ 622.583451][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.593320][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.731931][T25165] netlink: 'syz.5.9043': attribute type 1 has an invalid length. [ 622.756104][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9044'. [ 623.086494][T25176] netlink: 'syz.1.9049': attribute type 12 has an invalid length. [ 623.165898][ T29] audit: type=1326 audit(4294967306.790:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25177 comm="syz.2.9050" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd53fb9e0d9 code=0x0 [ 623.203445][T25182] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 623.636843][T25198] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 625.503711][T25247] NFSD: Failed to start, no listeners configured. [ 626.605244][T25287] NFSD: Failed to start, no listeners configured. [ 627.229888][T25309] netlink: 'syz.4.9110': attribute type 11 has an invalid length. [ 628.220379][T25347] openvswitch: netlink: Message has 4 unknown bytes. [ 628.779853][T25368] openvswitch: netlink: IP tunnel dst address not specified [ 629.088243][T25360] phram: parameter too long [ 629.164674][T25358] could not allocate digest TFM handle [ 631.019228][T25434] syz.1.9167(25434): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 631.366042][T25445] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 631.521109][T25449] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 632.565139][T25480] netlink: zone id is out of range [ 632.642068][T25480] netlink: zone id is out of range [ 632.692898][T25480] netlink: zone id is out of range [ 632.738241][T25480] netlink: zone id is out of range [ 632.796947][T25480] netlink: zone id is out of range [ 632.858515][T25480] netlink: zone id is out of range [ 634.223959][T25516] net_ratelimit: 51 callbacks suppressed [ 634.223977][T25516] openvswitch: netlink: Key type 261 is out of range max 32 [ 635.461529][T25552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 637.128583][T25607] netlink: 'syz.4.9244': attribute type 4 has an invalid length. [ 637.168596][T25607] netlink: 'syz.4.9244': attribute type 1 has an invalid length. [ 639.605133][T25682] nbd: must specify an index to disconnect [ 639.869120][T25695] netlink: 'syz.4.9286': attribute type 2 has an invalid length. [ 640.520818][T14553] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 641.259786][T25743] netlink: ct family unspecified [ 641.642825][T25758] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 642.055474][T25775] openvswitch: netlink: IP tunnel dst address not specified [ 644.160621][T25851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9360'. [ 644.282090][T25856] openvswitch: netlink: Multiple metadata blocks provided [ 645.280034][T25885] netlink: 13 bytes leftover after parsing attributes in process `syz.1.9375'. [ 648.111618][T25965] netlink: 338 bytes leftover after parsing attributes in process `syz.4.9413'. [ 648.410183][ T29] audit: type=1804 audit(4294967332.171:37): pid=25969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9414" name="/newroot/2409/file0" dev="tmpfs" ino=12117 res=1 errno=0 [ 649.064524][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9423'. [ 649.587934][ T29] audit: type=1800 audit(4294967333.358:38): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9429" name=22050820 dev="tmpfs" ino=12210 res=0 errno=0 [ 649.858289][T26014] netlink: 342 bytes leftover after parsing attributes in process `syz.2.9433'. [ 650.857217][T26033] zswap: compressor û not available [ 651.576276][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9455'. [ 651.913157][T26074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9459'. [ 652.164639][T26081] sctp: [Deprecated]: syz.4.9462 (pid 26081) Use of int in maxseg socket option. [ 652.164639][T26081] Use struct sctp_assoc_value instead [ 652.396536][T26087] sctp: [Deprecated]: syz.4.9465 (pid 26087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.396536][T26087] Use struct sctp_sack_info instead [ 653.180339][T26115] openvswitch: netlink: IPv4 tunnel dst address is zero [ 653.769077][T26137] FAULT_INJECTION: forcing a failure. [ 653.769077][T26137] name failslab, interval 1, probability 0, space 0, times 0 [ 653.828680][T26137] CPU: 0 UID: 0 PID: 26137 Comm: syz.2.9489 Tainted: G U L syzkaller #0 PREEMPT(full) [ 653.828715][T26137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 653.828722][T26137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.828732][T26137] Call Trace: [ 653.828739][T26137] [ 653.828746][T26137] dump_stack_lvl+0x100/0x190 [ 653.828776][T26137] should_fail_ex.cold+0x5/0xa [ 653.828799][T26137] should_failslab+0xc2/0x120 [ 653.828827][T26137] kmem_cache_alloc_noprof+0x91/0x6a0 [ 653.828851][T26137] ? __fget_files+0x215/0x3d0 [ 653.828869][T26137] ? create_new_namespaces+0x30/0xac0 [ 653.828894][T26137] create_new_namespaces+0x30/0xac0 [ 653.828919][T26137] __do_sys_setns+0x213/0x1f30 [ 653.828941][T26137] ? __pfx___do_sys_setns+0x10/0x10 [ 653.828968][T26137] do_syscall_64+0x115/0x840 [ 653.828995][T26137] ? clear_bhb_loop+0x40/0x90 [ 653.829018][T26137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.829037][T26137] RIP: 0033:0x7fd53fb9e0d9 [ 653.829052][T26137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.829069][T26137] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 653.829087][T26137] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 653.829099][T26137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 653.829109][T26137] RBP: 00007fd53fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 653.829120][T26137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.829131][T26137] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 653.829154][T26137] [ 654.439723][T26156] Device name cannot be null; rc = [-22] [ 654.634739][T26162] netlink: Unknown conntrack attr (0) [ 655.404695][T26179] random: crng reseeded on system resumption [ 655.973452][T26194] futex_wake_op: syz.4.9514 tries to shift op by -2048; fix this program [ 656.004914][T26194] futex_wake_op: syz.4.9514 tries to shift op by -2048; fix this program [ 657.832919][T26252] netlink: 'syz.5.9539': attribute type 33 has an invalid length. [ 660.320341][ T29] audit: type=1804 audit(4294967344.143:39): pid=26334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9577" name="file0" dev="tmpfs" ino=7793 res=1 errno=0 [ 660.432176][T26338] tunl0: entered allmulticast mode [ 661.007675][T26348] FAULT_INJECTION: forcing a failure. [ 661.007675][T26348] name failslab, interval 1, probability 0, space 0, times 0 [ 661.074279][T26348] CPU: 0 UID: 0 PID: 26348 Comm: syz.5.9584 Tainted: G U L syzkaller #0 PREEMPT(full) [ 661.074312][T26348] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 661.074319][T26348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.074329][T26348] Call Trace: [ 661.074336][T26348] [ 661.074343][T26348] dump_stack_lvl+0x100/0x190 [ 661.074368][T26348] should_fail_ex.cold+0x5/0xa [ 661.074390][T26348] should_failslab+0xc2/0x120 [ 661.074415][T26348] kmem_cache_alloc_noprof+0x91/0x6a0 [ 661.074440][T26348] ? dup_fd+0x4d/0xd10 [ 661.074462][T26348] dup_fd+0x4d/0xd10 [ 661.074479][T26348] ? __pfx_get_nodes+0x10/0x10 [ 661.074509][T26348] __x64_sys_close_range+0x405/0x5d0 [ 661.074531][T26348] ? __pfx___x64_sys_close_range+0x10/0x10 [ 661.074557][T26348] do_syscall_64+0x115/0x840 [ 661.074581][T26348] ? clear_bhb_loop+0x40/0x90 [ 661.074602][T26348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.074621][T26348] RIP: 0033:0x7f5aa659e0d9 [ 661.074636][T26348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.074654][T26348] RSP: 002b:00007f5aa7500028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 661.074672][T26348] RAX: ffffffffffffffda RBX: 00007f5aa6825fa0 RCX: 00007f5aa659e0d9 [ 661.074684][T26348] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 661.074695][T26348] RBP: 00007f5aa6635024 R08: 0000000000000000 R09: 0000000000000000 [ 661.074705][T26348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.074716][T26348] R13: 00007f5aa6826038 R14: 00007f5aa6825fa0 R15: 00007fff3660bf58 [ 661.074738][T26348] [ 661.359410][T26356] netlink: 'syz.5.9589': attribute type 2 has an invalid length. [ 663.278641][T26410] FAULT_INJECTION: forcing a failure. [ 663.278641][T26410] name failslab, interval 1, probability 0, space 0, times 0 [ 663.337379][T26410] CPU: 0 UID: 0 PID: 26410 Comm: syz.5.9608 Tainted: G U L syzkaller #0 PREEMPT(full) [ 663.337413][T26410] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 663.337420][T26410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.337431][T26410] Call Trace: [ 663.337437][T26410] [ 663.337444][T26410] dump_stack_lvl+0x100/0x190 [ 663.337470][T26410] should_fail_ex.cold+0x5/0xa [ 663.337490][T26410] should_failslab+0xc2/0x120 [ 663.337547][T26410] __kmalloc_noprof+0xfc/0x820 [ 663.337570][T26410] ? sk_prot_alloc+0x10b/0x2a0 [ 663.337650][T26410] sk_prot_alloc+0x10b/0x2a0 [ 663.337671][T26410] sk_alloc+0x36/0xe80 [ 663.337698][T26410] alg_create+0x9e/0x150 [ 663.337763][T26410] __sock_create+0x339/0x860 [ 663.337788][T26410] __sys_socket+0x14d/0x260 [ 663.337810][T26410] ? __pfx___sys_socket+0x10/0x10 [ 663.337837][T26410] __x64_sys_socket+0x72/0xb0 [ 663.337857][T26410] ? lockdep_hardirqs_on+0x78/0x100 [ 663.337882][T26410] do_syscall_64+0x115/0x840 [ 663.337906][T26410] ? clear_bhb_loop+0x40/0x90 [ 663.337928][T26410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.337947][T26410] RIP: 0033:0x7f5aa659e0d9 [ 663.337963][T26410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.337981][T26410] RSP: 002b:00007f5aa7500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 663.337999][T26410] RAX: ffffffffffffffda RBX: 00007f5aa6825fa0 RCX: 00007f5aa659e0d9 [ 663.338026][T26410] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 663.338038][T26410] RBP: 00007f5aa6635024 R08: 0000000000000000 R09: 0000000000000000 [ 663.338049][T26410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.338059][T26410] R13: 00007f5aa6826038 R14: 00007f5aa6825fa0 R15: 00007fff3660bf58 [ 663.338082][T26410] [ 664.685602][T26445] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 665.318246][T26470] FAULT_INJECTION: forcing a failure. [ 665.318246][T26470] name failslab, interval 1, probability 0, space 0, times 0 [ 665.338914][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9635'. [ 665.386427][T26470] CPU: 0 UID: 0 PID: 26470 Comm: syz.5.9634 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.386461][T26470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.386468][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.386478][T26470] Call Trace: [ 665.386485][T26470] [ 665.386492][T26470] dump_stack_lvl+0x100/0x190 [ 665.386518][T26470] should_fail_ex.cold+0x5/0xa [ 665.386539][T26470] should_failslab+0xc2/0x120 [ 665.386565][T26470] kmem_cache_alloc_noprof+0x91/0x6a0 [ 665.386590][T26470] ? anon_vma_clone+0x2ba/0xcd0 [ 665.386622][T26470] anon_vma_clone+0x2ba/0xcd0 [ 665.386656][T26470] __split_vma+0x51f/0xda0 [ 665.386678][T26470] ? __pfx___split_vma+0x10/0x10 [ 665.386696][T26470] ? vma_link+0x5ee/0x8d0 [ 665.386725][T26470] vms_gather_munmap_vmas+0x1d2/0x1720 [ 665.386750][T26470] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 665.386770][T26470] ? alloc_new_pud+0x217/0x320 [ 665.386788][T26470] ? get_old_pud+0xd8/0x360 [ 665.386807][T26470] ? move_page_tables+0x11c/0x4610 [ 665.386829][T26470] ? __pfx_copy_vma+0x10/0x10 [ 665.386856][T26470] do_vmi_align_munmap+0x287/0x5f0 [ 665.386879][T26470] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 665.386937][T26470] do_vmi_munmap+0x1f8/0x3e0 [ 665.386960][T26470] move_vma+0xe5b/0x1920 [ 665.386983][T26470] ? __pfx_move_vma+0x10/0x10 [ 665.387006][T26470] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 665.387041][T26470] ? vrm_set_new_addr+0x204/0x290 [ 665.387063][T26470] mremap_to+0x234/0x4c0 [ 665.387082][T26470] ? mas_walk+0x6ef/0x9b0 [ 665.387107][T26470] ? __pfx_mremap_to+0x10/0x10 [ 665.387125][T26470] ? check_prep_vma+0x912/0xe60 [ 665.387153][T26470] __do_sys_mremap+0x88c/0x1850 [ 665.387182][T26470] ? __pfx___do_sys_mremap+0x10/0x10 [ 665.387201][T26470] ? ksys_write+0x190/0x250 [ 665.387225][T26470] ? __pfx_do_futex+0x10/0x10 [ 665.387252][T26470] ? __x64_sys_futex+0x34f/0x4d0 [ 665.387286][T26470] do_syscall_64+0x115/0x840 [ 665.387309][T26470] ? clear_bhb_loop+0x40/0x90 [ 665.387331][T26470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.387350][T26470] RIP: 0033:0x7f5aa659e0d9 [ 665.387365][T26470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.387383][T26470] RSP: 002b:00007f5aa7500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 665.387401][T26470] RAX: ffffffffffffffda RBX: 00007f5aa6825fa0 RCX: 00007f5aa659e0d9 [ 665.387413][T26470] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 665.387423][T26470] RBP: 00007f5aa6635024 R08: 0000000100000000 R09: 0000000000000000 [ 665.387434][T26470] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 665.387445][T26470] R13: 00007f5aa6826038 R14: 00007f5aa6825fa0 R15: 00007fff3660bf58 [ 665.387468][T26470] [ 665.901951][T26479] FAULT_INJECTION: forcing a failure. [ 665.901951][T26479] name failslab, interval 1, probability 0, space 0, times 0 [ 665.914826][T26479] CPU: 0 UID: 0 PID: 26479 Comm: syz.2.9639 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.914868][T26479] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.914876][T26479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.914887][T26479] Call Trace: [ 665.914893][T26479] [ 665.914900][T26479] dump_stack_lvl+0x100/0x190 [ 665.914926][T26479] should_fail_ex.cold+0x5/0xa [ 665.914947][T26479] should_failslab+0xc2/0x120 [ 665.914973][T26479] __kmalloc_noprof+0xfc/0x820 [ 665.914995][T26479] ? sk_prot_alloc+0x10b/0x2a0 [ 665.915019][T26479] sk_prot_alloc+0x10b/0x2a0 [ 665.915038][T26479] sk_alloc+0x36/0xe80 [ 665.915064][T26479] mctp_pf_create+0xe8/0x360 [ 665.915142][T26479] __sock_create+0x339/0x860 [ 665.915167][T26479] __sys_socket+0x14d/0x260 [ 665.915188][T26479] ? __pfx___sys_socket+0x10/0x10 [ 665.915217][T26479] __x64_sys_socket+0x72/0xb0 [ 665.915239][T26479] ? lockdep_hardirqs_on+0x78/0x100 [ 665.915263][T26479] do_syscall_64+0x115/0x840 [ 665.915286][T26479] ? clear_bhb_loop+0x40/0x90 [ 665.915308][T26479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.915326][T26479] RIP: 0033:0x7fd53fb9e0d9 [ 665.915343][T26479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.915360][T26479] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 665.915378][T26479] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 665.915390][T26479] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 665.915400][T26479] RBP: 00007fd53fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 665.915411][T26479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.915421][T26479] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 665.915444][T26479] [ 666.266379][T26487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9644'. [ 667.035790][T26508] FAULT_INJECTION: forcing a failure. [ 667.035790][T26508] name failslab, interval 1, probability 0, space 0, times 0 [ 667.050523][T26510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9654'. [ 667.098002][T26508] CPU: 0 UID: 0 PID: 26508 Comm: syz.2.9653 Tainted: G U L syzkaller #0 PREEMPT(full) [ 667.098037][T26508] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 667.098044][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.098055][T26508] Call Trace: [ 667.098061][T26508] [ 667.098069][T26508] dump_stack_lvl+0x100/0x190 [ 667.098095][T26508] should_fail_ex.cold+0x5/0xa [ 667.098117][T26508] should_failslab+0xc2/0x120 [ 667.098143][T26508] __kmalloc_noprof+0xfc/0x820 [ 667.098165][T26508] ? trace_kmalloc+0xeb/0x110 [ 667.098190][T26508] ? lsm_blob_alloc+0x68/0x90 [ 667.098213][T26508] lsm_blob_alloc+0x68/0x90 [ 667.098231][T26508] security_sk_alloc+0x2d/0x290 [ 667.098253][T26508] sk_prot_alloc+0x12a/0x2a0 [ 667.098275][T26508] sk_alloc+0x36/0xe80 [ 667.098299][T26508] __netlink_create+0x5e/0x2c0 [ 667.098393][T26508] ? __wake_up+0x3f/0x60 [ 667.098419][T26508] netlink_create+0x29b/0x610 [ 667.098452][T26508] ? __pfx_genl_bind+0x10/0x10 [ 667.098474][T26508] ? __pfx_genl_unbind+0x10/0x10 [ 667.098495][T26508] ? __pfx_genl_release+0x10/0x10 [ 667.098519][T26508] __sock_create+0x339/0x860 [ 667.098544][T26508] __sys_socket+0x14d/0x260 [ 667.098564][T26508] ? exc_page_fault+0x6f/0xd0 [ 667.098590][T26508] ? __pfx___sys_socket+0x10/0x10 [ 667.098617][T26508] __x64_sys_socket+0x72/0xb0 [ 667.098636][T26508] ? lockdep_hardirqs_on+0x78/0x100 [ 667.098659][T26508] do_syscall_64+0x115/0x840 [ 667.098682][T26508] ? clear_bhb_loop+0x40/0x90 [ 667.098704][T26508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.098723][T26508] RIP: 0033:0x7fd53fb9f947 [ 667.098739][T26508] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.098757][T26508] RSP: 002b:00007fd54097ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 667.098775][T26508] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9f947 [ 667.098786][T26508] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 667.098797][T26508] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 667.098807][T26508] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 667.098818][T26508] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 667.098841][T26508] [ 669.297941][T26574] FAULT_INJECTION: forcing a failure. [ 669.297941][T26574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 669.358816][T26574] CPU: 0 UID: 0 PID: 26574 Comm: syz.5.9682 Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.358849][T26574] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.358856][T26574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.358867][T26574] Call Trace: [ 669.358873][T26574] [ 669.358881][T26574] dump_stack_lvl+0x100/0x190 [ 669.358906][T26574] should_fail_ex.cold+0x5/0xa [ 669.358927][T26574] strncpy_from_user+0x3b/0x2d0 [ 669.358960][T26574] do_getname+0x78/0x390 [ 669.358993][T26574] user_path_at+0x26/0x60 [ 669.359022][T26574] __x64_sys_mount+0x1fb/0x310 [ 669.359099][T26574] ? __pfx___x64_sys_mount+0x10/0x10 [ 669.359127][T26574] do_syscall_64+0x115/0x840 [ 669.359152][T26574] ? clear_bhb_loop+0x40/0x90 [ 669.359178][T26574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.359197][T26574] RIP: 0033:0x7f5aa659e0d9 [ 669.359213][T26574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.359231][T26574] RSP: 002b:00007f5aa7500028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 669.359249][T26574] RAX: ffffffffffffffda RBX: 00007f5aa6825fa0 RCX: 00007f5aa659e0d9 [ 669.359260][T26574] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 669.359271][T26574] RBP: 00007f5aa6635024 R08: 0000000000000000 R09: 0000000000000000 [ 669.359282][T26574] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 669.359293][T26574] R13: 00007f5aa6826038 R14: 00007f5aa6825fa0 R15: 00007fff3660bf58 [ 669.359316][T26574] [ 670.733917][T26615] netlink: 186 bytes leftover after parsing attributes in process `syz.1.9699'. [ 671.725817][T26641] FAULT_INJECTION: forcing a failure. [ 671.725817][T26641] name failslab, interval 1, probability 0, space 0, times 0 [ 671.787326][T26641] CPU: 0 UID: 0 PID: 26641 Comm: syz.5.9712 Tainted: G U L syzkaller #0 PREEMPT(full) [ 671.787360][T26641] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 671.787367][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.787377][T26641] Call Trace: [ 671.787384][T26641] [ 671.787391][T26641] dump_stack_lvl+0x100/0x190 [ 671.787417][T26641] should_fail_ex.cold+0x5/0xa [ 671.787438][T26641] should_failslab+0xc2/0x120 [ 671.787468][T26641] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 671.787495][T26641] ? __d_alloc+0x35/0xa50 [ 671.787519][T26641] __d_alloc+0x35/0xa50 [ 671.787542][T26641] d_alloc_pseudo+0x1c/0xc0 [ 671.787568][T26641] alloc_file_pseudo+0x118/0x290 [ 671.787592][T26641] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 671.787616][T26641] ? hugetlbfs_get_inode+0x3f5/0x700 [ 671.787698][T26641] hugetlb_file_setup+0x2a8/0x5b0 [ 671.787725][T26641] ksys_mmap_pgoff+0x242/0x610 [ 671.787753][T26641] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 671.787779][T26641] ? xfd_validate_state+0x129/0x190 [ 671.787807][T26641] __x64_sys_mmap+0x125/0x190 [ 671.787840][T26641] do_syscall_64+0x115/0x840 [ 671.787865][T26641] ? clear_bhb_loop+0x40/0x90 [ 671.787887][T26641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.787907][T26641] RIP: 0033:0x7f5aa659e0d9 [ 671.787924][T26641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.787942][T26641] RSP: 002b:00007f5aa7500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 671.787961][T26641] RAX: ffffffffffffffda RBX: 00007f5aa6825fa0 RCX: 00007f5aa659e0d9 [ 671.787972][T26641] RDX: 000000000000000b RSI: 0000000000004005 RDI: 0000000000000000 [ 671.787983][T26641] RBP: 00007f5aa6635024 R08: 0000000000000401 R09: 0000300000000000 [ 671.787994][T26641] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 671.788005][T26641] R13: 00007f5aa6826038 R14: 00007f5aa6825fa0 R15: 00007fff3660bf58 [ 671.788027][T26641] [ 673.703252][T26688] ovs_ÿþ: entered promiscuous mode [ 674.107118][T26700] FAULT_INJECTION: forcing a failure. [ 674.107118][T26700] name failslab, interval 1, probability 0, space 0, times 0 [ 674.165038][T26700] CPU: 0 UID: 0 PID: 26700 Comm: syz.2.9738 Tainted: G U L syzkaller #0 PREEMPT(full) [ 674.165071][T26700] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 674.165078][T26700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.165089][T26700] Call Trace: [ 674.165095][T26700] [ 674.165102][T26700] dump_stack_lvl+0x100/0x190 [ 674.165128][T26700] should_fail_ex.cold+0x5/0xa [ 674.165149][T26700] should_failslab+0xc2/0x120 [ 674.165175][T26700] __kmalloc_cache_noprof+0x91/0x6c0 [ 674.165194][T26700] ? find_held_lock+0x2b/0x80 [ 674.165216][T26700] ? rcu_read_unlock+0x17/0x60 [ 674.165243][T26700] ? alloc_mnt_ns+0xce/0x520 [ 674.165274][T26700] alloc_mnt_ns+0xce/0x520 [ 674.165302][T26700] copy_mnt_ns+0x308/0x1180 [ 674.165327][T26700] ? rcu_is_watching+0x12/0xc0 [ 674.165350][T26700] ? __pfx_copy_mnt_ns+0x10/0x10 [ 674.165372][T26700] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 674.165395][T26700] ? create_new_namespaces+0x30/0xac0 [ 674.165418][T26700] create_new_namespaces+0xd3/0xac0 [ 674.165437][T26700] ? bpf_lsm_capable+0x9/0x10 [ 674.165457][T26700] ? security_capable+0x80/0x260 [ 674.165480][T26700] unshare_nsproxy_namespaces+0xf2/0x220 [ 674.165502][T26700] ksys_unshare+0x438/0xab0 [ 674.165527][T26700] ? __pfx_ksys_unshare+0x10/0x10 [ 674.165557][T26700] __x64_sys_unshare+0x31/0x40 [ 674.165580][T26700] do_syscall_64+0x115/0x840 [ 674.165604][T26700] ? clear_bhb_loop+0x40/0x90 [ 674.165626][T26700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.165645][T26700] RIP: 0033:0x7fd53fb9e0d9 [ 674.165661][T26700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.165679][T26700] RSP: 002b:00007fd540980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 674.165697][T26700] RAX: ffffffffffffffda RBX: 00007fd53fe25fa0 RCX: 00007fd53fb9e0d9 [ 674.165709][T26700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 674.165719][T26700] RBP: 00007fd53fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 674.165730][T26700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.165741][T26700] R13: 00007fd53fe26038 R14: 00007fd53fe25fa0 R15: 00007ffcf97f35a8 [ 674.165763][T26700] [ 674.480430][T26703] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 674.489617][T26703] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.821074][T26746] sd 0:0:1:0: PR command failed: 1026 [ 675.853298][T26746] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 675.881174][T26746] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 676.037562][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9764'. [ 676.300304][T26763] bridge0: port 3(batadv0) entered blocking state [ 676.336125][T26763] bridge0: port 3(batadv0) entered disabled state [ 676.362446][T26763] batadv0: entered allmulticast mode [ 676.388199][T26763] batadv0: entered promiscuous mode [ 676.407906][T26763] bridge0: port 3(batadv0) entered blocking state [ 676.416851][T26763] bridge0: port 3(batadv0) entered forwarding state [ 676.481898][T14538] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 676.491531][T14538] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 677.007558][T26776] ovs_ÿþ: entered promiscuous mode [ 677.063850][T26779] ovs_?: entered promiscuous mode [ 678.449829][T26832] bridge0: port 3(batadv0) entered blocking state [ 678.481922][T26832] bridge0: port 3(batadv0) entered disabled state [ 678.506277][T26832] batadv0: entered allmulticast mode [ 678.541604][T26832] batadv0: entered promiscuous mode [ 678.563610][T26832] bridge0: port 3(batadv0) entered blocking state [ 678.570189][T26832] bridge0: port 3(batadv0) entered forwarding state [ 678.586087][T26827] zswap: compressor û not available [ 679.018030][T14538] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 679.028996][T14538] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 679.937504][ T29] audit: type=1800 audit(4294967363.858:40): pid=26881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9820" name=04 dev="tmpfs" ino=12505 res=0 errno=0 [ 680.684606][T14553] Bluetooth: hci0: command 0x0406 tx timeout [ 681.282282][T19196] Bluetooth: hci3: Malformed Event: 0x13 [ 681.309790][T26929] bridge0: port 3(batadv0) entered blocking state [ 681.348667][T26929] bridge0: port 3(batadv0) entered disabled state [ 681.388052][T26929] batadv0: entered allmulticast mode [ 681.430531][T26929] batadv0: entered promiscuous mode [ 681.455814][T26929] bridge0: port 3(batadv0) entered blocking state [ 681.462526][T26929] bridge0: port 3(batadv0) entered forwarding state [ 681.560239][T14519] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 681.569959][T14519] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 682.224266][T26961] netlink: 'syz.5.9857': attribute type 1 has an invalid length. [ 682.759339][T26980] FAULT_INJECTION: forcing a failure. [ 682.759339][T26980] name failslab, interval 1, probability 0, space 0, times 0 [ 682.834927][T26980] CPU: 0 UID: 0 PID: 26980 Comm: syz.1.9867 Tainted: G U L syzkaller #0 PREEMPT(full) [ 682.834961][T26980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 682.834968][T26980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.834978][T26980] Call Trace: [ 682.834985][T26980] [ 682.834993][T26980] dump_stack_lvl+0x100/0x190 [ 682.835019][T26980] should_fail_ex.cold+0x5/0xa [ 682.835040][T26980] should_failslab+0xc2/0x120 [ 682.835067][T26980] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 682.835096][T26980] ? __d_alloc+0x35/0xa50 [ 682.835121][T26980] __d_alloc+0x35/0xa50 [ 682.835143][T26980] d_alloc+0x4a/0x1e0 [ 682.835165][T26980] lookup_one_qstr_excl+0x171/0x250 [ 682.835188][T26980] ? mnt_want_write+0x161/0x410 [ 682.835216][T26980] filename_create+0x1cf/0x400 [ 682.835244][T26980] ? __pfx_filename_create+0x10/0x10 [ 682.835280][T26980] filename_mknodat+0x190/0x7f0 [ 682.835303][T26980] ? __pfx_filename_mknodat+0x10/0x10 [ 682.835323][T26980] ? strncpy_from_user+0x19d/0x2d0 [ 682.835353][T26980] ? do_getname+0x191/0x390 [ 682.835378][T26980] __x64_sys_mknod+0x8f/0xc0 [ 682.835399][T26980] do_syscall_64+0x115/0x840 [ 682.835423][T26980] ? clear_bhb_loop+0x40/0x90 [ 682.835445][T26980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.835464][T26980] RIP: 0033:0x7f9301f9e0d9 [ 682.835480][T26980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.835498][T26980] RSP: 002b:00007f9302e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 682.835516][T26980] RAX: ffffffffffffffda RBX: 00007f9302225fa0 RCX: 00007f9301f9e0d9 [ 682.835527][T26980] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 682.835538][T26980] RBP: 00007f9302035024 R08: 0000000000000000 R09: 0000000000000000 [ 682.835549][T26980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.835559][T26980] R13: 00007f9302226038 R14: 00007f9302225fa0 R15: 00007ffec520d658 [ 682.835584][T26980] [ 683.070629][T26988] vivid-007: ================= START STATUS ================= [ 683.078838][T26988] vivid-007: Generate PTS: true [ 683.085367][T26988] vivid-007: Generate SCR: true [ 683.090692][T26988] tpg source WxH: 320x240 (Y'CbCr) [ 683.095887][T26988] tpg field: 1 [ 683.100701][T26988] tpg crop: (0,0)/320x240 [ 683.105068][T26988] tpg compose: (0,0)/320x240 [ 683.109711][T26988] tpg colorspace: 8 [ 683.113517][T26988] tpg transfer function: 0/0 [ 683.118282][T26988] tpg Y'CbCr encoding: 0/0 [ 683.122926][T26988] tpg quantization: 0/0 [ 683.127189][T26988] tpg RGB range: 0/2 [ 683.131084][T26988] vivid-007: ================== END STATUS ================== [ 683.747533][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.758425][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.439513][T27028] netlink: 82 bytes leftover after parsing attributes in process `syz.5.9888'. [ 684.873094][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9894'. [ 684.901969][ T29] audit: type=1800 audit(4294967368.844:41): pid=27043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9895" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 685.834993][T27067] input: f¬ as /devices/virtual/input/input23 [ 685.869749][T27071] dlm: non-version read from control device 2147479540 [ 687.289800][T27118] bridge0: port 4(veth0_to_bridge) entered blocking state [ 687.314162][T27118] bridge0: port 4(veth0_to_bridge) entered disabled state [ 687.347842][T27118] veth0_to_bridge: entered allmulticast mode [ 687.390698][T27118] veth0_to_bridge: entered promiscuous mode [ 687.427492][T27118] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.509489][T27118] bridge0: port 4(veth0_to_bridge) entered blocking state [ 687.516831][T27118] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 688.209045][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9939'. [ 688.561519][T27162] bridge_slave_0: left allmulticast mode [ 688.595766][T27162] bridge_slave_0: left promiscuous mode [ 688.628274][T27162] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.560507][T27267] netlink: 346 bytes leftover after parsing attributes in process `syz.5.9996'. [ 692.962297][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10002'. [ 693.977434][T27312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10017'. [ 698.987179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.001153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.014419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.026875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.039704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.052257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.065096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.077687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.090664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.103152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.968057][ C0] net_ratelimit: 8489 callbacks suppressed [ 703.968076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.986854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.999339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.012326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.024851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.037927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.050498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.063555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.075990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.088837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.952181][ C0] net_ratelimit: 8424 callbacks suppressed [ 708.952200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.971743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.984055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.997036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.009966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.022251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.035041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.047918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.060514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.073297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.936036][ C0] net_ratelimit: 9168 callbacks suppressed [ 713.936057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.955059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.967389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.979939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 713.992560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.005278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.017735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.030549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 714.043196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.056017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.920539][ C0] net_ratelimit: 9126 callbacks suppressed [ 718.920559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.939168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.951448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.963995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 718.976631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.989320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.001564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.014121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 719.026695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.039514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.904326][ C0] net_ratelimit: 9293 callbacks suppressed [ 723.904347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 723.922901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.935946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.948226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.961406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 723.973989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.986961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.999637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.012268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 724.024809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.888443][ C0] net_ratelimit: 9292 callbacks suppressed [ 728.888465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.906629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.919220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 728.931760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.944516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.956776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.969439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 728.982051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.995102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.008556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.872419][ C0] net_ratelimit: 9135 callbacks suppressed [ 733.872441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.890935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 733.903552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.916538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.928911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.942228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 733.955098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.968214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.980715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.993399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 738.856360][ C0] net_ratelimit: 9149 callbacks suppressed [ 738.856380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.874717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.887437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 738.900384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.914736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.927140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.939800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 738.952537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.965630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.978570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.840732][ C0] net_ratelimit: 9202 callbacks suppressed [ 743.840754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.859180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.871978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 743.884549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.897411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.909783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.922327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 743.934887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.947612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.959979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.936790][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.951362][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.824673][ C0] net_ratelimit: 9250 callbacks suppressed [ 748.824693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.843104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.855782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 748.868541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.881491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.893846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.906670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 748.919302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.932119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.944393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.808575][ C0] net_ratelimit: 9225 callbacks suppressed [ 753.808594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.827402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.839728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.853063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 753.865909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.878874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.891375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.903980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 753.916663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.929426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.792953][ C0] net_ratelimit: 9173 callbacks suppressed [ 758.792973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 758.811554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.824476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.836779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.849459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 758.862280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.875060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.887354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.899910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 758.912683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.777137][ C0] net_ratelimit: 9155 callbacks suppressed [ 763.777160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.795845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.808131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.820765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 763.833335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.846050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.858333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.870919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 763.883588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.896383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.761264][ C0] net_ratelimit: 9247 callbacks suppressed [ 768.761285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.779702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.792424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 768.805103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.818006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.830594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.843211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 768.855893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.868866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.881296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.744979][ C0] net_ratelimit: 9214 callbacks suppressed [ 773.745000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.763176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.776372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 773.789012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.801902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.814195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.826816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 773.839560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.852455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.864863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.729196][ C0] net_ratelimit: 9128 callbacks suppressed [ 778.729224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 778.747740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.760464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.772918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.785406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 778.798089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.810999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.823247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.835842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 778.848523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.713076][ C0] net_ratelimit: 9075 callbacks suppressed [ 783.713096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.731738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.744117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.756773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 783.769460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.782738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.795049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.807777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 783.820415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.833213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.697208][ C0] net_ratelimit: 9143 callbacks suppressed [ 788.697229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.715556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.728768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 788.741534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.754470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.766831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.779456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 788.792225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.805163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.817570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.681450][ C0] net_ratelimit: 9129 callbacks suppressed [ 793.681473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.700199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.712523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.725228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 793.737878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.750984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.763421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.776117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 793.788768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.802542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.665816][ C0] net_ratelimit: 9258 callbacks suppressed [ 798.665836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.684491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.696794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.709460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 798.722011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.734876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.747140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.759777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 798.772327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.785098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.649739][ C0] net_ratelimit: 9226 callbacks suppressed [ 803.649758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.668604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.681009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.693582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 803.706228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.719065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.731457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.743979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 803.757076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.769923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.633922][ C0] net_ratelimit: 7855 callbacks suppressed [ 808.633943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.652322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.665824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 808.678553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.691459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.704012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.717544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 808.730531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.743324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.755658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.329399][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 811.336400][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23681/1:b..l P19540/1:b..l P24991/1:b..l [ 811.347390][ C0] rcu: (detected by 0, t=10502 jiffies, g=210565, q=1334 ncpus=1) [ 811.355277][ C0] task:udevd state:R running task stack:27592 pid:24991 tgid:24991 ppid:4993 task_flags:0x40014c flags:0x00080001 [ 811.369707][ C0] Call Trace: [ 811.372994][ C0] [ 811.375928][ C0] __schedule+0x125c/0x6730 [ 811.380443][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 811.385661][ C0] ? __pfx___schedule+0x10/0x10 [ 811.390512][ C0] ? rcu_is_watching+0x12/0xc0 [ 811.395275][ C0] ? arch_irq_work_raise+0x59/0x70 [ 811.400383][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 811.405757][ C0] preempt_schedule_common+0x42/0xc0 [ 811.411040][ C0] preempt_schedule_thunk+0x16/0x40 [ 811.416243][ C0] ? irq_work_queue+0xc5/0x100 [ 811.421005][ C0] ? irq_work_queue+0xf5/0x100 [ 811.425761][ C0] irq_work_queue+0xfa/0x100 [ 811.430370][ C0] netlink_release+0x1bff/0x1ff0 [ 811.435357][ C0] ? netlink_release+0x1e0/0x1ff0 [ 811.440406][ C0] ? __pfx_netlink_release+0x10/0x10 [ 811.445715][ C0] ? __pfx_locks_remove_file+0x10/0x10 [ 811.451249][ C0] __sock_release+0xb3/0x260 [ 811.455866][ C0] ? __pfx_sock_close+0x10/0x10 [ 811.460813][ C0] sock_close+0x1c/0x30 [ 811.465002][ C0] __fput+0x3ff/0xb50 [ 811.469002][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.474301][ C0] task_work_run+0x150/0x240 [ 811.478965][ C0] ? __pfx_task_work_run+0x10/0x10 [ 811.484091][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 811.489327][ C0] do_exit+0x951/0x2ae0 [ 811.493490][ C0] ? do_raw_spin_lock+0x128/0x260 [ 811.498517][ C0] ? __pfx_do_exit+0x10/0x10 [ 811.503145][ C0] ? do_group_exit+0x1bd/0x2a0 [ 811.507908][ C0] ? rcu_is_watching+0x12/0xc0 [ 811.512758][ C0] do_group_exit+0xd5/0x2a0 [ 811.517362][ C0] __x64_sys_exit_group+0x3e/0x50 [ 811.522394][ C0] x64_sys_call+0x102c/0x1530 [ 811.527169][ C0] do_syscall_64+0x115/0x840 [ 811.531849][ C0] ? clear_bhb_loop+0x40/0x90 [ 811.536540][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.542450][ C0] RIP: 0033:0x7f88c6cf16c5 [ 811.546886][ C0] RSP: 002b:00007ffcf2f5f938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 811.555409][ C0] RAX: ffffffffffffffda RBX: 000055fa062914d0 RCX: 00007f88c6cf16c5 [ 811.563379][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 811.571437][ C0] RBP: 000055fa0626e910 R08: 0000000000000000 R09: 0000000000000000 [ 811.579493][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.587473][ C0] R13: 00007ffcf2f5f980 R14: 0000000000000000 R15: 0000000000000000 [ 811.595537][ C0] [ 811.598560][ C0] task:kworker/0:0 state:R running task stack:25640 pid:19540 tgid:19540 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 811.612171][ C0] Workqueue: events_power_efficient gc_worker [ 811.618316][ C0] Call Trace: [ 811.621592][ C0] [ 811.624527][ C0] __schedule+0x125c/0x6730 [ 811.629037][ C0] ? debug_object_activate+0x343/0x4b0 [ 811.634530][ C0] ? debug_object_activate+0x343/0x4b0 [ 811.639999][ C0] ? debug_object_activate+0x343/0x4b0 [ 811.645464][ C0] ? __pfx___schedule+0x10/0x10 [ 811.650316][ C0] ? mark_held_locks+0x40/0x70 [ 811.655198][ C0] preempt_schedule_irq+0x50/0x90 [ 811.660241][ C0] irqentry_exit+0x205/0xa00 [ 811.665027][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 811.671215][ C0] RIP: 0010:gc_worker+0x2bf/0x1a10 [ 811.676353][ C0] Code: 00 00 48 c7 c7 a8 62 23 91 e8 4d 2d 0c f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 6b 76 30 f8 58 48 85 db 0f 85 32 13 00 00 bc 7b 30 f8 8b 1d 56 2d 4a 07 89 dd 31 ff 83 e5 01 89 ee e8 18 [ 811.695964][ C0] RSP: 0018:ffffc90003fd7b48 EFLAGS: 00000293 [ 811.702031][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89d94311 [ 811.709998][ C0] RDX: ffff888077a43e00 RSI: ffffffff89d94320 RDI: ffff888077a43e00 [ 811.717962][ C0] RBP: ffff888026000000 R08: 0000000000000007 R09: 0000000000000000 [ 811.725938][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 811.733922][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: 00000000000031d7 [ 811.741908][ C0] ? gc_worker+0x1091/0x1a10 [ 811.746504][ C0] ? gc_worker+0x10a0/0x1a10 [ 811.751103][ C0] ? gc_worker+0x10a0/0x1a10 [ 811.755708][ C0] ? __pfx_gc_worker+0x10/0x10 [ 811.760471][ C0] ? rcu_is_watching+0x12/0xc0 [ 811.765233][ C0] process_one_work+0xa23/0x1940 [ 811.770195][ C0] ? __pfx_process_one_work+0x10/0x10 [ 811.775597][ C0] ? __pfx_gc_worker+0x10/0x10 [ 811.780401][ C0] worker_thread+0x5ef/0xe50 [ 811.785026][ C0] ? __pfx_worker_thread+0x10/0x10 [ 811.790180][ C0] ? kthread+0x13a/0x450 [ 811.794438][ C0] ? __pfx_worker_thread+0x10/0x10 [ 811.799555][ C0] kthread+0x370/0x450 [ 811.803636][ C0] ? __pfx_kthread+0x10/0x10 [ 811.808230][ C0] ret_from_fork+0x72b/0xd50 [ 811.812821][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 811.817930][ C0] ? __switch_to+0x800/0x10f0 [ 811.822663][ C0] ? __switch_to_asm+0x39/0x70 [ 811.827428][ C0] ? __pfx_kthread+0x10/0x10 [ 811.832040][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.836816][ C0] [ 811.839843][ C0] task:udevd state:R running task stack:27464 pid:23681 tgid:23681 ppid:4993 task_flags:0x40014c flags:0x00080001 [ 811.853328][ C0] Call Trace: [ 811.856615][ C0] [ 811.859553][ C0] __schedule+0x125c/0x6730 [ 811.864066][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 811.869292][ C0] ? __pfx___schedule+0x10/0x10 [ 811.874181][ C0] ? rcu_is_watching+0x12/0xc0 [ 811.878968][ C0] ? arch_irq_work_raise+0x59/0x70 [ 811.884096][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 811.889499][ C0] preempt_schedule_common+0x42/0xc0 [ 811.894809][ C0] preempt_schedule_thunk+0x16/0x40 [ 811.900016][ C0] ? irq_work_queue+0xc5/0x100 [ 811.904780][ C0] ? irq_work_queue+0xf5/0x100 [ 811.909540][ C0] irq_work_queue+0xfa/0x100 [ 811.914212][ C0] netlink_release+0x1bff/0x1ff0 [ 811.919255][ C0] ? netlink_release+0x1e0/0x1ff0 [ 811.924485][ C0] ? __pfx_netlink_release+0x10/0x10 [ 811.929869][ C0] ? __pfx_locks_remove_file+0x10/0x10 [ 811.935337][ C0] __sock_release+0xb3/0x260 [ 811.939950][ C0] ? __pfx_sock_close+0x10/0x10 [ 811.944807][ C0] sock_close+0x1c/0x30 [ 811.948974][ C0] __fput+0x3ff/0xb50 [ 811.952960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.958199][ C0] task_work_run+0x150/0x240 [ 811.962812][ C0] ? __pfx_task_work_run+0x10/0x10 [ 811.968009][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 811.973306][ C0] do_exit+0x951/0x2ae0 [ 811.977474][ C0] ? do_raw_spin_lock+0x128/0x260 [ 811.982510][ C0] ? __pfx_do_exit+0x10/0x10 [ 811.987099][ C0] ? do_group_exit+0x1bd/0x2a0 [ 811.991867][ C0] ? rcu_is_watching+0x12/0xc0 [ 811.996631][ C0] do_group_exit+0xd5/0x2a0 [ 812.001135][ C0] __x64_sys_exit_group+0x3e/0x50 [ 812.006163][ C0] x64_sys_call+0x102c/0x1530 [ 812.010899][ C0] do_syscall_64+0x115/0x840 [ 812.015580][ C0] ? clear_bhb_loop+0x40/0x90 [ 812.020275][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.026193][ C0] RIP: 0033:0x7f88c6cf16c5 [ 812.030621][ C0] RSP: 002b:00007ffcf2f5f938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 812.039036][ C0] RAX: ffffffffffffffda RBX: 000055fa062823b0 RCX: 00007f88c6cf16c5 [ 812.047097][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 812.055085][ C0] RBP: 000055fa0626e910 R08: 0000000000000000 R09: 0000000000000000 [ 812.063143][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.071125][ C0] R13: 00007ffcf2f5f980 R14: 0000000000000000 R15: 0000000000000000 [ 812.079117][ C0] [ 812.082128][ C0] rcu: rcu_preempt kthread starved for 552 jiffies! g210565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 812.093348][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 812.103480][ C0] rcu: RCU grace-period kthread stack dump: [ 812.109357][ C0] task:rcu_preempt state:R running task stack:26344 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 812.122924][ C0] Call Trace: [ 812.126209][ C0] [ 812.129149][ C0] __schedule+0x125c/0x6730 [ 812.133674][ C0] ? __pfx___schedule+0x10/0x10 [ 812.138521][ C0] ? find_held_lock+0x2b/0x80 [ 812.143197][ C0] ? schedule+0x225/0x2c0 [ 812.147522][ C0] schedule+0xdd/0x2c0 [ 812.151591][ C0] schedule_timeout+0x127/0x280 [ 812.156437][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 812.161817][ C0] ? __pfx_process_timeout+0x10/0x10 [ 812.167117][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 812.172920][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 812.178484][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 812.183251][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 812.188623][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 812.193595][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 812.198808][ C0] ? rcu_is_watching+0x12/0xc0 [ 812.203592][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 812.209576][ C0] rcu_gp_kthread+0x179/0x230 [ 812.214256][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 812.219454][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 812.225258][ C0] ? __kthread_parkme+0x18c/0x230 [ 812.230283][ C0] ? kthread+0x13a/0x450 [ 812.234553][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 812.239774][ C0] kthread+0x370/0x450 [ 812.243845][ C0] ? __pfx_kthread+0x10/0x10 [ 812.248436][ C0] ret_from_fork+0x72b/0xd50 [ 812.253027][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 812.258167][ C0] ? __switch_to+0x800/0x10f0 [ 812.262870][ C0] ? __switch_to_asm+0x39/0x70 [ 812.267653][ C0] ? __pfx_kthread+0x10/0x10 [ 812.272425][ C0] ret_from_fork_asm+0x1a/0x30 [ 812.277233][ C0] [ 812.280421][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 812.286910][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.298225][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.303512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.313689][ C0] Workqueue: bat_events batadv_dat_purge [ 812.319495][ C0] RIP: 0010:__unwind_start+0x3fa/0x7e0 [ 812.324960][ C0] Code: 48 c1 e8 03 0f b6 04 28 84 c0 74 08 3c 03 0f 8e c1 02 00 00 41 8b 06 85 c0 0f 84 e5 fe ff ff 41 80 7d 00 00 0f 85 9e 02 00 00 <41> 80 3c 24 00 49 8b 46 08 0f 85 76 02 00 00 49 8b 56 10 48 39 c3 [ 812.344646][ C0] RSP: 0018:ffffc90000006d18 EFLAGS: 00000246 [ 812.350723][ C0] RAX: 0000000000000002 RBX: ffffc90000006df8 RCX: ffffc90000006c6c [ 812.358686][ C0] RDX: 0000000000000000 RSI: ffffffff8e183c7e RDI: ffff88803351a3c4 [ 812.366653][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000007 [ 812.374623][ C0] R10: 0000000000000200 R11: 000000000000b826 R12: fffff52000000daf [ 812.382593][ C0] R13: fffff52000000dae R14: ffffc90000006d68 R15: ffffc90000006d70 [ 812.390559][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 812.399567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.406155][ C0] CR2: 00007fcc38845fb3 CR3: 000000007ead6000 CR4: 00000000003526f0 [ 812.414124][ C0] Call Trace: [ 812.417398][ C0] [ 812.420236][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.426424][ C0] arch_stack_walk+0x73/0xf0 [ 812.431022][ C0] ? arch_stack_walk+0x73/0xf0 [ 812.435788][ C0] stack_trace_save+0x8e/0xc0 [ 812.440470][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 812.445845][ C0] ? lock_acquire+0x1b9/0x370 [ 812.450522][ C0] kasan_save_stack+0x30/0x50 [ 812.455256][ C0] kasan_save_track+0x14/0x30 [ 812.459937][ C0] __kasan_slab_alloc+0x89/0x90 [ 812.464890][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 812.470362][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 812.475558][ C0] ? skb_ext_add+0xfa/0x810 [ 812.480105][ C0] skb_ext_add+0xfa/0x810 [ 812.484433][ C0] ? lock_acquire+0x1b9/0x370 [ 812.489112][ C0] ? find_held_lock+0x2b/0x80 [ 812.493798][ C0] ? net_generic+0xea/0x2a0 [ 812.498377][ C0] br_nf_forward_ip.part.0+0x28/0x820 [ 812.503778][ C0] br_nf_forward+0xfe5/0x19f0 [ 812.508461][ C0] nf_hook_slow+0xbf/0x220 [ 812.512922][ C0] __br_forward+0x2f7/0x970 [ 812.517451][ C0] ? __pfx___br_forward+0x10/0x10 [ 812.522479][ C0] ? __asan_memcpy+0x3c/0x60 [ 812.527094][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 812.532555][ C0] ? __skb_clone+0x570/0x760 [ 812.537151][ C0] br_flood+0x372/0x7b0 [ 812.541506][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 812.547080][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 812.553175][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 812.558475][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 812.563390][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 812.568516][ C0] ? nf_hook_slow+0x167/0x220 [ 812.573227][ C0] br_nf_hook_thresh+0x30d/0x420 [ 812.578223][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 812.584241][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 812.589715][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 812.595646][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 812.601007][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.606901][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.612795][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 812.618772][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 812.624674][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 812.630044][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 812.635951][ C0] ? lock_acquire+0x1b9/0x370 [ 812.640651][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 812.647152][ C0] ? net_generic+0xea/0x2a0 [ 812.651756][ C0] br_nf_pre_routing+0x90f/0x1560 [ 812.656785][ C0] br_handle_frame+0xce9/0x1540 [ 812.661644][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 812.666959][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 812.672863][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 812.678277][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 812.685070][ C0] ? kmem_cache_free+0x127/0x6b0 [ 812.690024][ C0] ? skb_release_data+0x6ca/0x8e0 [ 812.695218][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 812.702368][ C0] ? kfree_skbmem+0x19f/0x210 [ 812.707073][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 812.712284][ C0] ? ip6_mc_input+0x51a/0xf50 [ 812.716980][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 812.722007][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 812.727992][ C0] ? __lock_acquire+0x49f/0x1a40 [ 812.732953][ C0] ? process_backlog+0x32a/0x1580 [ 812.737983][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 812.743809][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 812.750263][ C0] ? lock_acquire+0x1b9/0x370 [ 812.754979][ C0] ? process_backlog+0x32a/0x1580 [ 812.760041][ C0] ? process_backlog+0x32a/0x1580 [ 812.765091][ C0] __netif_receive_skb+0x1f/0x120 [ 812.770126][ C0] process_backlog+0x37a/0x1580 [ 812.775073][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 812.780541][ C0] net_rx_action+0xa40/0xf20 [ 812.785222][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 812.790441][ C0] ? mark_held_locks+0x40/0x70 [ 812.795303][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 812.800518][ C0] ? tmigr_handle_remote+0x132/0x380 [ 812.805824][ C0] ? run_timer_base+0x121/0x190 [ 812.810675][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 812.815875][ C0] handle_softirqs+0x1ea/0x9b0 [ 812.820639][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 812.825918][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 812.831215][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 812.837021][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 812.842643][ C0] do_softirq+0xac/0xe0 [ 812.846798][ C0] [ 812.849738][ C0] [ 812.852661][ C0] __local_bh_enable_ip+0xf8/0x120 [ 812.857784][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 812.863446][ C0] batadv_dat_purge+0x4b/0xa0 [ 812.868227][ C0] process_one_work+0xa23/0x1940 [ 812.873197][ C0] ? __pfx_process_one_work+0x10/0x10 [ 812.878585][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 812.884047][ C0] rescuer_thread+0x905/0x14a0 [ 812.888822][ C0] ? rescuer_thread+0x240/0x14a0 [ 812.893768][ C0] ? rescuer_thread+0x118/0x14a0 [ 812.898718][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 812.904019][ C0] ? __kthread_parkme+0x18c/0x230 [ 812.909064][ C0] ? kthread+0x13a/0x450 [ 812.913318][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 812.918521][ C0] kthread+0x370/0x450 [ 812.922616][ C0] ? __pfx_kthread+0x10/0x10 [ 812.927223][ C0] ret_from_fork+0x72b/0xd50 [ 812.931902][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 812.937027][ C0] ? __switch_to+0x800/0x10f0 [ 812.941791][ C0] ? __switch_to_asm+0x39/0x70 [ 812.946570][ C0] ? __pfx_kthread+0x10/0x10 [ 812.951163][ C0] ret_from_fork_asm+0x1a/0x30 [ 812.955966][ C0] [ 813.618259][ C0] net_ratelimit: 4412 callbacks suppressed [ 813.618280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 813.637039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.649977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.662432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.675845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 813.688652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.701506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.713800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.727291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 813.739925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.601893][ C0] net_ratelimit: 6265 callbacks suppressed [ 818.601913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.621167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 818.633799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.646767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.659085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.672608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0) [ 818.685343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.698164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.710639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.724075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:e0:4e:7f:e1:f3, vlan:0)